@mohasinac/appkit 2.6.2 → 2.6.4

package/dist/_internal/shared/listing-types/action-tracker.js

@@ -0,0 +1,70 @@
+/**
+ * Action telemetry sink — SB-UNI-X5 2026-05-13.
+ *
+ * Pure-JS wrapper that Phase 7 (W-1 CTA registry) extends. Today the sink
+ * is a no-op in development and a structured-event emitter in production
+ * (writes to the `events` analytics stream OR an external sink configured
+ * via env). The Phase 7 `<Button action={...}>` extension calls
+ * `actionTracker.emit(action.id, ctx, success)` on click + outcome.
+ *
+ * Designed so a future telemetry consumer (Sentry, GA, custom) drops in by
+ * replacing the `sink` impl via `setActionTrackerSink`. Default sink is
+ * environment-aware:
+ *   - SSR / Node + `NODE_ENV !== "production"` → console.debug
+ *   - Browser + `NODE_ENV === "production"` → POST to /api/telemetry/actions
+ *     (no-op when the endpoint isn't deployed yet — silently logs to console)
+ *
+ * Pattern 7 from the SB-UNI future-expansion plan.
+ */
+function defaultSink(event) {
+    if (typeof window === "undefined") {
+        // SSR / Node — best-effort console log; production servers can swap
+        // the sink to a real logger via `setActionTrackerSink`.
+        // eslint-disable-next-line no-console
+        if (process.env.NODE_ENV !== "production") {
+            console.debug("[action-tracker]", event);
+        }
+        return;
+    }
+    // Browser. In production we'd POST to a telemetry endpoint when it's
+    // deployed; for now stay silent in prod to avoid 404 noise + dev-mode
+    // logs surface the events.
+    if (process.env.NODE_ENV !== "production") {
+        // eslint-disable-next-line no-console
+        console.debug("[action-tracker]", event);
+    }
+}
+let currentSink = defaultSink;
+export const actionTracker = {
+    /**
+     * Emit an action event. Designed to be fire-and-forget — never throws,
+     * never blocks the caller. Consumers wrap critical paths in try/catch
+     * even though sinks must self-handle errors.
+     */
+    emit(actionId, ctx, success) {
+        const event = {
+            actionId,
+            ctx,
+            success,
+            timestamp: new Date().toISOString(),
+        };
+        try {
+            const result = currentSink(event);
+            // Swallow promise rejections so the caller path is never affected.
+            if (result && typeof result.catch === "function") {
+                result.catch(() => { });
+            }
+        }
+        catch {
+            // Intentionally swallowed — telemetry must never break callers.
+        }
+    },
+};
+/** Replace the default sink — useful for Sentry/GA/custom telemetry. */
+export function setActionTrackerSink(sink) {
+    currentSink = sink;
+}
+/** Restore the default sink. Mostly for tests. */
+export function resetActionTrackerSink() {
+    currentSink = defaultSink;
+}

package/dist/_internal/shared/listing-types/capabilities.js

@@ -43,6 +43,31 @@ export const LISTING_TYPE_CAPABILITIES = {
         requiresJurisdictionCheck: false,
         hasInstantFulfillment: false,
     },
+    // SB-UNI-F 2026-05-13 — Phase 2 union extension.
+    classified: {
+        canAddToCart: false, // chat-only (OLX / Facebook Marketplace pattern)
+        canBid: false,
+        supportsShipping: false, // local meetup; shipping is a "negotiable" flag, not a flow
+        requiresVendorVerified: false,
+        requiresJurisdictionCheck: false,
+        hasInstantFulfillment: false,
+    },
+    "digital-code": {
+        canAddToCart: true,
+        canBid: false,
+        supportsShipping: false, // codes delivered electronically — no address
+        requiresVendorVerified: false,
+        requiresJurisdictionCheck: false,
+        hasInstantFulfillment: true, // atomic code claim at order paid
+    },
+    live: {
+        canAddToCart: true, // but jurisdictionAllowed must include buyer's state
+        canBid: false,
+        supportsShipping: true, // physical, often via specialised carrier
+        requiresVendorVerified: true,
+        requiresJurisdictionCheck: true,
+        hasInstantFulfillment: false,
+    },
 };
 export function capabilityFor(type) {
     return LISTING_TYPE_CAPABILITIES[type];

package/dist/_internal/shared/listing-types/cart-shipping.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Cart-level shipping-requirement helpers — SB-UNI-S 2026-05-13.
+ *
+ * Reads `supportsShipping` / `hasInstantFulfillment` / `canAddToCart` off
+ * the capability registry for every cart item and answers three questions:
+ *
+ *  - `cartRequiresShipping(items)` — does ANY line need a shipping address?
+ *    If true, the checkout flow MUST collect an address and the order
+ *    record persists it. If false, the checkout flow can skip the address
+ *    step entirely (digital-code-only carts).
+ *
+ *  - `cartIsDigitalOnly(items)` — does EVERY line have
+ *    `hasInstantFulfillment === true`? If true, the order detail page
+ *    surfaces the reveal/claim flow inline and the buyer gets a digital
+ *    receipt with no shipping tracking.
+ *
+ *  - `cartIsChatOnly(items)` — does EVERY line have
+ *    `canAddToCart === false`? Lets the cart UI surface "this product
+ *    can only be reached via chat" when classified items somehow make it
+ *    through (defence-in-depth — addToCart already rejects them).
+ *
+ * Used by both checkout server actions (skip address validation when
+ * `!cartRequiresShipping(items)`) and the cart/checkout UI (collapse the
+ * address-picker step in the same case).
+ */
+import type { ListingType } from "../../../features/products/types/index";
+interface CartItemLike {
+    listingType?: ListingType;
+}
+/** True when AT LEAST ONE line in the cart needs a shipping address. */
+export declare function cartRequiresShipping(items: CartItemLike[]): boolean;
+/** True when EVERY line in the cart fulfills instantly (digital-code-only carts). */
+export declare function cartIsDigitalOnly(items: CartItemLike[]): boolean;
+/** True when EVERY line is chat-only (`canAddToCart === false`). Used to
+ *  surface "this product can only be reached via chat" at the cart UI. */
+export declare function cartIsChatOnly(items: CartItemLike[]): boolean;
+export {};

package/dist/_internal/shared/listing-types/cart-shipping.js

@@ -0,0 +1,46 @@
+/**
+ * Cart-level shipping-requirement helpers — SB-UNI-S 2026-05-13.
+ *
+ * Reads `supportsShipping` / `hasInstantFulfillment` / `canAddToCart` off
+ * the capability registry for every cart item and answers three questions:
+ *
+ *  - `cartRequiresShipping(items)` — does ANY line need a shipping address?
+ *    If true, the checkout flow MUST collect an address and the order
+ *    record persists it. If false, the checkout flow can skip the address
+ *    step entirely (digital-code-only carts).
+ *
+ *  - `cartIsDigitalOnly(items)` — does EVERY line have
+ *    `hasInstantFulfillment === true`? If true, the order detail page
+ *    surfaces the reveal/claim flow inline and the buyer gets a digital
+ *    receipt with no shipping tracking.
+ *
+ *  - `cartIsChatOnly(items)` — does EVERY line have
+ *    `canAddToCart === false`? Lets the cart UI surface "this product
+ *    can only be reached via chat" when classified items somehow make it
+ *    through (defence-in-depth — addToCart already rejects them).
+ *
+ * Used by both checkout server actions (skip address validation when
+ * `!cartRequiresShipping(items)`) and the cart/checkout UI (collapse the
+ * address-picker step in the same case).
+ */
+import { capabilityFor } from "./capabilities";
+function getCap(item) {
+    return capabilityFor(item.listingType ?? "standard");
+}
+/** True when AT LEAST ONE line in the cart needs a shipping address. */
+export function cartRequiresShipping(items) {
+    return items.some((it) => getCap(it).supportsShipping);
+}
+/** True when EVERY line in the cart fulfills instantly (digital-code-only carts). */
+export function cartIsDigitalOnly(items) {
+    if (items.length === 0)
+        return false;
+    return items.every((it) => getCap(it).hasInstantFulfillment);
+}
+/** True when EVERY line is chat-only (`canAddToCart === false`). Used to
+ *  surface "this product can only be reached via chat" at the cart UI. */
+export function cartIsChatOnly(items) {
+    if (items.length === 0)
+        return false;
+    return items.every((it) => !getCap(it).canAddToCart);
+}

package/dist/_internal/shared/listing-types/classified/config.d.ts

@@ -0,0 +1,7 @@
+export declare const LISTING_TYPE: "classified";
+export declare const capability: import("../capabilities").ListingTypeCapability;
+export declare const config: {
+    listingType: "classified";
+    slugPrefix: string;
+    cartLine: "blocked";
+};

package/dist/_internal/shared/listing-types/classified/config.js

@@ -0,0 +1,8 @@
+import { LISTING_TYPE_CAPABILITIES } from "../capabilities";
+export const LISTING_TYPE = "classified";
+export const capability = LISTING_TYPE_CAPABILITIES.classified;
+export const config = {
+    listingType: LISTING_TYPE,
+    slugPrefix: "classified-",
+    cartLine: "blocked",
+};

package/dist/_internal/shared/listing-types/classified/ctas.d.ts

@@ -0,0 +1 @@
+export declare const ctas: readonly string[];

package/dist/_internal/shared/listing-types/classified/ctas.js

@@ -0,0 +1,3 @@
+// SB-UNI X2 — placeholder for classified-listing CTA list.
+// SB-UNI-M (Phase 5) wires the "Contact Seller" → conversations flow.
+export const ctas = [];

package/dist/_internal/shared/listing-types/classified/og.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/classified/og.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/classified/schema.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/classified/schema.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/classified/seed-factory.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/classified/seed-factory.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/config.d.ts

@@ -0,0 +1,7 @@
+export declare const LISTING_TYPE: "digital-code";
+export declare const capability: import("../capabilities").ListingTypeCapability;
+export declare const config: {
+    listingType: "digital-code";
+    slugPrefix: string;
+    cartLine: "single-product";
+};

package/dist/_internal/shared/listing-types/digital-code/config.js

@@ -0,0 +1,8 @@
+import { LISTING_TYPE_CAPABILITIES } from "../capabilities";
+export const LISTING_TYPE = "digital-code";
+export const capability = LISTING_TYPE_CAPABILITIES["digital-code"];
+export const config = {
+    listingType: LISTING_TYPE,
+    slugPrefix: "digitalcode-",
+    cartLine: "single-product",
+};

package/dist/_internal/shared/listing-types/digital-code/ctas.d.ts

@@ -0,0 +1 @@
+export declare const ctas: readonly string[];

package/dist/_internal/shared/listing-types/digital-code/ctas.js

@@ -0,0 +1,3 @@
+// SB-UNI X2 — placeholder for digital-code listing CTA list.
+// SB-UNI-N (Phase 5) reveal flow + ctas land here.
+export const ctas = [];

package/dist/_internal/shared/listing-types/digital-code/og.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/og.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/schema.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/schema.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/seed-factory.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/digital-code/seed-factory.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/feature-flags.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Listing-type / category-type feature flag helpers — SB-UNI-X4 2026-05-13.
+ *
+ * Reads from `siteSettings.featureFlags.{listingTypes,categoryTypes}` and
+ * collapses missing fields to a "type is enabled" default. The capability
+ * registry decides what each type CAN do; these flags decide whether the
+ * site exposes the type at all.
+ *
+ * Consumer pattern:
+ *   const settings = await siteSettingsRepository.findById("global");
+ *   if (!isListingTypeEnabled("classified", settings)) return null;
+ *
+ * Future-expansion Pattern 5. Slots with Phase 7 (CTA registry consults the
+ * same flag to hide actions for disabled types).
+ */
+import type { ListingType } from "../../../features/products/types/index";
+import type { CategoryType } from "../../../features/categories/types/index";
+interface FeatureFlagSnapshot {
+    featureFlags?: {
+        listingTypes?: Partial<Record<ListingType, boolean>>;
+        categoryTypes?: Partial<Record<CategoryType, boolean>>;
+    };
+}
+/**
+ * `true` when the type is missing from the flag map OR explicitly enabled.
+ * Defaulting to enabled keeps legacy data working — a flag has to be
+ * EXPLICITLY set to `false` to disable a type.
+ */
+export declare function isListingTypeEnabled(type: ListingType, settings: FeatureFlagSnapshot | null | undefined): boolean;
+export declare function isCategoryTypeEnabled(type: CategoryType, settings: FeatureFlagSnapshot | null | undefined): boolean;
+/** Pull the full list of enabled listing types in canonical iteration order. */
+export declare function enabledListingTypes(settings: FeatureFlagSnapshot | null | undefined): ListingType[];
+export declare function enabledCategoryTypes(settings: FeatureFlagSnapshot | null | undefined): CategoryType[];
+export {};

package/dist/_internal/shared/listing-types/feature-flags.js

@@ -0,0 +1,45 @@
+/**
+ * Listing-type / category-type feature flag helpers — SB-UNI-X4 2026-05-13.
+ *
+ * Reads from `siteSettings.featureFlags.{listingTypes,categoryTypes}` and
+ * collapses missing fields to a "type is enabled" default. The capability
+ * registry decides what each type CAN do; these flags decide whether the
+ * site exposes the type at all.
+ *
+ * Consumer pattern:
+ *   const settings = await siteSettingsRepository.findById("global");
+ *   if (!isListingTypeEnabled("classified", settings)) return null;
+ *
+ * Future-expansion Pattern 5. Slots with Phase 7 (CTA registry consults the
+ * same flag to hide actions for disabled types).
+ */
+/**
+ * `true` when the type is missing from the flag map OR explicitly enabled.
+ * Defaulting to enabled keeps legacy data working — a flag has to be
+ * EXPLICITLY set to `false` to disable a type.
+ */
+export function isListingTypeEnabled(type, settings) {
+    const flag = settings?.featureFlags?.listingTypes?.[type];
+    return flag !== false;
+}
+export function isCategoryTypeEnabled(type, settings) {
+    const flag = settings?.featureFlags?.categoryTypes?.[type];
+    return flag !== false;
+}
+/** Pull the full list of enabled listing types in canonical iteration order. */
+export function enabledListingTypes(settings) {
+    const all = [
+        "standard",
+        "auction",
+        "pre-order",
+        "prize-draw",
+        "classified",
+        "digital-code",
+        "live",
+    ];
+    return all.filter((t) => isListingTypeEnabled(t, settings));
+}
+export function enabledCategoryTypes(settings) {
+    const all = ["category", "sublisting", "brand", "bundle"];
+    return all.filter((t) => isCategoryTypeEnabled(t, settings));
+}

package/dist/_internal/shared/listing-types/live/config.d.ts

@@ -0,0 +1,7 @@
+export declare const LISTING_TYPE: "live";
+export declare const capability: import("../capabilities").ListingTypeCapability;
+export declare const config: {
+    listingType: "live";
+    slugPrefix: string;
+    cartLine: "single-product";
+};

package/dist/_internal/shared/listing-types/live/config.js

@@ -0,0 +1,8 @@
+import { LISTING_TYPE_CAPABILITIES } from "../capabilities";
+export const LISTING_TYPE = "live";
+export const capability = LISTING_TYPE_CAPABILITIES.live;
+export const config = {
+    listingType: LISTING_TYPE,
+    slugPrefix: "live-",
+    cartLine: "single-product",
+};

package/dist/_internal/shared/listing-types/live/ctas.d.ts

@@ -0,0 +1 @@
+export declare const ctas: readonly string[];

package/dist/_internal/shared/listing-types/live/ctas.js

@@ -0,0 +1,3 @@
+// SB-UNI X2 — placeholder for live-listing CTA list.
+// SB-UNI-O (Phase 5) jurisdiction + transport flow ctas land here.
+export const ctas = [];

package/dist/_internal/shared/listing-types/live/og.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/live/og.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/live/schema.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/live/schema.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/live/seed-factory.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/listing-types/live/seed-factory.js

@@ -0,0 +1 @@
+export {};

package/dist/_internal/shared/media/limits.js

@@ -91,6 +91,14 @@ export const VIDEO_CONVERSION_HINTS = {
     "video/mp2t": "M2TS/TS streams are not supported — please convert to MP4",
     "video/x-flv": "FLV is not supported — please convert to MP4",
     "video/x-ms-wmv": "WMV is not supported — please convert to MP4",
+    // SB-UNI-Z4 2026-05-13 — HEVC / H.265 + HEIC/HEIF preview hint. The bytes
+    // upload fine via the signed-URL flow; the issue is in-browser preview —
+    // most browsers can't decode HEVC inline without an OS codec license.
+    "video/hevc": "HEVC (H.265) video is accepted but doesn't preview in most browsers — please convert to MP4 (H.264) or WebM for in-browser playback",
+    "video/x-hevc": "HEVC (H.265) video is accepted but doesn't preview in most browsers — please convert to MP4 (H.264) or WebM for in-browser playback",
+    "video/H265": "HEVC (H.265) video is accepted but doesn't preview in most browsers — please convert to MP4 (H.264) or WebM for in-browser playback",
+    "image/heic": "HEIC image is accepted but doesn't preview in most browsers — please convert to JPEG or WebP for inline preview",
+    "image/heif": "HEIF image is accepted but doesn't preview in most browsers — please convert to JPEG or WebP for inline preview",
 };
 export function getConversionHint(mime) {
     return VIDEO_CONVERSION_HINTS[mime] ?? null;

package/dist/client.d.ts

@@ -174,7 +174,12 @@ export { useHistory, useHistoryMergeOnLogin, getGuestHistory, trackGuestHistory,
 export type { GuestHistoryItem, GuestHistoryType, UserHistoryItem, HistoryProductType, HistoryItemSnapshot, } from "./features/history/index";
 export type { TrackArgs as TrackHistoryArgs } from "./features/history/hooks/useHistory";
 export { WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, } from "./constants/limits";
-export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, } from "./features/products/utils/listing-type";
+export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, isPrizeDrawListing, isClassifiedListing, isDigitalCodeListing, isLiveListing, } from "./features/products/utils/listing-type";
+export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, } from "./_internal/shared/listing-types/feature-flags";
+export { actionTracker, setActionTrackerSink, resetActionTrackerSink, type ActionEvent, type ActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker";
+export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
+export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, type ActionDef, type ActionKind, type ActionResource, type ActionTree, type ActionConfirmation, } from "./_internal/shared/actions/action-registry";
+export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, } from "./features/auth/role-predicates";
 export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/layout/index";
 export type { DashboardLayoutClientProps, RoleGuardProps, } from "./_internal/client/features/layout/index";
 export type { LayoutBreakpoint, DashboardVariant, LayoutRole, SidebarNavItem, SidebarNavGroup, MainNavItem as LayoutMainNavItem, BrandingConfig, FooterConfig, SectionResponsive, SectionTheming, LayoutConfig, DashboardLayoutConfig, } from "./_internal/shared/features/layout/index";

package/dist/client.js

@@ -197,7 +197,20 @@ export { SCAM_PLATFORM_LABELS, ScamPlatformValues, } from "./features/scams/sche
 export { useHistory, useHistoryMergeOnLogin, getGuestHistory, trackGuestHistory, removeGuestHistoryItem, clearGuestHistory, getGuestHistoryCount, HistoryTracker, } from "./features/history/index";
 export { WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, } from "./constants/limits";
 // SB1-G canonical listing-type accessors (pure functions, client-safe).
-export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, } from "./features/products/utils/listing-type";
+// SB-UNI-F 2026-05-13 — Phase 2 predicates surfaced through client barrel.
+export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, isPrizeDrawListing, isClassifiedListing, isDigitalCodeListing, isLiveListing, } from "./features/products/utils/listing-type";
+// SB-UNI-X4 2026-05-13 — per-type feature-flag helpers (client-safe).
+export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, } from "./_internal/shared/listing-types/feature-flags";
+// SB-UNI-X5 2026-05-13 — action telemetry sink (client-safe; defaults to
+// a no-op + console.debug in dev).
+export { actionTracker, setActionTrackerSink, resetActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker";
+// SB-UNI-S 2026-05-13 — cart-level shipping-requirement helpers (client-safe).
+export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
+// SB-UNI-W-1 2026-05-13 — CTA action registry shell (client-safe).
+// Phase 7 W-2..W-4 sweeps fill the per-resource buckets surface by surface.
+export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, } from "./_internal/shared/actions/action-registry";
+// SB-UNI-E user-role predicates (pure functions, client-safe).
+export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, } from "./features/auth/role-predicates";
 // Layout feature — client islands (unifies admin/store/user dashboard layouts).
 export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/layout/index";
 // Listing-type capability registry — SB-UNI X1.

package/dist/configs/next.js

@@ -78,6 +78,13 @@ export function defineNextConfig(override = {}) {
         "/api/**": [
             "./node_modules/firebase-admin/lib/database/**",
             "./node_modules/firebase-admin/lib/esm/database/**",
+            "./node_modules/firebase-admin/lib/firestore/**",
+            "./node_modules/firebase-admin/lib/esm/firestore/**",
+            "./node_modules/firebase-admin/lib/auth/**",
+            "./node_modules/firebase-admin/lib/esm/auth/**",
+            "./node_modules/firebase-admin/lib/app/**",
+            "./node_modules/firebase-admin/lib/esm/app/**",
+            "./node_modules/@google-cloud/firestore/build/src/**",
         ],
     };
     const mergedOutputFileTracingIncludes = {

package/dist/constants/api-endpoints.d.ts

@@ -89,6 +89,7 @@ export declare const ADMIN_ENDPOINTS: {
     readonly EVENT_STATS: (id: string) => string;
     readonly EVENT_ENTRIES: (id: string) => string;
     readonly EVENT_ENTRY_BY_ID: (eventId: string, entryId: string) => string;
+    readonly EVENT_TRIGGER_RAFFLE: (id: string) => string;
     readonly COUPONS: "/api/admin/coupons";
     readonly COUPON_BY_ID: (id: string) => string;
     readonly SECTIONS: "/api/admin/sections";
@@ -176,6 +177,7 @@ export declare const EVENT_ENDPOINTS: {
     readonly BY_ID: (id: string) => string;
     readonly ENTRIES: (id: string) => string;
     readonly LEADERBOARD: (id: string, limit?: number) => string;
+    readonly SPIN: (id: string) => string;
 };
 export declare const FAQ_ENDPOINTS: {
     readonly LIST: "/api/faqs";
@@ -362,6 +364,7 @@ export declare const API_ENDPOINTS: {
         readonly EVENT_STATS: (id: string) => string;
         readonly EVENT_ENTRIES: (id: string) => string;
         readonly EVENT_ENTRY_BY_ID: (eventId: string, entryId: string) => string;
+        readonly EVENT_TRIGGER_RAFFLE: (id: string) => string;
         readonly COUPONS: "/api/admin/coupons";
         readonly COUPON_BY_ID: (id: string) => string;
         readonly SECTIONS: "/api/admin/sections";
@@ -452,6 +455,7 @@ export declare const API_ENDPOINTS: {
         readonly BY_ID: (id: string) => string;
         readonly ENTRIES: (id: string) => string;
         readonly LEADERBOARD: (id: string, limit?: number) => string;
+        readonly SPIN: (id: string) => string;
     };
     readonly FAQS: {
         readonly LIST: "/api/faqs";
@@ -637,6 +641,7 @@ export declare const API_ROUTES: {
         readonly EVENT_STATS: (id: string) => string;
         readonly EVENT_ENTRIES: (id: string) => string;
         readonly EVENT_ENTRY_BY_ID: (eventId: string, entryId: string) => string;
+        readonly EVENT_TRIGGER_RAFFLE: (id: string) => string;
         readonly COUPONS: "/api/admin/coupons";
         readonly COUPON_BY_ID: (id: string) => string;
         readonly SECTIONS: "/api/admin/sections";
@@ -727,6 +732,7 @@ export declare const API_ROUTES: {
         readonly BY_ID: (id: string) => string;
         readonly ENTRIES: (id: string) => string;
         readonly LEADERBOARD: (id: string, limit?: number) => string;
+        readonly SPIN: (id: string) => string;
     };
     readonly FAQS: {
         readonly LIST: "/api/faqs";

package/dist/constants/api-endpoints.js

@@ -107,6 +107,8 @@ export const ADMIN_ENDPOINTS = {
     EVENT_STATS: (id) => `/api/admin/events/${id}/stats`,
     EVENT_ENTRIES: (id) => `/api/admin/events/${id}/entries`,
     EVENT_ENTRY_BY_ID: (eventId, entryId) => `/api/admin/events/${eventId}/entries/${entryId}`,
+    // SB9-D — admin manual raffle trigger
+    EVENT_TRIGGER_RAFFLE: (id) => `/api/admin/events/${id}/trigger-raffle`,
     COUPONS: "/api/admin/coupons",
     COUPON_BY_ID: (id) => `/api/admin/coupons/${id}`,
     SECTIONS: "/api/admin/sections",
@@ -230,6 +232,8 @@ export const EVENT_ENDPOINTS = {
     BY_ID: (id) => `/api/events/${id}`,
     ENTRIES: (id) => `/api/events/${id}/entries`,
     LEADERBOARD: (id, limit) => `/api/events/${id}/leaderboard${limit !== undefined ? `?limit=${limit}` : ""}`,
+    // SB9-E user spin assignment
+    SPIN: (id) => `/api/events/${id}/spin`,
 };
 // ---------------------------------------------------------------------------
 // FAQ

package/dist/core/hooks/useSyncManager.js

@@ -14,6 +14,7 @@
  * The local store (guest-cart / guest-wishlist) is always the source of truth.
  */
 import { useEffect, useRef } from "react";
+import { useQueryClient } from "@tanstack/react-query";
 import { apiClient } from "../../http";
 import { getCartOps, clearCartOps, getWishlistOps, clearWishlistOps, } from "../../features/cart/utils/pending-ops";
 const SYNC_INTERVAL_MS = 30000;
@@ -61,6 +62,7 @@ async function replayWishlistOps() {
 }
 export function useSyncManager(userId) {
     const isSyncing = useRef(false);
+    const queryClient = useQueryClient();
     useEffect(() => {
         if (!userId)
             return; // Guest — keep ops in queue, don't sync
@@ -69,7 +71,17 @@ export function useSyncManager(userId) {
                 return;
             isSyncing.current = true;
             try {
+                const hadCartOps = getCartOps().length > 0;
+                const hadWishlistOps = getWishlistOps().length > 0;
                 await Promise.all([replayCartOps(), replayWishlistOps()]);
+                if (hadCartOps) {
+                    await queryClient.invalidateQueries({ queryKey: ["cart"] });
+                }
+                if (hadWishlistOps) {
+                    await queryClient.invalidateQueries({
+                        queryKey: ["wishlist", userId],
+                    });
+                }
             }
             finally {
                 isSyncing.current = false;
@@ -79,5 +91,5 @@ export function useSyncManager(userId) {
         sync();
         const id = setInterval(sync, SYNC_INTERVAL_MS);
         return () => clearInterval(id);
-    }, [userId]);
+    }, [userId, queryClient]);
 }

package/dist/core/unit-of-work.d.ts

@@ -2,7 +2,7 @@ import type { Transaction, WriteBatch } from "firebase-admin/firestore";
 export declare class UnitOfWork {
     private get db();
     get users(): import("..").UserRepository;
-    get addresses(): import("..").AddressRepository;
+    get addresses(): import("..").AddressesRepository;
     get tokens(): {
         email: import("..").EmailVerificationTokenRepository;
         password: import("..").PasswordResetTokenRepository;

package/dist/core/unit-of-work.js

@@ -3,7 +3,7 @@ const getAdminDb = () => module.require("../providers/db-firebase").getAdminDb()
 import { DatabaseError } from "../errors";
 import { serverLogger } from "../monitoring";
 import { userRepository, tokenRepository, sessionRepository, } from "../features/auth/repository";
-import { addressRepository } from "../features/account/repository/address.repository";
+import { addressesRepository } from "../features/addresses/repository/addresses.repository";
 import { cartRepository } from "../features/cart/repository/cart.repository";
 import { categoriesRepository } from "../features/categories/repository/categories.repository";
 import { productRepository } from "../features/products/repository/products.repository";
@@ -27,7 +27,7 @@ export class UnitOfWork {
         return userRepository;
     }
     get addresses() {
-        return addressRepository;
+        return addressesRepository;
     }
     get tokens() {
         return tokenRepository;

package/dist/features/account/actions/address-actions.d.ts

@@ -1,4 +1,4 @@
-import type { AddressCreateInput, AddressDocument, AddressUpdateInput } from "../schemas";
+import type { AddressCreateInput, AddressDocument, AddressUpdateInput } from "../../addresses/schemas";
 export declare function createAddressForUser(userId: string, input: AddressCreateInput): Promise<AddressDocument>;
 export declare function updateAddressForUser(userId: string, addressId: string, input: AddressUpdateInput): Promise<AddressDocument>;
 export declare function deleteAddressForUser(userId: string, addressId: string): Promise<void>;