@mohasinac/appkit 4.53.2 → 4.54.0

package/dist/_internal/shared/listing-types/tiers.js

@@ -0,0 +1,150 @@
+/**
+ * Which listing types a store may create: the basic/advanced split.
+ *
+ * ── The rule ──────────────────────────────────────────────────────────────
+ *
+ * `standard`, `spares` and `auction` are BASIC — every store can use them.
+ * The other seven are ADVANCED and need the `advanced_listing_types`
+ * capability, because each carries an obligation a new seller has not agreed
+ * to yet: a pre-order takes money for stock that does not exist, a prize draw
+ * is a regulated promotion, a classified happens off-platform with no escrow,
+ * a digital code must be delivered from a pool the seller has to keep stocked,
+ * and a live listing is an animal.
+ *
+ * ── Why a Record and not an array ─────────────────────────────────────────
+ *
+ * 🛑 `Record<ListingType, ListingTypeTier>`, so adding a member to the union
+ * is a COMPILE error here rather than a silent omission that defaults to
+ * whichever branch the code happens to fall through to.
+ * `features/products/types/index.ts` warns that adding a union member touches
+ * 21 named sites of which only 11 are compile-checked; this file is written to
+ * be one of the eleven. Root Cause #61.
+ *
+ * ── Why `capabilities` is `readonly string[]` and not `StoreCapability[]` ──
+ *
+ * Two reasons, and the first is the honest one: that is what is actually
+ * STORED. `storeFirestoreSchema` validates the field as `z.array(z.string())`,
+ * so a capability that is not a union member round-trips today and this helper
+ * must not pretend otherwise. The second is that it keeps this module free of
+ * an import from `features/auth/permissions/constants`, which is the kind of
+ * cross-feature edge `audit-import-cycles` exists to watch.
+ *
+ * A `StoreCapability[]` is assignable to it, so a typed caller loses nothing.
+ */
+import { AuthorizationError } from "../../../errors/index.js";
+import { ALL_LISTING_TYPES } from "./feature-flags.js";
+/**
+ * The capability that unlocks every advanced type at once.
+ *
+ * One flag rather than seven, deliberately: the question a seller is actually
+ * answering is "do I want the complicated listing kinds", and seven checkboxes
+ * invite six of them to be wrong. An admin who needs finer control has the
+ * per-type legacy grants below.
+ */
+export const ADVANCED_LISTING_TYPE_CAPABILITY = "advanced_listing_types";
+export const LISTING_TYPE_TIER = {
+    standard: "basic",
+    spares: "basic",
+    auction: "basic",
+    "pre-order": "advanced",
+    "prize-draw": "advanced",
+    classified: "advanced",
+    "digital-code": "advanced",
+    live: "advanced",
+    art: "advanced",
+    stickers: "advanced",
+};
+/**
+ * Capabilities that grant ONE advanced type on their own, for stores that were
+ * granted it before `advanced_listing_types` existed.
+ *
+ * 🛑 Load-bearing, not politeness. `host_preorders` is a real capability some
+ * live stores already carry; dropping it would silently revoke pre-order
+ * access from a seller who had been using it, and a permission that disappears
+ * on deploy is indistinguishable from a bug.
+ *
+ * `host_auctions` deliberately has NO entry: `auction` is basic now, so the
+ * check is gone. The capability string stays declared in the union so existing
+ * store documents carrying it remain valid — it simply no longer gates
+ * anything.
+ */
+const LEGACY_PER_TYPE_GRANT = {
+    "pre-order": "host_preorders",
+};
+export function isAdvancedListingType(listingType) {
+    return LISTING_TYPE_TIER[listingType] === "advanced";
+}
+/**
+ * Does this capability array carry the advanced-types grant?
+ *
+ * Exists so no call site has to spell the capability string, and so none has
+ * to cast: `capabilities` is `StoreCapability[]` in typed code and
+ * `string[]` as stored, and an `.includes()` across that boundary is where an
+ * `as never` gets reached for — which silences every other check on the
+ * expression, not just the one being worked around.
+ */
+export function hasAdvancedListingTypes(capabilities) {
+    return (capabilities ?? []).includes(ADVANCED_LISTING_TYPE_CAPABILITY);
+}
+/** The types every store can use, with no capability at all. */
+export const BASIC_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "basic");
+export const ADVANCED_LISTING_TYPES = ALL_LISTING_TYPES.filter((t) => LISTING_TYPE_TIER[t] === "advanced");
+/**
+ * May this store create or convert to this listing type?
+ *
+ * Pure — takes the capability array the caller already holds rather than
+ * re-reading the store. Every gate site in the codebase has the store document
+ * in scope already, and a helper that fetched would add one Firestore read per
+ * product write against Rule #6's round-trip budget.
+ */
+export function isListingTypeAllowedFor(listingType, ctx = {}) {
+    if (ctx.isPrivileged)
+        return true;
+    if (!isAdvancedListingType(listingType))
+        return true;
+    const caps = ctx.capabilities ?? [];
+    if (caps.includes(ADVANCED_LISTING_TYPE_CAPABILITY))
+        return true;
+    const legacy = LEGACY_PER_TYPE_GRANT[listingType];
+    return legacy ? caps.includes(legacy) : false;
+}
+/** Every type this store may use, for building a picker or filtering nav. */
+export function listingTypesAllowedFor(ctx = {}) {
+    return ALL_LISTING_TYPES.filter((t) => isListingTypeAllowedFor(t, ctx));
+}
+/**
+ * Throwing form, for the server-side write paths.
+ *
+ * 🛑 `listingType` being absent is ALLOWED and must stay that way. Both product
+ * schemas declare it optional, and a partial update that touches only `status`
+ * or `stockQuantity` carries no type at all — refusing those would break every
+ * stock decrement and status flip in the app. The gate's job is to refuse a
+ * NAMED advanced type, not to require one.
+ *
+ * 🛑 On an UPDATE, the caller must additionally compare against the STORED
+ * type and skip this when they match — see `sellerUpdateProduct`. Every
+ * per-type edit page re-sends its own type literal, so asserting on the
+ * submitted value alone locks a seller out of editing listings they already
+ * own as soon as the capability is withdrawn. The rule is about creating and
+ * converting, not about touching.
+ */
+export function assertListingTypeAllowed(
+/*
+ * `JsonValue | undefined`, not `unknown`. The callers hold
+ * `Record<string, JsonValue>` request bodies, so this is the widest type the
+ * value can genuinely have — and naming it keeps the narrowing below honest,
+ * where `unknown` would let any argument at all through the door and leave
+ * the type-level signal at the call site worth nothing
+ * (`audit-unknown-leakage`).
+ */
+listingType, ctx = {}) {
+    if (typeof listingType !== "string")
+        return;
+    if (!(listingType in LISTING_TYPE_TIER))
+        return;
+    const typed = listingType;
+    if (isListingTypeAllowedFor(typed, ctx))
+        return;
+    throw new AuthorizationError(`Your store is not approved to create ${typed} listings. ` +
+        `Enable advanced listing types in your store settings first.`);
+}

package/dist/cli/index.js

@@ -60,7 +60,6 @@ export const FEATURE_SUBPATH_MAP = {
     loyalty: "@mohasinac/appkit/features/loyalty",
     collections: "@mohasinac/appkit/features/collections",
     preorders: "@mohasinac/appkit/features/pre-orders",
-    "whatsapp-bot": "@mohasinac/appkit/features/whatsapp-bot",
 };
 /**
  * Wraps a Next.js config object. With appkit, only `@mohasinac/appkit` needs to
@@ -112,7 +111,6 @@ const FEATURE_NAMESPACE_MAP = {
     "before-after": "beforeAfter",
     loyalty: "loyalty",
     collections: "collections",
-    "whatsapp-bot": "whatsappBot",
 };
 // Opaque dynamic import — prevents bundlers from statically analysing the path
 const _dynamicImport = new Function("modulePath", "return import(modulePath)");

package/dist/client.d.ts

@@ -213,6 +213,14 @@ export type { ActionRowProps, ActionRowAlign } from "./ui/components/ActionRow";
 export { Textarea } from "./ui/components/Textarea";
 export { GlobalError } from "./next/components/GlobalError";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index";
 export type { AppLayoutShellProps, AppLayoutShellSidebarLink, AppLayoutShellSidebarSection, DashboardNavState, MainNavbarItem, LayoutClientProps } from "./features/layout/index";
 export { ListingLayout } from "./ui/components/ListingLayout";
 export type { ListingLayoutProps, ListingLayoutLabels } from "./ui/components/ListingLayout";
@@ -240,6 +248,7 @@ export { SELLER_ENDPOINTS } from "./constants/index";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index";
+export { REVIEW_ENDPOINTS } from "./constants/index";
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider";
 export type { TourContextValue, TourRole } from "./_internal/client/features/tour/TourProvider";
 export { apiClient, ApiClientError } from "./http/index";
@@ -411,6 +420,8 @@ export { WISHLIST_MAX, HISTORY_MAX, CART_MAX_ITEMS, } from "./constants/limits";
 export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardListing, isPrizeDrawListing, isClassifiedListing, isDigitalCodeListing, isLiveListing, isArtListing, isStickersListing, } from "./features/products/utils/listing-type";
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale";
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags";
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers";
+export type { ListingTypeAccessContext, ListingTypeTier, } from "./_internal/shared/listing-types/tiers";
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, type ActionEvent, type ActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker";
 export { cartRequiresShipping, cartIsDigitalOnly, cartIsChatOnly, } from "./_internal/shared/listing-types/cart-shipping";
 export { ACTIONS, action, act, canPerformAction, actionsForListingType, actionLabel, type ActionDef, type ActionKind, type ActionResource, type ActionTree, type ActionConfirmation, } from "./_internal/shared/actions/action-registry";
@@ -422,6 +433,16 @@ export type { LayoutBreakpoint, DashboardVariant, LayoutRole, SidebarNavItem, Si
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities";
 export type { ListingTypeCapability } from "./_internal/shared/listing-types/capabilities";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry";
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions";
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip";
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer";
+export type { ReviewFormDrawerProps, ReviewFormValues } from "./features/reviews/components/ReviewFormDrawer";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { PurchaseReviewAffordanceProps } from "./features/reviews/components/PurchaseReviewAffordance";
+export type { YourPurchaseStripProps, PurchaseContext } from "./features/orders/components/YourPurchaseStrip";
+export type { OwnerQuickActionsProps, OwnerQuickActionsResource } from "./features/admin/components/OwnerQuickActions";
+export type { StoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements";
 export type { ListingTypePlugin } from "./_internal/shared/listing-types/_registry";
 export type { ListingType } from "./features/products/types/index";
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits";
@@ -468,8 +489,8 @@ export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } fr
 export type { ApiRouteKey, ApiRouteSchema, FirestoreDocument, FirestoreValue, FormFieldValue, FormValues, HttpVerb, JsonArray, JsonObject, JsonObjectWithUndefined, JsonPrimitive, JsonValue, JsonValueWithUndefined, RegisteredApiRouteKey, RegisteredFirestoreCollection, RegisteredFormId, RegisteredRtdbChannel, RegisteredSieveCollection, RegisteredStorageOp, RegisteredWebhookProvider, RegistryEntry, SchemaRegistry, SchemasShape, WebhookSchemaBucket, } from "./schemas/index";
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize";
 export type { NormalizedError, NormalizedApiError, NormalizedAppError, NormalizedFirebaseAuthError, NormalizedFirebaseFirestoreError, NormalizedFirebaseStorageError, NormalizedNativeError, NormalizedNetworkError, NormalizedUnknownThrownValue, NormalizedZodError, } from "./errors/normalize";
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message";
-export type { PaymentProofReviewMessageInput } from "./features/whatsapp-bot/types";
+export { buildPaymentProofReviewMessage } from "./features/orders/utils/payment-proof-message";
+export type { PaymentProofReviewMessageInput } from "./features/orders/utils/payment-proof-message";
 export type { AdminNotificationDocument, ItemRequestDocument, ModerationQueueDocument, ReportDocument, CustomRoleDocument, AnalyticsCardDocument, ListingTemplateDocument, } from "./features/store-extensions/index";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index";
 export type { CommandPaletteGroup } from "./features/shell/index";
@@ -499,7 +520,7 @@ export type { EmiSettings, BuyerEmiQuote } from "./_internal/shared/features/emi
 export type { BuyerFacingFees, BuyerEmiSettings, } from "./_internal/shared/features/site-settings/fees";
 export type { PublicSiteSettings } from "./_internal/shared/features/site-settings/types";
 export { computeCodHandlingFee } from "./_internal/shared/fees/calculator";
-export type { CodHandlingFeeRates, WhatsAppNotifyFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
+export type { CodHandlingFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
 export { FAQPageContent } from "./features/faq/index";
 export type { FAQCategory, FAQCategoryItem, FAQSortOption } from "./features/faq/index";
 export { CategoryInlineSelect } from "./features/seller/components/CategoryInlineSelect";
@@ -522,7 +543,7 @@ export { sublistingCategoryFormSchema } from "./features/store-extensions/schema
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
 export { changeEmailSchema } from "./features/account/schemas/index";
-export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
+export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";
 export { refineAddressPostal, addressFormSchema, addressUpdateSchema, adminAddressCreateSchema, adminAddressUpdateSchema, addressUnbanRequestSchema, } from "./features/addresses/schemas/address-form";
 export type { AddressFormValues, AddressUpdateValues, AdminAddressCreateValues, } from "./features/addresses/schemas/address-form";

package/dist/client.js

@@ -263,6 +263,14 @@ export { ActionRow } from "./ui/components/ActionRow.js";
 export { Textarea } from "./ui/components/Textarea.js";
 export { GlobalError } from "./next/components/GlobalError.js";
 export { AppLayoutShell, LocaleSwitcher, useDashboardNav, BottomActionsProvider, useBottomActions, DashboardNavProvider, LayoutClient } from "./features/layout/index.js";
+/**
+ * A page declares its own inline primary CTA so the floating action control
+ * stays out of its way until that button has been seen and scrolled past. A
+ * page that publishes actions and no anchor gets the control immediately —
+ * which is right for a bulk-selection screen and wrong for anything with a
+ * visible Buy/Checkout button. See `useCtaReveal`.
+ */
+export { ctaAnchorProps, CTA_ANCHOR_ATTR } from "./features/layout/index.js";
 export { ListingLayout } from "./ui/components/ListingLayout.js";
 export { Search } from "./features/search/components/index.js";
 export { ToastProvider, SkipToMain, NavigationLoader } from "./ui/index.js";
@@ -290,6 +298,7 @@ export { SELLER_ENDPOINTS } from "./constants/index.js";
  * BidDetailPageClient — checklist-page-wiring-detail-pages-detail-page-matches-list-modal.
  */
 export { ACCOUNT_ENDPOINTS } from "./constants/index.js";
+export { REVIEW_ENDPOINTS } from "./constants/index.js";
 // P-16 — Tour system (driver.js-backed onboarding walkthrough).
 export { TourProvider, useTour } from "./_internal/client/features/tour/TourProvider.js";
 export { apiClient, ApiClientError } from "./http/index.js";
@@ -424,6 +433,10 @@ export { normalizeListingType, isAuctionListing, isPreOrderListing, isStandardLi
 export { isFinalSale, acceptsChangeOfMindReturns, } from "./features/products/constants/final-sale.js";
 // SB-UNI-X4 2026-05-13 — per-type feature-flag helpers (client-safe).
 export { isListingTypeEnabled, isCategoryTypeEnabled, enabledListingTypes, enabledCategoryTypes, ALL_LISTING_TYPES, isListingType, } from "./_internal/shared/listing-types/feature-flags.js";
+// Basic/advanced listing-type split. Client-safe: the nav filter and any
+// seller-facing picker need the same rule the server enforces, and deriving it
+// twice is how the ten hand-written copies of the union happened.
+export { ADVANCED_LISTING_TYPE_CAPABILITY, ADVANCED_LISTING_TYPES, BASIC_LISTING_TYPES, LISTING_TYPE_TIER, hasAdvancedListingTypes, isAdvancedListingType, isListingTypeAllowedFor, listingTypesAllowedFor, } from "./_internal/shared/listing-types/tiers.js";
 // SB-UNI-X5 2026-05-13 — action telemetry sink (client-safe; defaults to
 // a no-op + console.debug in dev).
 export { actionTracker, setActionTrackerSink, resetActionTrackerSink, } from "./_internal/shared/listing-types/action-tracker.js";
@@ -440,6 +453,16 @@ export { DashboardLayoutClient, RoleGuard } from "./_internal/client/features/la
 // Listing-type capability registry — SB-UNI X1.
 export { LISTING_TYPE_CAPABILITIES, capabilityFor, canAddToCart, canBid, supportsShipping, requiresVendorVerified, requiresJurisdictionCheck, hasInstantFulfillment, assertNever, } from "./_internal/shared/listing-types/capabilities.js";
 export { LISTING_TYPE_REGISTRY, pluginFor, detectListingTypeFromSlug } from "./_internal/shared/listing-types/_registry.js";
+// Which listing types the signed-in seller's own store may create. Needs a
+// fetch because `capabilities` is a PRIVATE store field — see the hook.
+export { useStoreListingEntitlements } from "./features/seller/hooks/useStoreListingEntitlements.js";
+// Pencil / clone / bin for whoever owns the record, on a PUBLIC surface.
+export { OwnerQuickActions } from "./features/admin/components/OwnerQuickActions.js";
+// "You ordered this - track it" / "your review - edit it", on a product page.
+export { YourPurchaseStrip } from "./features/orders/components/YourPurchaseStrip.js";
+// The first review form this app has had - see the component's header.
+export { ReviewFormDrawer, reviewFormSchema } from "./features/reviews/components/ReviewFormDrawer.js";
+export { PurchaseReviewAffordance } from "./features/reviews/components/PurchaseReviewAffordance.js";
 // Media upload limits — shared by client uploaders + server sign/finalize routes.
 export { MEGABYTE, MAX_IMAGE_BYTES, MAX_PDF_BYTES, MAX_VIDEO_BYTES, MAX_LABEL, MAX_BYTES, ALLOWED_IMAGE_MIMES, IMAGE_ACCEPT_ATTR, ALLOWED_VIDEO_MIMES, ALLOWED_DOC_MIMES, ALLOWED_MIMES, ALLOWED_TYPES_LABEL, MIME_TO_EXT, PDF_MAGIC, VIDEO_CONVERSION_HINTS, classifyMime, isAllowedMime, maxBytesFor, getConversionHint, PRODUCT_MAX_IMAGES, PRODUCT_MAX_VIDEOS, PRODUCT_IMAGE_INDEX_MAX, } from "./_internal/shared/media/limits.js";
 export { ScamAwarenessModal } from "./features/scams/components/ScamAwarenessModal.js";
@@ -476,10 +499,18 @@ export { SellerLiveView } from "./features/seller/components/SellerLiveView.js";
 export { SCHEMAS, lookupApiSchema, lookupFormSchema, lookupFirestoreSchema, } from "./schemas/index.js";
 // ── W3 catch-clause normalizer ──────────────────────────────────────────────
 export { normalizeError, getErrorMessage, isApiNormalized, isAppNormalized, isFirebaseAuthNormalized, isFirebaseFirestoreNormalized, isFirebaseStorageNormalized, isNativeNormalized, isNetworkNormalized, isUnknownNormalized, isZodNormalized, } from "./errors/normalize.js";
-// [CLIENT-SAFE] Pure wa.me share-link message builder — imported directly
-// from its isolated file (not ./whatsapp-bot/server) so this barrel's graph
-// never touches the sibling crypto-importing helpers.
-export { buildPaymentProofReviewMessage } from "./features/whatsapp-bot/helpers/payment-proof-message.js";
+/*
+ * [CLIENT-SAFE] Pure wa.me share-link message builder — no crypto, no network.
+ *
+ * It used to live beside the WhatsApp Cloud API senders, isolated into its own
+ * file precisely so this barrel's import graph never reached their top-level
+ * `crypto` import (Root Cause #24). The Cloud API integration was removed
+ * 2026-10-20 and this moved to `features/orders/utils/`, which is its real
+ * domain: it builds the body of the buyer's "Share for review" link on the
+ * order payment page, and a wa.me deep link needs no token or registered
+ * number.
+ */
+export { buildPaymentProofReviewMessage } from "./features/orders/utils/payment-proof-message.js";
 export { CommandPalette, useCommandPaletteHotkey } from "./features/shell/index.js";
 export { AdminBlogEditorView, AdminBundleEditorView, AdminCarouselEditorView, AdminCategoryEditorView, AdminCouponEditorView, AdminFaqEditorView, AdminFeatureEditorView, AdminOrderEditorView, AdminPayoutMarkPaidModal, AdminAuditLogView, ViewAuditLogEntryModal, AdminProductEditorView, AdminScammerEditorView, 
 // Client-exported for the W22 /admin/team/{new,[id]/edit} pages. It was
@@ -531,7 +562,7 @@ export { sublistingCategoryFormSchema } from "./features/store-extensions/schema
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms.js";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms.js";
 export { changeEmailSchema } from "./features/account/schemas/index.js";
-export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
+export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form.js";
 // The ONE address shape and the ONE postal rule (W5 / D19). Eleven field
 // shapes and fifteen disagreeing postal rules collapsed to these.

package/dist/constants/api-endpoints.d.ts

@@ -57,6 +57,11 @@ export declare const ACCOUNT_ENDPOINTS: {
     readonly HISTORY_ITEM: (productId: string) => string;
     readonly HISTORY_MERGE: "/api/user/history/merge";
     readonly REVIEWS: "/api/user/reviews";
+    /**
+     * "Have I bought this, and did I review it?" for one product — backs the
+     * purchase strip on a product page. Per-viewer, never cached.
+     */
+    readonly PURCHASE_CONTEXT: (productId: string) => string;
     readonly BIDS: "/api/user/bids";
     readonly BID_BY_ID: (id: string) => string;
     readonly EXPORT: "/api/user/export";
@@ -452,6 +457,8 @@ export declare const PROMOTION_ENDPOINTS: {
 export declare const REVIEW_ENDPOINTS: {
     readonly LIST: "/api/reviews";
     readonly FEATURED: "/api/reviews?featured=true";
+    /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+    readonly BY_ID: (id: string) => string;
 };
 export declare const SEARCH_ENDPOINTS: {
     readonly SUGGESTIONS: "/api/search/suggestions";
@@ -562,11 +569,6 @@ export declare const SCAMMER_ENDPOINTS: {
 export declare const BEFORE_AFTER_ENDPOINTS: {
     readonly LIST: "/api/before-after";
 };
-export declare const WHATSAPP_SELLER_ENDPOINTS: {
-    readonly SETTINGS: "/api/store/whatsapp-settings";
-    readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
-    readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
-};
 export declare const API_ENDPOINTS: {
     readonly CONFIG: {};
     readonly LOGS: {
@@ -619,6 +621,11 @@ export declare const API_ENDPOINTS: {
         readonly HISTORY_ITEM: (productId: string) => string;
         readonly HISTORY_MERGE: "/api/user/history/merge";
         readonly REVIEWS: "/api/user/reviews";
+        /**
+         * "Have I bought this, and did I review it?" for one product — backs the
+         * purchase strip on a product page. Per-viewer, never cached.
+         */
+        readonly PURCHASE_CONTEXT: (productId: string) => string;
         readonly BIDS: "/api/user/bids";
         readonly BID_BY_ID: (id: string) => string;
         readonly EXPORT: "/api/user/export";
@@ -958,6 +965,8 @@ export declare const API_ENDPOINTS: {
     readonly REVIEWS: {
         readonly LIST: "/api/reviews";
         readonly FEATURED: "/api/reviews?featured=true";
+        /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+        readonly BY_ID: (id: string) => string;
     };
     readonly SEARCH: {
         readonly SUGGESTIONS: "/api/search/suggestions";
@@ -1055,11 +1064,6 @@ export declare const API_ENDPOINTS: {
         readonly PRODUCTS: (sellerId: string) => string;
         readonly REVIEWS: (userId: string) => string;
     };
-    readonly WHATSAPP_SELLER: {
-        readonly SETTINGS: "/api/store/whatsapp-settings";
-        readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
-        readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
-    };
     readonly SUPPORT: {
         readonly TICKETS: "/api/support/tickets";
         readonly TICKET_BY_ID: (id: string) => string;
@@ -1146,6 +1150,11 @@ export declare const API_ROUTES: {
         readonly HISTORY_ITEM: (productId: string) => string;
         readonly HISTORY_MERGE: "/api/user/history/merge";
         readonly REVIEWS: "/api/user/reviews";
+        /**
+         * "Have I bought this, and did I review it?" for one product — backs the
+         * purchase strip on a product page. Per-viewer, never cached.
+         */
+        readonly PURCHASE_CONTEXT: (productId: string) => string;
         readonly BIDS: "/api/user/bids";
         readonly BID_BY_ID: (id: string) => string;
         readonly EXPORT: "/api/user/export";
@@ -1485,6 +1494,8 @@ export declare const API_ROUTES: {
     readonly REVIEWS: {
         readonly LIST: "/api/reviews";
         readonly FEATURED: "/api/reviews?featured=true";
+        /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+        readonly BY_ID: (id: string) => string;
     };
     readonly SEARCH: {
         readonly SUGGESTIONS: "/api/search/suggestions";
@@ -1582,11 +1593,6 @@ export declare const API_ROUTES: {
         readonly PRODUCTS: (sellerId: string) => string;
         readonly REVIEWS: (userId: string) => string;
     };
-    readonly WHATSAPP_SELLER: {
-        readonly SETTINGS: "/api/store/whatsapp-settings";
-        readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
-        readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
-    };
     readonly SUPPORT: {
         readonly TICKETS: "/api/support/tickets";
         readonly TICKET_BY_ID: (id: string) => string;

package/dist/constants/api-endpoints.js

@@ -79,6 +79,11 @@ export const ACCOUNT_ENDPOINTS = {
     HISTORY_ITEM: (productId) => `/api/user/history/${encodeURIComponent(productId)}`,
     HISTORY_MERGE: "/api/user/history/merge",
     REVIEWS: "/api/user/reviews",
+    /**
+     * "Have I bought this, and did I review it?" for one product — backs the
+     * purchase strip on a product page. Per-viewer, never cached.
+     */
+    PURCHASE_CONTEXT: (productId) => `/api/user/purchases/${encodeURIComponent(productId)}`,
     BIDS: "/api/user/bids",
     BID_BY_ID: (id) => `/api/user/bids/${id}`,
     EXPORT: "/api/user/export",
@@ -592,6 +597,8 @@ export const PROMOTION_ENDPOINTS = {
 export const REVIEW_ENDPOINTS = {
     LIST: "/api/reviews",
     FEATURED: "/api/reviews?featured=true",
+    /** GET / PATCH / DELETE one review. The PATCH is the buyer's own edit. */
+    BY_ID: (id) => `/api/reviews/${encodeURIComponent(id)}`,
 };
 // ---------------------------------------------------------------------------
 // Search
@@ -739,13 +746,6 @@ export const BEFORE_AFTER_ENDPOINTS = {
     LIST: "/api/before-after",
 };
 // ---------------------------------------------------------------------------
-// WhatsApp Business (store-level settings + catalog sync)
-// ---------------------------------------------------------------------------
-export const WHATSAPP_SELLER_ENDPOINTS = {
-    SETTINGS: "/api/store/whatsapp-settings",
-    CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync",
-    CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import",
-};
 // ---------------------------------------------------------------------------
 // Aggregate namespace export
 // ---------------------------------------------------------------------------
@@ -791,7 +791,6 @@ export const API_ENDPOINTS = {
     SUBLISTING_CATEGORIES: SUBLISTING_CATEGORY_ENDPOINTS,
     WISHLIST: WISHLIST_ENDPOINTS,
     PROFILE_STATS: PROFILE_STATS_ENDPOINTS,
-    WHATSAPP_SELLER: WHATSAPP_SELLER_ENDPOINTS,
     SUPPORT: SUPPORT_ENDPOINTS,
     SCAMMERS: SCAMMER_ENDPOINTS,
     REPORTS: REPORT_ENDPOINTS,

package/dist/constants/field-names.d.ts

@@ -892,6 +892,7 @@ export declare const SITE_SETTINGS_FIELDS: {
     };
     readonly PAYMENT: "payment";
     readonly PAYMENT_FIELDS: {
+        readonly RAZORPAY_ENABLED: "payment.razorpayEnabled";
         readonly PHONEPE_ENABLED: "payment.phonepeEnabled";
         readonly UPI_MANUAL_ENABLED: "payment.upiManualEnabled";
         readonly COD_ENABLED: "payment.codEnabled";

package/dist/constants/field-names.js

@@ -1077,6 +1077,7 @@ export const SITE_SETTINGS_FIELDS = {
     },
     PAYMENT: "payment",
     PAYMENT_FIELDS: {
+        RAZORPAY_ENABLED: "payment.razorpayEnabled",
         PHONEPE_ENABLED: "payment.phonepeEnabled",
         UPI_MANUAL_ENABLED: "payment.upiManualEnabled",
         COD_ENABLED: "payment.codEnabled",

package/dist/constants/notification-types.d.ts

@@ -12,7 +12,7 @@
  *    **18 of the 27 real types** and was offered two that never appear.
  *  · `AdminSiteSettingsView`'s per-channel allow-list, so an admin literally
  *    **could not allow-list `offer_received` or `payment_review`** for email
- *    or WhatsApp — the toggle did not exist.
+ *    — the toggle did not exist.
  *
  * Everything here now derives from `NOTIFICATION_TYPE_VALUES`, so a new
  * notification type is one edit and cannot be missing from either surface.

package/dist/constants/notification-types.js

@@ -12,7 +12,7 @@
  *    **18 of the 27 real types** and was offered two that never appear.
  *  · `AdminSiteSettingsView`'s per-channel allow-list, so an admin literally
  *    **could not allow-list `offer_received` or `payment_review`** for email
- *    or WhatsApp — the toggle did not exist.
+ *    — the toggle did not exist.
  *
  * Everything here now derives from `NOTIFICATION_TYPE_VALUES`, so a new
  * notification type is one edit and cannot be missing from either surface.

package/dist/core/integration-keys.d.ts

@@ -6,12 +6,12 @@ export interface ResolvedKeys {
     phonepeEnvironment: string;
     phonepeWebhookUsername: string;
     phonepeWebhookPassword: string;
+    /** Publishable key (`rzp_test_…` / `rzp_live_…`) — the one value here that is safe to hand the browser. */
+    razorpayKeyId: string;
+    razorpayKeySecret: string;
+    /** Webhook signing secret. Optional in practice: without it `verifyWebhook()` fails closed and the buyer-present /verify path still works. */
+    razorpayWebhookSecret: string;
     resendApiKey: string;
-    whatsappApiKey: string;
-    whatsappPhoneNumberId: string;
-    whatsappCloudApiToken: string;
-    /** Comma-separated digits-only numbers, e.g. "919876543210,918765432109" */
-    whatsappAdminNotifyNumbers: string;
 }
 /** Drops the in-process cache. Call this after admin saves new credentials. */
 export declare function invalidateIntegrationKeysCache(): void;

package/dist/core/integration-keys.js

@@ -28,14 +28,28 @@ const EMPTY_KEYS = {
     phonepeEnvironment: "",
     phonepeWebhookUsername: "",
     phonepeWebhookPassword: "",
+    razorpayKeyId: "",
+    razorpayKeySecret: "",
+    razorpayWebhookSecret: "",
     resendApiKey: "",
-    whatsappApiKey: "",
-    whatsappPhoneNumberId: "",
-    whatsappCloudApiToken: "",
-    whatsappAdminNotifyNumbers: "",
 };
 let _cache = null;
 const CACHE_TTL_MS = 60000; // 1 minute
+/**
+ * Treats a seeded `*_PLACEHOLDER` value as ABSENT so the env fallback wins.
+ *
+ * Most seeded credentials are the literal string `"…_PLACEHOLDER"`, which is
+ * truthy — so a plain `db.x || process.env.X` resolves to the placeholder and
+ * the real env var is never read. For a gateway that is worse than an empty
+ * value: the placeholder reaches Razorpay's API and produces an authentication
+ * failure mid-checkout rather than cleanly falling back. `resolveEmailProvider`
+ * is the reference for this test; see CLAUDE.md's siteSettings row.
+ */
+function usable(value) {
+    if (!value || value.includes("PLACEHOLDER"))
+        return "";
+    return value;
+}
 /** Drops the in-process cache. Call this after admin saves new credentials. */
 export function invalidateIntegrationKeysCache() {
     _cache = null;
@@ -55,6 +69,9 @@ export async function resolveKeys() {
         void normalizeError(_err); // Firestore unavailable — fall through to env-based defaults for backward compatibility
     }
     const value = {
+        razorpayKeyId: usable(db.razorpayKeyId) || process.env.RAZORPAY_KEY_ID || "",
+        razorpayKeySecret: usable(db.razorpayKeySecret) || process.env.RAZORPAY_KEY_SECRET || "",
+        razorpayWebhookSecret: usable(db.razorpayWebhookSecret) || process.env.RAZORPAY_WEBHOOK_SECRET || "",
         phonepeClientId: db.phonepeClientId || process.env.PHONEPE_CLIENT_ID || "",
         phonepeClientSecret: db.phonepeClientSecret || process.env.PHONEPE_CLIENT_SECRET || "",
         phonepeClientVersion: db.phonepeClientVersion || process.env.PHONEPE_CLIENT_VERSION || "1",
@@ -62,12 +79,6 @@ export async function resolveKeys() {
         phonepeWebhookUsername: db.phonepeWebhookUsername || process.env.PHONEPE_WEBHOOK_USERNAME || "",
         phonepeWebhookPassword: db.phonepeWebhookPassword || process.env.PHONEPE_WEBHOOK_PASSWORD || "",
         resendApiKey: db.resendApiKey || process.env.RESEND_API_KEY || "",
-        whatsappApiKey: db.whatsappApiKey || process.env.WHATSAPP_API_KEY || "",
-        whatsappPhoneNumberId: db.whatsappPhoneNumberId || process.env.WHATSAPP_PHONE_NUMBER_ID || "",
-        whatsappCloudApiToken: db.whatsappCloudApiToken || process.env.WHATSAPP_CLOUD_API_TOKEN || "",
-        whatsappAdminNotifyNumbers: db.whatsappAdminNotifyNumbers ||
-            process.env.WHATSAPP_ADMIN_NOTIFY_NUMBERS ||
-            "",
     };
     _cache = { value, expiresAt: Date.now() + CACHE_TTL_MS };
     return value;

package/dist/features/about/components/FeesView.js

@@ -65,12 +65,6 @@ export async function FeesView({} = {}) {
             who: t("paidByBuyer"),
             note: t("codHandlingFeeNote"),
         },
-        {
-            category: t("whatsappNotifyFeeTitle"),
-            rate: t("whatsappNotifyFeeRate"),
-            who: t("paidByBuyer"),
-            note: t("whatsappNotifyFeeNote"),
-        },
         {
             category: t("giftWrapFeeTitle"),
             rate: t("giftWrapFeeRate"),

package/dist/features/about/components/GuidesHubView.js

@@ -49,8 +49,21 @@ export async function GuidesHubView({} = {}) {
             blurb: t("groupSellingBlurb"),
             items: [
                 { href: String(ROUTES.PUBLIC.SELLER_GUIDE), label: t("sellerGuide"), text: t("sellerGuideText") },
-                { href: String(ROUTES.PUBLIC.SELLER_GUIDE_BUNDLES), label: t("bundleGuide"), text: t("bundleGuideText") },
-                { href: String(ROUTES.PUBLIC.SELLER_GUIDE_PRIZE_DRAWS), label: t("prizeDrawGuide"), text: t("prizeDrawGuideText") },
+                /*
+                 * 🛑 HIDDEN BLOCK — the bundle and prize-draw guides, withdrawn
+                 * 2026-10-20 alongside the footer entries for those listing types
+                 * (`HIDDEN_FOOTER_LINK_HREFS`, src/constants/navigation.tsx). A hub
+                 * card is a promise that the thing it describes is open for business;
+                 * teaching a seller to run a prize draw they cannot currently publish
+                 * is worse than saying nothing.
+                 *
+                 * The pages, the routes and the `guidesHub.bundleGuide*` /
+                 * `guidesHub.prizeDrawGuide*` message keys are all left in place, so
+                 * restoring this is uncommenting two lines.
+                 *
+                 * { href: String(ROUTES.PUBLIC.SELLER_GUIDE_BUNDLES), label: t("bundleGuide"), text: t("bundleGuideText") },
+                 * { href: String(ROUTES.PUBLIC.SELLER_GUIDE_PRIZE_DRAWS), label: t("prizeDrawGuide"), text: t("prizeDrawGuideText") },
+                 */
             ],
         },
     ];