@mohasinac/appkit 4.30.17 → 4.30.19

package/dist/features/homepage/components/MarketplaceHomepageView.js

@@ -3,6 +3,7 @@ import { sieveFilter, SIEVE_OP } from "@mohasinac/appkit";
 import { sortBy } from "@mohasinac/appkit";
 import { Div, Main } from "../../../ui";
 import { carouselRepository, faqsRepository, siteSettingsRepository } from "../../../repositories";
+import { safeRead } from "../../../errors/safe-read";
 import { fetchLiveStats } from "../lib/live-stats";
 import { renderSection, AnnouncementBar } from "../lib/section-renderer";
 import { homepageSectionsRepository } from "../repository/homepage-sections.repository";
@@ -28,14 +29,25 @@ function toCarouselSlides(docs) {
     }));
 }
 export async function MarketplaceHomepageView({ adSlots, newsletterFormSlot, onBannerDismiss, } = {}) {
-    const slides = await carouselRepository.getActiveSlides().catch(() => []);
-    const siteSettings = await siteSettingsRepository.getSingleton().catch(() => null);
+    // Every read on this page is a RAIL: the homepage must still render when one
+    // fails, but a failure has to be distinguishable from an empty catalogue —
+    // that is exactly Root Cause #59, and safeRead is what records it.
+    const slides = await safeRead(() => carouselRepository.getActiveSlides(), {
+        route: "/", key: "homepage.carouselSlides", fallback: [],
+    });
+    const siteSettings = await safeRead(() => siteSettingsRepository.getSingleton(), {
+        route: "/", key: "homepage.siteSettings", fallback: null,
+    });
     const announcementMessage = siteSettings?.announcementBar?.message?.trim() ||
         "🎉 Up to 15% Off on Pokémon TCG this week — Use code SAVE15";
     const showAnnouncement = siteSettings?.announcementBar?.enabled ?? true;
     const [allSections, rawFaqItems] = await Promise.all([
-        homepageSectionsRepository.getEnabledSections().catch(() => []),
-        faqsRepository.getHomepageFAQs().catch(() => []),
+        safeRead(() => homepageSectionsRepository.getEnabledSections(), {
+            route: "/", key: "homepage.enabledSections", fallback: [],
+        }),
+        safeRead(() => faqsRepository.getHomepageFAQs(), {
+            route: "/", key: "homepage.faqs", fallback: [],
+        }),
     ]);
     // Respect the feature flags. This gate existed but lived inside a function
     // with no call sites, so until 2026-08-24 turning off `auctions` hid auctions
@@ -87,12 +99,24 @@ export async function MarketplaceHomepageView({ adSlots, newsletterFormSlot, onB
         activeTypes.has("products") ? getFeaturedProducts(12) : null,
         activeTypes.has("auctions") ? getFeaturedAuctions(12) : null,
         activeTypes.has("pre-orders") ? getFeaturedPreOrders(12) : null,
-        activeTypes.has("categories") ? listTopLevelCategories(12).catch(() => null) : null,
-        activeTypes.has("brands") ? listBrandCategories(12).catch(() => null) : null,
-        activeTypes.has("featured-bundles") ? listFeaturedBundles(8).catch(() => null) : null,
-        activeTypes.has("stores") ? listStores({ pageSize: 8, sorts: sortBy("averageRating", "DESC") }).catch(() => null) : null,
-        activeTypes.has("blog-articles") ? getFeaturedBlogPosts(6).catch(() => null) : null,
-        activeTypes.has("events") ? listPublicEvents({ filters: sieveFilter("status", SIEVE_OP.EQ, "active"), pageSize: 6 }).catch(() => null) : null,
+        activeTypes.has("categories")
+            ? safeRead(() => listTopLevelCategories(12), { route: "/", key: "homepage.categories", fallback: null })
+            : null,
+        activeTypes.has("brands")
+            ? safeRead(() => listBrandCategories(12), { route: "/", key: "homepage.brands", fallback: null })
+            : null,
+        activeTypes.has("featured-bundles")
+            ? safeRead(() => listFeaturedBundles(8), { route: "/", key: "homepage.featuredBundles", fallback: null })
+            : null,
+        activeTypes.has("stores")
+            ? safeRead(() => listStores({ pageSize: 8, sorts: sortBy("averageRating", "DESC") }), { route: "/", key: "homepage.stores", fallback: null })
+            : null,
+        activeTypes.has("blog-articles")
+            ? safeRead(() => getFeaturedBlogPosts(6), { route: "/", key: "homepage.blogPosts", fallback: null })
+            : null,
+        activeTypes.has("events")
+            ? safeRead(() => listPublicEvents({ filters: sieveFilter("status", SIEVE_OP.EQ, "active"), pageSize: 6 }), { route: "/", key: "homepage.events", fallback: null })
+            : null,
     ]);
     // ProductDocument / BlogDocument / EventDocument have Date fields and extra Firestore-only
     // fields absent from the corresponding *Item types. The casts below are safe: section

package/dist/features/homepage/components/SocialFeedSection.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { safeRead } from "../../../errors/safe-read";
 import { Anchor, Div, GRID_MAP, Heading, HandModeRow, Section, Stack, Text } from "../../../ui";
 import { SocialPostCard } from "./SocialPostCard";
 import { fetchInstagramPosts, fetchFacebookPosts, fetchTikTokPosts, fetchDeviantArtPosts, } from "../lib/social-feed-fetcher";
@@ -47,7 +48,9 @@ async function loadPosts(config) {
     if (!handle)
         return { posts: [], error: `A handle is required for ${PLATFORM_LABELS[platform]}.` };
     try {
-        const credentials = await siteSettingsRepository.getDecryptedCredentials().catch(() => null);
+        // A failed credentials read is reported below as "token not configured in
+        // Site Settings", which is actionable but wrong — record the real cause.
+        const credentials = await safeRead(() => siteSettingsRepository.getDecryptedCredentials(), { route: "/", key: "homepage.socialFeed.credentials", fallback: null });
         switch (platform) {
             case "instagram": {
                 const token = credentials?.metaPageAccessToken;

package/dist/features/homepage/lib/live-stats.js

@@ -81,7 +81,14 @@ export async function fetchLiveStats(requests) {
             }
             catch (_err) {
                 void normalizeError(_err);
-                // silently fall back to static value
+                // Falling back to the admin-authored static value is correct — but a
+                // stale number that looks live is exactly the failure this must not
+                // hide, so name the collection that could not be counted.
+                serverLogger.warn("homepage.liveStats: collection count failed", {
+                    statKey: key,
+                    collection,
+                    error: normalizeError(_err).message,
+                });
             }
         })());
     }

package/dist/features/homepage/repository/carousel.repository.js

@@ -234,10 +234,11 @@ export class CarouselRepository extends BaseRepository {
                 "stats.views": increment(1),
                 "stats.lastViewed": new Date(),
             });
+            // Fire-and-forget analytics: a lost view increment changes nothing that
+            // renders, and it must never break the carousel read it rides along with.
         }
         catch (_e) {
             void normalizeError(_e);
-            // Swallow errors — analytics failures must not break the carousel response
         }
     }
 }

package/dist/features/live/components/LiveItemDetailPageView.js

@@ -33,7 +33,10 @@ function toDescriptionHtml(raw) {
 export async function LiveItemDetailPageView({ slug, initialProduct, renderActions }) {
     const product = initialProduct !== undefined
         ? (initialProduct ?? undefined)
-        : await getLiveItemForDetail(slug).catch(() => undefined);
+        // The listing IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await getLiveItemForDetail(slug);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Live Listing Not Found" }), _jsx(Text, { color: "muted", children: "The live listing you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.LIVE), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Live Listings" })] }) }) }) }));
     }

package/dist/features/media/finalize.js

@@ -44,10 +44,12 @@ export async function finalizeStagedMediaUrl(url) {
             const finalPath = await moveToFinalPath(asset.storagePath);
             await mediaAssetsRepository.promoteToFinalized(shortId, finalPath);
         }
+        // Non-fatal by construction: the returned URL is the same before and after
+        // the move, so a failed promotion leaves the asset in tmp/ and the proxy
+        // keeps serving it from there until the tmp-cleanup job reclaims it.
     }
     catch (_err) {
         void normalizeError(_err);
-        // Non-fatal: URL is still valid; proxy will serve whatever storagePath points to.
     }
     return url; // URL is stable — same before and after the file move
 }

package/dist/features/media/modals/ImageEditor.js

@@ -63,7 +63,7 @@ export function ImageEditor({ isOpen, imageUrl, onClose, onSave, aspectRatio, ou
         }
         catch (err) {
             void normalizeError(err);
-            showToast(err instanceof Error ? err.message : "Failed to save image.", "error");
+            showToast("Failed to save image.", "error");
         }
         finally {
             setSaving(false);

package/dist/features/media/modals/VideoThumbnailSelector.js

@@ -10,6 +10,7 @@ import { useState, useRef } from "react";
 import { useTranslations } from "next-intl";
 import { Alert, Button, Div, Modal, Row, Span, Spinner, Stack, Text } from "../../../ui";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 const __O = {
     hidden: "overflow-hidden",
 };
@@ -45,8 +46,10 @@ export function VideoThumbnailSelector({ isOpen, videoUrl, onClose, onSelect, on
             onClose();
         }
         catch (err) {
-            void normalizeError(err);
-            setError(err instanceof Error ? err.message : t("thumbnailError"));
+            const e = normalizeError(err);
+            // `t` is namespaced ("mediaEditor"), so it cannot resolve the absolute
+            // `errors.codes.*` keys — omit it and let the authored copy stand.
+            setError(toUserMessage(e.code, undefined, { fallback: t("thumbnailError") }));
         }
         finally {
             setIsCapturing(false);

package/dist/features/media/modals/VideoTrimModal.js

@@ -11,6 +11,7 @@ import { Alert, Button, Div, Modal, Row, Span, Stack, Text } from "../../../ui";
 import { MediaSlider } from "../components/MediaSlider";
 import { useMediaTrim } from "../hooks/useMedia";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 function formatTime(seconds) {
     const m = Math.floor(seconds / 60);
     const s = Math.floor(seconds % 60);
@@ -62,8 +63,10 @@ export function VideoTrimModal({ isOpen, videoUrl, onClose, onSave, endpoint, })
             onClose();
         }
         catch (err) {
-            void normalizeError(err);
-            setError(err instanceof Error ? err.message : t("trimError"));
+            const e = normalizeError(err);
+            // `t` is namespaced ("mediaEditor"), so it cannot resolve the absolute
+            // `errors.codes.*` keys — omit it and let the authored copy stand.
+            setError(toUserMessage(e.code, undefined, { fallback: t("trimError") }));
         }
     };
     const qualityLabels = {

package/dist/features/media/upload/MediaUploadField.js

@@ -320,7 +320,7 @@ kind, accept: acceptProp, maxSizeMB: maxSizeMBProp, disabled = false, helperText
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Upload failed");
+            setError("Upload failed");
         }
         finally {
             setIsLoading(false);
@@ -362,7 +362,7 @@ kind, accept: acceptProp, maxSizeMB: maxSizeMBProp, disabled = false, helperText
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Upload failed");
+            setError("Upload failed");
         }
         finally {
             setIsLoading(false);

package/dist/features/messages/hooks/useConversation.js

@@ -10,8 +10,18 @@
  * canonical Firestore message ordering wins.
  */
 import { useCallback, useEffect, useState } from "react";
-import { getClientRealtimeProvider } from "../../../contracts/client-realtime";
 import { acquireRealtimeSession } from "../../../contracts/realtime-session";
+// One scope for both message hooks, deliberately: /api/realtime/token issues a
+// SINGLE token covering all of this user's conversationIds, so a per-id scope
+// would make the list and the detail hook re-sign against each other on the
+// same page for no gain.
+//
+// 🛑 Known limitation, not fixed here: because the scope is constant, a
+// conversation created AFTER sign-in is not in the cached token's claims and
+// its subscription is denied until the token's expiry skew forces a re-sign.
+// The denial is now surfaced (see the error callback below) rather than
+// swallowed. The durable fix is to re-acquire on a permission denial.
+const MESSAGES_SCOPE = "messages";
 import { conversationPingPath, userConversationsPingPath, } from "../realtime";
 import { normalizeError } from "../../../errors/normalize";
 import { apiClient, ApiClientError } from "../../../http/ApiClient";
@@ -83,12 +93,16 @@ export function useConversation(conversationId) {
         // because `send()` calls `refetch()` directly.
         void (async () => {
             try {
-                release = await acquireRealtimeSession("messages", () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                const lease = await acquireRealtimeSession(MESSAGES_SCOPE, () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                release = lease.release;
                 if (cancelled) {
-                    release?.();
+                    release();
                     return;
                 }
-                unsubscribe = getClientRealtimeProvider().subscribe(conversationPingPath(conversationId), () => {
+                // Subscribe through the LEASE's provider — it is bound to the app this
+                // scope authenticated on. The global provider may be on a different app
+                // carrying another channel's claims.
+                unsubscribe = lease.provider.subscribe(conversationPingPath(conversationId), () => {
                     setIsConnected(true);
                     void refetch();
                 }, (err) => {

package/dist/features/messages/hooks/useConversations.js

@@ -5,8 +5,18 @@
  * conversations gets a new message.
  */
 import { useCallback, useEffect, useState } from "react";
-import { getClientRealtimeProvider } from "../../../contracts/client-realtime";
 import { acquireRealtimeSession } from "../../../contracts/realtime-session";
+// One scope for both message hooks, deliberately: /api/realtime/token issues a
+// SINGLE token covering all of this user's conversationIds, so a per-id scope
+// would make the list and the detail hook re-sign against each other on the
+// same page for no gain.
+//
+// 🛑 Known limitation, not fixed here: because the scope is constant, a
+// conversation created AFTER sign-in is not in the cached token's claims and
+// its subscription is denied until the token's expiry skew forces a re-sign.
+// The denial is now surfaced (see the error callback below) rather than
+// swallowed. The durable fix is to re-acquire on a permission denial.
+const MESSAGES_SCOPE = "messages";
 import { userConversationsPingPath } from "../realtime";
 import { normalizeError } from "../../../errors/normalize";
 import { apiClient } from "../../../http/ApiClient";
@@ -57,23 +67,30 @@ export function useConversations(userId, opts = {}) {
         // `// ignore`, so the whole live-list channel was inert while looking wired.
         void (async () => {
             try {
-                release = await acquireRealtimeSession("messages", () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                const lease = await acquireRealtimeSession(MESSAGES_SCOPE, () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                release = lease.release;
                 if (cancelled) {
-                    release?.();
+                    release();
                     return;
                 }
-                unsubscribe = getClientRealtimeProvider().subscribe(userConversationsPingPath(userId), () => {
+                // Subscribe through the LEASE's provider — see useConversation.
+                unsubscribe = lease.provider.subscribe(userConversationsPingPath(userId), () => {
                     void refetch();
                 }, (err) => {
-                    // Surfaced, not ignored. A denied subscription is a real defect and
-                    // silence here is what hid it for months.
+                    // A denied subscription is a real defect — silence is what hid this
+                    // channel being dead for months — so it is logged, not swallowed.
+                    // (This comment previously claimed "Surfaced, not ignored" while the
+                    // body only called normalizeError, which classifies without
+                    // reporting. That was the same documentation-that-lies pattern this
+                    // workstream exists to remove, so it now actually logs.)
                     void normalizeError(err);
+                    console.warn("[messages] conversations live-update subscription denied; list falls back to fetch-on-load");
                 });
+                // Provider unregistered or token fetch failed — non-fatal; the list
+                // still works via the one-shot fetch above, just without live updates.
             }
             catch (_err) {
                 void normalizeError(_err);
-                // Provider unregistered or token fetch failed — non-fatal; the list
-                // still works via the one-shot fetch above, just without live updates.
             }
         })();
         return () => {

package/dist/features/orders/components/RefundRequestView.js

@@ -16,6 +16,7 @@ import { Button, Checkbox, Div, Span, Stack, Text, Textarea } from "../../../ui"
 import { REFUND_COPY } from "../../../_internal/shared/features/orders/refund-copy";
 import { formatCurrency } from "../../../utils/number.formatter";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 const ACK_COUNT = REFUND_COPY.request.acknowledgments.length;
 const CLS_WARN_PANEL = "rounded-xl border border-warning bg-warning-surface p-[var(--appkit-space-4)] dark:border-warning";
 export function RefundRequestView({ order, onSubmitRequest, isLoading = false, className = "", }) {
@@ -37,8 +38,10 @@ export function RefundRequestView({ order, onSubmitRequest, isLoading = false, c
             await onSubmitRequest(reason.trim());
         }
         catch (err) {
-            void normalizeError(err);
-            setError(err instanceof Error ? err.message : REFUND_COPY.request.errorFallback);
+            const e = normalizeError(err);
+            setError(toUserMessage(e.code, undefined, {
+                fallback: REFUND_COPY.request.errorFallback,
+            }));
         }
     };
     return (_jsxs(Stack, { gap: "md", className: className, children: [_jsxs(Text, { size: "sm", color: "muted", children: [REFUND_COPY.request.orderTotalLabel, " ", _jsx(Span, { weight: "bold", children: formatCurrency(order.totalPrice, order.currency ?? "INR") })] }), _jsxs(Stack, { gap: "xs", children: [_jsxs(Text, { size: "sm", weight: "semibold", children: [REFUND_COPY.request.reasonLabel, " ", _jsx(Span, { "aria-hidden": true, children: "*" })] }), _jsx(Textarea, { value: reason, onChange: (e) => setReason(e.target.value), placeholder: REFUND_COPY.request.reasonPlaceholder, rows: 3, "aria-required": "true", "aria-label": REFUND_COPY.request.reasonLabel })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "semibold", children: REFUND_COPY.request.acknowledgeHeading }), REFUND_COPY.request.acknowledgments.map((text, i) => (_jsx(Checkbox, { checked: acknowledged[i], onChange: () => handleToggle(i), label: _jsx(Text, { size: "sm", className: "leading-snug", children: text }), "aria-label": `Acknowledgment ${i + 1}` }, i)))] }), error && (_jsx(Text, { size: "sm", color: "danger", role: "alert", children: error })), _jsx(Button, { variant: "danger", onClick: handleSubmit, disabled: !canSubmit, "aria-busy": isLoading, children: isLoading ? REFUND_COPY.request.submittingLabel : REFUND_COPY.request.submitLabel })] }));

package/dist/features/pre-orders/components/MarketplacePreorderCard.js

@@ -54,8 +54,10 @@ export function MarketplacePreorderCard({ product, className = "", variant = "gr
             await toggle();
         }
         catch (_err) {
+            // useWishlistToggle rolls back its optimistic state and raises its own
+            // toast on failure, so the heart returns to its true value on screen.
+            // Reporting again here would double-notify for one user action.
             void normalizeError(_err);
-            // The hook rolls back optimistic state when the mutation fails.
         }
     }, [toggle]);
     return (_jsxs(BaseListingCard, { isSelected: isSelected, variant: variant, className: className, onMouseDown: !isSelected ? longPress.onMouseDown : undefined, onMouseUp: !isSelected ? longPress.onMouseUp : undefined, onMouseLeave: !isSelected ? longPress.onMouseLeave : undefined, onTouchStart: !isSelected ? longPress.onTouchStart : undefined, onTouchEnd: !isSelected ? longPress.onTouchEnd : undefined, onTouchCancel: !isSelected ? longPress.onTouchCancel : undefined, children: [_jsxs(BaseListingCard.Hero, { aspect: "square", variant: variant, children: [_jsx(TextLink, { href: detailHref, className: "absolute inset-0 block", children: _jsx(MediaImage, { src: product.mainImage, alt: product.title, size: "card", fallback: "Product image" }) }), _jsxs(Stack, { className: "absolute right-2 top-2", align: "end", gap: "xs", children: [_jsx(Span, { layout: "inline-flex", color: "inverse", size: "xs", weight: "medium", className: "bg-cobalt", rounded: "full", padding: "pill-xs", children: mergedLabels.preOrderBadge }), product.featured && (_jsx(Span, { size: "xs", weight: "medium", className: CLS_PREORDER_BADGE, children: mergedLabels.featuredBadge }))] }), _jsxs(Stack, { className: "absolute left-2 top-2 pointer-events-none", gap: "xs", children: [product.partOfBundleIds && product.partOfBundleIds.length > 0 && (_jsx(Span, { className: CLS_SALE_BADGE, title: product.partOfBundleTitles?.[0] ? `In bundle: ${product.partOfBundleTitles[0]}` : "In a bundle", children: "Bundled" })), product.groupId && (_jsx(Span, { className: CLS_TRENDING_BADGE, title: product.groupTitle ? `Part of set: ${product.groupTitle}` : "Part of a set", children: product.isGroupParent ? "Set Parent" : "In Set" })), product.sublistingCategoryId && (_jsx(Span, { className: CLS_LIMITED_BADGE, title: "Has variants or sub-listings", children: "Has Variants" }))] }), onSelect && (_jsx(BaseListingCard.Checkbox, { selected: isSelected, onSelect: (event) => {

package/dist/features/pre-orders/components/PreOrderActionsClient.js

@@ -24,7 +24,7 @@ export function PreOrderActionsClient({ productId, price, currency, depositAmoun
                     setShowLoginModal(true);
                 }
                 else {
-                    setError(err instanceof Error ? err.message : "Failed to reserve. Please try again.");
+                    setError("Failed to reserve. Please try again.");
                 }
             }
         });

package/dist/features/pre-orders/components/PreOrderDetailPageView.js

@@ -73,7 +73,10 @@ function PreOrderBuyBarPanel({ reserveTarget, reservedCount, progressPct, produc
 export async function PreOrderDetailPageView({ id, initialPreOrder, onReserveNow, productFeatures }) {
     const product = initialPreOrder !== undefined
         ? (initialPreOrder ?? undefined)
-        : await productRepository.findByIdOrSlug(id).catch(() => undefined);
+        // The pre-order IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await productRepository.findByIdOrSlug(id);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Pre-Order Not Found" }), _jsx(Text, { color: "muted", children: "The pre-order item you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.PRE_ORDERS), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Pre-Orders" })] }) }) }) }));
     }

package/dist/features/products/components/PrizeDrawDetailPageView.js

@@ -68,7 +68,10 @@ function stripIsWon(items) {
 export async function PrizeDrawDetailPageView({ id, initialPrizeDraw, currentUserId, }) {
     const product = initialPrizeDraw !== undefined
         ? initialPrizeDraw ?? undefined
-        : await productRepository.findByIdOrSlug(id).catch(() => undefined);
+        // The prize draw IS this page's subject — a read failure must surface
+        // rather than become the same `undefined` a removed listing produces,
+        // which the "Not Found" branch below already handles.
+        : await productRepository.findByIdOrSlug(id);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Prize Draw Not Found" }), _jsx(Text, { color: "muted", children: "The prize draw you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.PRIZE_DRAWS), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Prize Draws" })] }) }) }) }));
     }

package/dist/features/products/components/ProductDetailPageView.js

@@ -41,6 +41,7 @@ import { computeRelatedItems, getReviewPageForProduct } from "../../../_internal
 import { GroupedListingsCarousel } from "../../grouped/components/GroupedListingsCarousel";
 import { getGroupsWithItemsForProduct } from "../../../_internal/server/features/grouped/data";
 import { getSiteSettingsGlobal } from "../../admin/utils/getSiteSettingsGlobal";
+import { safeRead } from "../../../errors/safe-read";
 import { canMakeOffer } from "../../../_internal/shared/listing-types/capabilities";
 import { normalizeListingType } from "../utils/listing-type";
 import { DEFAULT_MIN_OFFER_PERCENT } from "../../../_internal/shared/features/offers/config";
@@ -71,7 +72,10 @@ export async function ProductDetailPageView({ slug, initialProduct, renderOfferA
     // generateMetadata() and this component share the same in-flight promise.
     const product = initialProduct !== undefined
         ? (initialProduct ?? undefined)
-        : await productRepository.findByIdOrSlug(slug).catch(() => undefined);
+        // The product IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await productRepository.findByIdOrSlug(slug);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Product Not Found" }), _jsx(Text, { color: "muted", children: "The product you are looking for may have been removed or the link is incorrect." }), _jsx(Link, { href: String(ROUTES.PUBLIC.PRODUCTS), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Products" })] }) }) }) }));
     }
@@ -180,7 +184,9 @@ export async function ProductDetailPageView({ slug, initialProduct, renderOfferA
         getReviewPageForProduct(product.id),
         computeRelatedItems(product),
         getGroupsWithItemsForProduct(product.id),
-        getSiteSettingsGlobal().catch(() => null),
+        safeRead(() => getSiteSettingsGlobal(), {
+            route: "/products/[slug]", key: "product.siteSettings", fallback: null,
+        }),
     ]);
     // Site-wide kill switch. Absent/unreadable settings mean ON — a failed
     // settings read must not silently remove a working feature.

package/dist/features/products/components/ShareButton.js

@@ -11,10 +11,12 @@ export function ShareButton({ title, text, className = "" }) {
             try {
                 await navigator.share({ title: title ?? document.title, text, url });
                 return;
+                // navigator.share rejects on user cancellation exactly as it does on a
+                // real failure, so this is unreportable by construction — either way the
+                // clipboard fallback below still gives the user the link.
             }
             catch (_err) {
                 void normalizeError(_err);
-                // user cancelled or browser blocked — fall through to clipboard
             }
         }
         navigator.clipboard.writeText(url).catch(console.error);

package/dist/features/products/repository/loadProductFeatures.js

@@ -4,11 +4,19 @@
  * pages to hand `productFeatures` down as a prop and avoid per-card waterfalls.
  */
 import { productFeaturesRepository } from "./product-features.repository";
+import { safeRead } from "../../../errors/safe-read";
 export async function loadProductFeaturesForStore(storeId) {
+    // Feature badges decorate a card; a page without them is still correct, so
+    // both reads degrade — but a failure here silently strips "Free shipping" /
+    // "Authenticity guaranteed" from every card, which nobody would notice.
     const [platform, store] = await Promise.all([
-        productFeaturesRepository.listPlatform().catch(() => []),
+        safeRead(() => productFeaturesRepository.listPlatform(), {
+            route: "productFeatures", key: "productFeatures.platform", fallback: [],
+        }),
         storeId
-            ? productFeaturesRepository.listForStore(storeId).catch(() => [])
+            ? safeRead(() => productFeaturesRepository.listForStore(storeId), {
+                route: "productFeatures", key: "productFeatures.store", fallback: [],
+            })
             : Promise.resolve([]),
     ]);
     const seen = new Set();

package/dist/features/products/repository/products.repository.js

@@ -452,10 +452,11 @@ export class ProductRepository extends BaseRepository {
                 .update({
                 [PRODUCT_FIELDS.VIEW_COUNT]: increment(1),
             });
+            // Fire-and-forget analytics: a lost view increment changes no rendered
+            // content, so it must never break the product read path it rides with.
         }
         catch (_err) {
             void normalizeError(_err);
-            // View analytics must not break product read path.
         }
     }
     /**

package/dist/features/promotions/components/CouponCard.js

@@ -131,10 +131,12 @@ export function CouponCard({ coupon, labels: labelsProp, onCopy, className = "",
                     credentials: "include",
                     body: JSON.stringify({ couponCode: n.code, source: claimSource }),
                 });
+                // An anonymous visitor gets a 401 here by design, so a failure cannot
+                // be distinguished from the expected case. The redirect below still
+                // pre-fills the code, which is what the user actually asked for.
             }
             catch (_err) {
                 void normalizeError(_err);
-                /* anon/network — non-fatal */
             }
             if (typeof window !== "undefined") {
                 window.location.href = `/cart?coupon=${encodeURIComponent(n.code)}`;

package/dist/features/reviews/actions/review-actions.js

@@ -10,6 +10,7 @@ import { serverLogger } from "../../../monitoring";
 import { maskPublicReview } from "../../../security";
 import { finalizeStagedMediaArray, finalizeStagedMediaUrl, } from "../../media/finalize";
 import { reviewRepository } from "../repository/reviews.repository";
+import { safeRead } from "../../../errors/safe-read";
 import { productRepository } from "../../products/repository/products.repository";
 import { ProductStatusValues } from "../../products/schemas";
 import { userRepository } from "../../auth/repository/user.repository";
@@ -185,7 +186,13 @@ export async function listReviewsBySeller(sellerId) {
     }
     const reviewBatches = await Promise.all(productIds
         .slice(0, 20)
-        .map((id) => reviewRepository.findApprovedByProduct(id, 50).catch(() => [])));
+        // One product's reviews failing must not empty the whole seller feed —
+        // but it silently thins it, so each miss is recorded.
+        .map((id) => safeRead(() => reviewRepository.findApprovedByProduct(id, 50), {
+        route: "reviews.bySeller",
+        key: "reviews.findApprovedByProduct",
+        fallback: [],
+    })));
     // Each per-product batch is newest-first, but concatenating them yields product order,
     // not chronological order — the flattened list has to be re-sorted or callers get an
     // arbitrarily interleaved "latest reviews" list.

package/dist/features/reviews/components/ReviewDetailPageView.js

@@ -1,12 +1,16 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import Link from "next/link";
 import { reviewRepository } from "../../../repositories";
+import { safeRead } from "../../../errors/safe-read";
 import { Container, Div, Grid, Heading, Main, Nav, Section, Span, Text } from "../../../ui";
 import { ROUTES } from "../../../next";
 import { ReviewDetailShell } from "./ReviewDetailShell";
 import { ReviewCard } from "./ReviewsList";
 export async function ReviewDetailPageView({ id }) {
-    const doc = await reviewRepository.findById(id).catch(() => null);
+    // The review IS this page's subject — a read failure must surface rather than
+    // become the same `null` a removed review produces, which the "Review not
+    // found" branch below already handles.
+    const doc = await reviewRepository.findById(id);
     const review = doc;
     // storeId === storeSlug for stores in this project (pure slug IDs)
     const storeSlug = doc?.storeId ?? null;
@@ -15,8 +19,14 @@ export async function ReviewDetailPageView({ id }) {
     }
     const [sameProductDocs, sameStoreDocs] = await Promise.all([
         // 12 = the 6 rendered below, with headroom for the current review + any filtered out.
-        reviewRepository.findApprovedByProduct(review.productId, 12).catch(() => []),
-        storeSlug ? reviewRepository.findApprovedByStore(storeSlug).catch(() => []) : Promise.resolve([]),
+        safeRead(() => reviewRepository.findApprovedByProduct(review.productId, 12), {
+            route: "/reviews/[id]", key: "review.sameProduct", fallback: [],
+        }),
+        storeSlug
+            ? safeRead(() => reviewRepository.findApprovedByStore(storeSlug), {
+                route: "/reviews/[id]", key: "review.sameStore", fallback: [],
+            })
+            : Promise.resolve([]),
     ]);
     const sameProductReviews = sameProductDocs.filter((r) => r.id !== review.id).slice(0, 6);
     const sameStoreReviews = sameStoreDocs.filter((r) => r.id !== review.id).slice(0, 6);

package/dist/features/reviews/components/ReviewDetailShell.js

@@ -80,10 +80,12 @@ export function ReviewDetailShell({ review, storeHref }) {
             }
             setVoted(true);
             localStorage.setItem(storageKey, "1");
+            // The button stays un-voted and the count unchanged, so the user can
+            // simply press it again — this shell has no toast host of its own, and a
+            // failed helpful-vote costs nothing.
         }
         catch (_err) {
             void normalizeError(_err);
-            // silently fail
         }
         finally {
             setVoting(false);

package/dist/features/scams/actions/scam-actions.d.ts

@@ -30,7 +30,15 @@ export declare function getPublicScammerById(id: string): Promise<ScammerDocumen
  * Returns null if not found or not verified.
  */
 export declare function getScammerProfilePageData(id: string): Promise<ScammerProfilePageData | null>;
-export type SellerTrustStatus = "clear" | "flagged";
+/**
+ * `unknown` exists because `clear` is a POSITIVE SAFETY CLAIM — it renders as
+ * "✓ Verified Safe" next to a seller's name. Every read in
+ * `getSellerTrustStatus` used to fail open to `clear`, so a scam-registry
+ * outage actively endorsed a seller nobody had checked. Failing open is still
+ * right (an outage must not brand a legitimate seller a scammer), but the
+ * honest failure state is "we could not check", not "we checked and it's fine".
+ */
+export type SellerTrustStatus = "clear" | "flagged" | "unknown";
 export interface SellerTrustResult {
     status: SellerTrustStatus;
     /** seoSlug of matched verified scammer profiles — links to /scams/[slug]. Empty when clear. */