@mohasinac/appkit 4.30.18 → 4.31.0

package/dist/index.js

@@ -385,8 +385,6 @@ export { ZodSetup } from "./validation/index";
 // addPhoneSchema - Helper for add phone schema.
 export { addPhoneSchema } from "./validation/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// addressSchema - Model for address schema.
-export { addressSchema } from "./validation/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // calculatePasswordStrength - Helper for calculate password strength.
 export { calculatePasswordStrength } from "./validation/index";
@@ -568,6 +566,11 @@ export { mapToHttpError, HTTP_ERROR_CODES } from "./errors/index";
 // [UTIL]-Pure utility — client-safe lookup of inline-field + i18n key per error code.
 // ERROR_DISPLAY_MAP - CLAUDE.md Rule #9 source-of-truth for client error rendering.
 export { ERROR_DISPLAY_MAP, getErrorDisplay } from "./errors/index";
+// [UTIL]-Pure utility — the ONLY sanctioned way to turn a failure into user copy.
+// toUserMessage - resolves a stable error code through errors.codes.*; terminates
+// in a constant, so a thrown value's own .message can never reach a user
+// (audit-raw-error-text).
+export { toUserMessage, GENERIC_USER_MESSAGE } from "./errors/index";
 // [SERVER-ONLY] parseJsonBody — strict JSON request-body parser for API routes.
 // Replaces the silent `request.json().catch(() => ({}))` anti-pattern. Throws
 // ValidationError on malformed JSON → routeHandler wrapper maps to 400.
@@ -654,8 +657,6 @@ export { CopilotLogRepository } from "./core/index";
 // EventBus - Shared export for event bus.
 export { EventBus } from "./core/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// FEATURE_FLAGS - Constant used across modules.
-export { FEATURE_FLAGS } from "./core/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // Logger - Shared export for logger.
 export { Logger } from "./core/index";
@@ -776,14 +777,9 @@ export { ADDRESS_PII_FIELDS } from "./security/index";
 // BID_PII_FIELDS - Constant used across modules.
 export { BID_PII_FIELDS } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// CHAT_PII_FIELDS - Constant used across modules.
-export { CHAT_PII_FIELDS } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // Can - Shared export for can.
-export { Can } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// DEFAULT_ROLES - Constant used across modules.
-export { DEFAULT_ROLES } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // EVENT_ENTRY_PII_FIELDS - Constant used across modules.
 export { EVENT_ENTRY_PII_FIELDS } from "./security/index";
@@ -835,17 +831,9 @@ export { canChangeRole } from "./security/index";
 // clearRateLimitStore - Shared export for clear rate limit store.
 export { clearRateLimitStore } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// createRbacHook - Helper for create rbac hook.
-export { createRbacHook } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// createRbacMiddleware - Helper for create rbac middleware.
-export { createRbacMiddleware } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// createRequirePermission - Helper for create require permission.
-export { createRequirePermission } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// createRequirePermissionSync - Helper for create require permission sync.
-export { createRequirePermissionSync } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // decryptSecret - Helper for decrypt secret.
 export { decryptSecret } from "./security/index";
@@ -860,13 +848,13 @@ export { generateNonce } from "./security/index";
 export { getRoleLevel } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // hasAllPermissions - Shared export for has all permissions.
-export { hasAllPermissions } from "./security/index";
+export { hasAllPermissions } from "./features/auth/permissions/constants";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // hasAnyPermission - Model for has any permission.
-export { hasAnyPermission } from "./security/index";
+export { hasAnyPermission } from "./features/auth/permissions/constants";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // hasPermission - Model for has permission.
-export { hasPermission } from "./security/index";
+export { hasPermission } from "./features/auth/permissions/constants";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // isSecretEncrypted - Shared export for is secret encrypted.
 export { isSecretEncrypted } from "./security/index";
@@ -899,9 +887,6 @@ export { requireOwnership } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // requireRole - Model for require role.
 export { requireRole } from "./security/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// resolvePermissions - Helper for resolve permissions.
-export { resolvePermissions } from "./security/index";
 // ./repositories/index
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
 // AddressesRepository - unified top-level addresses collection (SB-UNI-A 2026-05-13).
@@ -1001,8 +986,6 @@ export { cartRepository } from "./repositories/index";
 // categoriesRepository - Shared export for categories repository.
 export { categoriesRepository } from "./repositories/index";
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
-// chatRepository - Shared export for chat repository.
-export { chatRepository } from "./repositories/index";
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
 // couponsRepository - Shared export for coupons repository.
 export { couponsRepository } from "./repositories/index";
@@ -1387,16 +1370,10 @@ export { usersSeedData } from "./seed/index";
 export { wishlistsSeedData } from "./seed/index";
 // historySeedData - Model for history (recently-viewed) seed data.
 export { historySeedData } from "./seed/index";
-// conversationsSeedData - Model for conversations seed data.
-export { conversationsSeedData } from "./seed/index";
 // SB-UNI-B â€" sublistingCategoriesSeedData merged into categoriesSeedData with categoryType:"sublisting".
 // groupedListingsSeedData - Model for grouped listings seed data.
 export { groupedListingsSeedData } from "./seed/index";
 export { NOTIFICATION_TYPE_VALUES } from "./features/admin/schemas/firestore";
-// ./monitoring/index
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// ANALYTICS_EVENTS - Constant used across modules.
-export { ANALYTICS_EVENTS } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // ErrorCategory - Shared export for error category.
 export { ErrorCategory } from "./monitoring/index";
@@ -1422,9 +1399,6 @@ export { getCacheMetrics } from "./monitoring/index";
 // getCacheStatistics - Helper for get cache statistics.
 export { getCacheStatistics } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// initializeAnalytics - Shared export for initialize analytics.
-export { initializeAnalytics } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // initializeClientLogger - Shared export for initialize client logger.
 export { initializeClientLogger } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
@@ -1515,12 +1489,6 @@ export { resetCacheMetrics } from "./monitoring/index";
 // serverLogger - Shared export for server logger.
 export { serverLogger } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// setAnalyticsUserId - Helper for set analytics user id.
-export { setAnalyticsUserId } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// setAnalyticsUserProperties - Helper for set analytics user properties.
-export { setAnalyticsUserProperties } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // setErrorTracker - Helper for set error tracker.
 export { setErrorTracker } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
@@ -1539,39 +1507,18 @@ export { startTrace } from "./monitoring/index";
 // stopTrace - Helper for stop trace.
 export { stopTrace } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackAdmin - Helper for track admin.
-export { trackAdmin } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // trackApiError - Helper for track api error.
 export { trackApiError } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackAuth - Helper for track auth.
-export { trackAuth } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // trackAuthError - Helper for track auth error.
 export { trackAuthError } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackContent - Helper for track content.
-export { trackContent } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // trackDatabaseError - Helper for track database error.
 export { trackDatabaseError } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackEcommerce - Helper for track ecommerce.
-export { trackEcommerce } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // trackError - Helper for track error.
 export { trackError } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackEvent - Helper for track event.
-export { trackEvent } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackForm - Helper for track form.
-export { trackForm } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
-// trackPageView - Helper for track page view.
-export { trackPageView } from "./monitoring/index";
-// [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // trackPermissionError - Helper for track permission error.
 export { trackPermissionError } from "./monitoring/index";
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
@@ -1626,8 +1573,6 @@ export { createApiHandlerFactory } from "./next/index";
 // createApiMiddleware - Helper for create api middleware.
 export { createApiMiddleware } from "./next/index";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// createPiiRedactorMiddleware - Helper for create pii redactor middleware.
-export { createPiiRedactorMiddleware } from "./next/index";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // createRouteHandler - Helper for create route handler.
 export { createRouteHandler } from "./next/index";
@@ -1726,8 +1671,6 @@ export { verifyIdToken } from "./providers/auth-firebase/index";
 export { verifySessionCookie } from "./providers/auth-firebase/index";
 // ./providers/db-firebase/index
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
-// FirebaseRealtimeRepository - Shared export for firebase realtime repository.
-export { FirebaseRealtimeRepository } from "./providers/db-firebase/index";
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
 // FirebaseRepository - Shared export for firebase repository.
 export { FirebaseRepository } from "./providers/db-firebase/index";
@@ -1911,8 +1854,6 @@ export { ADDRESS_PUBLIC_FIELDS } from "./features/account/index";
 // ADDRESS_SUBCOLLECTION - Constant used across modules.
 export { ADDRESS_SUBCOLLECTION } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// ADDRESS_TYPES - Constant used across modules.
-export { ADDRESS_TYPES } from "./features/account/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // ADDRESS_UPDATABLE_FIELDS - Constant used across modules.
 export { ADDRESS_UPDATABLE_FIELDS } from "./features/account/index";
@@ -1931,22 +1872,10 @@ export { AddressSelectorCreate } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // BecomeSellerView - Component for become seller view.
 export { BecomeSellerView } from "./features/account/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// ChatList - Shared export for chat list.
-export { ChatList } from "./features/account/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// ChatWindow - Shared export for chat window.
-export { ChatWindow } from "./features/account/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // DEFAULT_ADDRESS_DATA - Constant used across modules.
 export { DEFAULT_ADDRESS_DATA } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// INDIAN_STATES - Constant used across modules.
-export { INDIAN_STATES } from "./features/account/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// MessagesView - Component for messages view.
-export { MessagesView } from "./features/account/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // NotificationBell - Shared export for notification bell.
 export { NotificationBell } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
@@ -1999,8 +1928,6 @@ export { updateProfileSchema } from "./features/account/index";
 // useAddress - React hook for use address.
 export { useAddress } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useAddressForm - React hook for use address form.
-export { useAddressForm } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useAddressSelector - React hook for use address selector.
 export { useAddressSelector } from "./features/account/index";
@@ -2035,14 +1962,9 @@ export { useUpdateAddress } from "./features/account/index";
 // useUpdateProfile - React hook for use update profile.
 export { useUpdateProfile } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// userAddressSchema - Model for user address schema.
-export { userAddressSchema } from "./features/account/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // userProfileSchema - Model for user profile schema.
 export { userProfileSchema } from "./features/account/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// validateAddressForm - Helper for validate address form.
-export { validateAddressForm } from "./features/account/index";
 // ./features/account/server
 // [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
 // AccountRepository - Shared export for account repository.
@@ -2067,8 +1989,6 @@ export { setDefaultAddressForUser } from "./features/account/server";
 export { updateAddressForUser } from "./features/account/server";
 // ./features/admin/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// ADMIN_PAGE_PERMISSIONS - Constant used across modules.
-export { ADMIN_PAGE_PERMISSIONS } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // ADMIN_PRODUCT_STATUS_OPTIONS - Constant used across modules.
 export { ADMIN_PRODUCT_STATUS_OPTIONS } from "./features/admin/index";
@@ -2138,8 +2058,6 @@ export { BugHunterLeaderboardView } from "./features/tester/index";
 // AdminNavEditorView - SideDrawer form for nav item create/edit.
 export { AdminNavEditorView } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// AdminFeatureFlagsView - Component for admin feature flags view.
-export { AdminFeatureFlagsView } from "./features/admin/index";
 // AdminNewsletterView - Admin view for newsletter subscribers.
 export { AdminNewsletterView } from "./features/admin/index";
 // AdminContactView - Admin view for contact form submissions.
@@ -2274,17 +2192,9 @@ export { AdminTopProductsTable } from "./features/admin/index";
 // AdminUsersView - Component for admin users view.
 export { AdminUsersView } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
-// CHAT_ROOM_COLLECTION - Constant used across modules.
-export { CHAT_ROOM_COLLECTION } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
-// CHAT_ROOM_FIELDS - Constant used across modules.
-export { CHAT_ROOM_FIELDS } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
-// CHAT_ROOM_INDEXED_FIELDS - Constant used across modules.
-export { CHAT_ROOM_INDEXED_FIELDS } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
-// DEFAULT_CHAT_ROOM_DATA - Constant used across modules.
-export { DEFAULT_CHAT_ROOM_DATA } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // DEFAULT_NOTIFICATION_CHANNELS - Default channel config (inApp always on, others off).
 export { DEFAULT_NOTIFICATION_CHANNELS } from "./features/admin/index";
@@ -2324,8 +2234,6 @@ export { AdminSupportTicketDetailView } from "./features/admin/index";
 // DrawerFormFooter - Shared export for drawer form footer.
 export { DrawerFormFooter } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// FEATURE_FLAG_META - Constant used across modules.
-export { FEATURE_FLAG_META } from "./features/admin/index";
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // NOTIFICATIONS_COLLECTION - Constant used across modules.
 export { NOTIFICATIONS_COLLECTION } from "./features/admin/index";
@@ -2348,26 +2256,16 @@ export { SITE_SETTINGS_INDEXED_FIELDS } from "./features/admin/index";
 // SITE_SETTINGS_PUBLIC_FIELDS - Constant used across modules.
 export { SITE_SETTINGS_PUBLIC_FIELDS } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// chatRoomQueryHelpers - Shared export for chat room query helpers.
-export { chatRoomQueryHelpers } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // notificationQueryHelpers - Shared export for notification query helpers.
 export { notificationQueryHelpers } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useChat - React hook for use chat.
-export { useChat } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useChatRooms - React hook for use chat rooms.
-export { useChatRooms } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useCreateChatRoom - React hook for use create chat room.
-export { useCreateChatRoom } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useDashboardStats - React hook for use dashboard stats.
 export { useDashboardStats } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useDeleteChatRoom - React hook for use delete chat room.
-export { useDeleteChatRoom } from "./features/admin/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useAdminListingData - React hook for admin listing data fetching.
 export { useAdminListingData } from "./features/admin/index";
@@ -2384,6 +2282,7 @@ export { toRelativeDate } from "./features/admin/index";
 export { AdminScammersView } from "./features/admin/index";
 // AdminScammerEditorView - Scammer profile review/status SideDrawer.
 export { AdminScammerEditorView } from "./features/admin/index";
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
 // ./features/admin/server
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // adminBidsGET - Shared export for admin bids get.
@@ -2431,11 +2330,7 @@ export { adminUpdateStoreStatus } from "./features/admin/server";
 // adminUpdateUser - Shared export for admin update user.
 export { adminUpdateUser } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// createOrGetChatRoom - Helper for create or get chat room.
-export { createOrGetChatRoom } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// deleteChatRoom - Helper for delete chat room.
-export { deleteChatRoom } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // deleteNotification - Helper for delete notification.
 export { deleteNotification } from "./features/admin/server";
@@ -2446,8 +2341,6 @@ export { getAdminAnalytics } from "./features/admin/server";
 // getAdminDashboardStats - Helper for get admin dashboard stats.
 export { getAdminDashboardStats } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// getChatRooms - Helper for get chat rooms.
-export { getChatRooms } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // getSiteSettings - Helper for get site settings.
 export { getSiteSettings } from "./features/admin/server";
@@ -2500,11 +2393,12 @@ export { revokeSession } from "./features/admin/server";
 // revokeUserSessions - Shared export for revoke user sessions.
 export { revokeUserSessions } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// sendChatMessage - Shared export for send chat message.
-export { sendChatMessage } from "./features/admin/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // updateSiteSettings - Helper for update site settings.
 export { updateSiteSettings } from "./features/admin/server";
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
+// [TYPE]-TypeScript type-only export â€" erased at compile time, zero runtime cost.
 // ./features/auctions/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
@@ -2639,9 +2533,6 @@ export { getUserProfile } from "./features/auth/server";
 // getUserSessions - Helper for get user sessions.
 export { getUserSessions } from "./features/auth/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
-// issueRealtimeToken - Shared export for issue realtime token.
-export { issueRealtimeToken } from "./features/auth/server";
-// [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // markPasswordResetTokenAsUsed - Shared export for mark password reset token as used.
 export { markPasswordResetTokenAsUsed } from "./features/auth/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
@@ -4493,7 +4384,7 @@ export { checkEmiEligibility, computeEmiSchedule, computeBuyerEmiQuote } from ".
 // definition of "safe to send to a browser" for fee data. See fees.ts header.
 export { toBuyerFacingFees, toBuyerEmiSettings, } from "./_internal/shared/features/site-settings/fees";
 // User-role predicates â€" SB-UNI-E 2026-05-13.
-export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, isEffectiveAdminUser, } from "./features/auth/role-predicates";
+export { isAdminUser, isSellerUser, isModeratorUser, isEmployeeUser, isBuyerUser, isEffectiveAdminUser, isTesterUser, canTestAdminSurfaces, isStrictSellerUser, isAccountDisabled, } from "./features/auth/role-predicates";
 // [SERVER-ONLY]-Safe in browser but intended for server routes.
 // sanitizeProductForPublic - Strip sellerId/sellerName/sellerEmail/ownerId before returning a product in a public response.
 export { sanitizeProductForPublic, sanitizeProductsForPublic } from "./features/products/index";
@@ -4884,8 +4775,6 @@ export { OFFER_INDEXED_FIELDS } from "./features/seller/index";
 // OfferStatusValues - Model for offer status values.
 export { OfferStatusValues } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// SELLER_PAGE_PERMISSIONS - Constant used across modules.
-export { SELLER_PAGE_PERMISSIONS } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // SellerAddressesView - Component for seller addresses view.
 export { SellerAddressesView } from "./features/seller/index";
@@ -4899,9 +4788,6 @@ export { SellerAnalyticsStats } from "./features/seller/index";
 // SellerAnalyticsView - Component for seller analytics view.
 export { SellerAnalyticsView } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// SellerAuctionsView - Component for seller auctions view.
-export { SellerAuctionsView } from "./features/seller/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // SellerCouponsView - Component for seller coupons view.
 export { SellerCouponsView } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
@@ -4952,12 +4838,6 @@ export { SellerPayoutStats } from "./features/seller/index";
 // SellerPayoutsView - Component for seller payouts view.
 export { SellerPayoutsView } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// SellerPreOrdersView - Component for seller pre-orders listing view (SB4-E).
-export { SellerPreOrdersView } from "./features/seller/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// SellerPrizeDrawsView - Component for seller prize draws listing view (SB4-E).
-export { SellerPrizeDrawsView } from "./features/seller/index";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // SellerProductsView - Component for seller products view.
 export { SellerProductsView } from "./features/seller/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
@@ -5480,6 +5360,7 @@ export { CAROUSELS_COLLECTION, MAX_SLIDES_PER_CAROUSEL } from "./features/homepa
 export { Button } from "./ui/index";
 export { Heading, Spinner, IconButton, Progress, IndeterminateProgress, Pagination, PageLoader } from "./ui/index";
 export { ModalFooter, UnsavedChangesModal, ResponsiveView, Textarea, Checkbox } from "./ui/index";
+export { ActionRow } from "./ui/index";
 export { ToastProvider, StarRating, StepperNav, ViewToggle, PriceDisplay, SummaryCard } from "./ui/index";
 export { CountdownDisplay, ItemRow, HorizontalScroller } from "./ui/index";
 export { CardBody, MenuTrigger, MenuContent, MenuSeparator, RoleBadge, SkipToMain } from "./ui/index";
@@ -5494,7 +5375,7 @@ export { Ol } from "./ui/index";
 export { LoginRequiredModal } from "./ui/components/LoginRequiredModal";
 export { isAuthError } from "./utils/auth-error";
 // -- Missing constants ----------------------------------------------------------
-export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, CHAT_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, PAYMENT_ENDPOINTS, COPILOT_ENDPOINTS, CORPORATE_ENDPOINTS, EVENT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index";
+export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, PAYMENT_ENDPOINTS, COPILOT_ENDPOINTS, CORPORATE_ENDPOINTS, EVENT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index";
 // Wishlist server errors (server-only via tree-shake â€" class only, no firebase-admin at module scope)
 export { WishlistFullError } from "./features/wishlist/server";
 // History â€" client hook + guest util are safe in main barrel; repository is server-only
@@ -5538,12 +5419,10 @@ export { deriveContextTypeFromFilename } from "./utils/id-generators";
 export { resolveMediaUrl, resolveVideoUrl, FIREBASE_STORAGE_HOST, GCS_HOST, isStoredMediaRef, MEDIA_PROXY_PREFIX, MEDIA_URL_MAX_LENGTH, MEDIA_URL_MESSAGE, APPROVED_MEDIA_DOMAINS, } from "./utils/media-url";
 export { generateFAQId } from "./utils/id-generators";
 export { generateCroppedImageFilename } from "./utils/id-generators";
-// Messages / Conversations feature schemas
-export { CONVERSATIONS_COLLECTION } from "./features/messages/schemas/firestore";
-// Messages server-side (D5 + VC7) â€" repository + actions
-export { conversationsRepository, ConversationsRepository, ConversationFullError, listConversationsForBuyer, listConversationsForStore, getConversation, sendMessage, markConversationRead, MESSAGE_MAX_LENGTH, pingConversationRtdb, } from "./features/messages/server";
-// Messages realtime channel â€" shared between client + server (D5 + VC7)
-export { conversationPingPath, userConversationsPingPath, buildConversationPingPaths, } from "./features/messages/realtime";
+// D5 + VC7 buyer↔seller conversations were deleted 2026-08-31 (W11/D16). The
+// feature had two pages, five API routes and a repository, and one live CTA
+// anywhere in the product — the classified PDP's "Contact Seller" — which now
+// opens the offer form instead. See `offerIsOnlyPurchasePath`.
 // SB-UNI-B â€" SublistingCategoryDocument deleted; sublistings are CategoryDocument with categoryType:"sublisting".
 // Product features feature schemas (FI1)
 export { PRODUCT_FEATURES_COLLECTION, PRODUCT_FEATURE_PREFIX, MAX_STORE_CUSTOM_FEATURES, MAX_FEATURES_PER_PRODUCT, PRODUCT_FEATURE_SIEVE_FIELDS, isFeatureIconPath, } from "./features/products/schemas/product-features";
@@ -5646,7 +5525,7 @@ export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, M
 // NOTE: STORE_FIELDS, CATEGORY_FIELDS, EVENT_FIELDS, EVENT_ENTRY_FIELDS, PAYOUT_FIELDS,
 // COUPON_FIELDS, CART_FIELDS, USER_FIELDS, ADDRESS_FIELDS, NOTIFICATION_FIELDS,
 // SESSION_FIELDS, SCAMMER_FIELDS are already exported from feature barrels above.
-export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, AD_TRACKED_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CONVERSATION_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
+export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, AD_TRACKED_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
 // ── Sort helpers ──────────────────────────────────────────────────────────────
 export { SORT_DIR, sortBy } from "./constants/sort";
 // ── URL table keys + view mode ────────────────────────────────────────────────
@@ -5664,7 +5543,6 @@ export { NavPermissionsManager } from "./features/site-settings/components/NavPe
 export { ThemeManagerView } from "./features/site-settings/components/ThemeManagerView";
 // ── Classified listing feature ─────────────────────────────────────────────────
 export { getClassifiedForDetail } from "./_internal/server/features/classified/data";
-export { startClassifiedConversationAction } from "./_internal/server/features/classified/actions";
 // ── Digital-code listing feature ──────────────────────────────────────────────
 export { getDigitalCodeForDetail } from "./_internal/server/features/digital-code/data";
 export { PRODUCT_CODES_SUBCOLLECTION } from "./features/products/schemas/firestore";
@@ -5708,7 +5586,7 @@ export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";
 export { orderCancelSchema, paymentProofSchema, } from "./features/orders/schemas/buyer-forms";
 export { scamReportFormSchema } from "./features/scams/schemas/report-form";
 export { sublistingCategoryFormSchema } from "./features/store-extensions/schemas/sublisting-category-form";
-export { adminAddressFormSchema, adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
+export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
 export { changeEmailSchema } from "./features/account/schemas/index";
 export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
@@ -5732,3 +5610,20 @@ export { wishlistAddSchema } from "./schemas/api-routes";
  * is usually a missing funnel, not a reason to export more of it.
  */
 export { withHistory, buildHistoryEntry, appendHistoryEntry, diffTrackedFields, STATUS_HISTORY_MAX, } from "./_internal/shared/history/index";
+/*
+ * Nav item ids are DERIVED from the href (W6). Exported from the MAIN entry as
+ * well as `/client` because `store/layout.tsx` is a Server Component: a
+ * binding taken from the `"use client"` entry is a client-reference proxy
+ * there, and CALLING one throws as an opaque React #441 (Root Cause #76).
+ */
+export { navItemId } from "./_internal/shared/features/layout/types";
+/*
+ * The action index (W7). Its base is DERIVED from the nav groups, so an entry
+ * cannot exist without its nav item and cannot go stale when one is renamed.
+ */
+export { mergeActionIndex, projectActionIndexForViewer, ACTION_INDEX_COLLECTION, ACTION_INDEX_DOC_ID, } from "./features/search/action-index/types";
+export { deriveNavEntries, deriveQuickActionEntries, buildActionIndexBase, } from "./features/search/action-index/derive";
+export { matchesNavQuery } from "./_internal/shared/features/layout/matchesNavQuery";
+export { SITE_SETTINGS_ENTRIES, deriveSettingsEntries, } from "./features/search/action-index/settings-entries";
+export { SITE_SETTINGS_TABS, SITE_SETTINGS_TAB_IDS, isSiteSettingsTabId, } from "./features/admin/constants/site-settings-tabs";
+export { validateActionIndexEntry, normaliseRoute, } from "./features/search/action-index/validate-entry";

package/dist/jobs.d.ts

@@ -20,7 +20,7 @@
  *     listingProcessorHandler,
  *   } from "@mohasinac/appkit/jobs";
  */
-export { couponExpiryHandler, offerExpiryHandler, cartPruneHandler, notificationPruneHandler, dailyDataCleanupHandler, cleanupRtdbEventsHandler, auctionSettlementHandler, autoPayoutEligibilityHandler, countersReconcileHandler, onOrderCreateHandler, onOrderStatusChangeHandler, onReviewWriteHandler, promotionsHandler, mediaTmpCleanupHandler, pendingOrderTimeoutHandler, productStatsSyncHandler, positionsReconcileHandler, payoutBatchHandler, weeklyPayoutEligibilityHandler, onCategoryWriteHandler, onProductWriteHandler, onStoreWriteHandler, adminAnalyticsHandler, storeAnalyticsHandler, listingProcessorHandler, supportedListingCollections, onPrizeDrawPaymentConfirmedHandler, prizeDrawSoldOutRevealHandler, prizeDrawExpiryRevealHandler, bundleStockSyncHandler, onProductStockChangeHandler, triggerEventRaffleHandler, assignSpinPrizeHandler, draftPruneHandler, onSupportTicketCreateHandler, onSupportTicketUpdateHandler, onUserBanChangeHandler, onScamReportCreateHandler, onScamReportUpdateHandler, bindSchedule, bindDocumentWritten, bindDocumentCreated, bindDocumentUpdated, bindCallable, bindHttps, bindToFirebase, } from "./_internal/server/jobs/index.js";
+export { couponExpiryHandler, offerExpiryHandler, cartPruneHandler, notificationPruneHandler, pageViewRollupHandler, pageViewPruneHandler, dailyDataCleanupHandler, cleanupRtdbEventsHandler, auctionSettlementHandler, autoPayoutEligibilityHandler, countersReconcileHandler, onOrderCreateHandler, onOrderStatusChangeHandler, onReviewWriteHandler, promotionsHandler, mediaTmpCleanupHandler, pendingOrderTimeoutHandler, productStatsSyncHandler, positionsReconcileHandler, payoutBatchHandler, weeklyPayoutEligibilityHandler, onCategoryWriteHandler, onProductWriteHandler, onStoreWriteHandler, adminAnalyticsHandler, storeAnalyticsHandler, listingProcessorHandler, supportedListingCollections, onPrizeDrawPaymentConfirmedHandler, prizeDrawSoldOutRevealHandler, prizeDrawExpiryRevealHandler, bundleStockSyncHandler, onProductStockChangeHandler, triggerEventRaffleHandler, assignSpinPrizeHandler, draftPruneHandler, onSupportTicketCreateHandler, onSupportTicketUpdateHandler, onUserBanChangeHandler, onScamReportCreateHandler, onScamReportUpdateHandler, bindSchedule, bindDocumentWritten, bindDocumentCreated, bindDocumentUpdated, bindCallable, bindHttps, bindToFirebase, } from "./_internal/server/jobs/index.js";
 export { defineFunction, mergeFunctionRegistries, bindAllFromRegistry, APPKIT_FUNCTIONS, APPKIT_FUNCTIONS_BY_NAME, } from "./_internal/server/functions/index.js";
 export { orderRepository, siteSettingsRepository } from "./repositories/index.js";
 export type { OrderDocument, OrderDocumentItem } from "./features/orders/index.js";

package/dist/jobs.js

@@ -22,7 +22,7 @@
  */
 export { 
 // S4–S5: Job handlers (pure, framework-agnostic)
-couponExpiryHandler, offerExpiryHandler, cartPruneHandler, notificationPruneHandler, dailyDataCleanupHandler, cleanupRtdbEventsHandler, auctionSettlementHandler, autoPayoutEligibilityHandler, countersReconcileHandler, onOrderCreateHandler, onOrderStatusChangeHandler, onReviewWriteHandler, promotionsHandler, mediaTmpCleanupHandler, pendingOrderTimeoutHandler, productStatsSyncHandler, positionsReconcileHandler, payoutBatchHandler, weeklyPayoutEligibilityHandler, onCategoryWriteHandler, onProductWriteHandler, onStoreWriteHandler, adminAnalyticsHandler, storeAnalyticsHandler, listingProcessorHandler, supportedListingCollections, 
+couponExpiryHandler, offerExpiryHandler, cartPruneHandler, notificationPruneHandler, pageViewRollupHandler, pageViewPruneHandler, dailyDataCleanupHandler, cleanupRtdbEventsHandler, auctionSettlementHandler, autoPayoutEligibilityHandler, countersReconcileHandler, onOrderCreateHandler, onOrderStatusChangeHandler, onReviewWriteHandler, promotionsHandler, mediaTmpCleanupHandler, pendingOrderTimeoutHandler, productStatsSyncHandler, positionsReconcileHandler, payoutBatchHandler, weeklyPayoutEligibilityHandler, onCategoryWriteHandler, onProductWriteHandler, onStoreWriteHandler, adminAnalyticsHandler, storeAnalyticsHandler, listingProcessorHandler, supportedListingCollections, 
 // SB1-L (S7-PrizeDraws) — prize-draw reveal redesigned to a fully-automatic model.
 onPrizeDrawPaymentConfirmedHandler, prizeDrawSoldOutRevealHandler, prizeDrawExpiryRevealHandler, bundleStockSyncHandler, 
 // SB-UNI-V — Firestore onWrite trigger for product stock changes.

package/dist/monitoring/browser.d.ts

@@ -6,5 +6,3 @@ export { logClientError, logClientWarning, logClientInfo, logClientDebug, logApi
 export type { ClientErrorContext } from "./client-logger";
 export { setPerformanceProvider, startTrace, stopTrace, addTraceAttribute, addTraceMetric, } from "./performance";
 export type { PerformanceTrace, PerformanceProvider } from "./performance";
-export { ANALYTICS_EVENTS, initializeAnalytics, trackEvent, setAnalyticsUserId, setAnalyticsUserProperties, trackPageView, trackAuth, trackEcommerce, trackContent, trackForm, trackAdmin, } from "./analytics";
-export type { AnalyticsEvent } from "./analytics";

package/dist/monitoring/browser.js

@@ -3,4 +3,15 @@ export { getCacheMetrics, recordCacheHit, recordCacheMiss, resetCacheMetrics, ge
 export { setupGlobalErrorHandler, setupCacheMonitoring } from "./runtime";
 export { logClientError, logClientWarning, logClientInfo, logClientDebug, logApiError, logValidationError, logNavigationError, logAuthError, logUploadError, logPaymentError, logApplicationError, initializeClientLogger, } from "./client-logger";
 export { setPerformanceProvider, startTrace, stopTrace, addTraceAttribute, addTraceMetric, } from "./performance";
-export { ANALYTICS_EVENTS, initializeAnalytics, trackEvent, setAnalyticsUserId, setAnalyticsUserProperties, trackPageView, trackAuth, trackEcommerce, trackContent, trackForm, trackAdmin, } from "./analytics";
+/*
+ * The Firebase-Analytics module that lived at ./analytics was deleted
+ * 2026-08-31. It defined 11 events, `initializeAnalytics` and `trackEvent`, and
+ * had ZERO call sites anywhere — it was re-exported through three barrels and
+ * never invoked once.
+ *
+ * Site analytics now runs through `siteSettings.integrations`
+ * (GA / GTM / Meta Pixel), emitted by `src/components/analytics/AnalyticsScripts`.
+ * Wiring a second, unrelated system in parallel would have given the project
+ * two answers to "how is this page counted", which is how it ended up with two
+ * view counters that could never reconcile.
+ */ 

package/dist/monitoring/index.d.ts

@@ -8,5 +8,3 @@ export { serverLogger, logServerError, logServerWarning, logServerInfo, logServe
 export type { ServerErrorContext } from "./server-logger";
 export { setPerformanceProvider, startTrace, stopTrace, addTraceAttribute, addTraceMetric, } from "./performance";
 export type { PerformanceTrace, PerformanceProvider } from "./performance";
-export { ANALYTICS_EVENTS, initializeAnalytics, trackEvent, setAnalyticsUserId, setAnalyticsUserProperties, trackPageView, trackAuth, trackEcommerce, trackContent, trackForm, trackAdmin, } from "./analytics";
-export type { AnalyticsEvent } from "./analytics";

package/dist/monitoring/index.js

@@ -4,4 +4,3 @@ export { setupGlobalErrorHandler, setupCacheMonitoring } from "./runtime";
 export { logClientError, logClientWarning, logClientInfo, logClientDebug, logApiError, logValidationError, logNavigationError, logAuthError, logUploadError, logPaymentError, logApplicationError, initializeClientLogger, } from "./client-logger";
 export { serverLogger, logServerError, logServerWarning, logServerInfo, logServerDebug, extractRequestMetadata, logApiRouteError, logDatabaseError, logServerAuthError, logAuthorizationError, logEmailError, logStorageError, logExternalApiError, logSlowOperation, logSecurityEvent, } from "./server-logger";
 export { setPerformanceProvider, startTrace, stopTrace, addTraceAttribute, addTraceMetric, } from "./performance";
-export { ANALYTICS_EVENTS, initializeAnalytics, trackEvent, setAnalyticsUserId, setAnalyticsUserProperties, trackPageView, trackAuth, trackEcommerce, trackContent, trackForm, trackAdmin, } from "./analytics";

package/dist/next/api/routeHandler.js

@@ -30,7 +30,7 @@ import { normalizeError } from "../../errors/normalize";
  */
 import { NextResponse } from "next/server.js";
 import { getProviders } from "../../contracts";
-import { isEffectiveAdminUser } from "../../features/auth/role-predicates";
+import { isEffectiveAdminUser, isTesterUser, canTestAdminSurfaces } from "../../features/auth/role-predicates";
 import { mapToHttpError, HTTP_ERROR_CODES } from "../../errors/error-mapping";
 import { describeCauseChain } from "../../errors/describe-cause";
 import { buildErrorEnvelope, toApiIssues } from "../../errors/error-envelope";
@@ -158,8 +158,11 @@ async function isTesterEligibleForAdminRoute(user, effectiveRoles) {
     if (!user || !effectiveRoles.includes("admin"))
         return false;
     const profile = await userRepository.findById(user.uid);
-    return Boolean(profile?.isTester &&
-        profile?.canTestAdmin);
+    // Reads the `tester` role + `tester:admin-surfaces` permission first, and the
+    // legacy `isTester`/`canTestAdmin` booleans second — see role-predicates.
+    // The live Firestore read is required either way: none of these reach the
+    // session-cookie claims, which carry only `role`.
+    return isTesterUser(profile) && canTestAdminSurfaces(profile);
 }
 export function createRouteHandler(options) {
     if (options.bodyOptional && options.bodyRequired) {
@@ -182,10 +185,12 @@ export function createRouteHandler(options) {
             else if (options.authOptional) {
                 try {
                     user = await verifySession(request);
+                    // Deliberate: this is the OPTIONAL-auth path. A bad or absent session means
+                    // anonymous, which is a legitimate outcome here — routes that require a
+                    // user use `auth: true`, which throws instead.
                 }
                 catch (_err) {
                     void normalizeError(_err);
-                    // anonymous
                 }
             }
             // -- Role check --------------------------------------------------------