@mohasinac/appkit 4.54.1 → 4.55.0

package/dist/.build-stamp.json

@@ -1,8 +1,8 @@
 {
   "stampVersion": 1,
-  "version": "4.54.1",
-  "head": "3fe89608007f66f86562b403eb02772873cdffe2",
+  "version": "4.55.0",
+  "head": "e683e7b08996d66d9b6bef65cf4712b8e63454ea",
   "branch": "main",
   "dirty": false,
-  "builtAt": "2026-10-20T06:16:45.850Z"
+  "builtAt": "2026-10-20T15:42:52.181Z"
 }

package/dist/_internal/server/features/checkout/actions.js

@@ -15,6 +15,8 @@ import { serverLogger } from "../../../../monitoring/index.js";
 import { unitOfWork, adminNotificationsRepository, siteSettingsRepository, userRepository, storeRepository, couponsRepository, claimedCouponsRepository, addressesRepository, productRepository, } from "../../../../repositories/index.js";
 import { isIntraStateSupply } from "../../../shared/fees/calculator.js";
 import { computePreOrderDepositAmount, lineTotalFor, sumGroupGst, unitPriceFor, } from "../../../shared/checkout/order-math.js";
+import { COD_MAX_ORDER_VALUE_FALLBACK } from "../../../../features/admin/schemas/firestore.js";
+import { CHECKOUT_ERROR_CODES } from "../../../../errors/error-codes.js";
 import { failedCheckoutRepository } from "../../../../features/checkout/repository/failed-checkout.repository.js";
 import { sendOrderConfirmationEmail } from "../../../../features/contact/server.js";
 import { splitCartIntoOrderGroups } from "../../../../features/orders/index.js";
@@ -870,6 +872,39 @@ export async function createCheckoutOrderAction(input) {
             }
         }
     }
+    /*
+     * COD value cap — the SERVER half of the gate.
+     *
+     * 🛑 The checkout UI already disables the COD option above the cap and says
+     * why. That is an affordance, not enforcement: this action is reachable by
+     * POST with `paymentMethod: "cod"` regardless of what the page rendered, and
+     * the whole point of the cap is the cash exposure on a refusal at the door.
+     * A limit enforced only in the browser is not a limit (Root Cause #46 — a
+     * field the schema accepts but the handler never verifies).
+     *
+     * Measured against the WHOLE checkout batch for the same reason the OTP gate
+     * above is: per-seller orders are a split of one cart, so capping each one
+     * would let a buyer clear a ₹3,000 limit with a ₹9,000 cart across three
+     * sellers. Same `cartItems` reduction, deliberately not shared with the OTP
+     * block — that one skips COD entirely, so the two can never be one test.
+     *
+     * `>` not `>=`: the setting is a maximum, so a cart exactly at the cap is
+     * allowed. The client comparison is spelled the same way.
+     */
+    if (!adminBypass && paymentMethod === "cod") {
+        const codMax = siteSettings?.payment?.codMaxOrderValue;
+        const effectiveCodMax = typeof codMax === "number" ? codMax : COD_MAX_ORDER_VALUE_FALLBACK;
+        const cartTotalForCodCheck = cartItems.reduce((sum, item) => sum + item.price * item.quantity, 0);
+        if (cartTotalForCodCheck > effectiveCodMax) {
+            failedCheckoutRepository
+                .logCheckout(uid, "cod_over_limit", "Cart exceeds the COD value cap", {
+                addressId: addressId ?? "",
+                paymentMethod,
+            })
+                .catch(() => undefined);
+            throw new ApiError(400, CHECKOUT_ERROR_CODES.COD_LIMIT_EXCEEDED);
+        }
+    }
     const isDigitalCart = cartIsDigitalOnly(cartItems);
     let shippingAddress;
     let resolvedAddress = null;
@@ -1303,6 +1338,31 @@ export async function previewCheckoutPricing(input) {
     // One capped commission for the whole checkout, on every payment method —
     // deliberately not per store, so it is not added to the per-store rows above.
     const { platformFee, gstOnFee } = computeCheckoutFees(cartSubtotal, commissions);
+    /*
+     * 🛑 `gstAmount` is NOT a term, and leaving it in was a shown-vs-charged
+     * drift waiting on a settings flag.
+     *
+     * The per-store `total` above already excludes it, and its own field comment
+     * says so in capitals ("Deliberately NOT added to `total` below"). The
+     * CART-level total here added it anyway, so the two disagreed with each
+     * other and the cart-level one disagreed with `createOrderForGroup`, whose
+     * `orderTotal` excludes product GST for the reason set out there: prices are
+     * tax-INCLUSIVE, so the tax is already inside `cartSubtotal` and adding it
+     * charges it twice.
+     *
+     * It has never fired, which is the only reason it survived: `gstAmount` is
+     * computed solely when `siteSettings.gst.enabled` is true, and that is
+     * deliberately false until a real GSTIN is registered (see the seed's note —
+     * `/api/admin/site` refuses to enable it without a valid check digit). So on
+     * the day someone enters a registration, every cart would have quietly
+     * quoted ~5% more than the order it previews. Measured on the live ₹20,000
+     * listing (gstRate 5, HSN 95030020): the preview would have read ₹952.38
+     * over the amount charged.
+     *
+     * `gstOnFee` IS a term, and the asymmetry is the same one `createOrderForGroup`
+     * documents: that is GST on OUR commission, billed on top of the fee, not
+     * tax on the goods.
+     */
     const total = Math.max(0, cartSubtotal - couponDiscount) +
         shippingFee +
         codHandlingFee +
@@ -1310,8 +1370,7 @@ export async function previewCheckoutPricing(input) {
         shipmentProtectionFeeTotal +
         saleProtectionFeeTotal +
         platformFee +
-        gstOnFee +
-        gstAmount;
+        gstOnFee;
     return {
         subtotal: cartSubtotal,
         shippingFee,

package/dist/_internal/shared/features/checkout/config.d.ts

@@ -4,7 +4,7 @@ export declare const CHECKOUT_DEFAULT_COMMISSIONS: {
     readonly minimumTransactionFee: 0;
     readonly platformFeeMax: 10;
     readonly codDepositPercent: 10;
-    readonly codHandlingFeeMin: 200;
+    readonly codHandlingFeeCap: 200;
     readonly codHandlingFeePercent: 10;
     readonly giftWrapFeeEnabled: true;
     readonly giftWrapFee: 49;

package/dist/_internal/shared/features/checkout/config.js

@@ -8,7 +8,7 @@ export const CHECKOUT_DEFAULT_COMMISSIONS = {
     minimumTransactionFee: 0,
     platformFeeMax: 10,
     codDepositPercent: 10,
-    codHandlingFeeMin: 200,
+    codHandlingFeeCap: 200,
     codHandlingFeePercent: 10,
     // Mirrors the SiteSettingsDocument defaults, which enable every add-on.
     // Consequence of the mirror: if the settings read fails, an add-on already

package/dist/_internal/shared/features/site-settings/fees.d.ts

@@ -35,7 +35,7 @@ export interface BuyerFacingFees {
     saleProtectionFeeEnabled?: boolean;
     saleProtectionFeePercent?: number;
     saleProtectionFeeMin?: number;
-    codHandlingFeeMin?: number;
+    codHandlingFeeCap?: number;
     codHandlingFeePercent?: number;
     codDepositPercent?: number;
 }

package/dist/_internal/shared/features/site-settings/fees.js

@@ -21,7 +21,7 @@ export function toBuyerFacingFees(commissions) {
         saleProtectionFeeEnabled: commissions.saleProtectionFeeEnabled,
         saleProtectionFeePercent: commissions.saleProtectionFeePercent,
         saleProtectionFeeMin: commissions.saleProtectionFeeMin,
-        codHandlingFeeMin: commissions.codHandlingFeeMin,
+        codHandlingFeeCap: commissions.codHandlingFeeCap,
         codHandlingFeePercent: commissions.codHandlingFeePercent,
         codDepositPercent: commissions.codDepositPercent,
     };

package/dist/_internal/shared/fees/calculator.d.ts

@@ -75,12 +75,44 @@ export interface PayoutDeduction {
 }
 export declare function computePayoutDeduction(grossAmount: number, commissions: FeeCommissionRates): PayoutDeduction;
 export interface CodHandlingFeeRates {
-    /** Optional so existing `siteSettings` documents saved before this field existed don't produce NaN — falls back to ₹200. */
-    codHandlingFeeMin?: number;
+    /**
+     * Rupee CEILING on the COD handling fee. Optional so a `siteSettings`
+     * document saved before this field existed does not produce NaN — falls
+     * back to ₹200.
+     */ codHandlingFeeCap?: number;
     /** Optional for the same reason — falls back to 10%. */
     codHandlingFeePercent?: number;
 }
-/** COD handling fee charged to the buyer: max(fixed floor, subtotal × percent). */
+/**
+ * COD handling fee charged to the buyer: **min(subtotal × percent, cap)**.
+ *
+ * 🛑 The ₹200 is a CEILING, and it used to be applied as a FLOOR
+ * (`Math.max(min, percentFee)`) by a field called `codHandlingFeeMin`. The
+ * percentage then ran away on anything expensive: a ₹20,000 listing was
+ * charged **₹2,000** of "handling", which is not what handling a parcel costs
+ * — it is a tenth of the order. Measured on the live settings document
+ * (`codHandlingFeeMin: 200`, `codHandlingFeePercent: 10`) in the cart, and the
+ * figure was real: the buyer was quoted ₹22,011.80 on a ₹20,000 item.
+ *
+ * 🛑 What the fee IS, which is what makes the cap the correct shape: it is a
+ * TOKEN covering our cost of having shipped a parcel for free when the buyer
+ * does not pay on delivery. That cost is a courier's return leg — it scales
+ * with the parcel, not with the price of what is inside it. A ₹20,000 top and
+ * a ₹2,000 one cost the same to send back, so a fee that is 10× larger on the
+ * first is not recovering a cost, it is a surcharge on being expensive.
+ *
+ * The percentage survives because it is right at the small end — ₹150 of
+ * handling on a ₹300 order would exceed half the order — so the rule is "10%,
+ * but never more than ₹200". Below ₹2,000 the percentage binds; above it the
+ * cap does.
+ *
+ * The field was RENAMED rather than reinterpreted. A `…Min` read as a maximum
+ * is Root Cause #51's shape — a label describing the reverse of what the code
+ * does — and the next person to read the settings document would have had no
+ * way to tell. A live document carrying the old key now falls through to
+ * `DEFAULT_COD_HANDLING_FEE_CAP`, which is the same ₹200, so the rename
+ * changes no number on its own.
+ */
 export declare function computeCodHandlingFee(subtotal: number, rates: CodHandlingFeeRates): number;
 export interface GiftWrapFeeRates {
     /** Admin master toggle — the addon isn't charged (even if the buyer selected it) unless this is true. */

package/dist/_internal/shared/fees/calculator.js

@@ -73,14 +73,44 @@ export function computePayoutDeduction(grossAmount, commissions) {
     const netAmount = Math.max(0, roundRupees(grossAmount - totalDeduction));
     return { platformFee, gatewayFee, gstOnFee, totalDeduction, netAmount };
 }
-const DEFAULT_COD_HANDLING_FEE_MIN = 200;
+/** Buyer-facing COD handling ceiling, in decimal rupees. */
+const DEFAULT_COD_HANDLING_FEE_CAP = 200;
 const DEFAULT_COD_HANDLING_FEE_PERCENT = 10;
-/** COD handling fee charged to the buyer: max(fixed floor, subtotal × percent). */
+/**
+ * COD handling fee charged to the buyer: **min(subtotal × percent, cap)**.
+ *
+ * 🛑 The ₹200 is a CEILING, and it used to be applied as a FLOOR
+ * (`Math.max(min, percentFee)`) by a field called `codHandlingFeeMin`. The
+ * percentage then ran away on anything expensive: a ₹20,000 listing was
+ * charged **₹2,000** of "handling", which is not what handling a parcel costs
+ * — it is a tenth of the order. Measured on the live settings document
+ * (`codHandlingFeeMin: 200`, `codHandlingFeePercent: 10`) in the cart, and the
+ * figure was real: the buyer was quoted ₹22,011.80 on a ₹20,000 item.
+ *
+ * 🛑 What the fee IS, which is what makes the cap the correct shape: it is a
+ * TOKEN covering our cost of having shipped a parcel for free when the buyer
+ * does not pay on delivery. That cost is a courier's return leg — it scales
+ * with the parcel, not with the price of what is inside it. A ₹20,000 top and
+ * a ₹2,000 one cost the same to send back, so a fee that is 10× larger on the
+ * first is not recovering a cost, it is a surcharge on being expensive.
+ *
+ * The percentage survives because it is right at the small end — ₹150 of
+ * handling on a ₹300 order would exceed half the order — so the rule is "10%,
+ * but never more than ₹200". Below ₹2,000 the percentage binds; above it the
+ * cap does.
+ *
+ * The field was RENAMED rather than reinterpreted. A `…Min` read as a maximum
+ * is Root Cause #51's shape — a label describing the reverse of what the code
+ * does — and the next person to read the settings document would have had no
+ * way to tell. A live document carrying the old key now falls through to
+ * `DEFAULT_COD_HANDLING_FEE_CAP`, which is the same ₹200, so the rename
+ * changes no number on its own.
+ */
 export function computeCodHandlingFee(subtotal, rates) {
-    const min = rates.codHandlingFeeMin ?? DEFAULT_COD_HANDLING_FEE_MIN;
+    const cap = rates.codHandlingFeeCap ?? DEFAULT_COD_HANDLING_FEE_CAP;
     const percent = rates.codHandlingFeePercent ?? DEFAULT_COD_HANDLING_FEE_PERCENT;
     const percentFee = roundRupees(subtotal * (percent / 100));
-    return Math.max(min, percentFee);
+    return Math.min(percentFee, cap);
 }
 const DEFAULT_GIFT_WRAP_FEE = 49;
 /** Flat gift-wrap addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */

package/dist/errors/error-codes.d.ts

@@ -22,6 +22,21 @@ export declare const BID_ERROR_CODES: {
     /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
     readonly AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT";
 };
+/**
+ * Checkout refusals that are BUSINESS rules rather than malformed requests.
+ *
+ * 🛑 Registered here, not left as a bare string at the throw site. The code is
+ * what `toUserMessage` resolves through `errors.codes.*`, and an unregistered
+ * one terminates at `errors.codes.UNKNOWN` — so a buyer refused for a reason
+ * the site can explain in one sentence would instead read "Something went
+ * wrong. Please try again." and retry the same cart forever.
+ * `audit-error-display-i18n` holds both ends: an enum value with no
+ * `messages/en.json` key fails, and so does a key with no enum value.
+ */
+export declare const CHECKOUT_ERROR_CODES: {
+    /** Cart total exceeds `siteSettings.payment.codMaxOrderValue`. */
+    readonly COD_LIMIT_EXCEEDED: "COD_LIMIT_EXCEEDED";
+};
 export declare const OFFER_ERROR_CODES: {
     readonly DISABLED: "OFFER_DISABLED";
     readonly PRICE_TOO_LOW: "OFFER_PRICE_TOO_LOW";

package/dist/errors/error-codes.js

@@ -22,6 +22,21 @@ export const BID_ERROR_CODES = {
     /** The auction's clock ran out mid-checkout, so it settled to a real bidder. */
     AUCTION_ENDED_BEFORE_CHECKOUT: "BID_AUCTION_ENDED_BEFORE_CHECKOUT",
 };
+/**
+ * Checkout refusals that are BUSINESS rules rather than malformed requests.
+ *
+ * 🛑 Registered here, not left as a bare string at the throw site. The code is
+ * what `toUserMessage` resolves through `errors.codes.*`, and an unregistered
+ * one terminates at `errors.codes.UNKNOWN` — so a buyer refused for a reason
+ * the site can explain in one sentence would instead read "Something went
+ * wrong. Please try again." and retry the same cart forever.
+ * `audit-error-display-i18n` holds both ends: an enum value with no
+ * `messages/en.json` key fails, and so does a key with no enum value.
+ */
+export const CHECKOUT_ERROR_CODES = {
+    /** Cart total exceeds `siteSettings.payment.codMaxOrderValue`. */
+    COD_LIMIT_EXCEEDED: "COD_LIMIT_EXCEEDED",
+};
 export const OFFER_ERROR_CODES = {
     DISABLED: "OFFER_DISABLED",
     PRICE_TOO_LOW: "OFFER_PRICE_TOO_LOW",

package/dist/errors/index.d.ts

@@ -1,5 +1,5 @@
 export { AppError } from "./base-error";
-export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES } from "./error-codes";
+export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES, CHECKOUT_ERROR_CODES } from "./error-codes";
 export type { ErrorCode } from "./error-codes";
 export { ERROR_MESSAGES } from "./messages";
 export { ApiError } from "./api-error";

package/dist/errors/index.js

@@ -1,5 +1,5 @@
 export { AppError } from "./base-error.js";
-export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES } from "./error-codes.js";
+export { ERROR_CODES, BID_ERROR_CODES, OFFER_ERROR_CODES, CHECKOUT_ERROR_CODES } from "./error-codes.js";
 export { ERROR_MESSAGES } from "./messages.js";
 // Note: appkit/src/errors has two ERROR_MESSAGE patterns:
 // - ERROR_CODES.AUTH_001 → "Invalid email or password" (code-based)

package/dist/features/account/components/UserBidsView.js

@@ -1,5 +1,5 @@
 "use client";
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { sortBy, sieveFilter, SIEVE_OP } from "../../../utils/sieve-builder.js";
 import { ACCOUNT_ENDPOINTS } from "../../../constants/api-endpoints.js";
 import { ROUTES } from "../../../constants/index.js";
@@ -9,6 +9,7 @@ import { buildBidDetailFields, bidStatusBadge } from "../../auctions/components/
 import { FieldSelect } from "../../../ui/forms/index.js";
 import { AuctionBidsTable } from "../../auctions/components/AuctionBidsTable.js";
 import { DataListingView } from "../../admin/components/DataListingView.js";
+import { useListingTypeFlags } from "../../../react/hooks/useListingTypeFlags.js";
 const SORT_OPTIONS = [
     { value: sortBy("bidDate", "DESC"), label: "Newest first" },
     { value: "bidDate", label: "Oldest first" },
@@ -28,6 +29,7 @@ export function UserBidsView() {
     // not an affordance: it is not row-scoped, and it only shows when there are
     // no bids at all.
     const [detail, setDetail] = useState(null);
+    const auctionsEnabled = useListingTypeFlags().auction;
     const config = {
         portal: "user",
         title: "My Bids",
@@ -52,7 +54,7 @@ export function UserBidsView() {
             if (isLoading) {
                 return (_jsx(Stack, { gap: "md", children: Array.from({ length: 3 }).map((_, i) => (_jsx(Div, { className: "h-16 animate-pulse border border-[var(--appkit-color-border)]", rounded: "xl" }, i))) }));
             }
-            return (_jsx(AuctionBidsTable, { bids: rows, portal: "buyer", onRowClick: (bid) => setDetail(bid), totalPages: 1, currentPage: 1, onPageChange: () => { }, emptyLabel: _jsxs(Span, { children: ["You haven't placed any bids yet.", " ", _jsx(TextLink, { href: String(ROUTES.PUBLIC.AUCTIONS), children: "Browse auctions" })] }) }));
+            return (_jsx(AuctionBidsTable, { bids: rows, portal: "buyer", onRowClick: (bid) => setDetail(bid), totalPages: 1, currentPage: 1, onPageChange: () => { }, emptyLabel: _jsxs(Span, { children: ["You haven't placed any bids yet.", auctionsEnabled && (_jsxs(_Fragment, { children: [" ", _jsx(TextLink, { href: String(ROUTES.PUBLIC.AUCTIONS), children: "Browse auctions" })] }))] }) }));
         },
     };
     const badge = detail ? bidStatusBadge(detail.status) : null;

package/dist/features/admin/components/AdminSiteSettingsView.js

@@ -18,6 +18,12 @@ import { ThemeManagerView, } from "../../site-settings/components/ThemeManagerVi
 import { DEFAULT_LIGHT_THEME, DEFAULT_DARK_THEME } from "../../../tokens/themes/index.js";
 import { DEFAULT_AUCTION_BID_INCREMENT_TIERS, } from "../../../_internal/shared/features/auctions/config.js";
 import { validateGstEnablement } from "../../../_internal/shared/features/site-settings/gst-registration.js";
+/*
+ * 🛑 The SAME constant the checkout page and the server-side gate read. An
+ * admin screen that defaulted its own input to a different number would show
+ * a cap that is not the cap being enforced until somebody pressed Save.
+ */
+import { COD_MAX_ORDER_VALUE_FALLBACK } from "../schemas/firestore.js";
 import { siteSettingsFormSchema } from "../schemas/site-settings-form.js";
 import { FormErrorSummary } from "../../../ui/forms/FormErrorSummary.js";
 import { SectionForm } from "../../shell/index.js";
@@ -279,6 +285,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
     const [upiManualEnabled, setUpiManualEnabled] = React.useState(true);
     const [codEnabled, setCodEnabled] = React.useState(true);
     const [otpCheckoutThreshold, setOtpCheckoutThreshold] = React.useState(5000);
+    const [codMaxOrderValue, setCodMaxOrderValue] = React.useState(COD_MAX_ORDER_VALUE_FALLBACK);
     // Per-listing-type / per-category-type visibility flags.
     const [listingTypeFlags, setListingTypeFlags] = React.useState({});
     const [categoryTypeFlags, setCategoryTypeFlags] = React.useState({});
@@ -472,6 +479,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
         setUpiManualEnabled(s.payment?.upiManualEnabled ?? true);
         setCodEnabled(s.payment?.codEnabled ?? true);
         setOtpCheckoutThreshold(s.payment?.otpCheckoutThreshold ?? 5000);
+        setCodMaxOrderValue(s.payment?.codMaxOrderValue ?? COD_MAX_ORDER_VALUE_FALLBACK);
         setListingTypeFlags(s.listings?.listingTypes ?? {});
         setCategoryTypeFlags(s.listings?.categoryTypes ?? {});
         setNotifEmailTypes(s.notificationChannels?.email?.types ?? []);
@@ -667,7 +675,7 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
             },
             integrations: { googleAnalyticsId: gaMeasurementId, facebookPixelId: fbPixelId, gtmContainerId, clarityProjectId },
             shipping: { freeShippingThreshold, defaultCarrier, maxDeliveryRadius },
-            payment: { razorpayEnabled, phonepeEnabled, upiManualEnabled, codEnabled, otpCheckoutThreshold },
+            payment: { razorpayEnabled, phonepeEnabled, upiManualEnabled, codEnabled, codMaxOrderValue, otpCheckoutThreshold },
             auctionConfig: { bidIncrementTiers: bidIncrementTiers, autoExtendWindowMinutes: autoExtendWindow, settlementGracePeriodHours: settlementGrace },
             platformLimits: { maxProductsPerStore, maxCustomFieldsPerProduct: maxCustomFields, orderCancellationWindowHours: orderCancelWindow },
             legalPages: { terms: termsHtml, privacy: privacyHtml, refundPolicy: refundHtml, shipping: shippingPolicyHtml, cookies: cookieHtml, ethics: ethicsHtml, codeOfConduct: conductHtml },
@@ -791,7 +799,15 @@ export function AdminSiteSettingsView({ labels = {}, ...rest }) {
                                                         // The plugin's own display label, not the raw key — the
                                                         // literal version rendered "pre-order" and
                                                         // "digital-code" at an admin.
-                                                        label: pluginFor(key).typeLabel, checked: listingTypeFlags[key] ?? true, onChange: (v) => setListingTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Category types" }), _jsx(Grid, { cols: 2, gap: "sm", children: CATEGORY_TYPE_KEYS.map((key) => (_jsx(Toggle, { label: key, checked: categoryTypeFlags[key] ?? true, onChange: (v) => setCategoryTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] })] }) }), _jsx(TabsContent, { value: "integrations", children: _jsxs(SettingsTabForm, { id: "integrations", label: "Integrations", children: [_jsx(Text, { size: "xs", color: "muted", children: "Keys are masked in transit and stored encrypted. Click Reveal to view." }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Razorpay" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Razorpay Key ID", value: razorpayKeyId, onChange: setRazorpayKeyId, placeholder: "rzp_test_\u2026 / rzp_live_\u2026" }), _jsx(MaskedInput, { label: "Razorpay Key Secret", value: razorpayKeySecret, onChange: setRazorpayKeySecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Razorpay Webhook Secret", value: razorpayWebhookSecret, onChange: setRazorpayWebhookSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "PhonePe" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "PhonePe Client ID", value: phonepeClientId, onChange: setPhonepeClientId, placeholder: "MERCHANTID_\u2026" }), _jsx(MaskedInput, { label: "PhonePe Client Secret", value: phonepeClientSecret, onChange: setPhonepeClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "PhonePe Client Version", value: phonepeClientVersion, onChange: (e) => setPhonepeClientVersion(e.target.value), placeholder: "1" }), _jsx(Select, { label: "PhonePe Environment", options: PHONEPE_ENVIRONMENT_OPTIONS, value: phonepeEnvironment, onValueChange: setPhonepeEnvironment }), _jsx(MaskedInput, { label: "PhonePe Webhook Username", value: phonepeWebhookUsername, onChange: setPhonepeWebhookUsername, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "PhonePe Webhook Password", value: phonepeWebhookPassword, onChange: setPhonepeWebhookPassword, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "SMTP / Email" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "SMTP host", value: smtpHost, onChange: (e) => setSmtpHost(e.target.value), placeholder: "smtp.sendgrid.net" }), _jsx(Input, { label: "SMTP port", value: smtpPort, onChange: (e) => setSmtpPort(e.target.value), type: "number", placeholder: "587" }), _jsx(Input, { label: "SMTP user", value: smtpUser, onChange: (e) => setSmtpUser(e.target.value), placeholder: "apikey" })] }), _jsx(Input, { label: "From address", value: smtpFrom, onChange: (e) => setSmtpFrom(e.target.value), placeholder: "noreply@letitrip.in", type: "email" }), _jsx(Text, { size: "xs", color: "muted", children: "Transactional email is delivered through Resend \u2014 set the Resend API key below. These SMTP fields are stored but not currently used for delivery." })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Google Places (store reviews)" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Google Maps API key", value: googleMapsApiKey, onChange: setGoogleMapsApiKey, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "Default Google Place ID", value: googlePlaceId, onChange: (e) => setGooglePlaceId(e.target.value), placeholder: "ChIJ\u2026" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Analytics & Tracking" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Google Analytics ID", value: gaMeasurementId, onChange: (e) => setGaMeasurementId(e.target.value), placeholder: "G-XXXXXXXXXX" }), _jsx(Input, { label: "Facebook Pixel ID", value: fbPixelId, onChange: (e) => setFbPixelId(e.target.value), placeholder: "XXXXXXXXXXXXXXXX" }), _jsx(Input, { label: "GTM Container ID", value: gtmContainerId, onChange: (e) => setGtmContainerId(e.target.value), placeholder: "GTM-XXXXXXX" }), _jsx(Input, { label: "Microsoft Clarity Project ID", value: clarityProjectId, onChange: (e) => setClarityProjectId(e.target.value), placeholder: "abcdefghij", helperText: "Heatmaps and session replay. Recording is strictly masked \u2014 no text or input values are captured. Leave blank to keep Clarity off." })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Meta (Instagram & Facebook Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Used by the Social Feed section to fetch Instagram and Facebook posts via Meta Graph API v19." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Page Access Token", value: metaPageAccessToken, onChange: setMetaPageAccessToken, placeholder: "EAAxxxxxxx\u2026" }), _jsx(Input, { label: "Page ID (or handle)", value: metaPageId, onChange: (e) => setMetaPageId(e.target.value), placeholder: "letitrip" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "TikTok for Developers (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials + long-lived access token from TikTok for Developers. Used to list your account's public videos." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client Key", value: tiktokClientKey, onChange: setTiktokClientKey, placeholder: "aw\u2026" }), _jsx(MaskedInput, { label: "Client Secret", value: tiktokClientSecret, onChange: setTiktokClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Access Token (long-lived)", value: tiktokAccessToken, onChange: setTiktokAccessToken, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "DeviantArt OAuth2 (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials for DeviantArt gallery fetching (client-credentials OAuth2 flow \u2014 no user login required)." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client ID", value: deviantartClientId, onChange: setDeviantartClientId, placeholder: "1234" }), _jsx(MaskedInput, { label: "Client Secret", value: deviantartClientSecret, onChange: setDeviantartClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] })] }) }), _jsx(TabsContent, { value: "shipping", children: _jsxs(SettingsTabForm, { id: "shipping", label: "Shipping", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Payment methods" }), _jsx(Div, { id: "setting-razorpay-enabled", children: _jsx(Toggle, { label: "Razorpay (online card/UPI/netbanking) enabled \u2014 needs Key ID + Key Secret under Credentials", checked: razorpayEnabled, onChange: setRazorpayEnabled }) }), _jsx(Div, { id: "setting-phonepe-enabled", children: _jsx(Toggle, { label: "PhonePe (online card/UPI) enabled \u2014 ignored while Razorpay is on; only one online gateway runs at a time", checked: phonepeEnabled, onChange: setPhonepeEnabled }) }), _jsx(Div, { id: "setting-manual-payment-enabled", children: _jsx(Toggle, { label: "Manual UPI/bank transfer enabled", checked: upiManualEnabled, onChange: setUpiManualEnabled }) }), _jsx(Div, { id: "setting-cod-enabled", children: _jsx(Toggle, { label: "Cash on delivery (COD) enabled", checked: codEnabled, onChange: setCodEnabled }) }), _jsx(Input, { label: "Free shipping threshold (\u20B9)", value: String(freeShippingThreshold), onChange: (e) => setFreeShippingThreshold(parseInt(e.target.value) || 0), type: "number", min: 0, helperText: "Orders above this amount get free shipping." }), _jsx(Select, { label: "Default carrier", options: CARRIER_OPTIONS, value: defaultCarrier, onValueChange: setDefaultCarrier }), _jsx(Input, { label: "Max delivery radius (km, 0 = no limit)", value: String(maxDeliveryRadius), onChange: (e) => setMaxDeliveryRadius(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "High-value checkout OTP threshold (\u20B9)", helperText: "Carts at or above this subtotal require an extra OTP verification step before payment (0 = disabled).", value: String(otpCheckoutThreshold), onChange: (e) => setOtpCheckoutThreshold(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", className: "pt-[var(--appkit-space-2)]", children: "Seller shipping charge defaults" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Seller shipping fixed (\u20B9)", helperText: "Flat shipping charge collected on the seller's behalf.", value: String(sellerShippingFixed), onChange: (e) => setSellerShippingFixed(parseFloat(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "Platform shipping (%)", helperText: "Platform's own shipping markup, as a % of order value.", value: String(platformShippingPercent), onChange: (e) => setPlatformShippingPercent(parseFloat(e.target.value) || 0), type: "number", min: 0, max: 100, step: 0.1 }), _jsx(Input, { label: "Platform shipping minimum (\u20B9)", helperText: "Floor for the platform shipping markup.", value: String(platformShippingFixedMin), onChange: (e) => setPlatformShippingFixedMin(parseFloat(e.target.value) || 0), type: "number", min: 0 })] })] }) }), _jsx(TabsContent, { value: "auction", children: _jsxs(SettingsTabForm, { id: "auction", label: "Auction", children: [_jsxs(Stack, { gap: "sm", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "xs", weight: "medium", color: "muted", children: "Bid increment tiers" }), _jsx(Text, { size: "xs", color: "muted", children: "The minimum jump a new bid must clear, based on the current bid amount. A seller's per-listing override can require more than the matching tier, but can never undercut it." }), bidIncrementTiers.map((tier, i) => {
+                                                        label: pluginFor(key).typeLabel, checked: listingTypeFlags[key] ?? true, onChange: (v) => setListingTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] }), _jsxs(Stack, { gap: "xs", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Category types" }), _jsx(Grid, { cols: 2, gap: "sm", children: CATEGORY_TYPE_KEYS.map((key) => (_jsx(Toggle, { label: key, checked: categoryTypeFlags[key] ?? true, onChange: (v) => setCategoryTypeFlags((prev) => ({ ...prev, [key]: v })) }, key))) })] })] }) }), _jsx(TabsContent, { value: "integrations", children: _jsxs(SettingsTabForm, { id: "integrations", label: "Integrations", children: [_jsx(Text, { size: "xs", color: "muted", children: "Keys are masked in transit and stored encrypted. Click Reveal to view." }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Razorpay" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Razorpay Key ID", value: razorpayKeyId, onChange: setRazorpayKeyId, placeholder: "rzp_test_\u2026 / rzp_live_\u2026" }), _jsx(MaskedInput, { label: "Razorpay Key Secret", value: razorpayKeySecret, onChange: setRazorpayKeySecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Razorpay Webhook Secret", value: razorpayWebhookSecret, onChange: setRazorpayWebhookSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "PhonePe" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "PhonePe Client ID", value: phonepeClientId, onChange: setPhonepeClientId, placeholder: "MERCHANTID_\u2026" }), _jsx(MaskedInput, { label: "PhonePe Client Secret", value: phonepeClientSecret, onChange: setPhonepeClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "PhonePe Client Version", value: phonepeClientVersion, onChange: (e) => setPhonepeClientVersion(e.target.value), placeholder: "1" }), _jsx(Select, { label: "PhonePe Environment", options: PHONEPE_ENVIRONMENT_OPTIONS, value: phonepeEnvironment, onValueChange: setPhonepeEnvironment }), _jsx(MaskedInput, { label: "PhonePe Webhook Username", value: phonepeWebhookUsername, onChange: setPhonepeWebhookUsername, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "PhonePe Webhook Password", value: phonepeWebhookPassword, onChange: setPhonepeWebhookPassword, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "SMTP / Email" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "SMTP host", value: smtpHost, onChange: (e) => setSmtpHost(e.target.value), placeholder: "smtp.sendgrid.net" }), _jsx(Input, { label: "SMTP port", value: smtpPort, onChange: (e) => setSmtpPort(e.target.value), type: "number", placeholder: "587" }), _jsx(Input, { label: "SMTP user", value: smtpUser, onChange: (e) => setSmtpUser(e.target.value), placeholder: "apikey" })] }), _jsx(Input, { label: "From address", value: smtpFrom, onChange: (e) => setSmtpFrom(e.target.value), placeholder: "noreply@letitrip.in", type: "email" }), _jsx(Text, { size: "xs", color: "muted", children: "Transactional email is delivered through Resend \u2014 set the Resend API key below. These SMTP fields are stored but not currently used for delivery." })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Google Places (store reviews)" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Google Maps API key", value: googleMapsApiKey, onChange: setGoogleMapsApiKey, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(Input, { label: "Default Google Place ID", value: googlePlaceId, onChange: (e) => setGooglePlaceId(e.target.value), placeholder: "ChIJ\u2026" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Analytics & Tracking" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Google Analytics ID", value: gaMeasurementId, onChange: (e) => setGaMeasurementId(e.target.value), placeholder: "G-XXXXXXXXXX" }), _jsx(Input, { label: "Facebook Pixel ID", value: fbPixelId, onChange: (e) => setFbPixelId(e.target.value), placeholder: "XXXXXXXXXXXXXXXX" }), _jsx(Input, { label: "GTM Container ID", value: gtmContainerId, onChange: (e) => setGtmContainerId(e.target.value), placeholder: "GTM-XXXXXXX" }), _jsx(Input, { label: "Microsoft Clarity Project ID", value: clarityProjectId, onChange: (e) => setClarityProjectId(e.target.value), placeholder: "abcdefghij", helperText: "Heatmaps and session replay. Recording is strictly masked \u2014 no text or input values are captured. Leave blank to keep Clarity off." })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Meta (Instagram & Facebook Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Used by the Social Feed section to fetch Instagram and Facebook posts via Meta Graph API v19." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Page Access Token", value: metaPageAccessToken, onChange: setMetaPageAccessToken, placeholder: "EAAxxxxxxx\u2026" }), _jsx(Input, { label: "Page ID (or handle)", value: metaPageId, onChange: (e) => setMetaPageId(e.target.value), placeholder: "letitrip" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "TikTok for Developers (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials + long-lived access token from TikTok for Developers. Used to list your account's public videos." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client Key", value: tiktokClientKey, onChange: setTiktokClientKey, placeholder: "aw\u2026" }), _jsx(MaskedInput, { label: "Client Secret", value: tiktokClientSecret, onChange: setTiktokClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" }), _jsx(MaskedInput, { label: "Access Token (long-lived)", value: tiktokAccessToken, onChange: setTiktokAccessToken, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] }), _jsxs(Stack, { gap: "sm", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "DeviantArt OAuth2 (Social Feed)" }), _jsx(Text, { size: "xs", color: "muted", children: "Client credentials for DeviantArt gallery fetching (client-credentials OAuth2 flow \u2014 no user login required)." }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(MaskedInput, { label: "Client ID", value: deviantartClientId, onChange: setDeviantartClientId, placeholder: "1234" }), _jsx(MaskedInput, { label: "Client Secret", value: deviantartClientSecret, onChange: setDeviantartClientSecret, placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" })] })] })] }) }), _jsx(TabsContent, { value: "shipping", children: _jsxs(SettingsTabForm, { id: "shipping", label: "Shipping", children: [_jsx(Text, { size: "sm", weight: "medium", color: "muted", children: "Payment methods" }), _jsx(Div, { id: "setting-razorpay-enabled", children: _jsx(Toggle, { label: "Razorpay (online card/UPI/netbanking) enabled \u2014 needs Key ID + Key Secret under Credentials", checked: razorpayEnabled, onChange: setRazorpayEnabled }) }), _jsx(Div, { id: "setting-phonepe-enabled", children: _jsx(Toggle, { label: "PhonePe (online card/UPI) enabled \u2014 ignored while Razorpay is on; only one online gateway runs at a time", checked: phonepeEnabled, onChange: setPhonepeEnabled }) }), _jsx(Div, { id: "setting-manual-payment-enabled", children: _jsx(Toggle, { label: "Manual UPI/bank transfer enabled", checked: upiManualEnabled, onChange: setUpiManualEnabled }) }), _jsx(Div, { id: "setting-cod-enabled", children: _jsx(Toggle, { label: "Cash on delivery (COD) enabled", checked: codEnabled, onChange: setCodEnabled }) }), _jsx(Input, { label: "Free shipping threshold (\u20B9)", value: String(freeShippingThreshold), onChange: (e) => setFreeShippingThreshold(parseInt(e.target.value) || 0), type: "number", min: 0, helperText: "Orders above this amount get free shipping." }), _jsx(Select, { label: "Default carrier", options: CARRIER_OPTIONS, value: defaultCarrier, onValueChange: setDefaultCarrier }), _jsx(Input, { label: "Max delivery radius (km, 0 = no limit)", value: String(maxDeliveryRadius), onChange: (e) => setMaxDeliveryRadius(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "COD maximum order value (\u20B9)", 
+                                            /*
+                                              🛑 A MAXIMUM, sitting directly above a THRESHOLD that is a
+                                              minimum. The helper text says which way each one runs,
+                                              because the two fields look identical and mean opposite
+                                              things — and getting it backwards here either refuses every
+                                              COD order or refuses none.
+                                            */
+                                            helperText: "Carts ABOVE this subtotal cannot pay by cash on delivery; the option is shown disabled with the reason. 0 = COD off for every cart.", value: String(codMaxOrderValue), onChange: (e) => setCodMaxOrderValue(parseInt(e.target.value) || 0), type: "number", min: 0, disabled: !codEnabled }), _jsx(Input, { label: "High-value checkout OTP threshold (\u20B9)", helperText: "Carts at or above this subtotal require an extra OTP verification step before payment (0 = disabled).", value: String(otpCheckoutThreshold), onChange: (e) => setOtpCheckoutThreshold(parseInt(e.target.value) || 0), type: "number", min: 0 }), _jsx(Text, { size: "sm", weight: "medium", color: "muted", className: "pt-[var(--appkit-space-2)]", children: "Seller shipping charge defaults" }), _jsxs(Grid, { cols: 2, gap: "md", children: [_jsx(Input, { label: "Seller shipping fixed (\u20B9)", helperText: "Flat shipping charge collected on the seller's behalf.", value: String(sellerShippingFixed), onChange: (e) => setSellerShippingFixed(parseFloat(e.target.value) || 0), type: "number", min: 0 }), _jsx(Input, { label: "Platform shipping (%)", helperText: "Platform's own shipping markup, as a % of order value.", value: String(platformShippingPercent), onChange: (e) => setPlatformShippingPercent(parseFloat(e.target.value) || 0), type: "number", min: 0, max: 100, step: 0.1 }), _jsx(Input, { label: "Platform shipping minimum (\u20B9)", helperText: "Floor for the platform shipping markup.", value: String(platformShippingFixedMin), onChange: (e) => setPlatformShippingFixedMin(parseFloat(e.target.value) || 0), type: "number", min: 0 })] })] }) }), _jsx(TabsContent, { value: "auction", children: _jsxs(SettingsTabForm, { id: "auction", label: "Auction", children: [_jsxs(Stack, { gap: "sm", rounded: "lg", border: "default", padding: "sm", children: [_jsx(Text, { size: "xs", weight: "medium", color: "muted", children: "Bid increment tiers" }), _jsx(Text, { size: "xs", color: "muted", children: "The minimum jump a new bid must clear, based on the current bid amount. A seller's per-listing override can require more than the matching tier, but can never undercut it." }), bidIncrementTiers.map((tier, i) => {
                                                     const isLast = i === bidIncrementTiers.length - 1;
                                                     return (_jsxs(Grid, { align: "end", gap: "xs", className: "grid-cols-12", children: [_jsx(Div, { className: "col-span-5", children: isLast ? (_jsxs(_Fragment, { children: [_jsx(Text, { size: "xs", weight: "medium", className: "mb-1", children: "Up to (\u20B9)" }), _jsx(Text, { size: "sm", color: "muted", children: "and above" })] })) : (_jsx(Input, { label: "Up to (\u20B9)", type: "number", min: 1, value: String(tier.upTo ?? ""), onChange: (e) => setBidIncrementTiers(bidIncrementTiers.map((t, j) => j === i ? { ...t, upTo: parseInt(e.target.value) || 0 } : t)) })) }), _jsx(Div, { className: "col-span-5", children: _jsx(Input, { label: "Increment (\u20B9)", type: "number", min: 1, value: String(tier.increment), onChange: (e) => setBidIncrementTiers(bidIncrementTiers.map((t, j) => j === i ? { ...t, increment: parseInt(e.target.value) || 0 } : t)) }) }), _jsx(Row, { centered: true, className: "col-span-2", padding: "b-xs", children: _jsx(Button, { variant: "ghost", type: "button", disabled: bidIncrementTiers.length <= 1, onClick: () => setBidIncrementTiers(bidIncrementTiers.filter((_, j) => j !== i)), "aria-label": "Remove tier", children: "\u00D7" }) })] }, i));
                                                 }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: () => setBidIncrementTiers([

package/dist/features/admin/schemas/firestore.d.ts

@@ -352,6 +352,26 @@ export interface SiteSettingsDocument extends BaseDocument {
         phonepeEnabled: boolean;
         upiManualEnabled: boolean;
         codEnabled: boolean;
+        /**
+         * Cart total (rupees) ABOVE which cash on delivery is refused. Default
+         * 3000.
+         *
+         * 🛑 Measured against the CART TOTAL, not an item price. COD risk is the
+         * cash a courier carries and the value at stake on a refusal at the door,
+         * and neither cares how many lines the order has — a ₹2,000 item ordered
+         * three times is a ₹6,000 exposure exactly like one ₹6,000 item. Gating
+         * per item would pass that order straight through.
+         *
+         * 🛑 It is a MAXIMUM, so the comparison is `subtotal > value` — strictly
+         * greater. `otpCheckoutThreshold` beside it is a MINIMUM and fires
+         * at/above its value. Two money thresholds on one settings block with
+         * opposite senses is a genuine trap; the names carry it (`Max` vs
+         * `Threshold`) and both comparisons are spelled out at their call sites.
+         *
+         * `0` disables COD outright at any value, which is a real configuration
+         * rather than a bug — `undefined` is what means "no cap".
+         */
+        codMaxOrderValue?: number;
         /** Tier PP — cart total (rupees) at/above which checkout requires OTP verification. Applies to all payment methods except COD. Optional — falls back to no OTP gate when unset. */
         otpCheckoutThreshold?: number;
         /**
@@ -411,8 +431,13 @@ export interface SiteSettingsDocument extends BaseDocument {
         /** Razorpay gateway cost % (absorbed by platform, not passed through separately). */
         gatewayFeePercent: number;
         codDepositPercent: number;
-        /** COD handling fee charged to the buyer: max(codHandlingFeeMin, subtotal × codHandlingFeePercent / 100). */
-        codHandlingFeeMin: number;
+        /**
+         * COD handling fee charged to the buyer:
+         * min(subtotal × codHandlingFeePercent / 100, codHandlingFeeCap).
+         *
+         * 🛑 A CEILING. It was `codHandlingFeeMin` applied as a floor, which billed
+         * ₹2,000 of "handling" on a ₹20,000 order — see `computeCodHandlingFee`.
+         */ codHandlingFeeCap: number;
         codHandlingFeePercent: number;
         /** Admin master toggle — whether the gift-wrap addon is offered at checkout at all. */
         giftWrapFeeEnabled: boolean;
@@ -793,6 +818,16 @@ export declare const SITE_SETTINGS_INDEXED_FIELDS: readonly [];
  * and switch the active default with `defaultLightThemeId` / `defaultDarkThemeId`.
  */
 export declare const DEFAULT_SITE_SETTINGS_THEME: SiteSettingsTheme;
+/**
+ * Cart total (rupees) above which cash on delivery is refused, when the
+ * settings document does not say.
+ *
+ * 🛑 ONE number, consumed by both the default document below and every reader
+ * that has to cope with a settings document written before the field existed.
+ * Two spellings of a money limit is how a cap ends up enforced at one value
+ * and displayed at another.
+ */
+export declare const COD_MAX_ORDER_VALUE_FALLBACK = 3000;
 export declare const DEFAULT_SITE_SETTINGS_DATA: Partial<SiteSettingsDocument>;
 /**
  * 🛑 DEAD, AND IT DISAGREES WITH THE REAL PROJECTION. Do not add to it.

package/dist/features/admin/schemas/firestore.js

@@ -224,6 +224,16 @@ export const DEFAULT_SITE_SETTINGS_THEME = {
     defaultLightThemeId: "default-light",
     defaultDarkThemeId: "default-dark",
 };
+/**
+ * Cart total (rupees) above which cash on delivery is refused, when the
+ * settings document does not say.
+ *
+ * 🛑 ONE number, consumed by both the default document below and every reader
+ * that has to cope with a settings document written before the field existed.
+ * Two spellings of a money limit is how a cap ends up enforced at one value
+ * and displayed at another.
+ */
+export const COD_MAX_ORDER_VALUE_FALLBACK = 3000;
 export const DEFAULT_SITE_SETTINGS_DATA = {
     id: "global",
     siteName: "My Store",
@@ -234,6 +244,7 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         phonepeEnabled: false,
         upiManualEnabled: true,
         codEnabled: true,
+        codMaxOrderValue: COD_MAX_ORDER_VALUE_FALLBACK,
         otpCheckoutThreshold: 5000,
         smsVerification: false,
         adminCheckoutBypass: false,
@@ -261,7 +272,7 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         platformFeeMax: 10,
         gatewayFeePercent: 2,
         codDepositPercent: 10,
-        codHandlingFeeMin: 200,
+        codHandlingFeeCap: 200,
         codHandlingFeePercent: 10,
         // The buyer add-ons ship ENABLED. They were `false`, which made
         // StoreAddonsPicker return null on both the cart and checkout, so a fresh

package/dist/features/cart/components/CartPriceBreakdown.js

@@ -21,5 +21,5 @@ export function CartPriceBreakdown({ preview, itemCount, currency = "INR", unava
     const subtotalLabel = itemCount !== undefined
         ? `Subtotal (${itemCount} item${itemCount !== 1 ? "s" : ""}${storeCount > 1 ? `, ${storeCount} stores` : ""})`
         : "Subtotal";
-    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee) })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.platformFee > 0 && _jsx(Line, { label: "Platform fee", amount: money(preview.platformFee) }), (preview.gstAmount > 0 || preview.gstOnFee > 0) && (_jsx(Line, { label: "GST", amount: money(preview.gstAmount + preview.gstOnFee) })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: true }) }), errorNote ? (_jsx(Text, { size: "xs", color: "error", children: errorNote })) : (isLoading && (_jsx(Text, { size: "xs", color: "muted", children: "Updating\u2026" })))] }));
+    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee) })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.platformFee > 0 && _jsx(Line, { label: "Platform fee", amount: money(preview.platformFee) }), preview.gstOnFee > 0 && (_jsx(Line, { label: "GST on platform fee", amount: money(preview.gstOnFee) })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: true }) }), preview.gstAmount > 0 && (_jsxs(Text, { size: "xs", color: "muted", children: ["Includes GST of ", money(preview.gstAmount)] })), errorNote ? (_jsx(Text, { size: "xs", color: "error", children: errorNote })) : (isLoading && (_jsx(Text, { size: "xs", color: "muted", children: "Updating\u2026" })))] }));
 }

package/dist/features/checkout/schemas/firestore.d.ts

@@ -2,7 +2,18 @@
  * Checkout Feature Firestore Document Types & Constants
  * Covers: failed checkouts, failed payments
  */
-export type FailedCheckoutReason = "stock_failed" | "address_not_found" | "cart_empty" | "validation_error" | "unknown";
+export type FailedCheckoutReason = "stock_failed" | "address_not_found" | "cart_empty"
+/**
+ * The cart exceeded `siteSettings.payment.codMaxOrderValue` and COD was
+ * refused server-side.
+ *
+ * 🛑 Its own reason rather than `validation_error`, because it is the only
+ * one here that is a BUSINESS rule an admin can change rather than a
+ * malformed request. Folded into `validation_error` it would be invisible,
+ * and "how often does the COD cap turn buyers away" is the question that
+ * decides whether ₹3,000 is the right number.
+ */
+ | "cod_over_limit" | "validation_error" | "unknown";
 export type FailedPaymentReason = "signature_mismatch" | "payment_cancelled" | "amount_mismatch" | "product_unavailable" | "stock_insufficient" | "unknown";
 export type FailedCheckoutDocument = {
     id: string;