Phase 2 — Community Engagement

4 new feature areas, all using existing HTTP-only cookie auth + EdgeFunctions client.

EDGE FUNCTIONS (4 new, all deployed):
- reviews: by_product, by_seller, create (verifies purchase), helpful, delete
- group-buy: create, join, status, active, mine, cancel (Pinduoduo model)
- wishlist-share: share (snapshot), get_shared, my_shares, revoke
- live: list, get, messages, start, end, join, leave, message, mynext, whatsapp_buy

DATABASE (7 new tables + triggers):
- product_ratings (avg + count cache, trigger-maintained from buyers_reviews)
- group_buys + group_buy_members (status auto-flips to 'completed' at target)
- shared_wishlists (token-based, snapshot JSON, view_count)
- shop_live_sessions + shop_live_messages + shop_live_viewers
(renamed from live_sessions to avoid clash with academy table)

FRONTEND (all using EdgeFunctions, zero Supabase SDK):
- Product page: WhatsApp/Telegram/copy share buttons, 'Start group buy' button,
active group buys list, full reviews section + write-review modal with star picker
- /group-buy.html: shareable group buy page with progress bar, member avatars,
WhatsApp share, join button, discount unlock when target reached
- /shared-wishlist.html: public wishlist view by token (works post-revoke)
- Wishlist page: 'Share wishlist' button → creates share link, opens WhatsApp
- /live.html: live shopping browse page (live now + recent)
- /live-watch.html: stream + chat sidebar with 2.5s polling, auto-join, featured
product card with buy button, message types (chat/join/leave/purchase/system)
- /seller/go-live.html: seller dashboard to start/end live sessions with optional
YouTube/HLS stream URL, featured product picker, live viewer counter
- Seller sidebar: new 'Go Live' nav item
- Public seller-profile.html: new 'Reviews' tab with seller aggregate rating
- Home page: new 'Live Now' carousel section (auto-shown when sessions active)

WHATSAPP INTEGRATION:
- The /api/live edge function exposes op=whatsapp_buy which the WhatsApp bot
can call when a user texts 'buy' during a live session. Returns the checkout
URL for the bot to send back. (1-line change in the Render bot needed — the
endpoint is ready.)

Phase 1 leftover also addressed: product sharing buttons on every product page.

17 edge functions now deployed (8 buyer + 5 seller/social + 4 phase 2).

Eesha buying folder/js/product.js

@@ -34,6 +34,7 @@ async function loadProductDetails() {
         }
 
         const product = result.product;
+        window._currentProduct = product;  // cache for share functions
 
         // Hide loading states
         document.getElementById('loadingSkeleton').classList.add('hidden');
@@ -286,6 +287,10 @@ document.addEventListener('DOMContentLoaded', async () => {
     // Finally load product details and update cart count
     await loadProductDetails();
     await updateCartCount();
+
+    // Phase 2: load reviews + active group buys for this product
+    loadProductReviews();
+    loadActiveGroupBuys();
 });
 
 // Search bar behavior (navigate to search-result.html with query)
@@ -313,3 +318,219 @@ document.addEventListener('DOMContentLoaded', async () => {
         console.error('Search setup failed:', err);
     }
 })();
+
+// ====================================================================
+// Phase 2: Product sharing, group buy, reviews
+// ====================================================================
+function getCurrentProductId() {
+    return getProductIdFromUrl();
+}
+
+function getCurrentProduct() {
+    // Stored when loadProductDetails runs
+    return window._currentProduct || null;
+}
+
+// ---- Sharing ----
+function shareProduct(platform) {
+    const id = getCurrentProductId();
+    if (!id) return;
+    const url = `${window.location.origin}/Eesha%20buying%20folder/product.html?id=${id}`;
+    const product = getCurrentProduct();
+    const text = product
+        ? `Check out "${product.name}" on Cellex — $${Number(product.price).toFixed(2)}`
+        : 'Check out this product on Cellex';
+
+    if (platform === 'whatsapp') {
+        window.open(`https://wa.me/?text=${encodeURIComponent(text + ' ' + url)}`, '_blank');
+    } else if (platform === 'telegram') {
+        window.open(`https://t.me/share/url?url=${encodeURIComponent(url)}&text=${encodeURIComponent(text)}`, '_blank');
+    }
+}
+
+async function copyShareLink() {
+    const id = getCurrentProductId();
+    if (!id) return;
+    const url = `${window.location.origin}/Eesha%20buying%20folder/product.html?id=${id}`;
+    try {
+        await navigator.clipboard.writeText(url);
+        const btn = event?.target?.closest('button');
+        if (btn) {
+            const orig = btn.innerHTML;
+            btn.innerHTML = '<i class="fas fa-check"></i> Copied!';
+            setTimeout(() => btn.innerHTML = orig, 1500);
+        }
+    } catch (e) {
+        window.prompt('Copy this link:', url);
+    }
+}
+
+// ---- Group buy ----
+async function startGroupBuy() {
+    const productId = getCurrentProductId();
+    if (!productId) return;
+    if (!currentUser) {
+        if (confirm('Please login to start a group buy. Go to login page?')) {
+            window.location.href = `login.html?next=${encodeURIComponent('/Eesha buying folder/product.html?id=' + productId)}`;
+        }
+        return;
+    }
+    if (!confirm('Start a group buy?\n\nGet 3 friends to join and everyone gets 20% off.\n\nWe will generate a share link for you.')) return;
+    const r = await window.EdgeFunctions.groupBuy.create(Number(productId), 3, 20);
+    if (r.success) {
+        const url = `${window.location.origin}/group-buy.html?id=${r.groupBuy.id}`;
+        const shareText = `🛍️ Join my group buy on Cellex! Get 20% off when 3 of us join. ${url}`;
+        window.open(`https://wa.me/?text=${encodeURIComponent(shareText)}`, '_blank');
+        // Also navigate to the group buy page
+        window.location.href = `/group-buy.html?id=${r.groupBuy.id}`;
+    } else {
+        alert('Failed to start group buy: ' + (r.error || 'Unknown error'));
+    }
+}
+
+async function loadActiveGroupBuys() {
+    const productId = getCurrentProductId();
+    if (!productId) return;
+    const container = document.getElementById('activeGroupBuys');
+    if (!container) return;
+    try {
+        const r = await window.EdgeFunctions.groupBuy.active(Number(productId));
+        if (!r.success || !r.groupBuys || r.groupBuys.length === 0) return;
+        container.classList.remove('hidden');
+        container.innerHTML = `
+            <div class="bg-amber-50 border border-amber-200 rounded-lg p-3">
+                <div class="text-xs font-bold text-amber-700 uppercase tracking-wide mb-2">
+                    <i class="fas fa-fire"></i> ${r.groupBuys.length} active group buy${r.groupBuys.length > 1 ? 's' : ''} — join & get 20% off!
+                </div>
+                ${r.groupBuys.map(gb => `
+                    <a href="/group-buy.html?id=${gb.id}" class="block text-sm text-amber-900 hover:underline">
+                        👥 ${gb.current_count}/${gb.target_count} joined · expires ${new Date(gb.expires_at).toLocaleString()}
+                    </a>
+                `).join('')}
+            </div>`;
+    } catch (e) { /* silent fail */ }
+}
+
+// ---- Reviews ----
+async function loadProductReviews() {
+    const productId = getCurrentProductId();
+    if (!productId) return;
+    try {
+        const r = await window.EdgeFunctions.reviews.byProduct(Number(productId));
+        if (!r.success) return;
+
+        // Summary
+        const summary = document.getElementById('reviewsSummary');
+        if (r.summary.count > 0) {
+            summary.classList.remove('hidden');
+            document.getElementById('reviewsAvg').textContent = Number(r.summary.avg).toFixed(1);
+            document.getElementById('reviewsStars').textContent =
+                '★'.repeat(Math.round(r.summary.avg)) + '☆'.repeat(5 - Math.round(r.summary.avg));
+            document.getElementById('reviewsCount').textContent = `${r.summary.count} review${r.summary.count > 1 ? 's' : ''}`;
+            document.getElementById('reviewsBlurb').textContent =
+                r.summary.avg >= 4 ? 'Buyers love this product!' :
+                r.summary.avg >= 3 ? 'Most buyers are satisfied.' :
+                'Mixed reviews — read below.';
+        }
+
+        // List
+        const list = document.getElementById('reviewsList');
+        if (!r.reviews || r.reviews.length === 0) {
+            list.innerHTML = '<div class="text-gray-500 text-sm">No reviews yet. Be the first to write one!</div>';
+            return;
+        }
+        list.innerHTML = r.reviews.map(rev => `
+            <div class="border-b pb-3">
+                <div class="flex items-center justify-between">
+                    <div class="flex items-center gap-2">
+                        <div class="w-8 h-8 rounded-full bg-amber-100 text-amber-700 flex items-center justify-center font-bold text-sm">
+                            ${(rev.reviewer_name || 'B').charAt(0).toUpperCase()}
+                        </div>
+                        <div>
+                            <div class="font-medium text-sm">${escapeHtml(rev.reviewer_name || 'Buyer')}</div>
+                            <div class="text-xs text-gray-500">${new Date(rev.created_at).toLocaleDateString()}</div>
+                        </div>
+                    </div>
+                    <div class="text-yellow-400 text-sm">${'★'.repeat(rev.rating)}${'☆'.repeat(5 - rev.rating)}</div>
+                </div>
+                ${rev.title ? `<div class="font-semibold mt-2">${escapeHtml(rev.title)}</div>` : ''}
+                ${rev.comment ? `<p class="text-gray-700 text-sm mt-1">${escapeHtml(rev.comment)}</p>` : ''}
+                ${rev.verified_purchase ? '<div class="text-xs text-green-600 mt-1"><i class="fas fa-check-circle"></i> Verified purchase</div>' : ''}
+                ${rev.images && rev.images.length ? `<div class="flex gap-2 mt-2">${rev.images.map(img => `<img src="${escapeHtml(img)}" class="w-16 h-16 object-cover rounded">`).join('')}</div>` : ''}
+                <button onclick="markHelpful('${rev.id}')" class="text-xs text-gray-500 hover:text-amber-600 mt-2">
+                    <i class="fas fa-thumbs-up"></i> Helpful (${rev.helpful_count || 0})
+                </button>
+            </div>`).join('');
+    } catch (e) {
+        console.error('reviews load error', e);
+    }
+}
+
+function escapeHtml(s) {
+    return String(s ?? '').replace(/[&<>"']/g, c => ({
+        '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
+    }[c]));
+}
+
+// ---- Review modal ----
+function openReviewModal() {
+    if (!currentUser) {
+        if (confirm('Please login to write a review. Go to login page?')) {
+            const id = getCurrentProductId();
+            window.location.href = `login.html?next=${encodeURIComponent('/Eesha buying folder/product.html?id=' + id)}`;
+        }
+        return;
+    }
+    document.getElementById('reviewModal').classList.remove('hidden');
+    // Star picker
+    document.querySelectorAll('#starPicker button').forEach(btn => {
+        btn.onclick = () => {
+            const star = parseInt(btn.dataset.star);
+            document.getElementById('reviewRating').value = star;
+            document.querySelectorAll('#starPicker button').forEach(b => {
+                b.classList.remove('text-amber-400');
+                b.classList.add('text-gray-300');
+            });
+            for (let i = 1; i <= star; i++) {
+                const b = document.querySelector(`#starPicker button[data-star="${i}"]`);
+                if (b) { b.classList.add('text-amber-400'); b.classList.remove('text-gray-300'); }
+            }
+        };
+    });
+    document.getElementById('reviewForm').onsubmit = submitReview;
+}
+
+function closeReviewModal() {
+    document.getElementById('reviewModal').classList.add('hidden');
+}
+
+async function submitReview(e) {
+    e.preventDefault();
+    const errEl = document.getElementById('reviewError');
+    errEl.classList.add('hidden');
+    const rating = parseInt(document.getElementById('reviewRating').value);
+    if (!rating || rating < 1 || rating > 5) {
+        errEl.textContent = 'Please select a rating (1-5 stars)';
+        errEl.classList.remove('hidden');
+        return;
+    }
+    const r = await window.EdgeFunctions.reviews.create({
+        productId: Number(getCurrentProductId()),
+        rating,
+        title: document.getElementById('reviewTitle').value.trim(),
+        comment: document.getElementById('reviewComment').value.trim(),
+    });
+    if (r.success) {
+        closeReviewModal();
+        await loadProductReviews();
+        alert('Thanks for your review!');
+    } else {
+        errEl.textContent = r.error || 'Failed to submit review';
+        errEl.classList.remove('hidden');
+    }
+}
+
+async function markHelpful(reviewId) {
+    const r = await window.EdgeFunctions.reviews.helpful(reviewId);
+    if (r.success) await loadProductReviews();
+}

Eesha buying folder/product.html

@@ -222,6 +222,25 @@
                     </button>
                 </div>
 
+                <!-- Share & Group Buy buttons (Phase 2) -->
+                <div class="flex gap-2 flex-wrap mt-3" id="phase2-actions">
+                    <button onclick="shareProduct('whatsapp')" class="px-3 py-2 bg-green-500 text-white rounded-lg text-sm font-medium hover:bg-green-600 transition flex items-center gap-1.5">
+                        <i class="fab fa-whatsapp"></i> Share on WhatsApp
+                    </button>
+                    <button onclick="shareProduct('telegram')" class="px-3 py-2 bg-blue-500 text-white rounded-lg text-sm font-medium hover:bg-blue-600 transition flex items-center gap-1.5">
+                        <i class="fab fa-telegram"></i> Telegram
+                    </button>
+                    <button onclick="copyShareLink()" class="px-3 py-2 bg-gray-100 text-gray-700 rounded-lg text-sm font-medium hover:bg-gray-200 transition flex items-center gap-1.5">
+                        <i class="fas fa-link"></i> Copy link
+                    </button>
+                    <button onclick="startGroupBuy()" class="px-3 py-2 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 rounded-lg text-sm font-bold hover:opacity-90 transition flex items-center gap-1.5">
+                        <i class="fas fa-users"></i> Start group buy · 20% off
+                    </button>
+                </div>
+
+                <!-- Active group buys for this product -->
+                <div id="activeGroupBuys" class="mt-3 hidden"></div>
+
                 <!-- Shipping & Policy -->
                 <div class="border-t pt-6 space-y-4">
                     <div class="flex items-start gap-3">
@@ -241,8 +260,72 @@
                 </div>
             </div>
         </div>
+
+        <!-- Reviews & Ratings (Phase 2) -->
+        <section class="mt-8 bg-white rounded-xl shadow-lg p-6">
+            <div class="flex items-center justify-between mb-4">
+                <h2 class="text-xl font-bold">Ratings & Reviews</h2>
+                <button onclick="openReviewModal()" class="bg-brand-500 text-white px-4 py-2 rounded-lg text-sm font-medium hover:bg-opacity-90 transition">
+                    <i class="fas fa-pen mr-1"></i> Write a review
+                </button>
+            </div>
+
+            <div id="reviewsSummary" class="mb-4 hidden">
+                <div class="flex items-center gap-4">
+                    <div class="text-center">
+                        <div class="text-4xl font-bold text-amber-500" id="reviewsAvg">0.0</div>
+                        <div class="text-yellow-400 text-sm" id="reviewsStars"></div>
+                        <div class="text-gray-500 text-xs mt-1" id="reviewsCount">0 reviews</div>
+                    </div>
+                    <div class="text-sm text-gray-600 max-w-md" id="reviewsBlurb">
+                        Be the first to review this product.
+                    </div>
+                </div>
+            </div>
+
+            <div id="reviewsList" class="space-y-4">
+                <div class="text-gray-500 text-sm">Loading reviews…</div>
+            </div>
+        </section>
     </main>
 
+    <!-- Review Modal -->
+    <div id="reviewModal" class="fixed inset-0 bg-black bg-opacity-50 z-50 hidden flex items-center justify-center p-4">
+        <div class="bg-white rounded-xl shadow-2xl w-full max-w-md p-6">
+            <div class="flex justify-between items-center mb-4">
+                <h3 class="text-lg font-bold">Write a review</h3>
+                <button onclick="closeReviewModal()" class="text-gray-400 hover:text-gray-700">
+                    <i class="fas fa-times"></i>
+                </button>
+            </div>
+            <form id="reviewForm" class="space-y-3">
+                <div>
+                    <label class="block text-sm font-medium mb-1">Rating</label>
+                    <div class="flex gap-1" id="starPicker">
+                        <button type="button" data-star="1" class="text-2xl text-gray-300 hover:text-amber-400">★</button>
+                        <button type="button" data-star="2" class="text-2xl text-gray-300 hover:text-amber-400">★</button>
+                        <button type="button" data-star="3" class="text-2xl text-gray-300 hover:text-amber-400">★</button>
+                        <button type="button" data-star="4" class="text-2xl text-gray-300 hover:text-amber-400">★</button>
+                        <button type="button" data-star="5" class="text-2xl text-gray-300 hover:text-amber-400">★</button>
+                    </div>
+                    <input type="hidden" id="reviewRating" value="0">
+                </div>
+                <div>
+                    <label class="block text-sm font-medium mb-1">Title (optional)</label>
+                    <input type="text" id="reviewTitle" class="w-full px-3 py-2 border rounded-lg" placeholder="Summarize your experience">
+                </div>
+                <div>
+                    <label class="block text-sm font-medium mb-1">Comment</label>
+                    <textarea id="reviewComment" rows="3" class="w-full px-3 py-2 border rounded-lg" placeholder="What did you like or dislike?"></textarea>
+                </div>
+                <div id="reviewError" class="text-sm text-red-500 hidden"></div>
+                <button type="submit" class="w-full bg-brand-500 text-white py-2 rounded-lg font-medium hover:bg-opacity-90">
+                    Submit review
+                </button>
+            </form>
+        </div>
+    </div>
+
     <!-- AI Assistant -->
     <div class="fixed bottom-6 right-6 z-50" id="aiAssistant">
         <button class="w-14 h-14 bg-brand-500 text-white rounded-full shadow-lg hover:bg-opacity-90 transition" id="aiToggle" aria-label="Open AI assistant">

Eesha buying folder/wishlist.html

@@ -108,9 +108,14 @@
                     <h1 class="text-3xl font-bold text-gray-900">My Wishlist</h1>
                     <p class="text-gray-500 mt-1"><span id="wishlistCount">0</span> items saved</p>
                 </div>
-                <button id="clearAllBtn" class="px-4 py-2 text-red-500 hover:bg-red-50 rounded-lg hidden">
-                    <i class="fas fa-trash mr-2"></i> Clear All
-                </button>
+                <div class="flex gap-2">
+                    <button id="shareWishlistBtn" onclick="shareMyWishlist()" class="px-4 py-2 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 font-bold rounded-lg hover:opacity-90 transition">
+                        <i class="fas fa-share-alt mr-1"></i> Share wishlist
+                    </button>
+                    <button id="clearAllBtn" class="px-4 py-2 text-red-500 hover:bg-red-50 rounded-lg hidden">
+                        <i class="fas fa-trash mr-2"></i> Clear All
+                    </button>
+                </div>
             </div>
 
             <!-- Wishlist Grid -->
@@ -285,6 +290,26 @@
                 await window.Cart.updateCartCountUI();
             }
         }
+
+        // Phase 2 — share wishlist
+        async function shareMyWishlist() {
+            const r = await window.EdgeFunctions.wishlistShare.share('My Cellex Wishlist');
+            if (!r.success) {
+                alert('Failed to create share link: ' + (r.error || ''));
+                return;
+            }
+            const url = `${window.location.origin}${r.url}`;
+            // Open WhatsApp share
+            const text = `🛍️ Check out my wishlist on Cellex! ${url}`;
+            window.open(`https://wa.me/?text=${encodeURIComponent(text)}`, '_blank');
+            // Also copy to clipboard
+            try {
+                await navigator.clipboard.writeText(url);
+                alert('Share link copied!\n\nShare it with friends: ' + url);
+            } catch {
+                window.prompt('Copy your share link:', url);
+            }
+        }
     </script>
 </body>
 </html>

group-buy.html

@@ -0,0 +1,199 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Group Buy · Cellex</title>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="css/common.css">
+  <script src="js/config/edge-functions.js?v=2"></script>
+  <style>
+    body { background: #f8fafc; }
+    .gb-hero {
+      background: linear-gradient(135deg, #fbbf24 0%, #d97706 100%);
+      color: #0f172a; padding: 3rem 1.5rem;
+    }
+    .gb-card {
+      background: #fff; border-radius: 16px;
+      box-shadow: 0 8px 24px rgba(0,0,0,0.08);
+      padding: 1.5rem; margin: 1rem auto; max-width: 720px;
+    }
+    .gb-progress-track {
+      width: 100%; height: 12px; background: #fef3c7;
+      border-radius: 999px; overflow: hidden;
+    }
+    .gb-progress-fill {
+      height: 100%; background: linear-gradient(90deg, #f59e0b, #d97706);
+      transition: width 0.5s ease;
+    }
+    .gb-avatars { display: flex; }
+    .gb-avatar {
+      width: 36px; height: 36px; border-radius: 50%;
+      background: #fef3c7; color: #92400e;
+      display: flex; align-items: center; justify-content: center;
+      font-weight: 700; font-size: 0.85rem;
+      border: 2px solid #fff; margin-left: -8px;
+    }
+    .gb-avatar:first-child { margin-left: 0; }
+    .gb-avatar.empty { background: #e2e8f0; color: #94a3b8; }
+  </style>
+</head>
+<body>
+  <div id="header-mount"></div>
+  <script>fetch('shared/header.html').then(r=>r.text()).then(h=>document.getElementById('header-mount').innerHTML=h);</script>
+
+  <div class="gb-hero">
+    <div class="max-w-3xl mx-auto text-center">
+      <div class="inline-flex items-center gap-2 bg-ink-900 text-amber-400 px-3 py-1 rounded-full text-xs font-bold uppercase tracking-wide">
+        <i class="fas fa-users"></i> Group Buy
+      </div>
+      <h1 class="text-3xl md:text-4xl font-extrabold mt-3" id="gb-headline">Loading…</h1>
+      <p class="text-ink-900/80 mt-2">Get 20% off when 3 friends join</p>
+    </div>
+  </div>
+
+  <div class="gb-card" id="gb-card">
+    <div class="text-center py-8 text-gray-500">
+      <i class="fas fa-spinner fa-spin text-2xl"></i>
+      <div class="mt-2">Loading group buy…</div>
+    </div>
+  </div>
+
+  <script>
+    (async () => {
+      const params = new URLSearchParams(location.search);
+      const gbId = params.get('id');
+      if (!gbId) {
+        document.getElementById('gb-card').innerHTML = '<div class="text-center py-8 text-red-500">No group buy ID provided.</div>';
+        return;
+      }
+
+      // Load group buy status
+      const r = await window.EdgeFunctions.groupBuy.status(gbId);
+      if (!r.success || !r.groupBuy) {
+        document.getElementById('gb-card').innerHTML = '<div class="text-center py-8 text-red-500">Group buy not found.</div>';
+        return;
+      }
+
+      const gb = r.groupBuy;
+      const product = r.product;
+      const pct = Math.min(100, Math.round((gb.current_count / gb.target_count) * 100));
+      const discountPrice = product ? (Number(product.price) * (1 - Number(gb.discount_pct) / 100)).toFixed(2) : null;
+      const isCompleted = gb.status === 'completed';
+      const isExpired = gb.status === 'expired' || (gb.status === 'open' && new Date(gb.expires_at) < new Date());
+
+      document.getElementById('gb-headline').textContent =
+        isCompleted ? '🎉 Group complete!' :
+        isExpired ? 'Group buy expired' :
+        `${gb.target_count - gb.current_count} more friend${gb.target_count - gb.current_count > 1 ? 's' : ''} needed!`;
+
+      // Build member avatars
+      const memberAvatars = (r.members || []).map(m => `
+        <div class="gb-avatar">${(m.user_name || (m.user_id || '').slice(0, 2) || '?').charAt(0).toUpperCase()}</div>
+      `).join('');
+      const emptySlots = Math.max(0, gb.target_count - (r.members?.length || 0));
+      const emptyAvatars = Array.from({length: emptySlots}).map(() => `<div class="gb-avatar empty">?</div>`).join('');
+
+      document.getElementById('gb-card').innerHTML = `
+        ${product ? `
+          <div class="flex gap-4 mb-4">
+            ${product.image_url
+              ? `<img src="${product.image_url}" class="w-24 h-24 rounded-xl object-cover">`
+              : `<div class="w-24 h-24 rounded-xl bg-gray-100 flex items-center justify-center text-3xl text-gray-400"><i class="fas fa-box"></i></div>`}
+            <div class="flex-1">
+              <a href="Eesha buying folder/product.html?id=${product.id}" class="font-bold text-lg hover:text-amber-600">${escapeHtml(product.name)}</a>
+              <div class="flex items-baseline gap-2 mt-1">
+                <span class="text-2xl font-extrabold text-amber-600">$${discountPrice}</span>
+                <span class="text-gray-400 line-through">$${Number(product.price).toFixed(2)}</span>
+                <span class="bg-amber-100 text-amber-800 text-xs font-bold px-2 py-0.5 rounded">-${gb.discount_pct}%</span>
+              </div>
+              <div class="text-xs text-gray-500 mt-1">Category: ${escapeHtml(product.category || 'General')}</div>
+            </div>
+          </div>
+        ` : ''}
+
+        <div class="my-6">
+          <div class="flex justify-between text-sm font-medium text-gray-700 mb-2">
+            <span>${gb.current_count} / ${gb.target_count} joined</span>
+            <span>${pct}%</span>
+          </div>
+          <div class="gb-progress-track">
+            <div class="gb-progress-fill" style="width: ${pct}%"></div>
+          </div>
+          <div class="gb-avatars mt-3">${memberAvatars}${emptyAvatars}</div>
+        </div>
+
+        <div class="bg-amber-50 border border-amber-200 rounded-lg p-3 text-sm text-amber-900">
+          <div class="font-semibold mb-1">
+            ${isCompleted ? '✅ Group complete — discount unlocked!' :
+              isExpired ? '⏰ This group buy has expired.' :
+              `⏳ Expires ${new Date(gb.expires_at).toLocaleString()}`}
+          </div>
+          ${isCompleted ? 'You and your friends can now check out at the discounted price.' : ''}
+        </div>
+
+        <div class="flex gap-2 mt-4">
+          ${isCompleted ? `
+            <a href="Eesha buying folder/product.html?id=${product?.id || ''}&gb=${gb.id}" class="flex-1 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 font-bold text-center py-3 rounded-lg hover:opacity-90">
+              <i class="fas fa-shopping-cart"></i> Buy at $${discountPrice}
+            </a>
+          ` : isExpired ? `
+            <button disabled class="flex-1 bg-gray-200 text-gray-500 font-bold py-3 rounded-lg cursor-not-allowed">Expired</button>
+          ` : `
+            <button onclick="joinGroup('${gb.id}')" class="flex-1 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 font-bold py-3 rounded-lg hover:opacity-90">
+              <i class="fas fa-plus"></i> Join group buy
+            </button>
+          `}
+          <button onclick="shareGroup('${gb.id}', '${escapeHtml(product?.name || 'this product')}')" class="px-4 bg-green-500 text-white font-bold rounded-lg hover:bg-green-600">
+            <i class="fab fa-whatsapp text-lg"></i>
+          </button>
+          <button onclick="copyGroupLink('${gb.id}')" class="px-4 bg-gray-100 text-gray-700 font-bold rounded-lg hover:bg-gray-200">
+            <i class="fas fa-link"></i>
+          </button>
+        </div>
+      `;
+    })();
+
+    async function joinGroup(gbId) {
+      // Check login
+      const sess = await window.EdgeFunctions.auth.checkSession();
+      if (!sess.user) {
+        if (confirm('Please login to join the group buy. Go to login page?')) {
+          window.location.href = 'Eesha buying folder/login.html?next=' + encodeURIComponent('/group-buy.html?id=' + gbId);
+        }
+        return;
+      }
+      const r = await window.EdgeFunctions.groupBuy.join(gbId);
+      if (r.success) {
+        // Reload to show updated state
+        window.location.reload();
+      } else {
+        alert('Failed to join: ' + (r.error || 'Unknown error'));
+      }
+    }
+
+    function shareGroup(gbId, productName) {
+      const url = `${window.location.origin}/group-buy.html?id=${gbId}`;
+      const text = `🛍️ Join my group buy for "${productName}" on Cellex! Get 20% off when 3 of us join. ${url}`;
+      window.open(`https://wa.me/?text=${encodeURIComponent(text)}`, '_blank');
+    }
+
+    async function copyGroupLink(gbId) {
+      const url = `${window.location.origin}/group-buy.html?id=${gbId}`;
+      try {
+        await navigator.clipboard.writeText(url);
+        alert('Link copied! Share it with friends.');
+      } catch {
+        window.prompt('Copy this link:', url);
+      }
+    }
+
+    function escapeHtml(s) {
+      return String(s ?? '').replace(/[&<>"']/g, c => ({
+        '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
+      }[c]));
+    }
+  </script>
+</body>
+</html>

index.html

@@ -685,6 +685,28 @@
             </div>
         </section>
 
+        <!-- Live Now (Phase 2 — Live shopping) -->
+        <section id="liveNowSection" class="mt-5 hidden">
+            <div class="flex items-center justify-between mb-3">
+                <div class="flex items-center gap-2">
+                    <div class="w-10 h-10 bg-red-500 rounded-xl flex items-center justify-center shadow-glow">
+                        <i class="fas fa-broadcast-tower text-white text-base"></i>
+                    </div>
+                    <div>
+                        <h2 class="font-display font-extrabold text-base flex items-center gap-2">
+                            Live Now
+                            <span class="inline-block w-2 h-2 bg-red-500 rounded-full animate-pulse"></span>
+                        </h2>
+                        <p class="text-ink-500 text-[11px] -mt-0.5">Watch live demos & buy in real-time</p>
+                    </div>
+                </div>
+                <a href="live.html" class="text-xs font-semibold text-brand-600">All live →</a>
+            </div>
+            <div id="liveNowContainer" class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-2 lg:gap-3">
+                <!-- Live sessions loaded dynamically -->
+            </div>
+        </section>
+
         <!-- Discover Sellers (social commerce — Phase 1) -->
         <section id="discoverSellers" class="mt-5">
             <div class="flex items-center justify-between mb-3">
@@ -904,6 +926,8 @@
             // Phase 1 — social commerce
             loadDiscoverSellers();
             loadFollowingFeed();
+            // Phase 2 — live shopping
+            loadLiveNow();
         }
 
         // ===== Auth Functions (via edge function) =====
@@ -1327,6 +1351,43 @@
             if (diff < 604800) return Math.floor(diff / 86400) + 'd ago';
             return d.toLocaleDateString();
         }
+
+        // ====================================================================
+        // Phase 2 — Live shopping "Live Now" carousel
+        // ====================================================================
+        async function loadLiveNow() {
+            const section = document.getElementById('liveNowSection');
+            const container = document.getElementById('liveNowContainer');
+            if (!section || !container) return;
+            try {
+                const resp = await window.EdgeFunctions.live.list('live');
+                if (!resp.success || !resp.sessions || resp.sessions.length === 0) return;
+                section.classList.remove('hidden');
+                container.innerHTML = resp.sessions.slice(0, 6).map(s => {
+                    const sellerName = s.seller?.business_name || 'Seller';
+                    const sellerImg = s.seller?.profile_image;
+                    return `
+                        <a href="live-watch.html?id=${s.id}" class="bg-white rounded-2xl border border-ink-100 shadow-card overflow-hidden lift block hover:border-red-400 transition">
+                            <div class="aspect-video bg-gradient-to-br from-red-500 to-pink-600 flex items-center justify-center text-white relative">
+                                <i class="fas fa-broadcast-tower text-3xl"></i>
+                                <span class="absolute top-2 left-2 bg-red-600 text-white text-[10px] font-bold px-2 py-0.5 rounded-full uppercase">● Live</span>
+                                <span class="absolute top-2 right-2 bg-black/40 text-white text-[10px] px-2 py-0.5 rounded-full">👁 ${s.viewer_count || 0}</span>
+                            </div>
+                            <div class="p-3">
+                                <div class="font-bold text-sm line-clamp-1">${escapeHtml(s.title)}</div>
+                                <div class="flex items-center gap-1.5 mt-1.5 text-xs text-ink-500">
+                                    ${sellerImg
+                                        ? `<img src="${sellerImg}" class="w-4 h-4 rounded-full">`
+                                        : `<div class="w-4 h-4 rounded-full bg-gradient-to-br from-amber-400 to-amber-600 flex items-center justify-center text-[8px] font-bold text-ink-900">${(sellerName||'?').charAt(0)}</div>`}
+                                    <span class="truncate">${escapeHtml(sellerName)}</span>
+                                </div>
+                            </div>
+                        </a>`;
+                }).join('');
+            } catch (e) {
+                console.error('liveNow error:', e);
+            }
+        }
     </script>
 </body>
 </html>

js/config/edge-functions.js

@@ -233,6 +233,50 @@
             feed: (limit = 20, offset = 0) => call('social', { op: 'feed', limit, offset }),
         },
 
+        // ---- Phase 2: Reviews & Ratings ----
+        reviews: {
+            byProduct: (productId) => call('reviews', { op: 'by_product', productId }),
+            bySeller:  (sellerId)  => call('reviews', { op: 'by_seller', sellerId }),
+            create:    (data)      => call('reviews', { op: 'create', ...data }),
+            helpful:   (reviewId)  => call('reviews', { op: 'helpful', reviewId }),
+            delete:    (reviewId)  => call('reviews', { op: 'delete', reviewId }),
+        },
+
+        // ---- Phase 2: Group Buying (Pinduoduo) ----
+        groupBuy: {
+            create: (productId, targetCount = 3, discountPct = 20) =>
+                call('group-buy', { op: 'create', productId, targetCount, discountPct }),
+            join:   (groupBuyId) => call('group-buy', { op: 'join', groupBuyId }),
+            status: (groupBuyId) => call('group-buy', { op: 'status', groupBuyId }),
+            active: (productId)  => call('group-buy', { op: 'active', productId }),
+            mine:   ()           => call('group-buy', { op: 'mine' }),
+            cancel: (groupBuyId) => call('group-buy', { op: 'cancel', groupBuyId }),
+        },
+
+        // ---- Phase 2: Wishlist Sharing ----
+        wishlistShare: {
+            share:     (title = null) => call('wishlist-share', { op: 'share', title }),
+            getShared: (token)        => call('wishlist-share', { op: 'get_shared', token }),
+            myShares:  ()             => call('wishlist-share', { op: 'my_shares' }),
+            revoke:    (token)        => call('wishlist-share', { op: 'revoke', token }),
+        },
+
+        // ---- Phase 2: Live Shopping (Whatnot) ----
+        live: {
+            // Public
+            list:     (status = 'live')    => call('live', { op: 'list', status }),
+            get:      (sessionId)          => call('live', { op: 'get', sessionId }),
+            messages: (sessionId, afterId = 0) => call('live', { op: 'messages', sessionId, afterId }),
+
+            // Auth
+            start:   (data)                => call('live', { op: 'start', ...data }),
+            end:     (sessionId)           => call('live', { op: 'end', sessionId }),
+            join:    (sessionId, name = null) => call('live', { op: 'join', sessionId, name }),
+            leave:   (sessionId)           => call('live', { op: 'leave', sessionId }),
+            message: (sessionId, message)  => call('live', { op: 'message', sessionId, message }),
+            myNext:  ()                    => call('live', { op: 'mynext' }),
+        },
+
         call,
     };
 

live-watch.html

@@ -0,0 +1,269 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Live · Cellex</title>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="css/common.css">
+  <script src="js/config/edge-functions.js?v=2"></script>
+  <style>
+    body { background: #0f172a; color: #e2e8f0; margin: 0; }
+    .lw-layout {
+      display: grid;
+      grid-template-columns: 1fr 320px;
+      gap: 1rem;
+      max-width: 1400px;
+      margin: 0 auto;
+      padding: 1rem;
+      min-height: calc(100vh - 60px);
+    }
+    @media (max-width: 900px) {
+      .lw-layout { grid-template-columns: 1fr; }
+    }
+    .lw-stream {
+      background: #000; border-radius: 12px; aspect-ratio: 16/9;
+      display: flex; align-items: center; justify-content: center;
+      color: #94a3b8; position: relative; overflow: hidden;
+    }
+    .lw-stream iframe { width: 100%; height: 100%; border: 0; }
+    .lw-chat {
+      background: #1e293b; border-radius: 12px;
+      display: flex; flex-direction: column;
+      height: calc(100vh - 120px); min-height: 400px;
+    }
+    .lw-messages { flex: 1; overflow-y: auto; padding: 0.75rem; }
+    .lw-msg { padding: 0.4rem 0.5rem; border-bottom: 1px solid rgba(255,255,255,0.05); font-size: 0.85rem; }
+    .lw-msg.system { color: #94a3b8; font-style: italic; font-size: 0.75rem; }
+    .lw-msg.purchase { background: rgba(16, 185, 129, 0.1); color: #6ee7b7; font-weight: 600; }
+    .lw-msg.join { color: #94a3b8; font-size: 0.75rem; }
+    .lw-msg .name { font-weight: 600; color: #fbbf24; }
+    .lw-input { padding: 0.75rem; border-top: 1px solid rgba(255,255,255,0.08); display: flex; gap: 0.5rem; }
+    .lw-input input {
+      flex: 1; padding: 0.5rem 0.75rem;
+      background: #0f172a; border: 1px solid rgba(255,255,255,0.1);
+      color: #e2e8f0; border-radius: 8px; font-size: 0.85rem;
+    }
+    .lw-input button { padding: 0 1rem; background: #f59e0b; color: #0f172a; border: none; border-radius: 8px; font-weight: 700; }
+    .live-badge {
+      display: inline-flex; align-items: center; gap: 4px;
+      background: #ef4444; color: #fff;
+      padding: 2px 8px; border-radius: 4px;
+      font-size: 10px; font-weight: 700; text-transform: uppercase;
+    }
+    .live-red-dot {
+      display: inline-block; width: 8px; height: 8px;
+      background: #fff; border-radius: 50%; animation: pulse 1.5s infinite;
+    }
+    @keyframes pulse {
+      0%, 100% { opacity: 1; }
+      50% { opacity: 0.4; }
+    }
+  </style>
+</head>
+<body>
+  <div class="lw-layout">
+    <!-- Stream + product -->
+    <div>
+      <div class="lw-stream" id="streamBox">
+        <div class="text-center">
+          <i class="fas fa-video text-4xl"></i>
+          <div class="mt-2 text-sm">Loading live session…</div>
+        </div>
+      </div>
+
+      <div class="mt-4 bg-ink-900 rounded-xl p-4" id="streamInfo">
+        <div class="flex items-center gap-2 mb-2">
+          <span class="live-badge"><span class="live-red-dot"></span> LIVE</span>
+          <span class="text-gray-400 text-sm" id="viewerCount">👁 0 viewers</span>
+        </div>
+        <h1 class="text-xl font-bold text-white" id="streamTitle">Loading…</h1>
+        <div class="text-sm text-gray-400 mt-1" id="streamSeller"></div>
+        <p class="text-gray-400 text-sm mt-2" id="streamDesc"></p>
+      </div>
+
+      <!-- Featured product -->
+      <div class="mt-3 bg-gradient-to-br from-amber-900/40 to-ink-900 border border-amber-600/30 rounded-xl p-4 hidden" id="featuredCard">
+        <div class="text-xs font-bold text-amber-400 uppercase tracking-wide mb-2">
+          <i class="fas fa-star"></i> Featured product
+        </div>
+        <div class="flex gap-3">
+          <img id="featuredImg" src="" class="w-20 h-20 rounded-lg object-cover bg-gray-700" alt="">
+          <div class="flex-1">
+            <div class="font-bold text-white" id="featuredName"></div>
+            <div class="text-amber-400 text-xl font-bold mt-1" id="featuredPrice"></div>
+            <a href="#" id="featuredBuyLink" class="inline-block mt-2 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 font-bold text-sm px-4 py-1.5 rounded-lg hover:opacity-90">
+              <i class="fas fa-shopping-cart"></i> Buy now
+            </a>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Chat sidebar -->
+    <div class="lw-chat">
+      <div class="px-3 py-2 border-b border-white/5 text-sm font-bold text-white flex items-center gap-2">
+        <i class="fas fa-comments text-amber-400"></i> Live chat
+        <span class="ml-auto text-xs text-gray-400" id="chatCount">0</span>
+      </div>
+      <div class="lw-messages" id="chatMessages">
+        <div class="lw-msg system">Connecting to chat…</div>
+      </div>
+      <div class="lw-input">
+        <input type="text" id="chatInput" placeholder="Type a message…" maxlength="280">
+        <button onclick="sendMessage()" id="sendBtn">Send</button>
+      </div>
+    </div>
+  </div>
+
+  <script>
+    let sessionId = null;
+    let lastMsgId = 0;
+    let pollTimer = null;
+    let currentUser = null;
+    let hasJoined = false;
+
+    (async () => {
+      const params = new URLSearchParams(location.search);
+      sessionId = params.get('id');
+      if (!sessionId) {
+        alert('No session ID');
+        return;
+      }
+
+      // Check auth (optional — can watch anonymously)
+      const sess = await window.EdgeFunctions.auth.checkSession();
+      currentUser = sess.user || null;
+
+      // Load session details
+      const r = await window.EdgeFunctions.live.get(sessionId);
+      if (!r.success || !r.session) {
+        document.getElementById('streamBox').innerHTML = '<div class="text-red-400">Live session not found.</div>';
+        return;
+      }
+      const s = r.session;
+      document.title = s.title + ' · Cellex Live';
+      document.getElementById('streamTitle').textContent = s.title;
+      document.getElementById('streamDesc').textContent = s.description || '';
+      document.getElementById('streamSeller').textContent =
+        (s.seller?.business_name || 'Seller') + ' · started ' + (s.started_at ? new Date(s.started_at).toLocaleString() : '');
+      document.getElementById('viewerCount').textContent = '👁 ' + (s.viewer_count || 0) + ' viewers';
+
+      // Stream embed
+      const streamBox = document.getElementById('streamBox');
+      if (s.stream_url && s.stream_platform === 'youtube') {
+        const embed = s.stream_url.replace('watch?v=', 'embed/').split('&')[0];
+        streamBox.innerHTML = `<iframe src="${embed}" allowfullscreen></iframe>`;
+      } else if (s.stream_url && s.stream_platform === 'hls') {
+        streamBox.innerHTML = `<video src="${s.stream_url}" controls autoplay muted style="width:100%;height:100%;"></video>`;
+      } else {
+        streamBox.innerHTML = `
+          <div class="text-center">
+            <i class="fas fa-broadcast-tower text-5xl text-amber-400"></i>
+            <div class="mt-3 text-white font-bold">Audio/Text-only live</div>
+            <div class="text-gray-400 text-sm mt-1">The seller is broadcasting in text chat mode.</div>
+          </div>`;
+      }
+
+      // Featured product
+      if (s.featured) {
+        const card = document.getElementById('featuredCard');
+        card.classList.remove('hidden');
+        document.getElementById('featuredImg').src = s.featured.image_url || '';
+        document.getElementById('featuredName').textContent = s.featured.name;
+        document.getElementById('featuredPrice').textContent = '$' + Number(s.featured.price).toFixed(2);
+        document.getElementById('featuredBuyLink').href = 'Eesha buying folder/product.html?id=' + s.featured.id + '&live=' + sessionId;
+      }
+
+      // Auto-join if logged in
+      if (currentUser && !hasJoined) {
+        const name = currentUser.email ? currentUser.email.split('@')[0] : 'Guest';
+        await window.EdgeFunctions.live.join(sessionId, name);
+        hasJoined = true;
+      }
+
+      // Start polling messages
+      await pollMessages();
+      pollTimer = setInterval(pollMessages, 2500);
+
+      // Mark join in chat
+      document.getElementById('chatMessages').innerHTML = '<div class="lw-msg system">You joined the live session.</div>';
+
+      // Enter to send
+      document.getElementById('chatInput').addEventListener('keypress', (e) => {
+        if (e.key === 'Enter') sendMessage();
+      });
+
+      // Cleanup on leave
+      window.addEventListener('beforeunload', async () => {
+        if (currentUser && hasJoined) {
+          // Fire-and-forget leave call
+          fetch('/api/live', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ op: 'leave', sessionId }),
+            credentials: 'same-origin',
+          });
+        }
+      });
+    })();
+
+    async function pollMessages() {
+      if (!sessionId) return;
+      const r = await window.EdgeFunctions.live.messages(sessionId, lastMsgId);
+      if (!r.success || !r.messages || r.messages.length === 0) return;
+
+      const container = document.getElementById('chatMessages');
+      r.messages.forEach(msg => {
+        if (msg.id <= lastMsgId) return;
+        lastMsgId = Math.max(lastMsgId, msg.id);
+        const div = document.createElement('div');
+        div.className = 'lw-msg ' + (msg.msg_type || 'chat');
+        if (msg.msg_type === 'system') {
+          div.textContent = msg.message;
+        } else if (msg.msg_type === 'join') {
+          div.textContent = '👥 ' + msg.message;
+        } else if (msg.msg_type === 'purchase') {
+          div.innerHTML = '🛍️ ' + escapeHtml(msg.message);
+        } else {
+          div.innerHTML = '<span class="name">' + escapeHtml(msg.user_name) + ':</span> ' + escapeHtml(msg.message);
+        }
+        container.appendChild(div);
+      });
+      // Auto-scroll
+      container.scrollTop = container.scrollHeight;
+      // Update count
+      document.getElementById('chatCount').textContent = lastMsgId;
+    }
+
+    async function sendMessage() {
+      const input = document.getElementById('chatInput');
+      const msg = input.value.trim();
+      if (!msg) return;
+      if (!currentUser) {
+        if (confirm('Please login to chat. Go to login page?')) {
+          window.location.href = 'Eesha buying folder/login.html?next=' + encodeURIComponent('/live-watch.html?id=' + sessionId);
+        }
+        return;
+      }
+      input.value = '';
+      // Optimistic append
+      const container = document.getElementById('chatMessages');
+      const div = document.createElement('div');
+      div.className = 'lw-msg';
+      div.innerHTML = '<span class="name">' + escapeHtml(currentUser.email?.split('@')[0] || 'You') + ':</span> ' + escapeHtml(msg);
+      container.appendChild(div);
+      container.scrollTop = container.scrollHeight;
+
+      await window.EdgeFunctions.live.message(sessionId, msg);
+    }
+
+    function escapeHtml(s) {
+      return String(s ?? '').replace(/[&<>"']/g, c => ({
+        '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
+      }[c]));
+    }
+  </script>
+</body>
+</html>

live.html

@@ -0,0 +1,141 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Live Shopping · Cellex</title>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="css/common.css">
+  <script src="js/config/edge-functions.js?v=2"></script>
+  <style>
+    body { background: #0f172a; color: #e2e8f0; }
+    .live-hero {
+      background: linear-gradient(135deg, #1e293b 0%, #0f172a 100%);
+      padding: 2.5rem 1.5rem;
+      border-bottom: 1px solid rgba(255,255,255,0.08);
+    }
+    .live-red-dot {
+      display: inline-block; width: 10px; height: 10px;
+      background: #ef4444; border-radius: 50%;
+      animation: pulse 1.5s infinite;
+    }
+    @keyframes pulse {
+      0%, 100% { opacity: 1; }
+      50% { opacity: 0.4; }
+    }
+    .live-card {
+      background: #1e293b; border-radius: 12px; overflow: hidden;
+      border: 1px solid rgba(255,255,255,0.06);
+      transition: transform 0.15s, border-color 0.15s;
+      display: block; color: inherit; text-decoration: none;
+    }
+    .live-card:hover { transform: translateY(-2px); border-color: #f59e0b; }
+    .live-thumb {
+      width: 100%; aspect-ratio: 16/9; object-fit: cover;
+      background: #0f172a; display: flex; align-items: center; justify-content: center;
+      color: #94a3b8; font-size: 2.5rem;
+      position: relative;
+    }
+    .live-thumb .live-badge {
+      position: absolute; top: 8px; left: 8px;
+      background: #ef4444; color: #fff;
+      padding: 2px 8px; border-radius: 4px;
+      font-size: 10px; font-weight: 700; text-transform: uppercase;
+    }
+  </style>
+</head>
+<body>
+  <div id="header-mount"></div>
+  <script>
+    // Dark-theme header injection
+    fetch('shared/header.html').then(r => r.text()).then(h => {
+      document.getElementById('header-mount').innerHTML = h;
+    });
+  </script>
+
+  <div class="live-hero">
+    <div class="max-w-6xl mx-auto">
+      <div class="inline-flex items-center gap-2 bg-red-500/20 text-red-300 px-3 py-1 rounded-full text-xs font-bold uppercase tracking-wide">
+        <span class="live-red-dot"></span> Live Shopping
+      </div>
+      <h1 class="text-3xl md:text-4xl font-extrabold mt-3 text-white">Shop in real-time with sellers</h1>
+      <p class="text-gray-400 mt-2 max-w-2xl">Watch live demos, ask questions in chat, and buy the featured product with one click.</p>
+      <a href="seller/go-live.html" class="inline-flex items-center gap-2 mt-4 bg-gradient-to-r from-amber-400 to-amber-600 text-ink-900 font-bold px-4 py-2 rounded-lg text-sm hover:opacity-90">
+        <i class="fas fa-video"></i> Go live as a seller
+      </a>
+    </div>
+  </div>
+
+  <main class="max-w-6xl mx-auto p-4">
+    <h2 class="text-xl font-bold text-white mt-4 mb-3">
+      <span class="live-red-dot"></span> Live now
+    </h2>
+    <div id="liveNowGrid" class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-4 mb-8">
+      <div class="col-span-full text-center py-8 text-gray-500">
+        <i class="fas fa-spinner fa-spin text-2xl"></i>
+        <div class="mt-2">Loading live sessions…</div>
+      </div>
+    </div>
+
+    <h2 class="text-xl font-bold text-white mt-8 mb-3">Recent sessions</h2>
+    <div id="recentGrid" class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-4"></div>
+  </main>
+
+  <script>
+    (async () => {
+      // Live now
+      const liveResp = await window.EdgeFunctions.live.list('live');
+      const liveNow = document.getElementById('liveNowGrid');
+      if (liveResp.success && liveResp.sessions.length > 0) {
+        liveNow.innerHTML = liveResp.sessions.map(s => liveCard(s, true)).join('');
+      } else {
+        liveNow.innerHTML = `
+          <div class="col-span-full text-center py-12 text-gray-400">
+            <i class="fas fa-video-slash text-4xl text-gray-600"></i>
+            <div class="mt-2">No live sessions right now.</div>
+            <div class="text-xs mt-1">Check back later or follow your favorite sellers for notifications.</div>
+          </div>`;
+      }
+
+      // Recent (ended)
+      const recentResp = await window.EdgeFunctions.live.list('ended');
+      const recent = document.getElementById('recentGrid');
+      if (recentResp.success && recentResp.sessions.length > 0) {
+        recent.innerHTML = recentResp.sessions.map(s => liveCard(s, false)).join('');
+      } else {
+        recent.innerHTML = '<div class="col-span-full text-gray-500 text-sm py-4">No recent sessions.</div>';
+      }
+    })();
+
+    function liveCard(s, isLive) {
+      const sellerName = s.seller?.business_name || 'Seller';
+      const sellerImg = s.seller?.profile_image;
+      const thumb = s.stream_url && s.stream_platform === 'youtube'
+        ? `<div class="live-thumb"><iframe width="100%" height="100%" src="${s.stream_url.replace('watch?v=', 'embed/')}" frameborder="0" allowfullscreen></iframe></div>`
+        : `<div class="live-thumb">${s.featured_product_id ? '<i class="fas fa-box"></i>' : '<i class="fas fa-video"></i>'}${isLive ? '<span class="live-badge">LIVE</span>' : ''}</div>`;
+      return `
+        <a href="live-watch.html?id=${s.id}" class="live-card">
+          ${thumb}
+          <div class="p-3">
+            <div class="font-bold text-white text-sm line-clamp-1">${escapeHtml(s.title)}</div>
+            <div class="text-xs text-gray-400 mt-1 flex items-center gap-2">
+              ${sellerImg
+                ? `<img src="${sellerImg}" class="w-5 h-5 rounded-full">`
+                : `<div class="w-5 h-5 rounded-full bg-gradient-to-br from-amber-400 to-amber-600 flex items-center justify-center text-[10px] font-bold text-ink-900">${(sellerName||'?').charAt(0)}</div>`}
+              <span>${escapeHtml(sellerName)}</span>
+              ${isLive ? `<span class="ml-auto text-red-400">👁 ${s.viewer_count || 0}</span>` : ''}
+            </div>
+            ${s.description ? `<div class="text-xs text-gray-500 mt-1 line-clamp-2">${escapeHtml(s.description)}</div>` : ''}
+          </div>
+        </a>`;
+    }
+
+    function escapeHtml(s) {
+      return String(s ?? '').replace(/[&<>"']/g, c => ({
+        '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
+      }[c]));
+    }
+  </script>
+</body>
+</html>

seller-profile.html

@@ -131,6 +131,7 @@
   <div class="sp-section">
     <div class="sp-tabs">
       <a class="sp-tab active" data-tab="products">Products</a>
+      <a class="sp-tab" data-tab="reviews">Reviews</a>
       <a class="sp-tab" data-tab="about">About</a>
       <a class="sp-tab" data-tab="activity">Activity</a>
     </div>
@@ -142,6 +143,11 @@
       </div>
     </div>
 
+    <div class="sp-card" id="tab-reviews" style="display:none;">
+      <h2>Customer reviews <span id="reviewsAvgBadge" class="text-sm font-normal text-gray-500"></span></h2>
+      <div id="reviews-list" class="sp-loading">Loading reviews…</div>
+    </div>
+
     <div class="sp-card" id="tab-about" style="display:none;">
       <h2>About</h2>
       <p id="about-text" style="color:#475569;line-height:1.7;"></p>
@@ -317,12 +323,49 @@
           e.preventDefault();
           document.querySelectorAll('.sp-tab').forEach(x => x.classList.remove('active'));
           t.classList.add('active');
-          ['products','about','activity'].forEach(name => {
+          ['products','reviews','about','activity'].forEach(name => {
             document.getElementById('tab-' + name).style.display = name === t.dataset.tab ? 'block' : 'none';
           });
+          // Lazy-load reviews
+          if (t.dataset.tab === 'reviews' && !window._reviewsLoaded) {
+            loadSellerReviews(sellerId);
+            window._reviewsLoaded = true;
+          }
         });
       });
     })();
+
+    async function loadSellerReviews(sellerId) {
+      const r = await window.EdgeFunctions.reviews.bySeller(sellerId);
+      const list = document.getElementById('reviews-list');
+      list.classList.remove('sp-loading');
+      if (!r.success) {
+        list.innerHTML = '<div class="sp-loading">Failed to load reviews.</div>';
+        return;
+      }
+      const summary = r.summary;
+      document.getElementById('reviewsAvgBadge').textContent =
+        summary.count > 0 ? `· ${summary.avg.toFixed(1)} ★ (${summary.count})` : '';
+      if (!r.reviews || r.reviews.length === 0) {
+        list.innerHTML = '<div class="sp-loading">No reviews yet.</div>';
+        return;
+      }
+      list.innerHTML = r.reviews.map(rev => `
+        <div class="activity-item">
+          <div class="activity-icon ${rev.rating >= 4 ? 'green' : rev.rating >= 3 ? '' : 'pink'}">
+            <i class="fas fa-star"></i>
+          </div>
+          <div class="activity-body">
+            <div class="activity-title">
+              ${rev.product ? `<a href="Eesha buying folder/product.html?id=${rev.product.id}" style="color:#d97706;text-decoration:none;">${escapeHtml(rev.product.name)}</a>` : ''}
+              — ${'★'.repeat(rev.rating)}${'☆'.repeat(5 - rev.rating)}
+            </div>
+            ${rev.title ? `<div style="font-weight:500;margin-top:0.15rem;">${escapeHtml(rev.title)}</div>` : ''}
+            ${rev.comment ? `<div style="color:#475569;font-size:0.9rem;margin-top:0.15rem;">${escapeHtml(rev.comment)}</div>` : ''}
+            <div class="activity-meta">${new Date(rev.created_at).toLocaleDateString()}${rev.verified_purchase ? ' · ✓ Verified purchase' : ''}</div>
+          </div>
+        </div>`).join('');
+    }
   </script>
 </body>
 </html>

seller/go-live.html

@@ -0,0 +1,207 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Go Live · Cellex Seller</title>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <link rel="stylesheet" href="css/dashboard.css">
+  <script src="../js/config/edge-functions.js"></script>
+  <script src="js/shared.js"></script>
+</head>
+<body class="seller-page">
+  <button class="seller-mobile-toggle" aria-label="Toggle menu"><i class="fas fa-bars"></i></button>
+  <aside class="seller-sidebar"></aside>
+
+  <main class="seller-main">
+    <div class="seller-topbar">
+      <div>
+        <h1>Go Live</h1>
+        <div class="subtitle">Start a live shopping session</div>
+      </div>
+      <a href="../live.html" class="btn-seller secondary">
+        <i class="fas fa-video"></i> Watch others
+      </a>
+    </div>
+
+    <div class="seller-panel">
+      <div class="seller-panel-header"><h2>Start a new session</h2></div>
+      <form class="seller-form" id="goLiveForm" style="max-width:560px;">
+        <div class="form-group">
+          <label for="title">Stream title *</label>
+          <input type="text" id="title" required placeholder="e.g. 🔥 Flash sale — Electronics deals!">
+        </div>
+        <div class="form-group">
+          <label for="description">Description</label>
+          <textarea id="description" rows="3" placeholder="What will you showcase? What's the special deal?"></textarea>
+        </div>
+        <div class="form-group">
+          <label for="featuredProductId">Featured product (buyers can buy this during the stream)</label>
+          <select id="featuredProductId">
+            <option value="">Loading your products…</option>
+          </select>
+        </div>
+        <div class="form-group">
+          <label for="streamPlatform">Stream source</label>
+          <select id="streamPlatform">
+            <option value="none">Text-only (chat-only live)</option>
+            <option value="youtube">YouTube live</option>
+            <option value="hls">HLS video (.m3u8 URL)</option>
+          </select>
+        </div>
+        <div class="form-group" id="streamUrlGroup" style="display:none;">
+          <label for="streamUrl">Stream URL</label>
+          <input type="url" id="streamUrl" placeholder="https://youtube.com/watch?v=…  or  https://…/stream.m3u8">
+        </div>
+        <button type="submit" class="btn-seller" style="margin-top:1rem;">
+          <i class="fas fa-broadcast-tower"></i> Go live now
+        </button>
+      </form>
+    </div>
+
+    <div class="seller-panel hidden" id="liveStatusPanel">
+      <div class="seller-panel-header">
+        <h2>🔴 You are live now</h2>
+        <button class="btn-seller danger small" id="endStreamBtn">
+          <i class="fas fa-stop"></i> End stream
+        </button>
+      </div>
+      <div style="display:flex;align-items:center;gap:1rem;flex-wrap:wrap;">
+        <div>
+          <div class="stat-label">Title</div>
+          <div class="stat-value" style="font-size:1.1rem;" id="liveTitle">—</div>
+        </div>
+        <div>
+          <div class="stat-label">Viewers</div>
+          <div class="stat-value" style="font-size:1.1rem;" id="liveViewers">0</div>
+        </div>
+        <div>
+          <div class="stat-label">Duration</div>
+          <div class="stat-value" style="font-size:1.1rem;" id="liveDuration">0:00</div>
+        </div>
+        <div style="margin-left:auto;">
+          <a id="watchLink" href="#" target="_blank" class="btn-seller secondary">
+            <i class="fas fa-external-link"></i> Open watch page
+          </a>
+        </div>
+      </div>
+      <div class="mt-3 p-3 bg-amber-50 border border-amber-200 rounded-lg text-sm text-amber-900">
+        <strong>💡 Tip:</strong> Share this link on WhatsApp so buyers can join:<br>
+        <code id="shareLink" style="font-size:0.85rem;"></code>
+      </div>
+    </div>
+  </main>
+
+  <script>
+    let liveSessionId = null;
+    let liveStartedAt = null;
+    let durationTimer = null;
+    let viewerTimer = null;
+
+    (async () => {
+      const user = await window.SellerUI.requireSeller();
+      if (!user) return;
+      window.SellerUI.mountSidebar('live');
+
+      // Load seller's products for the featured dropdown
+      const prodResp = await window.EdgeFunctions.sellerProducts.list();
+      const select = document.getElementById('featuredProductId');
+      if (prodResp.success && prodResp.products.length) {
+        select.innerHTML = '<option value="">— None —</option>' +
+          prodResp.products.map(p => `<option value="${p.id}">${p.name} — $${Number(p.price).toFixed(2)}</option>`).join('');
+      } else {
+        select.innerHTML = '<option value="">No products yet — add one first</option>';
+      }
+
+      // Stream URL visibility
+      document.getElementById('streamPlatform').addEventListener('change', (e) => {
+        document.getElementById('streamUrlGroup').style.display = e.target.value === 'none' ? 'none' : 'block';
+      });
+
+      // Check if seller already has an active session
+      const nextResp = await window.EdgeFunctions.live.myNext();
+      if (nextResp.success && nextResp.session) {
+        showLiveStatus(nextResp.session);
+      }
+
+      // Form submit
+      document.getElementById('goLiveForm').addEventListener('submit', handleStart);
+      document.getElementById('endStreamBtn').addEventListener('click', handleEnd);
+    })();
+
+    async function handleStart(e) {
+      e.preventDefault();
+      const data = {
+        title: document.getElementById('title').value.trim(),
+        description: document.getElementById('description').value.trim(),
+        streamPlatform: document.getElementById('streamPlatform').value,
+        streamUrl: document.getElementById('streamUrl').value.trim() || null,
+      };
+      const fp = document.getElementById('featuredProductId').value;
+      if (fp) data.featuredProductId = Number(fp);
+
+      if (!data.title) {
+        window.SellerUI.toast('Please enter a title', 'error');
+        return;
+      }
+
+      const r = await window.EdgeFunctions.live.start(data);
+      if (r.success) {
+        window.SellerUI.toast('🔴 You are live!');
+        showLiveStatus(r.session);
+      } else {
+        window.SellerUI.toast('Failed to go live: ' + (r.error || ''), 'error');
+      }
+    }
+
+    function showLiveStatus(session) {
+      liveSessionId = session.id;
+      liveStartedAt = session.started_at ? new Date(session.started_at) : new Date();
+      document.getElementById('liveStatusPanel').classList.remove('hidden');
+      document.getElementById('liveTitle').textContent = session.title;
+      const url = `${window.location.origin}/live-watch.html?id=${session.id}`;
+      document.getElementById('watchLink').href = url;
+      document.getElementById('shareLink').textContent = url;
+
+      // Duration timer
+      if (durationTimer) clearInterval(durationTimer);
+      durationTimer = setInterval(() => {
+        const secs = Math.floor((Date.now() - liveStartedAt.getTime()) / 1000);
+        const mm = Math.floor(secs / 60), ss = secs % 60;
+        document.getElementById('liveDuration').textContent = `${mm}:${ss.toString().padStart(2,'0')}`;
+      }, 1000);
+
+      // Viewer poll
+      if (viewerTimer) clearInterval(viewerTimer);
+      viewerTimer = setInterval(async () => {
+        const r = await window.EdgeFunctions.live.get(liveSessionId);
+        if (r.success) {
+          document.getElementById('liveViewers').textContent = r.session.viewer_count || 0;
+          if (r.session.status !== 'live') {
+            // Stream ended (e.g. from another tab)
+            clearInterval(durationTimer);
+            clearInterval(viewerTimer);
+            document.getElementById('liveStatusPanel').classList.add('hidden');
+            window.SellerUI.toast('Stream ended');
+          }
+        }
+      }, 5000);
+    }
+
+    async function handleEnd() {
+      if (!liveSessionId) return;
+      if (!confirm('End the live session?')) return;
+      const r = await window.EdgeFunctions.live.end(liveSessionId);
+      if (r.success) {
+        clearInterval(durationTimer);
+        clearInterval(viewerTimer);
+        document.getElementById('liveStatusPanel').classList.add('hidden');
+        liveSessionId = null;
+        window.SellerUI.toast('Stream ended');
+      } else {
+        window.SellerUI.toast('Failed to end: ' + (r.error || ''), 'error');
+      }
+    }
+  </script>
+</body>
+</html>

seller/js/shared.js

@@ -25,6 +25,7 @@
       { key: 'dashboard', href: 'index.html',          icon: 'fa-gauge-high',     label: 'Dashboard' },
       { key: 'products',  href: 'products.html',       icon: 'fa-box',            label: 'Products' },
       { key: 'orders',    href: 'orders.html',         icon: 'fa-receipt',        label: 'Orders' },
+      { key: 'live',      href: 'go-live.html',        icon: 'fa-broadcast-tower',label: 'Go Live' },
       { key: 'profile',   href: 'profile.html',        icon: 'fa-store',          label: 'Seller Profile' },
       { key: 'academy',   href: 'academy.html',        icon: 'fa-graduation-cap', label: 'Academy' },
       { key: 'settings',  href: 'settings.html',       icon: 'fa-gear',           label: 'Settings' },

shared-wishlist.html

@@ -0,0 +1,101 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Shared Wishlist · Cellex</title>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="css/common.css">
+  <script src="js/config/edge-functions.js?v=2"></script>
+  <style>
+    body { background: #f8fafc; }
+    .sw-hero {
+      background: linear-gradient(135deg, #fef3c7 0%, #fde68a 100%);
+      padding: 2.5rem 1.5rem;
+      border-bottom: 1px solid #fcd34d;
+    }
+    .sw-product-card {
+      background: #fff; border-radius: 12px;
+      border: 1px solid #e2e8f0; overflow: hidden;
+      transition: transform 0.15s, box-shadow 0.15s;
+      display: block; color: inherit; text-decoration: none;
+    }
+    .sw-product-card:hover { transform: translateY(-2px); box-shadow: 0 6px 14px rgba(0,0,0,0.08); }
+    .sw-product-card img, .sw-product-card .ph {
+      width: 100%; aspect-ratio: 1; object-fit: cover;
+      background: #f1f5f9; display: flex; align-items: center; justify-content: center;
+      color: #94a3b8; font-size: 2rem;
+    }
+  </style>
+</head>
+<body>
+  <div id="header-mount"></div>
+  <script>fetch('shared/header.html').then(r=>r.text()).then(h=>document.getElementById('header-mount').innerHTML=h);</script>
+
+  <div class="sw-hero">
+    <div class="max-w-5xl mx-auto">
+      <div class="inline-flex items-center gap-2 bg-amber-500 text-ink-900 px-3 py-1 rounded-full text-xs font-bold uppercase tracking-wide">
+        <i class="fas fa-gift"></i> Shared Wishlist
+      </div>
+      <h1 class="text-2xl md:text-3xl font-extrabold mt-3" id="sw-title">Loading…</h1>
+      <div class="text-sm text-gray-700 mt-1" id="sw-meta"></div>
+    </div>
+  </div>
+
+  <main class="max-w-5xl mx-auto p-4">
+    <div id="sw-content" class="py-8 text-center text-gray-500">
+      <i class="fas fa-spinner fa-spin text-2xl"></i>
+      <div class="mt-2">Loading wishlist…</div>
+    </div>
+  </main>
+
+  <script>
+    (async () => {
+      const params = new URLSearchParams(location.search);
+      const token = params.get('token');
+      if (!token) {
+        document.getElementById('sw-content').innerHTML = '<div class="py-8 text-red-500">No share token provided.</div>';
+        return;
+      }
+      const r = await window.EdgeFunctions.wishlistShare.getShared(token);
+      if (!r.success) {
+        document.getElementById('sw-content').innerHTML = `<div class="py-8 text-red-500">${escapeHtml(r.error || 'Share link not found.')}</div>`;
+        return;
+      }
+      document.getElementById('sw-title').textContent = r.wishlist.title;
+      document.getElementById('sw-meta').textContent =
+        `Shared on ${new Date(r.wishlist.created_at).toLocaleDateString()} · ${r.wishlist.view_count} view${r.wishlist.view_count !== 1 ? 's' : ''}`;
+
+      const items = r.items || [];
+      if (items.length === 0) {
+        document.getElementById('sw-content').innerHTML = '<div class="py-12 text-center text-gray-500"><i class="fas fa-heart text-3xl"></i><div class="mt-2">This wishlist is empty.</div></div>';
+        return;
+      }
+
+      document.getElementById('sw-content').className = 'grid grid-cols-2 sm:grid-cols-3 lg:grid-cols-5 gap-3 py-6';
+      document.getElementById('sw-content').innerHTML = items.map(it => {
+        const p = it.product;
+        if (!p) return '';
+        return `
+          <a href="Eesha buying folder/product.html?id=${p.id}" class="sw-product-card">
+            ${p.image_url
+              ? `<img src="${p.image_url}" alt="">`
+              : `<div class="ph"><i class="fas fa-box"></i></div>`}
+            <div class="p-3">
+              <div class="font-medium text-sm line-clamp-2 h-10 overflow-hidden">${escapeHtml(p.name)}</div>
+              <div class="text-amber-600 font-bold mt-1">$${Number(p.price).toFixed(2)}</div>
+              <div class="text-xs text-gray-500 mt-0.5">${escapeHtml(p.category || '')}</div>
+            </div>
+          </a>`;
+      }).join('');
+    })();
+
+    function escapeHtml(s) {
+      return String(s ?? '').replace(/[&<>"']/g, c => ({
+        '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
+      }[c]));
+    }
+  </script>
+</body>
+</html>

supabase/functions/group-buy/index.ts

@@ -0,0 +1,235 @@
+/// <reference lib="deno.ns" />
+// Cellex Group Buy Edge Function (Phase 2 — Pinduoduo model)
+// -----------------------------------------------------------
+// A buyer initiates a group buy for a product. They share a link. Friends join.
+// When target_count is reached, the group is "completed" and the discount is
+// applied automatically at checkout.
+//
+// API:
+//   op=create   body: { productId, targetCount?, discountPct? }   → { groupBuy }
+//   op=join     body: { groupBuyId }                              → { groupBuy, joined: true }
+//   op=status   body: { groupBuyId }                              → { groupBuy, members: [...] }
+//   op=active   body: { productId }                               → { groupBuys: [...] } (open groups for this product)
+//   op=mine                                      → { groupBuys: [...] } (groups I started or joined)
+//   op=cancel   body: { groupBuyId }                              → { success } (initiator only)
+
+import {
+  corsHeaders, jsonResponse, errorResponse, getUser,
+} from '../_shared/cors.ts';
+
+const SUPABASE_URL = Deno.env.get('SUPABASE_URL')!;
+const SERVICE_KEY = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+
+const adminHeaders = {
+  'apikey': SERVICE_KEY,
+  'Authorization': `Bearer ${SERVICE_KEY}`,
+  'Content-Type': 'application/json',
+};
+
+Deno.serve(async (req: Request) => {
+  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders });
+  if (req.method !== 'POST') return errorResponse('Method not allowed', 405);
+
+  try {
+    const body = await req.json().catch(() => ({}));
+    const op = body.op || 'active';
+
+    // Public ops
+    if (op === 'status') return await handleStatus(body);
+
+    // Auth-required ops
+    const user = await getUser(req);
+    if (!user) return errorResponse('Not authenticated', 401);
+
+    switch (op) {
+      case 'create': return await handleCreate(user.id, body);
+      case 'join':   return await handleJoin(user.id, body);
+      case 'active': return await handleActive(body);
+      case 'mine':   return await handleMine(user.id);
+      case 'cancel': return await handleCancel(user.id, body);
+      default:       return errorResponse(`Unknown op: ${op}`, 400);
+    }
+  } catch (error) {
+    console.error('group-buy error:', error);
+    return errorResponse(`Internal error: ${error instanceof Error ? error.message : String(error)}`, 500);
+  }
+});
+
+async function handleCreate(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const productId = Number(body.productId);
+  if (!productId) return errorResponse('productId is required', 400);
+  const targetCount = Math.min(Math.max(Number(body.targetCount) || 3, 2), 50);
+  const discountPct = Math.min(Math.max(Number(body.discountPct) || 20, 1), 90);
+
+  // Look up the product to get seller_id and check it exists
+  const prodResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/products?id=eq.${productId}&select=id,seller_id,name,price`,
+    { headers: adminHeaders }
+  );
+  const products = await prodResp.json();
+  if (!products || products.length === 0) return errorResponse('Product not found', 404);
+  const product = products[0];
+
+  // Create group buy
+  const createResp = await fetch(`${SUPABASE_URL}/rest/v1/group_buys`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      product_id: productId,
+      seller_id: product.seller_id,
+      initiator_id: userId,
+      target_count: targetCount,
+      current_count: 1,
+      discount_pct: discountPct,
+      status: 'open',
+    }),
+  });
+  const created = await createResp.json();
+  if (!createResp.ok) return errorResponse('Failed to create group buy', 500);
+  const groupBuyId = created[0].id;
+
+  // Add initiator as first member
+  await fetch(`${SUPABASE_URL}/rest/v1/group_buy_members`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      group_buy_id: groupBuyId,
+      user_id: userId,
+    }),
+  });
+
+  // Re-fetch the group buy (current_count may have been updated by trigger)
+  const refreshed = await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}&select=*`,
+    { headers: adminHeaders }
+  );
+  const freshRows = await refreshed.json();
+
+  return jsonResponse({ success: true, groupBuy: freshRows?.[0] || created[0], product });
+}
+
+async function handleJoin(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const groupBuyId = body.groupBuyId as string;
+  if (!groupBuyId) return errorResponse('groupBuyId is required', 400);
+
+  // Check the group buy is still open and not expired
+  const gbResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}&select=*`,
+    { headers: adminHeaders }
+  );
+  const gbs = await gbResp.json();
+  if (!gbs || gbs.length === 0) return errorResponse('Group buy not found', 404);
+  const gb = gbs[0];
+  if (gb.status !== 'open') return errorResponse(`Group buy is ${gb.status}`, 400);
+  if (new Date(gb.expires_at) < new Date()) return errorResponse('Group buy has expired', 400);
+
+  // Insert member (UNIQUE constraint handles duplicates — return success either way)
+  const insResp = await fetch(`${SUPABASE_URL}/rest/v1/group_buy_members`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      group_buy_id: groupBuyId,
+      user_id: userId,
+    }),
+  });
+  // 409 = duplicate, that's fine
+  const alreadyMember = insResp.status === 409;
+
+  // Re-fetch the updated group buy
+  const refreshed = await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}&select=*`,
+    { headers: adminHeaders }
+  );
+  const fresh = (await refreshed.json())?.[0];
+
+  return jsonResponse({ success: true, groupBuy: fresh, alreadyMember });
+}
+
+async function handleStatus(body: Record<string, unknown>): Promise<Response> {
+  const groupBuyId = body.groupBuyId as string;
+  if (!groupBuyId) return errorResponse('groupBuyId is required', 400);
+
+  const [gbResp, membersResp, productResp] = await Promise.all([
+    fetch(`${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}&select=*`, { headers: adminHeaders }),
+    fetch(`${SUPABASE_URL}/rest/v1/group_buy_members?group_buy_id=eq.${encodeURIComponent(groupBuyId)}&select=user_id,joined_at&order=joined_at.asc`, { headers: adminHeaders }),
+  ]).then(async ([a, b]) => {
+    const gb = await a.json();
+    const members = await b.json();
+    // Need product info
+    if (gb?.[0]?.product_id) {
+      const pid = gb[0].product_id;
+      const pResp = await fetch(`${SUPABASE_URL}/rest/v1/products?id=eq.${pid}&select=id,name,price,image_url,seller_id`, { headers: adminHeaders });
+      const p = await pResp.json();
+      return [gb, members, p?.[0] || null];
+    }
+    return [gb, members, null];
+  });
+
+  return jsonResponse({
+    success: true,
+    groupBuy: gbResp?.[0] || null,
+    members: membersResp || [],
+    product: productResp,
+  });
+}
+
+async function handleActive(body: Record<string, unknown>): Promise<Response> {
+  const productId = Number(body.productId);
+  if (!productId) return errorResponse('productId is required', 400);
+
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?product_id=eq.${productId}&status=eq.open&expires_at=gt.${encodeURIComponent(new Date().toISOString())}&select=*&order=created_at.desc&limit=10`,
+    { headers: adminHeaders }
+  );
+  const gbs = await resp.json();
+  return jsonResponse({ success: true, groupBuys: gbs || [] });
+}
+
+async function handleMine(userId: string): Promise<Response> {
+  // Groups I started OR joined
+  const [initResp, memberResp] = await Promise.all([
+    fetch(`${SUPABASE_URL}/rest/v1/group_buys?initiator_id=eq.${encodeURIComponent(userId)}&select=*&order=created_at.desc`, { headers: adminHeaders }),
+    fetch(`${SUPABASE_URL}/rest/v1/group_buy_members?user_id=eq.${encodeURIComponent(userId)}&select=group_buy_id`, { headers: adminHeaders }),
+  ]);
+  const initiated = await initResp.json();
+  const memberships = await memberResp.json();
+
+  // Fetch group buy details for memberships
+  const gbIds = (memberships || []).map((m: Record<string, unknown>) => m.group_buy_id);
+  let joined: Record<string, unknown>[] = [];
+  if (gbIds.length > 0) {
+    const joinedResp = await fetch(
+      `${SUPABASE_URL}/rest/v1/group_buys?id=in.(${gbIds.join(',')})&select=*&order=created_at.desc`,
+      { headers: adminHeaders }
+    );
+    joined = await joinedResp.json();
+  }
+
+  // Merge and dedupe
+  const allMap = new Map<string, Record<string, unknown>>();
+  [...(initiated || []), ...joined].forEach((gb: Record<string, unknown>) => {
+    allMap.set(gb.id as string, gb);
+  });
+
+  return jsonResponse({ success: true, groupBuys: Array.from(allMap.values()) });
+}
+
+async function handleCancel(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const groupBuyId = body.groupBuyId as string;
+  if (!groupBuyId) return errorResponse('groupBuyId is required', 400);
+
+  // Only initiator can cancel
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}&initiator_id=eq.${encodeURIComponent(userId)}&select=id`,
+    { headers: adminHeaders }
+  );
+  const rows = await resp.json();
+  if (!rows || rows.length === 0) return errorResponse('Not authorized to cancel this group buy', 403);
+
+  await fetch(
+    `${SUPABASE_URL}/rest/v1/group_buys?id=eq.${encodeURIComponent(groupBuyId)}`,
+    { method: 'PATCH', headers: { ...adminHeaders, 'Content-Type': 'application/json' }, body: JSON.stringify({ status: 'cancelled' }) }
+  );
+
+  return jsonResponse({ success: true });
+}

supabase/functions/live/index.ts

@@ -0,0 +1,371 @@
+/// <reference lib="deno.ns" />
+// Cellex Live Shopping Edge Function (Phase 2 — Whatnot model)
+// --------------------------------------------------------------
+// Sellers go live with a video stream (YouTube/HLS/Twitch URL) or text-only.
+// Buyers join, chat in real time, and click "Buy" to purchase the featured product.
+//
+// For MVP, real-time is via polling (every 2-3 seconds) instead of WebSocket
+// to keep infra simple. Buyers send chat messages; everyone polls.
+//
+// WhatsApp integration: the WhatsApp bot (Render) calls /live op=whatsapp_buy
+// when a user texts "buy" during an active session.
+//
+// API:
+//   op=list         body: { status? }                  → { sessions: [...] }       (public)
+//   op=get          body: { sessionId }                → { session, viewers: [...] } (public)
+//   op=messages     body: { sessionId, afterId? }      → { messages: [...] }       (public)
+//
+//   op=start        body: { title, description?, streamUrl?, streamPlatform?, featuredProductId? } (seller)
+//   op=end          body: { sessionId }                                              (seller)
+//   op=join         body: { sessionId, name? }                                       (auth)
+//   op=leave        body: { sessionId }                                              (auth)
+//   op=message      body: { sessionId, message }                                     (auth)
+//   op=mynext                                                                         (seller — get seller's next session)
+//
+//   op=whatsapp_buy body: { sessionId, phone, name }                                 (called by WhatsApp bot)
+
+import {
+  corsHeaders, jsonResponse, errorResponse, getUser,
+} from '../_shared/cors.ts';
+
+const SUPABASE_URL = Deno.env.get('SUPABASE_URL')!;
+const SERVICE_KEY = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+
+const adminHeaders = {
+  'apikey': SERVICE_KEY,
+  'Authorization': `Bearer ${SERVICE_KEY}`,
+  'Content-Type': 'application/json',
+};
+
+Deno.serve(async (req: Request) => {
+  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders });
+  if (req.method !== 'POST') return errorResponse('Method not allowed', 405);
+
+  try {
+    const body = await req.json().catch(() => ({}));
+    const op = body.op || 'list';
+
+    // Public ops
+    if (op === 'list')     return await handleList(body);
+    if (op === 'get')      return await handleGet(body);
+    if (op === 'messages') return await handleMessages(body);
+    if (op === 'whatsapp_buy') return await handleWhatsappBuy(body);
+
+    // Auth-required ops
+    const user = await getUser(req);
+    if (!user) return errorResponse('Not authenticated', 401);
+
+    switch (op) {
+      case 'start':   return await handleStart(user.id, body);
+      case 'end':     return await handleEnd(user.id, body);
+      case 'join':    return await handleJoin(user.id, body);
+      case 'leave':   return await handleLeave(user.id, body);
+      case 'message': return await handleMessage(user.id, body);
+      case 'mynext':  return await handleMyNext(user.id);
+      default:        return errorResponse(`Unknown op: ${op}`, 400);
+    }
+  } catch (error) {
+    console.error('live error:', error);
+    return errorResponse(`Internal error: ${error instanceof Error ? error.message : String(error)}`, 500);
+  }
+});
+
+// ---------------------------------------------------------------------------
+async function handleList(body: Record<string, unknown>): Promise<Response> {
+  const status = (body.status as string) || 'live';
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/shop_live_sessions?status=eq.${status}&select=id,seller_id,title,description,stream_url,stream_platform,featured_product_id,viewer_count,started_at,ended_at,created_at&order=started_at.desc&limit=50`,
+    { headers: adminHeaders }
+  );
+  const sessions = await resp.json();
+
+  // Enrich with seller info + featured product
+  const sellerIds = Array.from(new Set((sessions || []).map((s: Record<string, unknown>) => s.seller_id)));
+  let sellerMap = new Map<string, Record<string, unknown>>();
+  if (sellerIds.length > 0) {
+    const sellersResp = await fetch(`${SUPABASE_URL}/rest/v1/sellers?id=in.(${sellerIds.join(',')})&select=id,business_name,profile_image`, { headers: adminHeaders });
+    (await sellersResp.json()).forEach((s: Record<string, unknown>) => sellerMap.set(s.id as string, s));
+  }
+
+  const enriched = (sessions || []).map((s: Record<string, unknown>) => ({
+    ...s,
+    seller: sellerMap.get(s.seller_id as string) || null,
+  }));
+
+  return jsonResponse({ success: true, sessions: enriched });
+}
+
+async function handleGet(body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  if (!sessionId) return errorResponse('sessionId is required', 400);
+
+  const [sessResp, viewersResp, featuredResp] = await Promise.all([
+    fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}&select=*`, { headers: adminHeaders }),
+    fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers?live_session_id=eq.${encodeURIComponent(sessionId)}&select=user_id,user_name,joined_at&order=joined_at.desc&limit=100`, { headers: adminHeaders }),
+  ]);
+
+  const sessions = await sessResp.json();
+  const viewers = await viewersResp.json();
+  if (!sessions || sessions.length === 0) return errorResponse('Live session not found', 404);
+  const session = sessions[0];
+
+  // Featured product
+  let featured = null;
+  if (session.featured_product_id) {
+    const pResp = await fetch(`${SUPABASE_URL}/rest/v1/products?id=eq.${session.featured_product_id}&select=id,name,price,image_url,seller_id`, { headers: adminHeaders });
+    featured = (await pResp.json())?.[0] || null;
+  }
+
+  // Seller info
+  const sellerResp = await fetch(`${SUPABASE_URL}/rest/v1/sellers?id=eq.${encodeURIComponent(session.seller_id)}&select=id,business_name,profile_image`, { headers: adminHeaders });
+  const seller = (await sellerResp.json())?.[0] || null;
+
+  return jsonResponse({
+    success: true,
+    session: { ...session, seller, featured },
+    viewers: viewers || [],
+  });
+}
+
+async function handleMessages(body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  if (!sessionId) return errorResponse('sessionId is required', 400);
+  const afterId = Number(body.afterId) || 0;
+  const limit = Math.min(Number(body.limit) || 50, 200);
+
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/shop_live_messages?live_session_id=eq.${encodeURIComponent(sessionId)}&id=gt.${afterId}&select=*&order=id.desc&limit=${limit}`,
+    { headers: adminHeaders }
+  );
+  const messages = await resp.json();
+  // Reverse so oldest is first
+  return jsonResponse({ success: true, messages: (messages || []).reverse() });
+}
+
+async function handleStart(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const title = (body.title as string)?.trim();
+  if (!title) return errorResponse('title is required', 400);
+
+  // Verify the user has a seller row
+  const sellerResp = await fetch(`${SUPABASE_URL}/rest/v1/sellers?id=eq.${encodeURIComponent(userId)}&select=id,business_name`, { headers: adminHeaders });
+  const sellers = await sellerResp.json();
+  if (!sellers || sellers.length === 0) return errorResponse('Only sellers can go live', 403);
+
+  const payload: Record<string, unknown> = {
+    seller_id: userId,
+    title,
+    description: (body.description as string) || '',
+    stream_url: (body.streamUrl as string) || null,
+    stream_platform: (body.streamPlatform as string) || 'none',
+    status: 'live',
+    started_at: new Date().toISOString(),
+    viewer_count: 1,
+  };
+  if (body.featuredProductId) payload.featured_product_id = Number(body.featuredProductId);
+
+  const resp = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify(payload),
+  });
+  const created = await resp.json();
+  if (!resp.ok) return errorResponse('Failed to start live session', 500);
+  const session = created[0];
+
+  // Auto-join seller as a viewer
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      live_session_id: session.id,
+      user_id: userId,
+      user_name: sellers[0].business_name || 'Host',
+    }),
+  });
+
+  // System message
+  await postSystemMessage(session.id, `🔴 Live now: ${title}`);
+
+  return jsonResponse({ success: true, session });
+}
+
+async function handleEnd(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  if (!sessionId) return errorResponse('sessionId is required', 400);
+
+  // Verify ownership
+  const check = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}&seller_id=eq.${encodeURIComponent(userId)}&select=id`, { headers: adminHeaders });
+  if (!(await check.json())?.length) return errorResponse('Not authorized to end this session', 403);
+
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}`, {
+    method: 'PATCH',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ status: 'ended', ended_at: new Date().toISOString() }),
+  });
+
+  await postSystemMessage(sessionId, '⚪ Live session ended.');
+
+  // Clear viewers
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers?live_session_id=eq.${encodeURIComponent(sessionId)}`, {
+    method: 'DELETE', headers: adminHeaders,
+  });
+
+  return jsonResponse({ success: true });
+}
+
+async function handleJoin(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  if (!sessionId) return errorResponse('sessionId is required', 400);
+
+  const name = (body.name as string) || 'Guest';
+
+  // Insert viewer (UNIQUE constraint dedupes)
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      live_session_id: sessionId,
+      user_id: userId,
+      user_name: name,
+    }),
+  }).catch(() => {});  // ignore duplicate errors
+
+  // Update viewer_count
+  const countResp = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers?live_session_id=eq.${encodeURIComponent(sessionId)}&select=id`, { headers: adminHeaders });
+  const count = (await countResp.json()).length;
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}`, {
+    method: 'PATCH',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ viewer_count: count }),
+  });
+
+  // System message
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_messages`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      live_session_id: sessionId,
+      user_id: userId,
+      user_name: name,
+      msg_type: 'join',
+      message: `${name} joined`,
+    }),
+  });
+
+  return jsonResponse({ success: true, viewer_count: count });
+}
+
+async function handleLeave(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  if (!sessionId) return errorResponse('sessionId is required', 400);
+
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers?live_session_id=eq.${encodeURIComponent(sessionId)}&user_id=eq.${encodeURIComponent(userId)}`, {
+    method: 'DELETE', headers: adminHeaders,
+  });
+
+  // Update count
+  const countResp = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_viewers?live_session_id=eq.${encodeURIComponent(sessionId)}&select=id`, { headers: adminHeaders });
+  const count = (await countResp.json()).length;
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}`, {
+    method: 'PATCH',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ viewer_count: count }),
+  });
+
+  return jsonResponse({ success: true, viewer_count: count });
+}
+
+async function handleMessage(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  const message = (body.message as string)?.trim();
+  if (!sessionId || !message) return errorResponse('sessionId and message are required', 400);
+
+  // Get user name from sellers table (works for both buyers and sellers since the
+  // seller row is auto-provisioned for any auth user on first seller-dashboard call)
+  let userName = 'Guest';
+  const sellerResp = await fetch(`${SUPABASE_URL}/rest/v1/sellers?id=eq.${encodeURIComponent(userId)}&select=business_name,email`, { headers: adminHeaders });
+  const sellers = await sellerResp.json();
+  if (sellers?.[0]) {
+    userName = sellers[0].business_name || (sellers[0].email || 'Guest').split('@')[0];
+  }
+
+  const resp = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_messages`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      live_session_id: sessionId,
+      user_id: userId,
+      user_name: userName,
+      msg_type: 'chat',
+      message,
+    }),
+  });
+  const created = await resp.json();
+  return jsonResponse({ success: true, message: created?.[0] });
+}
+
+async function handleMyNext(userId: string): Promise<Response> {
+  // Get seller's most recent live session (live or scheduled)
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/shop_live_sessions?seller_id=eq.${encodeURIComponent(userId)}&status=in.(live,scheduled)&select=*&order=created_at.desc&limit=1`,
+    { headers: adminHeaders }
+  );
+  const sessions = await resp.json();
+  return jsonResponse({ success: true, session: sessions?.[0] || null });
+}
+
+// WhatsApp "buy" command — called by the WhatsApp bot when a user texts "buy"
+// during a live session. We record a purchase message in the chat and return
+// the checkout URL so the bot can send it back to the user.
+async function handleWhatsappBuy(body: Record<string, unknown>): Promise<Response> {
+  const sessionId = body.sessionId as string;
+  const phone = (body.phone as string)?.trim();
+  const name = (body.name as string) || 'WhatsApp buyer';
+  if (!sessionId || !phone) return errorResponse('sessionId and phone are required', 400);
+
+  // Verify session is live
+  const sessResp = await fetch(`${SUPABASE_URL}/rest/v1/shop_live_sessions?id=eq.${encodeURIComponent(sessionId)}&status=eq.live&select=id,featured_product_id,seller_id,title`, { headers: adminHeaders });
+  const sessions = await sessResp.json();
+  if (!sessions?.length) return errorResponse('No active live session', 404);
+  const session = sessions[0];
+
+  if (!session.featured_product_id) {
+    return errorResponse('No featured product in this live session', 400);
+  }
+
+  // Post a purchase message to the chat
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_messages`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      live_session_id: sessionId,
+      user_name: name,
+      msg_type: 'purchase',
+      message: `${name} just bought the featured product! 🎉`,
+    }),
+  });
+
+  // Return the checkout URL — the WhatsApp bot will send this back to the user
+  const checkoutUrl = `https://eeshaai-cellex-web.hf.space/Eesha buying folder/product.html?id=${session.featured_product_id}&live=${sessionId}`;
+
+  return jsonResponse({
+    success: true,
+    sessionId,
+    productId: session.featured_product_id,
+    checkoutUrl,
+    reply: `🛒 Thanks for buying during our live! Complete your purchase here: ${checkoutUrl}`,
+  });
+}
+
+// ---------------------------------------------------------------------------
+async function postSystemMessage(sessionId: string, message: string): Promise<void> {
+  await fetch(`${SUPABASE_URL}/rest/v1/shop_live_messages`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      live_session_id: sessionId,
+      msg_type: 'system',
+      message,
+    }),
+  });
+}

supabase/functions/reviews/index.ts

@@ -0,0 +1,213 @@
+/// <reference lib="deno.ns" />
+// Cellex Reviews Edge Function (Phase 2)
+// ---------------------------------------
+// Buyers leave reviews (with optional photos) for products they purchased.
+// Reviews appear on the product page and on the seller's public profile.
+//
+// API:
+//   op=by_product   body: { productId }              → { reviews, summary: { avg, count } }
+//   op=by_seller    body: { sellerId }               → { reviews, summary }
+//   op=create       body: { productId, orderId, rating, title, comment, images? }
+//   op=helpful      body: { reviewId }               → { helpful_count } (increments)
+//   op=delete       body: { reviewId }               → { success }
+
+import {
+  corsHeaders, jsonResponse, errorResponse, getUser,
+} from '../_shared/cors.ts';
+
+const SUPABASE_URL = Deno.env.get('SUPABASE_URL')!;
+const SERVICE_KEY = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+
+const adminHeaders = {
+  'apikey': SERVICE_KEY,
+  'Authorization': `Bearer ${SERVICE_KEY}`,
+  'Content-Type': 'application/json',
+};
+
+Deno.serve(async (req: Request) => {
+  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders });
+  if (req.method !== 'POST') return errorResponse('Method not allowed', 405);
+
+  try {
+    const body = await req.json().catch(() => ({}));
+    const op = body.op || 'by_product';
+
+    // Public ops
+    if (op === 'by_product') return await handleByProduct(body);
+    if (op === 'by_seller')  return await handleBySeller(body);
+
+    // Auth-required ops
+    const user = await getUser(req);
+    if (!user) return errorResponse('Not authenticated', 401);
+
+    switch (op) {
+      case 'create':  return await handleCreate(user.id, body);
+      case 'helpful': return await handleHelpful(body);
+      case 'delete':  return await handleDelete(user.id, body);
+      default:        return errorResponse(`Unknown op: ${op}`, 400);
+    }
+  } catch (error) {
+    console.error('reviews error:', error);
+    return errorResponse(`Internal error: ${error instanceof Error ? error.message : String(error)}`, 500);
+  }
+});
+
+async function handleByProduct(body: Record<string, unknown>): Promise<Response> {
+  const productId = Number(body.productId);
+  if (!productId) return errorResponse('productId is required', 400);
+
+  const [reviewsResp, summaryResp] = await Promise.all([
+    fetch(`${SUPABASE_URL}/rest/v1/buyers_reviews?product_id=eq.${productId}&select=id,user_id,rating,title,comment,images,verified_purchase,helpful_count,created_at&order=helpful_count.desc,created_at.desc`,
+      { headers: adminHeaders }),
+    fetch(`${SUPABASE_URL}/rest/v1/product_ratings?product_id=eq.${productId}&select=avg_rating,review_count`,
+      { headers: adminHeaders }),
+  ]);
+  const reviews = await reviewsResp.json();
+  const summary = (await summaryResp.json())?.[0] || { avg_rating: 0, review_count: 0 };
+
+  // Enrich with reviewer name
+  const userIds = Array.from(new Set((reviews || []).map((r: Record<string, unknown>) => r.user_id)));
+  let userMap = new Map<string, string>();
+  if (userIds.length > 0) {
+    const usersResp = await fetch(
+      `${SUPABASE_URL}/rest/v1/sellers?id=in.(${userIds.join(',')})&select=id,business_name,profile_image`,
+      { headers: adminHeaders }
+    );
+    const sellers = await usersResp.json();
+    (sellers || []).forEach((s: Record<string, unknown>) => {
+      userMap.set(s.id as string, (s.business_name as string) || 'Buyer');
+    });
+  }
+
+  const enriched = (reviews || []).map((r: Record<string, unknown>) => ({
+    ...r,
+    reviewer_name: userMap.get(r.user_id as string) || 'Buyer',
+  }));
+
+  return jsonResponse({
+    success: true,
+    reviews: enriched,
+    summary: { avg: Number(summary.avg_rating) || 0, count: summary.review_count || 0 },
+  });
+}
+
+async function handleBySeller(body: Record<string, unknown>): Promise<Response> {
+  const sellerId = body.sellerId as string;
+  if (!sellerId) return errorResponse('sellerId is required', 400);
+
+  // Get seller's products
+  const productsResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/products?seller_id=eq.${encodeURIComponent(sellerId)}&select=id,name,image_url,price`,
+    { headers: adminHeaders }
+  );
+  const products = await productsResp.json();
+  const productIds = (products || []).map((p: Record<string, unknown>) => p.id);
+  if (productIds.length === 0) {
+    return jsonResponse({ success: true, reviews: [], summary: { avg: 0, count: 0 } });
+  }
+
+  // Get all reviews for those products
+  const reviewsResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/buyers_reviews?product_id=in.(${productIds.join(',')})&select=id,product_id,user_id,rating,title,comment,images,verified_purchase,helpful_count,created_at&order=created_at.desc&limit=50`,
+    { headers: adminHeaders }
+  );
+  const reviews = await reviewsResp.json();
+
+  // Compute aggregate
+  const total = (reviews || []).length;
+  const avg = total > 0
+    ? (reviews as Record<string, unknown>[]).reduce((s, r) => s + Number(r.rating), 0) / total
+    : 0;
+
+  // Attach product info to each review
+  const productMap = new Map((products || []).map((p: Record<string, unknown>) => [p.id, p]));
+  const enriched = (reviews || []).map((r: Record<string, unknown>) => ({
+    ...r,
+    product: productMap.get(r.product_id) || null,
+  }));
+
+  return jsonResponse({
+    success: true,
+    reviews: enriched,
+    summary: { avg: Math.round(avg * 100) / 100, count: total },
+  });
+}
+
+async function handleCreate(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const productId = Number(body.productId);
+  const orderId = body.orderId as string;
+  const rating = Number(body.rating);
+
+  if (!productId || !rating || rating < 1 || rating > 5) {
+    return errorResponse('productId and rating (1-5) are required', 400);
+  }
+
+  // Verify the user purchased this product (must have an order item with this product_id)
+  const verifyResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/buyers_order_items?select=id&order_id=in.(SELECT id FROM buyers_orders WHERE user_id=eq.${encodeURIComponent(userId)})&product_id=eq.${productId}&limit=1`,
+    { headers: adminHeaders }
+  );
+  const purchased = await verifyResp.json();
+  const verifiedPurchase = (purchased?.length || 0) > 0;
+  if (!verifiedPurchase) {
+    return errorResponse('You can only review products you have purchased', 403);
+  }
+
+  // Insert review
+  const payload: Record<string, unknown> = {
+    user_id: userId,
+    product_id: productId,
+    rating,
+    title: (body.title as string) || '',
+    comment: (body.comment as string) || '',
+    images: body.images || [],
+    verified_purchase: true,
+    helpful_count: 0,
+  };
+  if (orderId) payload.order_id = orderId;
+
+  const resp = await fetch(`${SUPABASE_URL}/rest/v1/buyers_reviews`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify(payload),
+  });
+  const created = await resp.json();
+  if (!resp.ok) return errorResponse(created?.message || 'Failed to create review', 500);
+
+  return jsonResponse({ success: true, review: created?.[0] });
+}
+
+async function handleHelpful(body: Record<string, unknown>): Promise<Response> {
+  const reviewId = body.reviewId as string;
+  if (!reviewId) return errorResponse('reviewId is required', 400);
+
+  // Atomic increment
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/buyers_reviews?id=eq.${encodeURIComponent(reviewId)}&select=helpful_count`,
+    { headers: adminHeaders }
+  );
+  const rows = await resp.json();
+  const cur = rows?.[0]?.helpful_count || 0;
+  const newCount = cur + 1;
+
+  await fetch(`${SUPABASE_URL}/rest/v1/buyers_reviews?id=eq.${encodeURIComponent(reviewId)}`, {
+    method: 'PATCH',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ helpful_count: newCount }),
+  });
+
+  return jsonResponse({ success: true, helpful_count: newCount });
+}
+
+async function handleDelete(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const reviewId = body.reviewId as string;
+  if (!reviewId) return errorResponse('reviewId is required', 400);
+
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/buyers_reviews?id=eq.${encodeURIComponent(reviewId)}&user_id=eq.${encodeURIComponent(userId)}`,
+    { method: 'DELETE', headers: adminHeaders }
+  );
+  if (!resp.ok) return errorResponse('Failed to delete review', 500);
+
+  return jsonResponse({ success: true });
+}

supabase/functions/wishlist-share/index.ts

@@ -0,0 +1,161 @@
+/// <reference lib="deno.ns" />
+// Cellex Wishlist Share Edge Function (Phase 2)
+// ------------------------------------------------
+// Generate a shareable link for the user's current wishlist. The link
+// returns a snapshot of items at share time so it keeps working even after
+// the wishlist is edited.
+//
+// API:
+//   op=share           body: { title? }              → { token, url }
+//   op=get_shared      body: { token }               → { wishlist, items: [...] }
+//   op=my_shares                                      → { shares: [...] }
+//   op=revoke          body: { token }               → { success }
+
+import {
+  corsHeaders, jsonResponse, errorResponse, getUser,
+} from '../_shared/cors.ts';
+
+const SUPABASE_URL = Deno.env.get('SUPABASE_URL')!;
+const SERVICE_KEY = Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!;
+
+const adminHeaders = {
+  'apikey': SERVICE_KEY,
+  'Authorization': `Bearer ${SERVICE_KEY}`,
+  'Content-Type': 'application/json',
+};
+
+// Generate a short URL-safe token (16 chars)
+function generateToken(): string {
+  const bytes = new Uint8Array(12);
+  crypto.getRandomValues(bytes);
+  return Array.from(bytes).map(b => b.toString(36).padStart(2, '0')).join('').slice(0, 16);
+}
+
+Deno.serve(async (req: Request) => {
+  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders });
+  if (req.method !== 'POST') return errorResponse('Method not allowed', 405);
+
+  try {
+    const body = await req.json().catch(() => ({}));
+    const op = body.op || 'get_shared';
+
+    // Public op
+    if (op === 'get_shared') return await handleGetShared(body);
+
+    // Auth-required ops
+    const user = await getUser(req);
+    if (!user) return errorResponse('Not authenticated', 401);
+
+    switch (op) {
+      case 'share':     return await handleShare(user.id, body);
+      case 'my_shares': return await handleMyShares(user.id);
+      case 'revoke':    return await handleRevoke(user.id, body);
+      default:          return errorResponse(`Unknown op: ${op}`, 400);
+    }
+  } catch (error) {
+    console.error('wishlist-share error:', error);
+    return errorResponse(`Internal error: ${error instanceof Error ? error.message : String(error)}`, 500);
+  }
+});
+
+async function handleShare(userId: string, body: Record<string, unknown>): Promise<Response> {
+  // Fetch user's wishlist items
+  const wlResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/buyers_wishlist?user_id=eq.${encodeURIComponent(userId)}&select=id,product_id,created_at&order=created_at.desc`,
+    { headers: adminHeaders }
+  );
+  const wishlist = await wlResp.json();
+  const productIds = (wishlist || []).map((w: Record<string, unknown>) => w.product_id);
+  if (productIds.length === 0) {
+    return errorResponse('Your wishlist is empty — add products first', 400);
+  }
+
+  // Fetch product details
+  const productsResp = await fetch(
+    `${SUPABASE_URL}/rest/v1/products?id=in.(${productIds.join(',')})&select=id,name,price,image_url,category,seller_id`,
+    { headers: adminHeaders }
+  );
+  const products = await productsResp.json();
+  const productMap = new Map((products || []).map((p: Record<string, unknown>) => [p.id, p]));
+
+  // Build items snapshot
+  const itemsJson = (wishlist || []).map((w: Record<string, unknown>) => ({
+    wishlist_item_id: w.id,
+    product: productMap.get(w.product_id) || null,
+  })).filter((it: Record<string, unknown>) => it.product !== null);
+
+  // Insert share token
+  const token = generateToken();
+  const title = (body.title as string) || 'My Cellex Wishlist';
+  const insertResp = await fetch(`${SUPABASE_URL}/rest/v1/shared_wishlists`, {
+    method: 'POST',
+    headers: { ...adminHeaders, 'Prefer': 'return=representation' },
+    body: JSON.stringify({
+      token,
+      user_id: userId,
+      title,
+      items_json: itemsJson,
+    }),
+  });
+  if (!insertResp.ok) {
+    const err = await insertResp.text();
+    return errorResponse(`Failed to create share link: ${err}`, 500);
+  }
+
+  return jsonResponse({ success: true, token, url: `/shared-wishlist.html?token=${token}` });
+}
+
+async function handleGetShared(body: Record<string, unknown>): Promise<Response> {
+  const token = body.token as string;
+  if (!token) return errorResponse('token is required', 400);
+
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/shared_wishlists?token=eq.${encodeURIComponent(token)}&select=*`,
+    { headers: adminHeaders }
+  );
+  const rows = await resp.json();
+  if (!rows || rows.length === 0) return errorResponse('Share link not found or revoked', 404);
+  const share = rows[0];
+
+  // Check expiry
+  if (share.expires_at && new Date(share.expires_at) < new Date()) {
+    return errorResponse('This share link has expired', 410);
+  }
+
+  // Increment view count (fire-and-forget)
+  fetch(`${SUPABASE_URL}/rest/v1/shared_wishlists?token=eq.${encodeURIComponent(token)}`, {
+    method: 'PATCH',
+    headers: { ...adminHeaders, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ view_count: (share.view_count || 0) + 1 }),
+  }).catch(() => {});
+
+  return jsonResponse({
+    success: true,
+    wishlist: {
+      title: share.title,
+      created_at: share.created_at,
+      view_count: (share.view_count || 0) + 1,
+    },
+    items: share.items_json || [],
+  });
+}
+
+async function handleMyShares(userId: string): Promise<Response> {
+  const resp = await fetch(
+    `${SUPABASE_URL}/rest/v1/shared_wishlists?user_id=eq.${encodeURIComponent(userId)}&select=token,title,view_count,created_at,expires_at&order=created_at.desc`,
+    { headers: adminHeaders }
+  );
+  const shares = await resp.json();
+  return jsonResponse({ success: true, shares: shares || [] });
+}
+
+async function handleRevoke(userId: string, body: Record<string, unknown>): Promise<Response> {
+  const token = body.token as string;
+  if (!token) return errorResponse('token is required', 400);
+
+  await fetch(
+    `${SUPABASE_URL}/rest/v1/shared_wishlists?token=eq.${encodeURIComponent(token)}&user_id=eq.${encodeURIComponent(userId)}`,
+    { method: 'DELETE', headers: adminHeaders }
+  );
+  return jsonResponse({ success: true });
+}

web-server/server.py

@@ -268,6 +268,23 @@ async def proxy_seller_profile(request: Request):
 async def proxy_social(request: Request):
     return await _proxy_to_edge_function("social", request)
 
+# ---- Phase 2: Community Engagement ----
+@app.post("/api/reviews")
+async def proxy_reviews(request: Request):
+    return await _proxy_to_edge_function("reviews", request)
+
+@app.post("/api/group-buy")
+async def proxy_group_buy(request: Request):
+    return await _proxy_to_edge_function("group-buy", request)
+
+@app.post("/api/wishlist-share")
+async def proxy_wishlist_share(request: Request):
+    return await _proxy_to_edge_function("wishlist-share", request)
+
+@app.post("/api/live")
+async def proxy_live(request: Request):
+    return await _proxy_to_edge_function("live", request)
+
 @app.get("/api/health")
 async def proxy_health():
     return {