@mohasinac/appkit 4.71.2 → 4.73.0

package/dist/features/products/schemas/index.js

@@ -1,7 +1,6 @@
 export * from "./firestore.js";
 import { z } from "zod";
 import { mediaFieldSchema } from "../../media/types/index.js";
-import { ALL_LISTING_TYPES } from "../../../_internal/shared/listing-types/feature-flags.js";
 import { CLEARANCE_DURATION_DAYS_MIN, CLEARANCE_DURATION_DAYS_MAX, } from "../../../_internal/shared/checkout/rules/_limits.js";
 // --- Sub-schemas --------------------------------------------------------------
 export const productImageSchema = z.object({
@@ -54,7 +53,26 @@ export const printMetaSchema = z.object({
  * Registered in `audit-listing-type-tab-coverage`'s STAYS_DERIVED so nobody
  * re-expands it into a literal for readability.
  */
-const LISTING_TYPE_ENUM = z.enum(ALL_LISTING_TYPES);
+/*
+ * 🛑 OPEN, not a closed enum. Owner, 2026-11-08: *"nothing in the code should
+ * be fixed … the types we have now are the DEFAULT TEMPLATES"*, and listings
+ * were named explicitly alongside events, coupons and reviews.
+ *
+ * `ALL_LISTING_TYPES` stays the shipped template list — it still drives the
+ * admin picker, the seed and every default — but a site that wants a listing
+ * kind we never imagined adds a config row rather than waiting for a release.
+ *
+ * The SHAPE is still enforced, because this value becomes a URL segment, a
+ * Firestore query value and an index key: lowercase, digits, hyphen/underscore
+ * separated, 2-40 characters.
+ */
+const SLUG_RE = /^[a-z0-9]+(?:[-_][a-z0-9]+)*$/;
+const LISTING_TYPE_ENUM = z
+    .string()
+    .trim()
+    .min(2)
+    .max(40)
+    .regex(SLUG_RE, "Use a lowercase slug, e.g. art-and-stickers");
 export const productItemSchema = z.object({
     id: z.string(),
     title: z.string(),

package/dist/features/promotions/schemas/firestore.d.ts

@@ -181,7 +181,23 @@ export declare const COUPON_FIELDS: {
         readonly SELLER: "seller";
     };
 };
-export declare const COUPON_TYPE_LABELS: Record<CouponType, string>;
+/**
+ * Labels for the SHIPPED coupon types.
+ *
+ * 🛑 Since `CouponType` opened (2026-11-08) this is no longer exhaustive — a
+ * site-defined type has no entry here and a bare lookup yields `undefined`,
+ * which renders as an empty chip. Read it through `couponTypeLabel()`.
+ */
+export declare const COUPON_TYPE_LABELS: Record<string, string>;
+/**
+ * The label for a coupon type, with a readable fallback.
+ *
+ * An unknown type is a site-defined one, not an error: it renders its own slug
+ * de-slugged ("first_order" -> "First order") rather than blank. A coupon that
+ * shows no type at all is worse than one showing a plain name, and it must
+ * never throw on a checkout page.
+ */
+export declare function couponTypeLabel(type: string): string;
 export declare const DEFAULT_COUPON_DATA: Partial<CouponDocument>;
 export declare const COUPONS_PUBLIC_FIELDS: readonly ["id", "code", "name", "description", "type", "discount", "validity.startDate", "validity.endDate", "usage.totalLimit", "usage.perUserLimit"];
 export declare const COUPONS_UPDATABLE_FIELDS: readonly ["name", "description", "discount", "bxgy", "tiers", "usage", "validity", "restrictions"];

package/dist/features/promotions/schemas/firestore.js

@@ -55,6 +55,13 @@ export const COUPON_FIELDS = {
         SELLER: "seller",
     },
 };
+/**
+ * Labels for the SHIPPED coupon types.
+ *
+ * 🛑 Since `CouponType` opened (2026-11-08) this is no longer exhaustive — a
+ * site-defined type has no entry here and a bare lookup yields `undefined`,
+ * which renders as an empty chip. Read it through `couponTypeLabel()`.
+ */
 export const COUPON_TYPE_LABELS = {
     percentage: "Percentage Discount",
     fixed: "Fixed Amount Discount",
@@ -64,6 +71,21 @@ export const COUPON_TYPE_LABELS = {
     // our word for it; "Points back" is what appears on their balance.
     points_earn: "Points Back",
 };
+/**
+ * The label for a coupon type, with a readable fallback.
+ *
+ * An unknown type is a site-defined one, not an error: it renders its own slug
+ * de-slugged ("first_order" -> "First order") rather than blank. A coupon that
+ * shows no type at all is worse than one showing a plain name, and it must
+ * never throw on a checkout page.
+ */
+export function couponTypeLabel(type) {
+    const known = COUPON_TYPE_LABELS[type];
+    if (known)
+        return known;
+    const words = type.replace(/[-_]+/g, " ").trim();
+    return words ? words.charAt(0).toUpperCase() + words.slice(1) : type;
+}
 export const DEFAULT_COUPON_DATA = {
     usage: { currentUsage: 0 },
     validity: { isActive: true, startDate: new Date(), endDate: undefined },

package/dist/features/promotions/schemas/index.d.ts

@@ -1,6 +1,16 @@
 export * from "./firestore";
 import { z } from "zod";
-export declare const couponTypeEnumSchema: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+/**
+ * 🛑 OPEN, not a closed enum — the same change made to events and listings on
+ * 2026-11-08. The four below are the shipped DEFAULT TEMPLATES, kept as a named
+ * list so they stay discoverable in pickers and seeds.
+ *
+ * A site wanting a discount kind we do not ship — tiered, bundle, first-order —
+ * adds a coupon-type config row and a handler, rather than editing this file to
+ * ask permission.
+ */
+export declare const DEFAULT_COUPON_TYPE_TEMPLATES: readonly ["percentage", "fixed", "free_shipping", "buy_x_get_y"];
+export declare const couponTypeEnumSchema: z.ZodString;
 export declare const discountConfigSchema: z.ZodObject<{
     value: z.ZodNumber;
     maxDiscount: z.ZodOptional<z.ZodEffects<z.ZodNumber, number, number>>;
@@ -143,7 +153,7 @@ export declare const couponFirestoreSchema: z.ZodObject<{
     code: z.ZodString;
     name: z.ZodString;
     description: z.ZodString;
-    type: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+    type: z.ZodString;
     scope: z.ZodEnum<["admin", "seller"]>;
     storeId: z.ZodOptional<z.ZodString>;
     applicableToCollectorDrops: z.ZodOptional<z.ZodBoolean>;
@@ -274,7 +284,7 @@ export declare const couponFirestoreSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     code: string;
     id: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdAt: string | Date | z.objectOutputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
@@ -333,7 +343,7 @@ export declare const couponFirestoreSchema: z.ZodObject<{
 }, {
     code: string;
     id: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdAt: string | Date | z.objectInputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
@@ -414,7 +424,7 @@ export declare const couponCreateBodySchema: z.ZodEffects<z.ZodObject<{
     code: z.ZodString;
     name: z.ZodString;
     description: z.ZodDefault<z.ZodString>;
-    type: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+    type: z.ZodString;
     tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         minAmount: z.ZodEffects<z.ZodNumber, number, number>;
         discountValue: z.ZodNumber;
@@ -508,7 +518,7 @@ export declare const couponCreateBodySchema: z.ZodEffects<z.ZodObject<{
     createdBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     code: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdBy: string;
     name: string;
@@ -548,7 +558,7 @@ export declare const couponCreateBodySchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }, {
     code: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     name: string;
     discount: {
         value: number;
@@ -588,7 +598,7 @@ export declare const couponCreateBodySchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
 }>, {
     code: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdBy: string;
     name: string;
@@ -628,7 +638,7 @@ export declare const couponCreateBodySchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }, {
     code: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     name: string;
     discount: {
         value: number;
@@ -892,7 +902,7 @@ export declare const claimedCouponSourceSchema: z.ZodEnum<["manual", "promo", "s
 export declare const claimedCouponSnapshotSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
-    type: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+    type: z.ZodString;
     scope: z.ZodEnum<["admin", "seller"]>;
     storeId: z.ZodOptional<z.ZodString>;
     discount: z.ZodObject<{
@@ -931,7 +941,7 @@ export declare const claimedCouponSnapshotSchema: z.ZodObject<{
         excludeCategories?: string[] | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     name: string;
     scope: "seller" | "admin";
     discount: {
@@ -950,7 +960,7 @@ export declare const claimedCouponSnapshotSchema: z.ZodObject<{
     description?: string | undefined;
     storeId?: string | undefined;
 }, {
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     name: string;
     scope: "seller" | "admin";
     discount: {
@@ -978,7 +988,7 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
     couponSnapshot: z.ZodObject<{
         name: z.ZodString;
         description: z.ZodOptional<z.ZodString>;
-        type: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+        type: z.ZodString;
         scope: z.ZodEnum<["admin", "seller"]>;
         storeId: z.ZodOptional<z.ZodString>;
         discount: z.ZodObject<{
@@ -1017,7 +1027,7 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
             excludeCategories?: string[] | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
-        type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+        type: string;
         name: string;
         scope: "seller" | "admin";
         discount: {
@@ -1036,7 +1046,7 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
         description?: string | undefined;
         storeId?: string | undefined;
     }, {
-        type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+        type: string;
         name: string;
         scope: "seller" | "admin";
         discount: {
@@ -1099,7 +1109,7 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">;
     couponId: string;
     couponSnapshot: {
-        type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+        type: string;
         name: string;
         scope: "seller" | "admin";
         discount: {
@@ -1139,7 +1149,7 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">;
     couponId: string;
     couponSnapshot: {
-        type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+        type: string;
         name: string;
         scope: "seller" | "admin";
         discount: {
@@ -1169,7 +1179,21 @@ export declare const claimedCouponFirestoreSchema: z.ZodObject<{
 export type CouponFromSchema = z.infer<typeof couponFirestoreSchema>;
 export type CouponUsageFromSchema = z.infer<typeof couponUsageFirestoreSchema>;
 export type ClaimedCouponFromSchema = z.infer<typeof claimedCouponFirestoreSchema>;
-export declare const couponTypeSchema: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+/**
+ * 🛑 The SECOND coupon-type schema, and the 2026-11-08 pass MISSED it.
+ *
+ * `couponTypeEnumSchema` near the top of this file was opened that day;
+ * this one — same four values, different name, 290 lines further down — stayed
+ * closed, so coupons were still half-fixed. A re-measure on 11-09 found it.
+ *
+ * The lesson is the reason the acceptance test is a GREP and not a memory:
+ * opening "the enum" is not the same as opening every enum, and two schemas
+ * for one concept is exactly how a half-finished change hides.
+ *
+ * Both now accept a validated slug; the four values remain
+ * `DEFAULT_COUPON_TYPE_TEMPLATES` above.
+ */
+export declare const couponTypeSchema: z.ZodString;
 export declare const couponScopeSchema: z.ZodEnum<["admin", "seller"]>;
 /**
  * Base Zod schema for a coupon/promotion.
@@ -1188,7 +1212,7 @@ export declare const couponItemSchema: z.ZodObject<{
     code: z.ZodString;
     name: z.ZodString;
     description: z.ZodString;
-    type: z.ZodEnum<["percentage", "fixed", "free_shipping", "buy_x_get_y"]>;
+    type: z.ZodString;
     scope: z.ZodEnum<["admin", "seller"]>;
     discountValue: z.ZodNumber;
     minOrderAmount: z.ZodOptional<z.ZodNumber>;
@@ -1210,7 +1234,7 @@ export declare const couponItemSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     code: string;
     id: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdAt: string;
     updatedAt: string;
@@ -1234,7 +1258,7 @@ export declare const couponItemSchema: z.ZodObject<{
 }, {
     code: string;
     id: string;
-    type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
+    type: string;
     description: string;
     createdAt: string;
     updatedAt: string;

package/dist/features/promotions/schemas/index.js

@@ -7,12 +7,27 @@ import { auditTimestampsShape, firestoreDateSchema, rupeesSchema } from "../../.
 //   SCHEMAS.firestore.coupons
 //   SCHEMAS.firestore.couponUsage
 //   SCHEMAS.firestore.claimedCoupons
-export const couponTypeEnumSchema = z.enum([
+/**
+ * 🛑 OPEN, not a closed enum — the same change made to events and listings on
+ * 2026-11-08. The four below are the shipped DEFAULT TEMPLATES, kept as a named
+ * list so they stay discoverable in pickers and seeds.
+ *
+ * A site wanting a discount kind we do not ship — tiered, bundle, first-order —
+ * adds a coupon-type config row and a handler, rather than editing this file to
+ * ask permission.
+ */
+export const DEFAULT_COUPON_TYPE_TEMPLATES = [
     "percentage",
     "fixed",
     "free_shipping",
     "buy_x_get_y",
-]);
+];
+export const couponTypeEnumSchema = z
+    .string()
+    .trim()
+    .min(2)
+    .max(40)
+    .regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/, "Use a lowercase slug, e.g. first_order");
 export const discountConfigSchema = z.object({
     value: z.number(),
     maxDiscount: rupeesSchema.optional(),
@@ -263,12 +278,26 @@ export const claimedCouponFirestoreSchema = z.object({
     updatedAt: firestoreDateSchema,
 });
 // --- Sub-schemas --------------------------------------------------------------
-export const couponTypeSchema = z.enum([
-    "percentage",
-    "fixed",
-    "free_shipping",
-    "buy_x_get_y",
-]);
+/**
+ * 🛑 The SECOND coupon-type schema, and the 2026-11-08 pass MISSED it.
+ *
+ * `couponTypeEnumSchema` near the top of this file was opened that day;
+ * this one — same four values, different name, 290 lines further down — stayed
+ * closed, so coupons were still half-fixed. A re-measure on 11-09 found it.
+ *
+ * The lesson is the reason the acceptance test is a GREP and not a memory:
+ * opening "the enum" is not the same as opening every enum, and two schemas
+ * for one concept is exactly how a half-finished change hides.
+ *
+ * Both now accept a validated slug; the four values remain
+ * `DEFAULT_COUPON_TYPE_TEMPLATES` above.
+ */
+export const couponTypeSchema = z
+    .string()
+    .trim()
+    .min(2)
+    .max(40)
+    .regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/, "Use a lowercase slug, e.g. first_order");
 export const couponScopeSchema = z.enum(["admin", "seller"]);
 // --- Base item schema ---------------------------------------------------------
 /**

package/dist/features/promotions/types/index.d.ts

@@ -16,7 +16,7 @@ export type CouponType = "percentage" | "fixed" | "free_shipping" | "buy_x_get_y
  * `Record<CouponType, string>` — that is the point of declaring the union
  * first.
  */
- | "points_earn";
+ | "points_earn" | (string & {});
 export type CouponScope = "admin" | "seller";
 export interface CouponItem {
     id: string;

package/dist/features/reviews/schemas/index.d.ts

@@ -38,6 +38,7 @@ export declare const reviewFirestoreSchema: z.ZodObject<{
     productId: z.ZodString;
     productTitle: z.ZodString;
     listingType: z.ZodOptional<z.ZodString>;
+    reviewType: z.ZodOptional<z.ZodString>;
     storeId: z.ZodOptional<z.ZodString>;
     storeName: z.ZodOptional<z.ZodString>;
     userId: z.ZodString;
@@ -147,6 +148,7 @@ export declare const reviewFirestoreSchema: z.ZodObject<{
     sellerRepliedAt?: string | Date | z.objectOutputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    reviewType?: string | undefined;
 }, {
     title: string;
     id: string;
@@ -195,6 +197,7 @@ export declare const reviewFirestoreSchema: z.ZodObject<{
     sellerRepliedAt?: string | Date | z.objectInputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    reviewType?: string | undefined;
 }>;
 export type ReviewFromSchema = z.infer<typeof reviewFirestoreSchema>;
 export declare const reviewStatusSchema: z.ZodEnum<["pending", "approved", "rejected"]>;

package/dist/features/reviews/schemas/index.js

@@ -15,6 +15,31 @@ export const reviewFirestoreSchema = z.object({
     productId: z.string(),
     productTitle: z.string(),
     listingType: z.string().optional(),
+    /*
+     * The KIND of review — the config dimension reviews did not have.
+     *
+     * Owner, 2026-11-08, naming reviews alongside events, listings and coupons:
+     * *"nothing in the code should be fixed … the types we have now are the
+     * default templates"*. Reviews had no type at all, so every review was
+     * implicitly a product review and a site wanting seller reviews, unboxing
+     * reviews or a verified-buyer-only kind had nowhere to put it.
+     *
+     * An open validated slug, resolved against the review-type config: which
+     * rules apply (media allowed, moderation required, who may write one) is a
+     * rule set on that row, not a branch in this file.
+     *
+     * 🛑 `status` below is deliberately NOT opened. It is the moderation STATE
+     * MACHINE — pending/approved/rejected is machinery, not a user choice, and an
+     * unknown state would mean a review that no queue can ever clear. Types are
+     * config; lifecycle states are code.
+     */
+    reviewType: z
+        .string()
+        .trim()
+        .min(2)
+        .max(40)
+        .regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/, "Use a lowercase slug, e.g. seller-review")
+        .optional(),
     storeId: z.string().optional(),
     storeName: z.string().optional(),
     userId: z.string(),

package/dist/index.d.ts

@@ -2137,7 +2137,6 @@ export { PRODUCT_SORT_VALUES } from "./features/products/columns/index";
 export { PRODUCT_STATUS_OPTIONS } from "./features/products/components/ProductForm";
 export { PRODUCT_UPDATABLE_FIELDS } from "./features/products/schemas/firestore";
 export { PlaceBidForm } from "./features/products/components/PlaceBidForm";
-export { PreOrderDetailView } from "./features/products/components/PreOrderDetailView";
 export type { ClearanceListingViewProps } from "./features/products/components/ClearanceListingView";
 export { ClearanceIndexListing } from "./features/products/components/ClearanceIndexListing";
 export type { ClearanceIndexListingProps } from "./features/products/components/ClearanceIndexListing";
@@ -2234,7 +2233,6 @@ export type { BidHistoryProps } from "./features/products/components/BidHistory"
 export type { InteractiveProductCardProps } from "./features/products/components/InteractiveProductCard";
 export type { ListingType } from "./features/products/types/index";
 export type { PlaceBidFormProps } from "./features/products/components/PlaceBidForm";
-export type { PreOrderDetailViewProps } from "./features/products/components/PreOrderDetailView";
 export type { ProductAdminUpdateInput } from "./features/products/schemas/firestore";
 export type { ProductCondition } from "./features/products/types/index";
 export type { ProductCreateInput } from "./features/products/schemas/firestore";

package/dist/index.js

@@ -3971,9 +3971,6 @@ export { PRODUCT_UPDATABLE_FIELDS } from "./features/products/schemas/firestore.
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // PlaceBidForm - Component for place bid form.
 export { PlaceBidForm } from "./features/products/components/PlaceBidForm.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// PreOrderDetailView - Component for pre order detail view.
-export { PreOrderDetailView } from "./features/products/components/PreOrderDetailView.js";
 // [CLIENT]-Client toolbar+grid for clearance (SB4-F).
 export { ClearanceIndexListing } from "./features/products/components/ClearanceIndexListing.js";
 // [CLIENT]-Marketplace card for clearance (SB4-F).

package/dist/next/routing/portals.d.ts

@@ -91,6 +91,28 @@ export interface PortalDefinition {
  * point — it is data, editable without touching a mechanism.
  */
 export declare const PORTAL_DEFINITIONS: readonly PortalDefinition[];
+/**
+ * Hosts that are their OWN DEPLOYMENT, not a portal of this app.
+ *
+ * 🛑 A PORTAL and a DEPLOYMENT are not the same thing, and conflating them is
+ * how a subdomain ends up serving the wrong site:
+ *
+ *   portal      `admin.<domain>`  → THIS app, rewritten to `/admin`
+ *   deployment  `events.<domain>` → a DIFFERENT app, with its own build
+ *
+ * A deployment host must never be rewritten to a section here, and must never
+ * be 301'd to the canonical host either. If one of these hostnames reaches
+ * this app at all, the DNS or the platform mapping is wrong — redirecting it
+ * to www would hide that by silently serving the shop instead, which is
+ * exactly the failure CLAUDE.md records for `audit.` and `tools.` serving the
+ * main homepage as duplicate content.
+ *
+ * Listed as DATA for the same reason the portals are: adding `live.` or
+ * `media.` later is a row, not a code change.
+ */
+export declare const DEPLOYMENT_LABELS: readonly string[];
+/** Is this hostname a separate deployment rather than a portal of this app? */
+export declare function isDeploymentHost(hostname: string): boolean;
 /** Every route section a portal serves. Derived; never hand-maintained. */
 export declare const PORTAL_SECTIONS: readonly string[];
 /** True for a dev/preview origin that no public-host rule should police. */

package/dist/next/routing/portals.js

@@ -65,6 +65,42 @@ export const PORTAL_DEFINITIONS = [
      */
     { label: "auth", section: "/auth", roles: [], home: "/auth/login" },
 ];
+/**
+ * Hosts that are their OWN DEPLOYMENT, not a portal of this app.
+ *
+ * 🛑 A PORTAL and a DEPLOYMENT are not the same thing, and conflating them is
+ * how a subdomain ends up serving the wrong site:
+ *
+ *   portal      `admin.<domain>`  → THIS app, rewritten to `/admin`
+ *   deployment  `events.<domain>` → a DIFFERENT app, with its own build
+ *
+ * A deployment host must never be rewritten to a section here, and must never
+ * be 301'd to the canonical host either. If one of these hostnames reaches
+ * this app at all, the DNS or the platform mapping is wrong — redirecting it
+ * to www would hide that by silently serving the shop instead, which is
+ * exactly the failure CLAUDE.md records for `audit.` and `tools.` serving the
+ * main homepage as duplicate content.
+ *
+ * Listed as DATA for the same reason the portals are: adding `live.` or
+ * `media.` later is a row, not a code change.
+ */
+export const DEPLOYMENT_LABELS = [
+    "auth",
+    "wiki",
+    "tools",
+    "audit",
+    "events",
+    "blogs",
+    "live",
+    "media",
+    "help",
+    "chat",
+];
+/** Is this hostname a separate deployment rather than a portal of this app? */
+export function isDeploymentHost(hostname) {
+    const firstLabel = normalizeHostname(hostname).split(".")[0] ?? "";
+    return DEPLOYMENT_LABELS.includes(firstLabel);
+}
 /** Every route section a portal serves. Derived; never hand-maintained. */
 export const PORTAL_SECTIONS = PORTAL_DEFINITIONS.map((p) => p.section);
 /**
@@ -313,6 +349,13 @@ export function isOffCanonicalHost(hostname, canonicalHost) {
         return false;
     if (portalForHost(host))
         return false;
+    /*
+     * A deployment host is someone else's app. Redirecting it to the canonical
+     * shop would serve duplicate content under the wrong brand and mask a
+     * misrouted DNS record — see `DEPLOYMENT_LABELS`.
+     */
+    if (isDeploymentHost(host))
+        return false;
     if (isNonPublicHost(host))
         return false;
     return true;

package/dist/providers/db-firebase/admin.d.ts

@@ -47,6 +47,8 @@ export declare function getAdminAuth(): Auth;
  * second database — a second database is a split, not a copy.
  */
 export type DatabaseTarget = "shop" | "wiki";
+/** Which database this process is actually talking to, for logs and guards. */
+export declare function resolvedDatabaseId(target?: DatabaseTarget): string;
 export declare function getAdminDb(target?: DatabaseTarget): Firestore;
 /** The read-only wiki/tools database. Never used by the money path. */
 export declare function getWikiDb(): Firestore;

package/dist/providers/db-firebase/admin.js

@@ -157,11 +157,34 @@ export function getAdminAuth() {
     set("__mohasinac_firebase_admin_auth__", auth);
     return auth;
 }
-/** `undefined` means the `(default)` database, which is the shop. */
+/**
+ * `undefined` means the `(default)` database.
+ *
+ * 🛑 THE SHOP TARGET IS ENV-DRIVEN, and that is the whole point of this table.
+ *
+ * Owner, 2026-11-08: seeding and local work must not touch the live data —
+ * *"make the seeds be in the new db … and use that for local and testing while
+ * the live site still works on the original db"*.
+ *
+ * So production sets nothing and gets `(default)`; a developer or the seed CLI
+ * sets `FIREBASE_SHOP_DATABASE_ID=dev-db` in `.env.local` and every read and
+ * write in the process follows, because this is the ONE place a Firestore
+ * handle is constructed. There is no per-call database argument to forget.
+ *
+ * 🛑 `.env.local` is gitignored, so an unset variable means PRODUCTION. That is
+ * deliberate — the safe default for a deploy is the real database, and the
+ * dangerous direction (a developer silently writing to live) is the one that
+ * requires no action. Check this value before any destructive seed command;
+ * `seed-cli` prints the resolved database for exactly that reason.
+ */
 const DATABASE_IDS = {
-    shop: undefined,
+    shop: process.env.FIREBASE_SHOP_DATABASE_ID || undefined,
     wiki: process.env.FIREBASE_WIKI_DATABASE_ID || "wiki-db",
 };
+/** Which database this process is actually talking to, for logs and guards. */
+export function resolvedDatabaseId(target = "shop") {
+    return DATABASE_IDS[target] ?? "(default)";
+}
 /*
  * The global cache keys are a typed literal union, so these are spelled out
  * rather than built with a template — a computed key would not type-check and,