@mohasinac/appkit 4.59.0 → 4.60.1

package/dist/providers/payment-razorpay/index.js

@@ -53,6 +53,7 @@
 import Razorpay from "razorpay";
 import { IPaymentProvider } from "../../contracts/index.js";
 import { getDefaultCurrency } from "../../core/baseline-resolver.js";
+import { paiseToRupees } from "../../core/money.js";
 import { verifyWebhookSignature } from "./signature.js";
 export { verifyPaymentSignature, verifyWebhookSignature, } from "./signature.js";
 /** Razorpay's own order status vocabulary → the contract's. */
@@ -229,4 +230,102 @@ export class RazorpayProvider extends IPaymentProvider {
             metadata: order.notes,
         };
     }
+    /*
+     * ── DISPUTES ──────────────────────────────────────────────────────────────
+     *
+     * Razorpay is the only registered provider that HAS disputes, so this is the
+     * only real implementation of the three.
+     *
+     * 🛑 Two unit conversions, both easy to get wrong and both silent when wrong:
+     *
+     *   amount / amount_deducted — currency SUBUNITS → decimal rupees.
+     *   respond_by / created_at  — Unix timestamp in SECONDS → Date.
+     *
+     * The second is the nastier one. `new Date(1761000000)` is 21 January 1970,
+     * so a missed `* 1000` does not throw and does not look like a unit bug — it
+     * looks like corrupt data, and on a dispute it would make a live `respondBy`
+     * deadline sort as 55 years overdue, which an escalation query would then
+     * either flood on or ignore. The existing `refund`/`getOrder` methods above
+     * already multiply, which is the precedent to copy.
+     */
+    /**
+     * Typed STRUCTURALLY rather than against the SDK's `Disputes.RazorpayDispute`
+     * namespace type.
+     *
+     * Two reasons: the namespace is declared inside `types/disputes.d.ts` and is
+     * not part of the package's documented export surface, so importing it couples
+     * us to an internal; and naming only the fields we read makes the mapping
+     * auditable against the SDK by eye. Every field below was checked against the
+     * installed 2.9.8 declaration — `id`, `payment_id`, `amount`, `currency`,
+     * `amount_deducted`, `reason_code`, `respond_by`, `status`, `phase`,
+     * `created_at` — rather than recalled.
+     *
+     * `status` and `phase` are `string` in the SDK too, so nothing is lost by not
+     * importing it.
+     */
+    toDispute(d) {
+        return {
+            id: String(d.id),
+            paymentId: String(d.payment_id),
+            amount: paiseToRupees(Number(d.amount)),
+            currency: String(d.currency),
+            amountDeducted: paiseToRupees(Number(d.amount_deducted ?? 0)),
+            reasonCode: String(d.reason_code ?? ""),
+            respondBy: new Date(Number(d.respond_by) * 1000),
+            status: String(d.status ?? ""),
+            phase: String(d.phase ?? ""),
+            createdAt: new Date(Number(d.created_at) * 1000),
+            gateway: this.name,
+        };
+    }
+    /**
+     * Payments in a window, for reconciliation.
+     *
+     * 🛑 `from`/`to` are Unix timestamps in **SECONDS** and `count` is capped at
+     * **100 by the API** (verified in `RazorpayPaginationOptions`). The cap is
+     * NOT raised by asking: a caller wanting more must page with `skip`, and this
+     * method deliberately does not, because an unbounded page loop inside a 540 s
+     * function is how a reconciler turns into a timeout. At this project's volume
+     * one page is several days of payments; the count is logged so the day that
+     * stops being true is visible rather than silently truncating.
+     */
+    async listPayments(opts) {
+        const result = await this.razorpay.payments.all({
+            from: Math.floor(opts.from.getTime() / 1000),
+            to: Math.ceil(opts.to.getTime() / 1000),
+            count: Math.min(opts.limit ?? 100, 100),
+        });
+        return (result.items ?? []).map((p) => {
+            const captured = Number(p.created_at);
+            return {
+                id: String(p.id),
+                ...(p.order_id ? { orderId: String(p.order_id) } : {}),
+                amount: paiseToRupees(Number(p.amount)),
+                currency: String(p.currency),
+                status: String(p.status),
+                amountRefunded: paiseToRupees(Number(p.amount_refunded ?? 0)),
+                ...(p.refund_status ? { refundStatus: String(p.refund_status) } : {}),
+                ...(Number.isFinite(captured) ? { capturedAt: new Date(captured * 1000) } : {}),
+                gateway: this.name,
+            };
+        });
+    }
+    async getDispute(disputeId) {
+        return this.toDispute(await this.razorpay.disputes.fetch(disputeId));
+    }
+    async listDisputes() {
+        const result = await this.razorpay.disputes.all();
+        return (result.items ?? []).map((d) => this.toDispute(d));
+    }
+    /**
+     * Accept liability — irreversible.
+     *
+     * `confirmIrrevocable` is required by the contract and is not read here, and
+     * that is the point: its job is to make the CALLER state intent at the call
+     * site. A runtime check would be theatre, since the type already makes
+     * `false` uncompilable.
+     */
+    async acceptDispute(disputeId, _confirmIrrevocable) {
+        return this.toDispute(await this.razorpay.disputes.accept(disputeId));
+    }
 }

package/dist/providers/shipping-shiprocket/index.d.ts

@@ -99,6 +99,24 @@ export declare class ShiprocketShippingProvider extends IShippingProvider {
     private call;
     /** Their order payload wants the address flattened across many keys. */
     private addressFields;
+    /**
+     * 🛑 WIRING A CALLER FOR THIS OWES ONE EXTRA WRITE: set
+     * `order.platformBookedShipment = true` in the same commit.
+     *
+     * That flag is the gate `isReimbursableShipment()`
+     * (`_internal/shared/shipping/quote.ts`) uses to decide whether a seller may
+     * be reimbursed for postage. It FAILS OPEN — absent means "the seller shipped
+     * it themselves", which is correct and deliberate, because a self-shipped
+     * parcel has no flag to set and a fail-closed gate would refuse every
+     * legitimate claim.
+     *
+     * Measured 2026-10-21: this method has **no callers**, and the flag has
+     * **no writers**. Those two facts cancel out — there are no platform-booked
+     * parcels, so nothing is wrongly reimbursed. Wire this without the flag and
+     * they stop cancelling out: the platform pays the courier here, then
+     * reimburses the seller for that same spend on approval. Postage paid twice,
+     * silently, because the gate has no way to know we booked it.
+     */
     createShipment(data: CreateShipmentInput): Promise<Shipment>;
     trackShipment(trackingId: string): Promise<TrackingInfo>;
     cancelShipment(shipmentId: string): Promise<void>;

package/dist/providers/shipping-shiprocket/index.js

@@ -249,6 +249,24 @@ export class ShiprocketShippingProvider extends IShippingProvider {
             [`${p}_phone`]: a.phone,
         };
     }
+    /**
+     * 🛑 WIRING A CALLER FOR THIS OWES ONE EXTRA WRITE: set
+     * `order.platformBookedShipment = true` in the same commit.
+     *
+     * That flag is the gate `isReimbursableShipment()`
+     * (`_internal/shared/shipping/quote.ts`) uses to decide whether a seller may
+     * be reimbursed for postage. It FAILS OPEN — absent means "the seller shipped
+     * it themselves", which is correct and deliberate, because a self-shipped
+     * parcel has no flag to set and a fail-closed gate would refuse every
+     * legitimate claim.
+     *
+     * Measured 2026-10-21: this method has **no callers**, and the flag has
+     * **no writers**. Those two facts cancel out — there are no platform-booked
+     * parcels, so nothing is wrongly reimbursed. Wire this without the flag and
+     * they stop cancelling out: the platform pays the courier here, then
+     * reimburses the seller for that same spend on approval. Postage paid twice,
+     * silently, because the gate has no way to know we booked it.
+     */
     async createShipment(data) {
         const body = {
             order_id: data.orderId,

package/dist/schemas/registry.d.ts

@@ -2122,11 +2122,11 @@ export declare const SCHEMAS: {
                 minAmount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 discountValue: import("zod").ZodNumber;
             }, "strip", import("zod").ZodTypeAny, {
-                discountValue: number;
                 minAmount: number;
-            }, {
                 discountValue: number;
+            }, {
                 minAmount: number;
+                discountValue: number;
             }>, "many">>;
             usage: import("zod").ZodObject<{
                 totalLimit: import("zod").ZodOptional<import("zod").ZodNumber>;
@@ -2265,8 +2265,8 @@ export declare const SCHEMAS: {
                 applicableCategories?: string[] | undefined;
             } | undefined;
             tiers?: {
-                discountValue: number;
                 minAmount: number;
+                discountValue: number;
             }[] | undefined;
         }, {
             code: string;
@@ -2323,8 +2323,8 @@ export declare const SCHEMAS: {
                 applicableCategories?: string[] | undefined;
             } | undefined;
             tiers?: {
-                discountValue: number;
                 minAmount: number;
+                discountValue: number;
             }[] | undefined;
         }>;
         readonly couponUsage: import("zod").ZodObject<{
@@ -2871,6 +2871,7 @@ export declare const SCHEMAS: {
                 amount: import("zod").ZodEffects<import("zod").ZodNumber, number, number>;
                 itemIds: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
                 reason: import("zod").ZodString;
+                reasonCode: import("zod").ZodOptional<import("zod").ZodString>;
                 refundedAt: import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{
@@ -2879,7 +2880,12 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">>]>;
                 refundedBy: import("zod").ZodString;
+                status: import("zod").ZodOptional<import("zod").ZodEnum<["reserved", "processed", "failed"]>>;
+                failureReason: import("zod").ZodOptional<import("zod").ZodString>;
+                gatewayRefundId: import("zod").ZodOptional<import("zod").ZodString>;
+                gateway: import("zod").ZodOptional<import("zod").ZodString>;
                 phonepeRefundId: import("zod").ZodOptional<import("zod").ZodString>;
+                razorpayRefundId: import("zod").ZodOptional<import("zod").ZodString>;
                 manualTransactionId: import("zod").ZodOptional<import("zod").ZodString>;
                 proofDocumentUrl: import("zod").ZodOptional<import("zod").ZodString>;
                 proofDocumentMimeType: import("zod").ZodOptional<import("zod").ZodString>;
@@ -2893,8 +2899,14 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
+                status?: "failed" | "processed" | "reserved" | undefined;
+                failureReason?: string | undefined;
+                gateway?: string | undefined;
                 itemIds?: string[] | undefined;
+                reasonCode?: string | undefined;
+                gatewayRefundId?: string | undefined;
                 phonepeRefundId?: string | undefined;
+                razorpayRefundId?: string | undefined;
                 manualTransactionId?: string | undefined;
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
@@ -2908,8 +2920,14 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
+                status?: "failed" | "processed" | "reserved" | undefined;
+                failureReason?: string | undefined;
+                gateway?: string | undefined;
                 itemIds?: string[] | undefined;
+                reasonCode?: string | undefined;
+                gatewayRefundId?: string | undefined;
                 phonepeRefundId?: string | undefined;
+                razorpayRefundId?: string | undefined;
                 manualTransactionId?: string | undefined;
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
@@ -3083,8 +3101,14 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
+                status?: "failed" | "processed" | "reserved" | undefined;
+                failureReason?: string | undefined;
+                gateway?: string | undefined;
                 itemIds?: string[] | undefined;
+                reasonCode?: string | undefined;
+                gatewayRefundId?: string | undefined;
                 phonepeRefundId?: string | undefined;
+                razorpayRefundId?: string | undefined;
                 manualTransactionId?: string | undefined;
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
@@ -3231,8 +3255,14 @@ export declare const SCHEMAS: {
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
+                status?: "failed" | "processed" | "reserved" | undefined;
+                failureReason?: string | undefined;
+                gateway?: string | undefined;
                 itemIds?: string[] | undefined;
+                reasonCode?: string | undefined;
+                gatewayRefundId?: string | undefined;
                 phonepeRefundId?: string | undefined;
+                razorpayRefundId?: string | undefined;
                 manualTransactionId?: string | undefined;
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
@@ -4593,6 +4623,7 @@ export declare const SCHEMAS: {
             seoTitle: import("zod").ZodOptional<import("zod").ZodString>;
             seoDescription: import("zod").ZodOptional<import("zod").ZodString>;
             barcodeId: import("zod").ZodOptional<import("zod").ZodString>;
+            sku: import("zod").ZodOptional<import("zod").ZodString>;
             startingBid: import("zod").ZodOptional<import("zod").ZodNumber>;
             reservePrice: import("zod").ZodOptional<import("zod").ZodNumber>;
             buyNowPrice: import("zod").ZodOptional<import("zod").ZodNumber>;
@@ -4683,6 +4714,7 @@ export declare const SCHEMAS: {
             seoTitle: import("zod").ZodOptional<import("zod").ZodString>;
             seoDescription: import("zod").ZodOptional<import("zod").ZodString>;
             barcodeId: import("zod").ZodOptional<import("zod").ZodString>;
+            sku: import("zod").ZodOptional<import("zod").ZodString>;
             startingBid: import("zod").ZodOptional<import("zod").ZodNumber>;
             reservePrice: import("zod").ZodOptional<import("zod").ZodNumber>;
             buyNowPrice: import("zod").ZodOptional<import("zod").ZodNumber>;
@@ -4773,6 +4805,7 @@ export declare const SCHEMAS: {
             seoTitle: import("zod").ZodOptional<import("zod").ZodString>;
             seoDescription: import("zod").ZodOptional<import("zod").ZodString>;
             barcodeId: import("zod").ZodOptional<import("zod").ZodString>;
+            sku: import("zod").ZodOptional<import("zod").ZodString>;
             startingBid: import("zod").ZodOptional<import("zod").ZodNumber>;
             reservePrice: import("zod").ZodOptional<import("zod").ZodNumber>;
             buyNowPrice: import("zod").ZodOptional<import("zod").ZodNumber>;
@@ -5282,16 +5315,16 @@ export declare const SCHEMAS: {
             status: import("zod").ZodEnum<["under-review", "actioned", "dismissed"]>;
             resolution: import("zod").ZodOptional<import("zod").ZodString>;
         }, "strict", import("zod").ZodTypeAny, {
-            status: "dismissed" | "under-review" | "actioned";
+            status: "under-review" | "actioned" | "dismissed";
             resolution?: string | undefined;
         }, {
-            status: "dismissed" | "under-review" | "actioned";
+            status: "under-review" | "actioned" | "dismissed";
             resolution?: string | undefined;
         }>, {
-            status: "dismissed" | "under-review" | "actioned";
+            status: "under-review" | "actioned" | "dismissed";
             resolution?: string | undefined;
         }, {
-            status: "dismissed" | "under-review" | "actioned";
+            status: "under-review" | "actioned" | "dismissed";
             resolution?: string | undefined;
         }>;
         readonly reportCreate: import("zod").ZodObject<{
@@ -6044,7 +6077,7 @@ export declare const SCHEMAS: {
             phones: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
             upiIds: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
             emails: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
-            scamType: import("zod").ZodString;
+            scamType: import("zod").ZodEffects<import("zod").ZodString, import("..").ScamType, string>;
             scamPlatform: import("zod").ZodString;
             amountLost: import("zod").ZodOptional<import("zod").ZodNumber>;
             itemInvolved: import("zod").ZodOptional<import("zod").ZodString>;
@@ -6054,7 +6087,7 @@ export declare const SCHEMAS: {
         }, "strip", import("zod").ZodTypeAny, {
             displayName: string;
             description: string;
-            scamType: string;
+            scamType: import("..").ScamType;
             scamPlatform: string;
             agreed: true;
             reportedByAnon?: boolean | undefined;
@@ -6078,7 +6111,7 @@ export declare const SCHEMAS: {
         }>, {
             displayName: string;
             description: string;
-            scamType: string;
+            scamType: import("..").ScamType;
             scamPlatform: string;
             agreed: true;
             reportedByAnon?: boolean | undefined;

package/dist/server-entry.d.ts

@@ -69,6 +69,8 @@ export { getCategoryForDetail, listRootCategories, listFeaturedCategories, listM
 export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, buildGroupedListingMetadata, renderGroupedListingOg, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, type GroupedListingMetadataOptions, } from "./_internal/server/features/grouped/index";
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CreateCheckoutOrderInput, type VerifyAndPlaceGatewayOrderInput, type CheckoutOrderResult, type CheckoutPaymentMethod, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./_internal/server/features/checkout/index";
 export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
+export { computeGroupCouponDiscount, computeCartCouponDiscount, type GroupCouponDiscountResult, } from "./_internal/shared/checkout/coupon-discount";
+export { refundCapacity, refundableBase, committedRefundTotal, platformFeeWithheld, wouldBeFullRefund, MONEY_EPSILON, type RefundCapacity, type RefundableOrderLike, } from "./_internal/shared/checkout/refundable-base";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";
 export { getSublistingCategoryForDetail } from "./_internal/server/features/sublisting-categories/index";
 export { getStoreForDetail, listStoreProductsInitial, listStoreAuctionsInitial, listStorePreOrdersInitial, listSitemapStores, STORES_PAGE_SIZE, STORES_PRODUCTS_PAGE_SIZE, STORES_SITEMAP_LIMIT, STORES_FEATURED_LIMIT, } from "./_internal/server/features/stores/index";

package/dist/server-entry.js

@@ -107,6 +107,33 @@ export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOr
 // order recorded none — with the verify-side mismatch guard omitting it too, so
 // the three were consistently wrong and the undercharge was undetectable.
 export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math.js";
+/*
+ * The coupon discount, exported for the SAME reason `sumGroupGst` above was —
+ * and it is the third defect of that exact shape in this one route.
+ *
+ * `/api/payment/create-order` decides what the gateway CAPTURES, and it had no
+ * coupon term anywhere in the file (measured: zero occurrences). So a buyer
+ * with a coupon was shown ₹X−discount, charged ₹X, and had ₹X−discount
+ * recorded against their order. The post-capture guard is one-sided
+ * (`paid < expected − 1`), so an OVER-capture never trips it — which is why
+ * this survived: every number inside our own system agreed, and only the
+ * buyer's card statement disagreed.
+ *
+ * Pure math, no Firestore, no server-only imports — same contract as the
+ * order-math block above.
+ */
+export { computeGroupCouponDiscount, computeCartCouponDiscount, } from "./_internal/shared/checkout/coupon-discount.js";
+/*
+ * Refund capacity. Exported because the admin refund ROUTE carried its own
+ * copy of the `amount >= totalPrice` test (D3) — a second answer to "is this
+ * refund full", already wrong, in a file that cannot deep-import
+ * `_internal/shared`. One implementation, or they drift again.
+ *
+ * `platformFeeWithheld` is the single worst money defect's fix (D32): it
+ * returns the fee ACTUALLY CHARGED, never a recomputed percentage, which is
+ * how a ₹5,000 order came to withhold ₹118 from a buyer who paid ₹11.80.
+ */
+export { refundCapacity, refundableBase, committedRefundTotal, platformFeeWithheld, wouldBeFullRefund, MONEY_EPSILON, } from "./_internal/shared/checkout/refundable-base.js";
 // S-SBUNI-RULES: refund action
 export { processRefundAction, } from "./_internal/server/features/refunds/actions.js";
 // S3: sublisting categories data layer

package/dist/server.d.ts

@@ -19,6 +19,26 @@ export type { DegradedReadReport } from "./errors/safe-read";
 export { ServerErrorsRepository, serverErrorsRepository, } from "./features/server-errors/repository/server-errors.repository";
 export { SERVER_ERRORS_COLLECTION, SERVER_ERROR_FIELDS, SERVER_ERROR_STACK_MAX_BYTES, SERVER_ERROR_RETENTION_DAYS, } from "./features/server-errors/schemas/firestore";
 export type { ServerErrorDocument, ServerErrorSource, } from "./features/server-errors/schemas/firestore";
+export { GatewayEventsRepository, gatewayEventsRepository, } from "./features/gateway-events/repository/gateway-events.repository";
+export type { GatewayEventClaimInput, GatewayEventClaimResult, GatewayEventSettleInput, } from "./features/gateway-events/repository/gateway-events.repository";
+export { GATEWAY_EVENTS_COLLECTION, GATEWAY_EVENT_FIELDS, GATEWAY_EVENT_RETENTION_DAYS, GATEWAY_EVENT_LEASE_SECONDS, GATEWAY_EVENT_MAX_ATTEMPTS, GATEWAY_EVENT_PAYLOAD_MAX_BYTES, GATEWAY_EVENT_ERROR_MAX_BYTES, createGatewayEventId, } from "./features/gateway-events/schemas/firestore";
+export type { GatewayEventDocument, GatewayEventKind, GatewayEventStatus, } from "./features/gateway-events/schemas/firestore";
+export { ingestGatewayEvent, settleGatewayEvent, statusForDispatch, resolveDuplicateDelivery, redactGatewayPayload, } from "./_internal/server/features/gateway-events";
+export type { IngestGatewayEventInput, SettleGatewayEventInput, DuplicateAction, DuplicateResolution, } from "./_internal/server/features/gateway-events";
+export { PaymentCasesRepository, paymentCasesRepository, } from "./features/payment-cases/repository/payment-cases.repository";
+export type { OpenCaseInput, OpenCaseResult, ResolveCaseInput, } from "./features/payment-cases/repository/payment-cases.repository";
+export { PAYMENT_CASES_COLLECTION, PAYMENT_CASE_FIELDS, PAYMENT_CASE_KINDS, PAYMENT_CASE_STATUSES, PAYMENT_CASE_ACTIVE_STATUSES, PAYMENT_CASE_SEVERITY_RANK, PAYMENT_CASE_RESOLUTION_MIN, createPaymentCaseId, } from "./features/payment-cases/schemas/firestore";
+export type { PaymentCaseDocument, PaymentCaseKind, PaymentCaseStatus, PaymentCaseSeverity, } from "./features/payment-cases/schemas/firestore";
+export { ingestDispute, reconcileDisputes, DISPUTE_EVENT_PREFIX, } from "./_internal/server/features/payment-cases";
+export type { DisputeWebhookEntity } from "./_internal/server/features/payment-cases";
+export { ObligationsRepository, obligationsRepository, } from "./features/obligations/repository/obligations.repository";
+export type { OpenObligationInput, CloseObligationInput, } from "./features/obligations/repository/obligations.repository";
+export { ProtectionClaimsRepository, protectionClaimsRepository, } from "./features/protection-claims/repository/protection-claims.repository";
+export type { FileClaimInput } from "./features/protection-claims/repository/protection-claims.repository";
+export { PROTECTION_CLAIMS_COLLECTION, PROTECTION_CLAIM_FIELDS, PROTECTION_CLAIM_ACTIVE_STATUSES, PROTECTION_CLAIM_DETAIL_MIN, PROTECTION_CLAIM_DETAIL_MAX, ALL_PROTECTION_CLAIM_STATUSES, ALL_PROTECTION_CLAIM_REASONS, REASON_TO_KIND, createProtectionClaimId, } from "./features/protection-claims/schemas/firestore";
+export type { ProtectionClaimDocument, ProtectionClaimStatus, ProtectionClaimReason, } from "./features/protection-claims/schemas/firestore";
+export { fileProtectionClaimAction, adjudicateProtectionClaimAction, getMyProtectionClaimsAction, canClaimProtection, } from "./_internal/server/features/protection-claims";
+export type { FileProtectionClaimInput } from "./_internal/server/features/protection-claims";
 export { wrapAction, isOk, unwrap, } from "./_internal/shared/types/action-result";
 export type { ActionResult } from "./_internal/shared/types/action-result";
 export { setActionErrorReporter, hasActionErrorReporter, } from "./_internal/shared/types/action-error-reporter";
@@ -192,6 +212,23 @@ export { updateCategory } from "./features/categories/server";
 export { sendCheckoutValueOtp, verifyCheckoutValueOtp, isCheckoutValueOtpVerified, } from "./features/checkout/server";
 export { FailedCheckoutRepository, failedCheckoutRepository } from "./features/checkout/server";
 export { reconcileOrderShipping } from "./_internal/server/features/shipping/reconcile";
+export { submitShippingEvidence, approveShippingReimbursement, } from "./_internal/server/features/shipping/reimbursement";
+export type { SubmitShippingEvidenceInput, ApproveShippingReimbursementInput, } from "./_internal/server/features/shipping/reimbursement";
+export { cancelOrderWithRefund } from "./_internal/server/features/orders/cancellation-refund";
+export type { CancelWithRefundOptions, CancelWithRefundResult, } from "./_internal/server/features/orders/cancellation-refund";
+/**
+ * `admin_adjustment`'s first human writer (D48).
+ *
+ * Public for the same reason `cancelOrderWithRefund` above is: the consumer
+ * owns `POST /api/admin/points`, and **there is no `./_internal/*` subpath**, so
+ * a consumer route cannot reach it any other way.
+ *
+ * 🛑 Export the ACTION, not the repository's `append`. `append` would let a
+ * route write any kind with any actor; this function fixes the kind, applies
+ * the credit-only expiry, writes the `adminAuditLog` row and notifies the
+ * buyer. A route reaching past it would silently skip three of those.
+ */
+export { adjustUserPoints } from "./_internal/server/features/points/adjust";
 export { pointsRepository, PointsRepository } from "./features/points/repository/points.repository";
 export type { FailedCheckoutMeta, FailedPaymentMeta } from "./features/checkout/server";
 export { EmailButton, EmailColumn, EmailContainer, EmailDivider, EmailDoc, EmailFooter, EmailHeader, EmailImage, EmailLink, EmailRow, } from "./features/email";
@@ -534,6 +571,7 @@ export type { ActionIndexValidationContext, ActionIndexValidationIssue, } from "
 export { ActionIndexRepository, actionIndexRepository, } from "./features/search/action-index/repository";
 export type { ActionIndexDocument } from "./features/search/action-index/repository";
 export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy";
+export { wouldBeFullRefund } from "./_internal/shared/checkout/refundable-base";
 export { RETURN_REASON, FINAL_SALE_EXEMPT_REASONS, RETURN_REASON_LABEL, RETURN_REASON_GROUP_LABEL, isFinalSaleExempt, isReturnReason, selectableReturnReasons, } from "./_internal/shared/features/orders/return-reasons";
 export type { ReturnReason } from "./_internal/shared/features/orders/return-reasons";
 export { draftToProductInput, productToDraft, } from "./features/seller/utils/product-draft-mapping";
@@ -562,3 +600,8 @@ export { configurePlatformSupplier, getPlatformSupplier, resetPlatformSupplier,
 export type { PlatformSupplierIdentity } from "./_internal/shared/features/site-settings/supplier-of-record";
 export { ShiprocketShippingProvider } from "./providers/shipping-shiprocket/index";
 export type { ShiprocketConfig } from "./providers/shipping-shiprocket/index";
+export { fileGrievanceAction, recordGrievanceFirstResponseAction, } from "./_internal/server/features/grievance";
+export type { FileGrievanceInput } from "./_internal/server/features/grievance";
+export { GRIEVANCE_PERIODS } from "./features/support/schemas/firestore";
+export { getRateableItemsAction, rateOrderItemAction, markOrderCompleteAction, } from "./_internal/server/features/order-completion";
+export type { RateableOrderItem, RateOrderItemInput, } from "./_internal/server/features/order-completion";

package/dist/server.js

@@ -51,6 +51,44 @@ export { safeRead, installDegradedReadReporter, } from "./errors/safe-read.js";
 // Used by routeHandler, wrapJobHandler (workstream 14), and the safeRead reporter.
 export { ServerErrorsRepository, serverErrorsRepository, } from "./features/server-errors/repository/server-errors.repository.js";
 export { SERVER_ERRORS_COLLECTION, SERVER_ERROR_FIELDS, SERVER_ERROR_STACK_MAX_BYTES, SERVER_ERROR_RETENTION_DAYS, } from "./features/server-errors/schemas/firestore.js";
+/*
+ * [SERVER-ONLY] gatewayEvents — the durable inbox for payment-gateway webhooks.
+ *
+ * Exported from `server.ts` ONLY, never `index.ts`. The repository's import
+ * chain reaches `firebase-admin` through `providers/db-firebase`, and a symbol
+ * reachable from the main barrel drags that into the CLIENT bundle — which
+ * fails the Turbopack production build on every page (Root Cause #6/#24), since
+ * `firebase-admin/app` is a static top-level import.
+ */
+export { GatewayEventsRepository, gatewayEventsRepository, } from "./features/gateway-events/repository/gateway-events.repository.js";
+export { GATEWAY_EVENTS_COLLECTION, GATEWAY_EVENT_FIELDS, GATEWAY_EVENT_RETENTION_DAYS, GATEWAY_EVENT_LEASE_SECONDS, GATEWAY_EVENT_MAX_ATTEMPTS, GATEWAY_EVENT_PAYLOAD_MAX_BYTES, GATEWAY_EVENT_ERROR_MAX_BYTES, createGatewayEventId, } from "./features/gateway-events/schemas/firestore.js";
+export { ingestGatewayEvent, settleGatewayEvent, statusForDispatch, resolveDuplicateDelivery, redactGatewayPayload, } from "./_internal/server/features/gateway-events/index.js";
+/*
+ * [SERVER-ONLY] paymentCases — the one operator queue for money at risk.
+ *
+ * Same reason as gatewayEvents above: the repository's chain reaches
+ * `firebase-admin`, so this must never appear in `index.ts`.
+ */
+export { PaymentCasesRepository, paymentCasesRepository, } from "./features/payment-cases/repository/payment-cases.repository.js";
+export { PAYMENT_CASES_COLLECTION, PAYMENT_CASE_FIELDS, PAYMENT_CASE_KINDS, PAYMENT_CASE_STATUSES, PAYMENT_CASE_ACTIVE_STATUSES, PAYMENT_CASE_SEVERITY_RANK, PAYMENT_CASE_RESOLUTION_MIN, createPaymentCaseId, } from "./features/payment-cases/schemas/firestore.js";
+export { ingestDispute, reconcileDisputes, DISPUTE_EVENT_PREFIX, } from "./_internal/server/features/payment-cases/index.js";
+/*
+ * [SERVER-ONLY] obligations — deadlines with money consequences.
+ *
+ * The REPOSITORY is server-only (its chain reaches firebase-admin). The pure
+ * `deadlinesFor` / `resolveDueAt` helpers and the policy registry go in the
+ * MAIN barrel instead, because a buyer page rendering "Dispatch by Thu 3 Nov"
+ * is exactly the point of them being pure — see `index.ts`.
+ */
+export { ObligationsRepository, obligationsRepository, } from "./features/obligations/repository/obligations.repository.js";
+/*
+ * [SERVER-ONLY] protectionClaims — Phase 6. The first callers
+ * `adjudicateClaim()` and `protectionAvailability()` have ever had: we charge
+ * 2% / 3% for cover whose entire decision layer sat uncalled (D11).
+ */
+export { ProtectionClaimsRepository, protectionClaimsRepository, } from "./features/protection-claims/repository/protection-claims.repository.js";
+export { PROTECTION_CLAIMS_COLLECTION, PROTECTION_CLAIM_FIELDS, PROTECTION_CLAIM_ACTIVE_STATUSES, PROTECTION_CLAIM_DETAIL_MIN, PROTECTION_CLAIM_DETAIL_MAX, ALL_PROTECTION_CLAIM_STATUSES, ALL_PROTECTION_CLAIM_REASONS, REASON_TO_KIND, createProtectionClaimId, } from "./features/protection-claims/schemas/firestore.js";
+export { fileProtectionClaimAction, adjudicateProtectionClaimAction, getMyProtectionClaimsAction, canClaimProtection, } from "./_internal/server/features/protection-claims/index.js";
 // [SERVER-ONLY] ActionResult envelope + wrapAction helper for "use server" functions.
 // Mirrors the routeHandler envelope so client wrappers consume both surfaces uniformly.
 export { wrapAction, isOk, unwrap, } from "./_internal/shared/types/action-result.js";
@@ -687,6 +725,36 @@ export { FailedCheckoutRepository, failedCheckoutRepository } from "./features/c
  * place a parcel is marked shipped.
  */
 export { reconcileOrderShipping } from "./_internal/server/features/shipping/reconcile.js";
+/*
+ * D45's self-shipped half. Server entry only: it writes an order, appends to
+ * the points ledger, and `approveShippingReimbursement` throws on a `"system"`
+ * approver — none of which belongs anywhere a client bundle can reach.
+ */
+export { submitShippingEvidence, approveShippingReimbursement, } from "./_internal/server/features/shipping/reimbursement.js";
+/*
+ * Cancel an order and settle the refund it owes (D14). SERVER ENTRY ONLY, for
+ * the same reason as its neighbour above: it calls the payment provider and
+ * writes to `orders` and `paymentCases`.
+ *
+ * Public because the consumer owns the seller/admin order PATCH route, which is
+ * the one cancel path that can reach a DISPATCHED order — the two buyer paths
+ * refuse that case before it gets here. There is no `./_internal/*` subpath, so
+ * a consumer route cannot reach it any other way.
+ */
+export { cancelOrderWithRefund } from "./_internal/server/features/orders/cancellation-refund.js";
+/**
+ * `admin_adjustment`'s first human writer (D48).
+ *
+ * Public for the same reason `cancelOrderWithRefund` above is: the consumer
+ * owns `POST /api/admin/points`, and **there is no `./_internal/*` subpath**, so
+ * a consumer route cannot reach it any other way.
+ *
+ * 🛑 Export the ACTION, not the repository's `append`. `append` would let a
+ * route write any kind with any actor; this function fixes the kind, applies
+ * the credit-only expiry, writes the `adminAuditLog` row and notifies the
+ * buyer. A route reaching past it would silently skip three of those.
+ */
+export { adjustUserPoints } from "./_internal/server/features/points/adjust.js";
 export { pointsRepository, PointsRepository } from "./features/points/repository/points.repository.js";
 // [SERVER-ONLY] Email primitives — table-based, inline-styled components
 // that render email-client-compatible HTML via renderToStaticMarkup. Use
@@ -1460,6 +1528,11 @@ export { SUBDIVISIONS, subdivisionsFor } from "./constants/geo/subdivisions.js";
 export { validateActionIndexEntry, normaliseRoute, } from "./features/search/action-index/validate-entry.js";
 export { ActionIndexRepository, actionIndexRepository, } from "./features/search/action-index/repository.js";
 export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy.js";
+/*
+ * `wouldBeFullRefund` — from refundable-base, NOT return-reasons. It was
+ * never exported at all, so the admin refund route could not import it.
+ */
+export { wouldBeFullRefund } from "./_internal/shared/checkout/refundable-base.js";
 // Return / refund reasons — the closed enum the final-sale gate branches on.
 // See the module docstring for why the exempt set is "seller or carrier fault"
 // rather than "serious reasons".
@@ -1538,3 +1611,28 @@ export { configurePlatformSupplier, getPlatformSupplier, resetPlatformSupplier,
 // credentials are empty — so it parses every response through Zod and refuses
 // at construction when unconfigured. See the module header.
 export { ShiprocketShippingProvider } from "./providers/shipping-shiprocket/index.js";
+/*
+ * [SERVER-ONLY] grievance — Phase 10 intake and clock.
+ *
+ * 🛑 Intake and clock ONLY. Nothing is published: the Consumer Protection
+ * (E-Commerce) Rules 2020 require a NAMED grievance officer and statutory
+ * periods, and this project publishes the business name with designation
+ * "Support" on the same generic support address (D17). The periods here are
+ * internal defaults chosen SHORTER than any plausible statutory period, so the
+ * clock fires early — a deadline we beat is harmless, one we miss is the thing
+ * the regime punishes. The public page stays untouched until the owner supplies
+ * the officer and the real numbers.
+ */
+export { fileGrievanceAction, recordGrievanceFirstResponseAction, } from "./_internal/server/features/grievance/index.js";
+export { GRIEVANCE_PERIODS } from "./features/support/schemas/firestore.js";
+/*
+ * [SERVER-ONLY] order-completion — per-item ratings and the fast completion
+ * path (owner's rule, 2026-10-21).
+ *
+ * Completion has two writers: `obligationSweep`'s `order-complete` at 7 days,
+ * and the buyer marking it complete after rating at least one item. The second
+ * is the "immediate disburse" path — and it needs no extra mechanism, because
+ * `payout-release` is already blocked on `order-complete`, so closing that
+ * obligation early opens the payout gate early as a consequence.
+ */
+export { getRateableItemsAction, rateOrderItemAction, markOrderCompleteAction, } from "./_internal/server/features/order-completion/index.js";