@mohasinac/appkit 4.60.1 → 4.62.0

package/dist/.build-stamp.json

@@ -1,8 +1,8 @@
 {
   "stampVersion": 1,
-  "version": "4.60.1",
-  "head": "ac867a7431db3bc6e19b100623e0be5979b1033a",
+  "version": "4.62.0",
+  "head": "2ffd384e9122be6b68eba81be0eb152e5d1f6a3e",
   "branch": "main",
   "dirty": false,
-  "builtAt": "2026-10-22T00:08:17.154Z"
+  "builtAt": "2026-10-22T11:28:37.098Z"
 }

package/dist/_internal/client/features/lottery/LotteryAdminEditView.js

@@ -96,6 +96,15 @@ export function LotteryAdminEditView({ eventId, initialData, onSubmit, }) {
  * `audit-code-quality`'s DEEP_NESTING rule exists to stop.
  */
 function SlotTable({ slots, showPrice, onSlotsChange, }) {
+    /*
+     * Read the form context directly. `SlotTable` is its own component, so the
+     * `shellCtx` the parent destructures is out of scope here — but the parent
+     * mounts `FormShellContext.Provider` above this, so the errors are
+     * reachable. `useContext` rather than `useFormShell()`: this table is
+     * also usable outside a form and must not require a provider.
+     */
+    const formCtx = React.useContext(FormShellContext);
+    const slotError = (idx, field) => formCtx?.errors[`slots.${idx}.${field}`];
     /**
      * Next number is max+1, not length+1.
      *
@@ -146,19 +155,26 @@ function SlotTable({ slots, showPrice, onSlotsChange, }) {
         {
             key: "name",
             header: "Prize name",
-            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
+            /*
+             * These inputs live in DataTable COLUMN renderers, which get no
+             * `errors` argument — a section render would. They read the context
+             * this component itself mounts, with the dotted INDEXED key
+             * `applyZodIssues` produces (`slots.2.price`), so a rejected slot marks
+             * its own row rather than the first one.
+             */
+            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: `Prize for slot ${s.slotNumber}`, value: s.name, error: slotError(s._idx, "name"), onChange: (e) => updateSlot(s._idx, "name", e.target.value), "aria-label": `Slot ${s.slotNumber} prize name` })),
         },
         {
             key: "image",
             header: "Image",
-            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: "/media/\u2026 or https://\u2026", value: s.image ?? "", onChange: (e) => updateSlot(s._idx, "image", e.target.value), "aria-label": `Slot ${s.slotNumber} prize image URL` })),
+            render: (s) => (_jsx(Input, { type: "text", className: "w-full", placeholder: "/media/\u2026 or https://\u2026", value: s.image ?? "", error: slotError(s._idx, "image"), onChange: (e) => updateSlot(s._idx, "image", e.target.value), "aria-label": `Slot ${s.slotNumber} prize image URL` })),
         },
         ...(showPrice
             ? [
                 {
                     key: "price",
                     header: "Price (₹)",
-                    render: (s) => (_jsx(Input, { type: "number", className: "w-24", placeholder: "0", value: s.price, onChange: (e) => updateSlot(s._idx, "price", e.target.value), "aria-label": `Slot ${s.slotNumber} price` })),
+                    render: (s) => (_jsx(Input, { type: "number", className: "w-24", placeholder: "0", value: s.price, error: slotError(s._idx, "price"), onChange: (e) => updateSlot(s._idx, "price", e.target.value), "aria-label": `Slot ${s.slotNumber} price` })),
                 },
             ]
             : []),

package/dist/_internal/client/features/maintenance/views/AnalysisRunnerView.js

@@ -23,7 +23,7 @@ export function AnalysisRunnerView() {
             });
             const body = (await res.json());
             if (!res.ok || !body.ok) {
-                setError(("error" in body && body.error) || `HTTP ${res.status}`);
+                setError(toUserMessage("code" in body ? String(body.code) : undefined, undefined, { fallback: `The analysis run failed (HTTP ${res.status}).` }));
                 setRunning(false);
                 return;
             }

package/dist/_internal/client/features/maintenance/views/CloudLogsListView.js

@@ -32,7 +32,7 @@ export function CloudLogsListView({ title, subtitle, initialEntries, initialNext
             const res = await fetch(url.toString());
             const body = (await res.json());
             if (!res.ok || !body.ok) {
-                setError(("error" in body && body.error) || `HTTP ${res.status}`);
+                setError(toUserMessage("code" in body ? String(body.code) : undefined, undefined, { fallback: `Could not load logs (HTTP ${res.status}).` }));
                 return;
             }
             setEntries((prev) => [...prev, ...body.data.entries]);

package/dist/_internal/server/features/auctions/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function placeBidAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/auctions/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { safeRead } from "../../../../errors/safe-read.js";
 import { bidRepository, productRepository, userRepository, siteSettingsRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";

package/dist/_internal/server/features/blog/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createBlogPostAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateBlogPostAction(postId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function deleteBlogPostAction(postId: string): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/blog/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { blogRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { blogPostInputSchema, blogPostUpdateSchema } from "../../../shared/features/blog/schema.js";

package/dist/_internal/server/features/brands/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createBrandAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateBrandAction(brandId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function deleteBrandAction(brandId: string): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/brands/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { categoriesRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { brandInputSchema, brandUpdateSchema } from "../../../shared/features/brands/schema.js";

package/dist/_internal/server/features/cart/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function addToCartAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function removeFromCartAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function clearCartAction(): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/cart/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { cartRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { addToCartSchema, removeFromCartSchema, mergeGuestCartSchema } from "../../../shared/features/cart/schema.js";

package/dist/_internal/server/features/checkout/actions.js

@@ -1833,7 +1833,6 @@ async function refundDroppedItemsForPhonePeCheckout(input) {
             : droppedValue;
         const refundResult = await processRefundAction({
             orderId: primaryOrderId,
-            type: "partial",
             amount: refundAmount,
             /*
              * A SYSTEM refund, not a buyer claim: items the buyer paid for turned

package/dist/_internal/server/features/events/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createEventAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateEventAction(eventId: string, input: unknown): Promise<ActionResult<unknown>>;
 export declare function registerForEventAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/events/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { eventRepository, eventEntryRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { eventInputSchema, eventUpdateSchema, registerForEventSchema } from "../../../shared/features/events/schema.js";

package/dist/_internal/server/features/gateway-events/redact.js

@@ -37,6 +37,7 @@
  * `card` key without anyone having written that path down.
  */
 import { GATEWAY_EVENT_PAYLOAD_MAX_BYTES } from "../../../../features/gateway-events/schemas/firestore.js";
+import { normalizeError } from "../../../../errors/normalize.js";
 /**
  * Keys dropped wherever they appear, at any depth.
  *
@@ -130,13 +131,24 @@ export function redactGatewayPayload(body) {
     try {
         serialisedLength = JSON.stringify(redacted)?.length ?? 0;
     }
-    catch {
+    catch (err) {
         /*
          * A circular structure cannot come from `JSON.parse`, which is the only
          * producer here — but this function is exported and a future caller could
          * hand it something else. Failing to a marker keeps the row writable.
+         *
+         * 🛑 The reason is CARRIED, not discarded. This was a bare `catch {}`, so
+         * the one case the comment above exists to anticipate — a future caller
+         * handing it something `JSON.stringify` cannot take — produced a row
+         * saying only `redactionFailed: true`, with nothing anywhere to say why.
+         * The row is a debugging record; a marker that cannot explain itself is
+         * the silent-degrade shape this codebase keeps paying for.
          */
-        return { payload: { redactionFailed: true }, truncated: true };
+        const n = normalizeError(err);
+        return {
+            payload: { redactionFailed: true, reason: n.message },
+            truncated: true,
+        };
     }
     if (serialisedLength > GATEWAY_EVENT_PAYLOAD_MAX_BYTES) {
         return {

package/dist/_internal/server/features/history/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import { type UserHistoryItem, type HistoryProductType } from "../../../../repositories";
 export declare function trackProductViewAction(productId: string, productType: HistoryProductType, productSnapshot?: UserHistoryItem["productSnapshot"]): Promise<ActionResult<unknown>>;
 export declare function mergeGuestHistoryAction(guestItems: Array<{

package/dist/_internal/server/features/history/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { historyRepository, } from "../../../../repositories/index.js";
 export async function trackProductViewAction(productId, productType, productSnapshot) {

package/dist/_internal/server/features/lottery/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import type { LotteryConfig } from "../../../../features/lottery/types";
 import type { LotteryEntryDocument } from "../../../../features/lottery/schemas/firestore";
 /**

package/dist/_internal/server/features/lottery/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { getAdminDb } from "../../../../providers/db-firebase/index.js";
 import { eventRepository, productRepository, orderRepository } from "../../../../repositories/index.js";
 import { serverLogger } from "../../../../monitoring/index.js";

package/dist/_internal/server/features/orders/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createOrderAction(input: unknown): Promise<ActionResult<unknown>>;
 /**
  * Cancel an order, and give the money back if any was taken (D14).

package/dist/_internal/server/features/orders/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { adminNotificationsRepository, orderRepository, storeRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { createOrderSchema, updateOrderStatusSchema, cancelOrderSchema, returnRequestSchema, } from "../../../shared/features/orders/schema.js";

package/dist/_internal/server/features/orders/cancellation-refund.js

@@ -391,7 +391,6 @@ export async function cancelOrderWithRefund(order, opts) {
      */
     const result = await processRefundAction({
         orderId: order.id,
-        type: "full",
         amount,
         /*
          * `changed_mind` is the honest default: a cancellation before dispatch is a

package/dist/_internal/server/features/orders/service.js

@@ -1,6 +1,30 @@
 import { orderRepository } from "../../../../repositories/index.js";
 import { OrderNotFoundError, OrderCancelError, OrderOwnershipError, OrderReturnWindowError, } from "../../../shared/features/orders/errors.js";
 import { ORDER_CANCELLABLE_STATUSES, ORDER_RETURN_WINDOW_MS, } from "../../../shared/features/orders/config.js";
+/**
+ * The three shapes `updatedAt` really arrives in, resolved to a `Date`.
+ *
+ * A Firestore `Timestamp` is duck-typed on `toDate` rather than imported, so
+ * this file stays free of a firebase-admin import — the same trade
+ * `orders/adapters.ts` makes and for the same reason.
+ *
+ * Falls back to NOW rather than to an invalid date: the caller measures a
+ * return window against it, and `new Date(undefined)` is `NaN`, which makes
+ * every comparison false and would silently hold the window open forever.
+ */
+function toDateOrNow(value) {
+    if (value instanceof Date)
+        return Number.isNaN(value.getTime()) ? new Date() : value;
+    if (typeof value === "object" && value !== null && typeof value.toDate === "function") {
+        const d = value.toDate();
+        return d instanceof Date && !Number.isNaN(d.getTime()) ? d : new Date();
+    }
+    if (typeof value === "string") {
+        const d = new Date(value);
+        return Number.isNaN(d.getTime()) ? new Date() : d;
+    }
+    return new Date();
+}
 export async function assertOrderOwnership(orderId, userId) {
     const order = await orderRepository.findById(orderId);
     if (!order)
@@ -97,7 +121,13 @@ export async function assertReturnWindowOpen(orderId, userId) {
      */
     const deliveredAt = order.deliveryDate instanceof Date
         ? order.deliveryDate
-        : new Date(order.updatedAt ?? Date.now());
+        /*
+         * Typed, and the `as never` is gone with it. That cast existed only to
+         * feed an `unknown` into `new Date()` — it suppressed the one check that
+         * would have caught a wrong shape. A Firestore Timestamp is duck-typed on
+         * `toDate` rather than imported, the same way `toIsoOrUndefined` does it.
+         */
+        : toDateOrNow(order.updatedAt);
     if (Date.now() - deliveredAt.getTime() > ORDER_RETURN_WINDOW_MS)
         throw new OrderReturnWindowError();
     return order;

package/dist/_internal/server/features/payouts/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export type ApplyRefundDeductionInput = {
     storeId: string;
     orderId: string;

package/dist/_internal/server/features/payouts/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 /**
  * applyRefundDeductionAction — deduct a refund from a seller's pending payout.
  *

package/dist/_internal/server/features/points/award.js

@@ -91,7 +91,15 @@ export async function awardPurchasePoints(order) {
         return { awarded: 0, skipped: "no-buyer" };
     }
     const goods = orderTaxableValue(order);
-    const amount = roundPoints((goods * POINTS_EARN_PERCENT) / 100);
+    /*
+     * `goods * (PERCENT / 100)`, not `(goods * PERCENT) / 100` — the same value,
+     * written the way every fee in `fees/calculator.ts` is
+     * (`subtotal * (commissions.platformFeePercent / 100)`). The division
+     * belongs to the PERCENT, and grouping it that way is what distinguishes a
+     * percentage from the subunit-conversion `/100` that `audit-money-units`
+     * exists to catch — which read the old grouping as exactly that.
+     */
+    const amount = roundPoints(goods * (POINTS_EARN_PERCENT / 100));
     if (amount <= 0) {
         /*
          * A fully-cancelled or zero-value order. Marked as awarded anyway below so

package/dist/_internal/server/features/pre-orders/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function reservePreOrderAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/pre-orders/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { reservePreOrderSchema } from "../../../shared/features/pre-orders/schema.js";

package/dist/_internal/server/features/prize-draws/actions.d.ts

@@ -1,2 +1,2 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function enterPrizeDrawAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/prize-draws/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { assertPrizeDrawOpen } from "./service.js";

package/dist/_internal/server/features/products/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function createProductAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createAuctionAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createPreOrderAction(input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/products/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { productRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { isAdminUser } from "../../../../features/auth/role-predicates.js";

package/dist/_internal/server/features/promotions/actions.d.ts

@@ -1,4 +1,4 @@
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 export declare function applyCouponAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function createCouponAction(input: unknown): Promise<ActionResult<unknown>>;
 export declare function updateCouponAction(couponId: string, input: unknown): Promise<ActionResult<unknown>>;

package/dist/_internal/server/features/promotions/actions.js

@@ -1,5 +1,16 @@
 "use server";
-import { wrapAction } from "@mohasinac/appkit/server";
+/*
+ * 🛑 From the DEFINING module, never "@mohasinac/appkit/server".
+ *
+ * appkit importing its own public server barrel is a self-reference that drags
+ * the whole server surface in behind it — `dist/server.js` reaches next/og,
+ * next/navigation, next/headers and driver.js. Twenty `actions.ts` files did
+ * this for two symbols, and because `obligationSweep` reaches one of them, the
+ * Firebase Functions tsup bundle (noExternal: appkit) had to resolve Next:
+ * it failed on two `react-server-dom-webpack/*` requires and two @vercel/og
+ * .wasm files, naming none of the responsible files. Root Cause #18.
+ */
+import { wrapAction } from "../../../shared/types/action-result.js";
 import { couponsRepository } from "../../../../repositories/index.js";
 import { requireRoleUser } from "../../../../providers/auth-firebase/helpers.js";
 import { applyCouponSchema, createCouponSchema, updateCouponSchema, } from "../../../shared/features/promotions/schema.js";

package/dist/_internal/server/features/protection-claims/actions.d.ts

@@ -66,7 +66,7 @@ export declare function adjudicateProtectionClaimAction(claimId: string, finding
 /** A buyer's own claims, for their order detail page. */
 export declare function getMyProtectionClaimsAction(): Promise<ActionResult<ProtectionClaimDocument[]>>;
 /** Whether this order can be claimed against right now, for rendering the CTA. */
-export declare function canClaimProtection(order: Parameters<typeof deadlinesFor>[0], kind: "shipping" | "sale"): Promise<{
+export declare function canClaimProtection(order: Parameters<typeof deadlinesFor>[0], kind: "shipping" | "sale"): Promise<ActionResult<{
     can: boolean;
     reason?: string;
-}>;
+}>>;

package/dist/_internal/server/features/protection-claims/actions.js

@@ -213,16 +213,25 @@ export async function getMyProtectionClaimsAction() {
 }
 /** Whether this order can be claimed against right now, for rendering the CTA. */
 export async function canClaimProtection(order, kind) {
-    const feePaid = kind === "shipping" ? order.shipmentProtectionFee : order.saleProtectionFee;
-    if (!feePaid || feePaid <= 0)
-        return { can: false, reason: "not-covered" };
-    const existing = await protectionClaimsRepository().findById(createProtectionClaimId(order.id, kind));
-    if (existing)
-        return { can: false, reason: "already-claimed" };
-    const obligationKind = kind === "shipping" ? "claim-shipping" : "claim-sale";
-    const window = deadlinesFor(order).find((d) => d.kind === obligationKind);
-    if (order.deliveryDate && window && window.dueAt.getTime() <= Date.now()) {
-        return { can: false, reason: "window-closed" };
-    }
-    return { can: true };
+    /*
+     * 🛑 Wrapped, because this file is `"use server"` — which makes EVERY export
+     * in it a client-callable RPC endpoint, read-only predicate included. So it
+     * owes the same uniform envelope as its sibling mutations: a caller cannot
+     * tell a thrown repository error from a `{can:false}` verdict otherwise, and
+     * "the claim window is closed" and "the lookup failed" are opposite answers.
+     */
+    return wrapAction(async () => {
+        const feePaid = kind === "shipping" ? order.shipmentProtectionFee : order.saleProtectionFee;
+        if (!feePaid || feePaid <= 0)
+            return { can: false, reason: "not-covered" };
+        const existing = await protectionClaimsRepository().findById(createProtectionClaimId(order.id, kind));
+        if (existing)
+            return { can: false, reason: "already-claimed" };
+        const obligationKind = kind === "shipping" ? "claim-shipping" : "claim-sale";
+        const window = deadlinesFor(order).find((d) => d.kind === obligationKind);
+        if (order.deliveryDate && window && window.dueAt.getTime() <= Date.now()) {
+            return { can: false, reason: "window-closed" };
+        }
+        return { can: true };
+    });
 }

package/dist/_internal/server/features/raffle/actions.d.ts

@@ -5,7 +5,7 @@
  * handlers also work in a Vercel lambda (10s cap honoured by raffle pool
  * size).
  */
-import { type ActionResult } from "@mohasinac/appkit/server";
+import { type ActionResult } from "../../../shared/types/action-result";
 import { type TriggerEventRaffleInput, type TriggerEventRaffleResult } from "../../jobs/core/triggerEventRaffle";
 import { type AssignSpinPrizeInput, type AssignSpinPrizeResult } from "../../jobs/core/assignSpinPrize";
 export declare function triggerEventRaffleAction(input: TriggerEventRaffleInput): Promise<ActionResult<TriggerEventRaffleResult>>;