@mohasinac/appkit 2.7.3 → 2.7.5

package/README.md

@@ -56,6 +56,24 @@ Only publish when explicitly requested. See `CLAUDE.md § Appkit Publish & Deplo
 
 ## Version History
 
+### v2.7.3 — 2026-05-14
+
+**Barrel cleanup — RSC views moved to server-entry; routeHandler readonly roles fix**
+
+- `server-entry.ts`: RSC page views (bundles, categories, events, stores, products, etc.) moved here from main index to prevent firebase-admin leaking into client bundles
+- `src/features/categories/components/index.ts`: `BundlesListView` + `BundleDetailView` removed from client barrel (now server-only)
+- `src/next/api/routeHandler.ts`: `roles` option widened to `readonly string[]` — fixes TS error when passing `ROLES_TRUST_SAFETY` (readonly tuple) to `createRouteHandler`
+
+### v2.7.2 — 2026-05-14
+
+**routeHandler readonly roles type fix**
+
+- `src/next/api/routeHandler.ts`: `roles?: string[]` → `roles?: readonly string[]`
+
+### v2.7.1 — 2026-05-14
+
+**Patch publish to clear npm "already published" state**
+
 ### v2.7.0 — 2026-05-14
 
 **Support Tickets seed data + Firestore indices + seed pipeline wiring (BAN9/SCAM9 followup)**

package/dist/_internal/server/features/seo/index.d.ts

@@ -0,0 +1,8 @@
+export { buildRobots } from "./robots";
+export type { RobotsOptions } from "./robots";
+export { buildManifest } from "./manifest";
+export type { ManifestOptions } from "./manifest";
+export { buildSitemap } from "./sitemap";
+export type { SitemapOptions } from "./sitemap";
+export { buildDefaultOgImage, DEFAULT_OG_SIZE } from "./og";
+export type { DefaultOgOptions } from "./og";

package/dist/_internal/server/features/seo/index.js

@@ -0,0 +1,4 @@
+export { buildRobots } from "./robots";
+export { buildManifest } from "./manifest";
+export { buildSitemap } from "./sitemap";
+export { buildDefaultOgImage, DEFAULT_OG_SIZE } from "./og";

package/dist/_internal/server/features/seo/manifest.d.ts

@@ -0,0 +1,7 @@
+import type { MetadataRoute } from "next";
+export interface ManifestOptions {
+    name: string;
+    shortName: string;
+    description: string;
+}
+export declare function buildManifest({ name, shortName, description }: ManifestOptions): MetadataRoute.Manifest;

package/dist/_internal/server/features/seo/manifest.js

@@ -0,0 +1,48 @@
+import { ROUTES } from "../../../../next/routing/route-map";
+export function buildManifest({ name, shortName, description }) {
+    return {
+        name,
+        short_name: shortName,
+        description,
+        start_url: "/",
+        display: "standalone",
+        orientation: "portrait",
+        background_color: "#ffffff",
+        theme_color: "#3570fc",
+        categories: ["shopping", "marketplace", "business"],
+        lang: "en",
+        dir: "ltr",
+        prefer_related_applications: false,
+        icons: [
+            {
+                src: "/favicon.svg",
+                sizes: "any",
+                type: "image/svg+xml",
+                purpose: "any maskable",
+            },
+        ],
+        screenshots: [],
+        shortcuts: [
+            {
+                name: "Browse Products",
+                url: String(ROUTES.PUBLIC.PRODUCTS),
+                description: "Browse the latest products",
+            },
+            {
+                name: "Live Auctions",
+                url: String(ROUTES.PUBLIC.AUCTIONS),
+                description: "Join live auction bidding",
+            },
+            {
+                name: "Categories",
+                url: String(ROUTES.PUBLIC.CATEGORIES),
+                description: "Explore product categories",
+            },
+            {
+                name: "Stores",
+                url: String(ROUTES.PUBLIC.STORES),
+                description: "Browse seller storefronts",
+            },
+        ],
+    };
+}

package/dist/_internal/server/features/seo/og.d.ts

@@ -0,0 +1,11 @@
+import { ImageResponse } from "next/og";
+export declare const DEFAULT_OG_SIZE: {
+    width: number;
+    height: number;
+};
+export interface DefaultOgOptions {
+    siteName: string;
+    tagline?: string;
+    domain?: string;
+}
+export declare function buildDefaultOgImage({ siteName, tagline, domain }: DefaultOgOptions): ImageResponse;

package/dist/_internal/server/features/seo/og.js

@@ -0,0 +1,52 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { ImageResponse } from "next/og";
+export const DEFAULT_OG_SIZE = { width: 1200, height: 630 };
+export function buildDefaultOgImage({ siteName, tagline, domain }) {
+    const subtitle = tagline ?? "Shop, Bid & Sell — India's Multi-Seller Marketplace";
+    return new ImageResponse(_jsxs("div", { style: {
+            width: "100%",
+            height: "100%",
+            display: "flex",
+            flexDirection: "column",
+            alignItems: "center",
+            justifyContent: "center",
+            background: "linear-gradient(135deg, #3570fc 0%, #65c408 50%, #e91e8c 100%)",
+            fontFamily: "sans-serif",
+            position: "relative",
+            overflow: "hidden",
+        }, children: [_jsx("div", { style: {
+                    position: "absolute",
+                    inset: 0,
+                    opacity: 0.07,
+                    backgroundImage: "radial-gradient(circle at 25% 25%, white 1px, transparent 0), radial-gradient(circle at 75% 75%, white 1px, transparent 0)",
+                    backgroundSize: "48px 48px",
+                } }), _jsx("div", { style: {
+                    display: "flex",
+                    alignItems: "center",
+                    justifyContent: "center",
+                    width: 120,
+                    height: 120,
+                    borderRadius: 24,
+                    background: "rgba(255,255,255,0.15)",
+                    marginBottom: 32,
+                    fontSize: 64,
+                }, children: "\uD83D\uDECD\uFE0F" }), _jsx("div", { style: {
+                    fontSize: 80,
+                    fontWeight: 800,
+                    color: "white",
+                    letterSpacing: "-2px",
+                    marginBottom: 16,
+                    textShadow: "0 4px 24px rgba(0,0,0,0.3)",
+                }, children: siteName }), _jsx("div", { style: {
+                    fontSize: 32,
+                    color: "rgba(255,255,255,0.85)",
+                    fontWeight: 400,
+                    letterSpacing: "0.5px",
+                }, children: subtitle }), domain && (_jsx("div", { style: {
+                    position: "absolute",
+                    bottom: 36,
+                    fontSize: 22,
+                    color: "rgba(255,255,255,0.6)",
+                    letterSpacing: "1px",
+                }, children: domain }))] }), { ...DEFAULT_OG_SIZE });
+}

package/dist/_internal/server/features/seo/robots.d.ts

@@ -0,0 +1,5 @@
+import type { MetadataRoute } from "next";
+export interface RobotsOptions {
+    siteUrl: string;
+}
+export declare function buildRobots({ siteUrl }: RobotsOptions): MetadataRoute.Robots;

package/dist/_internal/server/features/seo/robots.js

@@ -0,0 +1,30 @@
+export function buildRobots({ siteUrl }) {
+    return {
+        rules: [
+            {
+                userAgent: "*",
+                allow: "/",
+                disallow: [
+                    "/admin/",
+                    "/api/",
+                    "/seller/",
+                    "/user/",
+                    "/auth/",
+                    "/checkout/",
+                    "/cart/",
+                    "/demo/",
+                    "/track/",
+                    "/unauthorized/",
+                    "/_next/",
+                    "/profile/*/edit",
+                ],
+            },
+            {
+                userAgent: ["GPTBot", "ChatGPT-User", "Google-Extended", "CCBot"],
+                disallow: "/",
+            },
+        ],
+        sitemap: `${siteUrl}/sitemap.xml`,
+        host: siteUrl,
+    };
+}

package/dist/_internal/server/features/seo/sitemap.d.ts

@@ -0,0 +1,5 @@
+import type { MetadataRoute } from "next";
+export interface SitemapOptions {
+    baseUrl: string;
+}
+export declare function buildSitemap({ baseUrl }: SitemapOptions): Promise<MetadataRoute.Sitemap>;

package/dist/_internal/server/features/seo/sitemap.js

@@ -0,0 +1,254 @@
+import { getAdminDb } from "../../../../providers/db-firebase";
+import { ROUTES } from "../../../../next/routing/route-map";
+import { PRODUCT_COLLECTION } from "../../../..";
+import { EVENTS_COLLECTION, EVENT_FIELDS } from "../../../../features/events";
+import { BLOG_POSTS_COLLECTION, BLOG_POST_FIELDS } from "../../../../features/blog";
+import { CATEGORIES_COLLECTION, CATEGORY_FIELDS } from "../../../../features/categories";
+import { STORE_COLLECTION, STORE_FIELDS } from "../../../../features/stores";
+import { SCAMMER_COLLECTION } from "../../../../features/scams/schemas/firestore";
+import { serverLogger } from "../../../../monitoring/server-logger";
+// Product field strings — matches consumer field-names.ts
+const PRODUCT_STATUS = "status";
+const PRODUCT_STATUS_PUBLISHED = "published";
+const PRODUCT_SLUG = "slug";
+const PRODUCT_UPDATED_AT = "updatedAt";
+function staticPages(baseUrl) {
+    const page = (path, changeFreq, priority) => ({ url: `${baseUrl}${path}`, lastModified: new Date(), changeFrequency: changeFreq, priority });
+    return [
+        page(String(ROUTES.HOME), "daily", 1.0),
+        page(String(ROUTES.PUBLIC.PRODUCTS), "hourly", 0.9),
+        page(String(ROUTES.PUBLIC.AUCTIONS), "hourly", 0.9),
+        page(String(ROUTES.PUBLIC.CATEGORIES), "weekly", 0.8),
+        page(String(ROUTES.PUBLIC.BLOG), "daily", 0.7),
+        page(String(ROUTES.PUBLIC.EVENTS), "daily", 0.7),
+        page(String(ROUTES.PUBLIC.SELLERS), "weekly", 0.6),
+        page(String(ROUTES.PUBLIC.ABOUT), "monthly", 0.5),
+        page(String(ROUTES.PUBLIC.CONTACT), "monthly", 0.5),
+        page(String(ROUTES.PUBLIC.FAQS), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.TERMS), "yearly", 0.3),
+        page(String(ROUTES.PUBLIC.PRIVACY), "yearly", 0.3),
+        page(String(ROUTES.PUBLIC.SECURITY), "yearly", 0.4),
+        page(String(ROUTES.PUBLIC.HELP), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.STORES), "weekly", 0.7),
+        page(String(ROUTES.PUBLIC.PROMOTIONS), "daily", 0.6),
+        page(String(ROUTES.PUBLIC.REVIEWS), "daily", 0.5),
+        page(String(ROUTES.PUBLIC.SELLER_GUIDE), "monthly", 0.5),
+        page(String(ROUTES.PUBLIC.COOKIE_POLICY), "yearly", 0.2),
+        page(String(ROUTES.PUBLIC.REFUND_POLICY), "yearly", 0.3),
+        page(String(ROUTES.PUBLIC.SHIPPING_POLICY), "yearly", 0.3),
+        page(String(ROUTES.PUBLIC.PRE_ORDERS), "daily", 0.7),
+        page(String(ROUTES.PUBLIC.FEES), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_AUCTIONS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_PRE_ORDERS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_OFFERS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_CHECKOUT_WORKS), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_ORDERS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_REVIEWS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.HOW_PAYOUTS_WORK), "monthly", 0.4),
+        page(String(ROUTES.PUBLIC.SCAMS), "daily", 0.8),
+        page(String(ROUTES.PUBLIC.SCAM_TYPES), "monthly", 0.7),
+        page(String(ROUTES.PUBLIC.SCAM_REPORT), "monthly", 0.6),
+        page(String(ROUTES.PUBLIC.SCAM_FAQS), "weekly", 0.7),
+    ];
+}
+async function fetchProductUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(PRODUCT_COLLECTION)
+            .where(PRODUCT_STATUS, "==", PRODUCT_STATUS_PUBLISHED)
+            .where("listingType", "==", "standard")
+            .select(PRODUCT_SLUG, PRODUCT_UPDATED_AT)
+            .limit(5000)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data[PRODUCT_SLUG] ?? doc.id;
+            return {
+                url: `${baseUrl}${ROUTES.PUBLIC.PRODUCT_DETAIL(slug)}`,
+                lastModified: data[PRODUCT_UPDATED_AT]?.toDate?.() ?? new Date(),
+                changeFrequency: "daily",
+                priority: 0.8,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch product URLs", { error: err });
+        return [];
+    }
+}
+async function fetchAuctionUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(PRODUCT_COLLECTION)
+            .where(PRODUCT_STATUS, "==", PRODUCT_STATUS_PUBLISHED)
+            .where("listingType", "==", "auction")
+            .select(PRODUCT_SLUG, PRODUCT_UPDATED_AT)
+            .limit(2000)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data[PRODUCT_SLUG] ?? doc.id;
+            return {
+                url: `${baseUrl}${ROUTES.PUBLIC.AUCTION_DETAIL(slug)}`,
+                lastModified: data[PRODUCT_UPDATED_AT]?.toDate?.() ?? new Date(),
+                changeFrequency: "daily",
+                priority: 0.8,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch auction URLs", { error: err });
+        return [];
+    }
+}
+async function fetchEventUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(EVENTS_COLLECTION)
+            .where(EVENT_FIELDS.STATUS, "==", EVENT_FIELDS.STATUS_VALUES.ACTIVE)
+            .select(EVENT_FIELDS.UPDATED_AT)
+            .limit(500)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            return {
+                url: `${baseUrl}${ROUTES.PUBLIC.EVENT_DETAIL(doc.id)}`,
+                lastModified: data[EVENT_FIELDS.UPDATED_AT]?.toDate?.() ?? new Date(),
+                changeFrequency: "daily",
+                priority: 0.7,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch event URLs", { error: err });
+        return [];
+    }
+}
+async function fetchCategoryUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(CATEGORIES_COLLECTION)
+            .where(CATEGORY_FIELDS.IS_ACTIVE, "==", true)
+            .select(CATEGORY_FIELDS.SLUG, CATEGORY_FIELDS.UPDATED_AT)
+            .limit(500)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data[CATEGORY_FIELDS.SLUG] ?? doc.id;
+            return {
+                url: `${baseUrl}/categories/${slug}`,
+                lastModified: data[CATEGORY_FIELDS.UPDATED_AT]?.toDate?.() ?? new Date(),
+                changeFrequency: "weekly",
+                priority: 0.7,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch category URLs", { error: err });
+        return [];
+    }
+}
+async function fetchBlogPostUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(BLOG_POSTS_COLLECTION)
+            .where(BLOG_POST_FIELDS.STATUS, "==", BLOG_POST_FIELDS.STATUS_VALUES.PUBLISHED)
+            .select(BLOG_POST_FIELDS.SLUG, BLOG_POST_FIELDS.PUBLISHED_AT, BLOG_POST_FIELDS.UPDATED_AT)
+            .limit(1000)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data[BLOG_POST_FIELDS.SLUG] ?? doc.id;
+            const lastModified = data[BLOG_POST_FIELDS.UPDATED_AT]?.toDate?.() ??
+                data[BLOG_POST_FIELDS.PUBLISHED_AT]?.toDate?.() ??
+                new Date();
+            return {
+                url: `${baseUrl}${ROUTES.BLOG.ARTICLE(slug)}`,
+                lastModified,
+                changeFrequency: "weekly",
+                priority: 0.7,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch blog post URLs", { error: err });
+        return [];
+    }
+}
+async function fetchStoreUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(STORE_COLLECTION)
+            .where(STORE_FIELDS.STATUS, "==", STORE_FIELDS.STATUS_VALUES.ACTIVE)
+            .where(STORE_FIELDS.IS_PUBLIC, "==", true)
+            .select(STORE_FIELDS.STORE_SLUG, STORE_FIELDS.UPDATED_AT)
+            .limit(1000)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data[STORE_FIELDS.STORE_SLUG] ?? doc.id;
+            return {
+                url: `${baseUrl}${ROUTES.PUBLIC.STORE_DETAIL(slug)}`,
+                lastModified: data[STORE_FIELDS.UPDATED_AT]?.toDate?.() ?? new Date(),
+                changeFrequency: "weekly",
+                priority: 0.6,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch store URLs", { error: err });
+        return [];
+    }
+}
+async function fetchScammerUrls(baseUrl) {
+    try {
+        const db = getAdminDb();
+        const snap = await db
+            .collection(SCAMMER_COLLECTION)
+            .where("status", "==", "verified")
+            .select("seo", "updatedAt")
+            .limit(2000)
+            .get();
+        return snap.docs.map((doc) => {
+            const data = doc.data();
+            const slug = data.seo?.slug ?? doc.id;
+            return {
+                url: `${baseUrl}${ROUTES.PUBLIC.SCAM_DETAIL(slug)}`,
+                lastModified: data.updatedAt?.toDate?.() ?? new Date(),
+                changeFrequency: "weekly",
+                priority: 0.7,
+            };
+        });
+    }
+    catch (err) {
+        serverLogger.warn("sitemap: failed to fetch scammer URLs", { error: err });
+        return [];
+    }
+}
+export async function buildSitemap({ baseUrl }) {
+    const [productUrls, categoryUrls, eventUrls, blogUrls, auctionUrls, storeUrls, scammerUrls] = await Promise.all([
+        fetchProductUrls(baseUrl),
+        fetchCategoryUrls(baseUrl),
+        fetchEventUrls(baseUrl),
+        fetchBlogPostUrls(baseUrl),
+        fetchAuctionUrls(baseUrl),
+        fetchStoreUrls(baseUrl),
+        fetchScammerUrls(baseUrl),
+    ]);
+    return [
+        ...staticPages(baseUrl),
+        ...categoryUrls,
+        ...blogUrls,
+        ...productUrls,
+        ...auctionUrls,
+        ...eventUrls,
+        ...storeUrls,
+        ...scammerUrls,
+    ];
+}

package/dist/configs/next.d.ts

@@ -1,24 +1,3 @@
-/**
- * defineNextConfig — appkit-aware Next.js config factory.
- *
- * Provides sensible defaults for projects consuming @mohasinac/appkit.
- * Consumer overrides deep-merge with the defaults (arrays concatenate).
- *
- * Notable defaults:
- * - `serverExternalPackages` includes firebase-admin + GCP deps
- * - `outputFileTracingIncludes` uses broad org-level globs (**) so every
- *   current and future @google-cloud/* subpackage (incl. build/protos/**) is
- *   included in Vercel Lambda bundles without needing per-package entries.
- * - Consumer additions to the same route key are MERGED (union), not replaced.
- * - `images.remotePatterns` restricts to Firebase Storage + localhost; consumer
- *   can append additional patterns via `images.remotePatterns`.
- * - `experimental.serverActions.bodySizeLimit` set to "4mb"
- * - Optional `IgnorePlugin` for optional native deps (request, fast-crc32c)
- *
- * When the _internal/ dual-entry migration completes in S7, the firebase-admin
- * workarounds are removed from this helper because the client entry will never
- * import firebase-admin. Until then they remain for backward compatibility.
- */
 export interface NextConfigOverride {
     serverExternalPackages?: string[];
     experimental?: Record<string, unknown>;

package/dist/configs/next.js

@@ -1,3 +1,4 @@
+import path from "path";
 /**
  * defineNextConfig — appkit-aware Next.js config factory.
  *
@@ -107,6 +108,11 @@ export function defineNextConfig(override = {}) {
             "./node_modules/duplexify/**",
             "./node_modules/uuid/**",
             "./node_modules/lodash.camelcase/**",
+            // gaxios transitive deps missing from Vercel tracer (dynamic require, not statically analysed)
+            "./node_modules/is-stream/**",
+            "./node_modules/extend/**",
+            "./node_modules/https-proxy-agent/**",
+            "./node_modules/agent-base/**",
         ],
     };
     const mergedOutputFileTracingIncludes = {
@@ -122,6 +128,19 @@ export function defineNextConfig(override = {}) {
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     function mergedWebpack(config, ctx) {
         const { isServer, webpack } = ctx;
+        // Deduplicate firebase client SDK across the monorepo.
+        // appkit ships its own node_modules/firebase (from standalone dev). Without
+        // this alias, webpack may resolve firebase/app to two separate module
+        // instances — one from appkit/node_modules and one from root node_modules —
+        // producing two separate Firebase app registries. getApps()/getAuth() then
+        // disagree on which apps exist, causing "No Firebase App '[DEFAULT]'" errors.
+        // Pinning every firebase/* import to the root copy ensures the singleton
+        // registry is shared regardless of which file imports firebase.
+        const _firebaseRoot = path.resolve(process.cwd(), "node_modules", "firebase");
+        config.resolve.alias = {
+            ...(config.resolve.alias ?? {}),
+            "firebase": _firebaseRoot,
+        };
         if (isServer) {
             const externalFn = ({ request }, callback) => {
                 if (request &&
@@ -138,6 +157,55 @@ export function defineNextConfig(override = {}) {
             // firebase-admin wraps in try/catch and degrades gracefully without.
             config.plugins.push(new webpack.IgnorePlugin({ resourceRegExp: /^(request|fast-crc32c)$/ }));
         }
+        else {
+            // ── Client bundle ──────────────────────────────────────────────────────
+            // client-entry.ts re-exports ALL of index.ts (including repositories,
+            // email providers, and payment SDKs) via `export * from "./index"`.
+            // sideEffects:false should tree-shake unused server-only exports, but
+            // webpack must first PARSE the full module graph to enumerate all exports.
+            // That parse phase hits Node.js-only requires deep in firebase-admin,
+            // resend, razorpay, etc. and throws "Module not found" errors.
+            //
+            // Fix: alias every server-only package to `false` so webpack replaces them
+            // with empty stubs during the parse phase. Tree-shaking then eliminates the
+            // dead code paths that would have called them. This mirrors what the server
+            // branch does with `externals`, but for client bundles.
+            // Strip the "node:" URI scheme prefix — webpack 5 browser target doesn't
+            // handle it by default, causing UnhandledSchemeError.
+            config.plugins.push(new webpack.NormalModuleReplacementPlugin(/^node:/, (resource) => {
+                resource.request = resource.request.replace(/^node:/, "");
+            }));
+            // Stub out server-only packages: reuse FIREBASE_EXTERNAL_PACKAGES plus
+            // additional email/payment SDKs that also import Node.js built-ins.
+            const CLIENT_STUB_PACKAGES = [
+                ...FIREBASE_EXTERNAL_PACKAGES,
+                "resend",
+                "@react-email/render",
+                "razorpay",
+                "firebase-functions",
+            ];
+            const clientStubAliases = Object.fromEntries(CLIENT_STUB_PACKAGES.flatMap((pkg) => [
+                [pkg, false],
+                // Also stub sub-paths so `import ... from 'pkg/sub'` is covered.
+                // Webpack resolves these via the alias before following sub-paths,
+                // so the top-level alias alone handles most cases, but explicit
+                // sub-path aliases cover edge cases like `firebase-admin/app`.
+            ]));
+            config.resolve.alias = {
+                ...(config.resolve.alias ?? {}),
+                ...clientStubAliases,
+            };
+            // Fallbacks for Node.js built-ins that have no browser polyfill and are
+            // reached before the alias can intercept (e.g. inline require("fs")).
+            // DO NOT stub path/os/url/stream — Next.js provides browser polyfills.
+            config.resolve.fallback = {
+                ...(config.resolve.fallback ?? {}),
+                child_process: false,
+                fs: false,
+                net: false,
+                tls: false,
+            };
+        }
         return consumerWebpack ? consumerWebpack(config, ctx) : config;
     }
     // Default remotePatterns: Firebase Storage + localhost only.

package/dist/features/account/components/AddressFilters.js

@@ -1,3 +1,4 @@
+"use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useTranslations } from "next-intl";
 import { FilterFacetSection } from "../../filters/FilterFacetSection";

package/dist/features/admin/components/AdminAllEventEntriesView.js

@@ -92,7 +92,7 @@ export function AdminAllEventEntriesView({ children, ...props }) {
     if (hasChildren) {
         return _jsx(ListingViewShell, { portal: "admin", ...props, children: children });
     }
-    return (_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search by user name or event ID", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); table.setPage(1); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No entries found", renderRowActions: (row) => {
+    return (_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search by user name or event ID", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No entries found", renderRowActions: (row) => {
                             const er = row;
                             return (_jsx(RowActionMenu, { actions: [
                                     { label: "Confirm", onClick: () => updateMutation.mutate({ id: er.id, status: "CONFIRMED" }) },

package/dist/features/admin/components/AdminBidsView.js

@@ -97,7 +97,7 @@ export function AdminBidsView({ children, ...props }) {
     if (hasChildren) {
         return _jsx(ListingViewShell, { portal: "admin", ...props, children: children });
     }
-    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search bids, products, or bidder IDs", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); table.setPage(1); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No bids found", renderRowActions: (row) => {
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search bids, products, or bidder IDs", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No bids found", renderRowActions: (row) => {
                                     const bidRow = row;
                                     const isCancelled = bidRow.status === "cancelled" || bidRow.status === "voided";
                                     return (_jsx(RowActionMenu, { actions: [

package/dist/features/admin/components/AdminBlogView.js

@@ -95,5 +95,5 @@ export function AdminBlogView({ children, getRowHref, ...props }) {
     if (hasChildren) {
         return _jsx(ListingViewShell, { portal: "admin", ...props, children: children });
     }
-    return (_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search articles, authors, or tags", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); table.setPage(1); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState, extra: _jsxs(Button, { size: "sm", onClick: openCreatePanel, className: "flex items-center gap-1.5", children: [_jsx(Plus, { className: "h-4 w-4" }), "New Post"] }) }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No blog posts found", onRowClick: (row) => openEditPanel(row.id) })] }), filterOpen && (_jsxs(_Fragment, { children: [_jsx("div", { className: "fixed inset-0 z-40 bg-black/40", "aria-hidden": "true", onClick: () => setFilterOpen(false) }), _jsxs("div", { className: "fixed inset-y-0 left-0 z-50 flex w-80 flex-col bg-white dark:bg-slate-900 shadow-2xl", children: [_jsxs("div", { className: "flex items-center justify-between border-b border-zinc-200 dark:border-slate-700 px-4 py-3.5", children: [_jsx("span", { className: "text-base font-semibold text-zinc-900 dark:text-zinc-100", children: "Filters" }), _jsxs("div", { className: "flex items-center gap-2", children: [activeFilterCount > 0 && (_jsx("button", { type: "button", onClick: clearFilters, className: "text-xs text-zinc-500 hover:text-rose-500 dark:text-zinc-400 transition-colors", children: "Clear all" })), _jsx("button", { type: "button", onClick: () => setFilterOpen(false), "aria-label": "Close", className: "rounded-lg p-1.5 text-zinc-500 hover:bg-zinc-100 dark:hover:bg-slate-800 transition-colors", children: _jsx(X, { className: "h-5 w-5" }) })] })] }), _jsxs("div", { className: "flex-1 overflow-y-auto px-4 py-4 space-y-5", children: [_jsx(FilterChipGroup, { label: "Status", tabs: STATUS_OPTIONS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) }), _jsx(FilterChipGroup, { label: "Featured", tabs: FEATURED_TABS, value: pendingFilters.isFeatured ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, isFeatured: id })), allId: "" })] }), _jsx("div", { className: "border-t border-zinc-200 dark:border-slate-700 px-4 py-3.5", children: _jsxs("button", { type: "button", onClick: applyFilters, className: "w-full rounded-lg bg-primary py-2.5 text-sm font-semibold text-white hover:bg-primary-600 transition-colors active:scale-[0.98]", children: ["Apply Filters", activeFilterCount > 0 ? ` (${activeFilterCount})` : ""] }) })] })] })), _jsx(SideDrawer, { isOpen: isCreateOpen || isEditOpen, onClose: closePanel, title: isCreateOpen ? "New Post" : "Edit Post", mode: isCreateOpen ? "create" : "edit", children: (isCreateOpen || isEditOpen) && (_jsx(AdminBlogEditorView, { postId: editId ?? undefined, onSaved: closePanel, onDeleted: closePanel, embedded: true })) })] }));
+    return (_jsxs("div", { className: "min-h-screen", children: [_jsx(ListingToolbar, { filterCount: activeFilterCount, onFiltersClick: openFilters, searchValue: searchInput, searchPlaceholder: "Search articles, authors, or tags", onSearchChange: setSearchInput, onSearchCommit: commitSearch, sortValue: table.get("sort") || DEFAULT_SORT, sortOptions: SORT_OPTIONS, onSortChange: (v) => { table.set("sort", v); }, hideViewToggle: true, onResetAll: resetAll, hasActiveState: hasActiveState, extra: _jsxs(Button, { size: "sm", onClick: openCreatePanel, className: "flex items-center gap-1.5", children: [_jsx(Plus, { className: "h-4 w-4" }), "New Post"] }) }), totalPages > 1 && (_jsx("div", { className: "sticky top-[calc(var(--header-height,0px)+44px)] z-10 flex justify-center bg-white/95 dark:bg-slate-900/95 backdrop-blur-sm border-b border-zinc-200 dark:border-slate-700 px-3 py-1.5", children: _jsx(Pagination, { currentPage: currentPage, totalPages: totalPages, onPageChange: (p) => table.setPage(p) }) })), _jsxs("div", { className: "py-4 px-3 sm:px-4", children: [errorMessage && (_jsx("div", { className: "mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700 dark:border-red-900/60 dark:bg-red-950/40 dark:text-red-200", children: errorMessage })), _jsx(DataTable, { rows: rows, isLoading: isLoading, emptyLabel: "No blog posts found", onRowClick: (row) => openEditPanel(row.id) })] }), filterOpen && (_jsxs(_Fragment, { children: [_jsx("div", { className: "fixed inset-0 z-40 bg-black/40", "aria-hidden": "true", onClick: () => setFilterOpen(false) }), _jsxs("div", { className: "fixed inset-y-0 left-0 z-50 flex w-80 flex-col bg-white dark:bg-slate-900 shadow-2xl", children: [_jsxs("div", { className: "flex items-center justify-between border-b border-zinc-200 dark:border-slate-700 px-4 py-3.5", children: [_jsx("span", { className: "text-base font-semibold text-zinc-900 dark:text-zinc-100", children: "Filters" }), _jsxs("div", { className: "flex items-center gap-2", children: [activeFilterCount > 0 && (_jsx("button", { type: "button", onClick: clearFilters, className: "text-xs text-zinc-500 hover:text-rose-500 dark:text-zinc-400 transition-colors", children: "Clear all" })), _jsx("button", { type: "button", onClick: () => setFilterOpen(false), "aria-label": "Close", className: "rounded-lg p-1.5 text-zinc-500 hover:bg-zinc-100 dark:hover:bg-slate-800 transition-colors", children: _jsx(X, { className: "h-5 w-5" }) })] })] }), _jsxs("div", { className: "flex-1 overflow-y-auto px-4 py-4 space-y-5", children: [_jsx(FilterChipGroup, { label: "Status", tabs: STATUS_OPTIONS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) }), _jsx(FilterChipGroup, { label: "Featured", tabs: FEATURED_TABS, value: pendingFilters.isFeatured ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, isFeatured: id })), allId: "" })] }), _jsx("div", { className: "border-t border-zinc-200 dark:border-slate-700 px-4 py-3.5", children: _jsxs("button", { type: "button", onClick: applyFilters, className: "w-full rounded-lg bg-primary py-2.5 text-sm font-semibold text-white hover:bg-primary-600 transition-colors active:scale-[0.98]", children: ["Apply Filters", activeFilterCount > 0 ? ` (${activeFilterCount})` : ""] }) })] })] })), _jsx(SideDrawer, { isOpen: isCreateOpen || isEditOpen, onClose: closePanel, title: isCreateOpen ? "New Post" : "Edit Post", mode: isCreateOpen ? "create" : "edit", children: (isCreateOpen || isEditOpen) && (_jsx(AdminBlogEditorView, { postId: editId ?? undefined, onSaved: closePanel, onDeleted: closePanel, embedded: true })) })] }));
 }