@mohasinac/appkit 4.70.0 → 4.71.0

package/dist/features/store-extensions/repository/store-extensions.repositories.d.ts

@@ -10,11 +10,17 @@
  * per-method override is needed (which is the point of the hooks — Pattern #9
  * described overrides that never existed).
  *
+ * 🛑 Reads are CIPHERTEXT-BY-DEFAULT since 2026-10-28. Those three fields are
+ * `Encrypted<string>` and `mapDoc` does not decrypt; use
+ * `maskedPayoutMethod(s)` (the default) or `revealPayoutMethod(s)` (opt-in and
+ * named). The interim state — encrypted at rest but decrypted on every read —
+ * was invisible to `audit-pii-coverage` purely because this file is named
+ * `.repositories.ts` and its filter read `.repository.ts`.
+ *
  * The other ten hold no PII and use the BaseRepository public API only.
  */
 import { BaseRepository } from "../../../providers/db-firebase";
-import type { DocumentSnapshot } from "firebase-admin/firestore";
-import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument, type StoreWhatsAppConfigDocument } from "../schemas/firestore";
+import { type AnalyticsAlertDocument, type AnalyticsCardDocument, type ItemRequestDocument, type ItemRequestReply, type ListingTemplateDocument, type ModerationQueueDocument, type PayoutMethodDocument, type PayoutMethodPlain, type ReportDocument, type ShippingConfigDocument, type StoreCategoryDocument, type StoreGoogleConfigDocument, type StoreWhatsAppConfigDocument } from "../schemas/firestore";
 export declare class PayoutMethodsRepository extends BaseRepository<PayoutMethodDocument> {
     /**
      * Bank/UPI details, encrypted at rest by BaseRepository's write hooks.
@@ -25,8 +31,28 @@ export declare class PayoutMethodsRepository extends BaseRepository<PayoutMethod
      */
     protected piiFields: readonly ["upiVpa", "accountNumber", "ifscCode"];
     constructor();
-    /** Decrypt on read so callers see the shape they wrote. */
-    protected mapDoc<D = PayoutMethodDocument>(snap: DocumentSnapshot): D;
+    /**
+     * Plaintext PII. **Opt-in and named** — the four `/api/store/payout-methods`
+     * response sites call it explicitly, which is the whole gain here: the
+     * decrypt is now four greppable call sites instead of implicit for every
+     * reader of this repository.
+     *
+     * 🛑 There is deliberately NO masked variant yet, and that is not an
+     * oversight. Masking payout methods properly means following
+     * `SellerPayoutSettingsView`'s convention — a separate `accountNumberMasked`
+     * key with the real field ABSENT, the form input starting empty, and "blank
+     * keeps existing" enforced server-side — because masking the real key
+     * in-place would be double-masked by
+     * `SellerPayoutMethodsView.getMaskedIdentifier` and, worse, saved over the
+     * real value by `.../[id]/edit`, which PATCHes its whole prefilled form
+     * back. When that change lands it is
+     * `maskPii(doc, PAYOUT_METHOD_PII_FIELDS)`, one import away; an unused
+     * accessor shipped ahead of it is the speculative surface `AK3-yagni-prune`
+     * exists to delete.
+     */
+    revealPayoutMethod(doc: PayoutMethodDocument): PayoutMethodPlain;
+    /** As `revealPayoutMethod`, for a list read. */
+    revealPayoutMethods(docs: readonly PayoutMethodDocument[]): PayoutMethodPlain[];
     listByStore(storeId: string): Promise<{
         items: PayoutMethodDocument[];
     }>;

package/dist/features/store-extensions/repository/store-extensions.repositories.js

@@ -10,12 +10,19 @@
  * per-method override is needed (which is the point of the hooks — Pattern #9
  * described overrides that never existed).
  *
+ * 🛑 Reads are CIPHERTEXT-BY-DEFAULT since 2026-10-28. Those three fields are
+ * `Encrypted<string>` and `mapDoc` does not decrypt; use
+ * `maskedPayoutMethod(s)` (the default) or `revealPayoutMethod(s)` (opt-in and
+ * named). The interim state — encrypted at rest but decrypted on every read —
+ * was invisible to `audit-pii-coverage` purely because this file is named
+ * `.repositories.ts` and its filter read `.repository.ts`.
+ *
  * The other ten hold no PII and use the BaseRepository public API only.
  */
 import { BaseRepository } from "../../../providers/db-firebase/index.js";
 import { arrayUnion, increment } from "../../../contracts/field-ops.js";
-import { decryptPiiFields } from "../../../security/pii-encrypt.js";
-import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, STORE_WHATSAPP_CONFIG_COLLECTION, } from "../schemas/firestore.js";
+import { revealPii } from "../../../security/pii-accessors.js";
+import { ANALYTICS_ALERTS_COLLECTION, ANALYTICS_CARDS_COLLECTION, ITEM_REQUESTS_COLLECTION, LISTING_TEMPLATES_COLLECTION, MODERATION_QUEUE_COLLECTION, PAYOUT_METHOD_PII_FIELDS, PAYOUT_METHODS_COLLECTION, REPORTS_COLLECTION, SHIPPING_CONFIGS_COLLECTION, STORE_CATEGORIES_COLLECTION, STORE_GOOGLE_CONFIG_COLLECTION, STORE_WHATSAPP_CONFIG_COLLECTION, } from "../schemas/firestore.js";
 export class PayoutMethodsRepository extends BaseRepository {
     constructor() {
         super(PAYOUT_METHODS_COLLECTION);
@@ -26,12 +33,44 @@ export class PayoutMethodsRepository extends BaseRepository {
          * (`listByStore` filters on `storeId`), so no read path depended on their
          * plaintext.
          */
-        this.piiFields = ["upiVpa", "accountNumber", "ifscCode"];
+        this.piiFields = PAYOUT_METHOD_PII_FIELDS;
+    }
+    /*
+     * 🛑 `mapDoc` no longer decrypts — reads return what Firestore holds.
+     *
+     * It used to override `mapDoc` and call `decryptPiiFields` on every read, so
+     * a plain `listByStore()` handed its caller a decrypted bank account number
+     * and IFSC code, and `GET /api/store/payout-methods` returned all three in
+     * full. That survived because `audit-pii-coverage` filtered
+     * `.endsWith(".repository.ts")` and this file is `.repositories.ts`, so the
+     * audit whose entire purpose is to find this reported `0 findings` — see the
+     * note on `isRepositoryModule` in that script.
+     */
+    /**
+     * Plaintext PII. **Opt-in and named** — the four `/api/store/payout-methods`
+     * response sites call it explicitly, which is the whole gain here: the
+     * decrypt is now four greppable call sites instead of implicit for every
+     * reader of this repository.
+     *
+     * 🛑 There is deliberately NO masked variant yet, and that is not an
+     * oversight. Masking payout methods properly means following
+     * `SellerPayoutSettingsView`'s convention — a separate `accountNumberMasked`
+     * key with the real field ABSENT, the form input starting empty, and "blank
+     * keeps existing" enforced server-side — because masking the real key
+     * in-place would be double-masked by
+     * `SellerPayoutMethodsView.getMaskedIdentifier` and, worse, saved over the
+     * real value by `.../[id]/edit`, which PATCHes its whole prefilled form
+     * back. When that change lands it is
+     * `maskPii(doc, PAYOUT_METHOD_PII_FIELDS)`, one import away; an unused
+     * accessor shipped ahead of it is the speculative surface `AK3-yagni-prune`
+     * exists to delete.
+     */
+    revealPayoutMethod(doc) {
+        return revealPii(doc, PAYOUT_METHOD_PII_FIELDS);
     }
-    /** Decrypt on read so callers see the shape they wrote. */
-    mapDoc(snap) {
-        const raw = super.mapDoc(snap);
-        return decryptPiiFields(raw, [...this.piiFields]);
+    /** As `revealPayoutMethod`, for a list read. */
+    revealPayoutMethods(docs) {
+        return docs.map((d) => this.revealPayoutMethod(d));
     }
     async listByStore(storeId) {
         const items = await this.findBy("storeId", storeId);

package/dist/features/store-extensions/schemas/firestore.d.ts

@@ -1,6 +1,7 @@
 import type { AlertMetric } from "../constants/alert-metrics";
 import type { FirestoreDocument } from "@mohasinac/appkit";
 import type { BaseDocument } from "../../../_internal/shared/types/base-document";
+import type { Encrypted, Plaintext } from "../../../security/encrypted";
 /**
  * S-STORE Extensions — Firestore Document Types
  *
@@ -29,13 +30,31 @@ export interface PayoutMethodDocument extends BaseDocument {
     label: string;
     isDefault: boolean;
     isActive: boolean;
-    upiVpa?: string;
-    accountNumber?: string;
-    ifscCode?: string;
+    upiVpa?: Encrypted<string>;
+    accountNumber?: Encrypted<string>;
+    ifscCode?: Encrypted<string>;
     accountHolderName?: string;
     bankName?: string;
     details?: Record<string, string>;
 }
+/** `Plaintext<T>` is the one definition of this shape; see `security/encrypted.ts`. */
+export type PayoutMethodPlain = Plaintext<PayoutMethodDocument>;
+/**
+ * The three fields BaseRepository's write hooks encrypt at rest.
+ *
+ * 🛑 Exported rather than inlined in the repository, because `revealPii` /
+ * `maskPii` need the same list and two copies of a field list is Root Cause
+ * #75 — one money predicate hand-written in six places, two of which had
+ * silently dropped a field.
+ *
+ * `accountHolderName` is deliberately ABSENT: it is a person's name on the
+ * seller's own payout method, it is not matched by the audit's PII shape
+ * regex, and it was never encrypted. Adding it here would brand a field the
+ * write hooks have never encrypted, so `decryptValue` would pass the
+ * plaintext straight through and the brand would be a lie — exactly the
+ * half-change CLAUDE.md warns about.
+ */
+export declare const PAYOUT_METHOD_PII_FIELDS: readonly ["upiVpa", "accountNumber", "ifscCode"];
 export declare const PAYOUT_METHODS_COLLECTION: "payoutMethods";
 export declare const PAYOUT_METHOD_INDEXED_FIELDS: readonly ["sellerId", "storeId", "type", "isDefault", "isActive", "createdAt"];
 export declare const DEFAULT_PAYOUT_METHOD_DATA: Partial<PayoutMethodDocument>;

package/dist/features/store-extensions/schemas/firestore.js

@@ -1,3 +1,23 @@
+/**
+ * The three fields BaseRepository's write hooks encrypt at rest.
+ *
+ * 🛑 Exported rather than inlined in the repository, because `revealPii` /
+ * `maskPii` need the same list and two copies of a field list is Root Cause
+ * #75 — one money predicate hand-written in six places, two of which had
+ * silently dropped a field.
+ *
+ * `accountHolderName` is deliberately ABSENT: it is a person's name on the
+ * seller's own payout method, it is not matched by the audit's PII shape
+ * regex, and it was never encrypted. Adding it here would brand a field the
+ * write hooks have never encrypted, so `decryptValue` would pass the
+ * plaintext straight through and the brand would be a lie — exactly the
+ * half-change CLAUDE.md warns about.
+ */
+export const PAYOUT_METHOD_PII_FIELDS = [
+    "upiVpa",
+    "accountNumber",
+    "ifscCode",
+];
 export const PAYOUT_METHODS_COLLECTION = "payoutMethods";
 export const PAYOUT_METHOD_INDEXED_FIELDS = [
     "sellerId",

package/dist/features/stores/components/StoreCapabilitiesGuideView.js

@@ -8,6 +8,7 @@ import { Row, Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
 import { SellerStandingPanel } from "./SellerStandingPanel.js";
+import { getBrandName, getBrandDomain, getBrandSupportEmail } from "../../../core/brand-resolver.js";
 const SUBHEADING = "mb-1 font-semibold text-[var(--appkit-color-text)]";
 const LIST_DISC = "list-disc leading-relaxed";
 const SECTION_BODY = "space-y-4 text-[length:var(--appkit-text-sm)] text-[var(--appkit-color-text-muted)]";
@@ -17,7 +18,7 @@ function GuideSection({ title, children, }) {
 }
 // -- Section 1: What are capabilities -----------------------------------------
 function WhatAreCapabilitiesSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsx(Text, { className: "leading-relaxed", children: "Capabilities are per-store feature flags granted by the LetItRip team. They are not self-serve \u2014 they must be requested and approved. This gives LetItRip control over trust, quality, and platform safety as your store grows." }), _jsxs(Text, { className: "leading-relaxed", children: ["Two capabilities are enabled for every store at creation by default:", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "suggest_brands" }), " and", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "create_coupons" }), ". All others must be requested. Some require contractual agreements before they can be granted."] })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Text, { className: "leading-relaxed", children: ["Capabilities are per-store feature flags granted by the ", getBrandName(), " team. They are not self-serve \u2014 they must be requested and approved. This gives ", getBrandName(), " control over trust, quality, and platform safety as your store grows."] }), _jsxs(Text, { className: "leading-relaxed", children: ["Two capabilities are enabled for every store at creation by default:", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "suggest_brands" }), " and", _jsx(Code, { className: "mx-1", size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "create_coupons" }), ". All others must be requested. Some require contractual agreements before they can be granted."] })] }));
 }
 // -- Section 2: Capability table ----------------------------------------------
 const CAPABILITY_GROUPS = [
@@ -62,7 +63,7 @@ const CAPABILITY_GROUPS = [
     {
         group: "Platform & Technical",
         items: [
-            { cap: "multiple_stores", unlocks: "You (same owner) can create more than one store on LetItRip.", defaultOn: false },
+            { cap: "multiple_stores", unlocks: `You (same owner) can create more than one store on ${getBrandName()}.`, defaultOn: false },
             { cap: "custom_store_slug", unlocks: "Change your store URL slug after the 7-day post-creation lock period.", defaultOn: false },
             { cap: "api_access", unlocks: "Programmatic API credentials for advanced integrations (future).", defaultOn: false },
             { cap: "lower_commission_rate", unlocks: "Negotiated reduced platform fee. Requires a signed agreement and minimum volume.", defaultOn: false },
@@ -80,7 +81,7 @@ const LOCKED_FEATURES = [
     {
         cap: "host_auctions",
         missing: ["Create auction listings", "Set reserve prices and bid increments", "Auto-notify winner at auction end"],
-        howToUnlock: "Contact support@letitrip.in with at least 10 delivered orders and 3 months of store activity. Our team reviews within 5 business days.",
+        howToUnlock: `Contact ${getBrandSupportEmail()} with at least 10 delivered orders and 3 months of store activity. Our team reviews within 5 business days.`,
         contractRequired: false,
     },
     {
@@ -92,7 +93,7 @@ const LOCKED_FEATURES = [
     {
         cap: "lower_commission_rate",
         missing: ["Reduced platform fee (custom rate)", "Higher net margin per order"],
-        howToUnlock: "Available to stores with ₹2L+ GMV per month. Contact your account manager or email partner@letitrip.in with your last 3 months' payout statements.",
+        howToUnlock: `Available to stores with ₹2L+ GMV per month. Contact your account manager or email partner@${getBrandDomain()} with your last 3 months' payout statements.`,
         contractRequired: true,
     },
     {
@@ -104,7 +105,7 @@ const LOCKED_FEATURES = [
     {
         cap: "bulk_listing_import",
         missing: ["CSV batch upload for products", "Template download for bulk edits"],
-        howToUnlock: "Contact support@letitrip.in — available to stores with verified status and 50+ published listings.",
+        howToUnlock: `Contact ${getBrandSupportEmail()} — available to stores with verified status and 50+ published listings.`,
         contractRequired: false,
     },
 ];
@@ -125,7 +126,7 @@ function LockedFeatureGuide() {
  * drift from the job that grants it.
  */
 function VerifiedSellerSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Two different badges" }), _jsxs(Text, { className: "leading-relaxed", children: [_jsx(Span, { weight: "bold", children: "Verified" }), " means LetItRip has checked who you are. It is granted by an admin after an identity review, it is not earned by volume, and it does not expire on its own.", " ", _jsx(Span, { weight: "bold", children: "Trusted Seller" }), " is earned from your trading record and is recalculated every month \u2014 you can gain it and you can lose it. A store can hold either, both, or neither."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Getting Verified" }), _jsx(Text, { className: "leading-relaxed", children: "Open a support ticket from your store dashboard with category \"Account\" and subject \"Verified Seller Application\", and attach a government-issued photo ID. An admin reviews it and sets the badge on your store." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Earning Trusted Seller" }), _jsx(Text, { className: "leading-relaxed", children: "Every criterion below is measured over the same rolling window, and all of them have to hold at the same time. Meeting them also changes when you are paid: your payout starts when you ship rather than when the parcel is delivered." })] }), _jsx(SellerStandingPanel, { heading: "The criteria" })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Two different badges" }), _jsxs(Text, { className: "leading-relaxed", children: [_jsx(Span, { weight: "bold", children: "Verified" }), " means ", getBrandName(), " has checked who you are. It is granted by an admin after an identity review, it is not earned by volume, and it does not expire on its own.", " ", _jsx(Span, { weight: "bold", children: "Trusted Seller" }), " is earned from your trading record and is recalculated every month \u2014 you can gain it and you can lose it. A store can hold either, both, or neither."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Getting Verified" }), _jsx(Text, { className: "leading-relaxed", children: "Open a support ticket from your store dashboard with category \"Account\" and subject \"Verified Seller Application\", and attach a government-issued photo ID. An admin reviews it and sets the badge on your store." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Earning Trusted Seller" }), _jsx(Text, { className: "leading-relaxed", children: "Every criterion below is measured over the same rolling window, and all of them have to hold at the same time. Meeting them also changes when you are paid: your payout starts when you ship rather than when the parcel is delivered." })] }), _jsx(SellerStandingPanel, { heading: "The criteria" })] }));
 }
 // -- Section 5: Multiple stores -----------------------------------------------
 function MultipleStoresSection() {

package/dist/features/stores/components/StoreFinanceGuideView.js

@@ -8,6 +8,7 @@ import { Heading, Span, Text } from "../../../ui/components/Typography.js";
 import { Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { getBrandName } from "../../../core/brand-resolver.js";
 const SUBHEADING = "mb-1 font-semibold text-[var(--appkit-color-text)]";
 const LIST_DISC = "list-disc leading-relaxed";
 const SECTION_BODY = "space-y-4 text-[length:var(--appkit-text-sm)] text-[var(--appkit-color-text-muted)]";
@@ -18,7 +19,7 @@ function GuideSection({ title, children, }) {
 }
 // -- Section 1: Commission structure ------------------------------------------
 function CommissionSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "How it works" }), _jsx(Text, { className: "leading-relaxed", children: "LetItRip deducts a platform fee from every completed order before paying out to you. The current fee rate is shown in your store Settings \u2192 Finance page and in the platform site settings. Custom commission rates are available to high-volume sellers \u2014 see the Capabilities guide for details." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Worked example" }), _jsxs(Stack, { textSize: "xs", className: "border border-[var(--appkit-color-border)] font-mono", gap: "xs", rounded: "lg", padding: "md", children: [_jsx(Text, { className: MONO_MUTED, children: "Order total: \u20B91,000.00" }), _jsx(Text, { className: MONO_MUTED, children: "Platform fee (e.g. 5%): \u2212 \u20B950.00" }), _jsx(Text, { className: MONO_MUTED, children: "Payment processing (Razorpay ~2%): \u2212 \u20B920.00" }), _jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-2xs", children: _jsx(Text, { className: "font-mono text-[var(--appkit-color-text)]", size: "xs", weight: "semibold", children: "Seller receives: \u2248 \u20B9930.00" }) })] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] mt-2", size: "xs", children: "Exact amounts depend on the current platform fee configured in Site Settings. Razorpay charges vary by payment method (UPI is lowest)." })] }), _jsx(Alert, { variant: "info", title: "Shipping is separate", children: "Shipping costs you charge buyers are passed through in full \u2014 the platform fee applies only to the product price, not the shipping amount." })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "How it works" }), _jsxs(Text, { className: "leading-relaxed", children: [getBrandName(), " deducts a platform fee from every completed order before paying out to you. The current fee rate is shown in your store Settings \u2192 Finance page and in the platform site settings. Custom commission rates are available to high-volume sellers \u2014 see the Capabilities guide for details."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Worked example" }), _jsxs(Stack, { textSize: "xs", className: "border border-[var(--appkit-color-border)] font-mono", gap: "xs", rounded: "lg", padding: "md", children: [_jsx(Text, { className: MONO_MUTED, children: "Order total: \u20B91,000.00" }), _jsx(Text, { className: MONO_MUTED, children: "Platform fee (e.g. 5%): \u2212 \u20B950.00" }), _jsx(Text, { className: MONO_MUTED, children: "Payment processing (Razorpay ~2%): \u2212 \u20B920.00" }), _jsx(Div, { className: "border-t border-[var(--appkit-color-border)]", padding: "t-2xs", children: _jsx(Text, { className: "font-mono text-[var(--appkit-color-text)]", size: "xs", weight: "semibold", children: "Seller receives: \u2248 \u20B9930.00" }) })] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] mt-2", size: "xs", children: "Exact amounts depend on the current platform fee configured in Site Settings. Razorpay charges vary by payment method (UPI is lowest)." })] }), _jsx(Alert, { variant: "info", title: "Shipping is separate", children: "Shipping costs you charge buyers are passed through in full \u2014 the platform fee applies only to the product price, not the shipping amount." })] }));
 }
 // -- Section 2: Payout cycle --------------------------------------------------
 const PAYOUT_STATUSES = [
@@ -62,7 +63,7 @@ const COUPON_FIELDS = [
     },
     {
         field: "First-time user only",
-        detail: "Restricts redemption to buyers with no prior completed orders on LetItRip.",
+        detail: `Restricts redemption to buyers with no prior completed orders on ${getBrandName()}.`,
     },
     {
         field: "Combine with seller coupons",
@@ -70,15 +71,15 @@ const COUPON_FIELDS = [
     },
 ];
 function CouponsSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Admin coupons vs store coupons" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Admin coupons" }), " \u2014 created by LetItRip and apply platform-wide (all stores). You cannot create these."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Store coupons" }), " \u2014 created by you. Apply only to purchases from your store. You control the terms."] }), _jsx(Li, { className: LIST_DISC, children: "Admin coupons and store coupons can stack if the admin coupon has \"Combine with seller coupons\" enabled. If not, only the better coupon is applied automatically." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Coupon field reference" }), _jsx(Stack, { gap: "3", children: COUPON_FIELDS.map(({ field, detail }) => (_jsxs(Row, { gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: field }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", size: "sm", children: detail })] }, field))) })] })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Admin coupons vs store coupons" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Admin coupons" }), " \u2014 created by ", getBrandName(), " and apply platform-wide (all stores). You cannot create these."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Store coupons" }), " \u2014 created by you. Apply only to purchases from your store. You control the terms."] }), _jsx(Li, { className: LIST_DISC, children: "Admin coupons and store coupons can stack if the admin coupon has \"Combine with seller coupons\" enabled. If not, only the better coupon is applied automatically." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Coupon field reference" }), _jsx(Stack, { gap: "3", children: COUPON_FIELDS.map(({ field, detail }) => (_jsxs(Row, { gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", size: "sm", weight: "semibold", children: field }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", size: "sm", children: detail })] }, field))) })] })] }));
 }
 // -- Section 4: Promoted & featured listings ----------------------------------
 function PromotedSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "isPromoted \u2014 Deals & promoted sections" }), _jsx(Text, { className: "leading-relaxed", children: "Promoted listings appear in the Deals carousel on the homepage and in search-result promoted slots. For most stores, this flag is set by a LetItRip admin. If you want a product promoted, contact support with the product slug and reason." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "isFeatured \u2014 Featured badge & priority" }), _jsxs(Text, { className: "leading-relaxed", children: ["Featured listings get a \"Featured\" badge on their listing card and receive priority ordering in search results and category pages. Like isPromoted, this is admin-controlled for most stores. Stores with the ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "manage_promoted_listings" }), " capability can self-promote from their dashboard."] })] }), _jsx(Alert, { variant: "info", title: "Promoted placement vs sponsored listings", children: "LetItRip does not currently offer paid sponsored placements \u2014 promoted and featured flags are granted editorially by the LetItRip team based on listing quality and seller performance." })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "isPromoted \u2014 Deals & promoted sections" }), _jsxs(Text, { className: "leading-relaxed", children: ["Promoted listings appear in the Deals carousel on the homepage and in search-result promoted slots. For most stores, this flag is set by a ", getBrandName(), " admin. If you want a product promoted, contact support with the product slug and reason."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "isFeatured \u2014 Featured badge & priority" }), _jsxs(Text, { className: "leading-relaxed", children: ["Featured listings get a \"Featured\" badge on their listing card and receive priority ordering in search results and category pages. Like isPromoted, this is admin-controlled for most stores. Stores with the ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "manage_promoted_listings" }), " capability can self-promote from their dashboard."] })] }), _jsxs(Alert, { variant: "info", title: "Promoted placement vs sponsored listings", children: [getBrandName(), " does not currently offer paid sponsored placements \u2014 promoted and featured flags are granted editorially by the ", getBrandName(), " team based on listing quality and seller performance."] })] }));
 }
 // -- Section 5: Taxes notice --------------------------------------------------
 function TaxesSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsx(Alert, { variant: "warning", title: "Seller tax responsibility", children: "LetItRip is a marketplace platform. Each seller operates independently and is individually responsible for applicable taxes on their sales, including GST where required by Indian tax law. LetItRip does not collect or remit GST on your behalf. Consult a qualified tax advisor to understand your obligations based on your turnover and registration status." }), _jsx(Text, { className: "leading-relaxed", children: "TCS (Tax Collected at Source) deducted by LetItRip under Section 194-O of the Income Tax Act will be reflected in your annual Form 26AS. Your gross payouts (before TCS) are visible in the Finance \u2192 Payouts dashboard." })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Alert, { variant: "warning", title: "Seller tax responsibility", children: [getBrandName(), " is a marketplace platform. Each seller operates independently and is individually responsible for applicable taxes on their sales, including GST where required by Indian tax law.", getBrandName(), " does not collect or remit GST on your behalf. Consult a qualified tax advisor to understand your obligations based on your turnover and registration status."] }), _jsxs(Text, { className: "leading-relaxed", children: ["TCS (Tax Collected at Source) deducted by ", getBrandName(), " under Section 194-O of the Income Tax Act will be reflected in your annual Form 26AS. Your gross payouts (before TCS) are visible in the Finance \u2192 Payouts dashboard."] })] }));
 }
 export function StoreFinanceGuideView(_props) {
     return (_jsxs(Stack, { gap: "lg", padding: "b-2xl", children: [_jsxs(TextLink, { variant: "bare", href: String(ROUTES.STORE.GUIDE), size: "sm", layout: "inline-flex", align: "center", gap: "sm", className: "text-[var(--appkit-color-text-muted)] hover:text-[var(--appkit-color-text)] transition-colors", children: [_jsx(ArrowLeft, { className: "h-4 w-4" }), "Back to Seller Guide"] }), _jsxs(Div, { children: [_jsx(Heading, { level: 1, className: "text-[var(--appkit-color-text)]", size: "2xl", weight: "bold", children: "Finance Guide" }), _jsx(Text, { className: "mt-1 text-[var(--appkit-color-text-muted)]", size: "sm", children: "Payouts, commissions, coupons, and promoted listings." })] }), _jsx(GuideSection, { title: "1. Commission structure", children: _jsx(CommissionSection, {}) }), _jsx(GuideSection, { title: "2. Payout cycle", children: _jsx(PayoutCycleSection, {}) }), _jsx(GuideSection, { title: "3. Coupons", children: _jsx(CouponsSection, {}) }), _jsx(GuideSection, { title: "4. Promoted & featured listings", children: _jsx(PromotedSection, {}) }), _jsx(GuideSection, { title: "5. Taxes", children: _jsx(TaxesSection, {}) })] }));

package/dist/features/stores/components/StoreGuideHubView.js

@@ -8,6 +8,7 @@ import { Section } from "../../../ui/components/Semantic.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { SellerStandingPanel } from "./SellerStandingPanel.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { getBrandName } from "../../../core/brand-resolver.js";
 const CLS_CHECK_ICON = "w-5 h-5 flex-shrink-0 text-emerald-500";
 const CLS_SUCCESS_BOX = "rounded-xl border border-emerald-200 bg-emerald-50 dark:bg-emerald-950/30 dark:border-emerald-800 px-[var(--appkit-space-5)] py-[var(--appkit-space-4)]";
 const CLS_SUCCESS_BODY = "text-[length:var(--appkit-text-sm)] font-medium text-emerald-700 dark:text-emerald-400";
@@ -95,7 +96,7 @@ export function StoreGuideHubView({ store }) {
     const storeName = store?.storeName ?? "Your Store";
     const steps = buildChecklist(store);
     const completedCount = steps.filter((s) => s.done).length;
-    return (_jsxs(Stack, { gap: "xl", padding: "b-2xl", children: [_jsx(Section, { overflow: "hidden", className: "border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", rounded: "2xl", shadow: "sm", children: _jsxs(Div, { paddingX: "x-md-xl", paddingY: "y-xl", className: "[background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_60%,var(--appkit-color-secondary-400)_100%)]", children: [_jsxs(Row, { className: "mb-3", align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-10 h-10", surface: "default", align: "center", justify: "center", rounded: "xl", children: _jsx(BookOpen, { className: "w-5 h-5 text-white" }) }), _jsx(Text, { color: "inverse-muted", className: "tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Seller Guide" })] }), _jsx(Heading, { color: "inverse", level: 1, className: "mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: storeName }), _jsx(Text, { color: "inverse-muted", size: "base", children: "Everything you need to know about selling on LetItRip." })] }) }), _jsxs(Div, { layout: "grid", gap: "8", className: "grid-cols-1 lg:grid-cols-3", children: [_jsxs(Stack, { className: "lg:col-span-2", gap: "md", children: [_jsx(Heading, { level: 2, className: "text-[var(--appkit-color-text)]", size: "lg", weight: "semibold", children: "Guides" }), _jsx(Grid, { cols: "cardsWide", gap: "md", children: GUIDE_CARDS.map(({ Icon, title, description, href }) => (_jsxs(TextLink, { variant: "bare", href: href, rounded: "xl", layout: "flex-col", gap: "md", paddingX: "lg", paddingY: "lg", shadow: "hover-md", className: "group border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] hover:border-[var(--appkit-color-primary)] transition-all", children: [_jsxs(Row, { align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-9 h-9 [background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]", align: "center", justify: "center", rounded: "lg", children: _jsx(Icon, { className: "w-4 h-4 text-white" }) }), _jsx(Text, { className: "text-[var(--appkit-color-text)] group-hover:text-[var(--appkit-color-primary)] transition-colors", weight: "semibold", children: title })] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", size: "sm", children: description }), _jsx(Text, { className: "text-[var(--appkit-color-primary)] mt-auto", size: "xs", weight: "medium", children: "Read guide \u2192" })] }, title))) }), _jsx(SellerStandingPanel, { standing: store?.standing, tier: store?.sellerTier, showProgress: true, heading: "Your Trusted Seller standing" })] }), _jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 2, className: "text-[var(--appkit-color-text)]", size: "lg", weight: "semibold", children: "Getting started" }), _jsxs(Div, { overflow: "hidden", className: "border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", rounded: "xl", children: [_jsxs(Div, { className: "px-[1.25rem] pt-[1.25rem] border-b border-[var(--appkit-color-border)]", padding: "b-md", children: [_jsxs(Row, { className: "mb-2", align: "center", justify: "between", children: [_jsxs(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: [completedCount, " of ", steps.length, " complete"] }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "xs", children: [Math.round((completedCount / steps.length) * 100), "%"] })] }), _jsx(Progress, { value: completedCount, max: steps.length, size: "sm", variant: "gradient" })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)]", children: steps.map(({ label, done, href }) => (_jsxs(TextLink, { variant: "bare", href: done ? "#" : href, "aria-disabled": done, layout: "flex", align: "center", gap: "sm", paddingX: "lg", paddingY: "sm-tall", size: "sm", className: `transition-colors ${done
+    return (_jsxs(Stack, { gap: "xl", padding: "b-2xl", children: [_jsx(Section, { overflow: "hidden", className: "border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", rounded: "2xl", shadow: "sm", children: _jsxs(Div, { paddingX: "x-md-xl", paddingY: "y-xl", className: "[background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_60%,var(--appkit-color-secondary-400)_100%)]", children: [_jsxs(Row, { className: "mb-3", align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-10 h-10", surface: "default", align: "center", justify: "center", rounded: "xl", children: _jsx(BookOpen, { className: "w-5 h-5 text-white" }) }), _jsx(Text, { color: "inverse-muted", className: "tracking-widest", size: "sm", weight: "semibold", transform: "uppercase", children: "Seller Guide" })] }), _jsx(Heading, { color: "inverse", level: 1, className: "mb-2", mdSize: "3xl", size: "2xl", weight: "bold", children: storeName }), _jsxs(Text, { color: "inverse-muted", size: "base", children: ["Everything you need to know about selling on ", getBrandName(), "."] })] }) }), _jsxs(Div, { layout: "grid", gap: "8", className: "grid-cols-1 lg:grid-cols-3", children: [_jsxs(Stack, { className: "lg:col-span-2", gap: "md", children: [_jsx(Heading, { level: 2, className: "text-[var(--appkit-color-text)]", size: "lg", weight: "semibold", children: "Guides" }), _jsx(Grid, { cols: "cardsWide", gap: "md", children: GUIDE_CARDS.map(({ Icon, title, description, href }) => (_jsxs(TextLink, { variant: "bare", href: href, rounded: "xl", layout: "flex-col", gap: "md", paddingX: "lg", paddingY: "lg", shadow: "hover-md", className: "group border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)] hover:border-[var(--appkit-color-primary)] transition-all", children: [_jsxs(Row, { align: "center", gap: "3", children: [_jsx(Row, { className: "flex-shrink-0 w-9 h-9 [background:linear-gradient(135deg,var(--appkit-color-primary-700)_0%,var(--appkit-color-cobalt)_100%)]", align: "center", justify: "center", rounded: "lg", children: _jsx(Icon, { className: "w-4 h-4 text-white" }) }), _jsx(Text, { className: "text-[var(--appkit-color-text)] group-hover:text-[var(--appkit-color-primary)] transition-colors", weight: "semibold", children: title })] }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", size: "sm", children: description }), _jsx(Text, { className: "text-[var(--appkit-color-primary)] mt-auto", size: "xs", weight: "medium", children: "Read guide \u2192" })] }, title))) }), _jsx(SellerStandingPanel, { standing: store?.standing, tier: store?.sellerTier, showProgress: true, heading: "Your Trusted Seller standing" })] }), _jsxs(Stack, { gap: "md", children: [_jsx(Heading, { level: 2, className: "text-[var(--appkit-color-text)]", size: "lg", weight: "semibold", children: "Getting started" }), _jsxs(Div, { overflow: "hidden", className: "border border-[var(--appkit-color-border)] bg-[var(--appkit-color-surface)]", rounded: "xl", children: [_jsxs(Div, { className: "px-[1.25rem] pt-[1.25rem] border-b border-[var(--appkit-color-border)]", padding: "b-md", children: [_jsxs(Row, { className: "mb-2", align: "center", justify: "between", children: [_jsxs(Text, { className: "text-[var(--appkit-color-text)]", size: "sm", weight: "medium", children: [completedCount, " of ", steps.length, " complete"] }), _jsxs(Text, { className: "text-[var(--appkit-color-text-muted)]", size: "xs", children: [Math.round((completedCount / steps.length) * 100), "%"] })] }), _jsx(Progress, { value: completedCount, max: steps.length, size: "sm", variant: "gradient" })] }), _jsx(Div, { className: "divide-y divide-[var(--appkit-color-border)]", children: steps.map(({ label, done, href }) => (_jsxs(TextLink, { variant: "bare", href: done ? "#" : href, "aria-disabled": done, layout: "flex", align: "center", gap: "sm", paddingX: "lg", paddingY: "sm-tall", size: "sm", className: `transition-colors ${done
                                                 ? "cursor-default"
                                                 : "hover:bg-[var(--appkit-color-border)]/30"}`, children: [done ? (_jsx(CheckCircle2, { className: CLS_CHECK_ICON })) : (_jsx(Circle, { className: "w-5 h-5 flex-shrink-0 text-[var(--appkit-color-text-muted)]" })), _jsx(Text, { className: `leading-snug ${done
                                                         ? "line-through text-[var(--appkit-color-text-muted)]"

package/dist/features/stores/components/StoreListingsGuideView.js

@@ -8,6 +8,7 @@ import { Li, Section, Table, Tbody, Td, Th, Thead, Tr, Ul } from "../../../ui/co
 import { Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { getBrandName } from "../../../core/brand-resolver.js";
 const SUBHEADING = "mb-1 font-semibold text-[var(--appkit-color-text)]";
 const LIST_DISC = "list-disc leading-relaxed";
 // -- Section wrapper -----------------------------------------------------------
@@ -134,7 +135,7 @@ const MEDIA_TIPS = [
     { label: "Image ratio", detail: "1:1 (square) for card thumbnails; 4:3 works well for product detail gallery." },
     { label: "Minimum size", detail: "800 × 800 px recommended. Below 400 × 400 px will look blurry on Retina screens." },
     { label: "Max file size", detail: "50 MB per image. Prefer JPG for photos; PNG for packaging or cards with text." },
-    { label: "Watermark", detail: "LetItRip adds a watermark automatically. Do not add your own — double watermarks look unprofessional." },
+    { label: "Watermark", detail: `${getBrandName()} adds a watermark automatically. Do not add your own — double watermarks look unprofessional.` },
     { label: "Order", detail: "Drag images to reorder after upload. The first image is the card thumbnail used in search results." },
     { label: "Video", detail: "Add a YouTube video ID to embed an unboxing or showcase. Not a replacement for photos." },
 ];

package/dist/features/stores/components/StoreOrdersGuideView.js

@@ -9,6 +9,7 @@ import { Row, Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
 import { resolvePublishedValues } from "../../../_internal/shared/content/published-values.js";
+import { getBrandName } from "../../../core/brand-resolver.js";
 /* Phase 9 — one definition of the refund timeline. */
 const { refundBusinessDaysMin: REFUND_DAYS_MIN, refundBusinessDaysMax: REFUND_DAYS_MAX } = resolvePublishedValues();
 const SUBHEADING = "mb-1 font-semibold text-[var(--appkit-color-text)]";
@@ -96,11 +97,11 @@ function CarriersSection() {
 }
 // -- Section 4: Cancellations -------------------------------------------------
 function CancellationsSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Who can cancel" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Buyer" }), " \u2014 can self-cancel any time before the order reaches SHIPPED status."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Seller (you)" }), " \u2014 can cancel any time before SHIPPED (e.g. item found damaged during packaging)."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "LetItRip admin" }), " \u2014 can force-cancel at any status for policy violations or unresolved disputes."] })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Refund timeline" }), _jsxs(Text, { className: "leading-relaxed", children: ["Cancellation triggers an automatic Razorpay refund. Funds typically reach the buyer in", _jsx(Span, { weight: "bold", children: " 3\u20137 business days" }), " depending on the payment method (UPI is usually 1\u20132 business days)."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Already shipped?" }), _jsx(Text, { className: "leading-relaxed", children: "If you have already dispatched the item but the order is still PROCESSING (tracking not yet entered), enter the tracking number and mark it SHIPPED first \u2014 then contact the buyer via order notes. Do not cancel after shipping; work with the buyer to return the item through the normal return flow." })] }), _jsx(Alert, { variant: "warning", title: "Repeated cancellations affect your rating", children: "Cancelling more than 5% of your orders per month will reduce your store rating and may result in listing restrictions. Only cancel if you genuinely cannot fulfil \u2014 never as a price-change workaround." })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Who can cancel" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Buyer" }), " \u2014 can self-cancel any time before the order reaches SHIPPED status."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsx(Span, { weight: "bold", children: "Seller (you)" }), " \u2014 can cancel any time before SHIPPED (e.g. item found damaged during packaging)."] }), _jsxs(Li, { className: LIST_DISC, children: [_jsxs(Span, { weight: "bold", children: [getBrandName(), " admin"] }), " \u2014 can force-cancel at any status for policy violations or unresolved disputes."] })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Refund timeline" }), _jsxs(Text, { className: "leading-relaxed", children: ["Cancellation triggers an automatic Razorpay refund. Funds typically reach the buyer in", _jsx(Span, { weight: "bold", children: " 3\u20137 business days" }), " depending on the payment method (UPI is usually 1\u20132 business days)."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Already shipped?" }), _jsx(Text, { className: "leading-relaxed", children: "If you have already dispatched the item but the order is still PROCESSING (tracking not yet entered), enter the tracking number and mark it SHIPPED first \u2014 then contact the buyer via order notes. Do not cancel after shipping; work with the buyer to return the item through the normal return flow." })] }), _jsx(Alert, { variant: "warning", title: "Repeated cancellations affect your rating", children: "Cancelling more than 5% of your orders per month will reduce your store rating and may result in listing restrictions. Only cancel if you genuinely cannot fulfil \u2014 never as a price-change workaround." })] }));
 }
 // -- Section 5: Return requests -----------------------------------------------
 function ReturnsSection() {
-    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "When a buyer can raise a return" }), _jsxs(Text, { className: "leading-relaxed", children: ["Buyers can open a return request within the ", _jsx(Span, { weight: "bold", children: "return window" }), " after the order is marked DELIVERED. The default return window is 7 days. Stores with the ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "extended_return_window" }), " capability can offer 30 days."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "What you see" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsx(Li, { className: LIST_DISC, children: "The buyer's reason for return (pre-defined category + optional description)." }), _jsx(Li, { className: LIST_DISC, children: "Photos of the item as received." }), _jsx(Li, { className: LIST_DISC, children: "A 3-day SLA to respond before LetItRip mediates." })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Accepting a return" }), _jsx(Text, { className: "leading-relaxed", children: "Click \"Accept return\" in the order detail. The buyer will receive a return shipping label or instructions. Once the item is received by you and you confirm it, the refund is triggered automatically via Razorpay. The payout for this order is withheld." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Rejecting a return" }), _jsx(Text, { className: "leading-relaxed", children: "You can reject a return request with a reason. If the buyer disagrees, they can escalate to LetItRip support. LetItRip will mediate \u2014 if the evidence supports the buyer, the return will be approved regardless of your rejection. Unjustified rejections count against your seller rating." })] })] }));
+    return (_jsxs(Div, { className: SECTION_BODY, children: [_jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "When a buyer can raise a return" }), _jsxs(Text, { className: "leading-relaxed", children: ["Buyers can open a return request within the ", _jsx(Span, { weight: "bold", children: "return window" }), " after the order is marked DELIVERED. The default return window is 7 days. Stores with the ", _jsx(Code, { size: "xs", padding: "xs", rounded: "default", surface: "subtle", children: "extended_return_window" }), " capability can offer 30 days."] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "What you see" }), _jsxs(Ul, { spacing: "tight", indent: "lg", children: [_jsx(Li, { className: LIST_DISC, children: "The buyer's reason for return (pre-defined category + optional description)." }), _jsx(Li, { className: LIST_DISC, children: "Photos of the item as received." }), _jsxs(Li, { className: LIST_DISC, children: ["A 3-day SLA to respond before ", getBrandName(), " mediates."] })] })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Accepting a return" }), _jsx(Text, { className: "leading-relaxed", children: "Click \"Accept return\" in the order detail. The buyer will receive a return shipping label or instructions. Once the item is received by you and you confirm it, the refund is triggered automatically via Razorpay. The payout for this order is withheld." })] }), _jsxs(Div, { children: [_jsx(Text, { className: SUBHEADING, children: "Rejecting a return" }), _jsxs(Text, { className: "leading-relaxed", children: ["You can reject a return request with a reason. If the buyer disagrees, they can escalate to ", getBrandName(), " support.", getBrandName(), " will mediate \u2014 if the evidence supports the buyer, the return will be approved regardless of your rejection. Unjustified rejections count against your seller rating."] })] })] }));
 }
 // -- Section 6: Auction orders ------------------------------------------------
 function AuctionOrdersSection() {
@@ -110,7 +111,7 @@ function AuctionOrdersSection() {
 const FAQS = [
     {
         q: "What if the buyer claims non-delivery but tracking shows delivered?",
-        a: "Do not cancel immediately. Ask the buyer to check with neighbours and at the nearest post office or courier depot. If after 5 days the parcel is still missing, contact the carrier to file a trace. If the trace confirms loss, you may need to refund — document everything and contact LetItRip support if needed.",
+        a: `Do not cancel immediately. Ask the buyer to check with neighbours and at the nearest post office or courier depot. If after 5 days the parcel is still missing, contact the carrier to file a trace. If the trace confirms loss, you may need to refund — document everything and contact ${getBrandName()} support if needed.`,
     },
     {
         q: "Can I cancel an order after I've already shipped it?",
@@ -122,7 +123,7 @@ const FAQS = [
     },
     {
         q: "How do I handle a partial order if I sold multiple items?",
-        a: "Currently each product listing creates a separate order. If you sold a bundle, the bundle order must be fulfilled as a single shipment. If one item in a bundle is unavailable, contact the buyer and LetItRip support — partial fulfilment is not supported in the standard flow.",
+        a: `Currently each product listing creates a separate order. If you sold a bundle, the bundle order must be fulfilled as a single shipment. If one item in a bundle is unavailable, contact the buyer and ${getBrandName()} support — partial fulfilment is not supported in the standard flow.`,
     },
 ];
 function CommonFAQs() {

package/dist/features/stores/components/StoreSettingsGuideView.js

@@ -8,6 +8,7 @@ import { Heading, Span, Text } from "../../../ui/components/Typography.js";
 import { Stack } from "../../../ui/components/Layout.js";
 import { TextLink } from "../../../ui/components/TextLink.js";
 import { ROUTES } from "../../../next/routing/route-map.js";
+import { getBrandSupportEmail } from "../../../core/brand-resolver.js";
 const SUBHEADING = "mb-1 font-semibold text-[var(--appkit-color-text)]";
 const LIST_DISC = "list-disc leading-relaxed";
 const SECTION_BODY = "space-y-4 text-[length:var(--appkit-text-sm)] text-[var(--appkit-color-text-muted)]";
@@ -52,7 +53,7 @@ function VisibilityStatesSection() {
         },
         {
             state: "Suspended",
-            note: "Admin action. All listings hidden. Store profile shows 'Unavailable' banner. Contact support@letitrip.in to resolve.",
+            note: `Admin action. All listings hidden. Store profile shows 'Unavailable' banner. Contact ${getBrandSupportEmail()} to resolve.`,
         },
     ];
     return (_jsx(Stack, { gap: "3", children: STATES.map(({ state, note }) => (_jsxs(Row, { textSize: "sm", gap: "3", children: [_jsx(Text, { className: "shrink-0 w-32 text-[var(--appkit-color-text)]", weight: "semibold", children: state }), _jsx(Text, { className: "text-[var(--appkit-color-text-muted)] leading-relaxed", children: note })] }, state))) }));

package/dist/features/support/schemas/index.d.ts

@@ -152,7 +152,7 @@ export declare const supportTicketFirestoreSchema: z.ZodObject<{
     status: "open" | "closed" | "in_progress" | "waiting_on_user" | "resolved";
     id: string;
     description: string;
-    category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+    category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
     createdAt: string | Date | z.objectOutputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;
@@ -195,7 +195,7 @@ export declare const supportTicketFirestoreSchema: z.ZodObject<{
     status: "open" | "closed" | "in_progress" | "waiting_on_user" | "resolved";
     id: string;
     description: string;
-    category: "general" | "account" | "order_issue" | "billing_payment" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
+    category: "general" | "order_issue" | "billing_payment" | "account" | "listing_dispute" | "scam_report" | "refund_request" | "auction_dispute" | "store_change_request" | "order_modification_request" | "unban_request";
     createdAt: string | Date | z.objectInputType<{
         toDate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodDate>;
     }, z.ZodTypeAny, "passthrough">;

package/dist/features/whatsapp-bot/components/SellerWhatsAppSettingsView.d.ts

@@ -11,7 +11,7 @@
  *
  *   1. Almost no small seller will create a Meta app and mint a system user
  *      token. A setting nobody can complete is a feature nobody has.
- *   2. It made LetItRip the custodian of a live Meta credential per seller.
+ *   2. It made {getBrandName()} the custodian of a live Meta credential per seller.
  *      `StoreRepository.mapDoc` decrypted that token on EVERY read, so any
  *      code path that forgot to project was handling plaintext — a gap
  *      CLAUDE.md flags as deserving its own session.

package/dist/features/whatsapp-bot/components/SellerWhatsAppSettingsView.js

@@ -13,7 +13,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *
  *   1. Almost no small seller will create a Meta app and mint a system user
  *      token. A setting nobody can complete is a feature nobody has.
- *   2. It made LetItRip the custodian of a live Meta credential per seller.
+ *   2. It made {getBrandName()} the custodian of a live Meta credential per seller.
  *      `StoreRepository.mapDoc` decrypted that token on EVERY read, so any
  *      code path that forgot to project was handling plaintext — a gap
  *      CLAUDE.md flags as deserving its own session.
@@ -48,6 +48,7 @@ import { Toggle } from "../../../ui/components/Toggle.js";
 import { useToast } from "../../../ui/components/toast-context.js";
 import { normalizeError } from "../../../errors/normalize.js";
 import { formatCurrency } from "../../../utils/number.formatter.js";
+import { getBrandName } from "../../../core/brand-resolver.js";
 export function SellerWhatsAppSettingsView({ subscribed, monthlyFee, currency = "INR", channelEnabled, onToggleSubscription, hasCapability = true, }) {
     const [isOn, setIsOn] = useState(subscribed);
     const [saving, setSaving] = useState(false);
@@ -79,5 +80,5 @@ export function SellerWhatsAppSettingsView({ subscribed, monthlyFee, currency =
             setSaving(false);
         }
     };
-    return (_jsx(Section, { children: _jsxs(Div, { className: "mx-auto max-w-2xl", children: [_jsx(Heading, { level: 1, className: "mb-1", color: "primary", size: "2xl", weight: "bold", children: "WhatsApp order updates" }), _jsx(Text, { variant: "secondary", className: "mb-6", size: "sm", children: "Send your buyers order updates on WhatsApp \u2014 confirmed, shipped, delivered \u2014 from LetItRip's verified business number. You don't need a WhatsApp Business account of your own, and nothing is installed on your phone." }), !channelEnabled && (_jsx(Alert, { variant: "warning", className: "mb-4", children: "WhatsApp updates are currently switched off platform-wide, so nothing will be sent even if you subscribe. We'll start sending as soon as it's back on." })), _jsxs(Stack, { gap: "md", surface: "card", padding: "md", children: [_jsxs(Row, { justify: "between", align: "center", gap: "md", children: [_jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Row, { gap: "sm", align: "center", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Subscription" }), _jsx(Badge, { variant: isOn ? "success" : "inactive", children: isOn ? "Active" : "Not subscribed" })] }), _jsxs(Text, { color: "muted", size: "sm", children: [formatCurrency(monthlyFee, currency), " per month. Covers every order update to every buyer \u2014 not charged per message."] })] }), _jsx(Toggle, { checked: isOn, onChange: handleToggle, disabled: saving || !hasCapability, size: "md" })] }), !hasCapability && (_jsx(Div, { textSize: "sm", className: "border border-warning/20", color: "warning", surface: "warning-surface", padding: "inlineSm", rounded: "lg", children: "Your store doesn't have this add-on enabled. Contact support to turn it on." }))] }), _jsx(Heading, { level: 2, className: "mt-8 mb-3", size: "lg", weight: "semibold", children: "What your buyers get" }), _jsxs(Stack, { gap: "sm", surface: "card", padding: "md", children: [_jsxs(Text, { color: "muted", size: "sm", children: ["A WhatsApp message when an order is ", _jsx(Span, { weight: "semibold", children: "confirmed" }), ",", " ", _jsx(Span, { weight: "semibold", children: "shipped" }), ", ", _jsx(Span, { weight: "semibold", children: "delivered" }), ",", " ", _jsx(Span, { weight: "semibold", children: "cancelled" }), " or ", _jsx(Span, { weight: "semibold", children: "refunded" }), ". Nothing promotional \u2014 buyers who opted out of WhatsApp never receive these."] }), _jsx(Text, { color: "muted", size: "sm", children: "Messages come from LetItRip's number, not yours, so your personal number stays private and replies land with our support team rather than on your phone." }), _jsx(Text, { color: "muted", size: "sm", children: "Turning this off changes nothing else: buyers keep getting the same updates by email and in their account." })] })] }) }));
+    return (_jsx(Section, { children: _jsxs(Div, { className: "mx-auto max-w-2xl", children: [_jsx(Heading, { level: 1, className: "mb-1", color: "primary", size: "2xl", weight: "bold", children: "WhatsApp order updates" }), _jsxs(Text, { variant: "secondary", className: "mb-6", size: "sm", children: ["Send your buyers order updates on WhatsApp \u2014 confirmed, shipped, delivered \u2014 from", getBrandName(), "'s verified business number. You don't need a WhatsApp Business account of your own, and nothing is installed on your phone."] }), !channelEnabled && (_jsx(Alert, { variant: "warning", className: "mb-4", children: "WhatsApp updates are currently switched off platform-wide, so nothing will be sent even if you subscribe. We'll start sending as soon as it's back on." })), _jsxs(Stack, { gap: "md", surface: "card", padding: "md", children: [_jsxs(Row, { justify: "between", align: "center", gap: "md", children: [_jsxs(Div, { className: "flex-1 min-w-0", children: [_jsxs(Row, { gap: "sm", align: "center", children: [_jsx(Text, { size: "sm", weight: "semibold", children: "Subscription" }), _jsx(Badge, { variant: isOn ? "success" : "inactive", children: isOn ? "Active" : "Not subscribed" })] }), _jsxs(Text, { color: "muted", size: "sm", children: [formatCurrency(monthlyFee, currency), " per month. Covers every order update to every buyer \u2014 not charged per message."] })] }), _jsx(Toggle, { checked: isOn, onChange: handleToggle, disabled: saving || !hasCapability, size: "md" })] }), !hasCapability && (_jsx(Div, { textSize: "sm", className: "border border-warning/20", color: "warning", surface: "warning-surface", padding: "inlineSm", rounded: "lg", children: "Your store doesn't have this add-on enabled. Contact support to turn it on." }))] }), _jsx(Heading, { level: 2, className: "mt-8 mb-3", size: "lg", weight: "semibold", children: "What your buyers get" }), _jsxs(Stack, { gap: "sm", surface: "card", padding: "md", children: [_jsxs(Text, { color: "muted", size: "sm", children: ["A WhatsApp message when an order is ", _jsx(Span, { weight: "semibold", children: "confirmed" }), ",", " ", _jsx(Span, { weight: "semibold", children: "shipped" }), ", ", _jsx(Span, { weight: "semibold", children: "delivered" }), ",", " ", _jsx(Span, { weight: "semibold", children: "cancelled" }), " or ", _jsx(Span, { weight: "semibold", children: "refunded" }), ". Nothing promotional \u2014 buyers who opted out of WhatsApp never receive these."] }), _jsxs(Text, { color: "muted", size: "sm", children: ["Messages come from ", getBrandName(), "'s number, not yours, so your personal number stays private and replies land with our support team rather than on your phone."] }), _jsx(Text, { color: "muted", size: "sm", children: "Turning this off changes nothing else: buyers keep getting the same updates by email and in their account." })] })] }) }));
 }

package/dist/features/whatsapp-bot/helpers/whatsapp.js

@@ -1,6 +1,7 @@
 import { normalizeError } from "../../../errors/normalize.js";
 import { createHmac, timingSafeEqual } from "crypto";
 import { getDefaultCurrencySymbol, getDefaultLocale, } from "../../../core/baseline-resolver.js";
+import { formatMoney } from "../../../utils/number.formatter.js";
 const META_GRAPH_BASE = "https://graph.facebook.com/v20.0";
 export function buildCheckoutMessageURL(input) {
     const { waNumber, cart, total, address, isPreorder = false } = input;
@@ -241,8 +242,10 @@ export async function syncProductsToCatalog(input) {
 export function buildPurchaseAnnouncementMessage(input) {
     const { buyerName, firstItemName, additionalItemCount, totalAmount, orderId } = input;
     const extra = additionalItemCount > 0 ? ` + ${additionalItemCount} more item${additionalItemCount > 1 ? "s" : ""}` : "";
-    const amount = totalAmount.toLocaleString("en-IN");
-    return `🛍️ New order! ${buyerName} purchased ${firstItemName}${extra} for ₹${amount}. Order #${orderId}`;
+    // `formatMoney` groups and places the symbol from the market profile; the
+    // intermediate `toLocaleString("en-IN")` this replaced hardcoded the locale.
+    const amount = formatMoney(totalAmount);
+    return `🛍️ New order! ${buyerName} purchased ${firstItemName}${extra} for ${amount}. Order #${orderId}`;
 }
 /**
  * Build a wa.me share link with a pre-filled message.

package/dist/index.d.ts

@@ -286,7 +286,6 @@ export { isNumeric } from "./validation/input.validator";
 export { isRequired } from "./validation/input.validator";
 export { isValidEmail } from "./validation/email.validator";
 export { isValidEmailDomain } from "./validation/email.validator";
-export { isValidIndianPincode } from "./validation/phone.validator";
 export { isValidMobile } from "./validation/phone.validator";
 export { isValidPhone } from "./validation/phone.validator";
 export { isValidUrl } from "./validation/url.validator";

package/dist/index.js

@@ -447,8 +447,6 @@ export { isValidEmail } from "./validation/email.validator.js";
 // isValidEmailDomain - Shared export for is valid email domain.
 export { isValidEmailDomain } from "./validation/email.validator.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
-// isValidIndianPincode - Shared export for is valid indian pincode.
-export { isValidIndianPincode } from "./validation/phone.validator.js";
 // [CLIENT-SSR]-Runs in both SSR and browser â€" React component or hook that does not depend on browser-only APIs.
 // isValidMobile - Shared export for is valid mobile.
 export { isValidMobile } from "./validation/phone.validator.js";

package/dist/providers/payment-manual/index.d.ts

@@ -25,6 +25,17 @@ export declare class ManualPaymentProvider extends IPaymentProvider {
     createOrder(amount: number, currency: string, metadata?: Record<string, JsonValue>): Promise<PaymentOrder>;
     /** Manual payments have no webhook source — always false. */
     verifyWebhook(_payload: string, _signature: string): boolean;
+    /**
+     * Manual payment has no gateway callback to verify, so there is nothing that
+     * could make this true.
+     *
+     * 🛑 `false`, never `true`. This is the check that decides whether a payment
+     * is genuine; a provider that cannot verify must REJECT, not wave through.
+     * Returning `true` here would mean a forged gateway callback is accepted on
+     * any install where the gateway flag is off — which is exactly the install
+     * where nobody is watching for one.
+     */
+    verifyCheckoutSignature(_payload: Record<string, string>, _secret: string): boolean;
     /**
      * Manual payments are considered captured the moment the buyer's
      * reference/proof is recorded — there is no separate auth+capture step.