@mohasinac/appkit 4.63.4 → 4.64.0

package/dist/features/admin/components/AdminStoreEditorView.js

@@ -78,6 +78,7 @@ const CAPABILITY_META = {
     lower_commission_rate: { group: CAP_GROUP.PLATFORM, label: "Lower Commission Rate" },
     early_access_features: { group: CAP_GROUP.PLATFORM, label: "Early Access Features" },
     advanced_analytics: { group: CAP_GROUP.PLATFORM, label: "Advanced Analytics" },
+    whatsapp_catalog_sync: { group: CAP_GROUP.PLATFORM, label: "WhatsApp Catalog Sync" },
 };
 const CAPABILITY_GROUP_ORDER = [
     CAP_GROUP.LISTINGS,
@@ -110,13 +111,15 @@ function CapabilityPicker({ selected, onToggle, }) {
     return (_jsxs(Stack, { gap: "sm", children: [_jsxs(Span, { size: "sm", weight: "medium", color: "muted", children: ["Capabilities", _jsxs(Span, { size: "xs", weight: "normal", className: "ml-2", color: "muted", children: ["(", selected.size, " active)"] })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)]", rounded: "xl", border: "default", children: CAPABILITY_GROUPS.map((group) => (_jsxs(Details, { className: "group", children: [_jsxs(Summary, { paddingX: "x-sm", paddingY: "y-xs", weight: "semibold", color: "muted", layout: "flex", align: "center", justify: "between", className: "uppercase tracking-wide hover:bg-[var(--appkit-color-bg)] transition-colors", children: [_jsx(Span, { size: "xs", children: group.label }), _jsxs(Span, { size: "xs", weight: "normal", className: "normal-case", color: "faint", children: [group.caps.filter((c) => selected.has(c.key)).length, "/", group.caps.length] })] }), _jsx(Div, { layout: "grid", paddingY: "y-xs-tall", className: "grid-cols-2 gap-x-2 gap-y-1.5", surface: "muted", padding: "x-sm", children: group.caps.map((cap) => (_jsx(Checkbox, { label: cap.label, checked: selected.has(cap.key), onChange: () => onToggle(cap.key), wrapperClassName: "flex items-center gap-[var(--appkit-space-2)] cursor-pointer text-[length:var(--appkit-text-xs)] text-[var(--appkit-color-text-muted)]" }, cap.key))) })] }, group.label))) })] }));
 }
 // --- Component ---------------------------------------------------------------
-export function AdminStoreEditorView({ open, onClose, storeId, storeName, currentStatus, currentIsVerified, currentIsFeatured, currentCapabilities, currentAdminNotes, }) {
+export function AdminStoreEditorView({ open, onClose, storeId, storeName, currentStatus, currentIsVerified, currentIsFeatured, currentSellerTier, currentTrustedSeller, currentCapabilities, currentAdminNotes, }) {
     const queryClient = useQueryClient();
     const { showToast } = useToast();
     const [values, setValues] = React.useState(() => ({
         storeStatus: currentStatus ?? "pending",
         isVerified: currentIsVerified ?? false,
         isFeatured: currentIsFeatured ?? false,
+        sellerTier: currentSellerTier ?? "seller",
+        trustedSeller: currentTrustedSeller ?? false,
         suspensionReason: "",
         capabilities: currentCapabilities ?? DEFAULT_CAPABILITIES,
         adminNotes: currentAdminNotes ?? "",
@@ -131,11 +134,22 @@ export function AdminStoreEditorView({ open, onClose, storeId, storeName, curren
             storeStatus: currentStatus ?? "pending",
             isVerified: currentIsVerified ?? false,
             isFeatured: currentIsFeatured ?? false,
+            sellerTier: currentSellerTier ?? "seller",
+            trustedSeller: currentTrustedSeller ?? false,
             suspensionReason: "",
             capabilities: currentCapabilities ?? DEFAULT_CAPABILITIES,
             adminNotes: currentAdminNotes ?? "",
         });
-    }, [open, currentStatus, currentIsVerified, currentIsFeatured, currentCapabilities, currentAdminNotes]);
+    }, [
+        open,
+        currentStatus,
+        currentIsVerified,
+        currentIsFeatured,
+        currentSellerTier,
+        currentTrustedSeller,
+        currentCapabilities,
+        currentAdminNotes,
+    ]);
     const saveMutation = useApiMutation({
         errorMessage: "Failed to update store.",
         mutationFn: async () => {
@@ -157,6 +171,21 @@ export function AdminStoreEditorView({ open, onClose, storeId, storeName, curren
                 adminNotes: parsed.adminNotes ?? "",
                 isFeatured: parsed.isFeatured,
                 isVerified: parsed.isVerified,
+                /*
+                 * 🛑 `sellerTier` is sent ONLY when the admin actually moved it away
+                 * from the stored value, because the route treats any `sellerTier` in
+                 * the body as a deliberate override and PINS it against the monthly
+                 * recompute. Sending it unconditionally would lock every store an
+                 * admin ever opened and saved — quietly freezing the automatic tier
+                 * for the whole catalogue, one unrelated edit at a time.
+                 *
+                 * `trustedSeller` has no such side effect and is sent every time, so
+                 * it can also be cleared.
+                 */
+                ...(parsed.sellerTier !== undefined && parsed.sellerTier !== (currentSellerTier ?? "seller")
+                    ? { sellerTier: parsed.sellerTier }
+                    : {}),
+                trustedSeller: parsed.trustedSeller ?? false,
                 suspensionReason: parsed.suspensionReason || undefined,
                 capabilities: parsed.capabilities ?? [],
             });

package/dist/features/admin/components/AdminStoresGuideView.js

@@ -6,7 +6,7 @@ export function AdminStoresGuideView() {
     return (_jsxs(Stack, { className: "max-w-3xl mx-auto", padding: "b-2xl", gap: "xl", children: [_jsxs(Section, { children: [_jsxs(Row, { className: "mb-2", align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-10 h-10 [background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]", align: "center", justify: "center", rounded: "xl", children: _jsx(Store, { className: "w-5 h-5 text-white" }) }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Admin Guide" })] }), _jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)] mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: "Stores & Sellers" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", children: "Store lifecycle, identity architecture, capabilities, and suspension on LetItRip." })] }), [
                 {
                     Icon: Store, title: "Store Lifecycle",
-                    content: (_jsxs(Ul, { className: GC.listMuted, children: [_jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Creation" }), ": Seller registers \u2192 completes onboarding wizard \u2192 admin reviews \u2192 store goes ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "active" }), "."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Status values" }), ": ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "active" }), " (visible and selling), ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "suspended" }), " (hidden, not selling), ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "pending_review" }), " (awaiting admin approval)."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "isVerified badge" }), ": Awarded when the store has a consistent track record (\u226520 delivered orders, \u22654.0 rating, 3+ months active). Click the toggle in AdminStoreEditorView after reviewing the store's history."] })] })),
+                    content: (_jsxs(Ul, { className: GC.listMuted, children: [_jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Creation" }), ": Seller registers \u2192 completes onboarding wizard \u2192 admin reviews \u2192 store goes ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "active" }), "."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "Status values" }), ": ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "pending" }), " (awaiting approval, not public), ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "active" }), " (visible and selling), ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "suspended" }), " (hidden, not selling), ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "rejected" }), " (application refused). Only ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "active" }), " sets ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "isPublic" }), ", and leaving it clears any earned tier immediately."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "isVerified badge" }), ": An IDENTITY check, not a performance one \u2014 grant it after reviewing the seller's submitted ID. There is no order-count or rating threshold, and it does not expire. Toggle it in AdminStoreEditorView."] }), _jsxs(Li, { children: [_jsx(Span, { weight: "bold", children: "sellerTier" }), ": The EARNED tier, computed by ", _jsx(Code, { size: "xs", children: "sellerStandingRollup" }), " on the last day of each month. Setting it by hand pins it (", _jsx(Code, { size: "xs", children: "tierLockedByAdmin" }), ") so the job stops moving it \u2014 and it carries early payout with it. See the Trust guide."] })] })),
                 },
                 {
                     Icon: GitBranch, title: "Store Identity Architecture",

package/dist/features/admin/components/AdminStoresView.js

@@ -37,6 +37,34 @@ export function AdminStoresView({ children, ...props }) {
             void queryClient.invalidateQueries({ queryKey: ["admin", "stores", "listing"] });
         },
     });
+    /*
+     * 🛑 Approve/reject — the step that had no affordance anywhere.
+     *
+     * A store is born `pending` + `isPublic: false`, and this view offered only
+     * verify and suspend, so a real applicant's store could never be published.
+     * Both mutations go through the same STORE PATCH the rest of this view uses,
+     * which dispatches to `storeRepository.setStatus` and is therefore the only
+     * path that keeps `status` and `isPublic` in step. Do not reach for
+     * `adminUpdateStoreStatus`: it writes the user-level `storeStatus` mirror
+     * and never touches the store, so it would report success and publish
+     * nothing.
+     */
+    const approveStore = useApiMutation({
+        errorMessage: "Failed to approve store.",
+        mutationFn: (storeId) => apiClient.patch(ADMIN_ENDPOINTS.STORE_BY_ID(storeId), { storeStatus: "active" }),
+        onSuccess: () => {
+            toast.showToast("Store approved — it is now public.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "stores", "listing"] });
+        },
+    });
+    const rejectStore = useApiMutation({
+        errorMessage: "Failed to reject store.",
+        mutationFn: (storeId) => apiClient.patch(ADMIN_ENDPOINTS.STORE_BY_ID(storeId), { storeStatus: "rejected" }),
+        onSuccess: () => {
+            toast.showToast("Store application rejected.", "success");
+            void queryClient.invalidateQueries({ queryKey: ["admin", "stores", "listing"] });
+        },
+    });
     if (React.Children.count(children) > 0) {
         return (_jsx(ListingLayout, { portal: "admin", ...props, children: children }));
     }
@@ -108,7 +136,10 @@ export function AdminStoresView({ children, ...props }) {
             },
         })),
         renderRowActions: (row) => {
-            const isSuspended = row.status?.toLowerCase() === "suspended";
+            const status = row.status?.toLowerCase();
+            const isSuspended = status === "suspended";
+            const isPending = status === "pending";
+            const isActive = status === "active";
             const isVerified = Boolean(row._raw?.isVerified);
             return (_jsx(RowActionMenu, { actions: [
                     {
@@ -119,6 +150,24 @@ export function AdminStoresView({ children, ...props }) {
                         label: "Open full page",
                         onClick: () => router.push(String(ROUTES.ADMIN.STORE_DETAIL(row.id))),
                     },
+                    /*
+                     * Approve is offered for anything not already active — that
+                     * deliberately includes `rejected` and `suspended`, which is how a
+                     * decision gets reversed without hunting for a second control.
+                     * Reject is offered only while `pending`: rejecting a store that
+                     * has been live and has orders is a suspension, not a rejection,
+                     * and conflating them would lose that distinction in the audit log.
+                     */
+                    {
+                        label: ACTIONS.ADMIN["approve-store"].label,
+                        onClick: () => approveStore.mutate(row.id),
+                        disabled: isActive || approveStore.isPending,
+                    },
+                    {
+                        label: ACTIONS.ADMIN["reject-store"].label,
+                        onClick: () => rejectStore.mutate(row.id),
+                        disabled: !isPending || rejectStore.isPending,
+                    },
                     {
                         label: ACTIONS.ADMIN["verify-store"].label,
                         onClick: () => verifyStore.mutate(row.id),
@@ -133,7 +182,15 @@ export function AdminStoresView({ children, ...props }) {
         },
         renderFilterPanel: ({ pendingFilters, setPendingFilters }) => (_jsx(FilterChipGroup, { label: "Status", tabs: ADMIN_STORE_STATUS_TABS, value: pendingFilters.status ?? "", onChange: (id) => setPendingFilters((p) => ({ ...p, status: id })) })),
     };
-    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(AdminStoreEditorView, { open: Boolean(editorRow), onClose: () => setEditorRow(null), storeId: editorRow?.id, storeName: editorRow?.primary, currentStatus: editorRow?.status?.toLowerCase(), currentIsVerified: Boolean(editorRow?._raw?.isVerified), currentIsFeatured: Boolean(editorRow?._raw?.isFeatured), currentCapabilities: Array.isArray(editorRow?._raw?.capabilities)
+    return (_jsxs(_Fragment, { children: [_jsx(DataListingView, { config: config }), _jsx(AdminStoreEditorView, { open: Boolean(editorRow), onClose: () => setEditorRow(null), storeId: editorRow?.id, storeName: editorRow?.primary, currentStatus: editorRow?.status?.toLowerCase(), currentIsVerified: Boolean(editorRow?._raw?.isVerified), currentIsFeatured: Boolean(editorRow?._raw?.isFeatured), 
+                /*
+                 * Both now travel from the list route's serializer through to the
+                 * editor. `trustedSeller` was ALREADY emitted by the route and simply
+                 * never passed down — the API accepted the field, nothing could send
+                 * it, and the control did not exist. Root Cause #38's shape at the
+                 * prop, which is where it hides best.
+                 */
+                currentSellerTier: editorRow?._raw?.sellerTier === "trusted" ? "trusted" : "seller", currentTrustedSeller: Boolean(editorRow?._raw?.trustedSeller), currentCapabilities: Array.isArray(editorRow?._raw?.capabilities)
                     ? editorRow._raw.capabilities
                     : undefined, 
                 /*

package/dist/features/admin/components/AdminTrustGuideView.js

@@ -3,8 +3,18 @@ import { Shield, Ban, AlertTriangle, Headphones, Flag, ClipboardList } from "luc
 import { Alert, Code, Div, Heading, Li, Row, Section, Span, Stack, Table, Tbody, Td, Text, Th, Thead, Tr, Ul } from "../../../ui/index.js";
 import { GC } from "../../_guide-cls.js";
 const STILL_ALLOWED = "✓ Still allowed";
+/** Named because it is used on three rows in the seller-trust table. */
+const ROW_BORDER = "border-b border-[var(--appkit-color-border)]";
 export function AdminTrustGuideView() {
     return (_jsxs(Stack, { className: "max-w-3xl mx-auto", padding: "b-2xl", gap: "xl", children: [_jsxs(Section, { children: [_jsxs(Row, { className: "mb-2", align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-10 h-10 [background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]", align: "center", justify: "center", rounded: "xl", children: _jsx(Shield, { className: "w-5 h-5 text-white" }) }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Admin Guide" })] }), _jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)] mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: "Trust & Safety" }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)]", children: "Bans, scam registry, support tickets, moderation, and reports on LetItRip." })] }), [
+                {
+                    Icon: Shield, title: "Seller trust: three fields, two of them visible",
+                    content: (_jsxs(_Fragment, { children: [_jsx(Div, { overflow: "x-auto", children: _jsxs(Table, { size: "sm", children: [_jsx(Thead, { children: _jsx(Tr, { className: ROW_BORDER, children: ["Field", "Public?", "What it means", "Who sets it"].map((h) => (_jsx(Th, { align: "left", paddingSide: "pr-md", className: "text-[var(--appkit-color-text)]", padding: "xs-tall", weight: "semibold", children: h }, h))) }) }), _jsx(Tbody, { size: "sm", color: "muted", children: [
+                                                ["isVerified", "Yes — badge", "We checked WHO they are (ID review). No volume threshold; does not expire.", "Admin, by hand"],
+                                                ["sellerTier", "Yes — badge", "EARNED from the last 90 days of trading. Recomputed monthly.", "sellerStandingRollup, or an admin override that pins it"],
+                                                ["trustedSeller", "NO — never", "We pay this store at SHIPPING, not at delivery. A risk transfer.", "The tier carries it; an admin can also set it alone"],
+                                            ].map((row) => (_jsx(Tr, { className: ROW_BORDER, children: row.map((cell, i) => (_jsx(Td, { paddingSide: "pr-md", padding: "xs-tall", children: i === 0 ? _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: cell }) : cell }, i))) }, row[0]))) })] }) }), _jsxs(Alert, { variant: "warning", title: "trustedSeller moves money", children: ["It means the platform pays before the parcel lands, so we carry a lost parcel and a non-delivery dispute with the money already gone. It is never shown to buyers \u2014 a store does not get to display that we trust it. Every change writes a ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "STORE_TRUST_CHANGE" }), " ", "audit row naming who accepted the risk, including when the monthly job is the one that decided."] }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsxs(Li, { className: GC.listDiscMuted, children: [_jsx(Span, { weight: "bold", children: "Setting sellerTier by hand PINS it." }), " It writes", " ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "tierLockedByAdmin" }), ", and the monthly job then skips that store entirely \u2014 it still refreshes their figures, it just stops moving the tier. Without the pin an override would silently revert at the next month-end."] }), _jsxs(Li, { className: GC.listDiscMuted, children: [_jsx(Span, { weight: "bold", children: "Suspending a store revokes trust immediately" }), ", not at month end. Monthly caching would otherwise keep paying a suspended store early for up to 31 days. Re-activating does NOT re-grant it; the next month-end decides."] }), _jsxs(Li, { className: GC.listDiscMuted, children: [_jsx(Span, { weight: "bold", children: "The criteria live in one place" }), " \u2014", " ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "SELLER_STANDING_DEFAULTS" }), ", admin-tunable under Site Settings. The seller's dashboard panel, the public seller guide and the buyer-facing badge page all render from it, so they cannot state different numbers from the job that grants it."] }), _jsxs(Li, { className: GC.listDiscMuted, children: [_jsx(Span, { weight: "bold", children: "Self-bought and test orders do not count" }), ", and both a distinct-buyer and a distinct-address floor must be cleared \u2014 the tier releases money early, so buying from yourself 25 times is the attack it has to survive."] })] })] })),
+                },
                 {
                     Icon: Ban, title: "Soft Ban vs Hard Ban",
                     content: (_jsxs(_Fragment, { children: [_jsx(Div, { overflow: "x-auto", children: _jsxs(Table, { size: "sm", children: [_jsx(Thead, { children: _jsx(Tr, { className: "border-b border-[var(--appkit-color-border)]", children: ["", "Soft Ban", "Hard Ban"].map((h) => (_jsx(Th, { align: "left", paddingSide: "pr-md", className: "text-[var(--appkit-color-text)]", padding: "xs-tall", weight: "semibold", children: h }, h))) }) }), _jsx(Tbody, { size: "sm", color: "muted", children: [

package/dist/features/admin/constants/site-settings-tabs.d.ts

@@ -76,33 +76,38 @@ export declare const SITE_SETTINGS_TABS: readonly [{
     readonly label: "⑫ Legal";
     readonly description: "Terms, privacy policy, refund policy and the GST registration details.";
     readonly keywords: ["terms", "privacy", "policy", "gstin", "refund policy", "compliance"];
+}, {
+    readonly id: "whatsapp";
+    readonly label: "⑬ WhatsApp";
+    readonly description: "WhatsApp Business credentials and which messages go out over it.";
+    readonly keywords: ["whatsapp", "meta", "business api", "order updates"];
 }, {
     readonly id: "notifications";
-    readonly label: "⑬ Notifications";
-    readonly description: "Which channels are on — email and SMS — and the daily digest.";
+    readonly label: "⑭ Notifications";
+    readonly description: "Which channels are on — email, WhatsApp, SMS — and the daily digest.";
     readonly keywords: ["email", "sms", "alerts", "digest", "notify"];
 }, {
     readonly id: "procurement";
-    readonly label: "⑭ Procurement";
+    readonly label: "⑮ Procurement";
     readonly description: "Labour rate and the defaults used to price inbound shipments.";
     readonly keywords: ["labour rate", "labor", "import", "landed cost", "supplier"];
 }, {
     readonly id: "emi";
-    readonly label: "⑮ EMI";
+    readonly label: "⑯ EMI";
     readonly description: "Instalment plans: eligibility threshold, tenures and the surcharge split.";
     readonly keywords: ["instalments", "installments", "emi", "pay monthly", "finance"];
 }, {
     readonly id: "gst";
-    readonly label: "⑯ GST";
+    readonly label: "⑰ GST";
     readonly description: "GST rates, HSN defaults and the registered business details.";
     readonly keywords: ["tax", "gst", "hsn", "vat", "invoice tax"];
 }, {
     readonly id: "listings";
-    readonly label: "⑰ Listings";
+    readonly label: "⑱ Listings";
     readonly description: "Which listing types sellers may create, and their defaults.";
     readonly keywords: ["listing types", "auctions on", "enable", "categories"];
 }];
-export declare const SITE_SETTINGS_TAB_IDS: ("about" | "shipping" | "notifications" | "contact" | "auction" | "seo" | "listings" | "emi" | "legal" | "appearance" | "gst" | "watermark" | "integrations" | "limits" | "announcement" | "branding" | "themes" | "fees" | "procurement")[];
+export declare const SITE_SETTINGS_TAB_IDS: ("about" | "shipping" | "notifications" | "contact" | "auction" | "seo" | "listings" | "whatsapp" | "emi" | "legal" | "appearance" | "gst" | "watermark" | "integrations" | "limits" | "announcement" | "branding" | "themes" | "fees" | "procurement")[];
 /**
  * The union `?tab=` is validated against.
  *

package/dist/features/admin/constants/site-settings-tabs.js

@@ -108,33 +108,39 @@ export const SITE_SETTINGS_TABS = [
         description: "Terms, privacy policy, refund policy and the GST registration details.",
         keywords: ["terms", "privacy", "policy", "gstin", "refund policy", "compliance"],
     },
+    {
+        id: "whatsapp",
+        label: "⑬ WhatsApp",
+        description: "WhatsApp Business credentials and which messages go out over it.",
+        keywords: ["whatsapp", "meta", "business api", "order updates"],
+    },
     {
         id: "notifications",
-        label: "⑬ Notifications",
-        description: "Which channels are on — email and SMS — and the daily digest.",
+        label: "⑭ Notifications",
+        description: "Which channels are on — email, WhatsApp, SMS — and the daily digest.",
         keywords: ["email", "sms", "alerts", "digest", "notify"],
     },
     {
         id: "procurement",
-        label: "⑭ Procurement",
+        label: "⑮ Procurement",
         description: "Labour rate and the defaults used to price inbound shipments.",
         keywords: ["labour rate", "labor", "import", "landed cost", "supplier"],
     },
     {
         id: "emi",
-        label: "⑮ EMI",
+        label: "⑯ EMI",
         description: "Instalment plans: eligibility threshold, tenures and the surcharge split.",
         keywords: ["instalments", "installments", "emi", "pay monthly", "finance"],
     },
     {
         id: "gst",
-        label: "⑯ GST",
+        label: "⑰ GST",
         description: "GST rates, HSN defaults and the registered business details.",
         keywords: ["tax", "gst", "hsn", "vat", "invoice tax"],
     },
     {
         id: "listings",
-        label: "⑰ Listings",
+        label: "⑱ Listings",
         description: "Which listing types sellers may create, and their defaults.",
         keywords: ["listing types", "auctions on", "enable", "categories"],
     },

package/dist/features/admin/repository/site-settings.repository.js

@@ -137,7 +137,7 @@ export class SiteSettingsRepository extends BaseRepository {
                 encrypted[key] = encryptSecret(value.trim());
             }
             else if (value !== undefined && typeof value !== "string") {
-                // Non-string credential fields (e.g. a nested Record<string,string>)
+                // Non-string credential fields (e.g. whatsappTemplates: Record<string,string>)
                 // are stored as-is — they are not secret values to encrypt.
                 encrypted[key] = value;
             }

package/dist/features/admin/schemas/admin-editor-forms.d.ts

@@ -11,6 +11,8 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     storeStatus: z.ZodEnum<[StoreStatus, ...StoreStatus[]]>;
     isVerified: z.ZodOptional<z.ZodBoolean>;
     isFeatured: z.ZodOptional<z.ZodBoolean>;
+    sellerTier: z.ZodOptional<z.ZodEnum<["seller", "trusted"]>>;
+    trustedSeller: z.ZodOptional<z.ZodBoolean>;
     suspensionReason: z.ZodOptional<z.ZodString>;
     capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<[string, ...string[]]>, "many">>;
     adminNotes: z.ZodOptional<z.ZodString>;
@@ -21,6 +23,8 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     adminNotes?: string | undefined;
     suspensionReason?: string | undefined;
     capabilities?: string[] | undefined;
+    sellerTier?: "seller" | "trusted" | undefined;
+    trustedSeller?: boolean | undefined;
 }, {
     storeStatus: StoreStatus;
     isVerified?: boolean | undefined;
@@ -28,6 +32,8 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     adminNotes?: string | undefined;
     suspensionReason?: string | undefined;
     capabilities?: string[] | undefined;
+    sellerTier?: "seller" | "trusted" | undefined;
+    trustedSeller?: boolean | undefined;
 }>, {
     storeStatus: StoreStatus;
     isVerified?: boolean | undefined;
@@ -35,6 +41,8 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     adminNotes?: string | undefined;
     suspensionReason?: string | undefined;
     capabilities?: string[] | undefined;
+    sellerTier?: "seller" | "trusted" | undefined;
+    trustedSeller?: boolean | undefined;
 }, {
     storeStatus: StoreStatus;
     isVerified?: boolean | undefined;
@@ -42,6 +50,8 @@ export declare const adminStoreUpdateSchema: z.ZodEffects<z.ZodObject<{
     adminNotes?: string | undefined;
     suspensionReason?: string | undefined;
     capabilities?: string[] | undefined;
+    sellerTier?: "seller" | "trusted" | undefined;
+    trustedSeller?: boolean | undefined;
 }>;
 export type AdminStoreUpdateValues = z.infer<typeof adminStoreUpdateSchema>;
 /**

package/dist/features/admin/schemas/admin-editor-forms.js

@@ -75,6 +75,40 @@ export const adminStoreUpdateSchema = z
     isFeatured: annotate(z.boolean().optional(), {
         section: "standing", order: 3, row: "quarter",
     }),
+    /*
+     * The EARNED tier, overridable by hand.
+     *
+     * 🛑 Setting it here PINS it — the monthly `sellerStandingRollup` skips a
+     * store whose `standing.tierLockedByAdmin` is true. Without the pin an
+     * override would silently revert at the next month-end, which is worse
+     * than no override: an admin grants a tier, sees it work, and finds it
+     * undone weeks later with nothing saying why.
+     *
+     * 🛑 It carries EARLY PAYOUT with it (see `trustedSeller` below) — the
+     * owner's decision is that reaching the tier grants pay-at-shipping. This
+     * control therefore moves money, which is why the help text says so.
+     */
+    sellerTier: annotate(z.enum(["seller", "trusted"]).optional(), {
+        section: "standing", order: 5, row: "pair", kind: "select",
+        help: "Normally earned automatically at each month-end. Setting it here pins it and also switches payouts to start at shipping.",
+    }),
+    /*
+     * 🛑 This field has existed and been accepted by the API since it was
+     * added, with NO control anywhere in the admin UI — so the only way to set
+     * it was a hand-written PATCH. A flag that moves money and cannot be
+     * operated is worse than one that does not exist, because the code reads
+     * as though an admin is in control of it.
+     *
+     * Separate from `sellerTier` on purpose: the tier is the public, earned
+     * thing, and this is the private risk posture. An admin occasionally needs
+     * one without the other — early payout for a high-volume store that has
+     * not met the rating bar, or a badge for the platform's own store without
+     * changing its payout timing.
+     */
+    trustedSeller: annotate(z.boolean().optional(), {
+        section: "standing", order: 6, row: "quarter",
+        help: "Pay this store when it ships, not when the parcel is delivered. The platform carries a lost parcel with the money already gone. Never shown to buyers.",
+    }),
     /*
      * `when` mirrors the superRefine below, which is what stops the two from
      * disagreeing. The page used to keep this textarea live at all times and

package/dist/features/admin/schemas/admin-user-form.d.ts

@@ -65,6 +65,67 @@ export declare function toPublicProfilePayload(v: {
     linkedin?: string;
 }): Record<string, JsonValue> | undefined;
 export type AdminUserUpdateValues = z.infer<typeof adminUserUpdateSchema>;
+/**
+ * A store's WhatsApp Business connection.
+ *
+ * `accessToken` is optional because the form shows a masked placeholder and
+ * only sends the field when the seller types a NEW value — so "absent" means
+ * "unchanged", not "clear it". The `.min(20)` therefore applies only to a real
+ * replacement, and is there because a truncated token fails silently at sync
+ * time rather than on save.
+ */
+export declare const whatsappSettingsSchema: z.ZodObject<{
+    catalogSyncEnabled: z.ZodBoolean;
+    phoneNumber: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    wabaId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    catalogId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    accessToken: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+}, "strip", z.ZodTypeAny, {
+    catalogSyncEnabled: boolean;
+    phoneNumber?: string | undefined;
+    accessToken?: string | undefined;
+    wabaId?: string | undefined;
+    catalogId?: string | undefined;
+}, {
+    catalogSyncEnabled: boolean;
+    phoneNumber?: string | undefined;
+    accessToken?: string | undefined;
+    wabaId?: string | undefined;
+    catalogId?: string | undefined;
+}>;
+export type WhatsappSettingsValues = z.infer<typeof whatsappSettingsSchema>;
+/**
+ * The CONNECTION form's fields — credentials only.
+ *
+ * `catalogSyncEnabled` is deliberately absent. Its toggle lives in a different
+ * card and owns its own write (`syncToggleMutation`), because the credentials
+ * form used to send it unconditionally from two cards away: a seller flipped
+ * the switch, saw it move, and nothing persisted it. A field in this schema is
+ * a field this form's Save button owns.
+ *
+ * 🛑 `.omit()` rather than a second literal, so the two cannot drift — it
+ * carries the SAME field instances into the new shape, which is what keeps the
+ * `annotate()` WeakMap entries alive. (A wrapper such as `.superRefine()` is
+ * transparent for the same reason; a field-level re-wrap is not.)
+ */
+export declare const whatsappConnectionSchema: z.ZodObject<Omit<{
+    catalogSyncEnabled: z.ZodBoolean;
+    phoneNumber: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    wabaId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    catalogId: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    accessToken: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+}, "catalogSyncEnabled">, "strip", z.ZodTypeAny, {
+    phoneNumber?: string | undefined;
+    accessToken?: string | undefined;
+    wabaId?: string | undefined;
+    catalogId?: string | undefined;
+}, {
+    phoneNumber?: string | undefined;
+    accessToken?: string | undefined;
+    wabaId?: string | undefined;
+    catalogId?: string | undefined;
+}>;
+export type WhatsappConnectionValues = z.infer<typeof whatsappConnectionSchema>;
 /**
  * A buyer's lottery entry.
  *

package/dist/features/admin/schemas/admin-user-form.js

@@ -8,20 +8,24 @@
  *      false, and saving any unrelated field silently stripped a real
  *      tester's access.
  *
+ *      `SellerWhatsAppSettingsView` writes `accessToken` — a live Meta
+ *      credential — plus the WABA and catalog ids the sync runs against. A
+ *      malformed id there fails at sync time, hours later, with no obvious
+ *      cause.
  *
  *      `LotteryPullForm` is a buyer-facing entry: a transaction id, a payment
  *      time and an item number, all parsed with a bare `parseInt` and a `new
  *      Date(...)` that yields `Invalid Date` on anything unparseable.
  *
  * EXPORTS:
- *   adminUserUpdateSchema, lotteryPullSchema,
+ *   adminUserUpdateSchema, whatsappSettingsSchema, lotteryPullSchema,
  *   and their inferred value types
  *
- * @tag domain:admin,lottery
+ * @tag domain:admin,whatsapp,lottery
  * @tag layer:schema
  * @tag pattern:none
  * @tag access:isomorphic
- * @tag consumers:AdminUserEditorView,LotteryPullForm
+ * @tag consumers:AdminUserEditorView,SellerWhatsAppSettingsView,LotteryPullForm
  * @tag sideEffects:none
  */
 import { z } from "zod";
@@ -127,6 +131,43 @@ export function toPublicProfilePayload(v) {
         publicProfile.socialLinks = socialLinks;
     return Object.keys(publicProfile).length > 0 ? publicProfile : undefined;
 }
+/**
+ * A store's WhatsApp Business connection.
+ *
+ * `accessToken` is optional because the form shows a masked placeholder and
+ * only sends the field when the seller types a NEW value — so "absent" means
+ * "unchanged", not "clear it". The `.min(20)` therefore applies only to a real
+ * replacement, and is there because a truncated token fails silently at sync
+ * time rather than on save.
+ */
+export const whatsappSettingsSchema = z.object({
+    catalogSyncEnabled: annotate(z.boolean(), {
+        section: "sync", sectionLabel: "Catalog sync", sectionRequired: true, quick: true, order: 1, row: "quarter",
+    }),
+    phoneNumber: annotate(z.string().trim().regex(PHONE_RE, "Enter the 10-digit WhatsApp Business number.").optional().or(z.literal("")), { section: "connection", sectionLabel: "Connection", order: 1, row: "pair" }),
+    // Meta ids are numeric strings; a pasted URL or a stray space is the usual
+    // mistake and produces a sync that never runs.
+    wabaId: annotate(z.string().trim().regex(/^\d{5,32}$/, "A WABA ID is a numeric id, not a URL.").optional().or(z.literal("")), { section: "connection", order: 2, row: "pair" }),
+    catalogId: annotate(z.string().trim().regex(/^\d{5,32}$/, "A catalog ID is a numeric id, not a URL.").optional().or(z.literal("")), { section: "connection", order: 3, row: "pair" }),
+    accessToken: annotate(z.string().trim().min(20, "That access token looks truncated.").optional().or(z.literal("")), { section: "connection", order: 4, row: "full", help: "Leave blank to keep the current token." }),
+});
+/**
+ * The CONNECTION form's fields — credentials only.
+ *
+ * `catalogSyncEnabled` is deliberately absent. Its toggle lives in a different
+ * card and owns its own write (`syncToggleMutation`), because the credentials
+ * form used to send it unconditionally from two cards away: a seller flipped
+ * the switch, saw it move, and nothing persisted it. A field in this schema is
+ * a field this form's Save button owns.
+ *
+ * 🛑 `.omit()` rather than a second literal, so the two cannot drift — it
+ * carries the SAME field instances into the new shape, which is what keeps the
+ * `annotate()` WeakMap entries alive. (A wrapper such as `.superRefine()` is
+ * transparent for the same reason; a field-level re-wrap is not.)
+ */
+export const whatsappConnectionSchema = whatsappSettingsSchema.omit({
+    catalogSyncEnabled: true,
+});
 /**
  * A buyer's lottery entry.
  *