@aglyn/plugins-commerce 1.0.0-beta.219 → 1.0.0-beta.220

package/src/lib/server/billing-webhook.js

@@ -19,6 +19,8 @@ import { findUserByUidAcrossPools, firebaseAdmin, getOrgForHost, meterHostEmail,
 import { paymentProvider } from "@aglyn/tenant-data-admin/server/payment-provider";
 import { captureHostContact } from "@aglyn/tenant-runtime";
 import { formatOperatorAlertAmount } from "@aglyn/aglyn/app-utils/operator-alerts";
+import { resolveSiteTimeZone } from "@aglyn/aglyn/app-utils/collection-entry-date";
+import { resolveHostToken } from "@aglyn/aglyn/app-utils/host-tokens";
 import { COMMERCE_CHARGEBACK_UNROUTABLE, COMMERCE_FEE_REPRICE_REFUSED, COMMERCE_SELLER_SHARE_NOT_REVERSED, COMMERCE_TAX_NOT_REVERSED } from "../constants/operator-alerts.js";
 import { createHmac } from "crypto";
 import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
@@ -105,11 +107,17 @@ import { enqueueSupplierDelivery } from "./supplier-outbox.js";
         }
         if (keys.length) {
             const remaining = await hostRef.collection('licenseKeys').where('productId', '==', productId).where('assignedAtMs', '==', null).limit(6).get();
-            if (remaining.size < 5) {
+            // Once per CROSSING (AGL-3432), as the low-stock alert is: this sale
+            // took the pool below five, or took its last key. Every later sale in a
+            // low pool stays quiet rather than repeating the same notice.
+            const left = remaining.size;
+            const before = left + keys.length;
+            if (left < 5 && before >= 5 || left === 0) {
+                const productName = String(await hostRef.collection('products').doc(productId).get().then((snapshot)=>snapshot.get('name')).catch(()=>'') || 'a product');
                 void notifyHostManagers(hostId, {
                     type: 'content.lowStock',
-                    title: 'License key pool running low',
-                    body: `${remaining.size} keys left`,
+                    title: left === 0 ? `License keys used up — ${productName}` : `License keys running low — ${productName}`,
+                    body: left === 0 ? `The last license key for ${productName} on {site} was just ` + 'assigned. A buyer who orders it now gets no key; add keys to ' + 'its pool under Products.' : `Only ${left} license key${left === 1 ? ' is' : 's are'} left ` + `for ${productName} on {site}. Every sale of it takes its ` + 'keys from this pool; add more under Products before it runs out.',
                     link: `/${hostId}/products`
                 });
             }
@@ -294,6 +302,25 @@ async function findOrderForDispute(paymentIntentId) {
         }
     });
 }
+/**
+ * A site as an operator alert names it: its name and id, else the id alone
+ * (AGL-3432) — staff see faults from every org, and a bare host id has to be
+ * looked up before anyone can act. One host read, taken only when a money
+ * fault is being reported; a read that fails answers the id.
+ */ async function operatorSiteLabel(hostId) {
+    if (!hostId) return 'unknown';
+    try {
+        var _data;
+        const host = (_data = (await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).get()).data()) != null ? _data : {};
+        const name = [
+            host['displayName'],
+            host['subdomain']
+        ].find((value)=>typeof value === 'string' && value.trim() !== '');
+        return name ? `${name.trim()} (${hostId})` : hostId;
+    } catch (unused) {
+        return hostId;
+    }
+}
 /**
  * Tells the operator that a subscription cycle's sales tax stayed with the
  * merchant (AGL-3377): the platform files and remits it, so every one of
@@ -305,6 +332,7 @@ async function findOrderForDispute(paymentIntentId) {
         context: {
             invoiceId: input.invoiceId,
             hostId: input.hostId,
+            site: await operatorSiteLabel(input.hostId),
             amount: input.taxCents === undefined ? 'An unknown amount' : formatOperatorAlertAmount(input.taxCents),
             reason: input.reason
         }
@@ -574,11 +602,11 @@ async function findOrderForDispute(paymentIntentId) {
  * fulfilment path are untouched; what changes is that no FURTHER cycle is
  * billed.
  *
- * `cancel_at_period_end` rather than an outright cancel, for two reasons that
- * both matter: the subscriber keeps the period they just paid for, and the
- * flag is REVERSIBLE — the merchant has a full cycle to restore their Aglyn
- * plan before anything is actually lost. An immediate cancel would take
- * service away from a shopper who did nothing wrong.
+ * `cancel_at_period_end` rather than an outright cancel: the subscriber keeps
+ * the period they just paid for. An immediate cancel would take service away
+ * from a shopper who did nothing wrong. The flag is reversible in Stripe, but
+ * nothing here clears it when the merchant's plan comes back, so the notice
+ * says that restoring the plan does not restart the subscription (AGL-3432).
  *
  * ## Once-only
  *
@@ -588,7 +616,8 @@ async function findOrderForDispute(paymentIntentId) {
  * subscription billing forever with the books saying it had been stopped. The
  * `Idempotency-Key` covers the window where the claim is written and the
  * response never arrives.
- */ async function stopLapsedStorefrontSubscription(hostId, subscriptionId, subscriptionRef) {
+ */ async function stopLapsedStorefrontSubscription(hostId, subscriptionId, subscriptionRef, /** Who subscribed to what, and the workspace, for the merchant's notice. */ notice) {
+    var _ref, _ref1;
     const stripeKey = process.env.STRIPE_SECRET_KEY;
     if (!stripeKey) {
         console.error('Lapsed storefront subscription not stopped: STRIPE_SECRET_KEY is not set (AGL-2071)', {
@@ -649,10 +678,29 @@ async function findOrderForDispute(paymentIntentId) {
     }, {
         merge: true
     }).catch(()=>undefined);
+    // When it ends, from Stripe's own answer: `cancel_at` is the period end the
+    // flag just scheduled. Told as a date in the site's zone, and left out when
+    // Stripe did not say.
+    const stopped = await response.json().catch(()=>null);
+    const endsAtSeconds = Number((_ref = (_ref1 = stopped == null ? void 0 : stopped.cancel_at) != null ? _ref1 : stopped == null ? void 0 : stopped.current_period_end) != null ? _ref : 0);
+    let endsOn = '';
+    if (endsAtSeconds > 0) {
+        const host = await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).get().then((snapshot)=>snapshot.data()).catch(()=>undefined);
+        endsOn = new Date(endsAtSeconds * 1000).toLocaleDateString('en-US', {
+            month: 'long',
+            day: 'numeric',
+            year: 'numeric',
+            timeZone: resolveSiteTimeZone(notice.org, host)
+        });
+    }
+    const subscriber = notice.subscriberEmail ? `${notice.subscriberEmail}'s subscription` : 'A subscription';
     void notifyHostManagers(hostId, {
         type: 'content.order',
-        title: 'A subscription stopped renewing — your plan no longer includes storefront subscriptions',
-        body: 'This subscriber keeps the period they have already paid for. ' + 'Restore your plan before it ends to keep billing them.',
+        title: 'A subscription on {site} stopped renewing',
+        // Restoring the plan does NOT restart it (AGL-3432): nothing clears
+        // Stripe's `cancel_at_period_end` when the plan comes back, so the notice
+        // promises no such remedy.
+        body: `${subscriber} to ${notice.productName} on {site} will end` + `${endsOn ? ` on ${endsOn}` : ' at the end of its paid period'} ` + 'instead of renewing, because your plan no longer includes ' + 'storefront subscriptions. The subscriber keeps the period they ' + 'already paid for. Restoring your plan does not restart this ' + 'subscription.',
         link: `/${hostId}/products`
     });
 }
@@ -739,11 +787,13 @@ async function findOrderForDispute(paymentIntentId) {
         }
         const refusal = await response.json().catch(()=>null);
         console.error(`Stripe refused the fee re-price for ${subscriptionId} (AGL-2289)`, refusal);
+        const repriceHostId = (_ref = (_subscriptionRef_parent_parent = subscriptionRef.parent.parent) == null ? void 0 : _subscriptionRef_parent_parent.id) != null ? _ref : '';
         await raiseOperatorAlert(COMMERCE_FEE_REPRICE_REFUSED, {
             dedupeKey: `${subscriptionId}:${desiredFeePct}`,
             context: {
                 subject: `subscription ${subscriptionId}`,
-                hostId: (_ref = (_subscriptionRef_parent_parent = subscriptionRef.parent.parent) == null ? void 0 : _subscriptionRef_parent_parent.id) != null ? _ref : '',
+                hostId: repriceHostId,
+                site: await operatorSiteLabel(repriceHostId),
                 reason: `Stripe refused to set the fee to ${desiredFeePct}% (${(_ref1 = refusal == null ? void 0 : (_refusal_error = refusal.error) == null ? void 0 : _refusal_error.message) != null ? _ref1 : `HTTP ${response.status}`})`
             }
         });
@@ -765,6 +815,7 @@ async function findOrderForDispute(paymentIntentId) {
         context: {
             subject: `invoice ${invoiceId}`,
             hostId,
+            site: await operatorSiteLabel(hostId),
             reason
         }
     });
@@ -1604,14 +1655,15 @@ async function findOrderForDispute(paymentIntentId) {
  * Tells the operator the platform is out a lost dispute's principal because
  * the merchant's share could not be pulled back (AGL-3377). Once per dispute.
  */ async function reportSellerShareNotReversed(orderRef, disputeId, principalCents, reason) {
-    var _ref;
-    var _orderRef_parent_parent;
+    var _ref, _ref1;
+    var _orderRef_parent_parent, _orderRef_parent_parent1;
     await raiseOperatorAlert(COMMERCE_SELLER_SHARE_NOT_REVERSED, {
         dedupeKey: disputeId,
         context: {
             disputeId,
             orderId: orderRef.id,
             hostId: (_ref = (_orderRef_parent_parent = orderRef.parent.parent) == null ? void 0 : _orderRef_parent_parent.id) != null ? _ref : '',
+            site: await operatorSiteLabel((_ref1 = (_orderRef_parent_parent1 = orderRef.parent.parent) == null ? void 0 : _orderRef_parent_parent1.id) != null ? _ref1 : ''),
             amount: formatOperatorAlertAmount(principalCents),
             reason
         }
@@ -1774,7 +1826,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata15;
         const { hostId, productId } = (_object_metadata15 = object.metadata) != null ? _object_metadata15 : {};
         if (hostId && productId) {
-            var _productForSnapshot_data, _ref9, _productForSnapshot_get, _subTotals_totalCents, _ref10;
+            var _productForSnapshot_data, _ref9, _productForSnapshot_get, _subTotals_totalCents, _productForSnapshot_get1, _ref10;
             var _object_metadata16, _liftedForSnapshot_subscription, _object_customer_details, _object_customer_details1, _object_customer_details2;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -1891,16 +1943,17 @@ async function findOrderForDispute(paymentIntentId) {
             });
             if (!recorded) return;
             const subscriptionCents = Number((_subTotals_totalCents = subTotals.totalCents) != null ? _subTotals_totalCents : 0);
-            void notifyHostManagers(String(hostId), _extends({
+            const subscriptionPrice = `$${(subscriptionCents / 100).toFixed(2)}${((_liftedForSnapshot_subscription = liftedForSnapshot.subscription) == null ? void 0 : _liftedForSnapshot_subscription.interval) ? `/${liftedForSnapshot.subscription.interval}` : ''}`;
+            const subscriberEmail = object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email;
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
                 // The amount rides the title exactly as the order notification's
                 // does (AGL-1732) — "New subscriber" alone never said what for.
-                title: `New subscriber — $${(subscriptionCents / 100).toFixed(2)}${((_liftedForSnapshot_subscription = liftedForSnapshot.subscription) == null ? void 0 : _liftedForSnapshot_subscription.interval) ? `/${liftedForSnapshot.subscription.interval}` : ''}`
-            }, (object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email) ? {
-                body: object.customer_details.email
-            } : {}, {
+                title: `New subscriber on {site} — ${subscriptionPrice}`,
+                // Who subscribed, to what and where (AGL-3432).
+                body: `${subscriberEmail || 'A shopper'} subscribed to ` + `${String((_productForSnapshot_get1 = productForSnapshot.get('name')) != null ? _productForSnapshot_get1 : 'a product')} on ` + `{site} for ${subscriptionPrice}.`,
                 link: `/${hostId}/products`
-            }));
+            });
             // AWAITED SINCE AGL-2473, here and at the five sibling call sites in
             // this file. `upsertHostContact` carries `purchaseCents`, so it is what
             // feeds `ltvCents` and the RFM ranking — a `void`ed one is a paying
@@ -2362,7 +2415,12 @@ async function findOrderForDispute(paymentIntentId) {
             // `renewalOrgUnreadable` and not `!renewalOrg` (AGL-2258): a null org
             // we successfully read still stops, which is AGL-2071's decision.
             if (!renewalEntitled && !renewalOrgUnreadable) {
-                await stopLapsedStorefrontSubscription(invoiceHostId, subscriptionId, subscriptionRef);
+                var _ref25, _ref26;
+                await stopLapsedStorefrontSubscription(invoiceHostId, subscriptionId, subscriptionRef, {
+                    subscriberEmail: (_ref25 = (_ref26 = object == null ? void 0 : object.customer_email) != null ? _ref26 : soldSnapshot.get('customerEmail')) != null ? _ref25 : null,
+                    productName: snapshot.name || 'a subscription product',
+                    org: renewalOrg != null ? renewalOrg : null
+                });
             } else if (renewalEntitled) {
                 // RE-PRICE THE PLATFORM FEE (AGL-2289). `application_fee_percent` was
                 // set once at the sale and never revisited, and it lives on the
@@ -2411,8 +2469,8 @@ async function findOrderForDispute(paymentIntentId) {
                     const stockVariantId = (_snapshot_variantId = snapshot.variantId) != null ? _snapshot_variantId : (_stocked_variants_ = stocked.variants[0]) == null ? void 0 : _stocked_variants_.id;
                     const tracked = stocked.variants.some((variant)=>variant.id === stockVariantId && variant.inventory != null);
                     if (stockVariantId && tracked) {
-                        var _ref25;
-                        const cycleQuantity = (_ref25 = cycleLine == null ? void 0 : cycleLine.quantity) != null ? _ref25 : 1;
+                        var _ref27;
+                        const cycleQuantity = (_ref27 = cycleLine == null ? void 0 : cycleLine.quantity) != null ? _ref27 : 1;
                         // Atomic since AGL-2320, like every other decrement: a renewal
                         // batch bills many subscribers at once, so two cycles of the same
                         // physical box are exactly the concurrent pair that lost a
@@ -2437,20 +2495,20 @@ async function findOrderForDispute(paymentIntentId) {
                 }
             }
             if (!isOpeningInvoice && paidCents > 0) {
-                var _ref26, _ref27;
-                const renewalEmail = (_ref26 = (_ref27 = object == null ? void 0 : object.customer_email) != null ? _ref27 : soldSnapshot.get('customerEmail')) != null ? _ref26 : null;
+                var _ref28, _ref29;
+                const renewalEmail = (_ref28 = (_ref29 = object == null ? void 0 : object.customer_email) != null ? _ref29 : soldSnapshot.get('customerEmail')) != null ? _ref28 : null;
                 // A physical cycle now lands in Orders (AGL-1750), but the console
                 // still has no Subscriptions tab, so for a digital or service
                 // subscription this notification remains the only place a merchant
                 // learns the money arrived at all.
-                void notifyHostManagers(invoiceHostId, _extends({
+                const renewalPrice = `$${(paidCents / 100).toFixed(2)}${interval ? `/${interval}` : ''}`;
+                void notifyHostManagers(invoiceHostId, {
                     type: 'content.order',
-                    title: `Subscription renewed — $${(paidCents / 100).toFixed(2)}${interval ? `/${interval}` : ''}`
-                }, renewalEmail ? {
-                    body: String(renewalEmail)
-                } : {}, {
+                    title: `Subscription renewed on {site} — ${renewalPrice}`,
+                    // Whose subscription, to what and where (AGL-3432).
+                    body: `${renewalEmail ? `${String(renewalEmail)}'s` : 'A'} ` + `subscription to ${snapshot.name || 'a product'} on {site} ` + `renewed for ${renewalPrice}.`,
                     link: `/${invoiceHostId}/products`
-                }));
+                });
                 // RFM (AGL-328): a subscriber in month 12 has paid twelve times, and
                 // counting only the first charge ranks them as a one-purchase
                 // customer forever. Keyed to the invoice so the guard above is what
@@ -2477,7 +2535,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata17;
         const { hostId, reservationId } = (_object_metadata17 = object.metadata) != null ? _object_metadata17 : {};
         if (hostId && reservationId) {
-            var _ref28, _ref29;
+            var _ref30, _ref31;
             var _object_metadata18;
             const firestore = firebaseAdmin.app().firestore();
             const reservationRef = firestore.collection('hosts').doc(String(hostId)).collection('reservations').doc(String(reservationId));
@@ -2490,7 +2548,7 @@ async function findOrderForDispute(paymentIntentId) {
             // `amount_total` is stay-plus-tax and Stripe's own tax fields read
             // zero; the session's metadata is the only witness, exactly as it is
             // for a buy-now sale.
-            const taxCents = Math.max(0, Math.round(Number((_ref28 = object == null ? void 0 : (_object_metadata18 = object.metadata) == null ? void 0 : _object_metadata18.taxCents) != null ? _ref28 : 0)));
+            const taxCents = Math.max(0, Math.round(Number((_ref30 = object == null ? void 0 : (_object_metadata18 = object.metadata) == null ? void 0 : _object_metadata18.taxCents) != null ? _ref30 : 0)));
             // What the guest actually handed over, MINUS that tax. This is the
             // DEPOSIT when the resource has one (`reserve.ts` charges
             // `depositCents || totalCents`), never the stay's `totalCents` — see
@@ -2504,7 +2562,7 @@ async function findOrderForDispute(paymentIntentId) {
             // are and under-state what the merchant collects at the register. The
             // same figure feeds the guest's lifetime value, which tax is no part
             // of either (AGL-1755).
-            const paidCents = Math.max(0, Math.round(Number((_ref29 = object == null ? void 0 : object.amount_total) != null ? _ref29 : 0)) - taxCents);
+            const paidCents = Math.max(0, Math.round(Number((_ref31 = object == null ? void 0 : object.amount_total) != null ? _ref31 : 0)) - taxCents);
             // Redelivery guard (AGL-1755), the AGL-1748 shape. The `pending` ->
             // `confirmed` transition was always the guard, but it was a
             // read-then-write with every side effect hanging off it, so two
@@ -2575,17 +2633,44 @@ async function findOrderForDispute(paymentIntentId) {
                 return true;
             });
             if (confirmedNow) {
-                var _ref30, _ref31;
+                var _reservation_nights, _reservation_totalCents, _ref32, _ref33, _ref34, _ref35, _ref36;
                 var _object_customer_details3, _object_customer_details4, _object_customer_details5;
                 const reservation = reserved != null ? reserved : {};
-                void notifyHostManagers(String(hostId), _extends({
+                // A day key, so its UTC date IS the check-in date.
+                const checkInShort = new Date(Number(reservation['checkInDayMs'])).toUTCString().slice(0, 16);
+                const nights = Number((_reservation_nights = reservation['nights']) != null ? _reservation_nights : 0);
+                const nightsText = `${nights} night${nights === 1 ? '' : 's'}`;
+                /*
+           * WHAT THE GUEST WAS CHARGED TODAY, tax included (AGL-3442).
+           *
+           * `paidCents` is the money applied to the STAY and leaves out the
+           * merchant's lodging tax, so a guest told only that figure is told
+           * less than their card was charged. The two together are Stripe's
+           * session total, and the tax is the figure `reserve.ts` charged as
+           * its own line, named so the guest can match it to their receipt.
+           * The balance below is the stay's alone: the tax is charged on what
+           * is collected at booking, and nothing computes one on what is
+           * collected at the property.
+           */ const charged = `$${((paidCents + taxCents) / 100).toFixed(2)}`;
+                const taxIncluded = taxCents > 0 ? `, including $${(taxCents / 100).toFixed(2)} lodging tax` : '';
+                const paid = `${charged}${taxIncluded}`;
+                // What the guest still owes for the stay: the console's
+                // reservations card collects `totalCents - paidCents` at the
+                // property, so the guest is told it too (AGL-3432).
+                const balanceCents = Math.max(0, Math.round(Number((_reservation_totalCents = reservation['totalCents']) != null ? _reservation_totalCents : 0)) - paidCents);
+                const balance = `$${(balanceCents / 100).toFixed(2)}`;
+                const reservedBy = (_ref32 = (_ref33 = object == null ? void 0 : (_object_customer_details3 = object.customer_details) == null ? void 0 : _object_customer_details3.email) != null ? _ref33 : reservation['guestEmail']) != null ? _ref32 : 'A guest';
+                // Which room or unit was reserved (AGL-3432): on a property with
+                // several, "a stay" does not say which one to get ready.
+                const resourceName = reservation['resourceId'] ? String((_ref34 = await firestore.collection('hosts').doc(String(hostId)).collection('resources').doc(String(reservation['resourceId'])).get().then((snapshot)=>snapshot.get('name')).catch(()=>'')) != null ? _ref34 : '').trim() : '';
+                void notifyHostManagers(String(hostId), {
                     type: 'content.booking',
-                    title: 'New reservation'
-                }, (object == null ? void 0 : (_object_customer_details3 = object.customer_details) == null ? void 0 : _object_customer_details3.email) ? {
-                    body: object.customer_details.email
-                } : {}, {
+                    title: 'New reservation on {site}',
+                    // Who, what, when, what was paid and what is still owed
+                    // (AGL-3432).
+                    body: `${reservedBy} reserved ${resourceName || 'a stay'} on {site}: check-in ` + `${checkInShort}, ${nightsText}. ${charged} was paid${taxIncluded}` + (balanceCents > 0 ? `; ${balance} is still to collect at the property.` : '.'),
                     link: `/${hostId}/products`
-                }));
+                });
                 // Contacts ingestion (AGL-1755): this branch stored `paidCents` from
                 // `amount_total` and then called `upsertHostContact` with no amount,
                 // so a guest who paid for a stay showed a lifetime value of zero. A
@@ -2615,14 +2700,14 @@ async function findOrderForDispute(paymentIntentId) {
                 // exactly once. Taking `totalCents` here is what WOULD double-count:
                 // it would claim money the guest has not paid yet and will pay again
                 // through the register.
-                const guestContactEmail = (_ref30 = (_ref31 = object == null ? void 0 : (_object_customer_details4 = object.customer_details) == null ? void 0 : _object_customer_details4.email) != null ? _ref31 : reservation['guestEmail']) != null ? _ref30 : null;
+                const guestContactEmail = (_ref35 = (_ref36 = object == null ? void 0 : (_object_customer_details4 = object.customer_details) == null ? void 0 : _object_customer_details4.email) != null ? _ref36 : reservation['guestEmail']) != null ? _ref35 : null;
                 if (guestContactEmail) {
-                    var _ref32, _ref33;
+                    var _ref37, _ref38;
                     var _object_customer_details6;
                     await captureHostContact(_extends({
                         hostId: String(hostId),
                         email: guestContactEmail,
-                        name: (_ref32 = (_ref33 = object == null ? void 0 : (_object_customer_details6 = object.customer_details) == null ? void 0 : _object_customer_details6.name) != null ? _ref33 : reservation['guestName']) != null ? _ref32 : undefined,
+                        name: (_ref37 = (_ref38 = object == null ? void 0 : (_object_customer_details6 = object.customer_details) == null ? void 0 : _object_customer_details6.name) != null ? _ref38 : reservation['guestName']) != null ? _ref37 : undefined,
                         source: 'booking',
                         // A paid stay is a sale (AGL-2612), whatever the source says
                         // about the kind of thing that was bought.
@@ -2638,21 +2723,22 @@ async function findOrderForDispute(paymentIntentId) {
                 }
                 const guestEmail = object == null ? void 0 : (_object_customer_details5 = object.customer_details) == null ? void 0 : _object_customer_details5.email;
                 if (guestEmail) {
-                    var _reservation_nights, _ref34;
-                    const checkIn = new Date(Number(reservation['checkInDayMs'])).toUTCString();
-                    const paid = `$${(paidCents / 100).toFixed(2)}`;
-                    const checkInShort = checkIn.slice(0, 16);
-                    const fallbackText = `Your stay is confirmed!\n\nCheck-in: ${checkInShort}\n` + `Nights: ${reservation['nights']}\n` + `Paid today: ${paid}\n` + `Reference: ${reservationId}`;
+                    var _reservation_nights1, _ref39;
+                    // The balance as a whole line, empty when the stay is paid in
+                    // full so the built-in copy leaves it out.
+                    const balanceNote = balanceCents > 0 ? `Still to pay: ${balance}, at the property. It has not been charged.` : '';
+                    const fallbackText = `Your stay is confirmed!\n\nCheck-in: ${checkInShort}\n` + `Nights: ${reservation['nights']}\n` + `Paid today: ${paid}\n` + (balanceNote ? `${balanceNote}\n` : '') + `Reference: ${reservationId}`;
                     // Site-owner-designed template when published (AGL-771).
                     const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'reservation-confirmed', {
                         'reservation.checkIn': checkInShort,
-                        'reservation.nights': String((_reservation_nights = reservation['nights']) != null ? _reservation_nights : ''),
+                        'reservation.nights': String((_reservation_nights1 = reservation['nights']) != null ? _reservation_nights1 : ''),
                         'reservation.paid': paid,
+                        'reservation.balance': balanceNote,
                         'reservation.ref': String(reservationId)
                     });
                     await sendEmail(_extends({
                         to: guestEmail,
-                        subject: (_ref34 = designed == null ? void 0 : designed.subject) != null ? _ref34 : 'Reservation confirmed',
+                        subject: (_ref39 = designed == null ? void 0 : designed.subject) != null ? _ref39 : 'Reservation confirmed',
                         text: (designed == null ? void 0 : designed.text) || fallbackText
                     }, (designed == null ? void 0 : designed.html) ? {
                         html: designed.html
@@ -2678,7 +2764,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata19;
         const { hostId, cartId, feeCents, couponCode } = (_object_metadata19 = object.metadata) != null ? _object_metadata19 : {};
         if (hostId && cartId) {
-            var _cartSnapshot_data, _ref35, _ref36, _ref37, _ref38, _ref39, _ref40;
+            var _cartSnapshot_data, _ref40, _ref41, _ref42, _ref43, _ref44, _ref45;
             var _object_customer_details7, _object_metadata20, _object_customer_details8, _object_customer_details9, _object_customer_details10, _object_metadata21, _this2, _object_metadata22;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -2744,7 +2830,11 @@ async function findOrderForDispute(paymentIntentId) {
                     unitAmountCents: Math.round(Number((_ref = variant == null ? void 0 : variant.priceUsd) != null ? _ref : 0) * 100)
                 });
             }).filter(Boolean);
-            const shipping = (_ref35 = object == null ? void 0 : object.shipping_details) != null ? _ref35 : object == null ? void 0 : object.customer_details;
+            const shipping = (_ref40 = object == null ? void 0 : object.shipping_details) != null ? _ref40 : object == null ? void 0 : object.customer_details;
+            // The number the merchant knows this order by, carried out of the
+            // transaction for the notices below (AGL-3432). The document id is
+            // the Stripe session id, which appears nowhere in the console.
+            let cartOrderNumber;
             const created = await firestore.runTransaction(async (transaction)=>{
                 var _counter_get, _ref, _ref1, _ref2, _ref3, _ref4, _shipping_address_line1, _shipping_address_line2, _shipping_address_city, _shipping_address_state, _shipping_address_postal_code, _shipping_address_country, _ref5;
                 var _object_metadata, _object_customer_details, _object_customer_details1;
@@ -2754,6 +2844,7 @@ async function findOrderForDispute(paymentIntentId) {
                 ]);
                 if (existing.exists) return false;
                 const number = Number((_counter_get = counter.get('next')) != null ? _counter_get : 1);
+                cartOrderNumber = number;
                 transaction.set(counterRef, {
                     next: number + 1
                 }, {
@@ -2828,6 +2919,9 @@ async function findOrderForDispute(paymentIntentId) {
             // the non-idempotent effects below (inventory / coupon / gift-card
             // decrements) that would otherwise double-apply.
             if (!created) return;
+            const cartOrderLabel = CommerceModel.formatOrderNumber({
+                number: cartOrderNumber
+            }, String(object.id));
             // AGL-2149: loud, not silent. Logged for the platform and pushed to the
             // merchant, once, behind the same `created` guard as every other
             // non-idempotent effect so a redelivery does not re-nag.
@@ -2840,7 +2934,7 @@ async function findOrderForDispute(paymentIntentId) {
                 void notifyHostManagers(String(hostId), {
                     type: 'content.order',
                     title: 'A paid order is missing items',
-                    body: `Order ${object.id} was charged in full but ` + `${unresolvedLines.length} ${unresolvedLines.length === 1 ? 'line' : 'lines'} could not be recorded — the product was deleted during ` + 'checkout. Refund the difference or fulfill it by hand.',
+                    body: `Order ${cartOrderLabel} on {site} was charged in full, but ` + `${unresolvedLines.length} of its lines could not be recorded ` + 'because the product was deleted during ' + 'checkout. Refund the difference or fulfill it by hand.',
                     link: `/${hostId}/products`
                 });
             }
@@ -2882,10 +2976,10 @@ async function findOrderForDispute(paymentIntentId) {
             // matters, and the order carries the buyer identity anyway.
             const licenseKeysByProduct = {};
             for (const line of lineItems){
-                var _ref41;
+                var _ref46;
                 var _object_customer_details11;
                 if (line.productType !== 'digital') continue;
-                const keys = await assignLicenseKeys(firestore, hostRef, String(hostId), line.productId, String(object.id), (_ref41 = object == null ? void 0 : (_object_customer_details11 = object.customer_details) == null ? void 0 : _object_customer_details11.email) != null ? _ref41 : null, line.quantity);
+                const keys = await assignLicenseKeys(firestore, hostRef, String(hostId), line.productId, String(object.id), (_ref46 = object == null ? void 0 : (_object_customer_details11 = object.customer_details) == null ? void 0 : _object_customer_details11.email) != null ? _ref46 : null, line.quantity);
                 if (keys.length) licenseKeysByProduct[line.productId] = keys;
             }
             if (Object.keys(licenseKeysByProduct).length) {
@@ -2898,9 +2992,9 @@ async function findOrderForDispute(paymentIntentId) {
             // Branded receipt (AGL-296): env-gated like every outbound email.
             const buyerEmailForReceipt = object == null ? void 0 : (_object_customer_details7 = object.customer_details) == null ? void 0 : _object_customer_details7.email;
             if (isEmailConfigured() && buyerEmailForReceipt) {
-                var _ref42, _ref43, _ref44, _ref45;
+                var _ref47, _ref48, _ref49, _ref50;
                 const receiptSettings = await hostRef.collection('settings').doc('store').get().catch(()=>null);
-                const receiptFooter = String((_ref42 = receiptSettings == null ? void 0 : receiptSettings.get('receiptFooter')) != null ? _ref42 : '');
+                const receiptFooter = String((_ref47 = receiptSettings == null ? void 0 : receiptSettings.get('receiptFooter')) != null ? _ref47 : '');
                 const linesText = lineItems.map((line)=>`${line.quantity}× ${line.name}${line.variantLabel ? ` (${line.variantLabel})` : ''} — $${(line.unitAmountCents * line.quantity / 100).toFixed(2)}`).join('\n');
                 // The keys assigned above the gate (AGL-2149); the receipt only
                 // reports them.
@@ -2914,9 +3008,9 @@ async function findOrderForDispute(paymentIntentId) {
                 // Digital delivery links (AGL-302); reuse the canonical mint the
                 // tenant download endpoint verifies so the secret can never drift.
                 const downloadToken = mintDownloadToken(hostId, String(object.id));
-                const siteOrigin = String((_ref43 = object == null ? void 0 : object.success_url) != null ? _ref43 : '').replace(/\/\?.*$|\?.*$/, '');
+                const siteOrigin = String((_ref48 = object == null ? void 0 : object.success_url) != null ? _ref48 : '').replace(/\/\?.*$|\?.*$/, '');
                 const downloadLines = lineItems.filter((line)=>line.productType === 'digital').map((line)=>`Download ${line.name}: ${siteOrigin}/api/commerce/download` + `?hostId=${hostId}&orderId=${object.id}` + `&productId=${line.productId}&token=${downloadToken}`).join('\n');
-                const orderTotal = `$${(Number((_ref44 = object == null ? void 0 : object.amount_total) != null ? _ref44 : 0) / 100).toFixed(2)}`;
+                const orderTotal = `$${(Number((_ref49 = object == null ? void 0 : object.amount_total) != null ? _ref49 : 0) / 100).toFixed(2)}`;
                 const orderSummary = [
                     linesText,
                     licenseText,
@@ -2928,11 +3022,15 @@ async function findOrderForDispute(paymentIntentId) {
                 const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'order-receipt', {
                     'order.summary': orderSummary,
                     'order.total': orderTotal,
-                    'order.ref': String(object.id)
+                    'order.ref': String(object.id),
+                    // The store's own Receipt footer (AGL-3432), as a token: the
+                    // built-in copy always renders (AGL-3370), so a footer that is
+                    // only in the fallback text above never reaches a buyer.
+                    'store.receiptFooter': receiptFooter
                 });
                 await sendEmail(_extends({
                     to: buyerEmailForReceipt,
-                    subject: (_ref45 = designed == null ? void 0 : designed.subject) != null ? _ref45 : `Receipt for your order`,
+                    subject: (_ref50 = designed == null ? void 0 : designed.subject) != null ? _ref50 : `Receipt for your order`,
                     text: (designed == null ? void 0 : designed.text) || fallbackText
                 }, (designed == null ? void 0 : designed.html) ? {
                     html: designed.html
@@ -3009,37 +3107,38 @@ async function findOrderForDispute(paymentIntentId) {
             // is byte-identical to what it was before this issue for exactly that
             // reason. The hold refuses the SECOND shopper; it never gates the
             // first one's goods.
-            await releaseStockHold(hostRef, String((_ref36 = (_object_metadata20 = object.metadata) == null ? void 0 : _object_metadata20.stockHoldKey) != null ? _ref36 : ''));
-            void notifyHostManagers(String(hostId), _extends({
+            await releaseStockHold(hostRef, String((_ref41 = (_object_metadata20 = object.metadata) == null ? void 0 : _object_metadata20.stockHoldKey) != null ? _ref41 : ''));
+            const cartOrderTotal = `$${(Number((_ref42 = object == null ? void 0 : object.amount_total) != null ? _ref42 : 0) / 100).toFixed(2)}`;
+            const cartUnits = lineItems.reduce((sum, line)=>sum + line.quantity, 0);
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
-                title: `New order — $${(Number((_ref37 = object == null ? void 0 : object.amount_total) != null ? _ref37 : 0) / 100).toFixed(2)}`
-            }, (object == null ? void 0 : (_object_customer_details8 = object.customer_details) == null ? void 0 : _object_customer_details8.email) ? {
-                body: `From ${object.customer_details.email}`
-            } : {}, {
+                title: `New order on {site} — ${cartOrderTotal}`,
+                // What came in, from whom and where (AGL-3432).
+                body: `Order ${cartOrderLabel} came in on {site}: ${cartUnits} ` + `item${cartUnits === 1 ? '' : 's'}, ${cartOrderTotal}` + ((object == null ? void 0 : (_object_customer_details8 = object.customer_details) == null ? void 0 : _object_customer_details8.email) ? `, from ${object.customer_details.email}.` : '.'),
                 link: `/${hostId}/products`
-            }));
+            });
             await captureHostContact(_extends({
                 hostId: String(hostId),
                 email: object == null ? void 0 : (_object_customer_details9 = object.customer_details) == null ? void 0 : _object_customer_details9.email,
-                name: (_ref38 = object == null ? void 0 : (_object_customer_details10 = object.customer_details) == null ? void 0 : _object_customer_details10.name) != null ? _ref38 : undefined,
+                name: (_ref43 = object == null ? void 0 : (_object_customer_details10 = object.customer_details) == null ? void 0 : _object_customer_details10.name) != null ? _ref43 : undefined,
                 source: 'order',
                 initialLifecycleStage: 'customer'
             }, marketingOptIn ? {
                 marketingConsent: true
             } : {}, {
-                purchaseCents: Number((_ref39 = object == null ? void 0 : object.amount_total) != null ? _ref39 : 0),
+                purchaseCents: Number((_ref44 = object == null ? void 0 : object.amount_total) != null ? _ref44 : 0),
                 interaction: {
                     refId: String(object.id),
-                    summary: `Placed an order ($${(Number((_ref40 = object == null ? void 0 : object.amount_total) != null ? _ref40 : 0) / 100).toFixed(2)})`
+                    summary: `Placed an order ($${(Number((_ref45 = object == null ? void 0 : object.amount_total) != null ? _ref45 : 0) / 100).toFixed(2)})`
                 }
             }));
             if (couponCode) {
-                var _ref46;
+                var _ref51;
                 var _object_metadata23;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('coupons').doc(String(couponCode)),
-                    holdKey: String((_ref46 = (_object_metadata23 = object.metadata) == null ? void 0 : _object_metadata23.couponHoldKey) != null ? _ref46 : ''),
+                    holdKey: String((_ref51 = (_object_metadata23 = object.metadata) == null ? void 0 : _object_metadata23.couponHoldKey) != null ? _ref51 : ''),
                     orderRef,
                     label: `coupon ${couponCode}`,
                     detail: `Coupon ${couponCode} was applied to this order but no longer ` + 'exists, so the redemption is uncounted against its limit.'
@@ -3047,10 +3146,10 @@ async function findOrderForDispute(paymentIntentId) {
             }
             // Gift card balance settlement (AGL-322, made a settlement by AGL-2449).
             if ((_object_metadata21 = object.metadata) == null ? void 0 : _object_metadata21.giftCardCode) {
-                var _ref47, _ref48;
+                var _ref52, _ref53;
                 var _object_metadata24, _object_metadata25;
-                const giftCardCents = Number((_ref47 = (_object_metadata24 = object.metadata) == null ? void 0 : _object_metadata24.giftCardCents) != null ? _ref47 : 0);
-                const holdKey = String((_ref48 = (_object_metadata25 = object.metadata) == null ? void 0 : _object_metadata25.giftCardHoldKey) != null ? _ref48 : '');
+                const giftCardCents = Number((_ref52 = (_object_metadata24 = object.metadata) == null ? void 0 : _object_metadata24.giftCardCents) != null ? _ref52 : 0);
+                const holdKey = String((_ref53 = (_object_metadata25 = object.metadata) == null ? void 0 : _object_metadata25.giftCardHoldKey) != null ? _ref53 : '');
                 const cardRef = hostRef.collection('giftCards').doc(String(object.metadata.giftCardCode));
                 const orphanNote = `$${(giftCardCents / 100).toFixed(2)} was applied from gift card ` + `${object.metadata.giftCardCode}, which no longer exists. The ` + 'balance was not deducted from any card.';
                 if (!holdKey) {
@@ -3130,7 +3229,7 @@ async function findOrderForDispute(paymentIntentId) {
                 const lineProduct = productsById.get(line.productId);
                 if (!(lineProduct == null ? void 0 : lineProduct.giftCard)) continue;
                 for(let unit = 0; unit < line.quantity; unit += 1){
-                    var _ref49, _ref50;
+                    var _ref54, _ref55;
                     var _object_customer_details12, _object_customer_details13, _object_customer_details14;
                     const code = `GC-${createHmac('sha256', String(object.id)).update(`${line.productId}:${unit}:${Date.now()}`).digest('hex').slice(0, 12).toUpperCase()}`;
                     // THE EMAIL IS GATED ON THE WRITE (AGL-2161). This `.set()` used
@@ -3149,13 +3248,13 @@ async function findOrderForDispute(paymentIntentId) {
                     const issued = await hostRef.collection('giftCards').doc(code).set({
                         initialCents: line.unitAmountCents,
                         balanceCents: line.unitAmountCents,
-                        recipientEmail: (_ref49 = object == null ? void 0 : (_object_customer_details12 = object.customer_details) == null ? void 0 : _object_customer_details12.email) != null ? _ref49 : null,
+                        recipientEmail: (_ref54 = object == null ? void 0 : (_object_customer_details12 = object.customer_details) == null ? void 0 : _object_customer_details12.email) != null ? _ref54 : null,
                         orderId: String(object.id),
                         // Which line bought it, so a refund that withdraws that line
                         // voids this card and no other (AGL-3363).
                         productId: line.productId,
                         // What the console's Gift cards search asks (AGL-3321).
-                        searchTokens: giftCardSearchTokens(code, (_ref50 = object == null ? void 0 : (_object_customer_details13 = object.customer_details) == null ? void 0 : _object_customer_details13.email) != null ? _ref50 : null),
+                        searchTokens: giftCardSearchTokens(code, (_ref55 = object == null ? void 0 : (_object_customer_details13 = object.customer_details) == null ? void 0 : _object_customer_details13.email) != null ? _ref55 : null),
                         createdAtMs: Date.now()
                     }).then(()=>true).catch((error)=>{
                         console.error('Gift card issuance failed', hostId, code, error);
@@ -3176,24 +3275,27 @@ async function findOrderForDispute(paymentIntentId) {
                         void notifyHostManagers(String(hostId), {
                             type: 'content.order',
                             title: 'Gift card paid for but not issued',
-                            body: `A $${(line.unitAmountCents / 100).toFixed(2)} gift card on ` + `order ${String(object.id)} could not be written, so no code ` + 'was emailed to the buyer. Issue one by hand from Gift cards.',
+                            body: `A $${(line.unitAmountCents / 100).toFixed(2)} gift card ` + `bought on {site} (order ${cartOrderLabel}) could not be ` + 'written, so no code was emailed to the buyer. Issue one by ' + 'hand from Gift cards.',
                             link: `/${hostId}/products`
                         });
                         continue;
                     }
                     const giftTo = object == null ? void 0 : (_object_customer_details14 = object.customer_details) == null ? void 0 : _object_customer_details14.email;
                     if (giftTo) {
-                        var _ref51;
+                        var _ref56;
                         const giftValue = `$${(line.unitAmountCents / 100).toFixed(2)}`;
                         const fallbackText = `Gift card code: ${code}\n` + `Value: ${giftValue}\n\n` + 'Enter it at checkout to apply the balance.';
-                        // Site-owner-designed template when published (AGL-771).
+                        // Site-owner-designed template when published (AGL-771). A
+                        // bought card carries no note; empty, so the built-in copy
+                        // leaves that line out.
                         const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'gift-card', {
                             'giftcard.code': code,
-                            'giftcard.value': giftValue
+                            'giftcard.value': giftValue,
+                            'giftcard.note': ''
                         });
                         await sendEmail(_extends({
                             to: giftTo,
-                            subject: (_ref51 = designed == null ? void 0 : designed.subject) != null ? _ref51 : 'Your gift card',
+                            subject: (_ref56 = designed == null ? void 0 : designed.subject) != null ? _ref56 : 'Your gift card',
                             text: (designed == null ? void 0 : designed.text) || fallbackText
                         }, (designed == null ? void 0 : designed.html) ? {
                             html: designed.html
@@ -3214,12 +3316,12 @@ async function findOrderForDispute(paymentIntentId) {
             }
             // Discounts engine redemptions (AGL-305).
             if ((_object_metadata22 = object.metadata) == null ? void 0 : _object_metadata22.discountId) {
-                var _ref52;
+                var _ref57;
                 var _object_metadata26;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('discounts').doc(String(object.metadata.discountId)),
-                    holdKey: String((_ref52 = (_object_metadata26 = object.metadata) == null ? void 0 : _object_metadata26.discountHoldKey) != null ? _ref52 : ''),
+                    holdKey: String((_ref57 = (_object_metadata26 = object.metadata) == null ? void 0 : _object_metadata26.discountHoldKey) != null ? _ref57 : ''),
                     orderRef,
                     label: `discount ${object.metadata.discountId}`,
                     detail: `Discount ${object.metadata.discountId} was applied to this ` + 'order but no longer exists, so the redemption is uncounted ' + 'against its limit.'
@@ -3233,7 +3335,7 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata27;
         const { hostId, orderId, productId } = (_object_metadata27 = object.metadata) != null ? _object_metadata27 : {};
         if (hostId && orderId) {
-            var _ref53, _ref54, _ref55;
+            var _ref58, _ref59, _ref60;
             var _object_total_details, _object_total_details1;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
@@ -3272,7 +3374,7 @@ async function findOrderForDispute(paymentIntentId) {
             //
             // The whole map is written rather than one field of it, so a
             // `merge`-set's nested-map merge and a plain replace agree.
-            const shippingCents = Math.max(0, Math.round(Number((_ref53 = object == null ? void 0 : (_object_total_details = object.total_details) == null ? void 0 : _object_total_details.amount_shipping) != null ? _ref53 : 0) || 0));
+            const shippingCents = Math.max(0, Math.round(Number((_ref58 = object == null ? void 0 : (_object_total_details = object.total_details) == null ? void 0 : _object_total_details.amount_shipping) != null ? _ref58 : 0) || 0));
             // Tax joins shipping in the fold (AGL-1953). `draft-order.ts` now
             // declares tax — a Stripe Tax Rate for a `manual` store, whose figure
             // it already froze into `totals`, or `automatic_tax` for a `stripe`
@@ -3285,8 +3387,8 @@ async function findOrderForDispute(paymentIntentId) {
             // `amount_tax` 0 here (its own figure stays on the order, and its
             // AGL-1953 witness is metadata, not this field), and a draft composed
             // by a store with no tax reports 0 too.
-            const stripeTaxCents = Math.max(0, Math.round(Number((_ref54 = object == null ? void 0 : (_object_total_details1 = object.total_details) == null ? void 0 : _object_total_details1.amount_tax) != null ? _ref54 : 0) || 0));
-            const chargedTotalCents = Number((_ref55 = object == null ? void 0 : object.amount_total) != null ? _ref55 : NaN);
+            const stripeTaxCents = Math.max(0, Math.round(Number((_ref59 = object == null ? void 0 : (_object_total_details1 = object.total_details) == null ? void 0 : _object_total_details1.amount_tax) != null ? _ref59 : 0) || 0));
+            const chargedTotalCents = Number((_ref60 = object == null ? void 0 : object.amount_total) != null ? _ref60 : NaN);
             // `shipping_details` ONLY, unlike the cart branch's
             // `?? customer_details` fallback: that address is the BILLING one, and
             // a card sale rung up at a register completes here too — it must not
@@ -3298,6 +3400,8 @@ async function findOrderForDispute(paymentIntentId) {
             // transaction below. Carried out so the money can be reported after
             // the transaction commits.
             let paidAfterCancel = false;
+            // The canceled order's number, for the notice below (AGL-3432).
+            let canceledOrderLabel = '';
             const flipped = await firestore.runTransaction(async (transaction)=>{
                 var _snapshot_data, _snapshot_data1, _ref, _ref1, _ref2, _ref3, _ref4, _ref5, _lifted_totals, _ref6, _shipTo_name, _shipTo_address_line1, _shipTo_address_line2, _shipTo_address_city, _shipTo_address_state, _shipTo_address_postal_code, _shipTo_address_country;
                 var _object_customer_details, _object_metadata, _object_customer_details1, _lifted_totals1;
@@ -3323,6 +3427,7 @@ async function findOrderForDispute(paymentIntentId) {
                     const alreadyNoted = ((_lifted_timeline = lifted.timeline) != null ? _lifted_timeline : []).some((entry)=>(entry == null ? void 0 : entry.event) === 'paid-after-cancel');
                     if (lifted.status === 'cancelled' && !alreadyNoted) {
                         paidAfterCancel = true;
+                        canceledOrderLabel = CommerceModel.formatOrderNumber(lifted, String(orderId));
                         // `set(..., { merge: true })`, the same call the paying branch
                         // below makes on this document. Nothing here is a nested map, so
                         // merge and replace agree, and the read above has just proven
@@ -3395,13 +3500,13 @@ async function findOrderForDispute(paymentIntentId) {
                 await notifyHostManagers(String(hostId), {
                     type: 'content.order',
                     title: 'A canceled order was paid',
-                    body: `Order ${orderId} was canceled, but its payment link was still ` + 'live and has been paid. The money is in Stripe and no sale was ' + 'recorded — refund it in Stripe or reconcile it by hand.',
+                    body: `Order ${canceledOrderLabel || orderId} on {site} was canceled, ` + 'but its payment link was still live and has been paid. The ' + 'money is in Stripe and no sale was recorded — refund it in ' + 'Stripe or reconcile it by hand.',
                     link: `/${hostId}/orders`
                 });
             }
             if (flipped) {
-                var _ref56, _ref57;
-                var _object_metadata28, _object_customer_details15;
+                var _ref61, _ref62, _ref63, _ref64, _ref65, _ref66;
+                var _object_metadata28, _object_customer_details15, _order_totals, _object_customer_details16;
                 const order = paidOrder;
                 // Discounts engine redemptions (AGL-305), for this branch's BOTH
                 // tenants: a console draft order and a POS card sale, which carry the
@@ -3416,20 +3521,25 @@ async function findOrderForDispute(paymentIntentId) {
                 // the hold existed, which Stripe's at-least-once delivery would run
                 // twice. The transition is what makes it once.
                 if ((_object_metadata28 = object.metadata) == null ? void 0 : _object_metadata28.discountId) {
-                    var _ref58;
+                    var _ref67;
                     var _object_metadata29;
                     await settleRedemption({
                         firestore,
                         ref: hostRef.collection('discounts').doc(String(object.metadata.discountId)),
-                        holdKey: String((_ref58 = (_object_metadata29 = object.metadata) == null ? void 0 : _object_metadata29.discountHoldKey) != null ? _ref58 : ''),
+                        holdKey: String((_ref67 = (_object_metadata29 = object.metadata) == null ? void 0 : _object_metadata29.discountHoldKey) != null ? _ref67 : ''),
                         orderRef,
                         label: `discount ${object.metadata.discountId}`,
                         detail: `Discount ${object.metadata.discountId} was applied to this ` + 'order but no longer exists, so the redemption is uncounted ' + 'against its limit.'
                     });
                 }
+                const draftLabel = CommerceModel.formatOrderNumber(order, String(orderId));
+                const draftPayer = (_ref61 = (_ref62 = object == null ? void 0 : (_object_customer_details15 = object.customer_details) == null ? void 0 : _object_customer_details15.email) != null ? _ref62 : order.customerEmail) != null ? _ref61 : null;
+                const draftPaidCents = Number((_ref63 = object == null ? void 0 : object.amount_total) != null ? _ref63 : 0) || Number((_ref64 = (_order_totals = order.totals) == null ? void 0 : _order_totals.totalCents) != null ? _ref64 : 0);
                 void notifyHostManagers(String(hostId), {
                     type: 'content.order',
-                    title: `Draft order paid — ${CommerceModel.formatOrderNumber(order, String(orderId))}`,
+                    title: `Draft order paid — ${draftLabel}`,
+                    // Who paid what, and where (AGL-3432).
+                    body: `${draftPayer != null ? draftPayer : 'The buyer'} paid draft order ${draftLabel} ` + `on {site}: $${(draftPaidCents / 100).toFixed(2)}.`,
                     link: `/${hostId}/products`
                 });
                 // Contacts ingestion (AGL-1748): this branch flipped the order,
@@ -3444,15 +3554,15 @@ async function findOrderForDispute(paymentIntentId) {
                 // figure the draft was priced at, and the two agree by construction,
                 // but only one of them is the money that moved. Stored totals remain
                 // the fallback for a session shape that reports no total.
-                const draftEmail = (_ref56 = (_ref57 = object == null ? void 0 : (_object_customer_details15 = object.customer_details) == null ? void 0 : _object_customer_details15.email) != null ? _ref57 : order.customerEmail) != null ? _ref56 : null;
+                const draftEmail = (_ref65 = (_ref66 = object == null ? void 0 : (_object_customer_details16 = object.customer_details) == null ? void 0 : _object_customer_details16.email) != null ? _ref66 : order.customerEmail) != null ? _ref65 : null;
                 if (draftEmail) {
-                    var _ref59, _ref60, _ref61;
-                    var _order_totals, _object_customer_details16;
-                    const chargedCents = Number((_ref59 = object == null ? void 0 : object.amount_total) != null ? _ref59 : 0) || Number((_ref60 = (_order_totals = order.totals) == null ? void 0 : _order_totals.totalCents) != null ? _ref60 : 0);
+                    var _ref68, _ref69, _ref70;
+                    var _order_totals1, _object_customer_details17;
+                    const chargedCents = Number((_ref68 = object == null ? void 0 : object.amount_total) != null ? _ref68 : 0) || Number((_ref69 = (_order_totals1 = order.totals) == null ? void 0 : _order_totals1.totalCents) != null ? _ref69 : 0);
                     await captureHostContact(_extends({
                         hostId: String(hostId),
                         email: draftEmail,
-                        name: (_ref61 = object == null ? void 0 : (_object_customer_details16 = object.customer_details) == null ? void 0 : _object_customer_details16.name) != null ? _ref61 : undefined,
+                        name: (_ref70 = object == null ? void 0 : (_object_customer_details17 = object.customer_details) == null ? void 0 : _object_customer_details17.name) != null ? _ref70 : undefined,
                         source: 'order',
                         initialLifecycleStage: 'customer'
                     }, chargedCents > 0 ? {
@@ -3465,15 +3575,15 @@ async function findOrderForDispute(paymentIntentId) {
                     }));
                 }
                 if (productId) {
-                    var _productSnapshot_data, _ref62, _ref63;
+                    var _productSnapshot_data, _ref71, _ref72;
                     var _object_metadata30, _lifted_variants_, _order_lineItems_, _order_lineItems;
                     const productRef = hostRef.collection('products').doc(String(productId));
                     const productSnapshot = await productRef.get();
                     const lifted = CommerceModel.liftLegacyProduct((_productSnapshot_data = productSnapshot.data()) != null ? _productSnapshot_data : {
                         name: 'Product'
                     });
-                    const soldVariantId = String((_ref62 = (_object_metadata30 = object.metadata) == null ? void 0 : _object_metadata30.variantId) != null ? _ref62 : '') || ((_lifted_variants_ = lifted.variants[0]) == null ? void 0 : _lifted_variants_.id);
-                    const quantity = (_ref63 = (_order_lineItems = order.lineItems) == null ? void 0 : (_order_lineItems_ = _order_lineItems[0]) == null ? void 0 : _order_lineItems_.quantity) != null ? _ref63 : 1;
+                    const soldVariantId = String((_ref71 = (_object_metadata30 = object.metadata) == null ? void 0 : _object_metadata30.variantId) != null ? _ref71 : '') || ((_lifted_variants_ = lifted.variants[0]) == null ? void 0 : _lifted_variants_.id);
+                    const quantity = (_ref72 = (_order_lineItems = order.lineItems) == null ? void 0 : (_order_lineItems_ = _order_lineItems[0]) == null ? void 0 : _order_lineItems_.quantity) != null ? _ref72 : 1;
                     if (soldVariantId) {
                         // Atomic since AGL-2320.
                         const moved = await decrementVariantStock({
@@ -3525,10 +3635,10 @@ async function findOrderForDispute(paymentIntentId) {
                     // would decrement it twice.
                     const paidProducts = new Map();
                     for (const line of (_order_lineItems1 = order.lineItems) != null ? _order_lineItems1 : []){
-                        var _ref64, _ref65, _line_variantId1;
+                        var _ref73, _ref74, _line_variantId1;
                         var _lineProduct_variants_;
-                        const lineProductId = String((_ref64 = line == null ? void 0 : line.productId) != null ? _ref64 : '');
-                        const soldQty = Math.round(Number((_ref65 = line == null ? void 0 : line.quantity) != null ? _ref65 : 0));
+                        const lineProductId = String((_ref73 = line == null ? void 0 : line.productId) != null ? _ref73 : '');
+                        const soldQty = Math.round(Number((_ref74 = line == null ? void 0 : line.quantity) != null ? _ref74 : 0));
                         if (!lineProductId || !(soldQty > 0)) continue;
                         // Firestore reserves `__…__` ids and `.doc()` throws
                         // synchronously on one; a corrupt line must not fail the
@@ -3591,8 +3701,8 @@ async function findOrderForDispute(paymentIntentId) {
         var _object_metadata31;
         const { hostId, productId, feeCents, couponCode } = (_object_metadata31 = object.metadata) != null ? _object_metadata31 : {};
         if (hostId && productId) {
-            var _ref66, _productForSnapshot_get1, _productForSnapshot_data1, _ref67, _ref68, _ref69, _ref70, _ref71, _ref72, _ref73;
-            var _object_metadata32, _buyNowLineItems_, _object_customer_details17, _object_customer_details18, _object_customer_details19, _object_metadata33;
+            var _ref75, _productForSnapshot_get2, _productForSnapshot_data1, _ref76, _ref77, _ref78, _ref79, _ref80, _ref81, _ref82;
+            var _object_metadata32, _buyNowLineItems_, _object_customer_details18, _object_customer_details19, _object_customer_details20, _object_metadata33;
             const firestore = firebaseAdmin.app().firestore();
             const hostRef = firestore.collection('hosts').doc(String(hostId));
             // Orders v1 (AGL-283): line-item snapshot + totals + timeline with
@@ -3602,9 +3712,9 @@ async function findOrderForDispute(paymentIntentId) {
             // is bounded to Stripe's at-least-once edge).
             const orderRef = hostRef.collection('orders').doc(String(object.id));
             const counterRef = hostRef.collection('counters').doc('orders');
-            const amountCents = Number((_ref66 = object == null ? void 0 : object.amount_total) != null ? _ref66 : 0);
+            const amountCents = Number((_ref75 = object == null ? void 0 : object.amount_total) != null ? _ref75 : 0);
             const productForSnapshot = await hostRef.collection('products').doc(String(productId)).get();
-            const snapshotName = String((_productForSnapshot_get1 = productForSnapshot.get('name')) != null ? _productForSnapshot_get1 : 'Product');
+            const snapshotName = String((_productForSnapshot_get2 = productForSnapshot.get('name')) != null ? _productForSnapshot_get2 : 'Product');
             // AGL-1711: the line item and totals used to be fabricated from
             // `amount_total` alone — one unit, priced at the whole charge, with tax
             // and discount recorded as 0. `computeBuyNowOrder` rebuilds the real
@@ -3615,7 +3725,7 @@ async function findOrderForDispute(paymentIntentId) {
                 name: snapshotName
             });
             const soldVariant = ((_object_metadata32 = object.metadata) == null ? void 0 : _object_metadata32.variantId) ? liftedForSnapshot.variants.find((item)=>item.id === String(object.metadata.variantId)) : liftedForSnapshot.variants[0];
-            const variantOptions = Object.values((_ref67 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref67 : {});
+            const variantOptions = Object.values((_ref76 = soldVariant == null ? void 0 : soldVariant.options) != null ? _ref76 : {});
             const { lineItems: buyNowLineItems, totals: buyNowTotals } = CommerceModel.computeBuyNowOrder(object, _extends({
                 name: snapshotName
             }, variantOptions.length ? {
@@ -3627,7 +3737,10 @@ async function findOrderForDispute(paymentIntentId) {
             } : {}, liftedForSnapshot.supplierId ? {
                 supplierId: liftedForSnapshot.supplierId
             } : {}));
-            const soldQuantity = (_ref68 = (_buyNowLineItems_ = buyNowLineItems[0]) == null ? void 0 : _buyNowLineItems_.quantity) != null ? _ref68 : 1;
+            const soldQuantity = (_ref77 = (_buyNowLineItems_ = buyNowLineItems[0]) == null ? void 0 : _buyNowLineItems_.quantity) != null ? _ref77 : 1;
+            // The number the merchant knows this order by, for the notices below
+            // (AGL-3432).
+            let buyNowOrderNumber;
             const created = await firestore.runTransaction(async (transaction)=>{
                 var _counter_get, _ref, _ref1, _ref2, _ref3;
                 var _object_metadata, _object_customer_details, _object_customer_details1;
@@ -3637,6 +3750,7 @@ async function findOrderForDispute(paymentIntentId) {
                 ]);
                 if (existing.exists) return false;
                 const number = Number((_counter_get = counter.get('next')) != null ? _counter_get : 1);
+                buyNowOrderNumber = number;
                 transaction.set(counterRef, {
                     next: number + 1
                 }, {
@@ -3683,16 +3797,19 @@ async function findOrderForDispute(paymentIntentId) {
             // Redelivery guard (AGL-498): skip the notification + fulfilment side
             // effects when this order already existed.
             if (!created) return;
+            const buyNowOrderLabel = CommerceModel.formatOrderNumber({
+                number: buyNowOrderNumber
+            }, String(object.id));
             // In-app order notification (wave v6): host managers see sales
-            // in the bell, not just the owner's email.
-            void notifyHostManagers(String(hostId), _extends({
+            // in the bell, not just the owner's email: what came in, from whom
+            // and where (AGL-3432).
+            const buyNowTotal = `$${(Number((_ref78 = object == null ? void 0 : object.amount_total) != null ? _ref78 : 0) / 100).toFixed(2)}`;
+            void notifyHostManagers(String(hostId), {
                 type: 'content.order',
-                title: `New order — $${(Number((_ref69 = object == null ? void 0 : object.amount_total) != null ? _ref69 : 0) / 100).toFixed(2)}`
-            }, (object == null ? void 0 : (_object_customer_details17 = object.customer_details) == null ? void 0 : _object_customer_details17.email) ? {
-                body: `From ${object.customer_details.email}`
-            } : {}, {
+                title: `New order on {site} — ${buyNowTotal}`,
+                body: `Order ${buyNowOrderLabel} came in on {site}: ${soldQuantity}× ` + `${snapshotName}, ${buyNowTotal}` + ((object == null ? void 0 : (_object_customer_details18 = object.customer_details) == null ? void 0 : _object_customer_details18.email) ? `, from ${object.customer_details.email}.` : '.'),
                 link: `/${hostId}/products`
-            }));
+            });
             // Dropship routing (AGL-289): paid lines with a supplier notify
             // it (signed webhook and/or email) and stash a callback token so
             // the supplier can post tracking back. Plan-gated; failures never
@@ -3713,8 +3830,8 @@ async function findOrderForDispute(paymentIntentId) {
             // `supplier-outbox.ts` retries out of band.
             await (async ()=>{
                 try {
-                    var _routedProduct_get, _ref, _ref1;
-                    var _object_customer_details, _object_customer_details1;
+                    var _routedProduct_get, _ref, _ref1, _ref2, _shipTo_address_line1, _shipTo_address_line2, _shipTo_address_city, _shipTo_address_state, _shipTo_address_postal_code, _shipTo_address_country;
+                    var _object_shipping_details, _object_customer_details, _object_customer_details1;
                     const routedOrg = await getOrgForHost(String(hostId));
                     if (!Aglyn.checkEntitlement(routedOrg == null ? void 0 : routedOrg.org, 'dropshipRouting')) {
                         return;
@@ -3737,6 +3854,11 @@ async function findOrderForDispute(paymentIntentId) {
                     }, {
                         merge: true
                     });
+                    // Where the parcel goes (AGL-3432): the address the shopper gave
+                    // at checkout. Buy-now asks for one only when the store ships, so
+                    // it can be absent, and a billing address is never offered in its
+                    // place.
+                    const shipTo = (object == null ? void 0 : (_object_shipping_details = object.shipping_details) == null ? void 0 : _object_shipping_details.address) ? object.shipping_details : null;
                     const payload = {
                         hostId: String(hostId),
                         orderId: String(object.id),
@@ -3746,7 +3868,15 @@ async function findOrderForDispute(paymentIntentId) {
                         // the buyer paid for.
                         quantity: soldQuantity,
                         customerEmail: (_ref = object == null ? void 0 : (_object_customer_details = object.customer_details) == null ? void 0 : _object_customer_details.email) != null ? _ref : null,
-                        shippingName: (_ref1 = object == null ? void 0 : (_object_customer_details1 = object.customer_details) == null ? void 0 : _object_customer_details1.name) != null ? _ref1 : null,
+                        shippingName: (_ref1 = (_ref2 = shipTo == null ? void 0 : shipTo.name) != null ? _ref2 : object == null ? void 0 : (_object_customer_details1 = object.customer_details) == null ? void 0 : _object_customer_details1.name) != null ? _ref1 : null,
+                        shippingAddress: shipTo ? {
+                            line1: (_shipTo_address_line1 = shipTo.address.line1) != null ? _shipTo_address_line1 : null,
+                            line2: (_shipTo_address_line2 = shipTo.address.line2) != null ? _shipTo_address_line2 : null,
+                            city: (_shipTo_address_city = shipTo.address.city) != null ? _shipTo_address_city : null,
+                            state: (_shipTo_address_state = shipTo.address.state) != null ? _shipTo_address_state : null,
+                            postalCode: (_shipTo_address_postal_code = shipTo.address.postal_code) != null ? _shipTo_address_postal_code : null,
+                            country: (_shipTo_address_country = shipTo.address.country) != null ? _shipTo_address_country : null
+                        } : null,
                         updateUrl: `https://${requestHost}/api/commerce/supplier-update` + `?hostId=${hostId}&orderId=${object.id}&token=${supplierToken}`
                     };
                     if (supplier.webhookUrl) {
@@ -3771,11 +3901,31 @@ async function findOrderForDispute(paymentIntentId) {
                         });
                     }
                     if (supplier.email) {
-                        var _ref2, _payload_shippingName;
+                        var _resolveHostToken, _ref3, _payload_shippingName;
+                        // Which store is asking (AGL-3432): a supplier serves several,
+                        // and this mail goes out with no site header to say so.
+                        const storeName = (_resolveHostToken = resolveHostToken('businessName', await hostRef.get().then((snapshot)=>snapshot.data()).catch(()=>undefined))) != null ? _resolveHostToken : 'A store';
+                        const recipient = (_ref3 = (_payload_shippingName = payload.shippingName) != null ? _payload_shippingName : payload.customerEmail) != null ? _ref3 : 'the buyer';
+                        const address = payload.shippingAddress ? [
+                            payload.shippingAddress.line1,
+                            payload.shippingAddress.line2,
+                            [
+                                payload.shippingAddress.city,
+                                [
+                                    payload.shippingAddress.state,
+                                    payload.shippingAddress.postalCode
+                                ].filter(Boolean).join(' ')
+                            ].filter(Boolean).join(', '),
+                            payload.shippingAddress.country
+                        ].filter(Boolean).join(', ') : '';
                         await sendEmail({
                             to: supplier.email,
-                            subject: `New order to fulfill: ${payload.productName}`,
-                            text: `${payload.quantity}× ${payload.productName}\n` + `Ship to: ${(_ref2 = (_payload_shippingName = payload.shippingName) != null ? _payload_shippingName : payload.customerEmail) != null ? _ref2 : 'see order'}\n\n` + `Add tracking: ${payload.updateUrl}&trackingNumber=TRACKING&carrier=CARRIER`,
+                            subject: `New order to fulfill for ${storeName}: ${payload.productName}`,
+                            // The tracking link opens a form for the carrier and the
+                            // number, so it carries no placeholders: a link with
+                            // `trackingNumber=TRACKING` in it, opened unedited, records
+                            // that word as the tracking.
+                            text: `${storeName} has a new order for you to ship: ` + `${payload.quantity}× ${payload.productName} ` + `(order ${buyNowOrderLabel}).\n\n` + (address ? `Ship to: ${recipient}, ${address}\n\n` : `Ship to: ${recipient}. No shipping address was ` + `collected at checkout; ask ${storeName} for it.\n\n`) + 'When it ships, open this link to enter the carrier and ' + `tracking number:\n${payload.updateUrl}`,
                             fromName: (await brandFor(hostId)).fromName,
                             sendingIdentity: await hostSendingIdentity(String(hostId)),
                             audience: 'tenant',
@@ -3795,14 +3945,14 @@ async function findOrderForDispute(paymentIntentId) {
             // Contacts ingestion (AGL-197): buyers become contacts.
             await captureHostContact({
                 hostId: String(hostId),
-                email: object == null ? void 0 : (_object_customer_details18 = object.customer_details) == null ? void 0 : _object_customer_details18.email,
-                name: (_ref70 = object == null ? void 0 : (_object_customer_details19 = object.customer_details) == null ? void 0 : _object_customer_details19.name) != null ? _ref70 : undefined,
+                email: object == null ? void 0 : (_object_customer_details19 = object.customer_details) == null ? void 0 : _object_customer_details19.email,
+                name: (_ref79 = object == null ? void 0 : (_object_customer_details20 = object.customer_details) == null ? void 0 : _object_customer_details20.name) != null ? _ref79 : undefined,
                 source: 'order',
                 initialLifecycleStage: 'customer',
-                purchaseCents: Number((_ref71 = object == null ? void 0 : object.amount_total) != null ? _ref71 : 0),
+                purchaseCents: Number((_ref80 = object == null ? void 0 : object.amount_total) != null ? _ref80 : 0),
                 interaction: {
                     refId: String(object.id),
-                    summary: `Placed an order ($${(Number((_ref72 = object == null ? void 0 : object.amount_total) != null ? _ref72 : 0) / 100).toFixed(2)})`
+                    summary: `Placed an order ($${(Number((_ref81 = object == null ? void 0 : object.amount_total) != null ? _ref81 : 0) / 100).toFixed(2)})`
                 }
             });
             const productRef = hostRef.collection('products').doc(String(productId));
@@ -3820,12 +3970,12 @@ async function findOrderForDispute(paymentIntentId) {
             // serialize; the snapshot above is still read, for the product NAME on
             // the receipt below, and no longer decides any count.
             {
-                var _productSnapshot_data2, _ref74;
+                var _productSnapshot_data2, _ref83;
                 var _object_metadata34, _lifted_variants_1;
                 const lifted = CommerceModel.liftLegacyProduct((_productSnapshot_data2 = productSnapshot.data()) != null ? _productSnapshot_data2 : {
                     name: 'Product'
                 });
-                const soldVariantId = String((_ref74 = (_object_metadata34 = object.metadata) == null ? void 0 : _object_metadata34.variantId) != null ? _ref74 : '') || ((_lifted_variants_1 = lifted.variants[0]) == null ? void 0 : _lifted_variants_1.id);
+                const soldVariantId = String((_ref83 = (_object_metadata34 = object.metadata) == null ? void 0 : _object_metadata34.variantId) != null ? _ref83 : '') || ((_lifted_variants_1 = lifted.variants[0]) == null ? void 0 : _lifted_variants_1.id);
                 if (soldVariantId) {
                     // AGL-1711: `-1` regardless of how many units were bought, so a
                     // 3-unit buy-now sale decremented stock by one and the difference
@@ -3856,14 +4006,14 @@ async function findOrderForDispute(paymentIntentId) {
             // Settlement, the same way round and for the same reason as the cart
             // branch above (AGL-2356): the decrement lands first, then the
             // reservation is dropped.
-            await releaseStockHold(hostRef, String((_ref73 = (_object_metadata33 = object.metadata) == null ? void 0 : _object_metadata33.stockHoldKey) != null ? _ref73 : ''));
+            await releaseStockHold(hostRef, String((_ref82 = (_object_metadata33 = object.metadata) == null ? void 0 : _object_metadata33.stockHoldKey) != null ? _ref82 : ''));
             if (couponCode) {
-                var _ref75;
+                var _ref84;
                 var _object_metadata35;
                 await settleRedemption({
                     firestore,
                     ref: hostRef.collection('coupons').doc(String(couponCode)),
-                    holdKey: String((_ref75 = (_object_metadata35 = object.metadata) == null ? void 0 : _object_metadata35.couponHoldKey) != null ? _ref75 : ''),
+                    holdKey: String((_ref84 = (_object_metadata35 = object.metadata) == null ? void 0 : _object_metadata35.couponHoldKey) != null ? _ref84 : ''),
                     orderRef,
                     label: `coupon ${couponCode}`,
                     detail: `Coupon ${couponCode} was applied to this order but no longer ` + 'exists, so the redemption is uncounted against its limit.'
@@ -3872,24 +4022,31 @@ async function findOrderForDispute(paymentIntentId) {
             // Receipt + seller notification (AGL-96): env-gated like every
             // other outbound email; failures never fail the webhook.
             if (isEmailConfigured()) {
-                var _productSnapshot_get, _ref76;
-                var _object_customer_details20, _org, _this3;
+                var _productSnapshot_get, _ref85;
+                var _object_customer_details21, _org, _this3;
                 const productName = String((_productSnapshot_get = productSnapshot.get('name')) != null ? _productSnapshot_get : 'your purchase');
-                const amount = (Number((_ref76 = object == null ? void 0 : object.amount_total) != null ? _ref76 : 0) / 100).toFixed(2);
-                const buyerEmail = object == null ? void 0 : (_object_customer_details20 = object.customer_details) == null ? void 0 : _object_customer_details20.email;
+                const amount = (Number((_ref85 = object == null ? void 0 : object.amount_total) != null ? _ref85 : 0) / 100).toFixed(2);
+                const buyerEmail = object == null ? void 0 : (_object_customer_details21 = object.customer_details) == null ? void 0 : _object_customer_details21.email;
                 const orderTotal = `$${amount}`;
                 if (buyerEmail) {
-                    var _ref77;
-                    const fallbackText = `Thanks for your purchase!\n\n${productName} — $${amount}` + `\nOrder reference: ${object.id}`;
+                    var _ref86, _ref87;
+                    // The store's own Receipt footer, as the cart receipt carries it
+                    // (AGL-3432).
+                    const receiptFooter = String((_ref86 = await hostRef.collection('settings').doc('store').get().then((snapshot)=>snapshot.get('receiptFooter')).catch(()=>'')) != null ? _ref86 : '');
+                    // The quantity with the name (AGL-3432), so a three-unit sale
+                    // does not read as one item at the whole total.
+                    const receiptLine = `${soldQuantity}× ${productName}`;
+                    const fallbackText = `Thanks for your purchase!\n\n${receiptLine} — $${amount}` + `\nOrder reference: ${object.id}` + (receiptFooter ? `\n\n${receiptFooter}` : '');
                     // Site-owner-designed template when published (AGL-771).
                     const designed = await renderHostEmailWithTokens(firebaseAdmin.app().firestore(), String(hostId), 'order-receipt', {
-                        'order.summary': productName,
+                        'order.summary': receiptLine,
                         'order.total': orderTotal,
-                        'order.ref': String(object.id)
+                        'order.ref': String(object.id),
+                        'store.receiptFooter': receiptFooter
                     });
                     await sendEmail(_extends({
                         to: String(buyerEmail),
-                        subject: (_ref77 = designed == null ? void 0 : designed.subject) != null ? _ref77 : `Receipt: ${productName}`,
+                        subject: (_ref87 = designed == null ? void 0 : designed.subject) != null ? _ref87 : `Receipt: ${productName}`,
                         text: (designed == null ? void 0 : designed.text) || fallbackText
                     }, (designed == null ? void 0 : designed.html) ? {
                         html: designed.html
@@ -3923,7 +4080,7 @@ async function findOrderForDispute(paymentIntentId) {
                     // SSO.
                     const seller = (_this4 = await findUserByUidAcrossPools(sellerUid).catch(()=>null)) == null ? void 0 : _this4.record;
                     if (seller == null ? void 0 : seller.email) {
-                        var _hostSnapshot_get, _ref78;
+                        var _hostSnapshot_get, _ref88;
                         const siteName = String((_hostSnapshot_get = hostSnapshot.get('displayName')) != null ? _hostSnapshot_get : hostId);
                         const fallbackText = `You made a sale on ${siteName}!\n\n${productName} — $${amount}` + (buyerEmail ? `\nBuyer: ${buyerEmail}` : '') + `\nOrder reference: ${object.id}`;
                         // Site-owner-designed template when published (AGL-771).
@@ -3936,7 +4093,7 @@ async function findOrderForDispute(paymentIntentId) {
                         });
                         await sendEmail(_extends({
                             to: seller.email,
-                            subject: (_ref78 = designed == null ? void 0 : designed.subject) != null ? _ref78 : `New order: ${productName}`,
+                            subject: (_ref88 = designed == null ? void 0 : designed.subject) != null ? _ref88 : `New order: ${productName}`,
                             text: (designed == null ? void 0 : designed.text) || fallbackText
                         }, (designed == null ? void 0 : designed.html) ? {
                             html: designed.html
@@ -3966,15 +4123,15 @@ async function findOrderForDispute(paymentIntentId) {
     // the refund is written on the order's timeline. Nothing else is moved: a
     // Dashboard refund is staff's act, and they chose its transfer reversal.
     if (type === 'charge.refunded') {
-        var _ref79, _ref80;
+        var _ref89, _ref90;
         var _object_payment_intent, _snapshot_ref_parent_parent;
-        const paymentIntentId = typeof (object == null ? void 0 : object.payment_intent) === 'string' ? object.payment_intent : String((_ref79 = object == null ? void 0 : (_object_payment_intent = object.payment_intent) == null ? void 0 : _object_payment_intent.id) != null ? _ref79 : '');
+        const paymentIntentId = typeof (object == null ? void 0 : object.payment_intent) === 'string' ? object.payment_intent : String((_ref89 = object == null ? void 0 : (_object_payment_intent = object.payment_intent) == null ? void 0 : _object_payment_intent.id) != null ? _ref89 : '');
         const lookup = paymentIntentId ? await findOrderForDispute(paymentIntentId) : {
             kind: 'not-ours'
         };
         if (lookup.kind !== 'order') return;
         const snapshot = lookup.snapshot;
-        const hostId = String((_ref80 = (_snapshot_ref_parent_parent = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent.id) != null ? _ref80 : '');
+        const hostId = String((_ref90 = (_snapshot_ref_parent_parent = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent.id) != null ? _ref90 : '');
         const external = await recordExternalRefund(snapshot.ref, object);
         if (external && hostId && snapshot.ref.parent.parent) {
             const outcome = await applyExternalRefundToGiftCards({
@@ -3986,9 +4143,12 @@ async function findOrderForDispute(paymentIntentId) {
                 fullyRefunded: external.fullyRefunded
             });
             if (outcome.kind === 'frozen-for-review') {
+                var _snapshot_data;
+                const order = CommerceModel.liftLegacyOrder((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {});
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `order ${snapshot.id}`,
+                    // The order number the merchant knows it by, never its document id.
+                    orderLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
                     orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
                     orderId: snapshot.id,
                     cards: outcome.cards,
@@ -4012,20 +4172,23 @@ async function findOrderForDispute(paymentIntentId) {
     // merchant; both report the site so the seller's fraud ledger can name it.
     const risk = paymentRiskEventFrom(type, object);
     if (risk && risk.signal.kind !== 'dispute') {
-        var _ref81, _snapshot_data;
-        var _snapshot_ref_parent_parent1;
+        var _ref91, _snapshot_data1, _ref92, _ref93;
+        var _snapshot_ref_parent_parent1, _order_totals2;
         const lookup = risk.paymentIntentId ? await findOrderForDispute(risk.paymentIntentId) : {
             kind: 'not-ours'
         };
         if (lookup.kind !== 'order') return;
         const snapshot = lookup.snapshot;
-        const hostId = String((_ref81 = (_snapshot_ref_parent_parent1 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent1.id) != null ? _ref81 : '');
-        const order = CommerceModel.liftLegacyOrder((_snapshot_data = snapshot.data()) != null ? _snapshot_data : {});
+        const hostId = String((_ref91 = (_snapshot_ref_parent_parent1 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent1.id) != null ? _ref91 : '');
+        const order = CommerceModel.liftLegacyOrder((_snapshot_data1 = snapshot.data()) != null ? _snapshot_data1 : {});
+        const orderCents = Number((_ref92 = (_ref93 = (_order_totals2 = order.totals) == null ? void 0 : _order_totals2.totalCents) != null ? _ref93 : order.amountCents) != null ? _ref92 : 0);
         await recordPaymentRiskOnRecord({
             ref: snapshot.ref,
             signal: risk.signal,
             hostId,
             subjectLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+            // The notice names the sum in question, as the dispute's does.
+            amount: orderCents > 0 ? `$${(orderCents / 100).toFixed(2)}` : null,
             // The Orders section of the Products hub, with this order's dialog
             // open — where Refund lives (`siteRecordLinks().order`).
             link: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
@@ -4081,7 +4244,7 @@ async function findOrderForDispute(paymentIntentId) {
     // finds). AGL-1554 will add its own `closed` branch for the marketplace
     // side; the two coexist because each self-selects by finding its own record.
     if (type === 'charge.dispute.created' || type === 'charge.dispute.closed') {
-        var _dispute_payment_intent, _ref82;
+        var _dispute_payment_intent, _ref94;
         var _snapshot_ref_parent_parent2;
         const dispute = object != null ? object : {};
         const paymentIntentId = String((_dispute_payment_intent = dispute.payment_intent) != null ? _dispute_payment_intent : '');
@@ -4107,14 +4270,16 @@ async function findOrderForDispute(paymentIntentId) {
         const claimed = lookup.kind === 'order' || lookup.kind === 'unresolved';
         const snapshot = lookup.kind === 'order' ? lookup.snapshot : null;
         if (snapshot) {
-            var _ref83;
+            var _ref95;
             var _snapshot_ref_parent_parent3;
-            const hostId = String((_ref83 = (_snapshot_ref_parent_parent3 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent3.id) != null ? _ref83 : '');
+            const hostId = String((_ref95 = (_snapshot_ref_parent_parent3 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent3.id) != null ? _ref95 : '');
             if (type === 'charge.dispute.created') {
+                var _snapshot_data2;
                 // A chargeback's gift cards are frozen while it is open (AGL-3363).
+                const disputed = CommerceModel.liftLegacyOrder((_snapshot_data2 = snapshot.data()) != null ? _snapshot_data2 : {});
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `order ${snapshot.id}`,
+                    orderLabel: `order ${CommerceModel.formatOrderNumber(disputed, snapshot.id)}`,
                     orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
                     orderId: snapshot.id,
                     cards: await applyOrderGiftCardRisk(snapshot, {
@@ -4125,7 +4290,7 @@ async function findOrderForDispute(paymentIntentId) {
                 }, notifyRiskEvent);
                 const { opened, record } = await recordDisputeOpened(snapshot, dispute);
                 if (opened && hostId) {
-                    var _snapshot_data1, _record_evidenceDueByMs, _ref84;
+                    var _snapshot_data3, _record_evidenceDueByMs, _ref96;
                     // Time-critical — Stripe's evidence window is days, not weeks — so
                     // this is awaited rather than fired off with `void`: the handler is
                     // serverless and work left running past the response is work the
@@ -4133,7 +4298,7 @@ async function findOrderForDispute(paymentIntentId) {
                     // (AGL-3368) tells the site's managers and the workspace's owners
                     // what a dispute means and when the evidence is due; it never
                     // throws.
-                    const order = CommerceModel.liftLegacyOrder((_snapshot_data1 = snapshot.data()) != null ? _snapshot_data1 : {});
+                    const order = CommerceModel.liftLegacyOrder((_snapshot_data3 = snapshot.data()) != null ? _snapshot_data3 : {});
                     await notifyRiskEvent({
                         kind: 'sale-dispute',
                         orgId: null,
@@ -4144,16 +4309,16 @@ async function findOrderForDispute(paymentIntentId) {
                         },
                         amount: `$${(record.amountCents / 100).toFixed(2)}`,
                         evidenceDueByMs: (_record_evidenceDueByMs = record.evidenceDueByMs) != null ? _record_evidenceDueByMs : null,
-                        dedupeKey: `sale:${String((_ref84 = dispute == null ? void 0 : dispute.id) != null ? _ref84 : snapshot.id)}`,
+                        dedupeKey: `sale:${String((_ref96 = dispute == null ? void 0 : dispute.id) != null ? _ref96 : snapshot.id)}`,
                         staffEvidence: record.reason ? `Reason: ${record.reason.replace(/_/g, ' ')}.` : null
                     });
                 }
             } else {
-                var _ref85, _ref86;
+                var _ref97, _snapshot_data4, _ref98;
                 // Lost: the money went back, so the cards it bought are voided. Won
                 // (or closed on a warning): the dispute's freeze lifts; a freeze a
                 // fraud warning or review put on stays for the merchant (AGL-3363).
-                await applyOrderGiftCardRisk(snapshot, String((_ref85 = dispute == null ? void 0 : dispute.status) != null ? _ref85 : '') === 'lost' ? {
+                await applyOrderGiftCardRisk(snapshot, String((_ref97 = dispute == null ? void 0 : dispute.status) != null ? _ref97 : '') === 'lost' ? {
                     kind: 'void',
                     reason: 'dispute-lost'
                 } : {
@@ -4161,11 +4326,18 @@ async function findOrderForDispute(paymentIntentId) {
                     reason: 'dispute'
                 });
                 const settled = await recordDisputeClosed(snapshot, dispute);
+                // The number the merchant knows the order by (AGL-3432), for both
+                // notices below; the Stripe session id is nowhere in the console.
+                const disputedOrderLabel = CommerceModel.formatOrderNumber(CommerceModel.liftLegacyOrder((_snapshot_data4 = snapshot.data()) != null ? _snapshot_data4 : {}), snapshot.id);
                 if (settled.recorded && hostId) {
+                    // What the shopper's bank took back left the PLATFORM's balance on
+                    // a destination charge, not the merchant's: their own loss is the
+                    // seller share in the "Payout adjusted" notice below. Told that way
+                    // (AGL-3432), so the two are not read as two losses.
                     await notifyHostManagers(hostId, {
                         type: 'content.order',
-                        title: settled.lost ? `Chargeback lost — $${(settled.reversedCents / 100).toFixed(2)} reversed` : 'Chargeback resolved in your favor',
-                        body: `Order ${snapshot.id}`,
+                        title: settled.lost ? `Chargeback lost — order ${disputedOrderLabel}` : 'Chargeback resolved in your favor',
+                        body: settled.lost ? `The chargeback on order ${disputedOrderLabel} on {site} was ` + 'decided in the shopper\'s favor, and their bank took back ' + `$${(settled.reversedCents / 100).toFixed(2)}. If part of the ` + 'sale had been paid out to you, a separate notice says what ' + 'is taken back from your balance.' : `The chargeback on order ${disputedOrderLabel} on {site} ` + 'closed in your favor. Nothing is taken back from you for it.',
                         link: `/${hostId}/orders`
                     });
                     // The customer's side of the ledger (AGL-1754), through the same
@@ -4217,7 +4389,7 @@ async function findOrderForDispute(paymentIntentId) {
                 // transiently-failed reversal gets its retry — and gated inside on
                 // the order's own `reversedTransferCents` marker, so it runs at most
                 // once per dispute however many times Stripe delivers.
-                if (String((_ref86 = dispute == null ? void 0 : dispute.status) != null ? _ref86 : '') === 'lost') {
+                if (String((_ref98 = dispute == null ? void 0 : dispute.status) != null ? _ref98 : '') === 'lost') {
                     const pulledBackCents = await reverseSellerShare(snapshot.ref, dispute);
                     // The merchant-experience half of the AGL-1794 decision, and not an
                     // optional extra: the reversal takes money out of the connected
@@ -4237,7 +4409,7 @@ async function findOrderForDispute(paymentIntentId) {
                         await notifyHostManagers(hostId, {
                             type: 'content.order',
                             title: `Payout adjusted — $${(pulledBackCents / 100).toFixed(2)} recovered for a lost chargeback`,
-                            body: `Order ${snapshot.id}: the amount transferred to you for this sale has been ` + `reversed. If your balance does not cover it, Stripe recovers the remainder ` + `from your future payouts.`,
+                            body: `Because the chargeback on order ${disputedOrderLabel} on ` + `{site} was lost, the $${(pulledBackCents / 100).toFixed(2)} ` + 'transferred to you for that sale has been taken back. If ' + 'your balance does not cover it, Stripe recovers the rest ' + 'from your future payouts.',
                             link: `/${hostId}/orders`
                         });
                     }
@@ -4247,7 +4419,7 @@ async function findOrderForDispute(paymentIntentId) {
         return _extends({
             claimed
         }, snapshot ? {
-            hostId: String((_ref82 = (_snapshot_ref_parent_parent2 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent2.id) != null ? _ref82 : '')
+            hostId: String((_ref94 = (_snapshot_ref_parent_parent2 = snapshot.ref.parent.parent) == null ? void 0 : _snapshot_ref_parent_parent2.id) != null ? _ref94 : '')
         } : {});
     }
 };