@mohasinac/appkit 4.32.2 → 4.32.4

package/dist/_internal/server/features/bundles/data.js

@@ -9,6 +9,7 @@ import { cache } from "react";
 import { categoriesRepository } from "../../../../repositories";
 import { productRepository } from "../../../../repositories";
 import { safeRead } from "../../../../errors/safe-read";
+import { hidePublicTestData } from "../tester/visibility";
 /**
  * Fetch a single bundle by slug for the public detail page. Returns null
  * when the slug is empty or no matching `categoryType:"bundle"` row exists.
@@ -154,7 +155,7 @@ export const listFeaturedBundles = cache(async (limit = 8, _opts) => {
         key: "categories.listByType(bundle)",
         fallback: [],
     });
-    return all;
+    return hidePublicTestData(all);
 });
 /**
  * "Related Bundles" for the bundle detail page — every other active bundle,
@@ -173,5 +174,7 @@ export const getRelatedBundles = cache(async (bundle, limit = 8) => {
         key: "categories.listByType(bundle)",
         fallback: [],
     });
-    return all.filter((b) => b.id !== bundle.id).slice(0, limit);
+    return hidePublicTestData(all)
+        .filter((b) => b.id !== bundle.id)
+        .slice(0, limit);
 });

package/dist/_internal/server/features/categories/data.js

@@ -3,6 +3,7 @@ import { cache } from "react";
 import { categoriesRepository } from "../../../../repositories";
 import { safeRead } from "../../../../errors/safe-read";
 import { CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, CATEGORIES_SITEMAP_LIMIT } from "../../../shared/features/categories/config";
+import { hidePublicTestData } from "../tester/visibility";
 /** Full category document by slug — deduped per request via React.cache(). */
 export const getCategoryForDetail = cache(async (slug) => {
     /*
@@ -23,25 +24,34 @@ export const getCategoryForDetail = cache(async (slug) => {
 });
 /** Flat list of all categories at tier 1 (roots) — for nav/sitemap. */
 export const listRootCategories = cache(async () => {
-    return safeRead(() => categoriesRepository.getCategoriesByTier(1), {
+    const rows = await safeRead(() => categoriesRepository.getCategoriesByTier(1), {
         route: "/categories",
         key: "categories.listRootCategories",
         fallback: [],
     });
+    return hidePublicTestData(rows);
 });
 /** Featured categories for homepage display (showOnHomepage: true). */
 export const listFeaturedCategories = cache(async () => {
-    return categoriesRepository
+    const rows = await safeRead(() => categoriesRepository
         .list({ filters: "isActive==true,showOnHomepage==true", sorts: "order", page: 1, pageSize: CATEGORIES_FEATURED_LIMIT })
-        .then((r) => r.data ?? [])
-        .catch(() => []);
+        .then((r) => r.data ?? []), {
+        route: "/",
+        key: "categories.listFeaturedCategories",
+        fallback: [],
+    });
+    return hidePublicTestData(rows);
 });
 /** Nav-menu categories (showInMenu: true, tier 1 + 2). */
 export const listMenuCategories = cache(async () => {
-    return categoriesRepository
+    const rows = await safeRead(() => categoriesRepository
         .list({ filters: "isActive==true,display.showInMenu==true", sorts: "order", page: 1, pageSize: CATEGORIES_MENU_LIMIT })
-        .then((r) => r.data ?? [])
-        .catch(() => []);
+        .then((r) => r.data ?? []), {
+        route: "nav/menu",
+        key: "categories.listMenuCategories",
+        fallback: [],
+    });
+    return hidePublicTestData(rows);
 });
 /** Full category tree rooted at a given rootId — for sidebar navigation. */
 export const getCategoryTree = cache(async (rootId) => {

package/dist/_internal/server/features/products/list-public.js

@@ -442,6 +442,21 @@ export async function listPublicProducts(input, opts) {
         ? unavailableClausesFor(types).find((c) => c.op === "lt" && c.sortField === requestedSortField)
         : undefined;
     if (pushdown) {
+        /*
+         * 🛑 This branch keeps a POST-pagination sandbox filter, knowingly.
+         *
+         * It exists to give the ended-listing archive real, unbounded-depth
+         * Firestore pagination, which is incompatible with the over-fetch the
+         * window path uses. So an anonymous page here can come back a row or two
+         * SHORT when a sandbox fixture lands in it — bounded by the ~25 fixtures
+         * that exist, and nothing like the empty page the default view produced,
+         * because real ended listings dominate this scope.
+         *
+         * Falling through to Path C instead would fix the short page and cost every
+         * anonymous visitor the deep pagination this branch was written for. The
+         * short page is the better trade; it is recorded here so the next reader
+         * knows it was weighed rather than missed.
+         */
         const filters = sieveAnd(safeFilters, clauseToSieve(pushdown, now));
         const result = await runQuery(executor, {
             filters,
@@ -558,7 +573,28 @@ export async function listPublicProducts(input, opts) {
     const hasTypeFacet = Object.keys(input.typeFacets ?? {}).length > 0;
     /** Multi-value `tags`/`features` — no `array-contains-any`, so per-row. */
     const hasArrayMultiSelect = (input.tags?.length ?? 0) > 1 || (input.features?.length ?? 0) > 1;
-    const inMemory = wantAvailable || hasTypeFacet || hasArrayMultiSelect || (hasDateRange && !canPushDate);
+    /*
+     * 🛑 The tester-sandbox filter must run BEFORE the page is sliced.
+     *
+     * It used to run only in `finish()`, which receives an already-paginated
+     * page — so a page whose rows were ALL sandbox fixtures came back empty with
+     * a non-zero `total`. That is not hypothetical: the fixtures carry
+     * `Date.now()`-relative dates by design (they have to re-arm on every
+     * reseed), so immediately after a seed load they are the newest rows in the
+     * collection and fill the whole first page of the default `-createdAt` sort.
+     * The public catalogue returned `items: []` alongside `total: 79`.
+     *
+     * So an anonymous viewer forces the bounded-window path, where the filter is
+     * one more per-row predicate applied before the slice. That is already the
+     * default for public browsing (`wantAvailable`), so this widens the window
+     * path only for the non-default scopes.
+     */
+    const hidesTestData = filterTestDataForViewer([{ isTestData: true }], opts?.viewer).length === 0;
+    const inMemory = wantAvailable ||
+        hasTypeFacet ||
+        hasArrayMultiSelect ||
+        hidesTestData ||
+        (hasDateRange && !canPushDate);
     // When a date range stays in memory, fetch in whichever direction front-loads
     // the rows that will PASS it: `dateFrom` (">=", still live) wants the most
     // future dates first; `dateTo` ("<=", ends by) wants the earliest first.
@@ -597,6 +633,10 @@ export async function listPublicProducts(input, opts) {
             return wanted.some((w) => raw.includes(w));
         };
         const filtered = items.filter((item) => {
+            // Before the slice — see the note on `hidesTestData` above.
+            if (hidesTestData && item.isTestData === true) {
+                return false;
+            }
             if (wantAvailable && !isListingRowAvailable(item, now))
                 return false;
             if (hasArrayMultiSelect) {

package/dist/_internal/server/features/stores/data.js

@@ -4,6 +4,7 @@ import { storeRepository } from "../../../../repositories";
 import { STORES_PRODUCTS_PAGE_SIZE, STORES_SITEMAP_LIMIT, } from "../../../shared/features/stores/config";
 import { makeGetStoreListingsInitial } from "../shared/listing-data-factory";
 import { safeRead } from "../../../../errors/safe-read";
+import { hidePublicTestData } from "../tester/visibility";
 /** Full store document by slug — deduped per request via React.cache(). */
 export const getStoreForDetail = cache(async (slug) => {
     return (await storeRepository.findBySlug(slug)) ?? null;
@@ -19,5 +20,10 @@ export const listSitemapStores = cache(async () => {
      * store — which is not an error to any crawler, just a smaller site.
      */
     const result = await safeRead(() => storeRepository.listStores({ filters: "status==active", sorts: "-updatedAt", page: 1, pageSize: STORES_SITEMAP_LIMIT }, true), { route: "sitemap/stores", key: "stores.listStores", fallback: null });
-    return (result?.items ?? []).map(({ storeSlug, updatedAt }) => ({ storeSlug, updatedAt }));
+    // A sandbox store in the SITEMAP is the longest-lived form of this leak:
+    // a crawler keeps the URL long after the fixture is pruned.
+    return hidePublicTestData(result?.items ?? []).map(({ storeSlug, updatedAt }) => ({
+        storeSlug,
+        updatedAt,
+    }));
 });

package/dist/_internal/server/features/tester/visibility.d.ts

@@ -12,3 +12,25 @@ export declare function canViewTestData(viewer: ViewerLike | null | undefined):
 export declare function filterTestDataForViewer<T extends TestDataFlagged>(items: T[], viewer: ViewerLike | null | undefined): T[];
 /** Returns null (as if not found) for an isTestData:true single doc when the viewer can't see it. */
 export declare function filterSingleTestData<T extends TestDataFlagged>(item: T | null, viewer: ViewerLike | null | undefined): T | null;
+/**
+ * The PUBLIC projection of a list: sandbox rows removed, unconditionally.
+ *
+ * 🛑 Use this in any server read that feeds a public page. It is
+ * `filterTestDataForViewer(items, undefined)` under a name that says what it is
+ * for, because the two-argument form invites a call site to pass a viewer it
+ * does not actually have — and `undefined` there reads like an oversight rather
+ * than the fail-closed default it is.
+ *
+ * A signed-in tester still sees sandbox rows: the public pages hydrate from the
+ * APIs, which DO thread the real viewer. This covers the server-rendered first
+ * paint, which has no session in hand and must not publish the sandbox to
+ * everyone on the strength of that.
+ *
+ * Added 2026-09-01 after a reseed made the leak visible: the homepage carried
+ * 10 sandbox bundles, 8 events, 5 brands and 4 categories; /categories carried
+ * 9; /stores rendered a card for `store-tester-sandbox`. Only the products path
+ * had ever been filtered.
+ */
+export declare function hidePublicTestData<T extends TestDataFlagged>(items: T[]): T[];
+/** The single-document form of {@link hidePublicTestData}. */
+export declare function hidePublicTestDoc<T extends TestDataFlagged>(item: T | null): T | null;

package/dist/_internal/server/features/tester/visibility.js

@@ -26,3 +26,29 @@ export function filterSingleTestData(item, viewer) {
         return null;
     return item;
 }
+/**
+ * The PUBLIC projection of a list: sandbox rows removed, unconditionally.
+ *
+ * 🛑 Use this in any server read that feeds a public page. It is
+ * `filterTestDataForViewer(items, undefined)` under a name that says what it is
+ * for, because the two-argument form invites a call site to pass a viewer it
+ * does not actually have — and `undefined` there reads like an oversight rather
+ * than the fail-closed default it is.
+ *
+ * A signed-in tester still sees sandbox rows: the public pages hydrate from the
+ * APIs, which DO thread the real viewer. This covers the server-rendered first
+ * paint, which has no session in hand and must not publish the sandbox to
+ * everyone on the strength of that.
+ *
+ * Added 2026-09-01 after a reseed made the leak visible: the homepage carried
+ * 10 sandbox bundles, 8 events, 5 brands and 4 categories; /categories carried
+ * 9; /stores rendered a card for `store-tester-sandbox`. Only the products path
+ * had ever been filtered.
+ */
+export function hidePublicTestData(items) {
+    return filterTestDataForViewer(items, undefined);
+}
+/** The single-document form of {@link hidePublicTestData}. */
+export function hidePublicTestDoc(item) {
+    return filterSingleTestData(item, undefined);
+}

package/dist/features/blog/components/BlogIndexPageView.js

@@ -4,6 +4,7 @@ import { Container, Heading, Main, Section } from "../../../ui";
 import { AdSlot } from "../../homepage/components/AdSlot";
 import { BlogIndexListing } from "./BlogIndexListing";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 function sp(params, key) {
     const v = params[key];
     return Array.isArray(v) ? v[0] ?? "" : v ?? "";
@@ -14,15 +15,19 @@ export async function BlogIndexPageView({ searchParams = {} }) {
     const pageSize = Number(sp(searchParams, "pageSize")) || 24;
     const category = sp(searchParams, "category");
     const sieveResult = await safeRead(() => blogRepository.listPublished({ ...(category ? { category } : {}) }, { sorts: sort, page, pageSize }), { route: "/blog", key: "blogPosts.listPublished", fallback: null });
-    const initialData = sieveResult
+    // Sandbox posts are public rows by design — not on someone else's first paint.
+    const publicSieve = sieveResult
+        ? { ...sieveResult, items: hidePublicTestData(sieveResult.items) }
+        : sieveResult;
+    const initialData = publicSieve
         ? {
-            posts: sieveResult.items,
+            posts: publicSieve.items,
             meta: {
-                total: sieveResult.total,
-                page: sieveResult.page,
-                pageSize: sieveResult.pageSize,
-                totalPages: sieveResult.totalPages,
-                hasMore: sieveResult.hasMore,
+                total: publicSieve.total,
+                page: publicSieve.page,
+                pageSize: publicSieve.pageSize,
+                totalPages: publicSieve.totalPages,
+                hasMore: publicSieve.hasMore,
             },
         }
         : undefined;

package/dist/features/categories/components/BrandDetailPageView.js

@@ -17,6 +17,7 @@ import { CATEGORY_PAGE_TABS } from "../../products/constants/listing-tabs";
 import { enabledCategoryTypes, enabledListingTypes } from "../../../_internal/shared/listing-types/feature-flags";
 import { siteSettingsRepository } from "../../../repositories";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 const __O = {
     hidden: "overflow-hidden",
 };
@@ -48,13 +49,15 @@ export async function BrandDetailPageView({ slug, initialBrand }) {
         // We pull all bundle categories and filter client-side by brandSlug —
         // no dedicated repository query needed at this catalog's bundle volume.
         brand?.slug
-            ? safeRead(() => categoriesRepository.listByType("bundle", { activeOnly: true, limit: 50 }), { route: "/brands/[slug]", key: "brand.bundles", fallback: [] })
+            ? safeRead(() => categoriesRepository
+                .listByType("bundle", { activeOnly: true, limit: 50 })
+                .then(hidePublicTestData), { route: "/brands/[slug]", key: "brand.bundles", fallback: [] })
             : Promise.resolve([]),
         // Related brands — every other active brand row, excluding this one.
         // `as unknown` is load-bearing only because CategoryDocument.createdAt is a
         // Date while CategoryItem.createdAt is a string — a pre-existing mismatch
         // the old `.catch(() => [])` union happened to paper over.
-        safeRead(() => categoriesRepository.findActiveBrands(), {
+        safeRead(() => categoriesRepository.findActiveBrands().then(hidePublicTestData), {
             route: "/brands/[slug]",
             key: "brand.relatedBrands",
             fallback: [],

package/dist/features/categories/components/BundlesListView.js

@@ -4,6 +4,7 @@ import { Container, Heading, Main, Section, Text } from "../../../ui";
 import { AdSlot } from "../../homepage/components/AdSlot";
 import { CategoryBundlesListing } from "./CategoryBundlesListing";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 const DEFAULT_LIMIT = 200;
 function sp(params, key) {
     const v = params[key];
@@ -22,8 +23,9 @@ export async function BundlesListView({ searchParams = {}, onBuyNow, }) {
         activeOnly: true,
         limit: DEFAULT_LIMIT,
     }), { route: "/bundles", key: "categories.listByType(bundle)", fallback: [] });
+    const visible = hidePublicTestData(all);
     const bundles = storeId
-        ? all.filter((c) => c.createdByStoreId === storeId)
+        ? visible.filter((c) => c.createdByStoreId === storeId)
         : all;
     return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-2", color: "primary", size: "3xl", weight: "semibold", children: "Collectible Bundles" }), _jsx(Text, { className: "mb-6 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Curated multi-product bundles \u2014 Pok\u00E9mon starter sets, Beyblade tournament packs, Hot Wheels collector boxes and more. One price, one checkout, one shipment." }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(CategoryBundlesListing, { initialBundles: bundles, onBuyNow: onBuyNow }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
 }

package/dist/features/categories/components/CategoriesIndexPageView.js

@@ -4,6 +4,8 @@ import { categoriesRepository } from "../../../repositories";
 import { Container, Heading, Main, Section } from "../../../ui";
 import { AdSlot } from "../../homepage/components/AdSlot";
 import { CategoriesIndexListing } from "./CategoriesIndexListing";
+import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 function sp(params, key) {
     const v = params[key];
     return Array.isArray(v) ? v[0] ?? "" : v ?? "";
@@ -39,14 +41,17 @@ export async function CategoriesIndexPageView({ searchParams = {} }) {
     const sort = sp(searchParams, "sort") || "name";
     const page = Number(sp(searchParams, "page")) || 1;
     const filters = buildCategoryFilters(searchParams);
-    const result = await categoriesRepository
-        .list({
+    const result = await safeRead(() => categoriesRepository.list({
         page,
         pageSize: 200,
         sorts: sort,
         ...(filters ? { filters } : {}),
-    })
-        .catch(() => null);
-    const initialData = (result?.items ?? []);
+    }), { route: "/categories", key: "categories.list", fallback: null });
+    /*
+     * This one page carries THREE entity kinds — categories, brands and bundles
+     * are all `CategoryDocument` rows discriminated by `categoryType` — so a
+     * single unfiltered read published sandbox fixtures of all three.
+     */
+    const initialData = hidePublicTestData((result?.items ?? []));
     return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-8", color: "primary", size: "3xl", weight: "semibold", children: "Categories" }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(CategoriesIndexListing, { initialData: initialData }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
 }

package/dist/features/categories/components/CategoryDetailPageView.js

@@ -16,6 +16,7 @@ import { CATEGORY_PAGE_TABS } from "../../products/constants/listing-tabs";
 import { enabledCategoryTypes, enabledListingTypes } from "../../../_internal/shared/listing-types/feature-flags";
 import { siteSettingsRepository } from "../../../repositories";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 const __O = {
     hidden: "overflow-hidden",
     xAuto: "overflow-x-auto",
@@ -52,7 +53,9 @@ export async function CategoryDetailPageView({ slug }) {
         // SB-UNI-D — bundles fetched from the categories collection. We pull
         // all active bundle rows; the carousel filters by category affinity.
         categoriesIn
-            ? safeRead(() => categoriesRepository.listByType("bundle", { activeOnly: true, limit: 50 }), { route: "/categories/[slug]", key: "category.bundles", fallback: [] })
+            ? safeRead(() => categoriesRepository
+                .listByType("bundle", { activeOnly: true, limit: 50 })
+                .then(hidePublicTestData), { route: "/categories/[slug]", key: "category.bundles", fallback: [] })
             : Promise.resolve([]),
         category?.id
             ? safeRead(() => categoriesRepository.getChildren(category.id), {

package/dist/features/events/components/EventsListPageView.js

@@ -6,6 +6,8 @@ import { EventsIndexListing } from "./EventsIndexListing";
 import { EVENT_FIELDS } from "../../../constants/field-names";
 import { sieveFilter, sieveMultiEq, sieveAnd, SIEVE_OP } from "../../../utils/sieve-builder";
 import { sortBy } from "../../../constants/sort";
+import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 function sp(params, key) {
     const v = params[key];
     return Array.isArray(v) ? v[0] ?? "" : v ?? "";
@@ -46,16 +48,28 @@ export async function EventsListPageView({ searchParams = {} }) {
     const pageSize = Number(sp(searchParams, "pageSize")) || 24;
     const filters = buildEventFilters(searchParams);
     const [result, facetCounts] = await Promise.all([
-        eventRepository
-            .list({ filters, sorts: sort, page, pageSize })
-            .catch(() => null),
+        safeRead(() => eventRepository.list({ filters, sorts: sort, page, pageSize }), {
+            route: "/events",
+            key: "events.list",
+            fallback: null,
+        }),
         // Facet counts are deliberately NOT narrowed by the shopper's own type or
         // status selection: a count that shrank to zero as you ticked boxes would
         // hide the very facet you'd need to untick. They answer "does this kind of
         // event exist at all", which is the question that decides visibility.
-        eventRepository
-            .facetCountsForTypesAndStatuses()
-            .catch(() => ({})),
+        safeRead(() => eventRepository.facetCountsForTypesAndStatuses(), {
+            route: "/events",
+            key: "events.facetCounts",
+            fallback: {},
+        }),
     ]);
-    return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-8", color: "primary", size: "3xl", weight: "semibold", children: "Events" }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(EventsIndexListing, { initialData: result, facetCounts: facetCounts }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
+    /*
+     * Sandbox events are seeded as ordinary public rows so testers exercise the
+     * real browse path; they must not reach anyone else's first paint. The client
+     * refetch threads the real viewer, so a signed-in tester still sees them.
+     */
+    const publicResult = result
+        ? { ...result, items: hidePublicTestData(result.items) }
+        : result;
+    return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-8", color: "primary", size: "3xl", weight: "semibold", children: "Events" }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(EventsIndexListing, { initialData: publicResult, facetCounts: facetCounts }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
 }

package/dist/features/reviews/components/ReviewsIndexPageView.js

@@ -40,6 +40,10 @@ export async function ReviewsIndexPageView({ searchParams = {} }) {
     const sort = sp(searchParams, "sort") || "-createdAt";
     const page = Number(sp(searchParams, "page")) || 1;
     const filters = buildReviewFilters(searchParams);
+    // audit-public-test-data-ok: `ReviewDocument` carries no `isTestData` field —
+    // tsc rejects the filter outright, which is the honest signal that reviews
+    // have no sandbox concept to strip. A review OF a sandbox product is not
+    // flagged today; that is a seed-schema gap, not something a cast should hide.
     const result = await safeRead(() => reviewRepository.listAll({ filters, sorts: sort, page, pageSize: 12 }), { route: "/reviews", key: "reviews.listAll", fallback: null });
     const initialData = result
         ? {

package/dist/features/stores/components/StoreBundlesPageView.js

@@ -3,6 +3,7 @@ import { categoriesRepository } from "../../../repositories";
 import { getStoreBySlug } from "./StoreDetailLayoutView";
 import { CategoryBundlesListing } from "../../categories/components/CategoryBundlesListing";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 /**
  * Public store → Bundles tab.
  *
@@ -24,5 +25,5 @@ export async function StoreBundlesPageView({ storeSlug, onBuyNow, }) {
         key: "categories.listByType(bundle)",
         fallback: [],
     });
-    return _jsx(CategoryBundlesListing, { initialBundles: bundles, onBuyNow: onBuyNow });
+    return (_jsx(CategoryBundlesListing, { initialBundles: hidePublicTestData(bundles), onBuyNow: onBuyNow }));
 }

package/dist/features/stores/components/StoreDetailLayoutView.js

@@ -61,6 +61,8 @@ export async function StoreDetailLayoutView({ storeSlug, activeTab, children, sc
     const [listingCounts, couponsCount, reviewsCount] = storeId
         ? await Promise.all([
             listingTabCounts(STORE_PAGE_TABS, { storeId }),
+            // audit-public-test-data-ok: a COUNT of the store's own coupons, and
+            // `CouponDocument` carries no isTestData field — there is nothing to strip.
             couponsRepository
                 .list({ filters: sieveAnd(sieveFilter("storeId", SIEVE_OP.EQ, storeId), sieveFilter("validity.isActive", SIEVE_OP.EQ, "true")), page: 1, pageSize: 1 })
                 .then((r) => r.total)

package/dist/features/stores/components/StoresIndexPageView.js

@@ -4,6 +4,7 @@ import { Container, Heading, Main, Section } from "../../../ui";
 import { AdSlot } from "../../homepage/components/AdSlot";
 import { StoresIndexListing } from "./StoresIndexListing";
 import { safeRead } from "../../../errors/safe-read";
+import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility";
 function sp(params, key) {
     const v = params[key];
     return Array.isArray(v) ? v[0] ?? "" : v ?? "";
@@ -13,5 +14,13 @@ export async function StoresIndexPageView({ searchParams = {} }) {
     const page = Number(sp(searchParams, "page")) || 1;
     const pageSize = Number(sp(searchParams, "pageSize")) || 24;
     const result = await safeRead(() => storeRepository.listStores({ page, pageSize, sorts: sort }, true), { route: "/stores", key: "stores.listStores", fallback: null });
-    return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-8", color: "primary", size: "3xl", weight: "semibold", children: "Stores" }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(StoresIndexListing, { initialData: result ?? undefined }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
+    /*
+     * The API already filters this; the SSR page called the repository directly
+     * and did not, so the first paint rendered a card for `store-tester-sandbox`
+     * while the client refetch dropped it.
+     */
+    const publicResult = result
+        ? { ...result, items: hidePublicTestData(result.items) }
+        : result;
+    return (_jsx(Main, { children: _jsx(Section, { padding: "y-2xl", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 1, className: "mb-8", color: "primary", size: "3xl", weight: "semibold", children: "Stores" }), _jsx(AdSlot, { id: "listing-sidebar-top", className: "mb-6" }), _jsx(StoresIndexListing, { initialData: publicResult ?? undefined }), _jsx(AdSlot, { id: "listing-sidebar-bottom", className: "mt-8" })] }) }) }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.32.2",
+  "version": "4.32.4",
   "license": "MIT",
   "publishConfig": {
     "access": "public"