@mohasinac/appkit 4.1.1 → 4.2.0

package/dist/_internal/server/features/checkout/actions.js

@@ -12,14 +12,14 @@ import { roundRupees } from "../../../../utils/number.formatter";
 import { ApiError, ValidationError, NotFoundError, ERROR_MESSAGES } from "../../../../errors";
 import { ORDER_FIELDS } from "../../../../constants/field-names";
 import { serverLogger } from "../../../../monitoring";
-import { unitOfWork, siteSettingsRepository, userRepository, storeRepository, couponsRepository, notificationRepository, claimedCouponsRepository, addressesRepository, } from "../../../../repositories";
+import { unitOfWork, siteSettingsRepository, userRepository, storeRepository, couponsRepository, claimedCouponsRepository, addressesRepository, } from "../../../../repositories";
 import { calculateGst } from "../../../shared/fees/calculator";
 import { computePreOrderDepositAmount } from "../../../shared/checkout/order-math";
 import { failedCheckoutRepository } from "../../../../features/checkout/repository/failed-checkout.repository";
 import { sendOrderConfirmationEmail } from "../../../../features/contact/server";
 import { splitCartIntoOrderGroups } from "../../../../features/orders/index";
 import { resolveDate } from "../../../../utils";
-import { computeCodHandlingFee } from "../../../shared/fees/calculator";
+import { computeCodHandlingFee, computeWhatsAppNotifyFee, computeGiftWrapFee, computeShipmentProtectionFee, } from "../../../shared/fees/calculator";
 import { getAdminDb, getAdminRealtimeDb, RTDB_PATHS, } from "../../../../providers/db-firebase";
 import { PRODUCT_COLLECTION, PRODUCT_CODES_SUBCOLLECTION } from "../../../../features/products/schemas/firestore";
 import { CART_COLLECTION } from "../../../../features/cart/schemas/index";
@@ -112,9 +112,8 @@ function assertLiveJurisdiction(cartItemsArg, productByIdArg, buyerState) {
  * either party. We emit the buyer + seller rows here at the create boundary.
  */
 function emitOrderPlacedNotifications(args) {
-    const { orderId, buyerUid, buyerName, storeOwnerId, productLabel, paid } = args;
-    const buyerNotif = notificationRepository
-        .create({
+    const { orderId, buyerUid, buyerName, storeOwnerId, productLabel, paid, whatsappNotifyAddon } = args;
+    const buyerNotif = sendNotification({
         userId: buyerUid,
         type: "order_placed",
         priority: "normal",
@@ -123,14 +122,13 @@ function emitOrderPlacedNotifications(args) {
         relatedId: orderId,
         relatedType: "order",
         actionUrl: `/user/orders/view/${orderId}`,
-    })
-        .catch((err) => serverLogger.warn("Failed to create buyer order_placed notification", {
+        orderWhatsappAddonPaid: whatsappNotifyAddon,
+    }).catch((err) => serverLogger.warn("Failed to send buyer order_placed notification", {
         err: err instanceof Error ? err.message : String(err),
         orderId,
     }));
     const sellerNotif = storeOwnerId
-        ? notificationRepository
-            .create({
+        ? sendNotification({
             userId: storeOwnerId,
             type: "order_placed",
             priority: "high",
@@ -139,8 +137,7 @@ function emitOrderPlacedNotifications(args) {
             relatedId: orderId,
             relatedType: "order",
             actionUrl: `/store/orders/${orderId}/view`,
-        })
-            .catch((err) => serverLogger.warn("Failed to create seller order_placed notification", {
+        }).catch((err) => serverLogger.warn("Failed to send seller order_placed notification", {
             err: err instanceof Error ? err.message : String(err),
             orderId,
         }))
@@ -251,7 +248,7 @@ function unitPriceFor(item, product) {
  * so the caller can accumulate the checkout-wide `total`.
  */
 async function createOrderForGroup(group, orderType, ctx) {
-    const { paymentMethod, emiTenureMonths, emiSettings, commissions, appliedCoupons, cartSubtotal, couponUsageAccumulator, uid, userName, userEmail, shippingAddress, notes, adminBypass, adminBypassBy, adminBatchId, orderIds, emailsToSend, outOfStockPolicy, droppedItems, buyerState, gstSettings, siteContactUpiVpa, } = ctx;
+    const { paymentMethod, emiTenureMonths, emiSettings, commissions, appliedCoupons, cartSubtotal, couponUsageAccumulator, uid, userName, userEmail, shippingAddress, notes, adminBypass, adminBypassBy, adminBatchId, orderIds, emailsToSend, outOfStockPolicy, droppedItems, buyerState, gstSettings, siteContactUpiVpa, whatsappNotifyAddon, giftWrapAddon, giftWrapMessage, shipmentProtectionAddon, } = ctx;
     const firstItem = group[0].item;
     const firstProduct = group[0].product;
     const groupTotal = group.reduce((sum, { item, product }) => sum + unitPriceFor(item, product) * item.quantity, 0);
@@ -327,6 +324,9 @@ async function createOrderForGroup(group, orderType, ctx) {
     // Handling fee charged to the buyer for choosing COD, on top of the order
     // total — not deducted from the deposit/remaining split above.
     const codHandlingFee = paymentMethod === "cod" ? computeCodHandlingFee(groupTotal, commissions) : 0;
+    const whatsappNotifyFee = computeWhatsAppNotifyFee(whatsappNotifyAddon, commissions);
+    const giftWrapFee = computeGiftWrapFee(giftWrapAddon, commissions);
+    const shipmentProtectionFee = computeShipmentProtectionFee(groupTotal, shipmentProtectionAddon, commissions);
     let couponDiscount = 0;
     const appliedDiscounts = [];
     const groupCouponCodes = new Set();
@@ -371,7 +371,7 @@ async function createOrderForGroup(group, orderType, ctx) {
         }
     }
     couponDiscount = Math.min(couponDiscount, groupTotal);
-    const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee + codHandlingFee + (emiSchedule?.surchargeAmount ?? 0) + (gstBreakdown?.gstAmount ?? 0);
+    const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee + codHandlingFee + whatsappNotifyFee + giftWrapFee + shipmentProtectionFee + (emiSchedule?.surchargeAmount ?? 0) + (gstBreakdown?.gstAmount ?? 0);
     const imageUrls = [
         ...new Set(group
             .map(({ product }) => product.mainImage)
@@ -428,6 +428,13 @@ async function createOrderForGroup(group, orderType, ctx) {
         depositAmount: adminBypass ? undefined : depositAmount,
         codRemainingAmount: adminBypass ? undefined : codRemainingAmount,
         codHandlingFee: !adminBypass && codHandlingFee > 0 ? codHandlingFee : undefined,
+        whatsappNotifyAddon: !adminBypass && whatsappNotifyFee > 0 ? true : undefined,
+        whatsappNotifyFee: !adminBypass && whatsappNotifyFee > 0 ? whatsappNotifyFee : undefined,
+        giftWrapAddon: !adminBypass && giftWrapFee > 0 ? true : undefined,
+        giftWrapFee: !adminBypass && giftWrapFee > 0 ? giftWrapFee : undefined,
+        giftWrapMessage: !adminBypass && giftWrapFee > 0 ? giftWrapMessage?.slice(0, 500) : undefined,
+        shipmentProtectionAddon: !adminBypass && shipmentProtectionFee > 0 ? true : undefined,
+        shipmentProtectionFee: !adminBypass && shipmentProtectionFee > 0 ? shipmentProtectionFee : undefined,
         taxableAmount: gstBreakdown?.taxableAmount,
         gstAmount: gstBreakdown?.gstAmount,
         cgst: gstBreakdown?.cgst || undefined,
@@ -486,6 +493,7 @@ async function createOrderForGroup(group, orderType, ctx) {
         storeOwnerId,
         productLabel: orderItems.length > 1 ? `${orderItems.length} items` : firstItem.productTitle,
         paid: adminBypass,
+        whatsappNotifyAddon: !adminBypass && whatsappNotifyFee > 0,
     });
     return groupTotal;
 }
@@ -496,7 +504,7 @@ async function createOrderForGroup(group, orderType, ctx) {
  * auth + rate-limiting before calling this and supply the resolved user fields.
  */
 export async function createCheckoutOrderAction(input) {
-    const { userId: uid, userName, userEmail, addressId, paymentMethod, emiTenureMonths, notes, excludedProductIds = [], adminBypass = false, adminBypassBy, outOfStockPolicy = OutOfStockPolicyValues.SKIP_ITEMS, } = input;
+    const { userId: uid, userName, userEmail, addressId, paymentMethod, emiTenureMonths, notes, excludedProductIds = [], adminBypass = false, adminBypassBy, outOfStockPolicy = OutOfStockPolicyValues.SKIP_ITEMS, whatsappNotifyAddon = false, giftWrapAddon = false, giftWrapMessage, shipmentProtectionAddon = false, } = input;
     const siteSettings = await siteSettingsRepository.getSingleton();
     const commissions = siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS;
     const emiSettings = siteSettings?.emi ?? CHECKOUT_DEFAULT_EMI_SETTINGS;
@@ -747,6 +755,10 @@ export async function createCheckoutOrderAction(input) {
         buyerState: resolvedAddress?.state,
         gstSettings: siteSettings?.gst,
         siteContactUpiVpa: siteSettings?.contact?.upiVpa,
+        whatsappNotifyAddon,
+        giftWrapAddon,
+        giftWrapMessage,
+        shipmentProtectionAddon,
     };
     for (const { items: group, orderType } of orderGroups) {
         total += await createOrderForGroup(group, orderType, groupCtx);
@@ -872,11 +884,212 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
         }
     }
 }
+/**
+ * Places one order for one seller-group within `verifyAndPlaceRazorpayOrderAction`
+ * — mirrors `createOrderForGroup`'s role on the COD/cash/EMI path (same
+ * per-group fee/coupon/order-doc/notification shape), extracted into its own
+ * function purely to keep the parent function under the LARGE_COMPONENT
+ * audit threshold (`scripts/audit-code-quality.mjs`). No behavior change
+ * from the inline version this replaced.
+ */
+async function createRazorpayGroupOrder(group, orderType, ctx) {
+    const { appliedCoupons, cartSubtotal, platformFeePercent, gstPercent, whatsappNotifyFee, giftWrapFee, giftWrapMessage, shipmentProtectionAddon, siteSettings, uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, shippingAddress, notes, outOfStockPolicy, unavailablePaid, orderIds, emailsToSend, } = ctx;
+    // SB-UNI-5 2026-05-13 — bundle cart-lines use item.price (locked bundle
+    // price); regular lines use product.price. The helper keeps the math
+    // local to this block.
+    const unitPriceFor = (item, product) => item.bundleCategorySlug && item.bundleProductIds?.length
+        ? item.price
+        : product.price;
+    const firstItem = group[0].item;
+    const groupTotal = group.reduce((sum, { item, product }) => sum + unitPriceFor(item, product) * item.quantity, 0);
+    // Reuses the same store/seller lookup as the COD/UPI path above instead
+    // of re-implementing it inline — was two sequential findById calls per
+    // seller group here, duplicated from resolveShippingCost.
+    const { shippingFee, storeOwnerId } = await resolveShippingCost(firstItem.storeId);
+    let couponDiscount = 0;
+    const appliedDiscounts = [];
+    for (const coupon of appliedCoupons) {
+        let couponGroupDiscount = 0;
+        const isSellerScoped = coupon.scope === "seller" && coupon.storeId;
+        if (isSellerScoped) {
+            if (coupon.storeId !== firstItem.storeId)
+                continue;
+            if (coupon.applicableItemIds?.length) {
+                const eligibleTotal = group
+                    .filter(({ item }) => coupon.applicableItemIds.includes(item.itemId))
+                    .reduce((s, { item, product }) => s + unitPriceFor(item, product) * item.quantity, 0);
+                couponGroupDiscount =
+                    eligibleTotal > 0
+                        ? Math.min(roundRupees((eligibleTotal / groupTotal) * coupon.discountAmount), eligibleTotal)
+                        : 0;
+            }
+            else {
+                couponGroupDiscount = Math.min(coupon.discountAmount, groupTotal);
+            }
+        }
+        else if (cartSubtotal > 0) {
+            couponGroupDiscount = Math.min(roundRupees((groupTotal / cartSubtotal) * coupon.discountAmount), groupTotal);
+        }
+        if (couponGroupDiscount > 0) {
+            couponDiscount += couponGroupDiscount;
+            appliedDiscounts.push({
+                code: coupon.code,
+                couponId: coupon.couponId,
+                type: "coupon",
+                discountAmount: couponGroupDiscount,
+                scope: coupon.scope,
+                storeId: coupon.storeId,
+            });
+        }
+    }
+    couponDiscount = Math.min(couponDiscount, groupTotal);
+    const rawPlatformFee = roundRupees(groupTotal * (platformFeePercent / 100));
+    const gstOnFee = roundRupees(rawPlatformFee * (gstPercent / 100));
+    const platformFee = rawPlatformFee + gstOnFee;
+    const shipmentProtectionFee = computeShipmentProtectionFee(groupTotal, shipmentProtectionAddon, siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS);
+    const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee + whatsappNotifyFee + giftWrapFee + shipmentProtectionFee;
+    // P-8 GST — deliberately NOT wired into this Razorpay-verify path. The
+    // amount-mismatch check above (expectedPaymentAmountRs) compares against
+    // what the buyer already paid via the Razorpay order created earlier in
+    // the flow; adding product GST here without also adding it to that
+    // upstream pre-payment amount calculation would either fail the mismatch
+    // check or silently under/over-charge. Wiring GST through the full
+    // Razorpay create→verify round-trip is separate follow-up work, tracked
+    // alongside P-13 (Razorpay is disabled by default today, so this order
+    // type doesn't currently carry a GST breakdown).
+    // S-SBUNI-RULES 2026-05-13 — order-item decoration via rule registry.
+    const orderItems = group.map(({ item, product }) => {
+        const lt = (product?.listingType ?? "standard");
+        const itemRule = getListingRule(lt);
+        // SB-UNI-5 2026-05-13 — bundle cart-lines surface the locked
+        // bundlePrice (item.price), not the representative member's
+        // product.price. Stock decrement still runs per member elsewhere.
+        const isBundle = Boolean(item.bundleCategorySlug && item.bundleProductIds?.length);
+        const unitPrice = isBundle ? item.price : product.price;
+        const bundleFields = isBundle
+            ? {
+                bundleCategorySlug: item.bundleCategorySlug,
+                bundleProductIds: item.bundleProductIds,
+            }
+            : {};
+        const baseLine = {
+            productId: item.productId,
+            productTitle: item.productTitle,
+            quantity: item.quantity,
+            unitPrice,
+            totalPrice: unitPrice * item.quantity,
+            ...bundleFields,
+        };
+        return itemRule.decorateOrderItem(baseLine, product);
+    });
+    const totalQuantity = group.reduce((sum, { item }) => sum + item.quantity, 0);
+    const imageUrls = [
+        ...new Set(group
+            .map(({ product }) => product?.mainImage)
+            .filter((url) => typeof url === "string" && url.length > 0)),
+    ];
+    // S-SBUNI-RULES 2026-05-13 — order-doc decoration via rule registry.
+    const lt0Rzp = (group[0].product?.listingType ?? "standard");
+    const groupRuleRzp = getListingRule(lt0Rzp);
+    const extraOrderFields = {
+        ...groupRuleRzp.decorateOrderDoc(group[0].item, group[0].product),
+        ...(orderType === "prize-draw" && group[0].product
+            ? { prizeRevealDeadline: computePrizeRevealDeadline(group[0].product) }
+            : {}),
+    };
+    const order = await unitOfWork.orders.create({
+        productId: firstItem.productId,
+        productTitle: firstItem.productTitle,
+        userId: uid,
+        userName,
+        userEmail,
+        quantity: totalQuantity,
+        unitPrice: group[0].product.price,
+        totalPrice: orderTotal,
+        currency: firstItem.currency ?? getDefaultCurrency(),
+        storeId: firstItem.storeId || undefined,
+        storeName: firstItem.storeName || undefined,
+        items: orderItems,
+        orderType,
+        offerId: firstItem.offerId ?? undefined,
+        status: OrderStatusValues.CONFIRMED,
+        paymentStatus: PaymentStatusValues.PAID,
+        paymentMethod: PaymentMethodValues.ONLINE,
+        paymentId: razorpay_payment_id,
+        paymentRecord: {
+            method: "razorpay",
+            transactionId: razorpay_payment_id,
+            amount: orderTotal,
+            paidAt: new Date(),
+            verifiedBy: "razorpay-webhook",
+            verificationMethod: "webhook",
+            gatewayRef: {
+                orderId: razorpay_order_id,
+                paymentId: razorpay_payment_id,
+                signature: razorpay_signature,
+            },
+        },
+        shippingAddress,
+        notes,
+        platformFee,
+        shippingFee: shippingFee > 0 ? shippingFee : undefined,
+        whatsappNotifyAddon: whatsappNotifyFee > 0 ? true : undefined,
+        whatsappNotifyFee: whatsappNotifyFee > 0 ? whatsappNotifyFee : undefined,
+        giftWrapAddon: giftWrapFee > 0 ? true : undefined,
+        giftWrapFee: giftWrapFee > 0 ? giftWrapFee : undefined,
+        giftWrapMessage: giftWrapFee > 0 ? giftWrapMessage?.slice(0, 500) : undefined,
+        shipmentProtectionAddon: shipmentProtectionFee > 0 ? true : undefined,
+        shipmentProtectionFee: shipmentProtectionFee > 0 ? shipmentProtectionFee : undefined,
+        couponCode: appliedDiscounts[0]?.code,
+        couponDiscount: couponDiscount > 0 ? couponDiscount : undefined,
+        appliedDiscounts: appliedDiscounts.length > 0 ? appliedDiscounts : undefined,
+        imageUrls: imageUrls.length > 0 ? imageUrls : undefined,
+        outOfStockPolicy,
+        droppedItems: unavailablePaid.length > 0 ? unavailablePaid : undefined,
+        ...extraOrderFields,
+    });
+    orderIds.push(order.id);
+    // SB-UNI-N — claim a digital code for digital-code orders (fire-and-forget,
+    // order is already persisted so a claim failure is logged, not thrown).
+    if ((group[0]?.product?.listingType ?? "standard") === "digital-code") {
+        claimDigitalCodeForOrder(getAdminDb(), firstItem.productId, order.id, uid, {
+            userEmail: userEmail || undefined,
+            userName,
+            productTitle: firstItem.productTitle,
+        }).catch((e) => serverLogger.error("claimDigitalCode", e));
+    }
+    if (userEmail) {
+        emailsToSend.push({
+            to: userEmail,
+            userName,
+            orderId: order.id,
+            productTitle: orderItems.length > 1 ? `${orderItems.length} items` : firstItem.productTitle,
+            quantity: totalQuantity,
+            totalPrice: orderTotal,
+            currency: firstItem.currency ?? getDefaultCurrency(),
+            shippingAddress,
+            paymentMethod: PaymentMethodValues.ONLINE,
+            items: orderItems,
+        });
+    }
+    emitOrderPlacedNotifications({
+        orderId: order.id,
+        buyerUid: uid,
+        buyerName: userName,
+        storeOwnerId,
+        productLabel: orderItems.length > 1 ? `${orderItems.length} items` : firstItem.productTitle,
+        paid: true,
+        whatsappNotifyAddon: whatsappNotifyFee > 0,
+    });
+    return orderTotal;
+}
 export async function verifyAndPlaceRazorpayOrderAction(input) {
-    const { userId: uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, addressId, notes, outOfStockPolicy = OutOfStockPolicyValues.CANCEL_ORDER, } = input;
+    const { userId: uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, addressId, notes, outOfStockPolicy = OutOfStockPolicyValues.CANCEL_ORDER, whatsappNotifyAddon = false, giftWrapAddon = false, giftWrapMessage, shipmentProtectionAddon = false, } = input;
     const siteSettings = await siteSettingsRepository.getSingleton();
     const platformFeePercent = siteSettings?.commissions?.platformFeePercent ?? 5;
     const gstPercent = siteSettings?.commissions?.gstPercent ?? 18;
+    const whatsappNotifyFee = computeWhatsAppNotifyFee(whatsappNotifyAddon, siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS);
+    const giftWrapFee = computeGiftWrapFee(giftWrapAddon, siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS);
     const isValid = await verifyPaymentSignatureWithKeys({
         razorpay_order_id,
         razorpay_payment_id,
@@ -1051,178 +1264,28 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     const cartSubtotal = orderGroups.reduce((s, { items: g }) => s +
         g.reduce((gs, { item, product }) => gs + unitPriceFor(item, product) * item.quantity, 0), 0);
     for (const { items: group, orderType } of orderGroups) {
-        const firstItem = group[0].item;
-        const groupTotal = group.reduce((sum, { item, product }) => sum + unitPriceFor(item, product) * item.quantity, 0);
-        // Reuses the same store/seller lookup as the COD/UPI path above instead
-        // of re-implementing it inline — was two sequential findById calls per
-        // seller group here, duplicated from resolveShippingCost.
-        const { shippingFee, storeOwnerId } = await resolveShippingCost(firstItem.storeId);
-        let couponDiscount = 0;
-        const appliedDiscounts = [];
-        for (const coupon of appliedCoupons) {
-            let couponGroupDiscount = 0;
-            const isSellerScoped = coupon.scope === "seller" && coupon.storeId;
-            if (isSellerScoped) {
-                if (coupon.storeId !== firstItem.storeId)
-                    continue;
-                if (coupon.applicableItemIds?.length) {
-                    const eligibleTotal = group
-                        .filter(({ item }) => coupon.applicableItemIds.includes(item.itemId))
-                        .reduce((s, { item, product }) => s + unitPriceFor(item, product) * item.quantity, 0);
-                    couponGroupDiscount =
-                        eligibleTotal > 0
-                            ? Math.min(roundRupees((eligibleTotal / groupTotal) * coupon.discountAmount), eligibleTotal)
-                            : 0;
-                }
-                else {
-                    couponGroupDiscount = Math.min(coupon.discountAmount, groupTotal);
-                }
-            }
-            else if (cartSubtotal > 0) {
-                couponGroupDiscount = Math.min(roundRupees((groupTotal / cartSubtotal) * coupon.discountAmount), groupTotal);
-            }
-            if (couponGroupDiscount > 0) {
-                couponDiscount += couponGroupDiscount;
-                appliedDiscounts.push({
-                    code: coupon.code,
-                    couponId: coupon.couponId,
-                    type: "coupon",
-                    discountAmount: couponGroupDiscount,
-                    scope: coupon.scope,
-                    storeId: coupon.storeId,
-                });
-            }
-        }
-        couponDiscount = Math.min(couponDiscount, groupTotal);
-        const rawPlatformFee = roundRupees(groupTotal * (platformFeePercent / 100));
-        const gstOnFee = roundRupees(rawPlatformFee * (gstPercent / 100));
-        const platformFee = rawPlatformFee + gstOnFee;
-        const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee;
-        total += orderTotal;
-        // P-8 GST — deliberately NOT wired into this Razorpay-verify path. The
-        // amount-mismatch check above (expectedPaymentAmountRs) compares against
-        // what the buyer already paid via the Razorpay order created earlier in
-        // the flow; adding product GST here without also adding it to that
-        // upstream pre-payment amount calculation would either fail the mismatch
-        // check or silently under/over-charge. Wiring GST through the full
-        // Razorpay create→verify round-trip is separate follow-up work, tracked
-        // alongside P-13 (Razorpay is disabled by default today, so this order
-        // type doesn't currently carry a GST breakdown).
-        // S-SBUNI-RULES 2026-05-13 — order-item decoration via rule registry.
-        const orderItems = group.map(({ item, product }) => {
-            const lt = (product?.listingType ?? "standard");
-            const itemRule = getListingRule(lt);
-            // SB-UNI-5 2026-05-13 — bundle cart-lines surface the locked
-            // bundlePrice (item.price), not the representative member's
-            // product.price. Stock decrement still runs per member elsewhere.
-            const isBundle = Boolean(item.bundleCategorySlug && item.bundleProductIds?.length);
-            const unitPrice = isBundle ? item.price : product.price;
-            const bundleFields = isBundle
-                ? {
-                    bundleCategorySlug: item.bundleCategorySlug,
-                    bundleProductIds: item.bundleProductIds,
-                }
-                : {};
-            const baseLine = {
-                productId: item.productId,
-                productTitle: item.productTitle,
-                quantity: item.quantity,
-                unitPrice,
-                totalPrice: unitPrice * item.quantity,
-                ...bundleFields,
-            };
-            return itemRule.decorateOrderItem(baseLine, product);
-        });
-        const totalQuantity = group.reduce((sum, { item }) => sum + item.quantity, 0);
-        const imageUrls = [
-            ...new Set(group
-                .map(({ product }) => product?.mainImage)
-                .filter((url) => typeof url === "string" && url.length > 0)),
-        ];
-        // S-SBUNI-RULES 2026-05-13 — order-doc decoration via rule registry.
-        const lt0Rzp = (group[0].product?.listingType ?? "standard");
-        const groupRuleRzp = getListingRule(lt0Rzp);
-        const extraOrderFields = {
-            ...groupRuleRzp.decorateOrderDoc(group[0].item, group[0].product),
-            ...(orderType === "prize-draw" && group[0].product
-                ? { prizeRevealDeadline: computePrizeRevealDeadline(group[0].product) }
-                : {}),
-        };
-        const order = await unitOfWork.orders.create({
-            productId: firstItem.productId,
-            productTitle: firstItem.productTitle,
-            userId: uid,
+        total += await createRazorpayGroupOrder(group, orderType, {
+            appliedCoupons,
+            cartSubtotal,
+            platformFeePercent,
+            gstPercent,
+            whatsappNotifyFee,
+            giftWrapFee,
+            giftWrapMessage,
+            shipmentProtectionAddon,
+            siteSettings,
+            uid,
             userName,
             userEmail,
-            quantity: totalQuantity,
-            unitPrice: group[0].product.price,
-            totalPrice: orderTotal,
-            currency: firstItem.currency ?? getDefaultCurrency(),
-            storeId: firstItem.storeId || undefined,
-            storeName: firstItem.storeName || undefined,
-            items: orderItems,
-            orderType,
-            offerId: firstItem.offerId ?? undefined,
-            status: OrderStatusValues.CONFIRMED,
-            paymentStatus: PaymentStatusValues.PAID,
-            paymentMethod: PaymentMethodValues.ONLINE,
-            paymentId: razorpay_payment_id,
-            paymentRecord: {
-                method: "razorpay",
-                transactionId: razorpay_payment_id,
-                amount: orderTotal,
-                paidAt: new Date(),
-                verifiedBy: "razorpay-webhook",
-                verificationMethod: "webhook",
-                gatewayRef: {
-                    orderId: razorpay_order_id,
-                    paymentId: razorpay_payment_id,
-                    signature: razorpay_signature,
-                },
-            },
+            razorpay_order_id,
+            razorpay_payment_id,
+            razorpay_signature,
             shippingAddress,
             notes,
-            platformFee,
-            shippingFee: shippingFee > 0 ? shippingFee : undefined,
-            couponCode: appliedDiscounts[0]?.code,
-            couponDiscount: couponDiscount > 0 ? couponDiscount : undefined,
-            appliedDiscounts: appliedDiscounts.length > 0 ? appliedDiscounts : undefined,
-            imageUrls: imageUrls.length > 0 ? imageUrls : undefined,
             outOfStockPolicy,
-            droppedItems: unavailablePaid.length > 0 ? unavailablePaid : undefined,
-            ...extraOrderFields,
-        });
-        orderIds.push(order.id);
-        // SB-UNI-N — claim a digital code for digital-code orders (fire-and-forget,
-        // order is already persisted so a claim failure is logged, not thrown).
-        if ((group[0]?.product?.listingType ?? "standard") === "digital-code") {
-            claimDigitalCodeForOrder(getAdminDb(), firstItem.productId, order.id, uid, {
-                userEmail: userEmail || undefined,
-                userName,
-                productTitle: firstItem.productTitle,
-            }).catch((e) => serverLogger.error("claimDigitalCode", e));
-        }
-        if (userEmail) {
-            emailsToSend.push({
-                to: userEmail,
-                userName,
-                orderId: order.id,
-                productTitle: orderItems.length > 1 ? `${orderItems.length} items` : firstItem.productTitle,
-                quantity: totalQuantity,
-                totalPrice: orderTotal,
-                currency: firstItem.currency ?? getDefaultCurrency(),
-                shippingAddress,
-                paymentMethod: PaymentMethodValues.ONLINE,
-                items: orderItems,
-            });
-        }
-        emitOrderPlacedNotifications({
-            orderId: order.id,
-            buyerUid: uid,
-            buyerName: userName,
-            storeOwnerId,
-            productLabel: orderItems.length > 1 ? `${orderItems.length} items` : firstItem.productTitle,
-            paid: true,
+            unavailablePaid,
+            orderIds,
+            emailsToSend,
         });
     }
     // SB-UNI-5 2026-05-13 — bundle-aware batch decrement. We iterate the

package/dist/_internal/server/features/maintenance/cloud-logs-data.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Google Cloud Logging integration for the `/admin/maintenance/cloud-logs`
+ * page. Reuses the same 3-tier credential resolution as
+ * `providers/db-firebase/admin.ts` (local `firebase-admin-key.json` → Vercel
+ * `FIREBASE_ADMIN_*` env vars → Application Default Credentials), so no new
+ * env vars are required.
+ *
+ * Bounded to ONE `Logging#getEntries()` call per invocation — never
+ * `getEntriesStream()` in an unbounded loop — to respect the Vercel Hobby
+ * 10s sync-function ceiling (CLAUDE.md Rule #6). Pagination is client-driven
+ * via `nextPageToken`, not exhausted server-side.
+ *
+ * `@google-cloud/logging` is a consumer-side (root `package.json`) dependency
+ * — it is never imported at module scope here. The `Logging` client is
+ * lazily `require()`d inside a function body via `(module as any).require`,
+ * exactly like `admin.ts` lazily loads `firebase-admin/*`, so Turbopack never
+ * sees a static import of a Node-only client reachable from a client bundle
+ * (CLAUDE.md Root Cause #6 / #24). A minimal local interface describes the
+ * only surface we call — this file never imports `@google-cloud/logging`'s
+ * own types, so it type-checks even though the package is deliberately not
+ * listed as an appkit dependency (it lives in the consumer's root
+ * `package.json` only, since this integration is Next.js-route-only).
+ */
+export interface CloudLogEntry {
+    id: string;
+    timestamp: string;
+    severity: string;
+    resourceType: string;
+    resourceLabels: Record<string, string>;
+    logName: string;
+    message: string;
+}
+export interface ListCloudLogEntriesOpts {
+    /** Full Cloud Logging filter string. Defaults to a 24h `resource.type` window (see below). */
+    filter?: string;
+    /** Capped at 100. Defaults to 50. */
+    pageSize?: number;
+    /** Opaque continuation token from a previous call's `nextPageToken`. */
+    pageToken?: string;
+}
+export interface ListCloudLogEntriesResult {
+    entries: CloudLogEntry[];
+    nextPageToken: string | null;
+}
+/**
+ * Bounded, single-page Cloud Logging read. One `getEntries()` call per
+ * invocation — the caller drives further pages via `opts.pageToken`
+ * (client-side "Load more"), never a server-side exhaust loop.
+ */
+export declare const listCloudLogEntries: (opts?: ListCloudLogEntriesOpts) => Promise<ListCloudLogEntriesResult>;