@mohasinac/appkit 4.43.0 → 4.44.0

package/dist/seed/test-data-ttl.js

@@ -0,0 +1,31 @@
+/**
+ * The TTL stamp every disposable test fixture must carry.
+ *
+ * 🛑 `isTestData: true` WITHOUT `testDataExpiresAt` means PERMANENT — nothing
+ * ever reclaims it (see `jobs/handlers/_helpers.ts`, which documents the same
+ * rule from the sweep's side). That is not a theoretical hazard: until
+ * 2026-10-10 the only two `isTestData` rows in the whole seed,
+ * `product-tester-crossstore-a` / `-b`, were in exactly that state — live in
+ * the public catalogue of 72 products, never purged, and one of them was
+ * `store-letitrip-official`'s ONLY buyable standard product, so it was hidden
+ * from every real buyer by `hidePublicTestData` while being the only thing
+ * that store had to sell. Both are deleted.
+ *
+ * And the reason they were permanent is that **this module had zero callers**.
+ * The helper that enforces the rule existed, was documented as the rule that
+ * matters most, and no fixture used it. So: a fixture's three obligations are
+ * an id containing `-test-`, `isTestData: true`, and an expiry FROM HERE.
+ *
+ * Recomputed fresh on every seed run (seed files are re-imported per
+ * invocation), so re-seeding naturally refreshes the expiry rather than
+ * leaving a fixture that expired between runs.
+ *
+ * 🛑 Do NOT re-declare the day count elsewhere. It used to be declared twice —
+ * here and in `jobs/handlers/messages.ts` — with a comment as the only thing
+ * keeping them equal, which is the drift shape Root Cause #42 describes.
+ * `messages.ts` now re-exports this one.
+ */
+export const TEST_DATA_TTL_DAYS = 7;
+export function testDataExpiresAt() {
+    return new Date(Date.now() + TEST_DATA_TTL_DAYS * 24 * 60 * 60 * 1000);
+}

package/dist/server-entry.d.ts

@@ -67,7 +67,7 @@ export { getSearchResults, searchAction, type SearchQuery, } from "./_internal/s
 export { getCategoryForDetail, listRootCategories, listFeaturedCategories, listMenuCategories, getCategoryTree, listSitemapCategories, CATEGORIES_PAGE_SIZE, CATEGORIES_ROOT_TIER, CATEGORIES_MAX_DEPTH, CATEGORIES_SITEMAP_LIMIT, CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, } from "./_internal/server/features/categories/index";
 export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, buildGroupedListingMetadata, renderGroupedListingOg, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, type GroupedListingMetadataOptions, } from "./_internal/server/features/grouped/index";
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlacePhonePeOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CreateCheckoutOrderInput, type VerifyAndPlacePhonePeOrderInput, type CheckoutOrderResult, type CheckoutPaymentMethod, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./_internal/server/features/checkout/index";
-export { unitPriceFor, lineTotalFor, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math";
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";
 export { getSublistingCategoryForDetail } from "./_internal/server/features/sublisting-categories/index";
 export { getStoreForDetail, listStoreProductsInitial, listStoreAuctionsInitial, listStorePreOrdersInitial, listSitemapStores, STORES_PAGE_SIZE, STORES_PRODUCTS_PAGE_SIZE, STORES_SITEMAP_LIMIT, STORES_FEATURED_LIMIT, } from "./_internal/server/features/stores/index";

package/dist/server-entry.js

@@ -101,7 +101,12 @@ export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlacePhonePeOr
 // consumer's Razorpay create-order route needs it: that route used to hand-roll
 // the rule and reproduced only the bundle branch, so it captured the LIST price
 // for an accepted offer. Pure math — no Firestore, no server-only imports.
-export { unitPriceFor, lineTotalFor, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math";
+// `sumGroupGst` joins them for exactly the same reason, one defect later: that
+// same create-order route decides what the gateway CAPTURES and omitted product
+// GST entirely, so the buyer was shown the tax, charged without it, and the
+// order recorded none — with the verify-side mismatch guard omitting it too, so
+// the three were consistently wrong and the undercharge was undetectable.
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math";
 // S-SBUNI-RULES: refund action
 export { processRefundAction, } from "./_internal/server/features/refunds/actions";
 // S3: sublisting categories data layer

package/dist/server.d.ts

@@ -231,6 +231,7 @@ export { POST } from "./features/categories/server";
 export { categoriesGET } from "./features/categories/server";
 export { categoryItemDELETE } from "./features/categories/server";
 export { categoryItemGET } from "./features/categories/server";
+export { categoryDescriptionTemplateGET } from "./features/categories/server";
 export { categoryItemPATCH } from "./features/categories/server";
 export { createCategory } from "./features/categories/server";
 export { deleteCategory } from "./features/categories/server";
@@ -267,7 +268,6 @@ export { getEventPollResults } from "./features/events/server";
 export type { PollResultEntry, SpinResultEntry } from "./features/events/index";
 export { getEventSpinResults } from "./features/events/server";
 export { getUserSpinResultsForEvent } from "./features/events/server";
-export { getBugHunterLeaderboard } from "./features/tester/server";
 export { getPublicEventById } from "./features/events/server";
 export { listPublicEvents } from "./features/events/server";
 export { getRelatedEvents } from "./features/events/server";
@@ -427,6 +427,7 @@ export { removeFromWishlist } from "./features/wishlist/server";
 export { siteSettingsRepository } from "./repositories/index";
 export { storeRepository } from "./repositories/index";
 export { orderRepository } from "./repositories/index";
+export { taxCodesRepository } from "./repositories/index";
 export type { OrderDocument } from "./features/orders/index";
 export type { OrderDocumentItem } from "./features/orders/index";
 export { serverLogger } from "./monitoring/index";

package/dist/server.js

@@ -665,6 +665,8 @@ export { categoryItemDELETE } from "./features/categories/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // categoryItemGET - Shared export for category item get.
 export { categoryItemGET } from "./features/categories/server";
+// categoryDescriptionTemplateGET - the seller form's inherited-template read.
+export { categoryDescriptionTemplateGET } from "./features/categories/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // categoryItemPATCH - Shared export for category item patch.
 export { categoryItemPATCH } from "./features/categories/server";
@@ -780,8 +782,6 @@ export { getEventSpinResults } from "./features/events/server";
 // getUserSpinResultsForEvent - The CALLER'S OWN spins for an event, unmasked. Companion to the masked public feed above.
 export { getUserSpinResultsForEvent } from "./features/events/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// getBugHunterLeaderboard - Ranks testers by confirmed-bug count.
-export { getBugHunterLeaderboard } from "./features/tester/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // getPublicEventById - Helper for get public event by id.
 export { getPublicEventById } from "./features/events/server";
@@ -1248,6 +1248,9 @@ export { siteSettingsRepository } from "./repositories/index";
 export { storeRepository } from "./repositories/index";
 // orderRepository - Shared export for order repository (needed by consumer Firebase Functions, e.g. invoice PDF generation).
 export { orderRepository } from "./repositories/index";
+// taxCodesRepository (B3) — resolved by deriveTaxonomy on every product write
+// that names a taxonomy field, so it is a server-only read on a hot path.
+export { taxCodesRepository } from "./repositories/index";
 // SB-UNI-V — bundlesRepository deleted; use categoriesRepository with categoryType:"bundle".
 // -- Monitoring --------------------------------------------------------------
 // serverLogger - Structured server-side logger.

package/dist/styles.css

@@ -7369,6 +7369,46 @@
   background-color: var(--appkit-color-slate-800);
 }
 
+/* ── edit the selected option (C2c) ──
+   Absolutely positioned inside `.appkit-ps` (which is `position: relative`)
+   rather than being a flex sibling of the trigger: the trigger is a
+   full-width button and the pencil has to sit ON it visually while remaining
+   OUTSIDE it in the DOM. A button nested inside a button is invalid HTML and
+   the browser's recovery hoists it out, after which which element receives
+   the click is an engine decision — so the pencil would open the dropdown on
+   some browsers and the editor on others.
+
+   `right` clears the ▾ caret. The hover fill uses the theme-inverting
+   surface-hover token, never a named palette tint: `hover:bg-zinc-50` and
+   friends are the SAME near-white in every theme, which is white-on-white
+   under dark ink (Root Cause #79). */
+.appkit-ps__edit-btn {
+  position: absolute;
+  top: 50%;
+  right: 2rem;
+  transform: translateY(-50%);
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 1.75rem;
+  height: 1.75rem;
+  border-radius: var(--appkit-radius-md, 0.375rem);
+  font-size: 0.875rem;
+  line-height: 1;
+  color: var(--appkit-color-text-muted);
+  transition: background-color 0.1s, color 0.1s;
+}
+
+.appkit-ps__edit-btn:hover {
+  background-color: var(--appkit-color-surface-hover);
+  color: var(--appkit-color-primary);
+}
+
+.appkit-ps__edit-btn:focus-visible {
+  outline: 2px solid var(--appkit-color-focus-ring);
+  outline-offset: 1px;
+}
+
 /* SideDrawer — accessible slide-in panel with focus trap + unsaved-changes */
 
 .appkit-side-drawer__backdrop {

package/dist/ui/components/PaginatedSelect.d.ts

@@ -32,6 +32,20 @@ interface BaseProps<V> {
     createSchema?: import("zod").ZodType<FormValues> | import("zod").ZodType<unknown>;
     onCreateSubmit?: (values: FormValues) => Promise<PaginatedSelectOption<V>>;
     createSubmitLabel?: string;
+    editLabel?: string;
+    editDrawerTitle?: string;
+    renderEditForm?: (props: {
+        value: V;
+        option: PaginatedSelectOption<V> | null;
+        onEdited: (option: PaginatedSelectOption<V>) => void;
+        onCancel: () => void;
+    }) => ReactNode;
+    editFields?: QuickFieldDef[];
+    editSchema?: import("zod").ZodType<FormValues> | import("zod").ZodType<unknown>;
+    /** Seed the quick form from the row being edited. */
+    onEditLoad?: (value: V) => Promise<FormValues>;
+    onEditSubmit?: (value: V, values: FormValues) => Promise<PaginatedSelectOption<V>>;
+    editSubmitLabel?: string;
 }
 interface SingleProps<V> extends BaseProps<V> {
     multiple?: false;

package/dist/ui/components/PaginatedSelect.style.css

@@ -260,3 +260,43 @@
 :is(.dark) .appkit-ps__create-btn:hover {
   background-color: var(--appkit-color-slate-800);
 }
+
+/* ── edit the selected option (C2c) ──
+   Absolutely positioned inside `.appkit-ps` (which is `position: relative`)
+   rather than being a flex sibling of the trigger: the trigger is a
+   full-width button and the pencil has to sit ON it visually while remaining
+   OUTSIDE it in the DOM. A button nested inside a button is invalid HTML and
+   the browser's recovery hoists it out, after which which element receives
+   the click is an engine decision — so the pencil would open the dropdown on
+   some browsers and the editor on others.
+
+   `right` clears the ▾ caret. The hover fill uses the theme-inverting
+   surface-hover token, never a named palette tint: `hover:bg-zinc-50` and
+   friends are the SAME near-white in every theme, which is white-on-white
+   under dark ink (Root Cause #79). */
+.appkit-ps__edit-btn {
+  position: absolute;
+  top: 50%;
+  right: 2rem;
+  transform: translateY(-50%);
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 1.75rem;
+  height: 1.75rem;
+  border-radius: var(--appkit-radius-md, 0.375rem);
+  font-size: 0.875rem;
+  line-height: 1;
+  color: var(--appkit-color-text-muted);
+  transition: background-color 0.1s, color 0.1s;
+}
+
+.appkit-ps__edit-btn:hover {
+  background-color: var(--appkit-color-surface-hover);
+  color: var(--appkit-color-primary);
+}
+
+.appkit-ps__edit-btn:focus-visible {
+  outline: 2px solid var(--appkit-color-focus-ring);
+  outline-offset: 1px;
+}

package/dist/utils/physical-location.d.ts

@@ -0,0 +1,23 @@
+/** The parts a location can have. All optional — see the blank-parts note. */
+export interface PhysicalLocationParts {
+    zone?: string | null;
+    shelf?: string | null;
+    bin?: string | null;
+}
+/**
+ * Render a location as `zone/shelf/bin`, or `undefined` when there is nothing
+ * to show.
+ *
+ * 🛑 Returns `undefined` rather than `"//"` for an all-blank location, and
+ * that case is REACHABLE, not defensive: `PhysicalLocationModal` tells the
+ * user "All fields are optional" while both bulk-location routes only check
+ * `typeof === "string"`, so `{zone:"",shelf:"",bin:""}` saves successfully.
+ * Every caller already branches on falsy before rendering, so returning
+ * `undefined` makes those rows fall through to their em-dash instead of
+ * printing punctuation with no content.
+ *
+ * Partial locations keep their separators (`A//3`) on purpose — the gap is
+ * information, and collapsing it would make "zone A, bin 3" indistinguishable
+ * from "zone A, shelf 3".
+ */
+export declare function formatPhysicalLocation(loc: PhysicalLocationParts | null | undefined): string | undefined;

package/dist/utils/physical-location.js

@@ -0,0 +1,52 @@
+/*
+ * WHY: `physicalLocation` is a `{zone, shelf, bin}` OBJECT on both
+ *      `ProductDocument` and `OrderDocument`, and three surfaces render it.
+ *      Two had hand-written the same `a/b/c` interpolation
+ *      (`SellerProductsView`, `SellerOrdersView`) and the third —
+ *      `PrintCenterView` — declared the field as a `string` and rendered the
+ *      object as a bare React child.
+ *
+ * 🛑 THAT THIRD ONE IS A CRASH. Rendering an object as a React child throws
+ *    "Objects are not valid as a React child", so the Print Centre would die
+ *    the first time any seller used the Set Location bulk action. It is
+ *    LATENT, not live: measured on production, 0 of 72 products and 0 of 67
+ *    orders carry the field, so nobody has used that feature yet. It was
+ *    invisible because BOTH mappers in `PrintCenterPanel` are typed `(p: any)`
+ *    and the products array is passed `as any` — so neither the wrong
+ *    declaration nor the wrong value had anything to trip over.
+ *
+ * WHAT: one formatter. Pure, no imports, structural parameter so a caller can
+ *       pass a `ProductDocument`'s field, an `OrderDocument`'s, or the
+ *       `PhysicalLocation` client type without a cast.
+ *
+ * @tag domain:inventory
+ * @tag layer:util
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+/**
+ * Render a location as `zone/shelf/bin`, or `undefined` when there is nothing
+ * to show.
+ *
+ * 🛑 Returns `undefined` rather than `"//"` for an all-blank location, and
+ * that case is REACHABLE, not defensive: `PhysicalLocationModal` tells the
+ * user "All fields are optional" while both bulk-location routes only check
+ * `typeof === "string"`, so `{zone:"",shelf:"",bin:""}` saves successfully.
+ * Every caller already branches on falsy before rendering, so returning
+ * `undefined` makes those rows fall through to their em-dash instead of
+ * printing punctuation with no content.
+ *
+ * Partial locations keep their separators (`A//3`) on purpose — the gap is
+ * information, and collapsing it would make "zone A, bin 3" indistinguishable
+ * from "zone A, shelf 3".
+ */
+export function formatPhysicalLocation(loc) {
+    if (!loc)
+        return undefined;
+    const zone = (loc.zone ?? "").trim();
+    const shelf = (loc.shelf ?? "").trim();
+    const bin = (loc.bin ?? "").trim();
+    if (!zone && !shelf && !bin)
+        return undefined;
+    return `${zone}/${shelf}/${bin}`;
+}

package/dist/utils/search-txt-builders.d.ts

@@ -1,4 +1,5 @@
 import type { ProductDocument } from "../features/products/schemas/firestore";
+import type { CategoryDocument } from "../features/categories/schemas/firestore";
 import type { ScammerDocument } from "../features/scams/schemas/firestore";
 import type { StoreDocument } from "../features/stores/schemas/firestore";
 import type { EventDocument } from "../features/events/schemas/firestore";
@@ -9,6 +10,25 @@ import type { CouponDocument } from "../features/promotions/schemas/firestore";
 import type { OfferDocument } from "../features/seller/schemas/firestore";
 /** products — title, description, brand, taxonomy, condition, card/grading, specs. */
 export declare function buildProductSearchTxt(p: Partial<ProductDocument>): string[];
+/**
+ * categories — name, slug, path, ancestor names, item code, editorial copy.
+ *
+ * Covers brand and bundle rows too, since they share the collection: hence
+ * `brandCountry` and `itemCode`, which only one kind ever carries.
+ *
+ * 🛑 `ancestors[].name` is in here deliberately, and it is what makes a leaf
+ * findable by its lineage — typing "burst" reaches `category-lost-longinus`
+ * because Beyblade Burst is one of its ancestors. Without it, the only way to
+ * find a tier-4 model is to already know its exact name.
+ *
+ * `description` is stripped of HTML because `contentBody`-style copy is
+ * keyword-rich markup and the tags are not search terms.
+ *
+ * NOT indexed: `createdBy` (a raw uid), `createdByStoreName` (operator
+ * identity), `position`/`subtreeSize` (internal coordinates), and the
+ * `metrics` counters (numbers nobody searches by).
+ */
+export declare function buildCategorySearchTxt(c: Partial<CategoryDocument>): string[];
 /** stores — name, description, category. No payout details, no contact. */
 export declare function buildStoreSearchTxt(s: Partial<StoreDocument>): string[];
 /** events — title, description, type, tags. */

package/dist/utils/search-txt-builders.js

@@ -46,6 +46,42 @@ export function buildProductSearchTxt(p) {
         p.specifications?.map((s) => `${s.name} ${s.value}`),
     ]);
 }
+/**
+ * categories — name, slug, path, ancestor names, item code, editorial copy.
+ *
+ * Covers brand and bundle rows too, since they share the collection: hence
+ * `brandCountry` and `itemCode`, which only one kind ever carries.
+ *
+ * 🛑 `ancestors[].name` is in here deliberately, and it is what makes a leaf
+ * findable by its lineage — typing "burst" reaches `category-lost-longinus`
+ * because Beyblade Burst is one of its ancestors. Without it, the only way to
+ * find a tier-4 model is to already know its exact name.
+ *
+ * `description` is stripped of HTML because `contentBody`-style copy is
+ * keyword-rich markup and the tags are not search terms.
+ *
+ * NOT indexed: `createdBy` (a raw uid), `createdByStoreName` (operator
+ * identity), `position`/`subtreeSize` (internal coordinates), and the
+ * `metrics` counters (numbers nobody searches by).
+ */
+export function buildCategorySearchTxt(c) {
+    return buildSearchTxt([
+        c.name,
+        c.slug,
+        stripHtml(c.description),
+        c.path,
+        c.itemCode,
+        c.brandCountry,
+        ...(c.ancestors ?? []).map((a) => a.name),
+        /*
+         * B5 — LAST on purpose. `buildSearchTxt` truncates at 600 tokens and does
+         * it silently, so whatever sits at the end of this array is what gets
+         * dropped first. A model leaf's own name and its lineage must survive
+         * ahead of "also known as" spellings.
+         */
+        ...(c.aliases ?? []),
+    ]);
+}
 /** stores — name, description, category. No payout details, no contact. */
 export function buildStoreSearchTxt(s) {
     return buildSearchTxt([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.43.0",
+  "version": "4.44.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public"

package/scripts/seed-cli.mjs

@@ -195,7 +195,7 @@ const {
   siteSettingsSeedData, faqSeedData,
   wishlistsSeedData, historySeedData,
   groupedListingsSeedData,
-  scammersSeedData, productFeaturesSeedData,
+  scammersSeedData, productFeaturesSeedData, taxCodesSeedData,
   testerChecklistSeedData, testerResponsesSeedData,
   supportTicketsSeedData, catalogueSeedData,
   shipmentsSeedData, shipmentLotsSeedData, shipmentItemsSeedData,
@@ -210,6 +210,7 @@ const {
   CART_COLLECTION,
   GROUPED_LISTINGS_COLLECTION, SCAMMER_COLLECTION,
   WISHLIST_COLLECTION, HISTORY_COLLECTION, PRODUCT_FEATURES_COLLECTION,
+  TAX_CODES_COLLECTION,
   TESTER_CHECKLIST_ITEM_COLLECTION,
   TESTER_CHECKLIST_RESPONSE_COLLECTION,
   // PII field/index constants (plain data, still in the main barrel — the
@@ -285,6 +286,7 @@ const COLLECTION_MAP = {
   groupedListings: GROUPED_LISTINGS_COLLECTION,
   scammerProfiles: SCAMMER_COLLECTION,
   productFeatures: PRODUCT_FEATURES_COLLECTION,
+  taxCodes: TAX_CODES_COLLECTION,
   testerChecklistItems: TESTER_CHECKLIST_ITEM_COLLECTION,
   /*
    * Tester submissions. DERIVED tier in the tester's own map (wiped at setup so
@@ -370,6 +372,7 @@ const SEED_DATA_MAP = {
   groupedListings: groupedListingsSeedData,
   scammerProfiles: scammersSeedData,
   productFeatures: productFeaturesSeedData,
+  taxCodes: taxCodesSeedData,
   testerChecklistItems: testerChecklistSeedData,
   testerChecklistResponses: testerResponsesSeedData,
 };

package/dist/_internal/server/jobs/handlers/testerSandboxCleanup.d.ts

@@ -1,2 +0,0 @@
-import type { ScheduleHandler } from "../runtime/types";
-export declare const testerSandboxCleanupHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/testerSandboxCleanup.js

@@ -1,2 +0,0 @@
-import { runTesterSandboxCleanup } from "../core/testerSandboxCleanup";
-export const testerSandboxCleanupHandler = (ctx) => runTesterSandboxCleanup(ctx);

package/dist/features/tester/actions/leaderboard-actions.d.ts

@@ -1,3 +0,0 @@
-import type { BugHunterLeaderboardEntry } from "../schemas/firestore";
-/** Ranks testers by confirmed-bug count. Mirrors getEventLeaderboard()'s shape. */
-export declare function getBugHunterLeaderboard(limit?: number): Promise<BugHunterLeaderboardEntry[]>;

package/dist/features/tester/actions/leaderboard-actions.js

@@ -1,5 +0,0 @@
-import { testerChecklistItemRepository } from "../repository/tester-checklist-item.repository";
-/** Ranks testers by confirmed-bug count. Mirrors getEventLeaderboard()'s shape. */
-export async function getBugHunterLeaderboard(limit = 50) {
-    return testerChecklistItemRepository.getBugHunterLeaderboard(limit);
-}

package/dist/features/tester/components/BugHunterLeaderboardView.d.ts

@@ -1,23 +0,0 @@
-import React from "react";
-import type { BugHunterLeaderboardEntry } from "../schemas/firestore";
-export interface BugHunterLeaderboardViewProps {
-    isLoading?: boolean;
-    isEmpty?: boolean;
-    /** Render the full ranked list — caller provides entries via hook */
-    renderList?: () => React.ReactNode;
-    /** Render a single row; used when caller wants item-level control */
-    renderEntry?: (entry: BugHunterLeaderboardEntry, index: number) => React.ReactNode;
-    /** Entries — used only when renderEntry is provided */
-    entries?: BugHunterLeaderboardEntry[];
-    /** Empty state node */
-    renderEmpty?: () => React.ReactNode;
-    /** Loading spinner / skeleton */
-    renderSkeleton?: () => React.ReactNode;
-    labels?: {
-        title?: string;
-        noEntries?: string;
-        bugs?: string;
-    };
-    className?: string;
-}
-export declare function BugHunterLeaderboardView({ isLoading, isEmpty, renderList, renderEntry, entries, renderEmpty, renderSkeleton, labels, className, }: BugHunterLeaderboardViewProps): React.JSX.Element;

package/dist/features/tester/components/BugHunterLeaderboardView.js

@@ -1,18 +0,0 @@
-import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import React from "react";
-import { Div, Row, Span, Stack, Text } from "../../../ui";
-export function BugHunterLeaderboardView({ isLoading = false, isEmpty = false, renderList, renderEntry, entries = [], renderEmpty, renderSkeleton, labels = {}, className = "", }) {
-    if (isLoading) {
-        if (renderSkeleton)
-            return _jsx(_Fragment, { children: renderSkeleton() });
-        return _jsx(Row, { justify: "center", padding: "y-xl", children: "Loading\u2026" });
-    }
-    if (isEmpty) {
-        if (renderEmpty)
-            return _jsx(_Fragment, { children: renderEmpty() });
-        return (_jsx(Text, { paddingY: "md", variant: "secondary", size: "sm", align: "start", children: labels.noEntries ?? "No confirmed bugs yet." }));
-    }
-    if (renderList)
-        return _jsx(Div, { className: className, children: renderList() });
-    return (_jsx(Stack, { className: `${className}`, gap: "sm", children: entries.map((entry, i) => renderEntry ? (_jsx(React.Fragment, { children: renderEntry(entry, i) }, entry.hunterId)) : (_jsxs(Div, { layout: "flex", align: "center", justify: "between", rounded: "xl", padding: "sm", className: "border", "data-section": "bughunterleaderboard-div", children: [_jsxs(Span, { weight: "medium", children: ["#", entry.rank, " ", entry.hunterName] }), _jsxs(Span, { children: [entry.bugCount, " ", labels.bugs ?? "bugs"] })] }, entry.hunterId))) }));
-}

package/dist/features/tester/components/TesterHubView.d.ts

@@ -1,5 +0,0 @@
-import React from "react";
-export interface TesterHubViewProps {
-    sandboxExpiresAt?: string | null;
-}
-export declare function TesterHubView({ sandboxExpiresAt }: TesterHubViewProps): React.JSX.Element;

package/dist/features/tester/components/TesterHubView.js

@@ -1,110 +0,0 @@
-"use client";
-import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
-import React from "react";
-import { useQuery, useQueryClient } from "@tanstack/react-query";
-import { Alert, Details, Div, FieldInput, Heading, Stack, Summary, Text, TextLink } from "../../../ui";
-import { apiClient } from "../../../http";
-import { useApiMutation } from "../../../client";
-import { useSession } from "../../../react";
-import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints";
-import { ROUTES } from "../../../next/routing/route-map";
-import { TesterChecklistStepRow } from "./TesterChecklistStepRow";
-function matchesQuery(item, query) {
-    if (!query)
-        return true;
-    const haystack = `${item.label} ${item.description ?? ""} ${item.groupLabel} ${item.pageLabel} ${item.href ?? ""}`.toLowerCase();
-    return haystack.includes(query.toLowerCase());
-}
-function TesterChecklistPageSection({ page, testerDisplayName, onAnswer, onSaveNote }) {
-    const answeredCount = page.items.filter((i) => i.answer).length;
-    return (_jsxs(Details, { tone: "card", defaultOpen: false, children: [_jsxs(Summary, { children: [page.pageLabel, " (", answeredCount, "/", page.items.length, " answered)"] }), _jsx(Div, { padding: "t-sm", children: _jsx(Stack, { gap: "sm", children: page.items
-                        .slice()
-                        .sort((a, b) => a.order - b.order)
-                        .map((item) => (_jsx(TesterChecklistStepRow, { testerDisplayName: testerDisplayName, item: {
-                            checklistItemId: item.id,
-                            label: item.label,
-                            description: item.description,
-                            href: item.href,
-                            roles: item.roles,
-                            startPage: item.startPage,
-                            steps: item.steps,
-                            inputs: item.inputs,
-                            expectedBehaviour: item.expectedBehaviour,
-                            expectedUiState: item.expectedUiState,
-                            expectedData: item.expectedData,
-                            endResult: item.endResult,
-                            answer: item.answer,
-                            comment: item.comment,
-                            screenshotUrl: item.screenshotUrl,
-                        }, onAnswer: onAnswer, onSaveNote: onSaveNote }, item.id))) }) })] }));
-}
-export function TesterHubView({ sandboxExpiresAt }) {
-    const { user } = useSession();
-    const queryClient = useQueryClient();
-    const [search, setSearch] = React.useState("");
-    const query = useQuery({
-        queryKey: ["user", "tester-checklist"],
-        queryFn: async () => {
-            const res = await apiClient.get(ACCOUNT_ENDPOINTS.TESTER_CHECKLIST);
-            return res?.data ?? res;
-        },
-        // The API route resolves isTester/canTestAdmin fresh from Firestore on
-        // every request, so retrying a 403 (a role that genuinely lacks access)
-        // wastes calls for no benefit — but a real access grant should still be
-        // visible on the very next request, not cached as a permanent failure.
-        retry: false,
-    });
-    const upsertMutation = useApiMutation({
-        mutationFn: async (vars) => apiClient.put(ACCOUNT_ENDPOINTS.TESTER_CHECKLIST_ITEM_BY_ID(vars.checklistItemId), vars.patch),
-        onSuccess: () => {
-            void queryClient.invalidateQueries({ queryKey: ["user", "tester-checklist"] });
-        },
-    });
-    // Gate on the live API response, not the client-cached session snapshot.
-    // SessionContext only refreshes role/isTester/canTestAdmin periodically
-    // (every 5 minutes) or on a hard reload/re-login — never on ordinary
-    // client-side navigation — so a flag an admin just granted would
-    // otherwise still read as "Testers only" here for up to 5 minutes even
-    // though the same request already succeeds server-side. The tester-
-    // checklist API resolves these fields fresh from Firestore on every call,
-    // so trusting its actual response is both more accurate and immediate.
-    const isForbidden = query.isError && query.error?.status === 403;
-    if (isForbidden) {
-        return (_jsx(Alert, { variant: "warning", title: "Testers only", children: "This page is only available to accounts flagged as testers (and admins). Contact an admin if you believe this is a mistake." }));
-    }
-    if (query.isLoading) {
-        return _jsx(Text, { color: "muted", children: "Loading checklist\u2026" });
-    }
-    // Items arrive pre-sorted by catalog `order` (listActive() orders by it).
-    const items = query.data?.items ?? [];
-    const filtered = items.filter((item) => matchesQuery(item, search));
-    const phases = new Map();
-    for (const item of filtered) {
-        if (!phases.has(item.phase))
-            phases.set(item.phase, new Map());
-        const groups = phases.get(item.phase);
-        if (!groups.has(item.groupKey))
-            groups.set(item.groupKey, { groupLabel: item.groupLabel, pages: new Map() });
-        const group = groups.get(item.groupKey);
-        if (!group.pages.has(item.pageKey))
-            group.pages.set(item.pageKey, { pageLabel: item.pageLabel, items: [] });
-        group.pages.get(item.pageKey).items.push(item);
-    }
-    const sortedPhaseNumbers = Array.from(phases.keys()).sort((a, b) => a - b);
-    const handleAnswer = (checklistItemId, answer) => {
-        upsertMutation.mutate({ checklistItemId, patch: { answer } });
-    };
-    const handleSaveNote = async (checklistItemId, comment, screenshotUrl) => {
-        await upsertMutation.mutateAsync({ checklistItemId, patch: { comment, screenshotUrl } });
-    };
-    return (_jsxs(Stack, { gap: "lg", children: [_jsx(Heading, { level: 1, children: "Tester Hub" }), _jsx(Text, { color: "muted", children: "Work through the checklist below and answer Yes/No for each test case. Add a comment and screenshot wherever something looks off \u2014 colors, styles, readability, bugs. Your answers save automatically." }), _jsx(TextLink, { href: String(ROUTES.PUBLIC.BUG_HUNTERS), variant: "underline", weight: "medium", children: "View Bug Hunters Leaderboard \u2192" }), sandboxExpiresAt && (_jsxs(Alert, { variant: "info", title: "Shared test sandbox", children: ["The shared test store/products/categories expire on ", new Date(sandboxExpiresAt).toLocaleDateString(), "."] })), _jsx(FieldInput, { name: "checklist-search", label: "Search test cases", value: search, onChange: setSearch, placeholder: "Search by title or route, e.g. checkout, /store/payouts..." }), sortedPhaseNumbers.map((phaseNumber) => {
-                const groups = phases.get(phaseNumber);
-                const phaseItemCount = Array.from(groups.values())
-                    .flatMap((g) => Array.from(g.pages.values()))
-                    .reduce((sum, page) => sum + page.items.length, 0);
-                const phaseAnswered = Array.from(groups.values())
-                    .flatMap((g) => Array.from(g.pages.values()))
-                    .reduce((sum, page) => sum + page.items.filter((i) => i.answer).length, 0);
-                return (_jsxs(Details, { tone: "card", defaultOpen: false, children: [_jsxs(Summary, { size: "lg", weight: "bold", children: ["Phase ", phaseNumber, " (", phaseAnswered, "/", phaseItemCount, " answered)"] }), _jsx(Div, { padding: "t-sm", children: _jsx(Stack, { gap: "md", children: Array.from(groups.entries()).map(([groupKey, group]) => (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 4, children: group.groupLabel }), Array.from(group.pages.entries()).map(([pageKey, page]) => (_jsx(TesterChecklistPageSection, { page: page, testerDisplayName: user?.displayName ?? user?.email ?? "tester", onAnswer: handleAnswer, onSaveNote: handleSaveNote }, pageKey)))] }, groupKey))) }) })] }, phaseNumber));
-            })] }));
-}

package/dist/features/tester/seed-data/authored/public-pages__bug-hunters.d.ts

@@ -1,2 +0,0 @@
-import type { AuthoredCase } from "./_types";
-export declare const authored: Record<string, AuthoredCase>;