@mohasinac/appkit 4.27.0 → 4.29.0

package/dist/features/tester/seed-data/tester-checklist-seed-data.js

@@ -174,6 +174,29 @@ const rawTesterChecklistItems = [
                 { key: "browse-categories", label: "Browsing categories shows relevant products", href: "/categories" },
                 { key: "search", label: "Search returns relevant results", href: "/search" },
                 { key: "filters", label: "Search/listing filters (price, brand, condition) work correctly" },
+                {
+                    key: "homepage-prize-draws-section",
+                    label: "The homepage shows a \"Prize Draws\" strip with real cards — NOT an empty gap and NOT a \"Something went wrong\" block",
+                    description: "This section crashed the entire homepage in production (React error 441) until 2026-08-26. Scroll the whole homepage: every strip should render or be cleanly absent. If any single strip is replaced by an error message while the rest of the page is fine, that is the section boundary doing its job — report which strip.",
+                    href: "/",
+                },
+                {
+                    key: "homepage-event-raffles-section",
+                    label: "If there are active raffle events, the homepage shows a \"Live Raffles & Spin Wheels\" strip",
+                    description: "This section silently rendered nothing in production — it looked exactly like \"no active raffles\". Cross-check against /events: if an event with a raffle is active there but no strip appears on the homepage, that is a bug.",
+                    href: "/",
+                },
+                {
+                    key: "listing-no-missing-message",
+                    label: "Open the browser console on /products and confirm there are NO \"MISSING_MESSAGE\" errors",
+                    description: "Press F12 → Console tab, then load the page. A missing translation key logs 'MISSING_MESSAGE: <key>' and renders the raw key text instead of a readable label. Report the exact key name if you see one.",
+                    href: "/products",
+                },
+                {
+                    key: "product-filter-status-labels",
+                    label: "In an admin/seller listing's filter drawer, every Status option reads as words (Published / Draft / In Review / Archived) — never a raw key like \"filters.statusInReview\"",
+                    href: "/products",
+                },
                 { key: "pagination", label: "Pagination / infinite scroll works on listing pages" },
                 {
                     key: "compare-custom-fields",
@@ -1486,7 +1509,7 @@ const rawTesterChecklistItems = [
                 {
                     key: "store-feature-edit-page-exists",
                     label: "A store feature badge can be edited on its own page, not only in a drawer",
-                    description: "ROUTES.STORE.FEATURES_EDIT pointed at /store/features/[id]/edit with no page behind it and no caller anywhere — a dead route key. Open a badge's edit page directly by URL and confirm it loads with the badge's current values.",
+                    description: "ROUTES.STORE.FEATURES_EDIT used to point at /store/features/[id]/edit with no page behind it. The page exists now, but nothing links to it yet — so open a badge's edit page directly by URL and confirm it loads with that badge's current values, not an empty form.",
                     href: "/store/features",
                 },
                 {
@@ -1790,6 +1813,12 @@ const rawTesterChecklistItems = [
             pageLabel: "Become a Seller & Store Setup",
             href: "/user/become-seller",
             cases: [
+                {
+                    key: "sell-redirect",
+                    label: "Visiting /sell redirects to the Become a Seller page — it must NOT show \"Something went wrong\"",
+                    description: "In production this returned a 200 carrying an error instead of redirecting, so the whole seller-onboarding entry point was dead while looking healthy to monitoring. Type /sell in the address bar directly; the URL should end up on /user/become-seller.",
+                    href: "/sell",
+                },
                 { key: "apply-seller", label: "Applying to become a seller works", href: "/user/become-seller" },
                 { key: "store-setup", label: "Setting up store name/description/logo works" },
                 { key: "store-address", label: "Adding a pickup address for the store works" },
@@ -2688,6 +2717,12 @@ const rawTesterChecklistItems = [
             cases: [
                 { key: "carousel-loops", label: "Homepage carousels (Shop by Category, Top Brands, Featured Products, Live Auctions, Reserve Before It Ships, Verified Stores, Tournaments & Events, Collector Reviews) loop back to the first item after reaching the last instead of getting stuck at the end", href: "/" },
                 { key: "carousel-no-flicker", label: "Homepage carousel auto-scroll does not flash/flicker when looping back to the first item" },
+                {
+                    key: "hero-carousel-video-plays",
+                    label: "The hero carousel slide with a video background actually PLAYS the video — not a blank/black panel",
+                    description: "Open the browser console (F12 → Console) while the homepage loads. There must be no 'Load of media resource … failed' or 404 for a .mp4. If the slide is blank, note the failing URL from the console's Network tab.",
+                    href: "/",
+                },
                 { key: "carousel-pause-on-interaction", label: "Homepage carousel auto-scroll pauses while hovering, touching, keyboard-focusing (Tab + arrow keys), or scrolling it, and resumes afterward" },
                 { key: "carousel-arrows-work", label: "Homepage carousel prev/next arrow buttons work and wrap around at both ends" },
                 { key: "hero-banner-loops", label: "Hero banner at the top of the homepage rotates through all slides and loops back to the first without getting stuck" },
@@ -3690,6 +3725,108 @@ const rawTesterChecklistItems = [
         version: 2,
         previousVersionId: "checklist-admin-bug-hunter-rewards-demo-fixture",
     },
+    ...group("page-wiring", "Page Wiring & Reachability", [
+        {
+            pageKey: "drawer-pages",
+            pageLabel: "Editors that are also pages",
+            href: "/admin/team",
+            cases: [
+                {
+                    key: "page-drawer-opens-already-open",
+                    label: "Opening an editor page directly shows the panel ALREADY OPEN",
+                    description: "Go to /admin/team/new by URL. The invite panel must already be open — not a blank page you have to click into. Close it and you should land back on /admin/team, not on a dead route. Same for /admin/navigation/new and /admin/tester-checklist/new.",
+                },
+                {
+                    key: "page-drawer-deep-link-survives-reload",
+                    label: "A deep link to an editor survives a reload",
+                    description: "Open a team member's edit page, then reload. The panel is still open, on the same record. This is the whole reason these pages exist — a drawer alone cannot be bookmarked, shared with a colleague, or reopened after a crash.",
+                },
+            ],
+        },
+        {
+            pageKey: "detail-pages",
+            pageLabel: "Record detail pages",
+            href: "/admin/bids",
+            cases: [
+                {
+                    key: "detail-page-matches-list-modal",
+                    label: "A bid's detail PAGE shows the same fields as the list's modal",
+                    description: "Open a bid from /admin/bids (a modal opens) and note the fields. Now open /admin/bids/{id}/view directly. The fields must be identical — both are built by one buildBidDetailFields, so any difference means a second copy has appeared and the two will drift.",
+                },
+                {
+                    key: "detail-page-hides-identity-per-portal",
+                    label: "The buyer's own bid page does NOT reveal other bidders",
+                    description: "Open the same bid at /admin/bids/{id}/view and at /user/bids/{id}/view. The buyer view must not show the other bidder's identity. One `viewer` argument decides this, in one place — if the buyer view leaks a name, that argument is being ignored somewhere.",
+                },
+            ],
+        },
+        {
+            pageKey: "data-loss",
+            pageLabel: "Saves that used to destroy data",
+            href: "/admin/lotteries",
+            cases: [
+                {
+                    key: "lottery-edit-preserves-bookings",
+                    label: "🛑 Editing a lottery does NOT wipe slots people already pulled",
+                    description: "On a seeded lottery, pull/book a slot first. Then open the admin lottery editor, change something unrelated (rename a different slot), and save. Reopen: the booked slot must STILL be booked, with the same buyer name and lottery number. Before this wave the editor sent isBooked:false for every slot and the event PATCH let it through, so the first save erased every purchased slot — with a success message and no error anywhere.",
+                },
+                {
+                    key: "lottery-booked-slot-cannot-be-deleted",
+                    label: "Removing a slot somebody already pulled is refused, by number",
+                    description: "In the same editor, try to delete the slot that has been booked. The save must fail and name that slot number. It is a conflict, not a form error — the correct next action is to reopen the pull, not to fix a field.",
+                },
+                {
+                    key: "admin-grouped-listing-title-actually-saves",
+                    label: "🛑 An admin renaming a grouped listing actually persists it",
+                    description: "Edit a grouped listing's title at /admin/grouped-listings/{id}/edit, save, then RELOAD. The new title must still be there. Reloading is the only way to tell: the old admin PATCH accepted productIds only and silently dropped everything else, so it returned a perfectly normal 200 and wrote nothing.",
+                    href: "/admin/grouped-listings",
+                },
+                {
+                    key: "store-address-landmark-survives-edit",
+                    label: "🛑 A store address keeps its landmark through an edit",
+                    description: "Create a store pickup address from the /store/addresses drawer WITH a landmark filled in. Now edit that address at /store/addresses/{id}/edit, change anything else, and save. The landmark must still be set. The shared address form had no landmark field, so it sent undefined and dropped it on every edit.",
+                    href: "/store/addresses",
+                },
+            ],
+        },
+        {
+            pageKey: "reachability",
+            pageLabel: "Everything built is reachable",
+            href: "/admin",
+            cases: [
+                {
+                    key: "lottery-can-be-created-without-seeding",
+                    label: "An admin can create a lottery end to end, with no seed script",
+                    description: "Create an event of type Lottery from /admin/events/new (the type must be offered — it was missing from the picker entirely), then configure its slots from /admin/lotteries/{id}/edit, then pull a slot as a buyer. Until this wave lottery events could ONLY come from `npm run seed`.",
+                    href: "/admin/events/new",
+                },
+                {
+                    key: "carousel-can-be-renamed",
+                    label: "A named carousel can be renamed after it is created",
+                    description: "Open /admin/carousels, pick a carousel, use Edit carousel, change its name and status, save. There was no edit path at all: the group editor was create-only, so a carousel's name was fixed for its whole life.",
+                    href: "/admin/carousels",
+                },
+                {
+                    key: "grouped-listing-members-editable-from-its-own-page",
+                    label: "A grouped listing's MEMBERS can be picked while creating it",
+                    description: "Create a group at /store/grouped-listings/new and add products in the same form. Previously productIds was hardcoded to an empty array, so a group could only ever be created empty and filled in from somewhere else. Check the minimum-active-members and cover-image fields are present too — neither had an input anywhere.",
+                    href: "/store/grouped-listings/new",
+                },
+                {
+                    key: "public-nav-and-footer-resolve",
+                    label: "Every header, sidebar-support and footer link opens a real page",
+                    description: "Walk the public header nav, the sidebar support links and every footer column. All 55 hrefs must land on a real page. No audit checked ANY of them until this wave — the nav audit only ever looked at the three portal sidebars.",
+                    href: "/",
+                },
+                {
+                    key: "user-tester-hub-reachable-from-user-sidebar",
+                    label: "A tester reaches the Tester Hub from their OWN sidebar",
+                    description: "As a user with the tester flag, open /user and find Tester Hub in the sidebar under Testing. The group is injected at runtime and is empty for non-testers — confirm a NON-tester account does not see it.",
+                    href: "/user",
+                },
+            ],
+        },
+    ]),
 ];
 const defaultPhases = assignDefaultPhases(rawTesterChecklistItems);
 export const testerChecklistSeedData = rawTesterChecklistItems.map((item, index) => ({

package/dist/features/wishlist/components/WishlistHeartButton.d.ts

@@ -0,0 +1,55 @@
+import type { MouseEvent } from "react";
+/** The heart renders a <button>, so handlers get the real element type. */
+type HeartMouseEvent = MouseEvent<HTMLButtonElement>;
+/**
+ * Where the heart sits, which decides its box — never passed as a raw size.
+ *
+ * - `card`   — the only affordance in its corner of a product card. 44px, the
+ *              minimum comfortable tap target.
+ * - `inline` — sits in a row beside a title or price. 40px.
+ * - `detail` — a product detail page's standalone control. 48px.
+ */
+declare const PLACEMENT_SIZE: {
+    readonly inline: "md";
+    readonly card: "touch";
+    readonly detail: "lg";
+};
+export type WishlistHeartPlacement = keyof typeof PLACEMENT_SIZE;
+export interface WishlistHeartButtonProps {
+    inWishlist: boolean;
+    isLoading?: boolean;
+    onToggle: (e: HeartMouseEvent) => void | Promise<void>;
+    addLabel: string;
+    removeLabel: string;
+    /** See PLACEMENT_SIZE. */
+    size?: WishlistHeartPlacement;
+    /**
+     * `overlay` floats above product imagery and needs its own backdrop;
+     * `plain` sits on an ordinary surface.
+     */
+    variant?: "overlay" | "plain";
+    className?: string;
+}
+/**
+ * The ONE wishlist heart.
+ *
+ * WHY: there were seven render sites using THREE different glyph technologies —
+ * an inline `<svg>` (product grid card), lucide `<Heart>` at two different sizes
+ * (auction card list vs grid), and the text characters `♥`/`♡` (product list
+ * row, both pre-order card layouts, and baked into the detail page's label
+ * strings). Text glyphs cannot be sized by `w-*`/`h-*` at all and fall back to a
+ * platform font, which is literally the "the wishlist icon is very small"
+ * report. The auction card's lucide heart was 14px inside a `md` Button whose
+ * min-height is ~44px, so the largest tap target carried the smallest glyph.
+ *
+ * Built on `IconButton`, not `Button`: `.appkit-button--sm` sets
+ * `min-height: 36px` and, under `important: true`, beats a caller's `h-8`, so
+ * the product card's heart rendered as a 32x36 ellipse under `rounded-full`.
+ * `IconButton` boxes are true squares.
+ *
+ * 🛑 It owns NO auth modal. `useAuthGate` is the single gate (Rule #7) and the
+ * caller wraps `onToggle` in `requireAuth`. The predecessor this replaces kept
+ * its own `LoginRequiredModal` and would have raced the gate's.
+ */
+export declare function WishlistHeartButton({ inWishlist, isLoading, onToggle, addLabel, removeLabel, size, variant, className, }: WishlistHeartButtonProps): import("react").JSX.Element;
+export {};

package/dist/features/wishlist/components/WishlistHeartButton.js

@@ -0,0 +1,52 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+import { IconButton, Icon } from "../../../ui";
+import { ICON_BUTTON_ICON_SIZE } from "../../../ui/components/IconButton";
+/**
+ * Where the heart sits, which decides its box — never passed as a raw size.
+ *
+ * - `card`   — the only affordance in its corner of a product card. 44px, the
+ *              minimum comfortable tap target.
+ * - `inline` — sits in a row beside a title or price. 40px.
+ * - `detail` — a product detail page's standalone control. 48px.
+ */
+const PLACEMENT_SIZE = {
+    inline: "md",
+    card: "touch",
+    detail: "lg",
+};
+/**
+ * The ONE wishlist heart.
+ *
+ * WHY: there were seven render sites using THREE different glyph technologies —
+ * an inline `<svg>` (product grid card), lucide `<Heart>` at two different sizes
+ * (auction card list vs grid), and the text characters `♥`/`♡` (product list
+ * row, both pre-order card layouts, and baked into the detail page's label
+ * strings). Text glyphs cannot be sized by `w-*`/`h-*` at all and fall back to a
+ * platform font, which is literally the "the wishlist icon is very small"
+ * report. The auction card's lucide heart was 14px inside a `md` Button whose
+ * min-height is ~44px, so the largest tap target carried the smallest glyph.
+ *
+ * Built on `IconButton`, not `Button`: `.appkit-button--sm` sets
+ * `min-height: 36px` and, under `important: true`, beats a caller's `h-8`, so
+ * the product card's heart rendered as a 32x36 ellipse under `rounded-full`.
+ * `IconButton` boxes are true squares.
+ *
+ * 🛑 It owns NO auth modal. `useAuthGate` is the single gate (Rule #7) and the
+ * caller wraps `onToggle` in `requireAuth`. The predecessor this replaces kept
+ * its own `LoginRequiredModal` and would have raced the gate's.
+ */
+export function WishlistHeartButton({ inWishlist, isLoading = false, onToggle, addLabel, removeLabel, size = "inline", variant = "plain", className = "", }) {
+    const label = inWishlist ? removeLabel : addLabel;
+    const box = PLACEMENT_SIZE[size];
+    return (_jsx(IconButton, { type: "button", "aria-label": label, title: label, size: box, variant: "ghost", rounded: "full", disabled: isLoading, "aria-pressed": inWishlist, onClick: (e) => void onToggle(e), className: [
+            "transition-colors duration-150",
+            variant === "overlay"
+                ? "bg-[var(--appkit-color-surface-elevated)]/90 shadow-sm backdrop-blur-sm"
+                : "",
+            isLoading ? "opacity-50" : "",
+            className,
+        ]
+            .filter(Boolean)
+            .join(" "), icon: _jsx(Icon, { name: "wishlist", size: ICON_BUTTON_ICON_SIZE[box], filled: inWishlist, tone: inWishlist ? "error" : "muted" }) }));
+}

package/dist/features/wishlist/components/index.d.ts

@@ -1,5 +1,6 @@
 export { WishlistCard, WishlistPage } from "./WishlistPage";
-export { WishlistToggleButton } from "./WishlistToggleButton";
+export { WishlistHeartButton } from "./WishlistHeartButton";
+export type { WishlistHeartButtonProps, WishlistHeartPlacement } from "./WishlistHeartButton";
 export { WishlistView } from "./WishlistView";
 export type { WishlistViewProps, WishlistTab } from "./WishlistView";
 export { WishlistCapWatcher } from "./WishlistCapWatcher";

package/dist/features/wishlist/components/index.js

@@ -1,4 +1,4 @@
 export { WishlistCard, WishlistPage } from "./WishlistPage";
-export { WishlistToggleButton } from "./WishlistToggleButton";
+export { WishlistHeartButton } from "./WishlistHeartButton";
 export { WishlistView } from "./WishlistView";
 export { WishlistCapWatcher } from "./WishlistCapWatcher";

package/dist/index.d.ts

@@ -1755,6 +1755,10 @@ export { EVENTS_COLLECTION } from "./features/events/index";
 export { EVENT_ADMIN_SORT_OPTIONS } from "./features/events/index";
 export { EVENT_ENTRIES_COLLECTION } from "./features/events/index";
 export { LOTTERY_ENTRIES_COLLECTION } from "./features/lottery/schemas/firestore";
+export { supportTicketCreateSchema } from "./features/support/schemas/ticket-create-form";
+export type { SupportTicketCreateValues } from "./features/support/schemas/ticket-create-form";
+export { lotteryConfigWriteSchema, lotterySlotWriteSchema, mergeLotteryConfig } from "./features/lottery/schemas/config-write";
+export type { LotteryConfigWriteInput, LotteryMergeResult } from "./features/lottery/schemas/config-write";
 export { lotteryEntriesSeedData } from "./seed/index";
 export { LOTTERY_ENTRY_FIELDS } from "./features/lottery/schemas/firestore";
 export { EVENT_ENTRY_FIELDS } from "./features/events/index";
@@ -1839,6 +1843,7 @@ export type { EventListResponse } from "./features/events/index";
 export type { EventParticipateViewProps } from "./features/events/index";
 export type { EventStatus } from "./features/events/index";
 export type { EventType } from "./features/events/index";
+export { ALL_EVENT_TYPES, ALL_EVENT_STATUSES } from "./features/events/index";
 export type { EventUpdateInput } from "./features/events/index";
 export type { FeedbackConfig } from "./features/events/index";
 export type { FormFieldType } from "./features/events/index";
@@ -3018,7 +3023,7 @@ export { sendWhatsAppBusinessMessage, syncProductsToCatalog, buildPurchaseAnnoun
 export type { WaBusinessSendInput, CatalogSyncProduct, CatalogSyncInput, CatalogSyncResult, PurchaseAnnouncementInput } from "./features/whatsapp-bot/index";
 export { WishlistCard } from "./features/wishlist/index";
 export { WishlistPage } from "./features/wishlist/index";
-export { WishlistToggleButton } from "./features/wishlist/index";
+export { WishlistHeartButton } from "./features/wishlist/index";
 export { WishlistView } from "./features/wishlist/index";
 export { buildWishlistColumns } from "./features/wishlist/index";
 export { useUserWishlist } from "./features/wishlist/index";
@@ -3091,6 +3096,8 @@ export { ToastProvider, StarRating, StepperNav, ViewToggle, PriceDisplay, Summar
 export { CountdownDisplay, ItemRow, HorizontalScroller } from "./ui/index";
 export { CardBody, MenuTrigger, MenuContent, MenuSeparator, RoleBadge, SkipToMain } from "./ui/index";
 export { Tabs, TabsList, TabsTrigger, TabsContent, PasswordStrengthIndicator, TablePagination } from "./ui/index";
+export { TabBarShell, TabBarButton, TabsNavSelect } from "./ui/index";
+export type { TabBarShellProps, TabBarButtonProps, TabsNavSelectProps } from "./ui/index";
 export { Stack, classNames, mergeTailwindClasses, SideModal, SideDrawer, RichText, RichTextRenderer } from "./ui/index";
 export type { RichTextRendererProps } from "./ui/index";
 export { SlottedListingView, DetailViewShell, StackedViewShell } from "./ui/index";
@@ -3132,7 +3139,7 @@ export { formatMonthYear } from "./utils/date.formatter";
 export { generateMediaFilename } from "./utils/id-generators";
 export { deriveContextTypeFromFilename } from "./utils/id-generators";
 export type { MediaFilenameContext } from "./utils/id-generators";
-export { resolveMediaUrl, FIREBASE_STORAGE_HOST, GCS_HOST } from "./utils/media-url";
+export { resolveMediaUrl, resolveVideoUrl, FIREBASE_STORAGE_HOST, GCS_HOST } from "./utils/media-url";
 export { generateFAQId } from "./utils/id-generators";
 export type { GenerateFAQIdInput } from "./utils/id-generators";
 export { generateCroppedImageFilename } from "./utils/id-generators";
@@ -3245,7 +3252,7 @@ export { TABLE_KEYS, VIEW_MODE } from "./constants/table-keys";
 export type { TableKey, ViewMode } from "./constants/table-keys";
 export { SIEVE_OP, SIEVE_PIPE_OPS, sieveFilter, sieveMultiEq, expandSieveParam, sieveAnd, } from "./utils/sieve-builder";
 export type { SieveOp } from "./utils/sieve-builder";
-export { buildSearchTokens, tokenizeQuery } from "./utils/search-tokens";
+export { buildSearchTxt, parseSearchTxtQuery, matchesAllSearchTerms, normalizeSearchText, type SearchTxtOptions, } from "./utils/search-txt";
 export { ActionPermissionsManager } from "./features/site-settings/components/ActionPermissionsManager";
 export type { ActionPermissionsManagerProps } from "./features/site-settings/components/ActionPermissionsManager";
 export { NavPermissionsManager } from "./features/site-settings/components/NavPermissionsManager";

package/dist/index.js

@@ -3313,6 +3313,10 @@ export { EVENT_ADMIN_SORT_OPTIONS } from "./features/events/index";
 export { EVENT_ENTRIES_COLLECTION } from "./features/events/index";
 // LOTTERY_ENTRIES_COLLECTION - New lotteryEntries collection constant.
 export { LOTTERY_ENTRIES_COLLECTION } from "./features/lottery/schemas/firestore";
+export { supportTicketCreateSchema } from "./features/support/schemas/ticket-create-form";
+// The lotteryConfig WRITE contract + the booking-preserving merge. The only
+// sanctioned way to write lotteryConfig — see the schema module's header.
+export { lotteryConfigWriteSchema, lotterySlotWriteSchema, mergeLotteryConfig } from "./features/lottery/schemas/config-write";
 // lotteryEntriesSeedData - Seed data for the lotteryEntries collection.
 export { lotteryEntriesSeedData } from "./seed/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
@@ -3445,6 +3449,11 @@ export { useEventLeaderboard } from "./features/events/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useEvents - React hook for use events.
 export { useEvents } from "./features/events/index";
+// ALL_EVENT_TYPES / ALL_EVENT_STATUSES - derived from a `Record<Union, true>`,
+// so a union member missing from either is a COMPILE error rather than a
+// silently short list. Exported because consumers were hand-writing their own
+// copies and drifting (Root Cause #61).
+export { ALL_EVENT_TYPES, ALL_EVENT_STATUSES } from "./features/events/index";
 // ./features/events/server
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // adminGetEventById - Shared export for admin get event by id.
@@ -5387,8 +5396,10 @@ export { WishlistCard } from "./features/wishlist/index";
 // WishlistPage - Component for wishlist page.
 export { WishlistPage } from "./features/wishlist/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// WishlistToggleButton - Component for wishlist toggle button.
-export { WishlistToggleButton } from "./features/wishlist/index";
+// WishlistHeartButton - the single wishlist heart. Replaced
+// WishlistToggleButton, which was dead code with its own competing
+// LoginRequiredModal; see the component for the full rationale.
+export { WishlistHeartButton } from "./features/wishlist/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // WishlistView - Component for wishlist view.
 export { WishlistView } from "./features/wishlist/index";
@@ -5487,6 +5498,8 @@ export { ToastProvider, StarRating, StepperNav, ViewToggle, PriceDisplay, Summar
 export { CountdownDisplay, ItemRow, HorizontalScroller } from "./ui/index";
 export { CardBody, MenuTrigger, MenuContent, MenuSeparator, RoleBadge, SkipToMain } from "./ui/index";
 export { Tabs, TabsList, TabsTrigger, TabsContent, PasswordStrengthIndicator, TablePagination } from "./ui/index";
+// TabBarShell - rail + overflow scroll arrows around a role="tablist"; TabBarButton / TabsNavSelect - its two trigger flavours
+export { TabBarShell, TabBarButton, TabsNavSelect } from "./ui/index";
 export { Stack, classNames, mergeTailwindClasses, SideModal, SideDrawer, RichText, RichTextRenderer } from "./ui/index";
 export { SlottedListingView, DetailViewShell, StackedViewShell } from "./ui/index";
 export { buildColumns, createColumnBuilder } from "./ui/index";
@@ -5537,7 +5550,7 @@ export { formatCurrency, formatFileSize } from "./utils/number.formatter";
 export { formatMonthYear } from "./utils/date.formatter";
 export { generateMediaFilename } from "./utils/id-generators"; // generateProductImageFilename already exported from "./utils/id-generators";
 export { deriveContextTypeFromFilename } from "./utils/id-generators";
-export { resolveMediaUrl, FIREBASE_STORAGE_HOST, GCS_HOST } from "./utils/media-url";
+export { resolveMediaUrl, resolveVideoUrl, FIREBASE_STORAGE_HOST, GCS_HOST } from "./utils/media-url";
 export { generateFAQId } from "./utils/id-generators";
 export { generateCroppedImageFilename } from "./utils/id-generators";
 // Messages / Conversations feature schemas
@@ -5655,7 +5668,9 @@ export { SORT_DIR, sortBy } from "./constants/sort";
 export { TABLE_KEYS, VIEW_MODE } from "./constants/table-keys";
 // ── Sieve query builder ───────────────────────────────────────────────────────
 export { SIEVE_OP, SIEVE_PIPE_OPS, sieveFilter, sieveMultiEq, expandSieveParam, sieveAnd, } from "./utils/sieve-builder";
-export { buildSearchTokens, tokenizeQuery } from "./utils/search-tokens";
+// searchTxt — normalized edge-n-gram search field. Supersedes search-tokens;
+// see appkit/src/utils/search-txt.ts for why it is an array and not a string.
+export { buildSearchTxt, parseSearchTxtQuery, matchesAllSearchTerms, normalizeSearchText, } from "./utils/search-txt";
 // [CLIENT-ONLY] — Admin panel components for action/nav permission management.
 export { ActionPermissionsManager } from "./features/site-settings/components/ActionPermissionsManager";
 export { NavPermissionsManager } from "./features/site-settings/components/NavPermissionsManager";

package/dist/monitoring/error-tracking.js

@@ -23,12 +23,46 @@ export var ErrorCategory;
     ErrorCategory["UNKNOWN"] = "unknown";
 })(ErrorCategory || (ErrorCategory = {}));
 const TRACKER_KEY = "__mohasinac_error_tracker__";
+/**
+ * Default sink — structured, severity-tagged JSON on the server.
+ *
+ * `setErrorTracker()` is exported so an app can install Sentry or similar, and
+ * its only reference anywhere in this repo was its own doc comment: nothing ever
+ * called it. So every tracked error went out as a plain `console.error` string,
+ * which Cloud Logging files as unparsed DEFAULT severity — invisible to any
+ * severity filter or alert.
+ *
+ * Emitting `{severity, message, stack}` fixes that with no dependency and no
+ * DSN: GCP Error Reporting automatically ingests ERROR-severity log entries
+ * that carry a stack trace.
+ *
+ * The formatting is inlined rather than delegated to `serverLogger` on purpose.
+ * This module is re-exported from `client.ts`, and `server-logger` imports
+ * `next/server` — importing it here would pull server-only code along every
+ * client import chain, which is how Root Cause #24 gets reproduced. Eight lines
+ * of duplicated shape is the cheaper trade.
+ */
+function defaultTracker(error, category, severity, context) {
+    const isError = error instanceof Error;
+    const message = isError ? error.message : error;
+    // In a browser there is no log collector to parse JSON, and a readable console
+    // entry is worth more to whoever is looking at it.
+    if (typeof window !== "undefined") {
+        console.error(`[${severity.toUpperCase()}][${category}] ${message}`, context);
+        return;
+    }
+    console.error(JSON.stringify({
+        severity: "ERROR",
+        message,
+        category,
+        errorSeverity: severity,
+        timestamp: new Date().toISOString(),
+        ...(isError && error.stack ? { stack: error.stack } : {}),
+        ...(context ? { context } : {}),
+    }));
+}
 function getTracker() {
-    return (globalThis[TRACKER_KEY] ??
-        ((error, category, severity, context) => {
-            const msg = error instanceof Error ? error.message : error;
-            console.error(`[${severity.toUpperCase()}][${category}] ${msg}`, context);
-        }));
+    return globalThis[TRACKER_KEY] ?? defaultTracker;
 }
 /** Override the default console-based tracker with a custom implementation. */
 export function setErrorTracker(fn) {

package/dist/monitoring/server-logger.js

@@ -18,7 +18,26 @@ function getLogsDir() {
 }
 const MAX_LOG_FILE_SIZE = 10 * 1024 * 1024;
 const MAX_LOG_FILES = 10;
-const isFileLoggingEnabled = !process.env.VERCEL;
+/**
+ * File logging is OPT-IN, not "anywhere that isn't Vercel".
+ *
+ * This was `!process.env.VERCEL`, which is `true` inside Cloud Functions — where
+ * `VERCEL` is simply unset and the filesystem is read-only. Every log line in
+ * every Function therefore ran mkdir/stat/appendFile, failed, and emitted a
+ * SECOND line carrying the EROFS stack: every Function log doubled, plus four
+ * wasted syscalls per line, against a log buffer that drops at ~4 KB/s
+ * (CLAUDE.md Rule #6).
+ *
+ * Serverless runtimes have no durable disk and their stdout is already
+ * collected, so the only place local files help is a developer machine.
+ * `LOG_TO_FILE=1` turns it on there; nothing else does.
+ */
+const isServerlessRuntime = Boolean(process.env.VERCEL ||
+    process.env.FUNCTION_TARGET || // Cloud Functions (2nd gen)
+    process.env.K_SERVICE || // Cloud Run / Functions
+    process.env.FUNCTIONS_EMULATOR ||
+    process.env.AWS_LAMBDA_FUNCTION_NAME);
+const isFileLoggingEnabled = process.env.LOG_TO_FILE === "1" && !isServerlessRuntime;
 function serializeError(error) {
     const serialized = {
         name: error.name,
@@ -136,46 +155,65 @@ async function writeLog(entry) {
         console.error("Failed to write log:", error);
     }
 }
-export const serverLogger = {
-    debug(message, data) {
-        const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
-        console.debug(`[DEBUG] ${message}`, sanitized);
-    },
-    info(message, data) {
-        const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
-        const entry = {
-            level: "info",
+/**
+ * Cloud Logging severity names. GCP parses a JSON stdout line and promotes
+ * `severity` into the real log level; a plain `[INFO] msg` string arrives as
+ * unparsed `DEFAULT`-severity text, which is what every appkit server log has
+ * been doing — invisible to any severity filter or alert.
+ */
+const GCP_SEVERITY = {
+    debug: "DEBUG",
+    info: "INFO",
+    warn: "WARNING",
+    error: "ERROR",
+};
+/**
+ * Emit one line. Structured JSON where a collector is reading stdout
+ * (Vercel/Cloud Functions/Cloud Run), human-readable locally.
+ */
+function emit(level, message, sanitized) {
+    const consoleFn = level === "error" ? console.error : level === "warn" ? console.warn : level === "debug" ? console.debug : console.info;
+    if (isServerlessRuntime) {
+        consoleFn(JSON.stringify({
+            severity: GCP_SEVERITY[level],
             message,
             timestamp: new Date().toISOString(),
-            data: sanitized,
-        };
-        console.info(`[INFO] ${message}`, sanitized);
-        if (isFileLoggingEnabled)
-            writeLog(entry).catch((err) => { process.stderr.write(String(err) + "\n"); });
-    },
-    warn(message, data) {
-        const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
+            ...(sanitized !== undefined ? { data: sanitized } : {}),
+        }));
+        return;
+    }
+    consoleFn(`[${level.toUpperCase()}] ${message}`, sanitized);
+}
+function record(level, message, data) {
+    const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
+    emit(level, message, sanitized);
+    if (isFileLoggingEnabled) {
         const entry = {
-            level: "warn",
+            level,
             message,
             timestamp: new Date().toISOString(),
             data: sanitized,
         };
-        console.warn(`[WARN] ${message}`, sanitized);
-        if (isFileLoggingEnabled)
-            writeLog(entry).catch((err) => { process.stderr.write(String(err) + "\n"); });
+        writeLog(entry).catch((err) => {
+            // stderr, not the logger — a logger that logs its own failure through
+            // itself recurses. normalizeError is pure classification, so it is safe
+            // to call here.
+            process.stderr.write(`log write failed: ${normalizeError(err).message}\n`);
+        });
+    }
+}
+export const serverLogger = {
+    debug(message, data) {
+        record("debug", message, data);
+    },
+    info(message, data) {
+        record("info", message, data);
+    },
+    warn(message, data) {
+        record("warn", message, data);
     },
     error(message, data) {
-        const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
-        const entry = {
-            level: "error",
-            message,
-            timestamp: new Date().toISOString(),
-            data: sanitized,
-        };
-        console.error(`[ERROR] ${message}`, sanitized);
-        if (isFileLoggingEnabled)
-            writeLog(entry).catch((err) => { process.stderr.write(String(err) + "\n"); });
+        record("error", message, data);
     },
 };
 /** Pull the commonly needed headers from a NextRequest in one call. */

package/dist/next/components/ErrorView.js

@@ -28,5 +28,5 @@ export function ErrorView({ error, reset, heading = "Something went wrong", desc
             metadata: { digest: error.digest ?? null },
         });
     }, [error]);
-    return (_jsxs(Stack, { justify: "center", role: "alert", className: "min-h-[50vh] text-center", padding: "x-xl", align: "center", children: [_jsx(Heading, { level: 2, className: "mb-2", children: heading }), _jsx(Text, { variant: "secondary", className: "mb-6", children: description }), process.env.NODE_ENV === "development" && error.digest && (_jsxs(Text, { variant: "muted", size: "xs", className: "mb-4", children: ["digest: ", error.digest] })), _jsx(Button, { type: "button", variant: "primary", onClick: reset, children: retryLabel })] }));
+    return (_jsxs(Stack, { justify: "center", role: "alert", className: "min-h-[50vh] text-center", padding: "x-xl", align: "center", children: [_jsx(Heading, { level: 2, className: "mb-2", children: heading }), _jsx(Text, { variant: "secondary", className: "mb-6", children: description }), error.digest && (_jsxs(Text, { variant: "muted", size: "xs", className: "mb-4", children: ["Reference: ", error.digest] })), _jsx(Button, { type: "button", variant: "primary", onClick: reset, children: retryLabel })] }));
 }