@mohasinac/appkit 3.8.1 → 3.9.0

package/dist/features/tester/seed-data/products-tester-seed-data.js

@@ -43,7 +43,7 @@ export const productsTesterSeedData = [
         categoryNames: ["Test Gadgets", "Tester Sandbox"],
         brandSlug: "brand-tester-sandbox",
         brand: "TestBrand",
-        price: 19900,
+        price: 199,
         currency: "INR",
         stockQuantity: 10,
         availableQuantity: 10,
@@ -69,7 +69,7 @@ export const productsTesterSeedData = [
         categoryNames: ["Test Collectibles", "Tester Sandbox"],
         brandSlug: "brand-tester-sandbox",
         brand: "TestBrand",
-        price: 14900,
+        price: 149,
         currency: "INR",
         stockQuantity: 10,
         availableQuantity: 10,
@@ -95,10 +95,10 @@ export const productsTesterSeedData = [
         categoryNames: ["Test Collectibles", "Tester Sandbox"],
         brandSlug: "brand-tester-sandbox",
         brand: "TestBrand",
-        startingBid: 9900,
-        currentBid: 9900,
+        startingBid: 15000,
+        currentBid: 15000,
         currency: "INR",
-        price: 9900,
+        price: 150,
         stockQuantity: 1,
         availableQuantity: 1,
         auctionEndDate: new Date(Date.now() + 5 * 24 * 60 * 60 * 1000),
@@ -126,7 +126,7 @@ export const productsTesterSeedData = [
         categoryNames: ["Test Gadgets", "Tester Sandbox"],
         brandSlug: "brand-tester-sandbox",
         brand: "TestBrand",
-        price: 29900,
+        price: 299,
         currency: "INR",
         condition: PRODUCT_FIELDS.CONDITION_VALUES.NEW,
         status: PRODUCT_FIELDS.STATUS_VALUES.PUBLISHED,

package/dist/features/tester/seed-data/tester-checklist-seed-data.js

@@ -88,8 +88,12 @@ export const testerChecklistSeedData = [
                 { key: "add-to-cart", label: "Add to cart works from the product page" },
                 { key: "checkout-flow", label: "Checkout flow completes without errors", href: "/cart" },
                 { key: "shipping-address", label: "Selecting/adding a shipping address works" },
-                { key: "payment-proof-upload", label: "Uploading manual payment proof (UTR + screenshot) works" },
+                { key: "checkout-otp-highvalue", label: "Carts ≥ the OTP threshold prompt for email verification before placing the order (except COD)" },
+                { key: "payment-window-countdown", label: "Manual-payment orders show a 15-minute countdown timer on the payment page" },
+                { key: "payment-proof-upload", label: "Uploading manual payment proof (screenshot, UTR, mark-as-paid + agreement checkboxes) works" },
+                { key: "payment-window-expiry", label: "An order whose 15-minute payment window expires with no proof auto-cancels and the item returns to stock" },
                 { key: "order-confirmation", label: "Order confirmation page/email shows correct order details" },
+                { key: "payment-auto-approve-dispute", label: "An auto-approved order (2h, no admin review) shows the badge, and \"Raise a dispute\" submits successfully" },
             ],
         },
         {
@@ -164,7 +168,10 @@ export const testerChecklistSeedData = [
             pageLabel: "Seller Order Management & Shipping/Tracking",
             cases: [
                 { key: "view-orders", label: "Seller order list shows accurate incoming orders", href: "/store/orders" },
-                { key: "confirm-payment", label: "Confirming a buyer's manual payment proof works" },
+                { key: "confirm-payment", label: "Approving a buyer's manual payment proof works" },
+                { key: "request-reupload", label: "Requesting a proof re-upload (honest-mistake tier) clears the proof and extends the buyer's deadline" },
+                { key: "reject-fraud", label: "Rejecting a proof as fraudulent cancels the order, restores stock, and bans the buyer's account for 7 days" },
+                { key: "whatsapp-admin-share", label: "Uploading payment proof pings the admin WhatsApp numbers, and the buyer's \"Share for review\" link opens with a pre-filled message" },
                 { key: "mark-shipped", label: "Marking an order shipped with tracking info works" },
                 { key: "tracking-visible", label: "Buyer sees updated tracking status after seller ships" },
             ],

package/dist/features/whatsapp-bot/helpers/whatsapp.d.ts

@@ -1,4 +1,4 @@
-import type { CheckoutMessageInput, StatusNotificationInput, WebhookVerifyInput, IncomingWebhookPayload, SendWhatsAppInput, StatusMessageInput, WaBusinessSendInput, CatalogSyncInput, CatalogSyncResult, PurchaseAnnouncementInput } from "../types";
+import type { CheckoutMessageInput, StatusNotificationInput, WebhookVerifyInput, IncomingWebhookPayload, SendWhatsAppInput, StatusMessageInput, WaBusinessSendInput, CatalogSyncInput, CatalogSyncResult, PurchaseAnnouncementInput, PaymentProofReviewMessageInput } from "../types";
 export declare function buildCheckoutMessageURL(input: CheckoutMessageInput): string;
 export declare function buildStatusNotificationURL(input: StatusNotificationInput): string;
 export declare function verifyWebhookSignature(input: WebhookVerifyInput): boolean;
@@ -35,6 +35,13 @@ export declare function buildPurchaseAnnouncementMessage(input: PurchaseAnnounce
  * This is the only API-compliant way to target a WhatsApp group.
  */
 export declare function buildGroupShareLink(message: string): string;
+/**
+ * Tier PP — message for the payment-proof fast-review WhatsApp push (sent
+ * to every `whatsappAdminNotifyNumbers` number when a buyer uploads proof)
+ * and for the buyer/seller "share for review" wa.me link (same message,
+ * routed through `buildGroupShareLink` instead of the Cloud API push).
+ */
+export declare function buildPaymentProofReviewMessage(input: PaymentProofReviewMessageInput): string;
 /**
  * Send an outbound WhatsApp message via Twilio REST API.
  * Returns true on success, false on failure.

package/dist/features/whatsapp-bot/helpers/whatsapp.js

@@ -153,7 +153,7 @@ export async function syncProductsToCatalog(input) {
                 name: p.title,
                 description: p.description,
                 // Meta expects "<amount> <ISO_CURRENCY>" e.g. "450.00 INR"
-                price: `${(p.price / 100).toFixed(2)} ${p.currency}`,
+                price: `${p.price.toFixed(2)} ${p.currency}`,
                 image_url: p.imageUrl,
                 availability: p.availability,
                 condition: p.condition,
@@ -194,7 +194,7 @@ export async function syncProductsToCatalog(input) {
 export function buildPurchaseAnnouncementMessage(input) {
     const { buyerName, firstItemName, additionalItemCount, totalAmount, orderId } = input;
     const extra = additionalItemCount > 0 ? ` + ${additionalItemCount} more item${additionalItemCount > 1 ? "s" : ""}` : "";
-    const amount = (totalAmount / 100).toLocaleString("en-IN");
+    const amount = totalAmount.toLocaleString("en-IN");
     return `🛍️ New order! ${buyerName} purchased ${firstItemName}${extra} for ₹${amount}. Order #${orderId}`;
 }
 /**
@@ -205,6 +205,17 @@ export function buildPurchaseAnnouncementMessage(input) {
 export function buildGroupShareLink(message) {
     return `https://wa.me/?text=${encodeURIComponent(message)}`;
 }
+/**
+ * Tier PP — message for the payment-proof fast-review WhatsApp push (sent
+ * to every `whatsappAdminNotifyNumbers` number when a buyer uploads proof)
+ * and for the buyer/seller "share for review" wa.me link (same message,
+ * routed through `buildGroupShareLink` instead of the Cloud API push).
+ */
+export function buildPaymentProofReviewMessage(input) {
+    const { orderId, buyerName, productTitle, totalAmount, reviewUrl } = input;
+    const amount = totalAmount.toLocaleString("en-IN");
+    return `💳 Payment proof submitted! ${buyerName} uploaded proof for "${productTitle}" (₹${amount}). Order #${orderId}. Please review within 2 hours or it auto-confirms: ${reviewUrl}`;
+}
 /**
  * Send an outbound WhatsApp message via Twilio REST API.
  * Returns true on success, false on failure.

package/dist/features/whatsapp-bot/types/index.d.ts

@@ -56,7 +56,7 @@ export interface CatalogSyncProduct {
     id: string;
     title: string;
     description: string;
-    /** Price in paise (will be converted to INR: price/100) */
+    /** Price in decimal rupees */
     price: number;
     currency: string;
     /** URL of the first product image */
@@ -89,6 +89,14 @@ export interface PurchaseAnnouncementInput {
     totalAmount: number;
     orderId: string;
 }
+/** Tier PP — input for building the payment-proof fast-review WhatsApp message (admin push + buyer/seller share link). */
+export interface PaymentProofReviewMessageInput {
+    orderId: string;
+    buyerName: string;
+    productTitle: string;
+    totalAmount: number;
+    reviewUrl: string;
+}
 /** Known order status values — extend as needed per project. */
 export type OrderStatusKey = "pending_payment" | "payment_confirmed" | "processing" | "shipped" | "out_for_delivery" | "delivered" | "cancelled" | "refund_initiated" | string;
 export interface StatusMessageInput {

package/dist/index.d.ts

@@ -479,6 +479,7 @@ export { maskSecret } from "./security/index";
 export { rateLimit } from "./security/index";
 export { rateLimitByIdentifier } from "./security/index";
 export { redactPii, safeDisplayName, safeDisplayEmail } from "./security/index";
+export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./security/index";
 export { requireActiveAccount } from "./security/index";
 export { requireAuth } from "./security/index";
 export { requireEmailVerified } from "./security/index";
@@ -1664,6 +1665,7 @@ export { failedCheckoutRepository } from "./features/checkout/server";
 export { grantCheckoutConsentViaSms } from "./features/checkout/server";
 export { sendCheckoutConsentOtp } from "./features/checkout/server";
 export { verifyCheckoutConsentOtp } from "./features/checkout/server";
+export { sendCheckoutValueOtp, verifyCheckoutValueOtp, isCheckoutValueOtpVerified, } from "./features/checkout/server";
 export type { FailedCheckoutMeta } from "./features/checkout/server";
 export type { FailedPaymentMeta } from "./features/checkout/server";
 export { FAILED_CHECKOUTS_COLLECTION } from "./features/checkout/schemas/index";
@@ -2350,12 +2352,6 @@ export { MarketplacePreorderCard } from "./features/pre-orders/index";
 export { PreorderBadge } from "./features/pre-orders/index";
 export { PreOrdersIndexListing } from "./features/pre-orders/index";
 export type { PreOrdersIndexListingProps } from "./features/pre-orders/index";
-export { ClassifiedIndexListing } from "./features/classified/components/index";
-export type { ClassifiedIndexListingProps } from "./features/classified/components/index";
-export { DigitalCodesIndexListing } from "./features/digital-codes/components/index";
-export type { DigitalCodesIndexListingProps } from "./features/digital-codes/components/index";
-export { LiveItemsIndexListing } from "./features/live/components/index";
-export type { LiveItemsIndexListingProps } from "./features/live/components/index";
 export { buildPreorderColumns } from "./features/pre-orders/index";
 export { getPreorderStatus } from "./features/pre-orders/index";
 export { preorderAdminColumns } from "./features/pre-orders/index";
@@ -2981,6 +2977,7 @@ export type { WebhookVerifyInput } from "./features/whatsapp-bot/index";
 export { buildCheckoutMessageURL } from "./features/whatsapp-bot/server";
 export { buildStatusMessage } from "./features/whatsapp-bot/server";
 export { buildStatusNotificationURL } from "./features/whatsapp-bot/server";
+export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/server";
 export { isAdminNumber } from "./features/whatsapp-bot/server";
 export { parseIncomingWebhookPayload } from "./features/whatsapp-bot/server";
 export { sendWhatsAppMessage } from "./features/whatsapp-bot/server";
@@ -3093,7 +3090,7 @@ export { SUCCESS_MESSAGES } from "./values/index";
 export { splitCartIntoOrderGroups } from "./features/orders/index";
 export { groupOrderItemsByBundle, type BundleOrderGroup, type OrderItemForBundleGrouping, } from "./features/orders/index";
 export { buildSieveFilters } from "./utils/filter.helper";
-export { formatFileSize, formatPaise } from "./utils/number.formatter";
+export { formatFileSize } from "./utils/number.formatter";
 export { formatMonthYear } from "./utils/date.formatter";
 export { generateMediaFilename } from "./utils/id-generators";
 export { deriveContextTypeFromFilename } from "./utils/id-generators";

package/dist/index.js

@@ -885,6 +885,8 @@ export { rateLimitByIdentifier } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // redactPii - Shared export for redact pii.
 export { redactPii, safeDisplayName, safeDisplayEmail } from "./security/index";
+// [CLIENT-SSR]-Runs in both SSR and browser â€" pure display-masking helpers, no crypto dependency.
+export { isPiiEncrypted, maskName, maskEmail, maskPublicReview, maskPublicBid, maskPublicEventEntry, maskOfferForSeller, ENC_PREFIX, HMAC_PREFIX, } from "./security/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // requireActiveAccount - Shared export for require active account.
 export { requireActiveAccount } from "./security/index";
@@ -3159,6 +3161,8 @@ export { sendCheckoutConsentOtp } from "./features/checkout/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // verifyCheckoutConsentOtp - Shared export for verify checkout consent otp.
 export { verifyCheckoutConsentOtp } from "./features/checkout/server";
+// [SERVER-ONLY] Tier PP — high-value checkout OTP gate (distinct from the shipping-consent OTP above).
+export { sendCheckoutValueOtp, verifyCheckoutValueOtp, isCheckoutValueOtpVerified, } from "./features/checkout/server";
 // ./features/checkout/schemas/index
 // [SCHEMA]-Schema / data-shape constant â€" Zod validator, default-value object, or Firestore collection/field name constant.
 // FAILED_CHECKOUTS_COLLECTION - Constant used across modules.
@@ -4302,9 +4306,6 @@ export { PreorderBadge } from "./features/pre-orders/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // [SERVER-RSC]-Self-fetching index/detail page views for pre-orders.
 export { PreOrdersIndexListing } from "./features/pre-orders/index";
-export { ClassifiedIndexListing } from "./features/classified/components/index";
-export { DigitalCodesIndexListing } from "./features/digital-codes/components/index";
-export { LiveItemsIndexListing } from "./features/live/components/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // buildPreorderColumns - Helper for build preorder columns.
 export { buildPreorderColumns } from "./features/pre-orders/index";
@@ -5352,6 +5353,9 @@ export { buildStatusMessage } from "./features/whatsapp-bot/server";
 // buildStatusNotificationURL - Helper for build status notification url.
 export { buildStatusNotificationURL } from "./features/whatsapp-bot/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
+// buildPaymentProofReviewMessage - Helper for build payment proof review message (Tier PP).
+export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/server";
+// [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // isAdminNumber - Shared export for is admin number.
 export { isAdminNumber } from "./features/whatsapp-bot/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
@@ -5513,7 +5517,7 @@ export { splitCartIntoOrderGroups } from "./features/orders/index";
 export { groupOrderItemsByBundle, } from "./features/orders/index";
 // -- Missing utils
 export { buildSieveFilters } from "./utils/filter.helper";
-export { formatFileSize, formatPaise } from "./utils/number.formatter";
+export { formatFileSize } from "./utils/number.formatter";
 export { formatMonthYear } from "./utils/date.formatter";
 export { generateMediaFilename } from "./utils/id-generators"; // generateProductImageFilename already exported from "./utils/id-generators";
 export { deriveContextTypeFromFilename } from "./utils/id-generators";
@@ -5544,7 +5548,7 @@ export { ALL_TAB, EMPTY_TAB, ADMIN_PRODUCT_STATUS_TABS, ADMIN_PRODUCT_LISTING_TY
 export { GROUPED_LISTINGS_COLLECTION } from "./features/grouped/schemas/firestore";
 // SB-UNI-D + V â€" BundleDocument + bundlesRepository + features/bundles/
 // folder all deleted. Bundles are now `categoryType:"bundle"` rows on the
-// categories collection with `bundlePriceInPaise` / `bundleQueryRule` /
+// categories collection with `bundlePrice` / `bundleQueryRule` /
 // `bundleStockStatus` / `bundleQueryResolvedAt` / `bundleProductIds[]`.
 // Replacement component: CategoryBundlesListing in features/categories/components.
 export { CategoryBundlesListing } from "./features/categories/components/CategoryBundlesListing";

package/dist/next/routing/route-map.d.ts

@@ -101,6 +101,7 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly DIGITAL_CODE_DETAIL: (slug: string) => string;
         readonly LIVE: "/live";
         readonly LIVE_DETAIL: (slug: string) => string;
+        readonly ART: "/art";
     };
     readonly ERRORS: {
         readonly UNAUTHORIZED: "/unauthorized";
@@ -461,6 +462,7 @@ export declare const ROUTES: {
         readonly DIGITAL_CODE_DETAIL: (slug: string) => string;
         readonly LIVE: "/live";
         readonly LIVE_DETAIL: (slug: string) => string;
+        readonly ART: "/art";
     };
     readonly ERRORS: {
         readonly UNAUTHORIZED: "/unauthorized";

package/dist/next/routing/route-map.js

@@ -90,6 +90,12 @@ export const DEFAULT_ROUTE_MAP = {
         DIGITAL_CODE_DETAIL: (slug) => `/digital-codes/${slug}`,
         LIVE: "/live",
         LIVE_DETAIL: (slug) => `/live/${slug}`,
+        // Combined art + stickers browse page (Workstream 1c) — one page for both
+        // listing types. No dedicated detail route: art/stickers use the standard
+        // checkout flow (not classified's contact-seller/meetup flow), so their
+        // detail page stays PRODUCT_DETAIL (`/products/{slug}`), already wired in
+        // `_internal/shared/listing-types/{art,stickers}/config.ts`.
+        ART: "/art",
     },
     ERRORS: {
         UNAUTHORIZED: "/unauthorized",

package/dist/schemas/firestore-helpers.d.ts

@@ -27,8 +27,8 @@ export declare const auditTimestampsShape: {
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">>]>;
 };
-/** Money amount in paise — positive integer. */
-export declare const paiseSchema: z.ZodNumber;
+/** Money amount in decimal rupees — non-negative, at most 2 decimal places. */
+export declare const rupeesSchema: z.ZodEffects<z.ZodNumber, number, number>;
 /** ISO currency code (we use "INR" everywhere). */
 export declare const currencyCodeSchema: z.ZodString;
 /** Slug — kebab-case identifier with prefix. */

package/dist/schemas/firestore-helpers.js

@@ -21,8 +21,8 @@ export const auditTimestampsShape = {
     createdAt: firestoreDateSchema,
     updatedAt: firestoreDateSchema,
 };
-/** Money amount in paise — positive integer. */
-export const paiseSchema = z.number().int().nonnegative();
+/** Money amount in decimal rupees — non-negative, at most 2 decimal places. */
+export const rupeesSchema = z.number().nonnegative().refine((n) => Number.isInteger(Math.round(n * 100)), { message: "Amount must have at most 2 decimal places" });
 /** ISO currency code (we use "INR" everywhere). */
 export const currencyCodeSchema = z.string().length(3);
 /** Slug — kebab-case identifier with prefix. */