@mohasinac/appkit 4.41.16 → 4.42.0

package/dist/_internal/client/features/maintenance/views/MaintenanceDashboardView.js

@@ -9,5 +9,5 @@ const card = {
 export function MaintenanceDashboardView({ counts, basePath, }) {
     return (_jsxs(Div, { style: { padding: "1.5rem", maxWidth: "1200px", margin: "0 auto" }, children: [_jsx(Heading, { level: 1, style: { fontSize: "1.5rem", fontWeight: 600 }, children: "Maintenance" }), _jsx(Text, { as: "p", style: { color: "var(--appkit-color-text-muted)", marginBottom: "1.25rem" }, children: "Errors and failures across the platform \u2014 server, client, and Cloud Functions." }), _jsxs(Div, { style: { display: "grid", gridTemplateColumns: "repeat(auto-fit, minmax(170px, 1fr))", gap: "0.75rem", marginBottom: "1.5rem" }, children: [_jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Last 24 hours" }), _jsx(Div, { style: { fontSize: "1.75rem", fontWeight: 700 }, children: counts.last24h })] }), _jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Last 7 days" }), _jsx(Div, { style: { fontSize: "1.75rem", fontWeight: 700 }, children: counts.last7d })] }), _jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Last 30 days" }), _jsx(Div, { style: { fontSize: "1.75rem", fontWeight: 700 }, children: counts.last30d })] }), _jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Server (Vercel)" }), _jsx(Div, { style: { fontSize: "1.5rem", fontWeight: 700 }, children: counts.bySource.vercel })] }), _jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Client" }), _jsx(Div, { style: { fontSize: "1.5rem", fontWeight: 700 }, children: counts.bySource.client })] }), _jsxs(Div, { style: card, children: [_jsx(Div, { style: { fontSize: "0.78rem", color: "var(--appkit-color-text-muted)" }, children: "Cloud Functions" }), _jsx(Div, { style: { fontSize: "1.5rem", fontWeight: 700 }, children: counts.bySource.function })] })] }), _jsxs(Section, { style: { marginBottom: "1.5rem" }, children: [_jsx(Heading, { level: 2, style: { fontSize: "1rem", fontWeight: 600 }, children: "Top codes (30d)" }), _jsx(Ul, { style: { listStyle: "none", padding: 0 }, children: counts.topCodes.length === 0 ? _jsx(Li, { style: { color: "var(--appkit-color-text-muted)" }, children: "No errors recorded." }) :
                             counts.topCodes.map((c) => (_jsxs(Li, { style: { display: "flex", justifyContent: "space-between", padding: "0.25rem 0", borderBottom: "1px solid var(--appkit-color-border-subtle)" }, children: [_jsx(Span, { style: { fontFamily: "monospace" }, children: c.code }), _jsx(Span, { children: c.count })] }, c.code))) })] }), _jsxs(Section, { style: { marginBottom: "1.5rem" }, children: [_jsx(Heading, { level: 2, style: { fontSize: "1rem", fontWeight: 600 }, children: "Top routes (30d)" }), _jsx(Ul, { style: { listStyle: "none", padding: 0 }, children: counts.topRoutes.length === 0 ? _jsx(Li, { style: { color: "var(--appkit-color-text-muted)" }, children: "No errors recorded." }) :
-                            counts.topRoutes.map((r) => (_jsxs(Li, { style: { display: "flex", justifyContent: "space-between", padding: "0.25rem 0", borderBottom: "1px solid var(--appkit-color-border-subtle)" }, children: [_jsxs(Span, { style: { fontFamily: "monospace" }, children: ["[", r.source, "] ", r.route] }), _jsx(Span, { children: r.count })] }, `${r.source}:${r.route}`))) })] }), _jsxs(Nav, { "aria-label": "Maintenance sections", style: { display: "grid", gridTemplateColumns: "repeat(auto-fit, minmax(200px, 1fr))", gap: "0.5rem" }, children: [_jsxs(Anchor, { href: `${basePath}/server-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Server errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Vercel function failures" })] }), _jsxs(Anchor, { href: `${basePath}/client-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Client errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "window.onerror + unhandledrejection + boundaries" })] }), _jsxs(Anchor, { href: `${basePath}/function-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Function errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Cloud Functions handler exceptions" })] }), _jsxs(Anchor, { href: `${basePath}/cloud-logs`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Cloud Logging" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Live stream from Cloud Logging API" })] }), _jsxs(Anchor, { href: `${basePath}/payment-rollbacks`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Payment rollbacks" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Razorpay refund + upstream-unavailable rows" })] }), _jsxs(Anchor, { href: `${basePath}/analysis`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Analysis" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Run the maintenance analyzer + recommendations" })] })] })] }));
+                            counts.topRoutes.map((r) => (_jsxs(Li, { style: { display: "flex", justifyContent: "space-between", padding: "0.25rem 0", borderBottom: "1px solid var(--appkit-color-border-subtle)" }, children: [_jsxs(Span, { style: { fontFamily: "monospace" }, children: ["[", r.source, "] ", r.route] }), _jsx(Span, { children: r.count })] }, `${r.source}:${r.route}`))) })] }), _jsxs(Nav, { "aria-label": "Maintenance sections", style: { display: "grid", gridTemplateColumns: "repeat(auto-fit, minmax(200px, 1fr))", gap: "0.5rem" }, children: [_jsxs(Anchor, { href: `${basePath}/server-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Server errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Vercel function failures" })] }), _jsxs(Anchor, { href: `${basePath}/client-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Client errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "window.onerror + unhandledrejection + boundaries" })] }), _jsxs(Anchor, { href: `${basePath}/function-errors`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Function errors" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Cloud Functions handler exceptions" })] }), _jsxs(Anchor, { href: `${basePath}/cloud-logs`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Cloud Logging" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Live stream from Cloud Logging API" })] }), _jsxs(Anchor, { href: `${basePath}/payment-rollbacks`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Payment rollbacks" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "PhonePe refund + upstream-unavailable rows" })] }), _jsxs(Anchor, { href: `${basePath}/analysis`, tone: "default", underline: "none", style: { ...card }, children: [_jsx(Span, { weight: "bold", children: "Analysis" }), _jsx(Div, { style: { color: "var(--appkit-color-text-muted)", fontSize: "0.85rem" }, children: "Run the maintenance analyzer + recommendations" })] })] })] }));
 }

package/dist/_internal/server/features/checkout/actions.d.ts

@@ -104,7 +104,7 @@ export interface CheckoutPricingPreview {
 /**
  * Read-only "what will I actually be charged" preview for the checkout
  * Order Summary. Reuses the exact same building blocks
- * createCheckoutOrderAction / verifyAndPlaceRazorpayOrderAction use when an
+ * createCheckoutOrderAction / verifyAndPlacePhonePeOrderAction use when an
  * order is actually placed — resolveShippingCost, the compute*Fee helpers,
  * computeGroupCouponDiscount, and the GST calc — so the number shown to the
  * buyer can never diverge from what gets charged/recorded. Never decrements
@@ -120,23 +120,25 @@ export declare function attachPaymentAction(input: {
     paymentId: string;
     paidAmount: number;
 }): Promise<void>;
-export interface VerifyAndPlaceRazorpayOrderInput {
-    userId: string;
-    userName: string;
-    userEmail: string;
-    razorpay_order_id: string;
-    razorpay_payment_id: string;
-    razorpay_signature: string;
-    /** Required for physical carts; omitted for digital-code-only carts. */
+export interface VerifyAndPlacePhonePeOrderInput {
+    /** PhonePe's merchantOrderId — our own id, generated in PhonePeProvider.createOrder(). */
+    merchantOrderId: string;
+    /**
+     * Buyer identity. Omit on the webhook path — no session exists there, so
+     * it's resolved from `uid` packed into PhonePe's `metaInfo` at
+     * create-order time and re-fetched from `userRepository`.
+     */
+    userId?: string;
+    userName?: string;
+    userEmail?: string;
+    /** Present on the buyer-present path; falls back to metaInfo (webhook path) when omitted. Required for physical carts. */
     addressId?: string;
     notes?: string;
     /**
      * Buyer's choice for what to do when a cart item is unavailable at
-     * checkout time. Defaults to "cancel_order" — matches this path's
-     * historical (only) behavior for any caller/old-client that omits the
-     * field, since "skip_items" partial fulfillment has no prior precedent
-     * on the Razorpay path.
+     * checkout time. Defaults to "cancel_order" when neither the caller nor
+     * metaInfo supplies one — matches this path's historical (only) behavior.
      */
     outOfStockPolicy?: OutOfStockPolicy;
 }
-export declare function verifyAndPlaceRazorpayOrderAction(input: VerifyAndPlaceRazorpayOrderInput): Promise<CheckoutOrderResult>;
+export declare function verifyAndPlacePhonePeOrderAction(input: VerifyAndPlacePhonePeOrderInput): Promise<CheckoutOrderResult>;

package/dist/_internal/server/features/checkout/actions.js

@@ -29,7 +29,8 @@ import { getCartItemMemberIds, getExpandedDecrements, bucketCartItemsByStock, is
 import { expandCartLineToOrderRows } from "./expand-order-items";
 import { OrderStatusValues, PaymentStatusValues, PaymentMethodValues, OutOfStockPolicyValues, } from "../../../../features/orders/schemas/index";
 import { getDefaultCurrency } from "../../../../core/index";
-import { verifyPaymentSignatureWithKeys, fetchRazorpayOrder, paiseToRupees, } from "../../../../providers/payment-razorpay/index";
+import { getProviders } from "../../../../contracts";
+import { paiseToRupees } from "../../../../core/money";
 import { CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_DEFAULT_EMI_SETTINGS } from "../../../shared/features/checkout/config";
 import { checkEmiEligibility, computeEmiSchedule } from "../../../shared/features/emi/schedule";
 import { formatShippingAddress } from "./data";
@@ -204,7 +205,7 @@ async function resolveStoreState(storeId) {
  * Prorates every buyer-applied coupon against one seller-group's total. Pure
  * — no side effects (usage-accumulator bookkeeping is layered on by callers
  * that actually place an order). Shared by createOrderForGroup,
- * createRazorpayGroupOrder, and the read-only previewCheckoutPricing so the
+ * createPhonePeGroupOrder, and the read-only previewCheckoutPricing so the
  * three can never drift on how a coupon splits across sellers (was three
  * near-identical copies before this extraction — Duplication Decision
  * Framework's Rule of Three).
@@ -455,8 +456,8 @@ async function createOrderForGroup(group, orderType, ctx) {
         }
     }
     // The platform commission is now charged on EVERY payment method. It used to
-    // be added only on the Razorpay path, so COD / UPI-manual / cash / EMI buyers
-    // silently never paid it.
+    // be added only on the online-payment path, so COD / UPI-manual / cash / EMI
+    // buyers silently never paid it.
     const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee + codHandlingFee + whatsappNotifyFee + giftWrapFee + shipmentProtectionFee + platformFee + platformFeeGst + (emiSchedule?.surchargeAmount ?? 0) + (gstBreakdown?.gstAmount ?? 0);
     const imageUrls = [
         ...new Set(group
@@ -471,7 +472,7 @@ async function createOrderForGroup(group, orderType, ctx) {
     };
     // ── 15-minute payment window + seller UPI resolution (Tier PP) ──────────
     // Deadline + displayed UPI apply only to methods with a buyer-uploaded
-    // proof step — never cod (paid on delivery), razorpay (paid before order
+    // proof step — never cod (paid on delivery), online (paid before order
     // creation), or admin_bypass (already marked paid above).
     const hasPaymentWindow = !adminBypass &&
         (paymentMethod === PaymentMethodValues.UPI_MANUAL ||
@@ -888,7 +889,7 @@ const EMPTY_PRICING_PREVIEW = {
 /**
  * Read-only "what will I actually be charged" preview for the checkout
  * Order Summary. Reuses the exact same building blocks
- * createCheckoutOrderAction / verifyAndPlaceRazorpayOrderAction use when an
+ * createCheckoutOrderAction / verifyAndPlacePhonePeOrderAction use when an
  * order is actually placed — resolveShippingCost, the compute*Fee helpers,
  * computeGroupCouponDiscount, and the GST calc — so the number shown to the
  * buyer can never diverge from what gets charged/recorded. Never decrements
@@ -1039,23 +1040,27 @@ export async function attachPaymentAction(input) {
     });
 }
 /**
- * Place order(s) from the user's cart after a Razorpay payment is verified.
- * Mirrors the existing /api/payment/verify route handler.
+ * Place order(s) from the user's cart after a PhonePe payment is confirmed.
+ * Called from both /api/payment/verify (buyer present) and the webhook
+ * (buyer may be gone) — see the module-level comment above.
  *
- * Consumers must authenticate the user before calling. The action performs:
- *   1. HMAC signature verification (rejects forged callbacks)
- *   2. Cart re-validation against current product prices/stock
- *   3. Amount cross-check against the Razorpay order record
- *   4. Atomic stock decrement + cart clear via unitOfWork batch
- *   5. Multi-coupon pro-rating per order group
- *   6. order_placed notifications (buyer + seller)
- *   7. Confirmation email + RTDB success signal (both fire-and-forget)
+ * Performs:
+ *   1. Order Status confirmation via `getProviders().payment.getOrder()` —
+ *      the sole source of truth; PhonePe never hands the browser a
+ *      verifiable proof of payment.
+ *   2. An idempotency claim so only one of the two callers proceeds.
+ *   3. Cart re-validation against current product prices/stock.
+ *   4. Amount cross-check against the confirmed PhonePe order.
+ *   5. Atomic stock decrement + cart clear via unitOfWork batch.
+ *   6. Multi-coupon pro-rating per order group.
+ *   7. order_placed notifications (buyer + seller).
+ *   8. Confirmation email + RTDB success signal (both fire-and-forget).
  */
 /**
- * Auto-refund the value of items dropped from a Razorpay checkout under the
- * "skip_items" out-of-stock policy. Razorpay captures payment for the FULL
+ * Auto-refund the value of items dropped from a PhonePe checkout under the
+ * "skip_items" out-of-stock policy. PhonePe captures payment for the FULL
  * cart before the stock check runs, so anything not placed as an order must
- * be given back. Extracted from `verifyAndPlaceRazorpayOrderAction` — same
+ * be given back. Extracted from `verifyAndPlacePhonePeOrderAction` — same
  * behavior, kept as a named step so the parent function stays readable.
  *
  * Awaited by the caller (this moves money, never fire-and-forget). On
@@ -1063,8 +1068,8 @@ export async function attachPaymentAction(input) {
  * created and paid); the failure is surfaced via `order.refundPending` + an
  * admin notification fan-out, never silently dropped (Rule #8).
  */
-async function refundDroppedItemsForRazorpayCheckout(input) {
-    const { unavailablePaid, orderIds, productByIdPaid, razorpayPaymentId } = input;
+async function refundDroppedItemsForPhonePeCheckout(input) {
+    const { unavailablePaid, orderIds, productByIdPaid, phonepeOrderId } = input;
     if (unavailablePaid.length === 0 || orderIds.length === 0)
         return;
     const droppedValue = unavailablePaid.reduce((sum, u) => sum + (productByIdPaid.get(u.productId)?.price ?? 0) * u.requestedQty, 0);
@@ -1076,9 +1081,9 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
         // Cap defensively at the primary order's total — processRefundAction
         // rejects any amount exceeding order.totalPrice, and a multi-order
         // batch's dropped-items value isn't cleanly attributable to a single
-        // order (Razorpay refunds are keyed by paymentId, not orderId; the
-        // FIRST order created in this batch is used as the refund's book-
-        // keeping anchor).
+        // order (PhonePe refunds are keyed by the original order id, not a
+        // payment id; the FIRST order created in this batch is used as the
+        // refund's book-keeping anchor).
         const refundAmount = primaryOrder
             ? Math.min(droppedValue, primaryOrder.totalPrice)
             : droppedValue;
@@ -1095,8 +1100,8 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
              */
             reasonCode: "not_received",
             reasonNote: `Automatic refund — ${unavailablePaid.length} item(s) unavailable at checkout: ${unavailablePaid.map((u) => u.productTitle).join(", ")}`,
-            method: "razorpay",
-            razorpayPaymentId,
+            method: "phonepe",
+            phonepeOrderId,
             confirmIrrevocable: true,
             refundedBy: "system:checkout-auto-refund",
         });
@@ -1106,7 +1111,7 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
     }
     catch (refundErr) {
         void normalizeError(refundErr);
-        serverLogger.warn("verifyAndPlaceRazorpayOrderAction: automatic partial refund for dropped items failed — flagging for manual follow-up", {
+        serverLogger.warn("verifyAndPlacePhonePeOrderAction: automatic partial refund for dropped items failed — flagging for manual follow-up", {
             orderId: primaryOrderId,
             droppedValue,
             err: refundErr instanceof Error ? refundErr.message : String(refundErr),
@@ -1115,7 +1120,7 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
             .update(primaryOrderId, { refundPending: true })
             .catch((updErr) => {
             void normalizeError(updErr);
-            serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to flag refundPending after auto-refund failure", { orderId: primaryOrderId, err: updErr instanceof Error ? updErr.message : String(updErr) });
+            serverLogger.error("verifyAndPlacePhonePeOrderAction: failed to flag refundPending after auto-refund failure", { orderId: primaryOrderId, err: updErr instanceof Error ? updErr.message : String(updErr) });
         });
         /*
          * One admin-inbox row, not one notification per admin.
@@ -1143,20 +1148,20 @@ async function refundDroppedItemsForRazorpayCheckout(input) {
         })
             .catch((notifyErr) => {
             void normalizeError(notifyErr);
-            serverLogger.error("verifyAndPlaceRazorpayOrderAction: failed to write admin notification for failed auto-refund", { orderId: primaryOrderId });
+            serverLogger.error("verifyAndPlacePhonePeOrderAction: failed to write admin notification for failed auto-refund", { orderId: primaryOrderId });
         });
     }
 }
 /**
- * Places one order for one seller-group within `verifyAndPlaceRazorpayOrderAction`
+ * Places one order for one seller-group within `verifyAndPlacePhonePeOrderAction`
  * — mirrors `createOrderForGroup`'s role on the COD/cash/EMI path (same
  * per-group fee/coupon/order-doc/notification shape), extracted into its own
  * function purely to keep the parent function under the LARGE_COMPONENT
  * audit threshold (`scripts/audit-code-quality.mjs`). No behavior change
  * from the inline version this replaced.
  */
-async function createRazorpayGroupOrder(group, orderType, ctx) {
-    const { appliedCoupons, cartSubtotal, storeAddons, platformFeeByStore, siteSettings, uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, shippingAddress, notes, outOfStockPolicy, unavailablePaid, orderIds, emailsToSend, couponUsageAccumulator, productById: razorpayProductById, } = ctx;
+async function createPhonePeGroupOrder(group, orderType, ctx) {
+    const { appliedCoupons, cartSubtotal, storeAddons, platformFeeByStore, siteSettings, uid, userName, userEmail, merchantOrderId, phonepeOrderId, transactionId, shippingAddress, notes, outOfStockPolicy, unavailablePaid, orderIds, emailsToSend, couponUsageAccumulator, productById: phonepeProductById, } = ctx;
     const firstItem = group[0].item;
     const groupTotal = group.reduce((sum, { item, product }) => sum + lineTotalFor(item, product), 0);
     // Reuses the same store/seller lookup as the COD/UPI path above instead
@@ -1167,7 +1172,7 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
     const { couponDiscount, appliedDiscounts } = computeGroupCouponDiscount(appliedCoupons, groupLines, groupTotal, cartSubtotal, firstItem.storeId);
     // Mirrors createOrderForGroup — without this the online-payment path wrote
     // the discount onto the order but never incremented usage.currentUsage or
-    // the per-user counter, so limits were unenforceable for Razorpay orders.
+    // the per-user counter, so limits were unenforceable for PhonePe orders.
     const groupCouponCodes = new Set();
     for (const discount of appliedDiscounts) {
         if (discount.couponId) {
@@ -1194,25 +1199,25 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
     const giftWrapMessage = addons.giftWrapMessage;
     const shipmentProtectionFee = computeShipmentProtectionFee(groupTotal, addons.shipmentProtectionAddon ?? false, commissionRates);
     const orderTotal = Math.max(0, groupTotal - couponDiscount) + shippingFee + whatsappNotifyFee + giftWrapFee + shipmentProtectionFee + platformFee + platformFeeGst;
-    // P-8 GST — deliberately NOT wired into this Razorpay-verify path. The
+    // P-8 GST — deliberately NOT wired into this PhonePe-verify path. The
     // amount-mismatch check above (expectedPaymentAmountRs) compares against
-    // what the buyer already paid via the Razorpay order created earlier in
+    // what the buyer already paid via the PhonePe order created earlier in
     // the flow; adding product GST here without also adding it to that
     // upstream pre-payment amount calculation would either fail the mismatch
     // check or silently under/over-charge. Wiring GST through the full
-    // Razorpay create→verify round-trip is separate follow-up work, tracked
-    // alongside P-13 (Razorpay is disabled by default today, so this order
+    // PhonePe create→confirm round-trip is separate follow-up work, tracked
+    // alongside P-13 (PhonePe is disabled by default today, so this order
     // type doesn't currently carry a GST breakdown).
     // S-SBUNI-RULES 2026-05-13 — order-item decoration via rule registry.
     // Same expansion as the COD/UPI path. This was a THIRD hand-rolled copy of
     // the price rule (`isBundle ? item.price : product.price`) that — like the
-    // two in the consumer's Razorpay route — silently omitted `lockedPrice`, so
-    // an accepted offer paid through Razorpay was RECORDED at the seller's list
+    // two in the consumer's checkout route — silently omitted `lockedPrice`, so
+    // an accepted offer paid through PhonePe was RECORDED at the seller's list
     // price. `lineTotalFor` inside the expansion is the single definition.
     const orderItems = group.flatMap(({ item, product }) => {
         const lt = (product?.listingType ?? "standard");
         const itemRule = getListingRule(lt);
-        return expandCartLineToOrderRows(item, product, razorpayProductById).map((baseLine) => itemRule.decorateOrderItem(baseLine, product));
+        return expandCartLineToOrderRows(item, product, phonepeProductById).map((baseLine) => itemRule.decorateOrderItem(baseLine, product));
     });
     const totalQuantity = group.reduce((sum, { item }) => sum + item.quantity, 0);
     const imageUrls = [
@@ -1221,10 +1226,10 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
             .filter((url) => typeof url === "string" && url.length > 0)),
     ];
     // S-SBUNI-RULES 2026-05-13 — order-doc decoration via rule registry.
-    const lt0Rzp = (group[0].product?.listingType ?? "standard");
-    const groupRuleRzp = getListingRule(lt0Rzp);
+    const lt0Pp = (group[0].product?.listingType ?? "standard");
+    const groupRulePp = getListingRule(lt0Pp);
     const extraOrderFields = {
-        ...groupRuleRzp.decorateOrderDoc(group[0].item, group[0].product),
+        ...groupRulePp.decorateOrderDoc(group[0].item, group[0].product),
     };
     // Both creation paths call the SAME builder — two hand-written copies is the
     // create-vs-create axis of Root Cause #39, and these two functions have
@@ -1256,18 +1261,20 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
         status: OrderStatusValues.CONFIRMED,
         paymentStatus: PaymentStatusValues.PAID,
         paymentMethod: PaymentMethodValues.ONLINE,
-        paymentId: razorpay_payment_id,
+        // Our own generated id, not PhonePe's — this is what refunds/lookups key
+        // on (PhonePe's refund API is `originalMerchantOrderId`-keyed anyway).
+        paymentId: merchantOrderId,
         paymentRecord: {
-            method: "razorpay",
-            transactionId: razorpay_payment_id,
+            method: "phonepe",
+            transactionId: transactionId ?? merchantOrderId,
             amount: orderTotal,
             paidAt: new Date(),
-            verifiedBy: "razorpay-webhook",
-            verificationMethod: "webhook",
+            verifiedBy: "phonepe-order-status",
+            verificationMethod: "order-status",
             gatewayRef: {
-                orderId: razorpay_order_id,
-                paymentId: razorpay_payment_id,
-                signature: razorpay_signature,
+                merchantOrderId,
+                phonepeOrderId,
+                transactionId,
             },
         },
         shippingAddress,
@@ -1334,53 +1341,93 @@ async function createRazorpayGroupOrder(group, orderType, ctx) {
     });
     return orderTotal;
 }
-export async function verifyAndPlaceRazorpayOrderAction(input) {
-    const { userId: uid, userName, userEmail, razorpay_order_id, razorpay_payment_id, razorpay_signature, addressId, notes, outOfStockPolicy = OutOfStockPolicyValues.CANCEL_ORDER, } = input;
-    // Add-on fees are no longer resolved here. They are per store, and this
-    // function has no single store — each group reads its own selection off
-    // `cart.storeAddons` inside createRazorpayGroupOrder.
-    const siteSettings = await siteSettingsRepository.getSingleton();
-    const isValid = await verifyPaymentSignatureWithKeys({
-        razorpay_order_id,
-        razorpay_payment_id,
-        razorpay_signature,
-    });
-    if (!isValid) {
-        serverLogger.warn(`Payment signature verification failed for user ${uid}`);
+export async function verifyAndPlacePhonePeOrderAction(input) {
+    const { merchantOrderId } = input;
+    // Idempotency: the buyer's /verify call and the async webhook can both
+    // race to confirm+place for the same PhonePe payment (see the module
+    // comment above). `.create()` throws on conflict, so whichever caller
+    // creates this claim doc first is the sole placer; the loser returns
+    // whatever the winner already placed, or a retryable "in progress" error
+    // if the winner genuinely hasn't finished yet.
+    const claimRef = getAdminDb().collection("phonepeOrderClaims").doc(merchantOrderId);
+    try {
+        await claimRef.create({ claimedAt: new Date() });
+    }
+    catch (claimErr) {
+        void normalizeError(claimErr);
+        const existingOrders = await unitOfWork.orders.findByPaymentId(merchantOrderId);
+        if (existingOrders.length > 0) {
+            return {
+                orderIds: existingOrders.map((o) => o.id),
+                total: existingOrders.reduce((sum, o) => sum + o.totalPrice, 0),
+                itemCount: existingOrders.length,
+            };
+        }
+        throw new ValidationError(ERROR_MESSAGES.CHECKOUT.ORDER_PLACEMENT_IN_PROGRESS);
+    }
+    // Order Status confirmation — PhonePe never hands the browser a
+    // verifiable proof of payment, so this call IS the "signature check".
+    const phonepeOrder = await getProviders().payment.getOrder(merchantOrderId);
+    if (phonepeOrder.status !== "paid") {
+        serverLogger.warn(`PhonePe order not completed: merchantOrderId=${merchantOrderId} state=${phonepeOrder.status}`);
         failedCheckoutRepository
-            .logPayment(uid, "signature_mismatch", "HMAC signature invalid", {
-            gatewayOrderId: razorpay_order_id,
-            gatewayPaymentId: razorpay_payment_id,
-            addressId,
+            .logPayment(input.userId ?? "unknown", "signature_mismatch", "PhonePe order not COMPLETED", {
+            gatewayOrderId: phonepeOrder.gatewayOrderId,
+            gatewayPaymentId: merchantOrderId,
+            addressId: input.addressId,
         })
             .catch((logErr) => { void normalizeError(logErr); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: logErr instanceof Error ? logErr.message : String(logErr) }); });
         throw new ValidationError(ERROR_MESSAGES.CHECKOUT.PAYMENT_FAILED);
     }
+    // The buyer-present /verify call always supplies these; the webhook path
+    // (no session) reconstructs them from PhonePe's metaInfo, packed at
+    // create-order time — see `PhonePeCheckoutIntent`.
+    const intent = phonepeOrder.metadata;
+    const uid = input.userId ?? intent?.uid;
+    if (!uid) {
+        throw new ValidationError(ERROR_MESSAGES.CHECKOUT.PAYMENT_FAILED);
+    }
+    let userName = input.userName;
+    let userEmail = input.userEmail;
+    if (userName === undefined || userEmail === undefined) {
+        const userDoc = await userRepository.findById(uid);
+        userName = userName ?? userDoc?.displayName ?? "Customer";
+        userEmail = userEmail ?? userDoc?.email ?? "";
+    }
+    const addressId = input.addressId ?? intent?.addressId;
+    const notes = input.notes ?? intent?.notes;
+    const outOfStockPolicy = input.outOfStockPolicy ??
+        intent?.outOfStockPolicy ??
+        OutOfStockPolicyValues.CANCEL_ORDER;
+    // Add-on fees are no longer resolved here. They are per store, and this
+    // function has no single store — each group reads its own selection off
+    // `cart.storeAddons` inside createPhonePeGroupOrder.
+    const siteSettings = await siteSettingsRepository.getSingleton();
     const cart = await unitOfWork.carts.getOrCreate(uid);
     if (!cart.items || cart.items.length === 0) {
         throw new ValidationError(ERROR_MESSAGES.CHECKOUT.CART_EMPTY);
     }
     // Same lane priority + locked-line revalidation the manual/COD path runs.
-    // The Razorpay path settles the whole cart (no selectedItemIds), so the
+    // The PhonePe path settles the whole cart (no selectedItemIds), so the
     // "selected" set is the cart itself.
     assertCheckoutLane(cart.items, cart.items);
     await assertLockedLinesStillValid(cart.items, uid);
-    const isDigitalCartRazorpay = cartIsDigitalOnly(cart.items);
+    const isDigitalCartPp = cartIsDigitalOnly(cart.items);
     let shippingAddress;
-    let resolvedAddressRzp = null;
-    if (!isDigitalCartRazorpay) {
+    let resolvedAddressPp = null;
+    if (!isDigitalCartPp) {
         if (!addressId) {
             throw new NotFoundError(ERROR_MESSAGES.CHECKOUT.ADDRESS_REQUIRED);
         }
         const addressDoc = await unitOfWork.addresses.findById(addressId);
-        resolvedAddressRzp =
+        resolvedAddressPp =
             addressDoc && addressDoc.ownerType === "user" && addressDoc.ownerId === uid
                 ? addressDoc
                 : null;
-        if (!resolvedAddressRzp) {
+        if (!resolvedAddressPp) {
             throw new NotFoundError(ERROR_MESSAGES.CHECKOUT.ADDRESS_REQUIRED);
         }
-        shippingAddress = formatShippingAddress(resolvedAddressRzp);
+        shippingAddress = formatShippingAddress(resolvedAddressPp);
     }
     // SB-UNI-5 2026-05-13 — bundle-aware product fetch + validation. Each
     // cart line gets paired with a "representative" product (first member id
@@ -1412,17 +1459,17 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     // S-SBUNI-RULES 2026-05-13 — sync preflight via rule registry.
     // Multi-member lines skip the prize-pool cap, same reasoning as the COD path.
     const preflightPairs = productChecks.filter((p) => p.product !== null && p.product !== undefined && !isMultiMemberLine(p.item));
-    // This whole action is the Razorpay path — paymentMethod is always "online".
+    // This whole action is the online-payment path — paymentMethod is always "online".
     runSyncPreflight(preflightPairs, "online");
     // SB-UNI-O 2026-05-15 — Live-item jurisdiction guard.
-    if (!isDigitalCartRazorpay && resolvedAddressRzp) {
-        assertLiveJurisdiction(cart.items, productByIdPaid, resolvedAddressRzp.state);
+    if (!isDigitalCartPp && resolvedAddressPp) {
+        assertLiveJurisdiction(cart.items, productByIdPaid, resolvedAddressPp.state);
     }
     // SB-UNI-5 — validate every required member product across the cart with
     // cumulative decrement awareness (two bundles sharing a member must NOT
     // both succeed unless the product has enough stock for the sum).
     //
-    // Out-of-stock policy: unlike the COD/UPI path, Razorpay payment has
+    // Out-of-stock policy: unlike the COD/UPI path, PhonePe payment has
     // ALREADY been captured for the full cart by the time this runs — so
     // "skip_items" here means placing orders for the available items only and
     // auto-refunding the dropped items' value (below), not skipping payment.
@@ -1436,8 +1483,8 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
                 .logPayment(uid, reason, exists
                 ? `Product ${u.productId} has ${u.availableQty} left, requested ${u.requestedQty}`
                 : `Product ${u.productId} not published`, {
-                gatewayOrderId: razorpay_order_id,
-                gatewayPaymentId: razorpay_payment_id,
+                gatewayOrderId: phonepeOrder.gatewayOrderId,
+                gatewayPaymentId: merchantOrderId,
                 addressId,
             })
                 .catch((err) => { void normalizeError(err); serverLogger.warn(AUDIT_LOG_FAIL_MSG, { error: err instanceof Error ? err.message : String(err) }); });
@@ -1445,7 +1492,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     }
     // outOfStockPolicy: "cancel_order" (also the default for old clients that
     // omit the field) — reject the whole checkout batch, exactly like every
-    // Razorpay checkout behaved before this policy existed.
+    // online-payment checkout behaved before this policy existed.
     if (outOfStockPolicy === OutOfStockPolicyValues.CANCEL_ORDER && unavailablePaid.length > 0) {
         throw new ValidationError(ERROR_MESSAGES.CHECKOUT.INSUFFICIENT_STOCK);
     }
@@ -1469,7 +1516,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
         const commissionRates = siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS;
         const { platformFee: expectedPlatformFee, gstOnFee: expectedGstOnFee } = computeCheckoutFees(cartSubtotalRs, commissionRates);
         // Same per-seller-group shipping sum /api/payment/create-order charged
-        // upfront (and the same resolveShippingCost createRazorpayGroupOrder
+        // upfront (and the same resolveShippingCost createPhonePeGroupOrder
         // below will use to build each order's recorded totalPrice) — keeps this
         // floor check from passing an amount that's short by the shipping fee.
         const expectedShippingGroups = splitCartIntoOrderGroups(bucketedPaid.available);
@@ -1488,14 +1535,15 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
                 computeShipmentProtectionFee(groupSubtotal, addons.shipmentProtectionAddon ?? false, commissionRates));
         }, 0);
         const expectedPaymentAmountRs = cartSubtotalRs + expectedPlatformFee + expectedGstOnFee + expectedAddonFees + expectedShippingFee;
-        const rzpOrderRecord = await fetchRazorpayOrder(razorpay_order_id);
-        const paidAmountRs = paiseToRupees(rzpOrderRecord.amount);
+        // Reuses the order already fetched above to confirm COMPLETED — PhonePe's
+        // own amount is in its wire-format smallest unit. // audit-money-units-ok: describes the PhonePe boundary conversion this line performs, not our storage convention
+        const paidAmountRs = paiseToRupees(phonepeOrder.amount);
         if (paidAmountRs < expectedPaymentAmountRs - 1) {
             serverLogger.warn(`Payment amount mismatch for user ${uid}: paid ₹${paidAmountRs}, expected ≥ ₹${expectedPaymentAmountRs}`);
             failedCheckoutRepository
                 .logPayment(uid, "amount_mismatch", `Paid ₹${paidAmountRs}, expected ≥ ₹${expectedPaymentAmountRs}`, {
-                gatewayOrderId: razorpay_order_id,
-                gatewayPaymentId: razorpay_payment_id,
+                gatewayOrderId: phonepeOrder.gatewayOrderId,
+                gatewayPaymentId: merchantOrderId,
                 amountRs: paidAmountRs,
                 addressId,
             })
@@ -1506,7 +1554,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
     const { coupons: appliedCoupons, dropped: droppedCoupons } = await revalidateAppliedCoupons(cart.appliedCoupons ?? [], bucketedPaid.available, uid);
     // "skip_items" (or an all-available cart under any policy) — build order
     // groups from the available bucket only. Dropped items are never ordered;
-    // their value is refunded below since Razorpay already captured payment
+    // their value is refunded below since PhonePe already captured payment
     // for the full cart before this stock check ran.
     const orderGroups = splitCartIntoOrderGroups(bucketedPaid.available);
     const orderIds = [];
@@ -1521,7 +1569,7 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
         g.reduce((sum, { item, product }) => sum + lineTotalFor(item, product), 0),
     ]), computeCheckoutFees(cartSubtotal, siteSettings?.commissions ?? CHECKOUT_DEFAULT_COMMISSIONS));
     for (const { items: group, orderType } of orderGroups) {
-        total += await createRazorpayGroupOrder(group, orderType, {
+        total += await createPhonePeGroupOrder(group, orderType, {
             appliedCoupons,
             cartSubtotal,
             storeAddons: cart.storeAddons,
@@ -1530,9 +1578,9 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
             uid,
             userName,
             userEmail,
-            razorpay_order_id,
-            razorpay_payment_id,
-            razorpay_signature,
+            merchantOrderId,
+            phonepeOrderId: phonepeOrder.gatewayOrderId,
+            transactionId: phonepeOrder.transactionId,
             shippingAddress,
             notes,
             outOfStockPolicy,
@@ -1567,24 +1615,24 @@ export async function verifyAndPlaceRazorpayOrderAction(input) {
         });
     });
     // outOfStockPolicy: "skip_items" — auto-refund the dropped items' value.
-    // Razorpay already captured payment for the FULL cart before this stock
+    // PhonePe already captured payment for the FULL cart before this stock
     // check ran, so anything not placed as an order must be given back.
     // AWAITED (not fire-and-forget) — this moves money. On failure the orders
     // themselves are NOT rolled back (they're already validly created and
     // paid); instead the failure is surfaced via order.refundPending + an
     // admin notification, never silently dropped (Rule #8).
-    await refundDroppedItemsForRazorpayCheckout({
+    await refundDroppedItemsForPhonePeCheckout({
         unavailablePaid,
         orderIds,
         productByIdPaid,
-        razorpayPaymentId: razorpay_payment_id,
+        phonepeOrderId: merchantOrderId,
     });
     if (emailsToSend.length > 0) {
         Promise.all(emailsToSend.map((e) => sendOrderConfirmationEmail(e))).catch((err) => serverLogger.error("Order confirmation email error:", err));
     }
-    serverLogger.info(`verifyAndPlaceRazorpayOrderAction: ${orderIds.length} order(s) placed for uid=${uid} — payment ${razorpay_payment_id}`);
+    serverLogger.info(`verifyAndPlacePhonePeOrderAction: ${orderIds.length} order(s) placed for uid=${uid} — payment ${merchantOrderId}`);
     getAdminRealtimeDb()
-        .ref(`${RTDB_PATHS.PAYMENT_EVENTS}/${razorpay_order_id}`)
+        .ref(`${RTDB_PATHS.PAYMENT_EVENTS}/${merchantOrderId}`)
         .update({ status: "success", orderIds, updatedAt: Date.now() })
         .catch((err) => serverLogger.warn("Payment event RTDB signal failed (non-critical)", { err }));
     return {

package/dist/_internal/server/features/checkout/bundle-expansion.d.ts

@@ -56,7 +56,7 @@ export declare function validateCartItemStock(item: CartItemDocument, productByI
 /**
  * Result of bucketing a cart into stock-satisfiable vs. stock-short lines.
  * Shared shape consumed by both checkout entry points (COD/UPI transaction
- * path and Razorpay post-payment path) so "what happens when an item is
+ * path and PhonePe post-payment path) so "what happens when an item is
  * unavailable" (skip it vs. cancel the whole checkout) is decided ONCE, by
  * the caller, from the same bucketing logic.
  */

package/dist/_internal/server/features/checkout/index.d.ts

@@ -1,3 +1,3 @@
-export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceRazorpayOrderAction, previewCheckoutPricing, resolveShippingCost, type CreateCheckoutOrderInput, type VerifyAndPlaceRazorpayOrderInput, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./actions";
+export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlacePhonePeOrderAction, previewCheckoutPricing, resolveShippingCost, type CreateCheckoutOrderInput, type VerifyAndPlacePhonePeOrderInput, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./actions";
 export { formatShippingAddress, type CheckoutOrderResult, } from "./data";
 export { CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CheckoutPaymentMethod, } from "../../../shared/features/checkout/config";

package/dist/_internal/server/features/checkout/index.js

@@ -1,3 +1,3 @@
-export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceRazorpayOrderAction, previewCheckoutPricing, resolveShippingCost, } from "./actions";
+export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlacePhonePeOrderAction, previewCheckoutPricing, resolveShippingCost, } from "./actions";
 export { formatShippingAddress, } from "./data";
 export { CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, } from "../../../shared/features/checkout/config";

package/dist/_internal/server/features/checkout/locked-lines.js

@@ -8,7 +8,7 @@
  *      and a won bid had no link to the order it became.
  * WHAT: `assertLockedLinesStillValid` (pre-order-creation guard) and
  *       `finalizeLockedLines` (post-order-creation close-out). Both are called
- *       from every order-creation path so the manual/COD and Razorpay flows
+ *       from every order-creation path so the manual/COD and PhonePe flows
  *       cannot diverge.
  *
  * EXPORTS:

package/dist/_internal/server/features/checkout/source-context.js

@@ -6,11 +6,11 @@
  *      `orderType: "auction"`. Everything else was recoverable only by reading
  *      the auction or offer document, which is mutable and eventually archived.
  * WHAT: `buildOrderSourceContext()` — the ONE builder for `OrderSourceContext`,
- *       called by both order-creation paths (manual/COD and Razorpay).
+ *       called by both order-creation paths (manual/COD and PhonePe).
  *
  * ## Why one shared function and not two inline blocks
  *
- * `createOrderForGroup` and `createRazorpayGroupOrder` are near-identical
+ * `createOrderForGroup` and `createPhonePeGroupOrder` are near-identical
  * ~200-line twins that already drifted once on add-on fees (Root Cause #65).
  * Two hand-written copies of this would be the create-vs-create axis of Root
  * Cause #39: one lane records provenance, the other silently doesn't, and the