@mohasinac/appkit 4.13.1 → 4.14.0

package/dist/_internal/client/features/layout/DashboardLayoutClient.js

@@ -34,9 +34,9 @@ import { filterNavItems } from "./filterNavItems";
 import { useSiteSettings } from "../../../../core/hooks/useSiteSettings";
 import { useTheme } from "../../theme";
 import { useHandMode } from "../../hand-mode";
-import { BackgroundRenderer, Div, Nav, Span } from "../../../../ui";
+import { BackgroundRenderer, Div, Li, Nav, Span } from "../../../../ui";
+import { BottomNavLayout } from "../../../../features/layout/BottomNavLayout";
 import { useToast } from "../../../../ui/components/Toast";
-import { useVisualViewportInset } from "../../../../react/hooks/useVisualViewportInset";
 import { useSession } from "../../../../react/contexts/SessionContext";
 import { ROUTES } from "../../../../next/routing/route-map";
 /**
@@ -140,14 +140,23 @@ const MAX_BOTTOM_NAV_ITEMS = 5;
  * behind a hamburger toggle). Pattern lifted from the unused
  * `DashboardScaffold` scaffold, which has since been retired in favour of
  * wiring it directly here where the sidebars already live.
+ *
+ * Renders through the shared `<BottomNavLayout>` rather than hand-rolling its
+ * own `fixed bottom-0` chrome. That is not cosmetic: `BottomNavLayout` is what
+ * publishes `--bottom-nav-height`, which every bottom-anchored surface above it
+ * (the CTA tier, the pagination bar, BackToTop, the footer's clearance) offsets
+ * against. The hand-rolled version published nothing, so on dashboard routes
+ * that whole stack was positioned against the PUBLIC nav's height instead —
+ * which was itself a bug, since both bars were rendering on the same pixels.
+ * `AppLayoutShell` is now told to suppress the public one here via
+ * `showBottomNav={!isDashboard}`; exactly one nav must be mounted at a time.
  */
 function DashboardBottomNav({ items, activeHref }) {
-    const isKeyboardOpen = useVisualViewportInset();
     if (items.length === 0)
         return null;
-    return (_jsx(Nav, { "aria-label": "Dashboard bottom navigation", "aria-hidden": isKeyboardOpen, className: `fixed bottom-0 left-0 right-0 z-[var(--appkit-z-bottom-nav)] flex items-stretch justify-around border-t border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] lg:hidden transition-transform duration-200 ease-out ${isKeyboardOpen ? "translate-y-full pointer-events-none" : "translate-y-0"}`, children: items.slice(0, MAX_BOTTOM_NAV_ITEMS).map((item) => {
+    return (_jsx(BottomNavLayout, { id: "dashboard-bottom-navbar", ariaLabel: "Dashboard bottom navigation", children: items.slice(0, MAX_BOTTOM_NAV_ITEMS).map((item) => {
             const isActive = activeHref === item.href || activeHref.startsWith(`${item.href}/`);
-            return (_jsxs(Link, { href: item.href, className: `flex flex-1 flex-col items-center justify-center gap-[var(--appkit-space-0-5)] py-[var(--appkit-space-2)] ${isActive ? "text-[var(--appkit-color-primary)]" : "text-[var(--appkit-color-text-muted)]"}`, "aria-current": isActive ? "page" : undefined, children: [item.icon && _jsx(Span, { size: "base", children: item.icon }), _jsx(Span, { size: "xs", className: "max-w-full truncate", children: item.label })] }, item.href));
+            return (_jsx(Li, { className: "flex-1", children: _jsxs(Link, { href: item.href, className: `flex h-full flex-col items-center justify-center gap-[var(--appkit-space-0-5)] py-[var(--appkit-space-2)] ${isActive ? "text-[var(--appkit-color-primary)]" : "text-[var(--appkit-color-text-muted)]"}`, "aria-current": isActive ? "page" : undefined, children: [item.icon && _jsx(Span, { size: "base", children: item.icon }), _jsx(Span, { size: "xs", className: "max-w-full truncate", children: item.label })] }) }, item.href));
         }) }));
 }
 // Asymmetric padding clears the persistent sidebar rail — right-heavy by

package/dist/_internal/client/features/lottery/LotteryAdminEditView.d.ts

@@ -3,6 +3,8 @@ interface LotterySlotRow {
     slotNumber: number;
     name: string;
     price: number;
+    /** Prize photo — rendered publicly in the prize collage on the detail page. */
+    image?: string;
 }
 interface LotteryEventFormData {
     title: string;
@@ -12,6 +14,7 @@ interface LotteryEventFormData {
         slots: Array<{
             slotNumber: number;
             name: string;
+            image?: string;
             price: number;
             weight: number;
             isBooked: boolean;

package/dist/_internal/client/features/lottery/LotteryAdminEditView.js

@@ -37,6 +37,7 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
                     slots: slots.map((s) => ({
                         slotNumber: s.slotNumber,
                         name: s.name,
+                        image: s.image?.trim() || undefined,
                         price: s.price,
                         weight: 0,
                         isBooked: false,
@@ -68,6 +69,11 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
             header: "Prize Name",
             render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
         },
+        {
+            key: "image",
+            header: "Image",
+            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: "/media/\u2026 or https://\u2026", value: s.image ?? "", onChange: (e) => updateSlot(s._idx, "image", e.target.value), "aria-label": `Slot ${s.slotNumber} prize image URL` })),
+        },
         ...(pricingMode === "variable"
             ? [
                 {

package/dist/_internal/client/features/lottery/LotteryDetailView.d.ts

@@ -6,7 +6,15 @@ interface ClientLotteryEvent {
     description?: string;
     status: string;
     endsAt?: string | Date | null;
+    /**
+     * Two spellings exist on EventDocument and only `coverImage.url` is ever
+     * populated — by seed data or the admin editor. Reading `coverImageUrl`
+     * alone is why this page showed the 🎰 placeholder for every lottery.
+     */
     coverImageUrl?: string;
+    coverImage?: {
+        url?: string;
+    } | null;
     lotteryConfig?: ClientLotteryConfig;
 }
 interface LotteryDetailViewProps {

package/dist/_internal/client/features/lottery/LotteryDetailView.js

@@ -6,6 +6,8 @@ import { MediaImage } from "../../../../features/media/MediaImage";
 import { ROUTES } from "../../../../next/routing/route-map";
 import { LotterySlotGrid } from "./LotterySlotGrid";
 import { LotteryPullForm } from "./LotteryPullForm";
+import { PrizeDrawCollage } from "../../../../features/products/components/PrizeDrawCollage";
+import { slotsToCollageItems } from "./slot-collage-items";
 /**
  * Full lottery detail page view.
  * Shows cover + description + slot grid + pull form (if active + logged in).
@@ -13,7 +15,8 @@ import { LotteryPullForm } from "./LotteryPullForm";
 export function LotteryDetailView({ event, user, currentEntry }) {
     const [pulledEntry, setPulledEntry] = useState(currentEntry?.assignedPrizeSlotNumber != null ? currentEntry : null);
     const config = event.lotteryConfig;
+    const prizeItems = slotsToCollageItems(config?.slots ?? []);
     const isActive = event.status === "active";
     const isEnded = event.status === "ended" || event.status === "cancelled";
-    return (_jsx(Container, { children: _jsx(Section, { children: _jsxs(Stack, { gap: "xl", children: [event.coverImageUrl ? (_jsx(Div, { rounded: "2xl", className: "relative overflow-hidden", style: { aspectRatio: "16/9", maxHeight: "16rem" }, children: _jsx(MediaImage, { src: event.coverImageUrl, alt: event.title, size: "hero" }) })) : (_jsx(Div, { rounded: "2xl", surface: "subtle", padding: "xl", align: "center", justify: "center", children: _jsx(Text, { size: "5xl", children: "\uD83C\uDFB0" }) })), _jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: isActive ? "success" : isEnded ? "danger" : "warning", children: event.status }), config && (_jsxs(Badge, { variant: "info", children: [config.slots.filter((s) => s.isBooked).length, "/", config.totalSlots, " slots claimed"] }))] }), _jsx(Heading, { level: 1, size: "3xl", weight: "bold", children: event.title }), event.description ? (_jsx(Text, { color: "muted", size: "sm", children: event.description.replace(/<[^>]+>/g, "").slice(0, 200) })) : null, event.endsAt ? (_jsxs(Text, { size: "sm", color: "muted", children: ["Ends: ", new Date(event.endsAt).toLocaleDateString("en-IN", { dateStyle: "long" })] })) : null] }), config && config.slots.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Slots" }), _jsx(LotterySlotGrid, { slots: config.slots, totalSlots: config.totalSlots })] })) : null, isActive && config && (_jsx(Div, { padding: "md", rounded: "2xl", surface: "card", className: "border border-[var(--appkit-color-border)]", children: !user ? (_jsxs(Stack, { gap: "md", className: "text-center", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Want to Participate?" }), _jsx(Text, { color: "muted", children: "Log in to submit your lottery entry." }), _jsx(Anchor, { href: String(ROUTES.AUTH.LOGIN), tone: "brand", children: "Log In to Enter" })] })) : pulledEntry ? (_jsxs(Stack, { gap: "sm", surface: "success-surface", padding: "md", rounded: "xl", className: "border border-success/20", children: [_jsxs(Heading, { level: 2, size: "lg", weight: "bold", className: "text-success", children: ["You're Lottery #", pulledEntry.userLotteryNumber, "!"] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["Assigned to Slot #", pulledEntry.assignedPrizeSlotNumber, pulledEntry.slotName ? ` — ${pulledEntry.slotName}` : "", "."] })] })) : (_jsx(LotteryPullForm, { sourceType: "event", eventId: event.id, totalSlots: config.totalSlots, maxPullsPerUser: config.maxPullsPerUser, onSuccess: (res) => setPulledEntry(res) })) })), isEnded && !pulledEntry && (_jsx(Stack, { gap: "sm", surface: "muted", padding: "md", rounded: "xl", children: _jsx(Text, { color: "muted", weight: "semibold", children: "This lottery has ended." }) }))] }) }) }));
+    return (_jsx(Container, { children: _jsx(Section, { children: _jsxs(Stack, { gap: "xl", children: [event.coverImageUrl || event.coverImage?.url ? (_jsx(Div, { rounded: "2xl", className: "relative overflow-hidden", style: { aspectRatio: "16/9", maxHeight: "16rem" }, children: _jsx(MediaImage, { src: event.coverImageUrl || event.coverImage?.url || "", alt: event.title, size: "hero" }) })) : (_jsx(Div, { rounded: "2xl", surface: "subtle", padding: "xl", align: "center", justify: "center", children: _jsx(Text, { size: "5xl", children: "\uD83C\uDFB0" }) })), _jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: isActive ? "success" : isEnded ? "danger" : "warning", children: event.status }), config && (_jsxs(Badge, { variant: "info", children: [config.slots.filter((s) => s.isBooked).length, "/", config.totalSlots, " slots claimed"] }))] }), _jsx(Heading, { level: 1, size: "3xl", weight: "bold", children: event.title }), event.description ? (_jsx(Text, { color: "muted", size: "sm", children: event.description.replace(/<[^>]+>/g, "").slice(0, 200) })) : null, event.endsAt ? (_jsxs(Text, { size: "sm", color: "muted", children: ["Ends: ", new Date(event.endsAt).toLocaleDateString("en-IN", { dateStyle: "long" })] })) : null] }), prizeItems.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Prizes" }), _jsx(PrizeDrawCollage, { items: prizeItems, wonLabel: "Claimed" })] })) : null, config && config.slots.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Slots" }), _jsx(LotterySlotGrid, { slots: config.slots, totalSlots: config.totalSlots })] })) : null, isActive && config && (_jsx(Div, { padding: "md", rounded: "2xl", surface: "card", className: "border border-[var(--appkit-color-border)]", children: !user ? (_jsxs(Stack, { gap: "md", className: "text-center", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Want to Participate?" }), _jsx(Text, { color: "muted", children: "Log in to submit your lottery entry." }), _jsx(Anchor, { href: String(ROUTES.AUTH.LOGIN), tone: "brand", children: "Log In to Enter" })] })) : pulledEntry ? (_jsxs(Stack, { gap: "sm", surface: "success-surface", padding: "md", rounded: "xl", className: "border border-success/20", children: [_jsxs(Heading, { level: 2, size: "lg", weight: "bold", className: "text-success", children: ["You're Lottery #", pulledEntry.userLotteryNumber, "!"] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["Assigned to Slot #", pulledEntry.assignedPrizeSlotNumber, pulledEntry.slotName ? ` — ${pulledEntry.slotName}` : "", "."] })] })) : (_jsx(LotteryPullForm, { sourceType: "event", eventId: event.id, totalSlots: config.totalSlots, maxPullsPerUser: config.maxPullsPerUser, onSuccess: (res) => setPulledEntry(res) })) })), isEnded && !pulledEntry && (_jsx(Stack, { gap: "sm", surface: "muted", padding: "md", rounded: "xl", children: _jsx(Text, { color: "muted", weight: "semibold", children: "This lottery has ended." }) }))] }) }) }));
 }

package/dist/_internal/client/features/lottery/LotteryListView.d.ts

@@ -7,7 +7,14 @@ interface ClientLotteryEvent {
     status: string;
     startsAt?: string | Date;
     endsAt?: string | Date;
+    /**
+     * Only `coverImage.url` is ever populated on EventDocument — reading
+     * `coverImageUrl` alone showed the 🎰 placeholder on every card.
+     */
     coverImageUrl?: string;
+    coverImage?: {
+        url?: string;
+    } | null;
     lotteryConfig?: ClientLotteryConfig;
 }
 interface LotteryListViewProps {

package/dist/_internal/client/features/lottery/LotteryListView.js

@@ -17,7 +17,7 @@ export function LotteryListView({ items, adminMode = false }) {
                             const claimed = event.lotteryConfig?.slots.filter((s) => s.isBooked).length ?? 0;
                             const total = event.lotteryConfig?.totalSlots ?? 0;
                             const slotsLeft = total - claimed;
-                            return (_jsx(Anchor, { href: `/lottery/${event.id}`, tone: "brand", rounded: "2xl", className: "block focus:outline-none focus-visible:ring-2 focus-visible:ring-primary", "aria-label": `${event.title} lottery`, children: _jsxs(Card, { variant: "default", padding: "none", animate: "hoverLift", className: "overflow-hidden", children: [event.coverImageUrl ? (_jsx(Div, { className: "relative aspect-video overflow-hidden", children: _jsx(MediaImage, { src: event.coverImageUrl, alt: event.title, size: "card" }) })) : (_jsx(Div, { className: "aspect-video", surface: "muted", align: "center", justify: "center", children: _jsx(Text, { size: "3xl", children: "\uD83C\uDFB0" }) })), _jsxs(Stack, { gap: "xs", padding: "md", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: event.status === "active"
+                            return (_jsx(Anchor, { href: `/lottery/${event.id}`, tone: "brand", rounded: "2xl", className: "block focus:outline-none focus-visible:ring-2 focus-visible:ring-primary", "aria-label": `${event.title} lottery`, children: _jsxs(Card, { variant: "default", padding: "none", animate: "hoverLift", className: "overflow-hidden", children: [event.coverImageUrl || event.coverImage?.url ? (_jsx(Div, { className: "relative aspect-video overflow-hidden", children: _jsx(MediaImage, { src: event.coverImageUrl || event.coverImage?.url || "", alt: event.title, size: "card" }) })) : (_jsx(Div, { className: "aspect-video", surface: "muted", align: "center", justify: "center", children: _jsx(Text, { size: "3xl", children: "\uD83C\uDFB0" }) })), _jsxs(Stack, { gap: "xs", padding: "md", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: event.status === "active"
                                                                 ? "success"
                                                                 : event.status === "ended"
                                                                     ? "danger"

package/dist/_internal/client/features/lottery/PrizeDrawLotteryDetailView.js

@@ -6,6 +6,8 @@ import { MediaImage } from "../../../../features/media/MediaImage";
 import { ROUTES } from "../../../../next/routing/route-map";
 import { LotterySlotGrid } from "./LotterySlotGrid";
 import { LotteryPullForm } from "./LotteryPullForm";
+import { PrizeDrawCollage } from "../../../../features/products/components/PrizeDrawCollage";
+import { slotsToCollageItems } from "./slot-collage-items";
 /**
  * Prize-draw product detail view for lottery mode.
  * Same flow as LotteryDetailView but sourced from a product.
@@ -15,6 +17,7 @@ export function PrizeDrawLotteryDetailView({ product, user, currentEntry, }) {
         ? currentEntry
         : null);
     const config = product.lotteryConfig;
+    const prizeItems = slotsToCollageItems(config?.slots ?? []);
     const isActive = product.status === "published";
-    return (_jsx(Container, { children: _jsx(Section, { children: _jsxs(Stack, { gap: "xl", children: [product.mainImage ? (_jsx(Div, { rounded: "2xl", className: "relative overflow-hidden", style: { aspectRatio: "16/9", maxHeight: "16rem" }, children: _jsx(MediaImage, { src: product.mainImage, alt: product.title, size: "hero" }) })) : (_jsx(Div, { rounded: "2xl", surface: "muted", padding: "xl", align: "center", justify: "center", children: _jsx(Text, { size: "5xl", children: "\uD83C\uDF81" }) })), _jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: "info", children: "Lottery Prize Draw" }), config && (_jsxs(Badge, { variant: isActive ? "success" : "secondary", children: [config.slots.filter((s) => s.isBooked).length, "/", config.totalSlots, " claimed"] }))] }), _jsx(Heading, { level: 1, size: "3xl", weight: "bold", children: product.title }), product.description ? (_jsx(Text, { color: "muted", children: product.description })) : null] }), config && config.slots.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Slots" }), _jsx(LotterySlotGrid, { slots: config.slots, totalSlots: config.totalSlots })] })) : null, isActive && config && (_jsx(Div, { padding: "md", rounded: "2xl", surface: "card", className: "border border-[var(--appkit-color-border)]", children: !user ? (_jsxs(Stack, { gap: "md", className: "text-center", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Want to Enter?" }), _jsx(Text, { color: "muted", children: "Log in to submit your entry." }), _jsx(Anchor, { href: String(ROUTES.AUTH.LOGIN), tone: "brand", children: "Log In to Enter" })] })) : pulledEntry ? (_jsxs(Stack, { gap: "sm", surface: "success-surface", padding: "md", rounded: "xl", className: "border border-success/20", children: [_jsxs(Heading, { level: 2, size: "lg", weight: "bold", className: "text-success", children: ["You're Entry #", pulledEntry.userLotteryNumber, "!"] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["Assigned to Slot #", pulledEntry.assignedPrizeSlotNumber, pulledEntry.slotName ? ` — ${pulledEntry.slotName}` : "", "."] })] })) : (_jsx(LotteryPullForm, { sourceType: "product", productId: product.id, totalSlots: config.totalSlots, maxPullsPerUser: config.maxPullsPerUser, onSuccess: (res) => setPulledEntry(res) })) }))] }) }) }));
+    return (_jsx(Container, { children: _jsx(Section, { children: _jsxs(Stack, { gap: "xl", children: [product.mainImage ? (_jsx(Div, { rounded: "2xl", className: "relative overflow-hidden", style: { aspectRatio: "16/9", maxHeight: "16rem" }, children: _jsx(MediaImage, { src: product.mainImage, alt: product.title, size: "hero" }) })) : (_jsx(Div, { rounded: "2xl", surface: "muted", padding: "xl", align: "center", justify: "center", children: _jsx(Text, { size: "5xl", children: "\uD83C\uDF81" }) })), _jsxs(Stack, { gap: "sm", children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, children: [_jsx(Badge, { variant: "info", children: "Lottery Prize Draw" }), config && (_jsxs(Badge, { variant: isActive ? "success" : "secondary", children: [config.slots.filter((s) => s.isBooked).length, "/", config.totalSlots, " claimed"] }))] }), _jsx(Heading, { level: 1, size: "3xl", weight: "bold", children: product.title }), product.description ? (_jsx(Text, { color: "muted", children: product.description })) : null] }), prizeItems.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Prizes" }), _jsx(PrizeDrawCollage, { items: prizeItems, wonLabel: "Claimed" })] })) : null, config && config.slots.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Slots" }), _jsx(LotterySlotGrid, { slots: config.slots, totalSlots: config.totalSlots })] })) : null, isActive && config && (_jsx(Div, { padding: "md", rounded: "2xl", surface: "card", className: "border border-[var(--appkit-color-border)]", children: !user ? (_jsxs(Stack, { gap: "md", className: "text-center", children: [_jsx(Heading, { level: 2, size: "xl", weight: "semibold", children: "Want to Enter?" }), _jsx(Text, { color: "muted", children: "Log in to submit your entry." }), _jsx(Anchor, { href: String(ROUTES.AUTH.LOGIN), tone: "brand", children: "Log In to Enter" })] })) : pulledEntry ? (_jsxs(Stack, { gap: "sm", surface: "success-surface", padding: "md", rounded: "xl", className: "border border-success/20", children: [_jsxs(Heading, { level: 2, size: "lg", weight: "bold", className: "text-success", children: ["You're Entry #", pulledEntry.userLotteryNumber, "!"] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["Assigned to Slot #", pulledEntry.assignedPrizeSlotNumber, pulledEntry.slotName ? ` — ${pulledEntry.slotName}` : "", "."] })] })) : (_jsx(LotteryPullForm, { sourceType: "product", productId: product.id, totalSlots: config.totalSlots, maxPullsPerUser: config.maxPullsPerUser, onSuccess: (res) => setPulledEntry(res) })) }))] }) }) }));
 }

package/dist/_internal/client/features/lottery/slot-collage-items.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Map lottery slots onto the shape `PrizeDrawCollage` renders.
+ *
+ * Shared by all three lottery surfaces (event lottery detail, prize-draw-mode
+ * lottery detail, and any future one) so the "which slots get a tile" rule
+ * cannot drift between them.
+ *
+ * Slots with no image are dropped rather than rendered as empty tiles: a
+ * lottery may have 200 slots and only a handful of photographed prizes, and a
+ * collage of placeholders communicates nothing. The numbered `LotterySlotGrid`
+ * below it is still the complete, authoritative slot map.
+ */
+import type { ClientLotterySlot } from "../../../../features/lottery/types";
+import type { CollagePrizeItem } from "../../../../features/products/components/PrizeDrawCollage";
+export declare function slotsToCollageItems(slots: readonly ClientLotterySlot[]): CollagePrizeItem[];

package/dist/_internal/client/features/lottery/slot-collage-items.js

@@ -0,0 +1,13 @@
+export function slotsToCollageItems(slots) {
+    return slots
+        .filter((slot) => Boolean(slot.image))
+        .map((slot) => ({
+        itemNumber: slot.slotNumber,
+        title: slot.name,
+        images: slot.image ? [slot.image] : [],
+        // `isBooked` is the lottery's equivalent of a prize being taken. The
+        // collage's own label prop renames the stamp to "Claimed" at the call
+        // site — price and weight never reach the client at all.
+        isWon: slot.isBooked,
+    }));
+}

package/dist/_internal/server/features/auctions/actions.js

@@ -32,9 +32,15 @@ export async function placeBidAction(input) {
         });
         // Now set this new bid as the winning bid
         await bidRepository.setWinningBid(bid.id, auctionId);
+        // `bidsHaveStarted` and `leadingBidderId` are set by the primary bid path
+        // (`features/auctions/actions/bid-actions.ts`) but were missing here, so a
+        // bid placed through this legacy entrypoint left both mirrors stale —
+        // CLAUDE.md Root Cause #42.
         const updates = {
             currentBid: amount,
             bidCount: (product.bidCount ?? 0) + 1,
+            leadingBidderId: user.uid,
+            bidsHaveStarted: true,
         };
         if (shouldAutoExtend(product)) {
             updates.auctionEndDate = computeExtendedEndDate(product);

package/dist/_internal/server/features/bundles/data.d.ts

@@ -40,6 +40,22 @@ export declare const listBundleMembers: (bundle: Pick<CategoryDocument, "bundleP
  * displayed discount.
  */
 export declare function resolveBundleOriginalTotal(productIds: string[]): Promise<number | undefined>;
+/**
+ * Union of the member products' `categorySlugs` — the `bundleCategorySlugs`
+ * mirror that lets a category page scope its Bundles tab.
+ *
+ * A bundle row has no category field of its own, which is why the category page
+ * counted every active bundle site-wide before this existed. Maintained at the
+ * same call sites as `resolveBundleOriginalTotal` so the two mirrors cannot
+ * drift apart.
+ *
+ * Unlike the price total, a partially-resolvable member set still yields a
+ * useful answer: over-inclusion (a bundle appearing under one category too many)
+ * is a far smaller error than a bundle vanishing from the category it belongs
+ * to, and readers already treat an ABSENT mirror as "unscoped" rather than
+ * "belongs nowhere" (Root Cause #42).
+ */
+export declare function resolveBundleCategorySlugs(productIds: string[]): Promise<string[]>;
 /**
  * List the most recent active bundles for homepage placement. Bounded to
  * `limit` (default 8) and filtered to `isActive: true` server-side.

package/dist/_internal/server/features/bundles/data.js

@@ -68,6 +68,32 @@ export async function resolveBundleOriginalTotal(productIds) {
     const total = prices.reduce((sum, p) => sum + p, 0);
     return Math.round(total * 100) / 100;
 }
+/**
+ * Union of the member products' `categorySlugs` — the `bundleCategorySlugs`
+ * mirror that lets a category page scope its Bundles tab.
+ *
+ * A bundle row has no category field of its own, which is why the category page
+ * counted every active bundle site-wide before this existed. Maintained at the
+ * same call sites as `resolveBundleOriginalTotal` so the two mirrors cannot
+ * drift apart.
+ *
+ * Unlike the price total, a partially-resolvable member set still yields a
+ * useful answer: over-inclusion (a bundle appearing under one category too many)
+ * is a far smaller error than a bundle vanishing from the category it belongs
+ * to, and readers already treat an ABSENT mirror as "unscoped" rather than
+ * "belongs nowhere" (Root Cause #42).
+ */
+export async function resolveBundleCategorySlugs(productIds) {
+    if (productIds.length === 0)
+        return [];
+    const results = await Promise.all(productIds.map((id) => productRepository.findById(id).catch(() => null)));
+    const slugs = new Set();
+    for (const p of results) {
+        for (const slug of p?.categorySlugs ?? [])
+            slugs.add(slug);
+    }
+    return [...slugs];
+}
 /**
  * List the most recent active bundles for homepage placement. Bounded to
  * `limit` (default 8) and filtered to `isActive: true` server-side.

package/dist/_internal/server/features/bundles/index.d.ts

@@ -1,4 +1,4 @@
-export { getBundleForDetail, listBundleMembers, listFeaturedBundles, getRelatedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, type BundleDataOptions, } from "./data";
+export { getBundleForDetail, listBundleMembers, listFeaturedBundles, getRelatedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, resolveBundleCategorySlugs, type BundleDataOptions, } from "./data";
 export { buildBundleMetadata, type BundleMetadataOptions } from "./metadata";
 export { renderBundleOg, renderBundleOgImage, type BundleOgData, } from "./og";
 export { addBundleToCartAction } from "./actions";

package/dist/_internal/server/features/bundles/index.js

@@ -1,4 +1,4 @@
-export { getBundleForDetail, listBundleMembers, listFeaturedBundles, getRelatedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, } from "./data";
+export { getBundleForDetail, listBundleMembers, listFeaturedBundles, getRelatedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, resolveBundleCategorySlugs, } from "./data";
 export { buildBundleMetadata } from "./metadata";
 // S-SBUNI-4 2026-05-13 — bundle OG renderer.
 export { renderBundleOg, renderBundleOgImage, } from "./og";

package/dist/_internal/server/features/checkout/actions.js

@@ -503,6 +503,9 @@ async function createOrderForGroup(group, orderType, ctx) {
         items: orderItems,
         orderType,
         offerId: firstItem.offerId ?? undefined,
+        // Distinguishes a Buy Now purchase from a settled auction win. Both are
+        // orderType "auction"; only this one gets the 24h admin-review window.
+        isBuyout: firstItem.isBuyout ? true : undefined,
         status: adminBypass ? OrderStatusValues.PROCESSING : OrderStatusValues.PENDING,
         paymentStatus: adminBypass ? PaymentStatusValues.PAID : PaymentStatusValues.PENDING,
         paymentMethod: adminBypass ? PaymentMethodValues.ADMIN_BYPASS : paymentMethod,
@@ -1216,6 +1219,9 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
         items: orderItems,
         orderType,
         offerId: firstItem.offerId ?? undefined,
+        // Distinguishes a Buy Now purchase from a settled auction win. Both are
+        // orderType "auction"; only this one gets the 24h admin-review window.
+        isBuyout: firstItem.isBuyout ? true : undefined,
         status: OrderStatusValues.CONFIRMED,
         paymentStatus: PaymentStatusValues.PAID,
         paymentMethod: PaymentMethodValues.ONLINE,

package/dist/_internal/server/features/checkout/locked-lines.d.ts

@@ -11,6 +11,38 @@ import type { CartItemDocument } from "../../../../features/cart/schemas/firesto
 export declare function assertCheckoutLane(allCartItems: readonly CartItemDocument[], selectedItems: readonly CartItemDocument[]): void;
 /** Error code the client maps to a lane-aware message. */
 export declare const CHECKOUT_LANE_BLOCKED = "CHECKOUT_LANE_BLOCKED";
+/** Why a buyout claim could not be converted into a sale. */
+type ClaimFailure = "NOT_FOUND" | "ALREADY_SOLD" | "AUCTION_ENDED" | "LAPSED" | "OUTBID" | "WRONG_BUYER";
+/**
+ * Convert a pending Buy Now claim into an actual sale, atomically.
+ *
+ * This is where a buyout is decided, and it is the ONLY place the auction is
+ * closed. `buyNowAuction` deliberately leaves the listing untouched: the auction
+ * keeps running, keeps taking bids, and keeps accepting other buyers' buyouts.
+ * That means several people can be holding a claim on the same auction at once,
+ * which is intentional — whoever reaches this transaction first gets the item,
+ * and everyone else is refused HERE, before their order is written and before
+ * any payment is captured.
+ *
+ * Four ways to lose, all of them checked inside the transaction against freshly
+ * read documents rather than against the caller's stale cart line:
+ *  - the auction is already sold (another buyout committed first);
+ *  - its clock ran out (settlement will award it to a real bidder — the user's
+ *    explicit rule: an unfinished buyout at auction end fails);
+ *  - the claim's own bid is no longer `active` (the deadline sweep cancelled it);
+ *  - bidding passed the buyout price, so buying out is no longer the better deal.
+ *
+ * Returns a discriminated result rather than throwing out of the transaction
+ * body, so each of these precise, buyer-readable refusals survives as itself
+ * instead of being reshaped by the transaction wrapper. The caller throws.
+ */
+export declare function claimAuctionForCheckout(item: CartItemDocument, buyerUid: string): Promise<{
+    ok: true;
+    bidAmount: number;
+} | {
+    ok: false;
+    reason: ClaimFailure;
+}>;
 /**
  * Re-validate every locked line immediately before the order is written.
  *
@@ -18,6 +50,11 @@ export declare const CHECKOUT_LANE_BLOCKED = "CHECKOUT_LANE_BLOCKED";
  * to the cart, but nothing re-checked at order time — so a buyer could add an
  * accepted offer, wait out the 48h window, and still be charged the locked
  * price. Throws on the first invalid line; the caller's transaction aborts.
+ *
+ * Auction lines were skipped entirely until 2026-08-24 (`if (!item.offerId)
+ * continue`), so a won auction's own `checkoutDeadline` had never been checked
+ * at order time at all — and a buyout claim, which is decided here, had nowhere
+ * to be decided.
  */
 export declare function assertLockedLinesStillValid(items: readonly CartItemDocument[], buyerUid: string): Promise<void>;
 /**
@@ -28,3 +65,4 @@ export declare function assertLockedLinesStillValid(items: readonly CartItemDocu
  * bookkeeping problem, refusing a completed order is a customer-facing one.
  */
 export declare function finalizeLockedLines(items: readonly CartItemDocument[], orderId: string): Promise<void>;
+export {};

package/dist/_internal/server/features/checkout/locked-lines.js

@@ -24,9 +24,15 @@
 import { offerRepository } from "../../../../features/seller/repository/offer.repository";
 import { bidRepository } from "../../../../repositories";
 import { OfferStatusValues } from "../../../../features/seller/schemas";
+import { BID_COLLECTION } from "../../../../features/auctions/schemas/firestore";
+import { PRODUCT_COLLECTION } from "../../../../features/products/schemas/firestore";
 import { ValidationError } from "../../../../errors";
+import { BID_ERROR_CODES } from "../../../../errors/error-codes";
+import { ERROR_MESSAGES } from "../../../../errors";
+import { getAdminDb } from "../../../../providers/db-firebase";
 import { serverLogger } from "../../../../monitoring/server-logger";
 import { normalizeError } from "../../../../errors/normalize";
+import { resolveDate } from "../../../../utils/date.formatter";
 import { activeLane, laneOf, laneBlockReason } from "../../../shared/checkout/lanes";
 /**
  * Refuse a checkout that isn't the cart's active lane.
@@ -49,6 +55,108 @@ export function assertCheckoutLane(allCartItems, selectedItems) {
 }
 /** Error code the client maps to a lane-aware message. */
 export const CHECKOUT_LANE_BLOCKED = "CHECKOUT_LANE_BLOCKED";
+const CLAIM_FAILURE_ERRORS = {
+    NOT_FOUND: {
+        message: ERROR_MESSAGES.BID.AUCTION_NOT_FOUND,
+        code: BID_ERROR_CODES.PRODUCT_NOT_FOUND,
+    },
+    ALREADY_SOLD: {
+        message: ERROR_MESSAGES.BID.AUCTION_ALREADY_SOLD,
+        code: BID_ERROR_CODES.AUCTION_ALREADY_SOLD,
+    },
+    AUCTION_ENDED: {
+        message: ERROR_MESSAGES.BID.AUCTION_ENDED_BEFORE_CHECKOUT,
+        code: BID_ERROR_CODES.AUCTION_ENDED_BEFORE_CHECKOUT,
+    },
+    LAPSED: {
+        message: ERROR_MESSAGES.BID.BUYOUT_LAPSED,
+        code: BID_ERROR_CODES.BUYOUT_LAPSED,
+    },
+    OUTBID: {
+        message: ERROR_MESSAGES.BID.BUYOUT_OUTBID,
+        code: BID_ERROR_CODES.BUYOUT_OUTBID,
+    },
+    WRONG_BUYER: {
+        message: ERROR_MESSAGES.BID.BUYOUT_LAPSED,
+        code: BID_ERROR_CODES.BUYOUT_LAPSED,
+    },
+};
+/**
+ * Convert a pending Buy Now claim into an actual sale, atomically.
+ *
+ * This is where a buyout is decided, and it is the ONLY place the auction is
+ * closed. `buyNowAuction` deliberately leaves the listing untouched: the auction
+ * keeps running, keeps taking bids, and keeps accepting other buyers' buyouts.
+ * That means several people can be holding a claim on the same auction at once,
+ * which is intentional — whoever reaches this transaction first gets the item,
+ * and everyone else is refused HERE, before their order is written and before
+ * any payment is captured.
+ *
+ * Four ways to lose, all of them checked inside the transaction against freshly
+ * read documents rather than against the caller's stale cart line:
+ *  - the auction is already sold (another buyout committed first);
+ *  - its clock ran out (settlement will award it to a real bidder — the user's
+ *    explicit rule: an unfinished buyout at auction end fails);
+ *  - the claim's own bid is no longer `active` (the deadline sweep cancelled it);
+ *  - bidding passed the buyout price, so buying out is no longer the better deal.
+ *
+ * Returns a discriminated result rather than throwing out of the transaction
+ * body, so each of these precise, buyer-readable refusals survives as itself
+ * instead of being reshaped by the transaction wrapper. The caller throws.
+ */
+export async function claimAuctionForCheckout(item, buyerUid) {
+    const productId = item.auctionId ?? item.productId;
+    const bidId = item.bidId;
+    if (!bidId)
+        return { ok: false, reason: "NOT_FOUND" };
+    const db = getAdminDb();
+    return db.runTransaction(async (tx) => {
+        const productRef = db.collection(PRODUCT_COLLECTION).doc(productId);
+        const bidRef = db.collection(BID_COLLECTION).doc(bidId);
+        const [productSnap, bidSnap] = await tx.getAll(productRef, bidRef);
+        if (!productSnap.exists || !bidSnap.exists) {
+            return { ok: false, reason: "NOT_FOUND" };
+        }
+        const product = productSnap.data();
+        const bid = bidSnap.data();
+        if (bid.userId !== buyerUid)
+            return { ok: false, reason: "WRONG_BUYER" };
+        if (bid.status !== "active")
+            return { ok: false, reason: "LAPSED" };
+        if (product.isSold === true)
+            return { ok: false, reason: "ALREADY_SOLD" };
+        const endDate = product.auctionEndDate ? resolveDate(product.auctionEndDate) : null;
+        if (endDate && endDate.getTime() <= Date.now()) {
+            return { ok: false, reason: "AUCTION_ENDED" };
+        }
+        const bidAmount = bid.bidAmount;
+        const standingBid = typeof product.currentBid === "number" ? product.currentBid : 0;
+        // `currentBid` never reflects a pending buyout (see BidDocument.isBuyout),
+        // so this compares against real bidding only — exactly the check the buyer
+        // passed when they started, re-run against the price as it is right now.
+        if (standingBid >= bidAmount) {
+            return { ok: false, reason: "OUTBID" };
+        }
+        tx.update(productRef, {
+            isSold: true,
+            availableQuantity: 0,
+            // Ends the auction NOW. Everything above has already established that
+            // nobody outbid the buyout price, so no bidder loses anything they would
+            // otherwise have won.
+            auctionEndDate: new Date(),
+            currentBid: bidAmount,
+            leadingBidderId: bid.userId,
+            bidsHaveStarted: true,
+            updatedAt: new Date(),
+        });
+        tx.update(bidRef, {
+            status: "won",
+            isWinning: true,
+            updatedAt: new Date(),
+        });
+        return { ok: true, bidAmount };
+    });
+}
 /**
  * Re-validate every locked line immediately before the order is written.
  *
@@ -56,10 +164,37 @@ export const CHECKOUT_LANE_BLOCKED = "CHECKOUT_LANE_BLOCKED";
  * to the cart, but nothing re-checked at order time — so a buyer could add an
  * accepted offer, wait out the 48h window, and still be charged the locked
  * price. Throws on the first invalid line; the caller's transaction aborts.
+ *
+ * Auction lines were skipped entirely until 2026-08-24 (`if (!item.offerId)
+ * continue`), so a won auction's own `checkoutDeadline` had never been checked
+ * at order time at all — and a buyout claim, which is decided here, had nowhere
+ * to be decided.
  */
 export async function assertLockedLinesStillValid(items, buyerUid) {
     const now = new Date();
     for (const item of items) {
+        // --- Auction lines: deadline for every one, plus the claim for a buyout ---
+        if (item.bidId || item.isAuctionWin) {
+            if (item.checkoutDeadline && now > resolveDate(item.checkoutDeadline)) {
+                throw new ValidationError(item.isBuyout
+                    ? ERROR_MESSAGES.BID.BUYOUT_LAPSED
+                    : "The payment window for this auction win has expired.", { code: item.isBuyout ? BID_ERROR_CODES.BUYOUT_LAPSED : undefined });
+            }
+            if (item.isBuyout) {
+                const claim = await claimAuctionForCheckout(item, buyerUid);
+                if (!claim.ok) {
+                    const { message, code } = CLAIM_FAILURE_ERRORS[claim.reason];
+                    serverLogger.info("claimAuctionForCheckout refused", {
+                        productId: item.auctionId ?? item.productId,
+                        bidId: item.bidId,
+                        buyerUid,
+                        reason: claim.reason,
+                    });
+                    throw new ValidationError(message, { code });
+                }
+            }
+            continue;
+        }
         if (!item.offerId)
             continue;
         const offer = await offerRepository.findById(item.offerId);
@@ -112,5 +247,41 @@ export async function finalizeLockedLines(items, orderId) {
                 });
             }
         }
+        if (item.isBuyout && item.bidId) {
+            await closeOutBuyoutLosers(item.auctionId ?? item.productId, item.bidId);
+        }
+    }
+}
+/**
+ * A buyout ended the auction, so everyone still bidding on it lost.
+ *
+ * Deliberately AFTER the claim transaction rather than inside it: the number of
+ * active bids on a hot auction is unbounded, and a transaction that touches all
+ * of them would either blow the 500-write limit or contend with every incoming
+ * bid. The claim only has to be atomic about who gets the ITEM; tidying up the
+ * losers is bookkeeping, so it is bounded, best-effort and logged.
+ *
+ * Their bids are `lost`, not `outbid` — the auction is over, which is the same
+ * distinction `auctionSettlement` draws.
+ */
+async function closeOutBuyoutLosers(productId, winningBidId) {
+    try {
+        const active = await bidRepository.getActiveByProduct(productId);
+        const losers = active.filter((e) => e.id !== winningBidId);
+        if (losers.length === 0)
+            return;
+        await bidRepository.markManyLost(losers.map((e) => e.ref));
+        serverLogger.info("finalizeLockedLines: buyout closed out losing bids", {
+            productId,
+            winningBidId,
+            losers: losers.length,
+        });
+    }
+    catch (err) {
+        void normalizeError(err);
+        serverLogger.error("finalizeLockedLines: buyout loser close-out failed", {
+            productId,
+            winningBidId,
+        });
     }
 }

package/dist/_internal/server/features/homepage/index.d.ts

@@ -1,2 +1 @@
-export { getHomepageInitial, getHomepageSections, getHeroCarouselSlides, } from "./data";
 export { HOMEPAGE_FEATURED_REVIEWS_LIMIT, HOMEPAGE_RECENT_BLOG_POSTS_LIMIT, HOMEPAGE_MAX_SECTIONS, } from "../../../shared/features/homepage/config";

package/dist/_internal/server/features/homepage/index.js

@@ -1,2 +1,8 @@
-export { getHomepageInitial, getHomepageSections, getHeroCarouselSlides, } from "./data";
+// `getHomepageInitial` / `getHomepageSections` / `getHeroCarouselSlides` lived
+// in ./data and were deleted 2026-08-24. All three had ZERO call sites — the
+// live homepage is `MarketplaceHomepageView`, which reads its repositories
+// directly — and the only part worth keeping, the feature-flag gate, moved to
+// `_internal/shared/features/homepage/section-gate.ts` and is now actually
+// applied. The rest was a Rule #6 liability: `findActiveAuctions()` /
+// `findActivePreOrders()` were unbounded `.get()` collection scans.
 export { HOMEPAGE_FEATURED_REVIEWS_LIMIT, HOMEPAGE_RECENT_BLOG_POSTS_LIMIT, HOMEPAGE_MAX_SECTIONS, } from "../../../shared/features/homepage/config";

package/dist/_internal/server/features/lottery/adapters.js

@@ -1,8 +1,12 @@
 /** Strip price and weight from a single slot for client consumption. */
 export function toClientLotterySlot(slot) {
+    // Allow-list, not a spread: every field named here is a deliberate public
+    // exposure with a known reader (§ Public Data Projections). `image` is read
+    // by the prize collage on the lottery detail page.
     return {
         slotNumber: slot.slotNumber,
         name: slot.name,
+        image: slot.image,
         isBooked: slot.isBooked,
         bookedByUserLotteryNumber: slot.bookedByUserLotteryNumber,
         bookedByDisplayName: slot.bookedByDisplayName,