@mohasinac/appkit 4.63.3 → 4.63.5

package/dist/features/promotions/schemas/attached-coupons.js

@@ -0,0 +1,66 @@
+import { z } from "zod";
+import { ATTACHED_COUPON_MAX } from "../constants/attached-coupons.js";
+/**
+ * The write shape for any `couponIds`-style field — one definition, imported
+ * by the event schema, the blog schema and both admin API routes.
+ *
+ * 🛑 ONE definition on purpose. Four hand-written `z.array(z.string())`s would
+ * be four chances for the cap to drift, and a cap enforced on three of four
+ * write paths is not a cap — the fourth is simply the way in. This is the same
+ * failure as the ten hand-maintained copies of the `ListingType` union in
+ * Root Cause #61.
+ *
+ * `.max()` carries a message because this one is reachable by a human in an
+ * admin form, and "Too big: expected array to have <=10 items" is not an
+ * instruction.
+ */
+/*
+ * 🛑 THE EXPLICIT ANNOTATION IS LOAD-BEARING — do not delete it as redundant.
+ *
+ * This repo runs TWO zod majors: appkit is pinned to 3.25.76 (peer `^3.24.0`)
+ * and the consumer app resolves 4.4.3. Inferred, this export's `.d.ts` reads
+ * `z.ZodOptional<z.ZodArray<z.ZodString, "many">>` — and zod 4's `ZodArray`
+ * takes ONE type parameter, not two. The consumer cannot resolve that shape,
+ * the inference collapses to `unknown`, and four admin routes fail with
+ * `Type 'unknown' is not assignable to type 'string[] | undefined'`.
+ *
+ * `z.ZodType<T>` is spelled the same in both majors and `z.infer` yields `T`
+ * from it either way, so the emitted declaration stays resolvable on both
+ * sides of the boundary.
+ *
+ * The real defect is the version split — appkit's declared peer range and the
+ * app's installed major disagree — and aligning them is a migration, not a
+ * drive-by. Until that happens, any appkit zod schema a consumer infers from
+ * needs this treatment.
+ */
+export const attachedCouponIdsSchema = z
+    .array(z.string().min(1))
+    .max(ATTACHED_COUPON_MAX, `At most ${ATTACHED_COUPON_MAX} coupons can be attached.`)
+    .optional();
+/**
+ * Dedupe and drop blanks. Still ONE definition — it moved out of the schema,
+ * it did not become four copies.
+ *
+ * 🛑 WHY IT IS NOT A `.transform()` ANY MORE, which is where it started:
+ *
+ * `.transform()` wraps the schema in `z.ZodEffects`, and **`ZodEffects` is a
+ * zod 3 type that does not exist in zod 4**. This repo runs both — appkit is
+ * pinned to zod 3.25.76 (peer `^3.24.0`) while the consumer app resolves zod
+ * 4.4.3 — so appkit's emitted `.d.ts` referenced a type the consumer's zod
+ * cannot resolve, the inference collapsed to `unknown`, and four admin routes
+ * failed to typecheck with `Type 'unknown' is not assignable to type
+ * 'string[] | undefined'`.
+ *
+ * The declared peer range is the thing that is actually wrong here, and
+ * aligning the two majors is a real migration rather than a drive-by. Until
+ * then: no schema crossing the package boundary may use `.transform()`,
+ * `.refine()` or `.preprocess()`, because all three produce `ZodEffects`.
+ *
+ * Callers apply this after parsing, which is the same boundary the dedupe
+ * always ran at — the route, not the client.
+ */
+export function dedupeAttachedCouponIds(ids) {
+    if (!ids)
+        return undefined;
+    return Array.from(new Set(ids.filter(Boolean)));
+}

package/dist/features/search/action-index/settings-entries.js

@@ -169,6 +169,15 @@ export const SITE_SETTINGS_ENTRIES = [
         tab: "notifications",
         kind: "toggle",
     },
+    {
+        slug: "whatsapp-notifications",
+        anchored: true,
+        label: "WhatsApp notifications",
+        description: "Send order updates over WhatsApp.",
+        keywords: ["whatsapp", "order updates", "meta"],
+        tab: "notifications",
+        kind: "toggle",
+    },
     {
         slug: "daily-digest",
         anchored: true,

package/dist/features/store-extensions/repository/store-extensions.repositories.d.ts

@@ -14,7 +14,7 @@
  */
 import { BaseRepository } from "../../../providers/db-firebase";
 import type { DocumentSnapshot } from "firebase-admin/firestore";
-import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument } from "../schemas/firestore";
+import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument, type StoreWhatsAppConfigDocument } from "../schemas/firestore";
 export declare class PayoutMethodsRepository extends BaseRepository<PayoutMethodDocument> {
     /**
      * Bank/UPI details, encrypted at rest by BaseRepository's write hooks.
@@ -103,6 +103,10 @@ export declare class ItemRequestsRepository extends BaseRepository<ItemRequestDo
      */
     appendReply(id: string, reply: ItemRequestReply): Promise<void>;
 }
+export declare class StoreWhatsAppConfigRepository extends BaseRepository<StoreWhatsAppConfigDocument> {
+    constructor();
+    getByStore(storeId: string): Promise<StoreWhatsAppConfigDocument | null>;
+}
 export declare class StoreGoogleConfigRepository extends BaseRepository<StoreGoogleConfigDocument> {
     constructor();
     getByStore(storeId: string): Promise<StoreGoogleConfigDocument | null>;
@@ -116,4 +120,5 @@ export declare const listingTemplatesRepository: ListingTemplatesRepository;
 export declare const moderationQueueRepository: ModerationQueueRepository;
 export declare const reportsRepository: ReportsRepository;
 export declare const itemRequestsRepository: ItemRequestsRepository;
+export declare const storeWhatsAppConfigRepository: StoreWhatsAppConfigRepository;
 export declare const storeGoogleConfigRepository: StoreGoogleConfigRepository;

package/dist/features/store-extensions/repository/store-extensions.repositories.js

@@ -15,7 +15,7 @@
 import { BaseRepository } from "../../../providers/db-firebase/index.js";
 import { arrayUnion, increment } from "../../../contracts/field-ops.js";
 import { decryptPiiFields } from "../../../security/pii-encrypt.js";
-import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, } from "../schemas/firestore.js";
+import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, STORE_WHATSAPP_CONFIG_COLLECTION, } from "../schemas/firestore.js";
 export class PayoutMethodsRepository extends BaseRepository {
     constructor() {
         super(PAYOUT_METHODS_COLLECTION);
@@ -149,6 +149,14 @@ export class ItemRequestsRepository extends BaseRepository {
         });
     }
 }
+export class StoreWhatsAppConfigRepository extends BaseRepository {
+    constructor() {
+        super(STORE_WHATSAPP_CONFIG_COLLECTION);
+    }
+    async getByStore(storeId) {
+        return this.findOneBy("storeId", storeId);
+    }
+}
 export class StoreGoogleConfigRepository extends BaseRepository {
     constructor() {
         super(STORE_GOOGLE_CONFIG_COLLECTION);
@@ -166,4 +174,5 @@ export const listingTemplatesRepository = new ListingTemplatesRepository();
 export const moderationQueueRepository = new ModerationQueueRepository();
 export const reportsRepository = new ReportsRepository();
 export const itemRequestsRepository = new ItemRequestsRepository();
+export const storeWhatsAppConfigRepository = new StoreWhatsAppConfigRepository();
 export const storeGoogleConfigRepository = new StoreGoogleConfigRepository();

package/dist/features/store-extensions/schemas/firestore.d.ts

@@ -18,6 +18,7 @@ import type { BaseDocument } from "../../../_internal/shared/types/base-document
  *   7. moderationQueue       — video / media moderation queue items
  *   8. reports               — buyer-submitted reports against listings/stores
  *   9. itemRequests          — community item request bulletin board
+ *  10. storeWhatsAppConfig   — per-store WhatsApp business catalogue + auto-replies
  *  11. storeGoogleConfig     — per-store Google Business reviews integration
  */
 export type PayoutMethodType = "upi" | "bank" | "card" | "other";
@@ -88,7 +89,7 @@ export interface AnalyticsAlertDocument extends BaseDocument {
     threshold: number;
     windowHours: number;
     isActive: boolean;
-    notifyChannels: Array<"in-app" | "email">;
+    notifyChannels: Array<"in-app" | "email" | "whatsapp">;
     /**
      * When this alert last fired.
      *
@@ -220,6 +221,21 @@ export interface ItemRequestDocument extends BaseDocument {
 export declare const ITEM_REQUESTS_COLLECTION: "itemRequests";
 export declare const ITEM_REQUEST_INDEXED_FIELDS: readonly ["opUserId", "status", "category", "createdAt"];
 export declare const DEFAULT_ITEM_REQUEST_DATA: Partial<ItemRequestDocument>;
+export interface StoreWhatsAppConfigDocument extends BaseDocument {
+    storeId: string;
+    isConnected: boolean;
+    isPaid: boolean;
+    phoneNumber?: string;
+    businessProfileName?: string;
+    catalogUrl?: string;
+    autoReply?: string;
+    welcomeMessage?: string;
+    /** Status of pending WhatsApp Business onboarding (Meta Cloud API). */
+    onboardingStatus?: "pending" | "approved" | "rejected";
+}
+export declare const STORE_WHATSAPP_CONFIG_COLLECTION: "storeWhatsAppConfig";
+export declare const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS: readonly ["storeId", "isConnected", "isPaid"];
+export declare const DEFAULT_STORE_WHATSAPP_CONFIG_DATA: Partial<StoreWhatsAppConfigDocument>;
 export interface StoreGoogleConfigDocument extends BaseDocument {
     storeId: string;
     isConnected: boolean;

package/dist/features/store-extensions/schemas/firestore.js

@@ -182,6 +182,16 @@ export const DEFAULT_ITEM_REQUEST_DATA = {
     replies: [],
     replyCount: 0,
 };
+export const STORE_WHATSAPP_CONFIG_COLLECTION = "storeWhatsAppConfig";
+export const STORE_WHATSAPP_CONFIG_INDEXED_FIELDS = [
+    "storeId",
+    "isConnected",
+    "isPaid",
+];
+export const DEFAULT_STORE_WHATSAPP_CONFIG_DATA = {
+    isConnected: false,
+    isPaid: false,
+};
 export const STORE_GOOGLE_CONFIG_COLLECTION = "storeGoogleConfig";
 export const STORE_GOOGLE_CONFIG_INDEXED_FIELDS = [
     "storeId",

package/dist/features/stores/components/StoreCapabilitiesGuideView.js

@@ -45,6 +45,7 @@ const CAPABILITY_GROUPS = [
             { cap: "lower_commission_rate", unlocks: "Negotiated reduced platform fee. Requires a signed agreement and minimum volume.", defaultOn: false },
             { cap: "early_access_features", unlocks: "Access to beta features before they are publicly available.", defaultOn: false },
             { cap: "advanced_analytics", unlocks: "Cohort retention, basket analysis, and top-buyer breakdown (beyond summary stats).", defaultOn: false },
+            { cap: "whatsapp_catalog_sync", unlocks: "Sync your store products to your WhatsApp Business Catalog automatically.", defaultOn: false },
         ],
     },
 ];

package/dist/features/stores/components/StoreGuideHubView.js

@@ -27,7 +27,7 @@ const GUIDE_CARDS = [
     {
         Icon: Settings,
         title: "Settings",
-        description: "Store profile, shipping config, return policy, and vacation mode.",
+        description: "Store profile, shipping config, return policy, vacation mode, and WhatsApp integration.",
         href: String(ROUTES.STORE.GUIDE_SETTINGS),
     },
     {

package/dist/features/stores/components/StoreSettingsGuideView.js

@@ -26,7 +26,11 @@ function ReturnPolicySection() {
 function VacationModeSection() {
     return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "What vacation mode does" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsx(Li, { className: LIST_DISC, children: "All your published listings are hidden from search results and browse pages." }), _jsx(Li, { className: LIST_DISC, children: "Your store profile page shows a \"On Vacation\" banner." }), _jsx(Li, { className: LIST_DISC, children: "Buyers cannot add your items to cart or checkout while on vacation." }), _jsx(Li, { className: LIST_DISC, children: "Existing orders that were placed before vacation mode must still be fulfilled." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "How to enable" }), _jsx(Text, { className: "leading-relaxed", children: "Go to your Store Dashboard \u2192 Settings \u2192 Storefront tab. Toggle \"Vacation mode\" on. Your listings re-appear instantly when you toggle it off." })] }), _jsx(Alert, { variant: "warning", title: "Ongoing orders are not paused", children: "Enabling vacation mode does not pause or cancel any existing orders. You are still responsible for fulfilling orders placed before vacation mode was enabled." })] }));
 }
-// -- Section 5: Visibility states ---------------------------------------------
+// -- Section 5: WhatsApp integration ------------------------------------------
+function WhatsAppSection() {
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Text, { className: "leading-relaxed", children: ["The WhatsApp integration allows your customers to contact you via WhatsApp from your store profile and lets you sync your product catalog to your WhatsApp Business Catalog (requires the", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "whatsapp_catalog_sync" }), " capability)."] }), _jsxs(Text, { className: "leading-relaxed", children: ["Full settings and the catalog sync toggle are at", " ", _jsx(TextLink, { variant: "bare", href: String(ROUTES.STORE.WHATSAPP), className: "underline text-[var(--appkit-color-primary)] hover:opacity-80", children: "Settings \u2192 WhatsApp" }), ". See the WhatsApp settings page for step-by-step setup instructions."] })] }));
+}
+// -- Section 6: Visibility states ---------------------------------------------
 function VisibilityStatesSection() {
     const STATES = [
         {
@@ -49,5 +53,5 @@ function VisibilityStatesSection() {
     return (_jsx(Stack, { gap: "3", children: STATES.map(({ state, note }) => (_jsxs(Row, { textSize: "sm", gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", weight: "semibold", children: state }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", children: note })] }, state))) }));
 }
 export function StoreSettingsGuideView(_props) {
-    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
+    return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Settings Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Store profile, shipping, returns, vacation mode, WhatsApp, and visibility." })] }), _jsx(GuideSection, { title: "1. Store profile", children: _jsx(StoreProfileSection, {}) }), _jsx(GuideSection, { title: "2. Shipping configuration", children: _jsx(ShippingSection, {}) }), _jsx(GuideSection, { title: "3. Return policy", children: _jsx(ReturnPolicySection, {}) }), _jsx(GuideSection, { title: "4. Vacation mode", children: _jsx(VacationModeSection, {}) }), _jsx(GuideSection, { title: "5. WhatsApp integration", children: _jsx(WhatsAppSection, {}) }), _jsx(GuideSection, { title: "6. Visibility states", children: _jsx(VisibilityStatesSection, {}) })] }));
 }

package/dist/features/stores/repository/store.repository.d.ts

@@ -4,7 +4,7 @@
  * Data access layer for the `stores` Firestore collection.
  * One store per seller; identified by storeSlug (used as document ID).
  */
-import { BaseRepository, type SieveModel, type FirebaseSieveResult } from "../../../providers/db-firebase";
+import { BaseRepository, type SieveModel, type FirebaseSieveResult, type DocumentSnapshot } from "../../../providers/db-firebase";
 import { StoreDocument } from "../schemas";
 import { type HistoryActor } from "../../../_internal/shared/history/index";
 import type { JsonValue } from "../../../schemas/types";
@@ -17,6 +17,28 @@ export interface StoreWriteContext {
 }
 export declare class StoreRepository extends BaseRepository<StoreDocument> {
     constructor();
+    protected mapDoc<D = StoreDocument>(snap: DocumentSnapshot): D;
+    /**
+     * LIST reads never carry the WhatsApp token — not even encrypted.
+     *
+     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
+     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
+     * `mapDoc` (it previously mapped documents itself and skipped every
+     * override), that decrypt would have put a plaintext Meta OAuth bearer token
+     * on a public listing — the exact shape of Root Cause #70.
+     *
+     * So the list path deliberately does NOT call `decryptSecrets`, and drops
+     * `accessToken` outright: a list has no legitimate use for it, and a value
+     * that is never in the payload cannot be leaked by a projection someone
+     * forgets to write.
+     *
+     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
+     * WhatsApp settings and catalog-sync routes keep working exactly as before.
+     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
+     * that CLAUDE.md explicitly defers; this closes the public-exposure half
+     * without touching the encryption round-trip at all.
+     */
+    update(id: string, data: Partial<StoreDocument>): Promise<StoreDocument>;
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.

package/dist/features/stores/repository/store.repository.js

@@ -16,6 +16,32 @@ export class StoreRepository extends BaseRepository {
     constructor() {
         super(STORE_COLLECTION);
     }
+    mapDoc(snap) {
+        return super.mapDoc(snap);
+    }
+    /**
+     * LIST reads never carry the WhatsApp token — not even encrypted.
+     *
+     * `mapDoc` above decrypts it, and `listStores(model, activeOnly)` backs the
+     * PUBLIC `/stores` page. Once `sieveQuery` started routing list rows through
+     * `mapDoc` (it previously mapped documents itself and skipped every
+     * override), that decrypt would have put a plaintext Meta OAuth bearer token
+     * on a public listing — the exact shape of Root Cause #70.
+     *
+     * So the list path deliberately does NOT call `decryptSecrets`, and drops
+     * `accessToken` outright: a list has no legitimate use for it, and a value
+     * that is never in the payload cannot be leaked by a projection someone
+     * forgets to write.
+     *
+     * Detail reads are unchanged — `findBySlug`/`findById` still decrypt, so the
+     * WhatsApp settings and catalog-sync routes keep working exactly as before.
+     * Removing the decrypt from `mapDoc` itself is a separate, riskier change
+     * that CLAUDE.md explicitly defers; this closes the public-exposure half
+     * without touching the encryption round-trip at all.
+     */
+    async update(id, data) {
+        return super.update(id, data);
+    }
     /**
      * Create a new store.
      * The document ID is set to storeSlug for easy URL-based lookups.
@@ -206,7 +232,9 @@ export class StoreRepository extends BaseRepository {
             options: { maxPageSize: win.maxPageSize(100) },
             fields: sieveFields,
             // Called DIRECTLY, not through `sieveQuery`, so the mapper has to be
-            // passed by hand. With `activeOnly` this is the public /stores listing.
+            // passed by hand — and it is the list mapper, never `mapDoc`. With
+            // `activeOnly` this is the public /stores listing; `mapDoc` decrypts the
+            // WhatsApp bearer token and a list has no use for it.
             mapDoc: (snap) => this.mapDocForList(snap),
         });
         const searched = win.finish(result);

package/dist/features/stores/schemas/firestore.d.ts

@@ -107,6 +107,19 @@ export interface StoreDocument extends BaseDocument {
     adminNotes?: string;
     /** Admin "verified store" badge — distinct from `status`/`isPublic`. */
     isVerified?: boolean;
+    /**
+     * Does this store subscribe to WhatsApp order notifications?
+     *
+     * A monthly add-on priced by the admin (`commissions.whatsappNotifyMonthlyFee`),
+     * not a per-order charge: the platform owns one WhatsApp number, so the cost
+     * is standing and borne by the seller who benefits, rather than a line item
+     * a buyer opts into per order.
+     *
+     * 🛑 Absent means NOT subscribed, and the gate fails closed on it. Defaulting
+     * a missing flag to `true` would message customers on behalf of every seller
+     * who never signed up, and bill the platform for each template.
+     */
+    whatsappNotifySubscribed?: boolean;
     /**
      * Paid at SHIPPING rather than at delivery.
      *
@@ -370,12 +383,9 @@ export interface StoreDocument extends BaseDocument {
  */
 export declare const STORE_TRACKED_FIELDS: readonly ["status", "isPublic", "isVerified", "isFeatured", "suspensionReason", "capabilities"];
 /**
- * PII on this document, for the `withHistory` scrub.
- *
- * `accessToken` stays listed although the WhatsApp integration that produced
- * one was removed 2026-10-20: a scrub list is cheap, and a future secret
- * reaching this document under that name should be scrubbed by default
- * rather than by someone remembering to add it.
+ * PII on this document, for `withHistory`'s scrub. `whatsappConfig.accessToken`
+ * is a live Meta credential; `mapDoc` decrypts it on EVERY read, so it is
+ * present in memory whenever a diff runs.
  */
 export declare const STORE_HISTORY_PII_FIELDS: readonly ["accessToken", "payoutDetails", "upiVpa", "accountNumber"];
 export type { StoreCapability } from "../../auth/permissions/constants";

package/dist/features/stores/schemas/firestore.js

@@ -33,12 +33,9 @@ export const STORE_TRACKED_FIELDS = [
     "capabilities",
 ];
 /**
- * PII on this document, for the `withHistory` scrub.
- *
- * `accessToken` stays listed although the WhatsApp integration that produced
- * one was removed 2026-10-20: a scrub list is cheap, and a future secret
- * reaching this document under that name should be scrubbed by default
- * rather than by someone remembering to add it.
+ * PII on this document, for `withHistory`'s scrub. `whatsappConfig.accessToken`
+ * is a live Meta credential; `mapDoc` decrypts it on EVERY read, so it is
+ * present in memory whenever a diff runs.
  */
 export const STORE_HISTORY_PII_FIELDS = [
     "accessToken",

package/dist/features/stores/schemas/index.d.ts

@@ -347,6 +347,60 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         defaultProviderId: string;
     }>>;
     emiEnabled: z.ZodOptional<z.ZodBoolean>;
+    whatsappConfig: z.ZodOptional<z.ZodObject<{
+        phoneNumber: z.ZodOptional<z.ZodString>;
+        wabaId: z.ZodOptional<z.ZodString>;
+        catalogId: z.ZodOptional<z.ZodString>;
+        accessToken: z.ZodOptional<z.ZodString>;
+        catalogSyncEnabled: z.ZodBoolean;
+        lastCatalogSyncAt: z.ZodOptional<z.ZodUnion<[z.ZodDate, z.ZodString, z.ZodObject<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough">>]>>;
+        lastSyncCount: z.ZodOptional<z.ZodNumber>;
+        lastSyncStatus: z.ZodOptional<z.ZodEnum<["success", "partial", "failed"]>>;
+        connected: z.ZodBoolean;
+        connectedAt: z.ZodOptional<z.ZodUnion<[z.ZodDate, z.ZodString, z.ZodObject<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough">>]>>;
+    }, "strip", z.ZodTypeAny, {
+        catalogSyncEnabled: boolean;
+        connected: boolean;
+        phoneNumber?: string | undefined;
+        accessToken?: string | undefined;
+        wabaId?: string | undefined;
+        catalogId?: string | undefined;
+        lastCatalogSyncAt?: string | Date | z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+        lastSyncCount?: number | undefined;
+        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
+        connectedAt?: string | Date | z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+    }, {
+        catalogSyncEnabled: boolean;
+        connected: boolean;
+        phoneNumber?: string | undefined;
+        accessToken?: string | undefined;
+        wabaId?: string | undefined;
+        catalogId?: string | undefined;
+        lastCatalogSyncAt?: string | Date | z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+        lastSyncCount?: number | undefined;
+        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
+        connectedAt?: string | Date | z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     status: "pending" | "active" | "rejected" | "suspended";
     id: string;
@@ -416,6 +470,22 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         maxReviews?: number | undefined;
         minRating?: number | undefined;
     } | undefined;
+    whatsappConfig?: {
+        catalogSyncEnabled: boolean;
+        connected: boolean;
+        phoneNumber?: string | undefined;
+        accessToken?: string | undefined;
+        wabaId?: string | undefined;
+        catalogId?: string | undefined;
+        lastCatalogSyncAt?: string | Date | z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+        lastSyncCount?: number | undefined;
+        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
+        connectedAt?: string | Date | z.objectOutputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+    } | undefined;
 }, {
     status: "pending" | "active" | "rejected" | "suspended";
     id: string;
@@ -485,6 +555,22 @@ export declare const storeFirestoreSchema: z.ZodObject<{
         maxReviews?: number | undefined;
         minRating?: number | undefined;
     } | undefined;
+    whatsappConfig?: {
+        catalogSyncEnabled: boolean;
+        connected: boolean;
+        phoneNumber?: string | undefined;
+        accessToken?: string | undefined;
+        wabaId?: string | undefined;
+        catalogId?: string | undefined;
+        lastCatalogSyncAt?: string | Date | z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+        lastSyncCount?: number | undefined;
+        lastSyncStatus?: "success" | "failed" | "partial" | undefined;
+        connectedAt?: string | Date | z.objectInputType<{
+            toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+    } | undefined;
 }>;
 export type StoreFromSchema = z.infer<typeof storeFirestoreSchema>;
 /** Zod schema for store status — use instead of inline `z.enum(["pending",...])`. */

package/dist/features/stores/schemas/index.js

@@ -92,6 +92,20 @@ export const storeFirestoreSchema = z.object({
         .optional(),
     shippingConfig: storeShippingConfigSchema.optional(),
     emiEnabled: z.boolean().optional(),
+    whatsappConfig: z
+        .object({
+        phoneNumber: z.string().optional(),
+        wabaId: z.string().optional(),
+        catalogId: z.string().optional(),
+        accessToken: z.string().optional(),
+        catalogSyncEnabled: z.boolean(),
+        lastCatalogSyncAt: firestoreDateSchema.optional(),
+        lastSyncCount: z.number().int().optional(),
+        lastSyncStatus: z.enum(["success", "partial", "failed"]).optional(),
+        connected: z.boolean(),
+        connectedAt: firestoreDateSchema.optional(),
+    })
+        .optional(),
     ...auditTimestampsShape,
 });
 /** Zod schema for store status — use instead of inline `z.enum(["pending",...])`. */

package/dist/features/whatsapp-bot/api/send-status/route.d.ts

@@ -0,0 +1,12 @@
+/**
+ * feat-whatsapp-bot — POST /api/whatsapp/send-status
+ *
+ * WhatsApp message delivery status update.
+ *
+ * Consumer stub:
+ * ```ts
+ * export { whatsappSendStatusPOST as POST } from "@mohasinac/feat-whatsapp-bot";
+ * ```
+ */
+import { NextResponse } from "next/server.js";
+export declare function POST(request: Request): Promise<NextResponse>;

package/dist/features/whatsapp-bot/api/send-status/route.js

@@ -0,0 +1,38 @@
+/**
+ * feat-whatsapp-bot — POST /api/whatsapp/send-status
+ *
+ * WhatsApp message delivery status update.
+ *
+ * Consumer stub:
+ * ```ts
+ * export { whatsappSendStatusPOST as POST } from "@mohasinac/feat-whatsapp-bot";
+ * ```
+ */
+import { NextResponse } from "next/server.js";
+import { getProviders } from "../../../../contracts/index.js";
+import { normalizeError } from "../../../../errors/normalize.js";
+export async function POST(request) {
+    try {
+        const body = await request.json();
+        const { db } = getProviders();
+        if (!db)
+            return NextResponse.json({ success: false, error: "DB not configured" }, { status: 503 });
+        // Update message status in database
+        const repo = db.getRepository("whatsapp_message_status");
+        const updated = await repo.create({
+            ...body,
+            updatedAt: new Date(),
+        });
+        return NextResponse.json({
+            success: true,
+            data: updated,
+        });
+    }
+    catch (error) {
+        void normalizeError(error);
+        return NextResponse.json({
+            success: false,
+            error: error instanceof Error ? error.message : "Internal server error",
+        }, { status: 500 });
+    }
+}

package/dist/features/whatsapp-bot/api/webhook/route.d.ts

@@ -0,0 +1,12 @@
+/**
+ * feat-whatsapp-bot — POST /api/whatsapp/webhook
+ *
+ * WhatsApp webhook receiver for incoming messages.
+ *
+ * Consumer stub:
+ * ```ts
+ * export { whatsappWebhookPOST as POST } from "@mohasinac/feat-whatsapp-bot";
+ * ```
+ */
+import { NextResponse } from "next/server.js";
+export declare function POST(request: Request): Promise<NextResponse>;

package/dist/features/whatsapp-bot/api/webhook/route.js

@@ -0,0 +1,43 @@
+/**
+ * feat-whatsapp-bot — POST /api/whatsapp/webhook
+ *
+ * WhatsApp webhook receiver for incoming messages.
+ *
+ * Consumer stub:
+ * ```ts
+ * export { whatsappWebhookPOST as POST } from "@mohasinac/feat-whatsapp-bot";
+ * ```
+ */
+import { NextResponse } from "next/server.js";
+import { getProviders } from "../../../../contracts/index.js";
+import { normalizeError } from "../../../../errors/normalize.js";
+export async function POST(request) {
+    try {
+        const body = await request.json();
+        const { db, eventBus } = getProviders();
+        if (!db)
+            return NextResponse.json({ success: false, error: "DB not configured" }, { status: 503 });
+        // Store webhook payload for processing
+        const repo = db.getRepository("whatsapp_messages");
+        const created = await repo.create({
+            ...body,
+            receivedAt: new Date(),
+            processed: false,
+        });
+        // Emit event for async processing if eventBus available
+        if (eventBus) {
+            await eventBus.emit("whatsapp.message.received", created);
+        }
+        return NextResponse.json({
+            success: true,
+            data: created,
+        }, { status: 201 });
+    }
+    catch (error) {
+        void normalizeError(error);
+        return NextResponse.json({
+            success: false,
+            error: error instanceof Error ? error.message : "Internal server error",
+        }, { status: 500 });
+    }
+}