@mohasinac/appkit 4.61.0 → 4.62.1

package/dist/next/routing/route-map.d.ts

@@ -182,6 +182,8 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly CLAIMED_COUPONS: "/user/coupons";
         /** Points balance + ledger. 1 point = ₹1, spendable at checkout. */
         readonly POINTS: "/user/points";
+        readonly SESSIONS: "/user/sessions";
+        readonly PAYMENT_METHODS: "/user/payment-methods";
         readonly BECOME_SELLER: "/user/become-seller";
         readonly CART: "/cart";
         readonly CHECKOUT: "/checkout";
@@ -375,6 +377,16 @@ export declare const DEFAULT_ROUTE_MAP: {
         readonly AUDIT_LOG: "/admin/audit-log";
         readonly MONEY_CASES: "/admin/money-cases";
         readonly MONEY_CASE_DETAIL: (id: string) => string;
+        /**
+         * Phase 7 — the GSTR-1 draft export.
+         *
+         * 🛑 Under Finance for the same reason `MONEY_CASES` is, and the reason is
+         * stronger here: the export contains the company's tax position for a
+         * quarter plus every buyer's place of supply. That is not a maintenance
+         * diagnostic, and it is admin-only — deliberately not granted to
+         * `maintenance_employee`.
+         */
+        readonly INVOICING: "/admin/invoicing";
         readonly PROTECTION_CLAIMS: "/admin/protection-claims";
         readonly MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events";
         readonly MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations";
@@ -634,6 +646,8 @@ export declare const ROUTES: {
         readonly CLAIMED_COUPONS: "/user/coupons";
         /** Points balance + ledger. 1 point = ₹1, spendable at checkout. */
         readonly POINTS: "/user/points";
+        readonly SESSIONS: "/user/sessions";
+        readonly PAYMENT_METHODS: "/user/payment-methods";
         readonly BECOME_SELLER: "/user/become-seller";
         readonly CART: "/cart";
         readonly CHECKOUT: "/checkout";
@@ -827,6 +841,16 @@ export declare const ROUTES: {
         readonly AUDIT_LOG: "/admin/audit-log";
         readonly MONEY_CASES: "/admin/money-cases";
         readonly MONEY_CASE_DETAIL: (id: string) => string;
+        /**
+         * Phase 7 — the GSTR-1 draft export.
+         *
+         * 🛑 Under Finance for the same reason `MONEY_CASES` is, and the reason is
+         * stronger here: the export contains the company's tax position for a
+         * quarter plus every buyer's place of supply. That is not a maintenance
+         * diagnostic, and it is admin-only — deliberately not granted to
+         * `maintenance_employee`.
+         */
+        readonly INVOICING: "/admin/invoicing";
         readonly PROTECTION_CLAIMS: "/admin/protection-claims";
         readonly MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events";
         readonly MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations";

package/dist/next/routing/route-map.js

@@ -302,6 +302,15 @@ export const DEFAULT_ROUTE_MAP = {
         CLAIMED_COUPONS: "/user/coupons",
         /** Points balance + ledger. 1 point = ₹1, spendable at checkout. */
         POINTS: "/user/points",
+        /*
+         * 🛑 Both of these had a COMPLETE API and no page. `GET /api/user/sessions`
+         * + `DELETE [id]`, and `GET/POST /api/user/payment-methods` + `DELETE
+         * [id]`, were all live with zero consumers — and `BuyerAccountGuideView`
+         * already told buyers to "view all devices signed in at My Account →
+         * Sessions", pointing at a security control that did not exist.
+         */
+        SESSIONS: "/user/sessions",
+        PAYMENT_METHODS: "/user/payment-methods",
         BECOME_SELLER: "/user/become-seller",
         CART: "/cart",
         CHECKOUT: "/checkout",
@@ -570,6 +579,16 @@ export const DEFAULT_ROUTE_MAP = {
          */
         MONEY_CASES: "/admin/money-cases",
         MONEY_CASE_DETAIL: (id) => `/admin/money-cases/${id}`,
+        /**
+         * Phase 7 — the GSTR-1 draft export.
+         *
+         * 🛑 Under Finance for the same reason `MONEY_CASES` is, and the reason is
+         * stronger here: the export contains the company's tax position for a
+         * quarter plus every buyer's place of supply. That is not a maintenance
+         * diagnostic, and it is admin-only — deliberately not granted to
+         * `maintenance_employee`.
+         */
+        INVOICING: "/admin/invoicing",
         PROTECTION_CLAIMS: "/admin/protection-claims",
         MAINTENANCE_GATEWAY_EVENTS: "/admin/maintenance/gateway-events",
         MAINTENANCE_OBLIGATIONS: "/admin/maintenance/obligations",

package/dist/providers/shipping-shiprocket/index.d.ts

@@ -66,7 +66,7 @@
  * @tag access:server-only
  */
 import { IShippingProvider } from "../../contracts";
-import type { CreateShipmentInput, Shipment, TrackingInfo, ServiceabilityResult } from "../../contracts";
+import type { CreateShipmentInput, Shipment, TrackingInfo, ServiceabilityResult, WalletBalance } from "../../contracts";
 export interface ShiprocketConfig {
     /** The API user's email. See the header on why this is not a "login id". */
     email: string;
@@ -74,6 +74,21 @@ export interface ShiprocketConfig {
     /** Shiprocket pickup-location nickname, as registered in their dashboard. */
     pickupLocation?: string;
 }
+/**
+ * Does this upstream error body look like "your wallet is empty"?
+ *
+ * 🛑 The substring list is UNVERIFIED and that is acceptable, because of where
+ * it sits in the design: a funding failure and any other booking failure take
+ * the SAME path — the order gets a `courierBlock`, the admin is alerted, the
+ * seller is offered retry-or-self-ship. Classifying only changes the WORDING
+ * of the operator's alert. So a false negative costs a less specific message
+ * and never a wrong action, which is why this is allowed to be a heuristic
+ * rather than something this plan pretended to have confirmed.
+ *
+ * Triggering the real error would mean deliberately booking a shipment against
+ * a drained wallet, which is not a probe anyone should run on a live account.
+ */
+export declare function looksLikeInsufficientFunds(body: string): boolean;
 export declare class ShiprocketShippingProvider extends IShippingProvider {
     private readonly config;
     readonly name = "shiprocket";
@@ -119,6 +134,17 @@ export declare class ShiprocketShippingProvider extends IShippingProvider {
      */
     createShipment(data: CreateShipmentInput): Promise<Shipment>;
     trackShipment(trackingId: string): Promise<TrackingInfo>;
+    /**
+     * The prepaid wallet balance. Read-only; never charges anything.
+     *
+     * 🛑 Returns `{ known: false, supported: true }` on ANY failure rather than
+     * `0`. Shiprocket HAS a wallet, so `supported` is true regardless — the
+     * caller must treat "unreadable" as "attempt the booking anyway and let the
+     * attempt's own failure decide", because refusing on an unreadable balance
+     * would block every order on a transient network blip. A `0` here is a real
+     * decision to skip; an unreadable balance is not.
+     */
+    getWalletBalance(): Promise<WalletBalance>;
     cancelShipment(shipmentId: string): Promise<void>;
     checkServiceability(pincode: string, weight: number): Promise<ServiceabilityResult>;
     generateLabel(shipmentId: string): Promise<ArrayBuffer>;

package/dist/providers/shipping-shiprocket/index.js

@@ -117,6 +117,42 @@ const serviceabilityResponse = z.object({
             .nullish(),
     }),
 });
+/*
+ * Measured against the live API 2026-10-22 (read-only probe, one auth + GETs):
+ *
+ *   GET /account/details/wallet-balance -> 200 { data: { balance_amount: string } }
+ *   GET /account/details                -> 404
+ *
+ * 🛑 `balance_amount` is a STRING, and there is NO credit-limit field — so
+ * postpaid headroom is not readable from this API at all. See `WalletBalance`
+ * in contracts/shipping.ts for why no such field is declared.
+ */
+const walletBalanceResponse = z.object({
+    data: z.object({
+        balance_amount: z.union([z.number(), z.string()]).nullish(),
+    }),
+});
+/**
+ * Does this upstream error body look like "your wallet is empty"?
+ *
+ * 🛑 The substring list is UNVERIFIED and that is acceptable, because of where
+ * it sits in the design: a funding failure and any other booking failure take
+ * the SAME path — the order gets a `courierBlock`, the admin is alerted, the
+ * seller is offered retry-or-self-ship. Classifying only changes the WORDING
+ * of the operator's alert. So a false negative costs a less specific message
+ * and never a wrong action, which is why this is allowed to be a heuristic
+ * rather than something this plan pretended to have confirmed.
+ *
+ * Triggering the real error would mean deliberately booking a shipment against
+ * a drained wallet, which is not a probe anyone should run on a live account.
+ */
+export function looksLikeInsufficientFunds(body) {
+    const s = body.toLowerCase();
+    return (s.includes("insufficient") ||
+        s.includes("low balance") ||
+        s.includes("recharge") ||
+        (s.includes("wallet") && s.includes("balance")));
+}
 function num(v, fallback = 0) {
     const n = typeof v === "string" ? Number.parseFloat(v) : v;
     return typeof n === "number" && Number.isFinite(n) ? n : fallback;
@@ -230,7 +266,24 @@ export class ShiprocketShippingProvider extends IShippingProvider {
             res = await attempt(true);
         }
         if (!res.ok) {
-            throw new ApiError(502, `Shiprocket ${path} failed (${res.status}).`, { code: "SHIPROCKET_REQUEST_FAILED" });
+            /*
+             * The body is read and carried, not discarded.
+             *
+             * It used to throw on `res.status` alone, which meant a funding failure
+             * and a malformed-address failure were indistinguishable to every
+             * caller — and the first of those is the one an operator can actually
+             * fix, by topping up.
+             *
+             * Truncated, because an upstream error page can be a whole HTML
+             * document and this string ends up in a log line.
+             */
+            const body = await res.text().catch(() => "");
+            const insufficient = looksLikeInsufficientFunds(body);
+            throw new ApiError(502, `Shiprocket ${path} failed (${res.status}).`, {
+                code: insufficient ? "SHIPROCKET_INSUFFICIENT_FUNDS" : "SHIPROCKET_REQUEST_FAILED",
+                upstreamStatus: res.status,
+                upstreamBody: body.slice(0, 500),
+            });
         }
         const json = await res.json();
         return parseUpstream(contract, json, path);
@@ -331,6 +384,36 @@ export class ShiprocketShippingProvider extends IShippingProvider {
             })),
         };
     }
+    /**
+     * The prepaid wallet balance. Read-only; never charges anything.
+     *
+     * 🛑 Returns `{ known: false, supported: true }` on ANY failure rather than
+     * `0`. Shiprocket HAS a wallet, so `supported` is true regardless — the
+     * caller must treat "unreadable" as "attempt the booking anyway and let the
+     * attempt's own failure decide", because refusing on an unreadable balance
+     * would block every order on a transient network blip. A `0` here is a real
+     * decision to skip; an unreadable balance is not.
+     */
+    async getWalletBalance() {
+        try {
+            const out = await this.call("/account/details/wallet-balance", { method: "GET" }, walletBalanceResponse);
+            const raw = out.data.balance_amount;
+            /*
+             * `num()` would silently fold an unparseable string into its fallback,
+             * which is exactly the 0-means-unknown conflation this type exists to
+             * prevent. Parsed explicitly so a bad payload reports `known: false`.
+             */
+            const parsed = typeof raw === "string" ? Number.parseFloat(raw) : raw;
+            if (typeof parsed !== "number" || !Number.isFinite(parsed)) {
+                return { known: false, supported: true, reason: "unparseable balance_amount" };
+            }
+            return { known: true, amount: parsed, currency: "INR" };
+        }
+        catch (err) {
+            const normalized = normalizeError(err);
+            return { known: false, supported: true, reason: normalized.message };
+        }
+    }
     async cancelShipment(shipmentId) {
         await this.call("/orders/cancel", { method: "POST", body: JSON.stringify({ ids: [shipmentId] }) }, 
         // Their cancel returns a message envelope we do not read; accepting any

package/dist/schemas/registry.d.ts

@@ -2801,8 +2801,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">>]>>;
             }, "strip", import("zod").ZodTypeAny, {
                 status: "paid" | "pending" | "overdue";
-                amount: number;
                 index: number;
+                amount: number;
                 dueDate: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2816,8 +2816,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             }, {
                 status: "paid" | "pending" | "overdue";
-                amount: number;
                 index: number;
+                amount: number;
                 dueDate: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -2895,6 +2895,15 @@ export declare const SCHEMAS: {
                 proofDocumentUrl: import("zod").ZodOptional<import("zod").ZodString>;
                 proofDocumentMimeType: import("zod").ZodOptional<import("zod").ZodString>;
                 overrideReason: import("zod").ZodOptional<import("zod").ZodString>;
+                creditNoteNumber: import("zod").ZodOptional<import("zod").ZodString>;
+                creditNoteIssuedAt: import("zod").ZodOptional<import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough">>]>>;
+                creditNoteStoragePath: import("zod").ZodOptional<import("zod").ZodString>;
             }, "strip", import("zod").ZodTypeAny, {
                 type: "full" | "partial";
                 amount: number;
@@ -2905,8 +2914,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
                 status?: "failed" | "processed" | "reserved" | undefined;
-                failureReason?: string | undefined;
                 gateway?: string | undefined;
+                failureReason?: string | undefined;
                 itemIds?: string[] | undefined;
                 reasonCode?: string | undefined;
                 gatewayRefundId?: string | undefined;
@@ -2916,6 +2925,11 @@ export declare const SCHEMAS: {
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
                 overrideReason?: string | undefined;
+                creditNoteNumber?: string | undefined;
+                creditNoteIssuedAt?: string | Date | import("zod").objectOutputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+                creditNoteStoragePath?: string | undefined;
             }, {
                 type: "full" | "partial";
                 amount: number;
@@ -2926,8 +2940,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
                 status?: "failed" | "processed" | "reserved" | undefined;
-                failureReason?: string | undefined;
                 gateway?: string | undefined;
+                failureReason?: string | undefined;
                 itemIds?: string[] | undefined;
                 reasonCode?: string | undefined;
                 gatewayRefundId?: string | undefined;
@@ -2937,6 +2951,11 @@ export declare const SCHEMAS: {
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
                 overrideReason?: string | undefined;
+                creditNoteNumber?: string | undefined;
+                creditNoteIssuedAt?: string | Date | import("zod").objectInputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+                creditNoteStoragePath?: string | undefined;
             }>, "many">>;
             contestable: import("zod").ZodOptional<import("zod").ZodBoolean>;
             adminBypassBy: import("zod").ZodOptional<import("zod").ZodString>;
@@ -3080,8 +3099,8 @@ export declare const SCHEMAS: {
             emiSurchargeAmount?: number | undefined;
             emiInstallments?: {
                 status: "paid" | "pending" | "overdue";
-                amount: number;
                 index: number;
+                amount: number;
                 dueDate: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -3107,8 +3126,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
                 status?: "failed" | "processed" | "reserved" | undefined;
-                failureReason?: string | undefined;
                 gateway?: string | undefined;
+                failureReason?: string | undefined;
                 itemIds?: string[] | undefined;
                 reasonCode?: string | undefined;
                 gatewayRefundId?: string | undefined;
@@ -3118,6 +3137,11 @@ export declare const SCHEMAS: {
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
                 overrideReason?: string | undefined;
+                creditNoteNumber?: string | undefined;
+                creditNoteIssuedAt?: string | Date | import("zod").objectOutputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+                creditNoteStoragePath?: string | undefined;
             }[] | undefined;
             contestable?: boolean | undefined;
             adminBypassBy?: string | undefined;
@@ -3234,8 +3258,8 @@ export declare const SCHEMAS: {
             emiSurchargeAmount?: number | undefined;
             emiInstallments?: {
                 status: "paid" | "pending" | "overdue";
-                amount: number;
                 index: number;
+                amount: number;
                 dueDate: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough">;
@@ -3261,8 +3285,8 @@ export declare const SCHEMAS: {
                 }, import("zod").ZodTypeAny, "passthrough">;
                 refundedBy: string;
                 status?: "failed" | "processed" | "reserved" | undefined;
-                failureReason?: string | undefined;
                 gateway?: string | undefined;
+                failureReason?: string | undefined;
                 itemIds?: string[] | undefined;
                 reasonCode?: string | undefined;
                 gatewayRefundId?: string | undefined;
@@ -3272,6 +3296,11 @@ export declare const SCHEMAS: {
                 proofDocumentUrl?: string | undefined;
                 proofDocumentMimeType?: string | undefined;
                 overrideReason?: string | undefined;
+                creditNoteNumber?: string | undefined;
+                creditNoteIssuedAt?: string | Date | import("zod").objectInputType<{
+                    toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
+                }, import("zod").ZodTypeAny, "passthrough"> | undefined;
+                creditNoteStoragePath?: string | undefined;
             }[] | undefined;
             contestable?: boolean | undefined;
             adminBypassBy?: string | undefined;
@@ -4510,11 +4539,11 @@ export declare const SCHEMAS: {
                 attachments?: string[] | undefined;
             }[];
             orderId?: string | undefined;
-            assignedTo?: string | undefined;
-            resolvedAt?: string | Date | import("zod").objectOutputType<{
+            closedAt?: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
-            closedAt?: string | Date | import("zod").objectOutputType<{
+            assignedTo?: string | undefined;
+            resolvedAt?: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             assignedToName?: string | undefined;
@@ -4553,11 +4582,11 @@ export declare const SCHEMAS: {
                 attachments?: string[] | undefined;
             }[];
             orderId?: string | undefined;
-            assignedTo?: string | undefined;
-            resolvedAt?: string | Date | import("zod").objectInputType<{
+            closedAt?: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
-            closedAt?: string | Date | import("zod").objectInputType<{
+            assignedTo?: string | undefined;
+            resolvedAt?: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             assignedToName?: string | undefined;
@@ -4997,7 +5026,7 @@ export declare const SCHEMAS: {
             category: "shipping" | "seller" | "custom" | "condition" | "auction" | "platform" | "preorder";
             isActive: boolean;
             displayOrder: number;
-            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "product" | "preorder")[];
+            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "preorder" | "product")[];
             storeId?: string | undefined;
             description?: string | undefined;
             iconColor?: string | undefined;
@@ -5008,7 +5037,7 @@ export declare const SCHEMAS: {
             category: "shipping" | "seller" | "custom" | "condition" | "auction" | "platform" | "preorder";
             isActive: boolean;
             displayOrder: number;
-            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "product" | "preorder")[];
+            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "preorder" | "product")[];
             storeId?: string | undefined;
             description?: string | undefined;
             iconColor?: string | undefined;
@@ -5019,7 +5048,7 @@ export declare const SCHEMAS: {
             category: "shipping" | "seller" | "custom" | "condition" | "auction" | "platform" | "preorder";
             isActive: boolean;
             displayOrder: number;
-            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "product" | "preorder")[];
+            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "preorder" | "product")[];
             storeId?: string | undefined;
             description?: string | undefined;
             iconColor?: string | undefined;
@@ -5030,7 +5059,7 @@ export declare const SCHEMAS: {
             category: "shipping" | "seller" | "custom" | "condition" | "auction" | "platform" | "preorder";
             isActive: boolean;
             displayOrder: number;
-            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "product" | "preorder")[];
+            productTypes: ("all" | "classified" | "auction" | "prize-draw" | "digital-code" | "live" | "preorder" | "product")[];
             storeId?: string | undefined;
             description?: string | undefined;
             iconColor?: string | undefined;
@@ -5341,14 +5370,14 @@ export declare const SCHEMAS: {
         }, "strict", import("zod").ZodTypeAny, {
             entityId: string;
             entityType: import("..").ReportEntityType;
-            detail: string;
             reason: import("..").ReportReason;
+            detail: string;
             evidenceUrls?: string[] | undefined;
         }, {
             entityId: string;
             entityType: import("..").ReportEntityType;
-            detail: string;
             reason: import("..").ReportReason;
+            detail: string;
             evidenceUrls?: string[] | undefined;
         }>;
         readonly itemRequest: import("zod").ZodObject<{
@@ -6254,13 +6283,13 @@ export declare const SCHEMAS: {
             userPhone: import("zod").ZodUnion<[import("zod").ZodOptional<import("zod").ZodString>, import("zod").ZodLiteral<"">]>;
         }, "strip", import("zod").ZodTypeAny, {
             transactionId: string;
-            sourceType: "event" | "product";
+            sourceType: "product" | "event";
             paymentTime: string;
             purchasedItemNumber: number;
             userPhone?: string | undefined;
         }, {
             transactionId: string;
-            sourceType: "event" | "product";
+            sourceType: "product" | "event";
             paymentTime: string;
             purchasedItemNumber: number;
             userPhone?: string | undefined;

package/dist/schemas/sieve.d.ts

@@ -7,13 +7,13 @@ export declare const sieveGrammarSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     page: number;
     pageSize: number;
-    filters: string;
     sorts: string;
+    filters: string;
 }, {
     page?: number | undefined;
     pageSize?: number | undefined;
-    filters?: string | undefined;
     sorts?: string | undefined;
+    filters?: string | undefined;
 }>;
 export type SieveGrammar = z.infer<typeof sieveGrammarSchema>;
 export declare const sieveWhereOpSchema: z.ZodEnum<["==", "!=", "<", "<=", ">", ">=", "array-contains", "in", "not-in", "array-contains-any"]>;
@@ -23,12 +23,12 @@ export declare const sieveFilterClauseSchema: z.ZodObject<{
     value: z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>, "many">]>;
 }, "strip", z.ZodTypeAny, {
     value: string | number | boolean | (string | number | boolean)[] | null;
-    op: "==" | "!=" | "<" | "<=" | ">" | ">=" | "array-contains" | "in" | "not-in" | "array-contains-any";
     field: string;
+    op: "==" | "!=" | "<" | "<=" | ">" | ">=" | "array-contains" | "in" | "not-in" | "array-contains-any";
 }, {
     value: string | number | boolean | (string | number | boolean)[] | null;
-    op: "==" | "!=" | "<" | "<=" | ">" | ">=" | "array-contains" | "in" | "not-in" | "array-contains-any";
     field: string;
+    op: "==" | "!=" | "<" | "<=" | ">" | ">=" | "array-contains" | "in" | "not-in" | "array-contains-any";
 }>;
 export type SieveFilterClause = z.infer<typeof sieveFilterClauseSchema>;
 export type SieveWhereOp = z.infer<typeof sieveWhereOpSchema>;
@@ -36,8 +36,8 @@ export declare const sieveSortClauseSchema: z.ZodObject<{
     field: z.ZodString;
     direction: z.ZodDefault<z.ZodEnum<["asc", "desc"]>>;
 }, "strip", z.ZodTypeAny, {
-    direction: "desc" | "asc";
     field: string;
+    direction: "desc" | "asc";
 }, {
     field: string;
     direction?: "desc" | "asc" | undefined;

package/dist/server-entry.d.ts

@@ -68,8 +68,8 @@ export { renderScamOg, renderScamOgImage, type ScamOgData, getScammerForDetail,
 export { getCategoryForDetail, listRootCategories, listFeaturedCategories, listMenuCategories, getCategoryTree, listSitemapCategories, CATEGORIES_PAGE_SIZE, CATEGORIES_ROOT_TIER, CATEGORIES_MAX_DEPTH, CATEGORIES_SITEMAP_LIMIT, CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, } from "./_internal/server/features/categories/index";
 export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, buildGroupedListingMetadata, renderGroupedListingOg, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, type GroupedListingMetadataOptions, } from "./_internal/server/features/grouped/index";
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CreateCheckoutOrderInput, type VerifyAndPlaceGatewayOrderInput, type CheckoutOrderResult, type CheckoutPaymentMethod, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./_internal/server/features/checkout/index";
-export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
-export { computeGroupCouponDiscount, computeCartCouponDiscount, type GroupCouponDiscountResult, } from "./_internal/shared/checkout/coupon-discount";
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, resolvePointsTender, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
+export { computeGroupCouponDiscount, computeCartCouponDiscount, type GroupCouponDiscountResult, type CartCouponDiscountResult, } from "./_internal/shared/checkout/coupon-discount";
 export { refundCapacity, refundableBase, committedRefundTotal, platformFeeWithheld, wouldBeFullRefund, MONEY_EPSILON, type RefundCapacity, type RefundableOrderLike, } from "./_internal/shared/checkout/refundable-base";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";
 export { getSublistingCategoryForDetail } from "./_internal/server/features/sublisting-categories/index";

package/dist/server-entry.js

@@ -106,7 +106,14 @@ export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOr
 // GST entirely, so the buyer was shown the tax, charged without it, and the
 // order recorded none — with the verify-side mismatch guard omitting it too, so
 // the three were consistently wrong and the undercharge was undetectable.
-export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, } from "./_internal/shared/checkout/order-math.js";
+// `allocatePointsAcrossGroups` is the FOURTH symbol exported here for the same
+// reason as the three above it, and the pattern is now the point: every money
+// rule that `/api/payment/create-order` needs has had to be exported after that
+// route was found hand-rolling it or omitting it. The points tender is exported
+// BEFORE the route can get it wrong rather than after — which is the only
+// difference between this entry and the three defects recorded in the comment
+// above (D37, D38, C0c defect 1).
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, resolvePointsTender, } from "./_internal/shared/checkout/order-math.js";
 /*
  * The coupon discount, exported for the SAME reason `sumGroupGst` above was —
  * and it is the third defect of that exact shape in this one route.

package/dist/server.d.ts

@@ -260,7 +260,7 @@ export { updateEvent } from "./features/events/server";
 export { triggerEventRaffleAction, assignSpinPrizeAction, resolveEventIdAction, } from "./_internal/server/features/raffle/actions";
 export { reasonToHttp, EVENT_DRAW_REASON, type EventDrawReason, type EventDrawHttpMapping, } from "./_internal/server/jobs/core/event-draw-reasons";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";
-export { computeCheckoutFees, computePayoutDeduction, computeCodHandlingFee, computeGiftWrapFee, computeShipmentProtectionFee, computeSaleProtectionFee, } from "./_internal/shared/fees/calculator";
+export { computeCheckoutFees, allocateCheckoutFees, computePayoutDeduction, computeCodHandlingFee, computeGiftWrapFee, computeShipmentProtectionFee, computeSaleProtectionFee, } from "./_internal/shared/fees/calculator";
 export { searchPriceIndex, getPriceIndexBandsForIds, PRICE_INDEX_SEARCH_LIMIT, PRICE_INDEX_MIN_QUERY_LENGTH } from "./_internal/server/features/price-index/search";
 export type { PriceIndexSearchResponse, PriceIndexSearchResult, PriceIndexSearchResultBand, } from "./_internal/server/features/price-index/search";
 export { getPriceIndexMarketForIds } from "./_internal/server/features/price-index/market";
@@ -502,7 +502,7 @@ export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_
 export type { ListingTypePlugin } from "./_internal/shared/listing-types/_registry";
 export { applyMediaContextGuards, CONTEXT_LIMITS, } from "./_internal/server/features/media/contextGuards";
 export type { GuardResult, GuardError, GuardSuccess } from "./_internal/server/features/media/contextGuards";
-export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits";
+export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, REVIEW_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits";
 export type { MediaKind, AllowedImageMime, AllowedVideoMime, AllowedDocMime, AllowedMime, } from "./_internal/shared/media/limits";
 export { getServerPermissions, checkPermission, checkAnyPermission, makeAdminSectionLayout, } from "./_internal/server/features/auth/permissions";
 export type { ResolvedPermissions, AdminSectionLayoutOpts, } from "./_internal/server/features/auth/permissions";
@@ -573,6 +573,8 @@ export type { ActionIndexDocument } from "./features/search/action-index/reposit
 export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy";
 export { RETURN_REASON, FINAL_SALE_EXEMPT_REASONS, RETURN_REASON_LABEL, RETURN_REASON_GROUP_LABEL, isFinalSaleExempt, isReturnReason, selectableReturnReasons, } from "./_internal/shared/features/orders/return-reasons";
 export type { ReturnReason } from "./_internal/shared/features/orders/return-reasons";
+export { INTEGRATIONS, INTEGRATION_ORDER, readIntegrationStates, integrationPatch, allIntegrationsPatch, } from "./_internal/shared/features/admin/integrations";
+export type { IntegrationId, IntegrationDescriptor, IntegrationState, } from "./_internal/shared/features/admin/integrations";
 export { draftToProductInput, productToDraft, } from "./features/seller/utils/product-draft-mapping";
 export { RETURN_CUSTODY_STATES, RETURN_CUSTODY_COPY, isTerminalCustody, canAdvanceCustody, nextCustodyState, custodyOwner, isActionableBy, } from "./_internal/shared/features/returns/custody";
 export type { ReturnCustodyState } from "./_internal/shared/features/returns/custody";
@@ -604,3 +606,10 @@ export type { FileGrievanceInput } from "./_internal/server/features/grievance";
 export { GRIEVANCE_PERIODS } from "./features/support/schemas/firestore";
 export { getRateableItemsAction, rateOrderItemAction, markOrderCompleteAction, } from "./_internal/server/features/order-completion";
 export type { RateableOrderItem, RateOrderItemInput, } from "./_internal/server/features/order-completion";
+export { allocateSeriesNumber, type AllocateSeriesNumberInput, type AllocateSeriesNumberResult, } from "./_internal/server/features/invoicing/allocate";
+export { issueInvoiceForOrder, readStoredInvoice, storeRenderedInvoice, INVOICE_PREFIX_PATH, type InvoiceRenderer, type IssueInvoiceResult, } from "./_internal/server/features/invoicing/issue";
+export { issueCreditNoteForRefund, CREDIT_NOTE_PREFIX_PATH, type CreditNoteRenderer, type IssueCreditNoteResult, } from "./_internal/server/features/invoicing/credit-note";
+export { financialYearLabel, formatSeriesNumber, INVOICE_PREFIX, CREDIT_NOTE_PREFIX, } from "./features/invoicing/utils/financial-year";
+export type { InvoiceCounterDocument, InvoiceAllocationDocument, InvoiceSeriesKind, } from "./features/invoicing/schemas/firestore";
+export { buildGstr1Export, gstr1ToCsv, type Gstr1Export, type Gstr1Row, } from "./_internal/server/features/invoicing/gstr1";
+export { quoteSharedPurchase, countDestinations, type SharedPurchaseRates, type SharedPurchaseQuote, type SharedPurchaseQuoteInput, } from "./_internal/shared/features/shipping/shared-purchase";