@mohasinac/appkit 2.7.43 → 2.7.44

package/dist/_internal/server/features/checkout/actions.js

@@ -14,7 +14,7 @@ import { sendOrderConfirmationEmail } from "../../../../features/contact/server"
 import { splitCartIntoOrderGroups } from "../../../../features/orders/index";
 import { resolveDate } from "../../../../utils";
 import { getAdminDb, getAdminRealtimeDb, RTDB_PATHS, } from "../../../../providers/db-firebase";
-import { PRODUCT_COLLECTION } from "../../../../features/products/schemas/firestore";
+import { PRODUCT_COLLECTION, PRODUCT_CODES_SUBCOLLECTION } from "../../../../features/products/schemas/firestore";
 import { CART_COLLECTION } from "../../../../features/cart/schemas/index";
 // S-SBUNI-RULES 2026-05-13 — bundle cart-line stock fan-out helpers.
 import { getCartItemMemberIds, getExpandedDecrements, validateCartItemStock, } from "./bundle-expansion";
@@ -27,6 +27,36 @@ import { formatShippingAddress } from "./data";
 import { enforceMaxPerUserForCart, computePrizeRevealDeadline, } from "./prize-bundle-gates";
 import { getListingRule, runSyncPreflight, } from "../../../shared/checkout/rules";
 import { cartIsDigitalOnly } from "../../../shared/listing-types/cart-shipping";
+/**
+ * SB-UNI-N — Atomically claim the next available digital code for a confirmed
+ * order. Pre-fetches a candidate code outside the transaction then locks and
+ * verifies in a micro-transaction. Fire-and-forget safe (logs on exhaustion
+ * but never fails the already-created order).
+ */
+async function claimDigitalCodeForOrder(db, productId, orderId, userId) {
+    const codesRef = db
+        .collection(PRODUCT_COLLECTION)
+        .doc(productId)
+        .collection(PRODUCT_CODES_SUBCOLLECTION);
+    const snap = await codesRef.where("status", "==", "available").limit(1).get();
+    if (snap.empty) {
+        serverLogger.warn("claimDigitalCode: code pool exhausted", { productId, orderId });
+        return;
+    }
+    const codeRef = snap.docs[0].ref;
+    await db.runTransaction(async (tx) => {
+        const latest = await tx.get(codeRef);
+        if (!latest.exists || latest.data()?.status !== "available")
+            return;
+        tx.update(codeRef, {
+            status: "claimed",
+            orderId,
+            claimedByUserId: userId,
+            claimedAt: new Date(),
+            updatedAt: new Date(),
+        });
+    });
+}
 /**
  * SB-UNI-O — Live-item jurisdiction guard.
  * Throws ValidationError if any live cart item's allowed states don't include
@@ -470,6 +500,11 @@ export async function createCheckoutOrderAction(input) {
             ...extraOrderFields,
         });
         orderIds.push(order.id);
+        // SB-UNI-N — claim a digital code for digital-code orders (fire-and-forget,
+        // order is already persisted so a claim failure is logged, not thrown).
+        if ((group[0]?.product?.listingType ?? "standard") === "digital-code") {
+            claimDigitalCodeForOrder(getAdminDb(), firstItem.productId, order.id, uid).catch((e) => serverLogger.error("claimDigitalCode", e));
+        }
         for (const code of groupCouponCodes) {
             const entry = couponUsageAccumulator.get(code);
             if (entry)
@@ -840,6 +875,11 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
             ...extraOrderFields,
         });
         orderIds.push(order.id);
+        // SB-UNI-N — claim a digital code for digital-code orders (fire-and-forget,
+        // order is already persisted so a claim failure is logged, not thrown).
+        if ((group[0]?.product?.listingType ?? "standard") === "digital-code") {
+            claimDigitalCodeForOrder(getAdminDb(), firstItem.productId, order.id, uid).catch((e) => serverLogger.error("claimDigitalCode", e));
+        }
         if (userEmail) {
             emailsToSend.push({
                 to: userEmail,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "2.7.43",
+  "version": "2.7.44",
   "license": "MIT",
   "publishConfig": {
     "access": "public"