@mohasinac/appkit 4.40.1 → 4.41.1

package/dist/features/events/api/route.js

@@ -1,90 +0,0 @@
-/**
- * feat-events — Next.js App Router API handler (GET /api/events)
- *
- * Consuming projects can create a 2-line stub:
- *
- * ```ts
- * // app/api/events/route.ts
- * export { GET } from "@mohasinac/feat-events";
- * ```
- */
-import { NextResponse } from "next/server.js";
-import { getProviders } from "../../../contracts";
-import { normalizeError } from "../../../errors/normalize";
-function param(url, key) {
-    return url.searchParams.get(key);
-}
-function numParam(url, key, fallback) {
-    const v = url.searchParams.get(key);
-    const n = v !== null ? Number(v) : NaN;
-    return Number.isFinite(n) ? n : fallback;
-}
-const SAFE_EVENT_FILTER_FIELDS = new Set([
-    "status",
-    "title",
-    "type",
-    "startsAt",
-    "endsAt",
-    "createdAt",
-]);
-function validateSieveFilters(raw, allowedFields) {
-    return raw
-        .split(",")
-        .map((c) => c.trim())
-        .filter((c) => {
-        const m = c.match(/^([^<>=!@]+)\s*(?:==|!=|<=|>=|<|>|@=\*?)/);
-        return m ? allowedFields.has(m[1].trim()) : false;
-    })
-        .join(",");
-}
-// ——— GET /api/events ————————————————————————————————
-export async function GET(request) {
-    try {
-        const url = new URL(request.url);
-        const page = numParam(url, "page", 1);
-        const pageSize = numParam(url, "pageSize", 24);
-        const sort = param(url, "sorts") ?? param(url, "sort") ?? "-startsAt";
-        const q = param(url, "q");
-        const raw = param(url, "filters");
-        const safe = raw ? validateSieveFilters(raw, SAFE_EVENT_FILTER_FIELDS) : "";
-        // Only default to active events when no explicit status filter is provided.
-        const hasStatusFilter = safe.includes("status==");
-        const parts = hasStatusFilter ? [] : ["status==active"];
-        if (q)
-            parts.push(`title@=*${q}`);
-        if (safe)
-            parts.push(safe);
-        const filters = parts.join(",");
-        const { db } = getProviders();
-        if (!db) {
-            return NextResponse.json({ success: false, error: "Database provider not registered" }, { status: 503 });
-        }
-        const repo = db.getRepository("events");
-        const result = await repo.findAll({
-            filters,
-            sort,
-            page,
-            perPage: pageSize,
-        });
-        const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
-        // Strip internal fields (createdBy) before returning
-        const items = result.data.map((event) => {
-            const { createdBy: _createdBy, ...publicEvent } = event;
-            return publicEvent;
-        });
-        const body = {
-            items: items,
-            total: result.total,
-            page: result.page,
-            pageSize,
-            totalPages,
-            hasMore: result.page < totalPages,
-        };
-        return NextResponse.json({ success: true, data: body });
-    }
-    catch (error) {
-        void normalizeError(error);
-        console.error("[feat-events] GET /api/events failed", error);
-        return NextResponse.json({ success: false, error: "Failed to fetch events" }, { status: 500 });
-    }
-}

package/dist/features/faq/api/route.d.ts

@@ -1,11 +0,0 @@
-/**
- * feat-faq — Next.js App Router API handler (GET /api/faq)
- *
- * 2-line stub:
- * ```ts
- * // app/api/faq/route.ts
- * export { GET } from "@mohasinac/feat-faq";
- * ```
- */
-import { NextResponse } from "next/server.js";
-export declare function GET(request: Request): Promise<NextResponse>;

package/dist/features/faq/api/route.js

@@ -1,52 +0,0 @@
-/**
- * feat-faq — Next.js App Router API handler (GET /api/faq)
- *
- * 2-line stub:
- * ```ts
- * // app/api/faq/route.ts
- * export { GET } from "@mohasinac/feat-faq";
- * ```
- */
-import { NextResponse } from "next/server.js";
-import { getProviders } from "../../../contracts";
-import { normalizeError } from "../../../errors/normalize";
-function param(url, key) {
-    return url.searchParams.get(key);
-}
-export async function GET(request) {
-    try {
-        const url = new URL(request.url);
-        const parts = ["isActive==true"];
-        const category = param(url, "category");
-        if (category)
-            parts.push(`category==${category}`);
-        const homepage = param(url, "homepage");
-        if (homepage === "true")
-            parts.push("showOnHomepage==true");
-        const q = param(url, "q");
-        if (q)
-            parts.push(`question@=*${q}`);
-        const filters = parts.join(",");
-        const { db } = getProviders();
-        if (!db) {
-            return NextResponse.json({ success: false, error: "Database provider not registered" }, { status: 503 });
-        }
-        const repo = db.getRepository("faqs");
-        const result = await repo.findAll({
-            filters,
-            sort: "order",
-            order: "asc",
-            perPage: 100,
-        });
-        const body = {
-            items: result.data,
-            total: result.total,
-        };
-        return NextResponse.json({ success: true, data: body });
-    }
-    catch (error) {
-        void normalizeError(error);
-        console.error("[feat-faq] GET /api/faq failed", error);
-        return NextResponse.json({ success: false, error: "Failed to fetch FAQs" }, { status: 500 });
-    }
-}

package/dist/features/faq/hooks/useFAQs.d.ts

@@ -1,22 +0,0 @@
-import type { FAQ, FAQListResponse, FAQListParams } from "../types";
-interface UseFAQsOptions {
-    initialData?: FAQListResponse;
-    enabled?: boolean;
-    endpoint?: string;
-}
-export declare function useFAQs(params?: FAQListParams, opts?: UseFAQsOptions): {
-    faqs: FAQ[];
-    total: number;
-    isLoading: boolean;
-    error: Error | null;
-};
-export declare function useFAQ(id: string, opts?: {
-    initialData?: FAQ;
-    enabled?: boolean;
-    endpoint?: string;
-}): {
-    faq: FAQ | undefined;
-    isLoading: boolean;
-    error: Error | null;
-};
-export {};

package/dist/features/faq/hooks/useFAQs.js

@@ -1,41 +0,0 @@
-import { useQuery } from "@tanstack/react-query";
-import { apiClient } from "../../../http";
-import { FAQ_ENDPOINTS } from "../../../constants/api-endpoints";
-export function useFAQs(params = {}, opts) {
-    const sp = new URLSearchParams();
-    if (params.category)
-        sp.set("category", params.category);
-    if (params.homepage !== undefined)
-        sp.set("homepage", String(params.homepage));
-    if (params.q)
-        sp.set("q", params.q);
-    if (params.page)
-        sp.set("page", String(params.page));
-    if (params.perPage)
-        sp.set("perPage", String(params.perPage));
-    const qs = sp.toString();
-    const endpoint = opts?.endpoint ?? `${FAQ_ENDPOINTS.LIST}${qs ? `?${qs}` : ""}`;
-    const query = useQuery({
-        queryKey: ["faqs", qs],
-        queryFn: () => apiClient.get(endpoint),
-        initialData: opts?.initialData,
-        enabled: opts?.enabled,
-        staleTime: 10 * 60 * 1000,
-    });
-    return {
-        faqs: query.data?.items ?? [],
-        total: query.data?.total ?? 0,
-        isLoading: query.isLoading,
-        error: query.error,
-    };
-}
-export function useFAQ(id, opts) {
-    const endpoint = opts?.endpoint ?? FAQ_ENDPOINTS.BY_ID(id);
-    const query = useQuery({
-        queryKey: ["faqs", id],
-        queryFn: () => apiClient.get(endpoint),
-        initialData: opts?.initialData,
-        enabled: opts?.enabled !== false && !!id,
-    });
-    return { faq: query.data, isLoading: query.isLoading, error: query.error };
-}

package/dist/features/media/upload/video-poster.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/features/media/upload/video-poster.test.js

@@ -1,42 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { buildPosterFilename, extractVideoPosterFrame, posterBlobAsFile, } from "./video-poster";
-describe("buildPosterFilename", () => {
-    it("strips the extension and appends .poster.jpg", () => {
-        expect(buildPosterFilename("vid-123.mp4")).toBe("vid-123.poster.jpg");
-        expect(buildPosterFilename("hero.webm")).toBe("hero.poster.jpg");
-        expect(buildPosterFilename("Sunset.MOV")).toBe("Sunset.poster.jpg");
-    });
-    it("handles names with multiple dots — only the last segment is the extension", () => {
-        expect(buildPosterFilename("clip.v2.mp4")).toBe("clip.v2.poster.jpg");
-        expect(buildPosterFilename("2026.01.01-recap.webm")).toBe("2026.01.01-recap.poster.jpg");
-    });
-    it("works when the source has no extension", () => {
-        expect(buildPosterFilename("untitled")).toBe("untitled.poster.jpg");
-    });
-});
-describe("posterBlobAsFile", () => {
-    it("wraps the blob as an image/jpeg File with the derived filename", () => {
-        const blob = new Blob([new Uint8Array([0xff, 0xd8, 0xff])], {
-            type: "image/jpeg",
-        });
-        const file = posterBlobAsFile({ blob, width: 320, height: 180, duration: 12.5 }, "promo-reel.mp4");
-        expect(file).toBeInstanceOf(File);
-        expect(file.name).toBe("promo-reel.poster.jpg");
-        expect(file.type).toBe("image/jpeg");
-        expect(file.size).toBe(3);
-    });
-});
-describe("extractVideoPosterFrame — early-return paths", () => {
-    it("returns null for a non-video File without touching the DOM", async () => {
-        const file = new File([new Uint8Array([1, 2, 3])], "photo.jpg", {
-            type: "image/jpeg",
-        });
-        const result = await extractVideoPosterFrame(file);
-        expect(result).toBeNull();
-    });
-    it("returns null when the File has an empty MIME type", async () => {
-        const file = new File([new Uint8Array([1])], "mystery.bin", { type: "" });
-        const result = await extractVideoPosterFrame(file);
-        expect(result).toBeNull();
-    });
-});

package/dist/features/messages/actions/index.d.ts

@@ -1,2 +0,0 @@
-export * from "./messages-actions";
-export * from "./ping-rtdb";

package/dist/features/messages/actions/index.js

@@ -1,2 +0,0 @@
-export * from "./messages-actions";
-export * from "./ping-rtdb";

package/dist/features/messages/actions/messages-actions.d.ts

@@ -1,15 +0,0 @@
-import { type ConversationsRepository } from "../repository/conversations.repository";
-import type { ConversationDocument, ConversationMessage } from "../schemas/firestore";
-export declare const MESSAGE_MAX_LENGTH = 2000;
-export declare function listConversationsForBuyer(buyerId: string): Promise<ConversationDocument[]>;
-export declare function listConversationsForStore(storeId: string): Promise<ConversationDocument[]>;
-export declare function getConversation(conversationId: string): Promise<ConversationDocument | null>;
-export interface SendMessageInput {
-    conversationId: string;
-    senderId: string;
-    senderRole: "buyer" | "seller";
-    body: string;
-}
-export declare function sendMessage(input: SendMessageInput): Promise<ConversationDocument>;
-export declare function markConversationRead(conversationId: string, role: "buyer" | "seller"): Promise<void>;
-export type { ConversationsRepository, ConversationDocument, ConversationMessage };

package/dist/features/messages/actions/messages-actions.js

@@ -1,33 +0,0 @@
-/**
- * Messages domain actions — pure business functions; auth/rate-limit is the
- * caller's responsibility.
- */
-import { ValidationError } from "../../../errors";
-import { ERROR_MESSAGES } from "../../../errors/messages";
-import { conversationsRepository, } from "../repository/conversations.repository";
-export const MESSAGE_MAX_LENGTH = 2000;
-export async function listConversationsForBuyer(buyerId) {
-    return conversationsRepository.listByBuyer(buyerId);
-}
-export async function listConversationsForStore(storeId) {
-    return conversationsRepository.listByStore(storeId);
-}
-export async function getConversation(conversationId) {
-    return conversationsRepository.findById(conversationId);
-}
-export async function sendMessage(input) {
-    const body = input.body?.trim();
-    if (!body)
-        throw new ValidationError(ERROR_MESSAGES.CONVERSATIONS.BODY_REQUIRED);
-    if (body.length > MESSAGE_MAX_LENGTH) {
-        throw new ValidationError(`${ERROR_MESSAGES.CONVERSATIONS.BODY_TOO_LONG} (max ${MESSAGE_MAX_LENGTH} characters)`);
-    }
-    return conversationsRepository.appendMessage(input.conversationId, {
-        senderId: input.senderId,
-        senderRole: input.senderRole,
-        body,
-    });
-}
-export async function markConversationRead(conversationId, role) {
-    await conversationsRepository.markRead(conversationId, role);
-}

package/dist/features/messages/actions/ping-rtdb.d.ts

@@ -1,2 +0,0 @@
-import { type ConversationPingTargets } from "../realtime";
-export declare function pingConversationRtdb(targets: ConversationPingTargets): Promise<void>;

package/dist/features/messages/actions/ping-rtdb.js

@@ -1,26 +0,0 @@
-/**
- * pingConversationRtdb — server-side fan-out for conversation updates.
- *
- * Writes `Date.now()` to each ping path so RTDB-subscribed clients refetch.
- * Best-effort: failures are logged and swallowed (clients fall back to focus /
- * explicit refetch).
- */
-import { getAdminRealtimeDb } from "../../../providers/db-firebase";
-import { serverLogger } from "../../../monitoring";
-import { buildConversationPingPaths, } from "../realtime";
-import { normalizeError } from "../../../errors/normalize";
-export async function pingConversationRtdb(targets) {
-    const paths = buildConversationPingPaths(targets);
-    try {
-        const db = getAdminRealtimeDb();
-        const now = Date.now();
-        await Promise.all(paths.filter(Boolean).map((p) => db.ref(p).set(now)));
-    }
-    catch (err) {
-        void normalizeError(err);
-        serverLogger.warn("conversations: RTDB ping failed", {
-            paths,
-            error: err instanceof Error ? err.message : String(err),
-        });
-    }
-}

package/dist/features/messages/hooks/useConversation.d.ts

@@ -1,22 +0,0 @@
-import { conversationPingPath, userConversationsPingPath } from "../realtime";
-import type { ConversationDocument } from "../schemas/firestore";
-/**
- * @deprecated Re-exported for backwards compat — import `conversationPingPath`
- * from `@mohasinac/appkit` instead.
- */
-export declare const CONVERSATIONS_PING_PATH: typeof conversationPingPath;
-/**
- * @deprecated Re-exported for backwards compat — import
- * `userConversationsPingPath` from `@mohasinac/appkit` instead.
- */
-export declare const CONVERSATIONS_PING_USER_PATH: typeof userConversationsPingPath;
-export interface UseConversationReturn {
-    conversation: ConversationDocument | null;
-    isLoading: boolean;
-    error: Error | null;
-    isConnected: boolean;
-    sendMessage: (body: string) => Promise<void>;
-    markRead: () => Promise<void>;
-    refetch: () => Promise<void>;
-}
-export declare function useConversation(conversationId: string | null): UseConversationReturn;

package/dist/features/messages/hooks/useConversation.js

@@ -1,155 +0,0 @@
-"use client";
-/**
- * useConversation — load + subscribe to a single conversation.
- *
- * Strategy: Firestore is the canonical store; messages live embedded in the
- * conversation document. The realtime layer is a single RTDB "ping" path
- * (`chats/{conversationId}/lastUpdate`) that the send/mark-read API routes
- * bump on every write. This hook subscribes to that ping and re-fetches the
- * doc through the API on each tick. Zero RTDB schema duplication and the
- * canonical Firestore message ordering wins.
- */
-import { useCallback, useEffect, useState } from "react";
-import { acquireRealtimeSession } from "../../../contracts/realtime-session";
-// One scope for both message hooks, deliberately: /api/realtime/token issues a
-// SINGLE token covering all of this user's conversationIds, so a per-id scope
-// would make the list and the detail hook re-sign against each other on the
-// same page for no gain.
-//
-// 🛑 Known limitation, not fixed here: because the scope is constant, a
-// conversation created AFTER sign-in is not in the cached token's claims and
-// its subscription is denied until the token's expiry skew forces a re-sign.
-// The denial is now surfaced (see the error callback below) rather than
-// swallowed. The durable fix is to re-acquire on a permission denial.
-const MESSAGES_SCOPE = "messages";
-import { conversationPingPath, userConversationsPingPath, } from "../realtime";
-import { normalizeError } from "../../../errors/normalize";
-import { apiClient, ApiClientError } from "../../../http/ApiClient";
-import { CONVERSATION_ENDPOINTS, ADMIN_ENDPOINTS, } from "../../../constants/api-endpoints";
-/**
- * @deprecated Re-exported for backwards compat — import `conversationPingPath`
- * from `@mohasinac/appkit` instead.
- */
-export const CONVERSATIONS_PING_PATH = conversationPingPath;
-/**
- * @deprecated Re-exported for backwards compat — import
- * `userConversationsPingPath` from `@mohasinac/appkit` instead.
- */
-export const CONVERSATIONS_PING_USER_PATH = userConversationsPingPath;
-const DETAIL_ENDPOINT = CONVERSATION_ENDPOINTS.BY_ID;
-const SEND_ENDPOINT = CONVERSATION_ENDPOINTS.MESSAGES;
-const READ_ENDPOINT = CONVERSATION_ENDPOINTS.READ;
-async function fetchDetail(id) {
-    try {
-        return await apiClient.get(DETAIL_ENDPOINT(id));
-    }
-    catch (err) {
-        if (err instanceof ApiClientError && err.status === 404)
-            return null;
-        throw err;
-    }
-}
-export function useConversation(conversationId) {
-    const [conversation, setConversation] = useState(null);
-    const [isLoading, setIsLoading] = useState(false);
-    const [error, setError] = useState(null);
-    const [isConnected, setIsConnected] = useState(false);
-    const refetch = useCallback(async () => {
-        if (!conversationId) {
-            setConversation(null);
-            return;
-        }
-        setIsLoading(true);
-        setError(null);
-        try {
-            setConversation(await fetchDetail(conversationId));
-        }
-        catch (e) {
-            void normalizeError(e);
-            setError(e instanceof Error ? e : new Error(String(e)));
-        }
-        finally {
-            setIsLoading(false);
-        }
-    }, [conversationId]);
-    useEffect(() => {
-        void refetch();
-    }, [refetch]);
-    useEffect(() => {
-        if (!conversationId) {
-            setIsConnected(false);
-            return;
-        }
-        let unsubscribe;
-        let release;
-        let cancelled = false;
-        // 🛑 Sign in BEFORE subscribing. Without a session `auth == null`, and the
-        // `chats/$conversationId` rule requires
-        // `auth.token.conversationIds[$conversationId]` — a claim that, until this
-        // change, NOTHING issued (the token route only ever sent `chatIds`, from
-        // the unrelated `chatRooms` collection). Two stacked faults on one channel:
-        // no sign-in, and a claim with no issuer. The recipient of a message never
-        // saw it until they manually refreshed; the sender only saw their own
-        // because `send()` calls `refetch()` directly.
-        void (async () => {
-            try {
-                const lease = await acquireRealtimeSession(MESSAGES_SCOPE, () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
-                release = lease.release;
-                if (cancelled) {
-                    release();
-                    return;
-                }
-                // Subscribe through the LEASE's provider — it is bound to the app this
-                // scope authenticated on. The global provider may be on a different app
-                // carrying another channel's claims.
-                unsubscribe = lease.provider.subscribe(conversationPingPath(conversationId), () => {
-                    setIsConnected(true);
-                    void refetch();
-                }, (err) => {
-                    void normalizeError(err);
-                    setIsConnected(false);
-                });
-            }
-            catch (_err) {
-                void normalizeError(_err);
-                // Provider unregistered or token fetch failed — falls back to the
-                // one-shot fetch above.
-                setIsConnected(false);
-            }
-        })();
-        return () => {
-            cancelled = true;
-            setIsConnected(false);
-            unsubscribe?.();
-            release?.();
-        };
-    }, [conversationId, refetch]);
-    const sendMessage = useCallback(async (body) => {
-        if (!conversationId)
-            return;
-        const trimmed = body.trim();
-        if (!trimmed)
-            return;
-        await apiClient.post(SEND_ENDPOINT(conversationId), { body: trimmed });
-        // RTDB ping will trigger refetch — but kick off one immediately in case
-        // the ping path isn't subscribed (e.g. provider not registered).
-        await refetch();
-    }, [conversationId, refetch]);
-    const markRead = useCallback(() => {
-        if (!conversationId)
-            return Promise.resolve();
-        return apiClient
-            .post(READ_ENDPOINT(conversationId))
-            .then(() => void refetch())
-            .catch((err) => void normalizeError(err));
-    }, [conversationId, refetch]);
-    return {
-        conversation,
-        isLoading,
-        error,
-        isConnected,
-        sendMessage,
-        markRead,
-        refetch,
-    };
-}

package/dist/features/messages/hooks/useConversations.d.ts

@@ -1,15 +0,0 @@
-import type { ConversationDocument } from "../schemas/firestore";
-export interface UseConversationsOptions {
-    /** Override the list endpoint — e.g. the seller-scoped /api/store/conversations. Defaults to the buyer endpoint. */
-    endpoint?: string;
-    /** Which per-conversation unread counter to sum into totalUnread. Defaults to "unreadBuyer". */
-    unreadField?: "unreadBuyer" | "unreadSeller";
-}
-export interface UseConversationsReturn {
-    conversations: ConversationDocument[];
-    isLoading: boolean;
-    error: Error | null;
-    totalUnread: number;
-    refetch: () => Promise<void>;
-}
-export declare function useConversations(userId: string | null | undefined, opts?: UseConversationsOptions): UseConversationsReturn;

package/dist/features/messages/hooks/useConversations.js

@@ -1,104 +0,0 @@
-"use client";
-/**
- * useConversations — list the current buyer's conversations. Subscribes to a
- * single RTDB ping path so the list refreshes whenever any of the user's
- * conversations gets a new message.
- */
-import { useCallback, useEffect, useState } from "react";
-import { acquireRealtimeSession } from "../../../contracts/realtime-session";
-// One scope for both message hooks, deliberately: /api/realtime/token issues a
-// SINGLE token covering all of this user's conversationIds, so a per-id scope
-// would make the list and the detail hook re-sign against each other on the
-// same page for no gain.
-//
-// 🛑 Known limitation, not fixed here: because the scope is constant, a
-// conversation created AFTER sign-in is not in the cached token's claims and
-// its subscription is denied until the token's expiry skew forces a re-sign.
-// The denial is now surfaced (see the error callback below) rather than
-// swallowed. The durable fix is to re-acquire on a permission denial.
-const MESSAGES_SCOPE = "messages";
-import { userConversationsPingPath } from "../realtime";
-import { normalizeError } from "../../../errors/normalize";
-import { apiClient } from "../../../http/ApiClient";
-import { CONVERSATION_ENDPOINTS, ADMIN_ENDPOINTS } from "../../../constants/api-endpoints";
-const LIST_ENDPOINT = CONVERSATION_ENDPOINTS.LIST;
-async function fetchList(endpoint) {
-    const data = await apiClient.get(endpoint);
-    return data.items ?? [];
-}
-export function useConversations(userId, opts = {}) {
-    const { endpoint = LIST_ENDPOINT, unreadField = "unreadBuyer" } = opts;
-    const [conversations, setConversations] = useState([]);
-    const [isLoading, setIsLoading] = useState(false);
-    const [error, setError] = useState(null);
-    const refetch = useCallback(async () => {
-        if (!userId) {
-            setConversations([]);
-            return;
-        }
-        setIsLoading(true);
-        setError(null);
-        try {
-            setConversations(await fetchList(endpoint));
-        }
-        catch (e) {
-            void normalizeError(e);
-            setError(e instanceof Error ? e : new Error(String(e)));
-        }
-        finally {
-            setIsLoading(false);
-        }
-    }, [userId, endpoint]);
-    useEffect(() => {
-        void refetch();
-    }, [refetch]);
-    // Subscribe to the per-user ping path — any send/mark-read in any of the
-    // user's conversations bumps this and triggers a fresh list fetch.
-    useEffect(() => {
-        if (!userId)
-            return;
-        let unsubscribe;
-        let release;
-        let cancelled = false;
-        // 🛑 Sign in BEFORE subscribing. This hook used to call subscribe() with no
-        // authenticated session at all, so `auth == null` and the
-        // `chats/user/$userId` rule (`auth.uid == $userId`) could never pass. Every
-        // update was permission-denied and the error handler below was a literal
-        // `// ignore`, so the whole live-list channel was inert while looking wired.
-        void (async () => {
-            try {
-                const lease = await acquireRealtimeSession(MESSAGES_SCOPE, () => apiClient.post(ADMIN_ENDPOINTS.REALTIME_TOKEN, {}));
-                release = lease.release;
-                if (cancelled) {
-                    release();
-                    return;
-                }
-                // Subscribe through the LEASE's provider — see useConversation.
-                unsubscribe = lease.provider.subscribe(userConversationsPingPath(userId), () => {
-                    void refetch();
-                }, (err) => {
-                    // A denied subscription is a real defect — silence is what hid this
-                    // channel being dead for months — so it is logged, not swallowed.
-                    // (This comment previously claimed "Surfaced, not ignored" while the
-                    // body only called normalizeError, which classifies without
-                    // reporting. That was the same documentation-that-lies pattern this
-                    // workstream exists to remove, so it now actually logs.)
-                    void normalizeError(err);
-                    console.warn("[messages] conversations live-update subscription denied; list falls back to fetch-on-load");
-                });
-                // Provider unregistered or token fetch failed — non-fatal; the list
-                // still works via the one-shot fetch above, just without live updates.
-            }
-            catch (_err) {
-                void normalizeError(_err);
-            }
-        })();
-        return () => {
-            cancelled = true;
-            unsubscribe?.();
-            release?.();
-        };
-    }, [userId, refetch]);
-    const totalUnread = conversations.reduce((sum, c) => sum + (c[unreadField] ?? 0), 0);
-    return { conversations, isLoading, error, totalUnread, refetch };
-}

package/dist/features/messages/index.d.ts

@@ -1,6 +0,0 @@
-export * from "./hooks/useConversations";
-export * from "./hooks/useConversation";
-export type { ConversationDocument, ConversationMessage, } from "./schemas/firestore";
-export { CONVERSATIONS_COLLECTION, CONVERSATIONS_INDEXED_FIELDS, } from "./schemas/firestore";
-export { conversationPingPath, userConversationsPingPath, buildConversationPingPaths, } from "./realtime";
-export type { ConversationPingTargets } from "./realtime";