Narven Group
Trade + EV logistics with AI assistant
The AI ops assistant
A buyer- and operator-facing assistant that understands both divisions and adapts retrieval and tone to the inquiry. Hardened with truthfulness rules so it never makes up stock, staff, or contracts. Incoterms guidance (CIF / FOB / EXW / DDP) is built into the prompt.
Rate-limited per session: 50 messages max, 20/hour guest, 50/hour authenticated. Low-confidence queries hand off to the formal RFQ flow at /contact or info@narvengroup.com.
Two divisions, one platform
Global Commodity Trade and EV-powered Delivery Logistics in one brand. Route-isolated paths keep Global Trade visitors from seeing EV Logistics URLs in their sitemap and vice versa.
Real catalog: Copper Cathodes (LME Grade A 99.99%), Aluminium Ingots A7, Refined Sunflower Oil, Crude Palm Oil, frozen buffalo meat, pulses, cashew, organics — alongside EV Vehicle Rental, Full Service EV Logistics, Rent-to-Own EV programs.
Catalogue — real prices
Copper Cathodes at $15,500/MT, Aluminium Ingots A7 at $3,550/MT, Frozen Buffalo Meat at $3,650/MT, Basmati Rice (Toor Sella) at $1,280/MT. EV Vehicle Rental from $99/month, Full Service EV Logistics from $199/month, Rent-to-Own from $65/month × 24.
Mongo-backed collections, Zustand cart with persistence, admin- side approval workflow for quotes and RFQs.
Grounded buyer dialogue
Sample inquiry — “Aluminium Ingots A7, 20 MT EXW. Need spec sheet + LOI template.” The assistant returns A7 LME Grade, 99.7% min Al, “available subject to confirmation” wording, attaches the LOI template, and points to the formal RFQ path. No fabricated stock, no invented contacts.
Architecture
- Next.js 14 App Router, TypeScript, Tailwind, framer-motion.
- Edge-compatible middleware via
joseprotecting/admin,/dashboard,/checkout,/api/admin. Lower p95 latency than Node-runtime auth. - Six-page admin panel — Dashboard / Products / Orders / Quotes / Contacts / Users — with status workflows and role promotion.
- Shares the same Conversion Studio Cloud Run worker as Lasanta India through a HMAC-authenticated internal API. Two products, one service.
The JWT_SECRET incident
A production outage from a JWT_SECRETrotation that wasn’t propagated to Vercel. Symptom: operators could log in but every authenticated request 401’d.
Fix: an environment audit checklist before every secret rotation, plus a /api/health/jwt boot-time round-trip check that fails loudly if signing and verifying disagree. Better to crash on deploy than fail silently under load.