@mohasinac/appkit 4.59.0 → 4.60.0

package/dist/index.d.ts

@@ -932,6 +932,10 @@ export { AdminPageHeader } from "./features/admin/index";
 export { AdminPayoutsView } from "./features/admin/index";
 export { AdminAuditLogView } from "./features/admin/index";
 export type { AdminAuditLogViewProps } from "./features/admin/index";
+export { AdminMoneyCasesView } from "./features/admin/index";
+export type { AdminMoneyCasesViewProps } from "./features/admin/index";
+export { AdminGatewayEventsView } from "./features/admin/index";
+export type { AdminGatewayEventsViewProps } from "./features/admin/index";
 export { ViewAuditLogEntryModal } from "./features/admin/index";
 export type { AuditLogEntryDetail, ViewAuditLogEntryModalProps } from "./features/admin/index";
 export { AdminPrizeDrawsView } from "./features/admin/index";
@@ -1889,27 +1893,6 @@ export type { TitleBarLayoutProps } from "./features/layout/index";
 export type { TitleBarProps } from "./features/layout/index";
 export type { TitleBarUser } from "./features/layout/index";
 export type { UseBottomActionsOptions } from "./features/layout/index";
-export { CoinsBadge } from "./features/loyalty/index";
-export { CoinsDisplay } from "./features/loyalty/index";
-export { applyCoinsToOrder } from "./features/loyalty/index";
-export { buildLoyaltyColumns } from "./features/loyalty/index";
-export { calculateCoinsEarned } from "./features/loyalty/index";
-export { calculateMaxRedeemable } from "./features/loyalty/index";
-export { coinHistoryEntrySchema } from "./features/loyalty/index";
-export { coinReasonSchema } from "./features/loyalty/index";
-export { coinsToRupees } from "./features/loyalty/index";
-export { loyaltyAdminColumns } from "./features/loyalty/index";
-export { loyaltyBalanceSchema } from "./features/loyalty/index";
-export { loyaltyConfigSchema } from "./features/loyalty/index";
-export { useLoyaltyBalance } from "./features/loyalty/index";
-export type { CoinHistoryEntry } from "./features/loyalty/index";
-export type { CoinReason } from "./features/loyalty/index";
-export type { EarnCoinsInput } from "./features/loyalty/index";
-export type { LoyaltyBalance } from "./features/loyalty/index";
-export type { LoyaltyConfig } from "./features/loyalty/index";
-export type { RedeemCoinsInput } from "./features/loyalty/index";
-export type { RedeemCoinsResult } from "./features/loyalty/index";
-export { LoyaltyRepository } from "./features/loyalty/server";
 export { AvatarUpload } from "./features/media/index";
 export { CameraCapture } from "./features/media/index";
 export { ImageCropModal } from "./features/media/index";
@@ -1975,11 +1958,13 @@ export type { OrderSiblingPaymentsProps } from "./features/orders/index";
 export { OrderPaymentSummary } from "./features/orders/index";
 export type { OrderPaymentSummaryProps } from "./features/orders/index";
 export { OrderStatusTimeline } from "./features/orders/index";
+export { OrderCompletionPanel } from "./features/orders/index";
 export { StatusTimeline, stepsFromEntries } from "./features/status-history/index";
 export type { StatusTimelineProps, TimelineEntry, TimelineStep } from "./features/status-history/index";
 export { OfferPhaseTimeline } from "./features/seller/components/OfferPhaseTimeline";
 export type { OfferPhaseTimelineProps, OfferChainRound } from "./features/seller/components/OfferPhaseTimeline";
 export type { OrderStatusTimelineProps } from "./features/orders/index";
+export type { OrderCompletionPanelProps, RateableLine } from "./features/orders/index";
 export type { OrderPaymentRecord, OrderPaymentRecordMethod, OrderPaymentVerificationMethod, } from "./features/orders/index";
 export { RefundHistoryTable } from "./features/orders/index";
 export type { RefundHistoryTableProps } from "./features/orders/index";
@@ -2014,6 +1999,13 @@ export type { OrderDocument } from "./features/orders/index";
 export type { OrderRefundEvent, RefundType } from "./features/orders/schemas/firestore";
 export { MANUAL_PAYMENT_METHODS, isManualPaymentMethod, PAYMENT_REVIEW_QUEUE_MODES, isPaymentReviewQueueMode, PAYMENT_REVIEW_QUEUE_SCAN_LIMIT, } from "./features/orders/constants/payment-window";
 export type { PaymentReviewQueueMode } from "./features/orders/constants/payment-window";
+export { ORDER_STATUS_TRANSITIONS, ORDER_TERMINAL_STATUSES, isLegalOrderTransition, describeIllegalTransition, } from "./features/orders/constants/transitions";
+export { OBLIGATION_POLICIES, durationToMinutes, } from "./features/obligations/constants/policies";
+export type { ObligationPolicy, Duration, DurationUnit, } from "./features/obligations/constants/policies";
+export { OBLIGATIONS_COLLECTION, OBLIGATION_FIELDS, ALL_OBLIGATION_KINDS, createObligationId, } from "./features/obligations/schemas/firestore";
+export type { ObligationDocument, ObligationKind, ObligationState, ObligationDueAction, } from "./features/obligations/schemas/firestore";
+export { deadlinesFor, resolveDueAt, reconcileObligations, } from "./_internal/shared/obligations/deadlines";
+export type { ResolvedDeadline } from "./_internal/shared/obligations/deadlines";
 export { ORDER_SCOPE_VALUES, ORDER_SCOPE_TABS, isOrderScope, statusesForScope, mergeOrderScopeFilter, } from "./features/orders/constants/order-scope";
 export type { OrderScope } from "./features/orders/constants/order-scope";
 export type { OrderDocumentItem } from "./features/orders/index";
@@ -2790,7 +2782,7 @@ export { Ol } from "./ui/index";
 export { LoginRequiredModal } from "./ui/components/LoginRequiredModal";
 export type { LoginRequiredModalProps } from "./ui/components/LoginRequiredModal";
 export { isAuthError } from "./utils/auth-error";
-export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index";
+export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index";
 export { WishlistFullError } from "./features/wishlist/server";
 export { useHistory, useHistoryMergeOnLogin, getGuestHistory, trackGuestHistory, removeGuestHistoryItem, clearGuestHistory, getGuestHistoryCount, type GuestHistoryItem, type GuestHistoryType, type UserHistoryItem, type HistoryProductType, type HistoryItemSnapshot, type TrackArgs as TrackHistoryArgs, } from "./features/history";
 export { historyRepository, UserHistoryRepository, trackHistoryView, getHistoryForUser, removeHistoryItem, clearHistory, mergeGuestHistory, } from "./features/history/server";
@@ -2874,7 +2866,7 @@ export type { AssemblyDrawerProps, AssemblyPartOption, AssemblyRow, AssemblyOutc
 export type { PartListingRow } from "./features/parts/components/PartDetailPageView";
 export { SCAMMER_COLLECTION, SCAMMER_ID_PREFIX, SCAMMER_MATCH_FIELDS, SCAMMER_INDEXED_FIELDS, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, SCAMMER_CONTESTS_SUBCOLLECTION, MAX_COMMENT_BODY_LENGTH, MAX_PENDING_SCAMMER_REPORTS_PER_USER, ScammerStatusValues, ScamPlatformValues, SocialPlatformValues, ContestTypeValues, ContestStatusValues, SCAM_PLATFORM_LABELS, SOCIAL_PLATFORM_LABELS, SCAMMER_STATUS_LABELS, CONTEST_TYPE_LABELS, CONTEST_STATUS_LABELS, DEFAULT_SCAMMER_DATA, DEFAULT_SCAMMER_INCIDENT_DATA, DEFAULT_SCAMMER_COMMENT_DATA, DEFAULT_SCAMMER_CONTEST_DATA, } from "./features/scams/schemas/firestore";
 export type { ScammerStatus, ScamPlatform, SocialPlatform, ContestType, ContestStatus, ScammerMatchField, ScammerMatchStrength, ScammerSocialMedia, ScammerDocument, ScammerIncidentDocument, ScammerCommentDocument, ScammerContestDocument, ScammerSuggestion, ScammerCreateInput, ScammerAdminUpdateInput, ScammerIncidentCreateInput, ScammerCommentCreateInput, ScammerContestCreateInput, } from "./features/scams/schemas/firestore";
-export { SCAM_TYPES, SCAM_CATEGORIES, SCAM_TYPE_LABELS, SCAM_CATEGORY_LABELS, getScamType, getScamTypesByCategory, getCategoryForScamType, } from "./features/scams/constants/scam-types";
+export { SCAM_TYPES, SCAM_CATEGORIES, SCAM_TYPE_LABELS, SCAM_CATEGORY_LABELS, getScamType, getScamTypesByCategory, getCategoryForScamType, isScamType, } from "./features/scams/constants/scam-types";
 export type { ScamType, ScamCategory, ScamTypeDefinition, ScamCategoryDefinition, } from "./features/scams/constants/scam-types";
 export { ScamRegistryView } from "./features/scams/components/ScamRegistryView";
 export type { ScamRegistryViewProps } from "./features/scams/components/ScamRegistryView";
@@ -2999,7 +2991,7 @@ export { safeFireAndForget } from "./utils/safe-fire-forget";
 export { withRetry } from "./http/retry";
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./errors/normalize";
-export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
+export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, defaultCheckoutItems, resolveCheckoutItems, type CartLane, type LaneAssignable, } from "./_internal/shared/checkout/lanes";
 export { roundShippingUp, toQuoteOptions, reconcileShipping, SHIPPING_ROUND_UP_TO, type ShippingQuoteOption, type SelectedShippingQuote, type ActualShipmentCost, type ShippingReconciliation, } from "./_internal/shared/shipping/quote";
 export { newsletterSubscribeSchema, quickCreateTaxonomySchema, payoutMarkPaidSchema, } from "./features/admin/schemas/small-forms";
 export { raffleEntrySchema } from "./features/contact/schemas/inquiry-forms";

package/dist/index.js

@@ -1865,6 +1865,10 @@ export { AdminPayoutsView } from "./features/admin/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // AdminAuditLogView - Read-only admin action audit trail list view.
 export { AdminAuditLogView } from "./features/admin/index.js";
+// AdminMoneyCasesView - The payment-case operator queue (chargebacks, refunds owed, claims).
+export { AdminMoneyCasesView } from "./features/admin/index.js";
+// AdminGatewayEventsView - The webhook inbox, with reopen-for-redelivery.
+export { AdminGatewayEventsView } from "./features/admin/index.js";
 // ViewAuditLogEntryModal - Detail modal for one audit-log entry.
 export { ViewAuditLogEntryModal } from "./features/admin/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
@@ -3567,50 +3571,6 @@ export { useBottomActionsContext } from "./features/layout/index.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // useDashboardNav - React hook for use dashboard nav.
 export { useDashboardNav } from "./features/layout/index.js";
-// ./features/loyalty/index
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// CoinsBadge - Component for coins badge.
-export { CoinsBadge } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// CoinsDisplay - Shared export for coins display.
-export { CoinsDisplay } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// applyCoinsToOrder - Helper for apply coins to order.
-export { applyCoinsToOrder } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// buildLoyaltyColumns - Helper for build loyalty columns.
-export { buildLoyaltyColumns } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// calculateCoinsEarned - Helper for calculate coins earned.
-export { calculateCoinsEarned } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// calculateMaxRedeemable - Helper for calculate max redeemable.
-export { calculateMaxRedeemable } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// coinHistoryEntrySchema - Model for coin history entry schema.
-export { coinHistoryEntrySchema } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// coinReasonSchema - Model for coin reason schema.
-export { coinReasonSchema } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// coinsToRupees - Shared export for coins to rupees.
-export { coinsToRupees } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// loyaltyAdminColumns - Shared export for loyalty admin columns.
-export { loyaltyAdminColumns } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// loyaltyBalanceSchema - Model for loyalty balance schema.
-export { loyaltyBalanceSchema } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// loyaltyConfigSchema - Model for loyalty config schema.
-export { loyaltyConfigSchema } from "./features/loyalty/index.js";
-// [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// useLoyaltyBalance - React hook for use loyalty balance.
-export { useLoyaltyBalance } from "./features/loyalty/index.js";
-// ./features/loyalty/server
-// [DB]-Database layer â€" uses firebase-admin or another server-side DB SDK; can only run in a trusted server environment.
-// LoyaltyRepository - Shared export for loyalty repository.
-export { LoyaltyRepository } from "./features/loyalty/server.js";
 // ./features/media/index
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // AvatarUpload - Shared export for avatar upload.
@@ -3729,6 +3689,8 @@ export { OrdersList } from "./features/orders/index.js";
 export { OrderSiblingPayments } from "./features/orders/index.js";
 export { OrderPaymentSummary } from "./features/orders/index.js";
 export { OrderStatusTimeline } from "./features/orders/index.js";
+// OrderCompletionPanel - Per-line ratings + Mark complete, the buyer's fast path.
+export { OrderCompletionPanel } from "./features/orders/index.js";
 // [CLIENT] StatusTimeline — the ONE rail both orders and offers render.
 // Each feature supplies only its phase vocabulary; the never-fabricate-a-
 // timestamp rule and the dot/connector rail live in one place.
@@ -3797,6 +3759,27 @@ export { useTrackOrder } from "./features/orders/index.js";
 // queue discriminator. Pure data + predicates — no firebase-admin in the
 // import chain, so safe on the main barrel (see "appkit Export Rules").
 export { MANUAL_PAYMENT_METHODS, isManualPaymentMethod, PAYMENT_REVIEW_QUEUE_MODES, isPaymentReviewQueueMode, PAYMENT_REVIEW_QUEUE_SCAN_LIMIT, } from "./features/orders/constants/payment-window.js";
+/*
+ * The order status machine. Safe in the MAIN barrel — `constants/transitions.ts`
+ * imports only a type from `../types/index`, so its chain never reaches
+ * `providers/db-firebase` and therefore never reaches `firebase-admin`
+ * (Root Cause #6/#24). The guard that consumes it lives in the repository,
+ * which stays server-only; these are the pure predicates a client surface can
+ * legitimately use to decide which status buttons to render.
+ */
+export { ORDER_STATUS_TRANSITIONS, ORDER_TERMINAL_STATUSES, isLegalOrderTransition, describeIllegalTransition, } from "./features/orders/constants/transitions.js";
+/*
+ * Obligations — the PURE half only.
+ *
+ * `deadlinesFor(order)` is a pure function over the policy registry with no
+ * reads and no writes, which is the entire reason deadlines are derived rather
+ * than stored: a buyer or seller page renders "Dispatch by Thu 3 Nov" from an
+ * order it already has. Safe in the main barrel because nothing here reaches
+ * `providers/db-firebase` — the repository does, and stays in `server.ts`.
+ */
+export { OBLIGATION_POLICIES, durationToMinutes, } from "./features/obligations/constants/policies.js";
+export { OBLIGATIONS_COLLECTION, OBLIGATION_FIELDS, ALL_OBLIGATION_KINDS, createObligationId, } from "./features/obligations/schemas/firestore.js";
+export { deadlinesFor, resolveDueAt, reconcileObligations, } from "./_internal/shared/obligations/deadlines.js";
 export { ORDER_SCOPE_VALUES, ORDER_SCOPE_TABS, isOrderScope, statusesForScope, mergeOrderScopeFilter, } from "./features/orders/constants/order-scope.js";
 // ./features/orders/server
 // [SERVER-ONLY]-Server-only â€" uses Node.js, Next.js server internals, or third-party server SDKs (auth, email, payment, shipping).
@@ -5047,7 +5030,7 @@ export { Ol } from "./ui/index.js";
 export { LoginRequiredModal } from "./ui/components/LoginRequiredModal.js";
 export { isAuthError } from "./utils/auth-error.js";
 // -- Missing constants ----------------------------------------------------------
-export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, LOYALTY_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index.js";
+export { API_ENDPOINTS, API_ROUTES, LOGS_ENDPOINTS, AUTH_ENDPOINTS, ACCOUNT_ENDPOINTS, NOTIFICATIONS_ENDPOINTS, ADMIN_ENDPOINTS, AUCTION_ENDPOINTS, BID_ENDPOINTS, CART_ENDPOINTS, CATEGORY_ENDPOINTS, CHECKOUT_ENDPOINTS, FAQ_ENDPOINTS, HOMEPAGE_ENDPOINTS, ANALYTICS_ENDPOINTS, MEDIA_ENDPOINTS, ORDER_ENDPOINTS, PREORDER_ENDPOINTS, PRODUCT_ENDPOINTS, REVIEW_ENDPOINTS, SEARCH_ENDPOINTS, SELLER_ENDPOINTS, BLOG_ENDPOINTS, WISHLIST_ENDPOINTS, COLLECTION_CACHE_PATHS, resolveEndpoint, resolveEndpointFn, ROUTES, PUBLIC_ROUTES, PROTECTED_ROUTES, AUTH_ROUTES, WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, WISHLIST_DOC_ID, HISTORY_DOC_ID, WISHLIST_COLLECTION, HISTORY_COLLECTION, } from "./constants/index.js";
 // Wishlist server errors (server-only via tree-shake â€" class only, no firebase-admin at module scope)
 export { WishlistFullError } from "./features/wishlist/server.js";
 // History â€" client hook + guest util are safe in main barrel; repository is server-only
@@ -5180,7 +5163,7 @@ export { AssemblyDrawer } from "./features/parts/components/AssemblyDrawer.js";
 // Scam registry â€" schema types and constants
 export { SCAMMER_COLLECTION, SCAMMER_ID_PREFIX, SCAMMER_MATCH_FIELDS, SCAMMER_INDEXED_FIELDS, SCAMMER_FIELDS, SCAMMER_INCIDENTS_SUBCOLLECTION, SCAMMER_COMMENTS_SUBCOLLECTION, SCAMMER_CONTESTS_SUBCOLLECTION, MAX_COMMENT_BODY_LENGTH, MAX_PENDING_SCAMMER_REPORTS_PER_USER, ScammerStatusValues, ScamPlatformValues, SocialPlatformValues, ContestTypeValues, ContestStatusValues, SCAM_PLATFORM_LABELS, SOCIAL_PLATFORM_LABELS, SCAMMER_STATUS_LABELS, CONTEST_TYPE_LABELS, CONTEST_STATUS_LABELS, DEFAULT_SCAMMER_DATA, DEFAULT_SCAMMER_INCIDENT_DATA, DEFAULT_SCAMMER_COMMENT_DATA, DEFAULT_SCAMMER_CONTEST_DATA, } from "./features/scams/schemas/firestore.js";
 // Scam registry â€" scam type definitions
-export { SCAM_TYPES, SCAM_CATEGORIES, SCAM_TYPE_LABELS, SCAM_CATEGORY_LABELS, getScamType, getScamTypesByCategory, getCategoryForScamType, } from "./features/scams/constants/scam-types.js";
+export { SCAM_TYPES, SCAM_CATEGORIES, SCAM_TYPE_LABELS, SCAM_CATEGORY_LABELS, getScamType, getScamTypesByCategory, getCategoryForScamType, isScamType, } from "./features/scams/constants/scam-types.js";
 // Scam Registry view components (SCAM3â€"SCAM4)
 export { ScamRegistryView } from "./features/scams/components/ScamRegistryView.js";
 export { ScamProfileView } from "./features/scams/components/ScamProfileView.js";
@@ -5327,7 +5310,15 @@ export { withRetry } from "./http/retry.js";
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize.js";
 // Checkout lanes — the derived auction > offer > standard partition of the
 // cart, and the priority rule that decides which one may be checked out.
-export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, } from "./_internal/shared/checkout/lanes.js";
+export { CART_LANE, CART_LANE_PRIORITY, CART_LANE_LABELS, laneOf, activeLane, laneItems, laneCounts, isLaneCheckoutable, laneBlockReason, isLockedLane, canAddNewItems, 
+/*
+ * 🛑 `resolveCheckoutItems` is THE definition of "what this checkout charges
+ * for and settles", and it is exported because the CONSUMER owns the capture
+ * route (`/api/payment/create-order`) — which was one of the two sites that
+ * disagreed. Exporting it is what makes the agreement structural instead of
+ * a convention two files have to keep independently (D40, Root Cause #75).
+ */
+defaultCheckoutItems, resolveCheckoutItems, } from "./_internal/shared/checkout/lanes.js";
 /*
  * Shipping quote model. Public because the CONSUMER owns the route that asks
  * the carrier for rates (`/api/shipping/quote`) and the checkout UI that

package/dist/next/ErrorBoundary.js

@@ -5,7 +5,7 @@ import { Button } from "../ui/components/Button.js";
 import { Stack } from "../ui/components/Layout.js";
 import { Heading, Text } from "../ui/components/Typography.js";
 function DefaultFallback({ error, onReset, }) {
-    return (_jsxs(Stack, { centered: true, gap: "md", surface: "default", padding: "lg", rounded: "xl", border: "default", className: "min-h-[40vh] text-center", "data-section": "errorboundary-div-445", children: [_jsx(Heading, { level: 2, children: "Something went wrong" }), _jsx(Text, { variant: "secondary", children: "An unexpected error occurred. Please try again." }), process.env.NODE_ENV === "development" && error ? (_jsx("pre", { className: "max-w-full overflow-auto rounded-md bg-[var(--appkit-color-surface)] p-3 text-left text-xs bg-[var(--appkit-color-surface-elevated)]", children: error.message })) : null, _jsx(Button, { type: "button", onClick: onReset, children: "Try again" })] }));
+    return (_jsxs(Stack, { centered: true, gap: "md", surface: "default", padding: "lg", rounded: "xl", border: "default", className: "min-h-[40vh] text-center", "data-section": "errorboundary-div-445", children: [_jsx(Heading, { level: 2, children: "Something went wrong" }), _jsx(Text, { variant: "secondary", children: "An unexpected error occurred. Please try again." }), process.env.NODE_ENV === "development" && error ? (_jsx("pre", { className: "max-w-full overflow-auto rounded-md p-3 text-left text-xs bg-[var(--appkit-color-surface-elevated)]", children: error.message })) : null, _jsx(Button, { type: "button", onClick: onReset, children: "Try again" })] }));
 }
 export class ErrorBoundary extends Component {
     constructor(props) {

package/dist/next/routing/route-map.d.ts

@@ -174,6 +174,7 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly ORDER_CANCEL: (id: string) => string;
         readonly ORDER_TRACK: (id: string) => string;
         readonly ORDER_RETURN: (id: string) => string;
+        readonly ORDER_CLAIM: (id: string) => string;
         readonly ORDER_INVOICE: (id: string) => string;
         readonly ORDER_PAYMENT: (id: string) => string;
         readonly NOTIFICATIONS: "/user/notifications";
@@ -298,6 +299,12 @@ export declare const DEFAULT_ROUTE_MAP: {
     readonly ADMIN: {
         readonly DASHBOARD: "/admin/dashboard";
         readonly SHIPMENTS: "/admin/shipments";
+        readonly INVENTORY: "/admin/inventory";
+        readonly INVENTORY_BOXES: "/admin/inventory/boxes";
+        readonly INVENTORY_BOX_DETAIL: (id: string) => string;
+        readonly INVENTORY_BOX_LABELS: "/admin/inventory/boxes/labels";
+        readonly INVENTORY_MOVEMENTS: "/admin/inventory/movements";
+        readonly SHIPMENT_RECEIVE: (id: string) => string;
         readonly SHIPMENTS_NEW: "/admin/shipments/new";
         readonly SHIPMENTS_EDIT: (id: string) => string;
         readonly SHIPMENT_LOT_ITEMS: (id: string, lotId: string) => string;
@@ -367,6 +374,11 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly PAYOUTS: "/admin/payouts";
         readonly PAYOUT_DETAIL: (id: string) => string;
         readonly AUDIT_LOG: "/admin/audit-log";
+        readonly MONEY_CASES: "/admin/money-cases";
+        readonly MONEY_CASE_DETAIL: (id: string) => string;
+        readonly PROTECTION_CLAIMS: "/admin/protection-claims";
+        readonly MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events";
+        readonly MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations";
         readonly EVENTS: "/admin/events";
         readonly EVENTS_NEW: "/admin/events/new";
         readonly EVENTS_EDIT: (id: string) => string;
@@ -615,6 +627,7 @@ export declare const ROUTES: {
         readonly ORDER_CANCEL: (id: string) => string;
         readonly ORDER_TRACK: (id: string) => string;
         readonly ORDER_RETURN: (id: string) => string;
+        readonly ORDER_CLAIM: (id: string) => string;
         readonly ORDER_INVOICE: (id: string) => string;
         readonly ORDER_PAYMENT: (id: string) => string;
         readonly NOTIFICATIONS: "/user/notifications";
@@ -739,6 +752,12 @@ export declare const ROUTES: {
     readonly ADMIN: {
         readonly DASHBOARD: "/admin/dashboard";
         readonly SHIPMENTS: "/admin/shipments";
+        readonly INVENTORY: "/admin/inventory";
+        readonly INVENTORY_BOXES: "/admin/inventory/boxes";
+        readonly INVENTORY_BOX_DETAIL: (id: string) => string;
+        readonly INVENTORY_BOX_LABELS: "/admin/inventory/boxes/labels";
+        readonly INVENTORY_MOVEMENTS: "/admin/inventory/movements";
+        readonly SHIPMENT_RECEIVE: (id: string) => string;
         readonly SHIPMENTS_NEW: "/admin/shipments/new";
         readonly SHIPMENTS_EDIT: (id: string) => string;
         readonly SHIPMENT_LOT_ITEMS: (id: string, lotId: string) => string;
@@ -808,6 +827,11 @@ export declare const ROUTES: {
         readonly PAYOUTS: "/admin/payouts";
         readonly PAYOUT_DETAIL: (id: string) => string;
         readonly AUDIT_LOG: "/admin/audit-log";
+        readonly MONEY_CASES: "/admin/money-cases";
+        readonly MONEY_CASE_DETAIL: (id: string) => string;
+        readonly PROTECTION_CLAIMS: "/admin/protection-claims";
+        readonly MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events";
+        readonly MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations";
         readonly EVENTS: "/admin/events";
         readonly EVENTS_NEW: "/admin/events/new";
         readonly EVENTS_EDIT: (id: string) => string;

package/dist/next/routing/route-map.js

@@ -289,6 +289,12 @@ export const DEFAULT_ROUTE_MAP = {
         ORDER_CANCEL: (id) => `/user/orders/${id}/cancel`,
         ORDER_TRACK: (id) => `/user/orders/${id}/track`,
         ORDER_RETURN: (id) => `/user/orders/${id}/return`,
+        /*
+         * The buyer's protection claim. Its own route rather than a tab on the
+         * order page: the form is a decision with a required account of what
+         * happened, and the order page is already the densest surface in the app.
+         */
+        ORDER_CLAIM: (id) => `/user/orders/${id}/claim`,
         ORDER_INVOICE: (id) => `/user/orders/${id}/invoice`,
         ORDER_PAYMENT: (id) => `/user/orders/${id}/payment`,
         NOTIFICATIONS: "/user/notifications",
@@ -427,6 +433,22 @@ export const DEFAULT_ROUTE_MAP = {
     ADMIN: {
         DASHBOARD: "/admin/dashboard",
         SHIPMENTS: "/admin/shipments",
+        INVENTORY: "/admin/inventory",
+        INVENTORY_BOXES: "/admin/inventory/boxes",
+        INVENTORY_BOX_DETAIL: (id) => `/admin/inventory/boxes/${id}`,
+        /*
+         * 🛑 Must sit BEFORE nothing and resolve independently of
+         * `INVENTORY_BOX_DETAIL` — `/admin/inventory/boxes/labels` and
+         * `/admin/inventory/boxes/{id}` share a segment, so Next's static-beats-
+         * dynamic precedence is what keeps `labels` from being read as a box id.
+         * That precedence is the framework's, not ours, but it means a box may
+         * never be registered with the code `labels`: its id would be
+         * `storagebox-labels`, so there is no collision in practice, and this note
+         * exists so nobody "fixes" the route by renaming it.
+         */
+        INVENTORY_BOX_LABELS: "/admin/inventory/boxes/labels",
+        INVENTORY_MOVEMENTS: "/admin/inventory/movements",
+        SHIPMENT_RECEIVE: (id) => `/admin/shipments/${id}/receive`,
         SHIPMENTS_NEW: "/admin/shipments/new",
         SHIPMENTS_EDIT: (id) => `/admin/shipments/${id}/edit`,
         SHIPMENT_LOT_ITEMS: (id, lotId) => `/admin/shipments/${id}/lots/${lotId}/items`,
@@ -524,6 +546,24 @@ export const DEFAULT_ROUTE_MAP = {
         PAYOUTS: "/admin/payouts",
         PAYOUT_DETAIL: (id) => `/admin/payouts/${id}/view`,
         AUDIT_LOG: "/admin/audit-log",
+        /*
+         * 🛑 MONEY_CASES is deliberately NOT under `/admin/maintenance/`.
+         *
+         * Maintenance means "something broke, look when you can" and is granted to
+         * `maintenance_employee`. A payment case can carry a gateway's own
+         * `respond_by`: miss it and the chargeback is lost by default whoever was
+         * right. Burying that beside Cloud Logs is how a deadline is missed, so it
+         * gets its own section and an admin-only permission.
+         *
+         * Gateway events and obligations DO belong under maintenance — they are
+         * diagnostics with no external clock, and the cases they produce are what
+         * carries urgency.
+         */
+        MONEY_CASES: "/admin/money-cases",
+        MONEY_CASE_DETAIL: (id) => `/admin/money-cases/${id}`,
+        PROTECTION_CLAIMS: "/admin/protection-claims",
+        MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events",
+        MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations",
         EVENTS: "/admin/events",
         EVENTS_NEW: "/admin/events/new",
         EVENTS_EDIT: (id) => `/admin/events/${id}/edit`,

package/dist/providers/payment-manual/index.d.ts

@@ -16,7 +16,7 @@
  * `IPaymentProvider` generically rather than the order repository directly.
  */
 import { IPaymentProvider } from "../../contracts";
-import type { PaymentOrder, PaymentCapture, Refund } from "../../contracts";
+import type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord } from "../../contracts";
 import type { JsonValue } from "../../schemas/types";
 export declare class ManualPaymentProvider extends IPaymentProvider {
     readonly name = "manual";
@@ -37,4 +37,18 @@ export declare class ManualPaymentProvider extends IPaymentProvider {
      */
     refund(paymentId: string, amount?: number): Promise<Refund>;
     getOrder(orderId: string): Promise<PaymentOrder>;
+    /**
+     * 🛑 `[]` here means "THIS PROVIDER CANNOT ANSWER", not "there are no
+     * payments" — and the difference decides whether a reconciler may conclude
+     * anything. A manual payment exists only as a row we wrote plus a proof the
+     * buyer uploaded; there is no external ledger to compare against, so the
+     * gateway-vs-us check is structurally inapplicable rather than clean.
+     *
+     * The caller is required to treat an empty list as no information (see the
+     * contract), which is why this is honest rather than a silent degrade.
+     */
+    listPayments(): Promise<GatewayPaymentRecord[]>;
+    getDispute(disputeId: string): Promise<Dispute>;
+    listDisputes(): Promise<Dispute[]>;
+    acceptDispute(disputeId: string, _confirmIrrevocable: true): Promise<Dispute>;
 }

package/dist/providers/payment-manual/index.js

@@ -88,4 +88,41 @@ export class ManualPaymentProvider extends IPaymentProvider {
         }
         return order;
     }
+    /*
+     * ── DISPUTES: THERE IS NO SUCH THING HERE ─────────────────────────────────
+     *
+     * A manual payment is a bank transfer or cash the buyer made outside the
+     * system, reconciled by an admin against an uploaded proof. There is no
+     * card network and no acquirer, so there is no chargeback mechanism to
+     * query — a buyer's complaint arrives as a support ticket or a grievance,
+     * which is a different (and human) path.
+     *
+     * 🛑 `listDisputes()` returning `[]` is therefore a FACT, not a silent
+     * degrade: "this provider cannot have chargebacks" is true. The single-
+     * dispute getters throw, because being ASKED for a specific dispute id on a
+     * provider that has none means the caller is confused, and answering a
+     * confident wrong thing is how a reconciler reports clean.
+     */
+    /**
+     * 🛑 `[]` here means "THIS PROVIDER CANNOT ANSWER", not "there are no
+     * payments" — and the difference decides whether a reconciler may conclude
+     * anything. A manual payment exists only as a row we wrote plus a proof the
+     * buyer uploaded; there is no external ledger to compare against, so the
+     * gateway-vs-us check is structurally inapplicable rather than clean.
+     *
+     * The caller is required to treat an empty list as no information (see the
+     * contract), which is why this is honest rather than a silent degrade.
+     */
+    async listPayments() {
+        return [];
+    }
+    async getDispute(disputeId) {
+        throw Object.assign(new Error(`Manual payments have no dispute mechanism — nothing can be fetched for ${disputeId}`), { httpStatus: 400 });
+    }
+    async listDisputes() {
+        return [];
+    }
+    async acceptDispute(disputeId, _confirmIrrevocable) {
+        throw Object.assign(new Error(`Manual payments have no dispute to accept (${disputeId})`), { httpStatus: 400 });
+    }
 }

package/dist/providers/payment-phonepe/index.d.ts

@@ -38,7 +38,7 @@
  */
 import type { JsonValue } from "@mohasinac/appkit";
 import { IPaymentProvider } from "../../contracts";
-import type { PaymentOrder, PaymentCapture, Refund } from "../../contracts";
+import type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord } from "../../contracts";
 /**
  * PhonePe's `metaInfo` (udf1-udf5, ≤256 chars each) is the only channel that
  * survives from `createOrder()` through to BOTH the Order Status API AND the
@@ -114,4 +114,17 @@ export declare class PhonePeProvider extends IPaymentProvider {
      * than `capturePayment()` when confirming a payment.
      */
     getOrder(orderId: string): Promise<PaymentOrder>;
+    /**
+     * 🛑 `[]` because PhonePe's PG Checkout API is ORDER-keyed and exposes no
+     * "list my payments in a window" endpoint — not because there are none.
+     * Distinct from the manual provider's reason: there IS an external ledger
+     * here, we simply cannot read it in bulk. A reconciler must therefore not
+     * treat PhonePe as reconciled; it is unreconcilable with this API, which is
+     * a documented limitation rather than a gap being worked (PhonePe is dormant
+     * — Razorpay wins the provider tie-break).
+     */
+    listPayments(): Promise<GatewayPaymentRecord[]>;
+    getDispute(disputeId: string): Promise<Dispute>;
+    listDisputes(): Promise<Dispute[]>;
+    acceptDispute(disputeId: string, _confirmIrrevocable: true): Promise<Dispute>;
 }

package/dist/providers/payment-phonepe/index.js

@@ -218,4 +218,40 @@ export class PhonePeProvider extends IPaymentProvider {
             metadata: intent,
         };
     }
+    /*
+     * ── DISPUTES: NOT EXPOSED BY THIS GATEWAY'S API ───────────────────────────
+     *
+     * Distinct from the manual provider's reason, and the distinction matters.
+     * PhonePe transactions CAN be disputed — UPI has a chargeback process — but
+     * the PG Checkout API this adapter wraps exposes no dispute resource, so we
+     * have no way to read one. A PhonePe chargeback reaches us as an email or a
+     * dashboard notification, not as data.
+     *
+     * So `[]` here means "we cannot see them", not "they cannot exist", and that
+     * is worth saying out loud: a reconciler that treats an empty list as "no
+     * disputes outstanding" would be drawing a false conclusion on this gateway.
+     * PhonePe is currently dormant (Razorpay wins the provider tie-break), which
+     * is why this is a documented limitation rather than a gap being worked.
+     */
+    /**
+     * 🛑 `[]` because PhonePe's PG Checkout API is ORDER-keyed and exposes no
+     * "list my payments in a window" endpoint — not because there are none.
+     * Distinct from the manual provider's reason: there IS an external ledger
+     * here, we simply cannot read it in bulk. A reconciler must therefore not
+     * treat PhonePe as reconciled; it is unreconcilable with this API, which is
+     * a documented limitation rather than a gap being worked (PhonePe is dormant
+     * — Razorpay wins the provider tie-break).
+     */
+    async listPayments() {
+        return [];
+    }
+    async getDispute(disputeId) {
+        throw Object.assign(new Error(`PhonePe exposes no dispute API — cannot fetch ${disputeId}`), { httpStatus: 501 });
+    }
+    async listDisputes() {
+        return [];
+    }
+    async acceptDispute(disputeId, _confirmIrrevocable) {
+        throw Object.assign(new Error(`PhonePe exposes no dispute API — ${disputeId} must be handled in PhonePe's own dashboard`), { httpStatus: 501 });
+    }
 }

package/dist/providers/payment-razorpay/index.d.ts

@@ -52,7 +52,7 @@
  */
 import type { JsonValue } from "@mohasinac/appkit";
 import { IPaymentProvider } from "../../contracts";
-import type { PaymentOrder, PaymentCapture, Refund } from "../../contracts";
+import type { PaymentOrder, PaymentCapture, Refund, Dispute, GatewayPaymentRecord } from "../../contracts";
 export { verifyPaymentSignature, verifyWebhookSignature, type RazorpayPaymentResult, } from "./signature";
 export interface RazorpayConfig {
     /** Publishable key (`rzp_test_…` / `rzp_live_…`). Safe to expose to the browser. */
@@ -122,4 +122,47 @@ export declare class RazorpayProvider extends IPaymentProvider {
      * (see point 1 of the class comment).
      */
     getOrder(orderId: string): Promise<PaymentOrder>;
+    /**
+     * Typed STRUCTURALLY rather than against the SDK's `Disputes.RazorpayDispute`
+     * namespace type.
+     *
+     * Two reasons: the namespace is declared inside `types/disputes.d.ts` and is
+     * not part of the package's documented export surface, so importing it couples
+     * us to an internal; and naming only the fields we read makes the mapping
+     * auditable against the SDK by eye. Every field below was checked against the
+     * installed 2.9.8 declaration — `id`, `payment_id`, `amount`, `currency`,
+     * `amount_deducted`, `reason_code`, `respond_by`, `status`, `phase`,
+     * `created_at` — rather than recalled.
+     *
+     * `status` and `phase` are `string` in the SDK too, so nothing is lost by not
+     * importing it.
+     */
+    private toDispute;
+    /**
+     * Payments in a window, for reconciliation.
+     *
+     * 🛑 `from`/`to` are Unix timestamps in **SECONDS** and `count` is capped at
+     * **100 by the API** (verified in `RazorpayPaginationOptions`). The cap is
+     * NOT raised by asking: a caller wanting more must page with `skip`, and this
+     * method deliberately does not, because an unbounded page loop inside a 540 s
+     * function is how a reconciler turns into a timeout. At this project's volume
+     * one page is several days of payments; the count is logged so the day that
+     * stops being true is visible rather than silently truncating.
+     */
+    listPayments(opts: {
+        from: Date;
+        to: Date;
+        limit?: number;
+    }): Promise<GatewayPaymentRecord[]>;
+    getDispute(disputeId: string): Promise<Dispute>;
+    listDisputes(): Promise<Dispute[]>;
+    /**
+     * Accept liability — irreversible.
+     *
+     * `confirmIrrevocable` is required by the contract and is not read here, and
+     * that is the point: its job is to make the CALLER state intent at the call
+     * site. A runtime check would be theatre, since the type already makes
+     * `false` uncompilable.
+     */
+    acceptDispute(disputeId: string, _confirmIrrevocable: true): Promise<Dispute>;
 }