@mohasinac/appkit 4.2.0 → 4.3.1

package/dist/_internal/client/features/layout/navActive.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shared "which nav item/group is active" algorithm for the Admin/Store/User
+ * dashboard sidebars and the public AppLayoutShell sidebar. Longest matching
+ * href wins (rather than every prefix-matching item lighting up independently)
+ * so a short root route like "/store" or "/user" (each sidebar's own
+ * "Dashboard" item) never lights up alongside a real, more specific match —
+ * see CLAUDE.md Recurrent Root Cause Patterns for the incident this fixes.
+ */
+export declare function findActiveNavItem<Item extends {
+    href: string;
+}>(items: Item[], activeHref: string): Item | undefined;
+export declare function findActiveNavGroup<Item extends {
+    href: string;
+}, Group extends {
+    title: string;
+    items: Item[];
+}>(groups: Group[], activeHref: string): Group | undefined;

package/dist/_internal/client/features/layout/navActive.js

@@ -0,0 +1,33 @@
+/**
+ * Shared "which nav item/group is active" algorithm for the Admin/Store/User
+ * dashboard sidebars and the public AppLayoutShell sidebar. Longest matching
+ * href wins (rather than every prefix-matching item lighting up independently)
+ * so a short root route like "/store" or "/user" (each sidebar's own
+ * "Dashboard" item) never lights up alongside a real, more specific match —
+ * see CLAUDE.md Recurrent Root Cause Patterns for the incident this fixes.
+ */
+function isPrefixMatch(href, activeHref) {
+    return activeHref === href || activeHref.startsWith(`${href}/`);
+}
+export function findActiveNavItem(items, activeHref) {
+    let best;
+    for (const item of items) {
+        if (!isPrefixMatch(item.href, activeHref))
+            continue;
+        if (!best || item.href.length > best.href.length)
+            best = item;
+    }
+    return best;
+}
+export function findActiveNavGroup(groups, activeHref) {
+    let bestGroup;
+    let bestLen = -1;
+    for (const group of groups) {
+        const item = findActiveNavItem(group.items, activeHref);
+        if (item && item.href.length > bestLen) {
+            bestGroup = group;
+            bestLen = item.href.length;
+        }
+    }
+    return bestGroup;
+}

package/dist/_internal/server/features/auth/actions.d.ts

@@ -5,4 +5,3 @@
  * route handler.
  */
 export { authMeGET } from "../../../../features/auth/api/route";
-export * from "../../../../features/auth/consent-otp";

package/dist/_internal/server/features/auth/actions.js

@@ -5,4 +5,3 @@
  * route handler.
  */
 export { authMeGET } from "../../../../features/auth/api/route";
-export * from "../../../../features/auth/consent-otp";

package/dist/_internal/server/features/bundles/data.d.ts

@@ -17,11 +17,29 @@ export interface BundleDataOptions {
  */
 export declare const getBundleForDetail: (slug: string, _opts?: BundleDataOptions) => Promise<CategoryDocument | null>;
 /**
- * Fetch the resolved product members of a bundle. Reads `bundleProductIds`
- * off the bundle document and hydrates each via `productRepository.findById`.
- * Returns an empty array when the bundle has no product mirror yet.
+ * Resolve the effective member product ids for a bundle. `bundleProductIds`
+ * is the index-friendly mirror and is normally authoritative, but a bundle
+ * can be written (e.g. by seed data or a partial API payload) with only its
+ * `bundleQueryRule` set and no mirror — falls back to the static rule's
+ * `productIds` in that case rather than silently rendering an empty bundle.
  */
-export declare const listBundleMembers: (bundle: Pick<CategoryDocument, "bundleProductIds">, _opts?: BundleDataOptions) => Promise<ProductDocument[]>;
+export declare function resolveBundleMemberIds(bundle: Pick<CategoryDocument, "bundleProductIds" | "bundleQueryRule">): string[];
+/**
+ * Fetch the resolved product members of a bundle. Hydrates each id from
+ * `resolveBundleMemberIds` via `productRepository.findById`. Returns an
+ * empty array when the bundle has no resolvable members yet.
+ */
+export declare const listBundleMembers: (bundle: Pick<CategoryDocument, "bundleProductIds" | "bundleQueryRule">, _opts?: BundleDataOptions) => Promise<ProductDocument[]>;
+/**
+ * Sum the individual prices of a set of member products — the "buy
+ * separately" total a bundle's discount is measured against. Used at bundle
+ * create/update time (and by the daily `runBundleStockSync` sweep) to
+ * populate `bundleOriginalTotal`. Deliberately returns `undefined` (rather
+ * than a partial sum) when any member id fails to resolve, so a stale or
+ * broken reference never understates the "before" price and inflates the
+ * displayed discount.
+ */
+export declare function resolveBundleOriginalTotal(productIds: string[]): Promise<number | undefined>;
 /**
  * List the most recent active bundles for homepage placement. Bounded to
  * `limit` (default 8) and filtered to `isActive: true` server-side.

package/dist/_internal/server/features/bundles/data.js

@@ -19,18 +19,55 @@ export const getBundleForDetail = cache(async (slug, _opts) => {
     return categoriesRepository.findBySlugAndType(slug, "bundle");
 });
 /**
- * Fetch the resolved product members of a bundle. Reads `bundleProductIds`
- * off the bundle document and hydrates each via `productRepository.findById`.
- * Returns an empty array when the bundle has no product mirror yet.
+ * Resolve the effective member product ids for a bundle. `bundleProductIds`
+ * is the index-friendly mirror and is normally authoritative, but a bundle
+ * can be written (e.g. by seed data or a partial API payload) with only its
+ * `bundleQueryRule` set and no mirror — falls back to the static rule's
+ * `productIds` in that case rather than silently rendering an empty bundle.
+ */
+export function resolveBundleMemberIds(bundle) {
+    if (bundle.bundleProductIds?.length)
+        return bundle.bundleProductIds;
+    if (bundle.bundleQueryRule?.type === "static") {
+        return bundle.bundleQueryRule.productIds;
+    }
+    return [];
+}
+/**
+ * Fetch the resolved product members of a bundle. Hydrates each id from
+ * `resolveBundleMemberIds` via `productRepository.findById`. Returns an
+ * empty array when the bundle has no resolvable members yet.
  */
 export const listBundleMembers = cache(async (bundle, _opts) => {
     void _opts;
-    const ids = bundle.bundleProductIds ?? [];
+    const ids = resolveBundleMemberIds(bundle);
     if (ids.length === 0)
         return [];
     const results = await Promise.all(ids.map((id) => productRepository.findById(id).catch(() => null)));
     return results.filter((p) => p !== null);
 });
+/**
+ * Sum the individual prices of a set of member products — the "buy
+ * separately" total a bundle's discount is measured against. Used at bundle
+ * create/update time (and by the daily `runBundleStockSync` sweep) to
+ * populate `bundleOriginalTotal`. Deliberately returns `undefined` (rather
+ * than a partial sum) when any member id fails to resolve, so a stale or
+ * broken reference never understates the "before" price and inflates the
+ * displayed discount.
+ */
+export async function resolveBundleOriginalTotal(productIds) {
+    if (productIds.length === 0)
+        return undefined;
+    const results = await Promise.all(productIds.map((id) => productRepository.findById(id).catch(() => null)));
+    const prices = [];
+    for (const p of results) {
+        if (!p || typeof p.price !== "number")
+            return undefined;
+        prices.push(p.price);
+    }
+    const total = prices.reduce((sum, p) => sum + p, 0);
+    return Math.round(total * 100) / 100;
+}
 /**
  * List the most recent active bundles for homepage placement. Bounded to
  * `limit` (default 8) and filtered to `isActive: true` server-side.

package/dist/_internal/server/features/bundles/index.d.ts

@@ -1,4 +1,4 @@
-export { getBundleForDetail, listBundleMembers, listFeaturedBundles, type BundleDataOptions, } from "./data";
+export { getBundleForDetail, listBundleMembers, listFeaturedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, type BundleDataOptions, } from "./data";
 export { buildBundleMetadata, type BundleMetadataOptions } from "./metadata";
 export { renderBundleOg, renderBundleOgImage, type BundleOgData, } from "./og";
 export { addBundleToCartAction } from "./actions";

package/dist/_internal/server/features/bundles/index.js

@@ -1,4 +1,4 @@
-export { getBundleForDetail, listBundleMembers, listFeaturedBundles, } from "./data";
+export { getBundleForDetail, listBundleMembers, listFeaturedBundles, resolveBundleMemberIds, resolveBundleOriginalTotal, } from "./data";
 export { buildBundleMetadata } from "./metadata";
 // S-SBUNI-4 2026-05-13 — bundle OG renderer.
 export { renderBundleOg, renderBundleOgImage, } from "./og";

package/dist/_internal/server/features/checkout/actions.js

@@ -1,5 +1,4 @@
 import { normalizeError } from "../../../../errors/normalize";
-import { safeFireAndForget } from "../../../../utils/safe-fire-forget";
 import { roundRupees } from "../../../../utils/number.formatter";
 /**
  * Checkout server actions (appkit).
@@ -18,21 +17,19 @@ import { computePreOrderDepositAmount } from "../../../shared/checkout/order-mat
 import { failedCheckoutRepository } from "../../../../features/checkout/repository/failed-checkout.repository";
 import { sendOrderConfirmationEmail } from "../../../../features/contact/server";
 import { splitCartIntoOrderGroups } from "../../../../features/orders/index";
-import { resolveDate } from "../../../../utils";
 import { computeCodHandlingFee, computeWhatsAppNotifyFee, computeGiftWrapFee, computeShipmentProtectionFee, } from "../../../shared/fees/calculator";
 import { getAdminDb, getAdminRealtimeDb, RTDB_PATHS, } from "../../../../providers/db-firebase";
 import { PRODUCT_COLLECTION, PRODUCT_CODES_SUBCOLLECTION } from "../../../../features/products/schemas/firestore";
 import { CART_COLLECTION } from "../../../../features/cart/schemas/index";
 // S-SBUNI-RULES 2026-05-13 — bundle cart-line stock fan-out helpers.
 import { getCartItemMemberIds, getExpandedDecrements, bucketCartItemsByStock, } from "./bundle-expansion";
-import { consentOtpRef, consentOtpRateLimitRef, CONSENT_OTP_MAX_BYPASS_CREDITS, } from "../../../../features/auth/server";
 import { OrderStatusValues, PaymentStatusValues, PaymentMethodValues, OutOfStockPolicyValues, } from "../../../../features/orders/schemas/index";
 import { getDefaultCurrency } from "../../../../core/index";
 import { verifyPaymentSignatureWithKeys, fetchRazorpayOrder, paiseToRupees, } from "../../../../providers/payment-razorpay/index";
 import { CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_DEFAULT_EMI_SETTINGS } from "../../../shared/features/checkout/config";
 import { checkEmiEligibility, computeEmiSchedule } from "../../../shared/features/emi/schedule";
 import { formatShippingAddress } from "./data";
-import { enforceMaxPerUserForCart, computePrizeRevealDeadline, } from "./prize-bundle-gates";
+import { enforceMaxPerUserForCart } from "./prize-bundle-gates";
 import { getListingRule, runSyncPreflight, } from "../../../shared/checkout/rules";
 import { cartIsDigitalOnly } from "../../../shared/listing-types/cart-shipping";
 import { processRefundAction } from "../refunds/actions";
@@ -215,18 +212,6 @@ async function flushCouponUsageAccumulator(accumulator, uid) {
         serverLogger.error("Failed to record coupon usage:", { err: err instanceof Error ? err.message : String(err) });
     }
 }
-function grantConsentOtpBypassCredit(db, uid, emailOtpUsed, unavailableCount) {
-    if (!emailOtpUsed || unavailableCount === 0)
-        return;
-    const metaRef = consentOtpRateLimitRef(db, uid);
-    metaRef
-        .get()
-        .then((snap) => {
-        const cur = snap.exists ? (snap.data()?.bypassCredits ?? 0) : 0;
-        return metaRef.set({ bypassCredits: Math.min(cur + 1, CONSENT_OTP_MAX_BYPASS_CREDITS) }, { merge: true });
-    })
-        .catch((err) => serverLogger.warn("Failed to grant consent OTP bypass credit", { err }));
-}
 function dispatchOrderConfirmationEmails(emailsToSend) {
     if (emailsToSend.length === 0)
         return;
@@ -382,9 +367,6 @@ async function createOrderForGroup(group, orderType, ctx) {
     const groupRule = getListingRule(lt0);
     const extraOrderFields = {
         ...groupRule.decorateOrderDoc(group[0].item, group[0].product),
-        ...(orderType === "prize-draw"
-            ? { prizeRevealDeadline: computePrizeRevealDeadline(group[0].product) }
-            : {}),
     };
     // ── 15-minute payment window + seller UPI resolution (Tier PP) ──────────
     // Deadline + displayed UPI apply only to methods with a buyer-uploaded
@@ -577,7 +559,6 @@ export async function createCheckoutOrderAction(input) {
         shippingAddress = formatShippingAddress(resolvedAddress);
     }
     const db = getAdminDb();
-    const otpRef = isDigitalCart ? null : consentOtpRef(db, uid, addressId);
     // SB6-C — pre-tx fetch products so we can run the maxPerUser cap check
     // (count queries can't run inside a Firestore transaction). The same
     // product docs are re-read inside the transaction below for stock + prize
@@ -613,21 +594,6 @@ export async function createCheckoutOrderAction(input) {
     let stockResult;
     try {
         stockResult = await db.runTransaction(async (tx) => {
-            let emailOtpUsed = false;
-            if (!isDigitalCart && otpRef) {
-                const otpSnap = await tx.get(otpRef);
-                const otpData = otpSnap.exists
-                    ? otpSnap.data()
-                    : null;
-                const isConsentValid = otpData?.verified === true &&
-                    otpData.expiresAt &&
-                    (resolveDate(otpData.expiresAt)?.getTime() ?? 0) > Date.now();
-                if (!isConsentValid) {
-                    const reason = !otpData ? "otp_not_verified" : "consent_expired";
-                    throw Object.assign(new ApiError(403, "Order verification required. Please complete OTP verification before placing this order."), { _failReason: reason });
-                }
-                emailOtpUsed = otpData.verifiedVia !== "sms" && otpData.verifiedVia !== "admin_bypass";
-            }
             // SB-UNI-5 2026-05-13 — bundle-aware stock fan-out. Build the unique
             // product-id set across the whole cart (regular items + each bundle's
             // members) and fetch each one ONCE. Validation walks per cart-line and
@@ -662,7 +628,7 @@ export async function createCheckoutOrderAction(input) {
                 // S-SBUNI-RULES 2026-05-13 — sync preflight (prize-pool cap, pre-order
                 // quota) via rule registry. Bundles skip — they bypass the cart path.
                 if (!item.bundleProductIds?.length) {
-                    runSyncPreflight([{ item, product }]);
+                    runSyncPreflight([{ item, product }], paymentMethod);
                 }
                 availableItems.push({ item, product });
             }
@@ -687,29 +653,21 @@ export async function createCheckoutOrderAction(input) {
                     selectedItemIds: null,
                     updatedAt: new Date(),
                 }, { merge: true });
-                if (otpRef) {
-                    tx.delete(otpRef);
-                }
             }
-            return { available: availableItems, unavailable: unavailableItems, emailOtpUsed };
+            return { available: availableItems, unavailable: unavailableItems };
         });
     }
     catch (err) {
         void normalizeError(err);
-        const reason = err?._failReason === "consent_expired"
-            ? "consent_expired"
-            : err?._failReason === "otp_not_verified"
-                ? "otp_not_verified"
-                : "unknown";
         failedCheckoutRepository
-            .logCheckout(uid, reason, err instanceof Error ? err.message : String(err), {
+            .logCheckout(uid, "unknown", err instanceof Error ? err.message : String(err), {
             addressId,
             paymentMethod,
         })
             .catch((logErr) => { void normalizeError(logErr); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: logErr instanceof Error ? logErr.message : String(logErr) }); });
         throw err;
     }
-    const { available, unavailable, emailOtpUsed } = stockResult;
+    const { available, unavailable } = stockResult;
     if (available.length === 0) {
         failedCheckoutRepository
             .logCheckout(uid, "stock_failed", "All items out of stock", {
@@ -764,7 +722,6 @@ export async function createCheckoutOrderAction(input) {
         total += await createOrderForGroup(group, orderType, groupCtx);
     }
     await flushCouponUsageAccumulator(couponUsageAccumulator, uid);
-    grantConsentOtpBypassCredit(db, uid, emailOtpUsed, unavailable.length);
     dispatchOrderConfirmationEmails(emailsToSend);
     serverLogger.info(`createCheckoutOrderAction: ${orderIds.length} order(s) placed for uid=${uid}` +
         (unavailable.length > 0 ? ` (${unavailable.length} item(s) unavailable)` : ""));
@@ -993,9 +950,6 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
     const groupRuleRzp = getListingRule(lt0Rzp);
     const extraOrderFields = {
         ...groupRuleRzp.decorateOrderDoc(group[0].item, group[0].product),
-        ...(orderType === "prize-draw" && group[0].product
-            ? { prizeRevealDeadline: computePrizeRevealDeadline(group[0].product) }
-            : {}),
     };
     const order = await unitOfWork.orders.create({
         productId: firstItem.productId,
@@ -1127,28 +1081,6 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
         }
         shippingAddress = formatShippingAddress(resolvedAddressRzp);
     }
-    const db = getAdminDb();
-    if (!isDigitalCartRazorpay && addressId) {
-        const otpRef = consentOtpRef(db, uid, addressId);
-        const otpSnap = await otpRef.get();
-        const otpData = otpSnap.exists
-            ? otpSnap.data()
-            : null;
-        const isConsentValid = otpData?.verified === true &&
-            otpData.expiresAt &&
-            (resolveDate(otpData.expiresAt)?.getTime() ?? 0) > Date.now();
-        if (!isConsentValid) {
-            const reason = !otpData ? "otp_not_verified" : "consent_expired";
-            failedCheckoutRepository
-                .logPayment(uid, reason, "Consent OTP missing or expired at payment verify time", {
-                gatewayOrderId: razorpay_order_id,
-                gatewayPaymentId: razorpay_payment_id,
-                addressId,
-            })
-                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
-            throw new ApiError(403, "Order verification required. Please complete OTP verification and retry.");
-        }
-    }
     // SB-UNI-5 2026-05-13 — bundle-aware product fetch + validation. Each
     // cart line gets paired with a "representative" product (first member id
     // for bundles, productId for regular items). The full bundle-member
@@ -1179,7 +1111,8 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     // S-SBUNI-RULES 2026-05-13 — sync preflight via rule registry.
     // Bundle items bypass the cart flow so skip the prize-pool cap.
     const preflightPairs = productChecks.filter((p) => p.product !== null && p.product !== undefined && !p.item.bundleProductIds?.length);
-    runSyncPreflight(preflightPairs);
+    // This whole action is the Razorpay path — paymentMethod is always "online".
+    runSyncPreflight(preflightPairs, "online");
     // SB-UNI-O 2026-05-15 — Live-item jurisdiction guard.
     if (!isDigitalCartRazorpay && resolvedAddressRzp) {
         assertLiveJurisdiction(cart.items, productByIdPaid, resolvedAddressRzp.state);
@@ -1310,10 +1243,6 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
             selectedItemIds: null,
         });
     });
-    if (!isDigitalCartRazorpay && addressId) {
-        const otpRefForDelete = consentOtpRef(db, uid, addressId);
-        safeFireAndForget(otpRefForDelete.delete(), "checkout: delete OTP consent ref after Razorpay payment");
-    }
     // outOfStockPolicy: "skip_items" — auto-refund the dropped items' value.
     // Razorpay already captured payment for the FULL cart before this stock
     // check ran, so anything not placed as an order must be given back.

package/dist/_internal/server/features/checkout/prize-bundle-gates.d.ts

@@ -1,10 +1,12 @@
 /**
- * maxPerUser gate + prize reveal deadline helper for the checkout pipeline
- * (SB6-C, SB8-A).
+ * maxPerUser gate for the checkout pipeline (SB6-C).
  *
  * `enforcePrizePoolCap` was removed in S-SBUNI-RULES (2026-05-13) — the
  * equivalent check now lives in `prizeDrawRule.preflightChecks` in the rule
- * registry and is invoked via `runSyncPreflight`.
+ * registry and is invoked via `runSyncPreflight`. `computePrizeRevealDeadline`
+ * (SB8-A) was removed with the buyer-claim-deadline mechanic — reveal is now
+ * fully automatic, there's nothing left for a buyer to "claim" before a
+ * deadline.
  */
 import type { ProductDocument } from "../../../../features/products/schemas/firestore";
 import type { CartItemDocument } from "../../../../features/cart/schemas/firestore";
@@ -34,16 +36,3 @@ export declare function enforceMaxPerUserForCart(args: {
         product: ProductDocument;
     }>;
 }): Promise<void>;
-/**
- * SB8-A — compute the deadline by which the buyer must claim their prize
- * via the reveal API.
- *
- * Rules:
- *   - If the reveal window has not yet opened:
- *       deadline = min(revealWindowStart + revealDeadlineDays, revealWindowEnd)
- *   - If the window is already open:
- *       deadline = min(now + revealDeadlineDays, revealWindowEnd)
- *
- * Returns `undefined` if the product lacks the prize-draw fields.
- */
-export declare function computePrizeRevealDeadline(product: Pick<ProductDocument, "prizeRevealWindowStart" | "prizeRevealWindowEnd" | "prizeRevealDeadlineDays">, now?: Date): Date | undefined;

package/dist/_internal/server/features/checkout/prize-bundle-gates.js

@@ -1,10 +1,12 @@
 /**
- * maxPerUser gate + prize reveal deadline helper for the checkout pipeline
- * (SB6-C, SB8-A).
+ * maxPerUser gate for the checkout pipeline (SB6-C).
  *
  * `enforcePrizePoolCap` was removed in S-SBUNI-RULES (2026-05-13) — the
  * equivalent check now lives in `prizeDrawRule.preflightChecks` in the rule
- * registry and is invoked via `runSyncPreflight`.
+ * registry and is invoked via `runSyncPreflight`. `computePrizeRevealDeadline`
+ * (SB8-A) was removed with the buyer-claim-deadline mechanic — reveal is now
+ * fully automatic, there's nothing left for a buyer to "claim" before a
+ * deadline.
  */
 import { ValidationError } from "../../../../errors";
 import { orderRepository } from "../../../../repositories";
@@ -54,30 +56,3 @@ export async function enforceMaxPerUserForCart(args) {
         throw Object.assign(new ValidationError(`Purchase limit reached for one or more items. ${summary}`), { code: "MAX_PER_USER", violations });
     }
 }
-/**
- * SB8-A — compute the deadline by which the buyer must claim their prize
- * via the reveal API.
- *
- * Rules:
- *   - If the reveal window has not yet opened:
- *       deadline = min(revealWindowStart + revealDeadlineDays, revealWindowEnd)
- *   - If the window is already open:
- *       deadline = min(now + revealDeadlineDays, revealWindowEnd)
- *
- * Returns `undefined` if the product lacks the prize-draw fields.
- */
-export function computePrizeRevealDeadline(product, now = new Date()) {
-    const windowStart = product.prizeRevealWindowStart
-        ? new Date(product.prizeRevealWindowStart)
-        : undefined;
-    const windowEnd = product.prizeRevealWindowEnd
-        ? new Date(product.prizeRevealWindowEnd)
-        : undefined;
-    if (!windowStart || !windowEnd)
-        return undefined;
-    const days = product.prizeRevealDeadlineDays ?? 3;
-    const dayMs = 86400000;
-    const base = windowStart.getTime() > now.getTime() ? windowStart : now;
-    const candidate = new Date(base.getTime() + days * dayMs);
-    return candidate.getTime() < windowEnd.getTime() ? candidate : windowEnd;
-}

package/dist/_internal/server/features/orders/adapters.js

@@ -13,12 +13,6 @@ export function orderDocumentToOrder(doc) {
             ...(item.prizeRevealStatus
                 ? { prizeRevealStatus: item.prizeRevealStatus }
                 : {}),
-            ...(item.prizeRevealDeadline
-                ? { prizeRevealDeadline: item.prizeRevealDeadline }
-                : {}),
-            ...(item.revealedItemNumber != null
-                ? { revealedItemNumber: item.revealedItemNumber }
-                : {}),
             ...(item.cancelledQuantity != null
                 ? { cancelledQuantity: item.cancelledQuantity }
                 : {}),
@@ -80,14 +74,7 @@ export function orderDocumentToOrder(doc) {
                 },
             }
             : {}),
-        ...(doc.prizeRevealDeadline
-            ? {
-                prizeRevealDeadline: doc.prizeRevealDeadline instanceof Date
-                    ? doc.prizeRevealDeadline.toISOString()
-                    : String(doc.prizeRevealDeadline),
-            }
-            : {}),
-        ...(doc.prizeRevealExpired !== undefined ? { prizeRevealExpired: doc.prizeRevealExpired } : {}),
         ...(doc.prizeDrawProductId ? { prizeDrawProductId: doc.prizeDrawProductId } : {}),
+        ...(doc.prizeRevealMode ? { prizeRevealMode: doc.prizeRevealMode } : {}),
     };
 }

package/dist/_internal/server/features/products/actions.js

@@ -4,7 +4,7 @@ import { productRepository } from "../../../../repositories";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers";
 import { isAdminUser } from "../../../../features/auth/role-predicates";
 import { productInputSchema, productUpdateSchema, auctionInputSchema, preOrderInputSchema, setFeaturedSchema, setStatusSchema } from "../../../shared/features/products/schema";
-import { assertProductOwnership, assertStatusTransition } from "./service";
+import { assertProductOwnership, assertStatusTransition, assertPrizeDrawNotLocked, assertPrizeDrawWonItemsImmutable, } from "./service";
 import { ValidationError } from "../../../shared/errors/index";
 export async function createProductAction(input) {
     return wrapAction(async () => {
@@ -54,17 +54,19 @@ export async function createPreOrderAction(input) {
 export async function updateProductAction(productId, input) {
     return wrapAction(async () => {
         const user = await requireRoleUser(["seller", "admin"]);
-        await assertProductOwnership(productId, user.uid);
+        const product = await assertProductOwnership(productId, user.uid);
         const parsed = productUpdateSchema.safeParse(input);
         if (!parsed.success)
             throw new ValidationError(parsed.error.issues[0]?.message ?? "Invalid input");
+        assertPrizeDrawWonItemsImmutable(product, parsed.data.prizeDrawItems);
         return productRepository.update(productId, parsed.data);
     });
 }
 export async function deleteProductAction(productId) {
     return wrapAction(async () => {
         const user = await requireRoleUser(["seller", "admin"]);
-        await assertProductOwnership(productId, user.uid);
+        const product = await assertProductOwnership(productId, user.uid);
+        assertPrizeDrawNotLocked(product, "deleted");
         return productRepository.delete(productId);
     });
 }
@@ -76,6 +78,9 @@ export async function setProductStatusAction(input) {
             throw new ValidationError(parsed.error.issues[0]?.message ?? "Invalid input");
         const product = await assertProductOwnership(parsed.data.productId, user.uid);
         assertStatusTransition(product.status, parsed.data.status);
+        if (parsed.data.status !== "published") {
+            assertPrizeDrawNotLocked(product, "unpublished or archived");
+        }
         // SB-UNI-O — live listings must be admin-verified before a seller can publish them.
         if (parsed.data.status === "published" &&
             (product.listingType ?? "standard") === "live" &&

package/dist/_internal/server/features/products/service.d.ts

@@ -3,6 +3,21 @@ import type { ProductDocument } from "../../../shared/features/products/types";
 export declare function assertProductOwnership(productId: string, sellerId: string): Promise<ProductDocument>;
 /** Validate that a status transition is allowed. */
 export declare function assertStatusTransition(from: string, to: string): void;
+/**
+ * Anti-scam guard — once a prize draw has at least one paid entry, the
+ * seller can no longer take it down (unpublish/archive/delete). Prevents a
+ * seller from dodging shipment of an expensive won prize by pulling the
+ * listing after the fact.
+ */
+export declare function assertPrizeDrawNotLocked(product: Pick<ProductDocument, "listingType" | "prizeCurrentEntries">, action: string): void;
+/**
+ * Anti-scam guard — once a prize item has been won, its title/images/
+ * description/condition/estimatedValue become immutable server-side (the
+ * client editor already locks this visually via PrizeDrawItemsEditor's
+ * `locked` state, but that's UI-only — this is the enforcement). Prevents a
+ * seller from swapping in a cheaper item after a buyer has already won.
+ */
+export declare function assertPrizeDrawWonItemsImmutable(currentProduct: Pick<ProductDocument, "prizeDrawItems">, input: unknown): void;
 /** Assert the product has available stock for a purchase. */
 export declare function assertInStock(product: ProductDocument, quantity?: number): void;
 /** Derive effective price (respects currentBid for auctions, base price otherwise). */

package/dist/_internal/server/features/products/service.js

@@ -1,6 +1,7 @@
 import { productRepository } from "../../../../repositories";
 import { isAuctionListing, isPreOrderListing, } from "../../../../features/products/utils/listing-type";
 import { ProductNotFoundError, ProductOwnershipError, ProductStatusError, ProductStockError, } from "../../../shared/features/products/errors";
+import { ValidationError } from "../../../shared/errors/index";
 const ALLOWED_STATUS_TRANSITIONS = {
     draft: ["published", "archived"],
     published: ["archived", "draft"],
@@ -25,6 +26,46 @@ export function assertStatusTransition(from, to) {
         throw new ProductStatusError(from, to);
     }
 }
+/**
+ * Anti-scam guard — once a prize draw has at least one paid entry, the
+ * seller can no longer take it down (unpublish/archive/delete). Prevents a
+ * seller from dodging shipment of an expensive won prize by pulling the
+ * listing after the fact.
+ */
+export function assertPrizeDrawNotLocked(product, action) {
+    if ((product.listingType ?? "standard") !== "prize-draw")
+        return;
+    if ((product.prizeCurrentEntries ?? 0) <= 0)
+        return;
+    throw new ValidationError(`This prize draw has active entries and cannot be ${action} — buyers have already purchased tickets. The draw must run its course.`);
+}
+/**
+ * Anti-scam guard — once a prize item has been won, its title/images/
+ * description/condition/estimatedValue become immutable server-side (the
+ * client editor already locks this visually via PrizeDrawItemsEditor's
+ * `locked` state, but that's UI-only — this is the enforcement). Prevents a
+ * seller from swapping in a cheaper item after a buyer has already won.
+ */
+export function assertPrizeDrawWonItemsImmutable(currentProduct, input) {
+    if (!Array.isArray(input))
+        return;
+    const current = currentProduct.prizeDrawItems ?? [];
+    for (const currentItem of current) {
+        if (!currentItem.isWon)
+            continue;
+        const incoming = input.find((it) => it.itemNumber === currentItem.itemNumber);
+        if (!incoming)
+            continue;
+        const changed = incoming.title !== currentItem.title ||
+            incoming.description !== currentItem.description ||
+            incoming.condition !== currentItem.condition ||
+            incoming.estimatedValue !== currentItem.estimatedValue ||
+            JSON.stringify(incoming.images) !== JSON.stringify(currentItem.images);
+        if (changed) {
+            throw new ValidationError(`Prize #${currentItem.itemNumber} has already been won and can no longer be edited.`);
+        }
+    }
+}
 /** Assert the product has available stock for a purchase. */
 export function assertInStock(product, quantity = 1) {
     if ((product.availableQuantity ?? 0) < quantity) {

package/dist/_internal/server/functions/firestore.d.ts

@@ -15,6 +15,8 @@ export declare const onProductStockChange: import("./types").DocumentTriggerFunc
 }, {
     [x: string]: import("../../..").JsonValue;
 }>;
+export declare const onPrizeDrawPaymentConfirmed: import("./types").DocumentTriggerFunctionDefinition<import("../jobs/core/onPrizeDrawPaymentConfirmed").PrizeDrawOrderSnapshot, import("../jobs/core/onPrizeDrawPaymentConfirmed").PrizeDrawOrderSnapshot>;
+export declare const prizeDrawSoldOutReveal: import("./types").DocumentTriggerFunctionDefinition<import("../jobs/core/prizeDrawSoldOutReveal").PrizeDrawStockSnapshot, import("../jobs/core/prizeDrawSoldOutReveal").PrizeDrawStockSnapshot>;
 export declare const onReviewWrite: import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>;
 export declare const onCategoryWrite: import("./types").DocumentTriggerFunctionDefinition<import("../jobs").CategoryDoc, import("../jobs").CategoryDoc>;
 export declare const onStoreWrite: import("./types").DocumentTriggerFunctionDefinition<import("../jobs").StoreDoc, import("../jobs").StoreDoc>;
@@ -53,7 +55,7 @@ export declare const FIRESTORE_TRIGGER_FUNCTIONS: readonly [import("./types").Do
     [x: string]: import("../../..").JsonValue;
 }, {
     [x: string]: import("../../..").JsonValue;
-}>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs").CategoryDoc, import("../jobs").CategoryDoc>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs").StoreDoc, import("../jobs").StoreDoc>, import("./types").DocumentTriggerFunctionDefinition<null, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<null, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<{
+}>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs/core/onPrizeDrawPaymentConfirmed").PrizeDrawOrderSnapshot, import("../jobs/core/onPrizeDrawPaymentConfirmed").PrizeDrawOrderSnapshot>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs/core/prizeDrawSoldOutReveal").PrizeDrawStockSnapshot, import("../jobs/core/prizeDrawSoldOutReveal").PrizeDrawStockSnapshot>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs").CategoryDoc, import("../jobs").CategoryDoc>, import("./types").DocumentTriggerFunctionDefinition<import("../jobs").StoreDoc, import("../jobs").StoreDoc>, import("./types").DocumentTriggerFunctionDefinition<null, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<null, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<Record<string, import("../../..").JsonValue>, Record<string, import("../../..").JsonValue>>, import("./types").DocumentTriggerFunctionDefinition<{
     [x: string]: import("../../..").JsonValue;
 }, {
     [x: string]: import("../../..").JsonValue;