@mohasinac/appkit 4.52.5 → 4.53.0

package/dist/features/catalogue/repository/catalogue.repository.js

@@ -1,4 +1,3 @@
-import { decryptPiiFields } from "../../../security/pii-encrypt.js";
 /**
  * Personal Catalogue Repository (Feature B).
  */
@@ -7,19 +6,38 @@ import { CATALOGUE_COLLECTION, CATALOGUE_FIELDS, CATALOGUE_TRACKED_FIELDS, CATAL
 import { withHistory } from "../../../_internal/shared/history/index.js";
 export class CatalogueRepository extends BaseRepository {
     /** Decrypt on read so callers see the shape they wrote. */
-    mapDoc(snap) {
-        const raw = super.mapDoc(snap);
-        return decryptPiiFields(raw, [...this.piiFields]);
-    }
+    /*
+     * 🛑 `mapDoc` is NOT overridden — it used to call `decryptPiiFields`, and
+     * that call had ALWAYS BEEN A NO-OP.
+     *
+     * Measured 2026-10-17: `CatalogueItemDocument` declares `ownerId` and
+     * `ownerRole` and NO owner name or email. `CatalogueItemCreateInput` is
+     * `Omit<CatalogueItemDocument, …>`, so `ownerEmail` cannot arrive through
+     * the create path either — the `piiFields` override below encrypts a field
+     * that is never present, and the decrypt undid nothing.
+     *
+     * So this repository gets NO `reveal*`/`masked*` accessors: there is no PII
+     * on the document to reveal or to mask, and adding a pair for fields that do
+     * not exist would be the same fiction one level up — a named method whose
+     * name is the only evidence it does anything (Root Cause #92).
+     *
+     * `CATALOGUE_HISTORY_PII_FIELDS` is a different and legitimate thing: it is
+     * the scrub list passed to `withHistory` below, and a history entry listing
+     * PII keys it does not currently carry is DEFENSIVE by design — § "Status
+     * History" requires every adopter to pass the list explicitly so the next
+     * field added has to be triaged rather than defaulting in silently.
+     */
     constructor() {
         super(CATALOGUE_COLLECTION);
         /**
-         * `ownerEmail` only — NOT `ownerName`.
+         * 🛑 DEAD as written: `CatalogueItemDocument` has no `ownerEmail`.
          *
-         * Per decision D1 names stay partial-match searchable, and catalogue items are
-         * searchable by owner in the admin approvals queue. `CATALOGUE_HISTORY_PII_FIELDS`
-         * lists both, but that constant scrubs status *history*, which has no search
-         * requirement — the two lists are intentionally different.
+         * Kept rather than deleted because it is the declaration that would start
+         * working the moment an owner email is added to the document, and deleting
+         * it would hand that future field plaintext storage by default. The reasoning
+         * it used to carry — "`ownerEmail` only, NOT `ownerName`, because D1 keeps
+         * names searchable" — described a choice between two fields that neither
+         * exist nor can arrive through `CatalogueItemCreateInput`.
          */
         this.piiFields = ["ownerEmail"];
     }

package/dist/features/catalogue/schemas/firestore.d.ts

@@ -10,10 +10,21 @@ import { type GenerateCatalogueItemIdInput } from "../../../utils/id-generators"
 import type { StatusChangeEntry } from "../../../_internal/shared/history/types";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { ProductDraftFields } from "../../shipments/schemas/firestore";
+import type { Plaintext } from "../../../security/encrypted";
 export declare const CATALOGUE_COLLECTION: "catalogueItems";
 export type CatalogueVisibility = "public" | "private";
 export type CatalogueOwnerRole = "user" | "seller" | "admin";
 export type CatalogueListingStatus = "not_listed" | "pending_admin_approval" | "listed" | "rejected";
+/**
+ * `CatalogueItemDocument` with its PII as plain `string` — what the named repository
+ * accessors return, and what a WRITE path accepts (the repository encrypts).
+ *
+ * `Plaintext<T>` is the one definition of this shape; see `security/encrypted.ts`.
+ * It is deliberately NOT distinguishable from a MASKED value — `maskPii`
+ * returns plain strings too, and no type can express "these characters are
+ * asterisks". The distinction is which named method you called.
+ */
+export type CatalogueItemPlain = Plaintext<CatalogueItemDocument>;
 export interface CatalogueItemDocument extends BaseDocument, Partial<Omit<ProductDraftFields, "title" | "images" | "mainImage">> {
     ownerId: string;
     ownerRole: CatalogueOwnerRole;

package/dist/features/categories/api/route.js

@@ -184,7 +184,7 @@ export async function GET(request) {
         if (slug) {
             const result = await repo.findAll({
                 filters: `slug==${slug}`,
-                perPage: 1,
+                pageSize: 1,
             });
             const category = result.data[0] ?? null;
             if (!category) {
@@ -223,7 +223,7 @@ export async function GET(request) {
             tier !== null ||
             type !== null;
         if (isFiltered) {
-            const perPage = pageSizeParam !== null && pageSizeParam > 0 ? pageSizeParam : 200;
+            const pageSize = pageSizeParam !== null && pageSizeParam > 0 ? pageSizeParam : 200;
             const page = pageParam ?? 1;
             /*
              * 🛑 `listingOnly` and `q` both force an in-memory window, and `total`
@@ -255,7 +255,7 @@ export async function GET(request) {
                 const res = isPaged
                     ? NextResponse.json({
                         success: true,
-                        data: { items: [], total: 0, page, perPage, totalPages: 0, hasMore: false },
+                        data: { items: [], total: 0, page, pageSize, totalPages: 0, hasMore: false },
                     })
                     : NextResponse.json({ success: true, data: [] });
                 res.headers.set("Cache-Control", CACHE_CONTROL_PUBLIC);
@@ -264,7 +264,7 @@ export async function GET(request) {
             const terms = plan.head ? [plan.head, ...plan.rest] : [];
             const needsWindow = listingOnly || terms.length > 0;
             const windowed = needsWindow
-                ? await repo.findAll({ filters, sort: "order", order: "asc", perPage: 500 })
+                ? await repo.findAll({ filters, sort: "order", order: "asc", pageSize: 500 })
                 : null;
             let items;
             let total;
@@ -274,8 +274,8 @@ export async function GET(request) {
                     .filter((d) => (terms.length ? matchesAllSearchTerms(d.searchTxt, terms) : true))
                     .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
                 total = kept.length;
-                const offset = (page - 1) * perPage;
-                items = (isPaged ? kept.slice(offset, offset + perPage) : kept).map(toCategoryListItem);
+                const offset = (page - 1) * pageSize;
+                items = (isPaged ? kept.slice(offset, offset + pageSize) : kept).map(toCategoryListItem);
             }
             else {
                 const result = await repo.findAll({
@@ -283,7 +283,7 @@ export async function GET(request) {
                     sort: "order",
                     order: "asc",
                     page: pageParam ?? undefined,
-                    perPage,
+                    pageSize,
                 });
                 total = result.total;
                 items = result.data
@@ -291,7 +291,7 @@ export async function GET(request) {
                     .map(toCategoryListItem);
             }
             items = await withLiveTotals(items);
-            const totalPages = total === 0 ? 0 : Math.max(1, Math.ceil(total / perPage));
+            const totalPages = total === 0 ? 0 : Math.max(1, Math.ceil(total / pageSize));
             /*
              * Shape switches on `?page=`, deliberately, and only there.
              *
@@ -311,7 +311,7 @@ export async function GET(request) {
             const res = isPaged
                 ? NextResponse.json({
                     success: true,
-                    data: { items, total, page, perPage, totalPages, hasMore: page < totalPages },
+                    data: { items, total, page, pageSize, totalPages, hasMore: page < totalPages },
                 })
                 : NextResponse.json({ success: true, data: items });
             res.headers.set("Cache-Control", CACHE_CONTROL_PUBLIC);
@@ -322,7 +322,7 @@ export async function GET(request) {
             filters,
             sort: "order",
             order: "asc",
-            perPage: 500,
+            pageSize: 500,
         });
         // Project BEFORE nesting — `CategoryTreeNode extends CategoryItem`, so the
         // children carry the public shape too rather than being raw documents

package/dist/features/categories/components/CategoryDetailPageView.js

@@ -3,11 +3,12 @@ import { Row, SIEVE_OP, sieveAnd, sieveFilter } from "@mohasinac/appkit";
 import { sortBy } from "@mohasinac/appkit";
 import { categoryCrumbs, withTrailHead } from "../utils/breadcrumb-chain.js";
 import { ownTotalFor, descendantTotalFor } from "../schemas/category-counts.js";
-import Link from "next/link.js";
 import { categoriesRepository, productRepository, storeRepository, } from "../../../repositories/index.js";
 import { Container, Div, Heading, ImageMosaic, Main, MOSAIC_MIN, Section, Span, SplitTile, Stack, Text } from "../../../ui/index.js";
 import { MediaImage } from "../../media/MediaImage.js";
 import { RichTextRenderer } from "../../../ui/rich-text/RichTextRenderer.js";
+import { OverflowRow } from "../../../ui/index.js";
+import { resolveTaxonomyVisual } from "../utils/taxonomy-visual.js";
 import { CategoryDetailTabs } from "./CategoryDetailTabs.js";
 import { CategoryGrid } from "./CategoryGrid.js";
 import { CategoryHighlightsAndFaqSection } from "./CategoryHighlightsAndFaqSection.js";
@@ -28,10 +29,41 @@ import { toStoreListItem } from "../../../_internal/server/features/stores/adapt
 import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility.js";
 const __O = {
     hidden: "overflow-hidden",
-    xAuto: "overflow-x-auto",
 };
 /** The page's content width, repeated across every section on this view. */
 const __W = "max-w-7xl mx-auto";
+/**
+ * Direct children → the Subcategories row's items.
+ *
+ * 🛑 THE ROLLUP, not the own count — `totalProductCount`, the same number the
+ * header pill reads and the same one `CategoryGrid` shows.
+ *
+ * These chips used to read `metrics.productCount`, which is items filed
+ * DIRECTLY under that child and excludes its own descendants. So on a parent
+ * whose header said 20, the chips beneath it could sum to 5 — two different
+ * questions answered with the same-looking number, side by side, with nothing
+ * saying which was which. The rule the catalogue is built on: a category's
+ * count is its own items plus every descendant's, and clicking it lists
+ * exactly those items.
+ *
+ * Admin surfaces that genuinely need both still show both —
+ * `CategoryTableColumns` renders "own (total)" explicitly.
+ */
+function toSubcategoryItems(children) {
+    return children.map((child) => {
+        const count = child.metrics?.totalProductCount ?? child.metrics?.productCount ?? 0;
+        return {
+            id: child.id,
+            label: child.name,
+            // Omitted rather than rendered as 0 — `count` is "not counted" when
+            // undefined, and a chip reading "0" invites a click that lands on an
+            // empty page.
+            count: count > 0 ? count : undefined,
+            href: String(ROUTES.PUBLIC.CATEGORY_DETAIL(child.slug)),
+            ...resolveTaxonomyVisual(child),
+        };
+    });
+}
 /**
  * Read and display bounds for this page. Every one of these replaced an
  * unbounded read — see the comments at each use site for what each one cost.
@@ -427,8 +459,6 @@ export async function CategoryDetailPageView({ slug }) {
                         const directChildren = childCategories.filter((c) => c.tier === (category?.tier ?? 0) + 1);
                         if (directChildren.length === 0)
                             return null;
-                        return (_jsxs(Div, { padding: "b-2xs", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", className: "mb-[var(--appkit-space-1-5)]", children: "Subcategories" }), _jsx(Div, { layout: "flex", gap: "2", className: `${__O.xAuto} [scrollbar-width:none]`, padding: "b-2xs", children: directChildren.map((child) => (_jsxs(Link, { href: String(ROUTES.PUBLIC.CATEGORY_DETAIL(child.slug)), 
-                                        // audit-responsive-wrap-ok: deliberate horizontal-scroll chip row (parent has overflow-x-auto) — each chip staying single-line is the intended design, not hidden content
-                                        className: "flex-shrink-0 flex items-center gap-[var(--appkit-space-1-5)] rounded-full border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface-elevated)] px-[var(--appkit-space-4)] py-[var(--appkit-space-1-5)] text-[length:var(--appkit-text-sm)] font-medium text-[var(--appkit-color-text-muted)] hover:border-primary hover:text-primary transition-colors whitespace-nowrap", children: [child.display?.icon && (_jsx(Span, { className: "leading-none", children: child.display.icon })), child.name, (child.metrics?.totalProductCount ?? child.metrics?.productCount ?? 0) > 0 && (_jsx(Span, { size: "xs", color: "muted", children: (child.metrics?.totalProductCount ?? child.metrics?.productCount ?? 0).toLocaleString() }))] }, child.id))) })] }));
+                        return (_jsxs(Div, { padding: "b-2xs", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", className: "mb-[var(--appkit-space-1-5)]", children: "Subcategories" }), _jsx(OverflowRow, { items: toSubcategoryItems(directChildren), ariaLabel: "Subcategories", variant: "nav", placeholder: "Browse subcategories", searchPlaceholder: "Search subcategories\u2026", noResultsText: "No matching subcategory" })] }));
                     })() }) })), _jsx(Section, { padding: "y-lg", children: _jsx(Container, { size: "xl", children: _jsx(CategoryDetailTabs, { categorySlug: slug, categoryId: category?.id, initialProductsData: productsResult ?? undefined, initialBundles: bundlesResult ?? [], initialStores: categoryStores, counts: counts, enabledListingTypes: enabledListingTypes(settings), enabledCategoryTypes: enabledCategoryTypes(settings) }) }) }), groupedListings.length > 0 && (_jsx(Section, { padding: "y-lg", children: _jsx(Container, { size: "xl", children: _jsx(GroupedListingsCarousel, { groups: groupedListings }) }) })), relatedCategories.length > 0 && (_jsx(Section, { border: "subtle", surface: "default", className: "border-t", padding: "y-lg", children: _jsxs(Container, { size: "xl", children: [_jsx(Heading, { level: 2, className: "mb-4", size: "xl", weight: "semibold", children: "Related Categories" }), _jsx(CategoryGrid, { categories: relatedCategories, getHref: (c) => String(ROUTES.PUBLIC.CATEGORY_DETAIL(c.slug)) })] }) }))] }));
 }

package/dist/features/categories/components/CategorySelectorCreate.js

@@ -33,7 +33,6 @@ function CreateCategoryContent({ allCategories, onSuccess, onCancel, labels, sta
     const { shellCtx, validate } = useFormShellState(categoryDraftSchema);
     useEffect(() => {
         validate(draft);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [draft, validate]);
     const { mutate, isPending: isLoading } = useCreateCategory({
         onSuccess: (res) => {

package/dist/features/categories/components/index.d.ts

@@ -10,8 +10,6 @@ export { CategoryFilters, CATEGORY_FILTER_KEYS, CATEGORY_ADMIN_SORT_OPTIONS, CAT
 export type { CategoryFiltersProps, CategoryFilterVariant, } from "./CategoryFilters";
 export { CategorySortSelect } from "./CategorySortSelect";
 export type { CategorySortSelectProps } from "./CategorySortSelect";
-export { CategoryProductsView } from "./CategoryProductsView";
-export type { CategoryProductsViewProps } from "./CategoryProductsView";
 export { CategoryProductsListing } from "./CategoryProductsListing";
 export type { CategoryProductsListingProps } from "./CategoryProductsListing";
 export { CategoryForm } from "./CategoryForm";

package/dist/features/categories/components/index.js

@@ -5,7 +5,6 @@ export { ConcernCard } from "./ConcernCard.js";
 export { ConcernGrid } from "./ConcernGrid.js";
 export { CategoryFilters, CATEGORY_FILTER_KEYS, CATEGORY_ADMIN_SORT_OPTIONS, CATEGORY_SELLER_SORT_OPTIONS, CATEGORY_PUBLIC_SORT_OPTIONS, getCategoryFilterKeys, getCategorySortOptions, } from "./CategoryFilters.js";
 export { CategorySortSelect } from "./CategorySortSelect.js";
-export { CategoryProductsView } from "./CategoryProductsView.js";
 export { CategoryProductsListing } from "./CategoryProductsListing.js";
 export { CategoryForm } from "./CategoryForm.js";
 export { CategorySelectorCreate } from "./CategorySelectorCreate.js";

package/dist/features/categories/repository/categories.repository.d.ts

@@ -262,6 +262,7 @@ export declare class CategoriesRepository extends BaseRepository<CategoryDocumen
     listByType(type: import("../types").CategoryType, opts?: {
         limit?: number;
         activeOnly?: boolean;
+        search?: string;
     }): Promise<CategoryDocument[]>;
     /** SB-UNI — locate a category by slug, optionally constrained by discriminator. */
     findBySlugAndType(slug: string, type?: import("../types").CategoryType): Promise<CategoryDocument | null>;

package/dist/features/categories/repository/categories.repository.js

@@ -874,15 +874,45 @@ export class CategoriesRepository extends BaseRepository {
     }
     /** SB-UNI — discriminator-keyed listing (sublistings, brands, bundles). */
     async listByType(type, opts = {}) {
+        /*
+         * `search` is the SAME searchTxt pushdown `list()` uses, and it is here
+         * rather than left to the callers because the bundle routes query through
+         * this method and not through `list()`.
+         *
+         * They each hand-rolled `b.name?.toLowerCase().includes(q)` over the full
+         * set instead. That is substring-only, so it cannot reach an alias or a
+         * misspelling variant (the whole point of `buildCategorySearchTxt`'s
+         * generated n-grams — "dragon g" finds "Dragoon G", `.includes` never
+         * can), and it read the entire collection on every keystroke. Two copies
+         * of a rule the repository already owns is Root Cause #75's shape.
+         */
+        const plan = planSearchTxt(opts.search);
+        if (plan.empty)
+            return [];
         let q = this.db
             .collection(this.collection)
             .where(CATEGORY_FIELDS.CATEGORY_TYPE, "==", type);
         if (opts.activeOnly)
             q = q.where(CATEGORY_FIELDS.IS_ACTIVE, "==", true);
+        if (plan.head) {
+            q = q.where(CATEGORY_FIELDS.SEARCH_TXT, "array-contains", plan.head);
+        }
         if (opts.limit)
             q = q.limit(opts.limit);
         const snap = await q.get();
-        return snap.docs.map((d) => this.mapDoc(d));
+        const rows = snap.docs.map((d) => this.mapDoc(d));
+        /*
+         * The remaining terms AND-refine in memory — Firestore allows one
+         * `array-contains` per query, so a second term cannot be pushed down. No
+         * window/page juggling is needed here because this method is already an
+         * unpaginated full read by contract; its callers page in memory.
+         */
+        if (plan.rest.length === 0)
+            return rows;
+        return rows.filter((r) => {
+            const tokens = new Set(r.searchTxt ?? []);
+            return plan.rest.every((t) => tokens.has(t));
+        });
     }
     /** SB-UNI — locate a category by slug, optionally constrained by discriminator. */
     async findBySlugAndType(slug, type) {

package/dist/features/categories/schemas/index.d.ts

@@ -1815,16 +1815,16 @@ export declare const categoryListParamsSchema: z.ZodObject<{
     type?: "brand" | "category" | "collection" | "concern" | undefined;
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
     featured?: boolean | undefined;
     parentId?: string | undefined;
     tier?: number | undefined;
+    perPage?: number | undefined;
 }, {
     type?: "brand" | "category" | "collection" | "concern" | undefined;
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
     featured?: boolean | undefined;
     parentId?: string | undefined;
     tier?: number | undefined;
+    perPage?: number | undefined;
 }>;

package/dist/features/categories/utils/taxonomy-visual.d.ts

@@ -0,0 +1,21 @@
+export interface TaxonomyVisualSource {
+    name?: string;
+    display?: {
+        icon?: string;
+        coverImage?: string;
+    } | null;
+}
+export interface TaxonomyVisual {
+    /** A URL or `/media/<slug>` path safe to pass to an image component. */
+    imageUrl?: string;
+    /** Literal text (an emoji) meant to be rendered as text, never as `<img src>`. */
+    emoji?: string;
+}
+/**
+ * Resolve the leading visual for a taxonomy row.
+ *
+ * Precedence: `display.icon` (as image when it is a URL, else as emoji) →
+ * `display.coverImage`. Returns an empty object when the row has neither, so
+ * the caller can fall back to an initial rather than reserving a blank box.
+ */
+export declare function resolveTaxonomyVisual(row: TaxonomyVisualSource | null | undefined): TaxonomyVisual;

package/dist/features/categories/utils/taxonomy-visual.js

@@ -0,0 +1,58 @@
+/*
+ * WHY: `CategoryDisplay.icon` is a bare `string?` that two conventions write
+ *      to and three renderers read differently. The seed puts an EMOJI there
+ *      ("🪀" on the twelve forest roots, "🔥"/"🐴" on the sublistings), while
+ *      `BrandsSection` has always treated it as a URL and feeds it straight to
+ *      `resolveMediaUrl`. Both are live. So a renderer that guesses wrong
+ *      either prints a raw URL as visible text, or hands an emoji to an
+ *      `<img src>` that then 404s into a broken-image glyph.
+ *
+ *      On top of that, `icon` BEATS `coverImage` — `brand-rows.ts` trap 2
+ *      records why: the brand seed deliberately leaves `icon` unset precisely
+ *      because an emoji left there would win over a real logo. A renderer that
+ *      checks `coverImage` first silently inverts that rule.
+ *
+ *      Two decisions, both easy to get wrong, previously made at each call
+ *      site. This is the one place that makes them.
+ *
+ * WHAT: Resolves a taxonomy row (category / brand / franchise / bundle) to the
+ *       single leading visual it should render.
+ *
+ * EXPORTS: resolveTaxonomyVisual, TaxonomyVisual, TaxonomyVisualSource
+ *
+ * @tag domain:categories
+ * @tag layer:feature
+ * @tag pattern:none
+ * @tag access:isomorphic
+ * @tag sideEffects:none
+ */
+/**
+ * True when the string is a reference to be fetched rather than text to be
+ * printed. Deliberately permissive on the URL side and strict on nothing:
+ * every real value in this codebase is `http(s)://…`, `/media/…`,
+ * `/images/…` or a `data:` URI, and everything else written to `icon` has
+ * been an emoji.
+ */
+function looksLikeUrl(value) {
+    return (value.startsWith("http") ||
+        value.startsWith("/") ||
+        value.startsWith("data:") ||
+        value.startsWith("blob:"));
+}
+/**
+ * Resolve the leading visual for a taxonomy row.
+ *
+ * Precedence: `display.icon` (as image when it is a URL, else as emoji) →
+ * `display.coverImage`. Returns an empty object when the row has neither, so
+ * the caller can fall back to an initial rather than reserving a blank box.
+ */
+export function resolveTaxonomyVisual(row) {
+    const icon = row?.display?.icon?.trim();
+    if (icon) {
+        return looksLikeUrl(icon) ? { imageUrl: icon } : { emoji: icon };
+    }
+    const cover = row?.display?.coverImage?.trim();
+    if (cover && looksLikeUrl(cover))
+        return { imageUrl: cover };
+    return {};
+}

package/dist/features/checkout/actions/checkout-value-otp-actions.js

@@ -67,7 +67,14 @@ export async function sendCheckoutValueOtp(userId, userEmail, channel = "email",
             throw new ValidationError("WhatsApp verification isn't available right now — send the code by email instead.");
         }
         const address = await addressesRepository.findById(addressId);
-        const phone = address?.phone?.trim();
+        /*
+       * REVEALED: this phone receives the high-value checkout OTP, so it has to
+       * be the real number. `addressesRepository` is ciphertext-by-default, and
+       * `.trim()` on the stored value is what the nominal brand caught — the
+       * old intersection form let `Encrypted<string>` call string methods.
+       */
+        const addressPlain = address ? addressesRepository.revealAddress(address) : null;
+        const phone = addressPlain?.phone?.trim();
         if (!phone) {
             throw new ValidationError("The selected address has no phone number on file — send the code by email instead.");
         }

package/dist/features/collections/api/[slug]/route.js

@@ -27,7 +27,7 @@ export async function GET(request, { params }) {
         const repo = db.getRepository("collections");
         const result = await repo.findAll({
             filters: `slug==${slug}`,
-            perPage: 1,
+            pageSize: 1,
         });
         if (!result.data[0]) {
             return NextResponse.json({ success: false, error: ERR_COLLECTION_NOT_FOUND }, { status: 404 });
@@ -58,7 +58,7 @@ export async function PATCH(request, { params }) {
         const repo = db.getRepository("collections");
         const result = await repo.findAll({
             filters: `slug==${slug}`,
-            perPage: 1,
+            pageSize: 1,
         });
         if (!result.data[0]) {
             return NextResponse.json({ success: false, error: ERR_COLLECTION_NOT_FOUND }, { status: 404 });
@@ -89,7 +89,7 @@ export async function DELETE(request, { params }) {
         const repo = db.getRepository("collections");
         const result = await repo.findAll({
             filters: `slug==${slug}`,
-            perPage: 1,
+            pageSize: 1,
         });
         if (!result.data[0]) {
             return NextResponse.json({ success: false, error: ERR_COLLECTION_NOT_FOUND }, { status: 404 });

package/dist/features/collections/api/route.js

@@ -33,7 +33,7 @@ export async function GET(request) {
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/consultation/api/route.js

@@ -33,7 +33,7 @@ export async function GET(request) {
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/consultation/repository/consultations.repository.js

@@ -9,7 +9,7 @@ export class ConsultationsRepository {
         const result = await this.repo.findAll({
             filters: `status==${status}`,
             sort: "-createdAt",
-            perPage: 100,
+            pageSize: 100,
         });
         return result.data;
     }

package/dist/features/consultation/types/index.d.ts

@@ -29,5 +29,5 @@ export interface ConsultationListResponse {
     data: ConsultationBooking[];
     total: number;
     page: number;
-    perPage: number;
+    pageSize: number;
 }

package/dist/features/contact/components/ContactForm.js

@@ -71,9 +71,7 @@ export function ContactForm({ onSubmit, labels = {}, className = "", }) {
         finally {
             setIsSubmitting(false);
         }
-    }, 
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    [form, onSubmit, labels, validateSchema]);
+    }, [form, onSubmit, labels, validateSchema]);
     if (submitted) {
         return (_jsxs(Div, { className: `text-center ${className}`, padding: "y-3xl", children: [_jsx(Div, { textSize: "5xl", className: "mb-4", children: "\u2705" }), _jsx(Heading, { level: 2, className: "mb-2", children: labels.successTitle ?? "Message Sent!" }), _jsx(Text, { variant: "secondary", className: "mb-6", children: labels.successDescription ?? "We'll get back to you shortly." }), _jsx(Button, { type: "button", variant: "outline", onClick: () => setSubmitted(false), children: labels.sendAnotherButton ?? "Send another message" })] }));
     }

package/dist/features/corporate/api/route.js

@@ -33,7 +33,7 @@ export async function GET(request) {
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
         return NextResponse.json({

package/dist/features/corporate/repository/corporate.repository.js

@@ -9,7 +9,7 @@ export class CorporateRepository {
         const result = await this.repo.findAll({
             filters: `status==${status}`,
             sort: "-createdAt",
-            perPage: 100,
+            pageSize: 100,
         });
         return result.data;
     }

package/dist/features/corporate/types/index.d.ts

@@ -33,5 +33,5 @@ export interface CorporateInquiryListResponse {
     data: CorporateInquiry[];
     total: number;
     page: number;
-    perPage: number;
+    pageSize: number;
 }

package/dist/features/cron/jobs/auction-expiry.job.js

@@ -13,7 +13,7 @@ export function createAuctionExpiryJob(auctionRepo) {
     }, async (ctx) => {
         const result = await auctionRepo.findAll({
             filters: sieveAnd(sieveFilter("status", SIEVE_OP.EQ, "live"), sieveFilter("endTime", SIEVE_OP.LTE, ctx.scheduleTime)),
-            perPage: 500,
+            pageSize: 500,
         });
         let processed = 0;
         let errors = 0;

package/dist/features/cron/jobs/preorder-reminder.job.js

@@ -19,7 +19,7 @@ export function createPreOrderReminderJob(preOrderRepo) {
         const cutoff = sevenDaysFromNow();
         const result = await preOrderRepo.findAll({
             filters: sieveAnd(sieveFilter("status", SIEVE_OP.EQ, "confirmed"), sieveFilter("expectedShippingDate", SIEVE_OP.LTE, cutoff)),
-            perPage: 500,
+            pageSize: 500,
         });
         let processed = 0;
         let errors = 0;

package/dist/features/events/actions/event-actions.d.ts

@@ -114,6 +114,20 @@ export declare function getEventSpinResults(eventId: string, limit?: number): Pr
  * supplied by the server from a verified session, never by the client.
  */
 export declare function getUserSpinResultsForEvent(eventId: string, userId: string): Promise<import("../types").SpinResultEntry[]>;
+/**
+ * Has this signed-in user already entered this event?
+ *
+ * Exists so the participate page can render a raffle's already-entered state on
+ * FIRST PAINT. The form tracked it in `useState(0)`, which a reload reset — so
+ * a returning entrant saw an inviting empty form, submitted, and was refused.
+ * A refusal the page could have predicted is a worse experience than a form
+ * that says so up front.
+ *
+ * Reuses `hasUserEntered` (one `(eventId, userId)` equality pair, an index that
+ * is already proven by `countUserEntries`) rather than counting, because the
+ * limit is one — see `RAFFLE_MAX_ENTRIES_PER_USER`.
+ */
+export declare function hasUserEnteredEvent(eventId: string, userId: string): Promise<boolean>;
 /**
  * Per-option vote tally for a poll event — replaces the voter-ranked
  * leaderboard for event.type === "poll", where ranking "who happened to