@mohasinac/appkit 2.6.3 → 2.6.5

package/dist/constants/api-endpoints.js

@@ -107,6 +107,8 @@ export const ADMIN_ENDPOINTS = {
     EVENT_STATS: (id) => `/api/admin/events/${id}/stats`,
     EVENT_ENTRIES: (id) => `/api/admin/events/${id}/entries`,
     EVENT_ENTRY_BY_ID: (eventId, entryId) => `/api/admin/events/${eventId}/entries/${entryId}`,
+    // SB9-D — admin manual raffle trigger
+    EVENT_TRIGGER_RAFFLE: (id) => `/api/admin/events/${id}/trigger-raffle`,
     COUPONS: "/api/admin/coupons",
     COUPON_BY_ID: (id) => `/api/admin/coupons/${id}`,
     SECTIONS: "/api/admin/sections",
@@ -230,6 +232,8 @@ export const EVENT_ENDPOINTS = {
     BY_ID: (id) => `/api/events/${id}`,
     ENTRIES: (id) => `/api/events/${id}/entries`,
     LEADERBOARD: (id, limit) => `/api/events/${id}/leaderboard${limit !== undefined ? `?limit=${limit}` : ""}`,
+    // SB9-E user spin assignment
+    SPIN: (id) => `/api/events/${id}/spin`,
 };
 // ---------------------------------------------------------------------------
 // FAQ

package/dist/core/hooks/useSyncManager.js

@@ -14,6 +14,7 @@
  * The local store (guest-cart / guest-wishlist) is always the source of truth.
  */
 import { useEffect, useRef } from "react";
+import { useQueryClient } from "@tanstack/react-query";
 import { apiClient } from "../../http";
 import { getCartOps, clearCartOps, getWishlistOps, clearWishlistOps, } from "../../features/cart/utils/pending-ops";
 const SYNC_INTERVAL_MS = 30000;
@@ -61,6 +62,7 @@ async function replayWishlistOps() {
 }
 export function useSyncManager(userId) {
     const isSyncing = useRef(false);
+    const queryClient = useQueryClient();
     useEffect(() => {
         if (!userId)
             return; // Guest — keep ops in queue, don't sync
@@ -69,7 +71,17 @@ export function useSyncManager(userId) {
                 return;
             isSyncing.current = true;
             try {
+                const hadCartOps = getCartOps().length > 0;
+                const hadWishlistOps = getWishlistOps().length > 0;
                 await Promise.all([replayCartOps(), replayWishlistOps()]);
+                if (hadCartOps) {
+                    await queryClient.invalidateQueries({ queryKey: ["cart"] });
+                }
+                if (hadWishlistOps) {
+                    await queryClient.invalidateQueries({
+                        queryKey: ["wishlist", userId],
+                    });
+                }
             }
             finally {
                 isSyncing.current = false;
@@ -79,5 +91,5 @@ export function useSyncManager(userId) {
         sync();
         const id = setInterval(sync, SYNC_INTERVAL_MS);
         return () => clearInterval(id);
-    }, [userId]);
+    }, [userId, queryClient]);
 }

package/dist/core/unit-of-work.d.ts

@@ -2,7 +2,7 @@ import type { Transaction, WriteBatch } from "firebase-admin/firestore";
 export declare class UnitOfWork {
     private get db();
     get users(): import("..").UserRepository;
-    get addresses(): import("..").AddressRepository;
+    get addresses(): import("..").AddressesRepository;
     get tokens(): {
         email: import("..").EmailVerificationTokenRepository;
         password: import("..").PasswordResetTokenRepository;

package/dist/core/unit-of-work.js

@@ -3,7 +3,7 @@ const getAdminDb = () => module.require("../providers/db-firebase").getAdminDb()
 import { DatabaseError } from "../errors";
 import { serverLogger } from "../monitoring";
 import { userRepository, tokenRepository, sessionRepository, } from "../features/auth/repository";
-import { addressRepository } from "../features/account/repository/address.repository";
+import { addressesRepository } from "../features/addresses/repository/addresses.repository";
 import { cartRepository } from "../features/cart/repository/cart.repository";
 import { categoriesRepository } from "../features/categories/repository/categories.repository";
 import { productRepository } from "../features/products/repository/products.repository";
@@ -27,7 +27,7 @@ export class UnitOfWork {
         return userRepository;
     }
     get addresses() {
-        return addressRepository;
+        return addressesRepository;
     }
     get tokens() {
         return tokenRepository;

package/dist/features/account/actions/address-actions.d.ts

@@ -1,4 +1,4 @@
-import type { AddressCreateInput, AddressDocument, AddressUpdateInput } from "../schemas";
+import type { AddressCreateInput, AddressDocument, AddressUpdateInput } from "../../addresses/schemas";
 export declare function createAddressForUser(userId: string, input: AddressCreateInput): Promise<AddressDocument>;
 export declare function updateAddressForUser(userId: string, addressId: string, input: AddressUpdateInput): Promise<AddressDocument>;
 export declare function deleteAddressForUser(userId: string, addressId: string): Promise<void>;

package/dist/features/account/actions/address-actions.js

@@ -1,24 +1,32 @@
+// SB-UNI-A 2026-05-13 — thin shim re-pointing the legacy `*ForUser` action
+// surface at the unified `addressesRepository` (ownerType:"user"). Kept so
+// existing callers (src/actions/address.actions.ts, _internal data layer)
+// don't need to update.
 import { serverLogger } from "../../../monitoring";
-import { addressRepository } from "../repository/address.repository";
+import { addressesRepository } from "../../addresses/repository/addresses.repository";
 export async function createAddressForUser(userId, input) {
     serverLogger.debug("createAddressForUser", { userId });
-    return addressRepository.create(userId, input);
+    return addressesRepository.createForOwner("user", userId, input);
 }
 export async function updateAddressForUser(userId, addressId, input) {
     serverLogger.debug("updateAddressForUser", { userId, addressId });
-    return addressRepository.update(userId, addressId, input);
+    return addressesRepository.updateForOwner("user", userId, addressId, input);
 }
 export async function deleteAddressForUser(userId, addressId) {
     serverLogger.debug("deleteAddressForUser", { userId, addressId });
-    return addressRepository.delete(userId, addressId);
+    return addressesRepository.deleteForOwner("user", userId, addressId);
 }
 export async function setDefaultAddressForUser(userId, addressId) {
     serverLogger.debug("setDefaultAddressForUser", { userId, addressId });
-    return addressRepository.setDefault(userId, addressId);
+    return addressesRepository.setDefault("user", userId, addressId);
 }
 export async function listAddressesForUser(userId) {
-    return addressRepository.findByUser(userId);
+    return addressesRepository.listByOwner("user", userId);
 }
 export async function getAddressByIdForUser(userId, addressId) {
-    return addressRepository.findById(userId, addressId);
+    const address = await addressesRepository.findById(addressId);
+    if (!address || address.ownerType !== "user" || address.ownerId !== userId) {
+        return null;
+    }
+    return address;
 }

package/dist/features/account/schemas/firestore.d.ts

@@ -1,48 +1,13 @@
 /**
  * Account Firestore Document Types & Constants
  *
- * Canonical Firestore document interfaces, collection names, field constants
- * for the account feature (user addresses).
- */
-export interface AddressDocument {
-    id: string;
-    label: string;
-    fullName: string;
-    phone: string;
-    addressLine1: string;
-    addressLine2?: string;
-    landmark?: string;
-    city: string;
-    state: string;
-    postalCode: string;
-    country: string;
-    isDefault: boolean;
-    createdAt: Date;
-    updatedAt: Date;
-}
-/**
- * Subcollection path — users/{userId}/addresses/{addressId}
+ * SB-UNI-A 2026-05-13 — Address types relocated to features/addresses/.
+ * This file now re-exports the canonical shapes so existing consumers
+ * keep their imports stable. The legacy `ADDRESS_SUBCOLLECTION` constant
+ * stays as a backwards-compat literal until callers migrate to the
+ * top-level `ADDRESSES_COLLECTION`.
  */
+export { ADDRESS_FIELDS, ADDRESS_INDEXED_FIELDS, ADDRESS_PUBLIC_FIELDS, ADDRESS_UPDATABLE_FIELDS, ADDRESSES_COLLECTION, DEFAULT_ADDRESS_DATA, type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput, } from "../../addresses/schemas";
+/** @deprecated SB-UNI-A — kept as a literal alias only. Top-level
+ * `addresses` collection is the new home (ADDRESSES_COLLECTION). */
 export declare const ADDRESS_SUBCOLLECTION: "addresses";
-export declare const ADDRESS_INDEXED_FIELDS: readonly ["isDefault", "createdAt"];
-export declare const DEFAULT_ADDRESS_DATA: Partial<AddressDocument>;
-export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "createdAt", "updatedAt"];
-export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault"];
-export type AddressCreateInput = Omit<AddressDocument, "id" | "createdAt" | "updatedAt">;
-export type AddressUpdateInput = Partial<Pick<AddressDocument, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
-export declare const ADDRESS_FIELDS: {
-    readonly ID: "id";
-    readonly LABEL: "label";
-    readonly FULL_NAME: "fullName";
-    readonly PHONE: "phone";
-    readonly ADDRESS_LINE_1: "addressLine1";
-    readonly ADDRESS_LINE_2: "addressLine2";
-    readonly LANDMARK: "landmark";
-    readonly CITY: "city";
-    readonly STATE: "state";
-    readonly POSTAL_CODE: "postalCode";
-    readonly COUNTRY: "country";
-    readonly IS_DEFAULT: "isDefault";
-    readonly CREATED_AT: "createdAt";
-    readonly UPDATED_AT: "updatedAt";
-};

package/dist/features/account/schemas/firestore.js

@@ -1,59 +1,13 @@
 /**
  * Account Firestore Document Types & Constants
  *
- * Canonical Firestore document interfaces, collection names, field constants
- * for the account feature (user addresses).
- */
-/**
- * Subcollection path — users/{userId}/addresses/{addressId}
+ * SB-UNI-A 2026-05-13 — Address types relocated to features/addresses/.
+ * This file now re-exports the canonical shapes so existing consumers
+ * keep their imports stable. The legacy `ADDRESS_SUBCOLLECTION` constant
+ * stays as a backwards-compat literal until callers migrate to the
+ * top-level `ADDRESSES_COLLECTION`.
  */
+export { ADDRESS_FIELDS, ADDRESS_INDEXED_FIELDS, ADDRESS_PUBLIC_FIELDS, ADDRESS_UPDATABLE_FIELDS, ADDRESSES_COLLECTION, DEFAULT_ADDRESS_DATA, } from "../../addresses/schemas";
+/** @deprecated SB-UNI-A — kept as a literal alias only. Top-level
+ * `addresses` collection is the new home (ADDRESSES_COLLECTION). */
 export const ADDRESS_SUBCOLLECTION = "addresses";
-export const ADDRESS_INDEXED_FIELDS = ["isDefault", "createdAt"];
-export const DEFAULT_ADDRESS_DATA = {
-    isDefault: false,
-};
-export const ADDRESS_PUBLIC_FIELDS = [
-    "id",
-    "label",
-    "fullName",
-    "phone",
-    "addressLine1",
-    "addressLine2",
-    "landmark",
-    "city",
-    "state",
-    "postalCode",
-    "country",
-    "isDefault",
-    "createdAt",
-    "updatedAt",
-];
-export const ADDRESS_UPDATABLE_FIELDS = [
-    "label",
-    "fullName",
-    "phone",
-    "addressLine1",
-    "addressLine2",
-    "landmark",
-    "city",
-    "state",
-    "postalCode",
-    "country",
-    "isDefault",
-];
-export const ADDRESS_FIELDS = {
-    ID: "id",
-    LABEL: "label",
-    FULL_NAME: "fullName",
-    PHONE: "phone",
-    ADDRESS_LINE_1: "addressLine1",
-    ADDRESS_LINE_2: "addressLine2",
-    LANDMARK: "landmark",
-    CITY: "city",
-    STATE: "state",
-    POSTAL_CODE: "postalCode",
-    COUNTRY: "country",
-    IS_DEFAULT: "isDefault",
-    CREATED_AT: "createdAt",
-    UPDATED_AT: "updatedAt",
-};

package/dist/features/account/schemas/index.d.ts

@@ -43,14 +43,14 @@ export declare const notificationPreferencesSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     push?: boolean | undefined;
     promotions?: boolean | undefined;
-    orderUpdates?: boolean | undefined;
     newsletter?: boolean | undefined;
+    orderUpdates?: boolean | undefined;
     sms?: boolean | undefined;
 }, {
     push?: boolean | undefined;
     promotions?: boolean | undefined;
-    orderUpdates?: boolean | undefined;
     newsletter?: boolean | undefined;
+    orderUpdates?: boolean | undefined;
     sms?: boolean | undefined;
 }>;
 /**
@@ -114,14 +114,14 @@ export declare const userProfileSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         push?: boolean | undefined;
         promotions?: boolean | undefined;
-        orderUpdates?: boolean | undefined;
         newsletter?: boolean | undefined;
+        orderUpdates?: boolean | undefined;
         sms?: boolean | undefined;
     }, {
         push?: boolean | undefined;
         promotions?: boolean | undefined;
-        orderUpdates?: boolean | undefined;
         newsletter?: boolean | undefined;
+        orderUpdates?: boolean | undefined;
         sms?: boolean | undefined;
     }>>;
     createdAt: z.ZodOptional<z.ZodString>;
@@ -150,8 +150,8 @@ export declare const userProfileSchema: z.ZodObject<{
     notificationPreferences?: {
         push?: boolean | undefined;
         promotions?: boolean | undefined;
-        orderUpdates?: boolean | undefined;
         newsletter?: boolean | undefined;
+        orderUpdates?: boolean | undefined;
         sms?: boolean | undefined;
     } | undefined;
 }, {
@@ -178,8 +178,8 @@ export declare const userProfileSchema: z.ZodObject<{
     notificationPreferences?: {
         push?: boolean | undefined;
         promotions?: boolean | undefined;
-        orderUpdates?: boolean | undefined;
         newsletter?: boolean | undefined;
+        orderUpdates?: boolean | undefined;
         sms?: boolean | undefined;
     } | undefined;
 }>;

package/dist/features/account/server.d.ts

@@ -5,4 +5,4 @@
  */
 export * from "./actions";
 export { AccountRepository } from "./repository/account.repository";
-export { AddressRepository, addressRepository, } from "./repository/address.repository";
+export { AddressesRepository, addressesRepository, } from "../addresses";

package/dist/features/account/server.js

@@ -5,4 +5,6 @@
  */
 export * from "./actions";
 export { AccountRepository } from "./repository/account.repository";
-export { AddressRepository, addressRepository, } from "./repository/address.repository";
+// SB-UNI-A 2026-05-13 — AddressRepository deleted. Use addressesRepository
+// (top-level addresses collection with ownerType:"user").
+export { AddressesRepository, addressesRepository, } from "../addresses";

package/dist/features/addresses/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./schemas";
+export { AddressesRepository, addressesRepository } from "./repository/addresses.repository";

package/dist/features/addresses/index.js

@@ -0,0 +1,2 @@
+export * from "./schemas";
+export { AddressesRepository, addressesRepository } from "./repository/addresses.repository";

package/dist/features/addresses/repository/addresses.repository.d.ts

@@ -0,0 +1,29 @@
+/**
+ * AddressesRepository — SB-UNI-A 2026-05-13
+ *
+ * Top-level `addresses` collection. Discriminator: `ownerType: "user"|"store"`.
+ * Replaces the two prior subcollection repositories.
+ *
+ * PII encryption: `fullName`, `phone`, `addressLine1` are routed through
+ * `encryptPiiFields` on every write path (createWithId, create, update) and
+ * decrypted in `mapDoc`. Pattern #9 (CLAUDE.md): never bypass repo hooks.
+ */
+import { BaseRepository, type DocumentSnapshot } from "../../../providers/db-firebase";
+import { type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
+export declare class AddressesRepository extends BaseRepository<AddressDocument> {
+    constructor();
+    private decryptAddress;
+    private encryptAddressData;
+    protected mapDoc<D = AddressDocument>(snap: DocumentSnapshot): D;
+    createWithId(id: string, data: Partial<AddressDocument>): Promise<AddressDocument>;
+    update(id: string, data: Partial<AddressDocument>): Promise<AddressDocument>;
+    listByOwner(ownerType: AddressOwnerType, ownerId: string): Promise<AddressDocument[]>;
+    countByOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    createForOwner(ownerType: AddressOwnerType, ownerId: string, input: AddressCreateInput): Promise<AddressDocument>;
+    updateForOwner(ownerType: AddressOwnerType, ownerId: string, addressId: string, input: AddressUpdateInput): Promise<AddressDocument>;
+    deleteForOwner(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<void>;
+    setDefault(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<AddressDocument>;
+    deleteAllForOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    private clearDefaultFlag;
+}
+export declare const addressesRepository: AddressesRepository;

package/dist/features/addresses/repository/addresses.repository.js

@@ -0,0 +1,157 @@
+/**
+ * AddressesRepository — SB-UNI-A 2026-05-13
+ *
+ * Top-level `addresses` collection. Discriminator: `ownerType: "user"|"store"`.
+ * Replaces the two prior subcollection repositories.
+ *
+ * PII encryption: `fullName`, `phone`, `addressLine1` are routed through
+ * `encryptPiiFields` on every write path (createWithId, create, update) and
+ * decrypted in `mapDoc`. Pattern #9 (CLAUDE.md): never bypass repo hooks.
+ */
+import { DatabaseError } from "../../../errors";
+import { serverLogger } from "../../../monitoring";
+import { BaseRepository, getFirestoreCount, prepareForFirestore, } from "../../../providers/db-firebase";
+import { ADDRESS_PII_FIELDS, decryptPiiFields, encryptPiiFields, } from "../../../security";
+import { ADDRESS_FIELDS, ADDRESSES_COLLECTION, } from "../schemas";
+export class AddressesRepository extends BaseRepository {
+    constructor() {
+        super(ADDRESSES_COLLECTION);
+    }
+    decryptAddress(doc) {
+        return decryptPiiFields(doc, [
+            ...ADDRESS_PII_FIELDS,
+        ]);
+    }
+    encryptAddressData(data) {
+        return encryptPiiFields(data, [...ADDRESS_PII_FIELDS]);
+    }
+    mapDoc(snap) {
+        const raw = super.mapDoc(snap);
+        return this.decryptAddress(raw);
+    }
+    async createWithId(id, data) {
+        const encrypted = this.encryptAddressData(data);
+        return super.createWithId(id, encrypted);
+    }
+    async update(id, data) {
+        const encrypted = this.encryptAddressData(data);
+        return super.update(id, encrypted);
+    }
+    async listByOwner(ownerType, ownerId) {
+        try {
+            const snapshot = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .orderBy(ADDRESS_FIELDS.CREATED_AT, "desc")
+                .get();
+            return snapshot.docs.map((doc) => this.mapDoc(doc));
+        }
+        catch (error) {
+            throw new DatabaseError(`Failed to list addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async countByOwner(ownerType, ownerId) {
+        try {
+            return await getFirestoreCount(this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId));
+        }
+        catch (error) {
+            throw new DatabaseError(`Failed to count addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async createForOwner(ownerType, ownerId, input) {
+        try {
+            if (input.isDefault) {
+                await this.clearDefaultFlag(ownerType, ownerId);
+            }
+            const now = new Date();
+            const docRef = this.getCollection().doc();
+            const addressData = {
+                ...input,
+                ownerType,
+                ownerId,
+                createdAt: now,
+                updatedAt: now,
+            };
+            const encrypted = this.encryptAddressData(addressData);
+            await docRef.set(prepareForFirestore(encrypted));
+            serverLogger.info("Address created", {
+                ownerType,
+                ownerId,
+                addressId: docRef.id,
+                label: input.label,
+            });
+            return { id: docRef.id, ...addressData };
+        }
+        catch (error) {
+            throw new DatabaseError(`Failed to create address for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async updateForOwner(ownerType, ownerId, addressId, input) {
+        const existing = await this.findById(addressId);
+        if (!existing || existing.ownerType !== ownerType || existing.ownerId !== ownerId) {
+            throw new DatabaseError(`Address not found for ${ownerType}:${ownerId}: ${addressId}`);
+        }
+        if (input.isDefault) {
+            await this.clearDefaultFlag(ownerType, ownerId);
+        }
+        return this.update(addressId, input);
+    }
+    async deleteForOwner(ownerType, ownerId, addressId) {
+        const existing = await this.findById(addressId);
+        if (!existing || existing.ownerType !== ownerType || existing.ownerId !== ownerId) {
+            throw new DatabaseError(`Address not found for ${ownerType}:${ownerId}: ${addressId}`);
+        }
+        await this.delete(addressId);
+        serverLogger.info("Address deleted", { ownerType, ownerId, addressId });
+    }
+    async setDefault(ownerType, ownerId, addressId) {
+        const existing = await this.findById(addressId);
+        if (!existing || existing.ownerType !== ownerType || existing.ownerId !== ownerId) {
+            throw new DatabaseError(`Address not found for ${ownerType}:${ownerId}: ${addressId}`);
+        }
+        await this.clearDefaultFlag(ownerType, ownerId);
+        return this.update(addressId, { isDefault: true });
+    }
+    async deleteAllForOwner(ownerType, ownerId) {
+        try {
+            const snapshot = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .get();
+            if (snapshot.empty)
+                return 0;
+            const batch = this.db.batch();
+            snapshot.docs.forEach((doc) => batch.delete(doc.ref));
+            await batch.commit();
+            return snapshot.size;
+        }
+        catch (error) {
+            throw new DatabaseError(`Failed to delete all addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async clearDefaultFlag(ownerType, ownerId) {
+        try {
+            const snapshot = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .where(ADDRESS_FIELDS.IS_DEFAULT, "==", true)
+                .get();
+            if (snapshot.empty)
+                return;
+            const batch = this.db.batch();
+            snapshot.docs.forEach((doc) => {
+                batch.update(doc.ref, {
+                    [ADDRESS_FIELDS.IS_DEFAULT]: false,
+                    [ADDRESS_FIELDS.UPDATED_AT]: new Date(),
+                });
+            });
+            await batch.commit();
+        }
+        catch (error) {
+            throw new DatabaseError(`Failed to clear default flag for ${ownerType}:${ownerId}`, error);
+        }
+    }
+}
+export const addressesRepository = new AddressesRepository();

package/dist/features/addresses/schemas/firestore.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Addresses Firestore Document Types & Constants — SB-UNI-A 2026-05-13
+ *
+ * Unified top-level `addresses` collection replacing the two subcollections
+ * `users/{uid}/addresses` and `stores/{slug}/addresses`. Discriminated by
+ * `ownerType: "user" | "store"`. PII fields (fullName, phone, addressLine1)
+ * are encrypted at rest via the existing `encryptPiiFields` pipeline; the
+ * repository overrides `createWithId` and `create` to inject encryption.
+ */
+export type AddressOwnerType = "user" | "store";
+export interface AddressDocument {
+    id: string;
+    ownerType: AddressOwnerType;
+    ownerId: string;
+    label: string;
+    fullName: string;
+    phone: string;
+    addressLine1: string;
+    addressLine2?: string;
+    landmark?: string;
+    city: string;
+    state: string;
+    postalCode: string;
+    country: string;
+    isDefault: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export declare const ADDRESSES_COLLECTION: "addresses";
+export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "isDefault", "createdAt"];
+export declare const DEFAULT_ADDRESS_DATA: Partial<AddressDocument>;
+export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "createdAt", "updatedAt"];
+export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault"];
+export type AddressCreateInput = Omit<AddressDocument, "id" | "ownerType" | "ownerId" | "createdAt" | "updatedAt">;
+export type AddressUpdateInput = Partial<Pick<AddressDocument, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
+export declare const ADDRESS_FIELDS: {
+    readonly ID: "id";
+    readonly OWNER_TYPE: "ownerType";
+    readonly OWNER_ID: "ownerId";
+    readonly LABEL: "label";
+    readonly FULL_NAME: "fullName";
+    readonly PHONE: "phone";
+    readonly ADDRESS_LINE_1: "addressLine1";
+    readonly ADDRESS_LINE_2: "addressLine2";
+    readonly LANDMARK: "landmark";
+    readonly CITY: "city";
+    readonly STATE: "state";
+    readonly POSTAL_CODE: "postalCode";
+    readonly COUNTRY: "country";
+    readonly IS_DEFAULT: "isDefault";
+    readonly CREATED_AT: "createdAt";
+    readonly UPDATED_AT: "updatedAt";
+};

package/dist/features/addresses/schemas/firestore.js

@@ -0,0 +1,68 @@
+/**
+ * Addresses Firestore Document Types & Constants — SB-UNI-A 2026-05-13
+ *
+ * Unified top-level `addresses` collection replacing the two subcollections
+ * `users/{uid}/addresses` and `stores/{slug}/addresses`. Discriminated by
+ * `ownerType: "user" | "store"`. PII fields (fullName, phone, addressLine1)
+ * are encrypted at rest via the existing `encryptPiiFields` pipeline; the
+ * repository overrides `createWithId` and `create` to inject encryption.
+ */
+export const ADDRESSES_COLLECTION = "addresses";
+export const ADDRESS_INDEXED_FIELDS = [
+    "ownerType",
+    "ownerId",
+    "isDefault",
+    "createdAt",
+];
+export const DEFAULT_ADDRESS_DATA = {
+    isDefault: false,
+};
+export const ADDRESS_PUBLIC_FIELDS = [
+    "id",
+    "ownerType",
+    "ownerId",
+    "label",
+    "fullName",
+    "phone",
+    "addressLine1",
+    "addressLine2",
+    "landmark",
+    "city",
+    "state",
+    "postalCode",
+    "country",
+    "isDefault",
+    "createdAt",
+    "updatedAt",
+];
+export const ADDRESS_UPDATABLE_FIELDS = [
+    "label",
+    "fullName",
+    "phone",
+    "addressLine1",
+    "addressLine2",
+    "landmark",
+    "city",
+    "state",
+    "postalCode",
+    "country",
+    "isDefault",
+];
+export const ADDRESS_FIELDS = {
+    ID: "id",
+    OWNER_TYPE: "ownerType",
+    OWNER_ID: "ownerId",
+    LABEL: "label",
+    FULL_NAME: "fullName",
+    PHONE: "phone",
+    ADDRESS_LINE_1: "addressLine1",
+    ADDRESS_LINE_2: "addressLine2",
+    LANDMARK: "landmark",
+    CITY: "city",
+    STATE: "state",
+    POSTAL_CODE: "postalCode",
+    COUNTRY: "country",
+    IS_DEFAULT: "isDefault",
+    CREATED_AT: "createdAt",
+    UPDATED_AT: "updatedAt",
+};

package/dist/features/{bundles → addresses}/schemas/index.d.ts

@@ -1,2 +1 @@
 export * from "./firestore";
-export * from "./zod";

package/dist/features/{bundles → addresses}/schemas/index.js

@@ -1,2 +1 @@
 export * from "./firestore";
-export * from "./zod";

package/dist/features/addresses/server.d.ts

@@ -0,0 +1,2 @@
+export * from "./schemas";
+export { AddressesRepository, addressesRepository } from "./repository/addresses.repository";