@mohasinac/appkit 4.30.17 → 4.30.19

package/dist/contracts/realtime-session.js

@@ -1,7 +1,11 @@
 import { normalizeError } from "../errors/normalize";
-import { getClientRealtimeProvider } from "./client-realtime";
+import { getClientRealtimeProvider, } from "./client-realtime";
 /**
- * Shared, REFERENCE-COUNTED sign-in for the one client realtime app.
+ * PER-SCOPE, reference-counted sign-in for the client realtime channels.
+ *
+ * Each claim scope gets its own Firebase app (via `provider.forScope`), because
+ * Firebase Auth state is per-app and two channels legitimately need two
+ * different claim sets at the same time.
  *
  * WHY THIS EXISTS — two distinct bugs, one cause.
  *
@@ -21,98 +25,89 @@ import { getClientRealtimeProvider } from "./client-realtime";
  *    bulk token (carrying `bulkJobId`), killing an in-flight job subscription.
  *    Whoever finished last broke whoever was still working.
  *
- * The fix for (2) is not "sign out more carefully" — it is that **no individual
- * consumer may decide to sign out at all**. Each acquires a lease and releases
- * it; the session ends only when the last lease is gone.
+ * (2) needed BOTH halves, and only one was done at first:
+ *   - sign-OUT: no consumer may decide to sign out. Each takes a lease; the
+ *     session ends only when the last lease for that scope is gone.
+ *   - sign-IN: ref-counting cannot help here, because nothing is being shared
+ *     by agreement — a bulk job and a message thread need different claims
+ *     simultaneously. The answer is separate apps, not coordination.
  *
- * Tokens differ per channel (different claims), so `acquire` takes a fetcher and
- * re-signs when the token it holds is for a different scope or has expired.
+ * 🛑 Subscribe through `lease.provider`, never `getClientRealtimeProvider()`.
+ * The global one is the root app; the lease's is the app your scope actually
+ * authenticated on.
  */
 /** Refresh a little early — a token that expires mid-subscription is a silent drop. */
 const EXPIRY_SKEW_MS = 60000;
-let leases = 0;
-let currentScope = null;
-let expiresAt = 0;
-let inFlight = null;
 /**
- * Ensure the shared realtime app is signed in for `scope`, and take a lease.
+ * One entry per claim scope, each on its OWN Firebase app.
  *
- * @param scope    an identifier for the claim set (e.g. `"messages"`,
- *                 `"chat:<id>"`). Signing in again for the SAME scope while a
- *                 valid token is held is a no-op.
- * @param getToken fetches a fresh custom token. Called only when needed.
- * @returns a release function. **Always call it** — the session is only torn
- *          down when every lease is released.
+ * 🛑 This used to be three module-level singletons — `currentScope`,
+ * `expiresAt`, `leases` — describing ONE shared app. That shape could not
+ * express the real situation: two channels legitimately need two different
+ * claim sets at the same time, and Firebase Auth state is per-app, so every
+ * sign-in replaced the previous one's claims. Ref-counting only stopped a
+ * finishing channel from signing the others OUT; it could not stop a starting
+ * channel from signing itself IN over them.
  */
+const scopes = new Map();
 export async function acquireRealtimeSession(scope, getToken) {
-    const lease = { scope };
-    leases++;
-    const needsSignIn = currentScope !== lease.scope || Date.now() > expiresAt - EXPIRY_SKEW_MS;
-    if (needsSignIn) {
-        // Collapse concurrent acquires — several hooks mount in the same tick and
-        // would otherwise each fetch a token and race to sign in.
-        inFlight ?? (inFlight = (async () => {
+    const root = getClientRealtimeProvider();
+    let state = scopes.get(scope);
+    if (!state) {
+        // `forScope` is optional on the contract: a provider that cannot isolate
+        // falls back to the shared app, which is the old behaviour rather than a
+        // crash.
+        state = {
+            leases: 0,
+            expiresAt: 0,
+            inFlight: null,
+            provider: root.forScope?.(scope) ?? root,
+        };
+        scopes.set(scope, state);
+    }
+    state.leases++;
+    if (Date.now() > state.expiresAt - EXPIRY_SKEW_MS) {
+        // Collapse concurrent acquires for the SAME scope — several hooks mount in
+        // one tick and would otherwise each fetch a token and race to sign in.
+        state.inFlight ?? (state.inFlight = (async () => {
             try {
                 const token = await getToken();
-                await getClientRealtimeProvider().signInWithToken(token.customToken);
-                currentScope = lease.scope;
-                expiresAt = token.expiresAt;
+                await state.provider.signInWithToken(token.customToken);
+                state.expiresAt = token.expiresAt;
             }
             finally {
-                inFlight = null;
+                state.inFlight = null;
             }
         })());
-        await inFlight;
+        await state.inFlight;
     }
     let released = false;
-    return () => {
-        if (released)
-            return; // React StrictMode double-invokes cleanups
-        released = true;
-        leases = Math.max(0, leases - 1);
-        if (leases > 0)
-            return;
-        currentScope = null;
-        expiresAt = 0;
-        getClientRealtimeProvider()
-            .signOut()
-            .catch((err) => {
-            void normalizeError(err);
-        });
-    };
-}
-/**
- * Take a lease WITHOUT signing in — for a consumer that manages its own
- * sign-in but must still participate in the reference count.
- *
- * `useRealtimeEvent` is the case: its token carries a job-scoped `bulkJobId`
- * claim it receives from the caller, so it cannot use `acquireRealtimeSession`'s
- * fetcher. It still must not be able to sign the shared app out from under
- * another channel, which is precisely what its `cleanup()` used to do.
- */
-export function acquireExternalRealtimeLease() {
-    leases++;
-    // Its own sign-in has replaced whatever scope was active; forget the cached
-    // one so the next acquire() re-authenticates rather than trusting a token
-    // that is no longer installed.
-    currentScope = null;
-    expiresAt = 0;
-    let released = false;
-    return () => {
-        if (released)
-            return;
-        released = true;
-        leases = Math.max(0, leases - 1);
-        if (leases > 0)
-            return;
-        getClientRealtimeProvider()
-            .signOut()
-            .catch((err) => {
-            void normalizeError(err);
-        });
+    return {
+        provider: state.provider,
+        release: () => {
+            if (released)
+                return; // React StrictMode double-invokes cleanups
+            released = true;
+            const cur = scopes.get(scope);
+            if (!cur)
+                return;
+            cur.leases = Math.max(0, cur.leases - 1);
+            if (cur.leases > 0)
+                return;
+            // Last holder of THIS scope. Signing out touches only this scope's app,
+            // so it cannot disturb any other channel.
+            cur.expiresAt = 0;
+            scopes.delete(scope);
+            cur.provider.signOut().catch((err) => {
+                void normalizeError(err);
+            });
+        },
     };
 }
-/** Test/diagnostic only. */
+/** Test/diagnostic only — total leases across every scope. */
 export function activeRealtimeLeases() {
-    return leases;
+    let total = 0;
+    for (const s of scopes.values())
+        total += s.leases;
+    return total;
 }

package/dist/errors/index.d.ts

@@ -12,7 +12,7 @@ export { DatabaseError } from "./database-error";
 export { RazorpayUnreachableError } from "./razorpay-unreachable";
 export { handleApiError, logError, isAppError } from "./error-handler";
 export { mapToHttpError, HTTP_ERROR_CODES, type MappedError, type HttpErrorCode, } from "./error-mapping";
-export { ERROR_DISPLAY_MAP, getErrorDisplay, type ErrorDisplayEntry, } from "./error-display-map";
+export { ERROR_DISPLAY_MAP, getErrorDisplay, toUserMessage, GENERIC_USER_MESSAGE, type ErrorDisplayEntry, } from "./error-display-map";
 export { safeRead, installDegradedReadReporter, type DegradedReadReport, } from "./safe-read";
 export { normalizeError, getErrorMessage, isAuthError, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./normalize";

package/dist/errors/index.js

@@ -17,7 +17,7 @@ export { RazorpayUnreachableError } from "./razorpay-unreachable";
 export { handleApiError, logError, isAppError } from "./error-handler";
 // Code→HTTP mapper (server) — and the i18n / inline-field map (client-safe)
 export { mapToHttpError, HTTP_ERROR_CODES, } from "./error-mapping";
-export { ERROR_DISPLAY_MAP, getErrorDisplay, } from "./error-display-map";
+export { ERROR_DISPLAY_MAP, getErrorDisplay, toUserMessage, GENERIC_USER_MESSAGE, } from "./error-display-map";
 // safeRead is server-only (uses the persisted log reporter)
 export { safeRead, installDegradedReadReporter, } from "./safe-read";
 // W3 — catch-clause normalizer. Every catch (e: unknown) funnels through

package/dist/features/about/components/DeveloperView.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring/server-logger";
 import { Anchor, Avatar, Badge, Div, Heading, Row, Section, Span, Stack, Text, TextLink } from "../../../ui";
 import { ROUTES } from "../../../constants";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page";
@@ -21,8 +22,12 @@ export async function DeveloperView({ labels = {} }) {
         milestones = Array.isArray(aboutContent.milestones) ? aboutContent.milestones : [];
     }
     catch (_err) {
-        void normalizeError(_err);
-        // Firestore unavailable — render the empty state below rather than crash.
+        // Firestore unavailable — render the empty state below rather than crash,
+        // but say so: an empty Developers page is indistinguishable from a settings
+        // document that genuinely has no `isDeveloper` members.
+        serverLogger.warn("about.developerView: siteSettings.aboutContent read failed", {
+            error: normalizeError(_err).message,
+        });
     }
     const developers = teamMembers.filter((m) => m.isDeveloper);
     return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [_jsx(Section, { color: "inverse", tone: "accent-banner", padding: "banner", children: _jsxs(Div, { className: `${page.container.sm}`, children: [_jsx(Heading, { color: "inverse", level: 1, variant: "none", className: "mb-3", children: labels.title ?? "Meet the Developer" }), _jsx(Text, { color: "inverse", variant: "none", className: "/80", size: "sm", children: labels.subtitle ?? "The person building LetItRip, one feature at a time." })] }) }), _jsxs(Div, { className: `${page.container.sm}`, padding: "content-banner", children: [developers.length === 0 ? (_jsx(Text, { variant: "secondary", children: labels.empty ?? "Developer profile coming soon." })) : (_jsx(Stack, { gap: "xl", children: developers.map((dev) => (_jsxs(Stack, { gap: "md", surface: "default", padding: "lg", rounded: "xl", border: "default", children: [_jsxs(Row, { gap: "md", align: "center", children: [_jsx(Avatar, { src: dev.photoUrl, name: dev.name, alt: dev.name, size: "lg" }), _jsxs(Stack, { gap: "xs", children: [_jsx(Heading, { level: 2, children: dev.name }), _jsxs(Row, { gap: "xs", wrap: true, children: [_jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: dev.role }), dev.isFounder && _jsx(Badge, { variant: "primary", size: "xs", children: "Founder" }), _jsx(Badge, { variant: "secondary", size: "xs", children: "Developer" })] })] })] }), _jsx(Text, { variant: "secondary", className: "leading-relaxed", children: dev.bio }), dev.githubUrl && (_jsx(Anchor, { href: dev.githubUrl, tone: "brand", size: "sm", underline: "hover", children: "GitHub \u2197" }))] }, dev.name))) })), milestones.length > 0 && (_jsxs(Div, { className: "mt-14 border-t", border: "default", padding: "t-xl", children: [_jsx(Heading, { level: 3, className: "mb-6", color: "muted", size: "sm", weight: "semibold", transform: "uppercase", children: labels.journeyTitle ?? "The Journey" }), _jsx(Stack, { className: "relative border-l-2 border-primary/30 max-w-2xl pl-[2rem]", gap: "lg", children: milestones.map(({ year, text }) => (_jsxs(Div, { className: "relative", children: [_jsx(Div, { className: "absolute -left-10 top-1 w-4 h-4 bg-primary border-2 border-white", rounded: "full" }), _jsx(Span, { size: "xs", weight: "bold", className: "text-primary tracking-wide", transform: "uppercase", children: year }), _jsx(Text, { className: "mt-1", children: text })] }, year))) })] })), _jsx(Div, { className: "mt-10", children: _jsx(TextLink, { href: String(ROUTES.PUBLIC.ABOUT), variant: "muted", size: "sm", children: labels.backToTeam ?? "← Meet the whole team" }) })] })] }));

package/dist/features/about/components/PolicyPageView.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring/server-logger";
 import { Row } from "@mohasinac/appkit/ui";
 import { ROUTES } from "../../../constants";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page";
@@ -72,7 +73,14 @@ export async function PolicyPageView({ policy, }) {
     }
     catch (_err) {
         void normalizeError(_err);
-        // Firestore unavailable — fall back to i18n
+        // Falls back to the bundled i18n copy below, which is a complete policy in
+        // its own right — but an admin who has overridden this page would silently
+        // see the old text, so the failure has to be visible to an operator.
+        serverLogger.warn("about.policyPageView: siteSettings.legalPages read failed", {
+            policy,
+            field: meta.firestoreField,
+            error: normalizeError(_err).message,
+        });
     }
     // i18n fallback sections
     const rawSections = t.raw("sections");

package/dist/features/about/components/PublicProfileView.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import Link from "next/link";
 import { getPublicUserProfile, getProfileStoreProducts, getReviewsAuthoredBy, getReviewsReceivedBy } from "../../auth/actions/profile-actions";
 import { storeRepository } from "../../stores/repository/store.repository";
+import { safeRead } from "../../../errors/safe-read";
 import { ROUTES } from "../../../constants";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page";
 import { FLEX_CENTER } from "../../../_internal/shared/styles/themed";
@@ -64,13 +65,30 @@ export async function PublicProfileView({ userId, tab, }) {
     const flex = { center: FLEX_CENTER };
     const { getTranslations } = await import("next-intl/server");
     const t = await getTranslations("publicProfile");
-    const profile = await getPublicUserProfile(userId).catch(() => null);
+    // The profile IS this page's subject — a read failure must surface, not turn
+    // into the same `null` a genuinely missing user produces. The `null` return
+    // from getPublicUserProfile still means "no such user".
+    const profile = await getPublicUserProfile(userId);
     const storeId = profile?.storeSlug ?? null;
     const [products, store, reviewsAuthored, reviewsReceivedAsBuyer] = await Promise.all([
-        storeId ? getProfileStoreProducts(storeId).catch(() => []) : Promise.resolve([]),
-        storeId ? storeRepository.findById(storeId).catch(() => null) : Promise.resolve(null),
-        getReviewsAuthoredBy(userId).catch(() => []),
-        getReviewsReceivedBy(userId).catch(() => []),
+        storeId
+            ? safeRead(() => getProfileStoreProducts(storeId), {
+                route: "/profile/[userId]",
+                key: "profile.storeProducts",
+                fallback: [],
+            })
+            : Promise.resolve([]),
+        storeId
+            ? safeRead(() => storeRepository.findById(storeId), {
+                route: "/profile/[userId]",
+                key: "profile.store",
+                fallback: null,
+            })
+            : Promise.resolve(null),
+        // Both already degrade internally via safeRead — anything still thrown here
+        // is a mapping bug, which should surface rather than render an empty rail.
+        getReviewsAuthoredBy(userId),
+        getReviewsReceivedBy(userId),
     ]);
     const isSeller = isSellerUser(profile) || isAdminUser(profile);
     // For sellers: lead with store identity (name + logo). For buyers: user identity.

package/dist/features/account/components/AddressForm.js

@@ -102,7 +102,7 @@ export function AddressForm({ initialData, onSubmit, onCancel, isLoading = false
         }
         catch (err) {
             void normalizeError(err);
-            showToast(err instanceof Error ? err.message : "Failed to save address", "error");
+            showToast("Failed to save address", "error");
         }
     }, [formData, onSubmit, showToast, setFieldError, clearErrors, markSubmitAttempted]);
     useEffect(() => {

package/dist/features/account/components/NotificationBell.js

@@ -1,6 +1,7 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 import { useCallback, useRef, useState } from "react";
 import { Button, Div, Heading, Li, Row, Span, Spinner, Stack, Text, TextLink, Ul, useToast } from "../../../ui";
 import { useClickOutside, useMessage } from "../../../react";
@@ -52,7 +53,7 @@ export function NotificationBell({ limit = 10, viewAllHref, labels, icons, rende
         }
         catch (err) {
             void normalizeError(err);
-            showToast(err instanceof Error ? err.message : "Failed to mark notification as read", "error");
+            showToast("Failed to mark notification as read", "error");
         }
     }, [markRead, refetch, showToast]);
     const emitSuccess = onMarkAllReadSuccess ?? showSuccess;
@@ -63,12 +64,12 @@ export function NotificationBell({ limit = 10, viewAllHref, labels, icons, rende
             emitSuccess(labels.markAllRead);
         }
         catch (err) {
-            void normalizeError(err);
+            const e = normalizeError(err);
             if (onMarkAllReadError) {
                 onMarkAllReadError(labels.error);
             }
             else {
-                showToast(err instanceof Error ? err.message : labels.error, "error");
+                showToast(toUserMessage(e.code, undefined, { fallback: labels.error }), "error");
             }
         }
     }, [

package/dist/features/account/components/NotificationPreferencesPanel.js

@@ -79,7 +79,7 @@ export function NotificationPreferencesPanel({ fetchUrl = ACCOUNT_ENDPOINTS.NOTI
         }
         catch (err) {
             void normalizeError(err);
-            showToast(err instanceof Error ? err.message : "Failed to save preferences.", "error");
+            showToast("Failed to save preferences.", "error");
         }
         finally {
             setSaving(false);

package/dist/features/account/components/UserOffersPanel.js

@@ -55,7 +55,7 @@ function BuyerOfferCard({ offer, onAcceptCounter, onWithdraw, onCheckout, onUpda
                     onNeedsLogin();
                 }
                 else {
-                    setError(err instanceof Error ? err.message : "Something went wrong.");
+                    setError("Something went wrong.");
                 }
             }
         });

package/dist/features/admin/components/AdminFulfillmentView.js

@@ -40,12 +40,15 @@ export function AdminFulfillmentView({ initialStoreId, initialStoreName, }) {
             setOrders(res.orders ?? []);
         }
         catch (err) {
-            void normalizeError(err);
+            // An empty fulfilment queue is a normal, expected state, so a swallowed
+            // failure here reads as "nothing to pack" — matching the rest of this
+            // file, surface it instead.
+            showToast(normalizeError(err).message, "error");
         }
         finally {
             setIsLoading(false);
         }
-    }, []);
+    }, [showToast]);
     useEffect(() => {
         if (storeId)
             void fetchOrders(storeId);

package/dist/features/admin/components/AdminMediaView.js

@@ -48,7 +48,7 @@ function MediaBrowser({ onCopy }) {
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Failed to load");
+            setError("Failed to load");
         }
         finally {
             setIsLoading(false);
@@ -108,7 +108,7 @@ export function AdminMediaView({ labels = {}, children, ...rest }) {
         catch (err) {
             void normalizeError(err);
             setOperationMessage("Failed to discard staged media uploads.");
-            showToast(err instanceof Error ? err.message : "Failed to clear uploads.", "error");
+            showToast("Failed to clear uploads.", "error");
         }
     }, [cleanup, stagedUrls, showToast]);
     const copyToClipboard = React.useCallback(async (url) => {
@@ -121,7 +121,7 @@ export function AdminMediaView({ labels = {}, children, ...rest }) {
         catch (err) {
             void normalizeError(err);
             setOperationMessage("Could not copy URL to clipboard.");
-            showToast(err instanceof Error ? err.message : "Failed to copy.", "error");
+            showToast("Failed to copy.", "error");
         }
     }, [showToast]);
     if (hasChildren) {

package/dist/features/analytics/types.d.ts

@@ -2,5 +2,5 @@
  * page-views.repository.ts (server-only, imports firebase-admin) so the
  * client-side tracker component can import just this without pulling
  * firebase-admin into the client bundle. */
-export declare const PAGE_VIEW_ENTITY_TYPES: readonly ["product", "store", "category", "homepage", "auction", "review", "user-profile", "blog", "event", "pre-order", "prize-draw", "classified", "digital-code", "live", "bundle", "grouped-listing"];
+export declare const PAGE_VIEW_ENTITY_TYPES: readonly ["product", "store", "category", "homepage", "auction", "review", "user-profile", "blog", "event", "pre-order", "prize-draw", "classified", "digital-code", "live", "bundle", "grouped-listing", "listing"];
 export type PageViewEntityType = (typeof PAGE_VIEW_ENTITY_TYPES)[number];

package/dist/features/analytics/types.js

@@ -21,4 +21,17 @@ export const PAGE_VIEW_ENTITY_TYPES = [
     /** A `groupedListings` document's own page. Distinct from "bundle" — a
      *  bundle is a priced, all-or-nothing set; a group is pick-as-you-wish. */
     "grouped-listing",
+    /**
+     * A public BROWSE page — `/products`, `/auctions`, `/stores`, … — as opposed
+     * to one entity's detail page.
+     *
+     * 🛑 `entityId` must be the bare route name ("products"), NEVER the filtered
+     * URL. `pageViews` doc ids are `${date}_${entityType}_${entityId}` with a
+     * `FieldValue.increment`, so a bounded id costs ONE write per day per page,
+     * while keying on a query string would create a new document per filter
+     * combination — unbounded doc creation on the highest-traffic pages, against
+     * the Firestore write budget in Rule #6. The full URL still travels in the
+     * `url` field, which is recorded but not part of the key.
+     */
+    "listing",
 ];

package/dist/features/auctions/components/AuctionDetailPageView.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import Link from "next/link";
 import { productRepository } from "../../../repositories";
 import { listBidsByProduct } from "../../auctions/actions/bid-actions";
+import { safeRead } from "../../../errors/safe-read";
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
     p4: "p-[var(--appkit-space-4)]",
@@ -62,11 +63,14 @@ function renderAuctionStoreReviews(storeSlug) {
     return (_jsxs(Section, { className: "mt-10", children: [_jsx(Heading, { level: 2, className: "mb-2", color: "primary", size: "xl", weight: "semibold", children: "Store Reviews" }), _jsx(ReviewsListingPanel, { source: { kind: "store", storeSlug }, stateMode: "local", context: "store", emptyLabel: "This store has no reviews yet." })] }));
 }
 export async function AuctionDetailPageView({ id, initialAuction, onPlaceBid, onBuyNow, productFeatures }) {
+    // The auction IS this page's subject. A read failure must surface rather than
+    // become the same `undefined` a genuinely missing slug produces — the
+    // "Auction Not Found" branch below still handles that real case.
     const product = initialAuction !== undefined
         ? (initialAuction ?? undefined)
-        : await productRepository.findByIdOrSlug(id).catch(() => undefined);
+        : await productRepository.findByIdOrSlug(id);
     const bidsResult = product
-        ? await listBidsByProduct(String(product.id), { pageSize: 5 }).catch(() => null)
+        ? await safeRead(() => listBidsByProduct(String(product.id), { pageSize: 5 }), { route: "/auctions/[slug]", key: "auction.bidHistory", fallback: null })
         : null;
     const storeId = product?.storeId;
     if (!product) {

package/dist/features/auctions/components/MarketplaceAuctionCard.js

@@ -163,8 +163,10 @@ export function MarketplaceAuctionCard({ product, buyoutPrice, className = "", v
             await toggle();
         }
         catch (_err) {
+            // useWishlistToggle rolls back its optimistic state and raises its own
+            // toast on failure, so the heart returns to its true value on screen.
+            // Reporting again here would double-notify for one user action.
             void normalizeError(_err);
-            // The hook rolls back optimistic state when the mutation fails.
         }
     }, [toggle]);
     const countdownClass = isEnded

package/dist/features/auth/actions/profile-actions.js

@@ -5,6 +5,7 @@
  * Auth, rate-limiting, and Next.js specifics are handled by the consumer.
  */
 import { maskPublicReview } from "../../../security";
+import { safeRead } from "../../../errors/safe-read";
 import { finalizeStagedMediaField } from "../../media/finalize";
 import { userRepository } from "../repository/user.repository";
 import { sessionRepository } from "../repository/session.repository";
@@ -65,7 +66,7 @@ export async function getPublicUserProfile(userId) {
 }
 /** Fetch approved reviews for a store. storeId === storeSlug in this project. */
 export async function getSellerReviews(storeId) {
-    const snapshot = await reviewRepository.findApprovedByStore(storeId).catch(() => []);
+    const snapshot = await safeRead(() => reviewRepository.findApprovedByStore(storeId), { route: "/profile/[userId]", key: "reviews.findApprovedByStore", fallback: [] });
     return snapshot.map((r) => ({
         id: r.id,
         productId: r.productId,
@@ -94,7 +95,7 @@ export async function getProfileStoreProducts(storeId) {
 }
 /** Approved product reviews written by this user as a buyer. Excludes seller→buyer ratings. */
 export async function getReviewsAuthoredBy(userId) {
-    const all = await reviewRepository.findApprovedByUser(userId).catch(() => []);
+    const all = await safeRead(() => reviewRepository.findApprovedByUser(userId), { route: "/profile/[userId]", key: "reviews.findApprovedByUser", fallback: [] });
     // reviewerRole:"seller" means this user rated a buyer — not a product review
     const snapshot = all.filter((r) => r.reviewerRole !== "seller");
     return snapshot.map((r) => ({
@@ -121,7 +122,7 @@ export async function getReviewsAuthoredBy(userId) {
 }
 /** Approved seller→buyer reviews received by this buyer. */
 export async function getReviewsReceivedBy(userId) {
-    const snapshot = await reviewRepository.findByReviewee(userId).catch(() => []);
+    const snapshot = await safeRead(() => reviewRepository.findByReviewee(userId), { route: "/profile/[userId]", key: "reviews.findByReviewee", fallback: [] });
     return snapshot.map((r) => ({
         id: r.id,
         productId: r.productId,

package/dist/features/auth/components/ForgotPasswordView.js

@@ -22,7 +22,7 @@ export function ForgotPasswordView({ onSubmit, isLoading = false, error, success
             }
             catch (err) {
                 void normalizeError(err);
-                showToast(err instanceof Error ? err.message : "Failed to send reset link", "error");
+                showToast("Failed to send reset link", "error");
             }
         };
     }

package/dist/features/auth/components/LoginForm.js

@@ -27,7 +27,7 @@ export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, l
                                     }
                                     catch (err) {
                                         void normalizeError(err);
-                                        showToast(err instanceof Error ? err.message : "Sign in failed", "error");
+                                        showToast("Sign in failed", "error");
                                     }
                                 }, children: isLoading
                                     ? (labels.submittingLabel ?? "Signing in…")

package/dist/features/auth/components/RegisterForm.js

@@ -39,7 +39,7 @@ export function RegisterForm({ onSubmit, isLoading = false, error, success, labe
                                     }
                                     catch (err) {
                                         void normalizeError(err);
-                                        showToast(err instanceof Error ? err.message : "Registration failed", "error");
+                                        showToast("Registration failed", "error");
                                     }
                                 }, children: isLoading
                                     ? (labels.submittingLabel ?? "Creating account…")

package/dist/features/auth/components/ResetPasswordView.js

@@ -30,7 +30,7 @@ export function ResetPasswordView({ oobCode, onSubmit, isLoading = false, error,
             }
             catch (err) {
                 void normalizeError(err);
-                showToast(err instanceof Error ? err.message : "Password reset failed", "error");
+                showToast("Password reset failed", "error");
             }
         };
     }

package/dist/features/auth/hooks/useAuth.js

@@ -315,6 +315,9 @@ export function useRegister(options) {
             // fail registration — the user can re-request verification later.
             try {
                 await authProvider.sendEmailVerification();
+                // Non-fatal by design: the account already exists, and the user can
+                // re-request verification from Settings at any time. Firebase surfaces
+                // its own send failures; failing registration here would be worse.
             }
             catch (err) {
                 void normalizeError(err);

package/dist/features/blog/repository/blog.repository.js

@@ -72,10 +72,12 @@ class BlogRepository extends BaseRepository {
                 .collection(this.collection)
                 .doc(id)
                 .update({ [BLOG_POST_FIELDS.VIEWS]: increment(1) });
+            // Fire-and-forget analytics: a lost view increment changes nothing that
+            // renders and cannot usefully be retried, so it must never fail the blog
+            // post read that triggered it — the count is approximate by design.
         }
         catch (_err) {
             void normalizeError(_err);
-            // Fire-and-forget by design.
         }
     }
     async findRelated(category, excludeId, limit = 3) {