@mohasinac/appkit 2.7.27 → 2.7.31

package/dist/monitoring/server-logger.js

@@ -16,15 +16,11 @@ import { AppError } from "../errors";
 // Using require() calls inside functions keeps the imports out of the static
 // analysis graph and prevents Edge Runtime warnings.
 /* eslint-disable @typescript-eslint/no-require-imports */
-function nodeFsPromises() {
-    return require("fs/promises");
-}
-function nodeFs() {
-    return require("fs");
-}
-function nodePath() {
-    return require("path");
-}
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function nodeRequire(id) { return require(id); }
+function nodeFsPromises() { return nodeRequire("fs/promises"); }
+function nodeFs() { return nodeRequire("fs"); }
+function nodePath() { return nodeRequire("path"); }
 // process.cwd() is a Node.js-only API. Access it through module.require so
 // Next.js Edge static analysis does not flag this file.
 // eslint-disable-next-line @typescript-eslint/no-explicit-any

package/dist/next/api/apiHandler.js

@@ -1,9 +1,56 @@
+async function validateSchema(request, schema) {
+    if (typeof schema.safeParse === "function") {
+        const body = await request.json();
+        const result = schema.safeParse(body);
+        if (!result.success) {
+            return { validationError: true, issues: result.error.issues };
+        }
+        return { validationError: false, data: result.data };
+    }
+    try {
+        const data = (await request.json());
+        return { validationError: false, data };
+    }
+    catch {
+        return { validationError: false, data: undefined };
+    }
+}
+function buildRateLimitHeaders(result) {
+    return {
+        "RateLimit-Limit": String(result.limit),
+        "RateLimit-Remaining": String(result.remaining),
+        "RateLimit-Reset": String(result.reset),
+    };
+}
+function buildRateLimitExceededResponse(message, headers) {
+    return new Response(JSON.stringify({ success: false, error: message }), { status: 429, headers: { "Content-Type": "application/json", ...headers } });
+}
+function applyRateLimitHeaders(response, headers) {
+    for (const [key, value] of Object.entries(headers)) {
+        response.headers.set(key, value);
+    }
+}
 function buildPublicCacheControl(policy) {
     const maxAge = policy?.maxAge ?? 30;
     const sMaxAge = policy?.sMaxAge ?? 300;
     const staleWhileRevalidate = policy?.staleWhileRevalidate ?? 600;
     return `public, max-age=${maxAge}, s-maxage=${sMaxAge}, stale-while-revalidate=${staleWhileRevalidate}`;
 }
+async function applyRateLimitCheck(request, config, applyRateLimit, getRateLimitExceededMessage) {
+    const result = await applyRateLimit(request, config);
+    const headers = buildRateLimitHeaders(result);
+    if (!result.success) {
+        return { blocked: true, response: buildRateLimitExceededResponse(getRateLimitExceededMessage(), headers) };
+    }
+    return { blocked: false, headers };
+}
+async function applySchemaValidation(request, schema, errorResponse) {
+    const schemaResult = await validateSchema(request, schema);
+    if (schemaResult.validationError) {
+        return { invalid: true, response: errorResponse("Validation failed", 400, schemaResult.issues) };
+    }
+    return { invalid: false, data: schemaResult.data };
+}
 export function createApiHandlerFactory(deps) {
     return function createApiHandler(options) {
         return async (request, context) => {
@@ -11,24 +58,10 @@ export function createApiHandlerFactory(deps) {
             try {
                 let rateLimitHeaders;
                 if (options.rateLimit) {
-                    const rateLimitResult = await deps.applyRateLimit(request, options.rateLimit);
-                    rateLimitHeaders = {
-                        "RateLimit-Limit": String(rateLimitResult.limit),
-                        "RateLimit-Remaining": String(rateLimitResult.remaining),
-                        "RateLimit-Reset": String(rateLimitResult.reset),
-                    };
-                    if (!rateLimitResult.success) {
-                        return new Response(JSON.stringify({
-                            success: false,
-                            error: deps.getRateLimitExceededMessage(),
-                        }), {
-                            status: 429,
-                            headers: {
-                                "Content-Type": "application/json",
-                                ...rateLimitHeaders,
-                            },
-                        });
-                    }
+                    const rlCheck = await applyRateLimitCheck(request, options.rateLimit, deps.applyRateLimit, deps.getRateLimitExceededMessage);
+                    if (rlCheck.blocked)
+                        return rlCheck.response;
+                    rateLimitHeaders = rlCheck.headers;
                 }
                 let user;
                 if (options.roles && options.roles.length > 0) {
@@ -39,22 +72,10 @@ export function createApiHandlerFactory(deps) {
                 }
                 let validatedBody;
                 if (options.schema) {
-                    if (typeof options.schema.safeParse === "function") {
-                        const body = await request.json();
-                        const result = options.schema.safeParse(body);
-                        if (!result.success) {
-                            return deps.errorResponse("Validation failed", 400, result.error.issues);
-                        }
-                        validatedBody = result.data;
-                    }
-                    else {
-                        try {
-                            validatedBody = (await request.json());
-                        }
-                        catch {
-                            validatedBody = undefined;
-                        }
-                    }
+                    const schemaCheck = await applySchemaValidation(request, options.schema, deps.errorResponse);
+                    if (schemaCheck.invalid)
+                        return schemaCheck.response;
+                    validatedBody = schemaCheck.data;
                 }
                 const resolvedParams = context?.params
                     ? await context.params
@@ -67,9 +88,7 @@ export function createApiHandlerFactory(deps) {
                 });
                 response.headers.set("Access-Control-Max-Age", "86400");
                 if (rateLimitHeaders) {
-                    for (const [key, value] of Object.entries(rateLimitHeaders)) {
-                        response.headers.set(key, value);
-                    }
+                    applyRateLimitHeaders(response, rateLimitHeaders);
                 }
                 const hasCredentialHeaders = !!request.headers.get("authorization") || !!request.headers.get("cookie");
                 const hasRoleGuards = !!options.roles && options.roles.length > 0;

package/dist/next/components/GlobalError.js

@@ -12,6 +12,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *   export { GlobalError as default } from "@mohasinac/appkit/next";
  */
 import { useEffect } from "react";
+import { Heading, Text } from "../../ui";
 import { trackError, ErrorCategory, ErrorSeverity, } from "../../monitoring/error-tracking";
 export function GlobalError({ error, reset }) {
     useEffect(() => {
@@ -30,7 +31,7 @@ export function GlobalError({ error, reset }) {
                 fontFamily: "system-ui, sans-serif",
                 padding: "2rem",
                 textAlign: "center",
-            }, children: [_jsx("h1", { style: { fontSize: "2rem", marginBottom: "0.5rem" }, children: "Something went wrong" }), _jsx("p", { style: { opacity: 0.7, marginBottom: "1.5rem" }, children: "A critical error occurred. We're working on it." }), process.env.NODE_ENV === "development" && (_jsxs("pre", { style: {
+            }, children: [_jsx(Heading, { level: 1, style: { fontSize: "2rem", marginBottom: "0.5rem" }, children: "Something went wrong" }), _jsx(Text, { style: { opacity: 0.7, marginBottom: "1.5rem" }, children: "A critical error occurred. We're working on it." }), process.env.NODE_ENV === "development" && (_jsxs("pre", { style: {
                         fontSize: "0.75rem",
                         padding: "1rem",
                         background: "#f3f4f6",

package/dist/next/routing/route-map.d.ts

@@ -126,6 +126,10 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly RETURNS: "/user/returns";
         readonly SUPPORT: "/user/support";
         readonly SUPPORT_TICKET: (id: string) => string;
+        readonly PRE_ORDERS: "/user/pre-orders";
+        readonly DIGITAL_CODES: "/user/digital-codes";
+        readonly PRIZE_DRAWS: "/user/prize-draws";
+        readonly EVENTS: "/user/events";
     };
     readonly STORE: {
         readonly DASHBOARD: "/store";
@@ -170,6 +174,15 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
         readonly PRODUCT_CODES: (id: string) => string;
+        readonly CLASSIFIED: "/store/classified";
+        readonly CLASSIFIED_NEW: "/store/classified/new";
+        readonly CLASSIFIED_EDIT: (id: string) => string;
+        readonly DIGITAL_CODES: "/store/digital-codes";
+        readonly DIGITAL_CODES_NEW: "/store/digital-codes/new";
+        readonly DIGITAL_CODES_EDIT: (id: string) => string;
+        readonly LIVE_ITEMS: "/store/live";
+        readonly LIVE_ITEMS_NEW: "/store/live/new";
+        readonly LIVE_ITEMS_EDIT: (id: string) => string;
     };
     readonly ADMIN: {
         readonly DASHBOARD: "/admin/dashboard";
@@ -229,6 +242,9 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly HISTORY: "/admin/history";
         readonly RETURN_REQUESTS: "/admin/return-requests";
         readonly STORE_ADDRESSES: "/admin/store-addresses";
+        readonly ADDRESSES: "/admin/addresses";
+        readonly ADDRESSES_NEW: "/admin/addresses/new";
+        readonly ADDRESSES_EDIT: (id: string) => string;
         readonly SUBLISTING_CATEGORIES: "/admin/sublisting-categories";
         readonly SUBLISTING_CATEGORIES_NEW: "/admin/sublisting-categories/new";
         readonly SUBLISTING_CATEGORIES_EDIT: (id: string) => string;
@@ -372,6 +388,10 @@ export declare const ROUTES: {
         readonly RETURNS: "/user/returns";
         readonly SUPPORT: "/user/support";
         readonly SUPPORT_TICKET: (id: string) => string;
+        readonly PRE_ORDERS: "/user/pre-orders";
+        readonly DIGITAL_CODES: "/user/digital-codes";
+        readonly PRIZE_DRAWS: "/user/prize-draws";
+        readonly EVENTS: "/user/events";
     };
     readonly STORE: {
         readonly DASHBOARD: "/store";
@@ -416,6 +436,15 @@ export declare const ROUTES: {
         readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
         readonly PRODUCT_CODES: (id: string) => string;
+        readonly CLASSIFIED: "/store/classified";
+        readonly CLASSIFIED_NEW: "/store/classified/new";
+        readonly CLASSIFIED_EDIT: (id: string) => string;
+        readonly DIGITAL_CODES: "/store/digital-codes";
+        readonly DIGITAL_CODES_NEW: "/store/digital-codes/new";
+        readonly DIGITAL_CODES_EDIT: (id: string) => string;
+        readonly LIVE_ITEMS: "/store/live";
+        readonly LIVE_ITEMS_NEW: "/store/live/new";
+        readonly LIVE_ITEMS_EDIT: (id: string) => string;
     };
     readonly ADMIN: {
         readonly DASHBOARD: "/admin/dashboard";
@@ -475,6 +504,9 @@ export declare const ROUTES: {
         readonly HISTORY: "/admin/history";
         readonly RETURN_REQUESTS: "/admin/return-requests";
         readonly STORE_ADDRESSES: "/admin/store-addresses";
+        readonly ADDRESSES: "/admin/addresses";
+        readonly ADDRESSES_NEW: "/admin/addresses/new";
+        readonly ADDRESSES_EDIT: (id: string) => string;
         readonly SUBLISTING_CATEGORIES: "/admin/sublisting-categories";
         readonly SUBLISTING_CATEGORIES_NEW: "/admin/sublisting-categories/new";
         readonly SUBLISTING_CATEGORIES_EDIT: (id: string) => string;
@@ -546,6 +578,15 @@ export declare const SELLER_ROUTES: {
     readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
     readonly PRIZE_DRAWS_EDIT: (id: string) => string;
     readonly PRODUCT_CODES: (id: string) => string;
+    readonly CLASSIFIED: "/store/classified";
+    readonly CLASSIFIED_NEW: "/store/classified/new";
+    readonly CLASSIFIED_EDIT: (id: string) => string;
+    readonly DIGITAL_CODES: "/store/digital-codes";
+    readonly DIGITAL_CODES_NEW: "/store/digital-codes/new";
+    readonly DIGITAL_CODES_EDIT: (id: string) => string;
+    readonly LIVE_ITEMS: "/store/live";
+    readonly LIVE_ITEMS_NEW: "/store/live/new";
+    readonly LIVE_ITEMS_EDIT: (id: string) => string;
 };
 export declare const PUBLIC_ROUTES: readonly ["/", string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, "/unauthorized", "/auth/login", "/auth/register", "/auth/forgot-password", "/auth/reset-password", "/auth/verify-email"];
 export declare const PROTECTED_ROUTES: readonly [string, string, string, string, string, string, string];

package/dist/next/routing/route-map.js

@@ -114,6 +114,10 @@ export const DEFAULT_ROUTE_MAP = {
         RETURNS: "/user/returns",
         SUPPORT: "/user/support",
         SUPPORT_TICKET: (id) => `/user/support/${id}`,
+        PRE_ORDERS: "/user/pre-orders",
+        DIGITAL_CODES: "/user/digital-codes",
+        PRIZE_DRAWS: "/user/prize-draws",
+        EVENTS: "/user/events",
     },
     STORE: {
         DASHBOARD: "/store",
@@ -159,6 +163,16 @@ export const DEFAULT_ROUTE_MAP = {
         PRIZE_DRAWS_NEW: "/store/prize-draws/new",
         PRIZE_DRAWS_EDIT: (id) => `/store/prize-draws/${id}/edit`,
         PRODUCT_CODES: (id) => `/store/products/${id}/codes`,
+        // SB-UNI-R — classified / digital-code / live
+        CLASSIFIED: "/store/classified",
+        CLASSIFIED_NEW: "/store/classified/new",
+        CLASSIFIED_EDIT: (id) => `/store/classified/${id}/edit`,
+        DIGITAL_CODES: "/store/digital-codes",
+        DIGITAL_CODES_NEW: "/store/digital-codes/new",
+        DIGITAL_CODES_EDIT: (id) => `/store/digital-codes/${id}/edit`,
+        LIVE_ITEMS: "/store/live",
+        LIVE_ITEMS_NEW: "/store/live/new",
+        LIVE_ITEMS_EDIT: (id) => `/store/live/${id}/edit`,
     },
     ADMIN: {
         DASHBOARD: "/admin/dashboard",
@@ -218,6 +232,9 @@ export const DEFAULT_ROUTE_MAP = {
         HISTORY: "/admin/history",
         RETURN_REQUESTS: "/admin/return-requests",
         STORE_ADDRESSES: "/admin/store-addresses",
+        ADDRESSES: "/admin/addresses",
+        ADDRESSES_NEW: "/admin/addresses/new",
+        ADDRESSES_EDIT: (id) => `/admin/addresses/${id}/edit`,
         SUBLISTING_CATEGORIES: "/admin/sublisting-categories",
         SUBLISTING_CATEGORIES_NEW: "/admin/sublisting-categories/new",
         SUBLISTING_CATEGORIES_EDIT: (id) => `/admin/sublisting-categories/${id}/edit`,

package/dist/react/ErrorBoundary.js

@@ -10,6 +10,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  */
 import { Component } from "react";
 import { Logger } from "../core/Logger";
+import { Heading, Text } from "../ui";
 import { trackError, ErrorCategory, ErrorSeverity, } from "../monitoring/error-tracking";
 function DefaultFallback({ error, onReset, }) {
     return (_jsxs("div", { role: "alert", style: {
@@ -20,7 +21,7 @@ function DefaultFallback({ error, onReset, }) {
             minHeight: "100vh",
             padding: "2rem",
             textAlign: "center",
-        }, "data-section": "errorboundary-div-446", children: [_jsx("h1", { style: { fontSize: "1.5rem", marginBottom: "0.5rem" }, children: "Something went wrong" }), _jsx("p", { style: { marginBottom: "1.5rem", opacity: 0.7 }, children: "An unexpected error occurred. Please try again." }), process.env.NODE_ENV === "development" && error && (_jsx("pre", { style: {
+        }, "data-section": "errorboundary-div-446", children: [_jsx(Heading, { level: 1, style: { fontSize: "1.5rem", marginBottom: "0.5rem" }, children: "Something went wrong" }), _jsx(Text, { style: { marginBottom: "1.5rem", opacity: 0.7 }, children: "An unexpected error occurred. Please try again." }), process.env.NODE_ENV === "development" && error && (_jsx("pre", { style: {
                     fontSize: "0.75rem",
                     padding: "1rem",
                     background: "#f3f4f6",

package/dist/react/contexts/SessionContext.js

@@ -230,24 +230,46 @@ export function SessionProvider({ children, initialUser, endpoints: endpointOver
     useEffect(() => {
         const adapter = getClientSessionAdapter();
         let authVersion = 0;
+        async function tryCreateSession(authUser, version, getVersion) {
+            try {
+                const idToken = await authUser.getIdToken(true);
+                if (version !== getVersion())
+                    return;
+                const data = await apiClient.post(ep.createSession, { idToken });
+                if (version !== getVersion())
+                    return;
+                if (data?.sessionId)
+                    setSessionId(data.sessionId);
+            }
+            catch (error) {
+                logger.error("Session creation failed", { error });
+            }
+        }
+        async function handleNoAuthUser(version, getVersion) {
+            if (!hasSessionCookie())
+                return false;
+            const serverUser = await fetchUserProfileFromServer();
+            if (version !== getVersion())
+                return true;
+            if (serverUser) {
+                setUser(serverUser);
+                const sid = getSessionIdFromCookie();
+                if (sid)
+                    setSessionId(sid);
+                setLoading(false);
+                return true;
+            }
+            deleteCookie(SESSION_COOKIE);
+            deleteCookie(SESSION_ID_COOKIE);
+            return false;
+        }
         const unsubscribe = adapter.onAuthStateChanged(async (authUser) => {
             const thisVersion = ++authVersion;
+            const getVersion = () => authVersion;
             if (authUser) {
                 const hasSession = hasSessionCookie();
                 if (!hasSession) {
-                    try {
-                        const idToken = await authUser.getIdToken(true);
-                        if (thisVersion !== authVersion)
-                            return;
-                        const data = await apiClient.post(ep.createSession, { idToken });
-                        if (thisVersion !== authVersion)
-                            return;
-                        if (data?.sessionId)
-                            setSessionId(data.sessionId);
-                    }
-                    catch (error) {
-                        logger.error("Session creation failed", { error });
-                    }
+                    await tryCreateSession(authUser, thisVersion, getVersion);
                 }
                 if (thisVersion !== authVersion)
                     return;
@@ -276,21 +298,9 @@ export function SessionProvider({ children, initialUser, endpoints: endpointOver
             }
             else {
                 // No auth user — try server-session fallback (OAuth flows)
-                if (hasSessionCookie()) {
-                    const serverUser = await fetchUserProfileFromServer();
-                    if (thisVersion !== authVersion)
-                        return;
-                    if (serverUser) {
-                        setUser(serverUser);
-                        const sid = getSessionIdFromCookie();
-                        if (sid)
-                            setSessionId(sid);
-                        setLoading(false);
-                        return;
-                    }
-                    deleteCookie(SESSION_COOKIE);
-                    deleteCookie(SESSION_ID_COOKIE);
-                }
+                const handled = await handleNoAuthUser(thisVersion, getVersion);
+                if (handled)
+                    return;
                 setUser(null);
                 setSessionId(null);
                 if (activityUpdateRef.current) {

package/dist/react/hooks/useCamera.d.ts

@@ -12,7 +12,7 @@ export interface UseCameraReturn {
     videoRef: React.RefObject<HTMLVideoElement | null>;
     startCamera: (options?: UseCameraOptions) => Promise<void>;
     stopCamera: () => void;
-    takePhoto: () => Blob | null;
+    takePhoto: () => Promise<Blob | null>;
     startRecording: () => void;
     stopRecording: () => Promise<Blob>;
     switchCamera: () => Promise<void>;

package/dist/react/hooks/useCamera.js

@@ -73,22 +73,23 @@ export function useCamera() {
             setError(message);
         }
     }, [isSupported, stopCamera]);
+    // canvas.toBlob() is async — must return a Promise so the blob is available
+    // to the caller after the encoding completes (a synchronous return always
+    // gives null because the callback hasn't fired yet).
     const takePhoto = useCallback(() => {
         const video = videoRef.current;
         if (!video || !isActive)
-            return null;
+            return Promise.resolve(null);
         const canvas = document.createElement("canvas");
         canvas.width = video.videoWidth;
         canvas.height = video.videoHeight;
         const ctx = canvas.getContext("2d");
         if (!ctx)
-            return null;
+            return Promise.resolve(null);
         ctx.drawImage(video, 0, 0);
-        let result = null;
-        canvas.toBlob((blob) => {
-            result = blob;
-        }, "image/webp", 0.92);
-        return result;
+        return new Promise((resolve) => {
+            canvas.toBlob((blob) => resolve(blob), "image/webp", 0.92);
+        });
     }, [isActive]);
     const startRecording = useCallback(() => {
         if (!streamRef.current || !isActive)