@mohasinac/appkit 4.53.1 → 4.54.0

package/dist/features/seller/components/SellerPayoutSettingsView.js

@@ -88,6 +88,23 @@ const payoutSettingsDraftSchema = z.object({
      */
     supportsShippingProtection: annotate(z.boolean(), { section: "preferences", order: 5, row: "quarter" }),
     supportsSaleProtection: annotate(z.boolean(), { section: "preferences", order: 6, row: "quarter" }),
+    /*
+     * Advanced listing types — pre-orders, prize draws, classifieds, digital
+     * codes, live items, art and stickers. Everyone can already list
+     * `standard`, `spares` and `auction`.
+     *
+     * 🛑 Alongside payout settings for the same reason the protections are:
+     * each of these carries an obligation, not just a form. A pre-order takes
+     * money for stock that does not exist yet, a prize draw is a regulated
+     * promotion, a classified happens off-platform with no escrow, a
+     * digital-code listing must be delivered from a pool the seller has to keep
+     * stocked, and a live listing is an animal. A new seller should meet those
+     * deliberately rather than by discovering a nav item.
+     *
+     * OFF by default, and the copy has to say what enabling ACCEPTS — the same
+     * reason the protection toggles say what declining costs.
+     */
+    advancedListingTypesEnabled: annotate(z.boolean(), { section: "preferences", order: 7, row: "quarter" }),
 }).superRefine((v, ctx) => {
     if (v.method === "upi") {
         if (!v.upiId.trim()) {
@@ -128,6 +145,13 @@ const DEFAULT_DRAFT = {
     // OFF by default — matches StoreDocument, and absence must read as declined.
     supportsShippingProtection: false,
     supportsSaleProtection: false,
+    /*
+     * OFF by default, which is also the direction the server gate fails. A
+     * default of `true` here would be worse than cosmetic: this draft is what
+     * gets PATCHed, so it would silently GRANT the capability on the next
+     * unrelated save of this form.
+     */
+    advancedListingTypesEnabled: false,
 };
 export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SETTINGS }) {
     const [draft, setDraft] = useState(DEFAULT_DRAFT);
@@ -175,6 +199,9 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
                 pricesIncludeGst: res?.data?.pricesIncludeGst ?? true,
                 supportsShippingProtection: res?.data?.supportsShippingProtection ?? false,
                 supportsSaleProtection: res?.data?.supportsSaleProtection ?? false,
+                // Absent means NOT entitled. Defaulting this to `true` would be a
+                // silent GRANT on the next save, since this draft is what gets sent.
+                advancedListingTypesEnabled: res?.data?.advancedListingTypesEnabled ?? false,
             });
         })
             .catch(console.error)
@@ -205,6 +232,7 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
                 pricesIncludeGst: draft.pricesIncludeGst,
                 supportsShippingProtection: draft.supportsShippingProtection,
                 supportsSaleProtection: draft.supportsSaleProtection,
+                advancedListingTypesEnabled: draft.advancedListingTypesEnabled,
                 // Flat, matching the route's schema. A nested `taxInfo` object was
                 // stripped by `z.object()` and never reached Firestore.
                 gstin: draft.gstin.trim(),
@@ -271,8 +299,8 @@ export function SellerPayoutSettingsView({ apiBase = SELLER_ENDPOINTS.PAYOUT_SET
         {
             id: "preferences",
             label: "Preferences",
-            fields: ["autoPayout", "minimumThreshold", "emiEnabled", "pricesIncludeGst", "supportsShippingProtection", "supportsSaleProtection"],
-            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Payout Preferences" }), _jsx(Toggle, { checked: values.autoPayout, onChange: (checked) => onChange({ autoPayout: checked }), label: "Enable auto-payout \u2014 automatically transfer earnings on schedule", disabled: busy }), _jsx(FormField, { name: "minimumThreshold", label: "Minimum Payout Threshold (\u20B9)", type: "number", value: values.minimumThreshold, onChange: (v) => onChange({ minimumThreshold: v }), placeholder: "e.g. 500", helpText: "Payouts are held until your balance exceeds this amount. Leave blank for no minimum.", disabled: busy }), _jsxs(Div, { className: `${__P.p3} bg-[var(--appkit-color-surface-alt)] border border-[var(--appkit-color-border)]`, rounded: "lg", children: [_jsx(Text, { className: "mb-1", size: "sm", weight: "medium", children: "Payout Schedule" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Auto-payouts run every Monday for the previous week's settled orders. Manual payouts can be requested from the Payouts page at any time." })] }), _jsx(Toggle, { checked: values.emiEnabled, onChange: (checked) => onChange({ emiEnabled: checked }), label: "Offer EMI financing on eligible orders", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Only shown to buyers when platform-wide EMI is also enabled and their cart subtotal from your store exceeds the site's minimum order value. Orders on an EMI plan hold your payout until every installment is paid, unless you mark the item \"ship before EMI completes\"." }), _jsx(Toggle, { checked: values.pricesIncludeGst, onChange: (checked) => onChange({ pricesIncludeGst: checked }), label: "The prices I enter already include GST", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Buyers always see a tax-inclusive price, so this only changes how your own entry is read. Leave it", " ", _jsx(Span, { weight: "semibold", children: "on" }), " and a \u20B9999 listing at 5% GST means the buyer pays \u20B9999 and you earn \u20B9951.43 \u2014 the \u20B947.57 is GST we collect and remit for you. Turn it", " ", _jsx(Span, { weight: "semibold", children: "off" }), " and \u20B9999 is treated as your ex-GST price: the listing is shown at \u20B91,048.95 and you earn \u20B9999."] }), _jsx(Heading, { level: 3, className: "mb-2 mt-4", children: "Buyer Protections" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Two separate covers a buyer can pay for at checkout. Supporting one earns a safety badge on your listings;", " ", _jsx(Span, { weight: "semibold", children: "declining shows buyers a risk notice instead" }), " \u2014 there is no neutral option, because a buyer who is told nothing cannot tell a seller who declined from one who was never asked."] }), _jsx(Toggle, { checked: values.supportsShippingProtection, onChange: (checked) => onChange({ supportsShippingProtection: checked }), label: "Offer shipment protection \u2014 loss or damage in transit", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "The parcel never arrived or arrived damaged. We pursue the courier, not you, and the buyer is refunded from the funds we hold \u2014 so a genuine transit loss costs you the item, not an argument." }), _jsx(Toggle, { checked: values.supportsSaleProtection, onChange: (checked) => onChange({ supportsSaleProtection: checked }), label: "Offer sale protection \u2014 item not as described", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["A no-questions-asked refund on the item itself. Be clear about what this means:", " ", _jsx(Span, { weight: "semibold", children: "a claim we inspect and find genuine is charged back to you" }), " ", "\u2014 that is the cover. A claim we find to be a change of mind is absorbed by us, which is what the buyer's fee pays for. Not offered on your final-sale listings, since \"no returns\" and \"no questions asked\" cannot both be true."] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Changing this does not re-price listings you have already published. It applies to products you save from now on." })] })),
+            fields: ["autoPayout", "minimumThreshold", "emiEnabled", "pricesIncludeGst", "supportsShippingProtection", "supportsSaleProtection", "advancedListingTypesEnabled"],
+            render: ({ values, onChange }) => (_jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 3, className: "mb-2", children: "Payout Preferences" }), _jsx(Toggle, { checked: values.autoPayout, onChange: (checked) => onChange({ autoPayout: checked }), label: "Enable auto-payout \u2014 automatically transfer earnings on schedule", disabled: busy }), _jsx(FormField, { name: "minimumThreshold", label: "Minimum Payout Threshold (\u20B9)", type: "number", value: values.minimumThreshold, onChange: (v) => onChange({ minimumThreshold: v }), placeholder: "e.g. 500", helpText: "Payouts are held until your balance exceeds this amount. Leave blank for no minimum.", disabled: busy }), _jsxs(Div, { className: `${__P.p3} bg-[var(--appkit-color-surface-alt)] border border-[var(--appkit-color-border)]`, rounded: "lg", children: [_jsx(Text, { className: "mb-1", size: "sm", weight: "medium", children: "Payout Schedule" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Auto-payouts run every Monday for the previous week's settled orders. Manual payouts can be requested from the Payouts page at any time." })] }), _jsx(Toggle, { checked: values.emiEnabled, onChange: (checked) => onChange({ emiEnabled: checked }), label: "Offer EMI financing on eligible orders", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Only shown to buyers when platform-wide EMI is also enabled and their cart subtotal from your store exceeds the site's minimum order value. Orders on an EMI plan hold your payout until every installment is paid, unless you mark the item \"ship before EMI completes\"." }), _jsx(Toggle, { checked: values.pricesIncludeGst, onChange: (checked) => onChange({ pricesIncludeGst: checked }), label: "The prices I enter already include GST", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Buyers always see a tax-inclusive price, so this only changes how your own entry is read. Leave it", " ", _jsx(Span, { weight: "semibold", children: "on" }), " and a \u20B9999 listing at 5% GST means the buyer pays \u20B9999 and you earn \u20B9951.43 \u2014 the \u20B947.57 is GST we collect and remit for you. Turn it", " ", _jsx(Span, { weight: "semibold", children: "off" }), " and \u20B9999 is treated as your ex-GST price: the listing is shown at \u20B91,048.95 and you earn \u20B9999."] }), _jsx(Heading, { level: 3, className: "mb-2 mt-4", children: "Buyer Protections" }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Two separate covers a buyer can pay for at checkout. Supporting one earns a safety badge on your listings;", " ", _jsx(Span, { weight: "semibold", children: "declining shows buyers a risk notice instead" }), " \u2014 there is no neutral option, because a buyer who is told nothing cannot tell a seller who declined from one who was never asked."] }), _jsx(Toggle, { checked: values.supportsShippingProtection, onChange: (checked) => onChange({ supportsShippingProtection: checked }), label: "Offer shipment protection \u2014 loss or damage in transit", disabled: busy }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "The parcel never arrived or arrived damaged. We pursue the courier, not you, and the buyer is refunded from the funds we hold \u2014 so a genuine transit loss costs you the item, not an argument." }), _jsx(Toggle, { checked: values.supportsSaleProtection, onChange: (checked) => onChange({ supportsSaleProtection: checked }), label: "Offer sale protection \u2014 item not as described", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["A no-questions-asked refund on the item itself. Be clear about what this means:", " ", _jsx(Span, { weight: "semibold", children: "a claim we inspect and find genuine is charged back to you" }), " ", "\u2014 that is the cover. A claim we find to be a change of mind is absorbed by us, which is what the buyer's fee pays for. Not offered on your final-sale listings, since \"no returns\" and \"no questions asked\" cannot both be true."] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: "Changing this does not re-price listings you have already published. It applies to products you save from now on." }), _jsx(Toggle, { checked: values.advancedListingTypesEnabled, onChange: (checked) => onChange({ advancedListingTypesEnabled: checked }), label: "Enable advanced listing types", disabled: busy }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "sm", children: ["Adds pre-orders, prize draws, classifieds, digital codes, live items, art and stickers alongside the products, spares and auctions you can already list. Each carries its own obligation:", " ", _jsx(Span, { weight: "semibold", children: "a pre-order takes payment for stock you do not have yet, a prize draw is a regulated promotion, a classified happens off-platform with no escrow protection, a digital code must be delivered from a pool you keep stocked, and a live listing is an animal." }), " ", "Turning this off later does not unpublish listings you have already created \u2014 it only stops you making new ones."] })] })),
         },
     ], [busy, current]);
     const { openIds, setOpenIds, goToSection, fieldToSectionIndex, sectionMeta } = useSectionFormNav(sections, draft);

package/dist/features/seller/components/SellerProductShell.d.ts

@@ -1,6 +1,22 @@
 import React from "react";
 import type { MediaField } from "../../media/types";
-export type ProductListingMode = "standard" | "auction" | "pre-order" | "prize-draw" | "bundle" | "classified" | "digital-code" | "live" | "art" | "stickers" | "spares";
+import type { ListingType } from "../../products/types/index";
+/**
+ * What this shell is editing: any listing type, or a bundle.
+ *
+ * 🛑 DERIVED from `ListingType`, not restated. This was a hand-written copy of
+ * the union plus `"bundle"` — the eleventh such copy in the codebase — and the
+ * whole point of `ALL_LISTING_TYPES_MAP` being a `Record<ListingType, true>`
+ * is that a new member cannot be silently omitted from a list like this one.
+ * Root Cause #61.
+ *
+ * `"bundle"` is a deliberate EXTRA, not an oversight: bundles stopped being a
+ * `listingType` in SB-UNI-D (they are a `categoryType` on `categories` now),
+ * but this shell still edits them, which is what `pluginForMode`'s
+ * `BUNDLE_PLUGIN_FALLBACK` is for. Spelling it as a union with one added
+ * literal says that, where a twelve-item list said nothing.
+ */
+export type ProductListingMode = ListingType | "bundle";
 export interface SellerProductDraft {
     title?: string;
     slug?: string;

package/dist/features/seller/components/SellerProductsView.js

@@ -34,6 +34,7 @@ import { DataListingView } from "../../admin/components/DataListingView.js";
 import { AssemblyDrawer, } from "../../parts/components/AssemblyDrawer.js";
 import { ACTIONS } from "../../../_internal/shared/actions/action-registry.js";
 import { buildBulkAction } from "../../../_internal/shared/actions/bulk-helpers.js";
+import { productImageUrls } from "../../products/schemas/firestore.js";
 const FILTER_KEYS = [
     "status",
     "category",
@@ -579,8 +580,8 @@ export function SellerProductsView({ onDeleteProduct, onCreateClick, }) {
                     secondary: [priceLabel, stockLabel, secondaryBase, statusLabel].filter(Boolean).join(" · "),
                     status: statusLabel,
                     updatedAt: toRelativeDate(item.updatedAt ?? item.createdAt),
-                    imageUrl: toStringValue(item.mainImage ?? item.images?.[0], undefined),
-                    image: toStringValue(item.mainImage ?? item.images?.[0], undefined),
+                    imageUrl: toStringValue(item.mainImage, undefined) || productImageUrls(item.images)[0],
+                    image: toStringValue(item.mainImage, undefined) || productImageUrls(item.images)[0],
                     listingKind: kind,
                     price: priceRaw ? `₹${priceRaw.toLocaleString("en-IN")}` : "—",
                     stock: stockLabel || "—",

package/dist/features/seller/hooks/useStoreListingEntitlements.d.ts

@@ -0,0 +1,8 @@
+import type { ListingType } from "../../products/types/index";
+export interface StoreListingEntitlements {
+    /** Types this store may create. Never empty — basics are always included. */
+    allowed: Set<ListingType>;
+    advancedEnabled: boolean;
+    isLoading: boolean;
+}
+export declare function useStoreListingEntitlements(): StoreListingEntitlements;

package/dist/features/seller/hooks/useStoreListingEntitlements.js

@@ -0,0 +1,70 @@
+"use client";
+/**
+ * Which listing types the signed-in seller's own store may create.
+ *
+ * ── Why this needs a fetch at all ─────────────────────────────────────────
+ *
+ * 🛑 `StoreDocument.capabilities` is listed in `PRIVATE_STORE_FIELDS` —
+ * "internal feature gating; server-enforced, never client-read" — so it is
+ * absent from every public store payload and from the session user. A client
+ * component genuinely cannot derive this locally, and the alternative a
+ * previous draft reached for (publish the capability array to the browser)
+ * would ship `lower_commission_rate`, `priority_support` and fifteen more
+ * admin-granted entitlements to anyone who opened devtools. Root Cause #70.
+ *
+ * So the server sends a PROJECTION: `allowedListingTypes`, already resolved by
+ * `listingTypesAllowedFor` on the same capability array the write-path gate
+ * uses. Client and server therefore agree by construction rather than by two
+ * copies of one rule (Root Cause #30).
+ *
+ * ── Why the loading state is not "denied" ─────────────────────────────────
+ *
+ * `isLoading` is returned and callers must respect it. The three-state rule
+ * from `useCanSeePrices`: "not known yet" rendering as "no" shows an entitled
+ * seller a refusal on every page load. The server refuses authoritatively in
+ * `createSellerProduct` / `sellerUpdateProduct`, so an optimistic render while
+ * the fetch is in flight costs nothing worse than a late refusal.
+ *
+ * @tag domain:seller
+ * @tag layer:hooks
+ * @tag access:client
+ */
+import { useMemo } from "react";
+import { useApiQuery } from "../../../client/api/useApiQuery.js";
+import { apiClient } from "../../../http/index.js";
+import { SELLER_ENDPOINTS } from "../../../constants/api-endpoints.js";
+import { BASIC_LISTING_TYPES } from "../../../_internal/shared/listing-types/tiers.js";
+export function useStoreListingEntitlements() {
+    const query = useApiQuery({
+        queryKey: ["store", "listing-entitlements"],
+        queryFn: async () => {
+            const res = await apiClient.get(SELLER_ENDPOINTS.PAYOUT_SETTINGS);
+            return res?.data ?? {};
+        },
+        /*
+         * The answer changes only when an admin or the seller flips a capability,
+         * so a short window is pointless churn — but it must not be `Infinity`,
+         * because a seller who has just ticked the box in another tab should not
+         * have to hard-reload to see the nav and forms open up.
+         */
+        staleTime: 60000,
+        silentBackgroundFailures: true,
+    });
+    return useMemo(() => {
+        /*
+         * 🛑 Falls back to the BASIC types, not to everything and not to nothing.
+         *
+         * Everything would offer a form that the server then refuses — the exact
+         * "filled in a long wizard and got rejected at publish" experience this
+         * hook exists to prevent. Nothing would lock a seller out of `standard`
+         * on a transient network blip, which is the one type every store has.
+         */
+        const list = query.data?.allowedListingTypes;
+        const allowed = new Set(Array.isArray(list) && list.length > 0 ? list : BASIC_LISTING_TYPES);
+        return {
+            allowed,
+            advancedEnabled: query.data?.advancedListingTypesEnabled === true,
+            isLoading: query.isLoading,
+        };
+    }, [query.data, query.isLoading]);
+}

package/dist/features/store-extensions/repository/store-extensions.repositories.d.ts

@@ -14,7 +14,7 @@
  */
 import { BaseRepository } from "../../../providers/db-firebase";
 import type { DocumentSnapshot } from "firebase-admin/firestore";
-import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument, type StoreWhatsAppConfigDocument } from "../schemas/firestore";
+import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument } from "../schemas/firestore";
 export declare class PayoutMethodsRepository extends BaseRepository<PayoutMethodDocument> {
     /**
      * Bank/UPI details, encrypted at rest by BaseRepository's write hooks.
@@ -103,10 +103,6 @@ export declare class ItemRequestsRepository extends BaseRepository<ItemRequestDo
      */
     appendReply(id: string, reply: ItemRequestReply): Promise<void>;
 }
-export declare class StoreWhatsAppConfigRepository extends BaseRepository<StoreWhatsAppConfigDocument> {
-    constructor();
-    getByStore(storeId: string): Promise<StoreWhatsAppConfigDocument | null>;
-}
 export declare class StoreGoogleConfigRepository extends BaseRepository<StoreGoogleConfigDocument> {
     constructor();
     getByStore(storeId: string): Promise<StoreGoogleConfigDocument | null>;
@@ -120,5 +116,4 @@ export declare const listingTemplatesRepository: ListingTemplatesRepository;
 export declare const moderationQueueRepository: ModerationQueueRepository;
 export declare const reportsRepository: ReportsRepository;
 export declare const itemRequestsRepository: ItemRequestsRepository;
-export declare const storeWhatsAppConfigRepository: StoreWhatsAppConfigRepository;
 export declare const storeGoogleConfigRepository: StoreGoogleConfigRepository;

package/dist/features/store-extensions/repository/store-extensions.repositories.js

@@ -15,7 +15,7 @@
 import { BaseRepository } from "../../../providers/db-firebase/index.js";
 import { arrayUnion, increment } from "../../../contracts/field-ops.js";
 import { decryptPiiFields } from "../../../security/pii-encrypt.js";
-import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, STORE_WHATSAPP_CONFIG_COLLECTION, } from "../schemas/firestore.js";
+import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, } from "../schemas/firestore.js";
 export class PayoutMethodsRepository extends BaseRepository {
     constructor() {
         super(PAYOUT_METHODS_COLLECTION);
@@ -149,14 +149,6 @@ export class ItemRequestsRepository extends BaseRepository {
         });
     }
 }
-export class StoreWhatsAppConfigRepository extends BaseRepository {
-    constructor() {
-        super(STORE_WHATSAPP_CONFIG_COLLECTION);
-    }
-    async getByStore(storeId) {
-        return this.findOneBy("storeId", storeId);
-    }
-}
 export class StoreGoogleConfigRepository extends BaseRepository {
     constructor() {
         super(STORE_GOOGLE_CONFIG_COLLECTION);
@@ -174,5 +166,4 @@ export const listingTemplatesRepository = new ListingTemplatesRepository();
 export const moderationQueueRepository = new ModerationQueueRepository();
 export const reportsRepository = new ReportsRepository();
 export const itemRequestsRepository = new ItemRequestsRepository();
-export const storeWhatsAppConfigRepository = new StoreWhatsAppConfigRepository();
 export const storeGoogleConfigRepository = new StoreGoogleConfigRepository();

package/dist/features/store-extensions/schemas/firestore.d.ts

@@ -18,7 +18,6 @@ import type { BaseDocument } from "../../../_internal/shared/types/base-document
  *   7. moderationQueue       — video / media moderation queue items
  *   8. reports               — buyer-submitted reports against listings/stores
  *   9. itemRequests          — community item request bulletin board
- *  10. storeWhatsAppConfig   — per-store WhatsApp business catalogue + auto-replies
  *  11. storeGoogleConfig     — per-store Google Business reviews integration
  */
 export type PayoutMethodType = "upi" | "bank" | "card" | "other";
@@ -89,7 +88,7 @@ export interface AnalyticsAlertDocument extends BaseDocument {
     threshold: number;
     windowHours: number;
     isActive: boolean;
-    notifyChannels: Array<"in-app" | "email" | "whatsapp">;
+    notifyChannels: Array<"in-app" | "email">;
     /**
      * When this alert last fired.
      *
@@ -221,21 +220,6 @@ export interface ItemRequestDocument extends BaseDocument {
 export declare const ITEM_REQUESTS_COLLECTION: "itemRequests";
 export declare const ITEM_REQUEST_INDEXED_FIELDS: readonly ["opUserId", "status", "category", "createdAt"];
 export declare const DEFAULT_ITEM_REQUEST_DATA: Partial<ItemRequestDocument>;
-export interface StoreWhatsAppConfigDocument extends BaseDocument {
-    storeId: string;
-    isConnected: boolean;
-    isPaid: boolean;
-    phoneNumber?: string;
-    businessProfileName?: string;
-    catalogUrl?: string;
-    autoReply?: string;
-    welcomeMessage?: string;
-    /** Status of pending WhatsApp Business onboarding (Meta Cloud API). */
-    onboardingStatus?: "pending" | "approved" | "rejected";
-}
-export declare const STORE_WHATSAPP_CONFIG_COLLECTION: "storeWhatsAppConfig";
-export declare const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS: readonly ["storeId", "isConnected", "isPaid"];
-export declare const DEFAULT_STORE_WHATSAPP_CONFIG_DATA: Partial<StoreWhatsAppConfigDocument>;
 export interface StoreGoogleConfigDocument extends BaseDocument {
     storeId: string;
     isConnected: boolean;

package/dist/features/store-extensions/schemas/firestore.js

@@ -182,16 +182,6 @@ export const DEFAULT_ITEM_REQUEST_DATA = {
     replies: [],
     replyCount: 0,
 };
-export const STORE_WHATSAPP_CONFIG_COLLECTION = "storeWhatsAppConfig";
-export const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS = [
-    "storeId",
-    "isConnected",
-    "isPaid",
-];
-export const DEFAULT_STORE_WHATSAPP_CONFIG_DATA = {
-    isConnected: false,
-    isPaid: false,
-};
 export const STORE_GOOGLE_CONFIG_COLLECTION = "storeGoogleConfig";
 export const STORE_GOOGLE_CONFIG_INDEXED_FIELDS = [
     "storeId",

package/dist/features/stores/components/InteractiveStoreCard.d.ts

@@ -12,5 +12,15 @@ export interface InteractiveStoreCardProps {
         visitStore?: string;
     };
     className?: string;
+    /**
+     * Owner-only pencil / clone / bin, for an admin or whoever owns this record.
+     * Pass `<OwnerQuickActions>`; it renders nothing for anyone else.
+     *
+     * 🛑 Rendered OUTSIDE this card's own `<Link>`/`<TextLink>`, as a sibling.
+     * A `<button>` inside an `<a>` is invalid HTML that browsers resolve by
+     * closing the anchor early, which breaks the CARD's navigation rather than
+     * just the button's — `stopPropagation` stops a click but cannot fix a parse.
+     */
+    renderOwnerActions?: () => React.ReactNode;
 }
-export declare function InteractiveStoreCard({ store, href, selectable, isSelected, onSelect, labels, className, }: InteractiveStoreCardProps): import("react").JSX.Element;
+export declare function InteractiveStoreCard({ store, href, selectable, isSelected, onSelect, labels, className, renderOwnerActions, }: InteractiveStoreCardProps): import("react").JSX.Element;

package/dist/features/stores/components/InteractiveStoreCard.js

@@ -10,13 +10,13 @@ const __O = {
     hidden: "overflow-hidden",
 };
 const CLS_RATING_BADGE = "absolute top-2 right-2 flex items-center gap-[var(--appkit-space-1)] rounded-full bg-black/50 backdrop-blur-sm px-[var(--appkit-space-2)] py-[var(--appkit-space-0-5)] text-[length:var(--appkit-text-xs)] font-semibold text-warning";
-export function InteractiveStoreCard({ store, href, selectable, isSelected = false, onSelect, labels = {}, className = "", }) {
+export function InteractiveStoreCard({ store, href, selectable, isSelected = false, onSelect, labels = {}, className = "", renderOwnerActions, }) {
     const initial = store.storeName[0]?.toUpperCase() ?? "S";
     const [logoBroken, setLogoBroken] = useState(false);
     const hasLogo = Boolean(store.storeLogoURL) && !logoBroken;
     const hasBanner = Boolean(store.storeBannerURL);
     const longPress = useLongPress(() => onSelect?.(store.id, !isSelected));
-    return (_jsxs(Div, { className: [
+    const card = (_jsxs(Div, { className: [
             "group relative flex flex-col h-full overflow-hidden rounded-xl border bg-[var(--appkit-color-surface)] shadow-sm transition-shadow hover:shadow-lg",
             isSelected
                 ? "border-[var(--appkit-color-primary,theme(colors.violet.600))] outline outline-2 outline-[var(--appkit-color-primary,theme(colors.violet.600))]"
@@ -26,4 +26,11 @@ export function InteractiveStoreCard({ store, href, selectable, isSelected = fal
                     e.preventDefault();
                     onSelect(store.id, !isSelected);
                 }, label: isSelected ? "Deselect store" : "Select store", position: "top-2 left-2", className: selectable || isSelected ? "opacity-100" : "opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto transition-opacity" })), _jsxs(Link, { href: href, className: "flex flex-col flex-1 min-h-0", children: [_jsxs(Div, { surface: "muted", className: `relative aspect-video w-full ${__O.hidden} flex-shrink-0`, children: [hasBanner ? (_jsx(MediaImage, { src: store.storeBannerURL, alt: `${store.storeName} banner`, size: "banner", className: "h-full w-full object-cover transition-transform duration-500 group-hover:scale-105" })) : (_jsx(Row, { className: "absolute inset-0", align: "center", justify: "center", children: _jsx(Span, { className: "opacity-20 select-none", size: "5xl", "aria-hidden": "true", children: "\uD83C\uDFEA" }) })), _jsx(Scrim, { direction: "bottom-up", intensity: "subtle", className: "absolute inset-x-0 bottom-0 h-12" }), store.averageRating != null && store.averageRating > 0 && (_jsxs(Div, { className: CLS_RATING_BADGE, children: ["\u2605 ", store.averageRating.toFixed(1)] }))] }), _jsxs(Stack, { paddingY: "b-md", className: "flex-1", padding: "x-md", children: [_jsx(Row, { className: "-mt-5 mb-2", align: "end", justify: "between", children: _jsx(Div, { className: "flex-shrink-0", children: hasLogo ? (_jsx(Div, { className: "relative h-10 w-10 border-2 border-[var(--appkit-color-border-subtle)] bg-[var(--appkit-color-surface)]", rounded: "lg", shadow: "md", overflow: "hidden", children: _jsx(MediaImage, { src: store.storeLogoURL, alt: store.storeName, size: "thumbnail", onError: () => setLogoBroken(true) }) })) : (_jsx(Row, { textWeight: "bold", textSize: "base", className: "h-10 w-10 border-2 border-white bg-primary/10 dark:bg-primary/20 text-primary", align: "center", justify: "center", rounded: "lg", shadow: "md", children: initial })) }) }), _jsx(Heading, { level: 3, className: `group-hover:text-primary transition-colors`, truncate: true, size: "sm", weight: "bold", color: "primary", children: store.storeName }), store.storeDescription ? (_jsx(RichText, { html: normalizeRichTextHtml(store.storeDescription), proseClass: "prose prose-sm max-w-none dark:prose-invert prose-p:my-0", className: "mt-1 line-clamp-2 text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)] flex-1" })) : (_jsx(Div, { className: "flex-1" })), _jsxs(Row, { color: "muted", textSize: "xs", gap: "sm", className: "mt-2.5", wrap: true, children: [store.totalProducts != null && store.totalProducts > 0 && (_jsxs(Span, { layout: "flex", gap: "2xs", children: [_jsx(Span, { "aria-hidden": "true", children: "\uD83D\uDCE6" }), " ", store.totalProducts, " ", labels.products ?? "products"] })), store.itemsSold != null && store.itemsSold > 0 && (_jsxs(Span, { layout: "flex", gap: "2xs", children: [_jsx(Span, { "aria-hidden": "true", children: "\uD83D\uDECD\uFE0F" }), " ", store.itemsSold, " ", labels.sold ?? "sold"] }))] }), _jsxs(Row, { border: "top-subtle", paddingY: "y-xs-tall", className: "mt-3", align: "center", justify: "between", children: [_jsxs(Span, { size: "xs", weight: "semibold", className: "text-primary group-hover:underline transition-colors", children: [labels.visitStore ?? "Visit store", " \u2192"] }), store.totalReviews != null && store.totalReviews > 0 && (_jsxs(Span, { size: "xs", color: "muted", children: [store.totalReviews, " ", labels.reviews ?? "reviews"] }))] })] })] })] }));
+    if (!renderOwnerActions)
+        return card;
+    /*
+     * Sibling of the card, never a child — see the prop's docstring. `z-20`
+     * beats this card's own overlays, which all sit at `z-10`.
+     */
+    return (_jsxs(Div, { className: "relative h-full", children: [card, _jsx(Div, { className: "absolute right-2 bottom-2 z-20", children: renderOwnerActions() })] }));
 }

package/dist/features/stores/components/StoreAuctionsListing.js

@@ -16,6 +16,7 @@ import { AUCTION_PUBLIC_SORT_OPTIONS } from "../../products/constants/sieve.js";
 import { AvailabilityTabs } from "../../products/components/AvailabilityTabs.js";
 import { AVAILABILITY_VALUES } from "../../../constants/field-names.js";
 import { TABLE_KEYS } from "../../../constants/table-keys.js";
+import { productImageUrls } from "../../products/schemas/firestore.js";
 const STORE_AUCTION_TYPES = ["auction"];
 const __P = {
     p3: "p-[var(--appkit-space-3)]",
@@ -75,7 +76,7 @@ export function StoreAuctionsListing({ storeId, initialData }) {
         description: p.description,
         price: p.price ?? 0,
         currency: p.currency || getDefaultCurrency(),
-        mainImage: p.mainImage ?? p.images?.[0],
+        mainImage: p.mainImage || productImageUrls(p.images)[0],
         images: p.images,
         listingType: "auction",
         auctionEndDate: p.auctionEndDate,

package/dist/features/stores/components/StoreCapabilitiesGuideView.js

@@ -45,7 +45,6 @@ const CAPABILITY_GROUPS = [
             { cap: "lower_commission_rate", unlocks: "Negotiated reduced platform fee. Requires a signed agreement and minimum volume.", defaultOn: false },
             { cap: "early_access_features", unlocks: "Access to beta features before they are publicly available.", defaultOn: false },
             { cap: "advanced_analytics", unlocks: "Cohort retention, basket analysis, and top-buyer breakdown (beyond summary stats).", defaultOn: false },
-            { cap: "whatsapp_catalog_sync", unlocks: "Sync your store products to your WhatsApp Business Catalog automatically.", defaultOn: false },
         ],
     },
 ];

package/dist/features/stores/components/StoreGuideHubView.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Package, ShoppingBag, Wallet, Settings, Shield, Headphones, CheckCircle2, Circle, BookOpen, MessageSquare, } from "lucide-react";
+import { Package, ShoppingBag, Wallet, Settings, Shield, Headphones, CheckCircle2, Circle, BookOpen, } from "lucide-react";
 import { Div, Grid, Heading, Progress, Row, Section, Stack, Text, TextLink } from "../../../ui/index.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
 const CLS_CHECK_ICON = "w-5 h-5 flex-shrink-0 text-emerald-500";
@@ -27,7 +27,7 @@ const GUIDE_CARDS = [
     {
         Icon: Settings,
         title: "Settings",
-        description: "Store profile, shipping config, return policy, vacation mode, and WhatsApp integration.",
+        description: "Store profile, shipping config, return policy, and vacation mode.",
         href: String(ROUTES.STORE.GUIDE_SETTINGS),
     },
     {
@@ -36,12 +36,6 @@ const GUIDE_CARDS = [
         description: "Admin-granted feature flags — auctions, pre-orders, lower commissions, and more.",
         href: String(ROUTES.STORE.GUIDE_CAPABILITIES),
     },
-    {
-        Icon: MessageSquare,
-        title: "WhatsApp Catalog Sync",
-        description: "Push your product catalog to Meta Commerce Manager for WhatsApp, Facebook, and Instagram Shops.",
-        href: String(ROUTES.STORE.GUIDE_WHATSAPP),
-    },
     {
         Icon: Headphones,
         title: "Support",

package/dist/features/stores/components/StoreSettingsGuideView.js

@@ -26,11 +26,7 @@ function ReturnPolicySection() {
 function VacationModeSection() {
     return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "What vacation mode does" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsx(Li, { className: LIST_DISC, children: "All your published listings are hidden from search results and browse pages." }), _jsx(Li, { className: LIST_DISC, children: "Your store profile page shows a \"On Vacation\" banner." }), _jsx(Li, { className: LIST_DISC, children: "Buyers cannot add your items to cart or checkout while on vacation." }), _jsx(Li, { className: LIST_DISC, children: "Existing orders that were placed before vacation mode must still be fulfilled." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "How to enable" }), _jsx(Text, { className: "leading-relaxed", children: "Go to your Store Dashboard \u2192 Settings \u2192 Storefront tab. Toggle \"Vacation mode\" on. Your listings re-appear instantly when you toggle it off." })] }), _jsx(Alert, { variant: "warning", title: "Ongoing orders are not paused", children: "Enabling vacation mode does not pause or cancel any existing orders. You are still responsible for fulfilling orders placed before vacation mode was enabled." })] }));
 }
-// -- Section 5: WhatsApp integration ------------------------------------------
-function WhatsAppSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Text, { className: "leading-relaxed", children: ["The WhatsApp integration allows your customers to contact you via WhatsApp from your store profile and lets you sync your product catalog to your WhatsApp Business Catalog (requires the", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "whatsapp_catalog_sync" }), " capability)."] }), _jsxs(Text, { className: "leading-relaxed", children: ["Full settings and the catalog sync toggle are at", " ", _jsx(TextLink, { variant: "bare", href: String(ROUTES.STORE.WHATSAPP), className: "underline text-[var(--appkit-color-primary)] hover:opacity-80", children: "Settings \u2192 WhatsApp" }), ". See the WhatsApp settings page for step-by-step setup instructions."] })] }));
-}
-// -- Section 6: Visibility states ---------------------------------------------
+// -- Section 5: Visibility states ---------------------------------------------
 function VisibilityStatesSection() {
     const STATES = [
         {
@@ -53,5 +49,5 @@ function VisibilityStatesSection() {
     return (_jsx(Stack, { gap: "3", children: STATES.map(({ state, note }) => (_jsxs(Row, { textSize: "sm", gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", weight: "semibold", children: state }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", children: note })] }, state))) }));
 }
 export function StoreSettingsGuideView(_props) {
-    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, WhatsApp, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. WhatsApp integration", children: _jsx(WhatsAppSection, {}) }), _jsx(GuideSection, { title: "6. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
 }

package/dist/features/stores/components/index.d.ts

@@ -47,5 +47,3 @@ export { StoreCapabilitiesGuideView } from "./StoreCapabilitiesGuideView";
 export type { StoreCapabilitiesGuideViewProps } from "./StoreCapabilitiesGuideView";
 export { StoreSettingsGuideView } from "./StoreSettingsGuideView";
 export type { StoreSettingsGuideViewProps } from "./StoreSettingsGuideView";
-export { StoreWhatsAppGuideView } from "./StoreWhatsAppGuideView";
-export type { StoreWhatsAppGuideViewProps } from "./StoreWhatsAppGuideView";

package/dist/features/stores/components/index.js

@@ -20,4 +20,3 @@ export { StoreOrdersGuideView } from "./StoreOrdersGuideView.js";
 export { StoreFinanceGuideView } from "./StoreFinanceGuideView.js";
 export { StoreCapabilitiesGuideView } from "./StoreCapabilitiesGuideView.js";
 export { StoreSettingsGuideView } from "./StoreSettingsGuideView.js";
-export { StoreWhatsAppGuideView } from "./StoreWhatsAppGuideView.js";

package/dist/features/stores/repository/store.repository.d.ts

@@ -4,7 +4,7 @@
  * Data access layer for the `stores` Firestore collection.
  * One store per seller; identified by storeSlug (used as document ID).
  */
-import { BaseRepository, type SieveModel, type FirebaseSieveResult, type DocumentSnapshot } from "../../../providers/db-firebase";
+import { BaseRepository, type SieveModel, type FirebaseSieveResult } from "../../../providers/db-firebase";
 import { StoreDocument } from "../schemas";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
 import type { JsonValue } from "../../../schemas/types";
@@ -17,31 +17,6 @@ export interface StoreWriteContext {
 }
 export declare class StoreRepository extends BaseRepository<StoreDocument> {
     constructor();
-    private encryptSecrets;
-    private decryptSecrets;
-    protected mapDoc<D = StoreDocument>(snap: DocumentSnapshot): D;
-    /**
-     * LIST reads never carry the WhatsApp token — not even encrypted.
-     *
-     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
-     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
-     * `mapDoc` (it previously mapped documents itself and skipped every
-     * override), that decrypt would have put a plaintext Meta OAuth bearer token
-     * on a public listing — the exact shape of Root Cause #70.
-     *
-     * So the list path deliberately does NOT call `decryptSecrets`, and drops
-     * `accessToken` outright: a list has no legitimate use for it, and a value
-     * that is never in the payload cannot be leaked by a projection someone
-     * forgets to write.
-     *
-     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
-     * WhatsApp settings and catalog-sync routes keep working exactly as before.
-     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
-     * that CLAUDE.md explicitly defers; this closes the public-exposure half
-     * without touching the encryption round-trip at all.
-     */
-    protected mapDocForList<D = StoreDocument>(snap: DocumentSnapshot): D;
-    update(id: string, data: Partial<StoreDocument>): Promise<StoreDocument>;
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.

package/dist/features/stores/repository/store.repository.js

@@ -9,7 +9,6 @@ import { increment } from "../../../contracts/field-ops.js";
 import { STORE_COLLECTION, STORE_FIELDS, DEFAULT_STORE_DATA, StoreStatusValues, STORE_TRACKED_FIELDS, STORE_HISTORY_PII_FIELDS, } from "../schemas/index.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { normalizeError } from "../../../errors/normalize.js";
-import { encryptSecret, decryptSecret, } from "../../../security/settings-encryption.js";
 import { withHistory } from "../../../_internal/shared/history/index.js";
 import { buildStoreSearchTxt } from "../../../utils/search-txt-builders.js";
 import { planSearchTxt, beginSearchWindow, emptySearchResult, } from "../../../utils/search-txt-query.js";
@@ -17,57 +16,6 @@ export class StoreRepository extends BaseRepository {
     constructor() {
         super(STORE_COLLECTION);
     }
-    encryptSecrets(data) {
-        const token = data.whatsappConfig?.accessToken;
-        if (!token)
-            return data;
-        return {
-            ...data,
-            whatsappConfig: { ...data.whatsappConfig, accessToken: encryptSecret(token) },
-        };
-    }
-    decryptSecrets(data) {
-        const token = data.whatsappConfig?.accessToken;
-        if (!token)
-            return data;
-        return {
-            ...data,
-            whatsappConfig: { ...data.whatsappConfig, accessToken: decryptSecret(token) },
-        };
-    }
-    mapDoc(snap) {
-        return this.decryptSecrets(super.mapDoc(snap));
-    }
-    /**
-     * LIST reads never carry the WhatsApp token — not even encrypted.
-     *
-     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
-     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
-     * `mapDoc` (it previously mapped documents itself and skipped every
-     * override), that decrypt would have put a plaintext Meta OAuth bearer token
-     * on a public listing — the exact shape of Root Cause #70.
-     *
-     * So the list path deliberately does NOT call `decryptSecrets`, and drops
-     * `accessToken` outright: a list has no legitimate use for it, and a value
-     * that is never in the payload cannot be leaked by a projection someone
-     * forgets to write.
-     *
-     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
-     * WhatsApp settings and catalog-sync routes keep working exactly as before.
-     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
-     * that CLAUDE.md explicitly defers; this closes the public-exposure half
-     * without touching the encryption round-trip at all.
-     */
-    mapDocForList(snap) {
-        const doc = super.mapDoc(snap);
-        if (!doc.whatsappConfig)
-            return doc;
-        const { accessToken: _dropped, ...safeConfig } = doc.whatsappConfig;
-        return { ...doc, whatsappConfig: safeConfig };
-    }
-    async update(id, data) {
-        return super.update(id, this.encryptSecrets(data));
-    }
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.
@@ -93,7 +41,7 @@ export class StoreRepository extends BaseRepository {
             await this.db
                 .collection(this.collection)
                 .doc(input.storeSlug)
-                .create(prepareForFirestore(this.encryptSecrets(storeData)));
+                .create(prepareForFirestore(storeData));
         }
         catch (err) {
             void normalizeError(err);
@@ -169,9 +117,8 @@ export class StoreRepository extends BaseRepository {
             trigger: ctx?.trigger ?? defaultTrigger,
             reason: ctx?.reason,
             note: ctx?.note,
-            // `mapDoc` decrypts whatsappConfig.accessToken on EVERY read, so a
-            // live Meta credential is in memory whenever this diff runs, and
-            // `encryptPiiFields` never descends into arrays.
+            // `encryptPiiFields` never descends into arrays, so a nested secret
+            // would be stored in plaintext — the list below is the scrub.
             piiFields: STORE_HISTORY_PII_FIELDS,
         });
         return withEntry ?? patch;
@@ -233,9 +180,7 @@ export class StoreRepository extends BaseRepository {
             options: { maxPageSize: win.maxPageSize(100) },
             fields: sieveFields,
             // Called DIRECTLY, not through `sieveQuery`, so the mapper has to be
-            // passed by hand — and it is the list mapper, never `mapDoc`. With
-            // `activeOnly` this is the public /stores listing; `mapDoc` decrypts the
-            // WhatsApp bearer token and a list has no use for it.
+            // passed by hand. With `activeOnly` this is the public /stores listing.
             mapDoc: (snap) => this.mapDocForList(snap),
         });
         const searched = win.finish(result);
@@ -372,7 +317,7 @@ export class StoreRepository extends BaseRepository {
         const batch = this.db.batch();
         const newRef = this.db.collection(this.collection).doc(newSlug);
         const oldRef = this.db.collection(this.collection).doc(currentSlug);
-        batch.create(newRef, prepareForFirestore(this.encryptSecrets(newDoc)));
+        batch.create(newRef, prepareForFirestore(newDoc));
         batch.delete(oldRef);
         await batch.commit();
         return { id: newSlug, ...newDoc };