@mohasinac/appkit 4.30.19 → 4.31.0

package/dist/security/index.d.ts

@@ -6,7 +6,5 @@ export type { UserRole } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
 export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, piiBlindIndex, piiIndicesFor, getPiiConfigError, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, } from "./pii-encrypt";
 export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-mask";
-export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
+export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
-export type { Permission, RoleDefinition, RbacConfig, ResolvedUser, RbacHookReturn, } from "./rbac";
-export { DEFAULT_ROLES, resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, createRbacHook, Can, createRequirePermission, createRequirePermissionSync, createRbacMiddleware, } from "./rbac";

package/dist/security/index.js

@@ -7,6 +7,23 @@ export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPi
 // pii-encrypt.ts) so this barrel stays safe to re-export from the
 // universal client+server index.ts. See pii-mask.ts's header comment.
 export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-mask";
-export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
+export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
-export { DEFAULT_ROLES, resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, createRbacHook, Can, createRequirePermission, createRequirePermissionSync, createRbacMiddleware, } from "./rbac";
+// RBAC system — DELETED 2026-08-29.
+//
+// `security/rbac/**` was a complete second permission system: DEFAULT_ROLES,
+// resolvePermissions, createRbacHook, createRequirePermission(Sync),
+// createRbacMiddleware, <Can>, and its own `Permission` type. It had ZERO
+// consumers outside its own directory and these barrels, and it looked alive on
+// a grep only because its permission strings coincidentally overlapped the real
+// union (a hazard action-defs.ts:129 already warned about).
+//
+// It was worse than inert. `appkit/src/index.ts` re-exported ITS `Permission`
+// and ITS `hasPermission` — so a consumer importing either from the package
+// root silently got the dead 6-role model instead of the live 130-member union
+// and its helpers. Root Cause #53's exact shape, one module over.
+//
+// The live system is `features/auth/permissions/constants.ts` (the union,
+// PERMISSION_GROUPS, hasPermission/hasAny/hasAll) plus
+// `_internal/server/features/auth/permissions.ts` (getServerPermissions,
+// checkPermission). Import from there.

package/dist/security/pii-encrypt.js

@@ -222,6 +222,22 @@ export function encryptPiiFields(doc, piiFields) {
         }
         else {
             result[field] = encryptValue(value);
+            /*
+             * 🛑 The derived name is not always the name readers query.
+             *
+             * `phoneNumber` yields `phoneNumberIndex`, and NOTHING in this codebase
+             * reads that — every lookup uses `phoneIndex` (`USER_PII_INDEX_MAP`,
+             * `byPhoneIndex`, `USER_FIELDS.PHONE_INDEX`). `BaseRepository` patches
+             * around it by *additionally* spreading `piiIndicesFor(data,
+             * piiIndexMap)`, so a user document has carried BOTH the correct
+             * `phoneIndex` and a dead `phoneNumberIndex` on every write.
+             *
+             * The derivation stays, because `email` -> `emailIndex` is right and
+             * several callers depend on it, and because removing it would silently
+             * drop indices for every field whose repository has no `piiIndexMap`
+             * entry. Where a field's index name differs, the MAP is the authority —
+             * which is why `scripts/lib/pii-seed.mjs` indexes only from the map.
+             */
             result[`${field}Index`] = hmacBlindIndex(value);
         }
     }

package/dist/security/pii-schemas.d.ts

@@ -56,26 +56,12 @@ export declare const BID_PII_FIELDS: readonly ["userEmail"];
 export declare const TOKEN_PII_FIELDS: readonly ["email"];
 /** Blind-index mapping for token email queries */
 export declare const TOKEN_PII_INDEX_MAP: Record<string, string>;
-/**
- * PII fields in conversations — buyer↔seller message bodies.
- *
- * `messages[].body` uses the array-path form, and `lastMessage` is the
- * denormalised copy of the newest body: encrypting one without the other would
- * leave every conversation's latest message readable at rest, which is most of
- * the exposure.
- *
- * Participant display names are deliberately NOT here — decision D1 keeps names
- * searchable, and both sides already know who they are talking to.
- */
-export declare const CONVERSATION_PII_FIELDS: readonly ["lastMessage", "messages[].body"];
 /** PII fields in reviews */
 export declare const REVIEW_PII_FIELDS: readonly ["userName"];
 /** Blind-index mapping for queryable review PII */
 export declare const REVIEW_PII_INDEX_MAP: Record<string, string>;
 /** PII fields in offers (buyer + seller data) */
 export declare const OFFER_PII_FIELDS: readonly ["buyerName", "buyerEmail", "sellerName"];
-/** PII fields in chat rooms */
-export declare const CHAT_PII_FIELDS: readonly ["buyerName", "sellerName"];
 /** PII fields in event entries */
 export declare const EVENT_ENTRY_PII_FIELDS: readonly ["userDisplayName", "userEmail", "ipAddress"];
 /** PII fields in lottery entries */

package/dist/security/pii-schemas.js

@@ -85,21 +85,15 @@ export const TOKEN_PII_FIELDS = ["email"];
 export const TOKEN_PII_INDEX_MAP = {
     email: "emailIndex",
 };
-/**
- * PII fields in conversations — buyer↔seller message bodies.
- *
- * `messages[].body` uses the array-path form, and `lastMessage` is the
- * denormalised copy of the newest body: encrypting one without the other would
- * leave every conversation's latest message readable at rest, which is most of
- * the exposure.
+/*
+ * `CONVERSATION_PII_FIELDS` (`lastMessage`, `messages[].body`) was removed with
+ * the conversations feature on 2026-08-31.
  *
- * Participant display names are deliberately NOT here — decision D1 keeps names
- * searchable, and both sides already know who they are talking to.
+ * 🛑 Its array-path form was the ONLY user of `encryptPiiFields`' `[]` syntax
+ * outside status history. If a future schema needs to encrypt a field inside an
+ * array, check that machinery still works before relying on it — a path that no
+ * caller exercises is a path nothing proves.
  */
-export const CONVERSATION_PII_FIELDS = [
-    "lastMessage",
-    "messages[].body",
-];
 /** PII fields in reviews */
 export const REVIEW_PII_FIELDS = ["userName"];
 /** Blind-index mapping for queryable review PII */
@@ -112,8 +106,6 @@ export const OFFER_PII_FIELDS = [
     "buyerEmail",
     "sellerName",
 ];
-/** PII fields in chat rooms */
-export const CHAT_PII_FIELDS = ["buyerName", "sellerName"];
 /** PII fields in event entries */
 export const EVENT_ENTRY_PII_FIELDS = [
     "userDisplayName",

package/dist/seed/_helpers/category-forest.js

@@ -18,8 +18,8 @@
  * @tag consumers:seed/categories-seed-data.ts
  * @tag sideEffects:none
  */
-import { seedExtMedia } from "./media";
-const cover = (slug) => seedExtMedia(`https://picsum.photos/seed/category-image-${slug}-20260101/1200/600`);
+import { seedPhoto } from "../_helpers/media";
+const cover = (slug) => seedPhoto(`category-image-${slug}-20260101`, 1200, 600);
 // ─────────────────────────────────────────────────────────────────────────────
 // Root 1 — Spinning Tops. The Beyblade catalogue, four generations deep:
 //   generation -> part-family -> specific line

package/dist/seed/_helpers/media.d.ts

@@ -1 +1,20 @@
 export declare function seedExtMedia(url: string): string;
+/**
+ * Turn a seed key into something a person would read.
+ *
+ * `art-image-dranzer-phoenix-2-20260817` → `Dranzer Phoenix`
+ *
+ * Strips the trailing `-YYYYMMDD` stamp, a trailing image index, and the
+ * leading `<kind>-image-` prefix that every seed key carries — all of which are
+ * bookkeeping, not the name of the thing.
+ */
+export declare function seedPhotoLabel(seed: string): string;
+/**
+ * A deterministic, labelled placeholder image for seed data, already wrapped in
+ * the media proxy.
+ *
+ * Deterministic on purpose — Root Cause #25: a seed file is re-executed on every
+ * `appkit-seed` invocation, so anything non-stable here would give the same
+ * fixture a different URL on every run.
+ */
+export declare function seedPhoto(seed: string, width: number, height: number): string;

package/dist/seed/_helpers/media.js

@@ -25,3 +25,78 @@ export function seedExtMedia(url) {
         return url;
     return MEDIA_ENDPOINTS.EXT_URL(url);
 }
+/* ── Seed photography ────────────────────────────────────────────────────── */
+/*
+ * WHY THIS EXISTS
+ *
+ * The seed catalogue used to name its image host **409 times**, in 30 files, as
+ * `https://picsum.photos/seed/<seed>/<w>/<h>` literals. On 2026-08-31 picsum
+ * went down — 503 from its origin AND its Fastly CDN — and because the host was
+ * written into every URL rather than referenced from one place, virtually every
+ * image on the production site broke at once and there was no single edit that
+ * could move them.
+ *
+ * That is the actual defect. A third party going down is not preventable; being
+ * unable to react to it in one line is.
+ *
+ * Measured the same day, direct: picsum 503 · fastly.picsum 503 (10.5s) ·
+ * placekitten 521 · loremflickr 200 but 5.4s, which exceeds the proxy's own 4s
+ * fetch timeout · placehold.co 200 in 0.58s. Hence placehold.co.
+ *
+ * It renders the item's own NAME on the tile, which is a real gain over random
+ * photography for a demo catalogue: every card now says what it is, and nobody
+ * can mistake seeded data for real inventory.
+ */
+/** The one place a seed image host is named. Changing it is a one-line edit. */
+const SEED_PHOTO_HOST = "https://placehold.co";
+/**
+ * Muted backgrounds, all dark enough for the same light foreground.
+ *
+ * Raw hex rather than theme tokens because these are baked into a URL that a
+ * third party renders — no stylesheet and no CSS custom property is in scope.
+ */
+const SEED_PHOTO_COLOURS = ["1e293b", "334155", "3f3f46", "44403c", "312e81", "164e63"];
+const SEED_PHOTO_FG = "f8fafc";
+/** Deterministic 32-bit hash. Same seed, same colour, every reseed. */
+function seedHash(input) {
+    let h = 2166136261;
+    for (let i = 0; i < input.length; i += 1) {
+        h ^= input.charCodeAt(i);
+        h = Math.imul(h, 16777619);
+    }
+    return h >>> 0;
+}
+/**
+ * Turn a seed key into something a person would read.
+ *
+ * `art-image-dranzer-phoenix-2-20260817` → `Dranzer Phoenix`
+ *
+ * Strips the trailing `-YYYYMMDD` stamp, a trailing image index, and the
+ * leading `<kind>-image-` prefix that every seed key carries — all of which are
+ * bookkeeping, not the name of the thing.
+ */
+export function seedPhotoLabel(seed) {
+    const cleaned = seed
+        .replace(/-\d{8}$/, "")
+        .replace(/-\d+$/, "")
+        .replace(/^(?:product|art|sticker|stickers|auction|preorder|prizedraw|classified|digitalcode|live|blog|event|store|user|category|brand|bundle|group|review|ad|carousel|slide)-(?:image|cover|banner|logo|avatar|photo)-/, "")
+        .replace(/^(?:image|cover|banner|logo|avatar|photo)-/, "")
+        .replace(/-/g, " ")
+        .trim();
+    if (!cleaned)
+        return "LetItRip";
+    return cleaned.replace(/\b[a-z]/g, (c) => c.toUpperCase());
+}
+/**
+ * A deterministic, labelled placeholder image for seed data, already wrapped in
+ * the media proxy.
+ *
+ * Deterministic on purpose — Root Cause #25: a seed file is re-executed on every
+ * `appkit-seed` invocation, so anything non-stable here would give the same
+ * fixture a different URL on every run.
+ */
+export function seedPhoto(seed, width, height) {
+    const bg = SEED_PHOTO_COLOURS[seedHash(seed) % SEED_PHOTO_COLOURS.length];
+    const text = encodeURIComponent(seedPhotoLabel(seed));
+    return seedExtMedia(`${SEED_PHOTO_HOST}/${width}x${height}/${bg}/${SEED_PHOTO_FG}/png?text=${text}`);
+}

package/dist/seed/blog-posts-seed-data.js

@@ -14,7 +14,7 @@
  * @tag sideEffects:none
  */
 import { withBlogSearchTxt } from "./_helpers/search-txt-wrappers";
-import { seedExtMedia } from "./_helpers/media";
+import { seedPhoto } from "./_helpers/media";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
 const _rawblogPostsSeedData = [
@@ -24,8 +24,8 @@ const _rawblogPostsSeedData = [
         title: "How to Spot a Genuine Takara-Tomy Beyblade (vs. Counterfeit Clones)",
         slug: "spot-genuine-takara-tomy-beyblade",
         excerpt: "Learn the telltale signs that distinguish a genuine Takara-Tomy Beyblade from a cheap clone — from the laser-etched logo to the weight of the metal driver.",
-        content: `<h2>The Laser-Etched Logo</h2><p>Genuine Takara-Tomy Beyblades have a crisp, laser-etched "TAKARA TOMY" logo on the underside of the layer or base. Clones use a shallow, blurry stamp that smudges under a fingernail scratch test.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-genuine-beyblade-logo-1-20260101/1000/600")}" alt="Close-up of the genuine Takara-Tomy laser-etched logo" /><h2>Weight and Balance</h2><p>A genuine metal-fusion driver has a consistent, dense weight — clones often use lighter zinc alloy that feels noticeably hollow. Spin the beyblade on a flat glass surface: a genuine driver spins true with almost no wobble.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-genuine-beyblade-weight-2-20260101/1000/600")}" alt="Weighing a genuine metal-fusion driver on a digital scale" /><h2>Sticker Print Quality</h2><p>Compare the face-bolt sticker under bright light. Genuine stickers have sharp gradient printing and a slightly raised clear-coat finish. Clone stickers are flat-printed and peel at the edges within weeks.</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-genuine-beyblade-20260101/1200/630"), alt: "Genuine Takara-Tomy Beyblade close-up" },
+        content: `<h2>The Laser-Etched Logo</h2><p>Genuine Takara-Tomy Beyblades have a crisp, laser-etched "TAKARA TOMY" logo on the underside of the layer or base. Clones use a shallow, blurry stamp that smudges under a fingernail scratch test.</p><img src="${seedPhoto("blog-content-image-genuine-beyblade-logo-1-20260101", 1000, 600)}" alt="Close-up of the genuine Takara-Tomy laser-etched logo" /><h2>Weight and Balance</h2><p>A genuine metal-fusion driver has a consistent, dense weight — clones often use lighter zinc alloy that feels noticeably hollow. Spin the beyblade on a flat glass surface: a genuine driver spins true with almost no wobble.</p><img src="${seedPhoto("blog-content-image-genuine-beyblade-weight-2-20260101", 1000, 600)}" alt="Weighing a genuine metal-fusion driver on a digital scale" /><h2>Sticker Print Quality</h2><p>Compare the face-bolt sticker under bright light. Genuine stickers have sharp gradient printing and a slightly raised clear-coat finish. Clone stickers are flat-printed and peel at the edges within weeks.</p>`,
+        coverImage: { type: "image", url: seedPhoto("blog-cover-genuine-beyblade-20260101", 1200, 630), alt: "Genuine Takara-Tomy Beyblade close-up" },
         category: "guides",
         tags: ["authentication", "takara-tomy", "beyblade", "counterfeit"],
         isFeatured: true,
@@ -33,7 +33,7 @@ const _rawblogPostsSeedData = [
         publishedAt: daysAgo(30),
         authorId: "user-admin-letitrip",
         authorName: "Mock User 1",
-        authorAvatar: seedExtMedia("https://picsum.photos/seed/user-avatar-letitrip-admin-20260101/400/400"),
+        authorAvatar: seedPhoto("user-avatar-letitrip-admin-20260101", 400, 400),
         readTimeMinutes: 5,
         views: 4200,
         metaTitle: "How to Spot a Genuine Takara-Tomy Beyblade | LetItRip",
@@ -46,8 +46,8 @@ const _rawblogPostsSeedData = [
         title: "Sealed vs. Opened — How Condition Affects Beyblade Resale Value",
         slug: "sealed-vs-opened-beyblade-value",
         excerpt: "A head-to-head look at what actually moves the needle on Beyblade resale price — sealed box premiums, tip wear, and launcher grip condition.",
-        content: `<h2>Sealed Box — The Investment Grade</h2><p>A factory-sealed box with an unbroken shrink-wrap seal commands the highest resale premiums, especially for discontinued original-series and Metal Fight releases. Collectors treat sealed stock the way trading-card collectors treat unopened booster boxes.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-sealed-beyblade-box-1-20260101/1000/600")}" alt="Factory-sealed Beyblade box with intact shrink wrap" /><h2>Tip Wear — The Sub-Grade That Matters</h2><p>For opened, battled beyblades, tip wear is the single biggest value factor. A sharp, unrounded tip with visible factory grooves grades far higher than a rounded, "sanded" tip from heavy stadium use.</p><h2>Launcher Grip Condition</h2><p>Ripcord launchers with clean, unfrayed grip tape and a tight ratchet mechanism add real value to a bundle. A stripped ratchet or fraying cord is an instant discount flag.</p><h2>Our Recommendation</h2><p>For investment: chase sealed, unopened stock. For a battle-ready collection: prioritize tip sharpness and launcher condition over cosmetic sticker wear.</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-sealed-vs-opened-beyblade-20260101/1200/630"), alt: "Sealed and opened Beyblade boxes side by side" },
+        content: `<h2>Sealed Box — The Investment Grade</h2><p>A factory-sealed box with an unbroken shrink-wrap seal commands the highest resale premiums, especially for discontinued original-series and Metal Fight releases. Collectors treat sealed stock the way trading-card collectors treat unopened booster boxes.</p><img src="${seedPhoto("blog-content-image-sealed-beyblade-box-1-20260101", 1000, 600)}" alt="Factory-sealed Beyblade box with intact shrink wrap" /><h2>Tip Wear — The Sub-Grade That Matters</h2><p>For opened, battled beyblades, tip wear is the single biggest value factor. A sharp, unrounded tip with visible factory grooves grades far higher than a rounded, "sanded" tip from heavy stadium use.</p><h2>Launcher Grip Condition</h2><p>Ripcord launchers with clean, unfrayed grip tape and a tight ratchet mechanism add real value to a bundle. A stripped ratchet or fraying cord is an instant discount flag.</p><h2>Our Recommendation</h2><p>For investment: chase sealed, unopened stock. For a battle-ready collection: prioritize tip sharpness and launcher condition over cosmetic sticker wear.</p>`,
+        coverImage: { type: "image", url: seedPhoto("blog-cover-sealed-vs-opened-beyblade-20260101", 1200, 630), alt: "Sealed and opened Beyblade boxes side by side" },
         category: "guides",
         tags: ["condition", "sealed", "tip-wear", "beyblade", "investment"],
         isFeatured: true,
@@ -55,7 +55,7 @@ const _rawblogPostsSeedData = [
         publishedAt: daysAgo(25),
         authorId: "user-admin-letitrip",
         authorName: "Mock User 1",
-        authorAvatar: seedExtMedia("https://picsum.photos/seed/user-avatar-letitrip-admin-20260101/400/400"),
+        authorAvatar: seedPhoto("user-avatar-letitrip-admin-20260101", 400, 400),
         readTimeMinutes: 7,
         views: 3800,
         metaTitle: "Sealed vs. Opened — Beyblade Condition & Resale Value | LetItRip",
@@ -68,15 +68,15 @@ const _rawblogPostsSeedData = [
         title: "Complete Beyblade X Series Guide — Every Wave and Value",
         slug: "complete-beyblade-x-series-guide",
         excerpt: "Every Beyblade X wave released so far — from the BX-01 starter line to the latest BX-08 wave — with current market values.",
-        content: `<h2>The Starter Waves</h2><p>BX-01 through BX-04 introduced the core X-series parts — Blade, Ratchet, and Bit — replacing the old layer/disk/driver system entirely. Sealed starters from these early waves are already appreciating.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-beyblade-x-waves-1-20260101/1000/600")}" alt="Beyblade X starter wave lineup" /><h2>BX-05 through BX-08 (2025-2026)</h2><p>The current generation. Each piece in sealed condition ranges from ₹500-₹1,200. A complete wave set? Over ₹8,000.</p><h2>Later Waves</h2><p>Limited convention exclusives, gold-finish promos, and various starter-set reprints. Values range from ₹300 for common reprints to ₹5,000+ for rare promotional versions.</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-beyblade-x-guide-20260101/1200/630"), alt: "Beyblade X series wave lineup" },
+        content: `<h2>The Starter Waves</h2><p>BX-01 through BX-04 introduced the core X-series parts — Blade, Ratchet, and Bit — replacing the old layer/disk/driver system entirely. Sealed starters from these early waves are already appreciating.</p><img src="${seedPhoto("blog-content-image-beyblade-x-waves-1-20260101", 1000, 600)}" alt="Beyblade X starter wave lineup" /><h2>BX-05 through BX-08 (2025-2026)</h2><p>The current generation. Each piece in sealed condition ranges from ₹500-₹1,200. A complete wave set? Over ₹8,000.</p><h2>Later Waves</h2><p>Limited convention exclusives, gold-finish promos, and various starter-set reprints. Values range from ₹300 for common reprints to ₹5,000+ for rare promotional versions.</p>`,
+        coverImage: { type: "image", url: seedPhoto("blog-cover-beyblade-x-guide-20260101", 1200, 630), alt: "Beyblade X series wave lineup" },
         category: "guides",
         tags: ["beyblade-x", "guide", "waves", "values"],
         isFeatured: false,
         status: "draft",
         authorId: "user-admin-letitrip",
         authorName: "Mock User 1",
-        authorAvatar: seedExtMedia("https://picsum.photos/seed/user-avatar-letitrip-admin-20260101/400/400"),
+        authorAvatar: seedPhoto("user-avatar-letitrip-admin-20260101", 400, 400),
         readTimeMinutes: 10,
         views: 0,
         metaTitle: "Complete Beyblade X Series Guide — Every Wave & Value | LetItRip",
@@ -151,8 +151,8 @@ const _rawblogPostsSeedData = [
         title: "Top 10 Most Valuable Vintage Beyblades",
         slug: "top-10-most-valuable-vintage-beyblades",
         excerpt: "From the legendary original-series Dragoon Storm to the elusive tournament-only L-Drago variants — these are the beyblades every collector dreams of.",
-        content: `<h2>1. Tournament-Exclusive Gold Dragoon (2000)</h2><p>The rarest original-series beyblade ever distributed. Only handed out at the Japan national finals. Estimated value: over ₹4 lakh.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-top10-tournament-gold-1-20260101/1000/600")}" alt="Tournament-exclusive gold Dragoon beyblade" /><h2>2. Beyblade Original Dragoon Storm, Sealed</h2><p>Tyson's signature spinner in sealed, factory condition. Sealed copies sell for ₹1.5-2.5 lakh.</p><h2>3. Beyblade Metal Lightning L-Drago, Sealed</h2><p>Kai's iconic rival spinner. A sealed Metal Lightning L-Drago commands ₹80,000-1.2 lakh.</p><h2>4. Complete Original-Series Starter Set (all 5 pieces, sealed)</h2><p>All five original-series starter beyblades still sealed — virtually impossible to assemble. Set value: over ₹6 lakh.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-top10-starter-set-2-20260101/1000/600")}" alt="Complete original-series Beyblade starter set" /><h2>5-10</h2><p>Metal Fusion Storm Pegasus (sealed), Metal Fight Flame Sagittario (sealed), Burst Valkyrie tournament promo, Burst Regalia Genesis limited run, original-series Dranzer S first-print, and Driger V arena-exclusive gold edition.</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-top10-vintage-beyblade-20260101/1200/630"), alt: "Vintage Beyblade collection" },
+        content: `<h2>1. Tournament-Exclusive Gold Dragoon (2000)</h2><p>The rarest original-series beyblade ever distributed. Only handed out at the Japan national finals. Estimated value: over ₹4 lakh.</p><img src="${seedPhoto("blog-content-image-top10-tournament-gold-1-20260101", 1000, 600)}" alt="Tournament-exclusive gold Dragoon beyblade" /><h2>2. Beyblade Original Dragoon Storm, Sealed</h2><p>Tyson's signature spinner in sealed, factory condition. Sealed copies sell for ₹1.5-2.5 lakh.</p><h2>3. Beyblade Metal Lightning L-Drago, Sealed</h2><p>Kai's iconic rival spinner. A sealed Metal Lightning L-Drago commands ₹80,000-1.2 lakh.</p><h2>4. Complete Original-Series Starter Set (all 5 pieces, sealed)</h2><p>All five original-series starter beyblades still sealed — virtually impossible to assemble. Set value: over ₹6 lakh.</p><img src="${seedPhoto("blog-content-image-top10-starter-set-2-20260101", 1000, 600)}" alt="Complete original-series Beyblade starter set" /><h2>5-10</h2><p>Metal Fusion Storm Pegasus (sealed), Metal Fight Flame Sagittario (sealed), Burst Valkyrie tournament promo, Burst Regalia Genesis limited run, original-series Dranzer S first-print, and Driger V arena-exclusive gold edition.</p>`,
+        coverImage: { type: "image", url: seedPhoto("blog-cover-top10-vintage-beyblade-20260101", 1200, 630), alt: "Vintage Beyblade collection" },
         category: "news",
         tags: ["top-10", "vintage", "investment", "rare-beyblades"],
         isFeatured: false,
@@ -160,7 +160,7 @@ const _rawblogPostsSeedData = [
         publishedAt: daysAgo(20),
         authorId: "user-admin-letitrip",
         authorName: "Mock User 1",
-        authorAvatar: seedExtMedia("https://picsum.photos/seed/user-avatar-letitrip-admin-20260101/400/400"),
+        authorAvatar: seedPhoto("user-avatar-letitrip-admin-20260101", 400, 400),
         readTimeMinutes: 8,
         views: 6100,
         metaTitle: "Top 10 Most Valuable Vintage Beyblades | LetItRip",
@@ -234,8 +234,8 @@ const _rawblogPostsSeedData = [
         title: "Metal Fight Hidden Gems: Undervalued Beyblades from the 2009-2012 Era",
         slug: "metal-fight-hidden-gems",
         excerpt: "The Metal Fight era produced some of the most undervalued beyblades in collecting history. Here are the picks smart collectors are buying now.",
-        content: `<h2>Why Metal Fight Beyblades Are Undervalued</h2><p>The Metal Fight era (2009-2012) coincided with peak Beyblade anime popularity but many collectors focus exclusively on the original 1999-2003 series. This creates a pricing gap.</p><img src="${seedExtMedia("https://picsum.photos/seed/blog-content-image-metal-fight-gems-1-20260101/1000/600")}" alt="Metal Fight era Beyblade lineup" /><h2>Metal Fight Picks</h2><p><strong>Metal Storm Pegasus</strong> — the fan-favorite protagonist spinner. Sealed copies are still affordable at ₹1,500-₹2,500.</p><p><strong>Metal Flame Sagittario</strong> — one of the most competitively impactful attack types ever. Sealed condition commands ₹3,500-₹5,000.</p><p><strong>Rare 4D System variants</strong> — low print run makes these a sleeper investment.</p>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-metal-fight-gems-20260101/1200/630"), alt: "Metal Fight Beyblade collection" },
+        content: `<h2>Why Metal Fight Beyblades Are Undervalued</h2><p>The Metal Fight era (2009-2012) coincided with peak Beyblade anime popularity but many collectors focus exclusively on the original 1999-2003 series. This creates a pricing gap.</p><img src="${seedPhoto("blog-content-image-metal-fight-gems-1-20260101", 1000, 600)}" alt="Metal Fight era Beyblade lineup" /><h2>Metal Fight Picks</h2><p><strong>Metal Storm Pegasus</strong> — the fan-favorite protagonist spinner. Sealed copies are still affordable at ₹1,500-₹2,500.</p><p><strong>Metal Flame Sagittario</strong> — one of the most competitively impactful attack types ever. Sealed condition commands ₹3,500-₹5,000.</p><p><strong>Rare 4D System variants</strong> — low print run makes these a sleeper investment.</p>`,
+        coverImage: { type: "image", url: seedPhoto("blog-cover-metal-fight-gems-20260101", 1200, 630), alt: "Metal Fight Beyblade collection" },
         category: "tips",
         tags: ["metal-fight", "hidden-gems", "investment", "beyblade"],
         isFeatured: false,
@@ -243,7 +243,7 @@ const _rawblogPostsSeedData = [
         publishedAt: daysAgo(15),
         authorId: "user-admin-letitrip",
         authorName: "Mock User 1",
-        authorAvatar: seedExtMedia("https://picsum.photos/seed/user-avatar-letitrip-admin-20260101/400/400"),
+        authorAvatar: seedPhoto("user-avatar-letitrip-admin-20260101", 400, 400),
         readTimeMinutes: 6,
         views: 2900,
         metaTitle: "Metal Fight Hidden Gems — Undervalued Beyblades | LetItRip",
@@ -318,7 +318,7 @@ const _rawblogPostsSeedData = [
         slug: "authenticating-beyblades",
         excerpt: "A behind-the-scenes look at how verified sellers on LetItRip check every beyblade before listing — logo tests, weight checks, and spin-balance inspection.",
         content: `<h2>The 5-Point Authentication Process</h2><p>Every beyblade listed by top verified stores goes through a rigorous 5-point check:</p><ol><li><strong>Logo Test</strong> — Genuine Takara-Tomy pieces have a specific laser-etched depth and clarity when checked under raking light.</li><li><strong>Weight Check</strong> — A genuine metal-fusion driver weighs within a tight factory tolerance verified on a digital scale.</li><li><strong>Spin-Balance Test</strong> — Each layer/driver combo is spin-tested on a flat glass surface; genuine parts spin true with minimal wobble.</li><li><strong>Sticker Print Inspection</strong> — Under 10x magnification, genuine face-bolt stickers show sharp gradient printing and a raised clear-coat.</li><li><strong>Ratchet & Grip Inspection</strong> — Check the launcher for a tight ratchet mechanism and unfrayed grip tape.</li></ol>`,
-        coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/blog-cover-authenticating-beyblades-20260101/1200/630"), alt: "Beyblade authentication process" },
+        coverImage: { type: "image", url: seedPhoto("blog-cover-authenticating-beyblades-20260101", 1200, 630), alt: "Beyblade authentication process" },
         category: "community",
         tags: ["authentication", "verification", "counterfeit", "beyblade"],
         isFeatured: false,

package/dist/seed/carousel-slides-seed-data.js

@@ -17,7 +17,7 @@
  * @tag consumers:seed/index.ts,seed/runner.ts
  * @tag sideEffects:none
  */
-import { seedExtMedia } from "./_helpers/media";
+import { seedPhoto } from "./_helpers/media";
 import { ROUTES } from "../next/routing/route-map";
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -29,7 +29,7 @@ const _rawSlides = [
         active: true,
         background: {
             type: "image",
-            url: seedExtMedia("https://picsum.photos/seed/carousel-hero-homepage-20260101/1600/700"),
+            url: seedPhoto("carousel-hero-homepage-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.5 },
         },
         settings: { autoplayDelayMs: 5000, height: "tall" },
@@ -49,7 +49,7 @@ const _rawSlides = [
             // (rejects non-image content-type with 400). MediaVideo watermarks
             // video client-side instead, so the raw external URL is correct here.
             url: "https://storage.googleapis.com/gtv-videos-bucket/sample/BigBuckBunny.mp4", // audit-seed-external-url-ok: raw <video> src, /api/media/ext is image-only (Root Cause #27)
-            thumbnail: seedExtMedia("https://picsum.photos/seed/carousel-auctions-live-20260101/1600/700"),
+            thumbnail: seedPhoto("carousel-auctions-live-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.4 },
         },
         link: { url: String(ROUTES.PUBLIC.AUCTIONS), openInNewTab: false },
@@ -65,7 +65,7 @@ const _rawSlides = [
         active: true,
         background: {
             type: "image",
-            url: seedExtMedia("https://picsum.photos/seed/carousel-complete-collection-20260101/1600/700"),
+            url: seedPhoto("carousel-complete-collection-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.45 },
         },
         link: { url: String(ROUTES.PUBLIC.PRODUCTS), openInNewTab: false },
@@ -81,7 +81,7 @@ const _rawSlides = [
         active: true,
         background: {
             type: "image",
-            url: seedExtMedia("https://picsum.photos/seed/carousel-preorders-open-20260101/1600/700"),
+            url: seedPhoto("carousel-preorders-open-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.4 },
         },
         link: { url: String(ROUTES.PUBLIC.PRE_ORDERS), openInNewTab: false },
@@ -97,7 +97,7 @@ const _rawSlides = [
         active: true,
         background: {
             type: "image",
-            url: seedExtMedia("https://picsum.photos/seed/carousel-authenticated-originals-20260101/1600/700"),
+            url: seedPhoto("carousel-authenticated-originals-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.5 },
         },
         link: { url: String(ROUTES.PUBLIC.CATEGORY_DETAIL("category-spinning-tops")), openInNewTab: false },
@@ -113,7 +113,7 @@ const _rawSlides = [
         active: false,
         background: {
             type: "image",
-            url: seedExtMedia("https://picsum.photos/seed/carousel-tournament-promo-20260101/1600/700"),
+            url: seedPhoto("carousel-tournament-promo-20260101", 1600, 700),
             dimOverlay: { enabled: true, opacity: 0.5 },
         },
         settings: { autoplayDelayMs: 5000, height: "tall" },

package/dist/seed/cart-seed-data.js

@@ -13,7 +13,7 @@
  * @tag sideEffects:none
  */
 import { getDefaultCurrency } from "./seed-market-config";
-import { seedExtMedia } from "./_helpers/media";
+import { seedPhoto } from "./_helpers/media";
 const _CURRENCY = getDefaultCurrency();
 const NOW = new Date();
 const daysAgo = (n) => new Date(NOW.getTime() - n * 86400000);
@@ -27,7 +27,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-yugi-original-dranzer-s",
                 productId: "product-beyblade-original-dranzer-s",
                 productTitle: "Beyblade Original Dranzer S",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-original-dranzer-s-1-20260101/600/600"),
+                productImage: seedPhoto("product-image-original-dranzer-s-1-20260101", 600, 600),
                 price: 1799,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -41,7 +41,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-yugi-x-bx08-preorder-deposit",
                 productId: "preorder-beyblade-x-bx-08-wave",
                 productTitle: "Beyblade X BX-08 Wave — Pre-Order",
-                productImage: seedExtMedia("https://picsum.photos/seed/preorder-image-x-bx08-wave-1-20260101/600/600"),
+                productImage: seedPhoto("preorder-image-x-bx08-wave-1-20260101", 600, 600),
                 price: 899,
                 currency: _CURRENCY,
                 quantity: 2,
@@ -55,7 +55,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-yugi-stadium-set",
                 productId: "classified-beyblade-stadium-set",
                 productTitle: "Beyblade Stadium Set",
-                productImage: seedExtMedia("https://picsum.photos/seed/classified-image-stadium-set-1-20260101/600/600"),
+                productImage: seedPhoto("classified-image-stadium-set-1-20260101", 600, 600),
                 price: 1299,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -69,7 +69,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-yugi-dragoon-storm-auction-won",
                 productId: "auction-beyblade-original-dragoon-storm",
                 productTitle: "Beyblade Original Dragoon Storm — Won Auction",
-                productImage: seedExtMedia("https://picsum.photos/seed/auction-image-dragoon-storm-1-20260101/600/600"),
+                productImage: seedPhoto("auction-image-dragoon-storm-1-20260101", 600, 600),
                 price: 3499,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -84,7 +84,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-yugi-dranzer-offer-accepted",
                 productId: "product-beyblade-original-dranzer-s",
                 productTitle: "Beyblade Original Dranzer S — Offer Accepted",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-original-dranzer-s-2-20260101/600/600"),
+                productImage: seedPhoto("product-image-original-dranzer-s-2-20260101", 600, 600),
                 price: 1799,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -111,7 +111,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-kaiba-metal-flame-sagittario",
                 productId: "product-beyblade-metal-flame-sagittario",
                 productTitle: "Beyblade Metal Flame Sagittario",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-metal-flame-sagittario-1-20260101/600/600"),
+                productImage: seedPhoto("product-image-metal-flame-sagittario-1-20260101", 600, 600),
                 price: 2299,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -125,7 +125,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-kaiba-x-app-unlock",
                 productId: "digitalcode-beyblade-x-app-unlock",
                 productTitle: "Beyblade X App Unlock Code",
-                productImage: seedExtMedia("https://picsum.photos/seed/digitalcode-image-x-app-unlock-1-20260101/600/600"),
+                productImage: seedPhoto("digitalcode-image-x-app-unlock-1-20260101", 600, 600),
                 price: 199,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -139,7 +139,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-kaiba-x-bx08-preorder",
                 productId: "preorder-beyblade-x-bx-08-wave",
                 productTitle: "Beyblade X BX-08 Wave — Pre-Order",
-                productImage: seedExtMedia("https://picsum.photos/seed/preorder-image-x-bx08-wave-2-20260101/600/600"),
+                productImage: seedPhoto("preorder-image-x-bx08-wave-2-20260101", 600, 600),
                 price: 899,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -162,7 +162,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-admin-x-knife-shinobi",
                 productId: "product-beyblade-x-knife-shinobi",
                 productTitle: "Beyblade X Knife Shinobi",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-x-knife-shinobi-1-20260101/600/600"),
+                productImage: seedPhoto("product-image-x-knife-shinobi-1-20260101", 600, 600),
                 price: 2999,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -176,7 +176,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-admin-mystery-box",
                 productId: "prizedraw-beyblade-mystery-box",
                 productTitle: "Beyblade Mystery Box",
-                productImage: seedExtMedia("https://picsum.photos/seed/prizedraw-image-mystery-box-1-20260101/600/600"),
+                productImage: seedPhoto("prizedraw-image-mystery-box-1-20260101", 600, 600),
                 price: 499,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -199,7 +199,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-guest-metal-storm-pegasus",
                 productId: "product-beyblade-metal-storm-pegasus",
                 productTitle: "Beyblade Metal Storm Pegasus",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-metal-storm-pegasus-1-20260101/600/600"),
+                productImage: seedPhoto("product-image-metal-storm-pegasus-1-20260101", 600, 600),
                 price: 2499,
                 currency: _CURRENCY,
                 quantity: 1,
@@ -213,7 +213,7 @@ export const cartsSeedData = [
                 itemId: "cartitem-guest-burst-valkyrie",
                 productId: "product-beyblade-burst-valkyrie",
                 productTitle: "Beyblade Burst Valkyrie",
-                productImage: seedExtMedia("https://picsum.photos/seed/product-image-burst-valkyrie-1-20260101/600/600"),
+                productImage: seedPhoto("product-image-burst-valkyrie-1-20260101", 600, 600),
                 price: 1899,
                 currency: _CURRENCY,
                 quantity: 1,