@mohasinac/appkit 4.30.18 → 4.30.19

package/dist/features/categories/repository/categories.repository.js

@@ -480,10 +480,12 @@ export class CategoriesRepository extends BaseRepository {
                 .collection(this.collection)
                 .doc(categoryId)
                 .update({ [CATEGORY_FIELDS.VIEW_COUNT]: increment(1) });
+            // Fire-and-forget analytics: a lost view increment changes nothing that
+            // renders, so it must never break the category read path it rides along
+            // with — the count is approximate by design.
         }
         catch (_err) {
             void normalizeError(_err);
-            // View analytics must not break category read path.
         }
     }
     generateSublistingId(name) {

package/dist/features/checkout/actions/checkout-value-otp-actions.js

@@ -9,6 +9,7 @@
 import { timingSafeEqual } from "crypto";
 import { ValidationError } from "../../../errors";
 import { normalizeError } from "../../../errors/normalize";
+import { safeRead } from "../../../errors/safe-read";
 import { serverLogger } from "../../../monitoring";
 import { sendEmail } from "../../contact/email";
 import { getAdminDb } from "../../../providers/db-firebase";
@@ -47,7 +48,15 @@ export async function sendCheckoutValueOtp(userId, userEmail, channel = "email",
         if (!addressId) {
             throw new ValidationError("Select a delivery address before sending the code via WhatsApp.");
         }
-        const settings = await siteSettingsRepository.getSingleton().catch(() => null);
+        // A failed settings read makes the WhatsApp channel look deliberately
+        // switched off ("send the code by email instead") — a defensible fallback,
+        // but one an operator has to be able to see, since it is indistinguishable
+        // from an admin having disabled it.
+        const settings = await safeRead(() => siteSettingsRepository.getSingleton(), {
+            route: "checkout/value-otp",
+            key: "checkoutValueOtp.siteSettings",
+            fallback: null,
+        });
         const creds = settings?.credentials ?? {};
         const whatsappOtpEnabled = settings?.notificationChannels?.whatsapp?.otpEnabled === true;
         const phoneNumberId = creds.whatsappPhoneNumberId?.trim() ?? "";

package/dist/features/classified/components/ClassifiedContactSellerPanel.js

@@ -36,7 +36,7 @@ export function ClassifiedContactSellerPanel({ productId, onContactSeller }) {
         }
         catch (e) {
             void normalizeError(e);
-            setError(e instanceof Error ? e.message : "Something went wrong");
+            setError("Something went wrong");
         }
         finally {
             setPending(false);

package/dist/features/classified/components/ClassifiedDetailPageView.js

@@ -22,6 +22,7 @@ import { GroupedListingsCarousel } from "../../grouped/components/GroupedListing
 import { getGroupsWithItemsForProduct } from "../../../_internal/server/features/grouped/data";
 import { ClassifiedContactSellerPanel } from "./ClassifiedContactSellerPanel";
 import { getSiteSettingsGlobal } from "../../admin/utils/getSiteSettingsGlobal";
+import { safeRead } from "../../../errors/safe-read";
 import { canMakeOffer } from "../../../_internal/shared/listing-types/capabilities";
 import { DEFAULT_MIN_OFFER_PERCENT } from "../../../_internal/shared/features/offers/config";
 import { ListingBottomActions } from "../../products/components/ListingBottomActions";
@@ -34,7 +35,10 @@ function toDescriptionHtml(raw) {
 export async function ClassifiedDetailPageView({ slug, initialProduct, renderOfferAction }) {
     const product = initialProduct !== undefined
         ? (initialProduct ?? undefined)
-        : await getClassifiedForDetail(slug).catch(() => undefined);
+        // The listing IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await getClassifiedForDetail(slug);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Classified Listing Not Found" }), _jsx(Text, { color: "muted", children: "The classified listing you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.CLASSIFIED), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Classifieds" })] }) }) }) }));
     }
@@ -58,7 +62,11 @@ export async function ClassifiedDetailPageView({ slug, initialProduct, renderOff
     const [{ relatedItems, relatedByBrand, relatedByTags, relatedByStore }, groups, siteSettings] = await Promise.all([
         computeRelatedItems(product),
         getGroupsWithItemsForProduct(product.id),
-        getSiteSettingsGlobal().catch(() => null),
+        safeRead(() => getSiteSettingsGlobal(), {
+            route: "/classified/[slug]",
+            key: "classified.siteSettings",
+            fallback: null,
+        }),
     ]);
     // Classifieds are the one non-standard type where haggling is the norm, so
     // `canMakeOffer` is true for them — but the seller still opts in per listing

package/dist/features/digital-codes/components/DigitalCodeDetailPageView.js

@@ -30,7 +30,10 @@ function toDescriptionHtml(raw) {
 export async function DigitalCodeDetailPageView({ slug, initialProduct, renderPrimaryActions }) {
     const product = initialProduct !== undefined
         ? (initialProduct ?? undefined)
-        : await getDigitalCodeForDetail(slug).catch(() => undefined);
+        // The listing IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await getDigitalCodeForDetail(slug);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Digital Code Listing Not Found" }), _jsx(Text, { color: "muted", children: "The digital code listing you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.DIGITAL_CODES), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Digital Codes" })] }) }) }) }));
     }

package/dist/features/events/components/EventBanner.js

@@ -13,10 +13,12 @@ export function EventBanner({ storageKey = "dismissed_event_banners", className
             const stored = sessionStorage.getItem(storageKey);
             if (stored)
                 setDismissedIds(JSON.parse(stored));
+            // sessionStorage is unavailable in private mode and over quota in some
+            // embedded browsers. Losing the dismissal list only means the banner
+            // reappears — nothing an operator can act on, and nothing the user loses.
         }
         catch (_err) {
             void normalizeError(_err);
-            // ignore session storage failures
         }
         setMounted(true);
     }, [storageKey]);
@@ -38,10 +40,11 @@ export function EventBanner({ storageKey = "dismissed_event_banners", className
         setDismissedIds(next);
         try {
             sessionStorage.setItem(storageKey, JSON.stringify(next));
+            // Same as the read above: the banner is already hidden in local state, so
+            // a failed persist only means it returns on the next page load.
         }
         catch (_err) {
             void normalizeError(_err);
-            // ignore
         }
     };
     return (_jsxs(Section, { tone: "accent-banner", className: [

package/dist/features/events/components/EventOfferCard.js

@@ -24,10 +24,12 @@ export function EventOfferCard({ couponCode, offerDescription, title = "Exclusiv
             await navigator.clipboard.writeText(couponCode);
             setCopied(true);
             setTimeout(() => setCopied(false), 2000);
+            // Clipboard access is denied outright on insecure origins and by user
+            // permission. The button simply never flips to "Copied", and the code is
+            // still visible on screen to select by hand.
         }
         catch (_err) {
             void normalizeError(_err);
-            /* clipboard unavailable — leave button as-is */
         }
     };
     return (_jsx(Div, { className: `${__P.p6}`, rounded: "2xl", border: "default", children: _jsxs(Stack, { gap: "md", children: [_jsxs(Stack, { gap: "xs", children: [_jsx(Heading, { level: 2, weight: "semibold", size: "2xl", children: title }), offerDescription ? (_jsx(Text, { size: "sm", color: "muted", children: offerDescription })) : null] }), _jsxs(Row, { surface: "muted", padding: "inline", align: "center", gap: "3", rounded: "lg", children: [_jsx(Code, { className: "flex-1", weight: "bold", size: "base", color: "primary", children: couponCode }), _jsx(Button, { type: "button", variant: "outline", onClick: copyCode, children: copied ? "Copied!" : "Copy code" })] }), _jsx(Div, { children: _jsx(Link, { href: href, children: _jsx(Button, { variant: "primary", children: "Apply at checkout" }) }) })] }) }));

package/dist/features/events/components/EventPollWidget.js

@@ -53,7 +53,7 @@ export function EventPollWidget({ eventId, pollConfig, eventStatus, totalEntries
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Something went wrong");
+            setError("Something went wrong");
         }
         finally {
             setIsLoading(false);

package/dist/features/events/components/SpinWheelView.js

@@ -4,6 +4,7 @@ import { useCallback, useMemo, useState } from "react";
 import { Button, ClaimCouponButton, Div, Heading, LoginRequiredModal, Row, Span, Stack, Text, useToast } from "../../../ui";
 import { isAuthError } from "../../../utils/auth-error";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 const CLS_WHEEL = "relative mx-auto aspect-square w-64 overflow-hidden rounded-full border-4 border-warning bg-[image:var(--appkit-gradient-promotion)]";
 // audit-content-alignment-ok: self-contained circular spin-wheel game widget, all text centered under the wheel by design
 const CLS_PRIZE_BOX = "rounded-xl border border-success bg-success-surface dark:border-success p-[var(--appkit-space-4)] text-center";
@@ -55,14 +56,14 @@ export function SpinWheelView({ eventId, prizes, alreadyUsed, initialPrizeId, in
             }, ANIMATION_MS);
         }
         catch (err) {
-            void normalizeError(err);
+            const e = normalizeError(err);
             setSpinning(false);
             if (isAuthError(err)) {
                 setShowLoginModal(true);
             }
             else {
                 setError(l.errorFallback);
-                showToast(err instanceof Error ? err.message : l.errorFallback, "error");
+                showToast(toUserMessage(e.code, undefined, { fallback: l.errorFallback }), "error");
             }
         }
     }, [disabled, eventId, l.errorFallback, onSpin, showToast]);

package/dist/features/grouped/components/GroupedListingEditorView.js

@@ -46,6 +46,7 @@ import { apiClient } from "../../../http";
 import { ADMIN_ENDPOINTS, SELLER_ENDPOINTS } from "../../../constants/api-endpoints";
 import { ROUTES } from "../../../next/routing/route-map";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 import { ProductInlineSelect } from "../../seller/components/ProductInlineSelect";
 import { groupedListingFormSchema, } from "../schemas/grouped-listing-form";
 const EMPTY = {
@@ -173,7 +174,7 @@ export function GroupedListingEditorView({ scope, groupId, fixedStoreId, onSaved
         }
         catch (err) {
             const e = normalizeError(err);
-            showToast(e.message || "Failed to save the group.", "error");
+            showToast(toUserMessage(e.code, undefined, { fallback: "Failed to save the group." }), "error");
         }
         finally {
             setSaving(false);

package/dist/features/history/hooks/useHistory.js

@@ -38,35 +38,28 @@ async function postAuthTrack(args) {
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify(args),
         });
+        // Recently-viewed tracking is a side effect of browsing, fired from a
+        // debounced timer with no UI attached. A lost entry costs the user nothing
+        // and there is no caller in a position to retry or report it.
     }
     catch (_err) {
         void normalizeError(_err);
-        // best-effort tracking
     }
 }
+// Both deletes below are user-initiated and deliberately let failures throw:
+// swallowing them made `remove`/`clear` report success for a DELETE that never
+// landed, and the row would silently return on the next load.
 async function deleteAuthItem(productId) {
-    try {
-        await fetch(ACCOUNT_ENDPOINTS.HISTORY_ITEM(productId), {
-            method: "DELETE",
-            credentials: "include",
-        });
-    }
-    catch (_err) {
-        void normalizeError(_err);
-        // ignore
-    }
+    await fetch(ACCOUNT_ENDPOINTS.HISTORY_ITEM(productId), {
+        method: "DELETE",
+        credentials: "include",
+    });
 }
 async function deleteAuthAll() {
-    try {
-        await fetch(ACCOUNT_ENDPOINTS.HISTORY, {
-            method: "DELETE",
-            credentials: "include",
-        });
-    }
-    catch (_err) {
-        void normalizeError(_err);
-        // ignore
-    }
+    await fetch(ACCOUNT_ENDPOINTS.HISTORY, {
+        method: "DELETE",
+        credentials: "include",
+    });
 }
 export function useHistory(userId) {
     const isAuth = !!userId;
@@ -81,6 +74,9 @@ export function useHistory(userId) {
             else {
                 setItems(getGuestHistory());
             }
+            // fetchAuthHistory already degrades to [] on its own, and getGuestHistory
+            // is a localStorage read that fails only in private mode — either way the
+            // list stays as it was, which is the correct visible outcome here.
         }
         catch (err) {
             void normalizeError(err);
@@ -131,14 +127,20 @@ export function useHistory(userId) {
         trackTimers.current.set(key, timer);
     }, [isAuth]);
     const remove = useCallback(async (productId) => {
-        if (isAuth) {
-            await deleteAuthItem(productId);
-            await loadItems();
+        try {
+            if (isAuth) {
+                await deleteAuthItem(productId);
+                await loadItems();
+            }
+            else {
+                setItems(removeGuestHistoryItem(productId));
+            }
         }
-        else {
-            setItems(removeGuestHistoryItem(productId));
+        catch (_err) {
+            void normalizeError(_err);
+            showToast("Failed to remove this item from history.", "error");
         }
-    }, [isAuth, loadItems]);
+    }, [isAuth, loadItems, showToast]);
     const clear = useCallback(async () => {
         try {
             if (isAuth) {

package/dist/features/homepage/components/AdSlot.js

@@ -16,10 +16,12 @@ function AdsenseAd({ config }) {
             return;
         try {
             (window.adsbygoogle = window.adsbygoogle || []).push({});
+            // adsbygoogle is injected by a third-party script that ad blockers and
+            // consent walls routinely prevent from loading. The <ins> below simply
+            // stays unfilled — there is no failure the site can act on.
         }
         catch (_err) {
             void normalizeError(_err);
-            // AdSense not loaded yet — no-op
         }
     }, []);
     return (_jsx(Div, { ref: ref, children: _jsx("ins", { className: "adsbygoogle block", "data-ad-client": config.adsenseClient ?? "", "data-ad-slot": config.adsenseSlot ?? "", "data-ad-format": config.adsenseFormat ?? "auto", "data-full-width-responsive": "true" }) }));

package/dist/features/homepage/components/GoogleReviewsSection.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring/server-logger";
 import { Anchor, Div, GRID_MAP, Heading, HandModeRow, Row, Section, Span, Stack, Text } from "../../../ui";
 import { MediaImage } from "../../media/MediaImage";
 import { siteSettingsRepository } from "../../admin/repository/site-settings.repository";
@@ -60,8 +61,13 @@ export async function GoogleReviewsSection(config) {
         totalRatings = result.totalRatings;
     }
     catch (_err) {
-        void normalizeError(_err);
-        // Fail silently — empty state shown
+        // The section renders its empty state below, which is indistinguishable
+        // from a place that genuinely has no reviews — and Google Places calls are
+        // billed, so a persistent failure is worth an operator seeing.
+        serverLogger.warn("homepage.googleReviews: Places fetch failed", {
+            placeId,
+            error: normalizeError(_err).message,
+        });
     }
     const gridClass = layout === "carousel"
         ? "flex gap-[var(--appkit-space-4)] overflow-x-auto pb-[var(--appkit-space-2)] snap-x snap-mandatory"

package/dist/features/homepage/components/MarketplaceHomepageView.js

@@ -3,6 +3,7 @@ import { sieveFilter, SIEVE_OP } from "@mohasinac/appkit";
 import { sortBy } from "@mohasinac/appkit";
 import { Div, Main } from "../../../ui";
 import { carouselRepository, faqsRepository, siteSettingsRepository } from "../../../repositories";
+import { safeRead } from "../../../errors/safe-read";
 import { fetchLiveStats } from "../lib/live-stats";
 import { renderSection, AnnouncementBar } from "../lib/section-renderer";
 import { homepageSectionsRepository } from "../repository/homepage-sections.repository";
@@ -28,14 +29,25 @@ function toCarouselSlides(docs) {
     }));
 }
 export async function MarketplaceHomepageView({ adSlots, newsletterFormSlot, onBannerDismiss, } = {}) {
-    const slides = await carouselRepository.getActiveSlides().catch(() => []);
-    const siteSettings = await siteSettingsRepository.getSingleton().catch(() => null);
+    // Every read on this page is a RAIL: the homepage must still render when one
+    // fails, but a failure has to be distinguishable from an empty catalogue —
+    // that is exactly Root Cause #59, and safeRead is what records it.
+    const slides = await safeRead(() => carouselRepository.getActiveSlides(), {
+        route: "/", key: "homepage.carouselSlides", fallback: [],
+    });
+    const siteSettings = await safeRead(() => siteSettingsRepository.getSingleton(), {
+        route: "/", key: "homepage.siteSettings", fallback: null,
+    });
     const announcementMessage = siteSettings?.announcementBar?.message?.trim() ||
         "🎉 Up to 15% Off on Pokémon TCG this week — Use code SAVE15";
     const showAnnouncement = siteSettings?.announcementBar?.enabled ?? true;
     const [allSections, rawFaqItems] = await Promise.all([
-        homepageSectionsRepository.getEnabledSections().catch(() => []),
-        faqsRepository.getHomepageFAQs().catch(() => []),
+        safeRead(() => homepageSectionsRepository.getEnabledSections(), {
+            route: "/", key: "homepage.enabledSections", fallback: [],
+        }),
+        safeRead(() => faqsRepository.getHomepageFAQs(), {
+            route: "/", key: "homepage.faqs", fallback: [],
+        }),
     ]);
     // Respect the feature flags. This gate existed but lived inside a function
     // with no call sites, so until 2026-08-24 turning off `auctions` hid auctions
@@ -87,12 +99,24 @@ export async function MarketplaceHomepageView({ adSlots, newsletterFormSlot, onB
         activeTypes.has("products") ? getFeaturedProducts(12) : null,
         activeTypes.has("auctions") ? getFeaturedAuctions(12) : null,
         activeTypes.has("pre-orders") ? getFeaturedPreOrders(12) : null,
-        activeTypes.has("categories") ? listTopLevelCategories(12).catch(() => null) : null,
-        activeTypes.has("brands") ? listBrandCategories(12).catch(() => null) : null,
-        activeTypes.has("featured-bundles") ? listFeaturedBundles(8).catch(() => null) : null,
-        activeTypes.has("stores") ? listStores({ pageSize: 8, sorts: sortBy("averageRating", "DESC") }).catch(() => null) : null,
-        activeTypes.has("blog-articles") ? getFeaturedBlogPosts(6).catch(() => null) : null,
-        activeTypes.has("events") ? listPublicEvents({ filters: sieveFilter("status", SIEVE_OP.EQ, "active"), pageSize: 6 }).catch(() => null) : null,
+        activeTypes.has("categories")
+            ? safeRead(() => listTopLevelCategories(12), { route: "/", key: "homepage.categories", fallback: null })
+            : null,
+        activeTypes.has("brands")
+            ? safeRead(() => listBrandCategories(12), { route: "/", key: "homepage.brands", fallback: null })
+            : null,
+        activeTypes.has("featured-bundles")
+            ? safeRead(() => listFeaturedBundles(8), { route: "/", key: "homepage.featuredBundles", fallback: null })
+            : null,
+        activeTypes.has("stores")
+            ? safeRead(() => listStores({ pageSize: 8, sorts: sortBy("averageRating", "DESC") }), { route: "/", key: "homepage.stores", fallback: null })
+            : null,
+        activeTypes.has("blog-articles")
+            ? safeRead(() => getFeaturedBlogPosts(6), { route: "/", key: "homepage.blogPosts", fallback: null })
+            : null,
+        activeTypes.has("events")
+            ? safeRead(() => listPublicEvents({ filters: sieveFilter("status", SIEVE_OP.EQ, "active"), pageSize: 6 }), { route: "/", key: "homepage.events", fallback: null })
+            : null,
     ]);
     // ProductDocument / BlogDocument / EventDocument have Date fields and extra Firestore-only
     // fields absent from the corresponding *Item types. The casts below are safe: section

package/dist/features/homepage/components/SocialFeedSection.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { normalizeError } from "../../../errors/normalize";
+import { safeRead } from "../../../errors/safe-read";
 import { Anchor, Div, GRID_MAP, Heading, HandModeRow, Section, Stack, Text } from "../../../ui";
 import { SocialPostCard } from "./SocialPostCard";
 import { fetchInstagramPosts, fetchFacebookPosts, fetchTikTokPosts, fetchDeviantArtPosts, } from "../lib/social-feed-fetcher";
@@ -47,7 +48,9 @@ async function loadPosts(config) {
     if (!handle)
         return { posts: [], error: `A handle is required for ${PLATFORM_LABELS[platform]}.` };
     try {
-        const credentials = await siteSettingsRepository.getDecryptedCredentials().catch(() => null);
+        // A failed credentials read is reported below as "token not configured in
+        // Site Settings", which is actionable but wrong — record the real cause.
+        const credentials = await safeRead(() => siteSettingsRepository.getDecryptedCredentials(), { route: "/", key: "homepage.socialFeed.credentials", fallback: null });
         switch (platform) {
             case "instagram": {
                 const token = credentials?.metaPageAccessToken;

package/dist/features/homepage/lib/live-stats.js

@@ -81,7 +81,14 @@ export async function fetchLiveStats(requests) {
             }
             catch (_err) {
                 void normalizeError(_err);
-                // silently fall back to static value
+                // Falling back to the admin-authored static value is correct — but a
+                // stale number that looks live is exactly the failure this must not
+                // hide, so name the collection that could not be counted.
+                serverLogger.warn("homepage.liveStats: collection count failed", {
+                    statKey: key,
+                    collection,
+                    error: normalizeError(_err).message,
+                });
             }
         })());
     }

package/dist/features/homepage/repository/carousel.repository.js

@@ -234,10 +234,11 @@ export class CarouselRepository extends BaseRepository {
                 "stats.views": increment(1),
                 "stats.lastViewed": new Date(),
             });
+            // Fire-and-forget analytics: a lost view increment changes nothing that
+            // renders, and it must never break the carousel read it rides along with.
         }
         catch (_e) {
             void normalizeError(_e);
-            // Swallow errors — analytics failures must not break the carousel response
         }
     }
 }

package/dist/features/live/components/LiveItemDetailPageView.js

@@ -33,7 +33,10 @@ function toDescriptionHtml(raw) {
 export async function LiveItemDetailPageView({ slug, initialProduct, renderActions }) {
     const product = initialProduct !== undefined
         ? (initialProduct ?? undefined)
-        : await getLiveItemForDetail(slug).catch(() => undefined);
+        // The listing IS this page's subject — a read failure must surface rather
+        // than become the same `undefined` a removed listing produces, which the
+        // "Not Found" branch below already handles.
+        : await getLiveItemForDetail(slug);
     if (!product) {
         return (_jsx(Main, { children: _jsx(Section, { padding: "y-5xl", children: _jsx(Container, { size: "md", children: _jsxs(Stack, { align: "start", gap: "md", className: "text-left", children: [_jsx(Heading, { level: 1, size: "2xl", weight: "semibold", color: "primary", children: "Live Listing Not Found" }), _jsx(Text, { color: "muted", children: "The live listing you are looking for may have been removed." }), _jsx(Link, { href: String(ROUTES.PUBLIC.LIVE), className: "text-[length:var(--appkit-text-sm)] font-medium text-primary-600 hover:underline", children: "Browse Live Listings" })] }) }) }) }));
     }

package/dist/features/media/finalize.js

@@ -44,10 +44,12 @@ export async function finalizeStagedMediaUrl(url) {
             const finalPath = await moveToFinalPath(asset.storagePath);
             await mediaAssetsRepository.promoteToFinalized(shortId, finalPath);
         }
+        // Non-fatal by construction: the returned URL is the same before and after
+        // the move, so a failed promotion leaves the asset in tmp/ and the proxy
+        // keeps serving it from there until the tmp-cleanup job reclaims it.
     }
     catch (_err) {
         void normalizeError(_err);
-        // Non-fatal: URL is still valid; proxy will serve whatever storagePath points to.
     }
     return url; // URL is stable — same before and after the file move
 }

package/dist/features/media/modals/ImageEditor.js

@@ -63,7 +63,7 @@ export function ImageEditor({ isOpen, imageUrl, onClose, onSave, aspectRatio, ou
         }
         catch (err) {
             void normalizeError(err);
-            showToast(err instanceof Error ? err.message : "Failed to save image.", "error");
+            showToast("Failed to save image.", "error");
         }
         finally {
             setSaving(false);

package/dist/features/media/modals/VideoThumbnailSelector.js

@@ -10,6 +10,7 @@ import { useState, useRef } from "react";
 import { useTranslations } from "next-intl";
 import { Alert, Button, Div, Modal, Row, Span, Spinner, Stack, Text } from "../../../ui";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 const __O = {
     hidden: "overflow-hidden",
 };
@@ -45,8 +46,10 @@ export function VideoThumbnailSelector({ isOpen, videoUrl, onClose, onSelect, on
             onClose();
         }
         catch (err) {
-            void normalizeError(err);
-            setError(err instanceof Error ? err.message : t("thumbnailError"));
+            const e = normalizeError(err);
+            // `t` is namespaced ("mediaEditor"), so it cannot resolve the absolute
+            // `errors.codes.*` keys — omit it and let the authored copy stand.
+            setError(toUserMessage(e.code, undefined, { fallback: t("thumbnailError") }));
         }
         finally {
             setIsCapturing(false);

package/dist/features/media/modals/VideoTrimModal.js

@@ -11,6 +11,7 @@ import { Alert, Button, Div, Modal, Row, Span, Stack, Text } from "../../../ui";
 import { MediaSlider } from "../components/MediaSlider";
 import { useMediaTrim } from "../hooks/useMedia";
 import { normalizeError } from "../../../errors/normalize";
+import { toUserMessage } from "../../../errors/error-display-map";
 function formatTime(seconds) {
     const m = Math.floor(seconds / 60);
     const s = Math.floor(seconds % 60);
@@ -62,8 +63,10 @@ export function VideoTrimModal({ isOpen, videoUrl, onClose, onSave, endpoint, })
             onClose();
         }
         catch (err) {
-            void normalizeError(err);
-            setError(err instanceof Error ? err.message : t("trimError"));
+            const e = normalizeError(err);
+            // `t` is namespaced ("mediaEditor"), so it cannot resolve the absolute
+            // `errors.codes.*` keys — omit it and let the authored copy stand.
+            setError(toUserMessage(e.code, undefined, { fallback: t("trimError") }));
         }
     };
     const qualityLabels = {

package/dist/features/media/upload/MediaUploadField.js

@@ -320,7 +320,7 @@ kind, accept: acceptProp, maxSizeMB: maxSizeMBProp, disabled = false, helperText
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Upload failed");
+            setError("Upload failed");
         }
         finally {
             setIsLoading(false);
@@ -362,7 +362,7 @@ kind, accept: acceptProp, maxSizeMB: maxSizeMBProp, disabled = false, helperText
         }
         catch (err) {
             void normalizeError(err);
-            setError(err instanceof Error ? err.message : "Upload failed");
+            setError("Upload failed");
         }
         finally {
             setIsLoading(false);

package/dist/features/messages/hooks/useConversation.js

@@ -10,8 +10,18 @@
  * canonical Firestore message ordering wins.
  */
 import { useCallback, useEffect, useState } from "react";
-import { getClientRealtimeProvider } from "../../../contracts/client-realtime";
 import { acquireRealtimeSession } from "../../../contracts/realtime-session";
+// One scope for both message hooks, deliberately: /api/realtime/token issues a
+// SINGLE token covering all of this user's conversationIds, so a per-id scope
+// would make the list and the detail hook re-sign against each other on the
+// same page for no gain.
+//
+// 🛑 Known limitation, not fixed here: because the scope is constant, a
+// conversation created AFTER sign-in is not in the cached token's claims and
+// its subscription is denied until the token's expiry skew forces a re-sign.
+// The denial is now surfaced (see the error callback below) rather than
+// swallowed. The durable fix is to re-acquire on a permission denial.
+const MESSAGES_SCOPE = "messages";
 import { conversationPingPath, userConversationsPingPath, } from "../realtime";
 import { normalizeError } from "../../../errors/normalize";
 import { apiClient, ApiClientError } from "../../../http/ApiClient";
@@ -83,12 +93,16 @@ export function useConversation(conversationId) {
         // because `send()` calls `refetch()` directly.
         void (async () => {
             try {
-                release = await acquireRealtimeSession("messages", () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                const lease = await acquireRealtimeSession(MESSAGES_SCOPE, () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
+                release = lease.release;
                 if (cancelled) {
-                    release?.();
+                    release();
                     return;
                 }
-                unsubscribe = getClientRealtimeProvider().subscribe(conversationPingPath(conversationId), () => {
+                // Subscribe through the LEASE's provider — it is bound to the app this
+                // scope authenticated on. The global provider may be on a different app
+                // carrying another channel's claims.
+                unsubscribe = lease.provider.subscribe(conversationPingPath(conversationId), () => {
                     setIsConnected(true);
                     void refetch();
                 }, (err) => {