@mohasinac/appkit 4.44.0 → 4.46.0

package/dist/features/auctions/hooks/usePlaceBid.js

@@ -1,6 +1,6 @@
 import { useMutation, useQueryClient } from "@tanstack/react-query";
-import { apiClient } from "../../../http";
-import { BID_ENDPOINTS } from "../../../constants/api-endpoints";
+import { apiClient } from "../../../http/index.js";
+import { BID_ENDPOINTS } from "../../../constants/api-endpoints.js";
 /**
  * usePlaceBid
  *

package/dist/features/auctions/hooks/useRealtimeBids.js

@@ -1,8 +1,8 @@
 "use client";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import { useEffect, useState } from "react";
-import { logger } from "../../../core/Logger";
-import { BID_ENDPOINTS } from "../../../constants/api-endpoints";
+import { logger } from "../../../core/Logger.js";
+import { BID_ENDPOINTS } from "../../../constants/api-endpoints.js";
 /**
  * One EventSource per SSE URL, shared by every hook instance that asks for it.
  *

package/dist/features/auctions/index.js

@@ -1,8 +1,8 @@
-export * from "./schemas";
-export * from "./columns";
-export * from "./types";
-export * from "./hooks/useAuctions";
-export * from "./hooks/usePlaceBid";
-export * from "./hooks/useRealtimeBids";
-export * from "./components";
-export { manifest } from "./manifest";
+export * from "./schemas/index.js";
+export * from "./columns/index.js";
+export * from "./types/index.js";
+export * from "./hooks/useAuctions.js";
+export * from "./hooks/usePlaceBid.js";
+export * from "./hooks/useRealtimeBids.js";
+export * from "./components/index.js";
+export { manifest } from "./manifest.js";

package/dist/features/auctions/repository/bid.repository.js

@@ -1,15 +1,15 @@
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 /**
  * Bid Repository
  *
  * Data access layer for bid documents in Firestore
  */
-import { BaseRepository, getFirestoreCount, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase";
-import { DatabaseError } from "../../../errors";
-import { BID_COLLECTION, BID_TRACKED_FIELDS, BID_HISTORY_PII_FIELDS, createBidId } from "../schemas";
-import { withHistory } from "../../../_internal/shared/history/index";
-import { decryptPiiFields, BID_PII_FIELDS, } from "../../../security";
-import { BID_FIELDS } from "../../../constants/field-names";
+import { BaseRepository, getFirestoreCount, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
+import { DatabaseError } from "../../../errors/index.js";
+import { BID_COLLECTION, BID_TRACKED_FIELDS, BID_HISTORY_PII_FIELDS, createBidId } from "../schemas/index.js";
+import { withHistory } from "../../../_internal/shared/history/index.js";
+import { decryptPiiFields, BID_PII_FIELDS, } from "../../../security/index.js";
+import { BID_FIELDS } from "../../../constants/field-names.js";
 export class BidRepository extends BaseRepository {
     constructor() {
         super(BID_COLLECTION);

package/dist/features/auctions/schemas/firestore.js

@@ -1,7 +1,7 @@
 /**
  * Bids/Auctions Firestore Document Types & Constants
  */
-import { generateBidId, } from "../../../utils/id-generators";
+import { generateBidId, } from "../../../utils/id-generators.js";
 /** Runtime-accessible bid status values — use instead of bare string literals. */
 export const BidStatusValues = {
     ACTIVE: "active",

package/dist/features/auctions/schemas/index.js

@@ -1,6 +1,6 @@
-export * from "./firestore";
+export * from "./firestore.js";
 import { z } from "zod";
-import { mediaFieldSchema } from "../../media/types/index";
+import { mediaFieldSchema } from "../../media/types/index.js";
 // --- Sub-schemas --------------------------------------------------------------
 export const auctionStatusSchema = z.enum([
     "published",

package/dist/features/auctions/server.js

@@ -3,6 +3,6 @@
  *
  * Server-only entry point for auction API route handlers.
  */
-export * from "./actions";
-export { bidRepository } from "./repository/bid.repository";
-export { GET as bidsGET, GET } from "./api/route";
+export * from "./actions/index.js";
+export { bidRepository } from "./repository/bid.repository.js";
+export { GET as bidsGET, GET } from "./api/route.js";

package/dist/features/audit-log/repository/audit-log.repository.js

@@ -2,8 +2,8 @@
  * AdminAuditLogRepository — thin wrapper over the `adminAuditLog` collection.
  * See `appkit/src/features/audit-log/schemas/firestore.ts` for the doc shape.
  */
-import { BaseRepository, parseSieveDateValue, } from "../../../providers/db-firebase";
-import { ADMIN_AUDIT_LOG_COLLECTION } from "../schemas/firestore";
+import { BaseRepository, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
+import { ADMIN_AUDIT_LOG_COLLECTION } from "../schemas/firestore.js";
 export class AdminAuditLogRepository extends BaseRepository {
     constructor() {
         super(ADMIN_AUDIT_LOG_COLLECTION);

package/dist/features/auth/actions/index.js

@@ -1 +1 @@
-export * from "./profile-actions";
+export * from "./profile-actions.js";

package/dist/features/auth/actions/profile-actions.js

@@ -5,14 +5,14 @@
  * Auth, rate-limiting, and Next.js specifics are handled by the consumer.
  */
 import { cache } from "react";
-import { maskPublicReview } from "../../../security";
-import { safeRead } from "../../../errors/safe-read";
-import { finalizeStagedMediaField } from "../../media/finalize";
-import { userRepository } from "../repository/user.repository";
-import { sessionRepository } from "../repository/session.repository";
-import { productRepository } from "../../products/repository/products.repository";
-import { ProductStatusValues } from "../../products/schemas";
-import { reviewRepository } from "../../reviews/repository/reviews.repository";
+import { maskPublicReview } from "../../../security/index.js";
+import { safeRead } from "../../../errors/safe-read.js";
+import { finalizeStagedMediaField } from "../../media/finalize.js";
+import { userRepository } from "../repository/user.repository.js";
+import { sessionRepository } from "../repository/session.repository.js";
+import { productRepository } from "../../products/repository/products.repository.js";
+import { ProductStatusValues } from "../../products/schemas/index.js";
+import { reviewRepository } from "../../reviews/repository/reviews.repository.js";
 export async function updateUserProfile(userId, input) {
     const finalPhotoURL = await finalizeStagedMediaField(input.photoURL);
     const data = finalPhotoURL !== undefined ? { ...input, photoURL: finalPhotoURL } : input;

package/dist/features/auth/actions/user-slug.js

@@ -11,10 +11,10 @@
  * @tag access:server-only
  * @tag sideEffects:firestore-write
  */
-import { getAdminDb } from "../../../providers/db-firebase/admin";
-import { slugify } from "../../../utils";
-import { serverLogger } from "../../../monitoring/server-logger";
-import { normalizeError } from "../../../errors/normalize";
+import { getAdminDb } from "../../../providers/db-firebase/admin.js";
+import { slugify } from "../../../utils/index.js";
+import { serverLogger } from "../../../monitoring/server-logger.js";
+import { normalizeError } from "../../../errors/normalize.js";
 /** Reservation collection: doc id IS the slug, so the id is the uniqueness. */
 export const USER_SLUGS_COLLECTION = "userSlugs";
 /**

package/dist/features/auth/api/route.js

@@ -7,8 +7,8 @@
  *   export { authMeGET as GET } from "@mohasinac/feat-auth";
  */
 import { NextResponse } from "next/server.js";
-import { createRouteHandler } from "../../../next";
-import { getProviders } from "../../../contracts";
+import { createRouteHandler } from "../../../next/api/routeHandler.js";
+import { getProviders } from "../../../contracts/index.js";
 // --- Transform ----------------------------------------------------------------
 function toClientUser(u) {
     return {

package/dist/features/auth/auth-helpers.js

@@ -1,9 +1,9 @@
-import { getTokenTimeRemaining, isTokenExpired } from "./token-helpers";
+import { getTokenTimeRemaining, isTokenExpired } from "./token-helpers.js";
 // Was a SECOND, disagreeing copy of the hierarchy (employee and moderator both
 // ranked 2, where the canonical one puts moderator above employee), so
 // `hasRole` gave a different answer depending on which module you imported.
 // Deleted 2026-08-29 in favour of the one in security/authorization.
-import { ROLE_HIERARCHY } from "../../security/authorization";
+import { ROLE_HIERARCHY } from "../../security/authorization.js";
 export function hasRole(userRole, requiredRole) {
     return ROLE_HIERARCHY[userRole] >= ROLE_HIERARCHY[requiredRole];
 }

package/dist/features/auth/checkout-value-otp.js

@@ -5,9 +5,9 @@
  * (skipped for COD — see `createCheckoutOrderAction`).
  */
 import { createHmac, randomInt } from "crypto";
-import { AuthorizationError } from "../../errors";
-import { resolveDate } from "../../utils";
-import { USER_COLLECTION } from "./schemas";
+import { AuthorizationError } from "../../errors/index.js";
+import { resolveDate } from "../../utils/index.js";
+import { USER_COLLECTION } from "./schemas/index.js";
 const HMAC_KEY = process.env.CONSENT_OTP_HMAC_KEY ||
     process.env.HMAC_SECRET ||
     "consent-otp-secret";

package/dist/features/auth/components/AuthStatusPanel.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
-import { Div, Heading, Text } from "../../../ui";
-import { THEMED_TEXT_ERROR, THEMED_TEXT_SUCCESS } from "../../../_internal/shared/styles/themed";
+import { Div, Heading, Text } from "../../../ui/index.js";
+import { THEMED_TEXT_ERROR, THEMED_TEXT_SUCCESS } from "../../../_internal/shared/styles/themed.js";
 function toneClass(tone) {
     if (tone === "success")
         return THEMED_TEXT_SUCCESS;

package/dist/features/auth/components/ForgotPasswordView.js

@@ -1,13 +1,13 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import { useState } from "react";
-import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui";
-import { Form } from "../../../ui/components/Form";
-import { FieldInput } from "../../../ui/forms/FieldInput";
-import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
-import { forgotPasswordSchema } from "../schemas";
-import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
+import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui/index.js";
+import { Form } from "../../../ui/components/Form.js";
+import { FieldInput } from "../../../ui/forms/FieldInput.js";
+import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
+import { forgotPasswordSchema } from "../schemas/index.js";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 export function ForgotPasswordView({ onSubmit, isLoading = false, error, success, labels = {}, renderBackLink, className = "", }) {
     const [email, setEmail] = useState("");
     const { showToast } = useToast();

package/dist/features/auth/components/Guards.js

@@ -1,8 +1,8 @@
 "use client";
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useMemo } from "react";
-import { isAccountDisabled } from "../role-predicates";
-import { Button, Div, Heading, Row, Text } from "../../../ui";
+import { isAccountDisabled } from "../role-predicates.js";
+import { Button, Div, Heading, Row, Text } from "../../../ui/index.js";
 export function RoleGate({ children, user, allowedRoles, fallback = null, }) {
     if (!user?.role) {
         return _jsx(_Fragment, { children: fallback });

package/dist/features/auth/components/LoginForm.js

@@ -1,14 +1,14 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import { useState } from "react";
-import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui";
-import { Form } from "../../../ui/components/Form";
-import { FieldInput } from "../../../ui/forms/FieldInput";
-import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
-import { loginSchema } from "../schemas";
-import { SocialAuthButtons } from "./SocialAuthButtons";
-import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
+import { Alert, Button, Div, Heading, Row, SiteMark, Stack, Text, useToast } from "../../../ui/index.js";
+import { Form } from "../../../ui/components/Form.js";
+import { FieldInput } from "../../../ui/forms/FieldInput.js";
+import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
+import { loginSchema } from "../schemas/index.js";
+import { SocialAuthButtons } from "./SocialAuthButtons.js";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 export function LoginForm({ onSubmit, onGoogleLogin, isLoading = false, error, labels = {}, renderSocialButtons, renderCreateAccountLink, renderForgotPasswordLink, className = "", }) {
     const { showToast } = useToast();
     const [values, setValues] = useState({

package/dist/features/auth/components/OAuthLoadingView.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Div, Heading, Row, Text } from "../../../ui";
+import { Div, Heading, Row, Text } from "../../../ui/index.js";
 export function OAuthLoadingView() {
     return (_jsx(Row, { className: "min-h-[60vh]", padding: "x-md", align: "center", justify: "center", children: _jsxs(Div, { className: "max-w-sm w-full text-center", children: [_jsx(Div, { className: "w-12 h-12 border-4 border-primary border-t-transparent animate-spin mx-auto mb-6", rounded: "full" }), _jsx(Heading, { level: 2, className: "mb-2", size: "xl", weight: "semibold", children: "Signing you in\u2026" }), _jsx(Text, { variant: "secondary", size: "sm", children: "Please wait while we complete your sign-in." })] }) }));
 }

package/dist/features/auth/components/RegisterForm.js

@@ -1,16 +1,16 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import React, { useState } from "react";
 import { z } from "zod";
-import { Alert, Div, Heading, Row, SiteMark, Stack, Text } from "../../../ui";
-import { FieldInput } from "../../../ui/forms/FieldInput";
-import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox";
-import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
-import { FormShellContext, useFormShellState } from "../../../ui/forms/FormShell";
-import { registerSchema, registerPasswordSchema } from "../schemas";
-import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
-import { SectionForm, useSectionFormNav } from "../../shell/SectionForm";
+import { Alert, Div, Heading, Row, SiteMark, Stack, Text } from "../../../ui/index.js";
+import { FieldInput } from "../../../ui/forms/FieldInput.js";
+import { FieldCheckbox } from "../../../ui/forms/FieldCheckbox.js";
+import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
+import { FormShellContext, useFormShellState } from "../../../ui/forms/FormShell.js";
+import { registerSchema, registerPasswordSchema } from "../schemas/index.js";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
+import { SectionForm, useSectionFormNav } from "../../shell/SectionForm.js";
 const registerClientSchema = registerSchema.extend({
     displayName: z.string().min(1, "Enter your name"),
     confirmPassword: registerPasswordSchema,

package/dist/features/auth/components/ResetPasswordView.js

@@ -1,13 +1,13 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import { useState } from "react";
 import { z } from "zod";
-import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui";
-import { Form } from "../../../ui/components/Form";
-import { FieldInput } from "../../../ui/forms/FieldInput";
-import { applyZodIssues } from "../../../ui/forms/apply-zod-issues";
-import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary";
+import { Alert, Button, Div, Heading, Row, Stack, Text, useToast } from "../../../ui/index.js";
+import { Form } from "../../../ui/components/Form.js";
+import { FieldInput } from "../../../ui/forms/FieldInput.js";
+import { applyZodIssues } from "../../../ui/forms/apply-zod-issues.js";
+import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 const resetClientSchema = z.object({
     password: z.string().min(6, "Password must be at least 6 characters"),
     confirmPassword: z.string().min(6),

package/dist/features/auth/components/SocialAuthButtons.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { Button, Div, Row, Span } from "../../../ui";
+import { Button, Div, Row, Span } from "../../../ui/index.js";
 export function SocialAuthButtons({ onGoogle, disabled, dividerLabel, googleLabel, }) {
     return (_jsxs(_Fragment, { children: [_jsxs(Div, { className: "relative", children: [_jsx(Row, { className: "absolute inset-0", align: "center", children: _jsx(Div, { className: "w-full border-t border-neutral-200" }) }), _jsx(Row, { textSize: "sm", className: "relative", justify: "center", children: _jsx(Span, { padding: "x-xs", surface: "default", color: "muted", children: dividerLabel }) })] }), _jsx(Div, { layout: "grid", gap: "3", className: "grid-cols-1", children: _jsxs(Button, { rounded: "md", type: "button", onClick: onGoogle, disabled: disabled, variant: "outline", paddingX: "md", paddingY: "sm", textSize: "sm", weight: "medium", className: "inline- justify-[center] border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] bg-[var(--appkit-color-surface)] text-[var(--appkit-color-text)] dark:text-[var(--appkit-color-text)] hover:bg-surface-hover disabled:cursor-not-allowed disabled:opacity-50", children: [_jsxs("svg", { className: "mr-2 h-5 w-5 shrink-0", viewBox: "0 0 24 24", "aria-hidden": "true", children: [_jsx("path", { fill: "currentColor", d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" }), _jsx("path", { fill: "currentColor", d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" }), _jsx("path", { fill: "currentColor", d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" }), _jsx("path", { fill: "currentColor", d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" })] }), googleLabel] }) })] }));
 }

package/dist/features/auth/components/VerifyEmailView.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
-import { Button, Div, Heading, Row, Text } from "../../../ui";
-import { THEMED_TEXT_SUCCESS } from "../../../_internal/shared/styles/themed";
+import { Button, Div, Heading, Row, Text } from "../../../ui/index.js";
+import { THEMED_TEXT_SUCCESS } from "../../../_internal/shared/styles/themed.js";
 const CLS_SUCCESS_CIRCLE = "w-12 h-12 rounded-full bg-success-surface flex items-center justify-center mx-auto mb-6";
 const CLS_ERROR_CIRCLE = "w-12 h-12 rounded-full bg-error-surface flex items-center justify-center mx-auto mb-6";
 const CLS_ERROR_ICON = "w-6 h-6 text-error";

package/dist/features/auth/components/index.js

@@ -1,9 +1,9 @@
-export { RoleGate, ProtectedRoute } from "./Guards";
-export { SocialAuthButtons } from "./SocialAuthButtons";
-export { AuthStatusPanel } from "./AuthStatusPanel";
-export { LoginForm } from "./LoginForm";
-export { RegisterForm } from "./RegisterForm";
-export { ForgotPasswordView } from "./ForgotPasswordView";
-export { ResetPasswordView } from "./ResetPasswordView";
-export { VerifyEmailView } from "./VerifyEmailView";
-export { OAuthLoadingView } from "./OAuthLoadingView";
+export { RoleGate, ProtectedRoute } from "./Guards.js";
+export { SocialAuthButtons } from "./SocialAuthButtons.js";
+export { AuthStatusPanel } from "./AuthStatusPanel.js";
+export { LoginForm } from "./LoginForm.js";
+export { RegisterForm } from "./RegisterForm.js";
+export { ForgotPasswordView } from "./ForgotPasswordView.js";
+export { ResetPasswordView } from "./ResetPasswordView.js";
+export { VerifyEmailView } from "./VerifyEmailView.js";
+export { OAuthLoadingView } from "./OAuthLoadingView.js";

package/dist/features/auth/hooks/useAuth.js

@@ -1,13 +1,13 @@
 "use client";
-import { normalizeError } from "../../../errors/normalize";
+import { normalizeError } from "../../../errors/normalize.js";
 import { useCallback, useEffect, useRef, useState } from "react";
 import { useMutation, useQuery } from "@tanstack/react-query";
-import { getClientAuthProvider } from "../../../contracts/client-auth";
-import { getClientSessionAdapter } from "../../../contracts/client-session";
-import { apiClient } from "../../../http";
-import { useAuthEvent } from "./useAuthEvent";
-import { RealtimeEventStatus } from "../../../react/hooks/useRealtimeEvent";
-import { AUTH_ENDPOINTS, } from "../../../constants/api-endpoints";
+import { getClientAuthProvider } from "../../../contracts/client-auth.js";
+import { getClientSessionAdapter } from "../../../contracts/client-session.js";
+import { apiClient } from "../../../http/index.js";
+import { useAuthEvent } from "./useAuthEvent.js";
+import { RealtimeEventStatus } from "../../../react/hooks/useRealtimeEvent.js";
+import { AUTH_ENDPOINTS, } from "../../../constants/api-endpoints.js";
 export function useCurrentUser(opts) {
     const query = useQuery({
         queryKey: ["auth", "me"],

package/dist/features/auth/hooks/useAuthEvent.js

@@ -1,5 +1,5 @@
-import { logger } from "../../../core/Logger";
-import { RealtimeEventType, useRealtimeEvent, } from "../../../react";
+import { logger } from "../../../core/Logger.js";
+import { RealtimeEventType, useRealtimeEvent, } from "../../../react/index.js";
 const AUTH_EVENT_TIMEOUT_MS = 5 * 60 * 1000;
 const DEFAULT_RTDB_PATH = "auth_events";
 function extractAuthData(raw) {

package/dist/features/auth/hooks/useLogout.js

@@ -1,6 +1,6 @@
 import { useMutation } from "@tanstack/react-query";
-import { apiClient } from "../../../http";
-import { AUTH_ENDPOINTS } from "../../../constants/api-endpoints";
+import { apiClient } from "../../../http/index.js";
+import { AUTH_ENDPOINTS } from "../../../constants/api-endpoints.js";
 /**
  * useLogout
  *

package/dist/features/auth/hooks/useRBAC.js

@@ -1,8 +1,8 @@
 "use client";
 import { useCallback, useMemo } from "react";
-import { AuthenticationError, AuthorizationError } from "../../../errors";
-import { hasRole as checkRoleHierarchy } from "../auth-helpers";
-import { useCurrentUser } from "./useAuth";
+import { AuthenticationError, AuthorizationError } from "../../../errors/index.js";
+import { hasRole as checkRoleHierarchy } from "../auth-helpers.js";
+import { useCurrentUser } from "./useAuth.js";
 export function useHasRole(role) {
     const { user } = useCurrentUser();
     if (!user?.role)

package/dist/features/auth/index.js

@@ -1,11 +1,11 @@
-export * from "./types";
-export * from "./schemas";
-export * from "./role-predicates";
-export * from "./auth-helpers";
-export * from "./token-helpers";
-export * from "./hooks/useAuth";
-export * from "./hooks/useAuthEvent";
-export * from "./hooks/useRBAC";
-export * from "./hooks/useLogout";
-export * from "./components";
-export { manifest } from "./manifest";
+export * from "./types/index.js";
+export * from "./schemas/index.js";
+export * from "./role-predicates.js";
+export * from "./auth-helpers.js";
+export * from "./token-helpers.js";
+export * from "./hooks/useAuth.js";
+export * from "./hooks/useAuthEvent.js";
+export * from "./hooks/useRBAC.js";
+export * from "./hooks/useLogout.js";
+export * from "./components/index.js";
+export { manifest } from "./manifest.js";

package/dist/features/auth/permissions/constants.d.ts

@@ -37,7 +37,7 @@ export type Permission = "admin:dashboard:view" | "admin:users:read" | "admin:us
  * mechanism — and revoking it is a permission change, which the admin audit
  * log already records.
  */
- | "tester:admin-surfaces" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:copilot:view" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
+ | "tester:admin-surfaces" | "admin:events:read" | "admin:events:write" | "admin:events:delete" | "admin:event-entries:read" | "admin:event-entries:write" | "admin:support-tickets:read" | "admin:support-tickets:write" | "admin:shipments:read" | "admin:shipments:write" | "admin:catalogue:read" | "admin:catalogue:write" | "admin:grouped-listings:read" | "admin:grouped-listings:write" | "admin:support-tickets:assign" | "admin:support-tickets:close" | "admin:scammers:read" | "admin:scammers:write" | "admin:scammers:verify" | "admin:scammers:delete" | "admin:sessions:read" | "admin:sessions:delete" | "admin:notifications:read" | "admin:notifications:write" | "admin:carts:read" | "admin:wishlists:read" | "admin:feature-flags:read" | "admin:feature-flags:write" | "admin:team:read" | "admin:team:write" | "admin:maintenance:view-server-errors" | "admin:maintenance:view-client-errors" | "admin:maintenance:view-function-errors" | "admin:maintenance:view-cloud-logs" | "admin:maintenance:view-payment-rollbacks" | "admin:maintenance:run-analysis" | "admin:maintenance:purge-errors";
 /**
  * Granular user actions that can be soft-banned individually.
  * A user may have multiple simultaneous soft bans of different types.

package/dist/features/auth/permissions/constants.js

@@ -309,7 +309,6 @@ export const ROUTE_PERMISSION_MAP = {
     "/admin/carts": "admin:carts:read",
     "/admin/wishlists": "admin:wishlists:read",
     "/admin/feature-flags": "admin:feature-flags:read",
-    "/admin/copilot": "admin:copilot:view",
     "/admin/team": "admin:team:read",
     // Maintenance & Observability (workstream 10)
     "/admin/maintenance": "admin:maintenance:view-server-errors",
@@ -383,7 +382,6 @@ export const PERMISSION_DOMAINS = [
     },
     { label: "Events", prefix: "admin:events:|admin:event-entries:" },
     { label: "Support & Safety", prefix: "admin:support-tickets:|admin:scammers:" },
-    { label: "System", prefix: "admin:sessions:|admin:notifications:|admin:carts:|admin:wishlists:|admin:feature-flags:|admin:copilot:|admin:team:" },
 ];
 /** True when `perm` starts with any of the `|`-separated prefixes in `prefix`. */
 export function matchesDomain(perm, prefix) {

package/dist/features/auth/repository/index.js

@@ -1,4 +1,4 @@
-export * from "./user.repository";
-export * from "./token.repository";
-export * from "./session.repository";
-export * from "./sms-counter.repository";
+export * from "./user.repository.js";
+export * from "./token.repository.js";
+export * from "./session.repository.js";
+export * from "./sms-counter.repository.js";

package/dist/features/auth/repository/session.repository.js

@@ -1,10 +1,10 @@
-import { normalizeError } from "../../../errors/normalize";
-import { DatabaseError } from "../../../errors";
-import { serverLogger } from "../../../monitoring";
-import { BaseRepository, parseSieveDateValue, } from "../../../providers/db-firebase";
-import { generateSessionId } from "../token-helpers";
-import { decryptPiiFields } from "../../../security/pii-encrypt";
-import { SESSION_COLLECTION, SESSION_EXPIRATION_MS, SESSION_FIELDS, } from "../schemas";
+import { normalizeError } from "../../../errors/normalize.js";
+import { DatabaseError } from "../../../errors/index.js";
+import { serverLogger } from "../../../monitoring/index.js";
+import { BaseRepository, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
+import { generateSessionId } from "../token-helpers.js";
+import { decryptPiiFields } from "../../../security/pii-encrypt.js";
+import { SESSION_COLLECTION, SESSION_EXPIRATION_MS, SESSION_FIELDS, } from "../schemas/index.js";
 export class SessionRepository extends BaseRepository {
     constructor() {
         super(SESSION_COLLECTION);

package/dist/features/auth/repository/sms-counter.repository.js

@@ -1,5 +1,5 @@
-import { BaseRepository } from "../../../providers/db-firebase";
-import { SMS_COUNTERS_COLLECTION, SMS_COUNTER_FIELDS, SMS_DAILY_LIMIT, } from "../schemas";
+import { BaseRepository } from "../../../providers/db-firebase/index.js";
+import { SMS_COUNTERS_COLLECTION, SMS_COUNTER_FIELDS, SMS_DAILY_LIMIT, } from "../schemas/index.js";
 export class SmsCounterRepository extends BaseRepository {
     constructor() {
         super(SMS_COUNTERS_COLLECTION);

package/dist/features/auth/repository/token.repository.js

@@ -1,9 +1,9 @@
-import { normalizeError } from "../../../errors/normalize";
-import { DatabaseError } from "../../../errors";
-import { BaseRepository } from "../../../providers/db-firebase";
-import { TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, decryptPiiFields, piiBlindIndex, } from "../../../security";
-import { resolveDate } from "../../../utils";
-import { EMAIL_VERIFICATION_COLLECTION, PASSWORD_RESET_COLLECTION, TOKEN_FIELDS, } from "../schemas";
+import { normalizeError } from "../../../errors/normalize.js";
+import { DatabaseError } from "../../../errors/index.js";
+import { BaseRepository } from "../../../providers/db-firebase/index.js";
+import { TOKEN_PII_FIELDS, TOKEN_PII_INDEX_MAP, decryptPiiFields, piiBlindIndex, } from "../../../security/index.js";
+import { resolveDate } from "../../../utils/index.js";
+import { EMAIL_VERIFICATION_COLLECTION, PASSWORD_RESET_COLLECTION, TOKEN_FIELDS, } from "../schemas/index.js";
 export class EmailVerificationTokenRepository extends BaseRepository {
     constructor() {
         super(EMAIL_VERIFICATION_COLLECTION);

package/dist/features/auth/repository/user.repository.js

@@ -1,8 +1,8 @@
-import { normalizeError } from "../../../errors/normalize";
-import { DatabaseError } from "../../../errors";
-import { BaseRepository, getFirestoreCount, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase";
-import { USER_PII_FIELDS, USER_PII_INDEX_MAP, decryptPayoutDetails, decryptPiiFields, decryptShippingConfig, encryptPayoutDetails, encryptShippingConfig, piiBlindIndex, } from "../../../security";
-import { USER_COLLECTION, USER_FIELDS, } from "../schemas";
+import { normalizeError } from "../../../errors/normalize.js";
+import { DatabaseError } from "../../../errors/index.js";
+import { BaseRepository, getFirestoreCount, prepareForFirestore, parseSieveDateValue, } from "../../../providers/db-firebase/index.js";
+import { USER_PII_FIELDS, USER_PII_INDEX_MAP, decryptPayoutDetails, decryptPiiFields, decryptShippingConfig, encryptPayoutDetails, encryptShippingConfig, piiBlindIndex, } from "../../../security/index.js";
+import { USER_COLLECTION, USER_FIELDS, } from "../schemas/index.js";
 export class UserRepository extends BaseRepository {
     constructor() {
         super(USER_COLLECTION);

package/dist/features/auth/schemas/index.js

@@ -1,7 +1,7 @@
-export * from "./firestore";
+export * from "./firestore.js";
 import { z } from "zod";
-import { ERROR_MESSAGES } from "../../../errors/messages";
-import { annotate } from "../../shell/field-ui-meta";
+import { ERROR_MESSAGES } from "../../../errors/messages.js";
+import { annotate } from "../../shell/field-ui-meta.js";
 // --- Form schemas -------------------------------------------------------------
 /*
  * The `annotate()` calls below add UI metadata to a WeakMap keyed on the schema

package/dist/features/auth/server/checkSoftBan.js

@@ -1,4 +1,4 @@
-import { isAdminUser, isEmployeeUser } from "../role-predicates";
+import { isAdminUser, isEmployeeUser } from "../role-predicates.js";
 /**
  * Returns true when the user has an active (non-expired) soft ban for the
  * given action. Admin and employee roles always bypass soft-ban checks.

package/dist/features/auth/server.js

@@ -13,8 +13,8 @@
  * export const GET = withProviders(authMeGET);
  * ```
  */
-export * from "./token-store";
-export * from "./repository";
-export * from "./actions";
-export { authMeGET } from "./api/route";
-export { isSoftBanned, getBanSummary } from "./server/checkSoftBan";
+export * from "./token-store.js";
+export * from "./repository/index.js";
+export * from "./actions/index.js";
+export { authMeGET } from "./api/route.js";
+export { isSoftBanned, getBanSummary } from "./server/checkSoftBan.js";

package/dist/features/auth/token-store.js

@@ -1,7 +1,7 @@
 import crypto from "crypto";
-import { getAdminDb, prepareForFirestore } from "../../providers/db-firebase";
-import { resolveDate } from "../../utils";
-import { EMAIL_VERIFICATION_COLLECTION, PASSWORD_RESET_COLLECTION, } from "./schemas";
+import { getAdminDb, prepareForFirestore } from "../../providers/db-firebase/index.js";
+import { resolveDate } from "../../utils/index.js";
+import { EMAIL_VERIFICATION_COLLECTION, PASSWORD_RESET_COLLECTION, } from "./schemas/index.js";
 const DEFAULT_TOKEN_CONFIG = {
     emailVerificationExpiryMs: 24 * 60 * 60 * 1000,
     passwordResetExpiryMs: 60 * 60 * 1000,