@mohasinac/appkit 4.22.0 → 4.24.0

package/dist/features/tester/seed-data/tester-checklist-seed-data.js

@@ -1156,6 +1156,90 @@ const rawTesterChecklistItems = [
                     description: "The fix had to cover the update path as well as create — a create-only fix would mean the listing saved correctly and then lost its per-type block the first time anyone edited anything else (Root Cause #39).",
                     href: "/store/classified",
                 },
+                {
+                    key: "notification-email-is-a-real-email",
+                    label: "A notification email has a heading, a lead line and a button — not one bare paragraph",
+                    description: "`emailHtml` existed on the input since the channel was built and 0 of 40 call sites passed it, so all 28 notification types shipped `<p>{message}</p>`. Trigger any notification that emails (place an order as a buyer). The mail must carry the site header, a bold title, a one-line lead saying what kind of mail it is, the message, and a CTA button.",
+                    href: "/user/notifications",
+                },
+                {
+                    key: "notification-click-lands-on-the-right-page",
+                    label: "Clicking a notification opens the record it is about, in YOUR portal",
+                    description: "actionUrl was set by 5 of 40 writers, so 35 notifications had nothing to click. It is now resolved centrally from relatedType + relatedId + audience. Check that an order notification opens /user/orders/view/... for the buyer and /store/orders/.../view for the seller — the SAME event, two destinations. A bid or offer lands on the list, deliberately: no per-record page exists in any role yet.",
+                    href: "/user/notifications",
+                },
+                {
+                    key: "admin-can-filter-every-notification-type",
+                    label: "The admin notifications filter offers all 28 types, and no imaginary ones",
+                    description: "The chips came from a hand-written 9-value list while the document held 27 — so 18 real types were unfilterable and two chips (`review_posted`, `payout_processed`) matched zero rows because no notification has ever had those values. The list is derived now. Confirm `offer_received` and `payment_review` are both present.",
+                    href: "/admin/notifications",
+                },
+                {
+                    key: "admin-can-allowlist-every-type-per-channel",
+                    label: "Site Settings can allow-list offer and payment-review notifications for email",
+                    description: "Same 9-value list fed the per-channel allow-list, so an admin literally could not allow-list `offer_received` or `payment_review` — the toggle did not exist. Open Site Settings → Notifications and confirm every type appears in the per-channel type picker.",
+                    href: "/admin/site",
+                },
+                {
+                    key: "notification-optout-is-honoured-for-emi-and-payment",
+                    label: "Turning off order updates actually stops EMI and payment-review emails",
+                    description: "`typeToPrefsKey` was a Partial map missing `emi_installment_due_soon`, `emi_installment_overdue` and `payment_review` — and a missing key meant the opt-out check never ran, so the user's setting was silently ignored while reading as honoured. Turn off Order updates in /user/settings, then trigger a payment-review notification and confirm no email arrives.",
+                    href: "/user/settings",
+                },
+                {
+                    key: "ticket-resolution-timestamp-stamped",
+                    label: "Resolving a support ticket records WHEN it was resolved",
+                    description: "`resolvedAt` and `closedAt` were declared on the document, had field-name constants, were listed in the update input — and nothing had ever written either (verified 2026-08-26), so no resolved ticket carried a resolution time. Move a ticket to Resolved, reopen it, and confirm the timeline shows a real date on that step. Re-save an unrelated field afterwards: the resolution time must NOT move forward.",
+                    href: "/admin/support-tickets",
+                },
+                {
+                    key: "payout-utr-actually-saves",
+                    label: "The UTR entered when marking a payout paid is still there on reload",
+                    description: "The mark-paid modal REQUIRES a transaction reference, the route declared it, its own test asserted it reached the action — and the action picked only status/adminNote/processedAt, so the UTR was dropped while the 200 echoed it back as if stored. Mark a payout paid with a reference, reload the payout, and confirm 'Transaction ref' shows it.",
+                    href: "/admin/payouts",
+                },
+                {
+                    key: "store-approval-makes-it-public",
+                    label: "Approving a pending store actually makes it visible on /stores",
+                    description: "`status` and `isPublic` are two distinct fields and public visibility gates on `isPublic`. The admin PATCH wrote `status` directly and never touched `isPublic`, so an approved store was active AND invisible with no error anywhere. Approve `store-blader-bazaar`, then open /stores and confirm it appears.",
+                    href: "/admin/stores",
+                },
+                {
+                    key: "store-timeline-shows-who-suspended",
+                    label: "A suspended store's page shows who suspended it, when, and why",
+                    description: "Previously recoverable only from /admin/audit-log, which a store owner can never see. Suspend a store with a reason, open its admin detail page, and confirm the History block names the admin, the time, and the reason.",
+                    href: "/admin/stores",
+                },
+                {
+                    key: "payout-failure-reasons-survive-retries",
+                    label: "A payout that failed twice shows BOTH reasons, not just the last",
+                    description: "`lastFailureReason` is overwritten by every retry, so the timeline is the only place earlier attempts survive. Also confirm the four dispatch fields (razorpayPayoutId, razorpayStatus, failureCount, lastFailureReason) render — they were written by the batch and UNDECLARED on the document until 2026-08-26, so nothing could safely surface them.",
+                    href: "/admin/payouts",
+                },
+                {
+                    key: "bid-timeline-explains-forfeited",
+                    label: "A forfeited bid says why it was forfeited",
+                    description: "Open a forfeited bid from /admin/bids. The History block must read 'Forfeited' with the system actor and the reason 'The 48-hour checkout window closed without payment.' A bid moves through more states than any record a buyer owns and every one of them happened inside a settlement batch with nothing recording it.",
+                    href: "/admin/bids",
+                },
+                {
+                    key: "catalogue-rejection-reason-survives",
+                    label: "A catalogue item rejected twice keeps both reasons",
+                    description: "`rejectionReason` holds only the last decision. Reject a submission, have the owner resubmit, reject again with a different reason — the approval modal's History block must show both, each with its own date.",
+                    href: "/admin/catalogue-approvals",
+                },
+                {
+                    key: "history-absent-renders-empty-not-invented",
+                    label: "A record created BEFORE history existed shows 'no recorded history', not a made-up date",
+                    description: "Never fabricate a timestamp. Open any store, payout or ticket that predates this feature: the History block must say there is none, NOT derive a step from `updatedAt` — 'last write of any kind' is not an event, and a made-up date makes the record lie.",
+                    href: "/admin/stores",
+                },
+                {
+                    key: "history-carries-no-pii",
+                    label: "No name or email appears anywhere in a record's History block",
+                    description: "`encryptPiiFields` is a flat top-level loop that never descends into arrays, so a PII value inside statusHistory would be stored in PLAINTEXT. Every entry shows a ROLE (Admin/System/Buyer/Store) and never a name. Check a payout (sellerEmail/upiId), a bid (userName/userEmail) and a scammer profile (built entirely of identifying details).",
+                    href: "/admin/payouts",
+                },
                 {
                     key: "form-errors-wait-for-first-submit",
                     label: "Opening the address form shows NO errors until you press Save",

package/dist/index.d.ts

@@ -678,7 +678,8 @@ export { groupedListingsSeedData } from "./seed/index";
 export type { CouponDiscountType } from "./seed/index";
 export type { FirestoreIndexConfig } from "./seed/index";
 export type { HomepageSectionType } from "./seed/index";
-export type { NotificationType } from "./seed/index";
+export type { NotificationType } from "./features/admin/schemas/firestore";
+export { NOTIFICATION_TYPE_VALUES } from "./features/admin/schemas/firestore";
 export type { PayoutStatus } from "./seed/index";
 export type { SeedAddressDocument } from "./seed/index";
 export type { SeedBaseOrderDocument } from "./seed/index";
@@ -1047,7 +1048,6 @@ export type { UserAccountHubViewProps } from "./features/account/index";
 export type { UserAddress } from "./features/account/index";
 export type { UserAddressesViewLabels } from "./features/account/index";
 export type { UserAddressesViewProps } from "./features/account/index";
-export type { UserNotification } from "./features/account/index";
 export type { UserNotificationsViewLabels } from "./features/account/index";
 export type { UserNotificationsViewProps } from "./features/account/index";
 export type { UserOffer } from "./features/account/index";
@@ -1551,7 +1551,7 @@ export { updateBlogPostSchema } from "./features/blog/server";
 export type { BlogPostDetailResponse } from "./features/blog/server";
 export type { CreateBlogPostInput } from "./features/blog/server";
 export type { UpdateBlogPostInput } from "./features/blog/server";
-export { addItemToCart } from "./features/cart/server";
+export { addItemToCart, assertCanAddNewItems } from "./features/cart/server";
 export { clearCart } from "./features/cart/server";
 export { getCart } from "./features/cart/server";
 export { mergeGuestCart } from "./features/cart/server";
@@ -2120,6 +2120,7 @@ export { SidebarLayout } from "./features/layout/index";
 export { TitleBar } from "./features/layout/index";
 export { TitleBarLayout } from "./features/layout/index";
 export { useBottomActions } from "./features/layout/index";
+export { RecordStatusTimeline } from "./features/status-history/index";
 export { useFormBottomActions } from "./features/layout/index";
 export { FormErrorList } from "./ui/forms";
 export { OverlayContext, useIsInsideOverlay } from "./ui/components/overlay-context";
@@ -3236,7 +3237,7 @@ export { getListingRule, getCategoryRule, pickOrderType, getSplitKey, runSyncPre
 export type { ListingCheckoutRule, CategoryCheckoutRule, CartItemProductPair, OrderItemInput, RefundPolicy, } from "./_internal/shared/checkout/rules";
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, } from "./_internal/shared/media/limits";
 export type { MediaKind, AllowedImageMime, AllowedVideoMime, AllowedDocMime, AllowedMime, } from "./_internal/shared/media/limits";
-export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CONVERSATION_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
+export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, AD_TRACKED_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CONVERSATION_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
 export { SORT_DIR, sortBy } from "./constants/sort";
 export type { SortDirection } from "./constants/sort";
 export { TABLE_KEYS, VIEW_MODE } from "./constants/table-keys";
@@ -3297,3 +3298,5 @@ export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } fro
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";
 export { createReviewSchema as reviewSubmitSchema } from "./_internal/shared/features/reviews/schema";
 export { wishlistAddSchema } from "./schemas/api-routes";
+export { withHistory, buildHistoryEntry, appendHistoryEntry, diffTrackedFields, STATUS_HISTORY_MAX, } from "./_internal/shared/history/index";
+export type { StatusChangeEntry, SerialisedStatusChangeEntry, HistoryActor, HistoryActorRole, FieldChange, } from "./_internal/shared/history/index";

package/dist/index.js

@@ -1395,6 +1395,7 @@ export { conversationsSeedData } from "./seed/index";
 // SB-UNI-B â€" sublistingCategoriesSeedData merged into categoriesSeedData with categoryType:"sublisting".
 // groupedListingsSeedData - Model for grouped listings seed data.
 export { groupedListingsSeedData } from "./seed/index";
+export { NOTIFICATION_TYPE_VALUES } from "./features/admin/schemas/firestore";
 // ./monitoring/index
 // [UTIL]-Pure utility â€" no framework or runtime dependency; safe to import from any environment.
 // ANALYTICS_EVENTS - Constant used across modules.
@@ -2910,7 +2911,8 @@ export { updateBlogPostSchema } from "./features/blog/server";
 // ./features/cart/server
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // addItemToCart - Helper for add item to cart.
-export { addItemToCart } from "./features/cart/server";
+// assertCanAddNewItems - the lane gate every add-to-cart entry point must run.
+export { addItemToCart, assertCanAddNewItems } from "./features/cart/server";
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // clearCart - Shared export for clear cart.
 export { clearCart } from "./features/cart/server";
@@ -3934,6 +3936,7 @@ export { TitleBarLayout } from "./features/layout/index";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useBottomActions - React hook for use bottom actions.
 export { useBottomActions } from "./features/layout/index";
+export { RecordStatusTimeline } from "./features/status-history/index";
 // useFormBottomActions - pins a form's Save/Cancel row + error sheet to the mobile bottom-chrome tier.
 export { useFormBottomActions } from "./features/layout/index";
 export { FormErrorList } from "./ui/forms";
@@ -5641,7 +5644,7 @@ export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, M
 // NOTE: STORE_FIELDS, CATEGORY_FIELDS, EVENT_FIELDS, EVENT_ENTRY_FIELDS, PAYOUT_FIELDS,
 // COUPON_FIELDS, CART_FIELDS, USER_FIELDS, ADDRESS_FIELDS, NOTIFICATION_FIELDS,
 // SESSION_FIELDS, SCAMMER_FIELDS are already exported from feature barrels above.
-export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CONVERSATION_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
+export { PRODUCT_FIELDS, PRODUCT_STATUS_TRANSITIONS, ORDER_FIELDS, REVIEW_FIELDS, BID_FIELDS, AD_FIELDS, AD_TRACKED_FIELDS, BLOG_FIELDS, BRAND_FIELDS, WISHLIST_FIELDS, HISTORY_FIELDS, COUPON_USAGE_FIELDS, CONVERSATION_FIELDS, CAROUSEL_FIELDS, FAQ_FIELDS, HOMEPAGE_SECTION_FIELDS, SITE_SETTINGS_FIELDS, COMMON_FIELDS, OAUTH_STATE_VALUES, SCHEMA_DEFAULTS, } from "./constants/field-names";
 // ── Sort helpers ──────────────────────────────────────────────────────────────
 export { SORT_DIR, sortBy } from "./constants/sort";
 // ── URL table keys + view mode ────────────────────────────────────────────────
@@ -5715,3 +5718,13 @@ export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-f
  */
 export { createReviewSchema as reviewSubmitSchema } from "./_internal/shared/features/reviews/schema";
 export { wishlistAddSchema } from "./schemas/api-routes";
+/*
+ * Status history — the generic primitive behind every entity timeline.
+ *
+ * `withHistory` is exported because ads have no repository of their own: they
+ * live inside the `siteSettings` singleton, so their route calls it directly.
+ * Every other adopter funnels through its repository's write primitives and
+ * should keep doing so — a call site reaching for this outside a repository
+ * is usually a missing funnel, not a reason to export more of it.
+ */
+export { withHistory, buildHistoryEntry, appendHistoryEntry, diffTrackedFields, STATUS_HISTORY_MAX, } from "./_internal/shared/history/index";

package/dist/schemas/registry.d.ts

@@ -1234,7 +1234,7 @@ export declare const SCHEMAS: {
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             featuredPriority?: number | undefined;
             isBrand?: boolean | undefined;
-            createdByType?: "store" | "admin" | undefined;
+            createdByType?: "admin" | "store" | undefined;
             createdByStoreId?: string | undefined;
             itemCode?: string | undefined;
             brandWebsite?: string | undefined;
@@ -1333,7 +1333,7 @@ export declare const SCHEMAS: {
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             featuredPriority?: number | undefined;
             isBrand?: boolean | undefined;
-            createdByType?: "store" | "admin" | undefined;
+            createdByType?: "admin" | "store" | undefined;
             createdByStoreId?: string | undefined;
             itemCode?: string | undefined;
             brandWebsite?: string | undefined;
@@ -1406,7 +1406,7 @@ export declare const SCHEMAS: {
                 }>;
             }, "strip", import("zod").ZodTypeAny, {
                 type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
-                scope: "admin" | "seller";
+                scope: "seller" | "admin";
                 name: string;
                 discount: {
                     value: number;
@@ -1425,7 +1425,7 @@ export declare const SCHEMAS: {
                 description?: string | undefined;
             }, {
                 type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
-                scope: "admin" | "seller";
+                scope: "seller" | "admin";
                 name: string;
                 discount: {
                     value: number;
@@ -1485,7 +1485,7 @@ export declare const SCHEMAS: {
             couponId: string;
             couponSnapshot: {
                 type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
-                scope: "admin" | "seller";
+                scope: "seller" | "admin";
                 name: string;
                 discount: {
                     value: number;
@@ -1525,7 +1525,7 @@ export declare const SCHEMAS: {
             couponId: string;
             couponSnapshot: {
                 type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
-                scope: "admin" | "seller";
+                scope: "seller" | "admin";
                 name: string;
                 discount: {
                     value: number;
@@ -1596,7 +1596,7 @@ export declare const SCHEMAS: {
                 body: string;
                 isRead: boolean;
                 senderId: string;
-                senderRole: "seller" | "buyer";
+                senderRole: "buyer" | "seller";
                 sentAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -1606,7 +1606,7 @@ export declare const SCHEMAS: {
                 body: string;
                 isRead: boolean;
                 senderId: string;
-                senderRole: "seller" | "buyer";
+                senderRole: "buyer" | "seller";
                 sentAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -1644,7 +1644,7 @@ export declare const SCHEMAS: {
                 body: string;
                 isRead: boolean;
                 senderId: string;
-                senderRole: "seller" | "buyer";
+                senderRole: "buyer" | "seller";
                 sentAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -1677,7 +1677,7 @@ export declare const SCHEMAS: {
                 body: string;
                 isRead: boolean;
                 senderId: string;
-                senderRole: "seller" | "buyer";
+                senderRole: "buyer" | "seller";
                 sentAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -1838,7 +1838,7 @@ export declare const SCHEMAS: {
             code: string;
             type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
             id: string;
-            scope: "admin" | "seller";
+            scope: "seller" | "admin";
             name: string;
             createdAt: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
@@ -1896,7 +1896,7 @@ export declare const SCHEMAS: {
             code: string;
             type: "fixed" | "percentage" | "free_shipping" | "buy_x_get_y";
             id: string;
-            scope: "admin" | "seller";
+            scope: "seller" | "admin";
             name: string;
             createdAt: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
@@ -2372,14 +2372,14 @@ export declare const SCHEMAS: {
                 code: string;
                 type: "auto" | "coupon" | "deal";
                 discountAmount: number;
-                scope?: "admin" | "seller" | undefined;
+                scope?: "seller" | "admin" | undefined;
                 storeId?: string | undefined;
                 couponId?: string | undefined;
             }, {
                 code: string;
                 type: "auto" | "coupon" | "deal";
                 discountAmount: number;
-                scope?: "admin" | "seller" | undefined;
+                scope?: "seller" | "admin" | undefined;
                 storeId?: string | undefined;
                 couponId?: string | undefined;
             }>, "many">>;
@@ -2510,9 +2510,9 @@ export declare const SCHEMAS: {
                 overrideReason: import("zod").ZodOptional<import("zod").ZodString>;
             }, "strip", import("zod").ZodTypeAny, {
                 type: "full" | "partial";
+                reason: string;
                 amount: number;
                 refundId: string;
-                reason: string;
                 refundedAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2525,9 +2525,9 @@ export declare const SCHEMAS: {
                 overrideReason?: string | undefined;
             }, {
                 type: "full" | "partial";
+                reason: string;
                 amount: number;
                 refundId: string;
-                reason: string;
                 refundedAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2658,6 +2658,7 @@ export declare const SCHEMAS: {
                 shelf: string;
                 bin: string;
             } | undefined;
+            offerId?: string | undefined;
             orderType?: string | undefined;
             imageUrls?: string[] | undefined;
             refundFeeDeducted?: number | undefined;
@@ -2668,7 +2669,7 @@ export declare const SCHEMAS: {
                 code: string;
                 type: "auto" | "coupon" | "deal";
                 discountAmount: number;
-                scope?: "admin" | "seller" | undefined;
+                scope?: "seller" | "admin" | undefined;
                 storeId?: string | undefined;
                 couponId?: string | undefined;
             }[] | undefined;
@@ -2695,14 +2696,13 @@ export declare const SCHEMAS: {
             }[] | undefined;
             emiRemainingBalance?: number | undefined;
             emiComplete?: boolean | undefined;
-            offerId?: string | undefined;
             isNonRefundable?: boolean | undefined;
             paymentBatchId?: string | undefined;
             refunds?: {
                 type: "full" | "partial";
+                reason: string;
                 amount: number;
                 refundId: string;
-                reason: string;
                 refundedAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2806,6 +2806,7 @@ export declare const SCHEMAS: {
                 shelf: string;
                 bin: string;
             } | undefined;
+            offerId?: string | undefined;
             orderType?: string | undefined;
             imageUrls?: string[] | undefined;
             refundFeeDeducted?: number | undefined;
@@ -2816,7 +2817,7 @@ export declare const SCHEMAS: {
                 code: string;
                 type: "auto" | "coupon" | "deal";
                 discountAmount: number;
-                scope?: "admin" | "seller" | undefined;
+                scope?: "seller" | "admin" | undefined;
                 storeId?: string | undefined;
                 couponId?: string | undefined;
             }[] | undefined;
@@ -2843,14 +2844,13 @@ export declare const SCHEMAS: {
             }[] | undefined;
             emiRemainingBalance?: number | undefined;
             emiComplete?: boolean | undefined;
-            offerId?: string | undefined;
             isNonRefundable?: boolean | undefined;
             paymentBatchId?: string | undefined;
             refunds?: {
                 type: "full" | "partial";
+                reason: string;
                 amount: number;
                 refundId: string;
-                reason: string;
                 refundedAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2944,20 +2944,20 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">>]>;
             }, "strip", import("zod").ZodTypeAny, {
+                reason: string;
                 orderId: string;
                 refundId: string;
                 refundedAmount: number;
                 deductedAmount: number;
-                reason: string;
                 appliedAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
             }, {
+                reason: string;
                 orderId: string;
                 refundId: string;
                 refundedAmount: number;
                 deductedAmount: number;
-                reason: string;
                 appliedAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2999,6 +2999,9 @@ export declare const SCHEMAS: {
             platformFeeRate: number;
             paymentMethod: "bank_transfer" | "upi";
             orderIds: string[];
+            processedAt?: string | Date | import("zod").objectOutputType<{
+                toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+            }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             bankAccount?: {
                 accountHolderName: string;
                 accountNumberMasked: string;
@@ -3014,19 +3017,16 @@ export declare const SCHEMAS: {
             gstRate?: number | undefined;
             isAutomatic?: boolean | undefined;
             refundDeductions?: {
+                reason: string;
                 orderId: string;
                 refundId: string;
                 refundedAmount: number;
                 deductedAmount: number;
-                reason: string;
                 appliedAt: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
             }[] | undefined;
             netAmount?: number | undefined;
-            processedAt?: string | Date | import("zod").objectOutputType<{
-                toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
-            }, import("zod").ZodTypeAny, "passthrough"> | undefined;
         }, {
             currency: string;
             status: "paid" | "failed" | "pending" | "processing";
@@ -3049,6 +3049,9 @@ export declare const SCHEMAS: {
             platformFeeRate: number;
             paymentMethod: "bank_transfer" | "upi";
             orderIds: string[];
+            processedAt?: string | Date | import("zod").objectInputType<{
+                toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+            }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             bankAccount?: {
                 accountHolderName: string;
                 accountNumberMasked: string;
@@ -3064,19 +3067,16 @@ export declare const SCHEMAS: {
             gstRate?: number | undefined;
             isAutomatic?: boolean | undefined;
             refundDeductions?: {
+                reason: string;
                 orderId: string;
                 refundId: string;
                 refundedAmount: number;
                 deductedAmount: number;
-                reason: string;
                 appliedAt: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
             }[] | undefined;
             netAmount?: number | undefined;
-            processedAt?: string | Date | import("zod").objectInputType<{
-                toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
-            }, import("zod").ZodTypeAny, "passthrough"> | undefined;
         }>;
         readonly reviews: import("zod").ZodObject<{
             createdAt: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
@@ -4192,6 +4192,7 @@ export declare const SCHEMAS: {
             closedAt?: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+            assignedToName?: string | undefined;
             relatedParties?: {
                 storeId?: string | undefined;
                 userId?: string | undefined;
@@ -4199,7 +4200,6 @@ export declare const SCHEMAS: {
                 productId?: string | undefined;
                 bidId?: string | undefined;
             } | undefined;
-            assignedToName?: string | undefined;
             internalNotes?: string | undefined;
         }, {
             status: "closed" | "open" | "resolved" | "in_progress" | "waiting_on_user";
@@ -4235,6 +4235,7 @@ export declare const SCHEMAS: {
             closedAt?: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+            assignedToName?: string | undefined;
             relatedParties?: {
                 storeId?: string | undefined;
                 userId?: string | undefined;
@@ -4242,7 +4243,6 @@ export declare const SCHEMAS: {
                 productId?: string | undefined;
                 bidId?: string | undefined;
             } | undefined;
-            assignedToName?: string | undefined;
             internalNotes?: string | undefined;
         }>;
     };

package/dist/seed/bids-seed-data.js

@@ -35,6 +35,14 @@ const BIDDER_NAMES = {
     "user-rohit-collector": "Mock User 14",
     "user-ananya-collector": "Mock User 9",
 };
+/*
+ * Typed on the document, not `FirestoreDocument`. Once `BidDocument` gained
+ * `statusHistory?: StatusChangeEntry[]`, `Partial<BidDocument>` stopped being
+ * assignable to `FirestoreDocument` — an array of objects does not satisfy
+ * that index signature. The right fix is to narrow the parameter to what the
+ * caller actually passes rather than widen the document to keep a helper
+ * happy.
+ */
 function withBidDefaults(b) {
     return {
         ...b,

package/dist/seed/factories/notification.factory.d.ts

@@ -1,4 +1,5 @@
-export type NotificationType = "order_placed" | "order_shipped" | "order_delivered" | "order_cancelled" | "bid_outbid" | "bid_won" | "review_received" | "payout_completed" | "system";
+import type { NotificationType } from "../../features/admin/schemas/firestore";
+export type { NotificationType };
 export interface SeedNotificationDocument {
     id: string;
     userId: string;

package/dist/server-entry.d.ts

@@ -67,6 +67,7 @@ export { getSearchResults, searchAction, type SearchQuery, } from "./_internal/s
 export { getCategoryForDetail, listRootCategories, listFeaturedCategories, listMenuCategories, getCategoryTree, listSitemapCategories, CATEGORIES_PAGE_SIZE, CATEGORIES_ROOT_TIER, CATEGORIES_MAX_DEPTH, CATEGORIES_SITEMAP_LIMIT, CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, } from "./_internal/server/features/categories/index";
 export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, } from "./_internal/server/features/grouped/index";
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceRazorpayOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CreateCheckoutOrderInput, type VerifyAndPlaceRazorpayOrderInput, type CheckoutOrderResult, type CheckoutPaymentMethod, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./_internal/server/features/checkout/index";
+export { unitPriceFor, lineTotalFor, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";
 export { createPaymentIntentAction, verifyPaymentSignatureAction, resolvePaymentFee, PAYMENTS_DEFAULT_PLATFORM_FEE_PERCENT, PAYMENTS_DEFAULT_GST_PERCENT, PAYMENTS_RECEIPT_PREFIX, type CreatePaymentIntentInput, type CreatePaymentIntentResult, type VerifyPaymentSignatureInput, type ResolvedPaymentFee, } from "./_internal/server/features/payments/index";
 export { getSublistingCategoryForDetail } from "./_internal/server/features/sublisting-categories/index";

package/dist/server-entry.js

@@ -97,6 +97,11 @@ export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedList
 // `.listByType("bundle", opts)` / `.findById(id)` directly.
 // S4: checkout actions
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceRazorpayOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, } from "./_internal/server/features/checkout/index";
+// The one definition of "what does this cart line cost". Exported because the
+// consumer's Razorpay create-order route needs it: that route used to hand-roll
+// the rule and reproduced only the bundle branch, so it captured the LIST price
+// for an accepted offer. Pure math — no Firestore, no server-only imports.
+export { unitPriceFor, lineTotalFor, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math";
 // S-SBUNI-RULES: refund action
 export { processRefundAction, } from "./_internal/server/features/refunds/actions";
 // S4: payments actions

package/dist/server.d.ts

@@ -231,7 +231,7 @@ export { getLatestBlogPosts } from "./features/blog/server";
 export { listBlogPosts } from "./features/blog/server";
 export { updateBlogPost } from "./features/blog/server";
 export { updateBlogPostSchema } from "./features/blog/server";
-export { addItemToCart } from "./features/cart/server";
+export { addItemToCart, assertCanAddNewItems } from "./features/cart/server";
 export { clearCart } from "./features/cart/server";
 export { getCart } from "./features/cart/server";
 export { mergeGuestCart } from "./features/cart/server";
@@ -573,3 +573,7 @@ export { toClientLotterySlot, toClientLotteryConfig } from "./_internal/server/f
 export { buildLotteryMetadata } from "./_internal/server/features/lottery/metadata";
 export { submitLotteryPullAction, flagLotteryEntryAction, reopenLotterySlotAction, createLotteryEventAction, updateLotteryEventAction, setProductLotteryModeAction, } from "./_internal/server/features/lottery/actions";
 export { lotteryEntryRepository } from "./features/lottery/repository/lottery-entry.repository";
+export { renderNotificationEmail, NOTIFICATION_EMAIL_TEMPLATES, } from "./features/email/notification-templates";
+export type { NotificationTemplateDef, NotificationEmailContext, } from "./features/email/notification-templates";
+export { resolveNotificationActionUrl, } from "./_internal/shared/features/notifications/action-url";
+export type { NotificationAudience } from "./_internal/shared/features/notifications/action-url";

package/dist/server.js

@@ -658,7 +658,8 @@ export { updateBlogPost } from "./features/blog/server";
 export { updateBlogPostSchema } from "./features/blog/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // addItemToCart - Helper for add item to cart.
-export { addItemToCart } from "./features/cart/server";
+// assertCanAddNewItems - the lane gate every add-to-cart entry point must run.
+export { addItemToCart, assertCanAddNewItems } from "./features/cart/server";
 // [SERVER-ONLY]-Server-only — uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
 // clearCart - Shared export for clear cart.
 export { clearCart } from "./features/cart/server";
@@ -1444,3 +1445,11 @@ export { toClientLotterySlot, toClientLotteryConfig } from "./_internal/server/f
 export { buildLotteryMetadata } from "./_internal/server/features/lottery/metadata";
 export { submitLotteryPullAction, flagLotteryEntryAction, reopenLotterySlotAction, createLotteryEventAction, updateLotteryEventAction, setProductLotteryModeAction, } from "./_internal/server/features/lottery/actions";
 export { lotteryEntryRepository } from "./features/lottery/repository/lottery-entry.repository";
+/*
+ * Notification email templates + the shared actionUrl resolver.
+ *
+ * Server-only: the templates call `renderToStaticMarkup` through a lazy
+ * `require`, which must never end up reachable from a client chunk.
+ */
+export { renderNotificationEmail, NOTIFICATION_EMAIL_TEMPLATES, } from "./features/email/notification-templates";
+export { resolveNotificationActionUrl, } from "./_internal/shared/features/notifications/action-url";