@mohasinac/appkit 4.60.0 → 4.60.1

package/dist/.build-stamp.json

@@ -1,8 +1,8 @@
 {
   "stampVersion": 1,
-  "version": "4.60.0",
-  "head": "75dbddb0be908315382e2df74f6f9540c469a77d",
+  "version": "4.60.1",
+  "head": "ac867a7431db3bc6e19b100623e0be5979b1033a",
   "branch": "main",
   "dirty": false,
-  "builtAt": "2026-10-21T23:51:33.351Z"
+  "builtAt": "2026-10-22T00:08:17.154Z"
 }

package/dist/_internal/server/features/orders/adapters.d.ts

@@ -1,3 +1,21 @@
 import type { Order } from "../../../../features/orders/types";
-import type { OrderDocument } from "../../../../features/orders/schemas/firestore";
-export declare function orderDocumentToOrder(doc: OrderDocument): Order;
+import type { OrderPlain } from "../../../../features/orders/schemas/firestore";
+/**
+ * 🛑 `OrderPlain`, not `OrderDocument` — this builds the BUYER-FACING shape.
+ *
+ * `orderRepository.findById` is ciphertext-by-default, so a signature taking
+ * the raw document would invite a caller to hand over `enc:v1:` strings and
+ * have them copied straight into an API response. The one caller
+ * (`GET /api/user/orders/[id]`) already holds a revealed order; this makes the
+ * signature say so.
+ *
+ * It does not currently read any of `ORDER_PII_FIELDS` (`userName`,
+ * `userEmail`, `sellerEmail`), so nothing is leaking today — the point is that
+ * adding one of them later is correct by default rather than a new leak.
+ *
+ * Accepted residue, stated rather than hidden: `Encrypted<string>` is
+ * assignable to `string`, so a raw document still satisfies this structurally.
+ * The brand forces the choice at the REPOSITORY boundary, which is where it
+ * can actually be enforced; this parameter documents the expectation.
+ */
+export declare function orderDocumentToOrder(doc: OrderPlain): Order;

package/dist/_internal/server/features/orders/adapters.js

@@ -37,6 +37,24 @@ function toIsoOrUndefined(value) {
     }
     return undefined;
 }
+/**
+ * 🛑 `OrderPlain`, not `OrderDocument` — this builds the BUYER-FACING shape.
+ *
+ * `orderRepository.findById` is ciphertext-by-default, so a signature taking
+ * the raw document would invite a caller to hand over `enc:v1:` strings and
+ * have them copied straight into an API response. The one caller
+ * (`GET /api/user/orders/[id]`) already holds a revealed order; this makes the
+ * signature say so.
+ *
+ * It does not currently read any of `ORDER_PII_FIELDS` (`userName`,
+ * `userEmail`, `sellerEmail`), so nothing is leaking today — the point is that
+ * adding one of them later is correct by default rather than a new leak.
+ *
+ * Accepted residue, stated rather than hidden: `Encrypted<string>` is
+ * assignable to `string`, so a raw document still satisfies this structurally.
+ * The brand forces the choice at the REPOSITORY boundary, which is where it
+ * can actually be enforced; this parameter documents the expectation.
+ */
 export function orderDocumentToOrder(doc) {
     const items = doc.items?.length
         ? doc.items.map((item) => ({

package/dist/client.d.ts

@@ -31,6 +31,7 @@ export { BUILT_IN_THEMES, DEFAULT_DARK_THEME, DEFAULT_LIGHT_THEME, REQUIRED_GRAD
 export type { GradientKey, RequiredThemeToken, ThemeMode, ThemeRecord, } from "./tokens/themes";
 export { ConfirmDeleteModal } from "./ui/components/ConfirmDeleteModal";
 export { EmptyState } from "./ui/components/EmptyState";
+export { FilterChipGroup } from "./ui/components/FilterChipGroup";
 export { Skeleton } from "./ui/components/Skeleton";
 export { IconBox } from "./ui/components/IconBox";
 export type { IconBoxProps, IconBoxRounded, IconBoxSize, IconBoxTone, } from "./ui/components/IconBox";

package/dist/client.js

@@ -52,6 +52,9 @@ export { BUILT_IN_THEMES, DEFAULT_DARK_THEME, DEFAULT_LIGHT_THEME, REQUIRED_GRAD
 export { ConfirmDeleteModal } from "./ui/components/ConfirmDeleteModal.js";
 // S-STORE — pure-UI primitives + Seller view consumed by new dashboard pages
 export { EmptyState } from "./ui/components/EmptyState.js";
+/* FilterChipGroup — a client UI primitive that existed, was used by
+   `ProtectionClaimsClient`, and was never exported here. */
+export { FilterChipGroup } from "./ui/components/FilterChipGroup.js";
 export { Skeleton } from "./ui/components/Skeleton.js";
 // IconBox — square-icon container primitive; was exported from index.ts only,
 // missing here even though CLAUDE.md documents it as a client-usable pattern.

package/dist/server.d.ts

@@ -571,6 +571,7 @@ export type { ActionIndexValidationContext, ActionIndexValidationIssue, } from "
 export { ActionIndexRepository, actionIndexRepository, } from "./features/search/action-index/repository";
 export type { ActionIndexDocument } from "./features/search/action-index/repository";
 export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy";
+export { wouldBeFullRefund } from "./_internal/shared/checkout/refundable-base";
 export { RETURN_REASON, FINAL_SALE_EXEMPT_REASONS, RETURN_REASON_LABEL, RETURN_REASON_GROUP_LABEL, isFinalSaleExempt, isReturnReason, selectableReturnReasons, } from "./_internal/shared/features/orders/return-reasons";
 export type { ReturnReason } from "./_internal/shared/features/orders/return-reasons";
 export { draftToProductInput, productToDraft, } from "./features/seller/utils/product-draft-mapping";

package/dist/server.js

@@ -1528,6 +1528,11 @@ export { SUBDIVISIONS, subdivisionsFor } from "./constants/geo/subdivisions.js";
 export { validateActionIndexEntry, normaliseRoute, } from "./features/search/action-index/validate-entry.js";
 export { ActionIndexRepository, actionIndexRepository, } from "./features/search/action-index/repository.js";
 export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy.js";
+/*
+ * `wouldBeFullRefund` — from refundable-base, NOT return-reasons. It was
+ * never exported at all, so the admin refund route could not import it.
+ */
+export { wouldBeFullRefund } from "./_internal/shared/checkout/refundable-base.js";
 // Return / refund reasons — the closed enum the final-sale gate branches on.
 // See the module docstring for why the exempt set is "seller or carrier fault"
 // rather than "serious reasons".

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "4.60.0",
+  "version": "4.60.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"