@mohasinac/appkit 4.63.3 → 4.63.5

package/dist/features/admin/schemas/firestore.d.ts

@@ -32,6 +32,10 @@ export interface NotificationDocument extends BaseDocument {
     readAt?: Date;
     relatedId?: string;
     relatedType?: NotificationRelatedType;
+    /** Outcome of the async whatsappNotify job for this notification's WhatsApp send, if one was enqueued. */
+    whatsappStatus?: "queued" | "sent" | "failed" | "skipped";
+    /** jobs/{id} doc that ran (or is running) the WhatsApp send for this notification. */
+    whatsappJobId?: string;
 }
 export declare const NOTIFICATIONS_COLLECTION: "notifications";
 export declare const NOTIFICATIONS_INDEXED_FIELDS: readonly ["userId", "isRead", "createdAt", "type"];
@@ -110,6 +114,7 @@ export interface SiteSettingsCredentials {
     /** Webhook signing secret from Razorpay's dashboard → Webhooks. Without it `verifyWebhook()` fails closed. */
     razorpayWebhookSecret?: string;
     resendApiKey?: string;
+    whatsappApiKey?: string;
     metaAppId?: string;
     metaAppSecret?: string;
     metaPageAccessToken?: string;
@@ -124,6 +129,28 @@ export interface SiteSettingsCredentials {
     /** Google Places API for Google Business Reviews (HS4) */
     googleMapsApiKey?: string;
     googlePlaceId?: string;
+    /** WhatsApp Business Cloud API — platform level (for admin purchase announcements) */
+    whatsappPhoneNumberId?: string;
+    whatsappCloudApiToken?: string;
+    /** Comma-separated digits-only phone numbers that receive order announcements */
+    whatsappAdminNotifyNumbers?: string;
+    /**
+     * Approved Meta message-template names, one flat string field per
+     * order-lifecycle notification type — every `SiteSettingsCredentials`
+     * field is stored as an individually-encrypted string (see
+     * `getDecryptedCredentials`/`getCredentialsMasked`, which iterate + mask
+     * every field as a string), so this can't be a `Record<string,string>`
+     * map. Business-initiated WhatsApp sends outside the 24h customer-service
+     * window require a pre-approved template.
+     */
+    whatsappTemplateOrderPlaced?: string;
+    whatsappTemplateOrderConfirmed?: string;
+    whatsappTemplateOrderShipped?: string;
+    whatsappTemplateOrderDelivered?: string;
+    whatsappTemplateOrderCancelled?: string;
+    whatsappTemplateRefundInitiated?: string;
+    /** BCP-47 language code the templates above were approved in, e.g. "en" or "en_US". */
+    whatsappTemplateLanguage?: string;
 }
 export interface SiteSettingsCredentialsMasked {
     phonepeClientId?: string;
@@ -136,6 +163,7 @@ export interface SiteSettingsCredentialsMasked {
     razorpayKeySecret?: string;
     razorpayWebhookSecret?: string;
     resendApiKey?: string;
+    whatsappApiKey?: string;
     metaAppId?: string;
     metaAppSecret?: string;
     metaPageAccessToken?: string;
@@ -147,6 +175,16 @@ export interface SiteSettingsCredentialsMasked {
     deviantartClientSecret?: string;
     googleMapsApiKey?: string;
     googlePlaceId?: string;
+    whatsappPhoneNumberId?: string;
+    whatsappCloudApiToken?: string;
+    whatsappAdminNotifyNumbers?: string;
+    whatsappTemplateOrderPlaced?: string;
+    whatsappTemplateOrderConfirmed?: string;
+    whatsappTemplateOrderShipped?: string;
+    whatsappTemplateOrderDelivered?: string;
+    whatsappTemplateOrderCancelled?: string;
+    whatsappTemplateRefundInitiated?: string;
+    whatsappTemplateLanguage?: string;
 }
 export interface NotificationChannelConfig {
     inApp: {
@@ -162,6 +200,15 @@ export interface NotificationChannelConfig {
         /** Subset of NotificationTypes to email — absent means all types. */
         types?: NotificationType[];
     };
+    whatsapp: {
+        enabled: boolean;
+        /** Minimum priority that triggers a WhatsApp message (default: "high"). */
+        minPriority?: NotificationPriority;
+        /** Subset of NotificationTypes to WhatsApp — absent means all types. */
+        types?: NotificationType[];
+        /** When true, WhatsApp OTP is offered as an alternative to email OTP at checkout. */
+        otpEnabled?: boolean;
+    };
     sms: {
         enabled: boolean;
         /** Minimum priority that triggers an SMS (default: "high"). */
@@ -452,6 +499,29 @@ export interface SiteSettingsDocument extends BaseDocument {
          * ₹2,000 of "handling" on a ₹20,000 order — see `computeCodHandlingFee`.
          */ codHandlingFeeCap: number;
         codHandlingFeePercent: number;
+        /**
+         * Admin master toggle for the per-order, BUYER-paid WhatsApp addon.
+         *
+         * 🛑 Defaults to FALSE. The cost of WhatsApp moved to a standing monthly
+         * charge on the SELLER (`whatsappNotifyMonthlyFee` below) — the platform
+         * owns one number, so the expense is standing rather than per order, and a
+         * buyer should not have to purchase their own delivery updates. The
+         * checkout path that charges it is left intact rather than cut out again:
+         * it is woven through the order-total arithmetic that carries D42's
+         * round-once fix, and disabling it makes the fee resolve to 0 without
+         * touching that money code.
+         */
+        whatsappNotifyFeeEnabled: boolean;
+        /** Flat rupee fee charged to the buyer when they opt into the per-order addon. Unreachable while `whatsappNotifyFeeEnabled` is false. */
+        whatsappNotifyFee: number;
+        /**
+         * What a seller pays per month to receive WhatsApp order notifications —
+         * the admin-set price of `StoreDocument.whatsappNotifySubscribed`.
+         *
+         * Rupees per month, not per message: Meta bills us per template, but a
+         * seller cannot predict their own order count, and a per-message price
+         * would make their bill a function of how well they sold.
+         */ whatsappNotifyMonthlyFee: number;
         /** Admin master toggle — whether the gift-wrap addon is offered at checkout at all. */
         giftWrapFeeEnabled: boolean;
         /** Flat rupee fee charged to the buyer when they opt into gift wrap. */
@@ -537,6 +607,8 @@ export interface SiteSettingsDocument extends BaseDocument {
     messaging?: {
         /** User-facing email. Staff mail (daily digest, payout summary) ignores this. */
         emailEnabled: boolean;
+        /** User-facing WhatsApp. Same exemption for staff. */
+        whatsappEnabled: boolean;
         /**
          * Reserved sends allowed per channel per day. Applies to staff and
          * transactional mail too — the ceiling exists to stay inside the
@@ -544,6 +616,7 @@ export interface SiteSettingsDocument extends BaseDocument {
          */
         dailyCeiling: {
             email: number;
+            whatsapp: number;
             sms: number;
         };
     };

package/dist/features/admin/schemas/firestore.js

@@ -15,7 +15,7 @@ export const ADMIN_CHECKOUT_BYPASS_FLAG_KEY = "adminCheckoutBypass";
  *   · `constants/notification-types.ts` (9) — fed the admin filter chips and
  *     the per-channel allow-list, so the admin list could not filter 18 of
  *     the 27 real types and an admin literally could not allow-list
- *     `offer_received` or `payment_review` for email
+ *     `offer_received` or `payment_review` for email or WhatsApp
  *   · `features/account/types/index.ts` (5: order|offer|promo|system|message)
  *     — a different vocabulary entirely, on a `UserNotification` type with
  *     zero real consumers
@@ -195,6 +195,7 @@ export const notificationQueryHelpers = {
 export const DEFAULT_NOTIFICATION_CHANNELS = {
     inApp: { enabled: true, readOnly: true },
     email: { enabled: false, minPriority: "normal" },
+    whatsapp: { enabled: false, minPriority: "high", otpEnabled: false },
     sms: { enabled: false, minPriority: "high" },
 };
 const PRIORITY_ORDER = {
@@ -254,7 +255,8 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
     // half-configured site.
     messaging: {
         emailEnabled: false,
-        dailyCeiling: { email: 80, sms: 50 },
+        whatsappEnabled: false,
+        dailyCeiling: { email: 80, whatsapp: 200, sms: 50 },
     },
     emi: {
         enabled: false,
@@ -277,9 +279,12 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         // The buyer add-ons ship ENABLED. They were `false`, which made
         // StoreAddonsPicker return null on both the cart and checkout, so a fresh
         // install had no add-ons at all and no indication why. `undefined` still
-        // means disabled everywhere (computeGiftWrapFee et al. read
+        // means disabled everywhere (computeWhatsAppNotifyFee et al. read
         // `if (!rates.XEnabled) return 0`) — only the DEFAULT changed, so an
         // existing siteSettings document keeps whatever it already stored.
+        whatsappNotifyFeeEnabled: false,
+        whatsappNotifyFee: 10,
+        whatsappNotifyMonthlyFee: 199,
         giftWrapFeeEnabled: true,
         giftWrapFee: 49,
         shipmentProtectionFeeEnabled: true,

package/dist/features/auth/checkout-value-otp.d.ts

@@ -44,6 +44,6 @@ export interface CheckoutValueOtpDoc {
  * making the whole feature look broken.
  */
 export declare function enforceCheckoutValueOtpRateLimit(db: Db, uid: string): Promise<void>;
-/** Build the checkout-value OTP message body. */
+/** Build the checkout-value OTP WhatsApp/SMS message body. */
 export declare function buildCheckoutValueOtpMessage(code: string, siteName: string): string;
 export {};

package/dist/features/auth/checkout-value-otp.js

@@ -75,7 +75,7 @@ export async function enforceCheckoutValueOtpRateLimit(db, uid) {
         tx.set(metaRef, { lastSentAt: new Date() }, { merge: true });
     });
 }
-/** Build the checkout-value OTP message body. */
+/** Build the checkout-value OTP WhatsApp/SMS message body. */
 export function buildCheckoutValueOtpMessage(code, siteName) {
     return (`*${siteName} — Order Verification*\n\n` +
         `Your verification code for this high-value order is: *${code}*\n\n` +

package/dist/features/auth/permissions/constants.d.ts

@@ -83,7 +83,7 @@ export declare const ROUTE_PERMISSION_MAP: Record<string, Permission>;
  *
  * Defaults on store creation: ["suggest_brands", "create_coupons"]
  */
-export type StoreCapability = "advanced_listing_types" | "host_auctions" | "host_preorders" | "create_categories" | "suggest_brands" | "create_coupons" | "bulk_listing_import" | "extended_return_window" | "verified_seller" | "featured_placement" | "promotional_banner" | "priority_support" | "multiple_stores" | "custom_store_slug" | "api_access" | "lower_commission_rate" | "early_access_features" | "advanced_analytics";
+export type StoreCapability = "advanced_listing_types" | "host_auctions" | "host_preorders" | "create_categories" | "suggest_brands" | "create_coupons" | "bulk_listing_import" | "extended_return_window" | "verified_seller" | "featured_placement" | "promotional_banner" | "priority_support" | "multiple_stores" | "custom_store_slug" | "api_access" | "lower_commission_rate" | "early_access_features" | "advanced_analytics" | "whatsapp_catalog_sync";
 export declare const ALL_STORE_CAPABILITIES: StoreCapability[];
 /** Narrow an untrusted string to a real capability. */
 export declare function isStoreCapability(value: unknown): value is StoreCapability;
@@ -118,7 +118,7 @@ export declare function hasCapability(capabilities: StoreCapability[], required:
  *
  * 🛑 The PURE half of `getStoreCapabilities`, extracted so a caller that
  * already holds the store document does not pay a second Firestore read to ask
- * what it is entitled to (Rule #6). Several routes were reading
+ * what it is entitled to (Rule #6). Three WhatsApp routes were reading
  * `store.capabilities ?? []` inline for exactly that reason, which made them a
  * second, divergent reader of the field — they skipped the default merge, so
  * they and `getStoreCapabilities` could disagree about the same store.

package/dist/features/auth/permissions/constants.js

@@ -390,6 +390,7 @@ const STORE_CAPABILITY_MAP = {
     lower_commission_rate: true,
     early_access_features: true,
     advanced_analytics: true,
+    whatsapp_catalog_sync: true,
 };
 export const ALL_STORE_CAPABILITIES = Object.keys(STORE_CAPABILITY_MAP);
 /** Narrow an untrusted string to a real capability. */
@@ -441,7 +442,7 @@ export function hasCapability(capabilities, required) {
  *
  * 🛑 The PURE half of `getStoreCapabilities`, extracted so a caller that
  * already holds the store document does not pay a second Firestore read to ask
- * what it is entitled to (Rule #6). Several routes were reading
+ * what it is entitled to (Rule #6). Three WhatsApp routes were reading
  * `store.capabilities ?? []` inline for exactly that reason, which made them a
  * second, divergent reader of the field — they skipped the default merge, so
  * they and `getStoreCapabilities` could disagree about the same store.

package/dist/features/blog/schemas/blog-form.d.ts

@@ -48,6 +48,7 @@ export declare const blogDraftSchema: z.ZodObject<{
     authorName: z.ZodString;
     isFeatured: z.ZodBoolean;
     isPinned: z.ZodBoolean;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     status: "published" | "draft" | "archived";
     title: string;
@@ -64,6 +65,7 @@ export declare const blogDraftSchema: z.ZodObject<{
     isPinned: boolean;
     metaTitle: string;
     metaDescription: string;
+    couponIds?: string[] | undefined;
 }, {
     status: "published" | "draft" | "archived";
     title: string;
@@ -80,4 +82,5 @@ export declare const blogDraftSchema: z.ZodObject<{
     isPinned: boolean;
     metaTitle: string;
     metaDescription: string;
+    couponIds?: string[] | undefined;
 }>;

package/dist/features/blog/schemas/blog-form.js

@@ -20,6 +20,7 @@
 import { z } from "zod";
 import { annotate } from "../../shell/field-ui-meta.js";
 import { blogPostCategorySchema } from "./index.js";
+import { attachedCouponIdsSchema } from "../../promotions/schemas/attached-coupons.js";
 /**
  * The blog form's own schema. Distinct from `blogPostSchema` (blog/schemas),
  * which requires an `id` this draft cannot have before its first save and
@@ -98,4 +99,17 @@ export const blogDraftSchema = z.object({
     authorName: annotate(z.string(), { section: "publish", order: 3, row: "pair" }),
     isFeatured: annotate(z.boolean(), { section: "publish", order: 4, row: "quarter" }),
     isPinned: annotate(z.boolean(), { section: "publish", order: 5, row: "quarter" }),
+    /*
+     * 🛑 Declared here even though the picker enforces the cap in the UI, and
+     * this file's own header says why: `z.object()` STRIPS unknown keys, so a
+     * field missing from this schema is silently dropped on every save — the
+     * form would show the coupons, accept the edit, and persist nothing. Same
+     * shape as the grouped-listings PATCH in Root Cause #76(b).
+     *
+     * The cap is `attachedCouponIdsSchema`'s, imported rather than re-stated, so
+     * the form and the route cannot disagree about what "too many" means.
+     */
+    couponIds: annotate(attachedCouponIdsSchema, {
+        section: "publish", order: 6, row: "full", kind: "list",
+    }),
 });

package/dist/features/blog/schemas/firestore.d.ts

@@ -28,6 +28,22 @@ export interface BlogPostDocument extends BaseDocument {
     youtubeId?: string;
     category: BlogPostCategory;
     tags: string[];
+    /**
+     * PROMOTIONAL coupons shown below the article for a reader to copy.
+     *
+     * Mirrors `EventDocument.couponIds` exactly — same name, same shape, same
+     * `<AttachedCouponsSection>` renderer, same `getAttachedCoupons` resolver.
+     * That symmetry is the point: "attach coupons to content" is one feature
+     * with two hosts, not two features that happen to look alike.
+     *
+     * 🛑 OPTIONAL, unlike `isPinned` above, and for a reason worth keeping
+     * straight: `isPinned` had to be required because it is an `orderBy` field
+     * and Firestore excludes a document that lacks one (Root Cause #100).
+     * `couponIds` is never sorted or filtered on — it is read only after a post
+     * has already been fetched by slug — so an absent field costs nothing and
+     * needs no backfill across the 21 existing posts.
+     */
+    couponIds?: string[];
     isFeatured: boolean;
     /**
      * Keeps the post at the top of the blog index and the homepage
@@ -90,6 +106,7 @@ export declare const BLOG_POST_FIELDS: {
     readonly YOUTUBE_ID: "youtubeId";
     readonly CATEGORY: "category";
     readonly TAGS: "tags";
+    readonly COUPON_IDS: "couponIds";
     readonly IS_FEATURED: "isFeatured";
     readonly IS_PINNED: "isPinned";
     readonly STATUS: "status";

package/dist/features/blog/schemas/firestore.js

@@ -50,6 +50,7 @@ export const BLOG_POST_FIELDS = {
     YOUTUBE_ID: "youtubeId",
     CATEGORY: "category",
     TAGS: "tags",
+    COUPON_IDS: "couponIds",
     IS_FEATURED: "isFeatured",
     IS_PINNED: "isPinned",
     STATUS: "status",

package/dist/features/blog/schemas/index.d.ts

@@ -98,6 +98,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     }>, "many">>;
     category: z.ZodString;
     tags: z.ZodArray<z.ZodString, "many">;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
     isFeatured: z.ZodBoolean;
     isPinned: z.ZodBoolean;
     status: z.ZodEnum<["draft", "published", "archived"]>;
@@ -139,6 +140,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     publishedAt?: string | Date | z.objectOutputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    couponIds?: string[] | undefined;
     coverImage?: {
         type: "video" | "image" | "file";
         url: string;
@@ -193,6 +195,7 @@ export declare const blogPostFirestoreSchema: z.ZodObject<{
     publishedAt?: string | Date | z.objectInputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
+    couponIds?: string[] | undefined;
     coverImage?: {
         type: "video" | "image" | "file";
         url: string;
@@ -345,6 +348,7 @@ export declare const blogPostSchema: z.ZodObject<{
     }>, "many">>>;
     category: z.ZodEnum<["news", "tips", "guides", "updates", "community"]>;
     tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    couponIds: z.ZodType<string[] | undefined, z.ZodTypeDef, string[] | undefined>;
     isFeatured: z.ZodOptional<z.ZodBoolean>;
     isPinned: z.ZodOptional<z.ZodBoolean>;
     status: z.ZodEnum<["draft", "published", "archived"]>;
@@ -400,6 +404,7 @@ export declare const blogPostSchema: z.ZodObject<{
     publishedAt?: string | undefined;
     views?: number | undefined;
     tags?: string[] | undefined;
+    couponIds?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     authorId?: string | undefined;
@@ -421,6 +426,7 @@ export declare const blogPostSchema: z.ZodObject<{
     publishedAt?: string | undefined;
     views?: number | undefined;
     tags?: string[] | undefined;
+    couponIds?: string[] | undefined;
     isFeatured?: boolean | undefined;
     excerpt?: string | undefined;
     coverImage?: string | {

package/dist/features/blog/schemas/index.js

@@ -3,6 +3,7 @@ import { z } from "zod";
 import { mediaUrlSchema } from "../../../validation/schemas.js";
 import { mediaFieldSchema } from "../../media/types/index.js";
 import { auditTimestampsShape, firestoreDateSchema } from "../../../schemas/firestore-helpers.js";
+import { attachedCouponIdsSchema } from "../../promotions/schemas/attached-coupons.js";
 // ─── Firestore document schema (W2) ───────────────────────────────────────────
 // Mirrors BlogPostDocument in ./firestore.ts. Registered into SCHEMAS.firestore.blogPosts.
 export const blogPostStatusEnumSchema = z.enum(["draft", "published", "archived"]);
@@ -17,6 +18,7 @@ export const blogPostFirestoreSchema = z.object({
     additionalImages: z.array(mediaFieldSchema).optional(),
     category: z.string(),
     tags: z.array(z.string()),
+    couponIds: attachedCouponIdsSchema,
     isFeatured: z.boolean(),
     isPinned: z.boolean(),
     status: blogPostStatusEnumSchema,
@@ -72,6 +74,7 @@ export const blogPostSchema = z.object({
     additionalImages: z.array(mediaFieldSchema).max(5).optional().default([]),
     category: blogPostCategorySchema,
     tags: z.array(z.string()).optional(),
+    couponIds: attachedCouponIdsSchema,
     isFeatured: z.boolean().optional(),
     isPinned: z.boolean().optional(),
     status: blogPostStatusSchema,

package/dist/features/blog/types/index.d.ts

@@ -14,6 +14,8 @@ export interface BlogPost {
     youtubeId?: string;
     category: BlogPostCategory;
     tags?: string[];
+    /** Promotional coupons shown below the article — see `BlogPostDocument.couponIds`. */
+    couponIds?: string[];
     isFeatured?: boolean;
     /** Keeps the post above newer ones on the blog index and homepage. */
     isPinned?: boolean;

package/dist/features/cart/components/CartPriceBreakdown.d.ts

@@ -22,6 +22,7 @@ export interface CartPriceBreakdownStore {
     subtotal: number;
     shippingFee: number;
     codHandlingFee: number;
+    whatsappNotifyFee: number;
     giftWrapFee: number;
     shipmentProtectionFee: number;
     saleProtectionFee: number;
@@ -44,6 +45,7 @@ export interface CartPriceBreakdownData {
     subtotal: number;
     shippingFee: number;
     codHandlingFee: number;
+    whatsappNotifyFee: number;
     giftWrapFee: number;
     shipmentProtectionFee: number;
     saleProtectionFee: number;

package/dist/features/cart/components/CartPriceBreakdown.js

@@ -40,7 +40,7 @@ export function CartPriceBreakdown({ preview, itemCount, currency = "INR", unava
     const subtotalLabel = itemCount !== undefined
         ? `Subtotal (${itemCount} item${itemCount !== 1 ? "s" : ""}${storeCount > 1 ? `, ${storeCount} stores` : ""})`
         : "Subtotal";
-    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee), derivation: derivations?.codHandlingFee })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.emiSurcharge > 0 && (_jsx(Line, { label: "EMI surcharge", amount: money(preview.emiSurcharge), derivation: derivations?.emiSurcharge })), preview.sharedPurchaseFee > 0 && (_jsx(Line, { label: withStoreCount("Split delivery", countCharged((s) => s.sharedPurchaseFee)), amount: money(preview.sharedPurchaseFee) })), preview.platformFee > 0 && (_jsx(Line, { label: "Platform fee", amount: money(preview.platformFee), derivation: derivations?.platformFee })), preview.gstOnFee > 0 && (_jsx(Line, { label: "GST on platform fee", amount: money(preview.gstOnFee), derivation: derivations?.gstOnFee })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: preview.pointsApplied <= 0 }) }), preview.pointsApplied > 0 && (_jsxs(_Fragment, { children: [_jsx(Line, { label: `Points applied (${preview.pointsApplied.toLocaleString("en-IN")} pts)`, amount: `−${money(preview.pointsApplied)}`, tone: "success" }), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Amount due", amount: money(preview.amountDue), tone: "primary", strong: true }) })] })), preview.pointsApplied > 0 && preview.pointsBalance > preview.pointsApplied && (_jsxs(Text, { size: "xs", color: "muted", children: [(preview.pointsBalance - preview.pointsApplied).toLocaleString("en-IN"), " points stay in your balance \u2014 up to half of an order can be paid with points."] })), preview.pointsApplied === 0 && preview.pointsBalance > 0 && (_jsx(Text, { size: "xs", color: "muted", children: preview.stores.some((s) => s.acceptsPoints)
+    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee), derivation: derivations?.codHandlingFee })), preview.whatsappNotifyFee > 0 && (_jsx(Line, { label: withStoreCount("WhatsApp updates", countCharged((s) => s.whatsappNotifyFee)), amount: money(preview.whatsappNotifyFee) })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.emiSurcharge > 0 && (_jsx(Line, { label: "EMI surcharge", amount: money(preview.emiSurcharge), derivation: derivations?.emiSurcharge })), preview.sharedPurchaseFee > 0 && (_jsx(Line, { label: withStoreCount("Split delivery", countCharged((s) => s.sharedPurchaseFee)), amount: money(preview.sharedPurchaseFee) })), preview.platformFee > 0 && (_jsx(Line, { label: "Platform fee", amount: money(preview.platformFee), derivation: derivations?.platformFee })), preview.gstOnFee > 0 && (_jsx(Line, { label: "GST on platform fee", amount: money(preview.gstOnFee), derivation: derivations?.gstOnFee })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: preview.pointsApplied <= 0 }) }), preview.pointsApplied > 0 && (_jsxs(_Fragment, { children: [_jsx(Line, { label: `Points applied (${preview.pointsApplied.toLocaleString("en-IN")} pts)`, amount: `−${money(preview.pointsApplied)}`, tone: "success" }), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Amount due", amount: money(preview.amountDue), tone: "primary", strong: true }) })] })), preview.pointsApplied > 0 && preview.pointsBalance > preview.pointsApplied && (_jsxs(Text, { size: "xs", color: "muted", children: [(preview.pointsBalance - preview.pointsApplied).toLocaleString("en-IN"), " points stay in your balance \u2014 up to half of an order can be paid with points."] })), preview.pointsApplied === 0 && preview.pointsBalance > 0 && (_jsx(Text, { size: "xs", color: "muted", children: preview.stores.some((s) => s.acceptsPoints)
                     ? "Your points could not be applied to this order."
                     : storeCount > 1
                         ? "None of these sellers accepts points."

package/dist/features/cart/components/StoreAddonsPicker.d.ts

@@ -3,12 +3,13 @@ import React from "react";
  * Paid add-on checkboxes for ONE store.
  *
  * Add-on fees are billed per order group (= per store), so they are chosen per
- * store: ticking "gift wrap" for one seller must not bill it for every
+ * store: ticking "WhatsApp updates" for one seller must not bill it for every
  * seller in the cart. Rendered inside that store's card in the cart, and inside
  * that store's row of the checkout summary — Buy Now skips the cart entirely,
  * so both surfaces have to be able to edit them.
  */
 export interface StoreAddonsValue {
+    whatsappNotifyAddon?: boolean;
     giftWrapAddon?: boolean;
     giftWrapMessage?: string;
     shipmentProtectionAddon?: boolean;
@@ -16,6 +17,8 @@ export interface StoreAddonsValue {
 }
 /** The subset of `siteSettings.commissions` that gates and prices the add-ons. */
 export interface StoreAddonsRates {
+    whatsappNotifyFeeEnabled?: boolean;
+    whatsappNotifyFee?: number;
     giftWrapFeeEnabled?: boolean;
     giftWrapFee?: number;
     shipmentProtectionFeeEnabled?: boolean;
@@ -56,7 +59,7 @@ export interface StoreProtectionContext {
  * showing an explanatory line instead.
  *
  * 🛑 Deliberately asks only about TIER 1. A seller who supports neither
- * protection still has gift wrap, and a store whose only
+ * protection still has WhatsApp updates and gift wrap, and a store whose only
  * enabled add-ons are protections it declined must still render the picker —
  * because that is where the risk notice lives, and a hidden notice is the
  * tri-state failure in § `StoreProtectionContext`.

package/dist/features/cart/components/StoreAddonsPicker.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Gift, ShieldAlert, ShieldCheck, ShieldOff } from "lucide-react";
+import { Gift, MessageCircle, ShieldAlert, ShieldCheck, ShieldOff } from "lucide-react";
 import { Div, Row, Stack, Text } from "../../../ui/index.js";
 import { Disclaimer } from "../../../ui/components/Disclaimer.js";
 import { IconBox } from "../../../ui/components/IconBox.js";
@@ -16,14 +16,15 @@ import { formatCurrency } from "../../../utils/number.formatter.js";
  * showing an explanatory line instead.
  *
  * 🛑 Deliberately asks only about TIER 1. A seller who supports neither
- * protection still has gift wrap, and a store whose only
+ * protection still has WhatsApp updates and gift wrap, and a store whose only
  * enabled add-ons are protections it declined must still render the picker —
  * because that is where the risk notice lives, and a hidden notice is the
  * tri-state failure in § `StoreProtectionContext`.
  */
 export function hasAnyStoreAddon(rates) {
     return (!!rates &&
-        !!(rates.giftWrapFeeEnabled ||
+        !!(rates.whatsappNotifyFeeEnabled ||
+            rates.giftWrapFeeEnabled ||
             rates.shipmentProtectionFeeEnabled ||
             rates.saleProtectionFeeEnabled));
 }
@@ -51,7 +52,7 @@ export function StoreAddonsPicker({ storeId, storeSubtotal, value, onChange, rat
     const shippingDeclined = !!rates.shipmentProtectionFeeEnabled && !protection?.supportsShippingProtection;
     const saleDeclined = !!rates.saleProtectionFeeEnabled && !protection?.supportsSaleProtection;
     const saleBlockedByFinalSale = !!rates.saleProtectionFeeEnabled && !!protection?.supportsSaleProtection && !!protection?.hasFinalSaleItem;
-    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [disabled && disabledReason && (_jsx(Text, { size: "xs", color: "muted", children: disabledReason })), rates.giftWrapFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(Gift, { size: 14 }) }), _jsxs(Stack, { gap: "xs", className: "flex-1 min-w-0", children: [_jsx(FieldCheckbox, { name: `giftWrapAddon-${storeId}`, label: `Gift wrap (+${money(rates.giftWrapFee ?? 49)})`, checked: !!value.giftWrapAddon, onChange: (checked) => set({ giftWrapAddon: checked }), disabled: disabled }), showGiftMessage && value.giftWrapAddon && (_jsx(FieldTextarea, { name: `giftWrapMessage-${storeId}`, label: "Gift message (optional)", value: value.giftWrapMessage ?? "", onChange: (next) => set({ giftWrapMessage: next.slice(0, 500) }), rows: 2, maxLength: 500, showCharCount: true, placeholder: "Add a note for the recipient\u2026", disabled: disabled }))] })] })), shippingOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldCheck, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `shipmentProtectionAddon-${storeId}`, label: `Shipment protection — loss or damage in transit (+${money(protectionFee)})`, checked: !!value.shipmentProtectionAddon, onChange: (checked) => set({ shipmentProtectionAddon: checked }), disabled: disabled }) })] })), saleOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldAlert, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `saleProtectionAddon-${storeId}`, label: `Sale protection — item not as described (+${money(saleFee)})`, checked: !!value.saleProtectionAddon, onChange: (checked) => set({ saleProtectionAddon: checked }), disabled: disabled }) })] })), (shippingDeclined || saleDeclined) && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "muted", children: _jsx(ShieldOff, { size: 14 }) }), _jsx(Text, { size: "xs", color: "muted", className: "flex-1 min-w-0", children: shippingDeclined && saleDeclined
+    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [disabled && disabledReason && (_jsx(Text, { size: "xs", color: "muted", children: disabledReason })), rates.whatsappNotifyFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(MessageCircle, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `whatsappNotifyAddon-${storeId}`, label: `WhatsApp order updates (+${money(rates.whatsappNotifyFee ?? 10)})`, checked: !!value.whatsappNotifyAddon, onChange: (checked) => set({ whatsappNotifyAddon: checked }), disabled: disabled }) })] })), rates.giftWrapFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(Gift, { size: 14 }) }), _jsxs(Stack, { gap: "xs", className: "flex-1 min-w-0", children: [_jsx(FieldCheckbox, { name: `giftWrapAddon-${storeId}`, label: `Gift wrap (+${money(rates.giftWrapFee ?? 49)})`, checked: !!value.giftWrapAddon, onChange: (checked) => set({ giftWrapAddon: checked }), disabled: disabled }), showGiftMessage && value.giftWrapAddon && (_jsx(FieldTextarea, { name: `giftWrapMessage-${storeId}`, label: "Gift message (optional)", value: value.giftWrapMessage ?? "", onChange: (next) => set({ giftWrapMessage: next.slice(0, 500) }), rows: 2, maxLength: 500, showCharCount: true, placeholder: "Add a note for the recipient\u2026", disabled: disabled }))] })] })), shippingOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldCheck, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `shipmentProtectionAddon-${storeId}`, label: `Shipment protection — loss or damage in transit (+${money(protectionFee)})`, checked: !!value.shipmentProtectionAddon, onChange: (checked) => set({ shipmentProtectionAddon: checked }), disabled: disabled }) })] })), saleOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldAlert, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `saleProtectionAddon-${storeId}`, label: `Sale protection — item not as described (+${money(saleFee)})`, checked: !!value.saleProtectionAddon, onChange: (checked) => set({ saleProtectionAddon: checked }), disabled: disabled }) })] })), (shippingDeclined || saleDeclined) && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "muted", children: _jsx(ShieldOff, { size: 14 }) }), _jsx(Text, { size: "xs", color: "muted", className: "flex-1 min-w-0", children: shippingDeclined && saleDeclined
                             ? "This seller does not offer shipment or sale protection."
                             : shippingDeclined
                                 ? "This seller does not offer shipment protection."

package/dist/features/cart/repository/cart.repository.js

@@ -577,7 +577,8 @@ export class CartRepository extends BaseRepository {
      */
     async setStoreAddons(userId, storeId, addons) {
         const isEmpty = !addons ||
-            (!addons.giftWrapAddon &&
+            (!addons.whatsappNotifyAddon &&
+                !addons.giftWrapAddon &&
                 !addons.shipmentProtectionAddon &&
                 !addons.saleProtectionAddon);
         await this.db

package/dist/features/cart/schemas/firestore.d.ts

@@ -272,11 +272,12 @@ export interface CartAppliedCoupon {
  *
  * Add-on fees have always been billed per order group (= per store) by
  * `createOrderForGroup` / `previewCheckoutPricing`, but the selection used to be
- * a single cart-wide boolean — so one tick on "gift wrap" quietly billed
+ * a single cart-wide boolean — so one tick on "WhatsApp updates" quietly billed
  * ₹10 × every store in the cart, with no way to opt in for just one seller.
  * Keying the selection by storeId makes the choice match the billing.
  */
 export interface CartStoreAddons {
+    whatsappNotifyAddon?: boolean;
     giftWrapAddon?: boolean;
     giftWrapMessage?: string;
     /** Loss or damage IN TRANSIT. */

package/dist/features/checkout/actions/checkout-value-otp-actions.d.ts

@@ -6,17 +6,12 @@
  * purpose from `checkout-actions.ts`'s third-party shipping consent OTP —
  * same crypto primitives, separate Firestore namespace and copy.
  */
+export type CheckoutValueOtpChannel = "email" | "whatsapp";
 /**
- * Email is the only checkout-OTP channel. WhatsApp was the other arm until
- * 2026-10-20, when the Cloud API integration was removed — see
- * `features/orders/utils/payment-proof-message.ts` for why the `wa.me`
- * links survived and the API did not. Kept as a single-member union rather
- * than deleted so the parameter stays self-documenting and a second channel
- * has an obvious seam.
- */
-export type CheckoutValueOtpChannel = "email";
-/**
- * Sends a checkout-value OTP by email.
+ * Sends a checkout-value OTP either by email (default) or WhatsApp
+ * (opt-in — the buyer must explicitly choose it in the UI). WhatsApp phone
+ * is always resolved server-side from the selected shipping address —
+ * never trust a client-supplied phone number.
  *
  * If the chosen channel (and, for email, its skip-worthy fallback) is
  * currently circuit-broken or unconfigured, the OTP gate is treated as