@mohasinac/appkit 3.6.5 → 3.8.0

package/dist/_internal/client/features/layout/DashboardLayoutClient.d.ts

@@ -37,8 +37,22 @@ export interface DashboardLayoutClientProps {
     activeHref?: string;
     /** Responsive controls — currently only hideAt is honoured. */
     responsive?: SectionResponsive;
-    /** Optional render-prop slot for additional sidebar footer content. */
-    renderSidebarFooter?: () => ReactNode;
+    /**
+     * Cross-dashboard nav links shown in the sidebar footer. Plain hrefs
+     * rather than a render-prop — a Server Component caller (every real
+     * consumer: admin/store/user layout.tsx) cannot legally pass a function
+     * across the RSC boundary to this "use client" component, so the
+     * previous `renderSidebarFooter?: () => ReactNode` shape was never
+     * actually usable from where it needed to be used.
+     */
+    crossNav?: {
+        /** Always-available "My Profile" shortcut — every dashboard user is also a user. */
+        profileHref?: string;
+        /** Admin only: shown when the signed-in admin also owns a store. */
+        storeHref?: string;
+        /** Seller only: shown when the signed-in seller account is also an admin/employee. */
+        adminHref?: string;
+    };
     /** Optional className passed through to the sidebar component. */
     className?: string;
     /** Override the content area padding classes. */
@@ -53,4 +67,4 @@ export interface DashboardLayoutClientProps {
     darkBackground?: BackgroundConfig;
     children: ReactNode;
 }
-export declare function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, responsive: _responsive, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }: DashboardLayoutClientProps): import("react").JSX.Element;
+export declare function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, responsive: _responsive, crossNav, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }: DashboardLayoutClientProps): import("react").JSX.Element;

package/dist/_internal/client/features/layout/DashboardLayoutClient.js

@@ -147,7 +147,7 @@ function DashboardBottomNav({ items, activeHref }) {
 }
 const DEFAULT_CONTENT_PADDING = "px-[var(--appkit-space-5)] py-[var(--appkit-space-8)] lg:pl-14 lg:pr-6 xl:pl-16 xl:pr-10";
 const DEFAULT_CONTENT_MAX_WIDTH = "max-w-screen-2xl";
-export function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, responsive: _responsive, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }) {
+export function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, responsive: _responsive, crossNav, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }) {
     const pathname = usePathname();
     const activeHref = explicitActiveHref ?? pathname ?? "";
     const storageKey = `appkit:sidebar-open:${variant}`;
@@ -165,7 +165,12 @@ export function DashboardLayoutClient({ variant, groups, permissions, activeHref
     const adminGroups = variant === "admin"
         ? filteredGroups
         : groups;
-    return (_jsxs(_Fragment, { children: [hasBackground && (_jsx(BackgroundRenderer, { mode: theme === "dark" ? "dark" : "light", lightMode: resolvedLightBackground ?? { type: "color", value: "" }, darkMode: resolvedDarkBackground ?? { type: "color", value: "" } })), variant === "admin" && (_jsx(AdminSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, activePath: activeHref, groups: adminGroups, onCloseMobile: close, onToggle: toggle, className: className })), variant === "store" && (_jsx(StoreSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, activeHref: activeHref, items: [], groups: filteredGroups, onCloseMobile: close, onToggle: toggle, className: className })), variant === "user" && (_jsx(UserSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, items: filteredGroups.flatMap((g) => g.items), groups: filteredGroups, onCloseMobile: close, onToggle: toggle, className: className })), _jsx(Div, { className: [
+    const crossNavLinkClass = "flex items-center gap-[var(--appkit-space-2)] rounded-lg px-[var(--appkit-space-3)] py-[var(--appkit-space-2)] text-[0.8125rem] font-medium text-[var(--appkit-color-text-muted)] hover:bg-[var(--appkit-color-surface-elevated)]/60 hover:text-[var(--appkit-color-text)] transition-colors";
+    const hasCrossNav = Boolean(crossNav?.profileHref || crossNav?.storeHref || crossNav?.adminHref);
+    const renderCrossNavFooter = hasCrossNav
+        ? () => (_jsxs(Nav, { "aria-label": "Cross-dashboard links", padding: "y-xs", children: [crossNav?.storeHref && (_jsx(Link, { href: crossNav.storeHref, onClick: closeMobile, className: crossNavLinkClass, children: "Go to my Store" })), crossNav?.adminHref && (_jsx(Link, { href: crossNav.adminHref, onClick: closeMobile, className: crossNavLinkClass, children: "Back to Admin" })), crossNav?.profileHref && (_jsx(Link, { href: crossNav.profileHref, onClick: closeMobile, className: crossNavLinkClass, children: "My Profile" }))] }))
+        : undefined;
+    return (_jsxs(_Fragment, { children: [hasBackground && (_jsx(BackgroundRenderer, { mode: theme === "dark" ? "dark" : "light", lightMode: resolvedLightBackground ?? { type: "color", value: "" }, darkMode: resolvedDarkBackground ?? { type: "color", value: "" } })), variant === "admin" && (_jsx(AdminSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, activePath: activeHref, groups: adminGroups, onCloseMobile: close, onToggle: toggle, className: className, renderFooter: renderCrossNavFooter })), variant === "store" && (_jsx(StoreSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, activeHref: activeHref, items: [], groups: filteredGroups, onCloseMobile: close, onToggle: toggle, className: className, renderFooter: renderCrossNavFooter })), variant === "user" && (_jsx(UserSidebar, { variant: "sidebar", desktopOpen: desktopOpen, mobileOpen: mobileOpen, items: filteredGroups.flatMap((g) => g.items), groups: filteredGroups, onCloseMobile: close, onToggle: toggle, className: className, renderFooter: renderCrossNavFooter })), _jsx(Div, { className: [
                     "w-full flex-1 flex flex-col min-h-[calc(100dvh-var(--header-height,3.5rem))]",
                     "pb-[var(--appkit-space-16)] lg:pb-[0]", // clears the fixed mobile bottom-nav
                     contentPadding ?? DEFAULT_CONTENT_PADDING,

package/dist/_internal/client/features/tour/TourProvider.d.ts

@@ -2,8 +2,11 @@ import React from "react";
 import type { DriveStep } from "driver.js";
 export type TourRole = "buyer" | "seller" | "admin";
 export interface TourContextValue {
-    /** Starts the tour for the given role (defaults to "buyer"). */
-    startTour: (role?: TourRole) => void;
+    /** Starts the tour for the given role (defaults to "buyer") at the given
+     * pathname (defaults to "/" — the full role-based tour). Passing the
+     * current route lets the tour show only the steps relevant to what's
+     * actually on screen, when that route has a registered contextual set. */
+    startTour: (role?: TourRole, pathname?: string) => void;
 }
 export declare function useTour(): TourContextValue;
 export declare const CUSTOMER_TOUR_STEPS: DriveStep[];

package/dist/_internal/client/features/tour/TourProvider.js

@@ -12,16 +12,32 @@ const step = (element, title, description) => ({
     popover: { title, description },
     skipMissingElement: true,
 });
-// P-16 — role-specific step sets. Anchors are `data-tour="…"` attributes on
-// TitleBarLayout's icon buttons (present on every page) plus a couple of
-// dashboard-specific anchors. `skipMissingElement: true` on every step means
-// a step whose target isn't on the current page is silently skipped rather
-// than breaking the tour — the same tour can be started from anywhere.
+// P-16 — Anchors are `data-tour="…"` attributes on TitleBarLayout's icon
+// buttons (present on every page) plus a couple of dashboard-specific
+// anchors. `skipMissingElement: true` on every step means a step whose
+// target isn't on the current page is silently skipped rather than
+// breaking the tour.
+//
+// Redesigned (Phase 16) from one fixed step list per role into: a short
+// universal nav orientation (same on every page, since the header anchors
+// are always present) + a per-route contextual slice keyed off the current
+// pathname. A route with no registered slice falls back to that role's full
+// legacy step list, so nothing regresses for pages not yet given contextual
+// content.
+const UNIVERSAL_NAV_STEPS = {
+    buyer: [
+        step('[data-tour="nav-search"]', "Search", "Search by name, brand, or price to find what you're after."),
+        step('[data-tour="nav-wishlist"]', "Wishlist", "Save items here to come back to them later."),
+        step('[data-tour="nav-cart"]', "Cart", "Review your items and check out when you're ready."),
+        step('[data-tour="nav-profile"]', "Your account", "Manage your profile, orders, and messages here."),
+    ],
+    seller: [
+        step('[data-tour="nav-profile"]', "Store settings", "Set up your store profile, shipping, and pickup address."),
+    ],
+    admin: [],
+};
 export const CUSTOMER_TOUR_STEPS = [
-    step('[data-tour="nav-search"]', "Search", "Search by name, brand, or price to find what you're after."),
-    step('[data-tour="nav-wishlist"]', "Wishlist", "Save items here to come back to them later."),
-    step('[data-tour="nav-cart"]', "Cart", "Review your items and check out when you're ready."),
-    step('[data-tour="nav-profile"]', "Your account", "Manage your profile, orders, and messages here."),
+    ...UNIVERSAL_NAV_STEPS.buyer,
     {
         popover: {
             title: "Checkout",
@@ -54,7 +70,7 @@ export const SELLER_TOUR_STEPS = [
         },
         skipMissingElement: true,
     },
-    step('[data-tour="nav-profile"]', "Store settings", "Set up your store profile, shipping, and pickup address."),
+    ...UNIVERSAL_NAV_STEPS.seller,
     step('[data-tour="store-analytics"]', "Analytics", "Track your sales, revenue, and top products."),
     step('[data-tour="store-payouts"]', "Payouts", "See what you've earned and your payout history."),
 ];
@@ -79,6 +95,103 @@ const STEP_SETS = {
     seller: SELLER_TOUR_STEPS,
     admin: ADMIN_TOUR_STEPS,
 };
+// One entry per page that has dedicated data-tour anchors — the contextual
+// slice for that exact page, not the whole role's tour.
+const ROUTE_TOUR_STEPS = [
+    {
+        pathPrefix: "/store/products",
+        role: "seller",
+        steps: [
+            step('[data-tour="store-products"]', "Your listings", "Create and manage your product listings here."),
+            {
+                popover: {
+                    title: "Product form",
+                    description: "Fill in details, images, and pricing — you can save as a draft anytime.",
+                },
+                skipMissingElement: true,
+            },
+        ],
+    },
+    {
+        pathPrefix: "/store/orders",
+        role: "seller",
+        steps: [
+            step('[data-tour="store-orders"]', "Incoming orders", "See and manage orders as buyers place them."),
+            {
+                popover: {
+                    title: "Mark as shipped",
+                    description: "Open an order to enter the carrier name and tracking number once it ships.",
+                },
+                skipMissingElement: true,
+            },
+        ],
+    },
+    {
+        pathPrefix: "/store/analytics",
+        role: "seller",
+        steps: [step('[data-tour="store-analytics"]', "Analytics", "Track your sales, revenue, and top products.")],
+    },
+    {
+        pathPrefix: "/store/payouts",
+        role: "seller",
+        steps: [step('[data-tour="store-payouts"]', "Payouts", "See what you've earned and your payout history.")],
+    },
+    {
+        pathPrefix: "/admin/orders",
+        role: "admin",
+        steps: [
+            step('[data-tour="admin-orders"]', "Marketplace orders", "All orders across every store, in one place."),
+            {
+                popover: {
+                    title: "Verify payments",
+                    description: "Open an order to confirm manual payments and update its status.",
+                },
+                skipMissingElement: true,
+            },
+        ],
+    },
+    {
+        pathPrefix: "/admin/products",
+        role: "admin",
+        steps: [step('[data-tour="admin-products"]', "Moderation", "Approve or reject listings before they go live.")],
+    },
+    {
+        pathPrefix: "/admin/users",
+        role: "admin",
+        steps: [step('[data-tour="admin-users"]', "Users", "Manage buyer and seller accounts.")],
+    },
+    {
+        pathPrefix: "/admin/stores",
+        role: "admin",
+        steps: [step('[data-tour="admin-stores"]', "Stores", "Approve new store applications.")],
+    },
+    {
+        pathPrefix: "/admin/analytics",
+        role: "admin",
+        steps: [step('[data-tour="admin-analytics"]', "Analytics", "Platform-wide GMV, orders, and top products.")],
+    },
+    {
+        pathPrefix: "/admin/site",
+        role: "admin",
+        steps: [step('[data-tour="admin-settings"]', "Site settings", "Configure how the platform behaves.")],
+    },
+    {
+        pathPrefix: "/admin/feature-flags",
+        role: "admin",
+        steps: [step('[data-tour="admin-feature-flags"]', "Feature flags", "Turn platform features on or off.")],
+    },
+];
+/** Strips a leading two-letter locale segment ("/en/store/products" → "/store/products"). */
+function stripLocale(pathname) {
+    return pathname.replace(/^\/[a-z]{2}(?=\/|$)/, "") || "/";
+}
+function resolveSteps(role, pathname) {
+    const stripped = stripLocale(pathname);
+    const match = ROUTE_TOUR_STEPS.find((entry) => entry.role === role && stripped.startsWith(entry.pathPrefix));
+    if (!match)
+        return STEP_SETS[role];
+    return [...UNIVERSAL_NAV_STEPS[role], ...match.steps];
+}
 /**
  * TourProvider — lazily imports driver.js on first use so it never lands in
  * the initial bundle. Respects prefers-reduced-motion by disabling driver.js's
@@ -86,7 +199,7 @@ const STEP_SETS = {
  * works; only the animated transition is skipped).
  */
 export function TourProvider({ children }) {
-    const startTour = React.useCallback((role = "buyer") => {
+    const startTour = React.useCallback((role = "buyer", pathname = "/") => {
         if (typeof window === "undefined")
             return;
         void (async () => {
@@ -99,7 +212,7 @@ export function TourProvider({ children }) {
                 showProgress: true,
                 animate: !reducedMotion,
                 allowClose: true,
-                steps: STEP_SETS[role],
+                steps: resolveSteps(role, pathname),
             };
             driver(config).drive();
         })();

package/dist/_internal/client/theme/ThemeProvider.js

@@ -51,7 +51,7 @@ function applyTheme(theme) {
     else
         root.classList.remove("dark");
     // Persist active theme ID so the anti-FOUC script can restore it on return visits,
-    // preventing a flash to the built-in cobalt/hot-pink colors on page load.
+    // preventing a flash to the built-in teal/crimson colors on page load.
     try {
         window.localStorage.setItem(THEME_ID_STORAGE_KEY, theme.id);
     }

package/dist/_internal/server/features/categories/data.js

@@ -16,14 +16,14 @@ export const listRootCategories = cache(async () => {
 /** Featured categories for homepage display (showOnHomepage: true). */
 export const listFeaturedCategories = cache(async () => {
     return categoriesRepository
-        .list({ filters: "isActive==true,isFeatured==true", sorts: "displayOrder", page: 1, pageSize: CATEGORIES_FEATURED_LIMIT })
+        .list({ filters: "isActive==true,showOnHomepage==true", sorts: "order", page: 1, pageSize: CATEGORIES_FEATURED_LIMIT })
         .then((r) => r.data ?? [])
         .catch(() => []);
 });
 /** Nav-menu categories (showInMenu: true, tier 1 + 2). */
 export const listMenuCategories = cache(async () => {
     return categoriesRepository
-        .list({ filters: "isActive==true,display.showInMenu==true", sorts: "displayOrder", page: 1, pageSize: CATEGORIES_MENU_LIMIT })
+        .list({ filters: "isActive==true,display.showInMenu==true", sorts: "order", page: 1, pageSize: CATEGORIES_MENU_LIMIT })
         .then((r) => r.data ?? [])
         .catch(() => []);
 });

package/dist/_internal/server/features/faqs/og.js

@@ -1,4 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { DEFAULT_LIGHT_THEME } from "../../../../tokens/themes/default-light";
+// Satori (next/og) needs literal color values, not CSS vars — derived from
+// the theme token record so a rebrand doesn't require re-hardcoding here.
+const OG_FAQ_GRADIENT = `linear-gradient(135deg, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-primary"]} 0%, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-primary-700"]} 100%)`;
 export function renderFaqOg(category, opts) {
     const label = category
         .replace(/-/g, " ")
@@ -11,7 +15,7 @@ export function renderFaqOgImage(data) {
             display: "flex",
             width: "100%",
             height: "100%",
-            background: "linear-gradient(135deg, #3570fc 0%, #1343de 100%)",
+            background: OG_FAQ_GRADIENT,
             fontFamily: "sans-serif",
             alignItems: "center",
             justifyContent: "center",

package/dist/_internal/server/features/reviews/og.js

@@ -1,4 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { DEFAULT_LIGHT_THEME } from "../../../../tokens/themes/default-light";
+// Satori (next/og) needs literal color values, not CSS vars — derived from
+// the theme token record so a rebrand doesn't require re-hardcoding here.
+const OG_AVATAR_GRADIENT = `linear-gradient(135deg, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-primary"]}, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-secondary"]})`;
 function stars(n) {
     return "★".repeat(Math.min(5, Math.max(1, Math.round(n))));
 }
@@ -41,7 +45,7 @@ export function renderReviewOgImage(data, siteName) {
                                     width: 80,
                                     height: 80,
                                     borderRadius: 40,
-                                    background: "linear-gradient(135deg, #3570fc, #e91e8c)",
+                                    background: OG_AVATAR_GRADIENT,
                                     display: "flex",
                                     alignItems: "center",
                                     justifyContent: "center",

package/dist/_internal/server/features/seo/manifest.js

@@ -1,4 +1,5 @@
 import { ROUTES } from "../../../../next/routing/route-map";
+import { DEFAULT_LIGHT_THEME } from "../../../../tokens/themes/default-light";
 export function buildManifest({ name, shortName, description }) {
     return {
         name,
@@ -8,7 +9,7 @@ export function buildManifest({ name, shortName, description }) {
         display: "standalone",
         orientation: "portrait",
         background_color: "#ffffff",
-        theme_color: "#3570fc",
+        theme_color: DEFAULT_LIGHT_THEME.tokens["appkit-color-primary"],
         categories: ["shopping", "marketplace", "business"],
         lang: "en",
         dir: "ltr",

package/dist/_internal/server/features/seo/og.js

@@ -1,6 +1,12 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { ImageResponse } from "next/og";
+import { DEFAULT_LIGHT_THEME } from "../../../../tokens/themes/default-light";
 export const DEFAULT_OG_SIZE = { width: 1200, height: 630 };
+// Satori (next/og) cannot resolve CSS custom properties — it needs literal
+// color values baked into the style object. Derived from the theme's own
+// token record (not re-hardcoded) so a future rebrand only requires editing
+// default-light.ts, not hunting down every Satori-rendered image separately.
+const OG_BRAND_GRADIENT = `linear-gradient(135deg, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-primary"]} 0%, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-secondary"]} 50%, ${DEFAULT_LIGHT_THEME.tokens["appkit-color-primary-800"]} 100%)`;
 /**
  * Resolves a potentially relative image URL to an absolute URL for use in
  * next/og (Satori). Satori cannot resolve relative paths; all <img src> values
@@ -27,7 +33,7 @@ export function buildDefaultOgImage({ siteName, tagline, domain, logoUrl }) {
             flexDirection: "column",
             alignItems: "center",
             justifyContent: "center",
-            background: "linear-gradient(135deg, #3570fc 0%, #65c408 50%, #e91e8c 100%)",
+            background: OG_BRAND_GRADIENT,
             fontFamily: "sans-serif",
             position: "relative",
             overflow: "hidden",

package/dist/_internal/server/features/tester/visibility.d.ts

@@ -0,0 +1,13 @@
+export interface TestDataFlagged {
+    isTestData?: boolean;
+}
+export interface ViewerLike {
+    isTester?: boolean;
+    role?: string | null;
+}
+/** True when the viewer is allowed to see isTestData:true documents. */
+export declare function canViewTestData(viewer: ViewerLike | null | undefined): boolean;
+/** Strips isTestData:true items from a list unless the viewer is a tester or admin. */
+export declare function filterTestDataForViewer<T extends TestDataFlagged>(items: T[], viewer: ViewerLike | null | undefined): T[];
+/** Returns null (as if not found) for an isTestData:true single doc when the viewer can't see it. */
+export declare function filterSingleTestData<T extends TestDataFlagged>(item: T | null, viewer: ViewerLike | null | undefined): T | null;

package/dist/_internal/server/features/tester/visibility.js

@@ -0,0 +1,28 @@
+/**
+ * Tester sandbox visibility — the shared test store/products/categories/blog/event are
+ * created as fully public/active documents so testers exercise the real browse/search/
+ * checkout code paths, but must stay invisible to non-testers. Filtering happens at the
+ * application layer (post-fetch, in-memory) rather than via a Firestore `where` clause,
+ * because `isTestData` is a new optional field — a Firestore inequality filter
+ * (`where("isTestData", "!=", true)`) would silently exclude every pre-existing document
+ * that doesn't have the field set at all, which is worse than the problem it solves.
+ */
+import { isAdminUser } from "../../../../features/auth/role-predicates";
+/** True when the viewer is allowed to see isTestData:true documents. */
+export function canViewTestData(viewer) {
+    return Boolean(viewer?.isTester) || isAdminUser(viewer);
+}
+/** Strips isTestData:true items from a list unless the viewer is a tester or admin. */
+export function filterTestDataForViewer(items, viewer) {
+    if (canViewTestData(viewer))
+        return items;
+    return items.filter((item) => item.isTestData !== true);
+}
+/** Returns null (as if not found) for an isTestData:true single doc when the viewer can't see it. */
+export function filterSingleTestData(item, viewer) {
+    if (!item)
+        return null;
+    if (item.isTestData === true && !canViewTestData(viewer))
+        return null;
+    return item;
+}

package/dist/_internal/server/functions/scheduled.d.ts

@@ -14,6 +14,7 @@ export declare const autoPayoutEligibility: import("./types").ScheduledFunctionD
 export declare const cleanupRtdbEvents: import("./types").ScheduledFunctionDefinition;
 export declare const mediaTmpCleanup: import("./types").ScheduledFunctionDefinition;
 export declare const draftPrune: import("./types").ScheduledFunctionDefinition;
+export declare const testerSandboxCleanup: import("./types").ScheduledFunctionDefinition;
 export declare const prizeRevealOpen: import("./types").ScheduledFunctionDefinition;
 export declare const prizeRevealClose: import("./types").ScheduledFunctionDefinition;
 export declare const prizeRevealExpiry: import("./types").ScheduledFunctionDefinition;
@@ -21,4 +22,4 @@ export declare const prizeRevealReminder: import("./types").ScheduledFunctionDef
 export declare const bundleStockSync: import("./types").ScheduledFunctionDefinition;
 export declare const emiInstallmentReminder: import("./types").ScheduledFunctionDefinition;
 export declare const catalogueImageStalenessReminder: import("./types").ScheduledFunctionDefinition;
-export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];
+export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];

package/dist/_internal/server/functions/scheduled.js

@@ -1,6 +1,6 @@
 // Scheduled function definitions (Cloud Scheduler triggers).
 // Cron syntax accepts both Firebase shorthand and standard cron expressions.
-import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeRevealCloseHandler, prizeRevealExpiryHandler, prizeRevealOpenHandler, prizeRevealReminderHandler, productStatsSyncHandler, weeklyPayoutEligibilityHandler, } from "../jobs/handlers";
+import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeRevealCloseHandler, prizeRevealExpiryHandler, prizeRevealOpenHandler, prizeRevealReminderHandler, productStatsSyncHandler, weeklyPayoutEligibilityHandler, testerSandboxCleanupHandler, } from "../jobs/handlers";
 import { defineFunction } from "./define";
 const REGION = "asia-south1";
 const EVERY_5_MIN = "every 5 minutes";
@@ -116,6 +116,13 @@ export const draftPrune = defineFunction({
     handler: draftPruneHandler,
     options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
 });
+export const testerSandboxCleanup = defineFunction({
+    name: "testerSandboxCleanup",
+    description: "Delete expired tester QA sandbox test data (daily 05:00 UTC).",
+    trigger: { kind: "schedule", cron: "0 5 * * *", timeZone: "UTC" },
+    handler: testerSandboxCleanupHandler,
+    options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
+});
 export const prizeRevealOpen = defineFunction({
     name: "prizeRevealOpen",
     description: "Flip prize-draw reveals pending→open and send opening notifications.",
@@ -182,6 +189,7 @@ export const SCHEDULED_FUNCTIONS = [
     cleanupRtdbEvents,
     mediaTmpCleanup,
     draftPrune,
+    testerSandboxCleanup,
     prizeRevealOpen,
     prizeRevealClose,
     prizeRevealExpiry,

package/dist/_internal/server/jobs/core/jobRunners.js

@@ -10,6 +10,7 @@
  */
 import { runWeeklyPayoutEligibility } from "./weeklyPayoutEligibility";
 import { runHardBanCascade } from "./hardBanCascade";
+import { runResetOtpVerification } from "./resetOtpVerification";
 async function runPayoutsWeeklyJob(_payload, ctx) {
     const { payoutsCreated, ordersProcessed, payoutIds } = await runWeeklyPayoutEligibility(ctx);
     return {
@@ -31,7 +32,11 @@ async function runHardBanCascadeJob(payload, ctx) {
     const bannedBy = String(payload.bannedBy ?? "");
     return runHardBanCascade({ uid, reason, bannedBy }, ctx);
 }
+async function runResetOtpVerificationJob(_payload, ctx) {
+    return runResetOtpVerification(ctx);
+}
 export const JOB_RUNNERS = {
     payoutsWeekly: runPayoutsWeeklyJob,
     hardBanCascade: runHardBanCascadeJob,
+    resetOtpVerification: runResetOtpVerificationJob,
 };

package/dist/_internal/server/jobs/core/resetOtpVerification.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Core: reset OTP/phone verification state — runs when an admin flips
+ * `siteSettings.featureFlags.smsVerification` from off to on (see
+ * `PATCH /api/site-settings` in the consumer, which enqueues this job on
+ * that specific transition).
+ *
+ * Re-enabling SMS verification after a period of being off means every
+ * previously-verified user's `phoneVerified` flag reflects a verification
+ * that happened under different rules (or none at all, if verification was
+ * off when they signed up) — reset it so everyone re-verifies. The daily
+ * global counter and any live per-user cooldowns are also cleared so the
+ * freshly-re-enabled feature doesn't inherit rate-limit state from before
+ * it was off.
+ */
+import type { JobContext } from "../runtime/types";
+import type { JobRunResult } from "./jobRunners";
+export declare function runResetOtpVerification(ctx: JobContext): Promise<JobRunResult>;

package/dist/_internal/server/jobs/core/resetOtpVerification.js

@@ -0,0 +1,88 @@
+/**
+ * Core: reset OTP/phone verification state — runs when an admin flips
+ * `siteSettings.featureFlags.smsVerification` from off to on (see
+ * `PATCH /api/site-settings` in the consumer, which enqueues this job on
+ * that specific transition).
+ *
+ * Re-enabling SMS verification after a period of being off means every
+ * previously-verified user's `phoneVerified` flag reflects a verification
+ * that happened under different rules (or none at all, if verification was
+ * off when they signed up) — reset it so everyone re-verifies. The daily
+ * global counter and any live per-user cooldowns are also cleared so the
+ * freshly-re-enabled feature doesn't inherit rate-limit state from before
+ * it was off.
+ */
+import { USER_COLLECTION } from "../../../../features/auth/schemas/firestore";
+import { SMS_COUNTERS_COLLECTION } from "../../../../features/auth/schemas/firestore";
+import { normalizeError } from "../../../../errors/normalize";
+const BATCH_SIZE = 400;
+async function resetPhoneVerifiedFlags(ctx) {
+    const failed = [];
+    let updated = 0;
+    let lastDocId = null;
+    for (;;) {
+        let query = ctx.db
+            .collection(USER_COLLECTION)
+            .where("phoneVerified", "==", true)
+            .orderBy("__name__")
+            .limit(BATCH_SIZE);
+        if (lastDocId) {
+            query = query.startAfter(lastDocId);
+        }
+        const snap = await query.get();
+        if (snap.empty)
+            break;
+        const batch = ctx.db.batch();
+        for (const doc of snap.docs) {
+            batch.update(doc.ref, { phoneVerified: false });
+        }
+        try {
+            await batch.commit();
+            updated += snap.docs.length;
+        }
+        catch (err) {
+            void normalizeError(err);
+            ctx.logger.error("resetOtpVerification: batch commit failed", err);
+            for (const doc of snap.docs)
+                failed.push(doc.id);
+        }
+        lastDocId = snap.docs[snap.docs.length - 1].id;
+        if (snap.docs.length < BATCH_SIZE)
+            break;
+    }
+    return { updated, failed };
+}
+async function clearSmsCounters(ctx) {
+    let removed = 0;
+    for (;;) {
+        const snap = await ctx.db.collection(SMS_COUNTERS_COLLECTION).limit(BATCH_SIZE).get();
+        if (snap.empty)
+            break;
+        const batch = ctx.db.batch();
+        for (const doc of snap.docs)
+            batch.delete(doc.ref);
+        await batch.commit();
+        removed += snap.docs.length;
+        if (snap.docs.length < BATCH_SIZE)
+            break;
+    }
+    return removed;
+}
+export async function runResetOtpVerification(ctx) {
+    ctx.logger.info("resetOtpVerification: starting (smsVerification re-enabled)");
+    const { updated, failed } = await resetPhoneVerifiedFlags(ctx);
+    const countersCleared = await clearSmsCounters(ctx);
+    ctx.logger.info("resetOtpVerification: done", { updated, failed: failed.length, countersCleared });
+    return {
+        summary: {
+            total: updated + failed.length,
+            succeeded: updated,
+            skipped: 0,
+            failed: failed.length,
+        },
+        succeeded: [],
+        skipped: [],
+        failed: failed.map((id) => ({ id, reason: "batch commit failed" })),
+        data: { usersReset: updated, smsCountersCleared: countersCleared },
+    };
+}

package/dist/_internal/server/jobs/core/testerSandboxCleanup.d.ts

@@ -0,0 +1,6 @@
+import type { JobContext } from "../runtime/types";
+export interface TesterSandboxCleanupOptions {
+    /** true = wipe every isTestData:true doc regardless of testDataExpiresAt (manual force-purge). */
+    force?: boolean;
+}
+export declare function runTesterSandboxCleanup(ctx: JobContext, opts?: TesterSandboxCleanupOptions): Promise<void>;

package/dist/_internal/server/jobs/core/testerSandboxCleanup.js

@@ -0,0 +1,35 @@
+import { batchDelete, getTestDataRefs } from "../handlers/_helpers";
+import { BID_FIELDS } from "../../../../constants/field-names";
+const SANDBOX_COLLECTIONS = ["categories", "stores", "products", "blogPosts", "events"];
+const BID_CHUNK_SIZE = 30; // Firestore `in` query cap
+export async function runTesterSandboxCleanup(ctx, opts = {}) {
+    const cutoff = opts.force ? null : new Date();
+    ctx.logger.info(opts.force
+        ? "Force-purging all tester sandbox test data"
+        : "Sweeping expired tester sandbox test data");
+    const allRefs = [];
+    let deletedProductIds = [];
+    for (const collection of SANDBOX_COLLECTIONS) {
+        const refs = await getTestDataRefs(ctx.db, collection, cutoff);
+        allRefs.push(...refs);
+        if (collection === "products") {
+            deletedProductIds = refs.map((ref) => ref.id);
+        }
+    }
+    // Cascade into bids referencing deleted test products — bids hold only a live
+    // productId FK with no denormalized snapshot, so leaving them behind after the
+    // product is gone would create meaningless orphaned auction history.
+    for (let i = 0; i < deletedProductIds.length; i += BID_CHUNK_SIZE) {
+        const chunk = deletedProductIds.slice(i, i + BID_CHUNK_SIZE);
+        if (chunk.length === 0)
+            continue;
+        const snap = await ctx.db.collection("bids").where(BID_FIELDS.PRODUCT_ID, "in", chunk).get();
+        allRefs.push(...snap.docs.map((d) => d.ref));
+    }
+    if (allRefs.length === 0) {
+        ctx.logger.info("No tester sandbox test data to clean up");
+        return;
+    }
+    const deleted = await batchDelete(ctx, allRefs);
+    ctx.logger.info("Tester sandbox cleanup complete", { deleted });
+}

package/dist/_internal/server/jobs/handlers/_helpers.d.ts

@@ -6,3 +6,9 @@ import type { JobContext } from "../runtime/types";
 /** Batch-delete document refs, respecting Firestore's 500-write batch limit. */
 export declare function batchDelete(ctx: JobContext, refs: FirebaseFirestore.DocumentReference[]): Promise<number>;
 export { getAdminRealtimeDb };
+/**
+ * Query docs tagged isTestData:true in a collection. `cutoff: null` returns every
+ * tester-sandbox doc regardless of expiry (manual force-purge); a real Date returns
+ * only the ones past testDataExpiresAt (the scheduled 7-day sweep).
+ */
+export declare function getTestDataRefs(db: FirebaseFirestore.Firestore, collection: string, cutoff: Date | null): Promise<FirebaseFirestore.DocumentReference[]>;