@mohasinac/appkit 4.34.0 → 4.34.1

package/dist/_internal/server/features/seo/sitemap.js

@@ -16,8 +16,8 @@ const PRODUCT_SLUG = "slug";
 const PRODUCT_UPDATED_AT = "updatedAt";
 /**
  * Tester-sandbox fixtures must never reach the public sitemap. They are created
- * and destroyed on a cycle by `testerSandboxCleanup` / `testerSandboxRefresh`,
- * so anything Google indexes from them 404s shortly after. 34 of 182 sitemap
+ * and destroyed on a cycle by `testerSandboxCleanup` and by each tester run's
+ * wipe/seed, so anything Google indexes from them 404s shortly after. 34 of 182 sitemap
  * URLs were disposable test fixtures before this filter existed.
  *
  * 🛑 This MUST be an in-memory filter, never a Firestore inequality on the

package/dist/_internal/server/functions/scheduled.d.ts

@@ -22,9 +22,8 @@ export declare const cleanupRtdbEvents: import("./types").ScheduledFunctionDefin
 export declare const mediaTmpCleanup: import("./types").ScheduledFunctionDefinition;
 export declare const draftPrune: import("./types").ScheduledFunctionDefinition;
 export declare const testerSandboxCleanup: import("./types").ScheduledFunctionDefinition;
-export declare const testerSandboxRefresh: import("./types").ScheduledFunctionDefinition;
 export declare const prizeDrawExpiryReveal: import("./types").ScheduledFunctionDefinition;
 export declare const bundleStockSync: import("./types").ScheduledFunctionDefinition;
 export declare const emiInstallmentReminder: import("./types").ScheduledFunctionDefinition;
 export declare const catalogueImageStalenessReminder: import("./types").ScheduledFunctionDefinition;
-export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];
+export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];

package/dist/_internal/server/functions/scheduled.js

@@ -1,6 +1,6 @@
 // Scheduled function definitions (Cloud Scheduler triggers).
 // Cron syntax accepts both Firebase shorthand and standard cron expressions.
-import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, paymentWindowTimeoutHandler, hardBanReinstatementHandler, paymentReviewAutoApproveHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeDrawExpiryRevealHandler, productStatsSyncHandler, revenueRollupHandler, pageViewRollupHandler, pageViewPruneHandler, dailyStatusDigestHandler, weeklyPayoutEligibilityHandler, testerSandboxCleanupHandler, testerSandboxRefreshHandler, } from "../jobs/handlers";
+import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, paymentWindowTimeoutHandler, hardBanReinstatementHandler, paymentReviewAutoApproveHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeDrawExpiryRevealHandler, productStatsSyncHandler, revenueRollupHandler, pageViewRollupHandler, pageViewPruneHandler, dailyStatusDigestHandler, weeklyPayoutEligibilityHandler, testerSandboxCleanupHandler, } from "../jobs/handlers";
 import { defineFunction } from "./define";
 const REGION = "asia-south1";
 const EVERY_5_MIN = "every 5 minutes";
@@ -182,13 +182,13 @@ export const testerSandboxCleanup = defineFunction({
     handler: testerSandboxCleanupHandler,
     options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
 });
-export const testerSandboxRefresh = defineFunction({
-    name: "testerSandboxRefresh",
-    description: "Revert live tester QA sandbox fixtures to their canonical seed shape and prune tester-created extras (every 4 hours).",
-    trigger: { kind: "schedule", cron: "0 */4 * * *", timeZone: "UTC" },
-    handler: testerSandboxRefreshHandler,
-    options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
-});
+// testerSandboxRefresh (every 4h: revert fixtures to seed shape, prune extras) was
+// REMOVED. The tester runner now owns fixture state — it seeds a known catalog at the
+// start of a run and wipes at the end — so a background job independently rewriting
+// those same documents was redundant and, worse, raced a run in progress: it reset
+// currentBid and recomputed auctionEndDate underneath a test that was mid-assertion.
+// Do not reinstate it without also deciding who owns fixture state; two owners is the
+// bug it caused. See tester/scripts/lifecycle.mjs.
 export const prizeDrawExpiryReveal = defineFunction({
     name: "prizeDrawExpiryReveal",
     description: "Assign winners for outstanding paid orders on scheduled-mode prize draws past their expiry, then close them (every 5 minutes).",
@@ -242,7 +242,6 @@ export const SCHEDULED_FUNCTIONS = [
     mediaTmpCleanup,
     draftPrune,
     testerSandboxCleanup,
-    testerSandboxRefresh,
     prizeDrawExpiryReveal,
     bundleStockSync,
     emiInstallmentReminder,

package/dist/_internal/server/jobs/core/testerSandboxCleanup.d.ts

@@ -1,4 +1,19 @@
 import type { JobContext } from "../runtime/types";
+/**
+ * 🛑 THE definition of "sandbox scope" — six collections, and nothing else.
+ *
+ * Everything OUTSIDE this list is permanent: neither this job nor anything else
+ * reclaims it. That is why `users`, `addresses`, `sessions` and `siteSettings`
+ * survive a tester run untouched, and why the tester lifecycle's cascade delete
+ * (tester/scripts/lib/collections.mjs) mirrors this list rather than inventing
+ * its own — a second definition is how the two silently disagree.
+ *
+ * Adding a collection here makes it disposable. Do not add one without also
+ * adding a seed fixture for it, or a run will delete rows nothing recreates.
+ *
+ * (This used to be shared with testerSandboxRefresh.ts, which was removed when
+ * the tester runner took over fixture state — see scheduled.ts.)
+ */
 export declare const SANDBOX_COLLECTIONS: readonly ["categories", "stores", "products", "blogPosts", "events", "offers"];
 export interface TesterSandboxCleanupOptions {
     /** true = wipe every isTestData:true doc regardless of testDataExpiresAt (manual force-purge). */

package/dist/_internal/server/jobs/core/testerSandboxCleanup.js

@@ -1,11 +1,20 @@
 import { batchDelete, getTestDataRefs } from "../handlers/_helpers";
 import { BID_FIELDS } from "../../../../constants/field-names";
-// Exported so testerSandboxRefresh.ts (the every-4h revert+prune job) reuses
-// the exact same collection scope instead of redefining it — one source of
-// truth for "what counts as sandbox scope."
-// Keep in sync with testerSandboxRefresh.ts's SEED_BY_COLLECTION — the daily
-// TTL cleanup and the 4-hourly revert+prune must agree on what "sandbox" means
-// (CLAUDE.md § Tester QA standards #3).
+/**
+ * 🛑 THE definition of "sandbox scope" — six collections, and nothing else.
+ *
+ * Everything OUTSIDE this list is permanent: neither this job nor anything else
+ * reclaims it. That is why `users`, `addresses`, `sessions` and `siteSettings`
+ * survive a tester run untouched, and why the tester lifecycle's cascade delete
+ * (tester/scripts/lib/collections.mjs) mirrors this list rather than inventing
+ * its own — a second definition is how the two silently disagree.
+ *
+ * Adding a collection here makes it disposable. Do not add one without also
+ * adding a seed fixture for it, or a run will delete rows nothing recreates.
+ *
+ * (This used to be shared with testerSandboxRefresh.ts, which was removed when
+ * the tester runner took over fixture state — see scheduled.ts.)
+ */
 export const SANDBOX_COLLECTIONS = ["categories", "stores", "products", "blogPosts", "events", "offers"];
 const BID_CHUNK_SIZE = 30; // Firestore `in` query cap
 export async function runTesterSandboxCleanup(ctx, opts = {}) {

package/dist/_internal/server/jobs/handlers/index.d.ts

@@ -54,7 +54,6 @@ export { onScamReportCreateHandler } from "./onScamReportCreate";
 export { onScamReportUpdateHandler } from "./onScamReportUpdate";
 export { draftPruneHandler } from "./draftPrune";
 export { testerSandboxCleanupHandler } from "./testerSandboxCleanup";
-export { testerSandboxRefreshHandler } from "./testerSandboxRefresh";
 export { emiInstallmentReminderHandler } from "./emiInstallmentReminder";
 export { onShipmentItemWriteHandler } from "./onShipmentItemWrite";
 export { onShipmentLotWriteHandler, onShipmentHeaderWriteHandler } from "./onShipmentAllocationSync";

package/dist/_internal/server/jobs/handlers/index.js

@@ -67,7 +67,6 @@ export { draftPruneHandler } from "./draftPrune";
 // Tester program — 7-day auto-expiry sweep for the shared admin-seeded test sandbox
 export { testerSandboxCleanupHandler } from "./testerSandboxCleanup";
 // Tester program — every-4h revert-live-edits + prune-extras refresh (faster than the 7-day sweep above)
-export { testerSandboxRefreshHandler } from "./testerSandboxRefresh";
 // EMI — installment reminder + overdue-flagging sweep
 export { emiInstallmentReminderHandler } from "./emiInstallmentReminder";
 // Procurement Shipments — 3-function recompute cascade (item→lot, lot/header→shipment allocation, cascade-delete)

package/dist/features/auth/schemas/firestore.d.ts

@@ -69,6 +69,7 @@ export interface UserDocument extends BaseDocument {
     storeStatus?: "pending" | "approved" | "rejected";
     isTester?: boolean;
     canTestAdmin?: boolean;
+    isBot?: boolean;
     publicProfile?: {
         isPublic: boolean;
         showEmail: boolean;

package/dist/features/tester/repository/tester-checklist-item.repository.d.ts

@@ -15,9 +15,24 @@ export declare class TesterChecklistItemRepository extends BaseRepository<Tester
     /** Reopens a fixed, bug-confirmed case as a new, active version for retest.
      * The old item stays disabled forever with its bug-hunter credit intact. */
     reopenAsNewVersion(oldItemId: string): Promise<TesterChecklistItemDocument>;
+    /**
+     * Ids of automated (non-human) accounts, excluded from the PUBLIC leaderboard.
+     *
+     * Read as a bare collection query rather than through `userRepository` on purpose:
+     * no repository in this codebase imports another, and this needs a key set, not
+     * user documents. `.select()` with no fields returns refs only, so the read is as
+     * cheap as Firestore allows, and `isBot == true` is a single-field equality served
+     * by the automatic index — no composite index to declare.
+     */
+    private botHunterIds;
     /** Single-query, in-memory aggregation of bug credits per hunter — mirrors
      * EventEntryRepository.getLeaderboard()'s shape. Includes old/disabled/
-     * superseded items, since bug credit is permanent. */
+     * superseded items, since bug credit is permanent.
+     *
+     * Bot accounts are aggregated out (not merely ranked last): the board exists to
+     * credit people, and a runner working all 943 cases would otherwise dominate it.
+     * The credit still lives on the item, so admin triage and the item's own
+     * `bugHunterName` are unaffected. */
     getBugHunterLeaderboard(limit?: number): Promise<BugHunterLeaderboardEntry[]>;
 }
 export declare const testerChecklistItemRepository: TesterChecklistItemRepository;

package/dist/features/tester/repository/tester-checklist-item.repository.js

@@ -1,6 +1,7 @@
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
 import { buildSearchTxt } from "../../../utils/search-txt";
 import { DatabaseError } from "../../../errors";
+import { USER_COLLECTION } from "../../auth/schemas/firestore";
 import { TESTER_CHECKLIST_ITEM_COLLECTION, TESTER_CHECKLIST_ITEM_FIELDS, createChecklistItemId, } from "../schemas/firestore";
 export class TesterChecklistItemRepository extends BaseRepository {
     constructor() {
@@ -86,18 +87,43 @@ export class TesterChecklistItemRepository extends BaseRepository {
         await this.update(old.id, { supersededByItemId: newId });
         return newItem;
     }
+    /**
+     * Ids of automated (non-human) accounts, excluded from the PUBLIC leaderboard.
+     *
+     * Read as a bare collection query rather than through `userRepository` on purpose:
+     * no repository in this codebase imports another, and this needs a key set, not
+     * user documents. `.select()` with no fields returns refs only, so the read is as
+     * cheap as Firestore allows, and `isBot == true` is a single-field equality served
+     * by the automatic index — no composite index to declare.
+     */
+    async botHunterIds() {
+        const snapshot = await this.db
+            .collection(USER_COLLECTION)
+            .where("isBot", "==", true)
+            .select()
+            .get();
+        return new Set(snapshot.docs.map((d) => d.id));
+    }
     /** Single-query, in-memory aggregation of bug credits per hunter — mirrors
      * EventEntryRepository.getLeaderboard()'s shape. Includes old/disabled/
-     * superseded items, since bug credit is permanent. */
+     * superseded items, since bug credit is permanent.
+     *
+     * Bot accounts are aggregated out (not merely ranked last): the board exists to
+     * credit people, and a runner working all 943 cases would otherwise dominate it.
+     * The credit still lives on the item, so admin triage and the item's own
+     * `bugHunterName` are unaffected. */
     async getBugHunterLeaderboard(limit = 50) {
-        const snapshot = await this.db
-            .collection(this.collection)
-            .where(TESTER_CHECKLIST_ITEM_FIELDS.BUG_CONFIRMED, "==", true)
-            .get();
+        const [snapshot, botIds] = await Promise.all([
+            this.db
+                .collection(this.collection)
+                .where(TESTER_CHECKLIST_ITEM_FIELDS.BUG_CONFIRMED, "==", true)
+                .get(),
+            this.botHunterIds(),
+        ]);
         const byHunter = new Map();
         for (const doc of snapshot.docs) {
             const item = this.mapDoc(doc);
-            if (!item.bugHunterId)
+            if (!item.bugHunterId || botIds.has(item.bugHunterId))
                 continue;
             const entry = byHunter.get(item.bugHunterId) ?? {
                 name: item.bugHunterName ?? "Unknown tester",

package/dist/features/tester/seed-data/events-tester-seed-data.js

@@ -1,11 +1,17 @@
 /*
- * WHY: Shared tester sandbox — 1 disposable test event with both raffle and spin-wheel
- *      fields populated, so testers can exercise the events/raffle/spin flow end to end.
- *      Auto-expires after 7 days (testerSandboxCleanup).
- * WHAT: Exports eventsTesterSeedData — 1 Partial<EventDocument> tagged isTestData:true.
+ * WHY: Shared tester sandbox — disposable test events covering spin-wheel, both raffle
+ *      variants, a coupon offer, and a lottery with a pre-booked slot, so testers can
+ *      exercise each flow end to end.
+ * WHAT: Exports eventsTesterSeedData — 5 Partial<EventDocument> tagged isTestData:true.
+ *
+ *      The lottery's draw window is expressed via tester-window.ts rather than a fixed
+ *      duration, so an automated run can shorten it and still watch the window close.
+ *      The other four stay long-lived on purpose: they are meant to read as ACTIVE
+ *      events for a human tester who seeds today and returns tomorrow. A fixture that
+ *      must expire mid-session should be added as its own row, not by re-timing these.
  *
  * EXPORTS:
- *   eventsTesterSeedData — Array of 1 Partial<EventDocument> for the seed runner
+ *   eventsTesterSeedData — Array of 5 Partial<EventDocument> for the seed runner
  *
  * @tag domain:events,tester
  * @tag layer:seed
@@ -17,6 +23,7 @@
 import { EVENT_FIELDS } from "../../../constants/field-names";
 import { seedPhoto } from "../../../seed/_helpers/media";
 import { testDataExpiresAt } from "./tester-ttl";
+import { windowMinutes, windowOffset } from "./tester-window";
 const TEST_EVENT_COVER_ALT = "Test event cover";
 const TEST_RAFFLE_PRIZE = "Test prize — not a real reward";
 export const eventsTesterSeedData = [
@@ -118,4 +125,69 @@ export const eventsTesterSeedData = [
         createdAt: new Date(),
         updatedAt: new Date(),
     },
+    // ── Lottery, with one slot ALREADY BOOKED ───────────────────────────────────
+    // This fixture exists for exactly two checklist cases, both marked 🛑:
+    //   page-wiring/data-loss/lottery-edit-preserves-bookings
+    //   page-wiring/data-loss/lottery-booked-slot-cannot-be-deleted
+    // Neither could be tested before, because no lottery fixture existed anywhere —
+    // lottery events could previously only come from a hand-run seed.
+    //
+    // 🛑 Slot 3's booking IS the fixture. A booked slot carries a buyer id, a display
+    // name and a lottery number, and the bug being guarded silently cleared all three
+    // while returning a success message. Do not "tidy" this into an all-unbooked
+    // lottery — an unbooked slot cannot demonstrate the loss, and the case would then
+    // pass against the very bug it exists to catch.
+    //
+    // price/weight are server-only (toClientLotterySlot strips them). Uniform pricing
+    // means every slot is weight 50 by definition — see computeWeight().
+    {
+        id: "event-tester-sandbox-lottery",
+        slug: "tester-sandbox-lottery",
+        type: EVENT_FIELDS.TYPE_VALUES.LOTTERY,
+        title: "Tester Sandbox — Lottery",
+        description: "Disposable test lottery for the tester QA program. Slot 3 is pre-booked: edit an unrelated slot, save, reopen, and confirm slot 3 is STILL booked to the same buyer with the same lottery number.",
+        status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
+        startsAt: new Date(),
+        endsAt: windowOffset(1),
+        coverImage: {
+            type: "image",
+            url: seedPhoto("event-cover-tester-sandbox-lottery-20260101", 1200, 600),
+            alt: TEST_EVENT_COVER_ALT,
+        },
+        tags: ["test"],
+        lotteryConfig: {
+            totalSlots: 6,
+            pricingMode: "uniform",
+            uniformPrice: 100,
+            // Must outlast the run, or late batches meet a closed lottery. windowOffset(1)
+            // is the run's end, so the draw window is expressed in the same units.
+            drawWindowDurationMinutes: Math.ceil(windowMinutes()),
+            maxPullsPerTransaction: 1,
+            maxPullsPerUser: 1,
+            slots: [
+                { slotNumber: 1, name: "Test Prize — Dragoon Storm", price: 100, weight: 50, isBooked: false, image: seedPhoto("lottery-slot-tester-1-20260101", 600, 600) },
+                { slotNumber: 2, name: "Test Prize — Dranzer S", price: 100, weight: 50, isBooked: false, image: seedPhoto("lottery-slot-tester-2-20260101", 600, 600) },
+                {
+                    slotNumber: 3,
+                    name: "Test Prize — Draciel Shield",
+                    price: 100,
+                    weight: 50,
+                    isBooked: true,
+                    bookedByUserId: "user-ash-trainer",
+                    bookedByDisplayName: "Mock User 4",
+                    bookedByUserLotteryNumber: 1,
+                    image: seedPhoto("lottery-slot-tester-3-20260101", 600, 600),
+                },
+                { slotNumber: 4, name: "Test Prize — Driger F", price: 100, weight: 50, isBooked: false },
+                { slotNumber: 5, name: "Test Prize — Wolborg", price: 100, weight: 50, isBooked: false },
+                { slotNumber: 6, name: "Test Prize — Trygle", price: 100, weight: 50, isBooked: false },
+            ],
+        },
+        stats: { totalEntries: 1, approvedEntries: 1, flaggedEntries: 0 },
+        createdBy: "user-admin-letitrip",
+        isTestData: true,
+        testDataExpiresAt: testDataExpiresAt(),
+        createdAt: new Date(),
+        updatedAt: new Date(),
+    },
 ];

package/dist/features/tester/seed-data/offers-tester-seed-data.js

@@ -11,7 +11,7 @@
  *       drive it straight through the Offers checkout lane.
  *
  * Every date is Date.now()-relative (per CLAUDE.md's tester-fixture standards)
- * so the 4-hour testerSandboxRefresh re-arms it instead of letting it go stale.
+ * so each seed run re-arms it instead of letting it go stale.
  *
  * EXPORTS:
  *   offersTesterSeedData — Array of 1 Partial<OfferDocument> for the seed runner
@@ -25,9 +25,23 @@
  */
 import { OfferStatusValues } from "../../seller/schemas/firestore";
 import { testDataExpiresAt } from "./tester-ttl";
+import { windowOffset } from "./tester-window";
 const NOW = new Date();
 const hoursAgo = (n) => new Date(NOW.getTime() - n * 3600000);
-const hoursFromNow = (n) => new Date(NOW.getTime() + n * 3600000);
+/*
+ * Deadlines expressed as fractions of the testing window rather than fixed hours.
+ *
+ * "An accepted offer past its checkoutDeadline cannot be checked out" is a real
+ * checklist case, and a fixed 36-hour deadline makes it untestable in any session
+ * shorter than a day and a half. Fractions scale with TESTER_WINDOW_MINUTES, so the
+ * lapse actually happens while someone is watching.
+ *
+ * OUTLASTS_RUN is deliberately greater than 1: the "still live" offers must NOT
+ * lapse mid-run, or every other offer case starts failing for the wrong reason.
+ */
+const OUTLASTS_RUN = 2;
+const LAPSES_MID_RUN = 1 / 3;
+const CHECKOUT_LAPSES_MID_RUN = 1 / 6;
 export const offersTesterSeedData = [
     {
         id: "offer-tester-sandbox-accepted",
@@ -52,11 +66,11 @@ export const offersTesterSeedData = [
         status: OfferStatusValues.ACCEPTED,
         buyerNote: "Sandbox offer — already accepted so testers can drive checkout.",
         sellerNote: "Accepted for QA sandbox testing.",
-        expiresAt: hoursFromNow(24),
+        expiresAt: windowOffset(OUTLASTS_RUN),
         acceptedAt: hoursAgo(1),
         respondedAt: hoursAgo(1),
         // Well inside the 48h window so the lane is live for a whole test session.
-        checkoutDeadline: hoursFromNow(36),
+        checkoutDeadline: windowOffset(OUTLASTS_RUN),
         createdAt: hoursAgo(2),
         updatedAt: hoursAgo(1),
         isTestData: true,
@@ -83,7 +97,7 @@ export const offersTesterSeedData = [
         status: OfferStatusValues.COUNTERED,
         buyerNote: "Sandbox offer — seller has countered, accept it to test the counter path.",
         sellerNote: "Counter: ₹1,150.",
-        expiresAt: hoursFromNow(24),
+        expiresAt: windowOffset(OUTLASTS_RUN),
         respondedAt: hoursAgo(1),
         createdAt: hoursAgo(2),
         updatedAt: hoursAgo(1),
@@ -112,10 +126,10 @@ export const offersTesterSeedData = [
         status: OfferStatusValues.ACCEPTED,
         buyerNote: "Sandbox offer — accepted with a short checkout window.",
         sellerNote: "Accepted. Pay soon!",
-        expiresAt: hoursFromNow(1),
+        expiresAt: windowOffset(LAPSES_MID_RUN),
         acceptedAt: hoursAgo(0),
         respondedAt: hoursAgo(0),
-        checkoutDeadline: new Date(NOW.getTime() + 30 * 60000),
+        checkoutDeadline: windowOffset(CHECKOUT_LAPSES_MID_RUN),
         createdAt: hoursAgo(1),
         updatedAt: hoursAgo(0),
         isTestData: true,
@@ -141,7 +155,7 @@ export const offersTesterSeedData = [
         currency: "INR",
         status: OfferStatusValues.PENDING,
         buyerNote: "Sandbox offer — still pending, withdraw it to test that path.",
-        expiresAt: hoursFromNow(24),
+        expiresAt: windowOffset(OUTLASTS_RUN),
         createdAt: hoursAgo(1),
         updatedAt: hoursAgo(1),
         isTestData: true,
@@ -168,7 +182,7 @@ export const offersTesterSeedData = [
         currency: "INR",
         status: OfferStatusValues.PENDING,
         buyerNote: "Sandbox inbound offer — accept, counter, or decline it from your store dashboard.",
-        expiresAt: hoursFromNow(24),
+        expiresAt: windowOffset(OUTLASTS_RUN),
         createdAt: hoursAgo(2),
         updatedAt: hoursAgo(2),
         isTestData: true,

package/dist/features/tester/seed-data/products-tester-seed-data.js

@@ -5,12 +5,16 @@
  *      pre-ordering against real code paths — including navigating every entry of the store
  *      detail page's listing-type dropdown (see StoreNavTabs). Auto-expires after 7 days
  *      (testerSandboxCleanup cascades into any bids on the auction).
- * WHAT: Exports productsTesterSeedData — 2 standard + 4 auction (3 staggered 1h/2h/3h "still
- *       open" cycling fixtures + 1 already-ended "won" fixture) + 1 pre-order + 1 prize-draw +
+ * WHAT: Exports productsTesterSeedData — 2 standard + 4 auction (3 staggered "still open"
+ *       cycling fixtures + 1 already-ended "won" fixture) + 1 pre-order + 1 prize-draw +
  *       1 classified + 1 digital-code + 1 live + 1 art + 1 stickers product + 1 product-group
  *       ("Set") parent (product-tester-standard-1/2 are its children, linked via groupId).
- *       The 3 staggered auction ids/end-dates are recomputed on every seed run (including the
- *       testerSandboxRefresh job, every 4h) so testers can watch one actually end mid-session.
+ *
+ *       Every auction end date is recomputed on each seed run from tester-window.ts, as a
+ *       FRACTION of the testing window rather than a fixed duration. At the default
+ *       180-minute window the staggered three land on the historical 1h/2h/3h; a shorter
+ *       TESTER_WINDOW_MINUTES pulls all of them in together, which is what lets a run
+ *       actually watch an auction cross its end time.
  *
  * EXPORTS:
  *   productsTesterSeedData — Array of Partial<ProductDocument> for the seed runner
@@ -26,6 +30,7 @@ import { PRODUCT_FIELDS } from "../../../constants/field-names";
 import { buildSearchTxt } from "../../../utils/search-txt";
 import { seedPhoto } from "../../../seed/_helpers/media";
 import { testDataExpiresAt } from "./tester-ttl";
+import { windowOffset } from "./tester-window";
 const TESTER_STORE_ID = "store-tester-sandbox";
 const TESTER_STORE_NAME = "Tester Sandbox Store";
 const TESTER_GROUP_TITLE = "Tester Sandbox Bundle";
@@ -45,44 +50,56 @@ function withTokens(p) {
         searchTxt: buildSearchTxt([p.title, p.description, p.brand, p.brandSlug, p.categoryNames, p.tags]),
     };
 }
-// Staggered, incrementing-id auction fixtures so testers can watch a live
-// auction actually cross its end time within a single sandbox refresh cycle
-// (testerSandboxRefresh re-imports this module every 4 hours, recomputing
-// these Date.now()-relative offsets fresh each time) instead of the old
-// single fixture that always sat 5 days out. A loop (not hand-typed ids)
-// avoids id collisions if the stagger list is ever extended.
-const AUCTION_CYCLE_STAGGER_HOURS = [1, 2, 3];
-const stagedAuctions = AUCTION_CYCLE_STAGGER_HOURS.map((hours, i) => withTokens({
-    id: `auction-tester-sandbox-cycle-${i + 1}`,
-    slug: `auction-tester-sandbox-cycle-${i + 1}`,
-    title: `Test Auction — Ends in ~${hours}h`,
-    description: `Disposable test auction for the tester QA program, staggered to end roughly ${hours} hour(s) after the last sandbox refresh so testers can watch the end-of-auction flow live. Place a bid — it auto-expires in 7 days, cascading to any bids.`,
-    categorySlugs: COLLECTIBLES_CATEGORY_SLUGS,
-    categoryNames: COLLECTIBLES_CATEGORY_NAMES,
-    brandSlug: "brand-tester-sandbox",
-    brand: "TestBrand",
-    startingBid: 15000,
-    currentBid: 15000,
-    currency: "INR",
-    price: 150,
-    stockQuantity: 1,
-    availableQuantity: 1,
-    auctionEndDate: new Date(Date.now() + hours * 60 * 60 * 1000),
-    bidCount: 0,
-    bidsHaveStarted: false,
-    isSold: false,
-    mainImage: seedPhoto(`auction-image-tester-sandbox-cycle-${i + 1}-20260101`, 900, 900),
-    images: [seedPhoto(`auction-image-tester-sandbox-cycle-${i + 1}-20260101`, 900, 900)],
-    status: PRODUCT_FIELDS.STATUS_VALUES.PUBLISHED,
-    condition: PRODUCT_FIELDS.CONDITION_VALUES.NEW,
-    listingType: "auction",
-    customFields: [],
-    customSections: [],
-    isPromoted: false,
-    isOnSale: false,
-    createdAt: new Date(),
-    updatedAt: new Date(),
-}));
+// Staggered, incrementing-id auction fixtures so a tester can watch a live auction
+// actually cross its end time inside one session, instead of the old single fixture
+// that always sat 5 days out. A loop (not hand-typed ids) avoids id collisions if
+// the stagger list is ever extended.
+//
+// Expressed as FRACTIONS of the testing window rather than fixed hours: with the
+// default 180-minute window these resolve to the same 1h/2h/3h this fixture has
+// always used, and an automated run shortens all three together by setting
+// TESTER_WINDOW_MINUTES. Hard-coded hours cannot be shortened, which is what made
+// "watch an auction end" untestable in any run shorter than three hours.
+const AUCTION_CYCLE_STAGGER_FRACTIONS = [1 / 3, 2 / 3, 1];
+/** Deliberately past the end of the run — "plenty of clock left" fixtures must NOT expire mid-test. */
+const OUTLASTS_RUN = 2;
+/** ~1/9 of the window: 20 minutes at the default 180, 10 at a 90-minute run. Scales with the window instead of pinning 20 minutes that a short run can never reach. */
+const EXPIRES_MID_RUN = 1 / 9;
+const stagedAuctions = AUCTION_CYCLE_STAGGER_FRACTIONS.map((fraction, i) => {
+    const endsAt = windowOffset(fraction);
+    const endsInMinutes = Math.max(1, Math.round((endsAt.getTime() - Date.now()) / 60000));
+    return withTokens({
+        id: `auction-tester-sandbox-cycle-${i + 1}`,
+        slug: `auction-tester-sandbox-cycle-${i + 1}`,
+        title: `Test Auction — Ends in ~${endsInMinutes}m`,
+        description: `Disposable test auction for the tester QA program, staggered to end roughly ${endsInMinutes} minute(s) after seeding so testers can watch the end-of-auction flow live. Place a bid — it auto-expires in 7 days, cascading to any bids.`,
+        categorySlugs: COLLECTIBLES_CATEGORY_SLUGS,
+        categoryNames: COLLECTIBLES_CATEGORY_NAMES,
+        brandSlug: "brand-tester-sandbox",
+        brand: "TestBrand",
+        startingBid: 15000,
+        currentBid: 15000,
+        currency: "INR",
+        price: 150,
+        stockQuantity: 1,
+        availableQuantity: 1,
+        auctionEndDate: endsAt,
+        bidCount: 0,
+        bidsHaveStarted: false,
+        isSold: false,
+        mainImage: seedPhoto(`auction-image-tester-sandbox-cycle-${i + 1}-20260101`, 900, 900),
+        images: [seedPhoto(`auction-image-tester-sandbox-cycle-${i + 1}-20260101`, 900, 900)],
+        status: PRODUCT_FIELDS.STATUS_VALUES.PUBLISHED,
+        condition: PRODUCT_FIELDS.CONDITION_VALUES.NEW,
+        listingType: "auction",
+        customFields: [],
+        customSections: [],
+        isPromoted: false,
+        isOnSale: false,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+    });
+});
 /**
  * Buy-Now (buyout) fixtures. Four states, because the 2026-08-24 rework made
  * buyout availability depend on `buyNowPrice > currentBid` rather than on
@@ -90,7 +107,7 @@ const stagedAuctions = AUCTION_CYCLE_STAGGER_HOURS.map((hours, i) => withTokens(
  * three of them were previously unreachable as test data.
  *
  * Every date is Date.now()-relative at module import, per CLAUDE.md's tester
- * fixture standard, so the 4-hour testerSandboxRefresh re-arms them.
+ * fixture standard, so each seed run re-arms them; durations come from tester-window.ts.
  */
 const buyoutAuctions = [
     {
@@ -101,7 +118,7 @@ const buyoutAuctions = [
         buyNowPrice: 12000,
         bidCount: 0,
         bidsHaveStarted: false,
-        endsInHours: 6,
+        endsAtFraction: OUTLASTS_RUN,
     },
     {
         key: "buyout-contested",
@@ -111,7 +128,7 @@ const buyoutAuctions = [
         buyNowPrice: 12000,
         bidCount: 2,
         bidsHaveStarted: true,
-        endsInHours: 6,
+        endsAtFraction: OUTLASTS_RUN,
     },
     {
         key: "buyout-passed",
@@ -121,7 +138,7 @@ const buyoutAuctions = [
         buyNowPrice: 9000,
         bidCount: 5,
         bidsHaveStarted: true,
-        endsInHours: 6,
+        endsAtFraction: OUTLASTS_RUN,
     },
     {
         key: "buyout-expiring",
@@ -131,7 +148,7 @@ const buyoutAuctions = [
         buyNowPrice: 5000,
         bidCount: 1,
         bidsHaveStarted: true,
-        endsInMinutes: 20,
+        endsAtFraction: EXPIRES_MID_RUN,
     },
 ].map((f) => withTokens({
     id: `auction-tester-sandbox-${f.key}`,
@@ -149,8 +166,7 @@ const buyoutAuctions = [
     price: f.currentBid,
     stockQuantity: 1,
     availableQuantity: 1,
-    auctionEndDate: new Date(Date.now() +
-        (f.endsInMinutes ? f.endsInMinutes * 60 * 1000 : (f.endsInHours ?? 6) * 60 * 60 * 1000)),
+    auctionEndDate: windowOffset(f.endsAtFraction),
     bidCount: f.bidCount,
     bidsHaveStarted: f.bidsHaveStarted,
     isSold: false,

package/dist/features/tester/seed-data/tester-window.d.ts

@@ -0,0 +1,25 @@
+/** Reproduces the historical 1h/2h/3h auction stagger when nothing overrides it. */
+export declare const DEFAULT_TESTER_WINDOW_MINUTES = 180;
+/** Below this nothing is observable — a page load alone can outlast it. */
+export declare const MIN_TESTER_WINDOW_MINUTES = 5;
+/** The sandbox TTL is 7 days; a window longer than that outlives its own fixtures. */
+export declare const MAX_TESTER_WINDOW_MINUTES: number;
+/**
+ * Length of the testing window, in minutes.
+ *
+ * Read at call time rather than captured at module scope so a caller that sets the
+ * env var before importing a seed file still wins. Anything unparseable, non-finite
+ * or out of range falls back to the default rather than throwing: a malformed env
+ * var must not be able to brick `appkit-seed load`.
+ */
+export declare function windowMinutes(): number;
+/**
+ * A point `fraction` of the way through the window, measured from now.
+ *
+ * `windowOffset(0)` is now, `windowOffset(1)` is the window's end. Fractions above 1
+ * are allowed and mean "after this run" — that is how a fixture says "still open when
+ * testing finishes" without hard-coding a duration.
+ */
+export declare function windowOffset(fraction: number): Date;
+/** The mirror of windowOffset, into the past — for fixtures that must already be closed. */
+export declare function windowAgo(fraction: number): Date;

package/dist/features/tester/seed-data/tester-window.js

@@ -0,0 +1,66 @@
+/*
+ * WHY: Every time-bound tester fixture — auction end dates, coupon validity, event
+ *      start/end, prize-draw reveal windows, offer expiry, lottery draw windows —
+ *      must open and close INSIDE one testing session. Hand-written offsets like
+ *      `Date.now() + 2 * 60 * 60 * 1000` cannot do that: they bake in a duration
+ *      nobody can shorten, so a case reading "watch the auction actually end" is
+ *      untestable without sitting there for two hours.
+ *
+ *      This file is the one knob. Fixtures express WHEN as a fraction of the run
+ *      window; the window's real length comes from TESTER_WINDOW_MINUTES.
+ *
+ * WHAT: windowMinutes() / windowOffset(fraction) / windowAgo(fraction).
+ *
+ * 🛑 The default is 180 minutes ON PURPOSE — it reproduces the pre-existing 1h/2h/3h
+ *    auction stagger exactly (fractions 1/3, 2/3, 1), so an ordinary `appkit-seed load`
+ *    behaves as it always has. Only the automated runner shortens it. Changing this
+ *    default silently re-times every fixture for human testers too.
+ *
+ * @tag domain:tester
+ * @tag layer:seed
+ * @tag pattern:none
+ * @tag access:server-only
+ * @tag consumers:seed-data/*-tester-seed-data.ts
+ * @tag sideEffects:none
+ */
+/** Reproduces the historical 1h/2h/3h auction stagger when nothing overrides it. */
+export const DEFAULT_TESTER_WINDOW_MINUTES = 180;
+/** Below this nothing is observable — a page load alone can outlast it. */
+export const MIN_TESTER_WINDOW_MINUTES = 5;
+/** The sandbox TTL is 7 days; a window longer than that outlives its own fixtures. */
+export const MAX_TESTER_WINDOW_MINUTES = 7 * 24 * 60;
+/**
+ * Length of the testing window, in minutes.
+ *
+ * Read at call time rather than captured at module scope so a caller that sets the
+ * env var before importing a seed file still wins. Anything unparseable, non-finite
+ * or out of range falls back to the default rather than throwing: a malformed env
+ * var must not be able to brick `appkit-seed load`.
+ */
+export function windowMinutes() {
+    const raw = process.env.TESTER_WINDOW_MINUTES;
+    if (!raw)
+        return DEFAULT_TESTER_WINDOW_MINUTES;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed))
+        return DEFAULT_TESTER_WINDOW_MINUTES;
+    if (parsed < MIN_TESTER_WINDOW_MINUTES)
+        return MIN_TESTER_WINDOW_MINUTES;
+    if (parsed > MAX_TESTER_WINDOW_MINUTES)
+        return MAX_TESTER_WINDOW_MINUTES;
+    return parsed;
+}
+/**
+ * A point `fraction` of the way through the window, measured from now.
+ *
+ * `windowOffset(0)` is now, `windowOffset(1)` is the window's end. Fractions above 1
+ * are allowed and mean "after this run" — that is how a fixture says "still open when
+ * testing finishes" without hard-coding a duration.
+ */
+export function windowOffset(fraction) {
+    return new Date(Date.now() + fraction * windowMinutes() * 60000);
+}
+/** The mirror of windowOffset, into the past — for fixtures that must already be closed. */
+export function windowAgo(fraction) {
+    return windowOffset(-fraction);
+}

package/dist/seed/users-seed-data.js

@@ -1,11 +1,16 @@
 /*
- * WHY: Provides 18 seed user accounts covering all marketplace roles and demographics.
- * WHAT: Exports 18 UserDocument partials — 1 admin, 2 sellers (store owners, one of which
- *       is also the dedicated isTester QA account), 15 buyers.
+ * WHY: Provides 21 seed user accounts covering all marketplace roles and demographics.
+ * WHAT: Exports 21 UserDocument partials — 1 admin, 2 sellers (store owners, one of which
+ *       is also the dedicated isTester QA account), 15 buyers, 1 automated tester
+ *       (`user-claude-tester`, isBot), and 2 employees on contrasting permission presets.
  *       All passwords are TempPass123! in the Firebase Auth emulator. UIDs match slugs.
  *
+ *       🛑 seed-cli sets that password ONLY when it creates the Auth record. A re-seed
+ *       never resets an existing password, so an account whose password was changed
+ *       stays changed and must be reset explicitly.
+ *
  * EXPORTS:
- *   usersSeedData — array of 18 Partial<UserDocument> objects for the seed runner
+ *   usersSeedData — array of 21 Partial<UserDocument> objects for the seed runner
  *
  * @tag domain:users,auth
  * @tag layer:seed
@@ -15,6 +20,7 @@
  * @tag sideEffects:none
  */
 import { getDefaultPhonePrefix } from "./seed-market-config";
+import { PERMISSION_GROUPS } from "../features/auth/permissions/constants";
 import { USER_FIELDS } from "../constants/field-names";
 import { seedPhoto } from "./_helpers/media";
 const _ph = getDefaultPhonePrefix();
@@ -522,4 +528,101 @@ export const usersSeedData = [
         createdAt: daysAgo(1),
         updatedAt: daysAgo(1),
     },
+    // ── Automated tester (the Claude-driven checklist runner answers as this account) ──
+    // `canTestAdmin` is REQUIRED, not decorative: 116 checklist cases are adminOnly and
+    // GET/PUT /api/user/tester-checklist 404s them for a caller without it, so the runner
+    // would silently see a shorter catalog than a human tester does.
+    // `isBot` keeps it off the public Bug Hunters leaderboard — see getBugHunterLeaderboard().
+    {
+        uid: "user-claude-tester",
+        email: "claude-tester@letitrip.in",
+        phoneNumber: `${_ph}9999900019`,
+        phoneVerified: true,
+        displayName: "Claude (automated)",
+        photoURL: seedPhoto("user-avatar-claude-tester-20260101", 400, 400),
+        role: USER_FIELDS.ROLE_VALUES.SELLER,
+        isTester: true,
+        canTestAdmin: true,
+        isBot: true,
+        emailVerified: true,
+        disabled: false,
+        storeId: "store-tester-qa-seller",
+        storeSlug: "store-tester-qa-seller",
+        storeStatus: "approved",
+        publicProfile: {
+            isPublic: false,
+            showEmail: false,
+            showPhone: false,
+            showOrders: false,
+            showWishlist: false,
+            bio: "Automated tester. Works the tester checklist against a freshly seeded catalog and records a verdict per case.",
+            location: "Bengaluru, Karnataka",
+        },
+        stats: { totalOrders: 0, auctionsWon: 0, itemsSold: 0, reviewsCount: 0 },
+        metadata: { lastSignInTime: daysAgo(1), creationTime: daysAgo(1).toISOString(), loginCount: 1 },
+        createdAt: daysAgo(1),
+        updatedAt: daysAgo(1),
+    },
+    // ── Employees: two contrasting permission presets ───────────────────────────
+    // These exist so the sidebar-scoping checklist cases can be tested AT ALL. Before
+    // this the seed had no `role: "employee"` account anywhere, so the case the
+    // checklist itself marks "🛑 THE BIG ONE" — an employee must see only what their
+    // permissions allow, not all 91 admin entries — had nothing to sign in as.
+    //
+    // `permissions` is the load-bearing field (it is what the RBAC checks read);
+    // `permissionGroup` is display-only. Both are set from the same preset so they
+    // cannot disagree. Two presets on purpose: one narrow, one broad — a scoping bug
+    // that happens to produce the right count for one group is caught by the other.
+    {
+        uid: "user-employee-blog",
+        email: "employee-blog@letitrip.in",
+        phoneNumber: `${_ph}9999900020`,
+        phoneVerified: true,
+        displayName: "Mock Employee 1",
+        photoURL: seedPhoto("user-avatar-employee-blog-20260101", 400, 400),
+        role: USER_FIELDS.ROLE_VALUES.EMPLOYEE,
+        permissionGroup: "blog_poster",
+        permissions: [...PERMISSION_GROUPS.blog_poster],
+        emailVerified: true,
+        disabled: false,
+        publicProfile: {
+            isPublic: false,
+            showEmail: false,
+            showPhone: false,
+            showOrders: false,
+            showWishlist: false,
+            bio: "Content employee — blog and media only.",
+            location: "Pune, Maharashtra",
+        },
+        stats: { totalOrders: 0, auctionsWon: 0, itemsSold: 0, reviewsCount: 0 },
+        metadata: { lastSignInTime: daysAgo(2), creationTime: daysAgo(30).toISOString(), loginCount: 12 },
+        createdAt: daysAgo(30),
+        updatedAt: daysAgo(2),
+    },
+    {
+        uid: "user-employee-trust",
+        email: "employee-trust@letitrip.in",
+        phoneNumber: `${_ph}9999900021`,
+        phoneVerified: true,
+        displayName: "Mock Employee 2",
+        photoURL: seedPhoto("user-avatar-employee-trust-20260101", 400, 400),
+        role: USER_FIELDS.ROLE_VALUES.EMPLOYEE,
+        permissionGroup: "trust_and_safety",
+        permissions: [...PERMISSION_GROUPS.trust_and_safety],
+        emailVerified: true,
+        disabled: false,
+        publicProfile: {
+            isPublic: false,
+            showEmail: false,
+            showPhone: false,
+            showOrders: false,
+            showWishlist: false,
+            bio: "Trust & Safety employee — users, bans, reviews and reports.",
+            location: "Chennai, Tamil Nadu",
+        },
+        stats: { totalOrders: 0, auctionsWon: 0, itemsSold: 0, reviewsCount: 0 },
+        metadata: { lastSignInTime: daysAgo(2), creationTime: daysAgo(60).toISOString(), loginCount: 40 },
+        createdAt: daysAgo(60),
+        updatedAt: daysAgo(2),
+    },
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.34.0",
+  "version": "4.34.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"