@mohasinac/appkit 4.52.5 → 4.53.1

package/dist/features/admin/components/index.d.ts

@@ -46,6 +46,8 @@ export { AdminArtView } from "./AdminArtView";
 export type { AdminArtViewProps } from "./AdminArtView";
 export { AdminStickersView } from "./AdminStickersView";
 export type { AdminStickersViewProps } from "./AdminStickersView";
+export { AdminSparesView } from "./AdminSparesView";
+export type { AdminSparesViewProps } from "./AdminSparesView";
 export { AdminGroupedListingsView } from "./AdminGroupedListingsView";
 export type { AdminGroupedListingsViewProps } from "./AdminGroupedListingsView";
 export { AdminCarouselGroupEditorView } from "./AdminCarouselGroupEditorView";

package/dist/features/admin/components/index.js

@@ -26,6 +26,7 @@ export { AdminLiveView } from "./AdminLiveView.js";
 // EMI/art-stickers session — admin listing views for art / stickers.
 export { AdminArtView } from "./AdminArtView.js";
 export { AdminStickersView } from "./AdminStickersView.js";
+export { AdminSparesView } from "./AdminSparesView.js";
 export { AdminGroupedListingsView } from "./AdminGroupedListingsView.js";
 export { AdminCarouselGroupEditorView } from "./AdminCarouselGroupEditorView.js";
 // S-SBUNI-4 2026-05-13 — admin bundle CRUD views.

package/dist/features/admin/components/sections/adminSectionsTypes.js

@@ -47,6 +47,13 @@ const SECTION_TYPE_PRESENCE = {
     "prize-draws": true,
     "event-raffles": true,
     "collection-cards": true,
+    // Promoted out of the orphan-component set 2026-10-19. Offered here because
+    // all three are deliberately UNSEEDED — the admin builder is the only way
+    // one gets created, which is the point: the seed does not invent
+    // placeholder "How It Works" steps or testimonials nobody said.
+    "how-it-works": true,
+    testimonials: true,
+    "promo-grid": true,
 };
 export const SECTION_TYPE_OPTIONS = Object.keys(SECTION_TYPE_PRESENCE);
 export const DEFAULT_PRODUCTS_BUILDER = {

package/dist/features/admin/constants/filter-tabs.d.ts

@@ -81,6 +81,9 @@ export declare const ADMIN_PRODUCT_LISTING_TYPE_TABS: readonly [{
 }, {
     readonly id: "stickers";
     readonly label: "Stickers";
+}, {
+    readonly id: "spares";
+    readonly label: "Spares";
 }];
 /** Admin > Blog — post status filter chip set. */
 export declare const ADMIN_BLOG_STATUS_TABS: readonly [{

package/dist/features/admin/constants/filter-tabs.js

@@ -52,6 +52,7 @@ export const ADMIN_PRODUCT_LISTING_TYPE_TABS = [
     { id: "live", label: "Live Items" },
     { id: "art", label: "Art" },
     { id: "stickers", label: "Stickers" },
+    { id: "spares", label: "Spares" },
 ];
 /** Admin > Blog — post status filter chip set. */
 export const ADMIN_BLOG_STATUS_TABS = [

package/dist/features/admin/hooks/useAdminListing.d.ts

@@ -69,7 +69,7 @@ export declare function useAdminListing<TResponse, TRow extends {
     refetch: () => void;
     currentPage: number;
     totalPages: number;
-    selection: import("../../../client").UseBulkSelectionReturn;
+    selection: import("../../../react").UseBulkSelectionReturn;
     defaultSort: string;
     pageSize: number;
     setPageSize: (next: number) => void;

package/dist/features/admin/repository/site-settings.repository.js

@@ -6,7 +6,14 @@ import { serverLogger } from "../../../monitoring/server-logger.js";
  * Manages site-wide configuration settings (singleton document)
  */
 import { BaseRepository, prepareForFirestore, } from "../../../providers/db-firebase/index.js";
-import { cacheManager } from "../../../core/index.js";
+/*
+ * The DEFINING module, not the `core` barrel — Root Cause #18. `core/index.ts`
+ * re-exports `unitOfWork`, which imports this very repository, so reaching
+ * `cacheManager` through the barrel closed a six-module import cycle
+ * (`audit-import-cycles` component 2). `CacheManager.ts` imports nothing from
+ * here, so the deep path has one direction only.
+ */
+import { cacheManager } from "../../../core/CacheManager.js";
 import { SITE_SETTINGS_COLLECTION, DEFAULT_SITE_SETTINGS_DATA, } from "../schemas/index.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { decryptSecret, encryptSecret, maskSecret } from "../../../security/index.js";
@@ -73,13 +80,11 @@ export class SiteSettingsRepository extends BaseRepository {
         const encrypted = { ...existing };
         for (const [key, value] of Object.entries(updates)) {
             if (typeof value === "string" && value.trim()) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
                 encrypted[key] = encryptSecret(value.trim());
             }
             else if (value !== undefined && typeof value !== "string") {
                 // Non-string credential fields (e.g. whatsappTemplates: Record<string,string>)
                 // are stored as-is — they are not secret values to encrypt.
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
                 encrypted[key] = value;
             }
             // Empty / undefined → keep whatever was already stored

package/dist/features/admin/schemas/firestore.d.ts

@@ -14,7 +14,7 @@ export type NotificationType = (typeof NOTIFICATION_TYPE_VALUES)[number];
  * Runtime array for the same reason as the type union above — and
  * `catalogueItem` was being sent with an `as never` cast rather than added.
  */
-export declare const NOTIFICATION_RELATED_TYPE_VALUES: readonly ["order", "product", "bid", "review", "blog", "user", "offer", "support_ticket", "scammer", "catalogueItem", "payout", "store", "conversation"];
+export declare const NOTIFICATION_RELATED_TYPE_VALUES: readonly ["order", "product", "bid", "review", "blog", "user", "offer", "support_ticket", "scammer", "catalogueItem", "payout", "store", "conversation", "event"];
 export type NotificationRelatedType = (typeof NOTIFICATION_RELATED_TYPE_VALUES)[number];
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 export type NotificationPriority = "low" | "normal" | "high";
@@ -256,7 +256,6 @@ export interface SiteSettingsIntegrations {
 export interface SiteSettingsPlatformLimits {
     maxProductsPerStore?: number;
     maxCustomFieldsPerProduct?: number;
-    maxCustomSectionsPerProduct?: number;
     orderCancellationWindowHours?: number;
 }
 /** Embedded in siteSettings.adSettings — a type alias, not a collection root. */
@@ -344,10 +343,29 @@ export interface SiteSettingsDocument extends BaseDocument {
         email: string;
         phone: string;
         address: string;
-        /** Business UPI Virtual Payment Address (market-specific) */
+        /**
+         * Business UPI Virtual Payment Address (market-specific).
+         *
+         * 🛑 The site-wide fallback `resolveDisplayedUpiId` uses when a seller has
+         * no UPI configured or the store is admin-owned — i.e. what a buyer paying
+         * manually is told to pay INTO. It was being silently erased on every
+         * settings save until 2026-10-19: `buildFullPayload()` writes the whole
+         * `contact` group and simply did not carry this key, so saving any
+         * unrelated tab blanked it and manual payments lost their destination.
+         * Any key added here must also be added to that function's state and
+         * payload (Root Cause #76).
+         */
         upiVpa?: string;
         /** WhatsApp number with country code (market-specific) */
         whatsappNumber?: string;
+        /**
+         * Human-readable support hours, e.g. "Mon-Sat, 10:00-19:00 IST".
+         *
+         * Written by the admin form since long before it was declared here, which
+         * made it invisible to every type-driven review — the same gap that let
+         * `adSettings` and `integrations` ship publicly (Root Cause #70).
+         */
+        supportHours?: string;
     };
     payment: {
         phonepeEnabled: boolean;
@@ -484,6 +502,8 @@ export interface SiteSettingsDocument extends BaseDocument {
         twitter?: string;
         instagram?: string;
         linkedin?: string;
+        youtube?: string;
+        pinterest?: string;
     };
     /**
      * The outbound-messaging kill switch and spend ceiling.
@@ -525,6 +545,46 @@ export interface SiteSettingsDocument extends BaseDocument {
     chat?: {
         enabled: boolean;
     };
+    /**
+     * The public search index — the browser-side artifact, not the per-listing
+     * search boxes, which this flag cannot reach.
+     *
+     * ## 🛑 Why a group of its own and not `featureFlags`
+     *
+     * The plan for this feature said "a kill switch in `siteSettings.featureFlags`".
+     * That group was DELETED on 2026-08-29 because 11 of its 14 keys had zero
+     * readers, and the two survivors moved into `payment` as real settings. Its
+     * deletion note draws the line this honours: *"A flag is a temporary switch
+     * around unfinished work."* This is exactly that — so it is a flag, and it
+     * earns the one thing the deleted keys could not show: a named reader
+     * (`useSearchIndex`).
+     *
+     * 🛑 It is NOT in `payment` or any other existing group, and that is
+     * defensive rather than tidy. `AdminSiteSettingsView.buildFullPayload`
+     * writes `payment: { phonepeEnabled, upiManualEnabled, codEnabled,
+     * otpCheckoutThreshold }` — the WHOLE group, from four pieces of form
+     * state — so any fifth key in there is silently erased the next time an
+     * admin saves anything on that page (Root Cause #76). A kill switch that a
+     * routine save turns back on is worse than none, because it fails in the
+     * direction of the thing it exists to stop.
+     *
+     * ## 🛑 Default ON — the opposite polarity to `chat.enabled`
+     *
+     * `chat` is an opt-in feature and its readers test `=== true`. This is a
+     * kill switch on the primary path, so its reader tests `!== false`: an
+     * absent field, an unseeded document and a failed settings fetch must all
+     * mean "search works". The only state that disables it is somebody
+     * deliberately writing `false`.
+     *
+     * Recovery exists because the index can be wrong in a way nothing errors
+     * on — a bad patch, a schema the client does not understand — and the
+     * alternative route back is a Vercel deploy. Flipping this sends every
+     * client to the server `SEARCH_SOURCES` path, which is why that path is
+     * kept rather than deleted.
+     */
+    search?: {
+        indexEnabled?: boolean;
+    };
     emailSettings: {
         fromName: string;
         fromEmail: string;
@@ -604,6 +664,10 @@ export interface SiteSettingsDocument extends BaseDocument {
         shipping: string;
         ethics: string;
         codeOfConduct: string;
+        /** Cancellation policy — a PolicyPageView key since 2026-10-19. */
+        cancellation: string;
+        /** Grievance officer disclosure — a PolicyPageView key since 2026-10-19. */
+        grievance: string;
     };
     shipping: {
         estimatedDays: number;
@@ -756,6 +820,27 @@ export declare const SITE_SETTINGS_INDEXED_FIELDS: readonly [];
  */
 export declare const DEFAULT_SITE_SETTINGS_THEME: SiteSettingsTheme;
 export declare const DEFAULT_SITE_SETTINGS_DATA: Partial<SiteSettingsDocument>;
+/**
+ * 🛑 DEAD, AND IT DISAGREES WITH THE REAL PROJECTION. Do not add to it.
+ *
+ * Measured 2026-10-19 while adding `search`: this constant has **zero
+ * consumers** — it is re-exported from the barrel and read by nothing. The
+ * list that actually decides what leaves the server is
+ * `PUBLIC_SITE_SETTINGS_FIELDS` in
+ * `_internal/server/features/site-settings/adapters.ts`, which is audited by
+ * `audit-public-projection-parity`.
+ *
+ * The two already disagree, in the dangerous direction: this one names
+ * `commissions` (the real projection marks it PRIVATE — "internal economics")
+ * and `featureFlags`, a settings group DELETED in 2026-08-29. So anyone who
+ * reached for it as authoritative would publish platform fee structure and
+ * key a feature off a group that no longer exists.
+ *
+ * Left in place rather than deleted here only because removing a barrel
+ * export is a breaking change that needs its own version bump; it belongs
+ * with the other search-subsystem deletions. Adding a field to it would make
+ * it look maintained, which is the one thing it must not look.
+ */
 export declare const SITE_SETTINGS_PUBLIC_FIELDS: readonly ["siteName", "motto", "logo", "background", "contact.email", "contact.phone", "payment", "commissions", "socialLinks", "seo", "features", "featureFlags", "faq.variables", "announcementBar"];
 export type SiteSettingsUpdateInput = Partial<Omit<SiteSettingsDocument, "id" | "createdAt" | "updatedAt">>;
 export declare const DEFAULT_TRUST_BAR_ITEMS: TrustBarItem[];

package/dist/features/admin/schemas/firestore.js

@@ -114,6 +114,17 @@ export const NOTIFICATION_RELATED_TYPE_VALUES = [
     "store",
     // D9 — the chat thread the message belongs to.
     "conversation",
+    /*
+     * The event a raffle win belongs to. Added 2026-10-19 with the raffle-winner
+     * notification: `runTriggerEventRaffle` recorded a winner and told nobody,
+     * so the only way to learn you had won was to revisit the event page.
+     *
+     * Declared here rather than sent behind an `as never` — see the note above
+     * this array about `catalogueItem`, and the exhaustiveness check in
+     * `resolveNotificationActionUrl` that makes the destination a compile-time
+     * question.
+     */
+    "event",
 ];
 export const NOTIFICATIONS_COLLECTION = "notifications";
 export const NOTIFICATIONS_INDEXED_FIELDS = [
@@ -337,6 +348,27 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
     navConfig: {},
     disabledRoutes: [],
 };
+/**
+ * 🛑 DEAD, AND IT DISAGREES WITH THE REAL PROJECTION. Do not add to it.
+ *
+ * Measured 2026-10-19 while adding `search`: this constant has **zero
+ * consumers** — it is re-exported from the barrel and read by nothing. The
+ * list that actually decides what leaves the server is
+ * `PUBLIC_SITE_SETTINGS_FIELDS` in
+ * `_internal/server/features/site-settings/adapters.ts`, which is audited by
+ * `audit-public-projection-parity`.
+ *
+ * The two already disagree, in the dangerous direction: this one names
+ * `commissions` (the real projection marks it PRIVATE — "internal economics")
+ * and `featureFlags`, a settings group DELETED in 2026-08-29. So anyone who
+ * reached for it as authoritative would publish platform fee structure and
+ * key a feature off a group that no longer exists.
+ *
+ * Left in place rather than deleted here only because removing a barrel
+ * export is a breaking change that needs its own version bump; it belongs
+ * with the other search-subsystem deletions. Adding a field to it would make
+ * it look maintained, which is the one thing it must not look.
+ */
 export const SITE_SETTINGS_PUBLIC_FIELDS = [
     "siteName",
     "motto",

package/dist/features/admin/types/index.d.ts

@@ -23,7 +23,7 @@ export interface DashboardStats {
 export interface AdminListParams {
     q?: string;
     page?: number;
-    perPage?: number;
+    pageSize?: number;
     sort?: string;
     filters?: string;
 }

package/dist/features/auctions/actions/bid-actions.d.ts

@@ -1,4 +1,4 @@
-import type { BidDocument } from "../schemas";
+import type { BidDocument, BidPlain } from "../schemas";
 import type { FirebaseSieveResult } from "../../../providers/db-firebase";
 export interface PlaceBidInput {
     productId: string;
@@ -6,7 +6,7 @@ export interface PlaceBidInput {
     autoMaxBid?: number;
 }
 export interface PlaceBidResult {
-    bid: BidDocument;
+    bid: BidPlain;
 }
 export declare function placeBid(userId: string, userEmail: string, input: PlaceBidInput): Promise<PlaceBidResult>;
 export interface BuyNowAuctionInput {

package/dist/features/auctions/actions/bid-actions.js

@@ -150,12 +150,18 @@ export async function placeBid(userId, userEmail, input) {
         visibleBid = newCap;
         bumpedPreviousVisible = Math.min(prevCap, target);
     }
-    const bid = await bidRepository.create({
+    const bid = await bidRepository.createBid({
         productId,
         productTitle: product.title,
         userId,
         userName: profile?.displayName ?? userEmail ?? "Anonymous",
-        userEmail: profile?.email ?? userEmail ?? "",
+        /*
+         * 🛑 Revealed, not passed through. `profile` comes from a user read, which
+         * is ciphertext-by-default now — and `createBid` ENCRYPTS what it is given,
+         * so the raw value would be encrypted a SECOND time and become
+         * undecryptable. The `userEmail` parameter is already plaintext.
+         */
+        userEmail: (profile ? userRepository.revealUser(profile).email : null) ?? userEmail ?? "",
         bidAmount: visibleBid,
         currency: product.currency || getDefaultCurrency(),
         bidDate: new Date(),
@@ -333,12 +339,18 @@ export async function buyNowAuction(userId, userName, userEmail, input) {
     // buyout price by the buyer" means. It starts `active`/`isWinning: false`
     // like any other bid (bidRepository.create forces both) and is promoted to
     // `won` by claimAuctionForCheckout when the order actually lands.
-    const bid = await bidRepository.create({
+    const bid = await bidRepository.createBid({
         productId,
         productTitle: product.title,
         userId,
         userName: profile?.displayName ?? userName ?? userEmail ?? "Anonymous",
-        userEmail: profile?.email ?? userEmail ?? "",
+        /*
+         * 🛑 Revealed, not passed through. `profile` comes from a user read, which
+         * is ciphertext-by-default now — and `createBid` ENCRYPTS what it is given,
+         * so the raw value would be encrypted a SECOND time and become
+         * undecryptable. The `userEmail` parameter is already plaintext.
+         */
+        userEmail: (profile ? userRepository.revealUser(profile).email : null) ?? userEmail ?? "",
         bidAmount: buyNowPrice,
         currency,
         bidDate: new Date(),

package/dist/features/auctions/api/route.js

@@ -50,7 +50,7 @@ export async function GET(request) {
             filters,
             sort,
             page,
-            perPage: pageSize,
+            pageSize: pageSize,
         });
         const body = {
             items: result.data,

package/dist/features/auctions/components/AuctionBottomActions.js

@@ -80,6 +80,10 @@ export function AuctionBottomActions(props) {
                 ? `${formatCurrency(currentBid, currency)} · ${bidCount} bid${bidCount !== 1 ? "s" : ""}`
                 : `Sign in to see the bid · ${bidCount} bid${bidCount !== 1 ? "s" : ""}`,
             desktop: "after-scroll",
+            // The inline bid panel on the detail page. The dock stays shut until
+            // a bidder has actually seen it and scrolled past — beside it, the
+            // dock would just be a second "Place bid" button.
+            ctaAnchorId: "auction-bid-form",
         });
     return (_jsx(Modal, { isOpen: open, onClose: () => setOpen(false), size: "md", title: "Place your bid", children: _jsx(PlaceBidFormClient, { ...props }) }));
 }

package/dist/features/auctions/components/AuctionDetailPageView.js

@@ -8,7 +8,7 @@ const __P = {
     p4: "p-[var(--appkit-space-4)]",
     p5: "p-[var(--appkit-space-5)]",
 };
-const CLS_BREADCRUMB_LINK = "hover:text-primary-600 transition-colors";
+const CLS_BREADCRUMB_LINK = "hover:text-primary-600 dark:hover:text-primary-400 transition-colors";
 const CLS_LIVE_BADGE = "inline-block rounded-full bg-warning-surface dark:bg-warning-surface px-[var(--appkit-space-2-5)] py-[var(--appkit-space-0-5)] text-warning dark:text-warning";
 import { ROUTES } from "../../../next/routing/route-map.js";
 import { getDefaultCurrency } from "../../../core/baseline-resolver.js";
@@ -17,10 +17,10 @@ import { normalizeRichTextHtml } from "../../../utils/string.formatter.js";
 import { safeDisplayName } from "../../../security/index.js";
 import { getSiteSettingsGlobal } from "../../admin/utils/getSiteSettingsGlobal.js";
 import { isBuyNowAvailable, resolveMinBid, resolveMinBidIncrement, } from "../../../_internal/shared/features/auctions/config.js";
-import { Button, Container, CountdownDisplay, Div, GatedPrice, PricesOnly, Heading, Input, Main, Nav, RichText, Row, Section, Span, Stack, Text, Ul, Li, Dl, Dt, Dd, } from "../../../ui/index.js";
+import { Button, Container, CountdownDisplay, Div, GatedPrice, PricesOnly, Heading, Input, Main, Nav, RichText, Row, Section, Span, Stack, Text, Ul, Li, SpecTable, } from "../../../ui/index.js";
 import { AuctionDetailView } from "../../products/components/AuctionDetailView.js";
 import { ProductTabsShell } from "../../products/components/ProductTabsShell.js";
-import { CustomSectionTabContent } from "../../products/components/CustomSectionTabContent.js";
+import { toCustomSectionTabs } from "../../products/components/CustomSectionTabContent.js";
 import { AuctionBottomActions } from "./AuctionBottomActions.js";
 import { AuctionLiveStatusBadge } from "./AuctionLiveStatusBadge.js";
 import { RelatedProducts } from "../../products/components/RelatedProducts.js";
@@ -184,9 +184,6 @@ export async function AuctionDetailPageView({ id, initialAuction, onPlaceBid, on
     const specs = Array.isArray(p.specifications)
         ? p.specifications
         : [];
-    const customSections = Array.isArray(p.customSections)
-        ? p.customSections
-        : [];
     const descriptionHtml = toDescriptionHtml(p.description);
     const sublistingCategoryId = typeof p.sublistingCategoryId === "string" ? p.sublistingCategoryId : null;
     const relatedDocs = (await safeRead(() => productRepository.findByCategory(String(p.category ?? "")), {
@@ -230,11 +227,7 @@ export async function AuctionDetailPageView({ id, initialAuction, onPlaceBid, on
                                         // prompt here would be the same affordance twice.
                                         _jsx(PricesOnly, { children: _jsxs(Text, { align: "center", size: "xs", color: "muted", children: ["Buy Now available at ", formatCurrency(buyNowPrice, currency)] }) }))] }), tags.length > 0 && (_jsx(Div, { border: "default", className: "border-t", padding: "t-md", children: _jsx(Row, { wrap: true, gap: "xs", children: tags.map((tag) => (_jsx(Span, { size: "xs", rounded: "full", padding: "pill-sm-tall", surface: "subtle", color: "muted", children: tag }, tag))) }) }))] })), renderMobileBidForm: () => !isEnded && onPlaceBid ? (_jsxs(Stack, { className: `lg:hidden ${__P.p4}`, border: "subtle", gap: "3", rounded: "xl", surface: "muted", children: [_jsx(LiveBidPrice, { productId: String(product.id), currentBid: currentBid, bidCount: bidCount, currency: currency, isEnded: isEnded, priceSize: "base", badgeSize: "xs" }), endDate && (_jsxs(Text, { align: "center", size: "xs", color: "muted", children: ["Ends in ", _jsx(CountdownDisplay, { targetDate: endDate, format: "auto", expiredLabel: "Ended" })] })), _jsx(PlaceBidModalButton, { productId: String(product.id), currentBid: currentBid, startingBid: startingBid, tiers: bidIncrementTiers, minBidIncrementOverride: minBidIncrementOverride, currency: currency, isEnded: isEnded, auctionEndDate: endDate, buyNowPrice: buyNowPrice, bidCount: bidCount, tags: tags, onPlaceBid: onPlaceBid, onBuyNow: onBuyNow, triggerClassName: "w-full" })] })) : !isEnded ? (_jsxs(Div, { className: `${__P.p4} lg:hidden`, border: "subtle", rounded: "xl", surface: "muted", children: [_jsxs(Row, { align: "center", gap: "sm", className: "mb-3", children: [_jsx(Span, { size: "base", weight: "bold", className: "text-primary-600 dark:text-primary-400", children: _jsx(GatedPrice, { label: "Sign in to see the current bid", children: formatCurrency(currentBid, currency) }) }), _jsxs(Span, { size: "xs", color: "muted", children: [bidCount, " bids"] })] }), endDate && (_jsxs(Text, { align: "center", className: "mb-3", size: "xs", color: "muted", children: ["Ends in ", _jsx(CountdownDisplay, { targetDate: endDate, format: "auto", expiredLabel: "Ended" })] })), _jsx(Button, { variant: "primary", size: "md", className: "w-full", children: "Place Bid" })] })) : null, renderSublistingSection: sublistingCategoryId
                             ? () => (_jsx(SublistingCarouselSection, { sublistingCategoryId: sublistingCategoryId, currentListingId: String(product.id) }))
-                            : undefined, renderTabs: () => (_jsx(ProductTabsShell, { descriptionContent: descriptionHtml ? (_jsx(RichText, { html: descriptionHtml, proseClass: "prose prose-sm sm:prose max-w-none dark:prose-invert", className: "text-[var(--appkit-color-text-muted)]" })) : undefined, specsContent: specs.length > 0 ? (_jsx(Dl, { divide: "subtle", rounded: "xl", border: "subtle", className: "overflow-hidden", children: specs.map((s, i) => (_jsxs(Row, { gap: "md", oddEven: "zebra", surface: "default", padding: "inline", children: [_jsx(Dt, { className: "w-36 flex-shrink-0", color: "primary", weight: "medium", children: s.name }), _jsxs(Dd, { className: "flex-1", color: "muted", children: [s.value, s.unit ? ` ${s.unit}` : ""] })] }, i))) })) : undefined, customTabs: customSections.map((s) => ({
-                                id: s.id,
-                                label: s.title,
-                                content: _jsx(CustomSectionTabContent, { section: s }),
-                            })) })), renderBidHistory: () => {
+                            : undefined, renderTabs: () => (_jsx(ProductTabsShell, { descriptionContent: descriptionHtml ? (_jsx(RichText, { html: descriptionHtml, proseClass: "prose prose-sm sm:prose max-w-none dark:prose-invert", className: "text-[var(--appkit-color-text-muted)]" })) : undefined, specsContent: specs.length > 0 ? (_jsx(SpecTable, { rows: specs })) : undefined, customTabs: toCustomSectionTabs(p.customSections) })), renderBidHistory: () => {
                             if (!bidsResult)
                                 return null;
                             return (_jsx(CollapsibleBidHistory, { productId: String(product.id), initialData: bidsResult, currency: currency }));

package/dist/features/auctions/repository/bid.repository.d.ts

@@ -5,8 +5,9 @@
  */
 import { BaseRepository, parseSieveDateValue } from "../../../providers/db-firebase";
 import type { DocumentReference, WriteBatch } from "firebase-admin/firestore";
+import type { JsonValue } from "../../../schemas/types";
 import type { SieveModel, FirebaseSieveResult } from "../../../providers/db-firebase";
-import type { BidDocument, BidCreateInput, BidUpdateInput, BidAdminUpdateInput, BidStatus } from "../schemas";
+import type { BidDocument, BidPlain, BidCreateInput, BidUpdateInput, BidAdminUpdateInput, BidStatus } from "../schemas";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
 /** Who/why for a bid write that lands in `statusHistory`. */
 export interface BidWriteContext {
@@ -37,11 +38,23 @@ export declare class BidRepository extends BaseRepository<BidDocument> {
      */
     protected piiFields: readonly ["userEmail"];
     /** Override mapDoc to auto-decrypt PII on every bid read */
-    protected mapDoc<D = BidDocument>(snap: import("../../../providers/db-firebase").DocumentSnapshot): D;
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealBid(doc: BidDocument): BidPlain;
+    /** As `revealBid`, for a list read. */
+    revealBids(docs: readonly BidDocument[]): BidPlain[];
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedBid(doc: BidDocument): BidPlain;
+    /** As `maskedBid`, for a list read. */
+    maskedBids(docs: readonly BidDocument[]): BidPlain[];
     /**
      * Create new bid with auto-generated ID
      */
-    create(input: BidCreateInput): Promise<BidDocument>;
+    createBid(input: BidCreateInput): Promise<BidPlain>;
     /**
      * Find bids by product ID
      */
@@ -179,6 +192,10 @@ export declare class BidRepository extends BaseRepository<BidDocument> {
             canFilter: boolean;
             canSort: boolean;
         };
+        searchTxt: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         userEmail: {
             canFilter: boolean;
             canSort: boolean;
@@ -209,6 +226,31 @@ export declare class BidRepository extends BaseRepository<BidDocument> {
     /**
      * Paginated, Firestore-native bid list (admin use).
      */
-    list(model: SieveModel): Promise<FirebaseSieveResult<BidDocument>>;
+    /** Derived on every write path via `applyWriteHooks`. */
+    protected buildSearchTxtFor(data: Record<string, JsonValue>): string[] | null;
+    /**
+     * `opts.search` is a searchTxt PUSHDOWN, not a Sieve clause.
+     *
+     * ## What this replaces, on both of its two surfaces
+     *
+     * `/api/store/bids` searched the bidder with `userName@=`, a CASE-SENSITIVE
+     * prefix — the only thing Firestore can do for a prefix — so a seller typing
+     * "ravi" did not find "Ravi", and "kumar" never found anyone at all.
+     * `/api/user/bids` filtered `productTitle.includes(q)` in memory AFTER
+     * paging, so a match on page 2 was unreachable.
+     *
+     * Token search fixes both: `buildSearchTxt` normalises case and indexes word
+     * prefixes, so the query and the index meet on tokens rather than on a
+     * substring of one field.
+     *
+     * 🛑 `planSearchTxt`'s `empty` guard is the load-bearing part. A query that
+     * normalises to no usable token (`"!!!"`, `"—"`) MUST return nothing —
+     * emitting no clause instead returns the whole collection and calls it a
+     * search result, which is the shape of every silent-search bug in this
+     * codebase.
+     */
+    list(model: SieveModel, opts?: {
+        search?: string;
+    }): Promise<FirebaseSieveResult<BidDocument>>;
 }
 export declare const bidRepository: BidRepository;