@mohasinac/appkit 4.10.0 → 4.11.0

package/dist/_internal/client/features/layout/DashboardLayoutClient.d.ts

@@ -35,7 +35,12 @@ export interface DashboardLayoutClientProps {
     permissions?: string[] | null;
     /** Override active-link highlight. Defaults to usePathname(). */
     activeHref?: string;
-    /** Responsive controls — currently only hideAt is honoured. */
+    /**
+     * Responsive controls — accepted for interface parity with the generic
+     * `SectionResponsive` shape used elsewhere, but not currently honoured by
+     * this component (no caller passes it today). Wire `hideAt`/`showAt`/
+     * `compactAt` to real chrome behaviour before relying on this prop.
+     */
     responsive?: SectionResponsive;
     /**
      * Cross-dashboard nav links shown in the sidebar footer. Plain hrefs

package/dist/_internal/client/features/layout/DashboardLayoutClient.js

@@ -155,7 +155,10 @@ function DashboardBottomNav({ items, activeHref }) {
 const DEFAULT_CONTENT_PADDING_RIGHT = "px-[var(--appkit-space-5)] py-[var(--appkit-space-8)] lg:pl-14 lg:pr-6 xl:pl-16 xl:pr-10";
 const DEFAULT_CONTENT_PADDING_LEFT = "px-[var(--appkit-space-5)] py-[var(--appkit-space-8)] lg:pr-14 lg:pl-6 xl:pr-16 xl:pl-10";
 const DEFAULT_CONTENT_MAX_WIDTH = "max-w-screen-2xl";
-export function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, responsive: _responsive, crossNav, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }) {
+export function DashboardLayoutClient({ variant, groups, permissions, activeHref: explicitActiveHref, 
+// audit-dead-underscore-prop-ok: accepted for interface parity, not yet
+// wired — see the doc comment on `responsive` above; no caller passes it.
+responsive: _responsive, crossNav, className, contentPadding, contentSurface, contentMaxWidth, lightBackground, darkBackground, children, }) {
     const pathname = usePathname();
     const activeHref = explicitActiveHref ?? pathname ?? "";
     const storageKey = `appkit:sidebar-open:${variant}`;

package/dist/_internal/client/features/lottery/LotteryPullForm.d.ts

@@ -16,5 +16,5 @@ interface LotteryPullFormProps {
  * Submits TX ID + phone + payment time + item number.
  * On success, shows the user their lottery number and assigned prize slot.
  */
-export declare function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser: _maxPullsPerUser, onSuccess, }: LotteryPullFormProps): React.JSX.Element;
+export declare function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser, onSuccess, }: LotteryPullFormProps): React.JSX.Element;
 export {};

package/dist/_internal/client/features/lottery/LotteryPullForm.js

@@ -10,7 +10,7 @@ import { apiClient } from "../../../../http";
  * Submits TX ID + phone + payment time + item number.
  * On success, shows the user their lottery number and assigned prize slot.
  */
-export function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser: _maxPullsPerUser, onSuccess, }) {
+export function LotteryPullForm({ sourceType, eventId, productId, totalSlots, maxPullsPerUser, onSuccess, }) {
     const [result, setResult] = useState(null);
     const [transactionId, setTransactionId] = useState("");
     const [paymentTime, setPaymentTime] = useState("");
@@ -39,7 +39,7 @@ export function LotteryPullForm({ sourceType, eventId, productId, totalSlots, ma
     if (result) {
         return (_jsxs(Stack, { gap: "sm", padding: "md", rounded: "2xl", surface: "success-surface", className: "border border-success/20", children: [_jsxs(Row, { align: "center", gap: "sm", children: [_jsx(Span, { layout: "inline-flex", color: "inverse", weight: "semibold", className: "bg-success text-[11px] tracking-wide", padding: "pill-sm", rounded: "full", transform: "uppercase", children: "Entry Confirmed" }), _jsxs(Heading, { level: 2, className: "text-success", size: "lg", weight: "bold", children: ["You're #", result.userLotteryNumber, "!"] })] }), _jsxs(Text, { className: "text-success", size: "sm", children: ["You've been assigned", " ", _jsxs(Span, { weight: "bold", children: ["Slot #", result.assignedPrizeSlotNumber] }), result.slotName ? ` — ${result.slotName}` : "", ". Good luck!"] })] }));
     }
-    return (_jsx(Form, { onSubmit: (e) => e.preventDefault(), className: "space-y-4", children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, size: "lg", weight: "semibold", children: "Submit Your Entry" }), _jsx(Text, { size: "sm", color: "muted", children: "Enter your UPI Transaction ID and payment details to claim your slot." }), _jsx(FieldInput, { name: "transactionId", label: "Transaction ID (UPI Ref / Payment Ref)", placeholder: "e.g. 123456789012", required: true, value: transactionId, onChange: (v) => { setTransactionId(v); clearErrors(); } }), _jsx(FieldInput, { name: "paymentTime", label: "Payment Date & Time", type: "datetime-local", required: true, value: paymentTime, onChange: (v) => { setPaymentTime(v); clearErrors(); } }), _jsx(FieldInput, { name: "itemNumber", label: `Slot Number (1 – ${totalSlots})`, type: "number", placeholder: `Enter a number between 1 and ${totalSlots}`, required: true, value: itemNumber, onChange: (v) => { setItemNumber(v); clearErrors(); } }), _jsx(FieldInput, { name: "userPhone", label: "Your Phone Number", type: "tel", placeholder: "e.g. 9876543210", required: true, value: userPhone, onChange: (v) => { setUserPhone(v); clearErrors(); } }), _jsx(Button, { type: "submit", variant: "primary", isLoading: mutation.isPending, onClick: () => {
+    return (_jsx(Form, { onSubmit: (e) => e.preventDefault(), className: "space-y-4", children: ({ setFieldError, clearErrors }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, size: "lg", weight: "semibold", children: "Submit Your Entry" }), _jsxs(Text, { size: "sm", color: "muted", children: ["Enter your UPI Transaction ID and payment details to claim your slot.", " ", "You may enter up to ", maxPullsPerUser, " time", maxPullsPerUser === 1 ? "" : "s", "."] }), _jsx(FieldInput, { name: "transactionId", label: "Transaction ID (UPI Ref / Payment Ref)", placeholder: "e.g. 123456789012", required: true, value: transactionId, onChange: (v) => { setTransactionId(v); clearErrors(); } }), _jsx(FieldInput, { name: "paymentTime", label: "Payment Date & Time", type: "datetime-local", required: true, value: paymentTime, onChange: (v) => { setPaymentTime(v); clearErrors(); } }), _jsx(FieldInput, { name: "itemNumber", label: `Slot Number (1 – ${totalSlots})`, type: "number", placeholder: `Enter a number between 1 and ${totalSlots}`, required: true, value: itemNumber, onChange: (v) => { setItemNumber(v); clearErrors(); } }), _jsx(FieldInput, { name: "userPhone", label: "Your Phone Number", type: "tel", placeholder: "e.g. 9876543210", required: true, value: userPhone, onChange: (v) => { setUserPhone(v); clearErrors(); } }), _jsx(Button, { type: "submit", variant: "primary", isLoading: mutation.isPending, onClick: () => {
                         clearErrors();
                         const num = parseInt(itemNumber, 10);
                         let valid = true;

package/dist/_internal/server/features/admin/daily-digest-actions.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Manual trigger for the daily status digest.
+ *
+ * The digest normally runs from the `dailyStatusDigest` scheduled Firebase
+ * Function (10:00 IST). Firebase has no "run on first deploy" trigger, so
+ * this exists to fire the exact same core function on demand — e.g. right
+ * after a fresh deploy, to confirm the whole chain works without waiting
+ * for the next morning. Both paths share one implementation; there is no
+ * second copy of the digest logic.
+ */
+import { type DailyStatusDigestResult } from "../../jobs/core/dailyStatusDigest";
+export declare function triggerDailyStatusDigest(): Promise<DailyStatusDigestResult>;
+/**
+ * Fires the digest once per deployment version, from server startup.
+ * Safe to call on every cold start — `runDeploymentDigest` claims the
+ * version in a Firestore transaction and no-ops if it's already been sent.
+ */
+export declare function triggerDeploymentDigest(version: string): Promise<DailyStatusDigestResult>;

package/dist/_internal/server/features/admin/daily-digest-actions.js

@@ -0,0 +1,37 @@
+/**
+ * Manual trigger for the daily status digest.
+ *
+ * The digest normally runs from the `dailyStatusDigest` scheduled Firebase
+ * Function (10:00 IST). Firebase has no "run on first deploy" trigger, so
+ * this exists to fire the exact same core function on demand — e.g. right
+ * after a fresh deploy, to confirm the whole chain works without waiting
+ * for the next morning. Both paths share one implementation; there is no
+ * second copy of the digest logic.
+ */
+import { getAdminDb } from "../../../../providers/db-firebase";
+import { serverLogger } from "../../../../monitoring";
+import { runDailyStatusDigest, runDeploymentDigest, } from "../../jobs/core/dailyStatusDigest";
+function buildManualJobContext(job) {
+    return {
+        job,
+        db: getAdminDb(),
+        logger: {
+            info: (message, meta) => serverLogger.info(message, meta),
+            warn: (message, meta) => serverLogger.warn(message, meta),
+            error: (message, err, meta) => serverLogger.error(message, { err, ...(meta ?? {}) }),
+        },
+        env: (key) => process.env[key],
+        now: new Date(),
+    };
+}
+export async function triggerDailyStatusDigest() {
+    return runDailyStatusDigest(buildManualJobContext("dailyStatusDigest:manual"));
+}
+/**
+ * Fires the digest once per deployment version, from server startup.
+ * Safe to call on every cold start — `runDeploymentDigest` claims the
+ * version in a Firestore transaction and no-ops if it's already been sent.
+ */
+export async function triggerDeploymentDigest(version) {
+    return runDeploymentDigest(buildManualJobContext("dailyStatusDigest:deploy"), version);
+}

package/dist/_internal/server/features/audit-log/actions.d.ts

@@ -0,0 +1,25 @@
+/**
+ * recordAdminAction — the single write-site for the admin audit trail.
+ *
+ * MVP scope: instruments the highest-value already-privileged admin actions
+ * (bans, checkout bypass, coupon edits, payout mark-paid, store status
+ * changes, role changes) rather than sweeping every write path in the app —
+ * see CLAUDE.md's "Admin Audit Log" section for the full instrumented-action
+ * list and rationale.
+ *
+ * Callers should treat this as best-effort/non-blocking — a failure to write
+ * an audit entry must never fail the underlying privileged action itself.
+ */
+import type { AdminAuditAction } from "../../../../features/audit-log/schemas/firestore";
+import type { JsonValue } from "../../../../schemas/types";
+export interface RecordAdminActionInput {
+    actorUid: string;
+    actorName?: string;
+    action: AdminAuditAction;
+    targetType: string;
+    targetId: string;
+    targetLabel?: string;
+    reason?: string;
+    metadata?: Record<string, JsonValue>;
+}
+export declare function recordAdminAction(input: RecordAdminActionInput): Promise<void>;

package/dist/_internal/server/features/audit-log/actions.js

@@ -0,0 +1,38 @@
+/**
+ * recordAdminAction — the single write-site for the admin audit trail.
+ *
+ * MVP scope: instruments the highest-value already-privileged admin actions
+ * (bans, checkout bypass, coupon edits, payout mark-paid, store status
+ * changes, role changes) rather than sweeping every write path in the app —
+ * see CLAUDE.md's "Admin Audit Log" section for the full instrumented-action
+ * list and rationale.
+ *
+ * Callers should treat this as best-effort/non-blocking — a failure to write
+ * an audit entry must never fail the underlying privileged action itself.
+ */
+import { adminAuditLogRepository } from "../../../../features/audit-log/repository/audit-log.repository";
+import { normalizeError } from "../../../../errors/normalize";
+import { serverLogger } from "../../../../monitoring";
+export async function recordAdminAction(input) {
+    try {
+        await adminAuditLogRepository.create({
+            actorUid: input.actorUid,
+            actorName: input.actorName,
+            action: input.action,
+            targetType: input.targetType,
+            targetId: input.targetId,
+            targetLabel: input.targetLabel,
+            reason: input.reason,
+            metadata: input.metadata,
+        });
+    }
+    catch (err) {
+        const normalized = normalizeError(err);
+        serverLogger.warn("recordAdminAction failed (non-critical)", {
+            action: input.action,
+            targetType: input.targetType,
+            targetId: input.targetId,
+            error: normalized.message,
+        });
+    }
+}

package/dist/_internal/server/features/brands/actions.js

@@ -26,8 +26,6 @@ function brandInputToCategoryFields(input) {
         out.brandCountry = input.country;
     if (input.founded !== undefined)
         out.brandFounded = input.founded;
-    if (input.bannerURL !== undefined)
-        out.brandBannerImage = input.bannerURL;
     if (input.logoURL !== undefined) {
         out.display = { coverImage: input.logoURL, showInMenu: false, showInFooter: false };
     }

package/dist/_internal/server/features/brands/og.d.ts

@@ -7,7 +7,10 @@ export interface BrandOgData {
 interface BrandDocLike {
     name?: string | null;
     description?: string | null;
-    logoURL?: string | null;
+    /** CategoryDocument has no `logoURL` field — the brand's image lives at `display.coverImage`, the same field the hero banner and generateMetadata's OG meta tag already use. */
+    display?: {
+        coverImage?: string | null;
+    } | null;
 }
 /** High-level OG renderer — accepts the raw brand document from `getBrandForDetail`. */
 export declare function renderBrandOg(doc: BrandDocLike | null | undefined, opts: {

package/dist/_internal/server/features/brands/og.js

@@ -7,7 +7,7 @@ export function renderBrandOg(doc, opts) {
         name,
         description: doc?.description?.slice(0, 120) ??
             `Shop authentic ${name} collectibles on ${opts.siteName}.`,
-        logoUrl: resolveOgImageUrl(doc?.logoURL ?? null, opts.baseUrl),
+        logoUrl: resolveOgImageUrl(doc?.display?.coverImage ?? null, opts.baseUrl),
     }, opts.siteName);
 }
 export function renderBrandOgImage(data, siteName) {

package/dist/_internal/server/features/grouped/data.d.ts

@@ -30,6 +30,10 @@ export declare const getGroupsForProduct: (productId: string) => Promise<Grouped
  * to render directly as a public GroupedListingsCarousel section.
  */
 export declare const getGroupsWithItemsForProduct: (productId: string) => Promise<GroupedListingWithItems[]>;
+/** Groups tagged to a category, hydrated with all member products — for the category detail page's GroupedListingsCarousel. */
+export declare const getGroupsForCategory: (categorySlug: string) => Promise<GroupedListingWithItems[]>;
+/** Groups tagged to a brand, hydrated with all member products — for the brand detail page's GroupedListingsCarousel. */
+export declare const getGroupsForBrand: (brandSlug: string) => Promise<GroupedListingWithItems[]>;
 export interface SitemapGroupedListing {
     slug: string;
     updatedAt: Date;

package/dist/_internal/server/features/grouped/data.js

@@ -132,6 +132,30 @@ export const getGroupsWithItemsForProduct = cache(async (productId) => {
         return { ...group, items: items.filter((p) => p !== null) };
     }));
 });
+/** Groups tagged to a category, hydrated with all member products — for the category detail page's GroupedListingsCarousel. */
+export const getGroupsForCategory = cache(async (categorySlug) => {
+    const groups = await groupedListingsRepository.findByCategorySlug(categorySlug).catch((err) => {
+        void normalizeError(err);
+        serverLogger.warn("grouped-data: getGroupsForCategory failed — returning empty", { categorySlug, error: err instanceof Error ? err.message : String(err) });
+        return [];
+    });
+    return Promise.all(groups.map(async (group) => {
+        const items = await Promise.all(group.productIds.map((id) => productRepository.findByIdOrSlug(id).catch(() => null)));
+        return { ...group, items: items.filter((p) => p !== null) };
+    }));
+});
+/** Groups tagged to a brand, hydrated with all member products — for the brand detail page's GroupedListingsCarousel. */
+export const getGroupsForBrand = cache(async (brandSlug) => {
+    const groups = await groupedListingsRepository.findByBrandSlug(brandSlug).catch((err) => {
+        void normalizeError(err);
+        serverLogger.warn("grouped-data: getGroupsForBrand failed — returning empty", { brandSlug, error: err instanceof Error ? err.message : String(err) });
+        return [];
+    });
+    return Promise.all(groups.map(async (group) => {
+        const items = await Promise.all(group.productIds.map((id) => productRepository.findByIdOrSlug(id).catch(() => null)));
+        return { ...group, items: items.filter((p) => p !== null) };
+    }));
+});
 export async function listSitemapGroupedListings() {
     try {
         const db = getAdminDb();

package/dist/_internal/server/features/grouped/index.d.ts

@@ -1,2 +1,2 @@
-export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, } from "./data";
+export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, getGroupsForCategory, getGroupsForBrand, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, } from "./data";
 export { GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, } from "../../../shared/features/grouped/config";

package/dist/_internal/server/features/grouped/index.js

@@ -1,2 +1,2 @@
-export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, } from "./data";
+export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, getGroupsForCategory, getGroupsForBrand, } from "./data";
 export { GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, } from "../../../shared/features/grouped/config";

package/dist/_internal/server/features/orders/actions.js

@@ -161,6 +161,15 @@ export async function attachPaymentProofAction(orderId, proof) {
             buyerFraudAgreementAcceptedAt: new Date(),
             buyerReportedUpiId: proof.buyerReportedUpiId,
             paymentUpiMismatch,
+            // A re-upload after `adminRequestProofReuploadAction` must clear the
+            // stale `reupload_requested` outcome. Both the 2-hour auto-approve
+            // sweep (`getUnreviewedProofPastDeadline`) and the admin
+            // "Awaiting verification" queue treat *any* set outcome as "already
+            // decided" — leaving it set meant a corrected proof was invisible to
+            // both: never auto-approved, never surfaced for manual review.
+            paymentReviewOutcome: null,
+            paymentReviewedBy: null,
+            paymentReviewedAt: null,
         });
         notifyAdminsOfPaymentProof({
             id: orderId,

package/dist/_internal/server/features/orders/adapters.js

@@ -1,3 +1,6 @@
+function toIsoOrUndefined(value) {
+    return value instanceof Date ? value.toISOString() : undefined;
+}
 export function orderDocumentToOrder(doc) {
     const items = doc.items?.length
         ? doc.items.map((item) => ({
@@ -55,10 +58,32 @@ export function orderDocumentToOrder(doc) {
         couponCode: doc.couponCode,
         trackingNumber: doc.trackingNumber,
         shippingCarrier: doc.shippingCarrier,
+        trackingUrl: doc.trackingUrl,
         notes: doc.notes,
+        orderDate: toIsoOrUndefined(doc.orderDate),
+        shippingDate: toIsoOrUndefined(doc.shippingDate),
+        deliveryDate: toIsoOrUndefined(doc.deliveryDate),
+        cancellationDate: toIsoOrUndefined(doc.cancellationDate),
         autoApproved: doc.autoApproved,
         disputeRaised: doc.disputeRaised,
         disputeStatus: doc.disputeStatus,
+        // Manual-payment (cash / UPI / EMI) passthrough. These were previously
+        // dropped here, which silently disabled the entire buyer proof-upload
+        // flow: `/user/orders/[id]/payment` branches on `paymentMethod` and so
+        // rendered "this order does not require manual payment upload" for every
+        // order, with no UPI ID and no countdown.
+        paymentMethod: doc.paymentMethod,
+        displayedUpiId: doc.displayedUpiId,
+        paymentDeadline: toIsoOrUndefined(doc.paymentDeadline),
+        paymentProofUrl: doc.paymentProofUrl,
+        paymentProofUploadedAt: toIsoOrUndefined(doc.paymentProofUploadedAt),
+        paymentTransactionId: doc.paymentTransactionId,
+        buyerReportedUpiId: doc.buyerReportedUpiId,
+        buyerMarkedPaid: doc.buyerMarkedPaid,
+        paymentUpiMismatch: doc.paymentUpiMismatch,
+        paymentReviewOutcome: doc.paymentReviewOutcome,
+        paymentReviewNote: doc.paymentReviewNote,
+        cancellationReason: doc.cancellationReason,
         createdAt: doc.createdAt instanceof Date
             ? doc.createdAt.toISOString()
             : String(doc.createdAt),

package/dist/_internal/server/functions/scheduled.d.ts

@@ -7,6 +7,7 @@ export declare const couponExpiry: import("./types").ScheduledFunctionDefinition
 export declare const offerExpiry: import("./types").ScheduledFunctionDefinition;
 export declare const productStatsSync: import("./types").ScheduledFunctionDefinition;
 export declare const revenueRollup: import("./types").ScheduledFunctionDefinition;
+export declare const dailyStatusDigest: import("./types").ScheduledFunctionDefinition;
 export declare const dailyDataCleanup: import("./types").ScheduledFunctionDefinition;
 export declare const countersReconcile: import("./types").ScheduledFunctionDefinition;
 export declare const positionsReconcile: import("./types").ScheduledFunctionDefinition;
@@ -19,8 +20,9 @@ export declare const cleanupRtdbEvents: import("./types").ScheduledFunctionDefin
 export declare const mediaTmpCleanup: import("./types").ScheduledFunctionDefinition;
 export declare const draftPrune: import("./types").ScheduledFunctionDefinition;
 export declare const testerSandboxCleanup: import("./types").ScheduledFunctionDefinition;
+export declare const testerSandboxRefresh: import("./types").ScheduledFunctionDefinition;
 export declare const prizeDrawExpiryReveal: import("./types").ScheduledFunctionDefinition;
 export declare const bundleStockSync: import("./types").ScheduledFunctionDefinition;
 export declare const emiInstallmentReminder: import("./types").ScheduledFunctionDefinition;
 export declare const catalogueImageStalenessReminder: import("./types").ScheduledFunctionDefinition;
-export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];
+export declare const SCHEDULED_FUNCTIONS: readonly [import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition, import("./types").ScheduledFunctionDefinition];

package/dist/_internal/server/functions/scheduled.js

@@ -1,6 +1,6 @@
 // Scheduled function definitions (Cloud Scheduler triggers).
 // Cron syntax accepts both Firebase shorthand and standard cron expressions.
-import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, paymentWindowTimeoutHandler, hardBanReinstatementHandler, paymentReviewAutoApproveHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeDrawExpiryRevealHandler, productStatsSyncHandler, revenueRollupHandler, weeklyPayoutEligibilityHandler, testerSandboxCleanupHandler, } from "../jobs/handlers";
+import { auctionSettlementHandler, autoPayoutEligibilityHandler, bundleStockSyncHandler, cartPruneHandler, cleanupRtdbEventsHandler, countersReconcileHandler, couponExpiryHandler, dailyDataCleanupHandler, draftPruneHandler, emiInstallmentReminderHandler, catalogueImageStalenessReminderHandler, mediaTmpCleanupHandler, notificationPruneHandler, offerExpiryHandler, payoutBatchHandler, paymentWindowTimeoutHandler, hardBanReinstatementHandler, paymentReviewAutoApproveHandler, pendingOrderTimeoutHandler, positionsReconcileHandler, prizeDrawExpiryRevealHandler, productStatsSyncHandler, revenueRollupHandler, dailyStatusDigestHandler, weeklyPayoutEligibilityHandler, testerSandboxCleanupHandler, testerSandboxRefreshHandler, } from "../jobs/handlers";
 import { defineFunction } from "./define";
 const REGION = "asia-south1";
 const EVERY_5_MIN = "every 5 minutes";
@@ -67,6 +67,13 @@ export const revenueRollup = defineFunction({
     handler: revenueRollupHandler,
     options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
 });
+export const dailyStatusDigest = defineFunction({
+    name: "dailyStatusDigest",
+    description: "Email the previous 24h order summary + platform status to the team every morning at 10:00 IST.",
+    trigger: { kind: "schedule", cron: "0 10 * * *", timeZone: "Asia/Kolkata" },
+    handler: dailyStatusDigestHandler,
+    options: { region: REGION, timeoutSeconds: 120, memory: "256MiB", maxInstances: 1 },
+});
 export const dailyDataCleanup = defineFunction({
     name: "dailyDataCleanup",
     description: "Daily data cleanup (drafts, transient records) at 02:00 UTC.",
@@ -151,6 +158,13 @@ export const testerSandboxCleanup = defineFunction({
     handler: testerSandboxCleanupHandler,
     options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
 });
+export const testerSandboxRefresh = defineFunction({
+    name: "testerSandboxRefresh",
+    description: "Revert live tester QA sandbox fixtures to their canonical seed shape and prune tester-created extras (every 4 hours).",
+    trigger: { kind: "schedule", cron: "0 */4 * * *", timeZone: "UTC" },
+    handler: testerSandboxRefreshHandler,
+    options: { region: REGION, timeoutSeconds: 300, memory: "256MiB", maxInstances: 1 },
+});
 export const prizeDrawExpiryReveal = defineFunction({
     name: "prizeDrawExpiryReveal",
     description: "Assign winners for outstanding paid orders on scheduled-mode prize draws past their expiry, then close them (every 5 minutes).",
@@ -189,6 +203,7 @@ export const SCHEDULED_FUNCTIONS = [
     offerExpiry,
     productStatsSync,
     revenueRollup,
+    dailyStatusDigest,
     dailyDataCleanup,
     countersReconcile,
     positionsReconcile,
@@ -201,6 +216,7 @@ export const SCHEDULED_FUNCTIONS = [
     mediaTmpCleanup,
     draftPrune,
     testerSandboxCleanup,
+    testerSandboxRefresh,
     prizeDrawExpiryReveal,
     bundleStockSync,
     emiInstallmentReminder,

package/dist/_internal/server/jobs/core/dailyStatusDigest.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Core: daily status digest email.
+ *
+ * Emails the previous 24h of order activity to the team every morning. The
+ * digest's arrival is itself the platform health signal — if it stops
+ * landing, something in the Firestore → Functions → Resend chain needs a
+ * look. Deliberately no separate error/exception tracking: there is no
+ * structured error-log collection to query, and building one just to fill
+ * this email would be scope no one asked for.
+ *
+ * Runs from a scheduled Firebase Function (not a Vercel route), so the
+ * unbounded-ish order scan below is safe against CLAUDE.md Rule #6's 10s
+ * sync ceiling — it has the Function's much larger budget.
+ */
+import type { JobContext } from "../runtime/types";
+export interface DailyStatusDigestSummary {
+    orderCount: number;
+    revenue: number;
+    statusBreakdown: Record<string, number>;
+    stuckPendingCount: number;
+    activeListingCount: number;
+}
+/** Gathers the last-24h numbers. Exported so the admin manual-trigger route can reuse it. */
+export declare function collectDailyStatusSummary(): Promise<DailyStatusDigestSummary>;
+export interface DailyStatusDigestResult {
+    sent: boolean;
+    reason?: string;
+    summary?: DailyStatusDigestSummary;
+}
+/**
+ * Sends the digest once per deployment version.
+ *
+ * Called from server startup. On Vercel that means EVERY lambda cold start,
+ * not once per deploy — so the version marker below is what makes this a
+ * per-deployment event rather than a per-cold-start email storm. The claim
+ * runs in a transaction because several cold starts can race on the first
+ * request after a deploy; exactly one wins and sends.
+ */
+export declare function runDeploymentDigest(ctx: JobContext, version: string): Promise<DailyStatusDigestResult>;
+export declare function runDailyStatusDigest(ctx: JobContext, version?: string): Promise<DailyStatusDigestResult>;

package/dist/_internal/server/jobs/core/dailyStatusDigest.js

@@ -0,0 +1,164 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Core: daily status digest email.
+ *
+ * Emails the previous 24h of order activity to the team every morning. The
+ * digest's arrival is itself the platform health signal — if it stops
+ * landing, something in the Firestore → Functions → Resend chain needs a
+ * look. Deliberately no separate error/exception tracking: there is no
+ * structured error-log collection to query, and building one just to fill
+ * this email would be scope no one asked for.
+ *
+ * Runs from a scheduled Firebase Function (not a Vercel route), so the
+ * unbounded-ish order scan below is safe against CLAUDE.md Rule #6's 10s
+ * sync ceiling — it has the Function's much larger budget.
+ */
+import { renderToStaticMarkup } from "react-dom/server";
+import { getAdminDb } from "../../../../providers/db-firebase";
+import { sendEmail } from "../../../../features/contact/email";
+import { siteSettingsRepository } from "../../../../features/admin/repository/site-settings.repository";
+import { ORDER_COLLECTION, OrderStatusValues } from "../../../../features/orders/schemas/firestore";
+import { PRODUCT_COLLECTION, ProductStatusValues } from "../../../../features/products/schemas/firestore";
+import { ORDER_FIELDS, PRODUCT_FIELDS } from "../../../../constants/field-names";
+import { EmailBold, EmailContainer, EmailDivider, EmailDoc, EmailFooter, EmailHeader, EmailRow, } from "../../../../features/email/primitives";
+import { normalizeError } from "../../../../errors/normalize";
+const DAY_MS = 24 * 60 * 60 * 1000;
+/** Statuses that shouldn't count toward revenue for the day. */
+const NON_REVENUE_STATUSES = new Set([
+    OrderStatusValues.CANCELLED,
+    OrderStatusValues.REFUNDED,
+]);
+function currency(amount) {
+    return `₹${amount.toLocaleString("en-IN", { maximumFractionDigits: 2 })}`;
+}
+/** One "Label: value" line. Uses only email primitives — email clients need
+ *  inline-styled, table-based markup, which the Email* components provide. */
+function StatLine({ label, value }) {
+    return (_jsxs(_Fragment, { children: [label, ": ", _jsx(EmailBold, { children: String(value) }), _jsx("br", {})] }));
+}
+/** Gathers the last-24h numbers. Exported so the admin manual-trigger route can reuse it. */
+export async function collectDailyStatusSummary() {
+    const db = getAdminDb();
+    const since = new Date(Date.now() - DAY_MS);
+    const recentSnap = await db
+        .collection(ORDER_COLLECTION)
+        .where(ORDER_FIELDS.CREATED_AT, ">=", since)
+        .get();
+    let revenue = 0;
+    const statusBreakdown = {};
+    for (const doc of recentSnap.docs) {
+        const data = doc.data();
+        const status = data.status ?? "unknown";
+        statusBreakdown[status] = (statusBreakdown[status] ?? 0) + 1;
+        if (!NON_REVENUE_STATUSES.has(status)) {
+            revenue += Number(data.totalPrice ?? 0) || 0;
+        }
+    }
+    // Orders still sitting in PENDING beyond the 24h window — the one number
+    // here that signals something needs attention rather than just reporting
+    // volume.
+    const stuckSnap = await db
+        .collection(ORDER_COLLECTION)
+        .where(ORDER_FIELDS.STATUS, "==", OrderStatusValues.PENDING)
+        .where(ORDER_FIELDS.CREATED_AT, "<", since)
+        .count()
+        .get();
+    const activeSnap = await db
+        .collection(PRODUCT_COLLECTION)
+        .where(PRODUCT_FIELDS.STATUS, "==", ProductStatusValues.PUBLISHED)
+        .count()
+        .get();
+    return {
+        orderCount: recentSnap.size,
+        revenue,
+        statusBreakdown,
+        stuckPendingCount: stuckSnap.data().count,
+        activeListingCount: activeSnap.data().count,
+    };
+}
+function renderDigestHtml(summary, siteName, version) {
+    const statusRows = Object.entries(summary.statusBreakdown).sort(([a], [b]) => a.localeCompare(b));
+    const title = siteName ? `${siteName} — Daily Status` : "Daily Status";
+    return `<!DOCTYPE html>${renderToStaticMarkup(_jsx(EmailDoc, { title: title, children: _jsxs(EmailContainer, { children: [_jsx(EmailHeader, { brandName: siteName }), _jsxs(EmailRow, { children: [version
+                            ? `Deployment ${version} is live. Activity for the last 24 hours.`
+                            : "Activity for the last 24 hours.", _jsx("br", {}), _jsx("br", {}), _jsx(StatLine, { label: "Orders placed", value: summary.orderCount }), _jsx(StatLine, { label: "Revenue (excl. cancelled/refunded)", value: currency(summary.revenue) }), _jsx(StatLine, { label: "Active listings", value: summary.activeListingCount }), _jsx(StatLine, { label: "Pending > 24h (needs attention)", value: summary.stuckPendingCount })] }), _jsx(EmailDivider, {}), _jsxs(EmailRow, { children: [_jsx(EmailBold, { children: "Orders by status" }), _jsx("br", {}), _jsx("br", {}), statusRows.length === 0 ? ("No orders in this window.") : (statusRows.map(([status, count]) => (_jsx(StatLine, { label: status, value: count }, status))))] }), _jsx(EmailFooter, { copyright: `© ${new Date().getFullYear()}${siteName ? ` ${siteName}` : ""}. All rights reserved.` })] }) }))}`;
+}
+const DEPLOY_MARKER_COLLECTION = "system";
+const DEPLOY_MARKER_DOC = "deployDigest";
+/**
+ * Sends the digest once per deployment version.
+ *
+ * Called from server startup. On Vercel that means EVERY lambda cold start,
+ * not once per deploy — so the version marker below is what makes this a
+ * per-deployment event rather than a per-cold-start email storm. The claim
+ * runs in a transaction because several cold starts can race on the first
+ * request after a deploy; exactly one wins and sends.
+ */
+export async function runDeploymentDigest(ctx, version) {
+    if (!version)
+        return { sent: false, reason: "no_version" };
+    const markerRef = getAdminDb().collection(DEPLOY_MARKER_COLLECTION).doc(DEPLOY_MARKER_DOC);
+    let claimed = false;
+    try {
+        await getAdminDb().runTransaction(async (tx) => {
+            const snap = await tx.get(markerRef);
+            const lastVersion = snap.data()?.lastVersion;
+            if (lastVersion === version)
+                return;
+            tx.set(markerRef, { lastVersion: version, sentAt: new Date() }, { merge: true });
+            claimed = true;
+        });
+    }
+    catch (err) {
+        void normalizeError(err);
+        ctx.logger.warn("deploymentDigest: could not claim version marker — skipping", { version });
+        return { sent: false, reason: "claim_failed" };
+    }
+    if (!claimed)
+        return { sent: false, reason: "already_sent_for_version" };
+    ctx.logger.info("deploymentDigest: claimed version, sending", { version });
+    return runDailyStatusDigest(ctx, version);
+}
+export async function runDailyStatusDigest(ctx, version) {
+    const settings = await siteSettingsRepository.getSingleton().catch((err) => {
+        void normalizeError(err);
+        return null;
+    });
+    const digestConfig = settings?.emailSettings?.dailyDigest;
+    if (digestConfig?.enabled !== true) {
+        ctx.logger.info("dailyStatusDigest: disabled in site settings — skipping");
+        return { sent: false, reason: "disabled" };
+    }
+    const recipients = (digestConfig.recipients ?? []).filter((r) => r.trim().length > 0);
+    if (recipients.length === 0) {
+        ctx.logger.warn("dailyStatusDigest: enabled but no recipients configured — skipping");
+        return { sent: false, reason: "no_recipients" };
+    }
+    const ccRecipients = (digestConfig.ccRecipients ?? []).filter((r) => r.trim().length > 0);
+    const summary = await collectDailyStatusSummary();
+    // No hardcoded brand fallback — appkit is consumer-agnostic; the site name
+    // comes from settings or the consumer's own env var.
+    const siteName = settings?.siteName?.trim() || process.env.NEXT_PUBLIC_SITE_NAME?.trim() || "";
+    const { error } = await sendEmail({
+        to: recipients,
+        // Spread rather than `cc: undefined` — SendEmailOptions has a
+        // Record<string, JsonValue> index signature that rejects undefined.
+        ...(ccRecipients.length > 0 ? { cc: ccRecipients } : {}),
+        subject: "Daily Status",
+        html: renderDigestHtml(summary, siteName, version),
+        text: (version ? `Deployment ${version} is live.\n\n` : "") +
+            `Orders placed: ${summary.orderCount}\n` +
+            `Revenue: ${currency(summary.revenue)}\n` +
+            `Active listings: ${summary.activeListingCount}\n` +
+            `Pending > 24h: ${summary.stuckPendingCount}`,
+    });
+    if (error) {
+        ctx.logger.error("dailyStatusDigest: send failed", { error: String(error) });
+        throw new Error(`Daily status digest send failed: ${String(error)}`);
+    }
+    ctx.logger.info("dailyStatusDigest: sent", {
+        recipients: recipients.length,
+        orderCount: summary.orderCount,
+    });
+    return { sent: true, summary };
+}