@mohasinac/appkit 4.71.0 → 4.72.0

package/dist/features/admin/actions/site-settings-actions.d.ts

@@ -4,6 +4,6 @@
  * Pure async functions for site settings CRUD. No auth, no rate-limit.
  * Called by letitrip thin wrappers which handle auth + rate limiting.
  */
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../schemas/types";
 export declare function getSiteSettings(): Promise<unknown>;
 export declare function updateSiteSettings(adminId: string, data: Record<string, JsonValue>): Promise<void>;

package/dist/features/admin/api/bids/route.js

@@ -14,7 +14,13 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["admin", "moderator"],
+    /*
+     * 🛑 Was ["admin", "moderator"]. `moderator` folds to `employee` inside
+     * `holdsAnyRole`, so naming it admitted EVERY employee account — and this
+     * route declares no `permission:`, so the tuple was the only gate. Admin-only
+     * until a permission is chosen for it; narrowing is the safe direction.
+     */
+    roles: ["admin"],
     handler: async ({ request }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/admin/api/coupons/route.js

@@ -14,7 +14,13 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["admin", "moderator"],
+    /*
+     * 🛑 Was ["admin", "moderator"]. `moderator` folds to `employee` inside
+     * `holdsAnyRole`, so naming it admitted EVERY employee account — and this
+     * route declares no `permission:`, so the tuple was the only gate. Admin-only
+     * until a permission is chosen for it; narrowing is the safe direction.
+     */
+    roles: ["admin"],
     handler: async ({ request }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/admin/api/products/route.js

@@ -14,7 +14,13 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["admin", "moderator"],
+    /*
+     * 🛑 Was ["admin", "moderator"]. `moderator` folds to `employee` inside
+     * `holdsAnyRole`, so naming it admitted EVERY employee account — and this
+     * route declares no `permission:`, so the tuple was the only gate. Admin-only
+     * until a permission is chosen for it; narrowing is the safe direction.
+     */
+    roles: ["admin"],
     handler: async ({ request }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/admin/api/reviews/route.js

@@ -14,7 +14,13 @@ import { getProviders } from "../../../../contracts/index.js";
 import { createRouteHandler } from "../../../../next/api/routeHandler.js";
 import { numParam } from "../../../../utils/search-params.js";
 export const GET = createRouteHandler({
-    roles: ["admin", "moderator"],
+    /*
+     * 🛑 Was ["admin", "moderator"]. `moderator` folds to `employee` inside
+     * `holdsAnyRole`, so naming it admitted EVERY employee account — and this
+     * route declares no `permission:`, so the tuple was the only gate. Admin-only
+     * until a permission is chosen for it; narrowing is the safe direction.
+     */
+    roles: ["admin"],
     handler: async ({ request }) => {
         const url = new URL(request.url);
         const page = Math.max(1, numParam(url, "page", 1));

package/dist/features/admin/components/AdminActionIndexView.d.ts

@@ -24,9 +24,12 @@
  */
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui/components/StackedViewShell";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminActionIndexViewProps extends Omit<StackedViewShellProps, "sections"> {
     labels?: {
         title?: string;
     };
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function AdminActionIndexView({ labels }: AdminActionIndexViewProps): React.JSX.Element;
+export declare function AdminActionIndexView({ labels, pageRegionCards }: AdminActionIndexViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminActionIndexView.js

@@ -39,8 +39,9 @@ import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { DataListingView } from "./DataListingView.js";
 import { QuickEditMenu } from "./QuickEditMenu.js";
 import { actionIndexOverrideSchema, splitKeywords, joinKeywords, ACTION_INDEX_OVERRIDE_FIELDS, } from "../schemas/action-index-form.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const ENDPOINT = ADMIN_ENDPOINTS.ACTION_INDEX;
-export function AdminActionIndexView({ labels = {} }) {
+export function AdminActionIndexView({ labels = {}, pageRegionCards = [] }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const query = useQuery({
@@ -126,7 +127,7 @@ export function AdminActionIndexView({ labels = {} }) {
         weight: entry.weight ?? 0,
     })), [payload?.entries, overrides]);
     const sync = payload?.sync;
-    return (_jsxs(Stack, { gap: "md", children: [sync && sync.orphanedOverrides.length > 0 && (_jsxs(Alert, { variant: "warning", title: "Overrides with no entry", children: [sync.orphanedOverrides.length, " saved override", sync.orphanedOverrides.length === 1 ? "" : "s", " point at entries the code no longer has (", sync.orphanedOverrides.slice(0, 4).join(", "), sync.orphanedOverrides.length > 4 ? "…" : "", "). They are ignored \u2014 clear them when convenient."] })), _jsx(DataListingView, { config: {
+    return (_jsxs(Stack, { gap: "md", children: [sync && sync.orphanedOverrides.length > 0 && (_jsxs(Alert, { variant: "warning", title: "Overrides with no entry", children: [sync.orphanedOverrides.length, " saved override", sync.orphanedOverrides.length === 1 ? "" : "s", " point at entries the code no longer has (", sync.orphanedOverrides.slice(0, 4).join(", "), sync.orphanedOverrides.length > 4 ? "…" : "", "). They are ignored \u2014 clear them when convenient."] })), _jsx(AdminComposableRegion, { pageId: "admin-action-index", initialCards: pageRegionCards }), _jsx(DataListingView, { config: {
                     portal: "admin",
                     title: labels.title ?? "Action index",
                     subtitle: "Every page, setting and toggle a user can reach — and what the search finds them by.",

package/dist/features/admin/components/AdminAdEditorView.d.ts

@@ -1,11 +1,16 @@
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui/components/StackedViewShell";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminAdEditorViewProps extends Omit<StackedViewShellProps, "sections"> {
     adId?: string;
     endpointBase?: string;
     labels?: {
         title?: string;
     };
+    /** Page-region id for this screen (Phase 12) — required because this View is mounted from two different routes (new vs edit), each with its own id. */
+    pageId: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
     onSaved?: (id: string) => void;
 }
-export declare function AdminAdEditorView({ adId, endpointBase, labels, onSaved, ...rest }: AdminAdEditorViewProps): React.JSX.Element;
+export declare function AdminAdEditorView({ adId, endpointBase, labels, pageId, pageRegionCards, onSaved, ...rest }: AdminAdEditorViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAdEditorView.js

@@ -19,6 +19,7 @@ import { FormShellContext, useFormShellState } from "../../../ui/forms/FormShell
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
 import { buildSectionsFromSchema, visibleValues } from "../../shell/build-sections.js";
 import { SectionForm, useSectionFormNav } from "../../shell/SectionForm.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
 };
@@ -59,7 +60,7 @@ const EMPTY_AD = {
 function PlacementChecklist({ placements, selected, onToggle, }) {
     return (_jsx(Stack, { gap: "sm", children: _jsx(Div, { layout: "grid", gap: "2", className: "grid-cols-1 md:grid-cols-2", children: placements.map((placement) => (_jsxs("label", { className: "flex items-center gap-[var(--appkit-space-2)] rounded-md border border-[var(--appkit-color-border)] px-[var(--appkit-space-3)] py-[var(--appkit-space-2)]", children: [_jsx(Checkbox, { bare: true, checked: selected.includes(placement.id), onChange: () => onToggle(placement.id) }), _jsx(Span, { size: "sm", children: placement.label })] }, placement.id))) }) }));
 }
-export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, labels = {}, onSaved, ...rest }) {
+export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, labels = {}, pageId, pageRegionCards = [], onSaved, ...rest }) {
     const [form, setForm] = React.useState(EMPTY_AD);
     const patch = (partial) => setForm((prev) => Object.assign({}, prev, partial));
     const { showToast } = useToast();
@@ -252,6 +253,7 @@ export function AdminAdEditorView({ adId, endpointBase = ADMIN_ENDPOINTS.ADS, la
             ] }));
     }
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: labels.title ?? (adId ? "Edit Ad" : "Create Ad"), sections: [
+            _jsx(AdminComposableRegion, { pageId: pageId, initialCards: pageRegionCards }, "page-region"),
             metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad metadata", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null,
             adQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ad", children: adQuery.error instanceof Error ? adQuery.error.message : "Unknown error" })) : null,
             _jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: form, onChange: patch, onSubmit: handleSubmit, schema: adminAdFormSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, isLoading: saveMutation.isPending, submitLabel: form.status === "active" ? "Publish ad" : adId ? "Save changes" : "Create ad" })] }, "ad-form"),

package/dist/features/admin/components/AdminAddressBookView.d.ts

@@ -5,7 +5,10 @@
  * tool rather than a paginated DataListingView.
  */
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminAddressBookViewProps {
     children?: React.ReactNode;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function AdminAddressBookView(_props: AdminAddressBookViewProps): React.JSX.Element;
+export declare function AdminAddressBookView({ pageRegionCards }: AdminAddressBookViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAddressBookView.js

@@ -19,11 +19,12 @@ import { TextLink } from "../../../ui/components/TextLink.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const OWNER_TYPE_OPTIONS = [
     { value: "user", label: "User" },
     { value: "store", label: "Store" },
 ];
-export function AdminAddressBookView(_props) {
+export function AdminAddressBookView({ pageRegionCards = [] }) {
     const [ownerType, setOwnerType] = React.useState("user");
     const [ownerIdInput, setOwnerIdInput] = React.useState("");
     const [searchedOwnerId, setSearchedOwnerId] = React.useState(null);
@@ -33,5 +34,5 @@ export function AdminAddressBookView(_props) {
         enabled: !!searchedOwnerId,
     });
     const addresses = data?.items ?? [];
-    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Row, { justify: "between", align: "center", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Addresses" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Look up a user's or store's saved addresses by owner ID." })] }), _jsx(TextLink, { href: String(ROUTES.ADMIN.ADDRESSES_NEW), children: _jsx(Button, { type: "button", children: "+ New address" }) })] }), _jsx(Card, { variant: "outlined", padding: "md", children: _jsxs(Row, { gap: "md", align: "end", wrap: true, children: [_jsx(FieldSelect, { name: "ownerType", label: "Owner type", value: ownerType, onChange: (v) => setOwnerType(v), options: OWNER_TYPE_OPTIONS }), _jsx(Input, { name: "ownerId", label: "Owner ID", placeholder: ownerType === "user" ? "user-..." : "store-...", value: ownerIdInput, onChange: (e) => setOwnerIdInput(e.target.value) }), _jsx(Button, { type: "button", isLoading: isLoading, disabled: !ownerIdInput.trim(), onClick: () => setSearchedOwnerId(ownerIdInput.trim()), children: "Search" })] }) }), error && (_jsx(Text, { size: "sm", color: "danger", children: error?.message ?? "Failed to load addresses." })), searchedOwnerId && !isLoading && addresses.length === 0 && !error && (_jsx(Text, { size: "sm", color: "muted", children: "No addresses found for this owner." })), addresses.length > 0 && (_jsx(Stack, { gap: "sm", children: addresses.map((addr) => (_jsx(Card, { variant: "outlined", padding: "md", children: _jsxs(Row, { justify: "between", align: "center", wrap: true, children: [_jsxs(Stack, { gap: "none", children: [_jsxs(Row, { gap: "sm", align: "center", children: [_jsx(Text, { weight: "medium", children: addr.label }), addr.isDefault && _jsx(Badge, { variant: "secondary", size: "sm", children: "Default" })] }), _jsx(Text, { size: "sm", color: "muted", children: addr.fullName }), _jsx(Text, { size: "sm", color: "muted", children: [addr.addressLine1, addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") })] }), _jsx(TextLink, { href: String(ROUTES.ADMIN.ADDRESSES_EDIT(addr.id)), children: _jsx(Button, { type: "button", variant: "secondary", children: "Edit" }) })] }) }, addr.id))) }))] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Row, { justify: "between", align: "center", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Addresses" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Look up a user's or store's saved addresses by owner ID." })] }), _jsx(TextLink, { href: String(ROUTES.ADMIN.ADDRESSES_NEW), children: _jsx(Button, { type: "button", children: "+ New address" }) })] }), _jsx(AdminComposableRegion, { pageId: "admin-addresses", initialCards: pageRegionCards }), _jsx(Card, { variant: "outlined", padding: "md", children: _jsxs(Row, { gap: "md", align: "end", wrap: true, children: [_jsx(FieldSelect, { name: "ownerType", label: "Owner type", value: ownerType, onChange: (v) => setOwnerType(v), options: OWNER_TYPE_OPTIONS }), _jsx(Input, { name: "ownerId", label: "Owner ID", placeholder: ownerType === "user" ? "user-..." : "store-...", value: ownerIdInput, onChange: (e) => setOwnerIdInput(e.target.value) }), _jsx(Button, { type: "button", isLoading: isLoading, disabled: !ownerIdInput.trim(), onClick: () => setSearchedOwnerId(ownerIdInput.trim()), children: "Search" })] }) }), error && (_jsx(Text, { size: "sm", color: "danger", children: error?.message ?? "Failed to load addresses." })), searchedOwnerId && !isLoading && addresses.length === 0 && !error && (_jsx(Text, { size: "sm", color: "muted", children: "No addresses found for this owner." })), addresses.length > 0 && (_jsx(Stack, { gap: "sm", children: addresses.map((addr) => (_jsx(Card, { variant: "outlined", padding: "md", children: _jsxs(Row, { justify: "between", align: "center", wrap: true, children: [_jsxs(Stack, { gap: "none", children: [_jsxs(Row, { gap: "sm", align: "center", children: [_jsx(Text, { weight: "medium", children: addr.label }), addr.isDefault && _jsx(Badge, { variant: "secondary", size: "sm", children: "Default" })] }), _jsx(Text, { size: "sm", color: "muted", children: addr.fullName }), _jsx(Text, { size: "sm", color: "muted", children: [addr.addressLine1, addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") })] }), _jsx(TextLink, { href: String(ROUTES.ADMIN.ADDRESSES_EDIT(addr.id)), children: _jsx(Button, { type: "button", variant: "secondary", children: "Edit" }) })] }) }, addr.id))) }))] }));
 }

package/dist/features/admin/components/AdminAddressClustersView.d.ts

@@ -1,5 +1,8 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminAddressClustersViewProps {
     children?: React.ReactNode;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function AdminAddressClustersView(_props: AdminAddressClustersViewProps): React.JSX.Element;
+export declare function AdminAddressClustersView({ pageRegionCards }: AdminAddressClustersViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAddressClustersView.js

@@ -13,12 +13,13 @@ import { ROUTES } from "../../../next/routing/route-map.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { apiClient } from "../../../http/index.js";
 import { useApiMutation } from "@mohasinac/appkit/client";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const BAN_BADGE = {
     banned: "danger",
     unban_requested: "warning",
     suspicious: "secondary",
 };
-export function AdminAddressClustersView(_props) {
+export function AdminAddressClustersView({ pageRegionCards = [] }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const { data, isLoading, error } = useQuery({
@@ -57,5 +58,5 @@ export function AdminAddressClustersView(_props) {
         },
     });
     const clusters = data?.clusters ?? [];
-    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(TextLink, { href: addr.ownerType === "user" ? String(ROUTES.ADMIN.USER_DETAIL(addr.ownerId)) : String(ROUTES.ADMIN.STORE_DETAIL(addr.ownerId)), size: "sm", weight: "medium", truncate: true, children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus === "suspicious" ? (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => clearFlagMutation.mutate(addr.id), disabled: clearFlagMutation.isPending, children: "Clear flag" })) : (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), _jsx(AdminComposableRegion, { pageId: "admin-address-clusters", initialCards: pageRegionCards }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(TextLink, { href: addr.ownerType === "user" ? String(ROUTES.ADMIN.USER_DETAIL(addr.ownerId)) : String(ROUTES.ADMIN.STORE_DETAIL(addr.ownerId)), size: "sm", weight: "medium", truncate: true, children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus === "suspicious" ? (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => clearFlagMutation.mutate(addr.id), disabled: clearFlagMutation.isPending, children: "Clear flag" })) : (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));
 }

package/dist/features/admin/components/AdminAddressEditorView.d.ts

@@ -1,8 +1,13 @@
 import React from "react";
 import type { StackedViewShellProps } from "../../../ui/components/StackedViewShell";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminAddressEditorViewProps extends Omit<StackedViewShellProps, "sections"> {
     addressId?: string;
+    /** Page-region id for this screen (Phase 12) — required because this View is mounted from two different routes (new vs edit), each with its own id. */
+    pageId: string;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
     onSaved?: (id: string) => void;
     onDeleted?: () => void;
 }
-export declare function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest }: AdminAddressEditorViewProps): React.JSX.Element;
+export declare function AdminAddressEditorView({ addressId, pageId, pageRegionCards, onSaved, onDeleted, ...rest }: AdminAddressEditorViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAddressEditorView.js

@@ -30,6 +30,7 @@ import { FormShellContext, useFormShellState } from "../../../ui/forms/FormShell
 import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
 import { buildSectionsFromSchema, visibleValues } from "../../shell/build-sections.js";
 import { SectionForm, useSectionFormNav } from "../../shell/SectionForm.js";
+import { useFieldVisibility } from "../../shell/useFieldVisibility.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
@@ -37,6 +38,8 @@ import { adminAddressCreateSchema } from "../../addresses/schemas/address-form.j
 import { AddressLocationFields } from "../../addresses/components/AddressLocationFields.js";
 import { usePostalLookup } from "../../addresses/hooks/usePostalLookup.js";
 import { COUNTRIES, DEFAULT_COUNTRY } from "../../../constants/geo/countries.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
+import { useEditMode } from "../../../_internal/client/edit-mode/EditModeProvider.js";
 const COUNTRY_OPTIONS = Object.values(COUNTRIES).map((c) => ({
     value: c.code,
     label: c.name,
@@ -45,6 +48,8 @@ const OWNER_TYPE_OPTIONS = [
     { value: "user", label: "User" },
     { value: "store", label: "Store" },
 ];
+/** Admin field-visibility surface id — 3B hard gate, PII-forms migration, 2026-11-05. */
+const FIELD_VISIBILITY_SURFACE_ID = "admin-address-editor";
 const EMPTY = {
     ownerType: "user",
     ownerId: "",
@@ -60,7 +65,7 @@ const EMPTY = {
     country: DEFAULT_COUNTRY,
     isDefault: false,
 };
-export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest }) {
+export function AdminAddressEditorView({ addressId, pageId, pageRegionCards = [], onSaved, onDeleted, ...rest }) {
     const isEdit = Boolean(addressId);
     const [deleteOpen, setDeleteOpen] = React.useState(false);
     const { showToast } = useToast();
@@ -120,8 +125,13 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
         },
     });
     const isSubmitting = saveMutation.isPending || isLoading;
+    const { editMode } = useEditMode();
+    const { fields: visibilityFields, setVisible: setFieldVisible } = useFieldVisibility(FIELD_VISIBILITY_SURFACE_ID);
     const sections = React.useMemo(() => buildSectionsFromSchema(adminAddressCreateSchema, {
         options: { ownerType: OWNER_TYPE_OPTIONS, country: COUNTRY_OPTIONS },
+        fieldVisibility: visibilityFields,
+        editMode,
+        onToggleFieldVisibility: setFieldVisible,
         renderers: {
             /*
              * The id's LABEL depends on the owner type, which a generated field
@@ -136,7 +146,7 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
             postalCode: () => null,
             country: () => null,
         },
-    }), [isLooking, lookup]);
+    }), [isLooking, lookup, visibilityFields, editMode, setFieldVisible]);
     const nav = useSectionFormNav(sections, form, { scope: "admin:address-editor" });
     const { shellCtx, setFieldError, clearErrors } = useFormShellState(adminAddressCreateSchema, {
         sections: nav.sectionMeta,
@@ -153,6 +163,7 @@ export function AdminAddressEditorView({ addressId, onSaved, onDeleted, ...rest
         saveMutation.mutate();
     };
     return (_jsx(StackedViewShell, { portal: "admin", ...rest, title: isEdit ? "Edit address" : "New address", sections: [
+            _jsx(AdminComposableRegion, { pageId: pageId, initialCards: pageRegionCards }, "page-region"),
             _jsxs(Stack, { gap: "md", children: [_jsxs(FormShellContext.Provider, { value: shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: form, onChange: patch, onSubmit: handleSubmit, schema: adminAddressCreateSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, isLoading: isSubmitting, submitLabel: isEdit ? ACTIONS.ADMIN["save-changes"].label : "Create address", destructiveAction: isEdit
                                     ? {
                                         label: "Delete address",

package/dist/features/admin/components/AdminAddressesView.d.ts

@@ -1,5 +1,8 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export interface AdminAddressesViewProps {
     children?: React.ReactNode;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function AdminAddressesView(_props: AdminAddressesViewProps): React.JSX.Element;
+export declare function AdminAddressesView({ pageRegionCards }: AdminAddressesViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAddressesView.js

@@ -17,6 +17,7 @@ import { apiClient } from "../../../http/index.js";
 import { useApiMutation } from "@mohasinac/appkit/client";
 import { QuickEditMenu } from "./QuickEditMenu.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const BAN_STATUS_TABS = [
     { id: "", label: "All" },
     { id: "banned", label: "Banned" },
@@ -129,7 +130,7 @@ function buildAddressConfig(onAction) {
         },
     };
 }
-export function AdminAddressesView(_props) {
+export function AdminAddressesView({ pageRegionCards = [] }) {
     // Independent useUrlTable() against the same URL param DataListingView's own
     // table reads via filterKeys — safe because useUrlTable holds no local state
     // (the documented Root Cause #35 pattern).
@@ -151,5 +152,5 @@ export function AdminAddressesView(_props) {
         actionMutation.mutate({ id, action });
     };
     const config = buildAddressConfig(handleAction);
-    return (_jsxs(Stack, { gap: "md", children: [_jsx(Div, { padding: "inline", border: "default", className: "border-b", children: _jsx(FilterChipGroup, { label: "Status", tabs: BAN_STATUS_TABS, value: banStatus, onChange: (v) => chipTable.set("banStatus", v) }) }), _jsx(DataListingView, { config: config })] }));
+    return (_jsxs(Stack, { gap: "md", children: [_jsx(Div, { padding: "inline", border: "default", className: "border-b", children: _jsx(FilterChipGroup, { label: "Status", tabs: BAN_STATUS_TABS, value: banStatus, onChange: (v) => chipTable.set("banStatus", v) }) }), _jsx(AdminComposableRegion, { pageId: "admin-banned-addresses", initialCards: pageRegionCards }), _jsx(DataListingView, { config: config })] }));
 }

package/dist/features/admin/components/AdminAdsView.d.ts

@@ -1,4 +1,5 @@
 import React from "react";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
 export type AdminAdStatus = "draft" | "active" | "scheduled" | "paused";
 export type AdminAdProvider = "manual" | "adsense" | "thirdParty";
 export interface AdminAdItem {
@@ -20,5 +21,7 @@ export interface AdminAdsViewProps {
     };
     createHref?: string;
     renderEditLink?: (item: AdminAdItem) => React.ReactNode;
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
 }
-export declare function AdminAdsView({ endpoint, labels, createHref, renderEditLink, }: AdminAdsViewProps): React.JSX.Element;
+export declare function AdminAdsView({ endpoint, labels, createHref, renderEditLink, pageRegionCards, }: AdminAdsViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAdsView.js

@@ -11,6 +11,7 @@ import { SectionForm, useSectionFormNav, buildSectionsFromSchema, visibleValues,
 import { useFormShellState, FormShellContext } from "../../../ui/forms/index.js";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 import { DataListingView } from "./DataListingView.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
 };
@@ -29,7 +30,7 @@ function AdsSettingsPanel({ draft, onChange, serverCredentialIssues, credentialS
     });
     return (_jsxs(Stack, { border: "default", className: __P.p3, gap: "3", rounded: "lg", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Provider and publish settings" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "xs", children: "Save provider credentials here before publishing AdSense or third-party inventory." }), serverCredentialIssues.length > 0 ? (_jsx(Alert, { variant: "warning", title: "Provider credentials need attention", children: serverCredentialIssues.join("; ") })) : null, _jsxs(FormShellContext.Provider, { value: form.shellCtx, children: [_jsx(FormErrorSummary, {}), _jsx(SectionForm, { sections: sections, values: draft, onChange: (partial) => onChange({ ...draft, ...partial }), onSubmit: onSave, onValidationChange: () => form.validate(draft), schema: adsConfigSchema, openIds: nav.openIds, onOpenChange: nav.setOpenIds, submitLabel: "Save settings", isLoading: settingsMutation.isPending })] }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "xs", children: ["Stored credentials: AdSense ", credentialStatus?.hasAdsenseClientId ? "configured" : "missing", " \u00B7 Third-party ", credentialStatus?.hasThirdPartyScriptUrl ? "configured" : "missing"] }), settingsMessage ? (_jsx(Alert, { variant: settingsMessage.toLowerCase().includes("failed") ? "error" : "success", title: "Settings", children: settingsMessage })) : null] }));
 }
-export function AdminAdsView({ endpoint = ADMIN_ENDPOINTS.ADS, labels = {}, createHref = "/admin/ads/new", renderEditLink, }) {
+export function AdminAdsView({ endpoint = ADMIN_ENDPOINTS.ADS, labels = {}, createHref = "/admin/ads/new", renderEditLink, pageRegionCards = [], }) {
     const queryClient = useQueryClient();
     const [draft, setDraft] = React.useState({
         consentRequired: false,
@@ -158,7 +159,7 @@ export function AdminAdsView({ endpoint = ADMIN_ENDPOINTS.ADS, labels = {}, crea
                         { label: "AdSense", value: "adsense" },
                         { label: "Third Party", value: "thirdParty" },
                     ], onChange: (e) => setPendingFilters((p) => ({ ...p, provider: e.target.value === "all" ? "" : e.target.value })) }), _jsx(Label, { size: "sm", color: "muted", children: "Placement" }), _jsx(PaginatedSelect, { value: pendingFilters.placement || undefined, onChange: (v) => setPendingFilters((p) => ({ ...p, placement: v ?? "" })), options: placements.map((item) => ({ value: item.id, label: item.label })) })] })),
-        renderAboveContent: () => (_jsxs(Stack, { gap: "md", className: __P.p3, children: [metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ads", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null, _jsx(AdsSettingsPanel, { draft: draft, onChange: setDraft, serverCredentialIssues: serverCredentialIssues, credentialStatus: credentialStatus, providerCredentialsMasked: metaQuery.data?.providerCredentialsMasked, settingsMutation: settingsMutation, settingsMessage: settingsMessage, onSave: saveSettings })] })),
+        renderAboveContent: () => (_jsxs(Stack, { gap: "md", className: __P.p3, children: [metaQuery.error ? (_jsx(Alert, { variant: "error", title: "Could not load ads", children: metaQuery.error instanceof Error ? metaQuery.error.message : "Unknown error" })) : null, _jsx(AdsSettingsPanel, { draft: draft, onChange: setDraft, serverCredentialIssues: serverCredentialIssues, credentialStatus: credentialStatus, providerCredentialsMasked: metaQuery.data?.providerCredentialsMasked, settingsMutation: settingsMutation, settingsMessage: settingsMessage, onSave: saveSettings }), _jsx(AdminComposableRegion, { pageId: "admin-ads", initialCards: pageRegionCards })] })),
     };
     return _jsx(DataListingView, { config: config });
 }

package/dist/features/admin/components/AdminAllEventEntriesView.d.ts

@@ -1,4 +1,8 @@
 import React from "react";
 import type { ListingLayoutProps } from "../../../ui/components/ListingLayout";
-export type AdminAllEventEntriesViewProps = ListingLayoutProps;
-export declare function AdminAllEventEntriesView({ children, ...props }: AdminAllEventEntriesViewProps): React.JSX.Element;
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
+export interface AdminAllEventEntriesViewProps extends ListingLayoutProps {
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
+}
+export declare function AdminAllEventEntriesView({ children, pageRegionCards, ...props }: AdminAllEventEntriesViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAllEventEntriesView.js

@@ -16,7 +16,8 @@ import { ADMIN_EVENT_ENTRY_STATUS_TABS } from "../constants/filter-tabs.js";
 import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdminListingData.js";
 import { DataListingView } from "./DataListingView.js";
 import { apiClient } from "../../../http/index.js";
-export function AdminAllEventEntriesView({ children, ...props }) {
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
+export function AdminAllEventEntriesView({ children, pageRegionCards = [], ...props }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const [selected, setSelected] = React.useState(null);
@@ -84,7 +85,7 @@ export function AdminAllEventEntriesView({ children, ...props }) {
         renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(FilterChipGroup, { label: "Status", tabs: ADMIN_EVENT_ENTRY_STATUS_TABS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) })),
     };
     const raw = selected?._raw ?? {};
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(RecordDetailModal, { isOpen: Boolean(selected), onClose: () => setSelected(null), title: selected?.primary ?? "Event Entry", badges: [{ label: selected?.status ?? "PENDING", variant: "default" }], fields: [
+    return (_jsxs(_Fragment, { children: [_jsx(AdminComposableRegion, { pageId: "admin-event-entries", initialCards: pageRegionCards }), _jsx(DataListingView, { config: config }), _jsx(RecordDetailModal, { isOpen: Boolean(selected), onClose: () => setSelected(null), title: selected?.primary ?? "Event Entry", badges: [{ label: selected?.status ?? "PENDING", variant: "default" }], fields: [
                     { label: "Event", value: toStringValue(raw.eventId, "—") },
                     { label: "Email", value: toStringValue(raw.userEmail, "—") },
                     { label: "Points", value: String(raw.points ?? "—") },

package/dist/features/admin/components/AdminAnalyticsGuideView.d.ts

@@ -1,2 +1,7 @@
 import React from "react";
-export declare function AdminAnalyticsGuideView(): React.JSX.Element;
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
+export interface AdminAnalyticsGuideViewProps {
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
+}
+export declare function AdminAnalyticsGuideView({ pageRegionCards }: AdminAnalyticsGuideViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAnalyticsGuideView.js

@@ -7,8 +7,9 @@ import { Li, Section, Ul } from "../../../ui/components/Semantic.js";
 import { Row, Stack } from "../../../ui/components/Layout.js";
 import { GC } from "../../_guide-cls.js";
 import { getBrandName } from "../../../core/brand-resolver.js";
-export function AdminAnalyticsGuideView() {
-    return (_jsxs(Stack, { className: "max-w-3xl mx-auto", padding: "b-2xl", gap: "xl", children: [_jsxs(Section, { children: [_jsxs(Row, { className: "mb-2", align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-10 h-10 [background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]", align: "center", justify: "center", rounded: "xl", children: _jsx(BarChart2, { className: "w-5 h-5 text-white" }) }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Admin Guide" })] }), _jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)] mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: "Analytics" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", children: ["Revenue, order funnel, product performance, and store metrics on ", getBrandName(), "."] })] }), [
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
+export function AdminAnalyticsGuideView({ pageRegionCards = [] }) {
+    return (_jsxs(Stack, { className: "max-w-3xl mx-auto", padding: "b-2xl", gap: "xl", children: [_jsxs(Section, { children: [_jsxs(Row, { className: "mb-2", align: "center", gap: "3", children: [_jsx(Row, { className: `flex-shrink-0 w-10 h-10 ${GC.iconBg}`, align: "center", justify: "center", rounded: "xl", children: _jsx(BarChart2, { className: GC.iconPrimary }) }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Admin Guide" })] }), _jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)] mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: "Analytics" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", children: ["Revenue, order funnel, product performance, and store metrics on ", getBrandName(), "."] })] }), _jsx(AdminComposableRegion, { pageId: "admin-guide-analytics", initialCards: pageRegionCards }), [
                 {
                     title: "Revenue Dashboard",
                     content: (_jsxs(Ul, { className: GC.listMuted, children: [_jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "GMV (Gross Merchandise Value)" }), ": Total order subtotals across all stores. Does not deduct platform commission or refunds."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Net Revenue" }), ": GMV \u00D7 platformFee \u2014 refunded orders excluded."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Period filter" }), ": Last 7 / 30 / 90 days, or custom date range. All monetary values shown in INR."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Payout total" }), ": Total disbursed to sellers in the same period. Revenue - Payout = Platform earnings."] })] })),

package/dist/features/admin/components/AdminArtAndStickersView.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AdminArtAndStickersView — admin browse of art & sticker listings.
+ *
+ * A thin wrapper over the shared per-listing-type config. This file (and its
+ * siblings) used to carry a full hand-written ListingViewConfig; all of them
+ * were the same config with a different listingType, and all shipped an empty
+ * filterKeys array — no filter drawer at all — plus their own copy of a
+ * three-option sort array. See listing-type-listing-config.ts.
+ *
+ * 🛑 ONE view, not two. `AdminArtView` and `AdminStickersView` were separate
+ * files for two separate union members; 1.34 merged the types.
+ */
+import React from "react";
+import type { ListingLayoutProps } from "../../../ui/components/ListingLayout";
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
+export interface AdminArtAndStickersViewProps extends ListingLayoutProps {
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
+}
+export declare function AdminArtAndStickersView({ children, pageRegionCards, ...props }: AdminArtAndStickersViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminArtAndStickersView.js

@@ -0,0 +1,39 @@
+"use client";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * AdminArtAndStickersView — admin browse of art & sticker listings.
+ *
+ * A thin wrapper over the shared per-listing-type config. This file (and its
+ * siblings) used to carry a full hand-written ListingViewConfig; all of them
+ * were the same config with a different listingType, and all shipped an empty
+ * filterKeys array — no filter drawer at all — plus their own copy of a
+ * three-option sort array. See listing-type-listing-config.ts.
+ *
+ * 🛑 ONE view, not two. `AdminArtView` and `AdminStickersView` were separate
+ * files for two separate union members; 1.34 merged the types.
+ */
+import React from "react";
+import { ListingLayout } from "../../../ui/components/ListingLayout.js";
+import { buildListingTypeListingConfig } from "../../products/config/listing-type-listing-config.js";
+import { DataListingView } from "./DataListingView.js";
+import { useAvailabilityScope } from "../../products/hooks/useAvailabilityScope.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
+const LISTING_TYPES = ["art-and-stickers"];
+const CONFIG_OPTS = {
+    title: "Art & Stickers",
+    searchPlaceholder: "Search art & stickers by name or seller",
+    emptyLabel: "No art or sticker listings",
+};
+export function AdminArtAndStickersView({ children, pageRegionCards = [], ...props }) {
+    const scope = useAvailabilityScope(LISTING_TYPES);
+    if (React.Children.count(children) > 0) {
+        return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
+    }
+    // Built per-render rather than at module scope: the availability scope
+    // reads the URL through a hook, which cannot run outside a component.
+    const config = buildListingTypeListingConfig("art-and-stickers", { ...CONFIG_OPTS, scope });
+    return (_jsx(DataListingView, { config: {
+            ...config,
+            renderAboveContent: () => (_jsxs(_Fragment, { children: [config.renderAboveContent?.(), _jsx(AdminComposableRegion, { pageId: "admin-art", initialCards: pageRegionCards })] })),
+        } }));
+}

package/dist/features/admin/components/AdminAuditLogView.d.ts

@@ -7,5 +7,9 @@
  */
 import React from "react";
 import type { ListingLayoutProps } from "../../../ui/components/ListingLayout";
-export type AdminAuditLogViewProps = ListingLayoutProps;
-export declare function AdminAuditLogView({ children, ...props }: AdminAuditLogViewProps): React.JSX.Element;
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
+export interface AdminAuditLogViewProps extends ListingLayoutProps {
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
+}
+export declare function AdminAuditLogView({ children, pageRegionCards, ...props }: AdminAuditLogViewProps): React.JSX.Element;

package/dist/features/admin/components/AdminAuditLogView.js

@@ -20,6 +20,7 @@ import { ADMIN_AUDIT_LOG_ACTION_TABS } from "../constants/filter-tabs.js";
 import { toRecordArray, toRelativeDate, toStringValue, } from "../hooks/useAdminListingData.js";
 import { DataListingView } from "./DataListingView.js";
 import { ViewAuditLogEntryModal } from "./ViewAuditLogEntryModal.js";
+import { AdminComposableRegion } from "../../dashboard/components/AdminComposableRegion.js";
 const ACTION_LABELS = {
     user_hard_ban: "User hard-banned",
     user_soft_ban: "User soft-banned",
@@ -30,8 +31,10 @@ const ACTION_LABELS = {
     offer_cancel: "Offer cancelled",
     store_status_change: "Store status changed",
     user_role_change: "User role changed",
+    /* Not an admin act — the platform's RNG. See the action value's docstring. */
+    allocation_random_assign: "Concealed item allocated (RNG)",
 };
-export function AdminAuditLogView({ children, ...props }) {
+export function AdminAuditLogView({ children, pageRegionCards = [], ...props }) {
     const [viewEntry, setViewEntry] = useState(null);
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
@@ -91,6 +94,7 @@ export function AdminAuditLogView({ children, ...props }) {
         }),
         getTotal: (response, mappedRows) => typeof response.meta?.total === "number" ? response.meta.total : mappedRows.length,
         onRowClick: (row) => openEntry(row),
+        renderAboveContent: () => _jsx(AdminComposableRegion, { pageId: "admin-audit-log", initialCards: pageRegionCards }),
         buildFilters: (state) => {
             const parts = [];
             if (state.action && state.action !== "All")

package/dist/features/admin/components/AdminBidsView.d.ts

@@ -1,4 +1,8 @@
 import React from "react";
 import type { ListingLayoutProps } from "../../../ui/components/ListingLayout";
-export type AdminBidsViewProps = ListingLayoutProps;
-export declare function AdminBidsView({ children, ...props }: AdminBidsViewProps): React.JSX.Element;
+import type { DashboardCard } from "../../../_internal/shared/features/dashboard/recent-entry";
+export interface AdminBidsViewProps extends ListingLayoutProps {
+    /** Admin-curated page-region cards (Phase 12). Omit for no extra content. */
+    pageRegionCards?: DashboardCard[];
+}
+export declare function AdminBidsView({ children, pageRegionCards, ...props }: AdminBidsViewProps): React.JSX.Element;