@fayz-ai/shop 0.14.2 → 0.16.0

package/dist/index.js

@@ -1,16 +1,16 @@
-import { T, resolveStockStore, createSupabaseStockStore, OPENING_BALANCE_REASON, rowToStockLocation } from './chunk-STRNMFC4.js';
-export { DEFAULT_STOCK_TRACKING, MockStockStore, OWN_FULFILLMENT, STOCK_TRACKING_MODES, StockMovementError, SupabaseStockStore, createMockStockStore, createSupabaseStockStore, listStockMovementKinds, listStockReasonCodes, mirroredInventoryCount, registerStockMovementKind, registerStockReasonCode, registerStockStore, replayStockLedger, resolveStockStore, validateStockMovement } from './chunk-STRNMFC4.js';
-import { getShopProvider } from './chunk-2WACO2TG.js';
-export { getShopProvider, resetShopProvider, setShopProvider } from './chunk-2WACO2TG.js';
+import { T, V, resolveStockStore, createSupabaseStockStore, OPENING_BALANCE_REASON, rowToStockLocation } from './chunk-26YK5V6P.js';
+export { DEFAULT_STOCK_TRACKING, MockStockStore, OWN_FULFILLMENT, STOCK_TRACKING_MODES, StockMovementError, SupabaseStockStore, createMockStockStore, createSupabaseStockStore, listStockMovementKinds, listStockReasonCodes, mirroredInventoryCount, registerStockMovementKind, registerStockReasonCode, registerStockStore, replayStockLedger, resolveStockStore, validateStockMovement } from './chunk-26YK5V6P.js';
+import { getShopProvider } from './chunk-WWQICATY.js';
+export { getShopProvider, resetShopProvider, setShopProvider } from './chunk-WWQICATY.js';
 import './chunk-FQPGE3YN.js';
-import { normalizeVariantAxes, validateVariantAxes, variantOptionsKey, storagePathOf, mergeMediaFiles, productImageToMediaFile, displayNameOf, mediaKindOf } from './chunk-U6HV3LVP.js';
-export { MAX_VARIANT_AXES, MAX_VARIANT_COMBINATIONS, MockShopProvider, applyVariantMatrix, axesFromOptions, createMockShopProvider, displayNameOf, formatVariantCombination, hasOnlyDefaultVariant, leavesNothingSellable, mediaKindOf, mergeMediaFiles, normalizeVariantAxes, planVariantMatrix, productImageToMediaFile, storagePathOf, validateVariantAxes, variantCombinations, variantOptionsKey } from './chunk-U6HV3LVP.js';
+import { normalizeVariantAxes, validateVariantAxes, variantOptionsKey, storagePathOf, emitOrderEvent, mergeMediaFiles, productImageToMediaFile, displayNameOf, mediaKindOf } from './chunk-EUFSFVGS.js';
+export { MAX_VARIANT_AXES, MAX_VARIANT_COMBINATIONS, MockShopProvider, applyVariantMatrix, axesFromOptions, createMockShopProvider, displayNameOf, formatVariantCombination, hasOnlyDefaultVariant, leavesNothingSellable, mediaKindOf, mergeMediaFiles, normalizeVariantAxes, planVariantMatrix, productImageToMediaFile, storagePathOf, validateVariantAxes, variantCombinations, variantOptionsKey } from './chunk-EUFSFVGS.js';
 export { MOCK_CATEGORIES, MOCK_DISCOUNTS, MOCK_PRODUCTS, buildMockCatalog, svgPlaceholder } from './chunk-IKNGCRUM.js';
 import { createSupabaseEntityStore } from './chunk-6BO2TMZ5.js';
 import { getShopTenantId } from './chunk-KLDS7IPU.js';
 export { getShopTenantId, setShopTenantResolver } from './chunk-KLDS7IPU.js';
 import { resolveEntityStore } from './chunk-NWW3WJ7Y.js';
-import './chunk-3GERSY5F.js';
+import './chunk-UVQ6UUDN.js';
 import { getSupabaseClientOptional } from '@fayz-ai/core';
 
 // src/lib/commerce.ts
@@ -32,6 +32,19 @@ async function validateDiscount(input, provider = getShopProvider()) {
   if (discount.usageLimit != null && discount.timesUsed >= discount.usageLimit) {
     return { valid: false, code: discount.code, type: discount.type, value: 0, reason: "usage_limit" };
   }
+  if (discount.minSubtotal != null && (input.subtotal ?? 0) < discount.minSubtotal) {
+    return {
+      valid: false,
+      code: discount.code,
+      type: discount.type,
+      value: 0,
+      reason: "min_subtotal",
+      minSubtotal: discount.minSubtotal
+    };
+  }
+  if (discount.type === "free_shipping") {
+    return { valid: true, code: discount.code, type: discount.type, value: 0 };
+  }
   if (discount.type !== "percentage" && discount.type !== "fixed_amount") {
     return { valid: false, code: discount.code, type: discount.type, value: 0, reason: "unsupported" };
   }
@@ -163,7 +176,21 @@ function setShopFunctionsUrl(url) {
 function getShopFunctionsUrl() {
   return _functionsUrl;
 }
-async function callShopFunction(db, slug, body) {
+var DEFAULT_TIMEOUT_MS = 25e3;
+async function callShopFunction(db, slug, body, options) {
+  const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  let timer;
+  const bounded = (work) => Promise.race([
+    work,
+    new Promise((_, reject) => {
+      timer = setTimeout(
+        () => reject(new Error(`A fun\xE7\xE3o ${slug} n\xE3o respondeu em ${Math.round(timeoutMs / 1e3)}s.`)),
+        timeoutMs
+      );
+    })
+  ]).finally(() => {
+    if (timer) clearTimeout(timer);
+  });
   const override = getShopFunctionsUrl();
   if (override) {
     let token = null;
@@ -171,18 +198,25 @@ async function callShopFunction(db, slug, body) {
       token = (await db?.auth?.getSession?.())?.data?.session?.access_token ?? null;
     } catch {
     }
-    const response = await fetch(`${override}/${slug}`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        ...token ? { Authorization: `Bearer ${token}` } : {}
-      },
-      body: JSON.stringify(body)
-    });
+    let response;
+    try {
+      response = await bounded(fetch(`${override}/${slug}`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          ...token ? { Authorization: `Bearer ${token}` } : {}
+        },
+        body: JSON.stringify(body)
+      }));
+    } catch (cause) {
+      throw new Error(
+        `A bancada de fun\xE7\xF5es em ${override} n\xE3o respondeu (${slug}). Suba-a, ou tire PUBLIC_SUPABASE_FUNCTIONS_URL do .env para usar as fun\xE7\xF5es publicadas.`
+      );
+    }
     const payload2 = await response.json().catch(() => null);
     return { ok: response.ok, status: response.status, payload: payload2 };
   }
-  const { data, error } = await db.functions.invoke(slug, { body });
+  const { data, error } = await bounded(db.functions.invoke(slug, { body }));
   if (!error) return { ok: true, status: 200, payload: data };
   const status = Number(error?.context?.status ?? 502);
   let payload = null;
@@ -195,18 +229,37 @@ async function callShopFunction(db, slug, body) {
 
 // src/data/checkout-gateways.ts
 var GATEWAYS = Object.freeze({
-  abacatepay: Object.freeze({ open: "shop-checkout-open", settle: "shop-checkout-settle" }),
-  vindi: Object.freeze({ open: "vindi-checkout-open", settle: "vindi-checkout-settle" })
+  abacatepay: Object.freeze({ open: "shop-checkout-open", settle: "shop-checkout-settle", link: true, card: false, label: "AbacatePay" }),
+  vindi: Object.freeze({ open: "vindi-checkout-open", settle: "vindi-checkout-settle", link: true, card: true, label: "Vindi" }),
+  // The first acquirer here that charges a card IN THE STORE: Mercado Pago
+  // tokenises in the browser, so no PAN crosses the pool and card needs no
+  // hosted page. `link: false` because nothing mints a shareable URL yet.
+  mercadopago: Object.freeze({ open: "mercadopago-checkout-open", settle: "mercadopago-checkout-settle", link: false, card: true, label: "Mercado Pago" })
 });
 var CHARGEABLE_PROVIDERS = Object.freeze(Object.keys(GATEWAYS));
 function isChargeableProvider(provider) {
   return checkoutGateway(provider) !== null;
 }
+function supportsPaymentLink(provider) {
+  return checkoutGateway(provider)?.link === true;
+}
+function supportsCard(provider) {
+  return checkoutGateway(provider)?.card === true;
+}
+function gatewayLabel(provider) {
+  return checkoutGateway(provider)?.label ?? null;
+}
 function checkoutGateway(provider) {
   const slug = String(provider ?? "").trim();
   if (!slug) return null;
   return GATEWAYS[slug] ?? null;
 }
+function resolveCheckoutProvider(explicit, configured) {
+  const asked = String(explicit ?? "").trim();
+  if (asked) return asked;
+  const store = String(configured ?? "").trim();
+  return store || "abacatepay";
+}
 
 // src/data/customer-search.ts
 var COLUMNS = ["first_name", "last_name", "email", "phone"];
@@ -408,13 +461,13 @@ function shippingZonePayload(input) {
   if (input.carrier !== void 0) payload.carrier = input.carrier || null;
   if (input.postalFrom !== void 0) payload.postal_from = toPostalDigits(input.postalFrom);
   if (input.postalTo !== void 0) payload.postal_to = toPostalDigits(input.postalTo);
-  if (input.rate !== void 0) payload.rate = input.rate;
+  if (input.rate != null) payload.rate = input.rate;
   if (input.freeAbove !== void 0) payload.free_above = input.freeAbove ?? null;
   if (input.etaMinDays !== void 0) payload.eta_min_days = input.etaMinDays ?? null;
   if (input.etaMaxDays !== void 0) payload.eta_max_days = input.etaMaxDays ?? null;
-  if (input.active !== void 0) payload.active = input.active;
-  if (input.sortOrder !== void 0) payload.sort_order = input.sortOrder;
-  if (input.excluded !== void 0) payload.excluded = input.excluded;
+  if (input.active != null) payload.active = input.active;
+  if (input.sortOrder != null) payload.sort_order = input.sortOrder;
+  if (input.excluded != null) payload.excluded = input.excluded;
   if (input.profileId !== void 0) payload.profile_id = input.profileId ?? null;
   return payload;
 }
@@ -508,6 +561,7 @@ function rowToOrderItem(row) {
     id: row.id,
     orderId: row.order_id,
     productId: row.product_id ?? null,
+    variantId: row.variant_id ?? null,
     name: row.name,
     sku: row.sku ?? null,
     quantity: row.quantity ?? 0,
@@ -703,6 +757,13 @@ function rowToGiftCard(row) {
     updatedAt: row.updated_at ?? row.created_at
   };
 }
+function cartPaymentUrl(url, token) {
+  const base = String(url ?? "").trim();
+  const handle = String(token ?? "").trim();
+  if (!base) return null;
+  if (!handle || base.includes(handle)) return base;
+  return `${base.replace(/\/+$/u, "")}/${handle}`;
+}
 var SupabaseShopProvider = class {
   // ---------------------------------------------------------------------------
   // Products
@@ -735,7 +796,7 @@ var SupabaseShopProvider = class {
    *  (authenticated tenant member, who CAN see archived rows) consistent. */
   async getProductVariants(productId, opts) {
     const db = getDb();
-    let variantQuery = db.from(T.productVariants).select("*").eq("product_id", productId);
+    let variantQuery = db.from(V.productVariants).select("*").eq("shop_product_id", productId);
     if (!opts?.includeArchived) variantQuery = variantQuery.eq("status", "active");
     const [optionsRes, variantsRes] = await Promise.all([
       db.from(T.productOptions).select("*").eq("product_id", productId).order("position", { ascending: true }),
@@ -799,7 +860,7 @@ var SupabaseShopProvider = class {
     if (Object.keys(input.options).length === 0) {
       throw new Error("Uma variante sem op\xE7\xF5es \xE9 a variante padr\xE3o (0037), criada pelo banco. Declare ao menos um eixo.");
     }
-    const { data: existing, error: readError } = await db.from(T.productVariants).select("*").eq("product_id", productId);
+    const { data: existing, error: readError } = await db.from(V.productVariants).select("*").eq("shop_product_id", productId);
     if (readError) throw readError;
     const wantedKey = variantOptionsKey(input.options);
     const match = (existing ?? []).find((row) => variantOptionsKey(row.options ?? {}) === wantedKey);
@@ -846,6 +907,36 @@ var SupabaseShopProvider = class {
     });
     return target;
   }
+  async receiveVariantStock(variantId, quantity, options) {
+    const amount = Math.trunc(quantity);
+    if (amount <= 0) throw new Error("A quantidade recebida precisa ser maior que zero.");
+    const store = resolveStockStore(getTenantId() ?? "", () => createSupabaseStockStore());
+    await store.recordMovement({
+      variantId,
+      kind: "receipt",
+      reasonCode: options?.reasonCode ?? "purchase",
+      quantity: amount,
+      note: options?.note,
+      occurredAt: options?.occurredAt
+    });
+    return store.getAvailable(variantId);
+  }
+  async receiveProductStock(productId, quantity, options) {
+    const amount = Math.trunc(quantity);
+    if (amount <= 0) throw new Error("A quantidade recebida precisa ser maior que zero.");
+    if (options?.variantId) {
+      return this.receiveVariantStock(options.variantId, amount, options);
+    }
+    const { variants } = await this.getProductVariants(productId);
+    if (variants.length === 1) return this.receiveVariantStock(variants[0].id, amount, options);
+    if (variants.length > 1) {
+      throw new Error("Este produto tem mais de uma varia\xE7\xE3o \u2014 escolha qual recebeu a entrada.");
+    }
+    const product = await this.getProduct(productId);
+    const now = Math.max(0, product?.inventoryCount ?? 0) + amount;
+    await this.updateProduct(productId, { inventoryCount: now });
+    return now;
+  }
   async createProduct(input) {
     const db = getDb();
     const tenantId = getTenantId();
@@ -1028,7 +1119,7 @@ var SupabaseShopProvider = class {
   async listOrders(options) {
     const db = getDb();
     const tenantId = getTenantId();
-    let q = db.from(T.orders).select(`*, items:${T.orderItems}(*)`);
+    let q = db.from(V.orders).select(`*, items:${V.orderItems}(*)`);
     if (tenantId) q = q.eq("tenant_id", tenantId);
     if (options?.status) q = q.eq("status", options.status);
     if (options?.financialStatus) q = q.eq("financial_status", options.financialStatus);
@@ -1043,9 +1134,14 @@ var SupabaseShopProvider = class {
     return (data ?? []).map(rowToOrder);
   }
   async getOrder(id) {
-    const { data, error } = await getDb().from(T.orders).select(`*, items:${T.orderItems}(*)`).eq("id", id).maybeSingle();
+    const db = getDb();
+    const { data, error } = await db.from(V.orders).select(`*, items:${V.orderItems}(*)`).eq("id", id).maybeSingle();
     if (error) throw error;
-    return data ? rowToOrder(data) : null;
+    if (!data) return null;
+    const order = rowToOrder(data);
+    const { data: session } = await db.from(T.checkoutSessions).select("id").eq("order_id", id).limit(1);
+    order.origin = (session?.length ?? 0) > 0 ? "storefront" : "admin";
+    return order;
   }
   async createOrder(input) {
     const db = getDb();
@@ -1453,11 +1549,18 @@ var SupabaseShopProvider = class {
   async openCheckoutSession(input) {
     const tenantId = getTenantId();
     if (!tenantId) throw new Error("@fayz-ai/shop: openCheckoutSession requires a tenant id.");
-    const provider = String(input.provider ?? "").trim() || "abacatepay";
+    const provider = resolveCheckoutProvider(
+      input.provider,
+      // Só vai ao banco quando ninguém disse: a vitrine já sabe o seu.
+      input.provider == null ? (await this.getStoreSettings().catch(() => null))?.paymentProvider : null
+    );
     const gateway = checkoutGateway(provider);
     if (!gateway) {
       throw new Error("Esta loja ainda n\xE3o tem um meio de cobran\xE7a conectado.");
     }
+    if (input.asLink && !gateway.link) {
+      throw new Error("O meio de cobran\xE7a desta loja ainda n\xE3o gera link de pagamento.");
+    }
     const { ok, status, payload } = await callShopFunction(getDb(), gateway.open, {
       tenantId,
       items: input.items.map((item) => ({
@@ -1467,16 +1570,42 @@ var SupabaseShopProvider = class {
       })),
       customer: input.customer,
       shippingAddress: input.shippingAddress ?? null,
-      discountCode: input.discountCode ?? null
+      discountCode: input.discountCode ?? null,
+      // What the buyer chose, in the store's words. The gateway translates it to
+      // whatever its own API calls that method, and refuses if the merchant
+      // never enabled it — which is a different answer from "no acquirer".
+      method: input.paymentMethod ?? null,
+      returnUrl: input.returnUrl ?? null,
+      asLink: input.asLink === true,
+      // The card, when it is typed INSIDE the store — a single-use token from
+      // the acquirer's own browser SDK, never a card number. Forwarded here for
+      // the same reason it is forwarded in @fayz-ai/sdk's provider: this body is
+      // assembled field by field, so anything the list omits is dropped in
+      // silence, and the buyer is told "we did not receive the card details"
+      // after filling in a perfectly good card.
+      cardToken: input.cardToken ?? null,
+      installments: input.installments ?? null,
+      paymentMethodId: input.paymentMethodId ?? null,
+      issuerId: input.issuerId ?? null,
+      deviceId: input.deviceId ?? null
     });
     if (!ok || !payload?.sessionId) {
-      throw new Error(payload?.error ?? (status === 404 ? "Esta loja ainda n\xE3o tem um meio de cobran\xE7a conectado." : "N\xE3o conseguimos abrir a cobran\xE7a agora."));
+      const failure = new Error(payload?.error ?? (status === 404 ? "Esta loja ainda n\xE3o tem um meio de cobran\xE7a conectado." : "N\xE3o conseguimos abrir a cobran\xE7a agora."));
+      failure.status = status;
+      if (payload?.code) failure.code = String(payload.code);
+      throw failure;
     }
     return {
       sessionId: payload.sessionId,
       total: Number(payload.total ?? 0),
       state: "open",
       provider,
+      method: payload.method ?? input.paymentMethod ?? null,
+      // One field for two situations that are the same thing from here: a link
+      // the merchant sends, and the page a card buyer is redirected to. Both are
+      // "this payment happens on the acquirer's page", and the caller decides
+      // whether to copy it or to go there.
+      paymentUrl: payload.redirectUrl ?? payload.paymentUrl ?? null,
       charge: payload.brCode ? {
         emv: payload.brCode,
         // AbacatePay embeds the `data:` prefix; the type promises bare
@@ -1485,10 +1614,10 @@ var SupabaseShopProvider = class {
         //
         // Vindi sends no base64 at all — its `qrCodeUrl` is a URL to an SVG,
         // which cannot be squeezed into this field without lying about what
-        // it is. The buyer still gets the copy-and-paste code, which is what
-        // actually pays; a rendered QR for Vindi waits for the payment view
-        // to learn the second shape.
+        // it is. It travels beside it instead, and the view draws whichever
+        // arrived.
         qrcodeBase64: String(payload.brCodeBase64 ?? "").replace(/^data:image\/\w+;base64,/u, "") || null,
+        qrcodeUrl: String(payload.qrCodeUrl ?? "").trim() || null,
         expiresAt: payload.expiresAt ?? ""
       } : null
     };
@@ -1502,27 +1631,60 @@ var SupabaseShopProvider = class {
    * who switches acquirer mid-checkout would otherwise have the new gateway
    * asked about a transaction that lives in the old one.
    */
-  async settleCheckoutSession(sessionId, provider) {
+  async settleCheckoutSession(sessionId, provider, chargeToken) {
     const tenantId = getTenantId();
     if (!tenantId) return { state: "unknown" };
     const gateway = checkoutGateway(String(provider ?? "").trim() || "abacatepay");
     if (!gateway) return { state: "unknown" };
     try {
-      const { ok, payload } = await callShopFunction(getDb(), gateway.settle, { tenantId, sessionId });
+      const { ok, payload } = await callShopFunction(getDb(), gateway.settle, {
+        tenantId,
+        sessionId,
+        ...chargeToken ? { chargeToken } : {}
+      }, { timeoutMs: 12e3 });
       if (!ok || !payload?.state) return { state: "unknown" };
       return { state: payload.state, orderId: payload.orderId ?? null, reason: payload.reason ?? null };
     } catch {
       return { state: "unknown" };
     }
   }
+  /**
+   * Remember the contact details of whoever is signed in.
+   *
+   * Called when the buyer leaves the contact step, not when an order completes:
+   * an abandoned checkout teaches the store nothing, and the person who most
+   * needs the field remembered is the one who did not finish. The function
+   * decides what may be written and to whose row — this only carries the values.
+   */
+  async paymentPublicKey(provider) {
+    const tenantId = getTenantId();
+    const gateway = checkoutGateway(provider);
+    if (!tenantId || !gateway) return null;
+    const { ok, payload } = await callShopFunction(getDb(), gateway.open, {
+      tenantId,
+      action: "public_key"
+    });
+    return ok ? payload?.publicKey ?? null : null;
+  }
+  async saveCustomerContact(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) return;
+    const { error } = await getDb().rpc("shop_save_customer_contact", {
+      p_tenant_id: tenantId,
+      p_phone: input.phone ?? null,
+      p_document: input.document ?? null
+    });
+    if (error) console.warn("[shop] could not save customer contact:", error.message);
+  }
   // Trusted placement — delegates all price/discount/inventory authority to the
   // shop_place_order RPC (SECURITY DEFINER). The browser never sets a price.
-  async placeOrder(input) {
-    const db = getDb();
-    const tenantId = input.tenantId ?? getTenantId();
-    if (!tenantId) throw new Error("@fayz-ai/shop: placeOrder requires a tenant id (configure the shop tenant resolver).");
-    const { data, error } = await db.rpc("shop_place_order", {
-      p_tenant_id: tenantId,
+  /**
+   * The argument mapping placing and revising share. Two copies of it would
+   * drift on the first field either screen learns to send — and the one that
+   * forgot would silently drop it from the order.
+   */
+  orderRpcArgs(input) {
+    return {
       // variant_id rides on each line (0029): the RPC prices and decrements
       // the variant when present, product-level otherwise. Pre-0029 servers
       // ignore unknown jsonb keys, so this stays compatible either way.
@@ -1564,11 +1726,125 @@ var SupabaseShopProvider = class {
       // a pre-0029 server rejects unknown NAMED arguments (unlike unknown
       // jsonb keys). Absent metadata therefore must not send the key at all.
       ...input.metadata !== void 0 ? { p_metadata: input.metadata } : {}
+    };
+  }
+  async placeOrder(input) {
+    const db = getDb();
+    const tenantId = input.tenantId ?? getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: placeOrder requires a tenant id (configure the shop tenant resolver).");
+    const { data, error } = await db.rpc("shop_place_order", {
+      p_tenant_id: tenantId,
+      ...this.orderRpcArgs(input)
     });
     if (error) throw error;
     const orderId = typeof data === "string" ? data : data?.id ?? data?.order_id ?? data;
     const order = await this.getOrder(orderId);
     if (!order) throw new Error("@fayz-ai/shop: placeOrder did not return a persisted order.");
+    emitOrderEvent("order_confirmation", order);
+    return order;
+  }
+  async findOpenOrderCharge(orderId) {
+    const { data, error } = await getDb().from(T.checkoutSessions).select("id,total,currency,provider,payment_method,charge_payload,expires_at,status").eq("order_id", orderId).eq("status", "open").gt("expires_at", (/* @__PURE__ */ new Date()).toISOString()).order("created_at", { ascending: false }).limit(1);
+    if (error || !data?.length) return null;
+    const row = data[0];
+    const payload = row.charge_payload ?? {};
+    const link = payload.redirectUrl ?? payload.paymentUrl ?? payload.url ?? cartPaymentUrl(payload.url_car, payload.cart_token);
+    if (!payload.brCode && !link) return null;
+    return {
+      sessionId: row.id,
+      total: Number(row.total ?? 0),
+      state: "open",
+      provider: row.provider ?? null,
+      method: row.payment_method ?? null,
+      // Cada adquirente guarda o endereço com o nome dele. A AbacatePay grava
+      // `url`; a Vindi grava o carrinho da Yapay em `url_car` + `cart_token`, e
+      // a URL de pagamento é a junção dos dois — foi por não conhecer esse par
+      // que "Ver cobrança" abria uma janela sem link nenhum, com um link que
+      // estava gravado ali do lado.
+      paymentUrl: link ?? null,
+      // O MESMO mapeamento de openCheckoutSession, e pelas mesmas razões: a
+      // AbacatePay devolve bytes base64 (com prefixo `data:`, que a tela
+      // prefixaria de novo) e a Vindi devolve a URL de um SVG. Desenhar um como
+      // o outro é um <img> quebrado na hora exata em que alguém vai pagar.
+      charge: payload.brCode ? {
+        emv: String(payload.brCode),
+        qrcodeBase64: String(payload.brCodeBase64 ?? "").replace(/^data:image\/\w+;base64,/u, "") || null,
+        qrcodeUrl: String(payload.qrCodeUrl ?? "").trim() || null,
+        expiresAt: row.expires_at ?? null
+      } : null
+    };
+  }
+  async chargeExistingOrder(orderId, options) {
+    const order = await this.getOrder(orderId);
+    if (!order) throw new Error("@fayz-ai/shop: chargeExistingOrder requires an existing order.");
+    if (order.status !== "open" || order.financialStatus !== "pending") {
+      throw new Error("Este pedido n\xE3o est\xE1 aberto e sem pagamento.");
+    }
+    const email = order.customerEmail?.trim();
+    if (!email) {
+      throw new Error("Para cobrar este pedido o cadastro do cliente precisa de e-mail.");
+    }
+    const standing = await this.findOpenOrderCharge(orderId);
+    if (standing) return standing;
+    const address = order.shippingAddress;
+    const session = await this.openCheckoutSession({
+      // Os itens do pedido, sem preço: a sessão reprecifica pelo catálogo, e é
+      // a amarração que confere se o resultado bate com o que o pedido pede.
+      items: order.items.filter((item) => item.productId).map((item) => ({ productId: item.productId, quantity: item.quantity })),
+      customer: { name: order.customerName, email },
+      shippingAddress: address ? {
+        postalCode: address.postal_code ?? "",
+        street: address.street ?? "",
+        number: address.number,
+        complement: address.complement,
+        district: address.district,
+        city: address.city ?? "",
+        state: address.state ?? "",
+        country: address.country,
+        recipient: address.recipient,
+        phone: address.phone
+      } : void 0,
+      discountCode: order.discountCode ?? void 0,
+      paymentMethod: options?.paymentMethod,
+      returnUrl: options?.returnUrl,
+      asLink: options?.asLink
+    });
+    const { error } = await getDb().rpc("shop_bind_session_to_order", {
+      p_session_id: session.sessionId,
+      p_order_id: orderId
+    });
+    if (error) {
+      await getDb().from(T.checkoutSessions).update({ status: "cancelled", failure_reason: "bind_failed" }).eq("id", session.sessionId).then(void 0, () => void 0);
+      const text = String(error.message ?? "");
+      if (/shop_bind_session_to_order/u.test(text) && /find the function|does not exist/iu.test(text)) {
+        throw new Error("Cobrar um pedido salvo ainda n\xE3o foi aplicado nesta loja (migration 0073).");
+      }
+      throw error;
+    }
+    return session;
+  }
+  async reviseOrder(orderId, input) {
+    const args = this.orderRpcArgs(input);
+    const { error } = await getDb().rpc("shop_update_order", {
+      p_order_id: orderId,
+      p_items: args.p_items,
+      p_customer_id: args.p_customer_id,
+      p_customer_name: args.p_customer_name,
+      p_customer_email: args.p_customer_email,
+      p_discount_code: args.p_discount_code,
+      p_notes: args.p_notes,
+      p_shipping_address: args.p_shipping_address,
+      p_payment_method: args.p_payment_method
+    });
+    if (error) {
+      const text = String(error.message ?? "");
+      if (/shop_update_order/u.test(text) && /find the function|does not exist/iu.test(text)) {
+        throw new Error("A edi\xE7\xE3o de pedidos ainda n\xE3o foi aplicada nesta loja (migration 0072).");
+      }
+      throw error;
+    }
+    const order = await this.getOrder(orderId);
+    if (!order) throw new Error("@fayz-ai/shop: reviseOrder did not return a persisted order.");
     return order;
   }
   // ---------------------------------------------------------------------------
@@ -1577,7 +1853,7 @@ var SupabaseShopProvider = class {
   async listCustomers(options) {
     const db = getDb();
     const tenantId = getTenantId();
-    let q = db.from(T.customers).select("*").order("first_name", { ascending: true });
+    let q = db.from(V.customers).select("*").order("first_name", { ascending: true });
     if (tenantId) q = q.eq("tenant_id", tenantId);
     for (const filter of customerSearchFilters(options?.search)) q = q.or(filter);
     if (options?.limit) q = q.limit(options.limit);
@@ -1586,7 +1862,7 @@ var SupabaseShopProvider = class {
     return (data ?? []).map(rowToCustomer);
   }
   async getCustomer(id) {
-    const { data, error } = await getDb().from(T.customers).select("*").eq("id", id).maybeSingle();
+    const { data, error } = await getDb().from(V.customers).select("*").eq("id", id).maybeSingle();
     if (error) throw error;
     return data ? rowToCustomer(data) : null;
   }
@@ -2282,6 +2558,12 @@ var ORDER_FIELDS = [
   { name: "order_total", label: "Total", type: "money", example: "R$ 189,90" },
   { name: "order_items", label: "Itens", type: "string", example: "1 \xD7 Camiseta Cl\xE1ssica \u2014 R$ 89,90\n2 \xD7 Caneca Esmaltada \u2014 R$ 100,00" },
   { name: "customer_name", label: "Cliente", type: "string", example: "Maria Silva" },
+  // Where the notification GOES — the automation reads its recipient from
+  // these (recipientField), same contract as agenda's customer_phone.
+  { name: "customer_email", label: "E-mail do cliente", type: "string", example: "maria@exemplo.com" },
+  { name: "customer_phone", label: "Telefone do cliente", type: "string", example: "(21) 99889-9889" },
+  // Not in the emitter's payload on purpose: the browser has no reliable
+  // source for the store's public name — the SENDER fills this slot.
   { name: "store_name", label: "Loja", type: "string", example: "Sua Loja" }
 ];
 var TRACKING_FIELD = {
@@ -2315,8 +2597,8 @@ function buildShopDomainEvents() {
 }
 var WHATSAPP_EVENTS = /* @__PURE__ */ new Set(["order_confirmation", "order_shipped", "abandoned_cart"]);
 var WHATSAPP_BODY = {
-  order_confirmation: "Oi {{customer_name}}! Recebemos seu pedido #{{order_number}} \u2705\n\nTotal: {{order_total}}\n\nQualquer d\xFAvida \xE9 s\xF3 chamar aqui. \u2014 {{store_name}}",
-  order_shipped: "Oi {{customer_name}}! Seu pedido #{{order_number}} saiu para entrega \u{1F69A}\n\nRastreio: {{tracking_code}}\n\n\u2014 {{store_name}}",
+  order_confirmation: "Oi {{customer_name}}! Recebemos seu pedido e ele j\xE1 est\xE1 confirmado por aqui \u2705\n\nPedido: #{{order_number}}\nTotal: {{order_total}}\n\nVamos te avisando por aqui a cada passo \u2014 e qualquer d\xFAvida, \xE9 s\xF3 responder esta mensagem.\n\nEquipe {{store_name}} agradece a prefer\xEAncia!",
+  order_shipped: "Oi {{customer_name}}! Boa not\xEDcia: seu pedido saiu para entrega \u{1F69A}\n\nPedido: #{{order_number}}\nC\xF3digo de rastreio: {{tracking_code}}\n\nQualquer coisa no caminho, \xE9 s\xF3 responder esta mensagem que a gente resolve.\n\nEquipe {{store_name}} agradece a prefer\xEAncia!",
   abandoned_cart: "Oi {{customer_name}}! Vi que ficaram itens no seu carrinho \u{1F6D2}\n\nQuer que eu segure para voc\xEA?\n{{cart_url}}\n\n\u2014 {{store_name}}"
 };
 function buildShopMessageDefaults() {
@@ -2365,6 +2647,6 @@ function clampQuality(q) {
   return Math.min(100, Math.max(20, Math.round(q)));
 }
 
-export { CHARGEABLE_PROVIDERS, EMAIL_PLACEHOLDERS, EMAIL_PREVIEW_SAMPLE, IMAGE_SRCSET_WIDTHS, SHOP_EMAIL_EVENTS, SupabaseShopProvider, applyDiscount, buildShopDomainEvents, buildShopMessageDefaults, checkInventory, checkoutGateway, computeCartTotals, createSupabaseShopProvider, documentDigits, documentKind, formatDocument, getCustomerOrders, getShopFunctionsUrl, imageSrcSet, imageVariantUrl, isChargeableProvider, isStorageImageUrl, isValidCnpj, isValidCpf, isValidDocument, listShippingLabelProviders, optimizeImageForUpload, planUpload, registerShippingLabelProvider, renderEmailTemplate, resetShippingLabelProviders, resolveEmailTemplates, resolveShippingLabelProvider, setShopFunctionsUrl, validateDiscount };
+export { CHARGEABLE_PROVIDERS, EMAIL_PLACEHOLDERS, EMAIL_PREVIEW_SAMPLE, IMAGE_SRCSET_WIDTHS, SHOP_EMAIL_EVENTS, SupabaseShopProvider, applyDiscount, buildShopDomainEvents, buildShopMessageDefaults, checkInventory, checkoutGateway, computeCartTotals, createSupabaseShopProvider, documentDigits, documentKind, formatDocument, gatewayLabel, getCustomerOrders, getShopFunctionsUrl, imageSrcSet, imageVariantUrl, isChargeableProvider, isStorageImageUrl, isValidCnpj, isValidCpf, isValidDocument, listShippingLabelProviders, optimizeImageForUpload, planUpload, registerShippingLabelProvider, renderEmailTemplate, resetShippingLabelProviders, resolveEmailTemplates, resolveShippingLabelProvider, setShopFunctionsUrl, supportsCard, supportsPaymentLink, validateDiscount };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map