@mohasinac/appkit 4.53.2 → 4.54.0

package/dist/features/store-extensions/schemas/firestore.js

@@ -182,16 +182,6 @@ export const DEFAULT_ITEM_REQUEST_DATA = {
     replies: [],
     replyCount: 0,
 };
-export const STORE_WHATSAPP_CONFIG_COLLECTION = "storeWhatsAppConfig";
-export const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS = [
-    "storeId",
-    "isConnected",
-    "isPaid",
-];
-export const DEFAULT_STORE_WHATSAPP_CONFIG_DATA = {
-    isConnected: false,
-    isPaid: false,
-};
 export const STORE_GOOGLE_CONFIG_COLLECTION = "storeGoogleConfig";
 export const STORE_GOOGLE_CONFIG_INDEXED_FIELDS = [
     "storeId",

package/dist/features/stores/components/InteractiveStoreCard.d.ts

@@ -12,5 +12,15 @@ export interface InteractiveStoreCardProps {
         visitStore?: string;
     };
     className?: string;
+    /**
+     * Owner-only pencil / clone / bin, for an admin or whoever owns this record.
+     * Pass `<OwnerQuickActions>`; it renders nothing for anyone else.
+     *
+     * 🛑 Rendered OUTSIDE this card's own `<Link>`/`<TextLink>`, as a sibling.
+     * A `<button>` inside an `<a>` is invalid HTML that browsers resolve by
+     * closing the anchor early, which breaks the CARD's navigation rather than
+     * just the button's — `stopPropagation` stops a click but cannot fix a parse.
+     */
+    renderOwnerActions?: () => React.ReactNode;
 }
-export declare function InteractiveStoreCard({ store, href, selectable, isSelected, onSelect, labels, className, }: InteractiveStoreCardProps): import("react").JSX.Element;
+export declare function InteractiveStoreCard({ store, href, selectable, isSelected, onSelect, labels, className, renderOwnerActions, }: InteractiveStoreCardProps): import("react").JSX.Element;

package/dist/features/stores/components/InteractiveStoreCard.js

@@ -10,13 +10,13 @@ const __O = {
     hidden: "overflow-hidden",
 };
 const CLS_RATING_BADGE = "absolute top-2 right-2 flex items-center gap-[var(--appkit-space-1)] rounded-full bg-black/50 backdrop-blur-sm px-[var(--appkit-space-2)] py-[var(--appkit-space-0-5)] text-[length:var(--appkit-text-xs)] font-semibold text-warning";
-export function InteractiveStoreCard({ store, href, selectable, isSelected = false, onSelect, labels = {}, className = "", }) {
+export function InteractiveStoreCard({ store, href, selectable, isSelected = false, onSelect, labels = {}, className = "", renderOwnerActions, }) {
     const initial = store.storeName[0]?.toUpperCase() ?? "S";
     const [logoBroken, setLogoBroken] = useState(false);
     const hasLogo = Boolean(store.storeLogoURL) && !logoBroken;
     const hasBanner = Boolean(store.storeBannerURL);
     const longPress = useLongPress(() => onSelect?.(store.id, !isSelected));
-    return (_jsxs(Div, { className: [
+    const card = (_jsxs(Div, { className: [
             "group relative flex flex-col h-full overflow-hidden rounded-xl border bg-[var(--appkit-color-surface)] shadow-sm transition-shadow hover:shadow-lg",
             isSelected
                 ? "border-[var(--appkit-color-primary,theme(colors.violet.600))] outline outline-2 outline-[var(--appkit-color-primary,theme(colors.violet.600))]"
@@ -26,4 +26,11 @@ export function InteractiveStoreCard({ store, href, selectable, isSelected = fal
                     e.preventDefault();
                     onSelect(store.id, !isSelected);
                 }, label: isSelected ? "Deselect store" : "Select store", position: "top-2 left-2", className: selectable || isSelected ? "opacity-100" : "opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto transition-opacity" })), _jsxs(Link, { href: href, className: "flex flex-col flex-1 min-h-0", children: [_jsxs(Div, { surface: "muted", className: `relative aspect-video w-full ${__O.hidden} flex-shrink-0`, children: [hasBanner ? (_jsx(MediaImage, { src: store.storeBannerURL, alt: `${store.storeName} banner`, size: "banner", className: "h-full w-full object-cover transition-transform duration-500 group-hover:scale-105" })) : (_jsx(Row, { className: "absolute inset-0", align: "center", justify: "center", children: _jsx(Span, { className: "opacity-20 select-none", size: "5xl", "aria-hidden": "true", children: "\uD83C\uDFEA" }) })), _jsx(Scrim, { direction: "bottom-up", intensity: "subtle", className: "absolute inset-x-0 bottom-0 h-12" }), store.averageRating != null && store.averageRating > 0 && (_jsxs(Div, { className: CLS_RATING_BADGE, children: ["\u2605 ", store.averageRating.toFixed(1)] }))] }), _jsxs(Stack, { paddingY: "b-md", className: "flex-1", padding: "x-md", children: [_jsx(Row, { className: "-mt-5 mb-2", align: "end", justify: "between", children: _jsx(Div, { className: "flex-shrink-0", children: hasLogo ? (_jsx(Div, { className: "relative h-10 w-10 border-2 border-[var(--appkit-color-border-subtle)] bg-[var(--appkit-color-surface)]", rounded: "lg", shadow: "md", overflow: "hidden", children: _jsx(MediaImage, { src: store.storeLogoURL, alt: store.storeName, size: "thumbnail", onError: () => setLogoBroken(true) }) })) : (_jsx(Row, { textWeight: "bold", textSize: "base", className: "h-10 w-10 border-2 border-white bg-primary/10 dark:bg-primary/20 text-primary", align: "center", justify: "center", rounded: "lg", shadow: "md", children: initial })) }) }), _jsx(Heading, { level: 3, className: `group-hover:text-primary transition-colors`, truncate: true, size: "sm", weight: "bold", color: "primary", children: store.storeName }), store.storeDescription ? (_jsx(RichText, { html: normalizeRichTextHtml(store.storeDescription), proseClass: "prose prose-sm max-w-none dark:prose-invert prose-p:my-0", className: "mt-1 line-clamp-2 text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)] flex-1" })) : (_jsx(Div, { className: "flex-1" })), _jsxs(Row, { color: "muted", textSize: "xs", gap: "sm", className: "mt-2.5", wrap: true, children: [store.totalProducts != null && store.totalProducts > 0 && (_jsxs(Span, { layout: "flex", gap: "2xs", children: [_jsx(Span, { "aria-hidden": "true", children: "\uD83D\uDCE6" }), " ", store.totalProducts, " ", labels.products ?? "products"] })), store.itemsSold != null && store.itemsSold > 0 && (_jsxs(Span, { layout: "flex", gap: "2xs", children: [_jsx(Span, { "aria-hidden": "true", children: "\uD83D\uDECD\uFE0F" }), " ", store.itemsSold, " ", labels.sold ?? "sold"] }))] }), _jsxs(Row, { border: "top-subtle", paddingY: "y-xs-tall", className: "mt-3", align: "center", justify: "between", children: [_jsxs(Span, { size: "xs", weight: "semibold", className: "text-primary group-hover:underline transition-colors", children: [labels.visitStore ?? "Visit store", " \u2192"] }), store.totalReviews != null && store.totalReviews > 0 && (_jsxs(Span, { size: "xs", color: "muted", children: [store.totalReviews, " ", labels.reviews ?? "reviews"] }))] })] })] })] }));
+    if (!renderOwnerActions)
+        return card;
+    /*
+     * Sibling of the card, never a child — see the prop's docstring. `z-20`
+     * beats this card's own overlays, which all sit at `z-10`.
+     */
+    return (_jsxs(Div, { className: "relative h-full", children: [card, _jsx(Div, { className: "absolute right-2 bottom-2 z-20", children: renderOwnerActions() })] }));
 }

package/dist/features/stores/components/StoreCapabilitiesGuideView.js

@@ -45,7 +45,6 @@ const CAPABILITY_GROUPS = [
             { cap: "lower_commission_rate", unlocks: "Negotiated reduced platform fee. Requires a signed agreement and minimum volume.", defaultOn: false },
             { cap: "early_access_features", unlocks: "Access to beta features before they are publicly available.", defaultOn: false },
             { cap: "advanced_analytics", unlocks: "Cohort retention, basket analysis, and top-buyer breakdown (beyond summary stats).", defaultOn: false },
-            { cap: "whatsapp_catalog_sync", unlocks: "Sync your store products to your WhatsApp Business Catalog automatically.", defaultOn: false },
         ],
     },
 ];

package/dist/features/stores/components/StoreGuideHubView.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Package, ShoppingBag, Wallet, Settings, Shield, Headphones, CheckCircle2, Circle, BookOpen, MessageSquare, } from "lucide-react";
+import { Package, ShoppingBag, Wallet, Settings, Shield, Headphones, CheckCircle2, Circle, BookOpen, } from "lucide-react";
 import { Div, Grid, Heading, Progress, Row, Section, Stack, Text, TextLink } from "../../../ui/index.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
 const CLS_CHECK_ICON = "w-5 h-5 flex-shrink-0 text-emerald-500";
@@ -27,7 +27,7 @@ const GUIDE_CARDS = [
     {
         Icon: Settings,
         title: "Settings",
-        description: "Store profile, shipping config, return policy, vacation mode, and WhatsApp integration.",
+        description: "Store profile, shipping config, return policy, and vacation mode.",
         href: String(ROUTES.STORE.GUIDE_SETTINGS),
     },
     {
@@ -36,12 +36,6 @@ const GUIDE_CARDS = [
         description: "Admin-granted feature flags — auctions, pre-orders, lower commissions, and more.",
         href: String(ROUTES.STORE.GUIDE_CAPABILITIES),
     },
-    {
-        Icon: MessageSquare,
-        title: "WhatsApp Catalog Sync",
-        description: "Push your product catalog to Meta Commerce Manager for WhatsApp, Facebook, and Instagram Shops.",
-        href: String(ROUTES.STORE.GUIDE_WHATSAPP),
-    },
     {
         Icon: Headphones,
         title: "Support",

package/dist/features/stores/components/StoreSettingsGuideView.js

@@ -26,11 +26,7 @@ function ReturnPolicySection() {
 function VacationModeSection() {
     return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "What vacation mode does" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsx(Li, { className: LIST_DISC, children: "All your published listings are hidden from search results and browse pages." }), _jsx(Li, { className: LIST_DISC, children: "Your store profile page shows a \"On Vacation\" banner." }), _jsx(Li, { className: LIST_DISC, children: "Buyers cannot add your items to cart or checkout while on vacation." }), _jsx(Li, { className: LIST_DISC, children: "Existing orders that were placed before vacation mode must still be fulfilled." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "How to enable" }), _jsx(Text, { className: "leading-relaxed", children: "Go to your Store Dashboard \u2192 Settings \u2192 Storefront tab. Toggle \"Vacation mode\" on. Your listings re-appear instantly when you toggle it off." })] }), _jsx(Alert, { variant: "warning", title: "Ongoing orders are not paused", children: "Enabling vacation mode does not pause or cancel any existing orders. You are still responsible for fulfilling orders placed before vacation mode was enabled." })] }));
 }
-// -- Section 5: WhatsApp integration ------------------------------------------
-function WhatsAppSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Text, { className: "leading-relaxed", children: ["The WhatsApp integration allows your customers to contact you via WhatsApp from your store profile and lets you sync your product catalog to your WhatsApp Business Catalog (requires the", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "whatsapp_catalog_sync" }), " capability)."] }), _jsxs(Text, { className: "leading-relaxed", children: ["Full settings and the catalog sync toggle are at", " ", _jsx(TextLink, { variant: "bare", href: String(ROUTES.STORE.WHATSAPP), className: "underline text-[var(--appkit-color-primary)] hover:opacity-80", children: "Settings \u2192 WhatsApp" }), ". See the WhatsApp settings page for step-by-step setup instructions."] })] }));
-}
-// -- Section 6: Visibility states ---------------------------------------------
+// -- Section 5: Visibility states ---------------------------------------------
 function VisibilityStatesSection() {
     const STATES = [
         {
@@ -53,5 +49,5 @@ function VisibilityStatesSection() {
     return (_jsx(Stack, { gap: "3", children: STATES.map(({ state, note }) => (_jsxs(Row, { textSize: "sm", gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", weight: "semibold", children: state }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", children: note })] }, state))) }));
 }
 export function StoreSettingsGuideView(_props) {
-    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, WhatsApp, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. WhatsApp integration", children: _jsx(WhatsAppSection, {}) }), _jsx(GuideSection, { title: "6. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
 }

package/dist/features/stores/components/index.d.ts

@@ -47,5 +47,3 @@ export { StoreCapabilitiesGuideView } from "./StoreCapabilitiesGuideView";
 export type { StoreCapabilitiesGuideViewProps } from "./StoreCapabilitiesGuideView";
 export { StoreSettingsGuideView } from "./StoreSettingsGuideView";
 export type { StoreSettingsGuideViewProps } from "./StoreSettingsGuideView";
-export { StoreWhatsAppGuideView } from "./StoreWhatsAppGuideView";
-export type { StoreWhatsAppGuideViewProps } from "./StoreWhatsAppGuideView";

package/dist/features/stores/components/index.js

@@ -20,4 +20,3 @@ export { StoreOrdersGuideView } from "./StoreOrdersGuideView.js";
 export { StoreFinanceGuideView } from "./StoreFinanceGuideView.js";
 export { StoreCapabilitiesGuideView } from "./StoreCapabilitiesGuideView.js";
 export { StoreSettingsGuideView } from "./StoreSettingsGuideView.js";
-export { StoreWhatsAppGuideView } from "./StoreWhatsAppGuideView.js";

package/dist/features/stores/repository/store.repository.d.ts

@@ -4,7 +4,7 @@
  * Data access layer for the `stores` Firestore collection.
  * One store per seller; identified by storeSlug (used as document ID).
  */
-import { BaseRepository, type SieveModel, type FirebaseSieveResult, type DocumentSnapshot } from "../../../providers/db-firebase";
+import { BaseRepository, type SieveModel, type FirebaseSieveResult } from "../../../providers/db-firebase";
 import { StoreDocument } from "../schemas";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
 import type { JsonValue } from "../../../schemas/types";
@@ -17,31 +17,6 @@ export interface StoreWriteContext {
 }
 export declare class StoreRepository extends BaseRepository<StoreDocument> {
     constructor();
-    private encryptSecrets;
-    private decryptSecrets;
-    protected mapDoc<D = StoreDocument>(snap: DocumentSnapshot): D;
-    /**
-     * LIST reads never carry the WhatsApp token — not even encrypted.
-     *
-     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
-     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
-     * `mapDoc` (it previously mapped documents itself and skipped every
-     * override), that decrypt would have put a plaintext Meta OAuth bearer token
-     * on a public listing — the exact shape of Root Cause #70.
-     *
-     * So the list path deliberately does NOT call `decryptSecrets`, and drops
-     * `accessToken` outright: a list has no legitimate use for it, and a value
-     * that is never in the payload cannot be leaked by a projection someone
-     * forgets to write.
-     *
-     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
-     * WhatsApp settings and catalog-sync routes keep working exactly as before.
-     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
-     * that CLAUDE.md explicitly defers; this closes the public-exposure half
-     * without touching the encryption round-trip at all.
-     */
-    protected mapDocForList<D = StoreDocument>(snap: DocumentSnapshot): D;
-    update(id: string, data: Partial<StoreDocument>): Promise<StoreDocument>;
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.

package/dist/features/stores/repository/store.repository.js

@@ -9,7 +9,6 @@ import { increment } from "../../../contracts/field-ops.js";
 import { STORE_COLLECTION, STORE_FIELDS, DEFAULT_STORE_DATA, StoreStatusValues, STORE_TRACKED_FIELDS, STORE_HISTORY_PII_FIELDS, } from "../schemas/index.js";
 import { DatabaseError } from "../../../errors/index.js";
 import { normalizeError } from "../../../errors/normalize.js";
-import { encryptSecret, decryptSecret, } from "../../../security/settings-encryption.js";
 import { withHistory } from "../../../_internal/shared/history/index.js";
 import { buildStoreSearchTxt } from "../../../utils/search-txt-builders.js";
 import { planSearchTxt, beginSearchWindow, emptySearchResult, } from "../../../utils/search-txt-query.js";
@@ -17,57 +16,6 @@ export class StoreRepository extends BaseRepository {
     constructor() {
         super(STORE_COLLECTION);
     }
-    encryptSecrets(data) {
-        const token = data.whatsappConfig?.accessToken;
-        if (!token)
-            return data;
-        return {
-            ...data,
-            whatsappConfig: { ...data.whatsappConfig, accessToken: encryptSecret(token) },
-        };
-    }
-    decryptSecrets(data) {
-        const token = data.whatsappConfig?.accessToken;
-        if (!token)
-            return data;
-        return {
-            ...data,
-            whatsappConfig: { ...data.whatsappConfig, accessToken: decryptSecret(token) },
-        };
-    }
-    mapDoc(snap) {
-        return this.decryptSecrets(super.mapDoc(snap));
-    }
-    /**
-     * LIST reads never carry the WhatsApp token — not even encrypted.
-     *
-     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
-     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
-     * `mapDoc` (it previously mapped documents itself and skipped every
-     * override), that decrypt would have put a plaintext Meta OAuth bearer token
-     * on a public listing — the exact shape of Root Cause #70.
-     *
-     * So the list path deliberately does NOT call `decryptSecrets`, and drops
-     * `accessToken` outright: a list has no legitimate use for it, and a value
-     * that is never in the payload cannot be leaked by a projection someone
-     * forgets to write.
-     *
-     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
-     * WhatsApp settings and catalog-sync routes keep working exactly as before.
-     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
-     * that CLAUDE.md explicitly defers; this closes the public-exposure half
-     * without touching the encryption round-trip at all.
-     */
-    mapDocForList(snap) {
-        const doc = super.mapDoc(snap);
-        if (!doc.whatsappConfig)
-            return doc;
-        const { accessToken: _dropped, ...safeConfig } = doc.whatsappConfig;
-        return { ...doc, whatsappConfig: safeConfig };
-    }
-    async update(id, data) {
-        return super.update(id, this.encryptSecrets(data));
-    }
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.
@@ -93,7 +41,7 @@ export class StoreRepository extends BaseRepository {
             await this.db
                 .collection(this.collection)
                 .doc(input.storeSlug)
-                .create(prepareForFirestore(this.encryptSecrets(storeData)));
+                .create(prepareForFirestore(storeData));
         }
         catch (err) {
             void normalizeError(err);
@@ -169,9 +117,8 @@ export class StoreRepository extends BaseRepository {
             trigger: ctx?.trigger ?? defaultTrigger,
             reason: ctx?.reason,
             note: ctx?.note,
-            // `mapDoc` decrypts whatsappConfig.accessToken on EVERY read, so a
-            // live Meta credential is in memory whenever this diff runs, and
-            // `encryptPiiFields` never descends into arrays.
+            // `encryptPiiFields` never descends into arrays, so a nested secret
+            // would be stored in plaintext — the list below is the scrub.
             piiFields: STORE_HISTORY_PII_FIELDS,
         });
         return withEntry ?? patch;
@@ -233,9 +180,7 @@ export class StoreRepository extends BaseRepository {
             options: { maxPageSize: win.maxPageSize(100) },
             fields: sieveFields,
             // Called DIRECTLY, not through `sieveQuery`, so the mapper has to be
-            // passed by hand — and it is the list mapper, never `mapDoc`. With
-            // `activeOnly` this is the public /stores listing; `mapDoc` decrypts the
-            // WhatsApp bearer token and a list has no use for it.
+            // passed by hand. With `activeOnly` this is the public /stores listing.
             mapDoc: (snap) => this.mapDocForList(snap),
         });
         const searched = win.finish(result);
@@ -372,7 +317,7 @@ export class StoreRepository extends BaseRepository {
         const batch = this.db.batch();
         const newRef = this.db.collection(this.collection).doc(newSlug);
         const oldRef = this.db.collection(this.collection).doc(currentSlug);
-        batch.create(newRef, prepareForFirestore(this.encryptSecrets(newDoc)));
+        batch.create(newRef, prepareForFirestore(newDoc));
         batch.delete(oldRef);
         await batch.commit();
         return { id: newSlug, ...newDoc };

package/dist/features/stores/schemas/firestore.d.ts

@@ -254,28 +254,6 @@ export interface StoreDocument extends BaseDocument {
      * than trusting that nobody adds it.
      */
     returnsDirectToSeller?: boolean;
-    whatsappConfig?: {
-        /** Seller's WhatsApp Business phone number, digits-only with country code e.g. "919876543210" */
-        phoneNumber?: string;
-        /** Meta WABA ID for this store */
-        wabaId?: string;
-        /** Meta Commerce Catalog ID linked to this store */
-        catalogId?: string;
-        /** Encrypted access token (AES-256-GCM via encryptPii) — never returned to client */
-        accessToken?: string;
-        /** Whether catalog sync is enabled for this store */
-        catalogSyncEnabled: boolean;
-        /** Timestamp of last successful catalog sync */
-        lastCatalogSyncAt?: Date;
-        /** Number of products synced in last run */
-        lastSyncCount?: number;
-        /** Status of last sync attempt */
-        lastSyncStatus?: "success" | "partial" | "failed";
-        /** True when wabaId + catalogId + accessToken are all set */
-        connected: boolean;
-        /** When the seller first connected their account */
-        connectedAt?: Date;
-    };
     /**
      * Who changed what, when, and why. See § "Status History" in CLAUDE.md.
      *
@@ -300,9 +278,12 @@ export interface StoreDocument extends BaseDocument {
  */
 export declare const STORE_TRACKED_FIELDS: readonly ["status", "isPublic", "isVerified", "isFeatured", "suspensionReason", "capabilities"];
 /**
- * PII on this document, for `withHistory`'s scrub. `whatsappConfig.accessToken`
- * is a live Meta credential; `mapDoc` decrypts it on EVERY read, so it is
- * present in memory whenever a diff runs.
+ * PII on this document, for the `withHistory` scrub.
+ *
+ * `accessToken` stays listed although the WhatsApp integration that produced
+ * one was removed 2026-10-20: a scrub list is cheap, and a future secret
+ * reaching this document under that name should be scrubbed by default
+ * rather than by someone remembering to add it.
  */
 export declare const STORE_HISTORY_PII_FIELDS: readonly ["accessToken", "payoutDetails", "upiVpa", "accountNumber"];
 export type { StoreCapability } from "../../auth/permissions/constants";

package/dist/features/stores/schemas/firestore.js

@@ -33,9 +33,12 @@ export const STORE_TRACKED_FIELDS = [
     "capabilities",
 ];
 /**
- * PII on this document, for `withHistory`'s scrub. `whatsappConfig.accessToken`
- * is a live Meta credential; `mapDoc` decrypts it on EVERY read, so it is
- * present in memory whenever a diff runs.
+ * PII on this document, for the `withHistory` scrub.
+ *
+ * `accessToken` stays listed although the WhatsApp integration that produced
+ * one was removed 2026-10-20: a scrub list is cheap, and a future secret
+ * reaching this document under that name should be scrubbed by default
+ * rather than by someone remembering to add it.
  */
 export const STORE_HISTORY_PII_FIELDS = [
     "accessToken",

package/dist/features/stores/schemas/index.d.ts

@@ -228,7 +228,7 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         totalReviews: number;
         averageRating?: number | undefined;
     }>>;
-    capabilities: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<[string, ...string[]]>, "many">>;
     customCommissionRate: z.ZodOptional<z.ZodNumber>;
     googleReviews: z.ZodOptional<z.ZodObject<{
         placeId: z.ZodString;
@@ -347,60 +347,6 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         defaultProviderId: string;
     }>>;
     emiEnabled: z.ZodOptional<z.ZodBoolean>;
-    whatsappConfig: z.ZodOptional<z.ZodObject<{
-        phoneNumber: z.ZodOptional<z.ZodString>;
-        wabaId: z.ZodOptional<z.ZodString>;
-        catalogId: z.ZodOptional<z.ZodString>;
-        accessToken: z.ZodOptional<z.ZodString>;
-        catalogSyncEnabled: z.ZodBoolean;
-        lastCatalogSyncAt: z.ZodOptional<z.ZodUnion<[z.ZodDate, z.ZodString, z.ZodObject<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough">>]>>;
-        lastSyncCount: z.ZodOptional<z.ZodNumber>;
-        lastSyncStatus: z.ZodOptional<z.ZodEnum<["success", "partial", "failed"]>>;
-        connected: z.ZodBoolean;
-        connectedAt: z.ZodOptional<z.ZodUnion<[z.ZodDate, z.ZodString, z.ZodObject<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough">>]>>;
-    }, "strip", z.ZodTypeAny, {
-        catalogSyncEnabled: boolean;
-        connected: boolean;
-        phoneNumber?: string | undefined;
-        accessToken?: string | undefined;
-        wabaId?: string | undefined;
-        catalogId?: string | undefined;
-        lastCatalogSyncAt?: string | Date | z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-        lastSyncCount?: number | undefined;
-        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
-        connectedAt?: string | Date | z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-    }, {
-        catalogSyncEnabled: boolean;
-        connected: boolean;
-        phoneNumber?: string | undefined;
-        accessToken?: string | undefined;
-        wabaId?: string | undefined;
-        catalogId?: string | undefined;
-        lastCatalogSyncAt?: string | Date | z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-        lastSyncCount?: number | undefined;
-        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
-        connectedAt?: string | Date | z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-    }>>;
 }, "strip", z.ZodTypeAny, {
     status: "pending" | "active" | "rejected" | "suspended";
     id: string;
@@ -470,22 +416,6 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         maxReviews?: number | undefined;
         minRating?: number | undefined;
     } | undefined;
-    whatsappConfig?: {
-        catalogSyncEnabled: boolean;
-        connected: boolean;
-        phoneNumber?: string | undefined;
-        accessToken?: string | undefined;
-        wabaId?: string | undefined;
-        catalogId?: string | undefined;
-        lastCatalogSyncAt?: string | Date | z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-        lastSyncCount?: number | undefined;
-        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
-        connectedAt?: string | Date | z.objectOutputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-    } | undefined;
 }, {
     status: "pending" | "active" | "rejected" | "suspended";
     id: string;
@@ -555,22 +485,6 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         maxReviews?: number | undefined;
         minRating?: number | undefined;
     } | undefined;
-    whatsappConfig?: {
-        catalogSyncEnabled: boolean;
-        connected: boolean;
-        phoneNumber?: string | undefined;
-        accessToken?: string | undefined;
-        wabaId?: string | undefined;
-        catalogId?: string | undefined;
-        lastCatalogSyncAt?: string | Date | z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-        lastSyncCount?: number | undefined;
-        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
-        connectedAt?: string | Date | z.objectInputType<{
-            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-    } | undefined;
 }>;
 export type StoreFromSchema = z.infer<typeof storeFirestoreSchema>;
 /** Zod schema for store status — use instead of inline `z.enum(["pending",...])`. */

package/dist/features/stores/schemas/index.js

@@ -1,6 +1,7 @@
 export * from "./firestore.js";
 import { z } from "zod";
 import { StoreStatusValues } from "./firestore.js";
+import { ALL_STORE_CAPABILITIES } from "../../auth/permissions/constants.js";
 import { auditTimestampsShape, firestoreDateSchema, rupeesSchema } from "../../../schemas/firestore-helpers.js";
 // ─── Firestore document schema (W2) ───────────────────────────────────────────
 // Mirrors StoreDocument in ./firestore.ts. Registered into SCHEMAS.firestore.stores.
@@ -70,7 +71,15 @@ export const storeFirestoreSchema = z.object({
         averageRating: z.number().optional(),
     })
         .optional(),
-    capabilities: z.array(z.string()).optional(),
+    /*
+     * 🛑 A `z.enum`, not `z.array(z.string())`. Nothing used to check a stored
+     * capability against the union, so a typo saved successfully and the gate it
+     * was meant to open never opened — with no error anywhere, because an
+     * unrecognised capability is indistinguishable from an ungranted one.
+     */
+    capabilities: z
+        .array(z.enum(ALL_STORE_CAPABILITIES))
+        .optional(),
     customCommissionRate: z.number().min(0).max(100).optional(),
     googleReviews: z
         .object({
@@ -83,20 +92,6 @@ export const storeFirestoreSchema = z.object({
         .optional(),
     shippingConfig: storeShippingConfigSchema.optional(),
     emiEnabled: z.boolean().optional(),
-    whatsappConfig: z
-        .object({
-        phoneNumber: z.string().optional(),
-        wabaId: z.string().optional(),
-        catalogId: z.string().optional(),
-        accessToken: z.string().optional(),
-        catalogSyncEnabled: z.boolean(),
-        lastCatalogSyncAt: firestoreDateSchema.optional(),
-        lastSyncCount: z.number().int().optional(),
-        lastSyncStatus: z.enum(["success", "partial", "failed"]).optional(),
-        connected: z.boolean(),
-        connectedAt: firestoreDateSchema.optional(),
-    })
-        .optional(),
     ...auditTimestampsShape,
 });
 /** Zod schema for store status — use instead of inline `z.enum(["pending",...])`. */

package/dist/features/tester/seed-data/authored/admin__site-system.js

@@ -174,54 +174,6 @@ export const authored = {
         expectedUiState: "With the toggle OFF, /checkout offers only whichever of manual UPI/cash and COD are separately enabled — no 'Pay Online (PhonePe)' button. With it back ON, the button reappears.",
         endResult: "The toggle is restored to ON, matching the state before this case started.",
     },
-    "checklist-admin-site-system-whatsapp-credentials-persist": {
-        roles: ["admin"],
-        startPage: "/admin/site",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123!.",
-            "Open /admin/site, switch to the Integrations tab, and WRITE DOWN every WhatsApp field and its current masked state before touching anything.",
-            "Type QA-WA-TOKEN-552310 into the access-token field and fill any account identifier fields.",
-            "Save and RELOAD, then read how each field displays.",
-            "Open /api/site-settings in a private window and search for QA-WA-TOKEN-552310.",
-            "Open a public store page's source and search for it too.",
-            "RESTORE every field to exactly what step 3 recorded — clearing is not restoring, and a real Meta token cleared here cannot be recovered from the seed. Save and reload to confirm.",
-        ],
-        inputs: { token: "QA-WA-TOKEN-552310" },
-        expectedBehaviour: "The token is encrypted at rest and masked on read. It is also decrypted on every read of a store document, so any page handing a raw store document to a client component serialises it into public HTML — which is why both the settings response and a public store page are checked rather than the admin form alone.",
-        expectedUiState: "After the reload the token displays masked. Neither the public settings response nor a public store page's source contains it.",
-        expectedData: { tokenInPublicSurfaces: 0 },
-        endResult: "The fields are cleared by the final step.",
-    },
-    "checklist-admin-site-system-whatsapp-channel-toggle-persists": {
-        roles: ["admin"],
-        startPage: "/admin/site",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123!.",
-            "Open /admin/site, switch to the Notifications tab, and read every channel toggle and its state. Four are listed: in-app, email, WhatsApp and SMS.",
-            "Turn the WHATSAPP channel off and save. Pick that one specifically — SMS is seeded OFF (and has no sender at all), so toggling it off would be a no-op that proves nothing.",
-            "RELOAD and read every toggle.",
-            "Check only the one changed.",
-            "Turn it back on, save, and reload to confirm.",
-        ],
-        expectedBehaviour: "Off is the direction that proves persistence when the default is on: a toggle that never saves reads back as its default and passes a test that only ever turns it on. Saving one toggle must not rewrite the rest.",
-        expectedUiState: "After the reload the toggled channel is off and every other is unchanged. A toggle that has reverted to on is the failure, and the save reported success.",
-        endResult: "The toggle is restored.",
-    },
-    "checklist-admin-site-system-whatsapp-order-announcement-fires": {
-        roles: ["admin", "buyer"],
-        startPage: "/admin/site",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123! and confirm the WhatsApp order channel is enabled.",
-            "Read whether real credentials are configured or whether the fields are empty.",
-            "Sign in as rehan.sheikh@gmail.com / TempPass123! and place an order that would trigger an order announcement.",
-            "Read whether the buyer opted into WhatsApp updates and what fee was charged for it.",
-            "Check the in-app notification for the order arrived.",
-            "If real credentials are configured, check whether a WhatsApp message arrived.",
-        ],
-        expectedBehaviour: "WhatsApp order announcements are a paid per-store add-on, so the charge and the delivery must agree — a buyer charged the add-on fee and sent nothing is the failure that matters. With no credentials configured, the dispatch skips cleanly rather than failing loudly: the Meta secrets are seeded as empty strings rather than placeholders for exactly that reason.",
-        expectedUiState: "The in-app notification arrives regardless. With credentials configured a message arrives; without them nothing is sent and no error surfaces to the buyer. A charged add-on with no delivery is the finding.",
-        endResult: "One order exists. Record whether credentials were configured — the case reads differently either way.",
-    },
     "checklist-admin-site-system-auction-bid-tiers-admin": {
         roles: ["admin", "buyer"],
         startPage: "/admin/site",

package/dist/features/tester/seed-data/authored/buying__buying-checkout.js

@@ -226,46 +226,6 @@ export const authored = {
         expectedData: { otpRequiredAbove: true, otpRequiredBelow: false },
         endResult: "Entering the correct code completes the order. Three items only add to ₹4,597 — the fourth is what actually crosses the threshold, and an earlier draft of this case stopped at three and could never have triggered the prompt it was checking for.",
     },
-    "checklist-buying-buying-checkout-checkout-otp-whatsapp-hidden-without-phone": {
-        roles: ["buyer"],
-        startPage: "/checkout",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123! and confirm Site Settings → Notifications → WhatsApp → 'WhatsApp OTP' is enabled.",
-            "Sign in as rehan.sheikh@gmail.com / TempPass123!.",
-            "Open /user/addresses and add an address named 'QA Address otp-whatsapp-hidden', 2 Test Road, Mumbai, Maharashtra 400001, leaving the phone field empty.",
-            "Add product-beyblade-original-dranzer-s (₹1,499), product-beyblade-original-driger-v (₹1,799), product-beyblade-metal-storm-pegasus (₹1,299) and product-beyblade-burst-regalia-genesis (₹1,399) to the cart, making ₹5,996.",
-            "Open /checkout, select 'QA Address otp-whatsapp-hidden' on Step 1, and continue to the payment step.",
-            "Select a non-COD payment method.",
-            "Read every option offered on the OTP prompt.",
-        ],
-        inputs: { addressLabel: "QA Address otp-whatsapp-hidden", phone: "", subtotal: 5996 },
-        expectedBehaviour: "The WhatsApp channel needs three things at once — admin-enabled, real credentials, and a phone number on the SELECTED address. Missing the third hides the option rather than offering it and failing at send time, which would waste the buyer's OTP window on a channel that could never deliver.",
-        expectedUiState: "The prompt offers email only. There is no 'Send via WhatsApp instead' control, disabled or otherwise, even though the same setting shows one for an address that has a phone.",
-        expectedData: { whatsappOptionPresent: false },
-        endResult: "The order still completes by email OTP. Delete the address afterwards so it does not accumulate across runs.",
-    },
-    "checklist-buying-buying-checkout-checkout-otp-whatsapp-option": {
-        roles: ["buyer"],
-        startPage: "/checkout",
-        steps: [
-            "Sign in as admin@letitrip.in / TempPass123! and confirm Site Settings → Notifications → WhatsApp → 'WhatsApp OTP' is enabled with real Meta Cloud API credentials.",
-            "Sign in as rehan.sheikh@gmail.com / TempPass123!.",
-            "Open /user/addresses and add a phone number to the existing address 'Home — 123 Stadium Lane, Vijay Nagar, Indore, Madhya Pradesh 452010' if it does not already have one.",
-            "Add product-beyblade-original-dranzer-s (₹1,499), product-beyblade-original-driger-v (₹1,799), product-beyblade-metal-storm-pegasus (₹1,299) and product-beyblade-burst-regalia-genesis (₹1,399) to the cart, making ₹5,996.",
-            "Open /cart and click 'Proceed to checkout'.",
-            "Select the address with a phone number on Step 1 and click 'Continue'.",
-            "Click 'Continue to payment' on Step 2.",
-            "On Step 3, select a non-COD payment method.",
-            "Read the default send channel shown on the OTP prompt.",
-            "Click 'Send via WhatsApp instead'.",
-            "Type the code received on WhatsApp into the OTP field and submit it.",
-        ],
-        inputs: { subtotal: 5996, defaultChannel: "email", alternateChannel: "WhatsApp" },
-        expectedBehaviour: "Email is the default channel and WhatsApp is opt-in per attempt. The alternate appears only when the feature is enabled, real Meta credentials are configured, and the selected address carries a phone — the seeded Meta secrets are empty strings rather than placeholders precisely so a missing credential skips cleanly instead of making a billed call that fails.",
-        expectedUiState: "The prompt first shows a masked email. After 'Send via WhatsApp instead' it shows a masked phone in the shape '+91 ••••••7890'. The code that arrives on WhatsApp is accepted and payment proceeds.",
-        expectedData: { defaultChannel: "email" },
-        endResult: "The order is placed after the WhatsApp code verifies. With no real Meta credentials configured this case is unreachable — answer null rather than reporting the missing option as a bug.",
-    },
     "checklist-buying-buying-checkout-checkout-phonepe-charge-includes-shipping": {
         roles: ["buyer"],
         startPage: "/checkout",