@mohasinac/appkit 3.2.10 → 3.2.12

package/dist/_internal/server/features/auth/firebase-identity.d.ts

@@ -1,3 +1,4 @@
+import type { JsonObject } from "../../../../schemas/types";
 type IdentityOperation = "signInWithPassword" | "signInWithCustomToken";
 /**
  * Calls the Firebase Identity Toolkit REST API with one retry for transient
@@ -8,5 +9,5 @@ type IdentityOperation = "signInWithPassword" | "signInWithCustomToken";
  * into a session cookie. Centralised here so the URL, Content-Type, and retry
  * config are in one place.
  */
-export declare function callFirebaseIdentityToolkit<T extends Record<string, unknown>>(operation: IdentityOperation, body: Record<string, unknown>, apiKey: string): Promise<T>;
+export declare function callFirebaseIdentityToolkit<T extends JsonObject>(operation: IdentityOperation, body: JsonObject, apiKey: string): Promise<T>;
 export {};

package/dist/_internal/server/features/checkout/actions.js

@@ -1,4 +1,5 @@
 import { normalizeError } from "../../../../errors/normalize";
+import { safeFireAndForget } from "../../../../utils/safe-fire-forget";
 /**
  * Checkout server actions (appkit).
  *
@@ -29,6 +30,7 @@ import { formatShippingAddress } from "./data";
 import { enforceMaxPerUserForCart, computePrizeRevealDeadline, } from "./prize-bundle-gates";
 import { getListingRule, runSyncPreflight, } from "../../../shared/checkout/rules";
 import { cartIsDigitalOnly } from "../../../shared/listing-types/cart-shipping";
+const AUDIT_LOG_FAIL_MSG = "checkout: audit log failed (non-critical)";
 /**
  * SB-UNI-N — Atomically claim the next available digital code for a confirmed
  * order. Pre-fetches a candidate code outside the transaction then locks and
@@ -264,7 +266,7 @@ export async function createCheckoutOrderAction(input) {
         if (!addressId) {
             failedCheckoutRepository
                 .logCheckout(uid, "address_not_found", "Address required for physical cart", { addressId: "", paymentMethod })
-                .catch(console.error);
+                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
             throw new NotFoundError(ERROR_MESSAGES.CHECKOUT.ADDRESS_REQUIRED);
         }
         const addressDoc = await unitOfWork.addresses.findById(addressId);
@@ -275,7 +277,7 @@ export async function createCheckoutOrderAction(input) {
         if (!resolvedAddress) {
             failedCheckoutRepository
                 .logCheckout(uid, "address_not_found", "Address not found", { addressId, paymentMethod })
-                .catch(console.error);
+                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
             throw new NotFoundError(ERROR_MESSAGES.CHECKOUT.ADDRESS_REQUIRED);
         }
         shippingAddress = formatShippingAddress(resolvedAddress);
@@ -414,7 +416,7 @@ export async function createCheckoutOrderAction(input) {
             addressId,
             paymentMethod,
         })
-            .catch(console.error);
+            .catch((logErr) => { void normalizeError(logErr); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: logErr instanceof Error ? logErr.message : String(logErr) }); });
         throw err;
     }
     const { available, unavailable, emailOtpUsed } = stockResult;
@@ -425,7 +427,7 @@ export async function createCheckoutOrderAction(input) {
             paymentMethod,
             cartItemCount: cartItems.length,
         })
-            .catch(console.error);
+            .catch((logErr) => { void normalizeError(logErr); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: logErr instanceof Error ? logErr.message : String(logErr) }); });
         throw new ValidationError(ERROR_MESSAGES.CHECKOUT.INSUFFICIENT_STOCK);
     }
     const appliedCoupons = cart.appliedCoupons ?? [];
@@ -669,7 +671,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
             gatewayPaymentId: razorpay_payment_id,
             addressId,
         })
-            .catch(console.error);
+            .catch((logErr) => { void normalizeError(logErr); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: logErr instanceof Error ? logErr.message : String(logErr) }); });
         throw new ValidationError(ERROR_MESSAGES.CHECKOUT.PAYMENT_FAILED);
     }
     const cart = await unitOfWork.carts.getOrCreate(uid);
@@ -711,7 +713,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
                 gatewayPaymentId: razorpay_payment_id,
                 addressId,
             })
-                .catch(console.error);
+                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
             throw new ApiError(403, "Order verification required. Please complete OTP verification and retry.");
         }
     }
@@ -762,7 +764,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
                 gatewayPaymentId: razorpay_payment_id,
                 addressId,
             })
-                .catch(console.error);
+                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
             throw new ValidationError(exists
                 ? ERROR_MESSAGES.CHECKOUT.INSUFFICIENT_STOCK
                 : ERROR_MESSAGES.CHECKOUT.PRODUCT_UNAVAILABLE);
@@ -790,7 +792,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
                 amountRs: paidAmountRs,
                 addressId,
             })
-                .catch(console.error);
+                .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
             throw new ValidationError(ERROR_MESSAGES.CHECKOUT.PAYMENT_FAILED);
         }
     }
@@ -996,7 +998,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     });
     if (!isDigitalCartRazorpay && addressId) {
         const otpRefForDelete = consentOtpRef(db, uid, addressId);
-        otpRefForDelete.delete().catch(console.error);
+        safeFireAndForget(otpRefForDelete.delete(), "checkout: delete OTP consent ref after Razorpay payment");
     }
     if (emailsToSend.length > 0) {
         Promise.all(emailsToSend.map((e) => sendOrderConfirmationEmail(e))).catch((err) => serverLogger.error("Order confirmation email error:", err));

package/dist/_internal/server/features/grouped/data.js

@@ -1,5 +1,7 @@
 import { cache } from "react";
 import { getAdminDb } from "../../../../providers/db-firebase";
+import { normalizeError } from "../../../../errors/normalize";
+import { serverLogger } from "../../../../monitoring/server-logger";
 import { GROUPED_LISTINGS_COLLECTION, } from "../../../../features/grouped/schemas/firestore";
 import { productRepository } from "../../../../repositories";
 import { PRODUCT_FIELDS, CATEGORY_FIELDS } from "../../../../constants/field-names";
@@ -55,7 +57,9 @@ export const getGroupedListingForDetail = cache(async (slug) => {
         }
         return mapDoc(snap.docs[0]);
     }
-    catch {
+    catch (err) {
+        void normalizeError(err);
+        serverLogger.warn("grouped-data: getGroupedListingForDetail failed — returning null", { slug, error: err instanceof Error ? err.message : String(err) });
         return null;
     }
 });
@@ -93,7 +97,9 @@ export async function listGroupedListings(params = {}) {
             .get();
         return snap.docs.map(mapDoc);
     }
-    catch {
+    catch (err) {
+        void normalizeError(err);
+        serverLogger.warn("grouped-data: listGroupedListings failed — returning empty", { params, error: err instanceof Error ? err.message : String(err) });
         return [];
     }
 }
@@ -118,7 +124,9 @@ export async function listSitemapGroupedListings() {
             };
         });
     }
-    catch {
+    catch (err) {
+        void normalizeError(err);
+        serverLogger.warn("grouped-data: listSitemapGroupedListings failed — returning empty", { error: err instanceof Error ? err.message : String(err) });
         return [];
     }
 }

package/dist/_internal/server/jobs/core/cleanupRtdbEvents.js

@@ -17,7 +17,10 @@ export async function runCleanupRtdbEvents(ctx) {
             if (staleAuthIds.length > 0) {
                 await Promise.all(staleAuthIds.flatMap((id) => [
                     rtdb.ref(`auth_events/${id}`).remove(),
-                    auth.deleteUser(`auth_event_${id}`).catch(console.error),
+                    auth.deleteUser(`auth_event_${id}`).catch((err) => {
+                        void normalizeError(err);
+                        ctx.logger.warn("cleanupRtdbEvents: deleteUser skipped — may already be absent", { userId: `auth_event_${id}`, error: err instanceof Error ? err.message : String(err) });
+                    }),
                 ]));
                 ctx.logger.info("Auth events removed", { count: staleAuthIds.length });
             }

package/dist/_internal/shared/listing-types/action-tracker.js

@@ -1,3 +1,4 @@
+import { normalizeError } from "../../../errors/normalize";
 function defaultSink(event) {
     if (typeof window === "undefined") {
         // SSR / Node — best-effort console log; production servers can swap
@@ -32,7 +33,7 @@ export const actionTracker = {
             const result = currentSink(event);
             // Swallow promise rejections so the caller path is never affected.
             if (result && typeof result.catch === "function") {
-                result.catch(console.error);
+                result.catch((err) => { void normalizeError(err); });
             }
         }
         catch {

package/dist/features/blog/api/[slug]/route.js

@@ -11,6 +11,7 @@
 import { NextResponse } from "next/server.js";
 import { blogRepository } from "../../repository/blog.repository";
 import { normalizeError } from "../../../../errors/normalize";
+import { safeFireAndForget } from "../../../../utils/safe-fire-forget";
 function toBlogPost(doc) {
     return {
         ...doc,
@@ -28,7 +29,7 @@ export async function GET(_request, context) {
             return NextResponse.json({ success: false, error: "Blog post not found" }, { status: 404 });
         }
         // Increment view count fire-and-forget — must not block response
-        blogRepository.incrementViews(post.id).catch(console.error);
+        safeFireAndForget(blogRepository.incrementViews(post.id), "blog: incrementViews");
         // Related posts: same category, latest 3, excluding current
         const related = (await blogRepository.findRelated(post.category, post.id, 3)).map(toBlogPost);
         const body = { post: toBlogPost(post), related };

package/dist/features/homepage/lib/live-stats.js

@@ -8,6 +8,8 @@
 import { ALLOWED_LIVE_COLLECTIONS } from "../schemas/firestore";
 import { productRepository, storeRepository, userRepository, reviewRepository, orderRepository, } from "../../../repositories";
 import { getAdminDb, getFirestoreCount } from "../../../providers/db-firebase";
+import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring/server-logger";
 /**
  * Fetch live stats for all requested metrics.
  * Preset metrics are deduped so each Firestore query runs at most once.
@@ -27,22 +29,22 @@ export async function fetchLiveStats(requests) {
     if (neededPresets.has("total_listings")) {
         tasks.push(productRepository.count()
             .then((n) => { resolvedPresets.total_listings = String(n); })
-            .catch(console.error));
+            .catch((err) => { void normalizeError(err); serverLogger.warn("live-stats: total_listings query failed — stat omitted", { error: err instanceof Error ? err.message : String(err) }); }));
     }
     if (neededPresets.has("verified_sellers")) {
         tasks.push(storeRepository.count()
             .then((n) => { resolvedPresets.verified_sellers = String(n); })
-            .catch(console.error));
+            .catch((err) => { void normalizeError(err); serverLogger.warn("live-stats: verified_sellers query failed — stat omitted", { error: err instanceof Error ? err.message : String(err) }); }));
     }
     if (neededPresets.has("total_buyers")) {
         tasks.push(userRepository.countByRole("user")
             .then((n) => { resolvedPresets.total_buyers = String(n); })
-            .catch(console.error));
+            .catch((err) => { void normalizeError(err); serverLogger.warn("live-stats: total_buyers query failed — stat omitted", { error: err instanceof Error ? err.message : String(err) }); }));
     }
     if (neededPresets.has("total_orders")) {
         tasks.push(orderRepository.count()
             .then((n) => { resolvedPresets.total_orders = String(n); })
-            .catch(console.error));
+            .catch((err) => { void normalizeError(err); serverLogger.warn("live-stats: total_orders query failed — stat omitted", { error: err instanceof Error ? err.message : String(err) }); }));
     }
     if (neededPresets.has("total_reviews") || neededPresets.has("platform_rating")) {
         tasks.push(reviewRepository.findAll()
@@ -57,7 +59,7 @@ export async function fetchLiveStats(requests) {
                 resolvedPresets.platform_rating = avg.toFixed(1) + "★";
             }
         })
-            .catch(console.error));
+            .catch((err) => { void normalizeError(err); serverLogger.warn("live-stats: reviews/rating query failed — stat omitted", { error: err instanceof Error ? err.message : String(err) }); }));
     }
     // --- Collection-query metrics ------------------------------------------------
     const queryRequests = requests.filter((r) => r.source === "live-collection" && r.collectionQuery !== undefined);

package/dist/features/scams/actions/scam-actions.js

@@ -1,6 +1,7 @@
 "use server";
 import { sieveFilter, SIEVE_OP } from "@mohasinac/appkit";
 import { scammerRepository } from "../repository/scammer.repository";
+import { safeFireAndForget } from "../../../utils/safe-fire-forget";
 /**
  * List verified scammer profiles for the public registry page.
  * Accepts sieve-style searchParams from Next.js page props.
@@ -43,7 +44,7 @@ export async function getPublicScammerById(id) {
     if (!doc || doc.status !== "verified")
         return null;
     // Increment views — non-blocking.
-    scammerRepository.incrementViews(doc.id).catch(console.error);
+    safeFireAndForget(scammerRepository.incrementViews(doc.id), "scam: incrementViews");
     return doc;
 }
 /**

package/dist/features/scams/repository/scammer.repository.js

@@ -1,6 +1,7 @@
 import { DatabaseError } from "../../../errors";
 import { BaseRepository, prepareForFirestore, } from "../../../providers/db-firebase";
 import { normalizeError } from "../../../errors/normalize";
+import { serverLogger } from "../../../monitoring/server-logger";
 import { increment } from "../../../contracts/field-ops";
 import { SCAMMER_COLLECTION, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, DEFAULT_SCAMMER_DATA, } from "../schemas/firestore";
 class ScammerRepository extends BaseRepository {
@@ -116,7 +117,9 @@ class ScammerRepository extends BaseRepository {
                 .get();
             return snap.docs.map((d) => this.mapDoc(d));
         }
-        catch {
+        catch (err) {
+            void normalizeError(err);
+            serverLogger.warn("scammer-repo: listPublicIncidents failed — returning empty", { scammerId, error: err instanceof Error ? err.message : String(err) });
             return [];
         }
     }
@@ -132,7 +135,9 @@ class ScammerRepository extends BaseRepository {
                 .get();
             return snap.docs.map((d) => this.mapDoc(d));
         }
-        catch {
+        catch (err) {
+            void normalizeError(err);
+            serverLogger.warn("scammer-repo: listPublicComments failed — returning empty", { scammerId, error: err instanceof Error ? err.message : String(err) });
             return [];
         }
     }
@@ -143,7 +148,9 @@ class ScammerRepository extends BaseRepository {
             const results = await Promise.all(ids.slice(0, 5).map((id) => this.findById(id).catch(() => null)));
             return results.filter((d) => d !== null && d.status === "verified");
         }
-        catch {
+        catch (err) {
+            void normalizeError(err);
+            serverLogger.warn("scammer-repo: findManyById failed — returning empty", { ids, error: err instanceof Error ? err.message : String(err) });
             return [];
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "3.2.10",
+  "version": "3.2.12",
   "license": "MIT",
   "publishConfig": {
     "access": "public"