@mohasinac/appkit 4.3.2 → 4.4.0

package/dist/security/index.d.ts

@@ -1,5 +1,5 @@
 export { generateNonce, buildCSP } from "./csp";
-export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, clearRateLimitStore, } from "./rate-limit";
+export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, clearRateLimitStore, getClientIP, hashGuestIdentity, } from "./rate-limit";
 export type { RateLimitConfig, RateLimitResult } from "./rate-limit";
 export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requireActiveAccount, canChangeRole, getRoleLevel, } from "./authorization";
 export type { UserRole } from "./authorization";

package/dist/security/index.js

@@ -1,5 +1,5 @@
 export { generateNonce, buildCSP } from "./csp";
-export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, clearRateLimitStore, } from "./rate-limit";
+export { rateLimit, applyRateLimit, rateLimitByIdentifier, RateLimitPresets, clearRateLimitStore, getClientIP, hashGuestIdentity, } from "./rate-limit";
 export { requireAuth, requireRole, requireOwnership, requireEmailVerified, requireActiveAccount, canChangeRole, getRoleLevel, } from "./authorization";
 export { redactPii, safeDisplayName, safeDisplayEmail, maskIp } from "./pii-redact";
 export { encryptValue, decryptValue, hmacBlindIndex, encryptPiiFields, decryptPiiFields, encryptPii, decryptPii, piiBlindIndex, addPiiIndices, getPiiConfigError, encryptShippingAddress, decryptShippingAddress, encryptPayoutDetails, decryptPayoutDetails, encryptShippingConfig, decryptShippingConfig, encryptPayoutBankAccount, decryptPayoutBankAccount, } from "./pii-encrypt";

package/dist/security/rate-limit.d.ts

@@ -27,6 +27,16 @@ export interface RateLimitResult {
     reset: number;
     error?: string;
 }
+export declare function getClientIP(request: NextRequest | Request): string;
+/**
+ * Deterministic, non-reversible identity hash for an unauthenticated
+ * ("guest") caller, scoped to an entity (e.g. an event id) so the same
+ * physical visitor can't be correlated across unrelated entities from the
+ * hash alone. Reuses the same HMAC-SHA256 blind-index primitive already
+ * used for PII lookups (`emailIndex`/`phoneIndex`) — the raw IP is never
+ * persisted, only this hash.
+ */
+export declare function hashGuestIdentity(scope: string, request: NextRequest | Request): string;
 /**
  * Rate limit by request. Uses Upstash Redis when configured, in-memory otherwise.
  */

package/dist/security/rate-limit.js

@@ -11,8 +11,9 @@
  *   UPSTASH_REDIS_REST_URL
  *   UPSTASH_REDIS_REST_TOKEN
  */
+import { hmacBlindIndex } from "./pii-encrypt";
 // --- IP extraction ------------------------------------------------------------
-function getClientIP(request) {
+export function getClientIP(request) {
     const forwarded = request.headers.get("x-forwarded-for");
     if (forwarded)
         return forwarded.split(",")[0].trim();
@@ -21,6 +22,17 @@ function getClientIP(request) {
         return realIP;
     return "unknown";
 }
+/**
+ * Deterministic, non-reversible identity hash for an unauthenticated
+ * ("guest") caller, scoped to an entity (e.g. an event id) so the same
+ * physical visitor can't be correlated across unrelated entities from the
+ * hash alone. Reuses the same HMAC-SHA256 blind-index primitive already
+ * used for PII lookups (`emailIndex`/`phoneIndex`) — the raw IP is never
+ * persisted, only this hash.
+ */
+export function hashGuestIdentity(scope, request) {
+    return hmacBlindIndex(`${scope}:${getClientIP(request)}`);
+}
 // --- Upstash-backed limiter ---------------------------------------------------
 let upstashLimiter = null;
 async function getUpstashLimiter() {

package/dist/seed/events-seed-data.js

@@ -31,6 +31,9 @@ export const eventsSeedData = [
         endsAt: daysAhead(10),
         coverImage: { type: "image", url: seedExtMedia("https://picsum.photos/seed/event-cover-favourite-blader-poll-20260101/1200/600"), alt: "Original series Beyblade lineup" },
         tags: ["poll", "original-series", "season-1"],
+        // Demo fixture for the guest-participation toggle (2026-08-20) — polls
+        // are otherwise login-gated, so this event demonstrates the override.
+        allowGuestParticipation: true,
         pollConfig: {
             options: [
                 { id: "tyson", label: "Mock User 6" },
@@ -138,7 +141,11 @@ export const eventsSeedData = [
             { id: "spin-grip", label: "Free Launcher Grip Tape", weight: 10, isActive: true },
             { id: "spin-try-again", label: "Try Again Tomorrow!", weight: 50, isActive: true },
         ],
-        spinMaxPerUser: 1,
+        // spinMaxPerUser: 2 (not the default 1) so the per-identity spin-count
+        // enforcement added 2026-08-20 has a real demo case, and
+        // allowGuestParticipation lets a signed-out visitor spin too.
+        spinMaxPerUser: 2,
+        allowGuestParticipation: true,
         spinWindowStart: daysAgo(7),
         spinWindowEnd: daysAhead(23),
         stats: { totalEntries: 534, approvedEntries: 534, flaggedEntries: 0 },
@@ -359,6 +366,7 @@ export const eventEntriesSeedData = [
         userDisplayName: "Mock User 2",
         userEmail: "vivaan.kapoor@gmail.com",
         spinUsed: true,
+        spinCount: 1,
         spinPrizeId: "spin-10pct",
         spinPrizeCouponCode: "REHAN10",
         spinWonAt: daysAgo(1),
@@ -366,4 +374,47 @@ export const eventEntriesSeedData = [
         submittedAt: daysAgo(1),
         createdAt: daysAgo(1),
     },
+    // Rehan spun the wheel twice (spinMaxPerUser: 2 on this event) — demo
+    // fixture for the per-identity spin-count enforcement added 2026-08-20.
+    {
+        id: "entry-spin-yugi-001",
+        eventId: "event-daily-beyblade-pull-wheel",
+        userId: "user-yugi-muto",
+        userDisplayName: "Mock User 3",
+        userEmail: "rehan.sheikh@gmail.com",
+        spinUsed: true,
+        spinCount: 2,
+        spinPrizeId: "spin-grip",
+        spinWonAt: daysAgo(1),
+        reviewStatus: EVENT_ENTRY_FIELDS.REVIEW_STATUS_VALUES.APPROVED,
+        submittedAt: daysAgo(2),
+        createdAt: daysAgo(2),
+    },
+    // A guest (not logged in) spun the wheel — demo fixture for the
+    // guest-participation toggle added 2026-08-20. This event's
+    // allowGuestParticipation is true, so no userId is set; guestIpHash is a
+    // deterministic-looking placeholder (real values are HMAC-SHA256 hex).
+    {
+        id: "entry-spin-guest-001",
+        eventId: "event-daily-beyblade-pull-wheel",
+        guestIpHash: "hmac-sha256:seed-placeholder-guest-spin-001",
+        spinUsed: true,
+        spinCount: 1,
+        spinPrizeId: "spin-5pct",
+        spinWonAt: daysAgo(3),
+        reviewStatus: EVENT_ENTRY_FIELDS.REVIEW_STATUS_VALUES.APPROVED,
+        submittedAt: daysAgo(3),
+        createdAt: daysAgo(3),
+    },
+    // A guest voted in the poll — demo fixture for allowGuestParticipation on
+    // a non-spin event type (poll).
+    {
+        id: "entry-poll-guest-001",
+        eventId: "event-favourite-blader-poll",
+        guestIpHash: "hmac-sha256:seed-placeholder-guest-poll-001",
+        pollVotes: ["max"],
+        reviewStatus: EVENT_ENTRY_FIELDS.REVIEW_STATUS_VALUES.APPROVED,
+        submittedAt: daysAgo(2),
+        createdAt: daysAgo(2),
+    },
 ];

package/dist/server.d.ts

@@ -247,6 +247,8 @@ export { listCategories } from "./features/categories/server";
 export { listTopLevelCategories } from "./features/categories/server";
 export { updateCategory } from "./features/categories/server";
 export { sendCheckoutValueOtp, verifyCheckoutValueOtp, isCheckoutValueOtpVerified, } from "./features/checkout/server";
+export { FailedCheckoutRepository, failedCheckoutRepository } from "./features/checkout/server";
+export type { FailedCheckoutMeta, FailedPaymentMeta } from "./features/checkout/server";
 export { EmailButton, EmailColumn, EmailContainer, EmailDivider, EmailDoc, EmailFooter, EmailHeader, EmailImage, EmailLink, EmailRow, } from "./features/email";
 export type { EmailButtonProps, EmailColumnProps, EmailContainerProps, EmailDividerProps, EmailDocProps, EmailFooterProps, EmailHeaderProps, EmailImageProps, EmailLinkProps, EmailRowProps, EmailTone, } from "./features/email";
 export { sendContactEmail } from "./features/contact/server";
@@ -255,6 +257,7 @@ export { sendOrderConfirmationEmail } from "./features/contact/server";
 export { sendPasswordResetEmailWithLink } from "./features/contact/server";
 export { sendSiteSettingsChangedEmail } from "./features/contact/server";
 export { sendVerificationEmailWithLink } from "./features/contact/server";
+export type { OrderConfirmationEmailParams } from "./features/contact/server";
 export { adminGetEventById } from "./features/events/server";
 export { adminGetEventEntries } from "./features/events/server";
 export { adminGetEventStats } from "./features/events/server";
@@ -267,6 +270,7 @@ export { enterEvent } from "./features/events/server";
 export { eventIdGET } from "./features/events/server";
 export { eventsGET } from "./features/events/server";
 export { getEventLeaderboard } from "./features/events/server";
+export { getEventPollResults } from "./features/events/server";
 export { getBugHunterLeaderboard } from "./features/tester/server";
 export { getPublicEventById } from "./features/events/server";
 export { listPublicEvents } from "./features/events/server";
@@ -439,6 +443,8 @@ export { safeFireAndForget } from "./utils/safe-fire-forget";
 export { applyRateLimit } from "./security/index";
 export { rateLimitByIdentifier } from "./security/index";
 export { RateLimitPresets } from "./security/index";
+export { getClientIP } from "./security/index";
+export { hashGuestIdentity } from "./security/index";
 export { maskPublicEventEntry } from "./security/index";
 export { encryptValue } from "./security/index";
 export { decryptValue } from "./security/index";

package/dist/server.js

@@ -714,6 +714,7 @@ export { listTopLevelCategories } from "./features/categories/server";
 export { updateCategory } from "./features/categories/server";
 // [SERVER-ONLY] Tier PP — high-value checkout OTP gate.
 export { sendCheckoutValueOtp, verifyCheckoutValueOtp, isCheckoutValueOtpVerified, } from "./features/checkout/server";
+export { FailedCheckoutRepository, failedCheckoutRepository } from "./features/checkout/server";
 // [SERVER-ONLY] Email primitives — table-based, inline-styled components
 // that render email-client-compatible HTML via renderToStaticMarkup. Use
 // these instead of authoring raw <table>/<tr>/<td> in email templates.
@@ -773,6 +774,9 @@ export { eventsGET } from "./features/events/server";
 // getEventLeaderboard - Helper for get event leaderboard.
 export { getEventLeaderboard } from "./features/events/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
+// getEventPollResults - Helper for get event poll results (per-option vote tally).
+export { getEventPollResults } from "./features/events/server";
+// [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // getBugHunterLeaderboard - Ranks testers by confirmed-bug count.
 export { getBugHunterLeaderboard } from "./features/tester/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
@@ -1265,6 +1269,10 @@ export { applyRateLimit } from "./security/index";
 export { rateLimitByIdentifier } from "./security/index";
 // RateLimitPresets - Preset configurations for common rate-limit scenarios.
 export { RateLimitPresets } from "./security/index";
+// getClientIP - Extract the caller's IP from x-forwarded-for/x-real-ip.
+export { getClientIP } from "./security/index";
+// hashGuestIdentity - Deterministic, non-reversible hash of a guest caller's IP scoped to an entity (never persists the raw IP).
+export { hashGuestIdentity } from "./security/index";
 // maskPublicEventEntry - Redact PII from event entries before public exposure.
 export { maskPublicEventEntry } from "./security/index";
 // PII encryption/masking (server-only -- crypto module via node:module, must never leak into a client bundle; see appkit Export Rules in CLAUDE.md)