@mohasinac/appkit 4.37.1 → 4.39.0

package/dist/features/products/components/ShowGroupSection.js

@@ -2,7 +2,7 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import Link from "next/link";
-import { Div, Row, Span, Text, Modal, SideDrawer, Button } from "../../../ui";
+import { Div, PricesOnly, Row, Span, Text, Modal, SideDrawer, Button } from "../../../ui";
 import { MediaImage } from "../../media/MediaImage";
 import { GroupMemberPicker } from "./GroupMemberPicker";
 import { formatCurrency } from "../../../utils/number.formatter";
@@ -23,7 +23,7 @@ function MemberThumb({ member, isCurrent }) {
     const price = formatCurrency(member.price, member.currency ?? "INR");
     return (_jsxs(Link, { href: href, "aria-label": member.title, className: "flex flex-col items-center gap-[var(--appkit-space-1-5)] flex-shrink-0 w-16 group", children: [_jsxs(Div, { rounded: "full", className: `relative w-14 h-14 overflow-hidden border-2 transition-all ${isCurrent
                     ? "border-[var(--appkit-color-primary)] ring-2 ring-[var(--appkit-color-primary)]/30"
-                    : "border-[var(--appkit-color-border)] group-hover:border-[var(--appkit-color-primary)]"}`, children: [_jsx(MediaImage, { src: image, alt: member.title, size: "card" }), member.isGroupParent && (_jsx(Span, { color: "inverse", rounded: "sm", className: "absolute bottom-0 right-0 bg-[var(--appkit-color-primary)] text-[8px] leading-none px-[0.25rem] py-[0.125rem]", children: "Set" }))] }), _jsx(Text, { className: "text-[10px] leading-tight line-clamp-2 w-full", color: "muted", align: "start", children: member.title }), _jsx(Text, { className: "text-[10px]", color: "primary", weight: "semibold", children: price })] }));
+                    : "border-[var(--appkit-color-border)] group-hover:border-[var(--appkit-color-primary)]"}`, children: [_jsx(MediaImage, { src: image, alt: member.title, size: "card" }), member.isGroupParent && (_jsx(Span, { color: "inverse", rounded: "sm", className: "absolute bottom-0 right-0 bg-[var(--appkit-color-primary)] text-[8px] leading-none px-[0.25rem] py-[0.125rem]", children: "Set" }))] }), _jsx(Text, { className: "text-[10px] leading-tight line-clamp-2 w-full", color: "muted", align: "start", children: member.title }), _jsx(Text, { className: "text-[10px]", color: "primary", weight: "semibold", children: _jsx(PricesOnly, { children: price }) })] }));
 }
 export function ShowGroupSection({ groupId, currentSlug, isParent, groupTitle }) {
     const [open, setOpen] = useState(false);

package/dist/features/products/components/SublistingCarouselSection.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import Link from "next/link";
 import { ROUTES } from "../../../next";
-import { Div, Row, Span, Text } from "../../../ui";
+import { Div, PricesOnly, Row, Span, Text } from "../../../ui";
 import { MediaImage } from "../../media/MediaImage";
 import { formatCurrency } from "../../../utils/number.formatter";
 import { normalizeListingType } from "../utils/listing-type";
@@ -23,7 +23,7 @@ function ListingThumb({ listing, isCurrent, }) {
     const price = formatCurrency(listing.price, listing.currency ?? "INR");
     return (_jsxs(Link, { href: href, "aria-label": listing.title, className: "flex flex-col items-center gap-[var(--appkit-space-1-5)] flex-shrink-0 w-16 group", children: [_jsx(Div, { rounded: "full", className: `relative w-14 h-14 overflow-hidden border-2 transition-all ${isCurrent
                     ? "border-[var(--appkit-color-primary)] ring-2 ring-[var(--appkit-color-primary)]/30"
-                    : "border-[var(--appkit-color-border)] group-hover:border-[var(--appkit-color-primary)]"}`, children: image ? (_jsx(MediaImage, { src: image, alt: listing.title, size: "avatar" })) : (_jsx(Row, { textSize: "xs", color: "faint", className: "w-full h-full", surface: "subtle", align: "center", justify: "center", children: "\u00E2\u2014\u00AF" })) }), _jsx(Text, { className: "text-[10px] leading-tight line-clamp-2 w-full", color: "muted", align: "start", children: listing.title }), _jsx(Text, { className: "text-[10px]", color: "primary", weight: "semibold", children: price })] }));
+                    : "border-[var(--appkit-color-border)] group-hover:border-[var(--appkit-color-primary)]"}`, children: image ? (_jsx(MediaImage, { src: image, alt: listing.title, size: "avatar" })) : (_jsx(Row, { textSize: "xs", color: "faint", className: "w-full h-full", surface: "subtle", align: "center", justify: "center", children: "\u00E2\u2014\u00AF" })) }), _jsx(Text, { className: "text-[10px] leading-tight line-clamp-2 w-full", color: "muted", align: "start", children: listing.title }), _jsx(Text, { className: "text-[10px]", color: "primary", weight: "semibold", children: _jsx(PricesOnly, { children: price }) })] }));
 }
 export function SublistingCarouselSection({ sublistingCategoryId, currentListingId }) {
     const [open, setOpen] = useState(false);

package/dist/features/products/constants/listing-tabs.d.ts

@@ -33,16 +33,33 @@ export interface ListingTab {
     entity?: "stores";
 }
 /**
- * The generic `/products` browse page spans EVERY listing type (2026-08-21).
+ * The types the generic `/products` browse page spans — the GENERAL CATALOGUE,
+ * not an index of everything.
  *
- * It used to span only `standard|classified|digital-code|live` on the theory
- * that auctions/pre-orders/prize-draws/art each had a dedicated page — but
- * that made five of nine types unreachable from the main catalogue, broke
- * seven legacy `/search/.../tab/<type>` permanent redirects that all point at
- * `/products`, and made the cross-type Compare + bulk-cart features (which
- * only exist on this page) unusable for those types. The dedicated pages
- * remain, and `/products` links to them when a single time-boxed type is
- * selected.
+ * DERIVED from `ListingTypePlugin.inGeneralCatalogue`, never hand-written: a
+ * literal array here is how ten enumerations of one union drifted apart in
+ * Root Cause #61, and `audit-listing-type-tab-coverage`'s STAYS_DERIVED rule
+ * blocks one.
+ *
+ * ## History — this spanned all nine types from 2026-08-21 until now
+ *
+ * The widening was a fix for Root Cause #61 and cited three reasons. Two have
+ * since been solved elsewhere, and the third is an accepted cost:
+ *
+ *  1. "Five of nine types unreachable from the main catalogue." Still true for
+ *     `classified`/`digital-code`/`live`, which have dedicated pages but no
+ *     `MAIN_NAV_ITEMS` entry — which is exactly why `inGeneralCatalogue` keeps
+ *     those three here. The other five are all in the main nav.
+ *  2. "Seven legacy `/search/.../tab/<type>` redirects all point at /products."
+ *     No longer true: that route derives `tabSlug -> browseRoute` from this
+ *     same registry, and `/search` maps every resource type to its own page.
+ *     Neither falls through to `/products` for a typed request.
+ *  3. "Cross-type Compare + bulk-cart only exist on this page." Still true, and
+ *     accepted: you can no longer compare an auction against a standard product.
+ *
+ * A type appearing both here and in the main nav is the bug this fixes — the
+ * same item reachable from two places with two different chromes (an auction
+ * card in the general grid renders Buy-Now chrome, not bid affordances).
  */
 export declare const GENERIC_PRODUCT_LISTING_TYPES: readonly ListingType[];
 /** The listing types the combined `/art` page spans. */
@@ -60,9 +77,16 @@ export type SellerListingTabId = string;
  * In-page type-filter chips on the generic `/products` browse page.
  *
  * Multi-select (checkbox semantics) — no "All" sentinel chip, because "none
- * checked" already means "every type". A sentinel would be a second way to
- * express the same state and would have to be cleared whenever a real chip
- * was ticked.
+ * checked" already means "every type IN THE GENERAL CATALOGUE". A sentinel
+ * would be a second way to express the same state and would have to be cleared
+ * whenever a real chip was ticked.
+ *
+ * 🛑 Derived from `GENERIC_PRODUCT_LISTING_TYPES`, NOT `ALL_LISTING_TYPES`. The
+ * chips must offer exactly the types the page can actually return: a chip for a
+ * type outside the span intersects to empty, and `listPublicProducts` then falls
+ * back to the full span — i.e. ticking it would silently widen the results
+ * instead of narrowing them. `ADMIN_PRODUCT_LISTING_TYPE_TABS` is a separate
+ * constant and correctly stays all-nine.
  */
 export declare const PRODUCT_TYPE_FILTER_TABS: readonly ListingTab[];
 /** In-page type-filter chips on the combined `/art` (Art & Stickers) page. */

package/dist/features/products/constants/listing-tabs.js

@@ -22,18 +22,35 @@
 import { ALL_LISTING_TYPES } from "../../../_internal/shared/listing-types/feature-flags";
 import { pluginFor } from "../../../_internal/shared/listing-types/_registry";
 /**
- * The generic `/products` browse page spans EVERY listing type (2026-08-21).
+ * The types the generic `/products` browse page spans — the GENERAL CATALOGUE,
+ * not an index of everything.
  *
- * It used to span only `standard|classified|digital-code|live` on the theory
- * that auctions/pre-orders/prize-draws/art each had a dedicated page — but
- * that made five of nine types unreachable from the main catalogue, broke
- * seven legacy `/search/.../tab/<type>` permanent redirects that all point at
- * `/products`, and made the cross-type Compare + bulk-cart features (which
- * only exist on this page) unusable for those types. The dedicated pages
- * remain, and `/products` links to them when a single time-boxed type is
- * selected.
+ * DERIVED from `ListingTypePlugin.inGeneralCatalogue`, never hand-written: a
+ * literal array here is how ten enumerations of one union drifted apart in
+ * Root Cause #61, and `audit-listing-type-tab-coverage`'s STAYS_DERIVED rule
+ * blocks one.
+ *
+ * ## History — this spanned all nine types from 2026-08-21 until now
+ *
+ * The widening was a fix for Root Cause #61 and cited three reasons. Two have
+ * since been solved elsewhere, and the third is an accepted cost:
+ *
+ *  1. "Five of nine types unreachable from the main catalogue." Still true for
+ *     `classified`/`digital-code`/`live`, which have dedicated pages but no
+ *     `MAIN_NAV_ITEMS` entry — which is exactly why `inGeneralCatalogue` keeps
+ *     those three here. The other five are all in the main nav.
+ *  2. "Seven legacy `/search/.../tab/<type>` redirects all point at /products."
+ *     No longer true: that route derives `tabSlug -> browseRoute` from this
+ *     same registry, and `/search` maps every resource type to its own page.
+ *     Neither falls through to `/products` for a typed request.
+ *  3. "Cross-type Compare + bulk-cart only exist on this page." Still true, and
+ *     accepted: you can no longer compare an auction against a standard product.
+ *
+ * A type appearing both here and in the main nav is the bug this fixes — the
+ * same item reachable from two places with two different chromes (an auction
+ * card in the general grid renders Buy-Now chrome, not bid affordances).
  */
-export const GENERIC_PRODUCT_LISTING_TYPES = ALL_LISTING_TYPES;
+export const GENERIC_PRODUCT_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => pluginFor(t).inGeneralCatalogue);
 /** The listing types the combined `/art` page spans. */
 export const ART_STICKERS_LISTING_TYPES = ["art", "stickers"];
 /**
@@ -87,10 +104,17 @@ export const SELLER_LISTING_TABS = [
  * In-page type-filter chips on the generic `/products` browse page.
  *
  * Multi-select (checkbox semantics) — no "All" sentinel chip, because "none
- * checked" already means "every type". A sentinel would be a second way to
- * express the same state and would have to be cleared whenever a real chip
- * was ticked.
+ * checked" already means "every type IN THE GENERAL CATALOGUE". A sentinel
+ * would be a second way to express the same state and would have to be cleared
+ * whenever a real chip was ticked.
+ *
+ * 🛑 Derived from `GENERIC_PRODUCT_LISTING_TYPES`, NOT `ALL_LISTING_TYPES`. The
+ * chips must offer exactly the types the page can actually return: a chip for a
+ * type outside the span intersects to empty, and `listPublicProducts` then falls
+ * back to the full span — i.e. ticking it would silently widen the results
+ * instead of narrowing them. `ADMIN_PRODUCT_LISTING_TYPE_TABS` is a separate
+ * constant and correctly stays all-nine.
  */
-export const PRODUCT_TYPE_FILTER_TABS = ALL_LISTING_TYPES.map(chipTab);
+export const PRODUCT_TYPE_FILTER_TABS = GENERIC_PRODUCT_LISTING_TYPES.map(chipTab);
 /** In-page type-filter chips on the combined `/art` (Art & Stickers) page. */
 export const ART_STICKERS_TYPE_FILTER_TABS = ART_STICKERS_LISTING_TYPES.map(chipTab);

package/dist/features/products/constants/sieve.d.ts

@@ -16,6 +16,20 @@ export declare const BASE_SORT_OPTIONS: readonly [{
     readonly value: string;
     readonly label: "Price: High to Low";
 }];
+/**
+ * Drop the price sorts when the viewer may not see prices.
+ *
+ * Ordering a list by price discloses the ranking of every hidden amount, and
+ * with paging that is most of the way to a price list — so the option is not
+ * offered to signed-out visitors, matching the hidden price-range facet.
+ *
+ * 🛑 This removes the CONTROL, not the capability. A hand-written
+ * `?sort=price:asc` still sorts, exactly as `?f=price>N` still filters — both
+ * are the documented, accepted residue of gating the render rather than
+ * withholding the field (see CLAUDE.md § "Public Data Projections"). What it
+ * buys is that no casual visitor is handed the lever.
+ */
+export declare function withoutPriceSorts(options: readonly SortOption[], canSeePrices: boolean): readonly SortOption[];
 export declare const STANDARD_SORT_OPTIONS: readonly [{
     readonly value: string;
     readonly label: "Newest First";

package/dist/features/products/constants/sieve.js

@@ -19,6 +19,45 @@ const BASE_PRICE_SORTS = [
 ];
 /** Time + price sorts, the common subset across most listing-type pickers. */
 export const BASE_SORT_OPTIONS = [...BASE_TIME_SORTS, ...BASE_PRICE_SORTS];
+/**
+ * Drop the price sorts when the viewer may not see prices.
+ *
+ * Ordering a list by price discloses the ranking of every hidden amount, and
+ * with paging that is most of the way to a price list — so the option is not
+ * offered to signed-out visitors, matching the hidden price-range facet.
+ *
+ * 🛑 This removes the CONTROL, not the capability. A hand-written
+ * `?sort=price:asc` still sorts, exactly as `?f=price>N` still filters — both
+ * are the documented, accepted residue of gating the render rather than
+ * withholding the field (see CLAUDE.md § "Public Data Projections"). What it
+ * buys is that no casual visitor is handed the lever.
+ */
+export function withoutPriceSorts(options, canSeePrices) {
+    if (canSeePrices)
+        return options;
+    // Exact match on the field, both directions. `sortBy()` encodes direction as
+    // a leading "-", so stripping it yields the bare field name — substring
+    // matching would catch an unrelated `pricePerEntry` sort by accident.
+    return options.filter((o) => !MONEY_SORT_FIELDS.includes(o.value.replace(/^-/, "")));
+}
+/**
+ * Every sort field that orders by an AMOUNT, matched as a substring of the
+ * sort value (`sortBy()` emits `field` / `-field`, so one entry covers both
+ * directions).
+ *
+ * `currentBid`, `startingBid` and `buyNowPrice` are here for the same reason
+ * `price` is: "Highest Current Bid" ranks every hidden bid on the page, which
+ * is the disclosure the gate exists to prevent. `bidCount` is deliberately
+ * ABSENT — the number of bids is not an amount, it is already displayed
+ * ungated beside every auction, and hiding it would remove a real signal for
+ * no gain.
+ */
+const MONEY_SORT_FIELDS = [
+    PRODUCT_FIELDS.PRICE,
+    PRODUCT_FIELDS.CURRENT_BID,
+    PRODUCT_FIELDS.STARTING_BID,
+    PRODUCT_FIELDS.BUY_NOW_PRICE,
+];
 // ---------------------------------------------------------------------------
 // Standard Products
 // ---------------------------------------------------------------------------

package/dist/features/products/repository/products.repository.d.ts

@@ -12,6 +12,41 @@ export declare class ProductRepository extends BaseRepository<ProductDocument> {
     private cacheInvalidateForId;
     findById(id: string): Promise<ProductDocument | null>;
     protected mapDoc<D = ProductDocument>(snap: DocumentSnapshot): D;
+    /**
+     * Resolve a product's taxonomy into the shape every READ path expects:
+     * `categorySlugs` as the FULL ancestor chain (self first, root last), and a
+     * brand recorded as both its id and its display name.
+     *
+     * 🛑 WHY THIS LIVES IN THE REPOSITORY. The seller and admin create/update
+     * paths send a SINGLE category id (`category: "category-x-starters"`) — and
+     * `productCreateSchema` (src/validation/request-schemas.ts:129) declares only
+     * that scalar, with no `.passthrough()`, so an inbound `categorySlugs` array
+     * is stripped before it ever reaches Firestore. `mapDoc` then backfills
+     * `categorySlugs = [category]` **on read only**, which is invisible to a
+     * query: the category page runs `array-contains-any` against the STORED
+     * field, so a UI-created listing was unreachable from its own leaf category
+     * and from every ancestor of it. CLAUDE.md recorded the ancestor half of this
+     * as an outstanding follow-up; the leaf half was never noticed because every
+     * product in the database came from the seed, which hand-writes the chain
+     * (measured 2026-09-14: 95/95 products carried a correct chain, so the defect
+     * is LATENT — it fires the first time anyone creates a listing through the
+     * UI, which is precisely why no page looks broken today).
+     *
+     * There are ~14 independent write paths — two seller actions, two admin
+     * actions, four in `_internal/server/features/products/actions.ts`, the
+     * duplicate route, group-children, catalogue promotion, shipment linking and
+     * the WhatsApp import. Deriving at each one is Root Cause #75's shape: the
+     * copy made before a branch was added never learns about it. `create` and
+     * `update` are the only two methods every one of them funnels through.
+     *
+     * 🛑 It reads `categories` through `this.db` rather than importing
+     * `categoriesRepository`. No repository in this codebase imports another
+     * feature's repository, and the reason is the Turbopack import-chain trap
+     * (Root Cause #6/#18) — a raw collection read has neither problem.
+     */
+    private deriveTaxonomy;
+    /** The keys whose presence means a write could change the product's taxonomy. */
+    private static readonly TAXONOMY_KEYS;
     update(id: string, data: Partial<ProductDocument>): Promise<ProductDocument>;
     create(input: ProductCreateInput): Promise<ProductDocument>;
     findByStore(storeId: string): Promise<ProductDocument[]>;

package/dist/features/products/repository/products.repository.js

@@ -10,6 +10,9 @@ import { matchesAllSearchTerms, parseSearchTxtQuery, } from "../../../utils/sear
 // wrapper. Three copies existed and two were missing the same three fields.
 import { buildProductSearchTxt } from "../../../utils/search-txt-builders";
 import { PRODUCT_COLLECTION, ProductStatusValues } from "../schemas";
+// Collection NAME only — deliberately not `categoriesRepository`. See
+// deriveTaxonomy()'s header for why this is a raw read.
+import { CATEGORIES_COLLECTION } from "../../categories/schemas/firestore";
 import { PRODUCT_FIELDS } from "../../../constants/field-names";
 /**
  * Canonical listing-kind tokens used in `listingType`. Note: the public Sieve
@@ -92,12 +95,109 @@ export class ProductRepository extends BaseRepository {
         }
         return doc;
     }
+    /**
+     * Resolve a product's taxonomy into the shape every READ path expects:
+     * `categorySlugs` as the FULL ancestor chain (self first, root last), and a
+     * brand recorded as both its id and its display name.
+     *
+     * 🛑 WHY THIS LIVES IN THE REPOSITORY. The seller and admin create/update
+     * paths send a SINGLE category id (`category: "category-x-starters"`) — and
+     * `productCreateSchema` (src/validation/request-schemas.ts:129) declares only
+     * that scalar, with no `.passthrough()`, so an inbound `categorySlugs` array
+     * is stripped before it ever reaches Firestore. `mapDoc` then backfills
+     * `categorySlugs = [category]` **on read only**, which is invisible to a
+     * query: the category page runs `array-contains-any` against the STORED
+     * field, so a UI-created listing was unreachable from its own leaf category
+     * and from every ancestor of it. CLAUDE.md recorded the ancestor half of this
+     * as an outstanding follow-up; the leaf half was never noticed because every
+     * product in the database came from the seed, which hand-writes the chain
+     * (measured 2026-09-14: 95/95 products carried a correct chain, so the defect
+     * is LATENT — it fires the first time anyone creates a listing through the
+     * UI, which is precisely why no page looks broken today).
+     *
+     * There are ~14 independent write paths — two seller actions, two admin
+     * actions, four in `_internal/server/features/products/actions.ts`, the
+     * duplicate route, group-children, catalogue promotion, shipment linking and
+     * the WhatsApp import. Deriving at each one is Root Cause #75's shape: the
+     * copy made before a branch was added never learns about it. `create` and
+     * `update` are the only two methods every one of them funnels through.
+     *
+     * 🛑 It reads `categories` through `this.db` rather than importing
+     * `categoriesRepository`. No repository in this codebase imports another
+     * feature's repository, and the reason is the Turbopack import-chain trap
+     * (Root Cause #6/#18) — a raw collection read has neither problem.
+     */
+    async deriveTaxonomy(input) {
+        const out = {};
+        const cats = this.db.collection(CATEGORIES_COLLECTION);
+        const leaf = (Array.isArray(input.categorySlugs) && input.categorySlugs[0]) ||
+            input.category ||
+            null;
+        /*
+         * The brand selector's option value is the brand ROW's id (`brand-beyblade`),
+         * but `ProductDocument.brand` is matched by DISPLAY NAME —
+         * `BrandDetailPageView` filters `sieveFilter("brand", EQ, brand.name)`, and
+         * CLAUDE.md's § "Brand matching is by DISPLAY NAME" says so explicitly. So a
+         * seller-created listing stored `brand: "brand-beyblade"` while every seeded
+         * one stored `brand: "Beyblade"`, and the brand page matched neither the new
+         * row nor counted it. Resolving the id back to its name fixes that; a value
+         * that is ALREADY a display name does not resolve as a document id and is
+         * left exactly as it was.
+         */
+        const brandRef = input.brandSlug || input.brand || null;
+        const [catSnap, brandSnap] = await Promise.all([
+            leaf ? cats.doc(leaf).get() : Promise.resolve(null),
+            brandRef ? cats.doc(brandRef).get() : Promise.resolve(null),
+        ]);
+        if (catSnap?.exists) {
+            const cat = catSnap.data();
+            // `parentIds` is ordered root-first / nearest-last (category-tree.ts:107),
+            // and the stored chain is self-first / root-last. Reversing is what makes
+            // the derived value byte-identical to what the seed hand-writes — verified
+            // against products-standard-seed-data.ts:197.
+            out.categorySlugs = [leaf, ...(cat.parentIds ?? []).slice().reverse()];
+            out.category = leaf;
+            const names = [
+                cat.name,
+                ...(cat.ancestors ?? []).map((a) => a?.name).reverse(),
+            ].filter((n) => !!n);
+            if (names.length)
+                out.categoryNames = names;
+        }
+        else if (leaf) {
+            // Never destroy a chain we cannot improve on. A leaf that is not a real
+            // category row is a data problem to report, not a reason to blank the field.
+            serverLogger.warn("Product category id does not resolve to a category", {
+                leaf,
+            });
+        }
+        if (brandSnap?.exists) {
+            const brand = brandSnap.data();
+            if (brand.categoryType === "brand") {
+                out.brandSlug = brandRef;
+                if (brand.name)
+                    out.brand = brand.name;
+            }
+        }
+        return out;
+    }
     async update(id, data) {
         this.cacheInvalidateForId(id);
         const current = await super.findById(id);
-        const merged = { ...current, ...data };
+        /*
+         * Only re-derive when the write actually names a taxonomy field. Every
+         * stock decrement, view increment and status flip would otherwise pay two
+         * extra Firestore reads, which Rule #6 budgets at ~3 round-trips for a
+         * whole request.
+         */
+        const touchesTaxonomy = ProductRepository.TAXONOMY_KEYS.some((k) => k in data);
+        const derived = touchesTaxonomy
+            ? await this.deriveTaxonomy({ ...current, ...data })
+            : {};
+        const merged = { ...current, ...data, ...derived };
         const updated = await super.update(id, {
             ...data,
+            ...derived,
             searchTxt: buildProductSearchTxt(merged),
         });
         this.cacheSet(updated);
@@ -117,12 +217,18 @@ export class ProductRepository extends BaseRepository {
             }
         });
         const barcodeId = input.barcodeId ?? await generateBarcodeId(id);
+        // Always derive on create — one extra read per listing created, and it is
+        // what makes a UI-created product reachable from its own category page at
+        // all. A seed row already carrying the correct chain derives to the same
+        // value, so this is a no-op for every existing fixture.
+        const derived = await this.deriveTaxonomy(input);
+        const withTaxonomy = { ...input, ...derived };
         const productData = {
-            ...input,
+            ...withTaxonomy,
             barcodeId,
             slug: id,
             availableQuantity: input.stockQuantity,
-            searchTxt: buildProductSearchTxt(input),
+            searchTxt: buildProductSearchTxt(withTaxonomy),
             createdAt: new Date(),
             updatedAt: new Date(),
         };
@@ -525,6 +631,13 @@ export class ProductRepository extends BaseRepository {
     }
 }
 ProductRepository.CACHE_TTL_MS = 30000;
+/** The keys whose presence means a write could change the product's taxonomy. */
+ProductRepository.TAXONOMY_KEYS = [
+    "categorySlugs",
+    "category",
+    "brand",
+    "brandSlug",
+];
 ProductRepository.SIEVE_FIELDS = {
     id: { canFilter: true, canSort: false },
     title: { canFilter: true, canSort: true },

package/dist/features/products/schemas/firestore.d.ts

@@ -429,9 +429,46 @@ export type ProductUpdateInput = Partial<Pick<ProductDocument, (typeof PRODUCT_U
 export type ProductAdminUpdateInput = Partial<Omit<ProductDocument, "id" | "createdAt">>;
 export declare const PRODUCT_CODES_SUBCOLLECTION: "codes";
 export type ProductCodeStatus = "available" | "claimed" | "revoked";
+/**
+ * What the buyer actually receives. A "digital code" listing delivers digital
+ * CONTENT — a redemption string is only the commonest shape of it.
+ *
+ * `"code"` is the default and is what every pre-existing document is, so no
+ * migration is needed and no existing listing changes behaviour.
+ */
+export type ProductCodeContentKind = "code" | "image" | "file";
 export interface ProductCodeDocument extends BaseDocument {
     productId: string;
+    /**
+     * The redemption string. Required for `contentKind: "code"`, empty for the
+     * asset kinds — a QR is not a string.
+     */
     code: string;
+    /** Defaults to `"code"` when absent. */
+    contentKind?: ProductCodeContentKind;
+    /**
+     * 🛑 A RAW FIREBASE STORAGE PATH, NEVER a `/media/{slug}` URL, and never a
+     * signed URL.
+     *
+     * Two facts make this load-bearing:
+     *   - `storage.rules` is `allow read: if true` for every object in the
+     *     bucket, and
+     *   - `GET /api/media/[...slug]` applies NO authentication at all — it is a
+     *     bare exported handler with no session read, by design, because it
+     *     exists to serve public product photos through a watermarker.
+     *
+     * So anything reachable at a `/media/` slug is world-readable, and image
+     * filenames in this codebase are content-derived and therefore guessable.
+     * Putting a paid QR there would publish it. Instead the bytes are streamed by
+     * `GET /api/orders/{orderId}/code/asset`, which re-checks that the caller
+     * owns the order — the same shape as the invoice route, the one existing
+     * precedent for a gated download here.
+     */
+    assetPath?: string;
+    /** Original upload name, used for the `Content-Disposition` filename. */
+    fileName?: string;
+    /** Verified by magic bytes at upload, replayed as the response Content-Type. */
+    contentType?: string;
     status: ProductCodeStatus;
     orderId?: string;
     claimedByUserId?: string;

package/dist/features/seller/actions/seller-actions.js

@@ -448,19 +448,10 @@ export async function listSellerOrders(userId, params) {
             hasMore: false,
         };
     }
-    const sellerProducts = await productRepository.findByStore(store.id);
-    const productIds = sellerProducts.map((p) => p.id);
-    if (productIds.length === 0) {
-        return {
-            items: [],
-            total: 0,
-            page: 1,
-            pageSize: params?.pageSize ?? 20,
-            totalPages: 0,
-            hasMore: false,
-        };
-    }
-    return orderRepository.listForSeller(productIds, {
+    // No products query: orders are scoped by `storeId`, the field a cart is
+    // split on. Fetching every product to build a `productId in [...]` clause was
+    // both an extra round trip and a hard 30-value Firestore cap.
+    return orderRepository.listForSeller(store.id, {
         filters: params?.filters,
         sorts: params?.sorts ?? "-createdAt",
         page: params?.page ?? 1,

package/dist/features/seller/components/SellerProductShell.d.ts

@@ -94,6 +94,12 @@ export interface SellerProductShellProps {
     listingType?: ProductListingMode;
     initialValues?: SellerProductDraft;
     productId?: string;
+    /**
+     * The digital-content pool manager, injected by the consumer so appkit never
+     * hard-codes an API path. Rendered in EDIT MODE only — a pool is keyed on a
+     * product id that does not exist until the listing has been created once.
+     */
+    renderDigitalContentPool?: (productId: string) => React.ReactNode;
     onSave: (draft: SellerProductDraft) => Promise<ProductActionResult>;
     onPublish: (draft: SellerProductDraft) => Promise<ProductActionResult>;
     onDiscard?: () => void;
@@ -129,4 +135,4 @@ export interface SellerProductShellProps {
      */
     previewSlot?: () => React.ReactNode;
 }
-export declare function SellerProductShell({ mode, listingType, initialValues, onSave, onPublish, onDiscard, isLoading, storeSlug, renderCategorySelector, renderBrandSelector, renderAddressSelector, renderTemplateSelector, onSaveAsTemplate, previewSlot, }: SellerProductShellProps): React.JSX.Element;
+export declare function SellerProductShell({ mode, listingType, initialValues, productId, onSave, onPublish, onDiscard, isLoading, storeSlug, renderCategorySelector, renderBrandSelector, renderAddressSelector, renderTemplateSelector, onSaveAsTemplate, previewSlot, renderDigitalContentPool, }: SellerProductShellProps): React.JSX.Element;

package/dist/features/seller/components/SellerProductShell.js

@@ -351,7 +351,13 @@ const EDIT_SECTIONS = [
     { id: "publish", label: "Publish" },
 ];
 // ── Main SellerProductShell ───────────────────────────────────────────────
-export function SellerProductShell({ mode, listingType = "standard", initialValues, onSave, onPublish, onDiscard, isLoading = false, storeSlug, renderCategorySelector, renderBrandSelector, renderAddressSelector, renderTemplateSelector, onSaveAsTemplate, previewSlot, }) {
+export function SellerProductShell({ mode, listingType = "standard", initialValues, 
+/*
+ * `productId` was declared on the props interface and NEVER DESTRUCTURED —
+ * dead from the day it was added, because nothing in the shell needed it.
+ * The digital-content pool is the first thing that does.
+ */
+productId, onSave, onPublish, onDiscard, isLoading = false, storeSlug, renderCategorySelector, renderBrandSelector, renderAddressSelector, renderTemplateSelector, onSaveAsTemplate, previewSlot, renderDigitalContentPool, }) {
     const [draft, setDraft] = useState(initialValues ?? { status: "draft", condition: "new" });
     const [formMode, setFormMode] = useState(mode === "create" && listingType === "standard" ? "quick" : "full");
     /*
@@ -583,5 +589,8 @@ export function SellerProductShell({ mode, listingType = "standard", initialValu
         ...EDIT_SECTIONS,
         ...(typeSpecificSection ? [{ id: typeSpecificSection.id, label: typeSpecificSection.label }] : []),
     ];
-    return (_jsx(FormShell, { isOpen: true, onClose: handleDiscard, title: title, breadcrumb: breadcrumb, isDirty: isDirty, isLoading: isLoading, sections: editSections, onSaveDraft: handleSave, onPublish: handlePublish, saveLabel: "Save Changes", publishLabel: "Update", previewSlot: previewSlot, footerTopSlot: _jsx(FormShellContext.Provider, { value: shellCtx, children: _jsx(FormErrorSummary, {}) }), children: _jsx(FormShellContext.Provider, { value: shellCtx, children: _jsxs(Stack, { gap: "lg", children: [_jsxs(Section, { id: "basic", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Basic Info" }), _jsx(StepBasic, { values: draft, onChange: update, renderCategorySelector: renderCategorySelector, renderBrandSelector: renderBrandSelector, renderTemplateSelector: renderTemplateSelector })] }), _jsxs(Section, { id: "media", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Media" }), _jsx(StepMedia, { values: draft, onChange: update, storeSlug: storeSlug })] }), typeSpecificSection && (_jsxs(Section, { id: typeSpecificSection.id, children: [_jsx(Heading, { level: 3, className: "mb-4", children: typeSpecificSection.sectionHeading ?? typeSpecificSection.label }), typeSpecificSection.render({ values: draft, onChange: update, errors: {} })] })), _jsxs(Section, { id: "pricing", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Pricing" }), _jsx(StepPricing, { values: draft, onChange: update, listingType: listingType })] }), _jsxs(Section, { id: "shipping", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Shipping" }), _jsx(StepShipping, { values: draft, onChange: update, renderAddressSelector: renderAddressSelector })] }), _jsxs(Section, { id: "returns", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Returns" }), _jsx(StepReturns, { values: draft, onChange: update })] }), _jsxs(Section, { id: "publish", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Publish" }), _jsx(StepPublish, { values: draft, onChange: update }), onSaveAsTemplate && (_jsxs(Div, { className: "mt-4 border-t border-[var(--appkit-color-border)]", padding: "t-md", children: [_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => onSaveAsTemplate(draft), children: "Save as Template" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-secondary-text)]", size: "xs", children: "Save these settings as a reusable template for future listings." })] }))] })] }) }) }));
+    return (_jsx(FormShell, { isOpen: true, onClose: handleDiscard, title: title, breadcrumb: breadcrumb, isDirty: isDirty, isLoading: isLoading, sections: editSections, onSaveDraft: handleSave, onPublish: handlePublish, saveLabel: "Save Changes", publishLabel: "Update", previewSlot: previewSlot, footerTopSlot: _jsx(FormShellContext.Provider, { value: shellCtx, children: _jsx(FormErrorSummary, {}) }), children: _jsx(FormShellContext.Provider, { value: shellCtx, children: _jsxs(Stack, { gap: "lg", children: [_jsxs(Section, { id: "basic", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Basic Info" }), _jsx(StepBasic, { values: draft, onChange: update, renderCategorySelector: renderCategorySelector, renderBrandSelector: renderBrandSelector, renderTemplateSelector: renderTemplateSelector })] }), _jsxs(Section, { id: "media", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Media" }), _jsx(StepMedia, { values: draft, onChange: update, storeSlug: storeSlug })] }), typeSpecificSection && (_jsxs(Section, { id: typeSpecificSection.id, children: [_jsx(Heading, { level: 3, className: "mb-4", children: typeSpecificSection.sectionHeading ?? typeSpecificSection.label }), typeSpecificSection.render({ values: draft, onChange: update, errors: {} }), mode === "edit" &&
+                                listingType === "digital-code" &&
+                                productId &&
+                                renderDigitalContentPool?.(productId)] })), _jsxs(Section, { id: "pricing", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Pricing" }), _jsx(StepPricing, { values: draft, onChange: update, listingType: listingType })] }), _jsxs(Section, { id: "shipping", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Shipping" }), _jsx(StepShipping, { values: draft, onChange: update, renderAddressSelector: renderAddressSelector })] }), _jsxs(Section, { id: "returns", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Returns" }), _jsx(StepReturns, { values: draft, onChange: update })] }), _jsxs(Section, { id: "publish", children: [_jsx(Heading, { level: 3, className: "mb-4", children: "Publish" }), _jsx(StepPublish, { values: draft, onChange: update }), onSaveAsTemplate && (_jsxs(Div, { className: "mt-4 border-t border-[var(--appkit-color-border)]", padding: "t-md", children: [_jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => onSaveAsTemplate(draft), children: "Save as Template" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-secondary-text)]", size: "xs", children: "Save these settings as a reusable template for future listings." })] }))] })] }) }) }));
 }

package/dist/features/stores/api/[storeSlug]/reviews/route.d.ts

@@ -7,9 +7,14 @@
  * export { storeReviewsGET as GET } from "@mohasinac/feat-stores";
  * ```
  *
- * Aggregates approved reviews from up to 20 published products in a store.
+ * Aggregates every approved review filed against a store, by `storeId`.
  * Returns: reviews[], averageRating, totalReviews, ratingDistribution.
  *
+ * It used to aggregate "up to 20 published products by itemsSold" and fan out a
+ * review query per product — and since no product carries `itemsSold`, that
+ * `orderBy` matched nothing and the endpoint returned zero reviews for every
+ * store. See the block comment at the query for the full account.
+ *
  * Requires `db` registered in providers.config via `registerProviders()`.
  * Collections: "stores", "products", "reviews"
  */