@mohasinac/appkit 4.64.1 → 4.66.0

package/dist/next/api/routeHandler.js

@@ -35,7 +35,7 @@ import { mapToHttpError, HTTP_ERROR_CODES } from "../../errors/error-mapping.js"
 import { describeCauseChain } from "../../errors/describe-cause.js";
 import { buildErrorEnvelope, toApiIssues } from "../../errors/error-envelope.js";
 import { serverErrorsRepository } from "../../features/server-errors/repository/server-errors.repository.js";
-import { userRepository } from "../../repositories/index.js";
+import { userRepository } from "../../features/auth/repository/user.repository.js";
 import { SCHEMAS } from "../../schemas/registry.js";
 function buildPublicCacheControl(policy) {
     const maxAge = policy?.maxAge ?? 30;

package/dist/providers/db-firebase/admin-app-lite.js

@@ -30,7 +30,13 @@ export function getAdminAppLite() {
         process.env.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET?.trim();
     let app;
     if (nodeFs().existsSync(keyPath)) {
-        const sa = JSON.parse(nodeFs().readFileSync(keyPath, "utf8"));
+        /*
+         * 🛑 A `const sa = JSON.parse(readFileSync(keyPath))` sat here and was removed
+         * 2026-10-24: the parsed object was never used, because `cert(keyPath)` below
+         * takes the PATH and reads and validates the file itself. The only thing the
+         * extra parse bought was a second read of a service-account key on every
+         * cold start.
+         */
         const dbUrl = resolveRtdbUrl();
         app = initializeApp({ credential: cert(keyPath), databaseURL: dbUrl, ...(storageBucket && { storageBucket }) });
     }
@@ -63,7 +69,13 @@ export function getAdminAppLite() {
         const firebaseConfig = process.env.FIREBASE_CONFIG
             ? JSON.parse(process.env.FIREBASE_CONFIG)
             : {};
-        const projectId = firebaseConfig.projectId ?? process.env.GCLOUD_PROJECT ?? "";
+        /*
+         * 🛑 A `projectId` was computed here from FIREBASE_CONFIG/GCLOUD_PROJECT and
+         * never passed, which was CORRECT but dead: this is the ADC branch, and
+         * `initializeApp()` with no credential is exactly what makes the SDK resolve
+         * both credential and project from the metadata server. Removed 2026-10-24
+         * rather than wired, because passing it would override that resolution.
+         */
         const dbUrl = firebaseConfig.databaseURL ??
             resolveRtdbUrl();
         app = initializeApp({

package/dist/providers/db-firebase/admin.js

@@ -83,7 +83,10 @@ export function getAdminApp() {
     let app;
     try {
         if (nodeFs().existsSync(keyPath)) {
-            const sa = JSON.parse(nodeFs().readFileSync(keyPath, "utf8"));
+            /*
+             * 🛑 Removed 2026-10-24 — see the matching note in admin-app-lite.ts. The
+             * parsed service account was never used; `cert(keyPath)` reads the file.
+             */
             // Was NEXT_PUBLIC-only here while the other two branches honoured
             // FIREBASE_ADMIN_DATABASE_URL, so setting it had no effect on this path.
             const dbUrl = resolveRtdbUrl();
@@ -118,7 +121,10 @@ export function getAdminApp() {
             const firebaseConfig = process.env.FIREBASE_CONFIG
                 ? JSON.parse(process.env.FIREBASE_CONFIG)
                 : {};
-            const projectId = firebaseConfig.projectId ?? process.env.GCLOUD_PROJECT ?? "";
+            /*
+             * 🛑 Removed 2026-10-24 — see admin-app-lite.ts. Computed, never passed, and
+             * passing it would defeat ADC's own project resolution.
+             */
             // FIREBASE_CONFIG is injected by the Functions runtime and is
             // authoritative there; env vars are the fallback for other runtimes.
             const dbUrl = firebaseConfig.databaseURL || resolveRtdbUrl();

package/dist/react/hooks/use-action-dispatch.d.ts

@@ -1,5 +1,5 @@
 import type { JsonValue } from "@mohasinac/appkit/client";
-import { type ToastVariant } from "../../ui";
+import type { ToastVariant } from "../../ui/components/toast-context";
 export type DispatchAction = {
     type: "NAVIGATE";
     href: string;

package/dist/react/hooks/use-action-dispatch.js

@@ -3,7 +3,7 @@ import { normalizeError } from "../../errors/normalize.js";
 import { toUserMessage } from "../../errors/error-display-map.js";
 import { useCallback } from "react";
 import { useRouter } from "next/navigation.js";
-import { useToast } from "../../ui/index.js";
+import { useToast } from "../../ui/components/toast-context.js";
 import { usePanelStore } from "../../stores/panel-store.js";
 export function useActionDispatch(options) {
     const router = useRouter();

package/dist/react/hooks/useBrowsePageFlags.d.ts

@@ -0,0 +1,26 @@
+import { type BrowsePageKey } from "../../_internal/shared/listing-types/feature-flags";
+/**
+ * Which public browse sections are open, as configured in
+ * `siteSettings.listings.browsePages`.
+ *
+ * The sibling of `useListingTypeFlags`, and built the same way on purpose:
+ * keyed on the union via `ALL_BROWSE_PAGES` so a new section cannot be
+ * silently missed, and DEFAULTING TO OPEN while settings load so the first
+ * paint does not briefly hide navigation that is actually enabled.
+ *
+ * 🛑 The permissive default matters more here than it does for listing types.
+ * This hook decides whether a nav entry RENDERS, so a `false` default would
+ * blank the navbar on every cold load until the settings request resolved —
+ * visible flicker on every page of the site rather than one empty browse tab.
+ */
+export type BrowsePageFlagsShape = Partial<Record<BrowsePageKey, boolean>>;
+export type BrowsePageFlags = Record<BrowsePageKey, boolean> & {
+    /** True when the section is open (or the setting has not loaded yet). */
+    isEnabled: (page: BrowsePageKey) => boolean;
+    /**
+     * True when a link may be shown — i.e. it points at no browse section, or at
+     * one that is open. Pass an href straight from a nav or footer constant.
+     */
+    allowsHref: (href: string | undefined | null) => boolean;
+};
+export declare function useBrowsePageFlags(): BrowsePageFlags;

package/dist/react/hooks/useBrowsePageFlags.js

@@ -0,0 +1,18 @@
+"use client";
+import { useSiteSettings } from "../../core/hooks/useSiteSettings.js";
+import { ALL_BROWSE_PAGES, browsePageForPath, } from "../../_internal/shared/listing-types/feature-flags.js";
+export function useBrowsePageFlags() {
+    const { data } = useSiteSettings();
+    const bp = data?.listings?.browsePages;
+    // Closed only when EXPLICITLY false — a missing flag, or settings that have
+    // not loaded, means open.
+    const flags = Object.fromEntries(ALL_BROWSE_PAGES.map((page) => [page, bp?.[page] !== false]));
+    return {
+        ...flags,
+        isEnabled: (page) => flags[page],
+        allowsHref: (href) => {
+            const page = browsePageForPath(href);
+            return page === null || flags[page];
+        },
+    };
+}