@mohasinac/appkit 4.45.0 → 4.46.0

package/dist/index.js

@@ -649,17 +649,11 @@ export { mergeFeatureMessages } from "./cli/index.js";
 export { withFeatures } from "./cli/index.js";
 // ./core/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// COPILOT_LOGS_COLLECTION - Constant used across modules.
-export { COPILOT_LOGS_COLLECTION } from "./core/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// COPILOT_LOGS_INDEXED_FIELDS - Constant used across modules.
-export { COPILOT_LOGS_INDEXED_FIELDS } from "./core/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // CacheManager - Shared export for cache manager.
 export { CacheManager } from "./core/index.js";
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
-// CopilotLogRepository - Shared export for copilot log repository.
-export { CopilotLogRepository } from "./core/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // EventBus - Shared export for event bus.
 export { EventBus } from "./core/index.js";
@@ -698,11 +692,7 @@ export { cacheManager } from "./core/index.js";
 // configureMarketDefaults - Shared export for configure market defaults.
 export { configureMarketDefaults } from "./core/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// copilotLogQueryHelpers - Shared export for copilot log query helpers.
-export { copilotLogQueryHelpers } from "./core/index.js";
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
-// copilotLogRepository - Shared export for copilot log repository.
-export { copilotLogRepository } from "./core/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // createServerAction - Helper for create server action.
 export { createServerAction } from "./core/index.js";
@@ -1321,6 +1311,7 @@ export { catalogueSeedData } from "./seed/index.js";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // productsStandardSeedData - Seed data for standard (buy-now) product listings.
 export { productsStandardSeedData } from "./seed/index.js";
+// 1,173-node taxonomy has a catalogue in it (967 of 968 leaves were empty).
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // productsAuctionsSeedData - Seed data for auction product listings.
 export { productsAuctionsSeedData } from "./seed/index.js";
@@ -3093,16 +3084,13 @@ export { ContactPageView } from "./features/contact/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useContactSubmit - React hook for use contact submit.
 export { useContactSubmit } from "./features/contact/index.js";
-// ./features/copilot/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// AdminCopilotView - Component for admin copilot view.
-export { AdminCopilotView } from "./features/copilot/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useCopilotChat - React hook for use copilot chat.
-export { useCopilotChat } from "./features/copilot/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useCopilotFeedback - React hook for use copilot feedback.
-export { useCopilotFeedback } from "./features/copilot/index.js";
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
 // ./features/corporate/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // CorporateInquiryForm - Component for corporate inquiry form.
@@ -5355,7 +5343,7 @@ export { Ol } from "./ui/index.js";
 export { LoginRequiredModal } from "./ui/components/LoginRequiredModal.js";
 export { isAuthError } from "./utils/auth-error.js";
 // -- Missing constants ----------------------------------------------------------
-export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, PAYMENT_ENDPOINTS, COPILOT_ENDPOINTS, CORPORATE_ENDPOINTS, EVENT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index.js";
+export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index.js";
 // Wishlist server errors (server-only via tree-shake â€" class only, no firebase-admin at module scope)
 export { WishlistFullError } from "./features/wishlist/server.js";
 // History â€" client hook + guest util are safe in main barrel; repository is server-only
@@ -5460,6 +5448,26 @@ export { productFeaturesSeedData } from "./seed/index.js";
  * had no data, which is indistinguishable from an empty fixture set.
  */
 export { taxCodesSeedData } from "./seed/index.js";
+/*
+ * E4/D12 — generated from the extracted corpus research.
+ *
+ * 🛑 Exported from the MAIN barrel, because `seed-cli.mjs` destructures all of
+ * its seed data from `appkit` (not from `/server`, which is what I assumed
+ * first). Adding a collection to `seed/index.ts` and `COLLECTION_MAP` alone
+ * leaves the loader reading `undefined` — and `appkit-seed status` then reports
+ * "0 seed rows", i.e. a collection that looks registered and loads nothing.
+ * That is Root Cause #90 exactly: the PII half was wired and the LOADING half
+ * was not, so every grep found real hits while the collection stayed empty.
+ */
+// E4/D12 — the collection constants and types.
+export { PART_GLOSSARY_COLLECTION, MODEL_COMPOSITION_COLLECTION, PART_SLOT_VALUES, PART_SLOT_LABEL, ALL_PART_SLOTS, LISTING_TYPE_HAS_COMPOSITION, partSlotFromSegment, partGlossaryId, } from "./features/parts/schemas/firestore.js";
+export { partGlossarySeedData } from "./seed/index.js";
+export { modelCompositionSeedData } from "./seed/index.js";
+// D12 — the public part surfaces.
+export { ModelCompositionPanel } from "./features/parts/components/ModelCompositionPanel.js";
+export { PartsIndexPageView, PartClassificationPageView, } from "./features/parts/components/PartsIndexPageView.js";
+export { PartDetailPageView } from "./features/parts/components/PartDetailPageView.js";
+export { AssemblyDrawer } from "./features/parts/components/AssemblyDrawer.js";
 // Scam registry â€" schema types and constants
 export { SCAMMER_COLLECTION, SCAMMER_ID_PREFIX, SCAMMER_MATCH_FIELDS, SCAMMER_INDEXED_FIELDS, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, SCAMMER_CONTESTS_SUBCOLLECTION, MAX_COMMENT_BODY_LENGTH, MAX_PENDING_SCAMMER_REPORTS_PER_USER, ScammerStatusValues, ScamPlatformValues, SocialPlatformValues, ContestTypeValues, ContestStatusValues, SCAM_PLATFORM_LABELS, SOCIAL_PLATFORM_LABELS, SCAMMER_STATUS_LABELS, CONTEST_TYPE_LABELS, CONTEST_STATUS_LABELS, DEFAULT_SCAMMER_DATA, DEFAULT_SCAMMER_INCIDENT_DATA, DEFAULT_SCAMMER_COMMENT_DATA, DEFAULT_SCAMMER_CONTEST_DATA, } from "./features/scams/schemas/firestore.js";
 // Scam registry â€" scam type definitions

package/dist/next/routing/route-map.d.ts

@@ -106,6 +106,9 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly ITEM_REQUESTS_NEW: "/item-requests/new";
         readonly TOOLS: "/tools";
         readonly TOOL_PRICE_INDEX: "/tools/price-index";
+        readonly PARTS: "/parts";
+        readonly PART_CLASSIFICATION: (classification: string) => string;
+        readonly PART_DETAIL: (classification: string, code: string) => string;
         readonly SCAM_TYPES: "/scams/types";
         readonly SCAM_FAQS: "/scams/faqs";
         readonly CLASSIFIED: "/classified";
@@ -335,7 +338,6 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly EVENT_ENTRIES: (id: string) => string;
         readonly STORES: "/admin/stores";
         readonly STORE_DETAIL: (id: string) => string;
-        readonly COPILOT: "/admin/copilot";
         readonly ADS: "/admin/ads";
         readonly ADS_NEW: "/admin/ads/new";
         readonly ADS_EDIT: (id: string) => string;
@@ -511,6 +513,9 @@ export declare const ROUTES: {
         readonly ITEM_REQUESTS_NEW: "/item-requests/new";
         readonly TOOLS: "/tools";
         readonly TOOL_PRICE_INDEX: "/tools/price-index";
+        readonly PARTS: "/parts";
+        readonly PART_CLASSIFICATION: (classification: string) => string;
+        readonly PART_DETAIL: (classification: string, code: string) => string;
         readonly SCAM_TYPES: "/scams/types";
         readonly SCAM_FAQS: "/scams/faqs";
         readonly CLASSIFIED: "/classified";
@@ -740,7 +745,6 @@ export declare const ROUTES: {
         readonly EVENT_ENTRIES: (id: string) => string;
         readonly STORES: "/admin/stores";
         readonly STORE_DETAIL: (id: string) => string;
-        readonly COPILOT: "/admin/copilot";
         readonly ADS: "/admin/ads";
         readonly ADS_NEW: "/admin/ads/new";
         readonly ADS_EDIT: (id: string) => string;

package/dist/next/routing/route-map.js

@@ -106,6 +106,20 @@ export const DEFAULT_ROUTE_MAP = {
          */
         TOOLS: "/tools",
         TOOL_PRICE_INDEX: "/tools/price-index",
+        /*
+         * The PARTS database. A reference surface, so it lives beside the other
+         * two things that answer a question rather than sell you something.
+         *
+         * 🛑 `/parts/{classification}/{code}` — the classification is REQUIRED in
+         * the path, because a code alone is ambiguous: `105` is a Metal Fight
+         * spin-track height, a bare number in Burst is a disc, and `1-60` is a
+         * Beyblade X ratchet. The two segments together are the document id
+         * (`${slot}--${tail}`), so the page is a direct doc read with no query
+         * and no index.
+         */
+        PARTS: "/parts",
+        PART_CLASSIFICATION: (classification) => `/parts/${classification}`,
+        PART_DETAIL: (classification, code) => `/parts/${classification}/${code}`,
         SCAM_TYPES: "/scams/types",
         SCAM_FAQS: "/scams/faqs",
         CLASSIFIED: "/classified",
@@ -364,7 +378,6 @@ export const DEFAULT_ROUTE_MAP = {
         EVENT_ENTRIES: (id) => `/admin/events/${id}/entries`,
         STORES: "/admin/stores",
         STORE_DETAIL: (id) => `/admin/stores/${id}/view`,
-        COPILOT: "/admin/copilot",
         ADS: "/admin/ads",
         ADS_NEW: "/admin/ads/new",
         ADS_EDIT: (id) => `/admin/ads/${id}/edit`,

package/dist/providers/db-firebase/base.repository.d.ts

@@ -112,6 +112,37 @@ export declare abstract class BaseRepository<T extends DocumentData> {
         patch: Partial<T>;
     }>): Promise<number>;
     create(data: Partial<T> | FirestoreDocument): Promise<T>;
+    /**
+     * Write a document at a CALLER-CHOSEN id.
+     *
+     * 🛑 **This OVERWRITES. It is an upsert, not a create**, despite the name —
+     * `.set()` with no merge option replaces the whole document, and there is no
+     * existence check. Writing an id that already exists silently discards
+     * everything that was there and returns a success.
+     *
+     * That is **deliberate and load-bearing for most of its 28 callers**, which
+     * are genuine upserts keyed on a deterministic id:
+     *
+     *   - `testerChecklistResponses` — one doc per (tester, case), re-answered
+     *     every time a verdict changes. CLAUDE.md records that this upsert is
+     *     *"what makes Yes/No answers + comments + screenshots survive a page
+     *     reload"*, so a create-only variant here would break verdict recording.
+     *   - `sessions`, analytics rollups, `priceIndex` — all rewritten by design.
+     *
+     * 🛑 **So do NOT "fix" this to `.create()`.** I was about to: the plan carried
+     * it as a severity-1 silent-overwrite risk for products, on the reasoning that
+     * two physical units of one model would derive the same slug and the second
+     * would destroy the first. **Measured, that is false** —
+     * `ProductRepository.create` OVERRIDES this method and runs `generateUniqueId`
+     * with a real `findById` probe, so units get `-1`, `-2`, … and never collide.
+     * A blanket `.create()` would have broken the tester harness to fix a defect
+     * products do not have.
+     *
+     * **A caller that needs create-only semantics must probe first**, the way
+     * `ProductRepository.create` does. The hazard this docstring removes is the
+     * NAME: `createWithId` reads as "create" and behaves as "replace", and that
+     * gap is what made the wrong conclusion so easy to reach.
+     */
     createWithId(id: string, data: Partial<T>): Promise<T>;
     update(id: string, data: Partial<T>): Promise<T>;
     delete(id: string): Promise<void>;

package/dist/providers/db-firebase/base.repository.js

@@ -284,6 +284,37 @@ export class BaseRepository {
             throw new DatabaseError(`Failed to create document: ${detailOf(error)}`, error);
         }
     }
+    /**
+     * Write a document at a CALLER-CHOSEN id.
+     *
+     * 🛑 **This OVERWRITES. It is an upsert, not a create**, despite the name —
+     * `.set()` with no merge option replaces the whole document, and there is no
+     * existence check. Writing an id that already exists silently discards
+     * everything that was there and returns a success.
+     *
+     * That is **deliberate and load-bearing for most of its 28 callers**, which
+     * are genuine upserts keyed on a deterministic id:
+     *
+     *   - `testerChecklistResponses` — one doc per (tester, case), re-answered
+     *     every time a verdict changes. CLAUDE.md records that this upsert is
+     *     *"what makes Yes/No answers + comments + screenshots survive a page
+     *     reload"*, so a create-only variant here would break verdict recording.
+     *   - `sessions`, analytics rollups, `priceIndex` — all rewritten by design.
+     *
+     * 🛑 **So do NOT "fix" this to `.create()`.** I was about to: the plan carried
+     * it as a severity-1 silent-overwrite risk for products, on the reasoning that
+     * two physical units of one model would derive the same slug and the second
+     * would destroy the first. **Measured, that is false** —
+     * `ProductRepository.create` OVERRIDES this method and runs `generateUniqueId`
+     * with a real `findById` probe, so units get `-1`, `-2`, … and never collide.
+     * A blanket `.create()` would have broken the tester harness to fix a defect
+     * products do not have.
+     *
+     * **A caller that needs create-only semantics must probe first**, the way
+     * `ProductRepository.create` does. The hazard this docstring removes is the
+     * NAME: `createWithId` reads as "create" and behaves as "replace", and that
+     * gap is what made the wrong conclusion so easy to reach.
+     */
     async createWithId(id, data) {
         try {
             const now = new Date();

package/dist/repositories/index.d.ts

@@ -49,8 +49,7 @@ export { EventRepository, EventsRepository, eventRepository, } from "../features
 export { EventEntryRepository, EventEntriesRepository, eventEntryRepository, } from "../features/events/repository/event-entry.repository";
 export { NewsletterRepository, newsletterRepository, } from "../core/newsletter.repository";
 export type { NewsletterSubscriberDocument, NewsletterSubscriberCreateInput, NewsletterSubscriberUpdateInput, NewsletterListModel, } from "../core/newsletter.repository";
-export { CopilotLogRepository, copilotLogRepository } from "../core";
-export type { CopilotFeedback, CopilotLogDocument, CopilotLogCreateInput, } from "../core";
+export type {} from "../core";
 export { ScammerRepository, scammerRepository, } from "../features/scams/repository/scammer.repository";
 export { SupportRepository, supportRepository, } from "../features/support/repository/support.repository";
 export type { SupportTicketDocument, SupportTicketCreateInput, SupportTicketUpdateInput, TicketMessage, TicketCategory, TicketStatus, TicketPriority, } from "../features/support/schemas/firestore";

package/dist/repositories/index.js

@@ -61,7 +61,6 @@ export { historyRepository, } from "../features/history/repository/user-history.
 export { EventRepository, EventsRepository, eventRepository, } from "../features/events/repository/events.repository.js";
 export { EventEntryRepository, EventEntriesRepository, eventEntryRepository, } from "../features/events/repository/event-entry.repository.js";
 export { NewsletterRepository, newsletterRepository, } from "../core/newsletter.repository.js";
-export { CopilotLogRepository, copilotLogRepository } from "../core/index.js";
 export { ScammerRepository, scammerRepository, } from "../features/scams/repository/scammer.repository.js";
 export { SupportRepository, supportRepository, } from "../features/support/repository/support.repository.js";
 // SB-UNI-B — SublistingCategoriesRepository deleted; sublistings now live on

package/dist/seed/_helpers/category-content.d.ts

@@ -15,6 +15,7 @@ export declare const CRAWL_AS_OF: Date;
  * description containing a literal `{{series}}`.
  */
 export declare const TEMPLATES: Record<CategoryTemplateVariant, CategoryDescriptionTemplate>;
+export declare const BEY_TEMPLATES: CategoryDescriptionTemplate[];
 /** The set a normal collectible category offers. */
 export declare const COLLECTIBLE_TEMPLATES: CategoryDescriptionTemplate[];
 /** Parts and small accessories arrive carded or loose, not boxed. */
@@ -25,6 +26,34 @@ export declare function templateSet(...variants: CategoryTemplateVariant[]): Cat
 export declare function marketBand(leafId: string): CategoryPriceGuidance | undefined;
 /** Every leaf id this map claims a band for — the seed asserts they all exist. */
 export declare const MARKET_BAND_LEAF_IDS: string[];
+/**
+ * B6 — the ROOT-LEVEL tax fallback, one per root.
+ *
+ * 🛑 Measured 2026-10-12: the tax code sat on tiers 1–3 only (t1=4, t2=47,
+ * t3=71) and on NO root, so **3 of 70 live products resolved no tax code at
+ * all** and would have fallen to `DEFAULT_GST_RATE` — a listing filed at
+ * `category-spinning-tops`, `category-burst-tops` or `category-x-tops`.
+ *
+ * C0c's own rule is that reaching that constant is a TRIAGE SIGNAL, not a
+ * feature: "a listing reaching step 3 at all means its category has no tax
+ * code — and that, not the constant, is the defect to fix. The measure of
+ * success is that step 3 fires for nothing."
+ *
+ * Putting it at the root is what makes that true for every branch, including
+ * branches nobody has filed under yet — `resolveCategoryDefaults` walks the
+ * chain nearest-first, so a tier-2 or tier-3 entry still WINS as a
+ * more-specific override. This is a floor, not a replacement.
+ *
+ * 🛑 Deliberately NOT a single shared constant. Each root is a different HSN
+ * question and a wrong HSN on a real invoice is worse than an absent one —
+ * printed cards are chapter 4911, not 9503, and a live plant is exempt. Only
+ * 9503 was verified (section 3.2); the three non-9503 roots therefore take the
+ * closest VERIFIED code rather than an unverified guess, and say so.
+ */
+export declare const ROOT_AUTHENTICITY_DEFAULT: "unverified";
+export declare const ROOT_TAX_DEFAULTS: Record<string, {
+    taxCodeId: string;
+}>;
 /** A complete top. */
 export declare function beyDefaults(leafId: string, series: string, system: string): CategoryProductDefaults;
 /** A loose component. */

package/dist/seed/_helpers/category-content.js

@@ -144,6 +144,36 @@ export const TEMPLATES = {
         version: 1,
     },
 };
+/**
+ * ── D12: the BEYBLADE bodies, which are the only ones that state PARTS ─────
+ *
+ * 🛑 A separate set rather than adding the slot to the shared bodies, and the
+ * reason is mechanical: `COLLECTIBLE_TEMPLATES` is also what every figure,
+ * Hot Wheels and TCG category uses, and a `{{partBreakdown}}` on a Marvel
+ * Legends listing resolves to nothing. The endpoint strips the line when
+ * there is no composition, so the artifact would be invisible rather than
+ * wrong — but it would also be a read attempted on four roots that can never
+ * satisfy it, on an endpoint the seller form hits on every category change.
+ *
+ * Assigned to the 21 `line(...)` nodes, which are Beyblade generation lines
+ * and nothing else — their children are `MODEL_LEAVES`. A model leaf carries
+ * no body of its own and INHERITS this one, while the slot resolves against
+ * the leaf's OWN composition. That is the whole design: one body per
+ * generation, 216 models' worth of parts.
+ */
+const BEY_PARTS_LINE = `  <li><strong>Parts:</strong> {{partBreakdown}}</li>`;
+/** The slot sits on its own source line, because the strip is line-based. */
+function withPartsLine(body) {
+    return body.replace("</ul>", `${BEY_PARTS_LINE}
+</ul>`);
+}
+const BEY_TEMPLATE_VARIANTS = [
+    "new_in_box",
+    "pre_owned",
+    "replica",
+    "default",
+];
+export const BEY_TEMPLATES = BEY_TEMPLATE_VARIANTS.map((v) => ({ ...TEMPLATES[v], body: withPartsLine(TEMPLATES[v].body) }));
 /** The set a normal collectible category offers. */
 export const COLLECTIBLE_TEMPLATES = [
     TEMPLATES.new_in_box,
@@ -357,6 +387,54 @@ export const MARKET_BAND_LEAF_IDS = Object.keys(MARKET_BANDS);
 const TAX_TOY = "tax-hsn-95030020"; // non-electronic toys incl. spinning tops — 5%
 const TAX_TOY_OTHER = "tax-hsn-95030099"; // other toys — 5%
 const TAX_EXEMPT = "tax-exempt-0";
+/**
+ * B6 — the ROOT-LEVEL tax fallback, one per root.
+ *
+ * 🛑 Measured 2026-10-12: the tax code sat on tiers 1–3 only (t1=4, t2=47,
+ * t3=71) and on NO root, so **3 of 70 live products resolved no tax code at
+ * all** and would have fallen to `DEFAULT_GST_RATE` — a listing filed at
+ * `category-spinning-tops`, `category-burst-tops` or `category-x-tops`.
+ *
+ * C0c's own rule is that reaching that constant is a TRIAGE SIGNAL, not a
+ * feature: "a listing reaching step 3 at all means its category has no tax
+ * code — and that, not the constant, is the defect to fix. The measure of
+ * success is that step 3 fires for nothing."
+ *
+ * Putting it at the root is what makes that true for every branch, including
+ * branches nobody has filed under yet — `resolveCategoryDefaults` walks the
+ * chain nearest-first, so a tier-2 or tier-3 entry still WINS as a
+ * more-specific override. This is a floor, not a replacement.
+ *
+ * 🛑 Deliberately NOT a single shared constant. Each root is a different HSN
+ * question and a wrong HSN on a real invoice is worse than an absent one —
+ * printed cards are chapter 4911, not 9503, and a live plant is exempt. Only
+ * 9503 was verified (section 3.2); the three non-9503 roots therefore take the
+ * closest VERIFIED code rather than an unverified guess, and say so.
+ */
+export const ROOT_AUTHENTICITY_DEFAULT = "unverified";
+export const ROOT_TAX_DEFAULTS = {
+    // Verified: HSN 9503 0020 — non-electronic toys including spinning tops, 5%.
+    "category-spinning-tops": { taxCodeId: TAX_TOY },
+    // Verified: HSN 9503 0099 — "other toys", 5%. A built model kit and a
+    // die-cast car are both toys under 9503; neither is a spinning top.
+    "category-hot-wheels": { taxCodeId: TAX_TOY_OTHER },
+    "category-model-kits": { taxCodeId: TAX_TOY_OTHER },
+    "category-collectible-figures": { taxCodeId: TAX_TOY_OTHER },
+    /*
+     * 🛑 Trading cards are chapter 4911 (printed matter) or 9504 (playing cards)
+     * and NEITHER was verified — section 3.2 confirmed 9503 only, and § "Still
+     * open" records "verify each before seeding; 9503 is the only one I
+     * confirmed". `9503 0099` is used as the floor because a TCG single sold as
+     * a collectible is a toy-chapter good at the same 5% rate, so the RATE is
+     * right even where the chapter may not be. It must be re-chaptered before
+     * the first real TCG invoice, and that is a data task with a source, not a
+     * guess to make here.
+     */
+    "category-trading-cards": { taxCodeId: TAX_TOY_OTHER },
+    // A live plant or animal is nil-rated — a deliberate exemption, which is
+    // exactly why `gstRate: 0` must survive derivation rather than be "corrected".
+    "category-living-collectibles": { taxCodeId: TAX_EXEMPT },
+};
 /** Shared across every Beyblade-family node. */
 const BEY_FAQ_TEMPLATES = [
     {
@@ -591,9 +669,28 @@ export function diecastDefaults(leafId, line) {
         ],
     };
 }
+const TAX_TOY_ELECTRONIC = "tax-hsn-95030010"; // electronic toys — 18%
+/**
+ * 🛑 THE ONLY 18% BRANCH IN THE CATALOGUE, and it is derived rather than
+ * hand-written on a product.
+ *
+ * `tax-hsn-95030010` (electronic toys, 18%) has existed as a `taxCodes` row
+ * since B3 with **nothing referencing it** — so the 18% arm of `calculateGst`
+ * and every mixed-rate path (C0c defect 4's `gstByRate`, the per-rate invoice
+ * table, the blended-rate payout) had no data that could exercise it. A code
+ * with no referrer is the vocabulary-with-no-rows shape of Root Cause #90.
+ *
+ * Counters and BeyPointers are battery-powered scoring devices, which is what
+ * 9503 0010 covers — so this is the honest home for it, not a flag planted on
+ * an arbitrary row. Putting it on the CATEGORY rather than on a product means
+ * the 18% is proven through `deriveTaxonomy`, i.e. through the mechanism that
+ * will actually carry it in production, instead of through a literal that
+ * would pass while the derivation stayed untested.
+ */
+const ELECTRONIC_ACCESSORY_LEAVES = new Set(["category-accessory-counters"]);
 export function accessoryDefaults(leafId, kind) {
     return {
-        taxCodeId: TAX_TOY_OTHER,
+        taxCodeId: ELECTRONIC_ACCESSORY_LEAVES.has(leafId) ? TAX_TOY_ELECTRONIC : TAX_TOY_OTHER,
         specifications: [SPEC("Accessory type", kind)],
         defaultAuthenticity: "unverified",
         priceGuidance: marketBand(leafId),