@mohasinac/appkit 3.2.6 → 3.2.8

package/dist/_internal/shared/actions/action-registry.js

@@ -1559,6 +1559,68 @@ export const ACTIONS = {
                 confirmKind: "danger",
             },
         },
+        // ── Address ban management ─────────────────────────────────────────────
+        "ban-address": {
+            id: "admin.ban-address",
+            label: "Ban Address",
+            ariaLabel: "Ban this address",
+            description: "Ban an address from being used on the platform.",
+            kind: "danger",
+            permissions: ["admin", "moderator"],
+            confirmation: {
+                title: "Ban this address?",
+                body: "The address will be blocked from use at checkout across all accounts.",
+                confirmLabel: "Ban address",
+                confirmKind: "danger",
+            },
+        },
+        "approve-unban": {
+            id: "admin.approve-unban",
+            label: "Approve Unban",
+            ariaLabel: "Approve unban request",
+            description: "Approve an address unban request and restore it to active.",
+            kind: "primary",
+            permissions: ["admin"],
+        },
+        "reject-unban": {
+            id: "admin.reject-unban",
+            label: "Reject Unban",
+            ariaLabel: "Reject unban request",
+            description: "Reject an address unban request — address stays banned.",
+            kind: "secondary",
+            permissions: ["admin"],
+        },
+        // ── Payment method ban management ──────────────────────────────────────
+        "ban-payment-method": {
+            id: "admin.ban-payment-method",
+            label: "Ban Payment Method",
+            ariaLabel: "Ban this payment method",
+            description: "Ban a payment identifier from being used on the platform.",
+            kind: "danger",
+            permissions: ["admin", "moderator"],
+            confirmation: {
+                title: "Ban this payment method?",
+                body: "The payment identifier will be blocked from checkout across all accounts.",
+                confirmLabel: "Ban payment method",
+                confirmKind: "danger",
+            },
+        },
+        "approve-payment-unban": {
+            id: "admin.approve-payment-unban",
+            label: "Approve Unban",
+            ariaLabel: "Approve payment method unban",
+            description: "Approve a payment method unban request.",
+            kind: "primary",
+            permissions: ["admin"],
+        },
+        "reject-payment-unban": {
+            id: "admin.reject-payment-unban",
+            label: "Reject Unban",
+            ariaLabel: "Reject payment method unban",
+            description: "Reject a payment method unban request — stays banned.",
+            kind: "secondary",
+            permissions: ["admin"],
+        },
     },
     CART: {
         "clear-cart": {

package/dist/constants/api-endpoints.d.ts

@@ -137,6 +137,10 @@ export declare const ADMIN_ENDPOINTS: {
     readonly SCAMMER_BY_ID: (id: string) => string;
     readonly ADDRESSES: "/api/admin/addresses";
     readonly ADDRESS_BY_ID: (id: string) => string;
+    readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+    readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+    readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+    readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
     readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
     readonly GROUPED_LISTING_BY_ID: (id: string) => string;
     readonly ADMIN_FULFILLMENT: (storeId: string) => string;
@@ -472,6 +476,10 @@ export declare const API_ENDPOINTS: {
         readonly SCAMMER_BY_ID: (id: string) => string;
         readonly ADDRESSES: "/api/admin/addresses";
         readonly ADDRESS_BY_ID: (id: string) => string;
+        readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+        readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+        readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+        readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
         readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
         readonly GROUPED_LISTING_BY_ID: (id: string) => string;
         readonly ADMIN_FULFILLMENT: (storeId: string) => string;
@@ -809,6 +817,10 @@ export declare const API_ROUTES: {
         readonly SCAMMER_BY_ID: (id: string) => string;
         readonly ADDRESSES: "/api/admin/addresses";
         readonly ADDRESS_BY_ID: (id: string) => string;
+        readonly ADDRESS_CLUSTERS: "/api/admin/addresses/clusters";
+        readonly PAYMENT_METHODS: "/api/admin/payment-methods";
+        readonly PAYMENT_METHOD_BY_ID: (id: string) => string;
+        readonly PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters";
         readonly GROUPED_LISTINGS: "/api/admin/grouped-listings";
         readonly GROUPED_LISTING_BY_ID: (id: string) => string;
         readonly ADMIN_FULFILLMENT: (storeId: string) => string;

package/dist/constants/api-endpoints.js

@@ -156,6 +156,10 @@ export const ADMIN_ENDPOINTS = {
     SCAMMER_BY_ID: (id) => `/api/admin/scammers/${id}`,
     ADDRESSES: "/api/admin/addresses",
     ADDRESS_BY_ID: (id) => `/api/admin/addresses/${id}`,
+    ADDRESS_CLUSTERS: "/api/admin/addresses/clusters",
+    PAYMENT_METHODS: "/api/admin/payment-methods",
+    PAYMENT_METHOD_BY_ID: (id) => `/api/admin/payment-methods/${id}`,
+    PAYMENT_METHOD_CLUSTERS: "/api/admin/payment-methods/clusters",
     GROUPED_LISTINGS: "/api/admin/grouped-listings",
     GROUPED_LISTING_BY_ID: (id) => `/api/admin/grouped-listings/${id}`,
     ADMIN_FULFILLMENT: (storeId) => `/api/store/fulfillment?storeId=${encodeURIComponent(storeId)}`,

package/dist/features/about/components/PublicProfileView.js

@@ -1,6 +1,6 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 import Link from "next/link";
-import { getPublicUserProfile, getProfileStoreProducts, getSellerReviews, getReviewsAuthoredBy } from "../../auth/actions/profile-actions";
+import { getPublicUserProfile, getProfileStoreProducts, getReviewsAuthoredBy, getReviewsReceivedBy } from "../../auth/actions/profile-actions";
 import { storeRepository } from "../../stores/repository/store.repository";
 import { ROUTES } from "../../../constants";
 import { PAGE_CONTAINER } from "../../../_internal/shared/styles/page";
@@ -63,11 +63,11 @@ export async function PublicProfileView({ userId, }) {
     const t = await getTranslations("publicProfile");
     const profile = await getPublicUserProfile(userId).catch(() => null);
     const storeId = profile?.storeSlug ?? null;
-    const [products, reviewsReceived, store, reviewsAuthored] = await Promise.all([
+    const [products, store, reviewsAuthored, reviewsReceivedAsBuyer] = await Promise.all([
         storeId ? getProfileStoreProducts(storeId).catch(() => []) : Promise.resolve([]),
-        storeId ? getSellerReviews(storeId).catch(() => []) : Promise.resolve([]),
         storeId ? storeRepository.findById(storeId).catch(() => null) : Promise.resolve(null),
         getReviewsAuthoredBy(userId).catch(() => []),
+        getReviewsReceivedBy(userId).catch(() => []),
     ]);
     const isSeller = isSellerUser(profile) || isAdminUser(profile);
     // For sellers: lead with store identity (name + logo). For buyers: user identity.
@@ -83,7 +83,7 @@ export async function PublicProfileView({ userId, }) {
     const pub = profile?.publicProfile;
     const stats = profile?.stats;
     const listingCount = products.length;
-    const reviewCount = reviewsAuthored.length + reviewsReceived.length;
+    const reviewCount = reviewsAuthored.length + reviewsReceivedAsBuyer.length;
     const itemsSold = stats?.itemsSold ?? 0;
     const auctionsWon = stats?.auctionsWon ?? 0;
     const totalOrders = stats?.totalOrders ?? 0;
@@ -92,7 +92,7 @@ export async function PublicProfileView({ userId, }) {
     const storeDescription = store?.storeDescription ?? pub?.storeDescription;
     const profileHeroCtx = { displayName, photoURL, memberSince, isSeller, storeSlug, flex, page };
     const statItems = buildProfileStatItems(t, { listingCount, reviewCount, itemsSold, auctionsWon, totalOrders, isSeller });
-    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [renderProfileHero(t, profileHeroCtx), _jsxs(Stack, { gap: "2xl", className: `${page.container.md}`, paddingY: "y-3xl", children: [renderProfileStatsRow(flex, statItems), renderProfileBioSection(pub), renderStoreDescriptionSection(isSeller, storeSlug ?? null, storeDescription ?? null, storeName, t), renderProfileListingsSection(t, products, storeSlug ?? null), renderAuthoredReviewsSection(t, reviewsAuthored, displayName), isSeller && storeSlug && renderProfileReviewsSection(t, reviewsReceived, storeSlug), _jsx(Row, { justify: "center", padding: "t-xs", children: _jsxs(Link, { href: String(ROUTES.HOME), className: "text-sm text-zinc-400 dark:text-zinc-400 hover:text-neutral-600 dark:hover:text-zinc-300", children: ["\u2190 ", t("backHome")] }) })] })] }));
+    return (_jsxs(Div, { className: "-mx-4 md:-mx-6 lg:-mx-8 -mt-6 sm:-mt-8 lg:-mt-10", children: [renderProfileHero(t, profileHeroCtx), _jsxs(Stack, { gap: "2xl", className: `${page.container.md}`, paddingY: "y-3xl", children: [renderProfileStatsRow(flex, statItems), renderProfileBioSection(pub), renderStoreDescriptionSection(isSeller, storeSlug ?? null, storeDescription ?? null, storeName, t), renderProfileListingsSection(t, products, storeSlug ?? null), renderAuthoredReviewsSection(t, reviewsAuthored, displayName), reviewsReceivedAsBuyer.length > 0 && renderBuyerReceivedReviewsSection(t, reviewsReceivedAsBuyer), _jsx(Row, { justify: "center", padding: "t-xs", children: _jsxs(Link, { href: String(ROUTES.HOME), className: "text-sm text-zinc-400 dark:text-zinc-400 hover:text-neutral-600 dark:hover:text-zinc-300", children: ["\u2190 ", t("backHome")] }) })] })] }));
 }
 function buildProfileStatItems(t, ctx) {
     const { listingCount, reviewCount, itemsSold, auctionsWon, totalOrders, isSeller } = ctx;
@@ -136,3 +136,6 @@ function renderProfileReviewsSection(t, reviews, storeSlug) {
 function renderAuthoredReviewsSection(t, reviews, displayName) {
     return (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-4", children: t("reviewsAuthoredTitle", { name: displayName }) }), reviews.length === 0 ? (_jsxs(Div, { rounded: "2xl", padding: "3xl", className: "text-center", border: "default", surface: "subtle", children: [_jsx(Star, { className: CLS_EMPTY_ICON }), _jsx(Text, { variant: "secondary", size: "sm", children: t("noReviewsAuthored", { name: displayName }) })] })) : (_jsx(Grid, { gap: "md", className: "grid-cols-1 sm:grid-cols-2", children: reviews.slice(0, 6).map((review) => _jsx(ReviewCard, { review: review }, review.id)) }))] }));
 }
+function renderBuyerReceivedReviewsSection(t, reviews) {
+    return (_jsxs(Section, { children: [_jsx(Heading, { level: 2, className: "mb-4", children: t("reviewsReceivedAsBuyerTitle") || "Reviews Received" }), _jsx(Grid, { gap: "md", className: "grid-cols-1 sm:grid-cols-2", children: reviews.slice(0, 6).map((review) => _jsx(ReviewCard, { review: review }, review.id)) })] }));
+}

package/dist/features/addresses/repository/addresses.repository.d.ts

@@ -1,5 +1,5 @@
 import { BaseRepository, type DocumentSnapshot } from "../../../providers/db-firebase";
-import { type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
+import { type AddressBanStatus, type AddressCreateInput, type AddressDocument, type AddressOwnerType, type AddressUpdateInput } from "../schemas";
 export declare class AddressesRepository extends BaseRepository<AddressDocument> {
     constructor();
     private decryptAddress;
@@ -15,6 +15,19 @@ export declare class AddressesRepository extends BaseRepository<AddressDocument>
     deleteForOwner(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<void>;
     setDefault(ownerType: AddressOwnerType, ownerId: string, addressId: string): Promise<AddressDocument>;
     deleteAllForOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    private computeAddressHash;
+    banAllForOwner(ownerType: AddressOwnerType, ownerId: string, banData: {
+        banReason: string;
+        bannedBy: string;
+    }): Promise<number>;
+    unbanAutoForOwner(ownerType: AddressOwnerType, ownerId: string): Promise<number>;
+    listByAddressHash(addressHash: string): Promise<AddressDocument[]>;
+    listByBanStatus(banStatus: AddressBanStatus, limit?: number, offset?: number): Promise<AddressDocument[]>;
+    banById(id: string, banData: {
+        banReason: string;
+        bannedBy: string;
+    }): Promise<AddressDocument>;
+    clearBanById(id: string): Promise<void>;
     private clearDefaultFlag;
 }
 export declare const addressesRepository: AddressesRepository;

package/dist/features/addresses/repository/addresses.repository.js

@@ -1,3 +1,4 @@
+import { createHash } from "crypto";
 import { normalizeError } from "../../../errors/normalize";
 /**
  * AddressesRepository — SB-UNI-A 2026-05-13
@@ -86,6 +87,7 @@ export class AddressesRepository extends BaseRepository {
                 ...input,
                 ownerType,
                 ownerId,
+                addressHash: this.computeAddressHash(input.postalCode, input.addressLine1, input.addressLine2),
                 createdAt: now,
                 updatedAt: now,
             };
@@ -121,7 +123,14 @@ export class AddressesRepository extends BaseRepository {
         if (input.isDefault) {
             await this.clearDefaultFlag(ownerType, ownerId);
         }
-        return this.update(addressId, input);
+        const updateData = { ...input };
+        if (input.postalCode || input.addressLine1 || input.addressLine2 !== undefined) {
+            const postalCode = input.postalCode ?? existing.postalCode;
+            const line1 = input.addressLine1 ?? existing.addressLine1;
+            const line2 = input.addressLine2 ?? existing.addressLine2;
+            updateData.addressHash = this.computeAddressHash(postalCode, line1, line2);
+        }
+        return this.update(addressId, updateData);
     }
     async deleteForOwner(ownerType, ownerId, addressId) {
         const existing = await this.findById(addressId);
@@ -157,6 +166,118 @@ export class AddressesRepository extends BaseRepository {
             throw new DatabaseError(`Failed to delete all addresses for ${ownerType}:${ownerId}`, error);
         }
     }
+    computeAddressHash(postalCode, line1, line2) {
+        const norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
+        return createHash("sha256")
+            .update([postalCode, line1, line2 ?? ""].map(norm).join("|"))
+            .digest("hex");
+    }
+    async banAllForOwner(ownerType, ownerId, banData) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .get();
+            if (snap.empty)
+                return 0;
+            const now = new Date();
+            const batch = this.db.batch();
+            snap.docs.forEach((doc) => {
+                batch.update(doc.ref, {
+                    [ADDRESS_FIELDS.BAN_STATUS]: "banned",
+                    [ADDRESS_FIELDS.BAN_REASON]: banData.banReason,
+                    [ADDRESS_FIELDS.BANNED_BY]: banData.bannedBy,
+                    [ADDRESS_FIELDS.BANNED_AT]: now,
+                    [ADDRESS_FIELDS.AUTO_BANNED]: true,
+                    [ADDRESS_FIELDS.UPDATED_AT]: now,
+                });
+            });
+            await batch.commit();
+            return snap.size;
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to ban addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async unbanAutoForOwner(ownerType, ownerId) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.OWNER_TYPE, "==", ownerType)
+                .where(ADDRESS_FIELDS.OWNER_ID, "==", ownerId)
+                .where(ADDRESS_FIELDS.AUTO_BANNED, "==", true)
+                .get();
+            if (snap.empty)
+                return 0;
+            const now = new Date();
+            const batch = this.db.batch();
+            snap.docs.forEach((doc) => {
+                batch.update(doc.ref, {
+                    [ADDRESS_FIELDS.BAN_STATUS]: null,
+                    [ADDRESS_FIELDS.BAN_REASON]: null,
+                    [ADDRESS_FIELDS.BANNED_BY]: null,
+                    [ADDRESS_FIELDS.BANNED_AT]: null,
+                    [ADDRESS_FIELDS.AUTO_BANNED]: null,
+                    [ADDRESS_FIELDS.UPDATED_AT]: now,
+                });
+            });
+            await batch.commit();
+            return snap.size;
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to unban addresses for ${ownerType}:${ownerId}`, error);
+        }
+    }
+    async listByAddressHash(addressHash) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.ADDRESS_HASH, "==", addressHash)
+                .get();
+            return snap.docs.map((d) => this.mapDoc(d));
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to lookup addresses by hash`, error);
+        }
+    }
+    async listByBanStatus(banStatus, limit = 50, offset = 0) {
+        try {
+            const snap = await this.getCollection()
+                .where(ADDRESS_FIELDS.BAN_STATUS, "==", banStatus)
+                .orderBy(ADDRESS_FIELDS.BANNED_AT, "desc")
+                .limit(limit)
+                .offset(offset)
+                .get();
+            return snap.docs.map((d) => this.mapDoc(d));
+        }
+        catch (error) {
+            void normalizeError(error);
+            throw new DatabaseError(`Failed to list addresses by banStatus:${banStatus}`, error);
+        }
+    }
+    async banById(id, banData) {
+        return this.update(id, {
+            banStatus: "banned",
+            banReason: banData.banReason,
+            bannedBy: banData.bannedBy,
+            bannedAt: new Date(),
+            autoBanned: false,
+        });
+    }
+    async clearBanById(id) {
+        const now = new Date();
+        await this.db.collection(ADDRESSES_COLLECTION).doc(id).update({
+            [ADDRESS_FIELDS.BAN_STATUS]: null,
+            [ADDRESS_FIELDS.BAN_REASON]: null,
+            [ADDRESS_FIELDS.BANNED_BY]: null,
+            [ADDRESS_FIELDS.BANNED_AT]: null,
+            [ADDRESS_FIELDS.AUTO_BANNED]: null,
+            [ADDRESS_FIELDS.UNBAN_REQUEST_NOTE]: null,
+            [ADDRESS_FIELDS.UNBAN_REQUESTED_AT]: null,
+            [ADDRESS_FIELDS.UPDATED_AT]: now,
+        });
+    }
     async clearDefaultFlag(ownerType, ownerId) {
         try {
             const snapshot = await this.getCollection()

package/dist/features/addresses/schemas/firestore.d.ts

@@ -9,6 +9,7 @@
  */
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
 export type AddressOwnerType = "user" | "store";
+export type AddressBanStatus = "banned" | "unban_requested" | "suspicious";
 export interface AddressDocument extends BaseDocument {
     ownerType: AddressOwnerType;
     ownerId: string;
@@ -23,12 +24,22 @@ export interface AddressDocument extends BaseDocument {
     postalCode: string;
     country: string;
     isDefault: boolean;
+    /** SHA-256(normalised postalCode|line1|line2) — stored unencrypted for cross-account dedup. */
+    addressHash?: string;
+    banStatus?: AddressBanStatus;
+    banReason?: string;
+    bannedBy?: string;
+    bannedAt?: Date;
+    /** true when cascaded from a user hard-ban (vs manually banned by admin). */
+    autoBanned?: boolean;
+    unbanRequestNote?: string;
+    unbanRequestedAt?: Date;
 }
 export declare const ADDRESSES_COLLECTION: "addresses";
-export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "isDefault", "createdAt"];
+export declare const ADDRESS_INDEXED_FIELDS: readonly ["ownerType", "ownerId", "isDefault", "addressHash", "banStatus", "autoBanned", "createdAt"];
 export declare const DEFAULT_ADDRESS_DATA: Partial<AddressDocument>;
-export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "createdAt", "updatedAt"];
-export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault"];
+export declare const ADDRESS_PUBLIC_FIELDS: readonly ["id", "ownerType", "ownerId", "label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "addressHash", "banStatus", "banReason", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt", "createdAt", "updatedAt"];
+export declare const ADDRESS_UPDATABLE_FIELDS: readonly ["label", "fullName", "phone", "addressLine1", "addressLine2", "landmark", "city", "state", "postalCode", "country", "isDefault", "banStatus", "banReason", "bannedBy", "bannedAt", "autoBanned", "unbanRequestNote", "unbanRequestedAt"];
 export type AddressCreateInput = Omit<AddressDocument, "id" | "ownerType" | "ownerId" | "createdAt" | "updatedAt">;
 export type AddressUpdateInput = Partial<Pick<AddressDocument, (typeof ADDRESS_UPDATABLE_FIELDS)[number]>>;
 export declare const ADDRESS_FIELDS: {
@@ -46,6 +57,14 @@ export declare const ADDRESS_FIELDS: {
     readonly POSTAL_CODE: "postalCode";
     readonly COUNTRY: "country";
     readonly IS_DEFAULT: "isDefault";
+    readonly ADDRESS_HASH: "addressHash";
+    readonly BAN_STATUS: "banStatus";
+    readonly BAN_REASON: "banReason";
+    readonly BANNED_BY: "bannedBy";
+    readonly BANNED_AT: "bannedAt";
+    readonly AUTO_BANNED: "autoBanned";
+    readonly UNBAN_REQUEST_NOTE: "unbanRequestNote";
+    readonly UNBAN_REQUESTED_AT: "unbanRequestedAt";
     readonly CREATED_AT: "createdAt";
     readonly UPDATED_AT: "updatedAt";
 };

package/dist/features/addresses/schemas/firestore.js

@@ -12,6 +12,9 @@ export const ADDRESS_INDEXED_FIELDS = [
     "ownerType",
     "ownerId",
     "isDefault",
+    "addressHash",
+    "banStatus",
+    "autoBanned",
     "createdAt",
 ];
 export const DEFAULT_ADDRESS_DATA = {
@@ -32,6 +35,13 @@ export const ADDRESS_PUBLIC_FIELDS = [
     "postalCode",
     "country",
     "isDefault",
+    "addressHash",
+    "banStatus",
+    "banReason",
+    "bannedAt",
+    "autoBanned",
+    "unbanRequestNote",
+    "unbanRequestedAt",
     "createdAt",
     "updatedAt",
 ];
@@ -47,6 +57,13 @@ export const ADDRESS_UPDATABLE_FIELDS = [
     "postalCode",
     "country",
     "isDefault",
+    "banStatus",
+    "banReason",
+    "bannedBy",
+    "bannedAt",
+    "autoBanned",
+    "unbanRequestNote",
+    "unbanRequestedAt",
 ];
 export const ADDRESS_FIELDS = {
     ID: "id",
@@ -63,6 +80,14 @@ export const ADDRESS_FIELDS = {
     POSTAL_CODE: "postalCode",
     COUNTRY: "country",
     IS_DEFAULT: "isDefault",
+    ADDRESS_HASH: "addressHash",
+    BAN_STATUS: "banStatus",
+    BAN_REASON: "banReason",
+    BANNED_BY: "bannedBy",
+    BANNED_AT: "bannedAt",
+    AUTO_BANNED: "autoBanned",
+    UNBAN_REQUEST_NOTE: "unbanRequestNote",
+    UNBAN_REQUESTED_AT: "unbanRequestedAt",
     CREATED_AT: "createdAt",
     UPDATED_AT: "updatedAt",
 };

package/dist/features/addresses/schemas/index.d.ts

@@ -41,13 +41,13 @@ export declare const addressFirestoreSchema: z.ZodObject<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;
     label: string;
+    isDefault: boolean;
     state: string;
     city: string;
     addressLine1: string;
     fullName: string;
     ownerType: "user" | "store";
     ownerId: string;
-    isDefault: boolean;
     postalCode: string;
     addressLine2?: string | undefined;
     landmark?: string | undefined;
@@ -62,13 +62,13 @@ export declare const addressFirestoreSchema: z.ZodObject<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;
     label: string;
+    isDefault: boolean;
     state: string;
     city: string;
     addressLine1: string;
     fullName: string;
     ownerType: "user" | "store";
     ownerId: string;
-    isDefault: boolean;
     postalCode: string;
     addressLine2?: string | undefined;
     landmark?: string | undefined;

package/dist/features/admin/components/AdminAddressClustersView.d.ts

@@ -0,0 +1,5 @@
+import React from "react";
+export interface AdminAddressClustersViewProps {
+    children?: React.ReactNode;
+}
+export declare function AdminAddressClustersView(_props: AdminAddressClustersViewProps): import("react/jsx-runtime").JSX.Element;

package/dist/features/admin/components/AdminAddressClustersView.js

@@ -0,0 +1,38 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useQuery } from "@tanstack/react-query";
+import { useQueryClient } from "@tanstack/react-query";
+import { Badge, Button, Div, Heading, Row, Span, Stack, Text, useToast } from "../../../ui";
+import { ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
+import { apiClient } from "../../../http";
+import { useApiMutation } from "@mohasinac/appkit/client";
+const BAN_BADGE = {
+    banned: "danger",
+    unban_requested: "warning",
+    suspicious: "secondary",
+};
+export function AdminAddressClustersView(_props) {
+    const queryClient = useQueryClient();
+    const { showToast } = useToast();
+    const { data, isLoading, error } = useQuery({
+        queryKey: ["admin", "address-clusters"],
+        queryFn: async () => {
+            const res = await apiClient.get(ADMIN_ENDPOINTS.ADDRESS_CLUSTERS);
+            return res;
+        },
+    });
+    const flagMutation = useApiMutation({
+        mutationFn: async (id) => {
+            await apiClient.patch(ADMIN_ENDPOINTS.ADDRESS_BY_ID(id), { action: "flag_suspicious" });
+        },
+        onSuccess: () => {
+            showToast("Address flagged as suspicious.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "address-clusters"] });
+        },
+        onError: (err) => {
+            showToast(err.message ?? "Failed to flag address.", "error");
+        },
+    });
+    const clusters = data?.clusters ?? [];
+    return (_jsxs(Stack, { gap: "lg", padding: "page", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Heading, { level: 2, size: "lg", weight: "semibold", color: "primary", children: "Address Clusters" }), _jsx(Text, { size: "sm", color: "muted", className: "mt-1", children: "Users sharing the same physical address. Flagging is informational only \u2014 users are not blocked." })] }), isLoading && (_jsx(Row, { justify: "center", padding: "y-4xl", children: _jsx(Div, { className: "h-6 w-6 animate-spin border-2 border-[var(--appkit-color-primary)] border-t-transparent", rounded: "full" }) })), error && (_jsx(Div, { surface: "danger-surface", color: "error", padding: "inline", rounded: "xl", textSize: "sm", children: "Failed to load clusters." })), !isLoading && clusters.length === 0 && (_jsx(Div, { surface: "muted", padding: "y-4xl", rounded: "xl", className: "text-center", children: _jsx(Text, { color: "muted", size: "sm", children: "No shared addresses found." }) })), clusters.map((cluster) => (_jsxs(Stack, { surface: "card", padding: "md", gap: "md", rounded: "xl", border: "default", children: [_jsxs(Row, { justify: "between", align: "start", gap: "sm", children: [_jsxs(Stack, { gap: "none", children: [_jsx(Text, { size: "xs", color: "muted", weight: "medium", children: "Hash" }), _jsx(Span, { size: "xs", color: "muted", className: "font-mono truncate max-w-xs", children: cluster.addressHash })] }), _jsxs(Badge, { variant: "secondary", size: "sm", children: [cluster.addresses.length, " accounts"] })] }), _jsx(Stack, { gap: "xs", children: cluster.addresses.map((addr) => (_jsxs(Row, { justify: "between", align: "center", gap: "sm", surface: "muted", padding: "inlineSm", rounded: "lg", children: [_jsxs(Stack, { gap: "none", className: "min-w-0", children: [_jsxs(Text, { size: "sm", weight: "medium", color: "primary", className: "truncate", children: [addr.ownerType === "user" ? "User" : "Store", ": ", addr.ownerId] }), addr.city && (_jsx(Text, { size: "xs", color: "muted", children: [addr.city, addr.state, addr.postalCode].filter(Boolean).join(", ") }))] }), _jsxs(Row, { gap: "xs", align: "center", children: [addr.banStatus && (_jsx(Badge, { variant: BAN_BADGE[addr.banStatus] ?? "secondary", size: "sm", children: addr.banStatus.replace(/_/g, " ") })), addr.banStatus !== "suspicious" && (_jsx(Button, { size: "sm", variant: "ghost", onClick: () => flagMutation.mutate(addr.id), disabled: flagMutation.isPending, children: "Flag Suspicious" }))] })] }, addr.id))) })] }, cluster.addressHash)))] }));
+}

package/dist/features/admin/components/AdminAddressesView.d.ts

@@ -0,0 +1,5 @@
+import React from "react";
+export interface AdminAddressesViewProps {
+    children?: React.ReactNode;
+}
+export declare function AdminAddressesView(_props: AdminAddressesViewProps): import("react/jsx-runtime").JSX.Element;