feat(maison): Clude Maison auction house — lot 0047 + bidding API

[sebbsssss]

Summary

Ships the Sotheby's-style auction extension of clude.io as a self-contained vertical, mounted at /maison and backed by /api/maison/*. Single live lot (0047 — truth_terminal), USDC bids with optimistic UI + server-side persistence, transparent provenance + comparables.

Built from a Claude Design handoff bundle. The 1280px composition is preserved exactly; production hardening items are flagged.

What ships

Frontend — apps/web/public/maison/

• index.html fetches the lot from /api/maison/lot/0047 before mounting React; falls back to a bundled snapshot if the API is unreachable.
• palazzo.jsx — Bodoni + parchment + gilt. `PalazzoBidPanel` POSTs bids to the API, polls for competing bids every 8s, surfaces 409 "bid too low" errors, disables the modal during submission.
• lot-data.js — currency formatters, `LOT_FALLBACK` snapshot, `window.maisonApi.{fetchLot, placeBid, refreshBids}`.
• styles.css, assets/*.svg, fonts/Inconsolata-Variable.ttf — copied verbatim from the design bundle.

Backend — apps/server/src/routes/maison.routes.ts

• GET /api/maison/lot/:lotNumber — full lot data
• GET /api/maison/lot/:lotNumber/bids — live state only (for polling)
• POST /api/maison/lot/:lotNumber/bid — `{ amount, paddle }` (zod-validated)

Bid validation:

• Paddle limited to `[A-Za-z0-9 ()\-_]`, length ≤ 32
• `amount ≥ currentBid + bidIncrement` — 409 with canonical state for resync on collision
• 409 when `Date.now() > endsAt`
• Mounted behind the existing `apiLimiter` (200/min)

Routing — `/maison` and `/maison/` rewrite to `/maison/index.html` via the existing static-routes pattern. Subpaths served by the existing `express.static` mount on `apps/web/public/`.

Test plan

• 7/7 vitest tests pass — `apps/server/src/routes/tests/maison-routes.test.ts`
  • lot fetch (200 + 404)
  • live state polling
  • place valid bid + read-back
  • reject below increment
  • reject malformed payload
  • reject paddle with HTML injection chars
• `tsc --noEmit` clean across the repo
• Manual smoke on Railway preview: load `/maison`, place a bid, refresh, confirm persistence within the same instance lifetime
• Verify the engraved cortex SVG + Bodoni font + Inconsolata-from-fonts/ all load on first paint

Honest limits flagged for follow-up

Limit	Path forward
In-memory bid state — restart-wipes, single instance only	Supabase `auction_lots` + `auction_bids` migration; documented in the route file header
No wallet signature on POST /bid	Wallet-sig over `(lotNumber, amount, nonce)` verified server-side; `/api/wallet-auth` already exists
No settlement worker	Cron at `endsAt` to freeze state, kick USDC transfer, release transfer key
Babel-in-browser transpiles palazzo.jsx per page load	Pre-build to `dist/palazzo.js` via esbuild — fine for prototype, hardening item

Not landed here (deliberately)

• No landing-page link to `/maison`. The product is unannounced; nav inclusion held until the team calls go-live.
• No on-chain bid escrow. v1 is a UI prototype with persistent server state. Real settlement is its own design pass.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
cluude	Error		Apr 27, 2026 5:24pm