@mohasinac/appkit 4.52.5 → 4.53.1

package/dist/features/events/components/EventRafflesSection.js

@@ -12,18 +12,67 @@ import { Container, Grid, Heading, Section, Stack, Text } from "../../../ui/inde
 import { eventRepository } from "../repository/events.repository.js";
 import { EventCard } from "./EventCard.js";
 import { hidePublicTestData } from "../../../_internal/server/features/tester/visibility.js";
+import { EVENT_FIELDS } from "../../../constants/field-names.js";
+/*
+ * `config.raffleType`'s two concrete values happen to equal the two
+ * `EventType` members this strip spans. Sourced from `EVENT_FIELDS.TYPE_VALUES`
+ * rather than written as literals so a rename of either type is a compile
+ * error here instead of a clause that matches nothing.
+ */
+const EVENT_TYPE_RAFFLE = EVENT_FIELDS.TYPE_VALUES.RAFFLE;
+const EVENT_TYPE_SPIN_WHEEL = EVENT_FIELDS.TYPE_VALUES.SPIN_WHEEL;
 /**
  * Renders a live-raffle/spin-wheel strip on the homepage.
- * W1-38 (2026-05-23): fetches events with hasRaffle=true and renders the EventCard grid.
+ *
+ * ## It was showing the wrong events, and nothing could tell
+ *
+ * The filter was `hasRaffle == "true"` — and **`hasRaffle` is not in
+ * `EventRepository.SIEVE_FIELDS`**. `sieve.ts` sets `throwExceptions: false`,
+ * so an unallowlisted field does not raise: `findField` returns undefined and
+ * the clause is **silently discarded** (Root Cause #62, EMITTED_BUT_UNFILTERABLE).
+ *
+ * So this did not return zero rows and it did not disappear. It ran
+ * `status == active` sorted `-startsAt` and rendered **the six most
+ * recently-started active events of ANY type** — sales, polls, feedback forms —
+ * under a heading reading "Live Raffles & Spin Wheels". Every card was a real,
+ * live event, which is exactly why it never looked broken.
+ *
+ * ## Why `type`, and why one query
+ *
+ * `config.raffleType` is already `"raffle" | "spin_wheel" | "all"` — the config
+ * has always spoken the `type` vocabulary and already answers "both belong
+ * here", so the title is truthful and `type` is the honest field to match.
+ * `type` IS in `SIEVE_FIELDS` and is indexed `(type, status, startsAt DESC)`,
+ * so this needs no new composite index.
+ *
+ * 🛑 The `"all"` case is a PIPE-joined value, not `sieveMultiEq`. Sieve parses
+ * `type==a|b` as one OR-group, and the Firebase adapter upgrades a same-field
+ * OR-group of equalities into a single Firestore `in` query. `sieveMultiEq`
+ * comma-joins instead, and a comma is an AND: `type==raffle,type==spin_wheel`
+ * is two equalities on one field, which no document can satisfy (Root
+ * Cause #59).
+ *
+ * Accepted limitation, deliberately: `hasRaffle` is an optional bolt-on that
+ * *could* sit on a `sale` event, and such an event would not appear here. No
+ * seeded event is shaped that way — all three `hasRaffle: true` rows are
+ * already `type: "raffle"` — and a sale with a side raffle belongs in the sale
+ * strip. If that changes, the fix is a second clause, not a wider title.
  */
 export async function EventRafflesSection({ config, }) {
     const title = config.title ?? "Live Raffles & Spin Wheels";
     const subtitle = config.subtitle ?? "Participate in community events and win prizes";
-    const limit = 6;
+    // `maxItems` was declared in the config, set by the seed, and ignored here in
+    // favour of a hardcoded 6 (`audit-homepage-config-coverage` passed only
+    // because the component *mentions* `config`).
+    const limit = config.maxItems && config.maxItems > 0 ? config.maxItems : 6;
+    const raffleType = config.raffleType ?? "all";
+    const typeClause = raffleType === "all"
+        ? sieveFilter(EVENT_FIELDS.TYPE, SIEVE_OP.EQ, `${EVENT_TYPE_RAFFLE}|${EVENT_TYPE_SPIN_WHEEL}`)
+        : sieveFilter(EVENT_FIELDS.TYPE, SIEVE_OP.EQ, raffleType);
     let events = [];
     try {
         const result = await eventRepository.list({
-            filters: sieveAnd(sieveFilter("hasRaffle", SIEVE_OP.EQ, "true"), sieveFilter("status", SIEVE_OP.EQ, "active")),
+            filters: sieveAnd(typeClause, sieveFilter(EVENT_FIELDS.STATUS, SIEVE_OP.EQ, EVENT_FIELDS.STATUS_VALUES.ACTIVE)),
             sorts: sortBy("startsAt", "DESC"),
             pageSize: limit,
         });

package/dist/features/events/components/SpinWheelView.d.ts

@@ -1,7 +1,7 @@
-import type { SpinPrize } from "../types";
+import type { DisplaySpinPrize } from "../types";
 export interface SpinWheelViewProps {
     eventId: string;
-    prizes: SpinPrize[];
+    prizes: DisplaySpinPrize[];
     alreadyUsed?: boolean;
     initialPrizeId?: string;
     initialCouponCode?: string;

package/dist/features/events/components/SpinWheelView.js

@@ -1,6 +1,7 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useCallback, useMemo, useState } from "react";
+import { useTranslations } from "next-intl";
 import { Button, ClaimCouponButton, Div, Heading, LoginRequiredModal, Row, Span, Stack, Text, useToast } from "../../../ui/index.js";
 import { isAuthError } from "../../../utils/auth-error.js";
 import { normalizeError } from "../../../errors/normalize.js";
@@ -32,6 +33,10 @@ export function SpinWheelView({ eventId, prizes, alreadyUsed, initialPrizeId, in
     const [error, setError] = useState(null);
     const [showLoginModal, setShowLoginModal] = useState(false);
     const { showToast } = useToast();
+    // Root translator (no namespace) — `toUserMessage` passes fully-qualified
+    // `errors.codes.*` keys and resolves them itself, so a missing key degrades
+    // to generic copy rather than throwing MISSING_MESSAGE at render time.
+    const t = useTranslations();
     const now = Date.now();
     const startMs = windowStart ? new Date(windowStart).getTime() : null;
     const endMs = windowEnd ? new Date(windowEnd).getTime() : null;
@@ -51,6 +56,12 @@ export function SpinWheelView({ eventId, prizes, alreadyUsed, initialPrizeId, in
                     setResultCoupon(result.spinPrizeCouponCode);
                 }
                 else {
+                    /*
+                     * A 2xx with no prize. The server now refuses with a real status and
+                     * code for every reason it knows (`reasonToHttp`), so reaching here
+                     * means the response was shaped unexpectedly rather than refused —
+                     * the generic fallback is the honest answer.
+                     */
                     setError(l.errorFallback);
                 }
             }, ANIMATION_MS);
@@ -62,13 +73,39 @@ export function SpinWheelView({ eventId, prizes, alreadyUsed, initialPrizeId, in
                 setShowLoginModal(true);
             }
             else {
-                setError(l.errorFallback);
-                showToast(toUserMessage(e.code, undefined, { fallback: l.errorFallback }), "error");
+                /*
+                 * 🛑 Show the SERVER'S reason, not one sentence for all of them.
+                 *
+                 * Both lines below used to be `l.errorFallback` — "Spin failed. Please
+                 * try again." — so a closed window, an exhausted per-user cap, a
+                 * misconfigured wheel and a genuine fault were indistinguishable, and
+                 * the retry that sentence invites could never succeed for most of them.
+                 *
+                 * `t` is the ROOT, unnamespaced translator: `toUserMessage` resolves
+                 * absolute `errors.codes.*` keys, which a namespaced translator cannot
+                 * reach. Omitting it (as this did) makes `toUserMessage` return the
+                 * fallback unconditionally — so the per-reason copy existed in
+                 * `messages/en.json` and was unreachable. Same reasoning as
+                 * `PlaceBidFormClient`.
+                 *
+                 * This only resolves because `onSpin` now throws an `ApiError` carrying
+                 * the response's `code` and `status`; while it threw a native `Error`,
+                 * `normalizeError` produced no code and `isAuthError` saw no status, so
+                 * a 401 never opened the login modal either.
+                 */
+                const message = toUserMessage(e.code, t, { fallback: l.errorFallback });
+                setError(message);
+                showToast(message, "error");
             }
         }
-    }, [disabled, eventId, l.errorFallback, onSpin, showToast]);
+    }, [disabled, eventId, l.errorFallback, onSpin, showToast, t]);
+    /*
+     * Looked up in the FULL prize list, not `activePrizes`. A prize deactivated
+     * after somebody won it would otherwise render neither the prize box nor an
+     * error — the win simply vanished from the page.
+     */
     const wonPrize = resultPrizeId
-        ? activePrizes.find((p) => p.id === resultPrizeId)
+        ? prizes.find((p) => p.id === resultPrizeId)
         : undefined;
     return (_jsxs(Stack, { gap: "md", children: [_jsx(LoginRequiredModal, { isOpen: showLoginModal, onClose: () => setShowLoginModal(false), message: "You need to be signed in to spin the wheel. Please log in or create an account to continue." }), _jsxs(Heading, { level: 2, size: "xl", weight: "semibold", color: "primary", children: ["\uD83C\uDFA1 ", l.heading] }), _jsxs(Div, { className: CLS_WHEEL, "aria-label": "Spin wheel", children: [_jsx(Row, { className: "absolute inset-0", align: "center", justify: "center", style: {
                             animation: spinning

package/dist/features/events/repository/event-entry.repository.d.ts

@@ -1,10 +1,22 @@
 import type { FirebaseSieveFields, FirebaseSieveResult, SieveModel } from "../../../providers/db-firebase";
 import { BaseRepository } from "../../../providers/db-firebase";
-import { type EventEntryCreateInput, type EventEntryDocument } from "../schemas";
+import { type EventEntryCreateInput, type EventEntryDocument, type EventEntryPlain } from "../schemas";
 declare class EventEntryRepository extends BaseRepository<EventEntryDocument> {
     static readonly SIEVE_FIELDS: FirebaseSieveFields;
     constructor();
-    protected mapDoc<D = EventEntryDocument>(snap: import("../../../providers/db-firebase").DocumentSnapshot): D;
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealEntry(doc: EventEntryDocument): EventEntryPlain;
+    /** As `revealEntry`, for a list read. */
+    revealEntrys(docs: readonly EventEntryDocument[]): EventEntryPlain[];
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedEntry(doc: EventEntryDocument): EventEntryPlain;
+    /** As `maskedEntry`, for a list read. */
+    maskedEntrys(docs: readonly EventEntryDocument[]): EventEntryPlain[];
     listForEvent(eventId: string, model: SieveModel): Promise<FirebaseSieveResult<EventEntryDocument>>;
     listForUser(userId: string, model: SieveModel): Promise<FirebaseSieveResult<EventEntryDocument>>;
     /**

package/dist/features/events/repository/event-entry.repository.js

@@ -2,7 +2,7 @@ import { normalizeError } from "../../../errors/normalize.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { serverLogger } from "../../../monitoring/index.js";
 import { BaseRepository, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
-import { decryptPiiFields, encryptPiiFields, EVENT_ENTRY_PII_FIELDS, } from "../../../security/index.js";
+import { encryptPiiFields, maskPii, revealPii, EVENT_ENTRY_PII_FIELDS, } from "../../../security/index.js";
 import { EVENT_ENTRIES_COLLECTION, EVENT_ENTRY_FIELDS, } from "../schemas/index.js";
 /** Extracted from getExportReport's poll branch to stay under the max nesting depth. */
 function formatPollResultLines(pollOptions, countByOption, total) {
@@ -20,11 +20,38 @@ class EventEntryRepository extends BaseRepository {
     constructor() {
         super(EVENT_ENTRIES_COLLECTION);
     }
-    mapDoc(snap) {
-        const raw = super.mapDoc(snap);
-        return decryptPiiFields(raw, [
-            ...EVENT_ENTRY_PII_FIELDS,
-        ]);
+    /*
+     * 🛑 `mapDoc` is NOT overridden, and that absence IS the change.
+     *
+     * It used to decrypt on every read, so ciphertext never left the database
+     * and every caller handled plaintext without ever saying so. Following
+     * `SiteSettingsRepository`: reads return what Firestore holds, and plaintext
+     * requires one of the two named methods below.
+     *
+     * A convention would not hold this. `EventEntryDocument`'s PII fields are
+     * `Encrypted<string>`, assignable to nothing that wants a plain `string`, so
+     * a reader that skips both accessors is a compile error naming file and line.
+     */
+    /** Plaintext PII. **Opt-in and named** — shows up in review and in a grep. */
+    revealEntry(doc) {
+        return revealPii(doc, EVENT_ENTRY_PII_FIELDS);
+    }
+    /** As `revealEntry`, for a list read. */
+    revealEntrys(docs) {
+        return docs.map((d) => this.revealEntry(d));
+    }
+    /**
+     * Masked PII — **the default for any surface that only needs to identify a
+     * row to a human.** Decrypts first, then masks: the mask helpers refuse
+     * ciphertext by design, so passing a stored field straight in would return
+     * "Anonymous" for every row.
+     */
+    maskedEntry(doc) {
+        return maskPii(doc, EVENT_ENTRY_PII_FIELDS);
+    }
+    /** As `maskedEntry`, for a list read. */
+    maskedEntrys(docs) {
+        return docs.map((d) => this.maskedEntry(d));
     }
     async listForEvent(eventId, model) {
         return this.sieveQuery(model, EventEntryRepository.SIEVE_FIELDS, {
@@ -150,7 +177,14 @@ class EventEntryRepository extends BaseRepository {
             // Aggregate per user: sum all approved entry points
             const byUser = new Map();
             for (const doc of snapshot.docs) {
-                const raw = decryptPiiFields({ id: doc.id, ...doc.data() }, [...EVENT_ENTRY_PII_FIELDS]);
+                /*
+                 * MASKED, not decrypted. This builds a public LEADERBOARD, so it needs
+                 * a name to show and has no business holding the real one — the rows
+                 * go straight into a response. `maskPii` decrypts and then masks, which
+                 * is required here: `maskName` refuses ciphertext by design, so masking
+                 * the stored value directly would render every competitor "Anonymous".
+                 */
+                const raw = maskPii({ id: doc.id, ...doc.data() }, EVENT_ENTRY_PII_FIELDS);
                 if (!raw.userId)
                     continue;
                 const existing = byUser.get(raw.userId);

package/dist/features/events/schemas/firestore.d.ts

@@ -6,6 +6,7 @@ import type { JsonValue } from "@mohasinac/appkit";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 import type { EventType, EventStatus, EntryReviewStatus, SaleConfig, OfferConfig, PollConfig, SurveyConfig, FeedbackConfig, RaffleType, SpinPrize } from "../types";
 import type { LotteryConfig } from "../../lottery/types";
+import type { Encrypted, Plaintext } from "../../../security/encrypted";
 export declare const EVENTS_COLLECTION: "events";
 export declare const EVENT_ENTRIES_COLLECTION: "eventEntries";
 export interface EventDocument extends BaseDocument {
@@ -68,12 +69,24 @@ export interface EventDocument extends BaseDocument {
     };
     createdBy: string;
 }
+/**
+ * `EventEntryDocument` with its PII as plain `string` — what the named repository
+ * accessors return, and what a WRITE path accepts (the repository encrypts).
+ *
+ * `Plaintext<T>` is the one definition of this shape; see `security/encrypted.ts`.
+ * It is deliberately NOT distinguishable from a MASKED value — `maskPii`
+ * returns plain strings too, and no type can express "these characters are
+ * asterisks". The distinction is which named method you called.
+ */
+export type EventEntryPlain = Plaintext<EventEntryDocument>;
 export type EventEntryDocument = {
     id: string;
     eventId: string;
     userId?: string;
-    userDisplayName?: string;
-    userEmail?: string;
+    createdAt?: Date;
+    updatedAt?: Date;
+    userDisplayName?: Encrypted<string>;
+    userEmail?: Encrypted<string>;
     pollVotes?: string[];
     pollComment?: string;
     formResponses?: Record<string, JsonValue>;
@@ -91,7 +104,7 @@ export type EventEntryDocument = {
     spinPrizeId?: string;
     spinPrizeCouponCode?: string | null;
     spinWonAt?: Date;
-    ipAddress?: string;
+    ipAddress?: Encrypted<string>;
     /**
      * HMAC-SHA256 blind index of a guest (non-logged-in) participant's IP,
      * scoped per event — `hmacBlindIndex(eventId + ":" + rawIp)`. Set only
@@ -182,7 +195,7 @@ export declare const EVENT_ENTRY_FIELDS: {
 };
 export type EventCreateInput = Omit<EventDocument, "id" | "createdAt" | "updatedAt" | "stats">;
 export type EventUpdateInput = Partial<Omit<EventDocument, "id" | "createdAt" | "createdBy">>;
-export type EventEntryCreateInput = Omit<EventEntryDocument, "id" | "submittedAt">;
+export type EventEntryCreateInput = Omit<EventEntryPlain, "id" | "submittedAt">;
 export declare const eventQueryHelpers: {
     readonly active: () => readonly ["status", "==", EventStatus];
     readonly byType: (type: EventType) => readonly ["type", "==", EventType];

package/dist/features/events/types/index.d.ts

@@ -11,6 +11,13 @@ export declare const ALL_EVENT_TYPES: EventType[];
  */
 export declare const EVENT_TYPE_LABELS: Record<EventType, string>;
 export type RaffleType = "top_n_scorers" | "top_n_participants" | "open_raffle" | "spin_wheel";
+/**
+ * A spin prize as STORED on the event document. `weight` IS the odds and
+ * `couponId` is an internal document id — neither may reach a browser.
+ *
+ * Authored by the admin editor, read by `assignSpinPrize`. For anything that
+ * renders, use `DisplaySpinPrize` below.
+ */
 export interface SpinPrize {
     id: string;
     label: string;
@@ -18,6 +25,27 @@ export interface SpinPrize {
     weight: number;
     isActive: boolean;
 }
+/**
+ * A spin prize as a VIEW may see it: what it is, not what it is worth.
+ *
+ * 🛑 This exists because `SpinWheelView.prizes` was typed `SpinPrize[]`, which
+ * made `weight` and `couponId` REQUIRED of every caller — so handing the public
+ * wheel the full stored prize, odds included, was the only way to satisfy the
+ * compiler. The participate page duly cast the stored array straight into a
+ * `"use client"` prop and published the odds of every wheel (Root Cause #70).
+ *
+ * A rendering surface that demands the secret will be given the secret. The
+ * structural subset is the fix: `SpinPrize` is assignable to this, so the admin
+ * editor keeps passing stored prizes, while a client payload narrowed by
+ * `toClientSpinPrize` now satisfies it too — and re-adding `weight` to a
+ * client-bound type becomes a deliberate act rather than the path of least
+ * resistance.
+ */
+export interface DisplaySpinPrize {
+    id: string;
+    label: string;
+    isActive?: boolean;
+}
 export type EventStatus = "draft" | "active" | "paused" | "ended" | "cancelled";
 export declare const ALL_EVENT_STATUSES: EventStatus[];
 /** Dashboard display labels — see `EVENT_TYPE_LABELS`. */
@@ -172,6 +200,15 @@ export interface SpinResultEntry {
     spinPrizeId?: string;
     spinPrizeTitle?: string;
     spinWonAt?: string;
+    /**
+     * The coupon code the spin awarded, for the caller's OWN results only.
+     *
+     * 🛑 `getEventSpinResults` — the PUBLIC masked feed of everyone's recent
+     * spins — must never populate this. A coupon code is a bearer token: anyone
+     * who can read it can redeem it. Only `getUserSpinResultsForEvent`, which
+     * takes a `userId` the server supplies from a verified session, sets it.
+     */
+    spinPrizeCouponCode?: string;
 }
 export interface EventListResponse {
     items: EventItem[];

package/dist/features/faq/repository/faqs.repository.js

@@ -20,7 +20,7 @@ export class FAQsRepository {
         const result = await this.repo.findAll({
             filters: `isActive==true,category==${category}`,
             sort: "order",
-            perPage: 100,
+            pageSize: 100,
         });
         return result.data;
     }

package/dist/features/faq/schemas/index.d.ts

@@ -140,18 +140,21 @@ export declare const faqListParamsSchema: z.ZodObject<{
     homepage: z.ZodOptional<z.ZodBoolean>;
     q: z.ZodOptional<z.ZodString>;
     page: z.ZodOptional<z.ZodNumber>;
+    pageSize: z.ZodOptional<z.ZodNumber>;
     perPage: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
+    pageSize?: number | undefined;
     category?: "orders_payment" | "shipping_delivery" | "returns_refunds" | "product_information" | "account_security" | "technical_support" | "general" | undefined;
+    perPage?: number | undefined;
     homepage?: boolean | undefined;
 }, {
     page?: number | undefined;
     q?: string | undefined;
-    perPage?: number | undefined;
+    pageSize?: number | undefined;
     category?: "orders_payment" | "shipping_delivery" | "returns_refunds" | "product_information" | "account_security" | "technical_support" | "general" | undefined;
+    perPage?: number | undefined;
     homepage?: boolean | undefined;
 }>;
 export * from "./firestore";

package/dist/features/faq/schemas/index.js

@@ -57,6 +57,12 @@ export const faqListParamsSchema = z.object({
     homepage: z.coerce.boolean().optional(),
     q: z.string().optional(),
     page: z.coerce.number().optional(),
+    pageSize: z.coerce.number().optional(),
+    /*
+     * Accepted, never emitted — a link built before the `perPage` → `pageSize`
+     * rename. Same deliberate back-compat as `blogListParamsSchema`: this is a
+     * PUBLIC query parameter, so dropping it would 400 somebody's bookmark.
+     */
     perPage: z.coerce.number().optional(),
 });
 export * from "./firestore.js";

package/dist/features/faq/types/index.d.ts

@@ -54,7 +54,6 @@ export interface FAQListParams {
     tags?: string[];
     showOnHomepage?: boolean;
     page?: number;
-    perPage?: number;
     pageSize?: number;
     sorts?: string;
 }

package/dist/features/grouped/components/GroupedListingDetailView.js

@@ -3,6 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Container, Div, Heading, Section, Span, Stack, Text, } from "../../../ui/index.js";
 import { MediaImage } from "../../media/MediaImage.js";
 import { GroupMemberPicker } from "../../products/components/GroupMemberPicker.js";
+import { readGroupRules } from "../../../_internal/shared/features/products/group-rules.js";
 const __O = { hidden: "overflow-hidden" };
 /** Human label per theme — mirrors GROUP_THEME_TITLE on the carousel. */
 const THEME_LABEL = {
@@ -13,5 +14,12 @@ const THEME_LABEL = {
     generic: "Grouped listing",
 };
 export function GroupedListingDetailView({ group, members }) {
-    return (_jsx(Section, { padding: "section", children: _jsx(Container, { children: _jsxs(Stack, { gap: "comfortable", children: [group.coverImage && (_jsx(Div, { className: `relative h-48 w-full md:h-64 ${__O.hidden}`, rounded: "xl", surface: "muted", children: _jsx(MediaImage, { src: group.coverImage, alt: group.title, size: "banner" }) })), _jsxs(Stack, { gap: "xs", children: [_jsx(Span, { size: "xs", color: "muted", transform: "uppercase", weight: "semibold", children: THEME_LABEL[group.groupTheme] }), _jsx(Heading, { level: 1, children: group.title }), group.description && (_jsx(Text, { color: "muted", children: group.description })), _jsxs(Text, { size: "sm", color: "muted", children: [members.length, " item", members.length === 1 ? "" : "s", " in this group"] })] }), members.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "lg", children: "Pick what you want" }), _jsx(Text, { size: "sm", color: "muted", children: "Choose a quantity for each item \u2014 they'll go into your cart as a single line you can edit later." }), _jsx(GroupMemberPicker, { groupId: group.id, groupSource: "grouped-listing", members: members })] })) : (_jsx(Text, { color: "muted", children: "Nothing in this group is available right now." }))] }) }) }));
+    return (_jsx(Section, { padding: "section", children: _jsx(Container, { children: _jsxs(Stack, { gap: "comfortable", children: [group.coverImage && (_jsx(Div, { className: `relative h-48 w-full md:h-64 ${__O.hidden}`, rounded: "xl", surface: "muted", children: _jsx(MediaImage, { src: group.coverImage, alt: group.title, size: "banner" }) })), _jsxs(Stack, { gap: "xs", children: [_jsx(Span, { size: "xs", color: "muted", transform: "uppercase", weight: "semibold", children: THEME_LABEL[group.groupTheme] }), _jsx(Heading, { level: 1, children: group.title }), group.description && (_jsx(Text, { color: "muted", children: group.description })), _jsxs(Text, { size: "sm", color: "muted", children: [members.length, " item", members.length === 1 ? "" : "s", " in this group"] })] }), members.length > 0 ? (_jsxs(Stack, { gap: "sm", children: [_jsx(Heading, { level: 2, size: "lg", children: "Pick what you want" }), _jsx(Text, { size: "sm", color: "muted", children: "Choose a quantity for each item \u2014 they'll go into your cart as a single line you can edit later." }), _jsx(GroupMemberPicker, { groupId: group.id, groupSource: "grouped-listing", members: members, 
+                                /*
+                                 * Off the group document this view already loaded. The picker
+                                 * and `addGroupLineToCart` run the SAME `checkGroupRules`, so
+                                 * passing them here only changes WHEN the buyer learns a
+                                 * selection is invalid — not whether it is refused.
+                                 */
+                                rules: readGroupRules(group) })] })) : (_jsx(Text, { color: "muted", children: "Nothing in this group is available right now." }))] }) }) }));
 }

package/dist/features/grouped/components/GroupedListingEditorView.js

@@ -38,7 +38,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import React from "react";
 import { useQuery } from "@tanstack/react-query";
 import { useRouter } from "next/navigation.js";
-import { Stack, Text, useToast } from "../../../ui/index.js";
+import { EmptyState, Stack, Text, useToast } from "../../../ui/index.js";
 import { FieldSelect, FormShellContext, FormErrorSummary, applyZodIssues, useFormShellState, } from "../../../ui/forms/index.js";
 import { SectionForm, useSectionFormNav } from "../../shell/index.js";
 import { buildSectionsFromSchema } from "../../shell/build-sections.js";
@@ -134,7 +134,6 @@ export function GroupedListingEditorView({ scope, groupId, fixedStoreId, onSaved
     });
     React.useEffect(() => {
         validate(values);
-        // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [values, validate]);
     const handleSubmit = async () => {
         const parsed = groupedListingFormSchema.safeParse(values);
@@ -183,6 +182,22 @@ export function GroupedListingEditorView({ scope, groupId, fixedStoreId, onSaved
     if (isEdit && existing.isLoading) {
         return _jsx(Text, { color: "muted", children: "Loading\u2026" });
     }
+    /*
+     * 🛑 LOADING and MISSING are different states, and collapsing them is the
+     * defect `audit-admin-detail-notfound` exists for.
+     *
+     * Without this branch, an invented `groupId` fell through to the form below
+     * with every field at its empty default — a complete, saveable editor for a
+     * record that does not exist. `/admin/grouped-listings/zzzznope/edit` looked
+     * ready to Save, and the admin PATCH it would call is the one that used to
+     * silently drop every key but `productIds` (see this file's page header).
+     *
+     * Only reached once the query has SETTLED, so a slow fetch still shows
+     * "Loading…" rather than flashing "not found" at a record that is on its way.
+     */
+    if (isEdit && !existing.isLoading && !existing.data) {
+        return (_jsx(EmptyState, { title: "Grouped listing not found", description: "This group may have been deleted, or the link may be wrong." }));
+    }
     return (_jsxs(Stack, { gap: "md", children: [needsStorePicker ? (_jsx(FieldSelect, { name: "storeId", label: "Store", required: true, value: storeId, onChange: setStoreId, options: [
                     { value: "", label: "Select a store…" },
                     ...(stores.data ?? []).map((s) => ({

package/dist/features/grouped/schemas/firestore.d.ts

@@ -39,6 +39,11 @@ export interface GroupedListingDocument extends BaseDocument {
     /** Computed from activeMemberCount < minActiveMembers. */
     visibilityStatus: GroupVisibility;
     isActive: boolean;
+    groupMinMembers?: number;
+    groupMaxMembers?: number;
+    groupMaxUnitsPerMember?: number;
+    groupRequiredMemberIds?: string[];
+    groupDiscountPercent?: number;
     isFeatured: boolean;
     storeId?: string;
     brandSlug?: string;

package/dist/features/homepage/actions/homepage-section-actions.d.ts

@@ -2,17 +2,17 @@ import { z } from "zod";
 import type { HomepageSectionDocument } from "../schemas";
 import type { FirebaseSieveResult } from "../../../providers/db-firebase";
 export declare const createSectionSchema: z.ZodObject<{
-    type: z.ZodEnum<["welcome", "carousel", "stats", "trust-indicators", "categories", "brands", "products", "pre-orders", "auctions", "banner", "features", "reviews", "whatsapp-community", "faq", "blog-articles", "newsletter", "stores", "events", "social-feed", "custom-cards", "google-reviews", "featured-bundles", "prize-draws", "event-raffles", "collection-cards"]>;
+    type: z.ZodEnum<[import("../schemas").SectionType, ...import("../schemas").SectionType[]]>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     order: z.ZodDefault<z.ZodNumber>;
     config: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
-    type: "banner" | "stores" | "products" | "pre-orders" | "prize-draws" | "auctions" | "reviews" | "events" | "categories" | "brands" | "carousel" | "newsletter" | "features" | "stats" | "welcome" | "trust-indicators" | "whatsapp-community" | "faq" | "blog-articles" | "social-feed" | "custom-cards" | "google-reviews" | "featured-bundles" | "event-raffles" | "collection-cards";
+    type: import("../schemas").SectionType;
     enabled: boolean;
     order: number;
     config?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
-    type: "banner" | "stores" | "products" | "pre-orders" | "prize-draws" | "auctions" | "reviews" | "events" | "categories" | "brands" | "carousel" | "newsletter" | "features" | "stats" | "welcome" | "trust-indicators" | "whatsapp-community" | "faq" | "blog-articles" | "social-feed" | "custom-cards" | "google-reviews" | "featured-bundles" | "event-raffles" | "collection-cards";
+    type: import("../schemas").SectionType;
     enabled?: boolean | undefined;
     order?: number | undefined;
     config?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;

package/dist/features/homepage/api/carousel/[id]/route.js

@@ -88,7 +88,7 @@ export const carouselItemPATCH = createRouteHandler({
         if (patch.active === true && !slide.active) {
             const active = await repo.findAll({
                 filters: "active==true",
-                perPage: MAX_ACTIVE_SLIDES + 1,
+                pageSize: MAX_ACTIVE_SLIDES + 1,
             });
             if (active.data.length >= MAX_ACTIVE_SLIDES) {
                 return NextResponse.json({

package/dist/features/homepage/api/carousel/route.js

@@ -59,7 +59,7 @@ export async function GET(request) {
             const result = await repo.findAll({
                 sort: "order",
                 order: "asc",
-                perPage: 100,
+                pageSize: 100,
             });
             slides = result.data;
         }
@@ -68,7 +68,7 @@ export async function GET(request) {
                 filters: "active==true",
                 sort: "order",
                 order: "asc",
-                perPage: MAX_ACTIVE_SLIDES,
+                pageSize: MAX_ACTIVE_SLIDES,
             });
             slides = result.data.slice(0, MAX_ACTIVE_SLIDES);
         }
@@ -129,7 +129,7 @@ export const carouselPOST = createRouteHandler({
         // Guard: max 5 active slides
         const active = await repo.findAll({
             filters: "active==true",
-            perPage: MAX_ACTIVE_SLIDES + 1,
+            pageSize: MAX_ACTIVE_SLIDES + 1,
         });
         const incoming = body;
         if (incoming.active !== false && active.data.length >= MAX_ACTIVE_SLIDES) {
@@ -141,7 +141,7 @@ export const carouselPOST = createRouteHandler({
         const existing = await repo.findAll({
             sort: "order",
             order: "desc",
-            perPage: 1,
+            pageSize: 1,
         });
         const maxOrder = existing.data[0]?.order ?? -1;
         const now = new Date().toISOString();

package/dist/features/homepage/components/AnnouncementBar.d.ts

@@ -11,13 +11,5 @@ export interface AnnouncementBarProps {
     className?: string;
     /** Called when the user dismisses — consumer wires this to a server action to persist. */
     onDismiss?: (hash: string) => void;
-    /**
-     * Renders as a translucent, backdrop-blurred strip pinned to the top edge
-     * of the nearest positioned ancestor, instead of the default full-bleed
-     * in-flow bar. Used on the homepage to overlay the banner over the first
-     * section (e.g. the Welcome hero) rather than pushing it down with extra
-     * vertical space.
-     */
-    overlay?: boolean;
 }
-export declare function AnnouncementBar({ message, link, className, onDismiss, overlay }: AnnouncementBarProps): React.JSX.Element | null;
+export declare function AnnouncementBar({ message, link, className, onDismiss }: AnnouncementBarProps): React.JSX.Element | null;