@mohasinac/appkit 3.8.1 → 3.9.0

package/dist/schemas/registry.d.ts

@@ -998,7 +998,7 @@ export declare const SCHEMAS: {
             brandFounded: import("zod").ZodOptional<import("zod").ZodNumber>;
             brandBannerImage: import("zod").ZodOptional<import("zod").ZodString>;
             bundleKind: import("zod").ZodOptional<import("zod").ZodEnum<["special", "brand"]>>;
-            bundlePriceInPaise: import("zod").ZodOptional<import("zod").ZodNumber>;
+            bundlePrice: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             bundleQueryRule: import("zod").ZodOptional<import("zod").ZodDiscriminatedUnion<"type", [import("zod").ZodObject<{
                 type: import("zod").ZodLiteral<"static">;
                 productIds: import("zod").ZodArray<import("zod").ZodString, "many">;
@@ -1210,7 +1210,7 @@ export declare const SCHEMAS: {
             brandCountry?: string | undefined;
             brandFounded?: number | undefined;
             brandBannerImage?: string | undefined;
-            bundlePriceInPaise?: number | undefined;
+            bundlePrice?: number | undefined;
             bundleQueryRule?: {
                 type: "static";
                 productIds: string[];
@@ -1304,7 +1304,7 @@ export declare const SCHEMAS: {
             brandCountry?: string | undefined;
             brandFounded?: number | undefined;
             brandBannerImage?: string | undefined;
-            bundlePriceInPaise?: number | undefined;
+            bundlePrice?: number | undefined;
             bundleQueryRule?: {
                 type: "static";
                 productIds: string[];
@@ -1335,8 +1335,8 @@ export declare const SCHEMAS: {
                 storeId: import("zod").ZodOptional<import("zod").ZodString>;
                 discount: import("zod").ZodObject<{
                     value: import("zod").ZodNumber;
-                    maxDiscount: import("zod").ZodOptional<import("zod").ZodNumber>;
-                    minPurchase: import("zod").ZodOptional<import("zod").ZodNumber>;
+                    maxDiscount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+                    minPurchase: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
                 }, "strip", import("zod").ZodTypeAny, {
                     value: number;
                     maxDiscount?: number | undefined;
@@ -1686,8 +1686,8 @@ export declare const SCHEMAS: {
             applicableToAuctions: import("zod").ZodOptional<import("zod").ZodBoolean>;
             discount: import("zod").ZodObject<{
                 value: import("zod").ZodNumber;
-                maxDiscount: import("zod").ZodOptional<import("zod").ZodNumber>;
-                minPurchase: import("zod").ZodOptional<import("zod").ZodNumber>;
+                maxDiscount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+                minPurchase: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             }, "strip", import("zod").ZodTypeAny, {
                 value: number;
                 maxDiscount?: number | undefined;
@@ -1714,7 +1714,7 @@ export declare const SCHEMAS: {
                 applicableCategories?: string[] | undefined;
             }>>;
             tiers: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
-                minAmount: import("zod").ZodNumber;
+                minAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 discountValue: import("zod").ZodNumber;
             }, "strip", import("zod").ZodTypeAny, {
                 minAmount: number;
@@ -1797,8 +1797,8 @@ export declare const SCHEMAS: {
             createdBy: import("zod").ZodString;
             stats: import("zod").ZodObject<{
                 totalUses: import("zod").ZodNumber;
-                totalRevenue: import("zod").ZodNumber;
-                totalDiscount: import("zod").ZodNumber;
+                totalRevenue: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+                totalDiscount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
             }, "strip", import("zod").ZodTypeAny, {
                 totalUses: number;
                 totalRevenue: number;
@@ -2267,8 +2267,8 @@ export declare const SCHEMAS: {
                 productId: import("zod").ZodString;
                 productTitle: import("zod").ZodString;
                 quantity: import("zod").ZodNumber;
-                unitPrice: import("zod").ZodNumber;
-                totalPrice: import("zod").ZodNumber;
+                unitPrice: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+                totalPrice: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 listingType: import("zod").ZodOptional<import("zod").ZodEnum<["standard", "auction", "pre-order", "prize-draw", "classified", "digital-code", "live"]>>;
                 prizeRevealStatus: import("zod").ZodOptional<import("zod").ZodEnum<["pending", "open", "closed", "revealed"]>>;
                 prizeRevealDeadline: import("zod").ZodOptional<import("zod").ZodString>;
@@ -2297,8 +2297,8 @@ export declare const SCHEMAS: {
             orderType: import("zod").ZodOptional<import("zod").ZodString>;
             imageUrls: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
             quantity: import("zod").ZodNumber;
-            unitPrice: import("zod").ZodNumber;
-            totalPrice: import("zod").ZodNumber;
+            unitPrice: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+            totalPrice: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
             currency: import("zod").ZodString;
             status: import("zod").ZodEnum<["pending", "confirmed", "processing", "shipped", "delivered", "cancelled", "refunded", "return_requested", "returned"]>;
             paymentStatus: import("zod").ZodEnum<["pending", "processing", "paid", "failed", "refunded", "partial_refund"]>;
@@ -2336,18 +2336,18 @@ export declare const SCHEMAS: {
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough">>]>>;
             cancellationReason: import("zod").ZodOptional<import("zod").ZodString>;
-            refundAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            refundAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             refundStatus: import("zod").ZodOptional<import("zod").ZodEnum<["pending", "processing", "completed", "rejected"]>>;
-            refundFeeDeducted: import("zod").ZodOptional<import("zod").ZodNumber>;
-            refundNetAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            refundFeeDeducted: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+            refundNetAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             refundNote: import("zod").ZodOptional<import("zod").ZodString>;
             couponCode: import("zod").ZodOptional<import("zod").ZodString>;
-            couponDiscount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            couponDiscount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             appliedDiscounts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                 code: import("zod").ZodString;
                 couponId: import("zod").ZodOptional<import("zod").ZodString>;
                 type: import("zod").ZodEnum<["coupon", "deal", "auto"]>;
-                discountAmount: import("zod").ZodNumber;
+                discountAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 scope: import("zod").ZodOptional<import("zod").ZodEnum<["admin", "seller"]>>;
                 storeId: import("zod").ZodOptional<import("zod").ZodString>;
             }, "strip", import("zod").ZodTypeAny, {
@@ -2365,14 +2365,14 @@ export declare const SCHEMAS: {
                 storeId?: string | undefined;
                 couponId?: string | undefined;
             }>, "many">>;
-            platformFee: import("zod").ZodOptional<import("zod").ZodNumber>;
-            depositAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
-            codRemainingAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
-            codHandlingFee: import("zod").ZodOptional<import("zod").ZodNumber>;
+            platformFee: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+            depositAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+            codRemainingAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+            codHandlingFee: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             emiEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             emiTenureMonths: import("zod").ZodOptional<import("zod").ZodNumber>;
-            emiTokenAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
-            emiSurchargeAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            emiTokenAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+            emiSurchargeAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             emiInstallments: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                 index: import("zod").ZodNumber;
                 dueDate: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
@@ -2382,7 +2382,7 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">>]>;
-                amount: import("zod").ZodNumber;
+                amount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 status: import("zod").ZodEnum<["pending", "paid", "overdue"]>;
                 paidAt: import("zod").ZodOptional<import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
@@ -2431,9 +2431,9 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             }>, "many">>;
-            emiRemainingBalance: import("zod").ZodOptional<import("zod").ZodNumber>;
+            emiRemainingBalance: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             emiComplete: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            shippingFee: import("zod").ZodOptional<import("zod").ZodNumber>;
+            shippingFee: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             shippingMethod: import("zod").ZodOptional<import("zod").ZodEnum<["custom"]>>;
             shippingCarrier: import("zod").ZodOptional<import("zod").ZodString>;
             trackingUrl: import("zod").ZodOptional<import("zod").ZodString>;
@@ -2481,7 +2481,7 @@ export declare const SCHEMAS: {
             refunds: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                 refundId: import("zod").ZodString;
                 type: import("zod").ZodEnum<["full", "partial"]>;
-                amount: import("zod").ZodNumber;
+                amount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 itemIds: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
                 reason: import("zod").ZodString;
                 refundedAt: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
@@ -2897,9 +2897,9 @@ export declare const SCHEMAS: {
             storeId: import("zod").ZodString;
             sellerName: import("zod").ZodString;
             sellerEmail: import("zod").ZodString;
-            amount: import("zod").ZodNumber;
-            grossAmount: import("zod").ZodNumber;
-            platformFee: import("zod").ZodNumber;
+            amount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+            grossAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+            platformFee: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
             platformFeeRate: import("zod").ZodNumber;
             currency: import("zod").ZodString;
             status: import("zod").ZodEnum<["pending", "processing", "paid", "failed"]>;
@@ -2924,16 +2924,16 @@ export declare const SCHEMAS: {
             notes: import("zod").ZodOptional<import("zod").ZodString>;
             adminNote: import("zod").ZodOptional<import("zod").ZodString>;
             orderIds: import("zod").ZodArray<import("zod").ZodString, "many">;
-            gatewayFee: import("zod").ZodOptional<import("zod").ZodNumber>;
+            gatewayFee: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             gatewayFeeRate: import("zod").ZodOptional<import("zod").ZodNumber>;
-            gstAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            gstAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             gstRate: import("zod").ZodOptional<import("zod").ZodNumber>;
             isAutomatic: import("zod").ZodOptional<import("zod").ZodBoolean>;
             refundDeductions: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                 orderId: import("zod").ZodString;
                 refundId: import("zod").ZodString;
-                refundedAmount: import("zod").ZodNumber;
-                deductedAmount: import("zod").ZodNumber;
+                refundedAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
+                deductedAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 reason: import("zod").ZodString;
                 appliedAt: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
@@ -2961,7 +2961,7 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
             }>, "many">>;
-            netAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+            netAmount: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
             requestedAt: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{
@@ -3744,23 +3744,23 @@ export declare const SCHEMAS: {
                     label: import("zod").ZodString;
                     type: import("zod").ZodEnum<["self-courier", "store-pickup", "custom"]>;
                     fee: import("zod").ZodObject<{
-                        flatInPaise: import("zod").ZodOptional<import("zod").ZodNumber>;
-                        perKgInPaise: import("zod").ZodOptional<import("zod").ZodNumber>;
+                        flat: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+                        perKg: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
                         percentOfOrder: import("zod").ZodOptional<import("zod").ZodNumber>;
-                        freeAboveInPaise: import("zod").ZodOptional<import("zod").ZodNumber>;
-                        minInPaise: import("zod").ZodOptional<import("zod").ZodNumber>;
+                        freeAbove: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
+                        min: import("zod").ZodOptional<import("zod").ZodEffects<import("zod").ZodNumber, number, number>>;
                     }, "strip", import("zod").ZodTypeAny, {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     }, {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     }>;
                     etaDaysMin: import("zod").ZodNumber;
                     etaDaysMax: import("zod").ZodNumber;
@@ -3771,11 +3771,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;
@@ -3786,11 +3786,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;
@@ -3804,11 +3804,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;
@@ -3822,11 +3822,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;
@@ -3920,11 +3920,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;
@@ -4005,11 +4005,11 @@ export declare const SCHEMAS: {
                     label: string;
                     providerId: string;
                     fee: {
-                        flatInPaise?: number | undefined;
-                        perKgInPaise?: number | undefined;
+                        flat?: number | undefined;
+                        min?: number | undefined;
+                        perKg?: number | undefined;
                         percentOfOrder?: number | undefined;
-                        freeAboveInPaise?: number | undefined;
-                        minInPaise?: number | undefined;
+                        freeAbove?: number | undefined;
                     };
                     etaDaysMin: number;
                     etaDaysMax: number;

package/dist/security/index.d.ts

@@ -4,7 +4,8 @@ export type { RateLimitConfig, RateLimitResult } from "./rate-limit";
 export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requireActiveAccount, canChangeRole, getRoleLevel, } from "./authorization";
 export type { UserRole } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
-export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, isPiiEncrypted, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-encrypt";
+export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, } from "./pii-encrypt";
+export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-mask";
 export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
 export type { Permission, RoleDefinition, RbacConfig, ResolvedUser, RbacHookReturn, } from "./rbac";

package/dist/security/index.js

@@ -2,7 +2,11 @@ export { generateNonce, buildCSP } from "./csp";
 export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, clearRateLimitStore, } from "./rate-limit";
 export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requireActiveAccount, canChangeRole, getRoleLevel, } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
-export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, isPiiEncrypted, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-encrypt";
+export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, } from "./pii-encrypt";
+// Crypto-free display-masking helpers -- sourced from pii-mask.ts (not
+// pii-encrypt.ts) so this barrel stays safe to re-export from the
+// universal client+server index.ts. See pii-mask.ts's header comment.
+export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./pii-mask";
 export { USER_PII_FIELDS, USER_PII_INDEX_MAP, ADDRESS_PII_FIELDS, ORDER_PII_FIELDS, PAYOUT_PII_FIELDS, PAYOUT_PII_INDEX_MAP, BID_PII_FIELDS, NEWSLETTER_PII_FIELDS, NEWSLETTER_PII_INDEX_MAP, TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, REVIEW_PII_FIELDS, REVIEW_PII_INDEX_MAP, OFFER_PII_FIELDS, CHAT_PII_FIELDS, EVENT_ENTRY_PII_FIELDS, LOTTERY_ENTRY_PII_FIELDS, PAYMENT_METHOD_PII_FIELDS, } from "./pii-schemas";
 export { encryptSecret, decryptSecret, isSecretEncrypted, maskSecret, } from "./settings-encryption";
 export { DEFAULT_ROLES, resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, createRbacHook, Can, createRequirePermission, createRequirePermissionSync, createRbacMiddleware, } from "./rbac";

package/dist/security/pii-encrypt.d.ts

@@ -9,8 +9,8 @@
  * Ciphertext format: "enc:v1:<iv_b64>:<ciphertext_b64>:<authtag_b64>"
  * Blind index format: "hmac-sha256:<sha256_hex>"
  */
-export declare const ENC_PREFIX = "enc:v1:";
-export declare const HMAC_PREFIX = "hmac-sha256:";
+import { ENC_PREFIX, HMAC_PREFIX, isPiiEncrypted } from "./pii-mask";
+export { ENC_PREFIX, HMAC_PREFIX, isPiiEncrypted };
 export declare function getPiiConfigError(): string | null;
 /** Encrypt a plaintext string with AES-256-GCM. */
 export declare function encryptValue(plaintext: string): string;
@@ -36,8 +36,6 @@ export declare function decryptPiiFields<T extends object>(doc: T, piiFields: st
 export declare function encryptPii(plaintext: string | null | undefined): string | null | undefined;
 /** Alias for decryptValue — decrypts a PII ciphertext. */
 export declare function decryptPii(ciphertext: string | null | undefined): string | null | undefined;
-/** Check if a value is encrypted by our PII system. */
-export declare function isPiiEncrypted(value: string): boolean;
 /** Alias for hmacBlindIndex. */
 export declare function piiBlindIndex(plaintext: string): string;
 /**
@@ -80,52 +78,3 @@ export declare function encryptPayoutBankAccount<T extends object>(bank: T | und
  * Decrypt PII on a payout bankAccount sub-object from the payouts collection.
  */
 export declare function decryptPayoutBankAccount<T extends object>(bank: T | undefined | null): T | undefined | null;
-/**
- * Mask a person's name for public display.
- * Each word is reduced to its first letter followed by "***".
- *
- * "John Doe"  → "J*** D***"
- * "Alice"     → "A***"
- *
- * If the value is still an encrypted blob (e.g. PII_ENCRYPTION_KEY not set),
- * returns "Anonymous" so encrypted ciphertext never leaks to the UI.
- */
-export declare function maskName(name: string | null | undefined): string;
-/**
- * Mask an email address for public display.
- * "john.doe@example.com" → "j***@***.com"
- */
-export declare function maskEmail(email: string | null | undefined): string;
-/**
- * Return a copy of a review document with PII fields masked for public display.
- * Admin/owner endpoints should NOT call this — use the raw document instead.
- */
-export declare function maskPublicReview<T extends {
-    userName: string;
-}>(review: T): T;
-/**
- * Return a copy of a bid document with PII masked for public display
- * (auction product page).
- */
-export declare function maskPublicBid<T extends {
-    userName: string;
-}>(bid: T): T;
-/**
- * Return a copy of an event-entry document with PII masked for the leaderboard.
- * ipAddress and userEmail are never sent to the client;
- * only userDisplayName needs masking for a public leaderboard view.
- */
-export declare function maskPublicEventEntry<T extends {
-    userDisplayName?: string;
-    userEmail?: string;
-    ipAddress?: string;
-}>(entry: T): Omit<T, "userEmail" | "ipAddress">;
-/**
- * Return a copy of an offer document with buyer PII masked for the seller view.
- * The seller needs to know an offer was made and its amount, but the buyer's
- * full name and email should remain private until the order is confirmed.
- */
-export declare function maskOfferForSeller<T extends {
-    buyerName: string;
-    buyerEmail: string;
-}>(offer: T): T;

package/dist/security/pii-encrypt.js

@@ -9,22 +9,26 @@
  * Ciphertext format: "enc:v1:<iv_b64>:<ciphertext_b64>:<authtag_b64>"
  * Blind index format: "hmac-sha256:<sha256_hex>"
  */
-import { createRequire } from "node:module";
-// crypto is a Node.js built-in. Use require() to keep it out of the static
-// import graph so Next.js Edge bundler does not warn about this file. A bare
-// top-level `require(...)` call only works when the compiled dist output is
-// loaded via CommonJS (or a bundler that polyfills `require`) — under a
-// plain Node ESM `import()` (e.g. appkit/scripts/seed-cli.mjs and any other
-// standalone script importing @mohasinac/appkit directly), there is no
-// ambient `require` global, so that call threw `ReferenceError: require is
-// not defined`. createRequire(import.meta.url) works in both: it's still a
-// runtime function call a bundler's static analysis won't follow into the
-// client graph, but it resolves correctly under Node's own ESM loader too.
-const nodeRequire = createRequire(import.meta.url);
-function nodeCrypto() { return nodeRequire("crypto"); }
+import { ENC_PREFIX, HMAC_PREFIX, isPiiEncrypted } from "./pii-mask";
+// Re-exported for backward-compat with existing direct imports of these
+// symbols from this file — the actual crypto-free definitions live in
+// pii-mask.ts (see that file's header comment for why the split exists).
+export { ENC_PREFIX, HMAC_PREFIX, isPiiEncrypted };
+// crypto is a Node.js built-in. A bare, non-static `require(...)` call
+// (never a top-level `import ... from "node:module"`/"crypto") is
+// deliberate: bundlers targeting the browser (Turbopack in particular)
+// statically resolve every top-level import in a module's chain before any
+// tree-shaking pass, and hard-fail immediately on an unresolvable Node
+// builtin even if the symbol using it is never actually consumed
+// client-side. A bare `require` reference inside a function body is a
+// runtime lookup, not a static import, so it's invisible to that pass.
+// This only works where an ambient `require` global exists: Next.js's own
+// server bundle (webpack/Turbopack) provides one automatically; the one
+// place that doesn't is a standalone pure-ESM script importing
+// @mohasinac/appkit directly (appkit/scripts/seed-cli.mjs), which sets
+// `globalThis.require` itself before importing appkit — see that file.
+function nodeCrypto() { return require("crypto"); }
 const ALGO = "aes-256-gcm";
-export const ENC_PREFIX = "enc:v1:";
-export const HMAC_PREFIX = "hmac-sha256:";
 function normalizePiiSecretValue(raw) {
     return (raw ?? "").replace(/(?:\\r|\\n|\r|\n)+$/g, "").trim();
 }
@@ -139,10 +143,6 @@ export function decryptPii(ciphertext) {
         return ciphertext;
     return decryptValue(ciphertext);
 }
-/** Check if a value is encrypted by our PII system. */
-export function isPiiEncrypted(value) {
-    return typeof value === "string" && value.startsWith(ENC_PREFIX);
-}
 /** Alias for hmacBlindIndex. */
 export function piiBlindIndex(plaintext) {
     return hmacBlindIndex(plaintext);
@@ -278,84 +278,3 @@ export function decryptPayoutBankAccount(bank) {
         return bank;
     return decryptPiiFields({ ...bank }, []);
 }
-// --- Public display masking -------------------------------------------------
-/**
- * Mask a person's name for public display.
- * Each word is reduced to its first letter followed by "***".
- *
- * "John Doe"  → "J*** D***"
- * "Alice"     → "A***"
- *
- * If the value is still an encrypted blob (e.g. PII_ENCRYPTION_KEY not set),
- * returns "Anonymous" so encrypted ciphertext never leaks to the UI.
- */
-export function maskName(name) {
-    if (!name || typeof name !== "string")
-        return "Anonymous";
-    if (isPiiEncrypted(name))
-        return "Anonymous";
-    return name
-        .trim()
-        .split(/\s+/)
-        .filter(Boolean)
-        .map((word) => word[0] + "***")
-        .join(" ");
-}
-/**
- * Mask an email address for public display.
- * "john.doe@example.com" → "j***@***.com"
- */
-export function maskEmail(email) {
-    if (!email || typeof email !== "string")
-        return "***@***.***";
-    if (isPiiEncrypted(email))
-        return "***@***.***";
-    const atIdx = email.indexOf("@");
-    if (atIdx < 0)
-        return "***";
-    const local = email.slice(0, atIdx);
-    const domain = email.slice(atIdx + 1);
-    const dotIdx = domain.lastIndexOf(".");
-    const domainMasked = dotIdx > 0 ? "***" + domain.slice(dotIdx) : "***";
-    return (local[0] ?? "*") + "***@" + domainMasked;
-}
-/**
- * Return a copy of a review document with PII fields masked for public display.
- * Admin/owner endpoints should NOT call this — use the raw document instead.
- */
-export function maskPublicReview(review) {
-    return { ...review, userName: maskName(review.userName) };
-}
-/**
- * Return a copy of a bid document with PII masked for public display
- * (auction product page).
- */
-export function maskPublicBid(bid) {
-    return { ...bid };
-}
-/**
- * Return a copy of an event-entry document with PII masked for the leaderboard.
- * ipAddress and userEmail are never sent to the client;
- * only userDisplayName needs masking for a public leaderboard view.
- */
-export function maskPublicEventEntry(entry) {
-    const { userEmail: _e, ipAddress: _ip, ...rest } = entry;
-    return {
-        ...rest,
-        ...(rest.userDisplayName !== undefined
-            ? { userDisplayName: maskName(rest.userDisplayName) }
-            : {}),
-    };
-}
-/**
- * Return a copy of an offer document with buyer PII masked for the seller view.
- * The seller needs to know an offer was made and its amount, but the buyer's
- * full name and email should remain private until the order is confirmed.
- */
-export function maskOfferForSeller(offer) {
-    return {
-        ...offer,
-        buyerName: maskName(offer.buyerName),
-        buyerEmail: maskEmail(offer.buyerEmail),
-    };
-}