@mohasinac/appkit 4.63.4 → 4.64.0

package/dist/_internal/shared/features/site-settings/types.d.ts

@@ -12,8 +12,20 @@
  * `scripts/audit-public-projection-parity.mjs`. Adding a field here without a
  * proven client reader is how the endpoint drifted in the first place.
  */
-import type { NotificationChannelConfig, SiteSettingsDocument } from "../../../../features/admin/schemas/firestore";
+import type { SiteSettingsDocument } from "../../../../features/admin/schemas/firestore";
 import type { MediaVideoWatermark } from "../../../../features/media/MediaVideo";
+/** The only notification-channel facts a browser is given: is each channel on. */
+export interface PublicNotificationChannels {
+    email: {
+        enabled: boolean;
+    };
+    whatsapp: {
+        enabled: boolean;
+    };
+    sms: {
+        enabled: boolean;
+    };
+}
 export interface PublicSiteSettings {
     /** Support channels shown to buyers. Deliberately NOT the full `contact` — `address` and `upiVpa` stay server-side. */
     contact: {
@@ -64,7 +76,20 @@ export interface PublicSiteSettings {
     search?: {
         indexEnabled: boolean;
     };
-    notificationChannels?: NotificationChannelConfig;
+    /**
+     * 🛑 NARROWER than `NotificationChannelConfig` on purpose, and it must stay
+     * that way. The full config carries `minPriority` and a `types[]` allow-list
+     * naming exactly which notification types each channel carries — operational
+     * routing detail that no browser reads and that an anonymous caller has no
+     * business enumerating.
+     *
+     * `inApp` is deliberately absent too: it is always on and nothing renders a
+     * toggle for it.
+     *
+     * Widening this back to `NotificationChannelConfig` re-publishes the lot by
+     * the act of widening, which is the failure Root Cause #70 records.
+     */
+    notificationChannels?: PublicNotificationChannels;
     announcementBar?: SiteSettingsDocument["announcementBar"];
     navConfig?: SiteSettingsDocument["navConfig"];
     actionConfig?: SiteSettingsDocument["actionConfig"];

package/dist/_internal/shared/fees/calculator.d.ts

@@ -175,6 +175,14 @@ export interface CodHandlingFeeRates {
  * changes no number on its own.
  */
 export declare function computeCodHandlingFee(subtotal: number, rates: CodHandlingFeeRates): number;
+export interface WhatsAppNotifyFeeRates {
+    /** Admin master toggle — the addon isn't charged (even if the buyer selected it) unless this is true. */
+    whatsappNotifyFeeEnabled?: boolean;
+    /** Flat rupee fee charged when the buyer opts in. Falls back to ₹10. */
+    whatsappNotifyFee?: number;
+}
+/** Flat WhatsApp order-updates addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
+export declare function computeWhatsAppNotifyFee(addonSelected: boolean, rates: WhatsAppNotifyFeeRates): number;
 export interface GiftWrapFeeRates {
     /** Admin master toggle — the addon isn't charged (even if the buyer selected it) unless this is true. */
     giftWrapFeeEnabled?: boolean;

package/dist/_internal/shared/fees/calculator.js

@@ -202,6 +202,13 @@ export function computeCodHandlingFee(subtotal, rates) {
     const percentFee = roundRupees(subtotal * (percent / 100));
     return Math.min(percentFee, cap);
 }
+const DEFAULT_WHATSAPP_NOTIFY_FEE = 10;
+/** Flat WhatsApp order-updates addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
+export function computeWhatsAppNotifyFee(addonSelected, rates) {
+    if (!addonSelected || !rates.whatsappNotifyFeeEnabled)
+        return 0;
+    return rates.whatsappNotifyFee ?? DEFAULT_WHATSAPP_NOTIFY_FEE;
+}
 const DEFAULT_GIFT_WRAP_FEE = 49;
 /** Flat gift-wrap addon fee — charged only when the buyer opted in AND the admin has the addon enabled. */
 export function computeGiftWrapFee(addonSelected, rates) {

package/dist/cli/index.js

@@ -59,6 +59,7 @@ export const FEATURE_SUBPATH_MAP = {
     "before-after": "@mohasinac/appkit/features/before-after",
     collections: "@mohasinac/appkit/features/collections",
     preorders: "@mohasinac/appkit/features/pre-orders",
+    "whatsapp-bot": "@mohasinac/appkit/features/whatsapp-bot",
 };
 /**
  * Wraps a Next.js config object. With appkit, only `@mohasinac/appkit` needs to
@@ -109,6 +110,7 @@ const FEATURE_NAMESPACE_MAP = {
     corporate: "corporate",
     "before-after": "beforeAfter",
     collections: "collections",
+    "whatsapp-bot": "whatsappBot",
 };
 // Opaque dynamic import — prevents bundlers from statically analysing the path
 const _dynamicImport = new Function("modulePath", "return import(modulePath)");

package/dist/client.d.ts

@@ -545,7 +545,7 @@ export type { FeeDerivation, FeeDerivations } from "./_internal/shared/fees/expl
 export type { BuyerFacingFees, BuyerEmiSettings, } from "./_internal/shared/features/site-settings/fees";
 export type { PublicSiteSettings } from "./_internal/shared/features/site-settings/types";
 export { computeCodHandlingFee } from "./_internal/shared/fees/calculator";
-export type { CodHandlingFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
+export type { CodHandlingFeeRates, WhatsAppNotifyFeeRates, GiftWrapFeeRates, ShipmentProtectionFeeRates, } from "./_internal/shared/fees/calculator";
 export { FAQPageContent } from "./features/faq/index";
 export type { FAQCategory, FAQCategoryItem, FAQSortOption } from "./features/faq/index";
 export { CategoryInlineSelect } from "./features/seller/components/CategoryInlineSelect";
@@ -571,7 +571,7 @@ export type { AdCreativeFormValues } from "./features/ads/schemas/creative-form"
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms";
 export { changeEmailSchema } from "./features/account/schemas/index";
-export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
+export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form";
 export { refineAddressPostal, addressFormSchema, addressUpdateSchema, adminAddressCreateSchema, adminAddressUpdateSchema, addressUnbanRequestSchema, } from "./features/addresses/schemas/address-form";
 export type { AddressFormValues, AddressUpdateValues, AdminAddressCreateValues, } from "./features/addresses/schemas/address-form";

package/dist/client.js

@@ -619,7 +619,7 @@ export { adCreativeFormSchema } from "./features/ads/schemas/creative-form.js";
 export { adminStoreUpdateSchema, announcementBarSchema, } from "./features/admin/schemas/admin-editor-forms.js";
 export { adminOrderUpdateSchema, employeeInviteSchema, hardBanReasonSchema, featureFlagsUpdateSchema, adminAdFormSchema, } from "./features/admin/schemas/admin-ops-forms.js";
 export { changeEmailSchema } from "./features/account/schemas/index.js";
-export { adminUserUpdateSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
+export { adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema, } from "./features/admin/schemas/admin-user-form.js";
 export { siteSettingsFormSchema } from "./features/admin/schemas/site-settings-form.js";
 // The ONE address shape and the ONE postal rule (W5 / D19). Eleven field
 // shapes and fifteen disagreeing postal rules collapsed to these.

package/dist/constants/api-endpoints.d.ts

@@ -438,6 +438,14 @@ export declare const EVENT_ENDPOINTS: {
     readonly ENTRIES: (id: string) => string;
     readonly LEADERBOARD: (id: string, limit?: number) => string;
     readonly SPIN: (id: string) => string;
+    /**
+     * Likes. POST toggles the viewer's; GET pages the "liked by" list.
+     *
+     * `id` may be a slug — public event URLs link by slug — and the route
+     * resolves it to the canonical document id before keying anything.
+     */
+    readonly LIKES: (id: string) => string;
+    readonly LIKERS: (id: string, offset: number) => string;
     readonly LOTTERY_PULL: (id: string) => string;
     readonly LOTTERY_ENTRIES: (id: string) => string;
 };
@@ -626,6 +634,11 @@ export declare const SCAMMER_ENDPOINTS: {
 export declare const BEFORE_AFTER_ENDPOINTS: {
     readonly LIST: "/api/before-after";
 };
+export declare const WHATSAPP_SELLER_ENDPOINTS: {
+    readonly SETTINGS: "/api/store/whatsapp-settings";
+    readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
+    readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
+};
 export declare const API_ENDPOINTS: {
     readonly CONFIG: {};
     readonly LOGS: {
@@ -1006,6 +1019,14 @@ export declare const API_ENDPOINTS: {
         readonly ENTRIES: (id: string) => string;
         readonly LEADERBOARD: (id: string, limit?: number) => string;
         readonly SPIN: (id: string) => string;
+        /**
+         * Likes. POST toggles the viewer's; GET pages the "liked by" list.
+         *
+         * `id` may be a slug — public event URLs link by slug — and the route
+         * resolves it to the canonical document id before keying anything.
+         */
+        readonly LIKES: (id: string) => string;
+        readonly LIKERS: (id: string, offset: number) => string;
         readonly LOTTERY_PULL: (id: string) => string;
         readonly LOTTERY_ENTRIES: (id: string) => string;
     };
@@ -1178,6 +1199,11 @@ export declare const API_ENDPOINTS: {
         readonly PRODUCTS: (sellerId: string) => string;
         readonly REVIEWS: (userId: string) => string;
     };
+    readonly WHATSAPP_SELLER: {
+        readonly SETTINGS: "/api/store/whatsapp-settings";
+        readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
+        readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
+    };
     readonly SUPPORT: {
         readonly TICKETS: "/api/support/tickets";
         readonly TICKET_BY_ID: (id: string) => string;
@@ -1592,6 +1618,14 @@ export declare const API_ROUTES: {
         readonly ENTRIES: (id: string) => string;
         readonly LEADERBOARD: (id: string, limit?: number) => string;
         readonly SPIN: (id: string) => string;
+        /**
+         * Likes. POST toggles the viewer's; GET pages the "liked by" list.
+         *
+         * `id` may be a slug — public event URLs link by slug — and the route
+         * resolves it to the canonical document id before keying anything.
+         */
+        readonly LIKES: (id: string) => string;
+        readonly LIKERS: (id: string, offset: number) => string;
         readonly LOTTERY_PULL: (id: string) => string;
         readonly LOTTERY_ENTRIES: (id: string) => string;
     };
@@ -1764,6 +1798,11 @@ export declare const API_ROUTES: {
         readonly PRODUCTS: (sellerId: string) => string;
         readonly REVIEWS: (userId: string) => string;
     };
+    readonly WHATSAPP_SELLER: {
+        readonly SETTINGS: "/api/store/whatsapp-settings";
+        readonly CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync";
+        readonly CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import";
+    };
     readonly SUPPORT: {
         readonly TICKETS: "/api/support/tickets";
         readonly TICKET_BY_ID: (id: string) => string;

package/dist/constants/api-endpoints.js

@@ -541,6 +541,14 @@ export const EVENT_ENDPOINTS = {
     LEADERBOARD: (id, limit) => `/api/events/${id}/leaderboard${limit !== undefined ? `?limit=${limit}` : ""}`,
     // SB9-E user spin assignment
     SPIN: (id) => `/api/events/${id}/spin`,
+    /**
+     * Likes. POST toggles the viewer's; GET pages the "liked by" list.
+     *
+     * `id` may be a slug — public event URLs link by slug — and the route
+     * resolves it to the canonical document id before keying anything.
+     */
+    LIKES: (id) => `/api/events/${id}/likes`,
+    LIKERS: (id, offset) => `/api/events/${id}/likes?offset=${offset}`,
     // Lottery: user self-pull (draw happens immediately on submit)
     LOTTERY_PULL: (id) => `/api/events/${id}/lottery-pull`,
     LOTTERY_ENTRIES: (id) => `/api/events/${id}/lottery-entries`,
@@ -829,6 +837,13 @@ export const BEFORE_AFTER_ENDPOINTS = {
     LIST: "/api/before-after",
 };
 // ---------------------------------------------------------------------------
+// WhatsApp Business (store-level settings + catalog sync)
+// ---------------------------------------------------------------------------
+export const WHATSAPP_SELLER_ENDPOINTS = {
+    SETTINGS: "/api/store/whatsapp-settings",
+    CATALOG_SYNC: "/api/store/whatsapp-settings/catalog-sync",
+    CATALOG_IMPORT: "/api/store/whatsapp-settings/catalog-import",
+};
 // ---------------------------------------------------------------------------
 // Aggregate namespace export
 // ---------------------------------------------------------------------------
@@ -873,6 +888,7 @@ export const API_ENDPOINTS = {
     SUBLISTING_CATEGORIES: SUBLISTING_CATEGORY_ENDPOINTS,
     WISHLIST: WISHLIST_ENDPOINTS,
     PROFILE_STATS: PROFILE_STATS_ENDPOINTS,
+    WHATSAPP_SELLER: WHATSAPP_SELLER_ENDPOINTS,
     SUPPORT: SUPPORT_ENDPOINTS,
     SCAMMERS: SCAMMER_ENDPOINTS,
     REPORTS: REPORT_ENDPOINTS,

package/dist/constants/notification-types.d.ts

@@ -12,7 +12,7 @@
  *    **18 of the 27 real types** and was offered two that never appear.
  *  · `AdminSiteSettingsView`'s per-channel allow-list, so an admin literally
  *    **could not allow-list `offer_received` or `payment_review`** for email
- *    — the toggle did not exist.
+ *    or WhatsApp — the toggle did not exist.
  *
  * Everything here now derives from `NOTIFICATION_TYPE_VALUES`, so a new
  * notification type is one edit and cannot be missing from either surface.

package/dist/constants/notification-types.js

@@ -12,7 +12,7 @@
  *    **18 of the 27 real types** and was offered two that never appear.
  *  · `AdminSiteSettingsView`'s per-channel allow-list, so an admin literally
  *    **could not allow-list `offer_received` or `payment_review`** for email
- *    — the toggle did not exist.
+ *    or WhatsApp — the toggle did not exist.
  *
  * Everything here now derives from `NOTIFICATION_TYPE_VALUES`, so a new
  * notification type is one edit and cannot be missing from either surface.

package/dist/core/integration-keys.d.ts

@@ -12,6 +12,11 @@ export interface ResolvedKeys {
     /** Webhook signing secret. Optional in practice: without it `verifyWebhook()` fails closed and the buyer-present /verify path still works. */
     razorpayWebhookSecret: string;
     resendApiKey: string;
+    whatsappApiKey: string;
+    whatsappPhoneNumberId: string;
+    whatsappCloudApiToken: string;
+    /** Comma-separated digits-only numbers, e.g. "919876543210,918765432109" */
+    whatsappAdminNotifyNumbers: string;
 }
 /** Drops the in-process cache. Call this after admin saves new credentials. */
 export declare function invalidateIntegrationKeysCache(): void;

package/dist/core/integration-keys.js

@@ -32,6 +32,10 @@ const EMPTY_KEYS = {
     razorpayKeySecret: "",
     razorpayWebhookSecret: "",
     resendApiKey: "",
+    whatsappApiKey: "",
+    whatsappPhoneNumberId: "",
+    whatsappCloudApiToken: "",
+    whatsappAdminNotifyNumbers: "",
 };
 let _cache = null;
 const CACHE_TTL_MS = 60000; // 1 minute
@@ -79,6 +83,12 @@ export async function resolveKeys() {
         phonepeWebhookUsername: db.phonepeWebhookUsername || process.env.PHONEPE_WEBHOOK_USERNAME || "",
         phonepeWebhookPassword: db.phonepeWebhookPassword || process.env.PHONEPE_WEBHOOK_PASSWORD || "",
         resendApiKey: db.resendApiKey || process.env.RESEND_API_KEY || "",
+        whatsappApiKey: db.whatsappApiKey || process.env.WHATSAPP_API_KEY || "",
+        whatsappPhoneNumberId: db.whatsappPhoneNumberId || process.env.WHATSAPP_PHONE_NUMBER_ID || "",
+        whatsappCloudApiToken: db.whatsappCloudApiToken || process.env.WHATSAPP_CLOUD_API_TOKEN || "",
+        whatsappAdminNotifyNumbers: db.whatsappAdminNotifyNumbers ||
+            process.env.WHATSAPP_ADMIN_NOTIFY_NUMBERS ||
+            "",
     };
     _cache = { value, expiresAt: Date.now() + CACHE_TTL_MS };
     return value;

package/dist/features/about/components/FeesView.js

@@ -66,6 +66,12 @@ export async function FeesView({} = {}) {
             who: t("paidByBuyer"),
             note: t("codHandlingFeeNote"),
         },
+        {
+            category: t("whatsappNotifyFeeTitle"),
+            rate: t("whatsappNotifyFeeRate"),
+            who: t("paidByBuyer"),
+            note: t("whatsappNotifyFeeNote"),
+        },
         {
             category: t("giftWrapFeeTitle"),
             rate: t("giftWrapFeeRate"),

package/dist/features/about/components/HelpPageView.js

@@ -5,7 +5,7 @@ import { ProseHero } from "./ProseHero.js";
 import { FLEX_ROW } from "../../../_internal/shared/styles/themed.js";
 import { Alert, Div, Heading, Row, Section, Stack, Text } from "../../../ui/index.js";
 import { TextLink } from "../../../ui/index.js";
-import { BookOpen, MessageCircle, ShoppingBag, Gavel, PackageCheck, UserCheck, Store, ChevronRight, } from "lucide-react";
+import { BookOpen, MessageCircle, ShoppingBag, Gavel, PackageCheck, UserCheck, Store, ShieldCheck, ChevronRight, } from "lucide-react";
 const __P = {
     p6: "p-[var(--appkit-space-6)]",
     p8: "p-[var(--appkit-space-8)]",
@@ -48,6 +48,14 @@ export async function HelpPageView({} = {}) {
             color: "bg-violet-50 border-violet-200 dark:bg-violet-900/20 dark:border-violet-700",
             iconColor: "text-violet-600 dark:text-violet-400",
         },
+        {
+            icon: ShieldCheck,
+            title: t("topicSellerBadges"),
+            desc: t("topicSellerBadgesDesc"),
+            href: String(ROUTES.PUBLIC.HELP_SELLER_BADGES),
+            color: "bg-teal-50 border-teal-200 dark:bg-teal-900/20 dark:border-teal-700",
+            iconColor: "text-teal-600 dark:text-teal-400",
+        },
         {
             icon: BookOpen,
             title: t("topicFAQs"),

package/dist/features/account/components/BecomeSellerView.d.ts

@@ -4,13 +4,25 @@ export interface BecomeSellerViewLabels {
     applyButton?: string;
     alreadySeller?: string;
 }
+/**
+ * 🛑 `create-store` is a real state, not a variant of `already-seller`.
+ *
+ * Applying and owning a storefront are two different things, and the gap
+ * between them was invisible: a user who applied became `role: "seller"` with
+ * no store, and this shell's `already-seller` slot told them to "head over to
+ * your Store Dashboard" — a dashboard with no store behind it. There was no
+ * step anywhere in the product that created one. This state is that step.
+ */
+export type BecomeSellerState = "guide" | "success" | "create-store" | "already-seller";
 export interface BecomeSellerViewProps {
     labels?: BecomeSellerViewLabels;
     renderGuide?: () => React.ReactNode;
     renderSuccess?: () => React.ReactNode;
+    /** Seller with no store yet — renders the store-creation form. */
+    renderCreateStore?: () => React.ReactNode;
     renderAlreadySeller?: () => React.ReactNode;
-    /** Which state to render. Shell exposes all three slots; consumer controls which is active. */
-    state?: "guide" | "success" | "already-seller";
+    /** Which state to render. Shell exposes all four slots; consumer controls which is active. */
+    state?: BecomeSellerState;
     className?: string;
 }
-export declare function BecomeSellerView({ labels, renderGuide, renderSuccess, renderAlreadySeller, state, className, }: BecomeSellerViewProps): React.JSX.Element;
+export declare function BecomeSellerView({ labels, renderGuide, renderSuccess, renderCreateStore, renderAlreadySeller, state, className, }: BecomeSellerViewProps): React.JSX.Element;

package/dist/features/account/components/BecomeSellerView.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Div, Heading } from "../../../ui/index.js";
-export function BecomeSellerView({ labels = {}, renderGuide, renderSuccess, renderAlreadySeller, state = "guide", className = "", }) {
-    return (_jsxs(Div, { className: className, children: [labels.title && state === "guide" && (_jsx(Heading, { level: 1, className: "mb-6", size: "2xl", weight: "bold", children: labels.title })), state === "guide" && renderGuide?.(), state === "success" && renderSuccess?.(), state === "already-seller" && renderAlreadySeller?.()] }));
+export function BecomeSellerView({ labels = {}, renderGuide, renderSuccess, renderCreateStore, renderAlreadySeller, state = "guide", className = "", }) {
+    return (_jsxs(Div, { className: className, children: [labels.title && state === "guide" && (_jsx(Heading, { level: 1, className: "mb-6", size: "2xl", weight: "bold", children: labels.title })), state === "guide" && renderGuide?.(), state === "success" && renderSuccess?.(), state === "create-store" && renderCreateStore?.(), state === "already-seller" && renderAlreadySeller?.()] }));
 }

package/dist/features/account/components/BuyerShoppingGuideView.js

@@ -25,7 +25,7 @@ const SECTIONS = [
     },
     {
         Icon: CheckCircle, title: "Order Confirmation",
-        content: (_jsxs(_Fragment, { children: [_jsx(Text, { className: GC.textMuted, children: "After a successful payment you'll see an on-screen confirmation with your order ID. You'll also receive:" }), _jsxs(Ul, { className: `${GC.listDiscMuted} mt-3`, children: [_jsx(Li, { children: "An email confirmation to your registered address" }), _jsx(Li, { children: "An in-app notification you can read any time from the bell in the header" })] }), _jsxs(Text, { className: `${GC.textMuted} mt-3`, children: ["View all your orders at any time under ", _jsx(Span, { weight: "bold", children: "My Account \u2192 My Orders" }), "."] })] })),
+        content: (_jsxs(_Fragment, { children: [_jsx(Text, { className: GC.textMuted, children: "After a successful payment you'll see an on-screen confirmation with your order ID. You'll also receive:" }), _jsxs(Ul, { className: `${GC.listDiscMuted} mt-3`, children: [_jsx(Li, { children: "An email confirmation to your registered address" }), _jsx(Li, { children: "A WhatsApp message if you've added and verified your phone number" })] }), _jsxs(Text, { className: `${GC.textMuted} mt-3`, children: ["View all your orders at any time under ", _jsx(Span, { weight: "bold", children: "My Account \u2192 My Orders" }), "."] })] })),
     },
     {
         Icon: UserX, title: "Guest Limitations",

package/dist/features/account/components/NotificationPreferencesPanel.js

@@ -30,7 +30,7 @@ export function NotificationPreferencesPanel({ fetchUrl = ACCOUNT_ENDPOINTS.NOTI
     const { showToast } = useToast();
     const { data: settings } = useSiteSettings();
     const adminChannels = settings?.notificationChannels;
-    const [channels, setChannels] = useState({ email: true, sms: true });
+    const [channels, setChannels] = useState({ email: true, whatsapp: true, sms: true });
     const [types, setTypes] = useState({
         orderUpdates: true, bids: true, promotions: true,
         system: true, reviews: true, messages: true, offers: true,
@@ -92,7 +92,8 @@ export function NotificationPreferencesPanel({ fetchUrl = ACCOUNT_ENDPOINTS.NOTI
     }
     // Which channels are admin-enabled (only show those toggles to the user)
     const emailAdminEnabled = adminChannels?.email?.enabled ?? false;
+    const whatsappAdminEnabled = adminChannels?.whatsapp?.enabled ?? false;
     const smsAdminEnabled = adminChannels?.sms?.enabled ?? false;
-    const anyChannelEnabled = emailAdminEnabled || smsAdminEnabled;
-    return (_jsxs(Stack, { gap: "lg", children: [_jsx(SectionCard, { title: "In-app notifications", children: _jsxs(Row, { align: "center", justify: "between", gap: "md", padding: "y-sm", children: [_jsxs(Div, { children: [_jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: "In-app notifications" }), _jsx(Text, { variant: "secondary", className: "mt-0.5", size: "xs", children: "Always on \u2014 displayed in the notification bell and inbox" })] }), _jsx(Row, { className: "h-5 w-9 bg-[var(--appkit-color-primary)] px-[0.125rem]", align: "center", justify: "end", rounded: "full", "aria-label": "Always on", children: _jsx(Span, { className: "h-4 w-4", rounded: "full", surface: "default", shadow: "default" }) })] }) }), anyChannelEnabled && (_jsxs(SectionCard, { title: "Notification channels", children: [emailAdminEnabled && (_jsx(ToggleRow, { label: "Email", description: "Receive notifications by email", checked: channels.email !== false, onChange: (v) => setChannel("email", v) })), smsAdminEnabled && (_jsx(ToggleRow, { label: "SMS", description: "Receive SMS text notifications", checked: channels.sms !== false, onChange: (v) => setChannel("sms", v) }))] })), _jsx(SectionCard, { title: "Notification types", children: TYPE_ROWS.map((row) => (_jsx(ToggleRow, { label: row.label, description: row.description, checked: types[row.key] !== false, onChange: (v) => setType(row.key, v) }, row.key))) }), _jsxs(Row, { justify: "end", gap: "sm", children: [saved && (_jsx(Text, { className: "text-[var(--appkit-color-success)] self-center", size: "sm", children: "Preferences saved \u2713" })), _jsx(Button, { onClick: handleSave, isLoading: saving, size: "sm", children: "Save preferences" })] })] }));
+    const anyChannelEnabled = emailAdminEnabled || whatsappAdminEnabled || smsAdminEnabled;
+    return (_jsxs(Stack, { gap: "lg", children: [_jsx(SectionCard, { title: "In-app notifications", children: _jsxs(Row, { align: "center", justify: "between", gap: "md", padding: "y-sm", children: [_jsxs(Div, { children: [_jsx(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: "In-app notifications" }), _jsx(Text, { variant: "secondary", className: "mt-0.5", size: "xs", children: "Always on \u2014 displayed in the notification bell and inbox" })] }), _jsx(Row, { className: "h-5 w-9 bg-[var(--appkit-color-primary)] px-[0.125rem]", align: "center", justify: "end", rounded: "full", "aria-label": "Always on", children: _jsx(Span, { className: "h-4 w-4", rounded: "full", surface: "default", shadow: "default" }) })] }) }), anyChannelEnabled && (_jsxs(SectionCard, { title: "Notification channels", children: [emailAdminEnabled && (_jsx(ToggleRow, { label: "Email", description: "Receive notifications by email", checked: channels.email !== false, onChange: (v) => setChannel("email", v) })), whatsappAdminEnabled && (_jsx(ToggleRow, { label: "WhatsApp", description: "Receive notifications on WhatsApp", checked: channels.whatsapp !== false, onChange: (v) => setChannel("whatsapp", v) })), smsAdminEnabled && (_jsx(ToggleRow, { label: "SMS", description: "Receive SMS text notifications", checked: channels.sms !== false, onChange: (v) => setChannel("sms", v) }))] })), _jsx(SectionCard, { title: "Notification types", children: TYPE_ROWS.map((row) => (_jsx(ToggleRow, { label: row.label, description: row.description, checked: types[row.key] !== false, onChange: (v) => setType(row.key, v) }, row.key))) }), _jsxs(Row, { justify: "end", gap: "sm", children: [saved && (_jsx(Text, { className: "text-[var(--appkit-color-success)] self-center", size: "sm", children: "Preferences saved \u2713" })), _jsx(Button, { onClick: handleSave, isLoading: saving, size: "sm", children: "Save preferences" })] })] }));
 }

package/dist/features/account/types/index.d.ts

@@ -75,6 +75,8 @@ export interface UserAddress {
 export interface NotificationChannelPrefs {
     /** Disable all email notifications for this user (default: true = enabled). */
     email?: boolean;
+    /** Disable all WhatsApp notifications for this user. */
+    whatsapp?: boolean;
     /** Disable all SMS notifications for this user. */
     sms?: boolean;
 }

package/dist/features/admin/actions/notification-actions.d.ts

@@ -11,8 +11,21 @@ export declare function getUnreadNotificationCount(userId: string): Promise<numb
 export interface SendNotificationInput extends NotificationCreateInput {
     /** User's email — used by the email channel when enabled. */
     userEmail?: string;
+    /** User's phone with country code, digits only — used by WhatsApp channel. */
+    userPhone?: string;
     /** Pre-rendered email HTML — falls back to a plain-text <p> when absent. */
     emailHtml?: string;
+    /**
+     * The store this notification is about, for the order-lifecycle types in
+     * `ORDER_GATED_TYPES`. Its WhatsApp subscription decides whether the
+     * WhatsApp arm runs; absent, those types fall back to in-app + email.
+     *
+     * Resolved HERE rather than by each caller: six call sites would otherwise
+     * each do their own store read and each be a place the rule could drift
+     * (Root Cause #75). The read only happens when the type is gated AND
+     * WhatsApp is otherwise eligible, so the common path costs nothing.
+     */
+    storeId?: string;
     /**
      * Which portal the recipient reads this in — decides where `actionUrl`
      * points when the caller does not supply one.
@@ -48,15 +61,17 @@ export interface SendNotificationInput extends NotificationCreateInput {
 export interface SendNotificationResult {
     notification: NotificationDocument;
     email: "sent" | "skipped" | "failed";
+    /** WhatsApp dispatch is now async (enqueued as a `whatsappNotify` job) — "queued" replaces "sent" as the immediate outcome; the real delivery result lands on `notification.whatsappStatus`. */
+    whatsapp: "queued" | "skipped" | "failed";
 }
 /**
  * Create an in-app notification and fan out to enabled external channels.
  *
- * In-app is always written. Email is sent only when:
+ * In-app is always written.  Email / WhatsApp are sent only when:
  *   1. The channel is enabled in siteSettings.notificationChannels
  *   2. Notification priority meets the channel's minPriority threshold
  *   3. The optional `types` filter includes this notification type (or is absent)
- *   4. The contact field (userEmail) is supplied by the caller
+ *   4. The contact field (userEmail / userPhone) is supplied by the caller
  *   5. The required credentials are set in siteSettings.credentials
  */
 export declare function sendNotification(input: SendNotificationInput): Promise<SendNotificationResult>;