@mohasinac/appkit 4.62.1 → 4.63.1

package/dist/next/routing/route-map.js

@@ -9,6 +9,8 @@ export const DEFAULT_ROUTE_MAP = {
         AUCTIONS: "/auctions",
         AUCTION_DETAIL: (id) => `/auctions/${id}`,
         PRE_ORDERS: "/pre-orders",
+        /** D56 — the public rate card + self-serve booking form. */
+        ADVERTISE: "/advertise",
         PRE_ORDER_DETAIL: (id) => `/pre-orders/${id}`,
         // SB1-J — bundles + prize draws (additive, pages not yet built)
         BUNDLES: "/bundles",
@@ -261,6 +263,16 @@ export const DEFAULT_ROUTE_MAP = {
     },
     USER: {
         DASHBOARD: "/user",
+        /**
+         * A dashboard SECTION hub — the screens of one sidebar group, each with a
+         * sentence on what it is for.
+         *
+         * One parametric route serves every section of the portal; the slug is
+         * `hubSectionSlug(group.title)` and is DERIVED, so there is no list of
+         * section keys here to drift from the nav. `audit-dashboard-hub-coverage`
+         * cross-checks the two.
+         */
+        SECTION: (slug) => `/user/sections/${slug}`,
         PROFILE: "/user/profile",
         SETTINGS: "/user/settings",
         ORDERS: "/user/orders",
@@ -297,6 +309,17 @@ export const DEFAULT_ROUTE_MAP = {
         ORDER_CLAIM: (id) => `/user/orders/${id}/claim`,
         ORDER_INVOICE: (id) => `/user/orders/${id}/invoice`,
         ORDER_PAYMENT: (id) => `/user/orders/${id}/payment`,
+        /**
+         * Raise a dispute on one order.
+         *
+         * Deep-linkable on purpose: a notification `actionUrl` points here, and
+         * `/user/orders/view/{id}` carries a "Report a problem" button to the same
+         * place. One surface, two ways in — an email link that works only while
+         * the buyer still has the email is the shape Root Cause #57 records,
+         * where `ORDER_PAYMENT` had exactly ONE caller and a buyer who navigated
+         * away could not get back.
+         */
+        ORDER_DISPUTE: (id) => `/user/orders/${id}/dispute`,
         NOTIFICATIONS: "/user/notifications",
         /** Plan §10 — claimed-coupons wallet (Active / Expired / Used tabs). */
         CLAIMED_COUPONS: "/user/coupons",
@@ -333,6 +356,8 @@ export const DEFAULT_ROUTE_MAP = {
         SUPPORT_NEW: "/user/support/new",
         SUPPORT_TICKET: (id) => `/user/support/${id}`,
         PRE_ORDERS: "/user/pre-orders",
+        /** D56 — the advertiser's own bookings and their moderation state. */
+        AD_BOOKINGS: "/user/ad-bookings",
         DIGITAL_CODES: "/user/digital-codes",
         PRIZE_DRAWS: "/user/prize-draws",
         EVENTS: "/user/events",
@@ -345,6 +370,8 @@ export const DEFAULT_ROUTE_MAP = {
     },
     STORE: {
         DASHBOARD: "/store",
+        /** A dashboard SECTION hub — see `USER.SECTION` for the derivation. */
+        SECTION: (slug) => `/store/sections/${slug}`,
         PRODUCTS: "/store/products",
         PRODUCTS_NEW: "/store/products/new",
         PRODUCTS_EDIT: (id) => `/store/products/${id}/edit`,
@@ -441,6 +468,18 @@ export const DEFAULT_ROUTE_MAP = {
     },
     ADMIN: {
         DASHBOARD: "/admin/dashboard",
+        /**
+         * The sectioned landing at `/admin` — what used to `redirect()` to
+         * `DASHBOARD`.
+         *
+         * 🛑 `DASHBOARD` is `/admin/dashboard` and stays a separate page: it is the
+         * metrics screen, and the sidebar's "Dashboard" entry points at it. This
+         * key is the index that lists the twelve sections. Collapsing the two would
+         * either bury the metrics or make the index unreachable.
+         */
+        HOME: "/admin",
+        /** A dashboard SECTION hub — see `USER.SECTION` for the derivation. */
+        SECTION: (slug) => `/admin/sections/${slug}`,
         SHIPMENTS: "/admin/shipments",
         /*
          * 🛑 There is deliberately NO `INVENTORY: "/admin/inventory"` key.
@@ -476,6 +515,15 @@ export const DEFAULT_ROUTE_MAP = {
         USER_DETAIL: (id) => `/admin/users/${id}`,
         USER_EDIT: (id) => `/admin/users/${id}/edit`,
         SITE: "/admin/site",
+        /*
+         * The integration kill switches — its OWN page, not a Site Settings tab.
+         *
+         * A switch that stops money has to be findable without hunting a tab
+         * strip, and this is the one surface where all four are visible together
+         * (which matters, because their off-states are not comparable: three stop
+         * something and one selects a working alternative).
+         */
+        INTEGRATIONS: "/admin/integrations",
         CAROUSEL: "/admin/carousel",
         CAROUSEL_NEW: "/admin/carousel/new",
         CAROUSEL_EDIT: (id) => `/admin/carousel/${id}/edit`,
@@ -563,6 +611,7 @@ export const DEFAULT_ROUTE_MAP = {
         ANALYTICS: "/admin/analytics",
         PAYOUTS: "/admin/payouts",
         PAYOUT_DETAIL: (id) => `/admin/payouts/${id}/view`,
+        PRICING: "/admin/pricing",
         AUDIT_LOG: "/admin/audit-log",
         /*
          * 🛑 MONEY_CASES is deliberately NOT under `/admin/maintenance/`.
@@ -601,6 +650,8 @@ export const DEFAULT_ROUTE_MAP = {
         ADS: "/admin/ads",
         ADS_NEW: "/admin/ads/new",
         ADS_EDIT: (id) => `/admin/ads/${id}/edit`,
+        /** D56 — the self-serve creative moderation queue. */
+        AD_BOOKINGS: "/admin/ads/bookings",
         NEWSLETTER: "/admin/newsletter",
         CONTACT: "/admin/contact",
         SESSIONS: "/admin/sessions",
@@ -644,6 +695,8 @@ export const DEFAULT_ROUTE_MAP = {
         TEAM_NEW: "/admin/team/new",
         TEAM_EDIT: (id) => `/admin/team/${id}/edit`,
         SUPPORT_TICKETS: "/admin/support-tickets",
+        /** Staff curation of the reasons a buyer can pick when disputing. */
+        DISPUTE_REASONS: "/admin/dispute-reasons",
         SUPPORT_TICKET_BY_ID: (id) => `/admin/support-tickets/${id}`,
         SCAMMERS: "/admin/scammers",
         SCAMMER_BY_ID: (id) => `/admin/scammers/${id}`,

package/dist/react/contexts/SessionContext.d.ts

@@ -40,7 +40,23 @@ export interface SessionUser {
     /** Orthogonal to isTester — unlocks admin-only checklist items and real /admin/** RBAC access. */
     canTestAdmin?: boolean;
     publicProfile?: FirestoreDocument;
-    stats?: FirestoreDocument;
+    /**
+     * Buyer activity counts, DERIVED by `/api/user/profile` — orders placed,
+     * auctions won, reviews written. Each is optional and `undefined` means the
+     * count could not be taken, which is NOT the same as zero: render nothing.
+     *
+     * 🛑 Not the `users/{uid}.stats` document field, which has no writer at all
+     * and holds seed literals. Do not "restore" it by reading the profile
+     * document here; see `getBuyerActivityStats`.
+     *
+     * Seller numbers are deliberately absent. This is the account holder's own
+     * record; what their store has sold belongs to the store.
+     */
+    stats?: {
+        totalOrders?: number;
+        auctionsWon?: number;
+        reviewsCount?: number;
+    };
     metadata?: FirestoreDocument;
     scamAwarenessAcknowledgedAt?: Date | null;
     /** RBAC permission keys granted to this user (from their role's permission set). */

package/dist/schemas/registry.d.ts

@@ -170,6 +170,7 @@ export declare const SCHEMAS: {
             category: import("zod").ZodString;
             tags: import("zod").ZodArray<import("zod").ZodString, "many">;
             isFeatured: import("zod").ZodBoolean;
+            isPinned: import("zod").ZodBoolean;
             status: import("zod").ZodEnum<["draft", "published", "archived"]>;
             publishedAt: import("zod").ZodOptional<import("zod").ZodUnion<[import("zod").ZodDate, import("zod").ZodString, import("zod").ZodObject<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
@@ -205,6 +206,7 @@ export declare const SCHEMAS: {
             authorId: string;
             authorName: string;
             readTimeMinutes: number;
+            isPinned: boolean;
             publishedAt?: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
@@ -258,6 +260,7 @@ export declare const SCHEMAS: {
             authorId: string;
             authorName: string;
             readTimeMinutes: number;
+            isPinned: boolean;
             publishedAt?: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough"> | undefined;
@@ -816,16 +819,16 @@ export declare const SCHEMAS: {
                 opacity?: number | undefined;
                 subtitle?: string | undefined;
             } | undefined;
+            settings?: {
+                height?: "medium" | "viewport" | "tall" | undefined;
+                autoplayDelayMs?: number | undefined;
+            } | undefined;
             analytics?: {
                 views: number;
                 lastViewed?: string | Date | import("zod").objectOutputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             } | undefined;
-            settings?: {
-                height?: "medium" | "viewport" | "tall" | undefined;
-                autoplayDelayMs?: number | undefined;
-            } | undefined;
             carouselId?: string | null | undefined;
         }, {
             id: string;
@@ -925,16 +928,16 @@ export declare const SCHEMAS: {
                 opacity?: number | undefined;
                 subtitle?: string | undefined;
             } | undefined;
+            settings?: {
+                height?: "medium" | "viewport" | "tall" | undefined;
+                autoplayDelayMs?: number | undefined;
+            } | undefined;
             analytics?: {
                 views: number;
                 lastViewed?: string | Date | import("zod").objectInputType<{
                     toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
                 }, import("zod").ZodTypeAny, "passthrough"> | undefined;
             } | undefined;
-            settings?: {
-                height?: "medium" | "viewport" | "tall" | undefined;
-                autoplayDelayMs?: number | undefined;
-            } | undefined;
             carouselId?: string | null | undefined;
         }>;
         readonly categories: import("zod").ZodObject<{
@@ -3061,6 +3064,7 @@ export declare const SCHEMAS: {
                 prizeRevealStatus?: "closed" | "open" | "pending" | "revealed" | undefined;
             }[] | undefined;
             bundleId?: string | undefined;
+            orderType?: string | undefined;
             prizeWon?: {
                 title: string;
                 images: string[];
@@ -3077,7 +3081,6 @@ export declare const SCHEMAS: {
                 bin: string;
             } | undefined;
             offerId?: string | undefined;
-            orderType?: string | undefined;
             isNonRefundable?: boolean | undefined;
             imageUrls?: string[] | undefined;
             refundFeeDeducted?: number | undefined;
@@ -3220,6 +3223,7 @@ export declare const SCHEMAS: {
                 prizeRevealStatus?: "closed" | "open" | "pending" | "revealed" | undefined;
             }[] | undefined;
             bundleId?: string | undefined;
+            orderType?: string | undefined;
             prizeWon?: {
                 title: string;
                 images: string[];
@@ -3236,7 +3240,6 @@ export declare const SCHEMAS: {
                 bin: string;
             } | undefined;
             offerId?: string | undefined;
-            orderType?: string | undefined;
             isNonRefundable?: boolean | undefined;
             imageUrls?: string[] | undefined;
             refundFeeDeducted?: number | undefined;
@@ -4151,13 +4154,13 @@ export declare const SCHEMAS: {
                 totalReviews: import("zod").ZodNumber;
                 averageRating: import("zod").ZodOptional<import("zod").ZodNumber>;
             }, "strip", import("zod").ZodTypeAny, {
-                itemsSold: number;
                 totalProducts: number;
+                itemsSold: number;
                 totalReviews: number;
                 averageRating?: number | undefined;
             }, {
-                itemsSold: number;
                 totalProducts: number;
+                itemsSold: number;
                 totalReviews: number;
                 averageRating?: number | undefined;
             }>>;
@@ -4296,8 +4299,8 @@ export declare const SCHEMAS: {
             location?: string | undefined;
             returnPolicy?: string | undefined;
             stats?: {
-                itemsSold: number;
                 totalProducts: number;
+                itemsSold: number;
                 totalReviews: number;
                 averageRating?: number | undefined;
             } | undefined;
@@ -4365,8 +4368,8 @@ export declare const SCHEMAS: {
             location?: string | undefined;
             returnPolicy?: string | undefined;
             stats?: {
-                itemsSold: number;
                 totalProducts: number;
+                itemsSold: number;
                 totalReviews: number;
                 averageRating?: number | undefined;
             } | undefined;
@@ -4521,7 +4524,7 @@ export declare const SCHEMAS: {
             updatedAt: string | Date | import("zod").objectOutputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough">;
-            category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+            category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
             priority: "normal" | "high" | "low" | "urgent";
             description: string;
             userId: string;
@@ -4564,7 +4567,7 @@ export declare const SCHEMAS: {
             updatedAt: string | Date | import("zod").objectInputType<{
                 toDate: import("zod").ZodFunction<import("zod").ZodTuple<[], import("zod").ZodUnknown>, import("zod").ZodDate>;
             }, import("zod").ZodTypeAny, "passthrough">;
-            category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+            category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
             priority: "normal" | "high" | "low" | "urgent";
             description: string;
             userId: string;
@@ -4891,6 +4894,7 @@ export declare const SCHEMAS: {
             publishedAt: import("zod").ZodString;
             authorName: import("zod").ZodString;
             isFeatured: import("zod").ZodBoolean;
+            isPinned: import("zod").ZodBoolean;
         }, "strip", import("zod").ZodTypeAny, {
             status: "published" | "draft" | "archived";
             title: string;
@@ -4904,6 +4908,7 @@ export declare const SCHEMAS: {
             excerpt: string;
             coverImage: string;
             authorName: string;
+            isPinned: boolean;
             metaTitle: string;
             metaDescription: string;
         }, {
@@ -4919,6 +4924,7 @@ export declare const SCHEMAS: {
             excerpt: string;
             coverImage: string;
             authorName: string;
+            isPinned: boolean;
             metaTitle: string;
             metaDescription: string;
         }>;

package/dist/security/pii-schemas.d.ts

@@ -29,7 +29,7 @@ export declare const USER_PII_INDEX_MAP: Record<string, string>;
 /** PII fields in the addresses subcollection */
 export declare const ADDRESS_PII_FIELDS: readonly ["fullName", "phone", "addressLine1", "addressLine2"];
 /** PII fields in orders (denormalized buyer/seller data) */
-export declare const ORDER_PII_FIELDS: readonly ["userName", "userEmail", "sellerEmail"];
+export declare const ORDER_PII_FIELDS: readonly ["userName", "userEmail", "sellerEmail", "deliveryFullName", "deliveryPhone", "deliveryAddressLine1", "deliveryAddressLine2", "deliveryLandmark", "deliveryAmendments[].fullName", "deliveryAmendments[].phone", "deliveryAmendments[].addressLine1", "deliveryAmendments[].addressLine2", "deliveryAmendments[].landmark"];
 /** PII fields in payouts */
 export declare const PAYOUT_PII_FIELDS: readonly ["sellerEmail", "upiId"];
 /** Blind-index mapping for queryable payout PII */

package/dist/security/pii-schemas.js

@@ -41,6 +41,51 @@ export const ORDER_PII_FIELDS = [
     "userName",
     "userEmail",
     "sellerEmail",
+    /*
+     * ── The delivery snapshot (Part 14) ──────────────────────────────────────
+     *
+     * 🛑 **CORRECTED 2026-10-23.** These were first written as flat keys on the
+     * argument that "`encryptPiiFields` is a flat top-level loop that never
+     * descends" — CLAUDE.md's wording, and it is FALSE. Read the function: it
+     * handles dotted paths (`lastMessage.body`, already live above) AND
+     * `array[].key` via `encryptInArray`, in both directions.
+     *
+     * Flat keys stay, on a smaller and true argument: city / state / pincode /
+     * country must remain unencrypted and QUERYABLE, so a single
+     * `deliveryAddress` object would be half-encrypted — and a half-encrypted
+     * object is the shape nobody can reason about at a glance. Flat keys make
+     * each field's treatment visible in this list.
+     *
+     * What the encryptor does NOT do is infer. A field is covered only if it is
+     * NAMED, in the right notation — and `"fullName"` does not cover
+     * `deliveryAmendments[].fullName`. That is the real failure mode, and what
+     * `audit-snapshot-integrity` R1 checks.
+     *
+     * 🛑 `shippingAddress` is deliberately NOT added. It is legacy free text on
+     * existing rows; encrypting the field now would encrypt it on the next
+     * write of an old order while every other old row stays plaintext, giving
+     * one field two formats and no way to tell which a given row holds.
+     * Forward-only means the new fields carry the protection.
+     *
+     * city / state / pincode / country are absent on purpose — they decide tax
+     * and serviceability and must stay QUERYABLE.
+     */
+    "deliveryFullName",
+    "deliveryPhone",
+    "deliveryAddressLine1",
+    "deliveryAddressLine2",
+    "deliveryLandmark",
+    /*
+     * The amendment array, in the `array[].key` notation `encryptInArray`
+     * implements. Declared HERE rather than encrypted by hand at the write
+     * site: the repository's write hook already runs this list, and a second
+     * mechanism doing the same job is the drift this codebase keeps paying for.
+     */
+    "deliveryAmendments[].fullName",
+    "deliveryAmendments[].phone",
+    "deliveryAmendments[].addressLine1",
+    "deliveryAmendments[].addressLine2",
+    "deliveryAmendments[].landmark",
 ];
 /** PII fields in payouts */
 export const PAYOUT_PII_FIELDS = ["sellerEmail", "upiId"];

package/dist/server-entry.d.ts

@@ -68,7 +68,7 @@ export { renderScamOg, renderScamOgImage, type ScamOgData, getScammerForDetail,
 export { getCategoryForDetail, listRootCategories, listFeaturedCategories, listMenuCategories, getCategoryTree, listSitemapCategories, CATEGORIES_PAGE_SIZE, CATEGORIES_ROOT_TIER, CATEGORIES_MAX_DEPTH, CATEGORIES_SITEMAP_LIMIT, CATEGORIES_FEATURED_LIMIT, CATEGORIES_MENU_LIMIT, } from "./_internal/server/features/categories/index";
 export { getGroupedListingForDetail, getGroupedListingWithItems, listGroupedListings, listFeaturedGroupedListings, listSitemapGroupedListings, getGroupsForProduct, getGroupsWithItemsForProduct, GROUPED_LISTINGS_PAGE_SIZE, GROUPED_LISTINGS_FEATURED_LIMIT, GROUPED_LISTINGS_SITEMAP_LIMIT, buildGroupedListingMetadata, renderGroupedListingOg, type GroupedListingWithItems, type ListGroupedListingsParams, type SitemapGroupedListing, type GroupedListingMetadataOptions, } from "./_internal/server/features/grouped/index";
 export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOrderAction, previewCheckoutPricing, resolveShippingCost, formatShippingAddress, CHECKOUT_DEFAULT_COMMISSIONS, CHECKOUT_PAYMENT_METHODS, type CreateCheckoutOrderInput, type VerifyAndPlaceGatewayOrderInput, type CheckoutOrderResult, type CheckoutPaymentMethod, type CheckoutPricingPreviewInput, type CheckoutPricingPreview, } from "./_internal/server/features/checkout/index";
-export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, resolvePointsTender, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, pointsBaseForGroup, resolvePointsTender, type GroupGstSummary, type GstRateSlice, } from "./_internal/shared/checkout/order-math";
 export { computeGroupCouponDiscount, computeCartCouponDiscount, type GroupCouponDiscountResult, type CartCouponDiscountResult, } from "./_internal/shared/checkout/coupon-discount";
 export { refundCapacity, refundableBase, committedRefundTotal, platformFeeWithheld, wouldBeFullRefund, MONEY_EPSILON, type RefundCapacity, type RefundableOrderLike, } from "./_internal/shared/checkout/refundable-base";
 export { processRefundAction, type ProcessRefundInput, } from "./_internal/server/features/refunds/actions";

package/dist/server-entry.js

@@ -113,7 +113,16 @@ export { createCheckoutOrderAction, attachPaymentAction, verifyAndPlaceGatewayOr
 // BEFORE the route can get it wrong rather than after — which is the only
 // difference between this entry and the three defects recorded in the comment
 // above (D37, D38, C0c defect 1).
-export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, resolvePointsTender, } from "./_internal/shared/checkout/order-math.js";
+export { unitPriceFor, lineTotalFor, sumGroupGst, computePreOrderDepositAmount, allocatePointsAcrossGroups, 
+/*
+ * The FIFTH, and it is the same story one more time: the route already
+ * imported `pointsBaseForGroup` and the import did not resolve, because the
+ * symbol was only ever reachable inside appkit. The points tender is
+ * computed on a BASE that excludes what points may not be spent on, and a
+ * consumer that cannot reach that function has to re-derive it — which is
+ * precisely how the four defects named above happened.
+ */
+pointsBaseForGroup, resolvePointsTender, } from "./_internal/shared/checkout/order-math.js";
 /*
  * The coupon discount, exported for the SAME reason `sumGroupGst` above was —
  * and it is the third defect of that exact shape in this one route.

package/dist/server.d.ts

@@ -429,6 +429,8 @@ export { piiBlindIndex } from "./security/index";
 export { piiIndicesFor } from "./security/index";
 export { reserveUserSlug, userSlugBase, USER_SLUGS_COLLECTION } from "./features/auth/actions/user-slug";
 export { resolveProfileUser } from "./features/auth/actions/profile-actions";
+export { getBuyerActivityStats, getProfileStats, } from "./features/auth/actions/profile-actions";
+export type { BuyerActivityStats } from "./features/auth/actions/profile-actions";
 export { getPiiConfigError } from "./security/index";
 export { encryptPayoutDetails } from "./security/index";
 export { decryptPayoutDetails } from "./security/index";
@@ -574,7 +576,7 @@ export { REFUND_COPY } from "./_internal/shared/features/orders/refund-copy";
 export { RETURN_REASON, FINAL_SALE_EXEMPT_REASONS, RETURN_REASON_LABEL, RETURN_REASON_GROUP_LABEL, isFinalSaleExempt, isReturnReason, selectableReturnReasons, } from "./_internal/shared/features/orders/return-reasons";
 export type { ReturnReason } from "./_internal/shared/features/orders/return-reasons";
 export { INTEGRATIONS, INTEGRATION_ORDER, readIntegrationStates, integrationPatch, allIntegrationsPatch, } from "./_internal/shared/features/admin/integrations";
-export type { IntegrationId, IntegrationDescriptor, IntegrationState, } from "./_internal/shared/features/admin/integrations";
+export type { IntegrationId, IntegrationDescriptor, IntegrationState, IntegrationPatch, } from "./_internal/shared/features/admin/integrations";
 export { draftToProductInput, productToDraft, } from "./features/seller/utils/product-draft-mapping";
 export { RETURN_CUSTODY_STATES, RETURN_CUSTODY_COPY, isTerminalCustody, canAdvanceCustody, nextCustodyState, custodyOwner, isActionableBy, } from "./_internal/shared/features/returns/custody";
 export type { ReturnCustodyState } from "./_internal/shared/features/returns/custody";
@@ -613,3 +615,29 @@ export { financialYearLabel, formatSeriesNumber, INVOICE_PREFIX, CREDIT_NOTE_PRE
 export type { InvoiceCounterDocument, InvoiceAllocationDocument, InvoiceSeriesKind, } from "./features/invoicing/schemas/firestore";
 export { buildGstr1Export, gstr1ToCsv, type Gstr1Export, type Gstr1Row, } from "./_internal/server/features/invoicing/gstr1";
 export { quoteSharedPurchase, countDestinations, type SharedPurchaseRates, type SharedPurchaseQuote, type SharedPurchaseQuoteInput, } from "./_internal/shared/features/shipping/shared-purchase";
+export { RATE_REGISTRY, RATE_TIER_ORDER, rateByPath, canEditRate, rejectRateChange, type RateDescriptor, type RateTier, type RateUnit, type RateChange, } from "./_internal/shared/features/pricing/rate-registry";
+export { applyRateChange, RATE_CHANGE_LOG_MAX, type ApplyRateChangeInput, type ApplyRateChangeResult, } from "./_internal/server/features/pricing/actions";
+export { SHARED_PURCHASE_MAX_MEMBERS, rejectCoordination, destinationIds, type CoordinationMember, type OfferCoordination, } from "./_internal/shared/features/offers/coordination";
+export { assertOwnedAddresses } from "./_internal/server/features/offers/destinations";
+export { checkDestinations, assertAllServiceable, planParcels, type DestinationCheck, type ParcelPlan, } from "./_internal/server/features/shipping/book-split";
+export { snapshotDeliveryAddress, deliveryPartyFor, placeOfSupplyFrom, type DeliverySnapshot, type DeliveryParty, } from "./_internal/shared/features/orders/delivery-snapshot";
+export { amendDeliveryAddress, revealAmendments, DELIVERY_AMENDMENT_MAX, type AmendDeliveryInput, } from "./_internal/server/features/orders/amend-delivery";
+export { bookShipment, type BookShipmentInput, type BookShipmentResult, } from "./_internal/server/features/shipping/book";
+export { journalRepository, JournalRepository, JOURNAL_PERIOD_SCAN_LIMIT } from "./features/ledger/repository/journal.repository";
+export { assertBalanced, buildReversal, resolvePostingPeriod, periodOf, UnbalancedEntryError, BALANCE_TOLERANCE, type PostingInput, type BalancedPosting, } from "./_internal/shared/features/ledger/posting";
+export { trialBalance, profitAndLoss, signedBalance, type TrialBalance, type ProfitAndLoss, type AccountTotals, } from "./_internal/shared/features/ledger/reports";
+export { ACCOUNT, orderPlacedPosting, settlementPosting, payoutPosting, refundPosting, type OrderPostingInput, type SettlementPostingInput, type PayoutPostingInput, type RefundPostingInput, expensePosting, type ExpensePostingInput, } from "./_internal/shared/features/ledger/rules";
+export { VENDORS_COLLECTION, EXPENSES_COLLECTION, EXPENSE_FIELDS, type VendorDocument, type ExpenseDocument, type ExpenseCategory, } from "./features/ledger/schemas/expenses";
+export { BALANCE_WINDOW_DAYS, balanceDueOn, openBalanceCollection, submitBalanceProof, reviewBalanceProof, } from "./_internal/server/features/orders/balance";
+export { reserveStock, releaseReservation, releaseReservationsForHolder, consumeReservation, expireDueReservations, activeReservationsForProduct, } from "./_internal/server/features/inventory/reservations";
+export type { ReserveStockInput } from "./_internal/server/features/inventory/reservations";
+export { RESERVATION_DEFAULT_TTL_HOURS, RESERVATION_MAX_TTL_HOURS, RESERVATION_HOLDER_KINDS, RESERVATION_STATUSES, STOCK_RESERVATION_COLLECTION, isReservationActive, } from "./features/inventory/schemas/stock-reservation";
+export type { ReservationHolderKind, ReservationStatus, StockReservationDocument, } from "./features/inventory/schemas/stock-reservation";
+export { assertCheckoutValueOtp } from "./_internal/server/features/checkout/value-otp-gate";
+export type { CheckoutValueOtpGateInput } from "./_internal/server/features/checkout/value-otp-gate";
+export { bookAdSlot, moderateAdCreative, resubmitAdCreative, cancelAdBooking, releaseAdSlot, liveBookingForPlacement, pendingAdBookings, adBookingsForAdvertiser, adSlotOffers, } from "./_internal/server/features/ads/booking";
+export type { BookAdSlotInput, AdSlotOffer } from "./_internal/server/features/ads/booking";
+export { AD_BOOKING_COLLECTION, AD_BOOKING_PAYMENT_STATES, AD_MODERATION_STATES, adBookingId, adPeriodOf, adPeriodStart, adPeriodEnd, isAdPeriod, isAdBookingLive, } from "./features/ads/schemas/firestore";
+export type { AdBookingDocument, AdBookingCreative, AdBookingPaymentState, AdModerationState, AdPeriod, } from "./features/ads/schemas/firestore";
+export { getDashboardHubData } from "./_internal/server/features/dashboard/data";
+export type { DashboardHubData } from "./_internal/server/features/dashboard/data";

package/dist/server.js

@@ -1327,6 +1327,7 @@ export { piiBlindIndex } from "./security/index.js";
 export { piiIndicesFor } from "./security/index.js";
 export { reserveUserSlug, userSlugBase, USER_SLUGS_COLLECTION } from "./features/auth/actions/user-slug.js";
 export { resolveProfileUser } from "./features/auth/actions/profile-actions.js";
+export { getBuyerActivityStats, getProfileStats, } from "./features/auth/actions/profile-actions.js";
 export { getPiiConfigError } from "./security/index.js";
 export { encryptPayoutDetails } from "./security/index.js";
 export { decryptPayoutDetails } from "./security/index.js";
@@ -1676,3 +1677,160 @@ export { buildGstr1Export, gstr1ToCsv, } from "./_internal/server/features/invoi
  * settings read; the rates are passed in snapshotted.
  */
 export { quoteSharedPurchase, countDestinations, } from "./_internal/shared/features/shipping/shared-purchase.js";
+/*
+ * [SERVER-ONLY] The pricing registry and its one write path.
+ *
+ * 🛑 The REGISTRY is pure data with no Firestore and no `node:` import, so it
+ * could sit in the main barrel — and deliberately does not. Its only consumer
+ * outside appkit is `/api/admin/pricing`, and putting it in `index.ts` would
+ * add sixteen descriptors and four symbols to every client bundle that imports
+ * anything at all, to serve one route (Root Cause #18 — a re-export is a
+ * public API contract, not a convenience).
+ *
+ * `applyRateChange` belongs here regardless: it reaches firebase-admin.
+ */
+export { RATE_REGISTRY, RATE_TIER_ORDER, rateByPath, canEditRate, rejectRateChange, } from "./_internal/shared/features/pricing/rate-registry.js";
+export { applyRateChange, RATE_CHANGE_LOG_MAX, } from "./_internal/server/features/pricing/actions.js";
+/*
+ * [SERVER-ONLY] Coordinated purchase — a SPECIALISED OFFER, not a new flow.
+ *
+ * `assertOwnedAddresses` is the one piece that must run server-side: a
+ * destination is a REFERENCE, and an id is guessable in a way an address is
+ * not, so an unverified one ships a parcel to a stranger's house with nothing
+ * erroring. The shared half (the member shape, the member-count rule) is pure
+ * and could sit in the main barrel — it stays here beside its checker so a
+ * caller cannot reach for one without meeting the other.
+ */
+export { SHARED_PURCHASE_MAX_MEMBERS, rejectCoordination, destinationIds, } from "./_internal/shared/features/offers/coordination.js";
+export { assertOwnedAddresses } from "./_internal/server/features/offers/destinations.js";
+/*
+ * S5a — N destinations is N parcels, so N carrier quotes.
+ *
+ * 🛑 `checkDestinations` + `assertAllServiceable` are a PRE-FLIGHT and are
+ * exported as a pair for that reason: booking as you go and failing on the
+ * fourth leaves three parcels the carrier has already accepted and the
+ * coordinator cannot undo. It is not a transaction — a booking has no
+ * rollback — it just moves the common failure to the point where rolling
+ * back is still free.
+ */
+export { checkDestinations, assertAllServiceable, planParcels, } from "./_internal/server/features/shipping/book-split.js";
+/*
+ * [SERVER-ONLY] Part 14 — the delivery snapshot and its corrections.
+ *
+ * `amendDeliveryAddress` is server-only (Firestore + the addresses
+ * repository). The pure readers ship with it rather than from the main
+ * barrel so a caller cannot reach `deliveryPartyFor` without the module that
+ * explains why it reads the amendment while `placeOfSupplyFrom` reads the
+ * snapshot — getting those two the wrong way round sends a parcel to the old
+ * address, or restates tax on a filed invoice.
+ */
+export { snapshotDeliveryAddress, deliveryPartyFor, placeOfSupplyFrom, } from "./_internal/shared/features/orders/delivery-snapshot.js";
+export { amendDeliveryAddress, revealAmendments, DELIVERY_AMENDMENT_MAX, } from "./_internal/server/features/orders/amend-delivery.js";
+/*
+ * [SERVER-ONLY] Part 1′ — parcel booking.
+ *
+ * 🛑 Exported for the ENQUEUE route only. The booking itself runs in the
+ * `bookShipment` job runner, because a carrier call on a 10s sync ceiling
+ * times out in the one way that cannot be retried safely: the carrier may
+ * have accepted, so a retry double-books and a non-retry leaves a parcel
+ * nobody collects.
+ */
+export { bookShipment, } from "./_internal/server/features/shipping/book.js";
+/*
+ * [SERVER-ONLY] Part 4 — the double-entry books.
+ *
+ * 🛑 The repository is server-only (Firestore), and the posting rules ship
+ * beside it rather than from the main barrel even though they are pure: a
+ * caller who can reach `assertBalanced` without reaching `journalRepository`
+ * can compute a balanced entry and write it some other way, which is exactly
+ * the "every entry is machine-generated through one path" constraint the
+ * whole design rests on. Same stance `assertOwnedAddresses` takes.
+ *
+ * 🛑 The LEDGER IS A PROJECTION. Orders, payouts and expenses are truth —
+ * never read a balance to make an operational decision.
+ */
+export { journalRepository, JournalRepository, JOURNAL_PERIOD_SCAN_LIMIT } from "./features/ledger/repository/journal.repository.js";
+export { assertBalanced, buildReversal, resolvePostingPeriod, periodOf, UnbalancedEntryError, BALANCE_TOLERANCE, } from "./_internal/shared/features/ledger/posting.js";
+export { trialBalance, profitAndLoss, signedBalance, } from "./_internal/shared/features/ledger/reports.js";
+/*
+ * The per-event posting rules. These are WHERE the "every entry is
+ * machine-generated" constraint lives — a caller posts an order by handing
+ * `orderPlacedPosting(order)` to `journalRepository.post`, never by writing
+ * legs. A backwards entry balances, so nothing downstream would object;
+ * `verify-posting-rules` R7 checks the SIDES, with controls proving it
+ * catches a credited bank, an un-reclaimed refund GST and an inverted
+ * output-GST liability.
+ */
+export { ACCOUNT, orderPlacedPosting, settlementPosting, payoutPosting, refundPosting, expensePosting, } from "./_internal/shared/features/ledger/rules.js";
+/*
+ * Vendors and expenses. `ShipmentDocument.supplierId` joins to a vendor row;
+ * `supplierName` stays as typed, because deriving the name on read would let
+ * a vendor rename rewrite what every past shipment says it was bought from.
+ */
+export { VENDORS_COLLECTION, EXPENSES_COLLECTION, EXPENSE_FIELDS, } from "./features/ledger/schemas/expenses.js";
+/*
+ * [SERVER-ONLY] D55 — the pre-order balance collector.
+ *
+ * `balanceDue` has been computed and rendered since Part 2 with nothing to
+ * collect it. These three are the whole collection path: the seller opens it
+ * when stock lands, the buyer submits a proof, staff review it. Manual only —
+ * the auto path is blocked on RBI mandate requirements, not on effort.
+ */
+export { BALANCE_WINDOW_DAYS, balanceDueOn, openBalanceCollection, submitBalanceProof, reviewBalanceProof, } from "./_internal/server/features/orders/balance.js";
+/*
+ * [SERVER-ONLY] Stock reservation with a TTL.
+ *
+ * A hold on units that is NOT an order. The only mechanism before this was
+ * `onOrderCreate`'s decrement plus `pendingOrderTimeout`'s 15-minute restore,
+ * both keyed to an order — which cannot serve a multi-day shared purchase
+ * without either starting a payment clock on day one or letting an ordinary
+ * buyer take the item out from under the arrangement.
+ *
+ * 🛑 Every one of these moves the reservation row and `availableQuantity`
+ * inside ONE transaction. A caller that writes either half itself has
+ * reintroduced exactly the drift this primitive exists to remove.
+ */
+export { reserveStock, releaseReservation, releaseReservationsForHolder, consumeReservation, expireDueReservations, activeReservationsForProduct, } from "./_internal/server/features/inventory/reservations.js";
+export { RESERVATION_DEFAULT_TTL_HOURS, RESERVATION_MAX_TTL_HOURS, RESERVATION_HOLDER_KINDS, RESERVATION_STATUSES, STOCK_RESERVATION_COLLECTION, isReservationActive, } from "./features/inventory/schemas/stock-reservation.js";
+/*
+ * [SERVER-ONLY] The high-value checkout OTP gate.
+ *
+ * 🛑 It takes the AMOUNT it judges. There were two hand-rolled copies of
+ * this rule — `createOrderForGroup` summing the cart, the gateway route
+ * using its own `subtotalRs` — which is Root Cause #75's shape, and they
+ * had already drifted on what they measured.
+ *
+ * Taking the amount is also Part 6's prerequisite: `otpCheckoutThreshold`
+ * is per CHECKOUT, so an N-party arrangement clears ₹12,000 in three
+ * ₹4,000 pieces with no OTP unless it can present its own total.
+ */
+export { assertCheckoutValueOtp } from "./_internal/server/features/checkout/value-otp-gate.js";
+/*
+ * [SERVER-ONLY] D56 — self-serve ad bookings.
+ *
+ * 🛑 Availability is a DOCUMENT COLLISION, never a query. The booking id
+ * is `${placementId}__${period}` and creation uses `tx.create`, so a second
+ * booking of the same slot fails on an existing document inside its own
+ * transaction. Query-then-write would let two concurrent requests both read
+ * "free" and sell the slot twice, with nothing erroring.
+ *
+ * 🛑 Flat fee per period, explicitly NOT CPM — impression counting is a
+ * write per page view, which is the cost pattern that suspended this
+ * project (Root Cause #104).
+ */
+export { bookAdSlot, moderateAdCreative, resubmitAdCreative, cancelAdBooking, releaseAdSlot, liveBookingForPlacement, pendingAdBookings, adBookingsForAdvertiser, adSlotOffers, } from "./_internal/server/features/ads/booking.js";
+export { AD_BOOKING_COLLECTION, AD_BOOKING_PAYMENT_STATES, AD_MODERATION_STATES, adBookingId, adPeriodOf, adPeriodStart, adPeriodEnd, isAdPeriod, isAdBookingLive, } from "./features/ads/schemas/firestore.js";
+/*
+ * The dashboard hub's data, for `/admin`, `/store` and `/user` and their
+ * `sections/[section]` pages.
+ *
+ * 🛑 Exported because **there is no `./_internal/*` subpath and there must not
+ * be** — four consumer pages imported
+ * `@mohasinac/appkit/_internal/server/features/dashboard/data` directly and it
+ * resolved to nothing, so `/admin` and all three section indexes were a build
+ * error waiting for the first consumer typecheck that could see it. `_internal`
+ * is unpublished on purpose (audit-violations enforces the boundary); the
+ * server entry is the sanctioned way through, exactly as the checkout maths
+ * above reaches a consumer route.
+ */
+export { getDashboardHubData } from "./_internal/server/features/dashboard/data.js";