@mohasinac/appkit 4.63.4 → 4.63.5

package/dist/features/admin/schemas/firestore.d.ts

@@ -32,6 +32,10 @@ export interface NotificationDocument extends BaseDocument {
     readAt?: Date;
     relatedId?: string;
     relatedType?: NotificationRelatedType;
+    /** Outcome of the async whatsappNotify job for this notification's WhatsApp send, if one was enqueued. */
+    whatsappStatus?: "queued" | "sent" | "failed" | "skipped";
+    /** jobs/{id} doc that ran (or is running) the WhatsApp send for this notification. */
+    whatsappJobId?: string;
 }
 export declare const NOTIFICATIONS_COLLECTION: "notifications";
 export declare const NOTIFICATIONS_INDEXED_FIELDS: readonly ["userId", "isRead", "createdAt", "type"];
@@ -110,6 +114,7 @@ export interface SiteSettingsCredentials {
     /** Webhook signing secret from Razorpay's dashboard → Webhooks. Without it `verifyWebhook()` fails closed. */
     razorpayWebhookSecret?: string;
     resendApiKey?: string;
+    whatsappApiKey?: string;
     metaAppId?: string;
     metaAppSecret?: string;
     metaPageAccessToken?: string;
@@ -124,6 +129,28 @@ export interface SiteSettingsCredentials {
     /** Google Places API for Google Business Reviews (HS4) */
     googleMapsApiKey?: string;
     googlePlaceId?: string;
+    /** WhatsApp Business Cloud API — platform level (for admin purchase announcements) */
+    whatsappPhoneNumberId?: string;
+    whatsappCloudApiToken?: string;
+    /** Comma-separated digits-only phone numbers that receive order announcements */
+    whatsappAdminNotifyNumbers?: string;
+    /**
+     * Approved Meta message-template names, one flat string field per
+     * order-lifecycle notification type — every `SiteSettingsCredentials`
+     * field is stored as an individually-encrypted string (see
+     * `getDecryptedCredentials`/`getCredentialsMasked`, which iterate + mask
+     * every field as a string), so this can't be a `Record<string,string>`
+     * map. Business-initiated WhatsApp sends outside the 24h customer-service
+     * window require a pre-approved template.
+     */
+    whatsappTemplateOrderPlaced?: string;
+    whatsappTemplateOrderConfirmed?: string;
+    whatsappTemplateOrderShipped?: string;
+    whatsappTemplateOrderDelivered?: string;
+    whatsappTemplateOrderCancelled?: string;
+    whatsappTemplateRefundInitiated?: string;
+    /** BCP-47 language code the templates above were approved in, e.g. "en" or "en_US". */
+    whatsappTemplateLanguage?: string;
 }
 export interface SiteSettingsCredentialsMasked {
     phonepeClientId?: string;
@@ -136,6 +163,7 @@ export interface SiteSettingsCredentialsMasked {
     razorpayKeySecret?: string;
     razorpayWebhookSecret?: string;
     resendApiKey?: string;
+    whatsappApiKey?: string;
     metaAppId?: string;
     metaAppSecret?: string;
     metaPageAccessToken?: string;
@@ -147,6 +175,16 @@ export interface SiteSettingsCredentialsMasked {
     deviantartClientSecret?: string;
     googleMapsApiKey?: string;
     googlePlaceId?: string;
+    whatsappPhoneNumberId?: string;
+    whatsappCloudApiToken?: string;
+    whatsappAdminNotifyNumbers?: string;
+    whatsappTemplateOrderPlaced?: string;
+    whatsappTemplateOrderConfirmed?: string;
+    whatsappTemplateOrderShipped?: string;
+    whatsappTemplateOrderDelivered?: string;
+    whatsappTemplateOrderCancelled?: string;
+    whatsappTemplateRefundInitiated?: string;
+    whatsappTemplateLanguage?: string;
 }
 export interface NotificationChannelConfig {
     inApp: {
@@ -162,6 +200,15 @@ export interface NotificationChannelConfig {
         /** Subset of NotificationTypes to email — absent means all types. */
         types?: NotificationType[];
     };
+    whatsapp: {
+        enabled: boolean;
+        /** Minimum priority that triggers a WhatsApp message (default: "high"). */
+        minPriority?: NotificationPriority;
+        /** Subset of NotificationTypes to WhatsApp — absent means all types. */
+        types?: NotificationType[];
+        /** When true, WhatsApp OTP is offered as an alternative to email OTP at checkout. */
+        otpEnabled?: boolean;
+    };
     sms: {
         enabled: boolean;
         /** Minimum priority that triggers an SMS (default: "high"). */
@@ -452,6 +499,29 @@ export interface SiteSettingsDocument extends BaseDocument {
          * ₹2,000 of "handling" on a ₹20,000 order — see `computeCodHandlingFee`.
          */ codHandlingFeeCap: number;
         codHandlingFeePercent: number;
+        /**
+         * Admin master toggle for the per-order, BUYER-paid WhatsApp addon.
+         *
+         * 🛑 Defaults to FALSE. The cost of WhatsApp moved to a standing monthly
+         * charge on the SELLER (`whatsappNotifyMonthlyFee` below) — the platform
+         * owns one number, so the expense is standing rather than per order, and a
+         * buyer should not have to purchase their own delivery updates. The
+         * checkout path that charges it is left intact rather than cut out again:
+         * it is woven through the order-total arithmetic that carries D42's
+         * round-once fix, and disabling it makes the fee resolve to 0 without
+         * touching that money code.
+         */
+        whatsappNotifyFeeEnabled: boolean;
+        /** Flat rupee fee charged to the buyer when they opt into the per-order addon. Unreachable while `whatsappNotifyFeeEnabled` is false. */
+        whatsappNotifyFee: number;
+        /**
+         * What a seller pays per month to receive WhatsApp order notifications —
+         * the admin-set price of `StoreDocument.whatsappNotifySubscribed`.
+         *
+         * Rupees per month, not per message: Meta bills us per template, but a
+         * seller cannot predict their own order count, and a per-message price
+         * would make their bill a function of how well they sold.
+         */ whatsappNotifyMonthlyFee: number;
         /** Admin master toggle — whether the gift-wrap addon is offered at checkout at all. */
         giftWrapFeeEnabled: boolean;
         /** Flat rupee fee charged to the buyer when they opt into gift wrap. */
@@ -537,6 +607,8 @@ export interface SiteSettingsDocument extends BaseDocument {
     messaging?: {
         /** User-facing email. Staff mail (daily digest, payout summary) ignores this. */
         emailEnabled: boolean;
+        /** User-facing WhatsApp. Same exemption for staff. */
+        whatsappEnabled: boolean;
         /**
          * Reserved sends allowed per channel per day. Applies to staff and
          * transactional mail too — the ceiling exists to stay inside the
@@ -544,6 +616,7 @@ export interface SiteSettingsDocument extends BaseDocument {
          */
         dailyCeiling: {
             email: number;
+            whatsapp: number;
             sms: number;
         };
     };

package/dist/features/admin/schemas/firestore.js

@@ -15,7 +15,7 @@ export const ADMIN_CHECKOUT_BYPASS_FLAG_KEY = "adminCheckoutBypass";
  *   · `constants/notification-types.ts` (9) — fed the admin filter chips and
  *     the per-channel allow-list, so the admin list could not filter 18 of
  *     the 27 real types and an admin literally could not allow-list
- *     `offer_received` or `payment_review` for email
+ *     `offer_received` or `payment_review` for email or WhatsApp
  *   · `features/account/types/index.ts` (5: order|offer|promo|system|message)
  *     — a different vocabulary entirely, on a `UserNotification` type with
  *     zero real consumers
@@ -195,6 +195,7 @@ export const notificationQueryHelpers = {
 export const DEFAULT_NOTIFICATION_CHANNELS = {
     inApp: { enabled: true, readOnly: true },
     email: { enabled: false, minPriority: "normal" },
+    whatsapp: { enabled: false, minPriority: "high", otpEnabled: false },
     sms: { enabled: false, minPriority: "high" },
 };
 const PRIORITY_ORDER = {
@@ -254,7 +255,8 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
     // half-configured site.
     messaging: {
         emailEnabled: false,
-        dailyCeiling: { email: 80, sms: 50 },
+        whatsappEnabled: false,
+        dailyCeiling: { email: 80, whatsapp: 200, sms: 50 },
     },
     emi: {
         enabled: false,
@@ -277,9 +279,12 @@ export const DEFAULT_SITE_SETTINGS_DATA = {
         // The buyer add-ons ship ENABLED. They were `false`, which made
         // StoreAddonsPicker return null on both the cart and checkout, so a fresh
         // install had no add-ons at all and no indication why. `undefined` still
-        // means disabled everywhere (computeGiftWrapFee et al. read
+        // means disabled everywhere (computeWhatsAppNotifyFee et al. read
         // `if (!rates.XEnabled) return 0`) — only the DEFAULT changed, so an
         // existing siteSettings document keeps whatever it already stored.
+        whatsappNotifyFeeEnabled: false,
+        whatsappNotifyFee: 10,
+        whatsappNotifyMonthlyFee: 199,
         giftWrapFeeEnabled: true,
         giftWrapFee: 49,
         shipmentProtectionFeeEnabled: true,

package/dist/features/auth/checkout-value-otp.d.ts

@@ -44,6 +44,6 @@ export interface CheckoutValueOtpDoc {
  * making the whole feature look broken.
  */
 export declare function enforceCheckoutValueOtpRateLimit(db: Db, uid: string): Promise<void>;
-/** Build the checkout-value OTP message body. */
+/** Build the checkout-value OTP WhatsApp/SMS message body. */
 export declare function buildCheckoutValueOtpMessage(code: string, siteName: string): string;
 export {};

package/dist/features/auth/checkout-value-otp.js

@@ -75,7 +75,7 @@ export async function enforceCheckoutValueOtpRateLimit(db, uid) {
         tx.set(metaRef, { lastSentAt: new Date() }, { merge: true });
     });
 }
-/** Build the checkout-value OTP message body. */
+/** Build the checkout-value OTP WhatsApp/SMS message body. */
 export function buildCheckoutValueOtpMessage(code, siteName) {
     return (`*${siteName} — Order Verification*\n\n` +
         `Your verification code for this high-value order is: *${code}*\n\n` +

package/dist/features/auth/permissions/constants.d.ts

@@ -83,7 +83,7 @@ export declare const ROUTE_PERMISSION_MAP: Record<string, Permission>;
  *
  * Defaults on store creation: ["suggest_brands", "create_coupons"]
  */
-export type StoreCapability = "advanced_listing_types" | "host_auctions" | "host_preorders" | "create_categories" | "suggest_brands" | "create_coupons" | "bulk_listing_import" | "extended_return_window" | "verified_seller" | "featured_placement" | "promotional_banner" | "priority_support" | "multiple_stores" | "custom_store_slug" | "api_access" | "lower_commission_rate" | "early_access_features" | "advanced_analytics";
+export type StoreCapability = "advanced_listing_types" | "host_auctions" | "host_preorders" | "create_categories" | "suggest_brands" | "create_coupons" | "bulk_listing_import" | "extended_return_window" | "verified_seller" | "featured_placement" | "promotional_banner" | "priority_support" | "multiple_stores" | "custom_store_slug" | "api_access" | "lower_commission_rate" | "early_access_features" | "advanced_analytics" | "whatsapp_catalog_sync";
 export declare const ALL_STORE_CAPABILITIES: StoreCapability[];
 /** Narrow an untrusted string to a real capability. */
 export declare function isStoreCapability(value: unknown): value is StoreCapability;
@@ -118,7 +118,7 @@ export declare function hasCapability(capabilities: StoreCapability[], required:
  *
  * 🛑 The PURE half of `getStoreCapabilities`, extracted so a caller that
  * already holds the store document does not pay a second Firestore read to ask
- * what it is entitled to (Rule #6). Several routes were reading
+ * what it is entitled to (Rule #6). Three WhatsApp routes were reading
  * `store.capabilities ?? []` inline for exactly that reason, which made them a
  * second, divergent reader of the field — they skipped the default merge, so
  * they and `getStoreCapabilities` could disagree about the same store.

package/dist/features/auth/permissions/constants.js

@@ -390,6 +390,7 @@ const STORE_CAPABILITY_MAP = {
     lower_commission_rate: true,
     early_access_features: true,
     advanced_analytics: true,
+    whatsapp_catalog_sync: true,
 };
 export const ALL_STORE_CAPABILITIES = Object.keys(STORE_CAPABILITY_MAP);
 /** Narrow an untrusted string to a real capability. */
@@ -441,7 +442,7 @@ export function hasCapability(capabilities, required) {
  *
  * 🛑 The PURE half of `getStoreCapabilities`, extracted so a caller that
  * already holds the store document does not pay a second Firestore read to ask
- * what it is entitled to (Rule #6). Several routes were reading
+ * what it is entitled to (Rule #6). Three WhatsApp routes were reading
  * `store.capabilities ?? []` inline for exactly that reason, which made them a
  * second, divergent reader of the field — they skipped the default merge, so
  * they and `getStoreCapabilities` could disagree about the same store.

package/dist/features/cart/components/CartPriceBreakdown.d.ts

@@ -22,6 +22,7 @@ export interface CartPriceBreakdownStore {
     subtotal: number;
     shippingFee: number;
     codHandlingFee: number;
+    whatsappNotifyFee: number;
     giftWrapFee: number;
     shipmentProtectionFee: number;
     saleProtectionFee: number;
@@ -44,6 +45,7 @@ export interface CartPriceBreakdownData {
     subtotal: number;
     shippingFee: number;
     codHandlingFee: number;
+    whatsappNotifyFee: number;
     giftWrapFee: number;
     shipmentProtectionFee: number;
     saleProtectionFee: number;

package/dist/features/cart/components/CartPriceBreakdown.js

@@ -40,7 +40,7 @@ export function CartPriceBreakdown({ preview, itemCount, currency = "INR", unava
     const subtotalLabel = itemCount !== undefined
         ? `Subtotal (${itemCount} item${itemCount !== 1 ? "s" : ""}${storeCount > 1 ? `, ${storeCount} stores` : ""})`
         : "Subtotal";
-    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee), derivation: derivations?.codHandlingFee })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.emiSurcharge > 0 && (_jsx(Line, { label: "EMI surcharge", amount: money(preview.emiSurcharge), derivation: derivations?.emiSurcharge })), preview.sharedPurchaseFee > 0 && (_jsx(Line, { label: withStoreCount("Split delivery", countCharged((s) => s.sharedPurchaseFee)), amount: money(preview.sharedPurchaseFee) })), preview.platformFee > 0 && (_jsx(Line, { label: "Platform fee", amount: money(preview.platformFee), derivation: derivations?.platformFee })), preview.gstOnFee > 0 && (_jsx(Line, { label: "GST on platform fee", amount: money(preview.gstOnFee), derivation: derivations?.gstOnFee })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: preview.pointsApplied <= 0 }) }), preview.pointsApplied > 0 && (_jsxs(_Fragment, { children: [_jsx(Line, { label: `Points applied (${preview.pointsApplied.toLocaleString("en-IN")} pts)`, amount: `−${money(preview.pointsApplied)}`, tone: "success" }), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Amount due", amount: money(preview.amountDue), tone: "primary", strong: true }) })] })), preview.pointsApplied > 0 && preview.pointsBalance > preview.pointsApplied && (_jsxs(Text, { size: "xs", color: "muted", children: [(preview.pointsBalance - preview.pointsApplied).toLocaleString("en-IN"), " points stay in your balance \u2014 up to half of an order can be paid with points."] })), preview.pointsApplied === 0 && preview.pointsBalance > 0 && (_jsx(Text, { size: "xs", color: "muted", children: preview.stores.some((s) => s.acceptsPoints)
+    return (_jsxs(Stack, { gap: "xs", className: className, children: [_jsx(Line, { label: subtotalLabel, amount: money(preview.subtotal) }), preview.shippingFee > 0 && (_jsx(Line, { label: withStoreCount("Shipping", storeCount), amount: money(preview.shippingFee) })), preview.codHandlingFee > 0 && (_jsx(Line, { label: "COD handling fee", amount: money(preview.codHandlingFee), derivation: derivations?.codHandlingFee })), preview.whatsappNotifyFee > 0 && (_jsx(Line, { label: withStoreCount("WhatsApp updates", countCharged((s) => s.whatsappNotifyFee)), amount: money(preview.whatsappNotifyFee) })), preview.giftWrapFee > 0 && (_jsx(Line, { label: withStoreCount("Gift wrap", countCharged((s) => s.giftWrapFee)), amount: money(preview.giftWrapFee) })), preview.shipmentProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Shipment protection", countCharged((s) => s.shipmentProtectionFee)), amount: money(preview.shipmentProtectionFee) })), preview.saleProtectionFee > 0 && (_jsx(Line, { label: withStoreCount("Sale protection", countCharged((s) => s.saleProtectionFee)), amount: money(preview.saleProtectionFee) })), preview.emiSurcharge > 0 && (_jsx(Line, { label: "EMI surcharge", amount: money(preview.emiSurcharge), derivation: derivations?.emiSurcharge })), preview.sharedPurchaseFee > 0 && (_jsx(Line, { label: withStoreCount("Split delivery", countCharged((s) => s.sharedPurchaseFee)), amount: money(preview.sharedPurchaseFee) })), preview.platformFee > 0 && (_jsx(Line, { label: "Platform fee", amount: money(preview.platformFee), derivation: derivations?.platformFee })), preview.gstOnFee > 0 && (_jsx(Line, { label: "GST on platform fee", amount: money(preview.gstOnFee), derivation: derivations?.gstOnFee })), preview.couponDiscount > 0 && (_jsx(Line, { label: "Coupon discount", amount: `−${money(preview.couponDiscount)}`, tone: "success" })), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Total", amount: money(preview.total), tone: "primary", strong: preview.pointsApplied <= 0 }) }), preview.pointsApplied > 0 && (_jsxs(_Fragment, { children: [_jsx(Line, { label: `Points applied (${preview.pointsApplied.toLocaleString("en-IN")} pts)`, amount: `−${money(preview.pointsApplied)}`, tone: "success" }), _jsx(Div, { border: "top-subtle", paddingY: "t-sm", children: _jsx(Line, { label: "Amount due", amount: money(preview.amountDue), tone: "primary", strong: true }) })] })), preview.pointsApplied > 0 && preview.pointsBalance > preview.pointsApplied && (_jsxs(Text, { size: "xs", color: "muted", children: [(preview.pointsBalance - preview.pointsApplied).toLocaleString("en-IN"), " points stay in your balance \u2014 up to half of an order can be paid with points."] })), preview.pointsApplied === 0 && preview.pointsBalance > 0 && (_jsx(Text, { size: "xs", color: "muted", children: preview.stores.some((s) => s.acceptsPoints)
                     ? "Your points could not be applied to this order."
                     : storeCount > 1
                         ? "None of these sellers accepts points."

package/dist/features/cart/components/StoreAddonsPicker.d.ts

@@ -3,12 +3,13 @@ import React from "react";
  * Paid add-on checkboxes for ONE store.
  *
  * Add-on fees are billed per order group (= per store), so they are chosen per
- * store: ticking "gift wrap" for one seller must not bill it for every
+ * store: ticking "WhatsApp updates" for one seller must not bill it for every
  * seller in the cart. Rendered inside that store's card in the cart, and inside
  * that store's row of the checkout summary — Buy Now skips the cart entirely,
  * so both surfaces have to be able to edit them.
  */
 export interface StoreAddonsValue {
+    whatsappNotifyAddon?: boolean;
     giftWrapAddon?: boolean;
     giftWrapMessage?: string;
     shipmentProtectionAddon?: boolean;
@@ -16,6 +17,8 @@ export interface StoreAddonsValue {
 }
 /** The subset of `siteSettings.commissions` that gates and prices the add-ons. */
 export interface StoreAddonsRates {
+    whatsappNotifyFeeEnabled?: boolean;
+    whatsappNotifyFee?: number;
     giftWrapFeeEnabled?: boolean;
     giftWrapFee?: number;
     shipmentProtectionFeeEnabled?: boolean;
@@ -56,7 +59,7 @@ export interface StoreProtectionContext {
  * showing an explanatory line instead.
  *
  * 🛑 Deliberately asks only about TIER 1. A seller who supports neither
- * protection still has gift wrap, and a store whose only
+ * protection still has WhatsApp updates and gift wrap, and a store whose only
  * enabled add-ons are protections it declined must still render the picker —
  * because that is where the risk notice lives, and a hidden notice is the
  * tri-state failure in § `StoreProtectionContext`.

package/dist/features/cart/components/StoreAddonsPicker.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Gift, ShieldAlert, ShieldCheck, ShieldOff } from "lucide-react";
+import { Gift, MessageCircle, ShieldAlert, ShieldCheck, ShieldOff } from "lucide-react";
 import { Div, Row, Stack, Text } from "../../../ui/index.js";
 import { Disclaimer } from "../../../ui/components/Disclaimer.js";
 import { IconBox } from "../../../ui/components/IconBox.js";
@@ -16,14 +16,15 @@ import { formatCurrency } from "../../../utils/number.formatter.js";
  * showing an explanatory line instead.
  *
  * 🛑 Deliberately asks only about TIER 1. A seller who supports neither
- * protection still has gift wrap, and a store whose only
+ * protection still has WhatsApp updates and gift wrap, and a store whose only
  * enabled add-ons are protections it declined must still render the picker —
  * because that is where the risk notice lives, and a hidden notice is the
  * tri-state failure in § `StoreProtectionContext`.
  */
 export function hasAnyStoreAddon(rates) {
     return (!!rates &&
-        !!(rates.giftWrapFeeEnabled ||
+        !!(rates.whatsappNotifyFeeEnabled ||
+            rates.giftWrapFeeEnabled ||
             rates.shipmentProtectionFeeEnabled ||
             rates.saleProtectionFeeEnabled));
 }
@@ -51,7 +52,7 @@ export function StoreAddonsPicker({ storeId, storeSubtotal, value, onChange, rat
     const shippingDeclined = !!rates.shipmentProtectionFeeEnabled && !protection?.supportsShippingProtection;
     const saleDeclined = !!rates.saleProtectionFeeEnabled && !protection?.supportsSaleProtection;
     const saleBlockedByFinalSale = !!rates.saleProtectionFeeEnabled && !!protection?.supportsSaleProtection && !!protection?.hasFinalSaleItem;
-    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [disabled && disabledReason && (_jsx(Text, { size: "xs", color: "muted", children: disabledReason })), rates.giftWrapFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(Gift, { size: 14 }) }), _jsxs(Stack, { gap: "xs", className: "flex-1 min-w-0", children: [_jsx(FieldCheckbox, { name: `giftWrapAddon-${storeId}`, label: `Gift wrap (+${money(rates.giftWrapFee ?? 49)})`, checked: !!value.giftWrapAddon, onChange: (checked) => set({ giftWrapAddon: checked }), disabled: disabled }), showGiftMessage && value.giftWrapAddon && (_jsx(FieldTextarea, { name: `giftWrapMessage-${storeId}`, label: "Gift message (optional)", value: value.giftWrapMessage ?? "", onChange: (next) => set({ giftWrapMessage: next.slice(0, 500) }), rows: 2, maxLength: 500, showCharCount: true, placeholder: "Add a note for the recipient\u2026", disabled: disabled }))] })] })), shippingOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldCheck, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `shipmentProtectionAddon-${storeId}`, label: `Shipment protection — loss or damage in transit (+${money(protectionFee)})`, checked: !!value.shipmentProtectionAddon, onChange: (checked) => set({ shipmentProtectionAddon: checked }), disabled: disabled }) })] })), saleOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldAlert, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `saleProtectionAddon-${storeId}`, label: `Sale protection — item not as described (+${money(saleFee)})`, checked: !!value.saleProtectionAddon, onChange: (checked) => set({ saleProtectionAddon: checked }), disabled: disabled }) })] })), (shippingDeclined || saleDeclined) && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "muted", children: _jsx(ShieldOff, { size: 14 }) }), _jsx(Text, { size: "xs", color: "muted", className: "flex-1 min-w-0", children: shippingDeclined && saleDeclined
+    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [disabled && disabledReason && (_jsx(Text, { size: "xs", color: "muted", children: disabledReason })), rates.whatsappNotifyFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(MessageCircle, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `whatsappNotifyAddon-${storeId}`, label: `WhatsApp order updates (+${money(rates.whatsappNotifyFee ?? 10)})`, checked: !!value.whatsappNotifyAddon, onChange: (checked) => set({ whatsappNotifyAddon: checked }), disabled: disabled }) })] })), rates.giftWrapFeeEnabled && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(Gift, { size: 14 }) }), _jsxs(Stack, { gap: "xs", className: "flex-1 min-w-0", children: [_jsx(FieldCheckbox, { name: `giftWrapAddon-${storeId}`, label: `Gift wrap (+${money(rates.giftWrapFee ?? 49)})`, checked: !!value.giftWrapAddon, onChange: (checked) => set({ giftWrapAddon: checked }), disabled: disabled }), showGiftMessage && value.giftWrapAddon && (_jsx(FieldTextarea, { name: `giftWrapMessage-${storeId}`, label: "Gift message (optional)", value: value.giftWrapMessage ?? "", onChange: (next) => set({ giftWrapMessage: next.slice(0, 500) }), rows: 2, maxLength: 500, showCharCount: true, placeholder: "Add a note for the recipient\u2026", disabled: disabled }))] })] })), shippingOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldCheck, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `shipmentProtectionAddon-${storeId}`, label: `Shipment protection — loss or damage in transit (+${money(protectionFee)})`, checked: !!value.shipmentProtectionAddon, onChange: (checked) => set({ shipmentProtectionAddon: checked }), disabled: disabled }) })] })), saleOffered && storeSubtotal > 0 && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "brand", children: _jsx(ShieldAlert, { size: 14 }) }), _jsx(Div, { className: "flex-1 min-w-0", children: _jsx(FieldCheckbox, { name: `saleProtectionAddon-${storeId}`, label: `Sale protection — item not as described (+${money(saleFee)})`, checked: !!value.saleProtectionAddon, onChange: (checked) => set({ saleProtectionAddon: checked }), disabled: disabled }) })] })), (shippingDeclined || saleDeclined) && (_jsxs(Row, { gap: "sm", align: "start", className: "min-w-0", children: [_jsx(IconBox, { size: "sm", tone: "muted", children: _jsx(ShieldOff, { size: 14 }) }), _jsx(Text, { size: "xs", color: "muted", className: "flex-1 min-w-0", children: shippingDeclined && saleDeclined
                             ? "This seller does not offer shipment or sale protection."
                             : shippingDeclined
                                 ? "This seller does not offer shipment protection."

package/dist/features/cart/repository/cart.repository.js

@@ -577,7 +577,8 @@ export class CartRepository extends BaseRepository {
      */
     async setStoreAddons(userId, storeId, addons) {
         const isEmpty = !addons ||
-            (!addons.giftWrapAddon &&
+            (!addons.whatsappNotifyAddon &&
+                !addons.giftWrapAddon &&
                 !addons.shipmentProtectionAddon &&
                 !addons.saleProtectionAddon);
         await this.db

package/dist/features/cart/schemas/firestore.d.ts

@@ -272,11 +272,12 @@ export interface CartAppliedCoupon {
  *
  * Add-on fees have always been billed per order group (= per store) by
  * `createOrderForGroup` / `previewCheckoutPricing`, but the selection used to be
- * a single cart-wide boolean — so one tick on "gift wrap" quietly billed
+ * a single cart-wide boolean — so one tick on "WhatsApp updates" quietly billed
  * ₹10 × every store in the cart, with no way to opt in for just one seller.
  * Keying the selection by storeId makes the choice match the billing.
  */
 export interface CartStoreAddons {
+    whatsappNotifyAddon?: boolean;
     giftWrapAddon?: boolean;
     giftWrapMessage?: string;
     /** Loss or damage IN TRANSIT. */

package/dist/features/checkout/actions/checkout-value-otp-actions.d.ts

@@ -6,17 +6,12 @@
  * purpose from `checkout-actions.ts`'s third-party shipping consent OTP —
  * same crypto primitives, separate Firestore namespace and copy.
  */
+export type CheckoutValueOtpChannel = "email" | "whatsapp";
 /**
- * Email is the only checkout-OTP channel. WhatsApp was the other arm until
- * 2026-10-20, when the Cloud API integration was removed — see
- * `features/orders/utils/payment-proof-message.ts` for why the `wa.me`
- * links survived and the API did not. Kept as a single-member union rather
- * than deleted so the parameter stays self-documenting and a second channel
- * has an obvious seam.
- */
-export type CheckoutValueOtpChannel = "email";
-/**
- * Sends a checkout-value OTP by email.
+ * Sends a checkout-value OTP either by email (default) or WhatsApp
+ * (opt-in — the buyer must explicitly choose it in the UI). WhatsApp phone
+ * is always resolved server-side from the selected shipping address —
+ * never trust a client-supplied phone number.
  *
  * If the chosen channel (and, for email, its skip-worthy fallback) is
  * currently circuit-broken or unconfigured, the OTP gate is treated as

package/dist/features/checkout/actions/checkout-value-otp-actions.js

@@ -9,12 +9,17 @@
 import { timingSafeEqual } from "crypto";
 import { ValidationError } from "../../../errors/index.js";
 import { normalizeError } from "../../../errors/normalize.js";
+import { safeRead } from "../../../errors/safe-read.js";
 import { serverLogger } from "../../../monitoring/index.js";
 import { sendEmail } from "../../contact/email.js";
 import { getAdminDb } from "../../../providers/db-firebase/index.js";
 import { resolveDate } from "../../../utils/index.js";
+import { addressesRepository } from "../../addresses/repository/addresses.repository.js";
+import { siteSettingsRepository } from "../../admin/repository/site-settings.repository.js";
+import { sendWhatsAppBusinessMessage } from "../../whatsapp-bot/helpers/whatsapp.js";
 import { isChannelHealthy, withChannelRetry } from "../../../_internal/server/notifications/channel-health.js";
-import { CHECKOUT_VALUE_OTP_EXPIRY_MS, CHECKOUT_VALUE_OTP_MAX_ATTEMPTS, hashOtp, generateOtpCode, checkoutValueOtpRef, enforceCheckoutValueOtpRateLimit, } from "../../auth/checkout-value-otp.js";
+import { guardSend, logSuppressedSend } from "../../../_internal/server/notifications/send-guard.js";
+import { CHECKOUT_VALUE_OTP_EXPIRY_MS, CHECKOUT_VALUE_OTP_MAX_ATTEMPTS, hashOtp, generateOtpCode, checkoutValueOtpRef, enforceCheckoutValueOtpRateLimit, buildCheckoutValueOtpMessage, } from "../../auth/checkout-value-otp.js";
 function maskEmail(userEmail) {
     const [local, domain] = userEmail.split("@");
     return domain
@@ -22,7 +27,10 @@ function maskEmail(userEmail) {
         : "***";
 }
 /**
- * Sends a checkout-value OTP by email.
+ * Sends a checkout-value OTP either by email (default) or WhatsApp
+ * (opt-in — the buyer must explicitly choose it in the UI). WhatsApp phone
+ * is always resolved server-side from the selected shipping address —
+ * never trust a client-supplied phone number.
  *
  * If the chosen channel (and, for email, its skip-worthy fallback) is
  * currently circuit-broken or unconfigured, the OTP gate is treated as
@@ -37,6 +45,84 @@ export async function sendCheckoutValueOtp(userId, userEmail, channel = "email",
     const codeHash = hashOtp(code);
     const expiresAt = new Date(Date.now() + CHECKOUT_VALUE_OTP_EXPIRY_MS);
     const siteName = process.env.NEXT_PUBLIC_SITE_NAME || "LetItRip";
+    if (channel === "whatsapp") {
+        if (!addressId) {
+            throw new ValidationError("Select a delivery address before sending the code via WhatsApp.");
+        }
+        // A failed settings read makes the WhatsApp channel look deliberately
+        // switched off ("send the code by email instead") — a defensible fallback,
+        // but one an operator has to be able to see, since it is indistinguishable
+        // from an admin having disabled it.
+        const settings = await safeRead(() => siteSettingsRepository.getSingleton(), {
+            route: "checkout/value-otp",
+            key: "checkoutValueOtp.siteSettings",
+            fallback: null,
+        });
+        const creds = settings?.credentials ?? {};
+        const whatsappOtpEnabled = settings?.notificationChannels?.whatsapp?.otpEnabled === true;
+        const phoneNumberId = creds.whatsappPhoneNumberId?.trim() ?? "";
+        const accessToken = creds.whatsappCloudApiToken?.trim() ?? "";
+        const credsReady = phoneNumberId && accessToken && !phoneNumberId.includes("PLACEHOLDER") && !accessToken.includes("PLACEHOLDER");
+        if (!whatsappOtpEnabled || !credsReady) {
+            throw new ValidationError("WhatsApp verification isn't available right now — send the code by email instead.");
+        }
+        const address = await addressesRepository.findById(addressId);
+        /*
+       * REVEALED: this phone receives the high-value checkout OTP, so it has to
+       * be the real number. `addressesRepository` is ciphertext-by-default, and
+       * `.trim()` on the stored value is what the nominal brand caught — the
+       * old intersection form let `Encrypted<string>` call string methods.
+       */
+        const addressPlain = address ? addressesRepository.revealAddress(address) : null;
+        const phone = addressPlain?.phone?.trim();
+        if (!phone) {
+            throw new ValidationError("The selected address has no phone number on file — send the code by email instead.");
+        }
+        if (!(await isChannelHealthy("whatsapp"))) {
+            serverLogger.warn("sendCheckoutValueOtp: WhatsApp channel unhealthy — skipping OTP gate", { uid: userId, channel });
+            return { skipped: true };
+        }
+        await checkoutValueOtpRef(db, userId).set({
+            codeHash,
+            expiresAt,
+            attempts: 0,
+            verified: false,
+            createdAt: new Date(),
+        });
+        const message = buildCheckoutValueOtpMessage(code, siteName);
+        // Same guard as the email branch below, same reasoning: transactional, so
+        // the kill switch does not apply (the buyer cannot check out without the
+        // code), but the daily ceiling does.
+        const waGuard = {
+            channel: "whatsapp",
+            feature: "checkout_value_otp",
+            audience: "user",
+            transactional: true,
+        };
+        const waDecision = await guardSend(waGuard);
+        if (!waDecision.allow) {
+            logSuppressedSend(waGuard, waDecision);
+            throw new ValidationError("We couldn't send the verification code via WhatsApp — please try again, or send it by email instead.");
+        }
+        try {
+            const sent = await withChannelRetry("whatsapp", async () => {
+                const ok = await sendWhatsAppBusinessMessage({ toPhone: phone, message, phoneNumberId, accessToken });
+                if (!ok)
+                    throw new Error("WhatsApp Cloud API returned a non-OK response");
+                return ok;
+            });
+            if (!sent)
+                throw new Error("WhatsApp send failed");
+        }
+        catch (err) {
+            void normalizeError(err);
+            serverLogger.error("Failed to send checkout value OTP via WhatsApp", { uid: userId, err });
+            throw new ValidationError("We couldn't send the verification code via WhatsApp — please try again, or send it by email instead.");
+        }
+        const maskedPhone = phone.length > 4 ? `${"*".repeat(phone.length - 4)}${phone.slice(-4)}` : "***";
+        serverLogger.info(`Checkout value OTP sent via WhatsApp: uid=${userId}`);
+        return { maskedPhone };
+    }
     if (!(await isChannelHealthy("email"))) {
         serverLogger.warn("sendCheckoutValueOtp: email channel unhealthy — skipping OTP gate", { uid: userId, channel });
         return { skipped: true };

package/dist/features/homepage/lib/section-renderer.js

@@ -259,7 +259,7 @@ const SECTION_REGISTRY = {
             return (_jsx(WhatsAppCommunitySection, { title: cleanTitle(cfg?.title) || SECTION_TITLE.whatsappCommunity, descriptionHtml: cfg?.description || SECTION_COPY.whatsappDescription, 
                 // No `|| 5000` fallback: inventing a member count the site cannot
                 // verify is a fabricated social-proof number.
-                memberCount: cfg?.memberCount, groupLink: cfg?.groupLink || undefined, benefits: cfg?.benefits ?? [], testimonial: cfg?.testimonial, buttonText: cfg?.buttonText }));
+                memberCount: cfg?.memberCount, groupLink: cfg?.groupLink || "https://chat.whatsapp.com/", benefits: cfg?.benefits ?? [], testimonial: cfg?.testimonial, buttonText: cfg?.buttonText }));
         },
     },
     faq: {

package/dist/features/orders/actions/refund-actions.js

@@ -79,6 +79,7 @@ export async function issuePartialRefund(adminUid, orderId, deductFees, refundNo
             : `Your full refund of ₹${grossRefund} is being processed.`,
         relatedId: orderId,
         relatedType: "order",
+        storeId: order.storeId,
     });
     serverLogger.info("Admin partial refund initiated", {
         adminUid,

package/dist/features/orders/components/OrderAddonBadges.d.ts

@@ -2,7 +2,7 @@ import React from "react";
 /**
  * Icon badges for an order's paid add-ons and applied coupon.
  *
- * These are fulfilment instructions, not decoration: gift wrap tells the
+ * These are fulfilment instructions, not decoration: WhatsApp tells the
  * status-change notifier to message this buyer, gift wrap tells the packer to
  * wrap the parcel and enclose the message, and either protection changes how a
  * claim is handled. They are recorded on the order (and filterable in the
@@ -14,6 +14,8 @@ import React from "react";
  * at once instead of being wired per screen.
  */
 export interface OrderAddonBadgesOrder {
+    whatsappNotifyAddon?: boolean;
+    whatsappNotifyFee?: number;
     giftWrapAddon?: boolean;
     giftWrapFee?: number;
     giftWrapMessage?: string;

package/dist/features/orders/components/OrderAddonBadges.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { Gift, ShieldAlert, ShieldCheck, Tag } from "lucide-react";
+import { Gift, MessageCircle, ShieldAlert, ShieldCheck, Tag } from "lucide-react";
 import { Row, Span, Stack, Text } from "../../../ui/index.js";
 import { formatCurrency } from "../../../utils/number.formatter.js";
 const CHIP_BASE = "inline-flex items-center gap-[var(--appkit-space-1)] rounded-full px-[var(--appkit-space-2)] py-[var(--appkit-space-0-5)] text-[length:var(--appkit-text-xs)] font-medium";
@@ -15,14 +15,15 @@ function Chip({ icon, label, tone, title, }) {
 export function OrderAddonBadges({ order, variant = "compact", showCoupon = true, currency = "INR", className = "", }) {
     const money = (v) => (typeof v === "number" && v > 0 ? formatCurrency(v, currency) : undefined);
     const hasCoupon = showCoupon && !!order.couponCode;
-    const hasAny = order.giftWrapAddon ||
+    const hasAny = order.whatsappNotifyAddon ||
+        order.giftWrapAddon ||
         order.shipmentProtectionAddon ||
         order.saleProtectionAddon ||
         hasCoupon;
     if (!hasAny)
         return null;
     const isDetail = variant === "detail";
-    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, className: "min-w-0", children: [order.giftWrapAddon && (_jsx(Chip, { icon: _jsx(Gift, { size: 12 }), label: isDetail && money(order.giftWrapFee) ? `Gift wrap · ${money(order.giftWrapFee)}` : "Gift wrap", tone: "brand", title: "This parcel must be gift-wrapped before dispatch." })), order.shipmentProtectionAddon && (_jsx(Chip, { icon: _jsx(ShieldCheck, { size: 12 }), label: isDetail && money(order.shipmentProtectionFee) ? `Protected · ${money(order.shipmentProtectionFee)}` : "Protected", tone: "info", title: "Shipment protection purchased \u2014 loss or damage in transit is covered, claimed against the held funds." })), order.saleProtectionAddon && (_jsx(Chip, { icon: _jsx(ShieldAlert, { size: 12 }), label: isDetail && money(order.saleProtectionFee) ? `Sale protected · ${money(order.saleProtectionFee)}` : "Sale protected", tone: "info", title: "Sale protection purchased \u2014 if the item is not as described the buyer is refunded, no questions asked." })), hasCoupon && (_jsx(Chip, { icon: _jsx(Tag, { size: 12 }), label: isDetail && money(order.couponDiscount)
+    return (_jsxs(Stack, { gap: "xs", className: `min-w-0 ${className}`, children: [_jsxs(Row, { gap: "xs", align: "center", wrap: true, className: "min-w-0", children: [order.whatsappNotifyAddon && (_jsx(Chip, { icon: _jsx(MessageCircle, { size: 12 }), label: isDetail && money(order.whatsappNotifyFee) ? `WhatsApp updates · ${money(order.whatsappNotifyFee)}` : "WhatsApp updates", tone: "success", title: "Buyer opted into WhatsApp order-status updates \u2014 status changes on this order should notify them on WhatsApp." })), order.giftWrapAddon && (_jsx(Chip, { icon: _jsx(Gift, { size: 12 }), label: isDetail && money(order.giftWrapFee) ? `Gift wrap · ${money(order.giftWrapFee)}` : "Gift wrap", tone: "brand", title: "This parcel must be gift-wrapped before dispatch." })), order.shipmentProtectionAddon && (_jsx(Chip, { icon: _jsx(ShieldCheck, { size: 12 }), label: isDetail && money(order.shipmentProtectionFee) ? `Protected · ${money(order.shipmentProtectionFee)}` : "Protected", tone: "info", title: "Shipment protection purchased \u2014 loss or damage in transit is covered, claimed against the held funds." })), order.saleProtectionAddon && (_jsx(Chip, { icon: _jsx(ShieldAlert, { size: 12 }), label: isDetail && money(order.saleProtectionFee) ? `Sale protected · ${money(order.saleProtectionFee)}` : "Sale protected", tone: "info", title: "Sale protection purchased \u2014 if the item is not as described the buyer is refunded, no questions asked." })), hasCoupon && (_jsx(Chip, { icon: _jsx(Tag, { size: 12 }), label: isDetail && money(order.couponDiscount)
                             ? `${order.couponCode} · −${money(order.couponDiscount)}`
                             : order.couponCode, tone: "success", title: `Coupon ${order.couponCode} applied to this order.` }))] }), isDetail && order.giftWrapAddon && order.giftWrapMessage && (_jsxs(Stack, { gap: "xs", className: "min-w-0", children: [_jsx(Text, { size: "xs", color: "muted", weight: "semibold", transform: "uppercase", className: "tracking-wide", children: "Gift message" }), _jsx(Text, { size: "sm", color: "primary", className: "min-w-0 whitespace-pre-wrap break-words", children: order.giftWrapMessage })] }))] }));
 }

package/dist/features/orders/repository/orders.repository.d.ts

@@ -215,6 +215,10 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
             canFilter: boolean;
             canSort: boolean;
         };
+        whatsappNotifyAddon: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         giftWrapAddon: {
             canFilter: boolean;
             canSort: boolean;
@@ -335,6 +339,10 @@ declare class OrderRepository extends BaseRepository<OrderDocument> {
             canFilter: boolean;
             canSort: boolean;
         };
+        whatsappNotifyAddon: {
+            canFilter: boolean;
+            canSort: boolean;
+        };
         giftWrapAddon: {
             canFilter: boolean;
             canSort: boolean;

package/dist/features/orders/repository/orders.repository.js

@@ -1364,6 +1364,7 @@ OrderRepository.SELLER_SIEVE_FIELDS = {
     // Fulfilment flags. Filterable so "which of my orders need gift wrap?" is a
     // query against the orders themselves — the whole point of recording the
     // add-on on the order rather than keeping a side list of who asked for what.
+    whatsappNotifyAddon: { canFilter: true, canSort: false },
     giftWrapAddon: { canFilter: true, canSort: false },
     shipmentProtectionAddon: { canFilter: true, canSort: false },
     saleProtectionAddon: { canFilter: true, canSort: false },
@@ -1396,6 +1397,7 @@ OrderRepository.ADMIN_SIEVE_FIELDS = {
     // Same fulfilment flags as SELLER_SIEVE_FIELDS — admin needs to answer
     // "who opted into WhatsApp updates?" when a status change goes out, without
     // maintaining a parallel tracker.
+    whatsappNotifyAddon: { canFilter: true, canSort: false },
     giftWrapAddon: { canFilter: true, canSort: false },
     shipmentProtectionAddon: { canFilter: true, canSort: false },
     saleProtectionAddon: { canFilter: true, canSort: false },