@mohasinac/appkit 4.70.0 → 4.71.2

package/dist/_internal/server/jobs/core/weeklyPayoutEligibility.js

@@ -2,7 +2,7 @@
  * Core: weekly Saturday sweep — converts delivered orders with
  * `payoutStatus=eligible` into pending payout documents grouped by seller.
  */
-import { storeRepository, userRepository, orderRepository, payoutRepository, siteSettingsRepository, } from "../../../../repositories/index.js";
+import { storeRepository, userRepository, orderRepository, payoutRepository, siteSettingsRepository, sellerProfileRepository, } from "../../../../repositories/index.js";
 import { BATCH_LIMIT } from "../handlers/messages.js";
 import { getDefaultCurrency } from "../../../../core/baseline-resolver.js";
 import { computePayoutDeduction } from "../../../shared/fees/calculator.js";
@@ -72,6 +72,7 @@ export async function runWeeklyPayoutEligibility(ctx) {
     for (const [storeId, orders] of byStore.entries()) {
         const store = await storeRepository.findBySlug(storeId);
         const seller = store ? await userRepository.findById(store.ownerId) : null;
+        const sellerProfile = store ? await sellerProfileRepository.findById(store.ownerId) : null;
         if (!store || !seller) {
             ctx.logger.warn(`Store/seller ${storeId} not found — skipping ${orders.length} order(s)`);
             continue;
@@ -105,6 +106,7 @@ export async function runWeeklyPayoutEligibility(ctx) {
          * HMAC'd `sellerEmailIndex` could never match a real lookup.
          */
         const sellerPlain = userRepository.revealUser(seller);
+        const sellerProfilePlain = sellerProfile ? sellerProfileRepository.revealProfile(sellerProfile) : null;
         const payoutInput = {
             /* Every row this job writes settles a SELLER liability. */
             payeeType: "store",
@@ -123,14 +125,14 @@ export async function runWeeklyPayoutEligibility(ctx) {
             gstRate: commissions.gstPercent / 100,
             currency: defaultCurrency,
             status: "pending",
-            paymentMethod: sellerPlain.payoutDetails?.method === "upi" ? "upi" : "bank_transfer",
-            upiId: sellerPlain.payoutDetails?.method === "upi" ? sellerPlain.payoutDetails.upiId : undefined,
-            bankAccount: sellerPlain.payoutDetails?.method === "bank_transfer" && sellerPlain.payoutDetails.bankAccount
+            paymentMethod: sellerProfilePlain?.payoutDetails?.method === "upi" ? "upi" : "bank_transfer",
+            upiId: sellerProfilePlain?.payoutDetails?.method === "upi" ? sellerProfilePlain.payoutDetails.upiId : undefined,
+            bankAccount: sellerProfilePlain?.payoutDetails?.method === "bank_transfer" && sellerProfilePlain.payoutDetails.bankAccount
                 ? {
-                    accountHolderName: sellerPlain.payoutDetails.bankAccount.accountHolderName,
-                    accountNumberMasked: sellerPlain.payoutDetails.bankAccount.accountNumberMasked,
-                    ifscCode: sellerPlain.payoutDetails.bankAccount.ifscCode,
-                    bankName: sellerPlain.payoutDetails.bankAccount.bankName,
+                    accountHolderName: sellerProfilePlain.payoutDetails.bankAccount.accountHolderName,
+                    accountNumberMasked: sellerProfilePlain.payoutDetails.bankAccount.accountNumberMasked,
+                    ifscCode: sellerProfilePlain.payoutDetails.bankAccount.ifscCode,
+                    bankName: sellerProfilePlain.payoutDetails.bankAccount.bankName,
                 }
                 : undefined,
             notes: `Automated weekly payout — ${orders.length} delivered order(s)`,

package/dist/_internal/server/jobs/handlers/clearanceExpiryReveal.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduleHandler } from "../runtime/types";
+export declare const clearanceExpiryRevealHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/clearanceExpiryReveal.js

@@ -0,0 +1,2 @@
+import { runClearanceExpiryReveal } from "../core/clearanceExpiryReveal.js";
+export const clearanceExpiryRevealHandler = runClearanceExpiryReveal;

package/dist/_internal/server/jobs/handlers/clearanceSoldOutReveal.d.ts

@@ -0,0 +1,3 @@
+import type { FirestoreTriggerHandler } from "../runtime/types";
+import { type ClearanceStockSnapshot } from "../core/clearanceSoldOutReveal";
+export declare const clearanceSoldOutRevealHandler: FirestoreTriggerHandler<ClearanceStockSnapshot, ClearanceStockSnapshot>;

package/dist/_internal/server/jobs/handlers/clearanceSoldOutReveal.js

@@ -0,0 +1,4 @@
+import { handleClearanceSoldOut, } from "../core/clearanceSoldOutReveal.js";
+export const clearanceSoldOutRevealHandler = async (event, ctx) => {
+    await handleClearanceSoldOut({ productId: event.params.productId, before: event.before, after: event.after }, ctx);
+};

package/dist/_internal/server/jobs/handlers/collectorDropSettlement.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduleHandler } from "../runtime/types";
+export declare const collectorDropSettlementHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/collectorDropSettlement.js

@@ -0,0 +1,2 @@
+import { runCollectorDropSettlement } from "../core/collectorDropSettlement.js";
+export const collectorDropSettlementHandler = runCollectorDropSettlement;

package/dist/_internal/server/jobs/handlers/index.d.ts

@@ -3,7 +3,7 @@
  * adapter (Firebase Functions, local cron, etc.).
  *
  * S4 batch 1: promotions, onOrderCreate, onOrderStatusChange,
- *             auctionSettlement, autoPayoutEligibility, couponExpiry, offerExpiry
+ *             collectorDropSettlement, autoPayoutEligibility, couponExpiry, offerExpiry
  * S5 batch 2: onReviewWrite, cartPrune, notificationPrune,
  *             dailyDataCleanup, countersReconcile, cleanupRtdbEvents
  */
@@ -14,7 +14,7 @@ export { cartPruneHandler } from "./cartPrune";
 export { notificationPruneHandler } from "./notificationPrune";
 export { dailyDataCleanupHandler } from "./dailyDataCleanup";
 export { cleanupRtdbEventsHandler } from "./cleanupRtdbEvents";
-export { auctionSettlementHandler } from "./auctionSettlement";
+export { collectorDropSettlementHandler } from "./collectorDropSettlement";
 export { autoPayoutEligibilityHandler } from "./autoPayoutEligibility";
 export { countersReconcileHandler } from "./countersReconcile";
 export { paymentReconcileHandler } from "./paymentReconcile";
@@ -51,9 +51,9 @@ export { countersReconcileNowHandler, type CountersReconcileNowResult, } from ".
 export { storeAnalyticsHandler, type StoreAnalyticsInput, type StoreAnalyticsResult, } from "./storeAnalytics";
 export { listingProcessorHandler, supportedListingCollections, type ListingRequestBody, type ListingResponseBody, } from "./listingProcessor";
 export { bundleStockSyncHandler } from "./bundleStockSync";
-export { onPrizeDrawPaymentConfirmedHandler } from "./onPrizeDrawPaymentConfirmed";
-export { prizeDrawSoldOutRevealHandler } from "./prizeDrawSoldOutReveal";
-export { prizeDrawExpiryRevealHandler } from "./prizeDrawExpiryReveal";
+export { onClearancePaymentConfirmedHandler } from "./onClearancePaymentConfirmed";
+export { clearanceSoldOutRevealHandler } from "./clearanceSoldOutReveal";
+export { clearanceExpiryRevealHandler } from "./clearanceExpiryReveal";
 export { onProductStockChangeHandler } from "./onProductStockChange";
 export { triggerEventRaffleHandler } from "./triggerEventRaffle";
 export { assignSpinPrizeHandler } from "./assignSpinPrize";
@@ -70,3 +70,4 @@ export { onShipmentLotWriteHandler, onShipmentHeaderWriteHandler } from "./onShi
 export { onShipmentDeletedHandler } from "./onShipmentDeleted";
 export { catalogueImageStalenessReminderHandler } from "./catalogueImageStalenessReminder";
 export { onCatalogueSubmittedForApprovalHandler } from "./onCatalogueSubmittedForApproval";
+export { stickerTraceSweepHandler } from "./stickerTraceSweep";

package/dist/_internal/server/jobs/handlers/index.js

@@ -3,7 +3,7 @@
  * adapter (Firebase Functions, local cron, etc.).
  *
  * S4 batch 1: promotions, onOrderCreate, onOrderStatusChange,
- *             auctionSettlement, autoPayoutEligibility, couponExpiry, offerExpiry
+ *             collectorDropSettlement, autoPayoutEligibility, couponExpiry, offerExpiry
  * S5 batch 2: onReviewWrite, cartPrune, notificationPrune,
  *             dailyDataCleanup, countersReconcile, cleanupRtdbEvents
  */
@@ -14,7 +14,7 @@ export { cartPruneHandler } from "./cartPrune.js";
 export { notificationPruneHandler } from "./notificationPrune.js";
 export { dailyDataCleanupHandler } from "./dailyDataCleanup.js";
 export { cleanupRtdbEventsHandler } from "./cleanupRtdbEvents.js";
-export { auctionSettlementHandler } from "./auctionSettlement.js";
+export { collectorDropSettlementHandler } from "./collectorDropSettlement.js";
 export { autoPayoutEligibilityHandler } from "./autoPayoutEligibility.js";
 export { countersReconcileHandler } from "./countersReconcile.js";
 export { paymentReconcileHandler } from "./paymentReconcile.js";
@@ -51,14 +51,14 @@ export { countersReconcileNowHandler, } from "./countersReconcileNow.js";
 export { storeAnalyticsHandler, } from "./storeAnalytics.js";
 export { listingProcessorHandler, supportedListingCollections, } from "./listingProcessor.js";
 // SB1-L (S7-PrizeDraws) — bundle sync, event raffles, and spin-the-wheel.
-// Prize-draw reveal itself was redesigned to a fully-automatic model — see
-// prizeDrawAssignWinner.ts (shared core), onPrizeDrawPaymentConfirmed
-// (instant mode), prizeDrawSoldOutReveal (scheduled mode, sellout half), and
-// prizeDrawExpiryReveal (scheduled mode, expiry half) below.
+// Clearance reveal itself was redesigned to a fully-automatic model — see
+// clearanceAssignWinner.ts (shared core), onClearancePaymentConfirmed
+// (instant mode), clearanceSoldOutReveal (scheduled mode, sellout half), and
+// clearanceExpiryReveal (scheduled mode, expiry half) below.
 export { bundleStockSyncHandler } from "./bundleStockSync.js";
-export { onPrizeDrawPaymentConfirmedHandler } from "./onPrizeDrawPaymentConfirmed.js";
-export { prizeDrawSoldOutRevealHandler } from "./prizeDrawSoldOutReveal.js";
-export { prizeDrawExpiryRevealHandler } from "./prizeDrawExpiryReveal.js";
+export { onClearancePaymentConfirmedHandler } from "./onClearancePaymentConfirmed.js";
+export { clearanceSoldOutRevealHandler } from "./clearanceSoldOutReveal.js";
+export { clearanceExpiryRevealHandler } from "./clearanceExpiryReveal.js";
 // SB-UNI-V — Firestore onWrite trigger for product stock changes (recomputes
 // bundleStockStatus on categoryType:"bundle" rows + activeMemberCount on
 // groupedListings).
@@ -86,3 +86,5 @@ export { onShipmentDeletedHandler } from "./onShipmentDeleted.js";
 // Personal Catalogue (Feature B) — freshness reminder + admin approval-request notification
 export { catalogueImageStalenessReminderHandler } from "./catalogueImageStalenessReminder.js";
 export { onCatalogueSubmittedForApprovalHandler } from "./onCatalogueSubmittedForApproval.js";
+// Sticker sheet tracer — stuck-run sweep (queued/running past 20 minutes with no terminal write)
+export { stickerTraceSweepHandler } from "./stickerTraceSweep.js";

package/dist/_internal/server/jobs/handlers/messages.d.ts

@@ -4,13 +4,13 @@
  * Lifted verbatim from functions/src/constants/messages.ts so the handlers
  * can live in appkit without depending on the consumer's functions/ tree.
  */
-export declare const AUCTION_MESSAGES: {
+export declare const COLLECTOR_DROP_MESSAGES: {
     WON_TITLE: string;
     WON_MESSAGE: (productTitle: string, currency: string, amount: number) => string;
     LOST_TITLE: string;
     LOST_MESSAGE: (productTitle: string) => string;
     NO_BIDS_LOG: (productId: string) => string;
-    /** CTA on the winner's notification — links into the auction checkout lane. */
+    /** CTA on the winner's notification — links into the collector drop checkout lane. */
     WON_ACTION_LABEL: string;
     RESERVE_NOT_MET_TITLE: string;
     RESERVE_NOT_MET_MESSAGE: (productTitle: string, currency: string, highestBid: number, reservePrice: number) => string;
@@ -24,8 +24,8 @@ export declare const BID_MESSAGES: {
     BUY_NOW_HELD_ACTION: string;
     BUY_NOW_LAPSED_TITLE: string;
     BUY_NOW_LAPSED_MESSAGE: (productTitle: string) => string;
-    BUY_NOW_AUCTION_ENDED_TITLE: string;
-    BUY_NOW_AUCTION_ENDED_MESSAGE: (productTitle: string) => string;
+    BUY_NOW_COLLECTOR_DROP_ENDED_TITLE: string;
+    BUY_NOW_COLLECTOR_DROP_ENDED_MESSAGE: (productTitle: string) => string;
 };
 export declare const ORDER_MESSAGES: {
     CANCELLED_TITLE: string;

package/dist/_internal/server/jobs/handlers/messages.js

@@ -4,31 +4,31 @@
  * Lifted verbatim from functions/src/constants/messages.ts so the handlers
  * can live in appkit without depending on the consumer's functions/ tree.
  */
-export const AUCTION_MESSAGES = {
-    WON_TITLE: "You won the auction! 🎉",
+export const COLLECTOR_DROP_MESSAGES = {
+    WON_TITLE: "You won the collector drop! 🎉",
     WON_MESSAGE: (productTitle, currency, amount) => `Congratulations! You won "${productTitle}" with a bid of ${currency} ${amount}.`,
-    LOST_TITLE: "Auction ended",
-    LOST_MESSAGE: (productTitle) => `The auction for "${productTitle}" has ended. You were outbid.`,
-    NO_BIDS_LOG: (productId) => `Auction ${productId} ended with no bids`,
-    /** CTA on the winner's notification — links into the auction checkout lane. */
+    LOST_TITLE: "Collector Drop ended",
+    LOST_MESSAGE: (productTitle) => `The collector drop for "${productTitle}" has ended. You were outbid.`,
+    NO_BIDS_LOG: (productId) => `Collector Drop ${productId} ended with no bids`,
+    /** CTA on the winner's notification — links into the collector drop checkout lane. */
     WON_ACTION_LABEL: "Pay now",
-    RESERVE_NOT_MET_TITLE: "Auction ended below reserve",
+    RESERVE_NOT_MET_TITLE: "Collector Drop ended below reserve",
     RESERVE_NOT_MET_MESSAGE: (productTitle, currency, highestBid, reservePrice) => `"${productTitle}" ended at ${currency} ${highestBid}, below your reserve of ${currency} ${reservePrice}. No winner was declared and the listing was archived.`,
-    RESERVE_NOT_MET_BIDDER_MESSAGE: (productTitle) => `The auction for "${productTitle}" ended without meeting the seller's reserve price, so it did not sell.`,
+    RESERVE_NOT_MET_BIDDER_MESSAGE: (productTitle) => `The collector drop for "${productTitle}" ended without meeting the seller's reserve price, so it did not sell.`,
 };
 export const BID_MESSAGES = {
     OUTBID_TITLE: "You've been outbid",
     OUTBID_MESSAGE: (productTitle, currency, currentBid) => `Someone placed a higher bid on "${productTitle}". Current bid: ${currency} ${currentBid}.`,
-    // Buy Now places a HOLD, not a purchase — the auction stays live and other
+    // Buy Now places a HOLD, not a purchase — the collector drop stays live and other
     // buyers can still bid or buy it out, so the copy has to convey urgency
     // without claiming the item is already theirs.
     BUY_NOW_HELD_TITLE: "Complete your Buy Now purchase",
-    BUY_NOW_HELD_MESSAGE: (productTitle, currency, amount, minutes) => `You've claimed "${productTitle}" at the Buy Now price of ${currency} ${amount}. The auction is still live, so it's yours only once you've paid — complete checkout within ${minutes} minutes.`,
+    BUY_NOW_HELD_MESSAGE: (productTitle, currency, amount, minutes) => `You've claimed "${productTitle}" at the Buy Now price of ${currency} ${amount}. The collector drop is still live, so it's yours only once you've paid — complete checkout within ${minutes} minutes.`,
     BUY_NOW_HELD_ACTION: "Pay now",
     BUY_NOW_LAPSED_TITLE: "Buy Now claim expired",
-    BUY_NOW_LAPSED_MESSAGE: (productTitle) => `Your Buy Now claim on "${productTitle}" expired before payment was completed, so it's been released. The auction is still running if you'd like to bid.`,
-    BUY_NOW_AUCTION_ENDED_TITLE: "Buy Now claim released",
-    BUY_NOW_AUCTION_ENDED_MESSAGE: (productTitle) => `The auction for "${productTitle}" ended before you completed your Buy Now purchase, so your claim was released and the item went to the winning bidder.`,
+    BUY_NOW_LAPSED_MESSAGE: (productTitle) => `Your Buy Now claim on "${productTitle}" expired before payment was completed, so it's been released. The collector drop is still running if you'd like to bid.`,
+    BUY_NOW_COLLECTOR_DROP_ENDED_TITLE: "Buy Now claim released",
+    BUY_NOW_COLLECTOR_DROP_ENDED_MESSAGE: (productTitle) => `The collector drop for "${productTitle}" ended before you completed your Buy Now purchase, so your claim was released and the item went to the winning bidder.`,
 };
 export const ORDER_MESSAGES = {
     CANCELLED_TITLE: "Order cancelled",

package/dist/_internal/server/jobs/handlers/onCatalogueSubmittedForApproval.d.ts

@@ -6,7 +6,7 @@
  * how many admins exist.
  */
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 type Doc = Record<string, JsonValue>;
 export declare const onCatalogueSubmittedForApprovalHandler: FirestoreTriggerHandler<Doc, Doc>;
 export {};

package/dist/_internal/server/jobs/handlers/onClearancePaymentConfirmed.d.ts

@@ -0,0 +1,3 @@
+import type { FirestoreTriggerHandler } from "../runtime/types";
+import { type ClearanceOrderSnapshot } from "../core/onClearancePaymentConfirmed";
+export declare const onClearancePaymentConfirmedHandler: FirestoreTriggerHandler<ClearanceOrderSnapshot, ClearanceOrderSnapshot>;

package/dist/_internal/server/jobs/handlers/onClearancePaymentConfirmed.js

@@ -0,0 +1,11 @@
+import { handleClearancePaymentConfirmed, } from "../core/onClearancePaymentConfirmed.js";
+export const onClearancePaymentConfirmedHandler = async (event, ctx) => {
+    const before = event.before;
+    const after = event.after;
+    if (!after)
+        return;
+    // Only act on the paid transition — avoids re-firing on every other order write.
+    if (before?.paymentStatus === "paid" || after.paymentStatus !== "paid")
+        return;
+    await handleClearancePaymentConfirmed({ orderId: event.params.orderId, order: after }, ctx);
+};

package/dist/_internal/server/jobs/handlers/onProductStockChange.d.ts

@@ -1,5 +1,5 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 type ProductDoc = Record<string, JsonValue>;
 export declare const onProductStockChangeHandler: FirestoreTriggerHandler<ProductDoc, ProductDoc>;
 export {};

package/dist/_internal/server/jobs/handlers/onReviewWrite.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onReviewWriteHandler: FirestoreTriggerHandler<Record<string, JsonValue>, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/onScamReportCreate.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onScamReportCreateHandler: FirestoreTriggerHandler<null, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/onScamReportUpdate.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onScamReportUpdateHandler: FirestoreTriggerHandler<Record<string, JsonValue>, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/onShipmentAllocationSync.d.ts

@@ -18,7 +18,7 @@
  * terminates instead of re-triggering itself indefinitely.
  */
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 type Doc = Record<string, JsonValue>;
 export declare const onShipmentLotWriteHandler: FirestoreTriggerHandler<Doc, Doc>;
 export declare const onShipmentHeaderWriteHandler: FirestoreTriggerHandler<Doc, Doc>;

package/dist/_internal/server/jobs/handlers/onShipmentDeleted.d.ts

@@ -8,7 +8,7 @@
  * items the shipment had.
  */
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 type Doc = Record<string, JsonValue>;
 export declare const onShipmentDeletedHandler: FirestoreTriggerHandler<Doc, Doc>;
 export {};

package/dist/_internal/server/jobs/handlers/onShipmentItemWrite.d.ts

@@ -11,7 +11,7 @@
  * settled cascade doesn't loop forever re-triggering itself.
  */
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 type ItemDoc = Record<string, JsonValue>;
 export declare const onShipmentItemWriteHandler: FirestoreTriggerHandler<ItemDoc, ItemDoc>;
 export {};

package/dist/_internal/server/jobs/handlers/onSiteSettingsWrite.d.ts

@@ -1,5 +1,5 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 /**
  * A site-settings write invalidates the whole page cache.
  *
@@ -10,7 +10,7 @@ import type { JsonValue } from "@mohasinac/appkit";
  * i.e. something on every page of the site. Nothing observed writes to it.
  *
  * Measured against production 2026-10-27, which is what prompted this: with
- * `listings.listingTypes.auction` set to `false` in Firestore, `/auctions` kept
+ * `listings.listingTypes.collector-drop` set to `false` in Firestore, `/collector-drops` kept
  * answering **200** from the CDN with `Age` climbing past its own 60-second
  * `revalidate` window, because no writer ever marked the page stale. The flag
  * was correct and invisible. `revalidateTargetsFor("siteSettings")` returned

package/dist/_internal/server/jobs/handlers/onSiteSettingsWrite.js

@@ -9,7 +9,7 @@ import { notifyRevalidate } from "../core/revalidateNotify.js";
  * i.e. something on every page of the site. Nothing observed writes to it.
  *
  * Measured against production 2026-10-27, which is what prompted this: with
- * `listings.listingTypes.auction` set to `false` in Firestore, `/auctions` kept
+ * `listings.listingTypes.collector-drop` set to `false` in Firestore, `/collector-drops` kept
  * answering **200** from the CDN with `Age` climbing past its own 60-second
  * `revalidate` window, because no writer ever marked the page stale. The flag
  * was correct and invisible. `revalidateTargetsFor("siteSettings")` returned

package/dist/_internal/server/jobs/handlers/onSupportTicketCreate.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onSupportTicketCreateHandler: FirestoreTriggerHandler<null, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/onSupportTicketUpdate.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onSupportTicketUpdateHandler: FirestoreTriggerHandler<Record<string, JsonValue>, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/onUserBanChange.d.ts

@@ -1,3 +1,3 @@
 import type { FirestoreTriggerHandler } from "../runtime/types";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export declare const onUserBanChangeHandler: FirestoreTriggerHandler<Record<string, JsonValue>, Record<string, JsonValue>>;

package/dist/_internal/server/jobs/handlers/stickerTraceSweep.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduleHandler } from "../runtime/types";
+export declare const stickerTraceSweepHandler: ScheduleHandler;

package/dist/_internal/server/jobs/handlers/stickerTraceSweep.js

@@ -0,0 +1,2 @@
+import { runStickerTraceSweep } from "../core/stickerTraceSweep.js";
+export const stickerTraceSweepHandler = runStickerTraceSweep;

package/dist/_internal/server/jobs/handlers/triggerEventRaffle.d.ts

@@ -2,7 +2,7 @@ import type { CallableHandler } from "../runtime/types";
 import { type TriggerEventRaffleInput, type TriggerEventRaffleResult } from "../core/triggerEventRaffle";
 /**
  * Statuses come from `reasonToHttp`, shared with
- * `POST /api/admin/events/[id]/trigger-raffle`.
+ * `POST /api/admin/events/[id]/trigger-giveaway`.
  *
  * The hand-written chain this replaces knew two reasons (404 / 422) while the
  * route mapped everything to 409 — so the same refusal had two different

package/dist/_internal/server/jobs/handlers/triggerEventRaffle.js

@@ -8,7 +8,7 @@ function httpError(message, status, code) {
 }
 /**
  * Statuses come from `reasonToHttp`, shared with
- * `POST /api/admin/events/[id]/trigger-raffle`.
+ * `POST /api/admin/events/[id]/trigger-giveaway`.
  *
  * The hand-written chain this replaces knew two reasons (404 / 422) while the
  * route mapped everything to 409 — so the same refusal had two different

package/dist/_internal/server/jobs/runtime/adapters/firebase.d.ts

@@ -5,7 +5,7 @@
  * consumer's `functions/src/index.ts` becomes a thin barrel:
  *
  *   import { handlers } from "./_internal/server/jobs/handlers";
- *   export const auctionSettlement = bindSchedule("auctionSettlement", handlers.auctionSettlement, { schedule: "every 15 minutes" });
+ *   export const collectorDropSettlement = bindSchedule("collectorDropSettlement", handlers.collectorDropSettlement, { schedule: "every 15 minutes" });
  *
  * The adapter resolves a JobContext (db + logger + env) per invocation so the
  * handler stays portable.

package/dist/_internal/server/jobs/runtime/adapters/firebase.js

@@ -6,7 +6,7 @@ import { normalizeError } from "../../../../../errors/normalize.js";
  * consumer's `functions/src/index.ts` becomes a thin barrel:
  *
  *   import { handlers } from "./_internal/server/jobs/handlers";
- *   export const auctionSettlement = bindSchedule("auctionSettlement", handlers.auctionSettlement, { schedule: "every 15 minutes" });
+ *   export const collectorDropSettlement = bindSchedule("collectorDropSettlement", handlers.collectorDropSettlement, { schedule: "every 15 minutes" });
  *
  * The adapter resolves a JobContext (db + logger + env) per invocation so the
  * handler stays portable.

package/dist/_internal/server/jobs/runtime/types.d.ts

@@ -11,7 +11,7 @@
  * Firebase-specific events into JobContext + payloads.
  */
 import type { Firestore } from "firebase-admin/firestore";
-import type { JsonValue } from "@mohasinac/appkit";
+import type { JsonValue } from "../../../../schemas/types";
 export interface JobLogger {
     info(message: string, meta?: Record<string, JsonValue>): void;
     warn(message: string, meta?: Record<string, JsonValue>): void;

package/dist/_internal/server/payments/policy-consent.d.ts

@@ -0,0 +1,170 @@
+/**
+ * THE CONSENT GATE — server-side enforcement of the buyer policy agreement
+ * (item 1.39, on the plan's "never cut" list).
+ *
+ * ## Why server-side at all
+ *
+ * A checkbox in the browser is an affordance, not a gate. `POST /api/checkout`
+ * and `POST /api/payment/create-order` are both reachable by a hand-rolled
+ * request, so a client-only tick means the one legal protection the
+ * no-refund-after-reveal mechanic has is a field the server never looked at —
+ * Root Cause #46's exact shape (a field the schema accepts and the handler
+ * never verifies). An order that arrives without consent is REJECTED here, not
+ * logged and allowed.
+ *
+ * ## What is actually verified
+ *
+ * The client does not get to say what it agreed to. It echoes back the
+ * `version` + `hash` it was handed, and this gate:
+ *
+ *   1. re-resolves the applicable clause set **from the cart's own listing
+ *      types and the live settings**, through the capability registry;
+ *   2. re-computes the hash over that resolution;
+ *   3. refuses unless the echo matches.
+ *
+ * So the three ways this could be defeated are all closed: not ticking it
+ * (`accepted !== true` → refused), forging a hash (mismatch → refused), and
+ * ticking a weaker policy than the cart actually requires (the server's own
+ * resolution is what gets hashed, so a cart that grew a concealed item after
+ * the box was ticked produces a different hash → refused, and the buyer is
+ * asked again). That last case is the one a client-trusting design misses.
+ *
+ * ## Two distinct refusals, deliberately
+ *
+ *   `BUYER_POLICY_CONSENT_REQUIRED` nothing was agreed — the UI must show the
+ *                                   step. A bug or a scripted request.
+ *   `BUYER_POLICY_CONSENT_STALE`    something was agreed, but not THIS policy
+ *                                   — the UI must re-fetch and re-ask.
+ *
+ * Collapsing them into one code would make a perfectly honest buyer whose cart
+ * changed mid-checkout indistinguishable from a forged request, and the right
+ * UI response to the two is different.
+ */
+import type { ListingType } from "../../../features/products/types/index";
+import { type CheckoutPolicyOffer, type CheckoutPolicySettings, type OrderPolicyConsent } from "../../shared/checkout/policy-consent";
+/** Thrown as the message of a 403 so the client can branch on the reason. */
+export declare const POLICY_CONSENT_REQUIRED_CODE = "BUYER_POLICY_CONSENT_REQUIRED";
+export declare const POLICY_CONSENT_STALE_CODE = "BUYER_POLICY_CONSENT_STALE";
+/**
+ * 5xx, not 4xx — and the distinction is the money path.
+ *
+ * Raised only on the POST-capture placement path, when the consent record the
+ * pre-capture request wrote cannot be read back. The buyer did everything
+ * right and their money is already captured, so refusing permanently would
+ * strand it (the 2026-10-21 shape). A 5xx asks the gateway to redeliver, which
+ * is the gateway's own retry schedule doing the recovery for us; if it never
+ * resolves, a `WEBHOOK_PLACEMENT_FAILED` row is waiting for a human. What it
+ * must NOT do is place a consentless order and move on.
+ */
+export declare const POLICY_CONSENT_UNRESOLVED_CODE = "BUYER_POLICY_CONSENT_UNRESOLVED";
+/**
+ * The caller supplied no listing types, so there was nothing to consent ABOUT.
+ *
+ * 400 rather than 403: this is a malformed call, not a refused buyer. It must
+ * never be reachable from a real checkout (an empty cart is refused upstream),
+ * which is exactly why it is an explicit code — if it ever appears in the logs
+ * it names a caller that would otherwise have been issued a consent record
+ * attesting to nothing.
+ */
+export declare const POLICY_CONSENT_NO_SUBJECT_CODE = "BUYER_POLICY_CONSENT_NO_SUBJECT";
+/**
+ * An admin-bypass was REQUESTED by a caller that does not hold
+ * `admin:checkout:bypass`. A hard 403, never a quiet fall-through to the normal
+ * consent path — see `requestAdminBypass`.
+ */
+export declare const POLICY_CONSENT_BYPASS_FORBIDDEN_CODE = "BUYER_POLICY_CONSENT_BYPASS_FORBIDDEN";
+export declare function hashPolicyClauses(clauses: readonly {
+    id: string;
+    text: string;
+}[]): string;
+/**
+ * What to show the buyer, and what the gate will expect back.
+ *
+ * ONE function behind both the UI and the gate, so the offer the buyer sees
+ * and the offer the server judges are the same computation over the same
+ * inputs. Two code paths deriving "the current policy" independently is how a
+ * buyer ends up permanently unable to check out: the UI offers v1 and the gate
+ * demands v2, forever.
+ */
+export declare function resolveCheckoutPolicyOffer(settings: CheckoutPolicySettings | undefined, listingTypes: readonly ListingType[]): CheckoutPolicyOffer;
+/** What a client is allowed to send. Nothing here is trusted on its own. */
+export interface SubmittedPolicyConsent {
+    accepted?: boolean;
+    version?: number;
+    hash?: string;
+}
+export interface AssertBuyerPolicyConsentInput {
+    uid: string;
+    /**
+     * The listing types in this checkout. Resolved by the CALLER from the cart
+     * it is about to place, for the same reason `assertCheckoutValueOtp` takes
+     * an amount: a gate that derives its own subject from whatever is in scope
+     * cannot be reused by a caller that did not exist when it was written.
+     */
+    listingTypes: readonly ListingType[];
+    settings: CheckoutPolicySettings | undefined;
+    submitted: SubmittedPolicyConsent | undefined;
+    capturedOn: OrderPolicyConsent["capturedOn"];
+    /**
+     * REQUEST the admin-bypass path — a request, never a claim that is believed.
+     *
+     * 🛑 THIS FIELD GRANTS NOTHING ON ITS OWN, and the previous shape
+     * (`adminBypass?: boolean`, trusted) was a privilege escalation waiting for
+     * a call site: the first handler to write `adminBypass: body.adminBypass`
+     * would have made the entire consent gate switchable off by any client, on
+     * the one gate whose whole purpose is legal defensibility. A boolean
+     * parameter cannot carry proof of authority — only an authority check can.
+     *
+     * So when this is true the gate RE-RESOLVES the caller's permissions for
+     * `uid` and requires `admin:checkout:bypass`. Absent → **403**, not a
+     * silent downgrade to the normal path: a caller asking for a bypass it does
+     * not hold is either a bug or an attack, and both deserve to be loud.
+     *
+     * 🛑 Even when granted, this is NOT an exemption from the consent RECORD. An
+     * admin test order is the platform agreeing with itself, and the record is
+     * still written (tagged `admin-bypass`) so the audit trail has no silent
+     * holes. What the bypass skips is only the requirement that a human ticked a
+     * box — because on that path there is no buyer in the room.
+     */
+    requestAdminBypass?: boolean;
+}
+/**
+ * Enforce the agreement and RETURN THE RECORD to stamp on the order(s).
+ *
+ * Throws `ApiError(403)` when consent is absent or stale. Returns the consent
+ * snapshot otherwise — the caller writes it onto every order this checkout
+ * produces, which is what makes "show me the text this buyer accepted"
+ * answerable from the order alone.
+ *
+ * 🛑 Call it BEFORE any mutation and BEFORE any capture. Taking consent after
+ * the money moves means charging a buyer and then asking whether they agreed,
+ * which is the same error the OTP gate's header warns about.
+ */
+export declare function assertBuyerPolicyConsent(input: AssertBuyerPolicyConsentInput): Promise<OrderPolicyConsent>;
+/**
+ * Read back a consent taken on an EARLIER request, for the post-capture
+ * placement path.
+ *
+ * The online-gateway flow takes consent at create-order time — before the
+ * money moves — and carries only the record's id through the gateway's
+ * passthrough channel (`CheckoutIntentMetadata.policyConsentId`), because that
+ * channel is capped at 10 keys / 255 chars and silently truncates. The clause
+ * text could not survive it; an id can.
+ *
+ * 🛑 The id is UNTRUSTED. It arrives from a metadata field, so ownership is
+ * re-checked against the uid the order is actually being placed for. Without
+ * that, a crafted `notes` payload could attach somebody else's consent record
+ * to this order — which would read, in the audit trail, as that person having
+ * agreed to this purchase.
+ */
+export declare function loadBuyerPolicyConsent(input: {
+    consentId: string | undefined;
+    uid: string;
+}): Promise<OrderPolicyConsent>;
+/**
+ * Append the placed order ids to the consent record. Fire-and-forget by
+ * design — the authoritative consent copy is already on each order, so a
+ * failure here loses a convenience index and nothing else. It must never turn
+ * a successful placement into a failure.
+ */
+export declare function attachOrdersToPolicyConsent(consentId: string, orderIds: string[]): Promise<void>;