@mohasinac/appkit 2.8.10 → 3.0.1

package/dist/monitoring/server-logger.js

@@ -40,10 +40,8 @@ function serializeError(error) {
     }
     return serialized;
 }
-// audit-unknown-ok: this is the entry-point normaliser that accepts arbitrary
 // log-data payloads (Error, Date, primitive, object). Output is bounded by the
 // downstream JSON-stringify contract.
-// audit-unknown-ok: type-narrowing entry point — accepts any value, narrows by typeof/Array.isArray
 function normalizeLogData(data) {
     if (data instanceof Error)
         return serializeError(data);
@@ -138,12 +136,10 @@ async function writeLog(entry) {
     }
 }
 export const serverLogger = {
-    // audit-unknown-ok: logger entry-point — accepts arbitrary log data, normalised internally
     debug(message, data) {
         const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
         console.debug(`[DEBUG] ${message}`, sanitized);
     },
-    // audit-unknown-ok: logger entry-point — accepts arbitrary log data
     info(message, data) {
         const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
         const entry = {
@@ -154,9 +150,8 @@ export const serverLogger = {
         };
         console.info(`[INFO] ${message}`, sanitized);
         if (isFileLoggingEnabled)
-            writeLog(entry).catch(() => { }); // audit-silent-catch-ok: logger must never throw
+            writeLog(entry).catch(() => { });
     },
-    // audit-unknown-ok: logger entry-point — accepts arbitrary log data
     warn(message, data) {
         const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
         const entry = {
@@ -167,9 +162,8 @@ export const serverLogger = {
         };
         console.warn(`[WARN] ${message}`, sanitized);
         if (isFileLoggingEnabled)
-            writeLog(entry).catch(() => { }); // audit-silent-catch-ok: logger must never throw
+            writeLog(entry).catch(() => { });
     },
-    // audit-unknown-ok: logger entry-point — accepts arbitrary log data
     error(message, data) {
         const sanitized = data ? redactPii(normalizeLogData(data)) : undefined;
         const entry = {
@@ -180,7 +174,7 @@ export const serverLogger = {
         };
         console.error(`[ERROR] ${message}`, sanitized);
         if (isFileLoggingEnabled)
-            writeLog(entry).catch(() => { }); // audit-silent-catch-ok: logger must never throw
+            writeLog(entry).catch(() => { });
     },
 };
 /** Pull the commonly needed headers from a NextRequest in one call. */
@@ -193,9 +187,7 @@ export const extractRequestMetadata = (request) => ({
         "unknown",
     referer: request.headers.get("referer") ?? "none",
 });
-function buildServerMeta(
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) {
+function buildServerMeta(error, context) {
     const base = {
         ...context,
         timestamp: new Date().toISOString(),
@@ -226,9 +218,7 @@ error, context) {
     }
     return base;
 }
-export const logServerError = (message, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logServerError = (message, error, context) => {
     serverLogger.error(message, buildServerMeta(error, context));
 };
 export const logServerWarning = (message, data) => {
@@ -240,18 +230,14 @@ export const logServerInfo = (message, data) => {
 export const logServerDebug = (message, data) => {
     serverLogger.debug(message, { ...data, timestamp: new Date().toISOString() });
 };
-export const logApiRouteError = (endpoint, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, request, context) => {
+export const logApiRouteError = (endpoint, error, request, context) => {
     logServerError(`API Route Error: ${endpoint}`, error, {
         ...context,
         endpoint,
         ...(request ? extractRequestMetadata(request) : {}),
     });
 };
-export const logDatabaseError = (operation, collection, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logDatabaseError = (operation, collection, error, context) => {
     logServerError(`Database Error: ${operation} on ${collection}`, error, {
         ...context,
         operation,
@@ -259,9 +245,7 @@ error, context) => {
         type: "database",
     });
 };
-export const logServerAuthError = (operation, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logServerAuthError = (operation, error, context) => {
     logServerError(`Authentication Error: ${operation}`, error, {
         ...context,
         operation,
@@ -277,18 +261,14 @@ export const logAuthorizationError = (userId, resource, action, context) => {
         type: "authorization",
     });
 };
-export const logEmailError = (recipient, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logEmailError = (recipient, error, context) => {
     logServerError(`Email Send Failed to ${recipient}`, error, {
         ...context,
         recipient,
         type: "email",
     });
 };
-export const logStorageError = (operation, filePath, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logStorageError = (operation, filePath, error, context) => {
     logServerError(`Storage Error: ${operation} on ${filePath}`, error, {
         ...context,
         operation,
@@ -296,9 +276,7 @@ error, context) => {
         type: "storage",
     });
 };
-export const logExternalApiError = (serviceName, endpoint, 
-// audit-unknown-ok: error-handler entry point — receives thrown values
-error, context) => {
+export const logExternalApiError = (serviceName, endpoint, error, context) => {
     logServerError(`External API Error: ${serviceName} - ${endpoint}`, error, {
         ...context,
         serviceName,

package/dist/next/api/api-response.js

@@ -13,9 +13,7 @@ export function successResponse(data, message, status = 200, meta) {
         ...(meta && { meta }),
     }, { status });
 }
-export function errorResponse(error, status = 400, 
-// audit-unknown-ok: Generic response wrapper — issues field arbitrary
-details) {
+export function errorResponse(error, status = 400, details) {
     return NextResponse.json({
         success: false,
         error,
@@ -27,7 +25,6 @@ export const ApiErrors = {
     unauthorized: (message = "Unauthorized") => errorResponse(message, 401),
     forbidden: (message = "Forbidden") => errorResponse(message, 403),
     notFound: (resource = "Resource") => errorResponse(`${resource} not found`, 404),
-    // audit-unknown-ok: Generic response wrapper — issues field arbitrary
     badRequest: (message = "Bad request", details) => errorResponse(message, 400, details),
     internalError: (message = "Internal server error") => errorResponse(message, 500),
     validationError: (details) => errorResponse("Validation failed", 422, details),

package/dist/next/api/apiHandler.js

@@ -1,6 +1,5 @@
 import { normalizeError } from "../../errors/normalize";
 async function validateSchema(request, schema) {
-    // audit-unknown-ok: Next.js route dispatcher boundary
     if (typeof schema.safeParse === "function") {
         const body = await request.json();
         const result = schema.safeParse(body);
@@ -14,7 +13,6 @@ async function validateSchema(request, schema) {
         return { validationError: false, data };
     }
     catch {
-        // audit-unknown-ok: TS structural escape — TInput
         return { validationError: false, data: undefined };
     }
 }
@@ -47,9 +45,7 @@ async function applyRateLimitCheck(request, config, applyRateLimit, getRateLimit
     }
     return { blocked: false, headers };
 }
-async function applySchemaValidation(request, schema, 
-// audit-unknown-ok: Next.js route dispatcher boundary
-errorResponse) {
+async function applySchemaValidation(request, schema, errorResponse) {
     const schemaResult = await validateSchema(request, schema);
     if (schemaResult.validationError) {
         return { invalid: true, response: errorResponse("Validation failed", 400, schemaResult.issues) };

package/dist/next/api/errorHandler.js

@@ -34,14 +34,12 @@ import { NextResponse } from "next/server.js";
  */
 export function createApiErrorHandler(options) {
     const { isAppError, getStatusCode, toJSON, logger, internalErrorCode = "INTERNAL_ERROR", internalErrorMessage = "An internal server error occurred", } = options;
-    // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
     return function handleApiError(error) {
         // Known AppError subclass — structured response
         if (isAppError(error)) {
             const status = getStatusCode(error);
             if (status >= 500) {
                 logger.error("API Error", {
-                    // audit-unknown-ok: error JSON serialization boundary
                     body: toJSON(error),
                 });
             }
@@ -51,7 +49,6 @@ export function createApiErrorHandler(options) {
         if (error !== null &&
             typeof error === "object" &&
             "issues" in error &&
-            // audit-unknown-ok: error JSON serialization boundary
             Array.isArray(error.issues)) {
             return NextResponse.json({
                 success: false,

package/dist/next/api/parseJsonBody.js

@@ -12,7 +12,6 @@ import { ValidationError } from "../../errors";
  *   const body = await parseJsonBody<{ name?: string }>(request, { allowEmpty: true });
  */
 export async function parseJsonBody(request, options) {
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     let raw;
     try {
         const text = await request.text();

package/dist/next/api/routeHandler.js

@@ -108,7 +108,6 @@ function resolveBodySchema(schema) {
     const entry = SCHEMAS.api[schema];
     if (!entry || !("body" in entry) || !entry.body)
         return null;
-    // audit-unknown-ok: TS structural escape — ParseableSchema
     return entry.body;
 }
 /**
@@ -119,9 +118,7 @@ function resolveBodySchema(schema) {
  * soon as every consumer is updated, after which `success` is removed from
  * this helper and the audit re-runs to enforce the cleanup.
  */
-function errorJson(status, code, message, requestId, 
-// audit-unknown-ok: Route handler body schema parse boundary
-issues) {
+function errorJson(status, code, message, requestId, issues) {
     return NextResponse.json({
         ok: false,
         success: false, // deprecated — for compat during the migration sweep
@@ -190,7 +187,6 @@ export function createRouteHandler(options) {
                 return errorJson(500, HTTP_ERROR_CODES.INTERNAL, `Route schema not registered: ${String(options.schema)}`, requestId);
             }
             if (resolvedSchema) {
-                // audit-unknown-ok: callback entry point — accepts arbitrary payload value
                 let raw;
                 try {
                     raw = await request.json();
@@ -248,7 +244,6 @@ export function createRouteHandler(options) {
                 response.headers.set("Cache-Control", buildPublicCacheControl(policy));
             }
             return response;
-            // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
         }
         catch (err) {
             void normalizeError(err);
@@ -271,11 +266,9 @@ export function createRouteHandler(options) {
             }
             // -- console-side surface ---------------------------------------------
             if (mapped.status >= 500) {
-                // eslint-disable-next-line no-console
                 console.error(`[createRouteHandler] ${request.method} ${new URL(request.url).pathname} failed [${requestId}]`, err);
             }
             else if (mapped.status >= 400 && mapped.status !== 401 && mapped.status !== 403) {
-                // eslint-disable-next-line no-console
                 console.warn(`[createRouteHandler] ${request.method} ${new URL(request.url).pathname} failed (${mapped.status}) [${requestId}]`, mapped.code, mapped.message);
             }
             return errorJson(mapped.status, mapped.code, mapped.message, requestId, mapped.issues);

package/dist/next/cache-middleware.js

@@ -30,9 +30,7 @@ function isCacheable(request, config) {
     return methods.includes(request.method);
 }
 export function withCache(handler, config = {}) {
-    return async (request, 
-    // audit-unknown-ok: Next.js middleware boundary
-    ...args) => {
+    return async (request, ...args) => {
         if (!isCacheable(request, config)) {
             return handler(request, ...args);
         }

package/dist/next/middleware/chain.js

@@ -64,7 +64,6 @@ export function createApiMiddleware(config = {}) {
                 ...middlewares,
                 // Apply PII scrubber last (wraps all other middleware output)
                 ...(scrubPii
-                    // audit-unknown-ok: TS structural escape — Middleware
                     ? [piiScrubberMiddleware]
                     : []),
             ];

package/dist/next/middleware/pii-scrubber.js

@@ -1,6 +1,5 @@
 import { NextResponse } from "next/server";
 const ENC_PREFIX = "enc:v1:";
-// audit-unknown-ok: type-narrowing entry point — accepts any value, narrows by typeof/Array.isArray
 function scrubValue(value) {
     if (typeof value === "string" && value.startsWith(ENC_PREFIX)) {
         return "[encrypted]";
@@ -29,7 +28,6 @@ export const piiScrubberMiddleware = async (_request, _ctx, next) => {
     const contentType = response.headers.get("content-type") ?? "";
     if (!contentType.includes("application/json"))
         return response;
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     let body;
     try {
         body = await response.json();

package/dist/providers/auth-firebase/provider.js

@@ -15,7 +15,6 @@ const EXPECTED_AUTH_CODES = new Set([
     "auth/user-disabled",
     "auth/user-not-found",
 ]);
-// audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
 function isExpectedAuthError(err) {
     return EXPECTED_AUTH_CODES.has(err.code ?? "");
 }

package/dist/providers/db-firebase/admin.js

@@ -48,7 +48,6 @@ function get(key) {
     return globalThis[key] ?? null;
 }
 function set(key, value) {
-    // audit-unknown-ok: Admin SDK init — global type augmentation
     globalThis[key] = value;
 }
 // --- App ----------------------------------------------------------------------

package/dist/providers/db-firebase/base.js

@@ -35,7 +35,6 @@ export class FirebaseRepository {
         return deserializeTimestamps({
             id: snap.id,
             ...(snap.data() ?? {}),
-            // audit-unknown-ok: TS structural escape — generic param
         });
     }
     // -- IReadRepository --------------------------------------------------------
@@ -100,7 +99,6 @@ export class FirebaseRepository {
         const totalPages = total === 0 ? 0 : Math.max(1, Math.ceil(total / perPage));
         return { data, total, page, perPage, totalPages };
     }
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     async findWhere(field, op, value) {
         const snap = await this.getCollection()
             .where(field, op, value)
@@ -169,7 +167,6 @@ export class FirebaseRepository {
         return doc;
     }
     /** Find first document where `field == value`. */
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     async findOneBy(field, value) {
         const snap = await this.getCollection()
             .where(field, "==", value)
@@ -195,7 +192,6 @@ const TOKEN_TO_OP = {
     "@=": "array-contains",
 };
 /** Best-effort scalar coercion for sieve filter values. */
-// audit-unknown-ok: Base repository coerceValue — accepts any cell value
 function coerceValue(raw) {
     if (raw === "true")
         return true;

package/dist/providers/db-firebase/base.repository.js

@@ -18,7 +18,6 @@ export class BaseRepository {
         return deserializeTimestamps({
             id: snap.id,
             ...(snap.data() ?? {}),
-            // audit-unknown-ok: TS structural escape — generic param
         });
     }
     async findById(id) {
@@ -41,7 +40,6 @@ export class BaseRepository {
         }
         return doc;
     }
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     async findBy(field, value) {
         try {
             const snapshot = await this.getCollection()
@@ -54,7 +52,6 @@ export class BaseRepository {
             throw new DatabaseError(`Failed to find documents by ${field}`, error);
         }
     }
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     async findOneBy(field, value) {
         try {
             const snapshot = await this.getCollection()

package/dist/providers/db-firebase/field-ops.js

@@ -6,9 +6,7 @@ import { FieldValue } from "firebase-admin/firestore";
 export const firebaseFieldOps = {
     serverTimestamp: () => FieldValue.serverTimestamp(),
     increment: (n) => FieldValue.increment(n),
-    // audit-unknown-ok: Firestore field operations SDK boundary
     arrayUnion: (...elements) => FieldValue.arrayUnion(...elements),
-    // audit-unknown-ok: Firestore field operations SDK boundary
     arrayRemove: (...elements) => FieldValue.arrayRemove(...elements),
     deleteField: () => FieldValue.delete(),
 };

package/dist/providers/db-firebase/helpers.js

@@ -12,11 +12,9 @@
  * FieldValue sentinels (increment, arrayUnion, deleteField, etc.) are not
  * stripped.
  */
-// audit-unknown-ok: type-narrowing entry point — accepts any value, narrows by typeof/Array.isArray
 function isPlainObject(v) {
     if (v === null || typeof v !== "object" || Array.isArray(v))
         return false;
-    // audit-unknown-ok: TS structural escape
     const proto = Object.getPrototypeOf(v);
     return proto === Object.prototype || proto === null;
 }
@@ -68,11 +66,9 @@ export function deserializeTimestamps(obj) {
     if (typeof obj === "object" &&
         !(obj instanceof Date) &&
         typeof obj.toDate === "function") {
-        // audit-unknown-ok: TS structural escape — generic param
         return obj.toDate();
     }
     if (Array.isArray(obj)) {
-        // audit-unknown-ok: TS structural escape — generic param
         return obj.map(deserializeTimestamps);
     }
     if (typeof obj === "object" && !(obj instanceof Date)) {

package/dist/providers/db-firebase/realtime.js

@@ -31,7 +31,6 @@ export class FirebaseRealtimeRepository {
         const snap = await this.nodeRef(id).get();
         if (!snap.exists())
             return null;
-        // audit-unknown-ok: TS structural escape — generic param
         return { id, ...snap.val() };
     }
     async findAll(query) {
@@ -46,9 +45,7 @@ export class FirebaseRealtimeRepository {
             };
         }
         const raw = snap.val();
-        let data = Object.entries(raw).map(
-        // audit-unknown-ok: TS structural escape — generic param
-        ([id, val]) => ({ id, ...val }));
+        let data = Object.entries(raw).map(([id, val]) => ({ id, ...val }));
         // Basic server-side sort (RTDB has no native multi-field sort)
         if (query?.sort) {
             const key = query.sort;
@@ -74,7 +71,6 @@ export class FirebaseRealtimeRepository {
             totalPages,
         };
     }
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
     async findWhere(field, _op, value) {
         // RTDB Admin SDK supports orderByChild + equalTo for == only
         const snap = await this.nodeRef()
@@ -84,23 +80,19 @@ export class FirebaseRealtimeRepository {
         if (!snap.exists())
             return [];
         const raw = snap.val();
-        return Object.entries(raw).map(
-        // audit-unknown-ok: TS structural escape — generic param
-        ([id, val]) => ({ id, ...val }));
+        return Object.entries(raw).map(([id, val]) => ({ id, ...val }));
     }
     // -- IWriteRepository -------------------------------------------------------
     async create(data) {
         const now = Date.now();
         const payload = { ...data, createdAt: now, updatedAt: now };
         const ref = await this.nodeRef().push(payload);
-        // audit-unknown-ok: TS structural escape — generic param
         return { id: ref.key, ...payload };
     }
     async update(id, data) {
         const payload = { ...data, updatedAt: Date.now() };
         await this.nodeRef(id).update(payload);
         const snap = await this.nodeRef(id).get();
-        // audit-unknown-ok: TS structural escape — generic param
         return { id, ...snap.val() };
     }
     async delete(id) {
@@ -123,15 +115,12 @@ export class FirebaseRealtimeRepository {
     subscribe(id, cb) {
         const ref = this.nodeRef(id);
         const handler = (snap) => {
-            // audit-unknown-ok: TS structural escape — generic param
             cb(snap.exists() ? { id, ...snap.val() } : null);
         };
         ref.on("value", handler);
         return () => ref.off("value", handler);
     }
-    subscribeWhere(field, 
-    // audit-unknown-ok: callback entry point — accepts arbitrary payload value
-    value, cb) {
+    subscribeWhere(field, value, cb) {
         const ref = this.nodeRef()
             .orderByChild(field)
             .equalTo(value);
@@ -141,7 +130,6 @@ export class FirebaseRealtimeRepository {
                 return;
             }
             const raw = snap.val();
-            // audit-unknown-ok: TS structural escape — generic param
             cb(Object.entries(raw).map(([id, v]) => ({ id, ...v })));
         };
         ref.on("value", handler);

package/dist/providers/db-firebase/sieve.js

@@ -135,16 +135,13 @@ export async function applySieveToFirestore(params) {
     // Apply filters + sorts once; count without reading docs.
     const filteredQ = processor.apply(effective, baseQuery, {
         applyPagination: false,
-        // audit-unknown-ok: TS structural escape — Firebase SDK type
     });
     const total = await getFirestoreCount(filteredQ);
     // Apply pagination on top of the already-filtered query — avoids re-applying
     // the full Sieve DSL from the base.
     const pagedQ = filteredQ.offset((page - 1) * pageSize).limit(pageSize);
     const snap = await pagedQ.get();
-    const items = snap.docs.map(
-    // audit-unknown-ok: TS structural escape — generic param
-    (d) => deserializeTimestamps({ id: d.id, ...d.data() }));
+    const items = snap.docs.map((d) => deserializeTimestamps({ id: d.id, ...d.data() }));
     const totalPages = total === 0 ? 0 : Math.max(1, Math.ceil(total / pageSize));
     return {
         items,
@@ -180,16 +177,13 @@ export class FirebaseSieveRepository extends FirebaseRepository {
         // Apply filters + sorts once; count without reading docs.
         const filteredQ = processor.apply(effective, base, {
             applyPagination: false,
-            // audit-unknown-ok: TS structural escape — Firebase SDK type
         });
         const total = await getFirestoreCount(filteredQ);
         // Apply pagination on top of the already-filtered query — avoids re-applying
         // the full Sieve DSL from the base.
         const pagedQ = filteredQ.offset((page - 1) * pageSize).limit(pageSize);
         const snap = await pagedQ.get();
-        const items = snap.docs.map((d) => 
-        // audit-unknown-ok: TS structural escape — TResult
-        deserializeTimestamps({ id: d.id, ...d.data() }));
+        const items = snap.docs.map((d) => deserializeTimestamps({ id: d.id, ...d.data() }));
         const totalPages = total === 0 ? 0 : Math.max(1, Math.ceil(total / pageSize));
         return {
             items,

package/dist/providers/payment-razorpay/index.js

@@ -148,7 +148,6 @@ export async function createRazorpayOrder(opts) {
         receipt: opts.receipt ?? `rcpt_${Date.now()}`,
         notes: opts.notes,
     });
-    // audit-unknown-ok: TS structural escape — RazorpayOrder
     return order;
 }
 /**
@@ -159,7 +158,6 @@ export async function createRazorpayOrder(opts) {
 export async function fetchRazorpayOrder(orderId) {
     const razorpay = await getRazorpayInstance();
     const order = await razorpay.orders.fetch(orderId);
-    // audit-unknown-ok: TS structural escape — RazorpayOrder
     return order;
 }
 /**
@@ -203,6 +201,5 @@ export async function createRazorpayRefund(paymentId, amountPaise) {
     if (amountPaise)
         opts.amount = amountPaise;
     const refund = await razorpay.payments.refund(paymentId, opts);
-    // audit-unknown-ok: TS structural escape — RazorpayRefundResult
     return refund;
 }

package/dist/providers/shipping-shiprocket/index.js

@@ -34,7 +34,6 @@ async function shiprocketFetch(endpoint, options = {}) {
         headers: reqHeaders,
     });
     const text = await response.text();
-    // audit-unknown-ok: Shiprocket HTTP response — third-party JSON
     let json;
     try {
         json = JSON.parse(text);

package/dist/providers/storage-firebase/client.js

@@ -33,7 +33,6 @@ export function createStorageHelpers(storage) {
             });
             const url = await getDownloadURL(uploadResult.ref);
             return { url, ref: uploadResult.ref, uploadResult };
-            // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
         }
         catch (error) {
             void normalizeError(error);
@@ -70,7 +69,6 @@ export function createStorageHelpers(storage) {
     async function getFileUrl(path) {
         try {
             return await getDownloadURL(ref(storage, path));
-            // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
         }
         catch (error) {
             void normalizeError(error);
@@ -81,7 +79,6 @@ export function createStorageHelpers(storage) {
     async function deleteFile(path) {
         try {
             await deleteObject(ref(storage, path));
-            // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
         }
         catch (error) {
             void normalizeError(error);
@@ -96,7 +93,6 @@ export function createStorageHelpers(storage) {
         try {
             const result = await listAll(ref(storage, folderPath));
             return result.items;
-            // audit-unknown-ok: error-handler entry point — accepts thrown values of any shape
         }
         catch (error) {
             void normalizeError(error);

package/dist/react/contexts/SessionContext.js

@@ -141,7 +141,6 @@ export function SessionProvider({ children, initialUser, endpoints: endpointOver
                 stats: data.stats,
                 metadata: data.metadata,
                 scamAwarenessAcknowledgedAt: data.scamAwarenessAcknowledgedAt
-                    // audit-unknown-ok: TS structural escape — primitive cast
                     ? new Date(data.scamAwarenessAcknowledgedAt)
                     : null,
                 dismissedBannerHash: data.dismissedBannerHash,

package/dist/react/hooks/useCountdown.js

@@ -1,7 +1,6 @@
 "use client";
 import { useState, useEffect } from "react";
 /** Resolve any date-like value into a ms timestamp. */
-// audit-unknown-ok: type-narrowing entry point — accepts any value, narrows by typeof/Array.isArray
 function resolveMs(endDate) {
     if (!endDate)
         return NaN;

package/dist/security/authorization.js

@@ -17,7 +17,6 @@ const ROLE_HIERARCHY = {
     seller: 2,
     user: 1,
 };
-// audit-unknown-ok: type-narrowing entry point — accepts any value, narrows by typeof/Array.isArray
 export function requireAuth(user) {
     if (!user) {
         throw new AuthenticationError(ERROR_MESSAGES.AUTH.UNAUTHORIZED);

package/dist/security/pii-encrypt.js

@@ -208,7 +208,6 @@ export function encryptPayoutDetails(details) {
     if (bank && typeof bank === "object" && !Array.isArray(bank) && !(bank instanceof Date)) {
         result.bankAccount = encryptPiiFields({ ...bank }, ["accountNumber"]);
     }
-    // audit-unknown-ok: TS structural escape — generic param
     return result;
 }
 /**
@@ -225,7 +224,6 @@ export function decryptPayoutDetails(details) {
     if (bank && typeof bank === "object" && !Array.isArray(bank) && !(bank instanceof Date)) {
         result.bankAccount = decryptPiiFields({ ...bank }, ["accountNumber"]);
     }
-    // audit-unknown-ok: TS structural escape — generic param
     return result;
 }
 /**
@@ -243,7 +241,6 @@ export function encryptShippingConfig(config) {
     if (addr && typeof addr === "object" && !Array.isArray(addr) && !(addr instanceof Date)) {
         result.pickupAddress = encryptPiiFields({ ...addr }, ["phone", "email", "address", "address2"]);
     }
-    // audit-unknown-ok: TS structural escape — generic param
     return result;
 }
 /**
@@ -260,7 +257,6 @@ export function decryptShippingConfig(config) {
     if (addr && typeof addr === "object" && !Array.isArray(addr) && !(addr instanceof Date)) {
         result.pickupAddress = decryptPiiFields({ ...addr }, ["phone", "email", "address", "address2"]);
     }
-    // audit-unknown-ok: TS structural escape — generic param
     return result;
 }
 /**