@mohasinac/appkit 3.0.6 → 3.1.0

package/dist/features/wishlist/repository/__tests__/user-wishlist.repository.test.js

@@ -0,0 +1,139 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { makeMockDb, makeSnap } from "../../../../../tests/helpers/mock-firestore";
+const { db, mockDocRef, mockCollection, mockTxn } = makeMockDb();
+vi.mock("../../../../providers/db-firebase", () => ({
+    getAdminDb: () => db,
+}));
+vi.mock("../../../../monitoring", () => ({
+    serverLogger: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
+}));
+import { UserWishlistRepository, WishlistFullError } from "../user-wishlist.repository";
+import { WISHLIST_MAX } from "../../../../constants/limits";
+const repo = new UserWishlistRepository();
+function makeItems(count) {
+    return Array.from({ length: count }, (_, i) => ({
+        productId: `product-${i}`,
+        addedAt: new Date(),
+    }));
+}
+beforeEach(() => {
+    vi.clearAllMocks();
+    // Reset collection chain so tests that override db.collection don't leak
+    db.collection.mockReturnValue(mockCollection);
+    mockCollection.doc.mockReturnValue(mockDocRef);
+    // Default: runTransaction calls through
+    db.runTransaction.mockImplementation(async (fn) => fn(mockTxn));
+    // Default: doc.get returns non-existent snap
+    mockDocRef.get.mockResolvedValue(makeSnap(null));
+    mockDocRef.set.mockResolvedValue(undefined);
+    mockTxn.get.mockResolvedValue(makeSnap(null));
+    mockTxn.set.mockResolvedValue(undefined);
+});
+describe("UserWishlistRepository.addItem", () => {
+    it("adds first item: count = 1, no error", async () => {
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "user-1", items: [], updatedAt: new Date() }));
+        const count = await repo.addItem("user-1", "product-new");
+        expect(count).toBe(1);
+        expect(mockTxn.set).toHaveBeenCalledOnce();
+    });
+    it("19 items → adds item, count = 20, no error", async () => {
+        const items = makeItems(19);
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        const count = await repo.addItem("u", "product-20");
+        expect(count).toBe(20);
+    });
+    it("20 items + new productId → throws WishlistFullError with current=20, limit=20", async () => {
+        const items = makeItems(WISHLIST_MAX);
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        await expect(repo.addItem("u", "product-new")).rejects.toBeInstanceOf(WishlistFullError);
+        const err = await repo.addItem("u", "product-new").catch((e) => e);
+        if (err instanceof WishlistFullError) {
+            expect(err.current).toBe(WISHLIST_MAX);
+            expect(err.limit).toBe(WISHLIST_MAX);
+        }
+    });
+    it("20 items + same productId (existing) → idempotent no-op, returns existing count", async () => {
+        const items = makeItems(WISHLIST_MAX);
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        const count = await repo.addItem("u", "product-0"); // already in list
+        expect(count).toBe(WISHLIST_MAX);
+        expect(mockTxn.set).not.toHaveBeenCalled();
+    });
+    it("5 items + existing productId → idempotent no-op, count remains 5", async () => {
+        const items = makeItems(5);
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        const count = await repo.addItem("u", "product-3"); // already in list
+        expect(count).toBe(5);
+        expect(mockTxn.set).not.toHaveBeenCalled();
+    });
+    it("uses db.runTransaction for every add", async () => {
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items: [], updatedAt: new Date() }));
+        await repo.addItem("u", "product-x");
+        expect(db.runTransaction).toHaveBeenCalledOnce();
+    });
+    it("stores productType in the item", async () => {
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items: [], updatedAt: new Date() }));
+        await repo.addItem("u", "product-x", { productType: "auction" });
+        const setCall = mockTxn.set.mock.calls[0][1];
+        expect(setCall.items[0].productType).toBe("auction");
+    });
+});
+describe("UserWishlistRepository.removeItem", () => {
+    it("removes existing productId, count decrements", async () => {
+        const items = [
+            { productId: "product-0", addedAt: new Date() },
+            { productId: "product-1", addedAt: new Date() },
+        ];
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        await repo.removeItem("u", "product-0");
+        const setCall = mockTxn.set.mock.calls[0][1];
+        expect(setCall.items).toHaveLength(1);
+        expect(setCall.items[0].productId).toBe("product-1");
+    });
+    it("non-existent productId → no-op, set not called", async () => {
+        const items = [{ productId: "product-0", addedAt: new Date() }];
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        await repo.removeItem("u", "product-xxx");
+        expect(mockTxn.set).not.toHaveBeenCalled();
+    });
+    it("uses db.runTransaction", async () => {
+        mockTxn.get.mockResolvedValue(makeSnap({ userId: "u", items: [], updatedAt: new Date() }));
+        await repo.removeItem("u", "product-x");
+        expect(db.runTransaction).toHaveBeenCalledOnce();
+    });
+});
+describe("UserWishlistRepository.isInWishlist", () => {
+    it("productId in items array → returns true", async () => {
+        const items = [{ productId: "product-0", addedAt: new Date() }];
+        // First get: wishlist doc; second get: product exists check in filterExistingProducts
+        mockDocRef.get
+            .mockResolvedValueOnce(makeSnap({ userId: "u", items, updatedAt: new Date() }))
+            .mockResolvedValue(makeSnap({ id: "product-0" }, "product-0"));
+        const result = await repo.isInWishlist("u", "product-0");
+        expect(result).toBe(true);
+    });
+    it("productId not in items array → returns false", async () => {
+        mockDocRef.get.mockResolvedValue(makeSnap({ userId: "u", items: [], updatedAt: new Date() }));
+        const result = await repo.isInWishlist("u", "product-xxx");
+        expect(result).toBe(false);
+    });
+});
+describe("UserWishlistRepository.countByUser", () => {
+    it("returns items.length from stored document", async () => {
+        const items = makeItems(7);
+        mockDocRef.get.mockResolvedValue(makeSnap({ userId: "u", items, updatedAt: new Date() }));
+        const count = await repo.countByUser("u");
+        expect(count).toBe(7);
+    });
+    it("returns 0 for user with no document", async () => {
+        mockDocRef.get.mockResolvedValue(makeSnap(null));
+        const count = await repo.countByUser("u");
+        expect(count).toBe(0);
+    });
+});
+describe("UserWishlistRepository.clearWishlist", () => {
+    it("sets items: [] without deleting the document", async () => {
+        await repo.clearWishlist("u");
+        expect(mockDocRef.set).toHaveBeenCalledWith(expect.objectContaining({ items: [] }));
+    });
+});

package/dist/index.d.ts

@@ -444,6 +444,7 @@ export { Can } from "./security/index";
 export { DEFAULT_ROLES } from "./security/index";
 export { ENC_PREFIX } from "./security/index";
 export { EVENT_ENTRY_PII_FIELDS } from "./security/index";
+export { LOTTERY_ENTRY_PII_FIELDS } from "./security/index";
 export { HMAC_PREFIX } from "./security/index";
 export { NEWSLETTER_PII_FIELDS } from "./security/index";
 export { NEWSLETTER_PII_INDEX_MAP } from "./security/index";
@@ -1775,6 +1776,8 @@ export type { AdminEventEditorViewProps } from "./features/events/index";
 export { EVENTS_COLLECTION } from "./features/events/index";
 export { EVENT_ADMIN_SORT_OPTIONS } from "./features/events/index";
 export { EVENT_ENTRIES_COLLECTION } from "./features/events/index";
+export { LOTTERY_ENTRIES_COLLECTION } from "./features/lottery/schemas/firestore";
+export { lotteryEntriesSeedData } from "./seed/index";
 export { EVENT_ENTRY_FIELDS } from "./features/events/index";
 export { EVENT_ENTRY_INDEXED_FIELDS } from "./features/events/index";
 export { EVENT_FIELDS } from "./features/events/index";
@@ -1796,6 +1799,17 @@ export { EventRaffleWinnerView } from "./features/events/index";
 export type { EventRaffleWinnerViewProps } from "./features/events/index";
 export { SpinWheelView } from "./features/events/index";
 export type { SpinWheelViewProps } from "./features/events/index";
+export { LotterySlotGrid } from "./_internal/client/features/lottery/LotterySlotGrid";
+export { LotteryPullForm } from "./_internal/client/features/lottery/LotteryPullForm";
+export { LotteryListView } from "./_internal/client/features/lottery/LotteryListView";
+export { LotteryDetailView } from "./_internal/client/features/lottery/LotteryDetailView";
+export { LotteryEntriesView } from "./_internal/client/features/lottery/LotteryEntriesView";
+export { LotteryAdminSlotView } from "./_internal/client/features/lottery/LotteryAdminSlotView";
+export { LotteryAdminEditView } from "./_internal/client/features/lottery/LotteryAdminEditView";
+export { PrizeDrawLotteryDetailView } from "./_internal/client/features/lottery/PrizeDrawLotteryDetailView";
+export type { LotteryConfig, LotterySlot, ClientLotterySlot, ClientLotteryConfig, LotteryPricingMode, LotteryEntryStatus } from "./features/lottery/types";
+export { LotteryError, computeWeight, pickWeightedSlot, assignSlotWeights } from "./features/lottery/types";
+export type { LotteryEntryDocument } from "./features/lottery/schemas/firestore";
 export type { SpinPrize } from "./features/events/index";
 export { EventsListView } from "./features/events/index";
 export { EventsIndexListing } from "./features/events/index";

package/dist/index.js

@@ -784,6 +784,8 @@ export { ENC_PREFIX } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // EVENT_ENTRY_PII_FIELDS - Constant used across modules.
 export { EVENT_ENTRY_PII_FIELDS } from "./security/index";
+// LOTTERY_ENTRY_PII_FIELDS - PII fields for lottery entries.
+export { LOTTERY_ENTRY_PII_FIELDS } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // HMAC_PREFIX - Constant used across modules.
 export { HMAC_PREFIX } from "./security/index";
@@ -1247,6 +1249,7 @@ export { claimedCouponsSeedData } from "./seed/index";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // eventEntriesSeedData - Model for event entries seed data.
 export { eventEntriesSeedData } from "./seed/index";
+// lotteryEntriesSeedData already exported above via LOTTERY_ENTRIES_COLLECTION block.
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // eventsSeedData - Model for events seed data.
 export { eventsSeedData } from "./seed/index";
@@ -3382,6 +3385,10 @@ export { EVENT_ADMIN_SORT_OPTIONS } from "./features/events/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // EVENT_ENTRIES_COLLECTION - Constant used across modules.
 export { EVENT_ENTRIES_COLLECTION } from "./features/events/index";
+// LOTTERY_ENTRIES_COLLECTION - New lotteryEntries collection constant.
+export { LOTTERY_ENTRIES_COLLECTION } from "./features/lottery/schemas/firestore";
+// lotteryEntriesSeedData - Seed data for the lotteryEntries collection.
+export { lotteryEntriesSeedData } from "./seed/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // EVENT_ENTRY_FIELDS - Constant used across modules.
 export { EVENT_ENTRY_FIELDS } from "./features/events/index";
@@ -3436,6 +3443,16 @@ export { EventStatusBadge } from "./features/events/index";
 export { EventRaffleWinnerView } from "./features/events/index";
 // SpinWheelView - Spin-the-wheel client component for spin-wheel events.
 export { SpinWheelView } from "./features/events/index";
+// Lottery feature — client components
+export { LotterySlotGrid } from "./_internal/client/features/lottery/LotterySlotGrid";
+export { LotteryPullForm } from "./_internal/client/features/lottery/LotteryPullForm";
+export { LotteryListView } from "./_internal/client/features/lottery/LotteryListView";
+export { LotteryDetailView } from "./_internal/client/features/lottery/LotteryDetailView";
+export { LotteryEntriesView } from "./_internal/client/features/lottery/LotteryEntriesView";
+export { LotteryAdminSlotView } from "./_internal/client/features/lottery/LotteryAdminSlotView";
+export { LotteryAdminEditView } from "./_internal/client/features/lottery/LotteryAdminEditView";
+export { PrizeDrawLotteryDetailView } from "./_internal/client/features/lottery/PrizeDrawLotteryDetailView";
+export { LotteryError, computeWeight, pickWeightedSlot, assignSlotWeights } from "./features/lottery/types";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // EventsListView - Component for events list view.
 export { EventsListView } from "./features/events/index";

package/dist/next/api/routeHandler.d.ts

@@ -61,7 +61,7 @@ interface RouteHandlerOptions<TInput = unknown, TParams = Record<string, string>
         requestId: string;
     }) => Promise<Response>;
 }
-export declare function createRouteHandler<TInput = unknown, TParams = Record<string, string>>(options: RouteHandlerOptions<TInput, TParams>): (request: Request, context: {
+export declare function createRouteHandler<TInput = unknown, TParams = Record<string, string>>(options: RouteHandlerOptions<TInput, TParams>): (request: Request, context?: {
     params: Promise<TParams>;
 }) => Promise<Response>;
 export {};

package/dist/next/routing/route-map.d.ts

@@ -81,6 +81,8 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly EVENT_PARTICIPATE: (id: string) => string;
         readonly EVENT_LEADERBOARD: (id: string) => string;
         readonly EVENT_WINNER: (id: string) => string;
+        readonly LOTTERIES: "/lottery";
+        readonly LOTTERY_DETAIL: (id: string) => string;
         readonly SUBLISTING_CATEGORIES: "/sublisting-categories";
         readonly SUBLISTING_CATEGORY: (slug: string) => string;
         readonly SUPPORT: "/support";
@@ -187,6 +189,7 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly PRIZE_DRAWS: "/store/prize-draws";
         readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
+        readonly PRIZE_DRAW_ENTRIES: (id: string) => string;
         readonly PRODUCT_CODES: (id: string) => string;
         readonly CLASSIFIED: "/store/classified";
         readonly CLASSIFIED_NEW: "/store/classified/new";
@@ -301,6 +304,9 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly BUNDLES_EDIT: (id: string) => string;
         readonly PRIZE_DRAWS: "/admin/prize-draws";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
+        readonly PRIZE_DRAWS_ENTRIES: (id: string) => string;
+        readonly LOTTERIES: "/admin/lotteries";
+        readonly LOTTERY_ENTRIES: (id: string) => string;
         readonly TEAM: "/admin/team";
         readonly SUPPORT_TICKETS: "/admin/support-tickets";
         readonly SUPPORT_TICKET_BY_ID: (id: string) => string;
@@ -411,6 +417,8 @@ export declare const ROUTES: {
         readonly EVENT_PARTICIPATE: (id: string) => string;
         readonly EVENT_LEADERBOARD: (id: string) => string;
         readonly EVENT_WINNER: (id: string) => string;
+        readonly LOTTERIES: "/lottery";
+        readonly LOTTERY_DETAIL: (id: string) => string;
         readonly SUBLISTING_CATEGORIES: "/sublisting-categories";
         readonly SUBLISTING_CATEGORY: (slug: string) => string;
         readonly SUPPORT: "/support";
@@ -517,6 +525,7 @@ export declare const ROUTES: {
         readonly PRIZE_DRAWS: "/store/prize-draws";
         readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
+        readonly PRIZE_DRAW_ENTRIES: (id: string) => string;
         readonly PRODUCT_CODES: (id: string) => string;
         readonly CLASSIFIED: "/store/classified";
         readonly CLASSIFIED_NEW: "/store/classified/new";
@@ -631,6 +640,9 @@ export declare const ROUTES: {
         readonly BUNDLES_EDIT: (id: string) => string;
         readonly PRIZE_DRAWS: "/admin/prize-draws";
         readonly PRIZE_DRAWS_EDIT: (id: string) => string;
+        readonly PRIZE_DRAWS_ENTRIES: (id: string) => string;
+        readonly LOTTERIES: "/admin/lotteries";
+        readonly LOTTERY_ENTRIES: (id: string) => string;
         readonly TEAM: "/admin/team";
         readonly SUPPORT_TICKETS: "/admin/support-tickets";
         readonly SUPPORT_TICKET_BY_ID: (id: string) => string;
@@ -713,6 +725,7 @@ export declare const SELLER_ROUTES: {
     readonly PRIZE_DRAWS: "/store/prize-draws";
     readonly PRIZE_DRAWS_NEW: "/store/prize-draws/new";
     readonly PRIZE_DRAWS_EDIT: (id: string) => string;
+    readonly PRIZE_DRAW_ENTRIES: (id: string) => string;
     readonly PRODUCT_CODES: (id: string) => string;
     readonly CLASSIFIED: "/store/classified";
     readonly CLASSIFIED_NEW: "/store/classified/new";

package/dist/next/routing/route-map.js

@@ -69,6 +69,8 @@ export const DEFAULT_ROUTE_MAP = {
         EVENT_PARTICIPATE: (id) => `/events/${id}/participate`,
         EVENT_LEADERBOARD: (id) => `/events/${id}/leaderboard`,
         EVENT_WINNER: (id) => `/events/${id}/winner`,
+        LOTTERIES: "/lottery",
+        LOTTERY_DETAIL: (id) => `/lottery/${id}`,
         SUBLISTING_CATEGORIES: "/sublisting-categories",
         SUBLISTING_CATEGORY: (slug) => `/sublisting-categories/${slug}`,
         SUPPORT: "/support",
@@ -176,6 +178,7 @@ export const DEFAULT_ROUTE_MAP = {
         PRIZE_DRAWS: "/store/prize-draws",
         PRIZE_DRAWS_NEW: "/store/prize-draws/new",
         PRIZE_DRAWS_EDIT: (id) => `/store/prize-draws/${id}/edit`,
+        PRIZE_DRAW_ENTRIES: (id) => `/store/prize-draws/${id}/entries`,
         PRODUCT_CODES: (id) => `/store/products/${id}/codes`,
         // SB-UNI-R — classified / digital-code / live
         CLASSIFIED: "/store/classified",
@@ -295,6 +298,9 @@ export const DEFAULT_ROUTE_MAP = {
         BUNDLES_EDIT: (id) => `/admin/bundles/${id}/edit`,
         PRIZE_DRAWS: "/admin/prize-draws",
         PRIZE_DRAWS_EDIT: (id) => `/admin/prize-draws/${id}/edit`,
+        PRIZE_DRAWS_ENTRIES: (id) => `/admin/prize-draws/${id}/entries`,
+        LOTTERIES: "/admin/lotteries",
+        LOTTERY_ENTRIES: (id) => `/admin/lotteries/${id}/entries`,
         TEAM: "/admin/team",
         SUPPORT_TICKETS: "/admin/support-tickets",
         SUPPORT_TICKET_BY_ID: (id) => `/admin/support-tickets/${id}`,

package/dist/repositories/index.d.ts

@@ -49,3 +49,4 @@ export type { ProductTemplateDocument, ProductTemplateCreateInput, ProductTempla
 export { ProductFeaturesRepository, productFeaturesRepository, } from "../features/products/repository/product-features.repository";
 export type { ProductFeatureListFilter } from "../features/products/repository/product-features.repository";
 export { loadProductFeaturesForStore } from "../features/products/repository/loadProductFeatures";
+export { LotteryEntryRepository, lotteryEntryRepository, } from "../features/lottery/repository/lottery-entry.repository";

package/dist/repositories/index.js

@@ -59,3 +59,5 @@ export { loadProductFeaturesForStore } from "../features/products/repository/loa
 // SB-UNI-V — BundlesRepository deleted; bundles live on categoriesRepository
 // with categoryType:"bundle". See features/categories/repository for the
 // listByType / findBySlugAndType helpers.
+// Lottery entries repository
+export { LotteryEntryRepository, lotteryEntryRepository, } from "../features/lottery/repository/lottery-entry.repository";

package/dist/security/index.d.ts

@@ -5,7 +5,7 @@ export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requi
 export type { UserRole } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
 export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, isPiiEncrypted, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-encrypt";
-export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, } from "./pii-schemas";
+export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
 export type { Permission, RoleDefinition, RbacConfig, ResolvedUser, RbacHookReturn, } from "./rbac";
 export { DEFAULT_ROLES, resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, createRbacHook, Can, createRequirePermission, createRequirePermissionSync, createRbacMiddleware, } from "./rbac";

package/dist/security/index.js

@@ -3,6 +3,6 @@ export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, cle
 export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requireActiveAccount, canChangeRole, getRoleLevel, } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
 export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, isPiiEncrypted, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-encrypt";
-export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, } from "./pii-schemas";
+export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
 export { DEFAULT_ROLES, resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, createRbacHook, Can, createRequirePermission, createRequirePermissionSync, createRbacMiddleware, } from "./rbac";

package/dist/security/pii-schemas.d.ts

@@ -36,5 +36,7 @@ export declare const OFFER_PII_FIELDS: readonly ["buyerName", "buyerEmail", "sel
 export declare const CHAT_PII_FIELDS: readonly ["buyerName", "sellerName"];
 /** PII fields in event entries */
 export declare const EVENT_ENTRY_PII_FIELDS: readonly ["userDisplayName", "userEmail", "ipAddress"];
+/** PII fields in lottery entries */
+export declare const LOTTERY_ENTRY_PII_FIELDS: readonly ["userPhone", "userEmail", "userDisplayName"];
 /** Store OAuth bearer tokens — encrypted via SETTINGS_ENCRYPTION_KEY */
 export declare const STORE_SECRET_FIELDS: readonly ["whatsappConfig.accessToken"];

package/dist/security/pii-schemas.js

@@ -60,5 +60,11 @@ export const EVENT_ENTRY_PII_FIELDS = [
     "userEmail",
     "ipAddress",
 ];
+/** PII fields in lottery entries */
+export const LOTTERY_ENTRY_PII_FIELDS = [
+    "userPhone",
+    "userEmail",
+    "userDisplayName",
+];
 /** Store OAuth bearer tokens — encrypted via SETTINGS_ENCRYPTION_KEY */
 export const STORE_SECRET_FIELDS = ["whatsappConfig.accessToken"];

package/dist/seed/actions/demo-seed-actions.d.ts

@@ -6,7 +6,7 @@
  * the actual collection-specific seeding logic (800+ lines with PII encryption,
  * Auth user creation, subcollection handling, etc.).
  */
-export type SeedCollectionName = "users" | "addresses" | "categories" | "stores" | "products" | "orders" | "reviews" | "bids" | "coupons" | "carousels" | "carouselSlides" | "homepageSections" | "siteSettings" | "faqs" | "notifications" | "payouts" | "blogPosts" | "events" | "eventEntries" | "sessions" | "carts" | "wishlists" | "history" | "conversations" | "groupedListings" | "scammerProfiles" | "supportTickets" | "productFeatures" | "offers" | "couponUsage" | "claimedCoupons" | "payoutMethods" | "shippingConfigs" | "analyticsCards" | "analyticsAlerts" | "storeCategories" | "listingTemplates" | "moderationQueue" | "reports" | "itemRequests" | "storeWhatsAppConfig" | "storeGoogleConfig" | "roleOverrides" | "customRoles" | "adminNotifications";
+export type SeedCollectionName = "users" | "addresses" | "categories" | "stores" | "products" | "orders" | "reviews" | "bids" | "coupons" | "carousels" | "carouselSlides" | "homepageSections" | "siteSettings" | "faqs" | "notifications" | "payouts" | "blogPosts" | "events" | "eventEntries" | "sessions" | "carts" | "wishlists" | "history" | "conversations" | "groupedListings" | "scammerProfiles" | "supportTickets" | "productFeatures" | "offers" | "couponUsage" | "claimedCoupons" | "payoutMethods" | "shippingConfigs" | "analyticsCards" | "analyticsAlerts" | "storeCategories" | "listingTemplates" | "moderationQueue" | "reports" | "itemRequests" | "storeWhatsAppConfig" | "storeGoogleConfig" | "roleOverrides" | "customRoles" | "adminNotifications" | "lotteryEntries";
 export interface SeedOperationResult {
     success?: boolean;
     message: string;

package/dist/seed/events-seed-data.js

@@ -1,6 +1,6 @@
 /*
- * WHY: Seeds 8 YGO-themed events covering all event types (poll, survey, sale, raffle, spin_wheel, feedback, offer).
- * WHAT: 2 upcoming + 4 active + 2 ended. Includes raffle (open + drawn), spin wheel, poll, survey, feedback, sale, offer.
+ * WHY: Seeds 10 YGO-themed events covering all event types (poll, survey, sale, raffle, spin_wheel, feedback, offer, lottery).
+ * WHAT: 2 upcoming + 4 active + 2 ended + 2 lottery (1 active, 1 draft). Includes raffle (open + drawn), spin wheel, poll, survey, feedback, sale, offer.
  *
  * EXPORTS:
  *   eventsSeedData — Array of EventDocument for seed runner
@@ -217,6 +217,89 @@ export const eventsSeedData = [
         createdAt: daysAgo(35),
         updatedAt: daysAgo(5),
     },
+    // ── 9. ACTIVE — Lottery: Pokémon Number Draw (July 2026) ─────────────────
+    {
+        id: "event-pokemon-number-draw-july-2026",
+        slug: "pokemon-number-draw-july-2026",
+        type: "lottery",
+        title: "Pokémon Number Draw — July 2026",
+        description: "<p>Choose your lucky slot and win rare Pokémon collectibles! 25 slots available. Each slot is assigned a prize from our collection. First-come, first-served.</p>",
+        status: EVENT_FIELDS.STATUS_VALUES.ACTIVE,
+        startsAt: daysAgo(2),
+        endsAt: daysAhead(5),
+        coverImage: { type: "image", url: seedExtMedia("https://upload.wikimedia.org/wikipedia/commons/9/98/International_Pok%C3%A9mon_logo.svg"), alt: "Pok\u00e9mon Number Draw" },
+        tags: ["lottery", "pokemon", "prizes"],
+        lotteryConfig: {
+            totalSlots: 25,
+            pricingMode: "variable",
+            drawWindowDurationMinutes: 5,
+            maxPullsPerTransaction: 1,
+            maxPullsPerUser: 1,
+            slots: [
+                { slotNumber: 1, name: "Charizard Base Set Holo", priceInPaise: 500000, weight: 1, isBooked: true, bookedByUserId: "user-ravi-k", bookedByDisplayName: "Ravi K", bookedByUserLotteryNumber: 1 },
+                { slotNumber: 2, name: "Blastoise Base Set Holo", priceInPaise: 300000, weight: 33, isBooked: true, bookedByUserId: "user-priya-s", bookedByDisplayName: "Priya S", bookedByUserLotteryNumber: 2 },
+                { slotNumber: 3, name: "Venusaur Base Set Holo", priceInPaise: 250000, weight: 40, isBooked: true, bookedByUserId: "user-arjun-m", bookedByDisplayName: "Arjun M", bookedByUserLotteryNumber: 3 },
+                { slotNumber: 4, name: "Pikachu Surfing Promo", priceInPaise: 150000, weight: 66, isBooked: true, bookedByUserId: "user-sneha-p", bookedByDisplayName: "Sneha P", bookedByUserLotteryNumber: 4 },
+                { slotNumber: 5, name: "Mewtwo Base Set Holo", priceInPaise: 200000, weight: 50, isBooked: true, bookedByUserId: "user-vikram-r", bookedByDisplayName: "Vikram R", bookedByUserLotteryNumber: 5 },
+                { slotNumber: 6, name: "Gengar First Ed. Fossil", priceInPaise: 350000, weight: 28, isBooked: false },
+                { slotNumber: 7, name: "Alakazam Base Set Holo", priceInPaise: 80000, weight: 93, isBooked: false },
+                { slotNumber: 8, name: "Machamp 1st Ed. Base Set", priceInPaise: 40000, weight: 99, isBooked: false },
+                { slotNumber: 9, name: "Clefairy Base Set Holo", priceInPaise: 60000, weight: 95, isBooked: false },
+                { slotNumber: 10, name: "Chansey Base Set Holo", priceInPaise: 70000, weight: 94, isBooked: false },
+                { slotNumber: 11, name: "Ninetales Base Set Holo", priceInPaise: 100000, weight: 80, isBooked: false },
+                { slotNumber: 12, name: "Scyther Jungle Holo", priceInPaise: 50000, weight: 97, isBooked: false },
+                { slotNumber: 13, name: "Gyarados Base Set Holo", priceInPaise: 120000, weight: 76, isBooked: false },
+                { slotNumber: 14, name: "Lapras Fossil Holo", priceInPaise: 90000, weight: 88, isBooked: false },
+                { slotNumber: 15, name: "Zapdos Fossil Holo", priceInPaise: 220000, weight: 45, isBooked: false },
+                { slotNumber: 16, name: "Articuno Fossil Holo", priceInPaise: 200000, weight: 50, isBooked: false },
+                { slotNumber: 17, name: "Moltres Fossil Holo", priceInPaise: 180000, weight: 55, isBooked: false },
+                { slotNumber: 18, name: "Dragonite Base Set Holo", priceInPaise: 400000, weight: 20, isBooked: false },
+                { slotNumber: 19, name: "Snorlax Jungle Holo", priceInPaise: 60000, weight: 95, isBooked: false },
+                { slotNumber: 20, name: "Jolteon Jungle Holo", priceInPaise: 70000, weight: 94, isBooked: false },
+                { slotNumber: 21, name: "Flareon Jungle Holo", priceInPaise: 70000, weight: 94, isBooked: false },
+                { slotNumber: 22, name: "Vaporeon Jungle Holo", priceInPaise: 70000, weight: 94, isBooked: false },
+                { slotNumber: 23, name: "Espeon Neo Discovery Holo", priceInPaise: 80000, weight: 93, isBooked: false },
+                { slotNumber: 24, name: "Umbreon Neo Discovery Holo", priceInPaise: 100000, weight: 80, isBooked: false },
+                { slotNumber: 25, name: "Lugia Neo Genesis Holo", priceInPaise: 450000, weight: 10, isBooked: false },
+            ],
+        },
+        stats: { totalEntries: 5, approvedEntries: 5, flaggedEntries: 0 },
+        createdBy: "user-admin-letitrip",
+        createdAt: daysAgo(3),
+        updatedAt: daysAgo(0),
+    },
+    // ── 10. DRAFT — Lottery: Yu-Gi-Oh! Slot Raffle ───────────────────────────
+    {
+        id: "event-yugioh-slot-raffle-draft",
+        slug: "yugioh-slot-raffle-draft",
+        type: "lottery",
+        title: "Yu-Gi-Oh! Slot Raffle — Coming Soon",
+        description: "<p>10 rare YGO slots up for grabs. Details coming soon!</p>",
+        status: EVENT_FIELDS.STATUS_VALUES.DRAFT,
+        startsAt: daysAhead(7),
+        endsAt: daysAhead(14),
+        coverImage: { type: "image", url: seedExtMedia("https://upload.wikimedia.org/wikipedia/en/3/3d/Yu-Gi-Oh%21_Logo.png"), alt: "Yu-Gi-Oh! Slot Raffle" },
+        tags: ["lottery", "yugioh", "prizes"],
+        lotteryConfig: {
+            totalSlots: 10,
+            pricingMode: "uniform",
+            uniformPriceInPaise: 50000,
+            drawWindowDurationMinutes: 10,
+            maxPullsPerTransaction: 1,
+            maxPullsPerUser: 1,
+            slots: Array.from({ length: 10 }, (_, i) => ({
+                slotNumber: i + 1,
+                name: `Prize Slot ${i + 1}`,
+                priceInPaise: 50000,
+                weight: 50,
+                isBooked: false,
+            })),
+        },
+        stats: { totalEntries: 0, approvedEntries: 0, flaggedEntries: 0 },
+        createdBy: "user-admin-letitrip",
+        createdAt: daysAgo(1),
+        updatedAt: daysAgo(0),
+    },
 ];
 // ── Event Entries ────────────────────────────────────────────────────────────
 export const eventEntriesSeedData = [

package/dist/seed/grouped-listings-seed-data.d.ts

@@ -31,7 +31,7 @@ export declare const groupedListingsSeedData: {
     features?: string[] | undefined;
     shippingInfo?: string | undefined;
     returnPolicy?: string | undefined;
-    condition?: "new" | "used" | "refurbished" | "broken" | "graded" | undefined;
+    condition?: "new" | "like_new" | "good" | "fair" | "poor" | "used" | "refurbished" | "broken" | "graded" | undefined;
     insurance?: boolean | undefined;
     insuranceCost?: number | undefined;
     shippingPaidBy?: "seller" | "buyer" | undefined;
@@ -102,6 +102,8 @@ export declare const groupedListingsSeedData: {
     prizeRevealStatus?: "pending" | "open" | "closed" | undefined;
     prizeRevealDeadlineDays?: number | undefined;
     prizeGithubFileUrl?: string | undefined;
+    prizeDrawMode?: "reveal" | "lottery" | undefined;
+    lotteryConfig?: import("..").LotteryConfig | undefined;
     shipping?: {
         allowedProviderIds?: string[];
         overrides?: Array<{

package/dist/seed/index.d.ts

@@ -61,6 +61,7 @@ export type { CouponUsageSeedRecord } from "./coupon-usage-seed-data";
 export { couponUsageSeedData } from "./coupon-usage-seed-data";
 export { claimedCouponsSeedData } from "./claimed-coupons-seed-data";
 export { eventsSeedData, eventEntriesSeedData } from "./events-seed-data";
+export { lotteryEntriesSeedData } from "./lottery-entries-seed-data";
 export { payoutsSeedData } from "./payouts-seed-data";
 export { notificationsSeedData } from "./notifications-seed-data";
 export { blogPostsSeedData } from "./blog-posts-seed-data";

package/dist/seed/index.js

@@ -48,6 +48,7 @@ export { couponsSeedData } from "./coupons-seed-data";
 export { couponUsageSeedData } from "./coupon-usage-seed-data";
 export { claimedCouponsSeedData } from "./claimed-coupons-seed-data";
 export { eventsSeedData, eventEntriesSeedData } from "./events-seed-data";
+export { lotteryEntriesSeedData } from "./lottery-entries-seed-data";
 export { payoutsSeedData } from "./payouts-seed-data";
 export { notificationsSeedData } from "./notifications-seed-data";
 export { blogPostsSeedData } from "./blog-posts-seed-data";

package/dist/seed/lottery-entries-seed-data.d.ts

@@ -0,0 +1,2 @@
+import type { LotteryEntryDocument } from "../features/lottery/schemas/firestore";
+export declare const lotteryEntriesSeedData: LotteryEntryDocument[];