Gromart | Instacart Clone — Multi-Store Grocery Delivery Platform

Gromart includes three Flutter (Dart) applications — the User App, the Store App and the Delivery Man / Driver App. Each is a separate project with its own source folder, package name and store listing, but they share one Firebase project and the setup below is identical for all three: install Flutter once, then repeat sections 4–10 for each app. The official reference is docs.flutter.dev, but you should not need it to complete this guide.

3.1. System Requirements

• OS: Windows 10/11 (64-bit), macOS, or Linux. iOS builds require macOS + Xcode.
• Disk space: ~2.8 GB for the Flutter SDK (plus your IDE / Android Studio).
• Tools: Git, and PowerShell 5.0+ on Windows.

3.2. Install the Flutter SDK

1. Download the SDK for your platform from docs.flutter.dev.
2. Extract it to a path without spaces — for example C:\src\flutter on Windows, or ~/development/flutter on macOS/Linux.
3. Add the flutter/bin folder to your system PATH so the flutter command works from any terminal.

3.3. Install the Platform Toolchains

• Android: install Android Studio, then open the SDK Manager and install the Android SDK, the SDK Command-line Tools and the Platform Tools. Accept the licences with flutter doctor --android-licenses.
• iOS (macOS only): install Xcode from the App Store, run sudo xcodebuild -runFirstLaunch, then install CocoaPods with sudo gem install cocoapods.

3.4. Verify the Installation

Run the doctor command and fix anything it reports:

flutter doctor -v

Every item that matters for your target platform should show a green check.

3.5. Install the IDE Plugins

• VS Code: install the Flutter and Dart extensions.
• Android Studio: install the Flutter plugin (it pulls in Dart).

3.6. Open the Gromart Project

Unzip the application source, open the folder in your IDE, and fetch the dependencies:

flutter pub get

3.7. Run the App

Start an emulator/simulator or connect a physical device, then run:

flutter devices
flutter run

Hot reload (r in the terminal) applies code changes instantly while the app keeps running.

The package name (Android) and bundle identifier (iOS) uniquely identify an app on the stores. Use reverse-domain form, and give each of the three apps its own identifier — they are published as three separate listings and registered as three separate apps in Firebase:

com.yourcompany.gromart          ← User App
com.yourcompany.gromart.store    ← Store App
com.yourcompany.gromart.driver   ← Delivery Man / Driver App

Change the identifier before registering the app in Firebase, because the Firebase config files are tied to it. The steps below apply to one app — repeat them in each of the three project folders.

4.1. Change the Android package name

On current Flutter versions the identifier lives in android/app/build.gradle, not in the manifest. Open that file and change both values:

android {
    namespace = "com.yourcompany.gromart"
    ...
    defaultConfig {
        applicationId = "com.yourcompany.gromart"
        ...
    }
}

• namespace — the package the generated R class and MainActivity belong to.
• applicationId — the identifier Google Play and Firebase key off. This is the one that must match your google-services.json.
• On older projects the same value also appears as the package attribute of the <manifest> tag in android/app/src/main/AndroidManifest.xml (and in the debug / profile variants) — update it there too if your copy still has it.

4.2. Update the Android source-code references

Rename the folders under android/app/src/main/kotlin/ (or .../java/) to match the new package, and update the package declaration at the top of MainActivity.kt / MainActivity.java.

4.3. Change the iOS bundle identifier

• Open ios/Runner.xcworkspace in Xcode.
• Select the Runner project → Runner target → General.
• Set Bundle Identifier to your new identifier.

5.1. Prepare your new icons

Start from a single square PNG at 1024×1024, with no transparency for iOS.

• Android: replace ic_launcher.png inside each android/app/src/main/res/mipmap-* folder (mdpi, hdpi, xhdpi, xxhdpi, xxxhdpi), keeping the same file names and sizes.
• iOS: replace the AppIcon image set in ios/Runner/Assets.xcassets (open the project in Xcode and drop the sizes in).

5.2. Flutter launcher-icon package (recommended)

Generating every size by hand is error-prone. Add the helper package to pubspec.yaml:

dev_dependencies:
  flutter_launcher_icons: ^0.13.1

flutter_launcher_icons:
  android: "launcher_icon"
  ios: true
  image_path: "assets/icon/icon.png"

Then generate all sizes at once:

flutter pub get
dart run flutter_launcher_icons

This is the name shown under the launcher icon on the device.

6.1. For Android

Open android/app/src/main/AndroidManifest.xml, find the <application> tag and change android:label:

<application android:label="Your App Name" ... >

6.2. For iOS

Open ios/Runner/Info.plist and set both display keys:

<key>CFBundleDisplayName</key>
<string>Your App Name</string>
<key>CFBundleName</key>
<string>Your App Name</string>

The apps use Google Maps for store locations, address selection and live driver tracking. Create the key first — see Create Google Map API Key — then add it to both platforms.

7.1. For Android

Open android/app/src/main/AndroidManifest.xml and set the key inside the <application> element:

<meta-data
    android:name="com.google.android.geo.API_KEY"
    android:value="YOUR_API_KEY_HERE"/>

7.2. For iOS

Open ios/Runner/AppDelegate.swift and set the key in didFinishLaunchingWithOptions:

GMSServices.provideAPIKey("YOUR_API_KEY_HERE")

Rebuild the app after changing the key on either platform.

All three apps — User, Store and Driver — talk to the same Firebase project as the web panels. Create the project first — see Create Firebase Project — then register every app inside it.

8.1. Register the apps

Repeat this for each of the three apps:

1. Open the Firebase console and select your project.
2. Click Add app → Android and enter that app's package name; add its SHA-1 and SHA-256 fingerprints (see Generate SHA Keys) — these are required for Google and Phone sign-in. Download google-services.json.
3. Click Add app → iOS and enter that app's bundle identifier. Download GoogleService-Info.plist. iOS does not need SHA fingerprints.

8.2. Place the config files

• Android: put google-services.json in android/app/.
• iOS: open ios/Runner.xcworkspace in Xcode and drag GoogleService-Info.plist into the Runner group (tick "Copy items if needed").

8.3. Configure with the FlutterFire CLI (alternative)

Instead of downloading the files by hand, you can let the FlutterFire CLI generate lib/firebase_options.dart for both platforms:

npm install -g firebase-tools
firebase login
dart pub global activate flutterfire_cli
flutterfire configure --project=YOUR_PROJECT_ID

The CLI writes a firebase_options.dart holding the per-platform configuration, which main.dart passes to Firebase.initializeApp():

import 'package:firebase_core/firebase_core.dart';
import 'firebase_options.dart';

void main() async {
  WidgetsFlutterBinding.ensureInitialized();
  await Firebase.initializeApp(
    options: DefaultFirebaseOptions.currentPlatform,
  );
  runApp(MyApp());
}

8.4. Firebase dependencies

The Firebase plugins the app uses are already declared in pubspec.yaml — Core, Auth, Firestore, Storage and Messaging. Just fetch them:

flutter pub get

dependencies:
  flutter:
    sdk: flutter
  firebase_core: ^3.6.0
  firebase_auth: ^5.3.1
  cloud_firestore: ^5.4.4
  firebase_storage: ^12.3.4
  firebase_messaging: ^15.1.3

8.5. Enable the sign-in providers

In the Firebase console open Authentication → Sign-in method and enable the providers Gromart uses:

• Email/Password — standard customer, vendor and admin sign-in.
• Phone — OTP login (requires the SHA fingerprints on Android).
• Google — used by the apps and both web panels.
• Apple — required by Apple if you offer other social logins on iOS.

Then open Authentication → Settings → Authorized domains and add the domains of your Website Panel and Store Panel.

9.1. Using Gradle (recommended)

From the android folder of the project:

# macOS / Linux
./gradlew signingReport

# Windows
gradlew signingReport

The report lists the SHA-1 and SHA-256 values for each build variant.

9.2. Using Keytool

# Debug keystore
keytool -list -v -alias androiddebugkey -keystore ~/.android/debug.keystore
# Password: android

# Release keystore
keytool -list -v -keystore path/to/your-release-key.jks -alias your-key-alias

9.3. Add the keys to Firebase

1. Open Firebase Console → Project Settings → Your apps → Android app.
2. Click Add fingerprint and paste the SHA-1; repeat for the SHA-256.
3. Download the refreshed google-services.json and replace the one in android/app/.

The User App, Store App and Delivery Man / Driver App are published as three independent listings on each store, so this section runs three times — once per app. You can sign all three with the same keystore; only the package name, the store listing and the artwork differ.

10.1. Create a release keystore

Android release builds must be signed with your own keystore. Create it once and keep it safe — if you lose it you cannot update the app on Google Play.

keytool -genkey -v -keystore ~/my-release-key.jks -keyalg RSA \
        -keysize 2048 -validity 10000 -alias my-key-alias

• -keystore — where the .jks file is written.
• -keyalg RSA, -keysize 2048 — the signing algorithm and key length.
• -validity 10000 — validity in days (about 27 years).
• -alias — the name of the key inside the keystore.

You are prompted for a keystore password, a key password and your organisation details.

10.2. Reference the keystore from the project

Create android/key.properties (never commit this file):

storePassword=your-store-password
keyPassword=your-key-password
keyAlias=my-key-alias
storeFile=/Users/yourusername/my-release-key.jks

Gradle reads this file at build time, so the keystore password never lives in the tracked sources. Add android/key.properties and the .jks file itself to .gitignore.

10.3. Build a release version

# Android App Bundle (required by Google Play)
flutter build appbundle --release

# Android APK (for direct distribution / testing)
flutter build apk --release

# iOS (macOS only)
flutter build ipa --release

Outputs are written to build/app/outputs/ (Android) and build/ios/ipa/ (iOS).

10.4. Publish to Google Play

1. Create a developer account at the Google Play Console.
2. Create three apps — one each for the User, Store and Driver app — and complete each store listing (title, description, screenshots, feature graphic, icon) plus its Data Safety, Content Rating and Privacy Policy sections.
3. Upload the .aab to a Production (or Internal Testing) release.
4. Increment version: in pubspec.yaml for every new upload — Play rejects duplicate version codes.
5. Submit for review.

10.5. Publish to the Apple App Store

1. Enrol in the Apple Developer Program.
2. Create the App ID and the app record in App Store Connect.
3. In Xcode set the team and signing certificates, then Product → Archive and upload with the Organizer (or upload the .ipa with Transporter).
4. Complete the listing, privacy details and App Review information, then submit for review.

What should I do if I get the error "Missing project_info object"?

This Android build error means the google-services.json file is missing, in the wrong place, or does not match the package name.

Solution

1. Check the file location. google-services.json must sit in android/app/ — not in android/ and not in the project root.
2. Check the package name. The package_name inside the JSON must match the applicationId in android/app/build.gradle. If you renamed the package, register the new one in Firebase and download the file again.
3. Verify the Firebase setup. Confirm the Android app is registered in the Firebase console under Project Settings → Your apps.
4. Update the Google Services plugin. Make sure the com.google.gms:google-services classpath in android/build.gradle is a current version.
5. Re-sync and rebuild. Sync Gradle in Android Studio, then run:

flutter clean
flutter pub get
flutter run

All three web panels — Admin, Store and Website — are Laravel 12 applications and share the same server requirements. To run Gromart smoothly your hosting must provide:

12.1. Server & Runtime

• Web server: Apache (with mod_rewrite) or NGINX.
• PHP 8.2 or above, with the extensions Laravel requires: BCMath, Ctype, cURL, DOM, Fileinfo, JSON, Mbstring, OpenSSL, PCRE, PDO, Tokenizer, XML, GD (or Imagick) and ZIP.
• MySQL 5.7+ / MariaDB 10.3+ — used for panel authentication, sessions and jobs. All platform data lives in Firestore.
• Composer for PHP dependencies.
• Node.js 18+ and npm — required by the Firebase CLI and by the scheduled scripts the Admin Panel runs from cron.
• FTP / SFTP or SSH access for transferring and extracting the packages.
• Cron job support for Laravel's scheduler.
• SSL certificate (HTTPS) — mandatory for Firebase Authentication, Google login and payment-gateway callbacks.

12.2. Domains

Each panel needs its own domain or subdomain, for example:

• https://yourdomain.com — Website (Customer) Panel
• https://admin.yourdomain.com — Admin Panel
• https://store.yourdomain.com — Store (Vendor) Panel

12.3. External Services

• Google Firebase project upgraded to the Blaze plan (required for Cloud Functions and for outbound network calls).
• Google Maps API key with Maps JavaScript, Places, Geocoding and Directions enabled — used for store search, address selection and delivery tracking.
• SMTP account for outgoing email (order receipts, password resets, templates).
• Payment gateway accounts for the gateways you plan to enable.
• OpenAI API key (optional) for the AI item-listing features.

Node.js is needed for the Firebase CLI (indexes, rules and Cloud Functions), for the Firestore import/export utility, and for the scheduled scripts the Admin Panel executes.

13.1. Install Node.js

Download the LTS installer from nodejs.org/en/download and run it. npm is installed alongside Node. Verify:

node -v
npm -v

13.2. Find the Node binary path

The Admin Panel needs the absolute path to the Node executable so its scheduled commands can run. On Linux/macOS:

which node

On Windows:

where node

The command prints something like /usr/local/bin/node. Copy that value into the NODE_PATH variable of the Admin Panel's .env file.

[user@server ~]$ which node
/usr/local/bin/node

Copy that path into the Admin Panel's .env:

NODE_PATH='/usr/local/bin/node'

13.3. Install the Firebase CLI

npm install -g firebase-tools
firebase login

firebase login opens a browser window; sign in with the Google account that owns your Firebase project.

Firebase is the backend for the whole platform. Create one project and use it for the Admin Panel, the Store Panel, the Website Panel and every mobile app.

14.1. Go to firebase.google.com and click Go to console in the top-right corner.

14.2. Click Add project, enter a project name and click Continue. Choose whether to enable Google Analytics, select the default account for Firebase, then click Create project.

14.3. From the project overview, click the Web (</>) icon to register a web app.

14.4. Enter an app nickname and click Register app. Scroll down to the configuration snippet and copy the values — these are the FIREBASE_* credentials you will paste into every panel's .env file.

The same values can be read again at any time from Project Settings → General → Your apps:

14.5. In the left sidebar open Firestore Database and click Create database. Pick a location close to your users and start in the mode you prefer — the rules are replaced in step 14.9.

14.6. Open Realtime Database and click Create Database. It is used for live driver location tracking.

14.7. Open Storage and click Get started. Firebase Storage holds all uploaded images — store and item photos, banners, avatars and verification documents.

14.8. Open Authentication → Sign-in method and enable Email/Password, Phone, Google and, for iOS, Apple. Under Authentication → Settings → Authorized domains, add your website and store-panel domains.

14.9. Open Firestore Database → Rules, replace the contents with the rules below, and click Publish.

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write: if true;
    }
  }

}

Apply the same rules under Storage → Rules so image uploads work. If a screen later fails to load data with a PERMISSION_DENIED message, check that these rules were published — see Troubleshooting.

14.10. Upgrade the project to the Blaze (pay-as-you-go) plan. Cloud Functions and any outbound call to a payment gateway require it.

14.11. Generate the service account key. Open Project Settings → Service accounts, choose Node.js and click Generate new private key. A JSON file downloads — you will use it for the Admin Panel (storage/app/firebase/credentials.json), for push notifications, and for the import/export utility.

See Video:

The product ships with a demo dataset (settings, categories, currencies, email templates, CMS pages and sample stores). Import it so the panels start with working defaults instead of empty screens.

15.1. Install Node.js if you have not already — see Installing Node.js & npm.

15.2. Unzip the source file named "Firebase Import Export Collections.zip".

15.3. Create your Firebase project first if you have not — see Create Firebase Project.

15.4. Replace credentials.json in the extracted folder with the service account key you generated in step 14.11.

15.5. Open a terminal in the extracted folder. On Windows, hold Ctrl+Shift, right-click inside the folder and choose "Open PowerShell window here".

15.6. Install the dependencies, then run the import or export command:

# Import every collection into your Firestore
npx -p node-firestore-import-export firestore-import -a credentials.json -b collections.json

# Export every collection out of your Firestore
npx -p node-firestore-import-export firestore-export -a credentials.json -b collections.json

The export writes a collections.json file you can keep as a backup.

See Video:

Firestore needs a composite index for every query that filters and sorts on more than one field. Gromart uses many of these (nearby stores, order lists, reports), so deploy the supplied index definitions before going live — otherwise those screens fail with "The query requires an index".

16.1. Install Node.js — see Installing Node.js & npm.

16.2. Unzip the source file named "Firebase Indexing.zip".

16.3. Open a terminal in the extracted folder (Ctrl+Shift + right-click → "Open PowerShell window here" on Windows).

16.4. Log in to Firebase, if you have not already:

firebase login

16.5. Initialise Firestore configuration in the folder:

firebase init

16.6. Confirm with Y and press Enter.

16.7. Choose Firestore: Configure security rules and index files for Firestore.

16.8. Choose Use an existing project.

16.9. Select your Gromart project.

16.10. Press Enter to accept the default rules file name (firestore.rules).

16.11. Press Enter to accept the default index file name (firestore.indexes.json).

16.12. Open the generated firestore.indexes.json, delete its contents, and paste in everything from the supplied firestore_indexes.json file.

16.13. Deploy the indexes:

firebase deploy --only firestore:indexes

Building the indexes takes a few minutes. Watch the progress in Firebase Console → Firestore Database → Indexes and wait until every index shows Enabled.

See Video:

The Cloud Functions Gromart needs are already written — you only have to deploy them to your own Firebase project. The package deploys two functions:

• deliveryDispatch — a Firestore trigger on the restaurant_orders collection. It runs whenever an order is written and drives the driver-assignment flow, following the broadcast or sequential mode you chose under Settings → Feature Settings.
• deleteUser — a callable function that removes a user from Firebase Authentication when an account is deleted from a panel or app.

Without this package deployed, orders are created but never dispatched to a driver, so deploy it before going live.

gcloud services enable compute.googleapis.com cloudbuild.googleapis.com \
  artifactregistry.googleapis.com run.googleapis.com eventarc.googleapis.com \
  cloudfunctions.googleapis.com --project=YOUR_PROJECT_ID

17.1. Install Node.js and the Firebase CLI

npm install -g firebase-tools

If you have already set up the Firebase tools, running npm install inside the functions folder is enough.

17.2. Log in to Firebase

firebase login

A browser window opens; sign in with the Google account that owns your Firebase project.

17.3. Point the package at your project and database

Extract the supplied Cloud Functions package. It contains:

Cloud Function/
├── firebase.json                deploy configuration — leave as it is
├── .firebaserc                  which Firebase project to deploy to
└── functions/
    ├── .env                     which Firestore database to use
    ├── index.js                 the function code
    ├── products/delivery.js     the order-dispatch trigger
    ├── package.json             dependencies (Node 22 runtime)
    └── serviceAccountKey.json   shipped, but not used — see the note below

Step 1 — set the project. There are two ways to do this. They write the same value, so use one, not both:

Option A — let the CLI do it (recommended). From the folder containing firebase.json:

firebase use YOUR_PROJECT_ID

This creates or updates .firebaserc for you, so there is nothing to edit by hand. Run firebase projects:list if you are unsure of the exact project ID.

Option B — edit .firebaserc yourself. Open it and replace the project ID:

{
  "projects": {
    "default": "YOUR_PROJECT_ID"
  }
}

Step 2 — set the database. Open functions/.env and set FIRESTORE_DB to the same Firestore database your panels use:

FIRESTORE_DB=(default)

Step 3 — install the dependencies:

cd functions
npm install

17.4. Deploy the functions

Run this from the folder containing firebase.json — the root of the extracted package, not the functions/ sub-folder:

firebase deploy --only functions

When the deploy finishes, open Firebase Console → Functions to confirm every function is listed. Each function has its own logs, which are the fastest way to debug a failing order or payment.

17.5. Scheduled scripts run by the Admin Panel

Some recurring Firebase tasks have been moved out of Cloud Functions and into the Laravel Admin Panel, so you can control their timing from the panel instead of redeploying. The scripts live in:

root > storage > app > firebase

1. autoCancelOrder.js — automatically cancels orders that were never accepted.
2. scheduleNotification.js — sends reminders for scheduled orders.

Important notes

1. These scripts are executed by Laravel's scheduler, which needs a server cron job — see Cron & Scheduled Tasks.
2. They talk directly to Firebase Firestore using the panel's credentials.json.
3. Their timing values come from the admin panel — auto-cancellation duration under Settings, and reminder lead time under Settings → Schedule Order Notification.

See Video:

The Admin Panel is a Laravel 12 application. Make sure your server meets the requirements in Server Requirement, then upload the Admin Panel package to your domain or subdomain and extract it.

18.1. Upload the files

18.1.1. Connect over FTP/SFTP. Use a client such as FileZilla with your server IP, username and password — port 21 for FTP, port 22 for SFTP.

18.1.2. Transfer the ZIP file to the target path on the server, for example /var/www/html.

18.1.3. Extract it from the server terminal, or with the cPanel File Manager:

unzip your-application.zip

18.1.4. Point the domain's document root at the project's public/ folder.

18.2. Create the database

The admin panel uses MySQL only for panel authentication (users, roles, permissions), sessions and jobs — every piece of platform data lives in Firestore. Create a database and user from your control panel, then import the supplied .sql file into it (step 18.3.6).

18.2.1. Open MySQL Databases in cPanel.

18.2.2. Enter a name and create the database.

18.2.3. Create a database user with a strong password.

18.2.4. Add the user to the database, grant ALL PRIVILEGES, and click Make Changes.

18.3. Configure the panel

18.3.1. Install the dependencies and generate the application key:

composer install
cp .env.example .env
php artisan key:generate

18.3.2. Edit .env and set the database connection and your Firebase web app credentials (copied in step 14.4):

APP_NAME=Gromart
APP_URL=https://admin.yourdomain.com

DB_DATABASE=your_database
DB_USERNAME=your_db_user
DB_PASSWORD=your_db_password

# Firestore named database — '(default)' unless you created a named one
FIREBASE_PROJECT_DB=(default)

FIREBASE_APIKEY=
FIREBASE_AUTH_DOMAIN=
FIREBASE_DATABASE_URL=
FIREBASE_PROJECT_ID=
FIREBASE_STORAGE_BUCKET=
FIREBASE_MESSAAGING_SENDER_ID=
FIREBASE_APP_ID=
FIREBASE_MEASUREMENT_ID=

# Absolute path to the Node binary — used by the scheduled scripts
NODE_PATH=''

# Timezone
APP_TIMEZONE='Asia/Kolkata'

18.3.3. Place the Firebase service account file at storage/app/firebase/credentials.json. It is required for server-side ID-token verification, for sending push notifications, and by the scheduled scripts.

18.3.4. Install the Node modules the scheduled scripts need, from the panel root:

npm install

18.3.5. Set NODE_PATH in .env to the absolute path of your Node binary — see Installing Node.js & npm.

18.3.6. Import the panel's database. Each panel ships with its own .sql file inside the package — import it into the database you created in step 18.2. Do not run php artisan migrate; the supplied .sql file already contains the tables and the default data.

Using phpMyAdmin / cPanel: open phpMyAdmin, select your database from the left-hand list, open the Import tab, choose the panel's .sql file and click Go.

Using the command line:

mysql -u your_db_user -p your_database < admin_panel.sql

18.3.7. Set writable permissions on the runtime folders:

chmod -R 755 storage bootstrap/cache

18.4. Import the demo data

The panel reads its configuration from Firestore, so before your first login import the supplied Firestore collections — see Firestore Database Collection Import / Export. They contain the settings documents, currencies, email templates, CMS pages and the sample catalog.

18.5. Log in

Open the panel at your domain, for example https://admin.yourdomain.com, and sign in with the default account that came with the imported .sql file:

Email:    admin@gromart.com
Password: 12345678

18.6. Map configuration

Choose your map provider under Settings → Map Settings and paste your Google Maps API key — see Create Google Map API Key.

Google Maps is recommended for accurate location, search and delivery-distance results.

18.7. Notification settings

Push notifications are delivered through Firebase Cloud Messaging (FCM). Connect the panel to FCM as follows:

1. Generate the Firebase credentials file

• Open the Firebase console and select your project.
• Go to Project Settings → Service accounts.
• Click Generate new private key — a JSON file downloads (for example firebase-adminsdk-xxxxx.json).
• Keep this file safe; it grants administrative access to your Firebase project.

2. Upload it in the admin panel

• Log in to your Gromart Admin Panel.
• Go to Settings → Notification Settings.
• Upload the JSON file and enter the Sender ID from Project Settings → Cloud Messaging.

3. Save and verify

• Click Save. The panel now sends push through Firebase.
• Place a test order from the User App; the store and the assigned driver should receive a push notification immediately, and the customer should receive the status updates (accepted, picked up, on the way, delivered).

18.8. AI settings

Open Settings → AI Settings and paste your OpenAI API key.

With AI enabled, an item can be generated from its image plus a title and short description — the model returns an expanded description, specifications, variations and other attributes, which speeds up menu creation and keeps listings consistent.

The API secure key used by the mobile apps for AI features is set under Settings → Global Settings.

After logging in, the admin sidebar is grouped into the sections below. Menu items appear only if the logged-in admin's role grants the matching permission, so a restricted admin sees a shorter menu. A search box at the top of the sidebar filters the menu as you type.

19.1. Dashboard

An at-a-glance overview of the business — total customers, stores and drivers, order counts by status, the latest orders, top-performing stores and an earnings summary. It is the fastest way to see whether the platform is healthy right now.

19.2. Point of Sale

Point of Sale. Create counter or phone orders directly from the admin panel: pick a store, add items with their add-ons, apply taxes and discounts, and take payment. Everything a POS order produces is stored alongside app orders, so reports stay complete.

POS Orders. The list of orders created through the POS, with item breakdowns and totals — useful for reconciling counter sales and resolving disputes.

19.3. Live Monitoring

God's Eye (Live Tracking). A live map of every active driver and in-flight order, with a searchable driver list and a legend separating available drivers from those in transit. Click an order to see its pickup and drop points. Use it for dispatch support and driver accountability.

Zone. Service zones define exactly where the platform operates. Draw each zone as a polygon on the map — a minimum of three points — and stores, drivers and customers are matched to the zone they fall inside. Zones let you run different operational rules city by city.

19.4. Access Management

Roles. Create permission groups (Super Admin, Manager, Dispatcher, Support…) and tick exactly which menus and actions each role may use. Permissions are per menu and per action — list, create, edit, view, delete — so you can grant read-only access.

Admins. Create the admin accounts themselves and assign each one a role. Support agents can be created here too, so they get chat access without the rest of the panel.

19.5. Customer & Vendor Management

Customers. Every customer registered through the apps or the website. Each profile shows personal details, contact data, wallet balance and account status, along with the full order history — completed, cancelled and ongoing. From here you can chat with a customer, top up or review the wallet, edit the profile, or deactivate the account.

Owners / Vendors. The store owners on the platform, split into All, Approved and Approval Pending. Review a new vendor's business details and documents, then approve or reject the request; approved vendors gain access to the Store Panel. This screen also links to the vendor's stores, subscription history, documents and chat.

19.6. Store & Driver Management

Stores. Every store on the platform, with its owner, zone, address, opening hours, commission or subscription setup and status. From a store you can jump straight to its items, orders, coupons, advertisements, deliverymen, employees and payouts.

Employees. Staff accounts that belong to a store rather than to the platform. Each employee has a role that limits what they may do inside the Store Panel.

Drivers. The delivery fleet, split into All, Approved and Approval Pending. Review contact details, vehicle information and uploaded documents, approve or reject applications, monitor availability, and open a chat with any driver.

Documents. Define which documents drivers and vendors must upload for verification — ID proof, driving licence, business licence, food-safety permit and so on — and mark each one required or optional. Uploaded files are reviewed from the driver's or vendor's document list.

19.7. Report & Analytics

Reports give a filtered view of platform activity and can be exported for accounting. Common filters:

• Store — limit the report to one store.
• Driver — limit the report to one driver.
• Date range — Today, This Week, This Month, This Year or a custom range.
• File format — export as XLS, CSV or PDF.

Sales Reports. Total orders, revenue, commission and payment summaries over the selected period, broken down by store, customer or delivery type — the report to use for growth tracking and for finding top performers.

Tax Reports. Every tax collected across the platform — on items, delivery fees, packing charges, platform fees, admin commission and vendor subscriptions — filterable by tax type. Use it for tax liability, compliance and regulatory reporting.

19.8. Menu & Item Management

Categories. The item categories customers browse. Each category carries a name, image and description, and can be shown or hidden. Good category structure is what makes the User App easy to navigate.

Items. Every item across all stores — name, category, price, description, images, add-ons and availability. Admins can create items on a store's behalf, correct listings that break platform standards, or build a global menu that vendors import into their own stores.

Attributes. Two related lists. Item Attributes define the variations customers pick when ordering — size, weight, flavour, add-ons. Review Attributes define the criteria customers rate — taste, packaging, delivery, service — so feedback is structured rather than a single star rating.

Bulk Import Items. Upload many items at once from a CSV — name, price, category, attributes and more — instead of creating each entry by hand. The importer reports rows that fail validation so you can correct and re-upload.

19.9. Business Setup

Subscription Plans. The plans vendors can subscribe to — name, duration, price and included features such as the number of items they may list, priority placement or a reduced commission rate. Together with Business Model Settings these define how the platform earns.

Vendor Subscription History. Which plan each vendor bought, when it started and when it expires, plus the payment behind it.

19.10. Order & Promotions Management

Orders. Every order placed on the platform, with order ID, customer, store, assigned driver, payment status and delivery progress. Track the full lifecycle — placed, accepted, preparing, ready, picked up, on the way, completed — reassign a driver, update or cancel an order, and print the order slip.

Deliveryman. Delivery staff who belong to a specific store under the self delivery feature, rather than to the platform-wide driver pool. Useful for stores that prefer to run their own deliveries while still being visible to the admin.

Gift Cards. Digital gift cards with a value, validity period and usage limits. Customers buy them, redeem them at checkout or send them to someone else; the panel tracks each card's remaining balance and redemption history.

Coupons. Discount codes applied at checkout. Define the code, discount type (percentage or fixed), validity dates, usage limits and which stores or categories they apply to. Eligibility is validated automatically when the order is placed.

Cashback. Reward customers with a percentage or fixed amount credited to their wallet after a qualifying order. Set eligibility rules, minimum order values, maximum cashback and store-specific campaigns.

Advertisements. Paid promotional slots shown in the apps and on the website — title, banner, duration and placement, linked to a store or a specific item. Stores submit ad requests from their panel; Ad Requests is where you approve, reject or chat about them.

Documents. The verification queue — review the files vendors and drivers uploaded against the required document types, then approve or reject each submission.

19.11. Notifications Management

General Notifications. Compose and send a push notification to customers, vendors or drivers — announcements, promotions or system alerts — targeted by user type.

Dynamic Notifications. The templates behind automatic notifications (order accepted, driver assigned, order delivered, ad approved and so on). Edit the title and body of each event without touching code.

19.12. Help & Support

A single place to handle inbound conversations — questions, complaints and support requests from customers, vendors and drivers. Chats are threaded per user, and the support history keeps a record of what was asked and how it was resolved.

19.13. Disbursements

Store Disbursements and Driver Disbursements track what the platform owes and has paid out. Each record shows gross earnings, commission deducted, payment status and transaction history, so settlements stay transparent. Payout requests raised from the Store Panel or the Driver App land here for approval.

19.14. Design & Content Management

Banner / Menu Items. The promotional banners shown on the home and category screens — title, image, display order and link target (store, item or custom URL).

CMS Pages. Static content pages such as About Us, Privacy Policy, Terms & Conditions and FAQs, edited in a rich-text editor and published to the website and apps.

Onboarding Screens. The introductory slides new users see the first time they open the app — title, description and image per slide.

Email Templates. The templates behind every automated email — registration, order updates, password reset, vendor approval, promotions. Each template supports dynamic variables so the content is personalised while the tone stays consistent.

19.15. Localisation & Payments

Languages. The languages available across the panel and apps. Add a language, edit its translations, and set the default locale. English and Arabic (RTL) ship by default.

Currencies. Currency code, symbol, symbol position, decimal digits and exchange rate, with one marked as default — so prices render correctly in every region you operate in.

Taxes. Define tax types (GST, VAT, local taxes) and their rates, country by country. Taxes support several scopes — product level, order level, tax on the delivery fee, on the packing charge and on the platform fee.

Note: Admin Commission Tax and Vendor Subscription Tax are used only in the admin tax report, to calculate tax on platform income.

Which scope applies to customers is chosen under Settings → Feature Settings. When Platform Fee and Packing Charge are enabled, the configured tax applies to those components too.

Payment Methods. Enable and configure the gateways customers may pay with — see Payment Gateway Setup for the full list and the credentials each one needs.

19.16. Settings & Configurations

Settings opens a hub of cards, one per settings area, rather than a long menu. The areas are:

• Branding — app name, logo, favicon and panel colours.
• Notification Settings — FCM credentials and push delivery.
• Delivery Charge — the delivery-charge model, distance rates and base fees.
• Business Model — commission, subscription or hybrid, and the platform commission rate.
• Radius Configuration — search radius and distance unit for nearby results.
• Feature Settings — the optional features, gathered into one screen: document verification, store stories, advertisements, self delivery, employee management, auto-approve stores, platform fee, packaging charge, tax scope and the order-assignment mode (broadcast or sequential) with its ringtone.
• Map Settings — the Google Maps API key used across the apps and panels.
• AI Settings — the OpenAI API key and generation options.
• Schedule Order Notification — how far ahead scheduled-order reminders are sent.
• Contact Us — support address, email, phone and default location.
• Wallet Settings — wallet top-up rules and limits.
• Email Settings — SMTP host, port and credentials for outgoing mail.
• Version — app and web version numbers, store links and force-update behaviour.
• Maintenance Mode — take the platform offline while you upgrade.
• Footer Template — footer links, contact details, social icons and copyright text.
• Terms & Conditions and Privacy Policy — the legal content shown in the apps and on the website.

Gromart runs two recurring jobs from the Admin Panel, both triggered by Laravel's scheduler:

• app:auto-cancel-order — cancels orders that were never accepted within the window you configure.
• app:send-scheduled-order-notification — sends reminders for orders customers scheduled for later.

Both shell out to the Node scripts in storage/app/firebase/, so they will not run until the Node path is set.

20.1. Configure the Node binary path

Set NODE_PATH in the Admin Panel's .env to the absolute path of your Node executable — for example /usr/local/bin/node on Linux, or C:/Program Files/nodejs/node.exe on Windows. Find it with which node (see Installing Node.js & npm).

NODE_PATH='/usr/local/bin/node'

20.2. Add the Laravel scheduler to cron

Add a single cron entry that runs the scheduler every minute. Laravel then decides which of its commands are due.

* * * * * cd /path-to-your-admin-panel && php artisan schedule:run >> /dev/null 2>&1

In cPanel, open Cron Jobs, choose Once Per Minute, and paste the command.

20.3. Timing values

The cron entry only decides how often Laravel is asked. The actual timings come from the admin panel: the auto-cancellation window under Settings, and the reminder lead time under Settings → Schedule Order Notification.

Customer payments, vendor subscription payments and wallet top-ups all run through the gateways you enable under Payment Methods in the admin panel. Credentials are stored in Firestore and read server-side by the panels, so secret keys are never bundled into the mobile apps. Each gateway has a sandbox/live toggle — test in sandbox before switching to live.

Gromart integrates 18 online payment gateways, plus Cash on Delivery and the in-app Wallet:

• Stripe, Apple Pay, PayPal, Razorpay, Paytm, PayFast, Paystack, Flutterwave, MercadoPago, Xendit, OrangePay, MidTrans, MTN MoMo, PhonePe, Cashfree, Instamojo, Foloosi and PayMongo.

21.1. How to enable a gateway

1. Go to Payment Methods in the admin sidebar and open the gateway's tab.
2. Tick Enable.
3. Paste the credentials from that provider's dashboard.
4. Choose sandbox or live mode.
5. Click Save.

21.2. Credentials each gateway needs

• Stripe — Stripe Key (publishable) and Stripe Secret.
• Apple Pay — enable the toggle; it runs on top of the Stripe configuration on supported iOS devices.
• PayPal — PayPal App ID (Client ID), PayPal Secret and the Live Mode toggle.
• Razorpay — Razorpay Key and Razorpay Secret.
• Paytm — Merchant ID, Merchant Key and the environment (test/production).
• PayFast — Merchant ID, Merchant Key, plus Return, Cancel and Notify URLs.
• Paystack — Paystack Key and Paystack Secret.
• Flutterwave — Public Key and Secret Key.
• MercadoPago — MercadoPago Key and Access Token.
• Xendit — Xendit API Key.
• OrangePay — Client ID, Secret, Auth token, plus Return, Cancel and Notify URLs.
• MidTrans — Merchant ID and Server Key.
• MTN MoMo — Primary Key, Secondary Key, Target Environment, Callback URL and expiry time in seconds.
• PhonePe — Merchant Key, Client Key, Client Secret, Salt Key and Flow ID.
• Cashfree — Client Key and Secret Key.
• Instamojo — Instamojo Key and Secret Key.
• Foloosi — Foloosi Merchant Key.
• PayMongo — PayMongo Secret Key.
• Cash on Delivery (COD) — no credentials; just enable it.
• Wallet — no credentials; enable it to let customers pay from their in-app wallet balance. Top-ups still go through one of the gateways above.

21.3. Where the secret keys are used

Gateways that use a secret key perform their sensitive operations — creating and verifying transactions — server-side inside the Laravel panels. The browser and the mobile apps send only non-sensitive data (amount, currency, reference); the panel reads the gateway's secret from the settings document the Admin Panel manages and talks to the provider itself, so no secret key is ever shipped in the apps or exposed to the browser.

This is also why the payment callback URLs must point at your live HTTPS domain: the provider redirects back into the panel, which then verifies the transaction before the order is marked paid.

The Store (Vendor) Panel is the Laravel 12 application store owners and their employees log into. Upload the package to its own domain or subdomain (for example store.yourdomain.com) and extract it.

22.1. Upload the files

22.1.1. Connect over FTP/SFTP with FileZilla or a similar client — port 21 for FTP, port 22 for SFTP.

22.1.2. Transfer the ZIP file to the server, for example /var/www/html.

22.1.3. Extract it from the terminal or the cPanel File Manager:

unzip your-application.zip

22.1.4. Point the subdomain's document root at the project's public/ folder.

22.2. Configure the panel

22.2.1. Install the dependencies and generate the application key:

composer install
cp .env.example .env
php artisan key:generate

22.2.2. Create a MySQL database for this panel and import the .sql file supplied with the Store Panel package — through phpMyAdmin → Import, or from the command line:

mysql -u your_db_user -p your_database < store_panel.sql

There is no php artisan migrate step; the .sql file already contains the tables and default data.

22.2.3. Add the same Firebase credentials you used for the Admin Panel, including the same database name:

APP_NAME=Store
APP_URL=https://store.yourdomain.com

DB_DATABASE=your_database
DB_USERNAME=your_db_user
DB_PASSWORD=your_db_password

FIREBASE_PROJECT_DB=(default)
FIREBASE_APIKEY=
FIREBASE_AUTH_DOMAIN=
FIREBASE_DATABASE_URL=
FIREBASE_PROJECT_ID=
FIREBASE_STORAGE_BUCKET=
FIREBASE_MESSAAGING_SENDER_ID=
FIREBASE_APP_ID=
FIREBASE_MEASUREMENT_ID=

# Required for "Sign in with Google"
GOOGLE_CLIENT_ID=

22.3. Google login

To enable "Sign in with Google" you need your Google Client ID.

Where to find it:

1. Open your project in the Firebase Console.
2. Go to Authentication → Sign-in method.
3. Click Google in the provider list.
4. Expand Web SDK configuration.
5. Copy the Web client ID.
6. Paste it into GOOGLE_CLIENT_ID in the panel's .env file.

Authorise your domains for the OAuth 2.0 client:

1. Open the Google Cloud Console.
2. Go to APIs & Services → Credentials.
3. Open your OAuth 2.0 Client ID (Web application type).
4. Add both panels under Authorized JavaScript origins:
   • https://yourdomain.com
   • https://store.yourdomain.com
5. Add both under Authorized redirect URIs:
   • https://yourdomain.com/__/auth/handler
   • https://store.yourdomain.com/__/auth/handler

Also add both domains under Firebase Console → Authentication → Settings → Authorized domains.

22.4. First login

The panel is now ready at your chosen address, for example https://store.yourdomain.com/. Store owners register from this panel and then wait for admin approval (unless auto-approve stores is enabled under Settings → Feature Settings in the Admin Panel). If document verification is switched on, the owner must upload the required documents before the rest of the menu unlocks.

The store sidebar is built for the logged-in account, so it differs from one vendor to the next. An item appears only when the owner's account allows it and the matching platform feature is switched on in the Admin Panel — advertisements, self delivery, employee management and document verification are all optional. Employees see only what their role permits.

23.1. Dashboard

An overview of the store's operations — active, ongoing and completed orders, latest orders, top-performing delivery staff and an earnings summary. It is the screen a store keeps open during trading hours.

23.2. Point of Sale

Take walk-in and counter orders from the panel: add items with add-ons and variants, apply taxes and discounts, and settle the payment. POS orders are recorded alongside app orders, so sales figures stay complete.

23.3. POS Orders

The history of orders created through the POS, with item breakdowns and totals — used for shift reconciliation and for resolving counter disputes.

23.4. Documents

Where the owner uploads the documents the platform requires — identity proof, business licence, food-safety certificate and any others the admin defined. The account stays limited until the admin approves them. This menu is hidden when store document verification is turned off.

23.5. Change Subscription

Browse the available plans with their pricing and features, then upgrade, downgrade or switch. Shown when the platform runs on the subscription or hybrid business model.

23.6. My Subscriptions

The owner's current and past subscriptions — plan, start and expiry dates, included features, payment history and renewal options.

23.7. My Store

All the details of the owner's own store: name, logo and photos, address and map pin, contact details, opening hours, delivery settings, delivery radius, tax details and the open/closed status. Keeping this accurate is what makes the store show up correctly in customer search.

23.8. Employee Roles & Employees

When employee management is enabled, the owner can create roles that limit which panel screens a staff member may use, then create employee accounts and assign those roles. It lets a manager handle orders without seeing payouts, for example.

23.9. Items

The store's menu. Add, edit or remove items with name, category, price, description, images, availability, add-ons and variants such as size or flavour. Items can also be pulled in from the admin's global menu, which populates a new store in minutes, and the AI assistant can draft an item's details from its photo and title.

23.10. Orders

Every order the store receives, with the customer, items, totals, payment status and delivery type. Move an order through its states in real time — accepted, preparing, ready for pickup, handed to the driver, delivered — assign a deliveryman when self delivery is on, cancel when necessary, and print the order slip.

23.11. Coupons

Discount codes the store runs itself — code, discount type (percentage or fixed), minimum order value, validity period and usage limits, applied to specific items or the whole store. Validation happens automatically at checkout.

23.12. Advertisements

Create promotional slots for the store or a specific dish — banner, title, link, placement and duration — and submit them to the admin for approval. Shown when the advertisement feature is enabled.

23.13. Deliveryman

The store's own delivery staff under the self delivery feature. Add, edit or remove deliverymen, see who is available or busy, and assign them to orders. Shown when self delivery is enabled.

23.14. Payments

Earnings and payout history — total revenue, commission deducted, completed payouts and the pending balance, with the transaction detail behind each line. Payout requests are raised from here when manual payouts are in use.

23.15. Withdrawal Methods

The accounts the owner wants to be paid into — bank transfer, PayPal or another supported method. The admin may review these before approving a payout.

23.16. Wallet Transactions

Every credit and debit on the store's wallet — received payments, cashback, order adjustments and withdrawals — each with date, description, amount and resulting balance.

The Website Panel is the customer-facing ordering site — a Laravel 12 application that reads and writes Firestore through the Firebase JS SDK. Upload it to your main domain (recommended) and extract it.

24.1. Upload the files

24.1.1. Connect over FTP/SFTP using your server IP, username and password — port 21 for FTP, port 22 for SFTP.

24.1.2. Transfer the ZIP file to the server, for example /var/www/html.

24.1.3. Extract it from the terminal or the cPanel File Manager:

unzip your-application.zip

24.1.4. Point the domain's document root at the project's public/ folder.

24.2. Configure the panel

24.2.1. Install the dependencies and generate the application key:

composer install
cp .env.example .env
php artisan key:generate

24.2.2. Create a MySQL database for this panel and import the .sql file supplied with the Website Panel package — through phpMyAdmin → Import, or from the command line:

mysql -u your_db_user -p your_database < website_panel.sql

There is no php artisan migrate step; the .sql file already contains the tables and default data.

24.2.3. Add the same Firebase credentials used by the other panels:

APP_NAME=Gromart
APP_URL=https://yourdomain.com

DB_DATABASE=your_database
DB_USERNAME=your_db_user
DB_PASSWORD=your_db_password

FIREBASE_PROJECT_DB=(default)
FIREBASE_APIKEY=
FIREBASE_AUTH_DOMAIN=
FIREBASE_DATABASE_URL=
FIREBASE_PROJECT_ID=
FIREBASE_STORAGE_BUCKET=
FIREBASE_MESSAAGING_SENDER_ID=
FIREBASE_APP_ID=
FIREBASE_MEASUREMENT_ID=

# Required for "Sign in with Google"
GOOGLE_CLIENT_ID=

24.3. Google login

Add your Google Client ID exactly as described for the Store Panel:

1. Firebase Console → Authentication → Sign-in method → Google.
2. Expand Web SDK configuration and copy the Web client ID.
3. Paste it into GOOGLE_CLIENT_ID in this panel's .env.
4. In Google Cloud Console → APIs & Services → Credentials, add your website domain to the OAuth client's Authorized JavaScript origins and add https://yourdomain.com/__/auth/handler to the Authorized redirect URIs.
5. Add the domain under Firebase Authentication → Settings → Authorized domains.

24.4. Go live

The site is now ready at your domain, for example https://yourdomain.com/. Its home banners, footer and content pages are all driven from the Admin Panel — see Customizing Branding.

Gromart uses Google Maps for store search, address selection, delivery-distance calculation and live driver tracking. One key can serve the panels and the apps, but restricting it per platform is safer.

25.1. Go to the Google Maps Platform and click Get started.

25.2. Open the Google Cloud Console, go to Billing, and confirm your billing details are up to date — Google Maps returns a grey map or a watermark without an active billing account.

25.3. Go to APIs & Services → Credentials and select or create a project.

25.4. Click Create credentials → API key. Copy the key that is displayed.

25.5. Enable the APIs Gromart uses under APIs & Services → Library:

• Maps JavaScript API — the maps rendered in the web panels.
• Maps SDK for Android and Maps SDK for iOS — the maps in the mobile apps.
• Places API — address autocomplete and store search.
• Geocoding API — converting between addresses and coordinates.
• Directions API and Distance Matrix API — delivery routes, distance and ETA.

25.6. Restrict the key to your domains (HTTP referrers) for web use, and to your package name + SHA-1 for Android, then save.

25.7. Add the key in the admin panel under Settings → Map Settings, and in each mobile app — see Google Maps API Key (Flutter).

All three panels follow the standard Laravel 12 layout. If you plan to customise the code, these are the folders that matter.

gromart-admin/  (also gromart-store/ and gromart-web/)
├── app/                 Application code
│   ├── Console/         Artisan commands + the scheduled tasks
│   │   └── Commands/    AutoCancelOrder, SendScheduledOrderNotification
│   ├── Helpers/         Shared helper functions
│   ├── Http/
│   │   ├── Controllers/ Request handlers (thin — data is read from Firestore)
│   │   └── Middleware/  Auth & the per-menu permission gate
│   ├── Mail/            Mailables for the email templates
│   ├── Models/          Eloquent models (panel auth: User, Role, Permission)
│   └── Providers/       Service providers (incl. the Firebase service)
├── Modules/
│   └── AI/              The OpenAI item-listing module (admin & store panels)
├── bootstrap/           Framework bootstrap + cache
├── config/              Configuration files (app, database, firebase, …)
├── database/
│   ├── migrations/      MySQL schema reference (you import the shipped .sql)
│   └── seeders/         Base data
├── public/              Web root — index.php, css/, js/, images/
├── resources/
│   ├── views/           Blade templates (pages, layouts, partials)
│   ├── css/             Panel stylesheets
│   └── lang/            Translations (en/, ar/)
├── routes/
│   ├── web.php          All web routes (route names double as permission keys)
│   └── api.php          API routes
├── storage/
│   └── app/firebase/    credentials.json + the scheduled Node scripts
├── vendor/              Composer dependencies (generated — not edited)
├── .env                 Environment config (DB + Firebase credentials)
├── artisan              Laravel command-line entry point
└── composer.json        PHP dependencies

This section maps the external services Gromart integrates with and where each one is configured, so developers can extend or replace them. Every client — the mobile apps, the Admin Panel, the Store Panel and the Website Panel — talks to the same Google Firebase backend.

27.1. Architecture at a glance

• Flutter apps → Firebase directly (Firestore, Auth, Storage, FCM, Realtime Database for live tracking).
• Website Panel → Firebase JS SDK in the browser, with Laravel verifying the Firebase ID token to create the server session.
• Admin & Store Panels → Firebase JS SDK in the browser plus the Firebase Admin SDK on the server (via credentials.json) for privileged operations and push notifications.
• Cloud Functions → the deliveryDispatch Firestore trigger that assigns orders to drivers, and the deleteUser callable that removes an account from Firebase Authentication.
• Payment gateways → handled server-side by the Laravel panels, which hold the secret keys and verify each transaction.
• Laravel scheduler → the recurring Node scripts (auto-cancel, scheduled-order reminders).

There is no separate REST API layer to configure: Firestore is the API, and every client reads and writes the same collections in real time.

27.2. Firebase Firestore (primary data store)

All platform data lives in Firestore. The main collections are:

• users — customers, vendors, drivers and admins, each with a role.
• vendors, vendor_categories, vendor_products, vendor_attributes, vendor_filters — stores and their menus.
• restaurant_orders, order_transactions — orders and payments.
• coupons, gift_cards, cashback, cashback_redeem, advertisements — promotions.
• subscription_plans, subscription_history, payouts, driver_payouts, withdraw_method, wallet — money movement.
• zone, tax, currencies, documents, documents_verify — operational configuration.
• settings — every configurable option, one document per settings screen.
• chat, notifications, dynamic_notification, email_templates — communication.
• cms_pages, menu_items, on_boarding, story — content.

Configured by the FIREBASE_* keys in each panel's .env. Access is governed by the security rules you publish (see Create Firebase Project), and multi-field queries need composite indexes (see Deploy Firestore Indexes).

27.3. Firebase Authentication

Handles email/password, phone (OTP), Google and Apple sign-in for every client. Providers are enabled in the Firebase console; the web panels additionally need the domain listed under Authorized domains and a matching OAuth 2.0 client for Google login.

27.4. Firebase Storage

Holds every uploaded file — store and item images, banners, avatars and verification documents. Upload quality is controlled by IMAGE_COMPRESSOR_QUALITY in each panel's .env.

27.5. Cloud Messaging (FCM — push notifications)

Delivers order, chat and status notifications to customers, stores and drivers. Configured by uploading the service-account JSON and Sender ID under Settings → Notification Settings; the notification text itself comes from Dynamic Notifications.

27.6. Firebase Realtime Database

Used for live driver location, which changes far more often than order state. It powers the customer's tracking map and the admin's God's Eye view.

27.7. Payment gateways

18 gateways plus COD and the wallet. Public keys are read by the clients; secret-key operations run server-side in the Laravel panels, which read the credentials from the settings document the Admin Panel manages. See Payment Gateway Setup.

27.8. Google Maps

Store search, address selection, zone drawing, delivery distance and live tracking. One key, configured in Settings → Map Settings and in each mobile app.

27.9. OpenAI

The Modules/AI module in the Admin and Store panels. Given an item image, title and short description it drafts the full listing — description, specifications, variations and attributes. Configured under Settings → AI Settings; billed by OpenAI per request.

27.10. Email (SMTP)

Order receipts, password resets, vendor approvals and campaign mail. Set the SMTP host, port, username, password and encryption in .env (or under Settings → Email Settings); the message bodies come from Email Templates.

27.11. Where each integration is configured

• .env (each panel) — database, all FIREBASE_* keys, FIREBASE_PROJECT_DB, GOOGLE_CLIENT_ID, NODE_PATH, SMTP.
• storage/app/firebase/credentials.json — the Firebase service account.
• Admin Panel → Settings — branding, map key, notifications, AI key, delivery charge, business model, feature toggles, taxes and payment gateways.
• Firebase console — auth providers, authorised domains, security rules, indexes and Cloud Functions.
• Google Cloud console — Maps APIs, the API key restrictions and the OAuth 2.0 client.

27.12. Extending Gromart (developer guide)

• Add a settings screen. The settings pages are data-driven: most are a short Blade file declaring a Firestore document name and a field list, rendered by a shared form partial. Add your screen, then add one line to the settings hub array in resources/views/settings/index.blade.php.
• Add a menu item. Add the route in routes/web.php wrapped in the permission: middleware, add the entry to resources/views/layouts/menu.blade.php, and grant the permission to the roles that need it. Route names double as permission keys, so keep them stable.
• Add a language. Copy resources/lang/en to a new locale folder, translate lang.php, and register the language under Languages in the admin panel.
• Add a payment gateway. Follow an existing gateway end to end: its tab under Payment Methods, its keys in the settings document, and its init/return routes plus the server-side handler in each panel's checkout controller.
• Change business rules. Prefer the admin settings over code edits — commission, delivery charge, radius, taxes, order assignment and the feature toggles are all configurable, so upgrades stay painless.

All three panels are Laravel applications and can run on shared hosting (cPanel) or on a VPS/dedicated server. Choose the approach that matches your hosting.

28.1. Shared hosting (cPanel)

Best for getting started quickly when you do not have SSH/root access.

1. Create a MySQL database and user (see Admin Panel Setup).
2. Upload each panel's ZIP to its domain/subdomain folder and extract it. Point the document root at the panel's public/ directory (or use the supplied .htaccess).
3. Shared hosting usually has no Composer, so run composer install on your own machine first and upload the project with its vendor/ folder already installed.
4. Configure .env (database + Firebase credentials) and place credentials.json in storage/app/firebase/.
5. Set writable permissions (typically 755) on storage/ and bootstrap/cache/.
6. Import that panel's supplied .sql file into its database through phpMyAdmin → Import in cPanel. No Artisan or shell access is needed for this step.
7. Add the Laravel scheduler as a cron entry under Cron Jobs — see Cron & Scheduled Tasks.

28.2. VPS / dedicated server

Recommended for production — you get SSH access, Composer, Node.js and full control.

1. Install the stack: PHP 8.2+, Composer, MySQL/MariaDB, Node.js and a web server (Nginx or Apache).
2. Upload or clone each project, then run composer install (and npm install for the Admin Panel).
3. Copy .env.example to .env, set the database and Firebase credentials, then run php artisan key:generate.
4. Import that panel's supplied .sql file: mysql -u user -p database < panel.sql.
5. Point each server block's document root at that project's public/ directory.
6. Set ownership/permissions so the web server can write to storage/ and bootstrap/cache/.
7. Add the scheduler to the system crontab (* * * * * php /path/artisan schedule:run) — see Cron & Scheduled Tasks.
8. For production, run php artisan config:cache and php artisan route:cache, and serve everything over HTTPS.

28.3. Common deployment pitfalls (.htaccess & shared hosting)

• Only the home page works; every other route returns 404. mod_rewrite is disabled or AllowOverride is not All, so Laravel's public/.htaccess is ignored.
• App installed in a sub-folder. Add a RewriteBase to public/.htaccess, e.g. RewriteBase /gromart/.
• Document root points at the project root instead of public/. Point the domain at public/, or add a root .htaccess that rewrites into it. Never serve the project root — it makes .env and storage/app/firebase/credentials.json reachable from the internet.
• 404 on uploaded images / assets. Run php artisan storage:link (or create the public/storage link manually if symlinks are blocked).
• 500 error after upload. Usually permissions — set 755 on storage/ and bootstrap/cache/, and confirm PHP is 8.2+.
• "No input file specified". A PHP handler / CGI mismatch on some cPanel hosts — add the host's recommended handler line (or Options -MultiViews) to .htaccess.
• Mixed-content warnings over HTTPS. Set APP_URL to your https:// domain and force HTTPS in .htaccess.

28.4. SSL / HTTPS configuration (production)

Always serve all three panels over HTTPS. Firebase Authentication, payment-gateway callbacks and secure cookies all require it, and browsers block mixed content on pages that are not fully secure.

Shared hosting (cPanel). Most hosts issue a free certificate automatically. Open cPanel → Security → SSL/TLS Status (or Let's Encrypt / AutoSSL), select your domains, and click Run AutoSSL.

VPS / dedicated server. Install a free Let's Encrypt certificate with Certbot:

# Nginx
sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d yourdomain.com -d admin.yourdomain.com -d store.yourdomain.com

# Apache
sudo apt install certbot python3-certbot-apache
sudo certbot --apache -d yourdomain.com

Certbot installs the certificate and adds an automatic renewal timer.

Force HTTPS. Add this at the top of each panel's public/.htaccess, just inside <IfModule mod_rewrite.c> and before Laravel's front-controller rules:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Then finish up:

• Set APP_URL=https://… in every panel's .env.
• In Firebase console → Authentication → Settings → Authorized domains, add all three HTTPS domains so sign-in works.
• Update the OAuth 2.0 client's authorised origins and redirect URIs to the HTTPS versions.
• Re-cache the config: php artisan config:cache.

To update the Admin, Store and Website panels, upload the latest source package to the root directory of each respective panel and extract it.

If your project includes custom modifications, we strongly recommend updating with Git so your customisations are preserved while the latest changes are merged in.

33.1. Updating via Git (recommended)

• Commit and push your existing changes to a dedicated Git branch.
• Download the latest source package from CodeCanyon.
• Replace the source files in your working copy with the new version.
• Review the diff, resolve any conflicts, and confirm your customisations survived.
• Import the new .sql file if the release changed the database (see the note above).
• Commit and deploy.

33.2. Replacing the source code

• Back up your current panel folder and your database.
• Keep a copy of .env and storage/app/firebase/credentials.json — they are not part of the package.
• Upload the new package and extract it over the existing installation.
• Restore .env and credentials.json, then compare .env against the new .env.example and add any new keys.
• Import the updated .sql file from the new package if the release changed the database. Back up your existing database first — importing replaces the tables it contains.
• Run the post-update commands:

composer install
php artisan config:clear
php artisan cache:clear
php artisan view:clear

To update the User App, Store App or Delivery Man / Driver App, download the latest source package and replace that app's project source. Each app updates independently, so you can ship one without rebuilding the others — but keep them on the same release when a version changes shared Firestore fields. As with the panels, Git is the safer route if you have customised the code.

34.1. Updating via Git (recommended)

• Commit and push your existing changes to a dedicated Git branch.
• Download the latest source package from CodeCanyon.
• Replace the source files with the new version.
• Review the diff, resolve conflicts, and keep your customisations.

34.2. Replacing the source code

• Back up your current project, and keep your google-services.json, GoogleService-Info.plist, android/key.properties and release keystore — none of them ship in the package.
• Extract the new source and restore those files.
• Re-apply your branding changes (app name, launcher icon, package name, Maps API key).
• Rebuild and test:

flutter clean
flutter pub get
flutter run

Then increment version: in pubspec.yaml and publish the new build — see Signing, Building & Publishing the Apps. Update the version number and store links under Settings → Version in the admin panel so existing users are prompted to upgrade.