@fayz-ai/shop 0.9.0 → 0.11.0

package/dist/index.js

@@ -1,17 +1,28 @@
-import { getShopProvider } from './chunk-IYQHKMLB.js';
-export { getShopProvider, resetShopProvider, setShopProvider } from './chunk-IYQHKMLB.js';
-import './chunk-JR25TISO.js';
-export { MockShopProvider, createMockShopProvider } from './chunk-SVTCJ6HP.js';
-export { MOCK_CATEGORIES, MOCK_DISCOUNTS, MOCK_PRODUCTS, buildMockCatalog, svgPlaceholder } from './chunk-CTKZ6O2J.js';
+import { T, resolveStockStore, createSupabaseStockStore, OPENING_BALANCE_REASON, rowToStockLocation } from './chunk-STRNMFC4.js';
+export { DEFAULT_STOCK_TRACKING, MockStockStore, OWN_FULFILLMENT, STOCK_TRACKING_MODES, StockMovementError, SupabaseStockStore, createMockStockStore, createSupabaseStockStore, listStockMovementKinds, listStockReasonCodes, mirroredInventoryCount, registerStockMovementKind, registerStockReasonCode, registerStockStore, replayStockLedger, resolveStockStore, validateStockMovement } from './chunk-STRNMFC4.js';
+import { getShopProvider } from './chunk-2WACO2TG.js';
+export { getShopProvider, resetShopProvider, setShopProvider } from './chunk-2WACO2TG.js';
+import './chunk-FQPGE3YN.js';
+import { normalizeVariantAxes, validateVariantAxes, variantOptionsKey, storagePathOf, mergeMediaFiles, productImageToMediaFile, displayNameOf, mediaKindOf } from './chunk-U6HV3LVP.js';
+export { MAX_VARIANT_AXES, MAX_VARIANT_COMBINATIONS, MockShopProvider, applyVariantMatrix, axesFromOptions, createMockShopProvider, displayNameOf, formatVariantCombination, hasOnlyDefaultVariant, leavesNothingSellable, mediaKindOf, mergeMediaFiles, normalizeVariantAxes, planVariantMatrix, productImageToMediaFile, storagePathOf, validateVariantAxes, variantCombinations, variantOptionsKey } from './chunk-U6HV3LVP.js';
+export { MOCK_CATEGORIES, MOCK_DISCOUNTS, MOCK_PRODUCTS, buildMockCatalog, svgPlaceholder } from './chunk-IKNGCRUM.js';
+import { createSupabaseEntityStore } from './chunk-6BO2TMZ5.js';
+import { getShopTenantId } from './chunk-KLDS7IPU.js';
+export { getShopTenantId, setShopTenantResolver } from './chunk-KLDS7IPU.js';
+import { resolveEntityStore } from './chunk-NWW3WJ7Y.js';
+import './chunk-3GERSY5F.js';
 import { getSupabaseClientOptional } from '@fayz-ai/core';
 
-// src/commerce.ts
+// src/lib/commerce.ts
 function round2(n) {
   return Math.round(n * 100) / 100;
 }
 async function validateDiscount(input, provider = getShopProvider()) {
   const code = input.code.trim();
   if (!code) return { valid: false, code: null, type: null, value: 0, reason: "empty" };
+  if (typeof provider.validateDiscountCode === "function") {
+    return await provider.validateDiscountCode(code, input.subtotal);
+  }
   const list = await provider.listDiscounts({ status: "active" });
   const discount = list.find((d) => (d.code ?? "").toUpperCase() === code.toUpperCase());
   if (!discount) return { valid: false, code: null, type: null, value: 0, reason: "not_found" };
@@ -65,7 +76,7 @@ async function computeCartTotals(input, provider = getShopProvider()) {
   let discountCode = null;
   if (input.discountCode) {
     const applied = applyDiscount(
-      await validateDiscount({ code: input.discountCode, customerId: input.customerId }, provider),
+      await validateDiscount({ code: input.discountCode, subtotal, customerId: input.customerId }, provider),
       subtotal
     );
     discountTotal = applied.discountTotal;
@@ -80,37 +91,51 @@ async function getCustomerOrders(customerId, provider = getShopProvider()) {
   return provider.listOrders({ customerId, limit: 100 });
 }
 
-// src/tenant.ts
-var _resolver = null;
-function setShopTenantResolver(resolver) {
-  _resolver = resolver;
+// src/data/functions.ts
+var _functionsUrl = null;
+function setShopFunctionsUrl(url) {
+  _functionsUrl = url ? url.replace(/\/+$/u, "") : null;
+}
+function getShopFunctionsUrl() {
+  return _functionsUrl;
 }
-function getShopTenantId() {
-  if (!_resolver) return void 0;
+async function callShopFunction(db, slug, body) {
+  const override = getShopFunctionsUrl();
+  if (override) {
+    let token = null;
+    try {
+      token = (await db?.auth?.getSession?.())?.data?.session?.access_token ?? null;
+    } catch {
+    }
+    const response = await fetch(`${override}/${slug}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...token ? { Authorization: `Bearer ${token}` } : {}
+      },
+      body: JSON.stringify(body)
+    });
+    const payload2 = await response.json().catch(() => null);
+    return { ok: response.ok, status: response.status, payload: payload2 };
+  }
+  const { data, error } = await db.functions.invoke(slug, { body });
+  if (!error) return { ok: true, status: 200, payload: data };
+  const status = Number(error?.context?.status ?? 502);
+  let payload = null;
   try {
-    return _resolver();
+    payload = await error?.context?.json?.();
   } catch {
-    return void 0;
   }
+  return { ok: false, status, payload: payload ?? { error: error.message } };
 }
 
-// src/tables.ts
-var T = {
-  products: "plg_shop_products",
-  productImages: "plg_shop_product_images",
-  categories: "plg_shop_categories",
-  orders: "plg_shop_orders",
-  orderItems: "plg_shop_order_items",
-  customers: "plg_shop_customers",
-  discounts: "plg_shop_discounts",
-  salesChannels: "plg_shop_channels",
-  // Core, not plg_shop_*: a delivery zone is a fact about the business, and
-  // fulfilment and financial read it too. Same reasoning as addresses and
-  // orders — see migration 0021.
-  shippingZones: "shipping_zones"
-};
+// src/data/customer-search.ts
+var COLUMNS = ["first_name", "last_name", "email", "phone"];
+function customerSearchFilters(term) {
+  return String(term ?? "").trim().split(/\s+/u).map((word) => word.replace(/[%,()]/gu, "")).filter(Boolean).map((word) => COLUMNS.map((column) => `${column}.ilike.%${word}%`).join(","));
+}
 
-// src/supabase-provider.ts
+// src/data/supabase-provider.ts
 function getDb() {
   const supabase = getSupabaseClientOptional();
   if (!supabase) throw new Error("@fayz-ai/shop: Supabase client not initialized. Call setGlobalSupabaseClient() first.");
@@ -128,6 +153,95 @@ function toPostalDigits(value) {
   const digits = String(value ?? "").replace(/\D/g, "");
   return digits ? digits.padStart(8, "0").slice(0, 8) : void 0;
 }
+function rowToVariant(row) {
+  return {
+    id: row.id,
+    productId: row.product_id,
+    options: row.options && typeof row.options === "object" ? row.options : {},
+    sku: row.sku ?? null,
+    // numeric(12,2) arrives as a string on the wire; Number() once, here.
+    price: row.price == null ? null : Number(row.price),
+    compareAtPrice: row.compare_at_price == null ? null : Number(row.compare_at_price),
+    inventoryCount: row.inventory_count ?? 0,
+    position: row.position ?? 0,
+    status: row.status ?? "active",
+    imageId: row.image_id ?? null,
+    isDefaultVariant: row.is_default_variant ?? false,
+    // Null inherits the product's, the way `price` has since 0028.
+    weight: numOrNull(row.weight),
+    weightUnit: row.weight_unit ?? null,
+    heightCm: numOrNull(row.height_cm),
+    widthCm: numOrNull(row.width_cm),
+    lengthCm: numOrNull(row.length_cm)
+  };
+}
+function variantPatch(input) {
+  const patch = {};
+  const map = {
+    sku: "sku",
+    price: "price",
+    compareAtPrice: "compare_at_price",
+    position: "position",
+    status: "status",
+    imageId: "image_id",
+    weight: "weight",
+    weightUnit: "weight_unit",
+    heightCm: "height_cm",
+    widthCm: "width_cm",
+    lengthCm: "length_cm"
+  };
+  for (const [key, column] of Object.entries(map)) {
+    const value = input[key];
+    if (value === void 0) continue;
+    patch[column] = key === "sku" && typeof value === "string" && value.trim() === "" ? null : value;
+  }
+  return patch;
+}
+function rowToStoreSettings(row) {
+  const bool = (v) => v == null ? void 0 : Boolean(v);
+  const methods = Array.isArray(row.payment_methods) && row.payment_methods.length > 0 ? row.payment_methods : void 0;
+  const fields = row.checkout_fields && typeof row.checkout_fields === "object" && Object.keys(row.checkout_fields).length > 0 ? row.checkout_fields : void 0;
+  return {
+    currency: row.currency ?? void 0,
+    locale: row.locale ?? void 0,
+    showOutOfStock: bool(row.show_out_of_stock),
+    requireSku: bool(row.require_sku),
+    stockOwnership: row.stock_ownership ?? void 0,
+    paymentMethods: methods,
+    paymentProvider: row.payment_provider ?? void 0,
+    guestCheckout: bool(row.guest_checkout),
+    requireConfirmedEmail: bool(row.require_confirmed_email),
+    marketingOptIn: bool(row.marketing_opt_in),
+    discountsEnabled: bool(row.discounts_enabled),
+    checkoutFields: fields,
+    autoFulfill: row.auto_fulfill ?? void 0,
+    notifyNewOrder: bool(row.notify_new_order),
+    notifyLowStock: bool(row.notify_low_stock),
+    handlingNote: row.handling_note ?? void 0,
+    carrierQuotes: bool(row.carrier_quotes)
+  };
+}
+function storeSettingsPayload(input) {
+  const payload = {};
+  if (input.currency !== void 0) payload.currency = input.currency;
+  if (input.locale !== void 0) payload.locale = input.locale;
+  if (input.showOutOfStock !== void 0) payload.show_out_of_stock = input.showOutOfStock;
+  if (input.requireSku !== void 0) payload.require_sku = input.requireSku;
+  if (input.stockOwnership !== void 0) payload.stock_ownership = input.stockOwnership;
+  if (input.paymentMethods !== void 0) payload.payment_methods = input.paymentMethods;
+  if (input.paymentProvider !== void 0) payload.payment_provider = input.paymentProvider ?? null;
+  if (input.guestCheckout !== void 0) payload.guest_checkout = input.guestCheckout;
+  if (input.requireConfirmedEmail !== void 0) payload.require_confirmed_email = input.requireConfirmedEmail;
+  if (input.marketingOptIn !== void 0) payload.marketing_opt_in = input.marketingOptIn;
+  if (input.discountsEnabled !== void 0) payload.discounts_enabled = input.discountsEnabled;
+  if (input.checkoutFields !== void 0) payload.checkout_fields = input.checkoutFields ?? {};
+  if (input.autoFulfill !== void 0) payload.auto_fulfill = input.autoFulfill;
+  if (input.notifyNewOrder !== void 0) payload.notify_new_order = input.notifyNewOrder;
+  if (input.notifyLowStock !== void 0) payload.notify_low_stock = input.notifyLowStock;
+  if (input.handlingNote !== void 0) payload.handling_note = input.handlingNote || null;
+  if (input.carrierQuotes !== void 0) payload.carrier_quotes = input.carrierQuotes;
+  return payload;
+}
 function rowToShippingZone(row) {
   return {
     id: row.id,
@@ -141,9 +255,74 @@ function rowToShippingZone(row) {
     etaMinDays: row.eta_min_days ?? null,
     etaMaxDays: row.eta_max_days ?? null,
     active: row.active ?? true,
-    sortOrder: row.sort_order ?? 0
+    sortOrder: row.sort_order ?? 0,
+    excluded: row.excluded ?? false,
+    profileId: row.profile_id ?? null
+  };
+}
+function rowToShippingProfile(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    name: row.name,
+    // undefined, never false: NULL means "inherit the store's decision", and a
+    // mapper that coalesced would turn every new profile into one that refuses
+    // the gateway.
+    carrierQuotes: row.carrier_quotes == null ? void 0 : Boolean(row.carrier_quotes),
+    isDefault: row.is_default ?? false
   };
 }
+function shippingProfilePayload(input) {
+  const payload = {};
+  if (input.name !== void 0) payload.name = input.name;
+  if (input.carrierQuotes !== void 0) payload.carrier_quotes = input.carrierQuotes ?? null;
+  if (input.isDefault !== void 0) payload.is_default = input.isDefault;
+  return payload;
+}
+function toOriginPostalCode(raw) {
+  const digits = String(raw ?? "").replace(/\D/g, "");
+  if (!digits) return null;
+  if (digits.length !== 8) throw new Error("O CEP do local precisa ter 8 d\xEDgitos.");
+  return digits;
+}
+function toLocationCode(name) {
+  const slug = name.normalize("NFD").replace(/[\u0300-\u036f]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
+  return slug || "local";
+}
+function locationWriteError(error) {
+  if (error?.code === "23505") return new Error("J\xE1 existe um local com esse nome.");
+  if (error?.code === "23503") {
+    return new Error(
+      "Este local j\xE1 tem movimenta\xE7\xF5es de estoque. Arquive-o em vez de excluir \u2014 o hist\xF3rico aponta para ele."
+    );
+  }
+  return new Error(error?.message ?? "N\xE3o foi poss\xEDvel salvar o local.");
+}
+function stockLocationPayload(input) {
+  const payload = {};
+  if (input.name !== void 0) payload.name = input.name;
+  if (input.code !== void 0) payload.code = input.code;
+  if (input.kind !== void 0) payload.kind = input.kind;
+  if (input.isSellable !== void 0) payload.is_sellable = input.isSellable;
+  if (input.isDefault !== void 0) payload.is_default = input.isDefault;
+  if (input.status !== void 0) payload.status = input.status;
+  if (input.postalCode !== void 0) payload.postal_code = toOriginPostalCode(input.postalCode);
+  if (input.city !== void 0) payload.city = input.city || null;
+  if (input.state !== void 0) payload.state = input.state || null;
+  if (input.street !== void 0) payload.street = input.street || null;
+  if (input.number !== void 0) payload.number = input.number || null;
+  if (input.district !== void 0) payload.district = input.district || null;
+  if (input.complement !== void 0) payload.complement = input.complement || null;
+  if (input.document !== void 0) payload.document = String(input.document ?? "").replace(/\D/gu, "") || null;
+  if (input.phone !== void 0) payload.phone = String(input.phone ?? "").replace(/\D/gu, "") || null;
+  if (input.email !== void 0) payload.email = input.email || null;
+  if (input.carrierAgencies !== void 0) payload.carrier_agencies = input.carrierAgencies ?? {};
+  if (input.shipsOnline !== void 0) payload.ships_online = input.shipsOnline;
+  if (input.fulfillmentProvider !== void 0) {
+    payload.fulfillment_provider = input.fulfillmentProvider || null;
+  }
+  return payload;
+}
 function shippingZonePayload(input) {
   const payload = {};
   if (input.name !== void 0) payload.name = input.name;
@@ -156,6 +335,34 @@ function shippingZonePayload(input) {
   if (input.etaMaxDays !== void 0) payload.eta_max_days = input.etaMaxDays ?? null;
   if (input.active !== void 0) payload.active = input.active;
   if (input.sortOrder !== void 0) payload.sort_order = input.sortOrder;
+  if (input.excluded !== void 0) payload.excluded = input.excluded;
+  if (input.profileId !== void 0) payload.profile_id = input.profileId ?? null;
+  return payload;
+}
+function rowToShippingPackage(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    name: row.name,
+    kind: row.kind ?? "box",
+    heightCm: Number(row.height_cm ?? 0),
+    widthCm: Number(row.width_cm ?? 0),
+    lengthCm: Number(row.length_cm ?? 0),
+    emptyWeightGrams: Number(row.empty_weight_grams ?? 0),
+    isDefault: row.is_default ?? false,
+    active: row.active ?? true
+  };
+}
+function shippingPackagePayload(input) {
+  const payload = {};
+  if (input.name !== void 0) payload.name = input.name;
+  if (input.kind !== void 0) payload.kind = input.kind;
+  if (input.heightCm !== void 0) payload.height_cm = input.heightCm;
+  if (input.widthCm !== void 0) payload.width_cm = input.widthCm;
+  if (input.lengthCm !== void 0) payload.length_cm = input.lengthCm;
+  if (input.emptyWeightGrams !== void 0) payload.empty_weight_grams = input.emptyWeightGrams;
+  if (input.isDefault !== void 0) payload.is_default = input.isDefault;
+  if (input.active !== void 0) payload.active = input.active;
   return payload;
 }
 function rowToProduct(row) {
@@ -179,10 +386,21 @@ function rowToProduct(row) {
     isPhysical: row.is_physical ?? true,
     weight: row.weight,
     weightUnit: row.weight_unit ?? "kg",
+    heightCm: numOrNull(row.height_cm),
+    widthCm: numOrNull(row.width_cm),
+    lengthCm: numOrNull(row.length_cm),
+    packageId: row.package_id ?? null,
+    handling: Array.isArray(row.handling) ? row.handling : [],
+    shippingProfileId: row.shipping_profile_id ?? null,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
 }
+function numOrNull(value) {
+  if (value == null || value === "") return null;
+  const n = Number(value);
+  return Number.isFinite(n) ? n : null;
+}
 function rowToImage(row) {
   return {
     id: row.id,
@@ -254,6 +472,7 @@ function rowToCustomer(row) {
     lastName: row.last_name ?? "",
     email: row.email,
     phone: row.phone,
+    document: row.document ?? null,
     notes: row.notes,
     ordersCount: row.orders_count ?? 0,
     totalSpent: row.total_spent ?? 0,
@@ -297,6 +516,113 @@ function rowToSalesChannel(row) {
     updatedAt: row.updated_at
   };
 }
+function segmentPayload(input) {
+  const p = {};
+  if (input.name !== void 0) p.name = input.name;
+  if (input.description !== void 0) p.description = input.description;
+  if (input.minOrders !== void 0) p.min_orders = nullableNumber(input.minOrders);
+  if (input.maxOrders !== void 0) p.max_orders = nullableNumber(input.maxOrders);
+  if (input.minSpent !== void 0) p.min_spent = nullableNumber(input.minSpent);
+  if (input.maxSpent !== void 0) p.max_spent = nullableNumber(input.maxSpent);
+  if (input.joinedAfter !== void 0) p.joined_after = input.joinedAfter || null;
+  if (input.joinedBefore !== void 0) p.joined_before = input.joinedBefore || null;
+  return p;
+}
+var GIFT_CODE_ALPHABET = "ABCDEFGHJKLMNPQRTUVWXY2346789";
+function generateGiftCardCode() {
+  const bytes = new Uint8Array(12);
+  globalThis.crypto.getRandomValues(bytes);
+  const chars = Array.from(bytes, (b) => GIFT_CODE_ALPHABET[b % GIFT_CODE_ALPHABET.length]);
+  return `${chars.slice(0, 4).join("")}-${chars.slice(4, 8).join("")}-${chars.slice(8, 12).join("")}`;
+}
+var LIBRARY_FOLDER = "library";
+function nullableNumber(value) {
+  if (value === null || value === void 0 || value === "") return null;
+  const n = Number(value);
+  return Number.isFinite(n) ? n : null;
+}
+function rowToCollection(row) {
+  const members = row.members ?? [];
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    title: row.title,
+    handle: row.handle ?? slugify(row.title ?? ""),
+    description: row.description ?? null,
+    imageUrl: row.image_url ?? null,
+    seoTitle: row.seo_title ?? null,
+    seoDescription: row.seo_description ?? null,
+    published: row.published ?? true,
+    sortOrder: row.sort_order ?? 0,
+    productIds: [...members].sort((a, b) => (a.position ?? 0) - (b.position ?? 0)).map((m) => m.product_id),
+    createdAt: row.created_at,
+    updatedAt: row.updated_at ?? row.created_at
+  };
+}
+function rowToCustomerGroup(row) {
+  const members = row.members ?? [];
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    name: row.name,
+    description: row.description ?? null,
+    color: row.color ?? null,
+    customerIds: members.map((m) => m.customer_id),
+    createdAt: row.created_at,
+    updatedAt: row.updated_at ?? row.created_at
+  };
+}
+function rowToCustomerSegment(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    name: row.name,
+    description: row.description ?? null,
+    minOrders: nullableNumber(row.min_orders),
+    maxOrders: nullableNumber(row.max_orders),
+    minSpent: nullableNumber(row.min_spent),
+    maxSpent: nullableNumber(row.max_spent),
+    joinedAfter: row.joined_after ?? null,
+    joinedBefore: row.joined_before ?? null,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at ?? row.created_at
+  };
+}
+var SHOP_EVENT_PREFIX = "shop.";
+var EMAIL_CHANNEL = "email";
+function rowToEmailTemplate(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    event: String(row.event_key ?? "").slice(SHOP_EVENT_PREFIX.length),
+    // NULL stays NULL: the catalog resolves the default (resolveEmailTemplates),
+    // not this mapping. Collapsing to `false` here would silently disable every
+    // template whose row exists only because its text was edited.
+    enabled: row.enabled ?? null,
+    // Empty string and NULL both mean "no override" — a subject the merchant
+    // cleared should fall back to the default, not send a blank subject line.
+    subject: row.subject || null,
+    body: row.body || null,
+    updatedAt: row.updated_at ?? row.created_at
+  };
+}
+function rowToGiftCard(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    code: String(row.code ?? "").toUpperCase(),
+    initialBalance: Number(row.initial_balance ?? 0),
+    balance: Number(row.balance ?? 0),
+    currency: row.currency ?? "BRL",
+    status: row.status ?? "active",
+    expiresAt: row.expires_at ?? null,
+    customerId: row.customer_id ?? null,
+    customerEmail: row.customer_email ?? null,
+    note: row.note ?? null,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at ?? row.created_at
+  };
+}
 var SupabaseShopProvider = class {
   // ---------------------------------------------------------------------------
   // Products
@@ -323,6 +649,123 @@ var SupabaseShopProvider = class {
     if (error) throw error;
     return data ? rowToProduct(data) : null;
   }
+  /** Option axes + variants from the 0028 tables (spine M5). The storefront
+   *  RLS on both tables already restricts anon reads to active variants of
+   *  publicly readable products; the status filter here keeps the admin path
+   *  (authenticated tenant member, who CAN see archived rows) consistent. */
+  async getProductVariants(productId, opts) {
+    const db = getDb();
+    let variantQuery = db.from(T.productVariants).select("*").eq("product_id", productId);
+    if (!opts?.includeArchived) variantQuery = variantQuery.eq("status", "active");
+    const [optionsRes, variantsRes] = await Promise.all([
+      db.from(T.productOptions).select("*").eq("product_id", productId).order("position", { ascending: true }),
+      variantQuery.order("position", { ascending: true })
+    ]);
+    if (optionsRes.error) throw optionsRes.error;
+    if (variantsRes.error) throw variantsRes.error;
+    const options = (optionsRes.data ?? []).map((row) => ({
+      id: row.id,
+      name: row.name,
+      values: Array.isArray(row.values) ? row.values.map(String) : [],
+      position: row.position ?? 0
+    }));
+    const variants = (variantsRes.data ?? []).map(rowToVariant);
+    return { options, variants };
+  }
+  // --- The variant admin ------------------------------------------------------
+  async saveProductOptions(productId, input) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    const clean = normalizeVariantAxes(input);
+    const refusal = validateVariantAxes(clean);
+    if (refusal) throw new Error(refusal);
+    const { data: existing, error: readError } = await db.from(T.productOptions).select("*").eq("product_id", productId);
+    if (readError) throw readError;
+    const byName = new Map((existing ?? []).map((row) => [row.name, row]));
+    const wanted = new Set(clean.map((axis) => axis.name));
+    const stale = (existing ?? []).filter((row) => !wanted.has(row.name)).map((row) => row.id);
+    if (stale.length > 0) {
+      const { error: error2 } = await db.from(T.productOptions).delete().in("id", stale);
+      if (error2) throw error2;
+    }
+    for (const [position, axis] of clean.entries()) {
+      const row = byName.get(axis.name);
+      if (row) {
+        const { error: error2 } = await db.from(T.productOptions).update({ values: axis.values, position }).eq("id", row.id);
+        if (error2) throw error2;
+      } else {
+        const { error: error2 } = await db.from(T.productOptions).insert({
+          product_id: productId,
+          tenant_id: tenantId,
+          name: axis.name,
+          values: axis.values,
+          position
+        });
+        if (error2) throw error2;
+      }
+    }
+    const { data, error } = await db.from(T.productOptions).select("*").eq("product_id", productId).order("position", { ascending: true });
+    if (error) throw error;
+    return (data ?? []).map((row) => ({
+      id: row.id,
+      name: row.name,
+      values: Array.isArray(row.values) ? row.values.map(String) : [],
+      position: row.position ?? 0
+    }));
+  }
+  async createProductVariant(productId, input) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    if (Object.keys(input.options).length === 0) {
+      throw new Error("Uma variante sem op\xE7\xF5es \xE9 a variante padr\xE3o (0037), criada pelo banco. Declare ao menos um eixo.");
+    }
+    const { data: existing, error: readError } = await db.from(T.productVariants).select("*").eq("product_id", productId);
+    if (readError) throw readError;
+    const wantedKey = variantOptionsKey(input.options);
+    const match = (existing ?? []).find((row) => variantOptionsKey(row.options ?? {}) === wantedKey);
+    if (match) return this.updateProductVariant(match.id, { ...input, status: input.status ?? "active" });
+    const { data, error } = await db.from(T.productVariants).insert({
+      product_id: productId,
+      tenant_id: tenantId,
+      options: input.options,
+      ...variantPatch(input),
+      // NOT copied from the product: 0028 defines a null price as "inherit the
+      // product's", and 0037's header spells out why a copy is a bug — the
+      // storefront would show the new product price and the server charge the
+      // frozen variant one.
+      status: input.status ?? "active"
+    }).select("*").single();
+    if (error) throw error;
+    return rowToVariant(data);
+  }
+  async updateProductVariant(variantId, input) {
+    const db = getDb();
+    const { data, error } = await db.from(T.productVariants).update(variantPatch(input)).eq("id", variantId).select("*").single();
+    if (error) throw error;
+    return rowToVariant(data);
+  }
+  async archiveProductVariant(variantId) {
+    const db = getDb();
+    const { error } = await db.from(T.productVariants).update({ status: "archived" }).eq("id", variantId);
+    if (error) throw error;
+  }
+  async setVariantStock(variantId, count, note) {
+    const target = Math.max(0, Math.trunc(count));
+    const store = resolveStockStore(getTenantId() ?? "", () => createSupabaseStockStore());
+    const current = await store.getAvailable(variantId);
+    const delta = target - current;
+    if (delta === 0) return current;
+    const priorMovements = await store.listMovements({ variantId, limit: 1 });
+    const opening = priorMovements.length === 0 && delta > 0;
+    await store.recordMovement({
+      variantId,
+      kind: opening ? "receipt" : "adjustment",
+      reasonCode: opening ? OPENING_BALANCE_REASON : "correction",
+      quantity: delta,
+      note: note ?? "Estoque definido na matriz de variantes."
+    });
+    return target;
+  }
   async createProduct(input) {
     const db = getDb();
     const tenantId = getTenantId();
@@ -342,7 +785,17 @@ var SupabaseShopProvider = class {
       category_id: input.categoryId ?? null,
       is_physical: input.isPhysical ?? true,
       weight: input.weight ?? null,
-      weight_unit: input.weightUnit ?? "kg"
+      weight_unit: input.weightUnit ?? "kg",
+      height_cm: input.heightCm ?? null,
+      width_cm: input.widthCm ?? null,
+      length_cm: input.lengthCm ?? null,
+      // Null = a padrão da loja (0047). É o estado normal, não um campo vazio.
+      package_id: input.packageId ?? null,
+      // NULL and not []: "nothing declared" and "declared as needing nothing"
+      // are the same fact about a box, and one representation of it keeps the
+      // `&&` overlap test in the 0048 trigger reading one way.
+      handling: input.handling?.length ? input.handling : null,
+      shipping_profile_id: input.shippingProfileId ?? null
     }).select(`*, images:${T.productImages}(*)`).single();
     if (error) throw error;
     return rowToProduct(data);
@@ -365,6 +818,13 @@ var SupabaseShopProvider = class {
     if (input.categoryId !== void 0) updates.category_id = input.categoryId;
     if (input.isPhysical !== void 0) updates.is_physical = input.isPhysical;
     if (input.weight !== void 0) updates.weight = input.weight;
+    if (input.weightUnit !== void 0) updates.weight_unit = input.weightUnit;
+    if (input.heightCm !== void 0) updates.height_cm = input.heightCm;
+    if (input.widthCm !== void 0) updates.width_cm = input.widthCm;
+    if (input.lengthCm !== void 0) updates.length_cm = input.lengthCm;
+    if (input.packageId !== void 0) updates.package_id = input.packageId || null;
+    if (input.handling !== void 0) updates.handling = input.handling.length ? input.handling : null;
+    if (input.shippingProfileId !== void 0) updates.shipping_profile_id = input.shippingProfileId ?? null;
     const { data, error } = await db.from(T.products).update(updates).eq("id", id).select(`*, images:${T.productImages}(*)`).single();
     if (error) throw error;
     return rowToProduct(data);
@@ -409,9 +869,43 @@ var SupabaseShopProvider = class {
     if (error) throw error;
     return rowToImage(data);
   }
+  async replaceProductImage(imageId, file) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    const { data: row, error: readErr } = await db.from(T.productImages).select("id,url,product_id").eq("id", imageId).single();
+    if (readErr) throw readErr;
+    const path = `${tenantId}/products/${row.product_id}/${Date.now()}-${file.name}`;
+    const bucket = db.storage.from(T.mediaBucket);
+    const { error: uploadErr } = await bucket.upload(path, file);
+    if (uploadErr) throw uploadErr;
+    const { data: { publicUrl } } = bucket.getPublicUrl(path);
+    const { data, error } = await db.from(T.productImages).update({ url: publicUrl }).eq("id", imageId).select().single();
+    if (error) throw error;
+    await this.removeUnreferencedObject(row.url);
+    return rowToImage(data);
+  }
   async deleteProductImage(imageId) {
-    const { error } = await getDb().from(T.productImages).delete().eq("id", imageId);
+    const db = getDb();
+    const { data: row } = await db.from(T.productImages).select("url").eq("id", imageId).maybeSingle();
+    const { error } = await db.from(T.productImages).delete().eq("id", imageId);
     if (error) throw error;
+    if (row?.url) await this.removeUnreferencedObject(row.url);
+  }
+  /**
+   * Drop a stored file once nothing points at it anymore.
+   *
+   * The row was the only thing keeping the object reachable, so leaving it
+   * behind is a file nobody can see and nobody can delete — and the bill for it
+   * arrives all the same. Two rows can share one URL (a duplicated product), and
+   * the survivor has to keep working, so the count decides.
+   */
+  async removeUnreferencedObject(url) {
+    const path = url ? storagePathOf(url) : null;
+    if (!path) return;
+    const db = getDb();
+    const { count } = await db.from(T.productImages).select("id", { count: "exact", head: true }).eq("url", url);
+    if (count) return;
+    await db.storage.from(T.mediaBucket).remove([path]);
   }
   // ---------------------------------------------------------------------------
   // Categories
@@ -520,10 +1014,188 @@ var SupabaseShopProvider = class {
     if (error) throw error;
     return rowToShippingZone(data);
   }
+  // -------------------------------------------------------------------------
+  // Embalagens (0046)
+  //
+  // `is_default` has a partial unique index behind it, so promoting a box has
+  // to demote the previous one in the same round trip — otherwise the second
+  // default is refused by the database and the merchant sees a save that
+  // failed for a reason the screen cannot explain.
+  // -------------------------------------------------------------------------
+  async listShippingPackages() {
+    const tenantId = getTenantId();
+    const { data, error } = await getDb().from(T.shippingPackages).select("*").eq("tenant_id", tenantId).order("is_default", { ascending: false }).order("name", { ascending: true });
+    if (error) throw error;
+    return (data ?? []).map(rowToShippingPackage);
+  }
+  async createShippingPackage(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: createShippingPackage requires a tenant id.");
+    if (input.isDefault) await this.clearDefaultPackage(tenantId);
+    const { data, error } = await getDb().from(T.shippingPackages).insert({ tenant_id: tenantId, ...shippingPackagePayload(input) }).select().single();
+    if (error) throw error;
+    return rowToShippingPackage(data);
+  }
+  async updateShippingPackage(id, input) {
+    const tenantId = getTenantId();
+    if (input.isDefault && tenantId) await this.clearDefaultPackage(tenantId, id);
+    const { data, error } = await getDb().from(T.shippingPackages).update(shippingPackagePayload(input)).eq("id", id).select().single();
+    if (error) throw error;
+    return rowToShippingPackage(data);
+  }
+  async deleteShippingPackage(id) {
+    const { error } = await getDb().from(T.shippingPackages).delete().eq("id", id);
+    if (error) throw error;
+  }
+  async clearDefaultPackage(tenantId, exceptId) {
+    let query = getDb().from(T.shippingPackages).update({ is_default: false }).eq("tenant_id", tenantId).eq("is_default", true);
+    if (exceptId) query = query.neq("id", exceptId);
+    const { error } = await query;
+    if (error) throw error;
+  }
   async deleteShippingZone(id) {
     const { error } = await getDb().from(T.shippingZones).delete().eq("id", id);
     if (error) throw error;
   }
+  // -------------------------------------------------------------------------
+  // Store policy + delivery fallback (0044b / 0015)
+  //
+  // Both are ONE ROW PER TENANT, and both are upserted rather than
+  // insert-or-update: a store that never opened these screens has no row, and
+  // making the first save conditional on discovering that is two round trips to
+  // learn something the primary key already knows.
+  // -------------------------------------------------------------------------
+  async getShippingSettings() {
+    const tenantId = getTenantId();
+    const { data, error } = await getDb().from(T.shippingSettings).select("flat_rate, free_above, currency").eq("tenant_id", tenantId).maybeSingle();
+    if (error) throw error;
+    if (!data) return null;
+    return {
+      flatRate: Number(data.flat_rate ?? 0),
+      freeAbove: data.free_above == null ? null : Number(data.free_above),
+      currency: data.currency ?? "BRL"
+    };
+  }
+  async updateShippingSettings(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: updateShippingSettings requires a tenant id.");
+    const payload = { tenant_id: tenantId };
+    if (input.flatRate !== void 0) payload.flat_rate = input.flatRate;
+    if (input.freeAbove !== void 0) payload.free_above = input.freeAbove;
+    if (input.currency !== void 0) payload.currency = input.currency;
+    const { data, error } = await getDb().from(T.shippingSettings).upsert(payload, { onConflict: "tenant_id" }).select("flat_rate, free_above, currency").single();
+    if (error) throw error;
+    return {
+      flatRate: Number(data.flat_rate ?? 0),
+      freeAbove: data.free_above == null ? null : Number(data.free_above),
+      currency: data.currency ?? "BRL"
+    };
+  }
+  /**
+   * "Does this store deliver here?" — asked with the address, before the card.
+   *
+   * Degrades to "yes, and not our own zone" on any failure. A store that cannot
+   * reach the check must not stop selling: the order itself is still refused by
+   * the 0048 trigger if the region really is excluded, so the worst case is the
+   * shopper learning it one screen later instead of never selling at all.
+   */
+  async listShippingProfiles() {
+    const { data, error } = await getDb().from(T.shippingProfiles).select("*").eq("tenant_id", getTenantId()).order("is_default", { ascending: false }).order("name");
+    if (error) throw error;
+    return (data ?? []).map(rowToShippingProfile);
+  }
+  async createShippingProfile(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: createShippingProfile requires a tenant id.");
+    const { data, error } = await getDb().from(T.shippingProfiles).insert({ tenant_id: tenantId, ...shippingProfilePayload(input) }).select("*").single();
+    if (error) throw error;
+    return rowToShippingProfile(data);
+  }
+  async updateShippingProfile(id, input) {
+    const { data, error } = await getDb().from(T.shippingProfiles).update(shippingProfilePayload(input)).eq("id", id).select("*").single();
+    if (error) throw error;
+    return rowToShippingProfile(data);
+  }
+  async deleteShippingProfile(id) {
+    const { error } = await getDb().from(T.shippingProfiles).delete().eq("id", id);
+    if (error) throw error;
+  }
+  // Places the store ships from (0058). Default first, then by name — the same
+  // order the ledger's listLocations() uses, so the two screens agree.
+  async listStockLocations() {
+    const { data, error } = await getDb().from(T.stockLocations).select("*").eq("tenant_id", getTenantId()).order("is_default", { ascending: false }).order("name");
+    if (error) throw error;
+    return (data ?? []).map(rowToStockLocation);
+  }
+  async createStockLocation(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: createStockLocation requires a tenant id.");
+    if (input.isDefault) await this.clearDefaultStockLocation(tenantId);
+    const payload = stockLocationPayload(input);
+    if (payload.code === void 0) payload.code = toLocationCode(input.name);
+    const { data, error } = await getDb().from(T.stockLocations).insert({ tenant_id: tenantId, ...payload }).select("*").single();
+    if (error) throw locationWriteError(error);
+    return rowToStockLocation(data);
+  }
+  async updateStockLocation(id, input) {
+    const tenantId = getTenantId();
+    if (input.isDefault && tenantId) await this.clearDefaultStockLocation(tenantId, id);
+    const { data, error } = await getDb().from(T.stockLocations).update(stockLocationPayload(input)).eq("id", id).select("*").single();
+    if (error) throw locationWriteError(error);
+    return rowToStockLocation(data);
+  }
+  async deleteStockLocation(id) {
+    const { error } = await getDb().from(T.stockLocations).delete().eq("id", id);
+    if (error) throw locationWriteError(error);
+  }
+  async clearDefaultStockLocation(tenantId, exceptId) {
+    let query = getDb().from(T.stockLocations).update({ is_default: false }).eq("tenant_id", tenantId).eq("is_default", true);
+    if (exceptId) query = query.neq("id", exceptId);
+    const { error } = await query;
+    if (error) throw error;
+  }
+  async checkDelivery(postalCode) {
+    const tenantId = getTenantId();
+    const digits = String(postalCode ?? "").replace(/\D/g, "");
+    if (!tenantId || digits.length !== 8) return { refused: false, ownZone: false };
+    const { data, error } = await getDb().rpc("shop_delivery_check", {
+      p_tenant_id: tenantId,
+      p_postal_code: digits
+    });
+    if (error) return { refused: false, ownZone: false };
+    const row = Array.isArray(data) ? data[0] : data;
+    return {
+      refused: Boolean(row?.refused),
+      refusedZone: row?.refused_zone ?? null,
+      ownZone: Boolean(row?.own_zone)
+    };
+  }
+  async getStoreSettings() {
+    const tenantId = getTenantId();
+    const { data, error } = await getDb().from(T.settings).select("*").eq("tenant_id", tenantId).maybeSingle();
+    if (error) throw error;
+    return data ? rowToStoreSettings(data) : null;
+  }
+  async updateStoreSettings(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: updateStoreSettings requires a tenant id.");
+    const { data, error } = await getDb().from(T.settings).upsert({ tenant_id: tenantId, ...storeSettingsPayload(input) }, { onConflict: "tenant_id" }).select("*").single();
+    if (error) throw error;
+    return rowToStoreSettings(data);
+  }
+  /**
+   * The shopper's read. Through the RPC, not the table: the table is closed to
+   * anon on purpose (0029) and shop_store_settings() is the narrow window —
+   * storefront fields only, and only for a published store.
+   */
+  async getPublicStoreSettings() {
+    const tenantId = getTenantId();
+    if (!tenantId) return null;
+    const { data, error } = await getDb().rpc("shop_store_settings", { p_tenant_id: tenantId });
+    if (error) throw error;
+    const row = Array.isArray(data) ? data[0] : data;
+    return row ? rowToStoreSettings(row) : null;
+  }
   /**
    * Settle a pending order: the merchant confirming that the money arrived.
    *
@@ -541,6 +1213,208 @@ var SupabaseShopProvider = class {
     if (error) throw error;
     return this.getOrder(id);
   }
+  // ---------------------------------------------------------------------------
+  // Carrier labels. Everything goes through the function: the token never
+  // reaches the browser, and `buy` is the one call that spends money.
+  // ---------------------------------------------------------------------------
+  async labelCall(orderId, action, extra = {}) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: shipping labels require a tenant id.");
+    const { ok, payload } = await callShopFunction(getDb(), "shop-shipping-label", {
+      tenantId,
+      orderId,
+      action,
+      ...extra
+    });
+    if (!ok) throw new Error(payload?.error ?? "A transportadora n\xE3o respondeu agora.");
+    return payload;
+  }
+  async quoteShippingLabel(orderId, carrier) {
+    const payload = await this.labelCall(orderId, "quote", carrier ? { carrier } : {});
+    return {
+      options: (payload?.options ?? []).map((option) => ({
+        serviceId: Number(option.service_id ?? option.serviceId),
+        name: String(option.name ?? "Entrega"),
+        carrier: String(option.carrier ?? ""),
+        price: Number(option.price ?? 0),
+        etaMinDays: option.eta_min_days ?? null,
+        etaMaxDays: option.eta_max_days ?? null
+      })),
+      label: payload?.label ? {
+        labelId: String(payload.label.external_id),
+        labelUrl: payload.label.url ?? null,
+        status: payload.label.status ?? null,
+        tracking: payload.label.payload?.tracking ?? null
+      } : null
+    };
+  }
+  /** Spends the merchant's balance at the carrier. Never call it on a whim. */
+  async buyShippingLabel(orderId, serviceId, carrier) {
+    const payload = await this.labelCall(orderId, "buy", { serviceId, ...carrier ? { carrier } : {} });
+    return {
+      labelId: String(payload?.labelId ?? ""),
+      labelUrl: payload?.labelUrl ?? null,
+      status: "bought",
+      tracking: payload?.tracking ?? null
+    };
+  }
+  async printShippingLabel(orderId, carrier) {
+    const payload = await this.labelCall(orderId, "print", carrier ? { carrier } : {});
+    return payload?.labelUrl ?? null;
+  }
+  /** Drop-off points near a place. Store configuration — no order involved. */
+  async listShippingAgencies(query) {
+    const tenantId = getTenantId();
+    if (!tenantId) return [];
+    const { ok, payload } = await callShopFunction(getDb(), "shop-shipping-label", {
+      tenantId,
+      action: "agencies",
+      state: query.state ?? "",
+      city: query.city ?? "",
+      ...query.carrier ? { carrier: query.carrier } : {}
+    });
+    if (!ok) throw new Error(payload?.error ?? "A transportadora n\xE3o respondeu agora.");
+    return payload?.agencies ?? [];
+  }
+  async trackShippingLabel(orderId, carrier) {
+    const payload = await this.labelCall(orderId, "track", carrier ? { carrier } : {});
+    return payload?.tracking ?? null;
+  }
+  /**
+   * The customer's address book, for the console. `shop_place_order` files a
+   * new one here on every delivered order, and until now only the storefront
+   * read them back — so a repeat customer had their address retyped by hand.
+   */
+  async listCustomerAddresses(customerId) {
+    if (!asUuid(customerId)) return [];
+    const { data, error } = await getDb().from("addresses").select("id,label,recipient,phone,postal_code,street,number,complement,district,city,state,country,is_default").eq("owner_type", "shop_customer").eq("owner_id", customerId).order("is_default", { ascending: false }).order("created_at", { ascending: false });
+    if (error) return [];
+    return (data ?? []).map((row) => ({
+      id: row.id,
+      label: row.label ?? void 0,
+      recipient: row.recipient ?? void 0,
+      phone: row.phone ?? void 0,
+      postalCode: row.postal_code ?? "",
+      street: row.street ?? "",
+      number: row.number ?? void 0,
+      complement: row.complement ?? void 0,
+      district: row.district ?? void 0,
+      city: row.city ?? "",
+      state: row.state ?? "",
+      country: row.country ?? void 0,
+      isDefault: row.is_default ?? false
+    }));
+  }
+  /**
+   * What delivery costs to a postcode — the same answer the shopper gets.
+   *
+   * The console needs it to quote a price out loud while the customer is on the
+   * line. Carrier first (when the merchant did not turn gateway quotes off),
+   * zones as the fallback, exactly as the storefront resolves it. Advisory
+   * either way: shop_place_order requotes and ignores whatever a client sends.
+   */
+  async quoteShipping(postalCode, subtotal) {
+    const digits = toPostalDigits(postalCode);
+    if (!digits) return [];
+    const tenantId = getTenantId();
+    if (!tenantId) return [];
+    const settings = await this.getStoreSettings().catch(() => null);
+    if (settings?.carrierQuotes !== false) {
+      try {
+        const { ok, payload } = await callShopFunction(getDb(), "shop-shipping-quote", {
+          tenantId,
+          postalCode: digits,
+          subtotal
+        });
+        const rows = ok ? payload?.options ?? [] : [];
+        if (rows.length > 0) {
+          return rows.map((row) => ({
+            zoneId: String(row.service_id ?? ""),
+            name: String(row.name ?? "Entrega"),
+            carrier: row.carrier ?? void 0,
+            rate: Number(row.price ?? 0),
+            baseRate: Number(row.price ?? 0),
+            freeAbove: null,
+            etaMinDays: row.eta_min_days ?? void 0,
+            etaMaxDays: row.eta_max_days ?? void 0,
+            free: Number(row.price ?? 0) === 0
+          }));
+        }
+      } catch {
+      }
+    }
+    const { data, error } = await getDb().rpc("shop_quote_shipping", {
+      p_tenant_id: tenantId,
+      p_postal_code: digits,
+      p_subtotal: subtotal
+    });
+    if (error) return [];
+    return (data ?? []).map((row) => ({
+      zoneId: row.zone_id,
+      name: row.name,
+      carrier: row.carrier ?? void 0,
+      rate: Number(row.rate ?? 0),
+      baseRate: Number(row.base_rate ?? row.rate ?? 0),
+      freeAbove: row.free_above == null ? null : Number(row.free_above),
+      etaMinDays: row.eta_min_days ?? void 0,
+      etaMaxDays: row.eta_max_days ?? void 0,
+      free: Boolean(row.free)
+    }));
+  }
+  /**
+   * Charge a cart that is not an order yet — the phone sale, from the counter's
+   * side. Same door the storefront uses, on purpose: `shop_price_cart` inside
+   * the function reprices everything, so the console sends products and
+   * quantities and never money. The order is born in `settleCheckoutSession`,
+   * once the acquirer says the Pix landed, so an abandoned charge leaves no
+   * ghost order holding stock.
+   */
+  async openCheckoutSession(input) {
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: openCheckoutSession requires a tenant id.");
+    const { ok, status, payload } = await callShopFunction(getDb(), "shop-checkout-open", {
+      tenantId,
+      items: input.items.map((item) => ({
+        productId: item.productId,
+        optionsLabel: item.optionsLabel ?? null,
+        quantity: item.quantity
+      })),
+      customer: input.customer,
+      shippingAddress: input.shippingAddress ?? null,
+      discountCode: input.discountCode ?? null
+    });
+    if (!ok || !payload?.sessionId) {
+      throw new Error(payload?.error ?? (status === 404 ? "Esta loja ainda n\xE3o tem um meio de cobran\xE7a conectado." : "N\xE3o conseguimos abrir a cobran\xE7a agora."));
+    }
+    return {
+      sessionId: payload.sessionId,
+      total: Number(payload.total ?? 0),
+      state: "open",
+      charge: payload.brCode ? {
+        emv: payload.brCode,
+        // AbacatePay embeds the `data:` prefix; the type promises bare
+        // base64. Left in, the view prefixes it again and the QR is a
+        // silently broken <img>.
+        qrcodeBase64: String(payload.brCodeBase64 ?? "").replace(/^data:image\/\w+;base64,/u, "") || null,
+        expiresAt: payload.expiresAt ?? ""
+      } : null
+    };
+  }
+  /**
+   * Ask whether the money landed. Runs on a timer, so a network blip must read
+   * as "still waiting" (`unknown`) and never as a refused payment.
+   */
+  async settleCheckoutSession(sessionId) {
+    const tenantId = getTenantId();
+    if (!tenantId) return { state: "unknown" };
+    try {
+      const { ok, payload } = await callShopFunction(getDb(), "shop-checkout-settle", { tenantId, sessionId });
+      if (!ok || !payload?.state) return { state: "unknown" };
+      return { state: payload.state, orderId: payload.orderId ?? null, reason: payload.reason ?? null };
+    } catch {
+      return { state: "unknown" };
+    }
+  }
   // Trusted placement — delegates all price/discount/inventory authority to the
   // shop_place_order RPC (SECURITY DEFINER). The browser never sets a price.
   async placeOrder(input) {
@@ -549,7 +1423,15 @@ var SupabaseShopProvider = class {
     if (!tenantId) throw new Error("@fayz-ai/shop: placeOrder requires a tenant id (configure the shop tenant resolver).");
     const { data, error } = await db.rpc("shop_place_order", {
       p_tenant_id: tenantId,
-      p_items: input.items.map((i) => ({ product_id: i.productId, quantity: i.quantity, options_label: i.optionsLabel ?? null })),
+      // variant_id rides on each line (0029): the RPC prices and decrements
+      // the variant when present, product-level otherwise. Pre-0029 servers
+      // ignore unknown jsonb keys, so this stays compatible either way.
+      p_items: input.items.map((i) => ({
+        product_id: i.productId,
+        variant_id: asUuid(i.variantId) ?? void 0,
+        quantity: i.quantity,
+        options_label: i.optionsLabel ?? null
+      })),
       p_customer_id: asUuid(input.customerId),
       p_customer_name: input.customer?.name ?? null,
       p_customer_email: input.customer?.email ?? null,
@@ -569,10 +1451,19 @@ var SupabaseShopProvider = class {
         country: input.shippingAddress.country ?? "BR",
         recipient: input.shippingAddress.recipient ?? null,
         phone: input.shippingAddress.phone ?? null,
-        label: input.shippingAddress.label ?? null
+        label: input.shippingAddress.label ?? null,
+        // Not an address field: it rides here because shop_place_order's
+        // signature cannot grow without a DROP, and 0050's trigger lifts it to
+        // plg_shop_orders.customer_document. The storefront already sent it;
+        // the console did not, so a phone sale was born with no CPF.
+        document: input.shippingAddress.document ?? null
       } : null,
       p_payment_method: input.paymentMethod ?? null,
-      p_notes: input.notes ?? null
+      p_notes: input.notes ?? null,
+      // Only when something contributed: p_metadata exists from 0029 on, and
+      // a pre-0029 server rejects unknown NAMED arguments (unlike unknown
+      // jsonb keys). Absent metadata therefore must not send the key at all.
+      ...input.metadata !== void 0 ? { p_metadata: input.metadata } : {}
     });
     if (error) throw error;
     const orderId = typeof data === "string" ? data : data?.id ?? data?.order_id ?? data;
@@ -588,7 +1479,7 @@ var SupabaseShopProvider = class {
     const tenantId = getTenantId();
     let q = db.from(T.customers).select("*").order("first_name", { ascending: true });
     if (tenantId) q = q.eq("tenant_id", tenantId);
-    if (options?.search) q = q.or(`first_name.ilike.%${options.search}%,last_name.ilike.%${options.search}%,email.ilike.%${options.search}%`);
+    for (const filter of customerSearchFilters(options?.search)) q = q.or(filter);
     if (options?.limit) q = q.limit(options.limit);
     const { data, error } = await q;
     if (error) throw error;
@@ -600,7 +1491,15 @@ var SupabaseShopProvider = class {
     return data ? rowToCustomer(data) : null;
   }
   async createCustomer(input) {
-    const { data, error } = await getDb().from(T.customers).insert({ tenant_id: getTenantId(), first_name: input.firstName, last_name: input.lastName ?? "", email: input.email ?? null, phone: input.phone ?? null, notes: input.notes ?? null }).select().single();
+    const { data, error } = await getDb().from(T.customers).insert({
+      tenant_id: getTenantId(),
+      first_name: input.firstName,
+      last_name: input.lastName ?? "",
+      email: input.email ?? null,
+      phone: input.phone ?? null,
+      document: input.document ?? null,
+      notes: input.notes ?? null
+    }).select().single();
     if (error) throw error;
     return rowToCustomer(data);
   }
@@ -610,6 +1509,7 @@ var SupabaseShopProvider = class {
     if (input.lastName !== void 0) updates.last_name = input.lastName;
     if (input.email !== void 0) updates.email = input.email;
     if (input.phone !== void 0) updates.phone = input.phone;
+    if (input.document !== void 0) updates.document = input.document;
     if (input.notes !== void 0) updates.notes = input.notes;
     const { data, error } = await getDb().from(T.customers).update(updates).eq("id", id).select().single();
     if (error) throw error;
@@ -636,6 +1536,50 @@ var SupabaseShopProvider = class {
     return rowToCustomer(row);
   }
   // ---------------------------------------------------------------------------
+  // Promotions (spine M6) — evaluation happens INSIDE the database via the
+  // SECURITY DEFINER function (migrations/0033), so an anonymous storefront
+  // never reads promotion rows or codes directly: it sends the cart snapshot
+  // and receives ordered actions. The function mirrors the TS reference
+  // evaluator (src/rules/evaluator.ts), which is the tested spec.
+  // ---------------------------------------------------------------------------
+  async evaluatePromotions(input) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: evaluatePromotions requires a tenant id (configure the shop tenant resolver).");
+    const cart = input.cart;
+    const { data, error } = await db.rpc("shop_compute_promotion_actions", {
+      p_tenant_id: tenantId,
+      // The serializable RuleCartSnapshot, snake_case on the wire — the same
+      // contract 0033 documents for p_cart.
+      p_cart: {
+        items: cart.items.map((item) => ({
+          id: item.id ?? item.productId,
+          product_id: item.productId,
+          quantity: item.quantity,
+          unit_price: item.unitPrice,
+          category_id: item.categoryId ?? null,
+          collection_id: item.collectionId ?? null
+        })),
+        shipping_total: cart.shippingTotal ?? null,
+        region: cart.region ?? null,
+        customer: cart.customer ? { email: cart.customer.email ?? null, tags: cart.customer.tags ?? [] } : null,
+        codes: cart.codes ?? []
+      }
+    });
+    if (error) throw error;
+    const rows = Array.isArray(data) ? data : [];
+    return rows.map((row) => {
+      const code = row.code ?? null;
+      if (row.action === "addShippingDiscount") {
+        return { action: "addShippingDiscount", promotionId: String(row.promotion_id), code, amount: Number(row.amount) };
+      }
+      if (row.action === "addFreeItem") {
+        return { action: "addFreeItem", promotionId: String(row.promotion_id), code, productId: String(row.product_id), quantity: Number(row.quantity) };
+      }
+      return { action: "addItemDiscount", promotionId: String(row.promotion_id), code, itemId: String(row.item_id), amount: Number(row.amount) };
+    });
+  }
+  // ---------------------------------------------------------------------------
   // Discounts
   // ---------------------------------------------------------------------------
   async listDiscounts(options) {
@@ -714,11 +1658,585 @@ var SupabaseShopProvider = class {
     const { error } = await getDb().from(T.salesChannels).delete().eq("id", id);
     if (error) throw error;
   }
+  // ---------------------------------------------------------------------------
+  // Custom entities (spine M4). Storage resolves through the EntityStore
+  // indirection (I5): a promoted entity's registered store wins; everything
+  // else reads/writes the generic jsonb table (migration 0030), whose row
+  // access is the RLS generated from each declaration (I6).
+  // ---------------------------------------------------------------------------
+  entityStore(entity) {
+    return resolveEntityStore(entity, createSupabaseEntityStore);
+  }
+  async listEntityRecords(entity, options) {
+    return this.entityStore(entity).list(options);
+  }
+  async getEntityRecord(entity, id) {
+    return this.entityStore(entity).get(id);
+  }
+  async getEntityRecordBySlug(entity, slug) {
+    return this.entityStore(entity).getBySlug(slug);
+  }
+  async createEntityRecord(entity, input) {
+    return this.entityStore(entity).create(input);
+  }
+  async updateEntityRecord(entity, id, input) {
+    return this.entityStore(entity).update(id, input);
+  }
+  async deleteEntityRecord(entity, id) {
+    return this.entityStore(entity).delete(id);
+  }
+  // -------------------------------------------------------------------------
+  // Coleções, grupos/segmentos, vale-presente, e-mails e mídia.
+  // -------------------------------------------------------------------------
+  async listCollections() {
+    const db = getDb();
+    const tenantId = getTenantId();
+    let q = db.from(T.collections).select(`*, members:${T.collectionProducts}(product_id, position)`).order("sort_order", { ascending: true });
+    if (tenantId) q = q.eq("tenant_id", tenantId);
+    const { data, error } = await q;
+    if (error) throw error;
+    return (data ?? []).map(rowToCollection);
+  }
+  async getCollection(id) {
+    const { data, error } = await getDb().from(T.collections).select(`*, members:${T.collectionProducts}(product_id, position)`).eq("id", id).maybeSingle();
+    if (error) throw error;
+    return data ? rowToCollection(data) : null;
+  }
+  async createCollection(input) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    const { data, error } = await db.from(T.collections).insert({
+      tenant_id: tenantId,
+      title: input.title,
+      handle: input.handle?.trim() || slugify(input.title),
+      description: input.description ?? null,
+      image_url: input.imageUrl ?? null,
+      seo_title: input.seoTitle ?? null,
+      seo_description: input.seoDescription ?? null,
+      published: input.published ?? true,
+      sort_order: input.sortOrder ?? 0
+    }).select().single();
+    if (error) throw error;
+    await this.syncCollectionProducts(data.id, tenantId, input.productIds);
+    return await this.getCollection(data.id) ?? rowToCollection(data);
+  }
+  async updateCollection(id, input) {
+    const db = getDb();
+    const updates = {};
+    if (input.title !== void 0) updates.title = input.title;
+    if (input.handle !== void 0) updates.handle = input.handle?.trim() || slugify(String(input.title ?? ""));
+    if (input.description !== void 0) updates.description = input.description;
+    if (input.imageUrl !== void 0) updates.image_url = input.imageUrl;
+    if (input.seoTitle !== void 0) updates.seo_title = input.seoTitle;
+    if (input.seoDescription !== void 0) updates.seo_description = input.seoDescription;
+    if (input.published !== void 0) updates.published = input.published;
+    if (input.sortOrder !== void 0) updates.sort_order = input.sortOrder;
+    if (Object.keys(updates).length > 0) {
+      const { error } = await db.from(T.collections).update(updates).eq("id", id);
+      if (error) throw error;
+    }
+    if (input.productIds !== void 0) {
+      await this.syncCollectionProducts(id, getTenantId(), input.productIds);
+    }
+    const updated = await this.getCollection(id);
+    if (!updated) throw new Error("Collection not found");
+    return updated;
+  }
+  async deleteCollection(id) {
+    const { error } = await getDb().from(T.collections).delete().eq("id", id);
+    if (error) throw error;
+  }
+  async listCustomerGroups() {
+    const db = getDb();
+    const tenantId = getTenantId();
+    let q = db.from(T.customerGroups).select(`*, members:${T.customerGroupMembers}(customer_id)`).order("name", { ascending: true });
+    if (tenantId) q = q.eq("tenant_id", tenantId);
+    const { data, error } = await q;
+    if (error) throw error;
+    return (data ?? []).map(rowToCustomerGroup);
+  }
+  async createCustomerGroup(input) {
+    const tenantId = getTenantId();
+    const { data, error } = await getDb().from(T.customerGroups).insert({
+      tenant_id: tenantId,
+      name: input.name,
+      description: input.description ?? null,
+      color: input.color ?? null
+    }).select().single();
+    if (error) throw error;
+    await this.syncGroupMembers(data.id, tenantId, input.customerIds);
+    return { ...rowToCustomerGroup(data), customerIds: input.customerIds ?? [] };
+  }
+  async updateCustomerGroup(id, input) {
+    const db = getDb();
+    const updates = {};
+    if (input.name !== void 0) updates.name = input.name;
+    if (input.description !== void 0) updates.description = input.description;
+    if (input.color !== void 0) updates.color = input.color;
+    if (Object.keys(updates).length > 0) {
+      const { error: error2 } = await db.from(T.customerGroups).update(updates).eq("id", id);
+      if (error2) throw error2;
+    }
+    if (input.customerIds !== void 0) {
+      await this.syncGroupMembers(id, getTenantId(), input.customerIds);
+    }
+    const { data, error } = await db.from(T.customerGroups).select(`*, members:${T.customerGroupMembers}(customer_id)`).eq("id", id).single();
+    if (error) throw error;
+    return rowToCustomerGroup(data);
+  }
+  async deleteCustomerGroup(id) {
+    const { error } = await getDb().from(T.customerGroups).delete().eq("id", id);
+    if (error) throw error;
+  }
+  async listCustomerSegments() {
+    const db = getDb();
+    const tenantId = getTenantId();
+    let q = db.from(T.customerSegments).select("*").order("name", { ascending: true });
+    if (tenantId) q = q.eq("tenant_id", tenantId);
+    const { data, error } = await q;
+    if (error) throw error;
+    return (data ?? []).map(rowToCustomerSegment);
+  }
+  async createCustomerSegment(input) {
+    const { data, error } = await getDb().from(T.customerSegments).insert({ tenant_id: getTenantId(), ...segmentPayload(input), name: input.name }).select().single();
+    if (error) throw error;
+    return rowToCustomerSegment(data);
+  }
+  async updateCustomerSegment(id, input) {
+    const { data, error } = await getDb().from(T.customerSegments).update(segmentPayload(input)).eq("id", id).select().single();
+    if (error) throw error;
+    return rowToCustomerSegment(data);
+  }
+  async deleteCustomerSegment(id) {
+    const { error } = await getDb().from(T.customerSegments).delete().eq("id", id);
+    if (error) throw error;
+  }
+  async listGiftCards() {
+    const db = getDb();
+    const tenantId = getTenantId();
+    let q = db.from(T.giftCards).select("*").order("created_at", { ascending: false });
+    if (tenantId) q = q.eq("tenant_id", tenantId);
+    const { data, error } = await q;
+    if (error) throw error;
+    return (data ?? []).map(rowToGiftCard);
+  }
+  async createGiftCard(input) {
+    const amount = Number(input.initialBalance) || 0;
+    const { data, error } = await getDb().from(T.giftCards).insert({
+      tenant_id: getTenantId(),
+      code: (input.code?.trim() || generateGiftCardCode()).toUpperCase(),
+      initial_balance: amount,
+      // A new card is worth its face value. The admin never types the
+      // remaining balance at issue — that is what redemption is for.
+      balance: amount,
+      currency: input.currency ?? "BRL",
+      status: input.status ?? "active",
+      expires_at: input.expiresAt ?? null,
+      customer_id: asUuid(input.customerId),
+      customer_email: input.customerEmail ?? null,
+      note: input.note ?? null
+    }).select().single();
+    if (error) throw error;
+    return rowToGiftCard(data);
+  }
+  async updateGiftCard(id, input) {
+    const updates = {};
+    if (input.code !== void 0) updates.code = input.code.trim().toUpperCase();
+    if (input.balance !== void 0) updates.balance = input.balance;
+    if (input.status !== void 0) updates.status = input.status;
+    if (input.expiresAt !== void 0) updates.expires_at = input.expiresAt;
+    if (input.customerId !== void 0) updates.customer_id = asUuid(input.customerId);
+    if (input.customerEmail !== void 0) updates.customer_email = input.customerEmail;
+    if (input.note !== void 0) updates.note = input.note;
+    const { data, error } = await getDb().from(T.giftCards).update(updates).eq("id", id).select().single();
+    if (error) throw error;
+    return rowToGiftCard(data);
+  }
+  async deleteGiftCard(id) {
+    const { error } = await getDb().from(T.giftCards).delete().eq("id", id);
+    if (error) throw error;
+  }
+  async listEmailTemplates() {
+    const db = getDb();
+    const tenantId = getTenantId();
+    let q = db.from(T.messageTemplates).select("*").like("event_key", `${SHOP_EVENT_PREFIX}%`).eq("channel", EMAIL_CHANNEL);
+    if (tenantId) q = q.eq("tenant_id", tenantId);
+    const { data, error } = await q;
+    if (error) throw error;
+    return (data ?? []).map(rowToEmailTemplate);
+  }
+  async upsertEmailTemplate(input) {
+    const payload = {
+      tenant_id: getTenantId(),
+      event_key: `${SHOP_EVENT_PREFIX}${input.event}`,
+      channel: EMAIL_CHANNEL
+    };
+    if (input.enabled !== void 0) payload.enabled = input.enabled;
+    if (input.subject !== void 0) payload.subject = input.subject;
+    if (input.body !== void 0) payload.body = input.body;
+    const { data, error } = await getDb().from(T.messageTemplates).upsert(payload, { onConflict: "tenant_id,event_key,channel" }).select().single();
+    if (error) throw error;
+    return rowToEmailTemplate(data);
+  }
+  async listMediaFiles() {
+    const tenantId = getTenantId();
+    if (!tenantId) return [];
+    const [attached, library] = await Promise.all([
+      this.listAttachedMedia(tenantId),
+      this.listLibraryFiles(tenantId)
+    ]);
+    return mergeMediaFiles(attached, library);
+  }
+  /** Every product photo in the store, each one carrying its product. */
+  async listAttachedMedia(tenantId) {
+    const db = getDb();
+    const { data: rows, error } = await db.from(T.productImages).select("id,product_id,url,alt_text,sort_order,is_primary,created_at").eq("tenant_id", tenantId).order("created_at", { ascending: false }).limit(1e3);
+    if (error || !rows?.length) return [];
+    const productIds = [...new Set(rows.map((r) => r.product_id).filter(Boolean))];
+    const { data: products } = await db.from(T.products).select("id,name").in("id", productIds);
+    const nameById = new Map((products ?? []).map((p) => [p.id, p.name]));
+    return rows.map((row) => productImageToMediaFile(rowToImage(row), nameById.get(row.product_id)));
+  }
+  /** What the merchant uploaded straight to the library — owned by nothing. */
+  async listLibraryFiles(tenantId) {
+    const bucket = getDb().storage.from(T.mediaBucket);
+    const listAt = async (prefix) => {
+      const { data, error } = await bucket.list(prefix, {
+        limit: 1e3,
+        sortBy: { column: "created_at", order: "desc" }
+      });
+      if (error) return [];
+      return (data ?? []).map((entry) => ({ prefix, entry }));
+    };
+    const top = await listAt(tenantId);
+    const folders = top.filter(({ entry }) => !entry.id && entry.name === LIBRARY_FOLDER).map(({ entry }) => `${tenantId}/${entry.name}`);
+    const nested = (await Promise.all(folders.map(listAt))).flat();
+    return [...top, ...nested].filter(({ entry }) => entry.id).map(({ prefix, entry }) => {
+      const path = `${prefix}/${entry.name}`;
+      const { data: { publicUrl } } = bucket.getPublicUrl(path);
+      const name = displayNameOf(entry.name);
+      const file = {
+        id: path,
+        name,
+        url: publicUrl,
+        kind: mediaKindOf(entry.name, entry.metadata?.mimetype),
+        size: Number(entry.metadata?.size ?? 0),
+        extension: (entry.name.split(".").pop() ?? "").toUpperCase(),
+        createdAt: entry.created_at ?? entry.updated_at ?? ""
+      };
+      return file;
+    });
+  }
+  async uploadMediaFile(file) {
+    const db = getDb();
+    const tenantId = getTenantId();
+    if (!tenantId) throw new Error("@fayz-ai/shop: no active tenant for media upload");
+    const path = `${tenantId}/${LIBRARY_FOLDER}/${Date.now()}-${file.name}`;
+    const bucket = db.storage.from(T.mediaBucket);
+    const { error } = await bucket.upload(path, file);
+    if (error) throw error;
+    const { data: { publicUrl } } = bucket.getPublicUrl(path);
+    return {
+      id: path,
+      name: file.name,
+      url: publicUrl,
+      kind: mediaKindOf(file.name, file.type),
+      size: file.size,
+      extension: (file.name.split(".").pop() ?? "").toUpperCase(),
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  async deleteMediaFile(id) {
+    const { error } = await getDb().storage.from(T.mediaBucket).remove([id]);
+    if (error) throw error;
+  }
+  async syncCollectionProducts(collectionId, tenantId, productIds) {
+    if (productIds === void 0) return;
+    const db = getDb();
+    const { error: delErr } = await db.from(T.collectionProducts).delete().eq("collection_id", collectionId);
+    if (delErr) throw delErr;
+    if (productIds.length === 0) return;
+    const rows = productIds.map((productId, position) => ({
+      collection_id: collectionId,
+      product_id: productId,
+      tenant_id: tenantId,
+      position
+    }));
+    const { error } = await db.from(T.collectionProducts).insert(rows);
+    if (error) throw error;
+  }
+  async syncGroupMembers(groupId, tenantId, customerIds) {
+    if (customerIds === void 0) return;
+    const db = getDb();
+    const { error: delErr } = await db.from(T.customerGroupMembers).delete().eq("group_id", groupId);
+    if (delErr) throw delErr;
+    if (customerIds.length === 0) return;
+    const rows = customerIds.map((customerId) => ({
+      group_id: groupId,
+      customer_id: customerId,
+      tenant_id: tenantId
+    }));
+    const { error } = await db.from(T.customerGroupMembers).insert(rows);
+    if (error) throw error;
+  }
 };
 function createSupabaseShopProvider() {
   return new SupabaseShopProvider();
 }
 
-export { SupabaseShopProvider, applyDiscount, checkInventory, computeCartTotals, createSupabaseShopProvider, getCustomerOrders, getShopTenantId, setShopTenantResolver, validateDiscount };
+// src/shipping/label-provider.ts
+var registry = /* @__PURE__ */ new Map();
+function registerShippingLabelProvider(provider) {
+  registry.set(provider.id, provider);
+}
+function listShippingLabelProviders() {
+  return [...registry.values()];
+}
+function resetShippingLabelProviders() {
+  registry.clear();
+}
+function resolveShippingLabelProvider(options) {
+  const { connected, preferred } = options;
+  if (preferred === "") return null;
+  if (preferred) {
+    const chosen = registry.get(preferred);
+    return chosen && connected.includes(preferred) ? chosen : null;
+  }
+  for (const id of connected) {
+    const found = registry.get(id);
+    if (found) return found;
+  }
+  return null;
+}
+
+// src/lib/document.ts
+var documentDigits = (value) => String(value ?? "").replace(/\D/g, "");
+function checkDigit(digits, weights) {
+  const sum = weights.reduce((acc, weight, index) => acc + Number(digits[index]) * weight, 0);
+  const rest = sum % 11;
+  return rest < 2 ? 0 : 11 - rest;
+}
+var CPF_FIRST = [10, 9, 8, 7, 6, 5, 4, 3, 2];
+var CPF_SECOND = [11, 10, 9, 8, 7, 6, 5, 4, 3, 2];
+var CNPJ_FIRST = [5, 4, 3, 2, 9, 8, 7, 6, 5, 4, 3, 2];
+var CNPJ_SECOND = [6, 5, 4, 3, 2, 9, 8, 7, 6, 5, 4, 3, 2];
+function isValidCpf(value) {
+  const digits = documentDigits(value);
+  if (digits.length !== 11 || /^(\d)\1{10}$/.test(digits)) return false;
+  return checkDigit(digits, CPF_FIRST) === Number(digits[9]) && checkDigit(digits, CPF_SECOND) === Number(digits[10]);
+}
+function isValidCnpj(value) {
+  const digits = documentDigits(value);
+  if (digits.length !== 14 || /^(\d)\1{13}$/.test(digits)) return false;
+  return checkDigit(digits, CNPJ_FIRST) === Number(digits[12]) && checkDigit(digits, CNPJ_SECOND) === Number(digits[13]);
+}
+function documentKind(value) {
+  const length = documentDigits(value).length;
+  if (length === 11) return "cpf";
+  if (length === 14) return "cnpj";
+  return null;
+}
+function isValidDocument(value) {
+  const kind = documentKind(value);
+  return kind === "cpf" ? isValidCpf(value) : kind === "cnpj" ? isValidCnpj(value) : false;
+}
+function formatDocument(value) {
+  const digits = documentDigits(value).slice(0, 14);
+  if (digits.length <= 11) {
+    return digits.replace(/^(\d{3})(\d)/, "$1.$2").replace(/^(\d{3})\.(\d{3})(\d)/, "$1.$2.$3").replace(/\.(\d{3})(\d{1,2})$/, ".$1-$2");
+  }
+  return digits.replace(/^(\d{2})(\d)/, "$1.$2").replace(/^(\d{2})\.(\d{3})(\d)/, "$1.$2.$3").replace(/\.(\d{3})(\d)/, ".$1/$2").replace(/(\d{4})(\d{1,2})$/, "$1-$2");
+}
+
+// src/lib/emails.ts
+var EMAIL_PLACEHOLDERS = [
+  "{{store_name}}",
+  "{{customer_name}}",
+  "{{order_number}}",
+  "{{order_total}}",
+  "{{order_items}}",
+  "{{tracking_code}}",
+  "{{cart_url}}"
+];
+var SHOP_EMAIL_EVENTS = [
+  {
+    event: "order_confirmation",
+    kind: "transactional",
+    icon: "CircleCheck",
+    title: "Confirma\xE7\xE3o de pedido",
+    description: "Enviado quando o cliente conclui a compra",
+    trigger: "Imediatamente ap\xF3s o checkout",
+    defaultSubject: "Pedido #{{order_number}} confirmado",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nRecebemos seu pedido #{{order_number}}.\n\n{{order_items}}\n\nTotal: {{order_total}}\n\nObrigado por comprar na {{store_name}}!",
+    defaultEnabled: true
+  },
+  {
+    event: "order_paid",
+    kind: "transactional",
+    icon: "CreditCard",
+    title: "Pagamento aprovado",
+    description: "Enviado quando o pagamento \xE9 confirmado",
+    trigger: "Quando o pagamento \xE9 aprovado",
+    defaultSubject: "Pagamento aprovado \u2014 pedido #{{order_number}}",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSeu pagamento de {{order_total}} foi aprovado. J\xE1 estamos preparando o pedido #{{order_number}}.\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "order_shipped",
+    kind: "transactional",
+    icon: "Truck",
+    title: "Pedido enviado",
+    description: "Enviado quando o pedido sai para entrega, com o rastreio",
+    trigger: "Quando a entrega \xE9 marcada como enviada",
+    defaultSubject: "Seu pedido saiu para entrega \u2014 #{{order_number}}",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSeu pedido #{{order_number}} est\xE1 a caminho.\n\nRastreio: {{tracking_code}}\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "order_delivered",
+    kind: "transactional",
+    icon: "PackageCheck",
+    title: "Pedido entregue",
+    description: "Enviado quando a entrega \xE9 conclu\xEDda",
+    trigger: "Quando a entrega \xE9 marcada como conclu\xEDda",
+    defaultSubject: "Seu pedido chegou \u2014 #{{order_number}}",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSeu pedido #{{order_number}} foi entregue. Esperamos que goste!\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "order_cancelled",
+    kind: "transactional",
+    icon: "CircleX",
+    title: "Pedido cancelado",
+    description: "Enviado quando um pedido \xE9 cancelado",
+    trigger: "Quando o pedido \xE9 cancelado",
+    defaultSubject: "Pedido #{{order_number}} cancelado",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSeu pedido #{{order_number}} foi cancelado. Se voc\xEA n\xE3o pediu isso, responda este e-mail.\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "refund_confirmation",
+    kind: "transactional",
+    icon: "RotateCcw",
+    title: "Reembolso processado",
+    description: "Enviado quando um reembolso \xE9 processado",
+    trigger: "Quando o pagamento \xE9 estornado",
+    defaultSubject: "Reembolso emitido \u2014 pedido #{{order_number}}",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nO reembolso de {{order_total}} do pedido #{{order_number}} foi processado. O prazo de cr\xE9dito depende do seu banco.\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "customer_welcome",
+    kind: "transactional",
+    icon: "Mail",
+    title: "Boas-vindas",
+    description: "Enviado quando um cliente cria conta na loja",
+    trigger: "Quando o cliente se cadastra",
+    defaultSubject: "Bem-vindo(a) \xE0 {{store_name}}",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSua conta na {{store_name}} est\xE1 pronta. Bom proveito!\n\n{{store_name}}",
+    defaultEnabled: false
+  },
+  {
+    event: "abandoned_cart",
+    kind: "marketing",
+    icon: "ShoppingCart",
+    title: "Carrinho abandonado",
+    description: "Enviado quando o cliente deixa itens no carrinho sem finalizar",
+    trigger: "1 hora ap\xF3s o abandono do carrinho",
+    defaultSubject: "Voc\xEA esqueceu alguns itens no carrinho",
+    defaultBody: "Ol\xE1 {{customer_name}},\n\nSeus itens ainda est\xE3o te esperando.\n\n{{cart_url}}\n\n{{store_name}}",
+    defaultEnabled: false
+  }
+];
+function renderEmailTemplate(text, values) {
+  return text.replace(/\{\{\s*(\w+)\s*\}\}/g, (whole, key) => values[key] ?? whole);
+}
+var EMAIL_PREVIEW_SAMPLE = {
+  store_name: "Sua Loja",
+  customer_name: "Maria Silva",
+  order_number: "1042",
+  order_total: "R$ 189,90",
+  order_items: "1 \xD7 Camiseta Cl\xE1ssica \u2014 R$ 89,90\n2 \xD7 Caneca Esmaltada \u2014 R$ 100,00",
+  tracking_code: "BR123456789BR",
+  cart_url: "https://sualoja.com.br/carrinho"
+};
+function resolveEmailTemplates(overrides) {
+  const byEvent = new Map(overrides.map((o) => [o.event, o]));
+  return SHOP_EMAIL_EVENTS.map((def) => {
+    const override = byEvent.get(def.event) ?? null;
+    return {
+      ...def,
+      override,
+      enabled: override?.enabled ?? def.defaultEnabled,
+      subject: override?.subject ?? def.defaultSubject,
+      body: override?.body ?? def.defaultBody,
+      customized: Boolean(override?.subject || override?.body)
+    };
+  });
+}
+
+// src/lib/message-events.ts
+var ORDER_FIELDS = [
+  { name: "order_number", label: "N\xFAmero do pedido", type: "string", example: "1042" },
+  { name: "order_total", label: "Total", type: "money", example: "R$ 189,90" },
+  { name: "order_items", label: "Itens", type: "string", example: "1 \xD7 Camiseta Cl\xE1ssica \u2014 R$ 89,90\n2 \xD7 Caneca Esmaltada \u2014 R$ 100,00" },
+  { name: "customer_name", label: "Cliente", type: "string", example: "Maria Silva" },
+  { name: "store_name", label: "Loja", type: "string", example: "Sua Loja" }
+];
+var TRACKING_FIELD = {
+  name: "tracking_code",
+  label: "C\xF3digo de rastreio",
+  type: "string",
+  example: "BR123456789BR"
+};
+var CART_FIELD = {
+  name: "cart_url",
+  label: "Link do carrinho",
+  type: "url",
+  example: "https://sualoja.com.br/carrinho"
+};
+var FIELDS_BY_EVENT = {
+  order_shipped: [...ORDER_FIELDS, TRACKING_FIELD],
+  order_delivered: [...ORDER_FIELDS, TRACKING_FIELD],
+  abandoned_cart: [...ORDER_FIELDS, CART_FIELD]
+};
+var NOT_AUDITED = /* @__PURE__ */ new Set(["abandoned_cart"]);
+function buildShopDomainEvents() {
+  return SHOP_EMAIL_EVENTS.map((def) => ({
+    name: `shop.${def.event}`,
+    title: def.title,
+    description: def.description,
+    trigger: def.trigger,
+    icon: def.icon,
+    fields: FIELDS_BY_EVENT[def.event] ?? ORDER_FIELDS,
+    audit: !NOT_AUDITED.has(def.event)
+  }));
+}
+var WHATSAPP_EVENTS = /* @__PURE__ */ new Set(["order_confirmation", "order_shipped", "abandoned_cart"]);
+var WHATSAPP_BODY = {
+  order_confirmation: "Oi {{customer_name}}! Recebemos seu pedido #{{order_number}} \u2705\n\nTotal: {{order_total}}\n\nQualquer d\xFAvida \xE9 s\xF3 chamar aqui. \u2014 {{store_name}}",
+  order_shipped: "Oi {{customer_name}}! Seu pedido #{{order_number}} saiu para entrega \u{1F69A}\n\nRastreio: {{tracking_code}}\n\n\u2014 {{store_name}}",
+  abandoned_cart: "Oi {{customer_name}}! Vi que ficaram itens no seu carrinho \u{1F6D2}\n\nQuer que eu segure para voc\xEA?\n{{cart_url}}\n\n\u2014 {{store_name}}"
+};
+function buildShopMessageDefaults() {
+  return SHOP_EMAIL_EVENTS.map((def) => {
+    const whatsapp = WHATSAPP_EVENTS.has(def.event) ? WHATSAPP_BODY[def.event] : void 0;
+    return {
+      eventKey: `shop.${def.event}`,
+      kind: def.kind,
+      channels: whatsapp ? ["email", "whatsapp"].slice() : ["email"],
+      defaults: {
+        email: { subject: def.defaultSubject, body: def.defaultBody },
+        ...whatsapp ? { whatsapp: { body: whatsapp } } : {}
+      },
+      // Only email inherits "on by default". WhatsApp bills per message and
+      // needs an approved number — switching itself on would spend someone's
+      // money unasked.
+      defaultEnabled: { email: def.defaultEnabled }
+    };
+  });
+}
+
+export { EMAIL_PLACEHOLDERS, EMAIL_PREVIEW_SAMPLE, SHOP_EMAIL_EVENTS, SupabaseShopProvider, applyDiscount, buildShopDomainEvents, buildShopMessageDefaults, checkInventory, computeCartTotals, createSupabaseShopProvider, documentDigits, documentKind, formatDocument, getCustomerOrders, getShopFunctionsUrl, isValidCnpj, isValidCpf, isValidDocument, listShippingLabelProviders, registerShippingLabelProvider, renderEmailTemplate, resetShippingLabelProviders, resolveEmailTemplates, resolveShippingLabelProvider, setShopFunctionsUrl, validateDiscount };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map