@mohasinac/appkit 4.63.3 → 4.63.4

package/dist/.build-stamp.json

@@ -1,8 +1,8 @@
 {
   "stampVersion": 1,
-  "version": "4.63.3",
-  "head": "aea6affd6821cc7b43256c25614e42422df7177c",
+  "version": "4.63.4",
+  "head": "75f5bc368ad0433147e270c708aed152c9952ce0",
   "branch": "main",
   "dirty": false,
-  "builtAt": "2026-10-23T10:12:11.248Z"
+  "builtAt": "2026-10-23T12:57:38.033Z"
 }

package/dist/_internal/server/features/promotions/adapters.d.ts

@@ -0,0 +1,25 @@
+import type { CouponDocument } from "../../../../features/promotions/schemas";
+import type { AttachedCoupon } from "../../../../features/promotions/constants/attached-coupons";
+/**
+ * `CouponDocument` → the public `AttachedCoupon` shape.
+ *
+ * 🛑 Built field by field. Never `{ ...doc }` with deletes — that publishes
+ * every key nobody thought to remove, including ones the interface does not
+ * declare, which is exactly how `adSettings.providerCredentials` and a
+ * decrypted WhatsApp token reached public HTML (Root Cause #70).
+ *
+ * Deliberately NOT carried across, each for its own reason:
+ *   usage.*        — `currentUsage` / `totalLimit` is redemption telemetry;
+ *                    a reader who learns a code is near its cap learns
+ *                    nothing useful and the seller loses a lever.
+ *   analytics.*    — `totalRevenue` / `totalDiscount` is seller revenue.
+ *   restrictions.* — `applicableProducts` / `excludeCategories` is the
+ *                    coupon's internal targeting; checkout enforces it and
+ *                    says so there, in context, against a real cart.
+ *   createdBy      — a uid.
+ *   scope/storeId  — not rendered; see the note in AttachedCouponsSection
+ *                    about why the card does not label a seller.
+ *   bxgy/tiers     — structured configs with no renderer; adding one is a
+ *                    feature, not a projection decision.
+ */
+export declare function toAttachedCoupon(doc: CouponDocument): AttachedCoupon;

package/dist/_internal/server/features/promotions/adapters.js

@@ -0,0 +1,43 @@
+/**
+ * `CouponDocument` → the public `AttachedCoupon` shape.
+ *
+ * 🛑 Built field by field. Never `{ ...doc }` with deletes — that publishes
+ * every key nobody thought to remove, including ones the interface does not
+ * declare, which is exactly how `adSettings.providerCredentials` and a
+ * decrypted WhatsApp token reached public HTML (Root Cause #70).
+ *
+ * Deliberately NOT carried across, each for its own reason:
+ *   usage.*        — `currentUsage` / `totalLimit` is redemption telemetry;
+ *                    a reader who learns a code is near its cap learns
+ *                    nothing useful and the seller loses a lever.
+ *   analytics.*    — `totalRevenue` / `totalDiscount` is seller revenue.
+ *   restrictions.* — `applicableProducts` / `excludeCategories` is the
+ *                    coupon's internal targeting; checkout enforces it and
+ *                    says so there, in context, against a real cart.
+ *   createdBy      — a uid.
+ *   scope/storeId  — not rendered; see the note in AttachedCouponsSection
+ *                    about why the card does not label a seller.
+ *   bxgy/tiers     — structured configs with no renderer; adding one is a
+ *                    feature, not a projection decision.
+ */
+export function toAttachedCoupon(doc) {
+    return {
+        id: doc.id,
+        code: doc.code,
+        name: doc.name,
+        description: doc.description,
+        type: doc.type,
+        discountValue: doc.discount.value,
+        maxDiscount: doc.discount.maxDiscount,
+        minPurchase: doc.discount.minPurchase,
+        /*
+         * ISO, not a `Date`. This crosses a Server → Client Component boundary and
+         * a `Date` survives that only because Next serialises it; an ISO string is
+         * the shape the renderer actually wants and removes the question.
+         *
+         * 🛑 Absent means NO END DATE, never "expired". A renderer that treats a
+         * missing `endsAt` as expired hides every open-ended coupon.
+         */
+        endsAt: doc.validity.endDate ? new Date(doc.validity.endDate).toISOString() : undefined,
+    };
+}

package/dist/_internal/server/features/promotions/data.d.ts

@@ -1 +1,27 @@
+import type { AttachedCoupon } from "../../../../features/promotions/constants/attached-coupons";
 export declare const getCouponByCode: (code: string) => Promise<import("../../../..").CouponDocument | null>;
+/**
+ * Resolve the coupons a piece of content has attached, ready to render.
+ *
+ * Shared by the event detail page and the blog post page — one implementation,
+ * because two hand-rolled copies of "read the ids, drop the dead ones, project"
+ * is how a fix lands on the route and never reaches the SSR view that
+ * duplicates it (Root Cause #59/#99).
+ *
+ * 🛑 `cache`d because the page body and `generateMetadata` may both want it.
+ * Keyed on the argument list, so callers must pass the SAME array contents —
+ * which they do, both reading `doc.couponIds`.
+ *
+ * 🛑 EXPIRED AND INACTIVE COUPONS ARE DROPPED HERE, not in the renderer.
+ * A blog post from March that still advertises a code which now errors at
+ * checkout is worse than one that advertises nothing: the reader does the
+ * work of copying it and is refused at the till. `isCouponValid` is the same
+ * predicate checkout applies (active + inside its window + under its total
+ * limit), so the page cannot promise what the till will decline.
+ *
+ * It does NOT check `perUserLimit` — that is per-reader and unknowable on a
+ * cached public page. A reader who has personally exhausted a still-valid
+ * coupon is refused at checkout with a message that can explain why; that is
+ * the correct place for it.
+ */
+export declare const getAttachedCoupons: (couponIds: readonly string[] | undefined) => Promise<AttachedCoupon[]>;

package/dist/_internal/server/features/promotions/data.js

@@ -1,5 +1,50 @@
 import { cache } from "react";
 import { couponsRepository } from "../../../../repositories/index.js";
+import { isCouponValid } from "../../../../features/promotions/schemas/index.js";
+import { toAttachedCoupon } from "./adapters.js";
+import { safeRead } from "../../../../errors/safe-read.js";
 export const getCouponByCode = cache(async (code) => {
     return (await couponsRepository.getCouponByCode(code)) ?? null;
 });
+/**
+ * Resolve the coupons a piece of content has attached, ready to render.
+ *
+ * Shared by the event detail page and the blog post page — one implementation,
+ * because two hand-rolled copies of "read the ids, drop the dead ones, project"
+ * is how a fix lands on the route and never reaches the SSR view that
+ * duplicates it (Root Cause #59/#99).
+ *
+ * 🛑 `cache`d because the page body and `generateMetadata` may both want it.
+ * Keyed on the argument list, so callers must pass the SAME array contents —
+ * which they do, both reading `doc.couponIds`.
+ *
+ * 🛑 EXPIRED AND INACTIVE COUPONS ARE DROPPED HERE, not in the renderer.
+ * A blog post from March that still advertises a code which now errors at
+ * checkout is worse than one that advertises nothing: the reader does the
+ * work of copying it and is refused at the till. `isCouponValid` is the same
+ * predicate checkout applies (active + inside its window + under its total
+ * limit), so the page cannot promise what the till will decline.
+ *
+ * It does NOT check `perUserLimit` — that is per-reader and unknowable on a
+ * cached public page. A reader who has personally exhausted a still-valid
+ * coupon is refused at checkout with a message that can explain why; that is
+ * the correct place for it.
+ */
+export const getAttachedCoupons = cache(async (couponIds) => {
+    if (!couponIds || couponIds.length === 0)
+        return [];
+    /*
+     * `safeRead`, so a Firestore hiccup (or a missing index on a cold
+     * collection) costs the page its coupon strip and not the whole render.
+     * These pages are prerendered, and an unguarded throw during the
+     * prerender ATTEMPT is fatal to the production build — see the dashboard
+     * note in § SSR Architecture. The failure is recorded as a DEGRADED_READ
+     * rather than swallowed, which is the distinction Root Cause #59 is about.
+     */
+    const docs = await safeRead(() => couponsRepository.findByIds([...couponIds]), {
+        route: "content.attachedCoupons",
+        key: "promotions.findByIds",
+        fallback: [],
+    });
+    return docs.filter(isCouponValid).map(toAttachedCoupon);
+});

package/dist/_internal/server/features/promotions/index.d.ts

@@ -1,4 +1,5 @@
-export { getCouponByCode } from "./data";
+export { getCouponByCode, getAttachedCoupons } from "./data";
+export { toAttachedCoupon } from "./adapters";
 export { validateCoupon, computeDiscount } from "./service";
 export { applyCouponAction, createCouponAction, updateCouponAction, deactivateCouponAction } from "./actions";
 export { COUPONS_PAGE_SIZE, COUPON_CODE_MAX_LENGTH } from "../../../shared/features/promotions/config";

package/dist/_internal/server/features/promotions/index.js

@@ -1,4 +1,5 @@
-export { getCouponByCode } from "./data.js";
+export { getCouponByCode, getAttachedCoupons } from "./data.js";
+export { toAttachedCoupon } from "./adapters.js";
 export { validateCoupon, computeDiscount } from "./service.js";
 export { applyCouponAction, createCouponAction, updateCouponAction, deactivateCouponAction } from "./actions.js";
 export { COUPONS_PAGE_SIZE, COUPON_CODE_MAX_LENGTH } from "../../../shared/features/promotions/config.js";

package/dist/_internal/server/jobs/core/triggerEventRaffle.js

@@ -41,6 +41,7 @@ import { EVENT_ENTRY_FIELDS, EVENT_FIELDS } from "../../../../constants/field-na
 import { EVENT_ENTRY_PII_FIELDS, maskPii } from "../../../../security/index.js";
 import { resolveEventRef } from "./_event-ref.js";
 import { EVENT_DRAW_REASON } from "./event-draw-reasons.js";
+import { rafflePrizeCouponIdsOf } from "../../../../features/events/schemas/firestore.js";
 /**
  * The winner's display name, masked for a PUBLIC announcement.
  *
@@ -158,22 +159,51 @@ export async function runTriggerEventRaffle(input, ctx) {
      * re-deriving it. Resolution is best-effort: a missing coupon must not cost
      * somebody their win.
      */
-    let rafflePrizeCouponCode;
-    if (event.rafflePrizeCouponId) {
-        const coupSnap = await ctx.db
-            .collection(COUPONS_COLLECTION)
-            .doc(event.rafflePrizeCouponId)
-            .get();
-        if (coupSnap.exists) {
-            rafflePrizeCouponCode = coupSnap.data().code;
-        }
-        else {
-            ctx.logger.warn("Raffle prize couponId does not resolve to a coupon", {
-                eventId,
-                couponId: event.rafflePrizeCouponId,
-            });
+    /*
+     * 🛑 Through `rafflePrizeCouponIdsOf`, so an event written before the
+     * widening — carrying only the deprecated scalar — still awards its prize.
+     * Reading `rafflePrizeCouponIds` alone would silently hand those winners
+     * nothing, and a raffle that draws a winner and awards no prize is a bug
+     * with no error and no second chance: the draw is irreversible.
+     */
+    const prizeCouponIds = rafflePrizeCouponIdsOf(event);
+    const rafflePrizeCouponCodes = [];
+    if (prizeCouponIds.length > 0) {
+        /*
+         * ONE `getAll` for all of them, not a loop of `.get()`. This runs inside a
+         * Cloud Function rather than a Vercel route, so it is not against Rule #6's
+         * 10s ceiling — but it sits immediately before a transaction, and holding
+         * N sequential round trips open there widens the window in which a
+         * concurrent draw can collide.
+         */
+        const refs = prizeCouponIds.map((id) => ctx.db.collection(COUPONS_COLLECTION).doc(id));
+        const snaps = await ctx.db.getAll(...refs);
+        for (const snap of snaps) {
+            if (snap.exists) {
+                const code = snap.data().code;
+                if (code)
+                    rafflePrizeCouponCodes.push(code);
+            }
+            else {
+                /*
+                 * Best-effort, per coupon: one deleted coupon must not cost the
+                 * winner the other prizes, and must not cost them the win at all.
+                 * Warned rather than thrown for exactly that reason.
+                 */
+                ctx.logger.warn("Raffle prize couponId does not resolve to a coupon", {
+                    eventId,
+                    couponId: snap.id,
+                });
+            }
         }
     }
+    /*
+     * The first code is still written to the singular `rafflePrizeCouponCode`
+     * the winner page already reads, so that page keeps working untouched while
+     * the full list lands beside it. Dropping the scalar would blank the prize
+     * on every existing winner announcement.
+     */
+    const rafflePrizeCouponCode = rafflePrizeCouponCodes[0];
     /*
      * 🛑 The one-draw invariant. Re-read the event INSIDE the transaction.
      *
@@ -209,6 +239,7 @@ export async function runTriggerEventRaffle(input, ctx) {
             [EVENT_FIELDS.RAFFLE_TRIGGERED_AT]: ctx.now,
             [EVENT_FIELDS.RAFFLE_ENTRY_COUNT]: entriesSnap.size,
             ...(rafflePrizeCouponCode ? { rafflePrizeCouponCode } : {}),
+            ...(rafflePrizeCouponCodes.length > 0 ? { rafflePrizeCouponCodes } : {}),
             [EVENT_FIELDS.RAFFLE_GITHUB_FUNCTION_URL]: `${ctx.env("PROOF_OF_FAIRNESS_BASE_URL") ?? ""}/raffles/${eventId}.json`,
             [EVENT_FIELDS.UPDATED_AT]: ctx.now,
         });

package/dist/constants/field-names.d.ts

@@ -382,11 +382,15 @@ export declare const EVENT_FIELDS: {
     readonly ENDS_AT: "endsAt";
     readonly CREATED_BY: "createdBy";
     readonly STATS: "stats";
+    /** Promotional coupons shown on the event page — not prizes. */
+    readonly COUPON_IDS: "couponIds";
     readonly HAS_RAFFLE: "hasRaffle";
     readonly RAFFLE_TYPE: "raffleType";
     readonly RAFFLE_TOP_N: "raffleTopN";
     readonly RAFFLE_PRIZE: "rafflePrize";
+    /** @deprecated legacy scalar — resolve via `rafflePrizeCouponIdsOf`. */
     readonly RAFFLE_PRIZE_COUPON_ID: "rafflePrizeCouponId";
+    readonly RAFFLE_PRIZE_COUPON_IDS: "rafflePrizeCouponIds";
     readonly RAFFLE_GITHUB_FUNCTION_URL: "raffleGithubFunctionUrl";
     readonly RAFFLE_WINNER_USER_ID: "raffleWinnerUserId";
     readonly RAFFLE_WINNER_DISPLAY_NAME: "raffleWinnerDisplayName";

package/dist/constants/field-names.js

@@ -436,12 +436,16 @@ export const EVENT_FIELDS = {
     ENDS_AT: "endsAt",
     CREATED_BY: "createdBy",
     STATS: "stats",
+    /** Promotional coupons shown on the event page — not prizes. */
+    COUPON_IDS: "couponIds",
     // Raffle fields (SB9)
     HAS_RAFFLE: "hasRaffle",
     RAFFLE_TYPE: "raffleType",
     RAFFLE_TOP_N: "raffleTopN",
     RAFFLE_PRIZE: "rafflePrize",
+    /** @deprecated legacy scalar — resolve via `rafflePrizeCouponIdsOf`. */
     RAFFLE_PRIZE_COUPON_ID: "rafflePrizeCouponId",
+    RAFFLE_PRIZE_COUPON_IDS: "rafflePrizeCouponIds",
     RAFFLE_GITHUB_FUNCTION_URL: "raffleGithubFunctionUrl",
     RAFFLE_WINNER_USER_ID: "raffleWinnerUserId",
     RAFFLE_WINNER_DISPLAY_NAME: "raffleWinnerDisplayName",

package/dist/features/account/components/UserSidebar.js

@@ -97,7 +97,7 @@ export function UserSidebar({ items, groups, mobileOpen = false, onCloseMobile,
     // ── Persistent sidebar variant (desktop left slide-over, mobile bottom-sheet) ──────
     if (variant === "sidebar") {
         const handleToggle = onToggle ?? close;
-        return (_jsxs(_Fragment, { children: [_jsxs(Div, { className: `hidden lg:flex fixed ${rail.edgeClass} z-40 transition-transform duration-300 top-[var(--header-height,3.5rem)] h-[calc(100vh-var(--header-height,3.5rem))] w-[13rem] ${desktopOpen ? "translate-x-0" : rail.collapsedTranslateClass}`, children: [_jsxs(Stack, { border: "default", surface: "default", className: `flex-1 ${rail.borderClass} dark:border-[var(--appkit-color-border)] ${__O.hidden}`, shadow: "xl", children: [_jsx(Div, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", children: _jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: "My Account" }) }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: _jsx(DrawerContent, { groups: groups, items: items, activeHref: pathname }) }), renderFooter && _jsx(Div, { border: "top", padding: "inline", children: renderFooter() })] }), _jsx(SidebarCollapseToggle, { expanded: desktopOpen, onToggle: handleToggle, edge: hand })] }), _jsx(Div, { className: "lg:hidden", children: _jsx(BottomSheet, { open: mobileOpen, onClose: close, title: "My Account", children: _jsx(DrawerContent, { groups: groups, items: items, activeHref: pathname, onItemClick: close }) }) })] }));
+        return (_jsxs(_Fragment, { children: [_jsxs(Div, { className: `hidden lg:flex fixed ${rail.edgeClass} z-40 transition-transform duration-300 top-[var(--header-height,3.5rem)] h-[calc(100vh-var(--header-height,3.5rem))] w-[18rem] ${desktopOpen ? "translate-x-0" : rail.collapsedTranslateClass}`, children: [_jsxs(Stack, { border: "default", surface: "default", className: `flex-1 ${rail.borderClass} dark:border-[var(--appkit-color-border)] ${__O.hidden}`, shadow: "xl", children: [_jsx(Div, { border: "bottom-subtle", paddingY: "y-sm-tall", className: "shrink-0", padding: "x-md", children: _jsx(Span, { size: "xs", weight: "semibold", transform: "uppercase", color: "muted", children: "My Account" }) }), _jsx(Div, { className: `flex-1 ${__O.yAuto}`, children: _jsx(DrawerContent, { groups: groups, items: items, activeHref: pathname }) }), renderFooter && _jsx(Div, { border: "top", padding: "inline", children: renderFooter() })] }), _jsx(SidebarCollapseToggle, { expanded: desktopOpen, onToggle: handleToggle, edge: hand })] }), _jsx(Div, { className: "lg:hidden", children: _jsx(BottomSheet, { open: mobileOpen, onClose: close, title: "My Account", children: _jsx(DrawerContent, { groups: groups, items: items, activeHref: pathname, onItemClick: close }) }) })] }));
     }
     // ── Overlay variant (default) — portal on desktop, bottom-sheet on mobile ─
     const content = (_jsx(DrawerContent, { groups: groups, items: items, activeHref: pathname, onItemClick: close }));

package/dist/features/admin/components/AdminBlogEditorView.js

@@ -10,6 +10,8 @@ import { ImageUpload, MediaImage, useMediaUpload } from "../../media/index.js";
 import { apiClient } from "../../../http/index.js";
 import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { blogDraftSchema } from "../../blog/schemas/blog-form.js";
+import { CouponInlineSelect } from "../../seller/components/CouponInlineSelect.js";
+import { ATTACHED_COUPON_MAX } from "../../promotions/constants/attached-coupons.js";
 import { SectionForm, useSectionFormNav } from "../../shell/index.js";
 const __P = {
     p4: "p-[var(--appkit-space-4)]",
@@ -39,6 +41,7 @@ const DEFAULT_DRAFT = {
     youtubeId: "",
     category: "news",
     tags: [],
+    couponIds: [],
     status: "published",
     isFeatured: true,
     authorName: "Admin",
@@ -103,6 +106,7 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             youtubeId: p.youtubeId ?? "",
             category: p.category ?? "news",
             tags: Array.isArray(p.tags) ? p.tags : [],
+            couponIds: Array.isArray(p.couponIds) ? p.couponIds : [],
             status: p.status ?? "published",
             isFeatured: p.isFeatured ?? true,
             authorName: p.authorName ?? "Admin",
@@ -125,6 +129,10 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
                 youtubeId: draft.youtubeId || undefined,
                 category: draft.category,
                 tags: draft.tags,
+                // Unconditional, `[]` included — see the matching note in the event
+                // editor: a key omitted when empty cannot clear the stored array,
+                // because the route merges.
+                couponIds: draft.couponIds,
                 status: draft.status,
                 isFeatured: draft.isFeatured,
                 authorName: draft.authorName,
@@ -236,8 +244,8 @@ export function AdminBlogEditorView({ postId, onSaved, onDeleted, embedded, ...r
             id: "publish",
             label: "Publish",
             quick: true,
-            fields: ["status", "publishedAt", "authorName", "isFeatured"],
-            render: ({ values, onChange, errors }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Publish Settings" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Status", error: errors.status, options: STATUS_OPTIONS, value: values.status, onValueChange: (v) => onChange({ status: v }) }), _jsx(Input, { label: "Publish date (optional)", error: errors.publishedAt, value: values.publishedAt, onChange: (e) => onChange({ publishedAt: e.target.value }), type: "date", helperText: "Auto-set to now when publishing." })] }), _jsx(Input, { label: "Author Name", error: errors.authorName, value: values.authorName, onChange: (e) => onChange({ authorName: e.target.value }), placeholder: "Author display name" }), _jsx(Toggle, { label: "Featured post", checked: values.isFeatured, onChange: (checked) => onChange({ isFeatured: checked }) }), isEdit && (_jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: _jsx(Button, { type: "button", variant: "danger", size: "sm", onClick: () => setShowDeleteConfirm(true), isLoading: deleteMutation.isPending, children: "Delete post" }) }))] })),
+            fields: ["status", "publishedAt", "authorName", "isFeatured", "couponIds"],
+            render: ({ values, onChange, errors }) => (_jsxs(Stack, { gap: "5", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Publish Settings" }), _jsxs(Div, { layout: "grid", gap: "4", className: "grid-cols-2", children: [_jsx(Select, { label: "Status", error: errors.status, options: STATUS_OPTIONS, value: values.status, onValueChange: (v) => onChange({ status: v }) }), _jsx(Input, { label: "Publish date (optional)", error: errors.publishedAt, value: values.publishedAt, onChange: (e) => onChange({ publishedAt: e.target.value }), type: "date", helperText: "Auto-set to now when publishing." })] }), _jsx(Input, { label: "Author Name", error: errors.authorName, value: values.authorName, onChange: (e) => onChange({ authorName: e.target.value }), placeholder: "Author display name" }), _jsx(Toggle, { label: "Featured post", checked: values.isFeatured, onChange: (checked) => onChange({ isFeatured: checked }) }), _jsxs(Div, { children: [_jsx(Text, { className: "mb-1.5", size: "sm", weight: "medium", children: "Coupons (optional)" }), _jsx(CouponInlineSelect, { scope: "admin", multiple: true, value: values.couponIds, onChange: (ids) => onChange({ couponIds: ids }), placeholder: "Search coupons to feature in this post\u2026", allowCreate: false }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)] mt-1", size: "xs", children: ["Shown as copyable code cards below the article. Up to ", ATTACHED_COUPON_MAX, ". Expired and deactivated coupons are hidden automatically, so an old post never advertises a dead code."] })] }), isEdit && (_jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-md", children: _jsx(Button, { type: "button", variant: "danger", size: "sm", onClick: () => setShowDeleteConfirm(true), isLoading: deleteMutation.isPending, children: "Delete post" }) }))] })),
         },
     ];
     const deleteModal = (_jsx(ConfirmDeleteModal, { isOpen: showDeleteConfirm, onConfirm: () => {

package/dist/features/blog/schemas/blog-form.d.ts

@@ -48,6 +48,7 @@ export declare const blogDraftSchema: z.ZodObject<{
     authorName: z.ZodString;
     isFeatured: z.ZodBoolean;
     isPinned: z.ZodBoolean;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     status: "published" | "draft" | "archived";
     title: string;
@@ -64,6 +65,7 @@ export declare const blogDraftSchema: z.ZodObject<{
     isPinned: boolean;
     metaTitle: string;
     metaDescription: string;
+    couponIds?: string[] | undefined;
 }, {
     status: "published" | "draft" | "archived";
     title: string;
@@ -80,4 +82,5 @@ export declare const blogDraftSchema: z.ZodObject<{
     isPinned: boolean;
     metaTitle: string;
     metaDescription: string;
+    couponIds?: string[] | undefined;
 }>;

package/dist/features/blog/schemas/blog-form.js

@@ -20,6 +20,7 @@
 import { z } from "zod";
 import { annotate } from "../../shell/field-ui-meta.js";
 import { blogPostCategorySchema } from "./index.js";
+import { attachedCouponIdsSchema } from "../../promotions/schemas/attached-coupons.js";
 /**
  * The blog form's own schema. Distinct from `blogPostSchema` (blog/schemas),
  * which requires an `id` this draft cannot have before its first save and
@@ -98,4 +99,17 @@ export const blogDraftSchema = z.object({
     authorName: annotate(z.string(), { section: "publish", order: 3, row: "pair" }),
     isFeatured: annotate(z.boolean(), { section: "publish", order: 4, row: "quarter" }),
     isPinned: annotate(z.boolean(), { section: "publish", order: 5, row: "quarter" }),
+    /*
+     * 🛑 Declared here even though the picker enforces the cap in the UI, and
+     * this file's own header says why: `z.object()` STRIPS unknown keys, so a
+     * field missing from this schema is silently dropped on every save — the
+     * form would show the coupons, accept the edit, and persist nothing. Same
+     * shape as the grouped-listings PATCH in Root Cause #76(b).
+     *
+     * The cap is `attachedCouponIdsSchema`'s, imported rather than re-stated, so
+     * the form and the route cannot disagree about what "too many" means.
+     */
+    couponIds: annotate(attachedCouponIdsSchema, {
+        section: "publish", order: 6, row: "full", kind: "list",
+    }),
 });

package/dist/features/blog/schemas/firestore.d.ts

@@ -28,6 +28,22 @@ export interface BlogPostDocument extends BaseDocument {
     youtubeId?: string;
     category: BlogPostCategory;
     tags: string[];
+    /**
+     * PROMOTIONAL coupons shown below the article for a reader to copy.
+     *
+     * Mirrors `EventDocument.couponIds` exactly — same name, same shape, same
+     * `<AttachedCouponsSection>` renderer, same `getAttachedCoupons` resolver.
+     * That symmetry is the point: "attach coupons to content" is one feature
+     * with two hosts, not two features that happen to look alike.
+     *
+     * 🛑 OPTIONAL, unlike `isPinned` above, and for a reason worth keeping
+     * straight: `isPinned` had to be required because it is an `orderBy` field
+     * and Firestore excludes a document that lacks one (Root Cause #100).
+     * `couponIds` is never sorted or filtered on — it is read only after a post
+     * has already been fetched by slug — so an absent field costs nothing and
+     * needs no backfill across the 21 existing posts.
+     */
+    couponIds?: string[];
     isFeatured: boolean;
     /**
      * Keeps the post at the top of the blog index and the homepage
@@ -90,6 +106,7 @@ export declare const BLOG_POST_FIELDS: {
     readonly YOUTUBE_ID: "youtubeId";
     readonly CATEGORY: "category";
     readonly TAGS: "tags";
+    readonly COUPON_IDS: "couponIds";
     readonly IS_FEATURED: "isFeatured";
     readonly IS_PINNED: "isPinned";
     readonly STATUS: "status";

package/dist/features/blog/schemas/firestore.js

@@ -50,6 +50,7 @@ export const BLOG_POST_FIELDS = {
     YOUTUBE_ID: "youtubeId",
     CATEGORY: "category",
     TAGS: "tags",
+    COUPON_IDS: "couponIds",
     IS_FEATURED: "isFeatured",
     IS_PINNED: "isPinned",
     STATUS: "status",

package/dist/features/blog/schemas/index.d.ts

@@ -98,6 +98,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     }>, "many">>;
     category: z.ZodString;
     tags: z.ZodArray<z.ZodString, "many">;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
     isFeatured: z.ZodBoolean;
     isPinned: z.ZodBoolean;
     status: z.ZodEnum<["draft", "published", "archived"]>;
@@ -139,6 +140,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     publishedAt?: string | Date | z.objectOutputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    couponIds?: string[] | undefined;
     coverImage?: {
         type: "video" | "image" | "file";
         url: string;
@@ -193,6 +195,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     publishedAt?: string | Date | z.objectInputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    couponIds?: string[] | undefined;
     coverImage?: {
         type: "video" | "image" | "file";
         url: string;
@@ -345,6 +348,7 @@ export declare const blogPostSchema: z.ZodObject<{
     }>, "many">>>;
     category: z.ZodEnum<["news", "tips", "guides", "updates", "community"]>;
     tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
     isFeatured: z.ZodOptional<z.ZodBoolean>;
     isPinned: z.ZodOptional<z.ZodBoolean>;
     status: z.ZodEnum<["draft", "published", "archived"]>;
@@ -400,6 +404,7 @@ export declare const blogPostSchema: z.ZodObject<{
     publishedAt?: string | undefined;
     views?: number | undefined;
     tags?: string[] | undefined;
+    couponIds?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     authorId?: string | undefined;
@@ -421,6 +426,7 @@ export declare const blogPostSchema: z.ZodObject<{
     publishedAt?: string | undefined;
     views?: number | undefined;
     tags?: string[] | undefined;
+    couponIds?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: string | {

package/dist/features/blog/schemas/index.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { mediaUrlSchema } from "../../../validation/schemas.js";
 import { mediaFieldSchema } from "../../media/types/index.js";
 import { auditTimestampsShape, firestoreDateSchema } from "../../../schemas/firestore-helpers.js";
+import { attachedCouponIdsSchema } from "../../promotions/schemas/attached-coupons.js";
 // ─── Firestore document schema (W2) ───────────────────────────────────────────
 // Mirrors BlogPostDocument in ./firestore.ts. Registered into SCHEMAS.firestore.blogPosts.
 export const blogPostStatusEnumSchema = z.enum(["draft", "published", "archived"]);
@@ -17,6 +18,7 @@ export const blogPostFirestoreSchema = z.object({
     additionalImages: z.array(mediaFieldSchema).optional(),
     category: z.string(),
     tags: z.array(z.string()),
+    couponIds: attachedCouponIdsSchema,
     isFeatured: z.boolean(),
     isPinned: z.boolean(),
     status: blogPostStatusEnumSchema,
@@ -72,6 +74,7 @@ export const blogPostSchema = z.object({
     additionalImages: z.array(mediaFieldSchema).max(5).optional().default([]),
     category: blogPostCategorySchema,
     tags: z.array(z.string()).optional(),
+    couponIds: attachedCouponIdsSchema,
     isFeatured: z.boolean().optional(),
     isPinned: z.boolean().optional(),
     status: blogPostStatusSchema,

package/dist/features/blog/types/index.d.ts

@@ -14,6 +14,8 @@ export interface BlogPost {
     youtubeId?: string;
     category: BlogPostCategory;
     tags?: string[];
+    /** Promotional coupons shown below the article — see `BlogPostDocument.couponIds`. */
+    couponIds?: string[];
     isFeatured?: boolean;
     /** Keeps the post above newer ones on the blog index and homepage. */
     isPinned?: boolean;