@mohasinac/appkit 4.71.0 → 4.72.0

package/dist/features/seller/actions/seller-actions.js

@@ -17,9 +17,10 @@ import { ApiError, AuthorizationError, NotFoundError, ValidationError, } from ".
 import { assertListingTypeAllowed } from "../../../_internal/shared/listing-types/tiers.js";
 import { userRepository } from "../../auth/repository/user.repository.js";
 import { storeRepository } from "../../stores/repository/store.repository.js";
+import { sellerProfileRepository } from "../repository/seller-profile.repository.js";
 import { productRepository } from "../../products/repository/products.repository.js";
 import { ProductStatusValues } from "../../products/schemas/index.js";
-import { assertPrizeDrawNotLocked, assertPrizeDrawWonItemsImmutable, assertAuctionTermsMutable, } from "../../../_internal/server/features/products/service.js";
+import { assertClearanceNotLocked, assertClearanceWonItemsImmutable, assertCollectorDropTermsMutable, } from "../../../_internal/server/features/products/service.js";
 import { orderRepository } from "../../orders/repository/orders.repository.js";
 import { OrderStatusValues } from "../../orders/schemas/index.js";
 import { payoutRepository } from "../../payments/repository/payout.repository.js";
@@ -28,10 +29,23 @@ import { couponsRepository } from "../../promotions/repository/coupons.repositor
 import { generateStoreSlug } from "../../stores/schemas/firestore.js";
 import { siteSettingsRepository } from "../../admin/repository/site-settings.repository.js";
 import { computePayoutDeduction } from "../../../_internal/shared/fees/calculator.js";
+/*
+ * The one predicate that decides whether WE still owe this seller a payout. A
+ * split-settled order has already been paid out of the aggregator's escrow, and
+ * marking it payout-eligible would pay the seller twice.
+ */
+import { orderNeedsManualPayout } from "../../../_internal/shared/checkout/settlement-split.js";
+/*
+ * The ONE definition of "is this payout destination well-formed". `isConfigured`
+ * is derived from it rather than asserted, and the gateway's verification
+ * verdict is reset whenever the destination changes.
+ */
+import { payoutDestinationIssues, payoutDestinationIsWellFormed, resetVerificationOnChange, } from "../../../_internal/shared/features/payouts/destination.js";
 import { ordersTaxableValue, ordersShippingReimbursement, ordersPointsBorneByStore, } from "../../../_internal/shared/checkout/order-math.js";
 import { getDefaultCurrency } from "../../../core/baseline-resolver.js";
 import { finalizeStagedMediaUrl, finalizeStagedMediaField, finalizeStagedMediaArray, } from "../../media/finalize.js";
 import { StoreStatusValues } from "../../stores/schemas/firestore.js";
+import { assertCompositeShape } from "../../../_internal/shared/features/products/composite.js";
 // --- Helper -------------------------------------------------------------------
 async function finalizeProductMediaReferences(data) {
     const finalized = { ...data };
@@ -59,6 +73,7 @@ function maskAccountNumber(accountNumber) {
 export async function becomeSeller(userId) {
     const profile = await userRepository.findById(userId);
     const isTester = isTesterUser(profile);
+    const sellerProfile = await sellerProfileRepository.findById(userId);
     /*
      * 🛑 `isStrictSellerUser`, not `isSellerUser`.
      *
@@ -75,12 +90,11 @@ export async function becomeSeller(userId) {
     const alreadyOnboarded = profile &&
         (isStrictSellerUser(profile) ||
             isAdminUser(profile) ||
-            (isTester && Boolean(profile.storeStatus)));
+            (isTester && Boolean(sellerProfile?.storeStatus)));
     if (alreadyOnboarded) {
         return {
             alreadySeller: true,
-            storeStatus: profile.storeStatus ??
-                "pending",
+            storeStatus: sellerProfile?.storeStatus ?? "pending",
         };
     }
     const storeStatus = isTester ? "approved" : "pending";
@@ -92,8 +106,9 @@ export async function becomeSeller(userId) {
         // the test-data visibility their whole programme depends on — the first
         // time they opened a store.
         ...(isTester ? {} : { role: "seller" }),
-        storeStatus,
     });
+    // storeStatus is seller-only data — lives in sellerProfiles, not users.
+    await sellerProfileRepository.upsertForOwner(userId, { storeStatus });
     serverLogger.info("becomeSeller: application submitted", { userId, storeStatus });
     return { storeStatus };
 }
@@ -122,7 +137,9 @@ export async function createStore(userId, userName, input) {
         isPublic: isTester,
         status: isTester ? StoreStatusValues.ACTIVE : StoreStatusValues.PENDING,
     });
-    await userRepository.update(userId, {
+    // storeId/storeSlug/storeStatus are seller-only data — sellerProfiles,
+    // not users. `role`/`isTester` etc. stay on the user doc untouched.
+    await sellerProfileRepository.upsertForOwner(userId, {
         storeId: store.id,
         storeSlug: store.storeSlug,
         storeStatus: isTester ? "approved" : "pending",
@@ -185,10 +202,31 @@ export async function updateStore(userId, input) {
     }
     return { store: updated };
 }
+/**
+ * 🛑 THIS IS THE WRITE PATH, and it used to assert `isConfigured: true`
+ * unconditionally on both arms — so a store could be "payout configured" with
+ * an IFSC that is not an IFSC and a VPA that is not a VPA. The consumer action
+ * that calls it had Zod patterns; this function, which is what actually writes,
+ * had none, so any other caller bypassed every check.
+ *
+ * Now:
+ *   · the destination is VALIDATED here, through the one shared definition
+ *     (`payoutDestinationIssues`), so the check cannot be skipped by reaching
+ *     this function directly;
+ *   · `isConfigured` is DERIVED from that same definition — it means
+ *     FORMAT-VALID and nothing more;
+ *   · the gateway's verification verdict is RESET, because the destination it
+ *     referred to has just changed.
+ */
 export async function updatePayoutSettings(userId, input) {
     let payoutDetails;
     if (input.method === "upi") {
-        payoutDetails = { method: "upi", upiId: input.upiId, isConfigured: true };
+        payoutDetails = {
+            method: "upi",
+            upiId: input.upiId.trim(),
+            isConfigured: false,
+            ...resetVerificationOnChange(),
+        };
     }
     else {
         const { accountNumber, ...bankRest } = input.bankAccount;
@@ -196,13 +234,27 @@ export async function updatePayoutSettings(userId, input) {
             method: "bank_transfer",
             bankAccount: {
                 ...bankRest,
+                ifscCode: bankRest.ifscCode.trim().toUpperCase(),
                 accountNumber,
                 accountNumberMasked: maskAccountNumber(accountNumber),
             },
-            isConfigured: true,
+            isConfigured: false,
+            ...resetVerificationOnChange(),
         };
     }
-    await userRepository.update(userId, { payoutDetails });
+    /*
+     * 🛑 Validated BEFORE the write and THROWN on, not recorded as a flag. A
+     * malformed destination is not a degraded state a seller should be left in
+     * believing it saved — that belief is what `isConfigured: true` created. The
+     * issues carry a dotted path each, so the caller can attach them to the right
+     * field rather than show one banner.
+     */
+    const issues = payoutDestinationIssues(payoutDetails);
+    if (issues.length > 0) {
+        throw new ValidationError(issues.map((issue) => issue.message).join(" "));
+    }
+    payoutDetails.isConfigured = payoutDestinationIsWellFormed(payoutDetails);
+    await sellerProfileRepository.upsertForOwner(userId, { payoutDetails });
     serverLogger.info("updatePayoutSettings: payout details updated", {
         userId,
         method: payoutDetails.method,
@@ -213,8 +265,14 @@ export async function updatePayoutSettings(userId, input) {
     return { payoutDetails: { ...payoutDetails, bankAccount: safeBank } };
 }
 // --- Request Payout -----------------------------------------------------------
-async function computeSellerEarnings(sellerId) {
-    const products = await productRepository.findByStore(sellerId);
+// 🛑 `storeId` is the store's SLUG everywhere else in the codebase
+// (products/orders/payouts all query by it) — `sellerId` here is the
+// seller's Firebase Auth UID, a different id space. Callers must resolve
+// `storeRepository.findByOwnerId(sellerId)` first and pass the real slug;
+// passing the raw UID silently matches zero products/payouts (Root Cause
+// #108 — same identifier confusion in the same field name).
+async function computeSellerEarnings(storeId) {
+    const products = await productRepository.findByStore(storeId);
     const productIds = products.slice(0, 50).map((p) => p.id);
     let deliveredOrders = [];
     if (productIds.length > 0) {
@@ -223,7 +281,7 @@ async function computeSellerEarnings(sellerId) {
             .flat()
             .filter((o) => o.status === OrderStatusValues.DELIVERED);
     }
-    const paidOutIds = await payoutRepository.getPaidOutOrderIds(sellerId);
+    const paidOutIds = await payoutRepository.getPaidOutOrderIds(storeId);
     const eligibleOrders = deliveredOrders.filter((o) => !paidOutIds.has(o.id));
     /*
      * The TAXABLE VALUE — see `orderTaxableValue`. This figure is what the
@@ -290,18 +348,26 @@ async function computeSellerEarnings(sellerId) {
     };
 }
 export async function requestPayout(userId, userName, userEmail, input) {
-    const existing = await payoutRepository.findByStore(userId);
+    // 🛑 Fixed 2026-11-05 — this resolved nothing and every call below ran
+    // against the seller's raw UID instead of the store's slug, which is what
+    // products/orders/payouts are actually keyed by. `computeSellerEarnings`
+    // always found 0 products -> 0 eligible orders -> this threw "No eligible
+    // earnings available for payout." for every real seller, unconditionally.
+    const callerStore = await storeRepository.findByOwnerId(userId);
+    if (!callerStore)
+        throw new AuthorizationError("No store found for this account.");
+    const existing = await payoutRepository.findByStore(callerStore.id);
     const hasPending = existing.some((p) => p.status === PAYOUT_FIELDS.STATUS_VALUES.PENDING ||
         p.status === PAYOUT_FIELDS.STATUS_VALUES.PROCESSING);
     if (hasPending)
         throw new ValidationError("A payout is already pending or processing.");
-    const earnings = await computeSellerEarnings(userId);
+    const earnings = await computeSellerEarnings(callerStore.id);
     if (earnings.netAmount <= 0 || earnings.eligibleOrders.length === 0)
         throw new ValidationError("No eligible earnings available for payout.");
     const payout = await payoutRepository.createPayout({
         /* A seller requesting their own earnings — a liability settlement. */
         payeeType: "store",
-        storeId: userId,
+        storeId: callerStore.id,
         sellerName: userName,
         sellerEmail: userEmail,
         amount: earnings.netAmount,
@@ -337,11 +403,14 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
      * encrypts `upiId` again (`PAYOUT_PII_FIELDS`), so the seller-initiated path
      * wrote a permanently unreadable payee address too.
      *
-     * `payoutDetails` is encrypted by `encryptPayoutDetails`, a separate scheme
-     * from the `piiFields` path, which is why `revealUser` unwraps it explicitly.
+     * `payoutDetails` lives on `sellerProfiles` now, encrypted by
+     * `encryptPayoutDetails` there (same scheme as before, moved with the
+     * field) — `revealProfile` unwraps it explicitly, same reasoning as
+     * `UserRepository.revealUser` had.
      */
-    const userPlain = userRepository.revealUser(userDoc);
-    if (!userDoc.payoutDetails?.isConfigured) {
+    const sellerProfileDoc = await sellerProfileRepository.findById(userId);
+    const sellerProfilePlain = sellerProfileDoc ? sellerProfileRepository.revealProfile(sellerProfileDoc) : null;
+    if (!sellerProfilePlain?.payoutDetails?.isConfigured) {
         throw new ValidationError("Payout details are not set up. Please configure your payout method before requesting a payout.");
     }
     // order.storeId is the store slug, not the seller's Firebase UID — resolve
@@ -395,7 +464,16 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
     const payoutDoc = await payoutRepository.createPayout({
         /* A seller requesting their own earnings — a liability settlement. */
         payeeType: "store",
-        storeId: userId,
+        // 🛑 Fixed 2026-11-05 — was `storeId: userId` (the UID), even though
+        // `callerStore` is already resolved above and used correctly for the
+        // eligibility check two screens up. Payouts are queried by the store's
+        // SLUG everywhere else (admin dashboard, the automated weekly/auto
+        // sweeps), so a payout written with the UID was invisible to all of
+        // them — not recognized as "already queued," a double-payout risk on
+        // the same orders. Admin callers keep the previous (unaudited) UID
+        // fallback, since `callerStore` is deliberately null for them and this
+        // fix's scope is the seller self-service path, not the admin one.
+        storeId: callerStore?.id ?? userId,
         sellerName: userDisplayName,
         sellerEmail: userEmail,
         orderIds: eligible.map((o) => o.id),
@@ -408,11 +486,11 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
         gstAmount: bulkDeduction.gstOnFee,
         gstRate: bulkSiteSettings.commissions.gstPercent / 100,
         currency: getDefaultCurrency(),
-        paymentMethod: userPlain.payoutDetails?.method === "upi"
+        paymentMethod: sellerProfilePlain.payoutDetails?.method === "upi"
             ? "upi"
             : "bank_transfer",
-        upiId: userPlain.payoutDetails?.method === "upi"
-            ? userPlain.payoutDetails.upiId
+        upiId: sellerProfilePlain.payoutDetails?.method === "upi"
+            ? sellerProfilePlain.payoutDetails.upiId
             : undefined,
         /*
          * 🛑 Only the MASKED subset, matching both payout crons.
@@ -425,13 +503,13 @@ export async function bulkSellerOrder(userId, userRole, userDisplayName, userEma
          * revealing it instead would store a real account number in the clear.
          * A payout does not need the full number; it needs to identify the account.
          */
-        bankAccount: userPlain.payoutDetails?.method === "bank_transfer" &&
-            userPlain.payoutDetails.bankAccount
+        bankAccount: sellerProfilePlain.payoutDetails?.method === "bank_transfer" &&
+            sellerProfilePlain.payoutDetails.bankAccount
             ? {
-                accountHolderName: userPlain.payoutDetails.bankAccount.accountHolderName,
-                accountNumberMasked: userPlain.payoutDetails.bankAccount.accountNumberMasked,
-                ifscCode: userPlain.payoutDetails.bankAccount.ifscCode,
-                bankName: userPlain.payoutDetails.bankAccount.bankName,
+                accountHolderName: sellerProfilePlain.payoutDetails.bankAccount.accountHolderName,
+                accountNumberMasked: sellerProfilePlain.payoutDetails.bankAccount.accountNumberMasked,
+                ifscCode: sellerProfilePlain.payoutDetails.bankAccount.ifscCode,
+                bankName: sellerProfilePlain.payoutDetails.bankAccount.bankName,
             }
             : undefined,
         notes: `Payout request for ${eligible.length} custom-shipped delivered order(s)`,
@@ -527,16 +605,16 @@ export async function getSellerStore(userId) {
     return storeRepository.findByOwnerId(userId);
 }
 export async function getSellerShipping(userId) {
-    const userData = await userRepository.findById(userId);
-    if (!userData)
+    const profile = await sellerProfileRepository.findById(userId);
+    if (!profile?.shippingConfig)
         return null;
-    return userData.shippingConfig ?? null;
+    return sellerProfileRepository.revealProfile(profile).shippingConfig ?? null;
 }
 export async function getSellerPayoutSettings(userId) {
-    const userData = await userRepository.findById(userId);
-    if (!userData?.payoutDetails)
+    const profile = await sellerProfileRepository.findById(userId);
+    if (!profile?.payoutDetails)
         return { method: "upi", isConfigured: false };
-    const details = userData.payoutDetails;
+    const details = sellerProfileRepository.revealProfile(profile).payoutDetails;
     if (!details.bankAccount)
         return details;
     const { accountNumber: _removed, ...safeBank } = details.bankAccount;
@@ -612,7 +690,13 @@ export async function getSellerAnalytics(userId) {
     };
 }
 export async function listSellerPayouts(userId, params) {
-    const payouts = await payoutRepository.findByStore(userId);
+    // 🛑 Fixed 2026-11-05 — was `findByStore(userId)`, the seller's raw UID.
+    // It self-consistently showed a payout `bulkSellerOrder` wrote with the
+    // same wrong key (now also fixed), which is exactly what masked the bug:
+    // the one seller who created it could see it, while every automated sweep
+    // and the admin dashboard — both keyed on the real slug — could not.
+    const callerStore = await storeRepository.findByOwnerId(userId);
+    const payouts = callerStore ? await payoutRepository.findByStore(callerStore.id) : [];
     const page = params?.page ?? 1;
     const pageSize = params?.pageSize ?? 20;
     const start = (page - 1) * pageSize;
@@ -673,9 +757,9 @@ export async function sellerUpdateProduct(userId, userRole, productId, input) {
      *
      * 🛑 But it fires only on a CHANGE of type, and that is load-bearing. Every
      * per-type edit page spreads its own literal into the payload
-     * (`store/art/[id]/edit` sends `listingType: "art"`), so gating on the
-     * submitted value alone would lock a seller out of editing listings they
-     * already own the moment the capability was turned off — or an admin revoked
+     * (`store/art/[id]/edit` sends `listingType: "art-and-stickers"`), so gating
+     * on the submitted value alone would lock a seller out of editing listings
+     * they already own the moment the capability was turned off — or an admin revoked
      * it. The rule is "you may not create or convert INTO an advanced type",
      * never "you may not touch one".
      *
@@ -692,10 +776,31 @@ export async function sellerUpdateProduct(userId, userRole, productId, input) {
     if (typeof input.status === "string" &&
         input.status !== "published" &&
         existing.status === "published") {
-        assertPrizeDrawNotLocked(existing, "unpublished or archived");
+        assertClearanceNotLocked(existing, "unpublished or archived");
     }
-    assertPrizeDrawWonItemsImmutable(existing, input.prizeDrawItems);
-    assertAuctionTermsMutable(existing, input);
+    assertClearanceWonItemsImmutable(existing, input.prizeDrawItems);
+    assertCollectorDropTermsMutable(existing, input);
+    /*
+     * 🛑 Validated against the MERGED shape, not the submitted patch.
+     *
+     * An update may send `components` alone and rely on a policy already stored,
+     * or send the policy alone against stored components. Checking the patch by
+     * itself would pass a listing into a state neither half describes — which is
+     * how `components` without a `componentStockPolicy` would get persisted, and
+     * that combination is a money-path hole (see the field's own docstring).
+     *
+     * `in` rather than `??` so an explicit `null` — a seller CLEARING the
+     * components — is honoured instead of falling back to the stored array and
+     * making the field impossible to empty.
+     */
+    assertCompositeShape({
+        components: ("components" in input
+            ? input.components
+            : existing.components) ?? null,
+        componentStockPolicy: ("componentStockPolicy" in input
+            ? input.componentStockPolicy
+            : existing.componentStockPolicy) ?? null,
+    }, productId);
     const finalizedData = await finalizeProductMediaReferences(input);
     const updated = await productRepository.updateProduct(productId, finalizedData);
     serverLogger.info("sellerUpdateProduct", { userId, productId });
@@ -711,7 +816,7 @@ export async function sellerDeleteProduct(userId, userRole, productId) {
         if (!store || existing.storeId !== store.id)
             throw new AuthorizationError("You do not own this product");
     }
-    assertPrizeDrawNotLocked(existing, "deleted");
+    assertClearanceNotLocked(existing, "deleted");
     await productRepository.delete(productId);
     serverLogger.info("sellerDeleteProduct", { userId, productId });
 }
@@ -756,7 +861,21 @@ export async function customShipOrder(userId, userRole, orderId, input) {
         trackingNumber: input.trackingNumber,
         trackingUrl: input.trackingUrl,
         shippingDate: new Date(),
-        payoutStatus: "eligible",
+        /*
+         * 🛑 THE DOUBLE-PAYMENT GUARD. An order whose seller share was settled
+         * straight to them out of the aggregator's escrow at capture
+         * (`order.splitSettlement`) must NOT become payout-eligible: the weekly and
+         * automatic sweeps would then create a `payouts` row for the FULL share and
+         * the seller would be paid twice — once from escrow and once from the
+         * platform's own balance.
+         *
+         * 🛑 `undefined`, not `"requested"`. The field stays ABSENT rather than
+         * being given a status the manual pipeline owns: `getEligibleAutomatic`
+         * filters on `payoutStatus == "eligible"`, so absence keeps it out of every
+         * sweep, while "requested" would claim a payout request nobody made and
+         * `payoutId` would be missing from it.
+         */
+        payoutStatus: orderNeedsManualPayout(order) ? "eligible" : undefined,
     });
     /*
      * 🛑 AFTER the order is marked shipped, and never allowed to fail the

package/dist/features/seller/api/coupons/route.js

@@ -17,7 +17,12 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ request, user }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/seller/api/products/route.js

@@ -18,7 +18,12 @@ import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { storeRepository } from "../../../stores/repository/store.repository.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ request, user }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/seller/api/store/route.js

@@ -16,7 +16,12 @@ import { NextResponse } from "next/server.js";
 import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 export const GET = createRouteHandler({
-    roles: ["seller", "admin", "moderator"],
+    /*
+     * 🛑 Was ["seller", "admin", "moderator"]. `moderator` folds to `employee`,
+     * so it admitted every employee to a SELLER surface whose scope is ownership.
+     * Staff reach the same data through the permission-gated admin routes.
+     */
+    roles: ["seller", "admin"],
     handler: async ({ user }) => {
         const { db } = getProviders();
         if (!db)

package/dist/features/seller/components/FulfillmentView.d.ts

@@ -1,6 +1,9 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface FulfillmentViewProps {
     currentUserId?: string;
     currentUserName?: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function FulfillmentView({ currentUserId, }: FulfillmentViewProps): React.JSX.Element;
+export declare function FulfillmentView({ currentUserId, pageRegionCards, }: FulfillmentViewProps): React.JSX.Element;

package/dist/features/seller/components/FulfillmentView.js

@@ -12,6 +12,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { useToast } from "../../../ui/components/toast-context.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 function statusBadgeVariant(status) {
     if (status === "confirmed")
         return "warning";
@@ -21,7 +22,7 @@ function statusBadgeVariant(status) {
         return "success";
     return "default";
 }
-export function FulfillmentView({ currentUserId, }) {
+export function FulfillmentView({ currentUserId, pageRegionCards = [], }) {
     const [mode, setMode] = useState("scan");
     const [orders, setOrders] = useState([]);
     const [scanValue, setScanValue] = useState("");
@@ -114,7 +115,7 @@ export function FulfillmentView({ currentUserId, }) {
     const visibleOrders = filterMine
         ? orders.filter((o) => o.assignedWorkerId === currentUserId)
         : orders;
-    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", gap: "sm", wrap: true, children: [_jsx(Heading, { level: 3, children: "Pick & Pack" }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { onClick: () => setMode("scan"), variant: mode === "scan" ? "primary" : "secondary", size: "sm", children: "Scan Mode" }), _jsx(Button, { onClick: () => setMode("list"), variant: mode === "list" ? "primary" : "secondary", size: "sm", children: "List Mode" })] })] }), mode === "scan" && (_jsxs(Stack, { gap: "md", children: [_jsx(BarcodeField, { autoFocus: true, value: scanValue, onChange: setScanValue, onScan: handleScan, helperText: "Point scanner at an item sticker or type the barcode and press Enter." }), scanError && (_jsx(Text, { color: "error", size: "sm", children: scanError })), scanResult && (_jsxs(Stack, { surface: "card", padding: "md", rounded: "md", gap: "sm", children: [_jsx(Text, { size: "xs", color: "muted", children: "Scanned item" }), _jsx(Heading, { level: 5, children: scanResult.product.title ?? scanResult.product.id }), _jsxs(Row, { gap: "md", wrap: true, children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Order" }), _jsxs(Text, { size: "sm", weight: "medium", children: ["#", scanResult.order.id] })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Buyer" }), _jsx(Text, { size: "sm", weight: "medium", children: scanResult.order.userName })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Status" }), _jsx(Badge, { variant: statusBadgeVariant(scanResult.order.status), children: scanResult.order.status })] })] }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { variant: "primary", onClick: confirmPick, isLoading: isConfirming, children: "Confirm Pick" }), _jsx(Button, { variant: "secondary", onClick: () => {
+    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsxs(Row, { align: "center", justify: "between", gap: "sm", wrap: true, children: [_jsx(Heading, { level: 3, children: "Pick & Pack" }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { onClick: () => setMode("scan"), variant: mode === "scan" ? "primary" : "secondary", size: "sm", children: "Scan Mode" }), _jsx(Button, { onClick: () => setMode("list"), variant: mode === "list" ? "primary" : "secondary", size: "sm", children: "List Mode" })] })] }), _jsx(AdminComposableRegion, { pageId: "store-fulfillment", initialCards: pageRegionCards }), mode === "scan" && (_jsxs(Stack, { gap: "md", children: [_jsx(BarcodeField, { autoFocus: true, value: scanValue, onChange: setScanValue, onScan: handleScan, helperText: "Point scanner at an item sticker or type the barcode and press Enter." }), scanError && (_jsx(Text, { color: "error", size: "sm", children: scanError })), scanResult && (_jsxs(Stack, { surface: "card", padding: "md", rounded: "md", gap: "sm", children: [_jsx(Text, { size: "xs", color: "muted", children: "Scanned item" }), _jsx(Heading, { level: 5, children: scanResult.product.title ?? scanResult.product.id }), _jsxs(Row, { gap: "md", wrap: true, children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Order" }), _jsxs(Text, { size: "sm", weight: "medium", children: ["#", scanResult.order.id] })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Buyer" }), _jsx(Text, { size: "sm", weight: "medium", children: scanResult.order.userName })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", color: "muted", children: "Status" }), _jsx(Badge, { variant: statusBadgeVariant(scanResult.order.status), children: scanResult.order.status })] })] }), _jsxs(Row, { gap: "xs", children: [_jsx(Button, { variant: "primary", onClick: confirmPick, isLoading: isConfirming, children: "Confirm Pick" }), _jsx(Button, { variant: "secondary", onClick: () => {
                                             setScanResult(null);
                                             setScanValue("");
                                             setScanError(null);

package/dist/features/seller/components/PrintCenterView.d.ts

@@ -1,5 +1,6 @@
 import React from "react";
 import { type PhysicalLocationParts } from "../../../utils/physical-location";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 interface PrintCenterStore {
     id: string;
     storeName: string;
@@ -44,6 +45,8 @@ interface PrintCenterViewProps {
     brandName?: string;
     initialProducts?: PrintCenterProduct[];
     initialOrders?: PrintCenterOrder[];
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function PrintCenterView({ store, brandName, initialProducts, initialOrders, }: PrintCenterViewProps): React.JSX.Element;
+export declare function PrintCenterView({ store, isAdmin, brandName, initialProducts, initialOrders, pageRegionCards, }: PrintCenterViewProps): React.JSX.Element;
 export {};

package/dist/features/seller/components/PrintCenterView.js

@@ -11,6 +11,7 @@ import { LabelProfilePicker } from "../../print/components/LabelProfilePicker.js
 import { LABEL_PROFILES, documentPageCss, labelPageCss, } from "../../../_internal/shared/features/print/label-profiles.js";
 import { formatMoney } from "../../../utils/number.formatter.js";
 import { getBrandName } from "../../../core/brand-resolver.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 /*
  * 🛑 THE LOCAL `ProductLabel` IS GONE. It was `w-[200px]`, rendered a barcode
  * at `width: 2` (a 0.53 mm module — twice the density needed) with a fixed
@@ -26,7 +27,7 @@ import { getBrandName } from "../../../core/brand-resolver.js";
 function PackingSlip({ order, brandName }) {
     return (_jsxs(Stack, { surface: "card", padding: "md", rounded: "sm", className: "break-inside-avoid mb-4 max-w-[480px]", children: [_jsxs(Row, { justify: "between", className: "mb-2", children: [_jsx(Heading, { level: 5, children: brandName }), _jsxs(Text, { size: "xs", color: "muted", children: ["#", order.id] })] }), _jsx(Text, { size: "xs", color: "muted", children: new Date(order.createdAt).toLocaleDateString("en-IN") }), order.buyerDisplayName && _jsx(Text, { size: "sm", weight: "medium", children: order.buyerDisplayName }), order.buyerCity && _jsx(Text, { size: "xs", color: "muted", children: order.buyerCity }), formatPhysicalLocation(order.physicalLocation) && (_jsxs(Text, { size: "xs", color: "muted", children: ["Staging: ", formatPhysicalLocation(order.physicalLocation)] })), _jsx(Stack, { border: "top", padding: "t-xs", className: "mt-3", children: order.items.map((item, i) => (_jsxs(Row, { justify: "between", padding: "y-2xs", className: "border-b last:border-b-0", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "xs", weight: "medium", children: item.productName }), item.barcodeId && _jsx(Text, { size: "xs", color: "muted", children: item.barcodeId })] }), _jsxs(Stack, { className: "text-right", children: [_jsxs(Text, { size: "xs", children: ["\u00D7", item.quantity] }), _jsx(Text, { size: "xs", color: "muted", children: formatMoney(item.price) })] })] }, i))) })] }));
 }
-export function PrintCenterView({ store, brandName = `${getBrandName()}`, initialProducts = [], initialOrders = [], }) {
+export function PrintCenterView({ store, isAdmin, brandName = `${getBrandName()}`, initialProducts = [], initialOrders = [], pageRegionCards = [], }) {
     const [tab, setTab] = useState("labels");
     const [selectedProducts, setSelectedProducts] = useState(new Set());
     const [selectedOrders, setSelectedOrders] = useState(new Set());
@@ -57,7 +58,7 @@ export function PrintCenterView({ store, brandName = `${getBrandName()}`, initia
         return next;
     });
     const printSelected = () => window.print();
-    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsx(LabelPageStyle, { css: tab === "labels" ? labelPageCss(profile) : documentPageCss() }), _jsxs(Stack, { className: "no-print", children: [_jsxs(Heading, { level: 3, children: ["Print Center", store ? ` — ${store.storeName}` : ""] }), _jsxs(Row, { gap: "xs", className: "mt-3", children: [_jsx(Button, { onClick: () => setTab("labels"), variant: tab === "labels" ? "primary" : "secondary", size: "sm", children: "Product Labels" }), _jsx(Button, { onClick: () => setTab("slips"), variant: tab === "slips" ? "primary" : "secondary", size: "sm", children: "Packing Slips" })] })] }), tab === "labels" && (_jsxs(_Fragment, { children: [_jsxs(Stack, { className: "no-print", gap: "sm", children: [_jsx(LabelProfilePicker, { value: profileId, onChange: setProfileId, longestCodeLength: longestCodeLength }), _jsx(PrintScaleWarning, {}), _jsxs(Stack, { gap: "sm", children: [initialProducts.length === 0 ? (_jsx(Text, { color: "muted", children: "No products available." })) : (initialProducts.map((p) => (_jsx(FieldCheckbox, { name: `product-${p.id}`, label: p.name, checked: selectedProducts.has(p.id), onChange: () => toggleProduct(p.id) }, p.id)))), _jsxs(Button, { onClick: printSelected, disabled: selectedProducts.size === 0, children: ["Print Selected (", selectedProducts.size, ")"] })] })] }), _jsx(LabelSheet, { profile: profile, children: chosenProducts.map((p) => (_jsx(ProductLabel, { profile: profile, product: {
+    return (_jsxs(Stack, { gap: "md", padding: "md", children: [_jsx(LabelPageStyle, { css: tab === "labels" ? labelPageCss(profile) : documentPageCss() }), _jsxs(Stack, { className: "no-print", children: [_jsxs(Heading, { level: 3, children: ["Print Center", store ? ` — ${store.storeName}` : ""] }), _jsxs(Row, { gap: "xs", className: "mt-3", children: [_jsx(Button, { onClick: () => setTab("labels"), variant: tab === "labels" ? "primary" : "secondary", size: "sm", children: "Product Labels" }), _jsx(Button, { onClick: () => setTab("slips"), variant: tab === "slips" ? "primary" : "secondary", size: "sm", children: "Packing Slips" })] })] }), _jsx(AdminComposableRegion, { pageId: isAdmin ? "admin-print-center" : "store-fulfillment-print-center", initialCards: pageRegionCards }), tab === "labels" && (_jsxs(_Fragment, { children: [_jsxs(Stack, { className: "no-print", gap: "sm", children: [_jsx(LabelProfilePicker, { value: profileId, onChange: setProfileId, longestCodeLength: longestCodeLength }), _jsx(PrintScaleWarning, {}), _jsxs(Stack, { gap: "sm", children: [initialProducts.length === 0 ? (_jsx(Text, { color: "muted", children: "No products available." })) : (initialProducts.map((p) => (_jsx(FieldCheckbox, { name: `product-${p.id}`, label: p.name, checked: selectedProducts.has(p.id), onChange: () => toggleProduct(p.id) }, p.id)))), _jsxs(Button, { onClick: printSelected, disabled: selectedProducts.size === 0, children: ["Print Selected (", selectedProducts.size, ")"] })] })] }), _jsx(LabelSheet, { profile: profile, children: chosenProducts.map((p) => (_jsx(ProductLabel, { profile: profile, product: {
                                 barcodeId: p.barcodeId,
                                 name: p.name,
                                 price: p.price,

package/dist/features/seller/components/SellerAddressesView.d.ts

@@ -1,5 +1,8 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface SellerAddressesViewProps {
     apiBase?: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function SellerAddressesView({ apiBase, }: SellerAddressesViewProps): React.JSX.Element;
+export declare function SellerAddressesView({ apiBase, pageRegionCards, }: SellerAddressesViewProps): React.JSX.Element;

package/dist/features/seller/components/SellerAddressesView.js

@@ -21,6 +21,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../constants/index.js";
 import { toUserMessage } from "../../../errors/error-display-map.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const __O = {
     xAuto: "overflow-x-auto",
 };
@@ -64,7 +65,7 @@ function AddressCard({ address, onEdit, onDelete, onSetDefault, }) {
 // ---------------------------------------------------------------------------
 // Main Component
 // ---------------------------------------------------------------------------
-export function SellerAddressesView({ apiBase = SELLER_ENDPOINTS.STORE_ADDRESSES, }) {
+export function SellerAddressesView({ apiBase = SELLER_ENDPOINTS.STORE_ADDRESSES, pageRegionCards = [], }) {
     const [addresses, setAddresses] = useState([]);
     const [listView, setListView] = useState("table");
     const [isLoading, setIsLoading] = useState(true);
@@ -180,7 +181,7 @@ export function SellerAddressesView({ apiBase = SELLER_ENDPOINTS.STORE_ADDRESSES
     };
     const set = (key, value) => setDraft((p) => ({ ...p, [key]: value }));
     const setField = (key) => (value) => set(key, value);
-    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(StickyToolbar, { offset: "header", tone: "default", border: true, padding: "md", children: _jsxs(Row, { justify: "between", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "base", weight: "semibold", color: "primary", children: "Pickup Addresses" }), _jsx(Text, { size: "xs", color: "muted", className: "mt-0.5", children: "Manage your store's pickup and return locations" })] }), _jsxs(Row, { gap: "sm", align: "center", children: [_jsx(TextLink, { href: String(ROUTES.STORE.ADDRESSES_NEW), children: "Open full page \u2192" }), _jsxs(Button, { gap: "sm", size: "sm", onClick: openAdd, children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx(Span, { children: "Add Address" })] })] })] }) }), _jsxs(Div, { paddingX: "x-md-lg", className: "max-w-2xl", padding: "y-lg", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), isLoading ? (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })) : addresses.length === 0 ? (_jsxs(Stack, { border: "default", className: "border-2 border-dashed", padding: "y-4xl", align: "center", gap: "3", rounded: "xl", children: [_jsx(MapPin, { className: "h-8 w-8 text-[var(--appkit-color-text-muted)]" }), _jsx(Text, { size: "sm", color: "muted", children: "No pickup addresses yet" }), _jsx(Button, { size: "sm", variant: "outline", onClick: openAdd, children: "Add your first address" })] })) : (_jsxs(_Fragment, { children: [_jsxs(Row, { justify: "end", className: "mb-2", children: [_jsx(Button, { size: "sm", variant: listView === "table" ? "primary" : "ghost", onClick: () => setListView("table"), children: "Table" }), _jsx(Button, { size: "sm", variant: listView === "cards" ? "primary" : "ghost", onClick: () => setListView("cards"), children: "Cards" })] }), listView === "cards" ? (_jsx(Grid, { gap: "sm", children: addresses.map((addr) => (_jsx(Div, { className: deletingId === addr.id ? "opacity-50 pointer-events-none" : "", children: _jsx(AddressCard, { address: addr, onEdit: () => openEdit(addr), onDelete: () => handleDelete(addr), onSetDefault: () => void handleSetDefault(addr) }) }, addr.id))) })) : (_jsx(Div, { className: `${__O.xAuto}`, rounded: "lg", border: "default", children: _jsxs(Table, { size: "sm", children: [_jsx(Thead, { surface: "muted", children: _jsxs(Tr, { children: [_jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Label" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Name" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "City" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Phone" }), _jsx(Th, { className: "text-right", padding: "sm", weight: "semibold", children: "Actions" })] }) }), _jsx(Tbody, { children: addresses.map((addr) => {
+    return (_jsxs(Div, { className: "min-h-screen", children: [_jsx(StickyToolbar, { offset: "header", tone: "default", border: true, padding: "md", children: _jsxs(Row, { justify: "between", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "base", weight: "semibold", color: "primary", children: "Pickup Addresses" }), _jsx(Text, { size: "xs", color: "muted", className: "mt-0.5", children: "Manage your store's pickup and return locations" })] }), _jsxs(Row, { gap: "sm", align: "center", children: [_jsx(TextLink, { href: String(ROUTES.STORE.ADDRESSES_NEW), children: "Open full page \u2192" }), _jsxs(Button, { gap: "sm", size: "sm", onClick: openAdd, children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx(Span, { children: "Add Address" })] })] })] }) }), _jsx(Div, { paddingX: "x-md-lg", className: "max-w-2xl", padding: "t-md", children: _jsx(AdminComposableRegion, { pageId: "store-addresses", initialCards: pageRegionCards }) }), _jsxs(Div, { paddingX: "x-md-lg", className: "max-w-2xl", padding: "y-lg", children: [errorMessage && (_jsx(Div, { textSize: "sm", className: "mb-4 border border-error/20", color: "error", surface: "danger-surface", padding: "inline", rounded: "xl", children: errorMessage })), isLoading ? (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })) : addresses.length === 0 ? (_jsxs(Stack, { border: "default", className: "border-2 border-dashed", padding: "y-4xl", align: "center", gap: "3", rounded: "xl", children: [_jsx(MapPin, { className: "h-8 w-8 text-[var(--appkit-color-text-muted)]" }), _jsx(Text, { size: "sm", color: "muted", children: "No pickup addresses yet" }), _jsx(Button, { size: "sm", variant: "outline", onClick: openAdd, children: "Add your first address" })] })) : (_jsxs(_Fragment, { children: [_jsxs(Row, { justify: "end", className: "mb-2", children: [_jsx(Button, { size: "sm", variant: listView === "table" ? "primary" : "ghost", onClick: () => setListView("table"), children: "Table" }), _jsx(Button, { size: "sm", variant: listView === "cards" ? "primary" : "ghost", onClick: () => setListView("cards"), children: "Cards" })] }), listView === "cards" ? (_jsx(Grid, { gap: "sm", children: addresses.map((addr) => (_jsx(Div, { className: deletingId === addr.id ? "opacity-50 pointer-events-none" : "", children: _jsx(AddressCard, { address: addr, onEdit: () => openEdit(addr), onDelete: () => handleDelete(addr), onSetDefault: () => void handleSetDefault(addr) }) }, addr.id))) })) : (_jsx(Div, { className: `${__O.xAuto}`, rounded: "lg", border: "default", children: _jsxs(Table, { size: "sm", children: [_jsx(Thead, { surface: "muted", children: _jsxs(Tr, { children: [_jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Label" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Name" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "City" }), _jsx(Th, { className: "text-left", padding: "sm", weight: "semibold", children: "Phone" }), _jsx(Th, { className: "text-right", padding: "sm", weight: "semibold", children: "Actions" })] }) }), _jsx(Tbody, { children: addresses.map((addr) => {
                                                 const isBanned = addr.banStatus === "banned";
                                                 return (_jsxs(Tr, { className: `border-t border-[var(--appkit-color-border)] ${deletingId === addr.id ? "opacity-50" : ""}`, children: [_jsx(Td, { padding: "sm", children: _jsxs(Row, { gap: "xs", align: "center", children: [_jsx(Span, { children: addr.label }), isBanned && _jsx(Badge, { variant: "danger", size: "sm", children: "Banned" })] }) }), _jsx(Td, { padding: "sm", children: addr.fullName }), _jsxs(Td, { padding: "sm", children: [addr.city, ", ", addr.state] }), _jsx(Td, { className: "tabular-nums", padding: "sm", children: addr.phone }), _jsx(Td, { className: "text-right", padding: "sm", children: isBanned ? (_jsx(Span, { size: "xs", color: "muted", title: "Contact support to resolve address ban", children: "Contact support" })) : (_jsxs(Row, { justify: "end", gap: "xs", children: [_jsx(Button, { size: "sm", variant: "ghost", onClick: () => openEdit(addr), children: ROW_ACTION_META[ROW_ACTION_ID.EDIT].label }), _jsx(Button, { size: "sm", variant: "ghost", onClick: () => handleDelete(addr), children: ROW_ACTION_META[ROW_ACTION_ID.DELETE].label })] })) })] }, addr.id));
                                             }) })] }) }))] }))] }), _jsx(SideDrawer, { isOpen: drawerOpen, onClose: closeDrawer, title: editingId ? "Edit Address" : "Add Address", footer: 

package/dist/features/seller/components/SellerAnalyticsAlertsView.d.ts

@@ -1,7 +1,10 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface SellerAnalyticsAlertsViewProps {
     labels?: {
         title?: string;
     };
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function SellerAnalyticsAlertsView({ labels, }: SellerAnalyticsAlertsViewProps): React.JSX.Element;
+export declare function SellerAnalyticsAlertsView({ labels, pageRegionCards, }: SellerAnalyticsAlertsViewProps): React.JSX.Element;