@mohasinac/appkit 4.60.0 → 4.61.0

package/dist/.build-stamp.json

@@ -1,8 +1,8 @@
 {
   "stampVersion": 1,
-  "version": "4.60.0",
-  "head": "75dbddb0be908315382e2df74f6f9540c469a77d",
+  "version": "4.61.0",
+  "head": "7fd2f6fe0a6d6314241671329d51d11d008fca95",
   "branch": "main",
   "dirty": false,
-  "builtAt": "2026-10-21T23:51:33.351Z"
+  "builtAt": "2026-10-22T08:29:07.009Z"
 }

package/dist/_internal/server/features/auctions/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function placeBidAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/auctions/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { safeRead } from "../../../../errors/safe-read.js";
 import { bidRepository, productRepository, userRepository, siteSettingsRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";

package/dist/_internal/server/features/blog/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createBlogPostAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateBlogPostAction(postId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function deleteBlogPostAction(postId: string): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/blog/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { blogRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { blogPostInputSchema, blogPostUpdateSchema } from "../../../shared/features/blog/schema.js";

package/dist/_internal/server/features/brands/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createBrandAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateBrandAction(brandId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function deleteBrandAction(brandId: string): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/brands/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { categoriesRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { brandInputSchema, brandUpdateSchema } from "../../../shared/features/brands/schema.js";

package/dist/_internal/server/features/cart/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function addToCartAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function removeFromCartAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function clearCartAction(): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/cart/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { cartRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { addToCartSchema, removeFromCartSchema, mergeGuestCartSchema } from "../../../shared/features/cart/schema.js";

package/dist/_internal/server/features/checkout/actions.js

@@ -1833,7 +1833,6 @@ async function refundDroppedItemsForPhonePeCheckout(input) {
             : droppedValue;
         const refundResult = await processRefundAction({
             orderId: primaryOrderId,
-            type: "partial",
             amount: refundAmount,
             /*
              * A SYSTEM refund, not a buyer claim: items the buyer paid for turned

package/dist/_internal/server/features/events/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createEventAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateEventAction(eventId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function registerForEventAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/events/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { eventRepository, eventEntryRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { eventInputSchema, eventUpdateSchema, registerForEventSchema } from "../../../shared/features/events/schema.js";

package/dist/_internal/server/features/gateway-events/redact.js

@@ -37,6 +37,7 @@
  * `card` key without anyone having written that path down.
  */
 import { GATEWAY_EVENT_PAYLOAD_MAX_BYTES } from "../../../../features/gateway-events/schemas/firestore.js";
+import { normalizeError } from "../../../../errors/normalize.js";
 /**
  * Keys dropped wherever they appear, at any depth.
  *
@@ -130,13 +131,24 @@ export function redactGatewayPayload(body) {
     try {
         serialisedLength = JSON.stringify(redacted)?.length ?? 0;
     }
-    catch {
+    catch (err) {
         /*
          * A circular structure cannot come from `JSON.parse`, which is the only
          * producer here — but this function is exported and a future caller could
          * hand it something else. Failing to a marker keeps the row writable.
+         *
+         * 🛑 The reason is CARRIED, not discarded. This was a bare `catch {}`, so
+         * the one case the comment above exists to anticipate — a future caller
+         * handing it something `JSON.stringify` cannot take — produced a row
+         * saying only `redactionFailed: true`, with nothing anywhere to say why.
+         * The row is a debugging record; a marker that cannot explain itself is
+         * the silent-degrade shape this codebase keeps paying for.
          */
-        return { payload: { redactionFailed: true }, truncated: true };
+        const n = normalizeError(err);
+        return {
+            payload: { redactionFailed: true, reason: n.message },
+            truncated: true,
+        };
     }
     if (serialisedLength > GATEWAY_EVENT_PAYLOAD_MAX_BYTES) {
         return {

package/dist/_internal/server/features/history/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import { type UserHistoryItem, type HistoryProductType } from "../../../../repositories";
 export declare function trackProductViewAction(productId: string, productType: HistoryProductType, productSnapshot?: UserHistoryItem["productSnapshot"]): Promise<ActionResult<unknown>>;
 export declare function mergeGuestHistoryAction(guestItems: Array<{

package/dist/_internal/server/features/history/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { historyRepository, } from "../../../../repositories/index.js";
 export async function trackProductViewAction(productId, productType, productSnapshot) {

package/dist/_internal/server/features/lottery/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import type { LotteryConfig } from "../../../../features/lottery/types";
 import type { LotteryEntryDocument } from "../../../../features/lottery/schemas/firestore";
 /**

package/dist/_internal/server/features/lottery/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { getAdminDb } from "../../../../providers/db-firebase/index.js";
 import { eventRepository, productRepository, orderRepository } from "../../../../repositories/index.js";
 import { serverLogger } from "../../../../monitoring/index.js";

package/dist/_internal/server/features/orders/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createOrderAction(input: unknown): Promise<ActionResult<unknown>>;
 /**
  * Cancel an order, and give the money back if any was taken (D14).

package/dist/_internal/server/features/orders/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { adminNotificationsRepository, orderRepository, storeRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { createOrderSchema, updateOrderStatusSchema, cancelOrderSchema, returnRequestSchema, } from "../../../shared/features/orders/schema.js";

package/dist/_internal/server/features/orders/adapters.d.ts

@@ -1,3 +1,21 @@
 import type { Order } from "../../../../features/orders/types";
-import type { OrderDocument } from "../../../../features/orders/schemas/firestore";
-export declare function orderDocumentToOrder(doc: OrderDocument): Order;
+import type { OrderPlain } from "../../../../features/orders/schemas/firestore";
+/**
+ * 🛑 `OrderPlain`, not `OrderDocument` — this builds the BUYER-FACING shape.
+ *
+ * `orderRepository.findById` is ciphertext-by-default, so a signature taking
+ * the raw document would invite a caller to hand over `enc:v1:` strings and
+ * have them copied straight into an API response. The one caller
+ * (`GET /api/user/orders/[id]`) already holds a revealed order; this makes the
+ * signature say so.
+ *
+ * It does not currently read any of `ORDER_PII_FIELDS` (`userName`,
+ * `userEmail`, `sellerEmail`), so nothing is leaking today — the point is that
+ * adding one of them later is correct by default rather than a new leak.
+ *
+ * Accepted residue, stated rather than hidden: `Encrypted<string>` is
+ * assignable to `string`, so a raw document still satisfies this structurally.
+ * The brand forces the choice at the REPOSITORY boundary, which is where it
+ * can actually be enforced; this parameter documents the expectation.
+ */
+export declare function orderDocumentToOrder(doc: OrderPlain): Order;

package/dist/_internal/server/features/orders/adapters.js

@@ -37,6 +37,24 @@ function toIsoOrUndefined(value) {
     }
     return undefined;
 }
+/**
+ * 🛑 `OrderPlain`, not `OrderDocument` — this builds the BUYER-FACING shape.
+ *
+ * `orderRepository.findById` is ciphertext-by-default, so a signature taking
+ * the raw document would invite a caller to hand over `enc:v1:` strings and
+ * have them copied straight into an API response. The one caller
+ * (`GET /api/user/orders/[id]`) already holds a revealed order; this makes the
+ * signature say so.
+ *
+ * It does not currently read any of `ORDER_PII_FIELDS` (`userName`,
+ * `userEmail`, `sellerEmail`), so nothing is leaking today — the point is that
+ * adding one of them later is correct by default rather than a new leak.
+ *
+ * Accepted residue, stated rather than hidden: `Encrypted<string>` is
+ * assignable to `string`, so a raw document still satisfies this structurally.
+ * The brand forces the choice at the REPOSITORY boundary, which is where it
+ * can actually be enforced; this parameter documents the expectation.
+ */
 export function orderDocumentToOrder(doc) {
     const items = doc.items?.length
         ? doc.items.map((item) => ({

package/dist/_internal/server/features/orders/cancellation-refund.js

@@ -391,7 +391,6 @@ export async function cancelOrderWithRefund(order, opts) {
      */
     const result = await processRefundAction({
         orderId: order.id,
-        type: "full",
         amount,
         /*
          * `changed_mind` is the honest default: a cancellation before dispatch is a

package/dist/_internal/server/features/orders/service.js

@@ -1,6 +1,30 @@
 import { orderRepository } from "../../../../repositories/index.js";
 import { OrderNotFoundError, OrderCancelError, OrderOwnershipError, OrderReturnWindowError, } from "../../../shared/features/orders/errors.js";
 import { ORDER_CANCELLABLE_STATUSES, ORDER_RETURN_WINDOW_MS, } from "../../../shared/features/orders/config.js";
+/**
+ * The three shapes `updatedAt` really arrives in, resolved to a `Date`.
+ *
+ * A Firestore `Timestamp` is duck-typed on `toDate` rather than imported, so
+ * this file stays free of a firebase-admin import — the same trade
+ * `orders/adapters.ts` makes and for the same reason.
+ *
+ * Falls back to NOW rather than to an invalid date: the caller measures a
+ * return window against it, and `new Date(undefined)` is `NaN`, which makes
+ * every comparison false and would silently hold the window open forever.
+ */
+function toDateOrNow(value) {
+    if (value instanceof Date)
+        return Number.isNaN(value.getTime()) ? new Date() : value;
+    if (typeof value === "object" && value !== null && typeof value.toDate === "function") {
+        const d = value.toDate();
+        return d instanceof Date && !Number.isNaN(d.getTime()) ? d : new Date();
+    }
+    if (typeof value === "string") {
+        const d = new Date(value);
+        return Number.isNaN(d.getTime()) ? new Date() : d;
+    }
+    return new Date();
+}
 export async function assertOrderOwnership(orderId, userId) {
     const order = await orderRepository.findById(orderId);
     if (!order)
@@ -97,7 +121,13 @@ export async function assertReturnWindowOpen(orderId, userId) {
      */
     const deliveredAt = order.deliveryDate instanceof Date
         ? order.deliveryDate
-        : new Date(order.updatedAt ?? Date.now());
+        /*
+         * Typed, and the `as never` is gone with it. That cast existed only to
+         * feed an `unknown` into `new Date()` — it suppressed the one check that
+         * would have caught a wrong shape. A Firestore Timestamp is duck-typed on
+         * `toDate` rather than imported, the same way `toIsoOrUndefined` does it.
+         */
+        : toDateOrNow(order.updatedAt);
     if (Date.now() - deliveredAt.getTime() > ORDER_RETURN_WINDOW_MS)
         throw new OrderReturnWindowError();
     return order;

package/dist/_internal/server/features/payouts/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export type ApplyRefundDeductionInput = {
     storeId: string;
     orderId: string;

package/dist/_internal/server/features/payouts/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 /**
  * applyRefundDeductionAction — deduct a refund from a seller's pending payout.
  *

package/dist/_internal/server/features/points/award.js

@@ -91,7 +91,15 @@ export async function awardPurchasePoints(order) {
         return { awarded: 0, skipped: "no-buyer" };
     }
     const goods = orderTaxableValue(order);
-    const amount = roundPoints((goods * POINTS_EARN_PERCENT) / 100);
+    /*
+     * `goods * (PERCENT / 100)`, not `(goods * PERCENT) / 100` — the same value,
+     * written the way every fee in `fees/calculator.ts` is
+     * (`subtotal * (commissions.platformFeePercent / 100)`). The division
+     * belongs to the PERCENT, and grouping it that way is what distinguishes a
+     * percentage from the subunit-conversion `/100` that `audit-money-units`
+     * exists to catch — which read the old grouping as exactly that.
+     */
+    const amount = roundPoints(goods * (POINTS_EARN_PERCENT / 100));
     if (amount <= 0) {
         /*
          * A fully-cancelled or zero-value order. Marked as awarded anyway below so

package/dist/_internal/server/features/pre-orders/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function reservePreOrderAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/pre-orders/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { reservePreOrderSchema } from "../../../shared/features/pre-orders/schema.js";

package/dist/_internal/server/features/prize-draws/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function enterPrizeDrawAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/prize-draws/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { assertPrizeDrawOpen } from "./service.js";

package/dist/_internal/server/features/products/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createProductAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createAuctionAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createPreOrderAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/products/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { isAdminUser } from "../../../../features/auth/role-predicates.js";

package/dist/_internal/server/features/promotions/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function applyCouponAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createCouponAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateCouponAction(couponId: string, input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/promotions/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { couponsRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { applyCouponSchema, createCouponSchema, updateCouponSchema, } from "../../../shared/features/promotions/schema.js";

package/dist/_internal/server/features/protection-claims/actions.d.ts

@@ -66,7 +66,7 @@ export declare function adjudicateProtectionClaimAction(claimId: string, finding
 /** A buyer's own claims, for their order detail page. */
 export declare function getMyProtectionClaimsAction(): Promise<ActionResult<ProtectionClaimDocument[]>>;
 /** Whether this order can be claimed against right now, for rendering the CTA. */
-export declare function canClaimProtection(order: Parameters<typeof deadlinesFor>[0], kind: "shipping" | "sale"): Promise<{
+export declare function canClaimProtection(order: Parameters<typeof deadlinesFor>[0], kind: "shipping" | "sale"): Promise<ActionResult<{
     can: boolean;
     reason?: string;
-}>;
+}>>;

package/dist/_internal/server/features/protection-claims/actions.js

@@ -213,16 +213,25 @@ export async function getMyProtectionClaimsAction() {
 }
 /** Whether this order can be claimed against right now, for rendering the CTA. */
 export async function canClaimProtection(order, kind) {
-    const feePaid = kind === "shipping" ? order.shipmentProtectionFee : order.saleProtectionFee;
-    if (!feePaid || feePaid <= 0)
-        return { can: false, reason: "not-covered" };
-    const existing = await protectionClaimsRepository().findById(createProtectionClaimId(order.id, kind));
-    if (existing)
-        return { can: false, reason: "already-claimed" };
-    const obligationKind = kind === "shipping" ? "claim-shipping" : "claim-sale";
-    const window = deadlinesFor(order).find((d) => d.kind === obligationKind);
-    if (order.deliveryDate && window && window.dueAt.getTime() <= Date.now()) {
-        return { can: false, reason: "window-closed" };
-    }
-    return { can: true };
+    /*
+     * 🛑 Wrapped, because this file is `"use server"` — which makes EVERY export
+     * in it a client-callable RPC endpoint, read-only predicate included. So it
+     * owes the same uniform envelope as its sibling mutations: a caller cannot
+     * tell a thrown repository error from a `{can:false}` verdict otherwise, and
+     * "the claim window is closed" and "the lookup failed" are opposite answers.
+     */
+    return wrapAction(async () => {
+        const feePaid = kind === "shipping" ? order.shipmentProtectionFee : order.saleProtectionFee;
+        if (!feePaid || feePaid <= 0)
+            return { can: false, reason: "not-covered" };
+        const existing = await protectionClaimsRepository().findById(createProtectionClaimId(order.id, kind));
+        if (existing)
+            return { can: false, reason: "already-claimed" };
+        const obligationKind = kind === "shipping" ? "claim-shipping" : "claim-sale";
+        const window = deadlinesFor(order).find((d) => d.kind === obligationKind);
+        if (order.deliveryDate && window && window.dueAt.getTime() <= Date.now()) {
+            return { can: false, reason: "window-closed" };
+        }
+        return { can: true };
+    });
 }

package/dist/_internal/server/features/raffle/actions.d.ts

@@ -5,7 +5,7 @@
  * handlers also work in a Vercel lambda (10s cap honoured by raffle pool
  * size).
  */
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import { type TriggerEventRaffleInput, type TriggerEventRaffleResult } from "../../jobs/core/triggerEventRaffle";
 import { type AssignSpinPrizeInput, type AssignSpinPrizeResult } from "../../jobs/core/assignSpinPrize";
 export declare function triggerEventRaffleAction(input: TriggerEventRaffleInput): Promise<ActionResult<TriggerEventRaffleResult>>;

package/dist/_internal/server/features/raffle/actions.js

@@ -6,7 +6,18 @@
  * handlers also work in a Vercel lambda (10s cap honoured by raffle pool
  * size).
  */
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { getAdminDb } from "../../../../providers/db-firebase/admin.js";
 import { runTriggerEventRaffle, } from "../../jobs/core/triggerEventRaffle.js";
 import { runAssignSpinPrize, } from "../../jobs/core/assignSpinPrize.js";

package/dist/_internal/server/features/refunds/actions.d.ts

@@ -1,9 +1,7 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
-import type { RefundType } from "../../../../features/orders/schemas";
+import { type ActionResult } from "../../../shared/types/action-result";
 import { type ReturnReason } from "../../../shared/features/orders/return-reasons";
 export type ProcessRefundInput = {
     orderId: string;
-    type: RefundType;
     /** Decimal rupees. Must be > 0 and ≤ remaining refundable amount on the order. */
     amount: number;
     /**