@mohasinac/appkit 3.2.5 → 3.2.7

package/dist/_internal/client/features/layout/SidebarCollapseToggle.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx as _jsx } from "react/jsx-runtime";
 const HANDLE_STYLE = {
-    background: "var(--appkit-gradient-sidebar)", // audit-inline-style-ok: theme gradient CSS var, not a raw colour
+    background: "var(--appkit-gradient-sidebar)",
 };
 const CHEVRON_STYLE = {
     color: "var(--appkit-color-text-on-primary)",

package/dist/_internal/client/features/lottery/LotteryAdminEditView.js

@@ -3,7 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useTransition } from "react";
 import { normalizeError } from "../../../../errors/normalize";
 import { Stack, Row, Text, Heading, Section, Container, Button, DataTable, } from "../../../../ui";
-import { Form, FieldInput, FieldSelect } from "../../../../ui";
+import { Form, FieldInput, FieldSelect, Input } from "../../../../ui";
 export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
     const [isPending, startTransition] = useTransition();
     const [error, setError] = useState(null);
@@ -66,14 +66,14 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
         {
             key: "name",
             header: "Prize Name",
-            render: (s) => (_jsx("input", { type: "text", className: "w-full rounded-lg border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface-input)] px-2 py-1 text-sm", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
+            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
         },
         ...(pricingMode === "variable"
             ? [
                 {
                     key: "priceInPaise",
                     header: "Price (₹)",
-                    render: (s) => (_jsx("input", { type: "number", className: "w-24 rounded-lg border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface-input)] px-2 py-1 text-sm", placeholder: "0", value: s.priceInPaise / 100, onChange: (e) => updateSlot(s._idx, "priceInPaise", e.target.value), "aria-label": `Slot ${s.slotNumber} price` })),
+                    render: (s) => (_jsx(Input, { type: "number", className: "w-24", placeholder: "0", value: s.priceInPaise / 100, onChange: (e) => updateSlot(s._idx, "priceInPaise", e.target.value), "aria-label": `Slot ${s.slotNumber} price` })),
                 },
             ]
             : []),

package/dist/_internal/server/features/products/data.d.ts

@@ -1,4 +1,5 @@
 import type { ProductDocument } from "../../../../features/products/schemas/firestore";
+import type { ListingType } from "../../../../features/products/types";
 /** Fetch a single product by slug or id, deduped per request. */
 export declare const getProductForDetail: (slugOrId: string) => Promise<ProductDocument | null>;
 /** Fetch the first page of approved reviews for a product, deduped per request. */
@@ -8,7 +9,7 @@ export interface SitemapProduct {
     slugOrId: string;
     updatedAt: Date;
     /** Canonical listing-kind discriminator (SB1-G — Phase 4 dropped booleans). */
-    listingType: "standard" | "auction" | "pre-order" | "prize-draw";
+    listingType: ListingType;
 }
 /** List all published products for sitemap generation. */
 export declare function listSitemapProducts(): Promise<SitemapProduct[]>;

package/dist/_internal/server/jobs/core/countersReconcile.js

@@ -96,7 +96,8 @@ export async function runCountersReconcile(ctx) {
     try {
         await reconcileCategories(ctx);
     }
-    catch (err) { // audit-catch-raw-ok: pre-existing-handler-intentional
+    catch (err) {
+        void normalizeError(err);
         ctx.logger.error("Category reconciliation failed", err);
     }
     try {

package/dist/_internal/shared/actions/action-registry.js

@@ -1559,6 +1559,68 @@ export const ACTIONS = {
                 confirmKind: "danger",
             },
         },
+        // ── Address ban management ─────────────────────────────────────────────
+        "ban-address": {
+            id: "admin.ban-address",
+            label: "Ban Address",
+            ariaLabel: "Ban this address",
+            description: "Ban an address from being used on the platform.",
+            kind: "danger",
+            permissions: ["admin", "moderator"],
+            confirmation: {
+                title: "Ban this address?",
+                body: "The address will be blocked from use at checkout across all accounts.",
+                confirmLabel: "Ban address",
+                confirmKind: "danger",
+            },
+        },
+        "approve-unban": {
+            id: "admin.approve-unban",
+            label: "Approve Unban",
+            ariaLabel: "Approve unban request",
+            description: "Approve an address unban request and restore it to active.",
+            kind: "primary",
+            permissions: ["admin"],
+        },
+        "reject-unban": {
+            id: "admin.reject-unban",
+            label: "Reject Unban",
+            ariaLabel: "Reject unban request",
+            description: "Reject an address unban request — address stays banned.",
+            kind: "secondary",
+            permissions: ["admin"],
+        },
+        // ── Payment method ban management ──────────────────────────────────────
+        "ban-payment-method": {
+            id: "admin.ban-payment-method",
+            label: "Ban Payment Method",
+            ariaLabel: "Ban this payment method",
+            description: "Ban a payment identifier from being used on the platform.",
+            kind: "danger",
+            permissions: ["admin", "moderator"],
+            confirmation: {
+                title: "Ban this payment method?",
+                body: "The payment identifier will be blocked from checkout across all accounts.",
+                confirmLabel: "Ban payment method",
+                confirmKind: "danger",
+            },
+        },
+        "approve-payment-unban": {
+            id: "admin.approve-payment-unban",
+            label: "Approve Unban",
+            ariaLabel: "Approve payment method unban",
+            description: "Approve a payment method unban request.",
+            kind: "primary",
+            permissions: ["admin"],
+        },
+        "reject-payment-unban": {
+            id: "admin.reject-payment-unban",
+            label: "Reject Unban",
+            ariaLabel: "Reject payment method unban",
+            description: "Reject a payment method unban request — stays banned.",
+            kind: "secondary",
+            permissions: ["admin"],
+        },
     },
     CART: {
         "clear-cart": {

package/dist/_internal/shared/features/products/types.d.ts

@@ -1,4 +1,5 @@
-export type { ProductStatus, ProductCondition, ListingType, ProductItem, ProductListResponse, ProductListParams, ProductImage, ProductSeo, } from "../../../../features/products/types/index";
+import type { ProductStatus, ProductCondition, ListingType, ProductItem, ProductListResponse, ProductListParams, ProductImage, ProductSeo } from "../../../../features/products/types/index";
+export type { ProductStatus, ProductCondition, ListingType, ProductItem, ProductListResponse, ProductListParams, ProductImage, ProductSeo, };
 export type { ProductDocument, CustomField, CustomSection, ProductSpecification, } from "../../../../features/products/schemas/firestore";
 export type { ProductFeatureDocument } from "../../../../features/products/schemas/product-features";
 /** Serializable shape passed from server page → client view as initialData. */
@@ -21,7 +22,7 @@ export interface ProductDetailInitial {
     tags: string[];
     condition?: string;
     /** Canonical listing-kind discriminator (SB1-G — Phase 4 dropped legacy booleans). */
-    listingType?: "standard" | "auction" | "pre-order" | "prize-draw";
+    listingType?: ListingType;
     auctionEndDate?: string;
     startingBid?: number;
     currentBid?: number;

package/dist/client.d.ts

@@ -109,6 +109,8 @@ export { Button } from "./ui/components/Button";
 export { ClaimCouponButton } from "./ui/components/ClaimCouponButton";
 export type { ClaimCouponButtonProps } from "./ui/components/ClaimCouponButton";
 export { Checkbox } from "./ui/components/Checkbox";
+export type { RadioItemProps } from "./ui/components/Radio";
+export { RadioItem } from "./ui/components/Radio";
 export { Input } from "./ui/components/Input";
 export { OtpInput } from "./ui/components/OtpInput";
 export type { OtpInputProps } from "./ui/components/OtpInput";

package/dist/client.js

@@ -171,6 +171,7 @@ export { Badge } from "./ui/components/Badge";
 export { Button } from "./ui/components/Button";
 export { ClaimCouponButton } from "./ui/components/ClaimCouponButton";
 export { Checkbox } from "./ui/components/Checkbox";
+export { RadioItem } from "./ui/components/Radio";
 export { Input } from "./ui/components/Input";
 export { OtpInput } from "./ui/components/OtpInput";
 export { DateInput, DateRangeInput } from "./ui/components/DateInput";

package/dist/constants/api-endpoints.d.ts

@@ -137,6 +137,10 @@ export declare const ADMIN_ENDPOINTS: {
     readonly SCAMMER_BY_ID: (id: string) => string;
     readonly ADDRESSES: "/api/admin/addresses";
     readonly ADDRESS_BY_ID: (id: string) => string;
+    readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+    readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+    readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+    readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
     readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
     readonly GROUPED_LISTING_BY_ID: (id: string) => string;
     readonly ADMIN_FULFILLMENT: (storeId: string) => string;
@@ -472,6 +476,10 @@ export declare const API_ENDPOINTS: {
         readonly SCAMMER_BY_ID: (id: string) => string;
         readonly ADDRESSES: "/api/admin/addresses";
         readonly ADDRESS_BY_ID: (id: string) => string;
+        readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+        readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+        readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+        readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
         readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
         readonly GROUPED_LISTING_BY_ID: (id: string) => string;
         readonly ADMIN_FULFILLMENT: (storeId: string) => string;
@@ -809,6 +817,10 @@ export declare const API_ROUTES: {
         readonly SCAMMER_BY_ID: (id: string) => string;
         readonly ADDRESSES: "/api/admin/addresses";
         readonly ADDRESS_BY_ID: (id: string) => string;
+        readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+        readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+        readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+        readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
         readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
         readonly GROUPED_LISTING_BY_ID: (id: string) => string;
         readonly ADMIN_FULFILLMENT: (storeId: string) => string;

package/dist/constants/api-endpoints.js

@@ -156,6 +156,10 @@ export const ADMIN_ENDPOINTS = {
     SCAMMER_BY_ID: (id) => `/api/admin/scammers/${id}`,
     ADDRESSES: "/api/admin/addresses",
     ADDRESS_BY_ID: (id) => `/api/admin/addresses/${id}`,
+    ADDRESS_CLUSTERS: "/api/admin/addresses/clusters",
+    PAYMENT_METHODS: "/api/admin/payment-methods",
+    PAYMENT_METHOD_BY_ID: (id) => `/api/admin/payment-methods/${id}`,
+    PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters",
     GROUPED_LISTINGS: "/api/admin/grouped-listings",
     GROUPED_LISTING_BY_ID: (id) => `/api/admin/grouped-listings/${id}`,
     ADMIN_FULFILLMENT: (storeId) => `/api/store/fulfillment?storeId=${encodeURIComponent(storeId)}`,

package/dist/constants/field-names.d.ts

@@ -111,6 +111,8 @@ export declare const PRODUCT_FIELDS: {
         readonly OPEN: "open";
         readonly CLOSED: "closed";
     };
+    readonly IS_ACTIVE: "isActive";
+    readonly DISPLAY_ORDER: "displayOrder";
     readonly LISTING_TYPE_VALUES: {
         readonly STANDARD: "standard";
         readonly AUCTION: "auction";

package/dist/constants/field-names.js

@@ -116,6 +116,8 @@ export const PRODUCT_FIELDS = {
         OPEN: "open",
         CLOSED: "closed",
     },
+    IS_ACTIVE: "isActive",
+    DISPLAY_ORDER: "displayOrder",
     LISTING_TYPE_VALUES: {
         STANDARD: "standard",
         AUCTION: "auction",

package/dist/features/about/components/PublicProfileView.js

@@ -1,6 +1,6 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 import Link from "next/link";
-import { getPublicUserProfile, getProfileStoreProducts, getSellerReviews, getReviewsAuthoredBy } from "../../auth/actions/profile-actions";
+import { getPublicUserProfile, getProfileStoreProducts, getReviewsAuthoredBy, getReviewsReceivedBy } from "../../auth/actions/profile-actions";
 import { storeRepository } from "../../stores/repository/store.repository";
 import { ROUTES } from "../../../constants";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page";
@@ -63,11 +63,11 @@ export async function PublicProfileView({ userId, }) {
     const t = await getTranslations("publicProfile");
     const profile = await getPublicUserProfile(userId).catch(() => null);
     const storeId = profile?.storeSlug ?? null;
-    const [products, reviewsReceived, store, reviewsAuthored] = await Promise.all([
+    const [products, store, reviewsAuthored, reviewsReceivedAsBuyer] = await Promise.all([
         storeId ? getProfileStoreProducts(storeId).catch(() => []) : Promise.resolve([]),
-        storeId ? getSellerReviews(storeId).catch(() => []) : Promise.resolve([]),
         storeId ? storeRepository.findById(storeId).catch(() => null) : Promise.resolve(null),
         getReviewsAuthoredBy(userId).catch(() => []),
+        getReviewsReceivedBy(userId).catch(() => []),
     ]);
     const isSeller = isSellerUser(profile) || isAdminUser(profile);
     // For sellers: lead with store identity (name + logo). For buyers: user identity.
@@ -83,7 +83,7 @@ export async function PublicProfileView({ userId, }) {
     const pub = profile?.publicProfile;
     const stats = profile?.stats;
     const listingCount = products.length;
-    const reviewCount = reviewsAuthored.length + reviewsReceived.length;
+    const reviewCount = reviewsAuthored.length + reviewsReceivedAsBuyer.length;
     const itemsSold = stats?.itemsSold ?? 0;
     const auctionsWon = stats?.auctionsWon ?? 0;
     const totalOrders = stats?.totalOrders ?? 0;
@@ -92,7 +92,7 @@ export async function PublicProfileView({ userId, }) {
     const storeDescription = store?.storeDescription ?? pub?.storeDescription;
     const profileHeroCtx = { displayName, photoURL, memberSince, isSeller, storeSlug, flex, page };
     const statItems = buildProfileStatItems(t, { listingCount, reviewCount, itemsSold, auctionsWon, totalOrders, isSeller });
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [renderProfileHero(t, profileHeroCtx), _jsxs(Stack, { gap: "2xl", className: `${page.container.md}`, paddingY: "y-3xl", children: [renderProfileStatsRow(flex, statItems), renderProfileBioSection(pub), renderStoreDescriptionSection(isSeller, storeSlug ?? null, storeDescription ?? null, storeName, t), renderProfileListingsSection(t, products, storeSlug ?? null), renderAuthoredReviewsSection(t, reviewsAuthored, displayName), isSeller && storeSlug && renderProfileReviewsSection(t, reviewsReceived, storeSlug), _jsx(Row, { justify: "center", padding: "t-xs", children: _jsxs(Link, { href: String(ROUTES.HOME), className: "text-sm text-zinc-400 dark:text-zinc-400 hover:text-neutral-600 dark:hover:text-zinc-300", children: ["\u2190 ", t("backHome")] }) })] })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [renderProfileHero(t, profileHeroCtx), _jsxs(Stack, { gap: "2xl", className: `${page.container.md}`, paddingY: "y-3xl", children: [renderProfileStatsRow(flex, statItems), renderProfileBioSection(pub), renderStoreDescriptionSection(isSeller, storeSlug ?? null, storeDescription ?? null, storeName, t), renderProfileListingsSection(t, products, storeSlug ?? null), renderAuthoredReviewsSection(t, reviewsAuthored, displayName), reviewsReceivedAsBuyer.length > 0 && renderBuyerReceivedReviewsSection(t, reviewsReceivedAsBuyer), _jsx(Row, { justify: "center", padding: "t-xs", children: _jsxs(Link, { href: String(ROUTES.HOME), className: "text-sm text-zinc-400 dark:text-zinc-400 hover:text-neutral-600 dark:hover:text-zinc-300", children: ["\u2190 ", t("backHome")] }) })] })] }));
 }
 function buildProfileStatItems(t, ctx) {
     const { listingCount, reviewCount, itemsSold, auctionsWon, totalOrders, isSeller } = ctx;
@@ -136,3 +136,6 @@ function renderProfileReviewsSection(t, reviews, storeSlug) {
 function renderAuthoredReviewsSection(t, reviews, displayName) {
     return (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-4", children: t("reviewsAuthoredTitle", { name: displayName }) }), reviews.length === 0 ? (_jsxs(Div, { rounded: "2xl", padding: "3xl", className: "text-center", border: "default", surface: "subtle", children: [_jsx(Star, { className: CLS_EMPTY_ICON }), _jsx(Text, { variant: "secondary", size: "sm", children: t("noReviewsAuthored", { name: displayName }) })] })) : (_jsx(Grid, { gap: "md", className: "grid-cols-1 sm:grid-cols-2", children: reviews.slice(0, 6).map((review) => _jsx(ReviewCard, { review: review }, review.id)) }))] }));
 }
+function renderBuyerReceivedReviewsSection(t, reviews) {
+    return (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-4", children: t("reviewsReceivedAsBuyerTitle") || "Reviews Received" }), _jsx(Grid, { gap: "md", className: "grid-cols-1 sm:grid-cols-2", children: reviews.slice(0, 6).map((review) => _jsx(ReviewCard, { review: review }, review.id)) })] }));
+}

package/dist/features/account/components/UserOffersPanel.js

@@ -83,7 +83,6 @@ export function UserOffersPanel({ fetchEndpoint = "/api/user/offers", onAcceptCo
             setOffers(items);
         }
         catch (err) {
-            // toast-intentionally-silent: data load, error surfaced via fetchError state
             void normalizeError(err);
             setFetchError(err instanceof Error ? err.message : "Failed to load offers.");
         }

package/dist/features/addresses/repository/addresses.repository.d.ts

@@ -1,5 +1,5 @@
 import { BaseRepository, type DocumentSnapshot } from "../../../providers/db-firebase";
-import { type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
+import { type AddressBanStatus, type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
 export declare class AddressesRepository extends BaseRepository<AddressDocument> {
     constructor();
     private decryptAddress;
@@ -15,6 +15,19 @@ export declare class AddressesRepository extends BaseRepository<AddressDocument>
     deleteForOwner(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<void>;
     setDefault(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<AddressDocument>;
     deleteAllForOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    private computeAddressHash;
+    banAllForOwner(ownerType: AddressOwnerType, ownerId: string, banData: {
+        banReason: string;
+        bannedBy: string;
+    }): Promise<number>;
+    unbanAutoForOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    listByAddressHash(addressHash: string): Promise<AddressDocument[]>;
+    listByBanStatus(banStatus: AddressBanStatus, limit?: number, offset?: number): Promise<AddressDocument[]>;
+    banById(id: string, banData: {
+        banReason: string;
+        bannedBy: string;
+    }): Promise<AddressDocument>;
+    clearBanById(id: string): Promise<void>;
     private clearDefaultFlag;
 }
 export declare const addressesRepository: AddressesRepository;

package/dist/features/addresses/repository/addresses.repository.js

@@ -1,3 +1,4 @@
+import { createHash } from "crypto";
 import { normalizeError } from "../../../errors/normalize";
 /**
  * AddressesRepository — SB-UNI-A 2026-05-13
@@ -86,6 +87,7 @@ export class AddressesRepository extends BaseRepository {
                 ...input,
                 ownerType,
                 ownerId,
+                addressHash: this.computeAddressHash(input.postalCode, input.addressLine1, input.addressLine2),
                 createdAt: now,
                 updatedAt: now,
             };
@@ -121,7 +123,14 @@ export class AddressesRepository extends BaseRepository {
         if (input.isDefault) {
             await this.clearDefaultFlag(ownerType, ownerId);
         }
-        return this.update(addressId, input);
+        const updateData = { ...input };
+        if (input.postalCode || input.addressLine1 || input.addressLine2 !== undefined) {
+            const postalCode = input.postalCode ?? existing.postalCode;
+            const line1 = input.addressLine1 ?? existing.addressLine1;
+            const line2 = input.addressLine2 ?? existing.addressLine2;
+            updateData.addressHash = this.computeAddressHash(postalCode, line1, line2);
+        }
+        return this.update(addressId, updateData);
     }
     async deleteForOwner(ownerType, ownerId, addressId) {
         const existing = await this.findById(addressId);
@@ -157,6 +166,118 @@ export class AddressesRepository extends BaseRepository {
             throw new DatabaseError(`Failed to delete all addresses for ${ownerType}:${ownerId}`, error);
         }
     }
+    computeAddressHash(postalCode, line1, line2) {
+        const norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
+        return createHash("sha256")
+            .update([postalCode, line1, line2 ?? ""].map(norm).join("|"))
+            .digest("hex");
+    }
+    async banAllForOwner(ownerType, ownerId, banData) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .get();
+            if (snap.empty)
+                return 0;
+            const now = new Date();
+            const batch = this.db.batch();
+            snap.docs.forEach((doc) => {
+                batch.update(doc.ref, {
+                    [ADDRESS_FIELDS.BAN_STATUS]: "banned",
+                    [ADDRESS_FIELDS.BAN_REASON]: banData.banReason,
+                    [ADDRESS_FIELDS.BANNED_BY]: banData.bannedBy,
+                    [ADDRESS_FIELDS.BANNED_AT]: now,
+                    [ADDRESS_FIELDS.AUTO_BANNED]: true,
+                    [ADDRESS_FIELDS.UPDATED_AT]: now,
+                });
+            });
+            await batch.commit();
+            return snap.size;
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to ban addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async unbanAutoForOwner(ownerType, ownerId) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .where(ADDRESS_FIELDS.AUTO_BANNED, "==", true)
+                .get();
+            if (snap.empty)
+                return 0;
+            const now = new Date();
+            const batch = this.db.batch();
+            snap.docs.forEach((doc) => {
+                batch.update(doc.ref, {
+                    [ADDRESS_FIELDS.BAN_STATUS]: null,
+                    [ADDRESS_FIELDS.BAN_REASON]: null,
+                    [ADDRESS_FIELDS.BANNED_BY]: null,
+                    [ADDRESS_FIELDS.BANNED_AT]: null,
+                    [ADDRESS_FIELDS.AUTO_BANNED]: null,
+                    [ADDRESS_FIELDS.UPDATED_AT]: now,
+                });
+            });
+            await batch.commit();
+            return snap.size;
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to unban addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async listByAddressHash(addressHash) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.ADDRESS_HASH, "==", addressHash)
+                .get();
+            return snap.docs.map((d) => this.mapDoc(d));
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to lookup addresses by hash`, error);
+        }
+    }
+    async listByBanStatus(banStatus, limit = 50, offset = 0) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.BAN_STATUS, "==", banStatus)
+                .orderBy(ADDRESS_FIELDS.BANNED_AT, "desc")
+                .limit(limit)
+                .offset(offset)
+                .get();
+            return snap.docs.map((d) => this.mapDoc(d));
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to list addresses by banStatus:${banStatus}`, error);
+        }
+    }
+    async banById(id, banData) {
+        return this.update(id, {
+            banStatus: "banned",
+            banReason: banData.banReason,
+            bannedBy: banData.bannedBy,
+            bannedAt: new Date(),
+            autoBanned: false,
+        });
+    }
+    async clearBanById(id) {
+        const now = new Date();
+        await this.db.collection(ADDRESSES_COLLECTION).doc(id).update({
+            [ADDRESS_FIELDS.BAN_STATUS]: null,
+            [ADDRESS_FIELDS.BAN_REASON]: null,
+            [ADDRESS_FIELDS.BANNED_BY]: null,
+            [ADDRESS_FIELDS.BANNED_AT]: null,
+            [ADDRESS_FIELDS.AUTO_BANNED]: null,
+            [ADDRESS_FIELDS.UNBAN_REQUEST_NOTE]: null,
+            [ADDRESS_FIELDS.UNBAN_REQUESTED_AT]: null,
+            [ADDRESS_FIELDS.UPDATED_AT]: now,
+        });
+    }
     async clearDefaultFlag(ownerType, ownerId) {
         try {
             const snapshot = await this.getCollection()

package/dist/features/addresses/schemas/firestore.d.ts

@@ -9,6 +9,7 @@
  */
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 export type AddressOwnerType = "user" | "store";
+export type AddressBanStatus = "banned" | "unban_requested" | "suspicious";
 export interface AddressDocument extends BaseDocument {
     ownerType: AddressOwnerType;
     ownerId: string;
@@ -23,12 +24,22 @@ export interface AddressDocument extends BaseDocument {
     postalCode: string;
     country: string;
     isDefault: boolean;
+    /** SHA-256(normalised postalCode|line1|line2) — stored unencrypted for cross-account dedup. */
+    addressHash?: string;
+    banStatus?: AddressBanStatus;
+    banReason?: string;
+    bannedBy?: string;
+    bannedAt?: Date;
+    /** true when cascaded from a user hard-ban (vs manually banned by admin). */
+    autoBanned?: boolean;
+    unbanRequestNote?: string;
+    unbanRequestedAt?: Date;
 }
 export declare const ADDRESSES_COLLECTION: "addresses";
-export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "isDefault", "createdAt"];
+export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "isDefault", "addressHash", "banStatus", "autoBanned", "createdAt"];
 export declare const DEFAULT_ADDRESS_DATA: Partial<AddressDocument>;
-export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "createdAt", "updatedAt"];
-export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault"];
+export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "addressHash", "banStatus", "banReason", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt", "createdAt", "updatedAt"];
+export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "banStatus", "banReason", "bannedBy", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt"];
 export type AddressCreateInput = Omit<AddressDocument, "id" | "ownerType" | "ownerId" | "createdAt" | "updatedAt">;
 export type AddressUpdateInput = Partial<Pick<AddressDocument, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
 export declare const ADDRESS_FIELDS: {
@@ -46,6 +57,14 @@ export declare const ADDRESS_FIELDS: {
     readonly POSTAL_CODE: "postalCode";
     readonly COUNTRY: "country";
     readonly IS_DEFAULT: "isDefault";
+    readonly ADDRESS_HASH: "addressHash";
+    readonly BAN_STATUS: "banStatus";
+    readonly BAN_REASON: "banReason";
+    readonly BANNED_BY: "bannedBy";
+    readonly BANNED_AT: "bannedAt";
+    readonly AUTO_BANNED: "autoBanned";
+    readonly UNBAN_REQUEST_NOTE: "unbanRequestNote";
+    readonly UNBAN_REQUESTED_AT: "unbanRequestedAt";
     readonly CREATED_AT: "createdAt";
     readonly UPDATED_AT: "updatedAt";
 };

package/dist/features/addresses/schemas/firestore.js

@@ -12,6 +12,9 @@ export const ADDRESS_INDEXED_FIELDS = [
     "ownerType",
     "ownerId",
     "isDefault",
+    "addressHash",
+    "banStatus",
+    "autoBanned",
     "createdAt",
 ];
 export const DEFAULT_ADDRESS_DATA = {
@@ -32,6 +35,13 @@ export const ADDRESS_PUBLIC_FIELDS = [
     "postalCode",
     "country",
     "isDefault",
+    "addressHash",
+    "banStatus",
+    "banReason",
+    "bannedAt",
+    "autoBanned",
+    "unbanRequestNote",
+    "unbanRequestedAt",
     "createdAt",
     "updatedAt",
 ];
@@ -47,6 +57,13 @@ export const ADDRESS_UPDATABLE_FIELDS = [
     "postalCode",
     "country",
     "isDefault",
+    "banStatus",
+    "banReason",
+    "bannedBy",
+    "bannedAt",
+    "autoBanned",
+    "unbanRequestNote",
+    "unbanRequestedAt",
 ];
 export const ADDRESS_FIELDS = {
     ID: "id",
@@ -63,6 +80,14 @@ export const ADDRESS_FIELDS = {
     POSTAL_CODE: "postalCode",
     COUNTRY: "country",
     IS_DEFAULT: "isDefault",
+    ADDRESS_HASH: "addressHash",
+    BAN_STATUS: "banStatus",
+    BAN_REASON: "banReason",
+    BANNED_BY: "bannedBy",
+    BANNED_AT: "bannedAt",
+    AUTO_BANNED: "autoBanned",
+    UNBAN_REQUEST_NOTE: "unbanRequestNote",
+    UNBAN_REQUESTED_AT: "unbanRequestedAt",
     CREATED_AT: "createdAt",
     UPDATED_AT: "updatedAt",
 };

package/dist/features/addresses/schemas/index.d.ts

@@ -41,13 +41,13 @@ export declare const addressFirestoreSchema: z.ZodObject<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;
     label: string;
+    isDefault: boolean;
     state: string;
     city: string;
     addressLine1: string;
     fullName: string;
     ownerType: "user" | "store";
     ownerId: string;
-    isDefault: boolean;
     postalCode: string;
     addressLine2?: string | undefined;
     landmark?: string | undefined;
@@ -62,13 +62,13 @@ export declare const addressFirestoreSchema: z.ZodObject<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;
     label: string;
+    isDefault: boolean;
     state: string;
     city: string;
     addressLine1: string;
     fullName: string;
     ownerType: "user" | "store";
     ownerId: string;
-    isDefault: boolean;
     postalCode: string;
     addressLine2?: string | undefined;
     landmark?: string | undefined;

package/dist/features/admin/components/AdminAddressClustersView.d.ts

@@ -0,0 +1,5 @@
+import React from "react";
+export interface AdminAddressClustersViewProps {
+    children?: React.ReactNode;
+}
+export declare function AdminAddressClustersView(_props: AdminAddressClustersViewProps): import("react/jsx-runtime").JSX.Element;