@infuro/cms-core 1.0.33 → 1.0.35

package/dist/index.d.cts

@@ -1,18 +1,10 @@
-import { e as CompanyDetails, T as TemplateContext, h as EmailTemplateResult, g as EmailTemplateName, O as OrderPlacedLineItem, o as StorageService, i as EntityMap$2 } from './index-rZTnpK7y.cjs';
-export { A as AnalyticsHandlerConfig, a as AuthHandlersConfig, B as BlogBySlugConfig, C as ChangePasswordConfig, b as ChatPublicConfig, c as CmsApiHandlerConfig, d as CmsGetter, f as CrudHandlerOptions, D as DashboardStatsConfig, E as EcommerceAnalyticsConfig, F as ForgotPasswordConfig, j as FormBySlugConfig, G as GetPublicSettingsGroupConfig, k as GetPublicSettingsGroupDataSource, I as InviteAcceptConfig, J as JobScheduleApiConfig, L as LlmAgentKnowledgeApiConfig, l as LlmAgentValidationRulesJson, P as ParsedLlmAgentValidation, S as SetPasswordConfig, m as SettingsApiConfig, n as SocialLinkItem, p as StorefrontApiConfig, q as StorefrontOtpFlags, U as UploadHandlerConfig, r as UserAuthApiConfig, s as UserAvatarConfig, t as UserProfileConfig, u as UsersApiConfig, V as VendorOnboardHandlersConfig, v as VendorOwnerActivation, w as createAnalyticsHandlers, x as createBlogBySlugHandler, y as createChangePasswordHandler, z as createCmsApiHandler, H as createCrudByIdHandler, K as createCrudHandler, M as createDashboardStatsHandler, N as createEcommerceAnalyticsHandler, Q as createForgotPasswordHandler, R as createFormBySlugHandler, W as createInviteAcceptHandler, X as createJobScheduleHandlers, Y as createLlmAgentKnowledgeHandlers, Z as createMediaZipExtractHandler, _ as createSetPasswordHandler, $ as createSettingsApiHandlers, a0 as createStorefrontApiHandler, a1 as createUploadHandler, a2 as createUserAuthApiRouter, a3 as createUserAvatarHandler, a4 as createUserProfileHandler, a5 as createUsersApiHandlers, a6 as createVendorOnboardHandlers, a7 as getCompanyDetailsFromSettings, a8 as getPublicSettingsGroup, a9 as mergeEmailLayoutCompanyDetails, aa as mergeGuardrailsIntoSystemPrompt, ab as parseLlmAgentValidationRules, ac as simpleDecrypt, ad as simpleEncrypt, ae as validateUserMessageAgainstAgentRules, af as validateUserMessageAgainstStructuredRules } from './index-rZTnpK7y.cjs';
 import PgBoss from 'pg-boss';
 import * as typeorm from 'typeorm';
-import { DataSource, EntityTarget, ObjectLiteral, SelectQueryBuilder } from 'typeorm';
+import { DataSource, EntityTarget, ObjectLiteral, EntityManager, SelectQueryBuilder } from 'typeorm';
 import { ClassValue } from 'clsx';
 import { Metadata } from 'next';
-import { NextAuthUser } from './auth.cjs';
-export { AuthorizeOtpInput, CmsMiddlewareConfig, CmsMiddlewareRequest, NextAuthOptionsConfig, createCmsMiddleware, defaultPublicApiMethods, explainSessionEntityAccess, getNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, isRbacDebugEnabled, logAuth, logAuthClient, logEntityAccessDecision, logRbac, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeEntityPerms, summarizeSessionUserForLog } from './auth.cjs';
-import { E as EntityCrudAction, S as SessionUser, e as VendorScope } from './vendor-scope-DTYhJk_I.cjs';
-export { A as ADMIN_GROUP_NAME, a as AuthHelpers, b as EntityPermissionFlags, G as GetSession, O as OPEN_ENDPOINTS, P as PERMISSION_REQUIRED_ENDPOINTS, R as RBAC_ADMIN_ONLY_ENTITIES, V as VENDOR_OWNER_GROUP_NAME, c as VENDOR_SCOPED_STORE_ENTITIES, d as VENDOR_STORE_RBAC_ENTITIES, f as canManageRoles, g as canManageVendorRoles, h as canManageVendorTeam, i as canOnboardVendors, j as createAuthHelpers, k as createCmsAuthBundle, l as getPermissionableEntityKeys, m as getRequiredPermission, n as hasEntityPermission, o as isOpenEndpoint, p as isPlatformAdministrator, q as isPublicMethod, r as isSuperAdminGroupName, s as isVendorGroupName, t as isVendorOwner, u as isVendorPortalUser, v as isVendorStaff, w as permissionRowsToRecord, x as resolveVendorScopeFromSessionUser, y as sessionHasEntityAccess, z as vendorPortalFlagsFromUser } from './vendor-scope-DTYhJk_I.cjs';
-import { a as NavbarConfig, F as FooterConfig } from './types-DCVaXlPV.cjs';
-export { A as AdminNavItem, D as DEFAULT_ADMIN_NAV } from './config-DJ5CmQvS.cjs';
-import 'next-auth/jwt';
-import 'next-auth';
+import { NextAuthOptions } from 'next-auth';
+import { getToken } from 'next-auth/jwt';
 
 interface PluginContext {
     dataSource: unknown;
@@ -126,7 +118,7 @@ declare class ERPSubmissionService {
     }[]): ContactFormData | null;
 }
 
-interface CmsAppLike$3 {
+interface CmsAppLike$4 {
     getPlugin(name: string): unknown;
 }
 type ErpJobPayload = {
@@ -145,8 +137,8 @@ type ErpJobPayload = {
     kind: 'productUpsert';
     product: Record<string, unknown>;
 };
-declare function queueErp(cms: CmsAppLike$3, payload: ErpJobPayload): Promise<void>;
-declare function registerErpQueueProcessor(cms: CmsAppLike$3): void;
+declare function queueErp(cms: CmsAppLike$4, payload: ErpJobPayload): Promise<void>;
+declare function registerErpQueueProcessor(cms: CmsAppLike$4): void;
 
 /**
  * Duck-typed DataSource so host apps (e.g. Next) can pass their own TypeORM instance
@@ -167,7 +159,7 @@ type ErpPaidOrderEntityMap = Record<string, unknown>;
  * Enqueues ERP `order.created` only when the order has at least one **completed** payment.
  * Include `payments` in the payload.
  */
-declare function queueErpPaidOrderForOrderId(cms: CmsAppLike$3, dataSource: ErpPaidOrderDataSource, entityMap: ErpPaidOrderEntityMap, orderId: number): Promise<void>;
+declare function queueErpPaidOrderForOrderId(cms: CmsAppLike$4, dataSource: ErpPaidOrderDataSource, entityMap: ErpPaidOrderEntityMap, orderId: number): Promise<void>;
 
 interface ErpContactSyncInput {
     name: string;
@@ -183,7 +175,7 @@ interface ErpContactSyncInput {
  * When ERP is enabled and plugin loaded, enqueue `create-contact` (non-fatal on failure).
  * Used for admin CRUD and storefront contact paths — not form submissions (those use lead/opportunity).
  */
-declare function queueErpCreateContactIfEnabled(cms: CmsAppLike$3, dataSource: ErpPaidOrderDataSource, entityMap: ErpPaidOrderEntityMap, input: ErpContactSyncInput): Promise<void>;
+declare function queueErpCreateContactIfEnabled(cms: CmsAppLike$4, dataSource: ErpPaidOrderDataSource, entityMap: ErpPaidOrderEntityMap, input: ErpContactSyncInput): Promise<void>;
 
 interface ERPPluginConfig {
     webhookUrl: string;
@@ -195,6 +187,47 @@ interface ERPPluginInstance {
 }
 declare function erpPlugin(config: ERPPluginConfig): CmsPlugin<ERPPluginInstance>;
 
+/** Social entry: use `iconUrl` for an image, or `icon` (emoji/text) as fallback when no image. */
+interface SocialLinkItem {
+    url: string;
+    iconUrl?: string;
+    icon?: string;
+}
+interface CompanyDetails {
+    logoUrl?: string;
+    companyName?: string;
+    supportEmail?: string;
+    supportPhone?: string;
+    socialLinks?: SocialLinkItem[];
+    /** Shown below footer rows; from email plugin settings */
+    footerDisclaimer?: string;
+    /** Heading above social icons (default "Follow Us") */
+    followUsTitle?: string;
+}
+/** One row in order-placed transactional emails */
+interface OrderPlacedLineItem {
+    productName: string;
+    quantity: number;
+    unitPrice: number | string;
+    lineTotal: number | string;
+    sku?: string | null;
+    tax?: number | string | null;
+    hsn?: string | null;
+}
+/** Merge branding + email plugin settings for layout (email overrides when set). */
+declare function mergeEmailLayoutCompanyDetails(branding: Record<string, string>, emailSettings: Record<string, string>): CompanyDetails;
+interface EmailTemplateResult {
+    subject: string;
+    bodyHtml: string;
+    text?: string;
+}
+type TemplateContext<T = unknown> = T & {
+    companyDetails: CompanyDetails;
+};
+declare const EMAIL_TEMPLATE_NAMES: readonly ["signup", "passwordReset", "passwordChange", "orderPlaced", "returnInitiated", "shippingUpdate", "invite", "formSubmission", "otp", "chatLead", "vendorOnboarded"];
+type EmailTemplateName = (typeof EMAIL_TEMPLATE_NAMES)[number];
+declare function getCompanyDetailsFromSettings(settingsGroup: Record<string, string>): CompanyDetails;
+
 interface RenderEmailOptions {
     renderLayout?: (opts: {
         bodyHtml: string;
@@ -220,6 +253,7 @@ interface EmailPluginConfig$1 {
     port?: number;
     secure?: boolean;
     region?: string;
+    /** IAM keys for SES API (SendEmail). Not the same as SES SMTP credentials in SMTP_USER/SMTP_PASSWORD. */
     accessKeyId?: string;
     secretAccessKey?: string;
     templateOptions?: RenderEmailOptions;
@@ -244,6 +278,8 @@ declare class EmailService implements EmailServiceInterface {
     private templateOptions?;
     private sesClient?;
     private transporter?;
+    /** AWS via SMTP (nodemailer) vs SES API SDK. */
+    private awsViaSmtp;
     constructor(config: EmailPluginConfig$1);
     send(emailData: EmailData): Promise<boolean>;
     renderTemplate(templateName: EmailTemplateName, ctx: TemplateContext<unknown>): RenderedEmail;
@@ -285,7 +321,7 @@ declare function renderLayout(options: {
     companyDetails: CompanyDetails;
 }): string;
 
-interface CmsAppLike$2 {
+interface CmsAppLike$3 {
     getPlugin(name: string): unknown;
 }
 /** Context for template rendering: at least companyDetails; template-specific fields (formName, etc.) are allowed. */
@@ -299,8 +335,8 @@ interface EmailJobPayload {
     html?: string;
     text?: string;
 }
-declare function registerEmailQueueProcessor(cms: CmsAppLike$2): void;
-declare function queueEmail(cms: CmsAppLike$2, payload: EmailJobPayload): Promise<void>;
+declare function registerEmailQueueProcessor(cms: CmsAppLike$3): void;
+declare function queueEmail(cms: CmsAppLike$3, payload: EmailJobPayload): Promise<void>;
 interface OrderPlacedEmailPayload {
     orderNumber: string;
     total?: string | number;
@@ -318,7 +354,22 @@ interface OrderPlacedEmailPayload {
     shippingAddress?: Record<string, string>;
 }
 /** Queues one `orderPlaced` email per recipient (customer + each unique sales address; skips sales if same as customer). */
-declare function queueOrderPlacedEmails(cms: CmsAppLike$2, payload: OrderPlacedEmailPayload): Promise<void>;
+declare function queueOrderPlacedEmails(cms: CmsAppLike$3, payload: OrderPlacedEmailPayload): Promise<void>;
+interface VendorOnboardEmailPayload {
+    vendorName: string;
+    vendorSlug?: string;
+    ownerName: string;
+    ownerEmail: string;
+    activation: 'invite' | 'password';
+    inviteLink?: string;
+    signInLink: string;
+    kind?: 'vendor_onboard' | 'team_invite';
+    notifyEmails: string[];
+    companyDetails: CompanyDetails;
+    sendToOwner?: boolean;
+}
+/** Queues `vendorOnboarded` email to owner and each unique notify address (sales team settings). */
+declare function queueVendorOnboardEmails(cms: CmsAppLike$3, payload: VendorOnboardEmailPayload): Promise<void>;
 
 interface EmailPluginConfig {
     type: 'AWS' | 'SMTP' | 'GMAIL' | 'SENDGRID';
@@ -386,7 +437,7 @@ interface AnalyticsPluginConfig {
 }
 declare function analyticsPlugin(config?: AnalyticsPluginConfig): CmsPlugin<AnalyticsService>;
 
-type MessageTemplateRowLoader = (channel: string, templateKey: string) => Promise<{
+type MessageTemplateRowLoader$1 = (channel: string, templateKey: string) => Promise<{
     body: string;
     externalTemplateRef: string | null;
     providerMeta: Record<string, unknown> | null;
@@ -426,7 +477,7 @@ interface SmsServiceConfig {
     webhookSecret?: string;
 }
 
-interface CmsAppLike$1 {
+interface CmsAppLike$2 {
     getPlugin(name: string): unknown;
 }
 interface SmsJobPayload {
@@ -437,14 +488,14 @@ interface SmsJobPayload {
     variables?: Record<string, string>;
     otpCode?: string;
 }
-declare function registerSmsQueueProcessor(cms: CmsAppLike$1): void;
-declare function queueSms(cms: CmsAppLike$1, payload: SmsJobPayload): Promise<void>;
+declare function registerSmsQueueProcessor(cms: CmsAppLike$2): void;
+declare function queueSms(cms: CmsAppLike$2, payload: SmsJobPayload): Promise<void>;
 
 interface SmsPluginConfig extends Partial<SmsServiceConfig> {
     /** Load admin settings group `sms` (enabled, smsProvider). Secrets typically stay in env. */
     getSmsSettings?: () => Promise<Record<string, string>>;
     /** Resolve `message_templates` rows for SMS (required for `templateKey` sends). */
-    getMessageTemplateRow?: MessageTemplateRowLoader;
+    getMessageTemplateRow?: MessageTemplateRowLoader$1;
 }
 interface SmsServiceInterface {
     send(opts: {
@@ -457,6 +508,47 @@ interface SmsServiceInterface {
 }
 declare function smsPlugin(config?: SmsPluginConfig): CmsPlugin<SmsServiceInterface | null>;
 
+type MessageTemplateRowLoader = (channel: string, templateKey: string) => Promise<{
+    body: string;
+    externalTemplateRef: string | null;
+    enabled: boolean;
+} | null>;
+interface WhatsAppServiceConfig {
+    accessToken?: string;
+    phoneNumberId?: string;
+    apiVersion?: string;
+}
+
+interface CmsAppLike$1 {
+    getPlugin(name: string): unknown;
+}
+interface WhatsAppJobPayload {
+    to: string;
+    body?: string;
+    templateKey?: string;
+    externalTemplateRef?: string;
+    variables?: Record<string, string>;
+    templateParamOrder?: readonly string[];
+}
+declare function registerWhatsAppQueueProcessor(cms: CmsAppLike$1): void;
+declare function queueWhatsApp(cms: CmsAppLike$1, payload: WhatsAppJobPayload): Promise<boolean>;
+
+interface WhatsAppPluginConfig extends Partial<WhatsAppServiceConfig> {
+    getWhatsAppSettings?: () => Promise<Record<string, string>>;
+    getMessageTemplateRow?: MessageTemplateRowLoader;
+}
+interface WhatsAppServiceInterface {
+    send(opts: {
+        to: string;
+        body?: string;
+        templateKey?: string;
+        externalTemplateRef?: string;
+        variables?: Record<string, string>;
+        templateParamOrder?: readonly string[];
+    }): Promise<boolean>;
+}
+declare function whatsappPlugin(config?: WhatsAppPluginConfig): CmsPlugin<WhatsAppServiceInterface | null>;
+
 interface PaymentIntent {
     id: string;
     clientSecret: string;
@@ -483,6 +575,13 @@ interface RazorpayConfig {
 type PaymentPluginConfig = StripeConfig | RazorpayConfig;
 declare function paymentPlugin(config: PaymentPluginConfig): CmsPlugin<PaymentServiceInterface | undefined>;
 
+/**
+ * Storage plugin contract: upload a file and return its public URL.
+ */
+interface StorageService {
+    upload(buffer: Buffer, key: string, contentType: string): Promise<string>;
+}
+
 interface S3StoragePluginConfig {
     region: string;
     accessKeyId: string;
@@ -618,6 +717,173 @@ declare class LlmService implements LlmServiceInterface {
     streamChat(messages: LlmMessage[], options?: LlmChatOptions): AsyncIterable<string>;
 }
 
+/** Canonical name for new installs / migrations */
+declare const ADMIN_GROUP_NAME = "Administrator";
+/** System administrator group (roles UI + users / user_groups / permissions bypass). */
+declare function isSuperAdminGroupName(name: string | null | undefined): boolean;
+type EntityCrudAction = 'create' | 'read' | 'update' | 'delete';
+type EntityPermissionFlags = {
+    c: boolean;
+    r: boolean;
+    u: boolean;
+    d: boolean;
+};
+declare function getPermissionableEntityKeys(entityMap: Record<string, unknown>): string[];
+declare function permissionRowsToRecord(rows: Array<{
+    entity: string;
+    canCreate: boolean;
+    canRead: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+}> | undefined): Record<string, EntityPermissionFlags>;
+declare function hasEntityPermission(record: Record<string, EntityPermissionFlags> | undefined, entity: string, action: EntityCrudAction): boolean;
+
+/**
+ * @deprecated Administrator bypass is now full entity access via `isRBACAdmin` in `sessionHasEntityAccess`.
+ * Kept for backwards-compatible imports.
+ */
+declare const RBAC_ADMIN_ONLY_ENTITIES: Set<string>;
+interface SessionUser {
+    id?: string;
+    email?: string | null;
+    name?: string | null;
+    groupId?: number;
+    /** User group display name (from login). */
+    groupName?: string | null;
+    /** @deprecated use entityPerms / isRBACAdmin */
+    permissions?: string[];
+    /** Administrator group: bypasses entity-level RBAC on all resources */
+    isRBACAdmin?: boolean;
+    entityPerms?: Record<string, EntityPermissionFlags>;
+    /** When false and not isRBACAdmin, admin API/UI is denied. */
+    adminAccess?: boolean;
+    /** Vendor stores this user can access (from vendor_users). */
+    vendorIds?: number[];
+    /** Active vendor for scoped CRUD (vendor staff). */
+    activeVendorId?: number | null;
+    /** Role for the active vendor link (`vendor_users.role`). */
+    vendorRole?: 'owner' | 'staff' | null;
+    /** Active vendor-scoped role id (`vendor_users.vendorRoleId`). */
+    vendorRoleId?: number | null;
+    vendorRoleName?: string | null;
+    /** True when active vendor role has `isOwnerRole`. */
+    isVendorRoleOwner?: boolean;
+    /** Permissions from active vendor role (`vendor_role_permissions`). */
+    vendorEntityPerms?: Record<string, EntityPermissionFlags>;
+    /** Set at login: vendor store portal (not platform admin). */
+    isVendorPortal?: boolean;
+    /** Set at login: vendor store owner (team + permissions). */
+    isVendorOwner?: boolean;
+}
+declare function sessionHasEntityAccess(user: SessionUser | null | undefined, entity: string, action: EntityCrudAction): boolean;
+declare function canManageRoles(user: SessionUser | null | undefined): boolean;
+type GetSession = () => Promise<{
+    user?: SessionUser;
+} | null>;
+declare const OPEN_ENDPOINTS: Array<Record<string, string[]>>;
+declare const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]>;
+declare function isOpenEndpoint(pathname: string): boolean;
+declare function getRequiredPermission(pathname: string): string[] | null;
+declare function isPublicMethod(pathname: string, method: string): boolean;
+interface AuthHelpers {
+    requireAuth(req: Request): Promise<Response | null>;
+    requirePermission(req: Request, permission: string): Promise<Response | null>;
+    requireEntityPermission(req: Request, entity: string, action: EntityCrudAction): Promise<Response | null>;
+    requireAdminAccess(req: Request): Promise<Response | null>;
+    getAuthenticatedUser(): Promise<SessionUser | null>;
+}
+declare function createAuthHelpers(getSession: GetSession, NextResponse: {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+}): AuthHelpers;
+/** Pass return value into `createCmsApiHandler` (includes `getSessionUser` for vendor store APIs). */
+declare function createCmsAuthBundle(getSession: GetSession, NextResponse: {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+}): {
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireAdminAccess: (req: Request) => Promise<Response | null>;
+    requireEntityPermission: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
+    getSessionUser: () => Promise<SessionUser | null>;
+    getAuthenticatedUser: () => Promise<SessionUser | null>;
+};
+
+/** Entities with a `vendorId` column (store data). */
+declare const VENDOR_SCOPED_STORE_ENTITIES: Set<string>;
+/**
+ * Store admin RBAC for vendor portal users (read/create/update/delete fallbacks in rbac-debug).
+ * Includes entities without `vendorId` that are still part of the store admin UI.
+ */
+declare const VENDOR_STORE_RBAC_ENTITIES: Set<string>;
+type VendorScope = {
+    type: 'all';
+} | {
+    type: 'vendor';
+    vendorId: number;
+    vendorIds: number[];
+} | {
+    type: 'deny';
+};
+declare const VENDOR_OWNER_GROUP_NAME = "Vendor Owner";
+/** User groups treated as vendor store staff (sidebar + scoped admin). */
+declare function isVendorGroupName(name: string | null | undefined): boolean;
+declare function isPlatformAdministrator(user: SessionUser | null | undefined): boolean;
+/** Vendor portal UI (store + store admin), not platform admin. */
+declare function isVendorPortalUser(user: SessionUser | null | undefined): boolean;
+declare function isVendorStaff(user: SessionUser | null | undefined): boolean;
+/** Vendor store owner (manages team + role permissions for their store). */
+declare function isVendorOwner(user: SessionUser | null | undefined): boolean;
+declare function canManageVendorTeam(user: SessionUser | null | undefined): boolean;
+declare function canManageVendorRoles(user: SessionUser | null | undefined): boolean;
+/** Platform admins (Administrator group) can onboard vendors. */
+declare function canOnboardVendors(user: SessionUser | null | undefined): boolean;
+declare function resolveVendorScopeFromSessionUser(user: SessionUser | null | undefined): VendorScope;
+/** Compute portal flags at login (persist on JWT). */
+declare function vendorPortalFlagsFromUser(input: {
+    email: string;
+    isRBACAdmin: boolean;
+    groupName?: string | null;
+    vendorIds?: number[];
+    vendorRole?: 'owner' | 'staff' | null;
+    isVendorRoleOwner?: boolean;
+}): {
+    isVendorPortal: boolean;
+    isVendorOwner: boolean;
+};
+
+type EntityMap$2 = Record<string, typeorm.EntityTarget<typeorm.ObjectLiteral>>;
+interface CrudHandlerOptions {
+    requireAuth: (req: Request) => Promise<Response | null>;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireEntityPermission?: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
+    /** When set, contact create/update enqueues ERP `create-contact` (non-fatal). */
+    getCms?: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    /** When set, soft-delete sets `deletedBy` from the current admin user. */
+    getDeletedByUserId?: (req: Request) => Promise<number | null>;
+    /** When set, store rows are filtered by session vendor (platform admin bypasses). */
+    getVendorScope?: () => Promise<VendorScope>;
+    /** Hydrated session (group + vendor context) for vendorId resolution on create. */
+    getHydratedSessionUser?: () => Promise<SessionUser | null>;
+}
+declare function createCrudHandler(dataSource: DataSource, entityMap: EntityMap$2, options: CrudHandlerOptions): {
+    GET(req: Request, resource: string): Promise<Response>;
+    POST(req: Request, resource: string): Promise<Response>;
+    GET_METADATA(req: Request, resource: string): Promise<Response>;
+    BULK_POST(req: Request, resource: string): Promise<Response>;
+    GET_EXPORT(req: Request, resource: string): Promise<Response>;
+};
+declare function createCrudByIdHandler(dataSource: DataSource, entityMap: EntityMap$2, options: CrudHandlerOptions): {
+    GET(req: Request, resource: string, id: string): Promise<Response>;
+    PUT(req: Request, resource: string, id: string): Promise<Response>;
+    DELETE(req: Request, resource: string, id: string): Promise<Response>;
+};
+
 declare class LlmAgent {
     id: number;
     name: string;
@@ -779,495 +1045,477 @@ declare function pgBossScheduleNameForId(scheduleId: string): string;
 declare function buildCronFromSchedule(schedule: Pick<JobSchedule, 'scheduleMode' | 'intervalMinutes' | 'runAtTime' | 'runOnDays' | 'cronExpression'>): string;
 declare function validateScheduleInput(schedule: Pick<JobSchedule, 'scheduleMode' | 'intervalMinutes' | 'runAtTime' | 'cronExpression'>): string | null;
 
-type CaptchaProviderId = 'turnstile' | 'recaptcha_v3';
-interface CaptchaPublicConfig {
-    enabled: boolean;
-    activeProvider: CaptchaProviderId | null;
-    siteKey: string | null;
-    availableProviders: Array<{
-        id: CaptchaProviderId;
-        siteKey: string;
-    }>;
-    multipleProviders: boolean;
-}
-type CaptchaVerifyResult = {
-    ok: true;
-} | {
-    ok: false;
-    status: number;
-    message: string;
-};
-declare function buildCaptchaPublicConfig(config: Record<string, string>): CaptchaPublicConfig;
-declare class CaptchaService {
-    private readonly env;
-    constructor(env: Record<string, string>);
-    isEnforced(): boolean;
-    getPublicConfig(): CaptchaPublicConfig;
-    verify(body: Record<string, unknown>, req: Request): Promise<CaptchaVerifyResult>;
-}
-
-declare function captchaPlugin(): CmsPlugin<CaptchaService | void>;
-
-type JsonResponse = (body: unknown, init?: {
-    status?: number;
-    headers?: HeadersInit;
-}) => Response;
-declare function assertCaptchaOk(getCms: (() => Promise<{
-    getPlugin: (name: string) => unknown;
-}>) | undefined, body: Record<string, unknown>, req: Request, json: JsonResponse): Promise<Response | null>;
+/**
+ * Auth API handler factories. Inject dataSource + entityMap, sendEmail, hash/compare; optional hooks to customize.
+ */
 
-interface LatestArticleFromFeed {
-    title?: string;
-    link?: string;
-    /** Short excerpt */
-    summary?: string;
-    /** Full content if available */
-    content?: string;
-    date: Date;
-    creator?: string;
-    categories?: string[];
+interface AuthHandlersConfig {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    baseUrl: string;
+    hashPassword: (plain: string) => Promise<string>;
+    comparePassword: (plain: string, hash: string) => Promise<boolean>;
 }
-type RssItem = {
-    title?: string;
-    link?: string;
-    pubDate?: string;
-    isoDate?: string;
-    contentSnippet?: string;
-    summary?: string;
-    description?: string;
-    content?: string;
-    creator?: string;
-    'dc:creator'?: string;
-    'content:encoded'?: string;
-    categories?: string[];
-    guid?: string | {
-        _: string;
-    };
-};
-declare function getRssArticleSummaryFromItem(item: RssItem): {
-    summary: string;
-    fullContent: string;
-};
-type BlogGeneratorDraftParseMode = 'json' | 'plaintext';
-interface BlogGeneratorSeoDraft {
-    title: string | null;
-    description: string | null;
-    keywords: string | null;
-    ogTitle: string | null;
-    ogDescription: string | null;
+interface ForgotPasswordConfig extends AuthHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    sendEmail?: (opts: {
+        to: string;
+        subject: string;
+        html: string;
+        text?: string;
+        /** Plain reset URL for templated emails (preferred over parsing html). */
+        resetLink?: string;
+    }) => Promise<void>;
+    resetExpiryHours?: number;
+    afterCreateToken?: (email: string, resetLink: string) => Promise<void>;
+}
+declare function createForgotPasswordHandler(config: ForgotPasswordConfig): (request: Request) => Promise<Response>;
+interface SetPasswordConfig extends AuthHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    minPasswordLength?: number;
+    beforeUpdate?: (email: string, userId: number) => Promise<void>;
 }
-interface BlogGeneratorBlogDraft {
-    title: string;
-    slug?: string;
-    markdown: string;
-    /** Short plain-text copy for social (e.g. LinkedIn); optional until social LLM step runs. */
-    socialMediaContent?: string | null;
-    categoryName: string | null;
-    seo: BlogGeneratorSeoDraft;
-    /** Suggested tag labels (may not exist in CMS yet). */
-    tags: string[];
-    parseMode: BlogGeneratorDraftParseMode;
+declare function createSetPasswordHandler(config: SetPasswordConfig): (request: Request) => Promise<Response>;
+interface InviteAcceptConfig extends AuthHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    beforeActivate?: (email: string, userId: number) => Promise<void>;
+}
+/** Decode invite token (base64 email) and set password + unblock user */
+declare function createInviteAcceptHandler(config: InviteAcceptConfig): (request: Request) => Promise<Response>;
+interface ChangePasswordConfig extends AuthHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getSession: () => Promise<{
+        user?: {
+            email?: string | null;
+        };
+    } | null>;
+    minPasswordLength?: number;
+    beforeUpdate?: (email: string) => Promise<void>;
+}
+declare function createChangePasswordHandler(config: ChangePasswordConfig): (request: Request) => Promise<Response>;
+interface UserAuthApiConfig extends ForgotPasswordConfig, Omit<SetPasswordConfig, 'dataSource' | 'entityMap' | 'json' | 'baseUrl' | 'hashPassword' | 'comparePassword'>, Omit<InviteAcceptConfig, 'dataSource' | 'entityMap' | 'json' | 'baseUrl' | 'hashPassword' | 'comparePassword'>, Omit<ChangePasswordConfig, 'dataSource' | 'entityMap' | 'json' | 'baseUrl' | 'hashPassword' | 'comparePassword' | 'beforeUpdate' | 'getSession'> {
+    getSession?: () => Promise<{
+        user?: {
+            email?: string | null;
+        };
+    } | null>;
+    beforeChangePasswordUpdate?: (email: string) => Promise<void>;
 }
 /**
- * Parses the LLM reply: prefers a single JSON object with blogTitle, blogHtml/blogMarkdown/content, categoryName, seo, …
- * Falls back to treating the entire string as HTML (or legacy markdown) if JSON parsing fails.
+ * Single router for all user-auth APIs. Mount in the app once.
+ * Use when you have no users/[id] route (else Next.js gives [id] precedence and "forgot-password" would match as id).
+ * Path is the segment after the mount (e.g. "forgot-password"). Returns 404 for unknown paths.
  */
-declare function parseBlogGeneratorAgentContent(raw: string): BlogGeneratorBlogDraft;
-declare function resolveBlogCategoryIdByName(needle: string | null | undefined, rows: readonly {
-    id: number;
-    name: string;
-}[]): {
-    categoryId: number | null;
-    matched: boolean;
+declare function createUserAuthApiRouter(config: UserAuthApiConfig): {
+    POST(req: Request, pathname: string): Promise<Response>;
 };
+
 /**
- * Minimal user payload: latest item per feed only (system prompt carries writing rules).
+ * CMS API handlers: dashboard, analytics, upload, blog/form by slug, users (list/create/get/update/delete/regenerate-invite/avatar/profile).
+ * All accept injectable deps; upload supports S3 or local.
  */
-declare function buildRssUserPromptFromFeeds(feeds: ReadonlyArray<{
-    rssUrl: string;
-    article: LatestArticleFromFeed;
-}>): string;
+
+type RequireEntityPermissionFn = (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
 /**
- * User message for the metadata-only LLM step (one blog at a time).
+ * Optional JSON in `LlmAgent.validationRules`. Used for programmatic checks before the LLM call.
+ * For natural-language output rules, use `guardrails` / `outputRules` / `outputInstructions` (merged into system prompt).
  */
-declare function buildBlogMetadataUserPrompt(opts: {
-    title: string;
-    markdown: string;
-    categoryNames: readonly string[];
-    tagNames: readonly string[];
-}): string;
-/** Parses JSON from the metadata-enrichment LLM (category, slug, seo, tags). */
-declare function parseBlogMetadataEnrichmentJson(raw: string): {
-    categoryName: string | null;
-    blogSlug: string | null;
-    seo: BlogGeneratorSeoDraft;
-    tags: string[];
+type LlmAgentValidationRulesJson = {
+    maxUserChars?: number;
+    maxMessageLength?: number;
+    minUserChars?: number;
+    minMessageLength?: number;
+    blockedSubstrings?: string[];
+    /** Shown to the model as output guardrails (first non-empty of guardrails | outputRules | outputInstructions wins). */
+    guardrails?: string;
+    outputRules?: string;
+    outputInstructions?: string;
+};
+type ParsedLlmAgentValidation = {
+    /** Subset used for length / substring checks only. */
+    structured: Pick<LlmAgentValidationRulesJson, 'maxUserChars' | 'maxMessageLength' | 'minUserChars' | 'minMessageLength' | 'blockedSubstrings'>;
+    /** Appended to system prompt so the model follows output guardrails. */
+    guardrailsForPrompt: string | null;
 };
 /**
- * Parses LLM output: prefers HTML + {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR} for multiple articles.
- * If the model still returns legacy JSON with `blogHtml` / `blogMarkdown`, returns a single draft from that object.
+ * - Valid JSON object: structural keys → validation; `guardrails` / `outputRules` / `outputInstructions` → prompt suffix.
+ * - Not JSON: entire string is treated as prose guardrails for the prompt (no programmatic rules unless you use JSON).
  */
-declare function parseBlogGeneratorModelOutput(raw: string): BlogGeneratorBlogDraft[];
-declare class BlogGeneratorService {
-    readonly version: "1.0.0";
-    getLatestArticleFromFeed(rssUrl: string): Promise<LatestArticleFromFeed | null>;
-    /** Defaults for the Blog Generator Agent (admin can override per request). */
-    getAgentDefaults(): {
-        agentName: string;
-        systemInstruction: string;
-        validationRules: string;
-    };
-    /**
-     * Second LLM call: one draft at a time — category, URL slug, SEO fields, tags (JSON).
-     */
-    private enrichBlogDraftWithLlmMetadata;
-    /**
-     * Third LLM call: one draft at a time — short social copy (JSON `{ socialMediaContent }`).
-     */
-    private enrichBlogDraftWithLlmSocial;
-    /**
-     * Fetches the latest item for each RSS URL, then calls {@link LlmServiceInterface.chatAgent}.
-     * `userPrompt` is only per-feed source material; rules live in the system prompt.
-     * Expects HTML article fragment(s), optionally separated by {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR}.
-     */
-    generateBlogMarkdownFromRss(params: {
-        llm: LlmServiceInterface;
-        /** Single feed (legacy). */
-        rssUrl?: string;
-        /** One or more feeds; latest item per URL is sent together. Prefer this when multiple URLs. */
-        rssUrls?: readonly string[];
-        systemInstruction?: string;
-        validationRules?: string;
-        /** Reserved for future structured output; writer does not inject categories into the user prompt. */
-        categoryNamesHint?: readonly string[];
-        /** Names of non-deleted tags in CMS (hint for reuse). */
-        tagNamesHint?: readonly string[];
-        /** From optional `llm_agents` row (slug `blog-generator`): model / sampling for the writer step. */
-        llmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-        /** Optional overrides for the metadata step; defaults live in `blog-generator-metadata-defaults.ts`. */
-        metadataSystemInstruction?: string;
-        metadataValidationRules?: string;
-        /** From optional `llm_agents` row (slug `blog-generator-metadata`): model / sampling for metadata only. */
-        metadataLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-        /** Optional overrides for the social-summary step; defaults in `blog-generator-social-defaults.ts`. */
-        socialSystemInstruction?: string;
-        socialValidationRules?: string;
-        /** From optional `llm_agents` row (slug `blog-generator-social`): model / sampling for social copy only. */
-        socialLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-    }): Promise<{
-        agentName: string;
-        feedArticles: Array<{
-            rssUrl: string;
-            article: LatestArticleFromFeed;
-        }>;
-        /** First feed's article (backward compatibility). */
-        article: LatestArticleFromFeed;
-        /** Raw model reply (HTML body per defaults; legacy markdown or JSON still parsed when present). */
-        blogMarkdown: string;
-        blogDrafts: BlogGeneratorBlogDraft[];
-        /** Same as first draft; backward compatibility. */
-        blogDraft: BlogGeneratorBlogDraft;
-    }>;
+declare function parseLlmAgentValidationRules(validationRulesText: string | null | undefined): ParsedLlmAgentValidation;
+declare function validateUserMessageAgainstStructuredRules(message: string, structured: ParsedLlmAgentValidation['structured']): {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/** Parses `validationRules` then runs programmatic checks only. */
+declare function validateUserMessageAgainstAgentRules(message: string, validationRulesText: string | null | undefined): {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/** Merges guardrails prose into the system instruction sent to the model. */
+declare function mergeGuardrailsIntoSystemPrompt(baseSystem: string | undefined, guardrailsForPrompt: string | null): string;
+interface CmsHandlersBase {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission?: RequireEntityPermissionFn;
+}
+interface DashboardStatsConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    requirePermission?: (req: Request, permission: string) => Promise<Response | null>;
+}
+declare function createDashboardStatsHandler(config: DashboardStatsConfig): (req: Request) => Promise<Response>;
+interface EcommerceAnalyticsConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+}
+declare function createEcommerceAnalyticsHandler(config: EcommerceAnalyticsConfig): (req: Request) => Promise<Response>;
+interface VendorDashboardConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getSessionUser: () => Promise<SessionUser | null>;
+}
+declare function createVendorDashboardHandler(config: VendorDashboardConfig): (req: Request) => Promise<Response>;
+interface AnalyticsHandlerConfig extends CmsHandlersBase {
+    getAnalyticsData?: (days: number) => Promise<unknown>;
+    getPropertyId?: () => ({
+        currentViewId?: string;
+        [k: string]: unknown;
+    });
+    getPermissions?: () => ({
+        serviceAccountEmail?: string;
+        currentViewId?: string;
+        [k: string]: unknown;
+    });
 }
+declare function createAnalyticsHandlers(config: AnalyticsHandlerConfig): {
+    GET(req: Request): Promise<Response>;
+    propertyId: () => Promise<Response>;
+    permissions: () => Promise<Response>;
+};
 
-/** Stable display name; not persisted as DB agent row in v1. */
-declare const BLOG_GENERATOR_AGENT_NAME = "Blog Generator Agent";
+interface UploadHandlerConfig extends CmsHandlersBase {
+    /** Storage plugin instance or getter (e.g. () => getCms().then(c => c.getPlugin('storage'))). If not set, uses local fallback. */
+    storage?: StorageService | (() => StorageService | undefined) | (() => Promise<StorageService | undefined>);
+    /** Fallback when storage not set: dir relative to cwd (e.g. "public/uploads") */
+    localUploadDir?: string;
+    allowedTypes?: string[];
+    maxSizeBytes?: number;
+    /** Resolve folder chain for `parentId` (merged from createCmsApiHandler when omitted). */
+    dataSource?: DataSource;
+    entityMap?: EntityMap$2;
+}
+declare function createUploadHandler(config: UploadHandlerConfig): (req: Request) => Promise<Response>;
+/** POST /api/media/extract/:id — expand a zip media row into folders/files under the zip’s parent folder. */
+declare function createMediaZipExtractHandler(config: UploadHandlerConfig): (_req: Request, zipMediaId: string) => Promise<Response>;
+interface BlogBySlugConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+}
+declare function createBlogBySlugHandler(config: BlogBySlugConfig): (_req: Request, slug: string) => Promise<Response>;
+interface FormBySlugConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+}
+declare function createFormBySlugHandler(config: FormBySlugConfig): (_req: Request, slug: string) => Promise<Response>;
+interface FormSaveHandlersConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+}
+interface FormSubmissionHandlerConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    /** When set, form submission notification email is queued (CRM recipient). */
+    getCms?: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    getCompanyDetails?: () => Promise<CompanyDetails>;
+    getRecipientForChannel?: (channel: 'crm' | 'sales' | 'fulfilment') => Promise<string | null>;
+}
+interface FormSubmissionGetByIdConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+}
+interface UsersApiConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    baseUrl: string;
+    /** When set with email queue/plugin, invite emails are sent on user create and regenerate-invite. */
+    getCms?: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    getCompanyDetails?: () => Promise<CompanyDetails>;
+    /** When set, soft-delete sets `deletedBy` on the user row. */
+    getSessionUser?: () => Promise<SessionUser | null>;
+}
+declare function createUsersApiHandlers(config: UsersApiConfig): {
+    list(req: Request): Promise<Response>;
+    create(req: Request): Promise<Response>;
+    getById(_req: Request, id: string): Promise<Response>;
+    update(req: Request, id: string): Promise<Response>;
+    delete(_req: Request, id: string): Promise<Response>;
+    regenerateInvite(_req: Request, id: string): Promise<Response>;
+};
+interface UserAvatarConfig extends CmsHandlersBase {
+    getSession: () => Promise<{
+        user?: {
+            email?: string | null;
+        };
+    } | null>;
+    /** Save avatar (buffer, fileName) => publicUrl. Default: local public/uploads/avatars */
+    saveAvatar?: (buffer: Buffer, fileName: string) => Promise<string>;
+}
+declare function createUserAvatarHandler(config: UserAvatarConfig): (req: Request) => Promise<Response>;
+interface UserProfileConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getSession: () => Promise<{
+        user?: {
+            id?: string;
+            email?: string | null;
+            name?: string | null;
+        };
+    } | null>;
+    /** Optional hook after a successful profile PUT (e.g. audit logging). */
+    onProfileUpdated?: (req: Request, user: {
+        id: number;
+        name: string;
+        email: string;
+        phone: string | null;
+    }) => Promise<void>;
+}
 /**
- * Optional `llm_agents` row: when present and enabled, model / temperature / max_tokens
- * are applied to {@link LlmServiceInterface.chatAgent} (system + user content still come from blog generator defaults / UI).
+ * GET / PUT handlers for `/api/users/profile` (current session user).
+ * GET merges DB fields with the session; PUT updates the user row and callers should refresh the client session (e.g. `useSession().update()`).
  */
-declare const BLOG_GENERATOR_LLM_AGENT_SLUG = "blog-generator";
-/** Line that separates multiple articles in the model reply (HTML or legacy markdown; must match parser and prompts). */
-declare const BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR = "---BLOG_GENERATOR_NEXT---";
-declare const BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION = "You are a professional financial and business content writer.\n\nYour task is to generate completely original, high-quality blog article(s) from the latest RSS-derived source material in the user message (one block per feed). The user message is factual input only.\n\nIMPORTANT RULES:\n\n1. NEVER copy the RSS article directly.\n2. Rewrite the information into a fresh, human-like article.\n3. Expand the topic with professional insights and explanations.\n4. Maintain a natural editorial tone.\n5. Make the article SEO-friendly.\n6. Use engaging headings and subheadings.\n7. Avoid robotic AI phrasing.\n8. Do not mention that the content came from RSS or feeds.\n9. Preserve factual accuracy from the source material.\n10. The output should feel like a professionally written industry blog.\n\nMULTIPLE FEEDS:\n- If several feeds are provided, compare them: if they largely cover the same story or overlap heavily, produce ONE cohesive article.\n- If they cover clearly different topics or distinct stories, produce MULTIPLE articles (one per distinct story).\n- You may also produce one synthesis plus a short separate angle when that best serves the reader\u2014use your judgment.\n\nWRITING STYLE:\n- Professional\n- Clear\n- Informative\n- Business-focused\n- Human sounding\n- Modern editorial style\n\nARTICLE STRUCTURE (each article \u2014 express in HTML):\n1. Engaging introduction\n2. Industry context\n3. Main developments\n4. Key implications\n5. Expert/business analysis\n6. Conclusion\n\nHTML STRUCTURE (STRICT \u2014 each article must be valid, semantic HTML only):\n- Output HTML only. Do not use Markdown (no # headings, no **bold**, no `code fences`).\n- Wrap each complete article in a single root: <article class=\"blog-post\"> ... </article>\n- Inside <article>, use this outline:\n  - <header><h1 class=\"blog-post-title\">\u2026main title\u2026</h1></header> (exactly one h1 per article)\n  - <section class=\"blog-post-body\"> for all following content\n  - Use <h2> and <h3> for section and subsection titles (never skip levels: h1 \u2192 h2 \u2192 h3).\n  - Use <p> for paragraphs; keep paragraphs focused (avoid huge unbroken text).\n  - Use <ul>/<ol> with <li> for lists where appropriate.\n  - Use <strong> and <em> for emphasis sparingly; use <blockquote> only when quoting or callouts fit.\n- Do not include <html>, <head>, <body>, or document-level wrappers \u2014 only the fragment(s) described above.\n- Do not use <script>, <style>, <iframe>, or inline event handlers. Avoid inline style=\"\" except when essential for accessibility (prefer none).\n- Escape angle brackets in body text if you must mention markup; keep output safe for embedding in a CMS.\n\nCONTENT REQUIREMENTS:\n- Minimum 800 words per article unless source material is very small.\n- Add context around industry trends where appropriate.\n- Explain why the topic matters.\n- Include practical implications for businesses/professionals.\n\nIF RSS CONTENT IS LIMITED:\n- Expand intelligently using general industry knowledge.\n- Keep the article relevant to the original topic.\n- Do not invent fake facts or statistics.\n\nOUTPUT FORMAT (STRICT \u2014 HTML only):\n- Return ONLY the article HTML fragment(s). No JSON, no preamble or postscript (\"Here is your article\u2026\"), no markdown.\n- If you output more than one article, output multiple <article class=\"blog-post\">\u2026</article> blocks in sequence, and between articles put a single line containing exactly this (and nothing else on that line):\n---BLOG_GENERATOR_NEXT---\n- If you output a single article, use one <article> only and do not use that separator line.";
+declare function createUserProfileHandler(config: UserProfileConfig): {
+    GET(_req: Request): Promise<Response>;
+    PUT(req: Request): Promise<Response>;
+};
+interface SettingsApiConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    encryptionKey?: string;
+    /** Groups in this list are readable without auth (GET returns all keys for the group). */
+    publicGetGroups?: string[];
+}
+declare function simpleEncrypt(text: string, key: string): string;
+declare function simpleDecrypt(encoded: string, key: string): string;
 /**
- * JSON so {@link parseLlmAgentValidationRules} can attach guardrails and allow long source payloads.
- * Edit in the admin UI if needed; defaults match product intent.
+ * Structural types so apps with their own `typeorm` install (e.g. npm link) typecheck without duplicate-package errors.
  */
-declare const BLOG_GENERATOR_DEFAULT_VALIDATION_RULES: string;
+type GetPublicSettingsGroupDataSource = {
+    getRepository(entity: unknown): {
+        find(options: object): Promise<unknown[]>;
+    };
+};
+interface GetPublicSettingsGroupConfig {
+    dataSource: GetPublicSettingsGroupDataSource;
+    entityMap: Record<string, unknown>;
+    encryptionKey?: string;
+}
+/** Same rows as unauthenticated GET /api/settings/:group when the group is in publicGetGroups. */
+declare function getPublicSettingsGroup(config: GetPublicSettingsGroupConfig, group: string): Promise<Record<string, string>>;
+declare function createSettingsApiHandlers(config: SettingsApiConfig): {
+    GET(req: Request, group: string): Promise<Response>;
+    PUT(req: Request, group: string): Promise<Response>;
+};
+interface ChatApiConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getCms: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+}
+/** Safe subset of `llm` settings for the storefront chat widget (`GET /api/chat/config`). */
+interface ChatPublicConfig {
+    enabled: boolean;
+    chatMode: 'whatsapp' | 'external' | 'llm';
+    /** When `chatMode === 'llm'`, slug of the chatbot-scoped agent (`llm_agents.scope = chatbot`). */
+    agentSlug: string;
+    botName: string;
+    icon: string;
+    iconImageUrl: string;
+    iconBackgroundColor: string;
+    headerColor: string;
+    whatsappPhone: string;
+}
 
 /**
- * Second-step LLM: classifies one finished HTML blog body into CMS fields (category, SEO, tags).
- *
- * Optional `llm_agents` row: slug {@link BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG} — when present and enabled,
- * model / temperature / max_tokens apply to this call only (writer step uses `blog-generator`).
+ * Admin API: attach knowledge base documents to an LLM agent, ingest text into chunks + embeddings.
+ * Routes: GET/POST /api/llm_agents/:slug/knowledge, DELETE /api/llm_agents/:slug/knowledge/:documentId
  *
- * To change how metadata is produced, edit the constants in this file (system instruction + validation JSON).
- * No admin UI override is wired yet; add request body fields in `cms-api-handler` if you need runtime overrides later.
+ * Pipeline logs (grep `[llm-agent-knowledge] pipeline`):
+ * - 01_request — incoming POST, content-type preview
+ * - 02_agent_loaded — agent id for slug
+ * - 03_body_parsed — JSON vs multipart, sizes / documentId
+ * - 04_* — file decode or PDF extract (multipart)
+ * - 05_branch — link_existing_document | new_upload_ingest
+ * - 06_* — KB row + junction (link create / exists)
+ * - 06b_chunks_existing_count — link path: existing chunk rows
+ * - 06_knowledge_document_saved — new ingest: document row id
+ * - 07_chunk_split — split stats
+ * - 07b_chunks_persisted — chunk rows saved
+ * - 07_query_chunks_missing_embedding — link path: rows with NULL embedding
+ * - 08_* — resolve LLM plugin, embed availability or skip
+ * - 09_embedding_workers_start / 10_embedding_workers_finished — concurrent embed+DB update
+ * - 11_response — final outcome summary
+ * - 99_pipeline_error — uncaught exception
  */
-declare const BLOG_METADATA_ENRICHER_AGENT_NAME = "Blog Generator Metadata";
-/** `llm_agents.slug` for routing model/temperature for the metadata-only chat step. */
-declare const BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG = "blog-generator-metadata";
-declare const BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION = "You are a careful CMS metadata assistant for a publishing system.\n\nYou receive ONE complete blog post as HTML (title is usually in <h1 class=\"blog-post-title\"> or the first <h1>). Your job is to propose structured fields so an editor can save the post: category, URL slug, SEO block, and topical tags.\n\nRULES:\n1. Read the whole article and infer the primary topic and audience.\n2. categoryName must be EXACTLY one string from AVAILABLE_BLOG_CATEGORIES in the user message, or \"\" if none fit.\n3. blogSlug: lowercase kebab-case, ASCII letters/digits/hyphens only, no leading/trailing hyphens, max ~80 chars. Derive from the main topic or title.\n4. seo.title: concise meta title (~50\u201360 characters when reasonable).\n5. seo.description: meta description (~150\u2013160 characters when reasonable), plain text.\n6. seo.keywords: comma-separated phrases, no stuffing.\n7. seo.ogTitle / seo.ogDescription: may mirror title/description or be slightly adapted for social.\n8. tags: 4\u201310 short labels (1\u20133 words each). Prefer exact matches from EXISTING_TAG_NAMES when they truly apply; otherwise invent precise new labels (they may be created in the CMS later).\n9. Do not invent statistics, quotes, or URLs not implied by the article.\n10. Output JSON only \u2014 no markdown outside the JSON, no commentary.\n\nOUTPUT FORMAT (STRICT):\nReturn a single JSON object only. Do not wrap it in a markdown code fence.\n\n{\n  \"categoryName\": \"string \u2014 exact match from list or empty string\",\n  \"blogSlug\": \"string \u2014 url-safe kebab-case\",\n  \"seo\": {\n    \"title\": \"string or empty\",\n    \"description\": \"string or empty\",\n    \"keywords\": \"string or empty\",\n    \"ogTitle\": \"string or empty\",\n    \"ogDescription\": \"string or empty\"\n  },\n  \"tags\": [\"tag-one\", \"tag-two\"]\n}";
-declare const BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES: string;
 
-interface BlogGeneratorPluginConfig {
-    /** Set to false to skip registering the plugin. */
-    enabled?: boolean;
+interface LlmAgentKnowledgeApiConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getCms: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission?: RequireEntityPermissionFn;
 }
-declare function blogGeneratorPlugin(config?: BlogGeneratorPluginConfig): CmsPlugin<BlogGeneratorService | undefined>;
+declare function createLlmAgentKnowledgeHandlers(config: LlmAgentKnowledgeApiConfig): {
+    list(req: Request, slug: string): Promise<Response>;
+    post(req: Request, slug: string): Promise<Response>;
+    unlink(req: Request, slug: string, documentIdStr: string): Promise<Response>;
+} | null;
 
-interface SocialMediaApiConfig {
+/**
+ * Single CMS API handler: dashboard, analytics, upload, media zip extract, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
+ */
+
+/** CMS instance with getPlugin; when provided, analytics and userAuth.sendEmail can be resolved from plugins when not passed. */
+type CmsGetter = () => Promise<{
+    getPlugin: (name: string) => unknown;
+}>;
+interface CmsApiHandlerConfig {
     dataSource: DataSource;
     entityMap: EntityMap$2;
+    requireAuth: (req: Request) => Promise<Response | null>;
     json: (body: unknown, init?: {
         status?: number;
     }) => Response;
-    requireAuth: (req: Request) => Promise<Response | null>;
-    requireEntityPermission: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
-    encryptionKey?: string;
-    /** Used to resolve relative cover image URLs (e.g. https://mysite.com). */
-    publicSiteUrl?: string;
+    pathToModel?: (segment: string) => string;
+    crudResources?: string[];
+    /** When set, analytics and userAuth.sendEmail can be derived from getPlugin('analytics') and getPlugin('email') when not provided. */
+    getCms?: CmsGetter;
+    /** Optional: used when deriving userAuth.sendEmail to pass company details into email templates (e.g. from settings). */
+    getCompanyDetails?: () => Promise<CompanyDetails>;
+    /** Optional: used for form submission and other channel-based email recipients (from settings group "email"). */
+    getRecipientForChannel?: (channel: 'crm' | 'sales' | 'fulfilment') => Promise<string | null>;
+    userAuth?: UserAuthApiConfig;
+    /** GET /api/dashboard/stats */
+    dashboard?: DashboardStatsConfig;
+    /** GET /api/dashboard/ecommerce */
+    ecommerceAnalytics?: EcommerceAnalyticsConfig;
+    /** GET /api/analytics. If omitted and getCms is set, uses getCms().getPlugin('analytics'). */
+    analytics?: AnalyticsHandlerConfig;
+    /** POST /api/upload (S3 or local) */
+    upload?: UploadHandlerConfig;
+    /** GET /api/blogs/slug/:slug (public) */
+    blogBySlug?: BlogBySlugConfig;
+    /** GET /api/forms/slug/:slug (public) */
+    formBySlug?: FormBySlugConfig;
+    /** POST/PUT /api/forms (save form + fields; when set, overrides CRUD for forms) */
+    formSave?: FormSaveHandlersConfig;
+    /** POST /api/form-submissions (public, no auth) */
+    formSubmission?: FormSubmissionHandlerConfig;
+    /** GET /api/form-submissions/:id (auth) with form + contact relations */
+    formSubmissionGetById?: FormSubmissionGetByIdConfig;
+    /** GET/POST /api/users, GET/PUT/DELETE /api/users/:id, POST /api/users/:id/regenerate-invite */
+    usersApi?: UsersApiConfig;
+    /** POST /api/users/avatar */
+    userAvatar?: UserAvatarConfig;
+    /** GET/PUT /api/users/profile (current session user) */
+    userProfile?: UserProfileConfig;
+    /** GET/PUT /api/settings/:group */
+    settings?: SettingsApiConfig;
+    /** GET /api/chat/config (public); POST /api/chat/identify; GET /api/chat/conversations/:id/messages; POST /api/chat/messages */
+    chat?: ChatApiConfig;
     /**
-     * When true (default), `console.info` / `console.warn` lines are emitted for LinkedIn blog publish
-     * (text vs image path, sizes, errors). Set false or `CMS_LINKEDIN_PUBLISH_LOG=0` to silence.
+     * GET/POST /api/llm_agents/:slug/knowledge; DELETE …/knowledge/:documentId — agent KB ingest + links.
+     * When omitted but `chat` is set, the same dataSource / entityMap / getCms / json / requireAuth are reused automatically.
      */
-    linkedInPublishLogging?: boolean;
-}
-declare function createSocialMediaHandlers(config: SocialMediaApiConfig): {
-    getLinkedInStatus(req: Request): Promise<Response>;
-    fetchLinkedInOrganizations(req: Request): Promise<Response>;
-    syncLinkedInProfile(req: Request): Promise<Response>;
-    publishBlogToLinkedIn(req: Request, blogId: number): Promise<Response>;
-    getFacebookStatus(req: Request): Promise<Response>;
-    publishBlogToFacebook(req: Request, blogId: number): Promise<Response>;
+    llmAgentKnowledge?: LlmAgentKnowledgeApiConfig;
     /**
-     * POST JSON `{ appId, appSecret, userAccessToken }`. Calls Graph `GET /me/accounts` with the user token.
-     * App ID and secret are validated but not used yet (reserved for future token flows).
-     * Persist credentials via Plugins → Save: `meta_app_id` (public), `meta_app_secret` and `meta_user_access_token` (encrypted).
+     * Entity-level RBAC (session `entityPerms` / Administrator). When omitted, admin routes that need it respond with 403
+     * (`entity_rbac_required`) so CRUD cannot run as auth-only. Pass `createAuthHelpers(...).requireEntityPermission` from the app.
      */
-    fetchFacebookManagedPages(req: Request): Promise<Response>;
+    requireEntityPermission?: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
+    /** Required for vendor store RBAC + scoping. Alias: `getAuthenticatedUser`. */
+    getSessionUser?: () => Promise<SessionUser | null>;
+    /** Same as `getSessionUser` (from `createAuthHelpers().getAuthenticatedUser`). */
+    getAuthenticatedUser?: () => Promise<SessionUser | null>;
+}
+declare function createCmsApiHandler(config: CmsApiHandlerConfig): {
+    handle(method: string, pathInput: string[], req: Request): Promise<Response>;
 };
 
-/**
- * Meta (Facebook) Graph API helpers (server-side). Uses fetch — no SDK.
- * @see https://developers.facebook.com/docs/graph-api/reference/user/accounts
- */
-type FacebookPageAccount = {
-    access_token?: string;
-    category?: string;
-    name?: string;
-    id?: string;
-    /** Graph may return additional fields */
-    [key: string]: unknown;
-};
-type FacebookMeAccountsResponse = {
-    data?: FacebookPageAccount[];
-    paging?: Record<string, unknown>;
-    error?: {
-        message?: string;
-        type?: string;
-        code?: number;
-        fbtrace_id?: string;
-    };
-};
-/**
- * Lists Facebook Pages the user manages (page access tokens + metadata).
- * Requires a User access token with `pages_show_list` or equivalent page permissions.
- */
-declare function metaFetchUserManagedPages(userAccessToken: string): Promise<FacebookMeAccountsResponse>;
-type MetaGraphMutationResponse = {
-    id?: string;
-    post_id?: string;
-    error?: {
-        message?: string;
-        type?: string;
-        code?: number;
-        fbtrace_id?: string;
-    };
+interface JobScheduleApiConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: ResponseInit) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission?: (req: Request, entity: string, action: 'read' | 'create' | 'update' | 'delete') => Promise<Response | null>;
+    getCms?: CmsGetter;
+    config?: Record<string, string>;
+}
+declare function createJobScheduleHandlers(apiConfig: JobScheduleApiConfig): {
+    list(req: Request): Promise<Response>;
+    getById(req: Request, id: string): Promise<Response>;
+    create(req: Request): Promise<Response>;
+    update(req: Request, id: string): Promise<Response>;
+    remove(req: Request, id: string): Promise<Response>;
+    runNow(req: Request, id: string): Promise<Response>;
+    listRuns(req: Request, id: string): Promise<Response>;
 };
-/** Resolves the long-lived page access token for a Page ID from `/me/accounts` data. */
-declare function metaResolvePageAccessToken(accounts: FacebookMeAccountsResponse, pageId: string): string | null;
-/**
- * Upload a photo to a Page timeline (multipart).
- * @see https://developers.facebook.com/docs/graph-api/reference/page/photos#Creating
- */
-declare function metaPostPagePhoto(opts: {
-    pageId: string;
-    pageAccessToken: string;
-    imageBuffer: Buffer;
-    contentType: string;
-    caption: string;
-}): Promise<MetaGraphMutationResponse>;
-/**
- * Publish a text-only post to the Page feed (when no JPEG/PNG image is available).
- * @see https://developers.facebook.com/docs/graph-api/reference/page/feed#Creating
- */
-declare function metaPostPageFeed(opts: {
-    pageId: string;
-    pageAccessToken: string;
-    message: string;
-}): Promise<MetaGraphMutationResponse>;
 
-interface SocialMediaPluginConfig {
-    /** Set to false to skip registering the plugin instance (API routes still work if wired in the app handler). */
-    enabled?: boolean;
+interface EventNotificationHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission?: RequireEntityPermissionFn;
+    getCms?: () => Promise<CmsAppLike$3>;
 }
-/**
- * Optional CMS plugin instance for `getPlugin('social_media')`.
- * LinkedIn publishing is implemented in {@link createSocialMediaHandlers} and mounted from the CMS API handler.
- */
-declare function socialMediaPlugin(config?: SocialMediaPluginConfig): CmsPlugin<{
-    name: string;
-} | undefined>;
+declare function createEventNotificationHandlers(config: EventNotificationHandlersConfig): {
+    getSettings(req: Request, id: string): Promise<Response>;
+    updateSettings(req: Request, id: string): Promise<Response>;
+    sendTest(req: Request, id: string): Promise<Response>;
+};
 
-declare function cn(...inputs: ClassValue[]): string;
-declare function generateSlug(title: string): string;
-declare function validateSlug(slug: string): boolean;
-declare function formatDate(date: Date | string): string;
-declare function formatDateTime(date: Date | string): string;
-declare function formatDateOnly(date: Date | string): string;
-declare function truncateText(text: string, maxLength: number): string;
-
-/** Minimal SEO row shape (DB or API). */
-type SeoLike = {
-    title?: string | null;
-    description?: string | null;
-    keywords?: string | null;
-    ogTitle?: string | null;
-    ogDescription?: string | null;
-    ogImage?: string | null;
-};
-type SeoMetadataOverrides = {
-    title?: string;
-    description?: string;
-    keywords?: string;
-    ogTitle?: string;
-    ogDescription?: string;
-    ogImage?: string;
-};
-/** Per-field: join row wins over slug row. */
-declare function mergeSeoBySlug(join: SeoLike | null | undefined, bySlug: SeoLike | null): SeoLike | null;
-declare function fetchSeoBySlug(dataSource: DataSource, entityMap: EntityMap$2, slug: string): Promise<SeoLike | null>;
-/**
- * Build Next.js Metadata from merged SEO + optional layers.
- * `overrides` win over SEO; `fallbacks` apply when SEO (and overrides) omit a field.
- * Returns a partial object; omit fields so the root layout defaults apply.
- */
-declare function resolvePublicMetadata(args: {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    slug: string;
-    seoFromJoin?: SeoLike | null;
-    overrides?: SeoMetadataOverrides;
-    fallbacks?: SeoMetadataOverrides;
-    canonicalPath?: string;
-    metadataBase?: URL;
-}): Promise<Metadata>;
-
-/** Links an unclaimed contact (same email, no userId) to the new user after signup or invite. */
-declare function linkUnclaimedContactToUser(dataSource: DataSource, contactsEntity: EntityTarget<ObjectLiteral>, userId: number, email: string): Promise<void>;
-
-/** Parse stored config value into a list of emails (JSON array, or comma/semicolon-separated string). */
-declare function parseEmailRecipientsFromConfig(raw: string | undefined | null): string[];
-/** Serialize email list for config storage (JSON array in DB). */
-declare function serializeEmailRecipients(emails: string[]): string;
-/** Join for SMTP `to` header (multiple recipients). */
-declare function joinRecipientsForSend(emails: string[]): string | null;
-
-type OtpPurpose = 'login' | 'verify_email' | 'verify_phone';
-type OtpChannel = 'email' | 'sms';
-declare function hashOtpCode(code: string, purpose: string, identifier: string, pepper?: string): string;
-declare function verifyOtpCodeHash(code: string, storedHash: string, purpose: string, identifier: string, pepper?: string): boolean;
-declare function generateNumericOtp(length?: number): string;
-/** Normalize to E.164-like +digits */
-declare function normalizePhoneE164(raw: string, defaultCountryCode?: string): string | null;
-type EntityMap$1 = Record<string, EntityTarget<ObjectLiteral>>;
-declare function countRecentOtpSends(dataSource: DataSource, entityMap: EntityMap$1, purpose: OtpPurpose, identifier: string, since: Date): Promise<number>;
-declare function createOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
-    purpose: OtpPurpose;
-    channel: OtpChannel;
-    identifier: string;
-    code: string;
-    pepper?: string;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-    status: number;
-}>;
-declare function verifyAndConsumeOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
-    purpose: OtpPurpose;
-    identifier: string;
-    code: string;
-    pepper?: string;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-    status: number;
-}>;
-
-/** Returns true if request is allowed; false if rate limited. */
-declare function allowRateLimit(key: string): Promise<boolean>;
-type ExtraPublicWriteRule = (method: string, segments: string[]) => boolean;
-/** Segments are path parts after `/api/` (e.g. `['form-submissions']`). */
-declare function shouldRateLimitPublicWrite(method: string, segments: string[], extraRule?: ExtraPublicWriteRule): boolean;
-declare function rateLimitKeyForApiRequest(req: Request, segments: string[]): string;
-declare function rateLimitPublicApiIfNeeded(req: Request, method: string, segments: string[], options?: {
-    extraRule?: ExtraPublicWriteRule;
-}): Promise<Response | null>;
-declare function rateLimitCheckoutPost(req: Request): Promise<Response | null>;
-
-interface EntityMapLike {
-    configs: unknown;
-    orders: unknown;
-    order_items: unknown;
-}
-interface SendOrderPlacedEmailDeps {
-    getDataSource: () => Promise<DataSource>;
-    entityMap: EntityMapLike;
-    getCms: () => Promise<CmsApp>;
-}
-/** After payment confirmation: email customer + each sales team address from plugin settings. */
-declare function sendOrderPlacedEmailsAfterConfirmation(orderId: number, deps: SendOrderPlacedEmailDeps): Promise<void>;
-
-interface DataSourceManager {
-    getDataSource: () => DataSource;
-    getDataSourceInitialized: () => Promise<DataSource>;
-    resetDataSource: () => void;
-    registerOnReset: (cb: () => void) => void;
-    isConnectionError: (e: unknown) => boolean;
-}
-declare function createDataSourceManager(entityMap: Record<string, unknown>, options?: {
-    databaseUrl?: string;
-    idleTimeoutMillis?: number;
-}): DataSourceManager;
-
-interface SeedEntityMap {
-    users: unknown;
-    user_groups: unknown;
-}
-declare function seedDefaultAdmin(ds: DataSource, entityMap: SeedEntityMap, opts?: {
-    email?: string;
-    password?: string;
-}): Promise<void>;
-
-type VendorInviteStatus = 'none' | 'pending' | 'expired' | 'accepted';
-declare class Vendor {
-    id: number;
-    name: string;
-    slug: string;
-    email: string | null;
-    phone: string | null;
-    logo: string | null;
-    description: string | null;
-    metadata: Record<string, unknown> | null;
-    active: boolean;
-    /** Primary owner user for this vendor (set on onboard). */
-    userId: number | null;
-    inviteStatus: VendorInviteStatus;
-    createdAt: Date;
-    updatedAt: Date;
-    deletedAt: Date | null;
-    deleted: boolean;
-    createdBy: number | null;
-    updatedBy: number | null;
-    deletedBy: number | null;
-    vendorUsers: VendorUser[];
-}
+interface EventOrderMessageTemplateHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission?: RequireEntityPermissionFn;
+}
+declare function createEventOrderMessageTemplateHandlers(config: EventOrderMessageTemplateHandlersConfig): {
+    GET(req: Request): Promise<Response>;
+    PUT(req: Request): Promise<Response>;
+};
 
 declare class Permission {
     id: number;
@@ -1323,117 +1571,138 @@ declare class User {
     group: UserGroup | null;
 }
 
+declare class VendorRolePermission {
+    id: number;
+    vendorRoleId: number;
+    entity: string;
+    canCreate: boolean;
+    canRead: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    role: VendorRole;
+}
+
+declare class VendorRole {
+    id: number;
+    vendorId: number;
+    name: string;
+    description: string | null;
+    isSystem: boolean;
+    isOwnerRole: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    vendor: Vendor;
+    permissions: VendorRolePermission[];
+}
+
 /** Links a staff user to a vendor store. */
 type VendorUserRole = 'owner' | 'staff';
 declare class VendorUser {
     id: number;
     vendorId: number;
     userId: number;
+    /** @deprecated use vendorRoleId — kept for migration compatibility */
     role: VendorUserRole;
+    vendorRoleId: number | null;
     createdAt: Date;
     updatedAt: Date;
     vendor: Vendor;
     user: User;
+    vendorRole: VendorRole | null;
 }
 
-/** Load vendor membership for session (call from app `getUserByEmail`).
- *
- * Uses a raw SQL query so it works even when the consuming app's DataSource
- * does not explicitly register the VendorUser entity.
- */
-declare function loadUserVendorContext(dataSource: DataSource, userId: number, preferredVendorId?: number | null): Promise<{
-    vendorIds: number[];
-    activeVendorId: number | null;
-    vendorRole: VendorUserRole | null;
-}>;
-
-/** Attach vendorIds / activeVendorId / vendorRole for NextAuth (use in app getUserByEmail). */
-declare function enrichUserWithVendorContext(dataSource: DataSource, user: NextAuthUser | null): Promise<NextAuthUser | null>;
+type VendorInviteStatus = 'none' | 'pending' | 'expired' | 'accepted';
+type VendorRegistrationStatus = 'pending' | 'approved' | 'rejected' | 'suspended';
+declare class Vendor {
+    id: number;
+    name: string;
+    slug: string;
+    email: string | null;
+    phone: string | null;
+    legalName: string | null;
+    businessType: string | null;
+    website: string | null;
+    addressLine1: string | null;
+    addressLine2: string | null;
+    city: string | null;
+    state: string | null;
+    country: string | null;
+    postalCode: string | null;
+    gstin: string | null;
+    pan: string | null;
+    logo: string | null;
+    description: string | null;
+    metadata: Record<string, unknown> | null;
+    active: boolean;
+    /** Primary owner user for this vendor (set on onboard). */
+    userId: number | null;
+    inviteStatus: VendorInviteStatus;
+    registrationStatus: VendorRegistrationStatus;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    vendorUsers: VendorUser[];
+}
 
-/** Merge DB group + vendor_users into session (JWT often missing these). Server/API only. */
-declare function hydrateVendorSessionUser(dataSource: DataSource, user: SessionUser | null | undefined): Promise<SessionUser | null | undefined>;
+declare class FormField {
+    id: number;
+    formId: number;
+    label: string;
+    type: string;
+    placeholder: string | null;
+    options: string | null;
+    required: boolean;
+    validation: string | null;
+    order: number;
+    groupId: number;
+    columnWidth: number;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    form: Form;
+}
 
-interface PublicThemeSettingsPayload {
-    activeThemeId: string;
-    primaryColor: string;
-    secondaryColor: string;
-    navbarConfig: NavbarConfig;
-    footerOverrides: Partial<FooterConfig>;
+declare class Address {
+    id: number;
+    contactId: number;
+    tag: string | null;
+    line1: string | null;
+    line2: string | null;
+    city: string | null;
+    state: string | null;
+    postalCode: string | null;
+    country: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    contact: Contact;
 }
-declare function loadPublicThemeSettings(config: {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    encryptionKey?: string;
-    defaultActiveThemeId?: string;
-    defaultPrimaryColor?: string;
-    defaultSecondaryColor?: string;
-}): Promise<PublicThemeSettingsPayload>;
 
-/** Normalize a logical media folder path: no leading/trailing slashes, no ".." segments, max length. */
-declare function sanitizeMediaFolderPath(input: unknown): string;
-/** Single path segment for storage (folder name or legacy path segment). */
-declare function sanitizeStorageSegment(name: string): string;
-
-type EntityMap = Record<string, EntityTarget<ObjectLiteral>>;
-/** Build `a/b/c` path under `uploads/` from the chain of folder rows up to root. */
-declare function relativePathFromMediaParentId(dataSource: DataSource, entityMap: EntityMap, parentId: number | null): Promise<string>;
-
-declare const ZIP_MIME_TYPES: Set<string>;
-declare function isZipMedia(mime: string | null | undefined, filename: string): boolean;
-
-/**
- * Executes `fn` inside a transaction where the PostgreSQL GUC
- * `app.vendor_id` is set for the duration of that transaction.
- *
- * This activates the `vendor_isolation` RLS policy added by the
- * `VendorRls1775940000000` migration.
- *
- * vendorId = 0  →  admin / all-access (policy allows everything)
- * vendorId > 0  →  only rows whose `vendorId` column matches
- *
- * Example:
- *   const orders = await withVendorRlsContext(dataSource, 4, (ds) =>
- *     ds.getRepository(Order).find({ where: { deleted: false } })
- *   );
- */
-declare function withVendorRlsContext<T>(dataSource: DataSource, vendorId: number, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
-/**
- * Convenience wrapper: sets admin mode (vendor_id = '0') so all rows are
- * visible regardless of their vendorId.  Use for platform-admin queries.
- */
-declare function withAdminRlsContext<T>(dataSource: DataSource, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
-
-declare function isCustomerTypeContact(type: unknown): boolean;
-/** Restrict contact list to rows linked in `vendor_customers` with type customer. */
-declare function applyVendorCustomersContactFilter(qb: SelectQueryBuilder<typeorm.ObjectLiteral>, contactAlias: string, scope: VendorScope, vendorIdFilter: number | null): void;
-declare function contactIsVendorCustomer(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<boolean>;
-/** Returns an error message when the contact is not a vendor-linked customer; otherwise null. */
-declare function assertContactAllowedForVendorOrder(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<string | null>;
-declare function resolveVendorIdForContactCheck(scope: VendorScope, bodyOrRow: Record<string, unknown>): number | null;
-
-declare class OtpChallenge {
-    id: number;
-    purpose: string;
-    channel: string;
-    identifier: string;
-    codeHash: string;
-    expiresAt: Date;
-    attempts: number;
-    consumedAt: Date | null;
-    createdAt: Date;
-}
-
-declare class PasswordResetToken {
-    id: number;
-    email: string;
-    token: string;
-    expiresAt: Date;
-    createdAt: Date;
-}
-
-declare class Category {
+declare class ProductCategory {
     id: number;
+    /** Null for platform catalog categories (`isCatalog`). */
+    vendorId: number | null;
+    /** Platform-wide catalog type — all vendors add collections/products under these categories. */
+    isCatalog: boolean;
     name: string;
+    slug: string;
+    parentId: number | null;
+    image: string | null;
+    description: string | null;
+    metadata: Record<string, unknown> | null;
+    active: boolean;
+    sortOrder: number;
     createdAt: Date;
     updatedAt: Date;
     deletedAt: Date | null;
@@ -1441,18 +1710,16 @@ declare class Category {
     createdBy: number | null;
     updatedBy: number | null;
     deletedBy: number | null;
-    blogs: Blog[];
+    vendor: Vendor | null;
+    parent: ProductCategory | null;
+    children: ProductCategory[];
+    products: Product[];
+    collections: Collection[];
 }
 
-declare class Seo {
+declare class Category {
     id: number;
-    title: string | null;
-    description: string | null;
-    keywords: string | null;
-    ogTitle: string | null;
-    ogDescription: string | null;
-    ogImage: string | null;
-    slug: string;
+    name: string;
     createdAt: Date;
     updatedAt: Date;
     deletedAt: Date | null;
@@ -1518,85 +1785,15 @@ declare class Blog {
     tags: Tag[];
 }
 
-declare class FormField {
-    id: number;
-    formId: number;
-    label: string;
-    type: string;
-    placeholder: string | null;
-    options: string | null;
-    required: boolean;
-    validation: string | null;
-    order: number;
-    groupId: number;
-    columnWidth: number;
-    createdAt: Date;
-    updatedAt: Date;
-    deletedAt: Date | null;
-    deleted: boolean;
-    createdBy: number | null;
-    updatedBy: number | null;
-    deletedBy: number | null;
-    form: Form;
-}
-
-declare class Form {
+declare class Seo {
     id: number;
-    name: string;
+    title: string | null;
     description: string | null;
-    campaign: string | null;
-    slug: string;
-    published: boolean;
-    createdAt: Date;
-    updatedAt: Date;
-    deletedAt: Date | null;
-    deleted: boolean;
-    createdBy: number | null;
-    updatedBy: number | null;
-    deletedBy: number | null;
-    fields: FormField[];
-    submissions: FormSubmission[];
-}
-
-declare class FormSubmission {
-    id: number;
-    formId: number;
-    contactId: number | null;
-    data: Record<string, unknown>;
-    ipAddress: string | null;
-    userAgent: string | null;
-    createdAt: Date;
-    updatedAt: Date;
-    form: Form;
-    contact: Contact | null;
-}
-
-declare class Address {
-    id: number;
-    contactId: number;
-    tag: string | null;
-    line1: string | null;
-    line2: string | null;
-    city: string | null;
-    state: string | null;
-    postalCode: string | null;
-    country: string | null;
-    createdAt: Date;
-    updatedAt: Date;
-    contact: Contact;
-}
-
-declare class ProductCategory {
-    id: number;
-    vendorId: number;
-    name: string;
+    keywords: string | null;
+    ogTitle: string | null;
+    ogDescription: string | null;
+    ogImage: string | null;
     slug: string;
-    parentId: number | null;
-    image: string | null;
-    description: string | null;
-    metadata: Record<string, unknown> | null;
-    active: boolean;
-    sortOrder: number;
     createdAt: Date;
     updatedAt: Date;
     deletedAt: Date | null;
@@ -1604,11 +1801,7 @@ declare class ProductCategory {
     createdBy: number | null;
     updatedBy: number | null;
     deletedBy: number | null;
-    vendor: Vendor;
-    parent: ProductCategory | null;
-    children: ProductCategory[];
-    products: Product[];
-    collections: Collection[];
+    blogs: Blog[];
 }
 
 declare class Brand {
@@ -1637,7 +1830,8 @@ declare class Brand {
 
 declare class Collection {
     id: number;
-    vendorId: number;
+    /** Null for platform catalog collections (`isCatalog`). */
+    vendorId: number | null;
     categoryId: number | null;
     brandId: number | null;
     name: string;
@@ -1648,6 +1842,8 @@ declare class Collection {
     metadata: Record<string, unknown> | null;
     variants: Array<Record<string, unknown>> | null;
     active: boolean;
+    /** Platform-wide catalog type — all vendors add products under these collections. */
+    isCatalog: boolean;
     sortOrder: number;
     createdAt: Date;
     updatedAt: Date;
@@ -1657,7 +1853,7 @@ declare class Collection {
     updatedBy: number | null;
     deletedBy: number | null;
     seoId: number | null;
-    vendor: Vendor;
+    vendor: Vendor | null;
     seo: Seo | null;
     category: ProductCategory | null;
     brand: Brand | null;
@@ -1716,15 +1912,64 @@ declare class Tax {
     vendor: Vendor;
 }
 
-declare class ProductTax {
+declare enum RefundPolicyStatus {
+    ACTIVE = "active",
+    INACTIVE = "inactive"
+}
+declare enum RefundPolicyType$1 {
+    PERCENTAGE = "percentage",
+    EVENT_TIERS = "event_tiers"
+}
+type RefundPolicyTierRow = {
+    fromDaysBefore: number;
+    toDaysBefore: number | null;
+    percentage: number;
+};
+declare class RefundPolicy {
+    id: number;
+    name: string;
+    desc?: string;
+    vendorId: number;
+    vendor: Vendor;
+    refundWindowDays: number;
+    status: RefundPolicyStatus;
+    type: RefundPolicyType$1;
+    value: number;
+    /** Day bands before event start → refund % (when type is event_tiers). */
+    tiers?: RefundPolicyTierRow[] | null;
+    productConfigs: ProductConfig[];
+}
+
+declare class ProductConfig {
     id: number;
     productId: number;
     taxId: number;
+    refundPolicyId: number | null;
     rate: number | null;
     createdAt: Date;
     updatedAt: Date;
     product: Product;
     tax: Tax;
+    refundPolicy: RefundPolicy | null;
+}
+
+type ProductVariantStatus = 'draft' | 'available' | 'reserved' | 'sold';
+/** Option dimensions (Color, Size, …) plus optional `image_url` for PDP image switching. */
+type ProductVariantAttributes = Record<string, string>;
+declare class ProductVariant {
+    id: number;
+    productId: number;
+    sku: string | null;
+    price: number | null;
+    compareAtPrice: number | null;
+    currencyPrices: Record<string, number> | null;
+    inventory: number;
+    status: ProductVariantStatus;
+    attributes: ProductVariantAttributes | null;
+    imageUrls: string[] | null;
+    createdAt: Date;
+    updatedAt: Date;
+    product: Product;
 }
 
 declare class Product {
@@ -1740,8 +1985,11 @@ declare class Product {
     type: 'product' | 'service';
     slug: string | null;
     name: string | null;
+    /** Optional display title (kept in sync with `name` by the products API). */
+    title: string | null;
     price: number;
     compareAtPrice: number | null;
+    currencyPrices: Record<string, number> | null;
     quantity: number;
     status: 'draft' | 'available' | 'reserved' | 'sold';
     featured: boolean;
@@ -1754,13 +2002,17 @@ declare class Product {
     updatedBy: number | null;
     deletedBy: number | null;
     seoId: number | null;
+    /** CMS form used for product checkout / attendee capture. */
+    contactFormId: number | null;
     vendor: Vendor;
     seo: Seo | null;
+    contactForm: Form | null;
     collection: Collection | null;
     brand: Brand | null;
     category: ProductCategory | null;
     attributes: ProductAttribute[];
-    taxes: ProductTax[];
+    taxes: ProductConfig[];
+    variants: ProductVariant[];
 }
 
 declare class OrderItem {
@@ -1768,6 +2020,8 @@ declare class OrderItem {
     orderId: number;
     productId: number;
     discountIds: number[];
+    vendorId: number | null;
+    vendor: Vendor | null;
     quantity: number;
     unitPrice: number;
     subTotal: number;
@@ -1789,6 +2043,13 @@ declare class OrderItem {
     product: Product;
 }
 
+declare enum PaymentStatus {
+    Unpaid = "unpaid",
+    Paid = "paid",
+    Pending = "pending",
+    Failed = "failed",
+    Refunded = "refunded"
+}
 declare class Payment {
     id: number;
     vendorId: number;
@@ -1796,7 +2057,7 @@ declare class Payment {
     contactId: number | null;
     amount: number;
     currency: string;
-    status: 'pending' | 'processing' | 'completed' | 'failed' | 'refunded';
+    status: PaymentStatus;
     method: string | null;
     externalReference: string | null;
     metadata: Record<string, unknown> | null;
@@ -1812,107 +2073,1109 @@ declare class Payment {
     order: Order;
     contact: Contact | null;
 }
-
-declare enum AddressType {
-    SHIPPING_ADDRESS = "shipping_address",
-    BILLING_ADDRESS = "billing_address"
+
+declare enum AddressType {
+    SHIPPING_ADDRESS = "shipping_address",
+    BILLING_ADDRESS = "billing_address"
+}
+declare class OrderAddresses {
+    id: number;
+    contactId: number;
+    addressType: AddressType;
+    line1: string;
+    line2: string | null;
+    city: string;
+    state: string;
+    postalCode: string;
+    country: string;
+    createdAt: Date;
+    updatedAt: Date;
+    contact: Contact;
+    billingOrders: Order[];
+    shippingOrders: Order[];
+}
+
+declare class Customer {
+    id: number;
+    userId: number;
+    user: User | null;
+    name: string;
+    email: string;
+    phone: string;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+}
+
+declare class Customer_Contacts {
+    id: number;
+    customerId: number;
+    customer: Customer;
+    contactId: number;
+    contact: Contact;
+}
+
+type OrderKind = 'sale' | 'return' | 'replacement';
+declare enum OrderStatus {
+    Pending = "pending",
+    Confirmed = "confirmed",
+    Processing = "processing",
+    Completed = "completed",
+    Cancelled = "cancelled"
+}
+declare class Order {
+    id: number;
+    vendorId: number;
+    orderNumber: string;
+    qrToken: string | null;
+    orderKind: OrderKind;
+    parentOrderId: number | null;
+    contactId: number;
+    /** Junction row linking the account customer to the checkout contact (storefront checkout). */
+    customerContactId: number | null;
+    billingAddressId: number | null;
+    shippingAddressId: number | null;
+    status: OrderStatus;
+    subtotal: number;
+    tax: number;
+    discount: number;
+    total: number;
+    currency: string;
+    metadata: Record<string, unknown> | null;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    vendor: Vendor;
+    parentOrder: Order | null;
+    children: Order[];
+    contact: Contact;
+    customerContact: Customer_Contacts | null;
+    billingAddress: OrderAddresses | null;
+    shippingAddress: OrderAddresses | null;
+    items: OrderItem[];
+    payments: Payment[];
+}
+
+declare class ChatMessage {
+    id: number;
+    conversationId: number;
+    role: 'user' | 'assistant' | 'system';
+    content: string;
+    createdAt: Date;
+    conversation: ChatConversation;
+}
+
+declare class ChatConversation {
+    id: number;
+    contactId: number;
+    createdAt: Date;
+    updatedAt: Date;
+    /** Set when a chat lead email was sent for this conversation (intent tool). */
+    leadEmailSentAt: Date | null;
+    contact: Contact;
+    messages: ChatMessage[];
+}
+
+declare class Contact {
+    id: number;
+    name: string;
+    email: string;
+    phone: string | null;
+    type: string | null;
+    company: string | null;
+    taxId: string | null;
+    notes: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    userId: number | null;
+    user: User | null;
+    form_submissions: FormSubmission[];
+    addresses: Address[];
+    orders: Order[];
+    payments: Payment[];
+    chatConversations: ChatConversation[];
+    orderAddresses: OrderAddresses[];
+}
+
+declare class FormSubmission {
+    id: number;
+    formId: number;
+    contactId: number | null;
+    data: Record<string, unknown>;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    form: Form;
+    contact: Contact | null;
+}
+
+declare class Form {
+    id: number;
+    name: string;
+    description: string | null;
+    campaign: string | null;
+    slug: string;
+    published: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    fields: FormField[];
+    submissions: FormSubmission[];
+}
+
+declare class EventProduct {
+    id: number;
+    eventId: number;
+    productId: number;
+    displayOrder: number;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    event: Event;
+    product: Product;
+}
+
+type EventSocialMediaLinks = {
+    facebook?: string;
+    instagram?: string;
+    linkedin?: string;
+    youtube?: string;
+    twitter?: string;
+    tiktok?: string;
+    whatsapp?: string;
+};
+type EventPricingType = 'free' | 'paid';
+type EventEntityMode = 'inperson' | 'online' | 'hybrid';
+type EventVisibility = 'public' | 'private';
+type EventOrderNotificationChannel$1 = 'email' | 'whatsapp';
+type EventOrderTemplateOverride$1 = {
+    subject?: string;
+    body?: string;
+    externalTemplateRef?: string;
+};
+type EventOrderNotificationTemplates = Partial<Record<EventOrderNotificationChannel$1, EventOrderTemplateOverride$1>>;
+declare class Event {
+    id: number;
+    vendorId: number | null;
+    name: string;
+    slug: string;
+    description: string | null;
+    expectedSpeakers: number | null;
+    expectedParticipants: number | null;
+    isActive: boolean;
+    comingSoon: boolean;
+    bannerImageUrl: string | null;
+    logoUrl: string | null;
+    venue: string | null;
+    additionalVenueDetails: string | null;
+    visibility: EventVisibility;
+    startDate: Date | null;
+    endDate: Date | null;
+    registrationOpensAt: Date | null;
+    registrationClosesAt: Date | null;
+    pricingType: EventPricingType | null;
+    entityTypes: string[] | null;
+    entityMode: EventEntityMode | null;
+    city: string | null;
+    country: string | null;
+    cityCountry: string | null;
+    defaultCurrency: string | null;
+    supportedCurrencies: string[] | null;
+    timezone: string | null;
+    socialMediaLinks: EventSocialMediaLinks | null;
+    officialWebsiteUrl: string | null;
+    supportContact: string | null;
+    allowGroupOrders: boolean;
+    sendIndividualTicketPDFToAttendees: boolean;
+    /** Send email/WhatsApp when an order containing this event's products is created. */
+    orderNotificationsEnabled: boolean;
+    /** Enabled channels, e.g. ["email","whatsapp"]. */
+    orderNotificationChannels: EventOrderNotificationChannel$1[] | null;
+    /** Per-event template overrides keyed by channel. */
+    orderNotificationTemplates: EventOrderNotificationTemplates | null;
+    /** CMS contact/attendee form used for this event's registration checkout. */
+    contactFormId: number | null;
+    /** GST / tax applied to event ticket sales. */
+    taxId: number | null;
+    /** Optional return/refund policy applied when cancelling orders for this event. */
+    refundPolicyId: number | null;
+    taxRate: number | null;
+    maxGroupPurchaseQuantity: number | null;
+    sponsors: Record<string, unknown> | unknown[] | null;
+    agenda: Record<string, unknown> | unknown[] | null;
+    workshops: Record<string, unknown> | unknown[] | null;
+    exhibitors: Record<string, unknown> | unknown[] | null;
+    partners: Record<string, unknown> | unknown[] | null;
+    speakers: Record<string, unknown> | unknown[] | null;
+    sortOrder: number;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+    deleted: boolean;
+    createdBy: number | null;
+    updatedBy: number | null;
+    deletedBy: number | null;
+    vendor: Vendor | null;
+    contactForm: Form | null;
+    tax: Tax | null;
+    refundPolicy: RefundPolicy | null;
+    eventProducts: EventProduct[];
+}
+
+type OrderLineForTemplate = {
+    name: string;
+    quantity: number;
+    total: number | string;
+    currency: string;
+};
+declare function buildEventOrderTemplateVariables(input: {
+    event: Event;
+    order: {
+        orderNumber: string;
+        total: number | string;
+        currency: string;
+        qrToken?: string | null;
+    };
+    contact: {
+        name?: string | null;
+        email?: string | null;
+        phone?: string | null;
+    };
+    productNames: string;
+    orderLines?: OrderLineForTemplate[];
+    siteUrl?: string;
+}): Record<string, string>;
+
+declare const EVENT_ORDER_TEMPLATE_KEY = "eventOrderPlaced";
+type EventOrderNotificationChannel = 'email' | 'whatsapp';
+type EventOrderTemplateOverride = {
+    subject?: string;
+    body?: string;
+    externalTemplateRef?: string;
+};
+type EventOrderMessageTemplateDefault = {
+    channel: EventOrderNotificationChannel;
+    templateKey: string;
+    name: string;
+    subject?: string;
+    body: string;
+    externalTemplateRef?: string;
+};
+/** Variables available in email HTML and WhatsApp text templates. */
+declare const EVENT_ORDER_TEMPLATE_VARIABLES: readonly ["eventName", "eventSlug", "venue", "startDate", "orderNumber", "orderTotal", "currency", "customerName", "customerEmail", "customerPhone", "productNames", "trackUrl", "qrImageUrl", "orderDetails", "orderDetailsHtml"];
+declare const EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS: EventOrderMessageTemplateDefault[];
+type ResolvedEventOrderTemplate = {
+    subject?: string;
+    body: string;
+    externalTemplateRef?: string;
+    enabled: boolean;
+};
+declare function resolveEventOrderTemplate(channel: EventOrderNotificationChannel, getRow: (channel: string, key: string) => Promise<{
+    subject: string | null;
+    body: string;
+    externalTemplateRef: string | null;
+    enabled: boolean;
+} | null>, eventOverride?: EventOrderTemplateOverride | null): Promise<ResolvedEventOrderTemplate | null>;
+
+interface DispatchEventOrderNotificationsDeps {
+    dataSource: DataSource;
+    entityMap: Record<string, unknown>;
+    getCms: () => Promise<CmsAppLike$3>;
+}
+
+declare function dispatchEventOrderNotifications(orderId: number, deps: DispatchEventOrderNotificationsDeps): Promise<void>;
+
+type CaptchaProviderId = 'turnstile' | 'recaptcha_v3';
+interface CaptchaPublicConfig {
+    enabled: boolean;
+    activeProvider: CaptchaProviderId | null;
+    siteKey: string | null;
+    availableProviders: Array<{
+        id: CaptchaProviderId;
+        siteKey: string;
+    }>;
+    multipleProviders: boolean;
+}
+type CaptchaVerifyResult = {
+    ok: true;
+} | {
+    ok: false;
+    status: number;
+    message: string;
+};
+declare function buildCaptchaPublicConfig(config: Record<string, string>): CaptchaPublicConfig;
+declare class CaptchaService {
+    private readonly env;
+    constructor(env: Record<string, string>);
+    isEnforced(): boolean;
+    getPublicConfig(): CaptchaPublicConfig;
+    verify(body: Record<string, unknown>, req: Request): Promise<CaptchaVerifyResult>;
+}
+
+declare function captchaPlugin(): CmsPlugin<CaptchaService | void>;
+
+type JsonResponse = (body: unknown, init?: {
+    status?: number;
+    headers?: HeadersInit;
+}) => Response;
+declare function assertCaptchaOk(getCms: (() => Promise<{
+    getPlugin: (name: string) => unknown;
+}>) | undefined, body: Record<string, unknown>, req: Request, json: JsonResponse): Promise<Response | null>;
+
+interface LatestArticleFromFeed {
+    title?: string;
+    link?: string;
+    /** Short excerpt */
+    summary?: string;
+    /** Full content if available */
+    content?: string;
+    date: Date;
+    creator?: string;
+    categories?: string[];
+}
+type RssItem = {
+    title?: string;
+    link?: string;
+    pubDate?: string;
+    isoDate?: string;
+    contentSnippet?: string;
+    summary?: string;
+    description?: string;
+    content?: string;
+    creator?: string;
+    'dc:creator'?: string;
+    'content:encoded'?: string;
+    categories?: string[];
+    guid?: string | {
+        _: string;
+    };
+};
+declare function getRssArticleSummaryFromItem(item: RssItem): {
+    summary: string;
+    fullContent: string;
+};
+type BlogGeneratorDraftParseMode = 'json' | 'plaintext';
+interface BlogGeneratorSeoDraft {
+    title: string | null;
+    description: string | null;
+    keywords: string | null;
+    ogTitle: string | null;
+    ogDescription: string | null;
+}
+interface BlogGeneratorBlogDraft {
+    title: string;
+    slug?: string;
+    markdown: string;
+    /** Short plain-text copy for social (e.g. LinkedIn); optional until social LLM step runs. */
+    socialMediaContent?: string | null;
+    categoryName: string | null;
+    seo: BlogGeneratorSeoDraft;
+    /** Suggested tag labels (may not exist in CMS yet). */
+    tags: string[];
+    parseMode: BlogGeneratorDraftParseMode;
+}
+/**
+ * Parses the LLM reply: prefers a single JSON object with blogTitle, blogHtml/blogMarkdown/content, categoryName, seo, …
+ * Falls back to treating the entire string as HTML (or legacy markdown) if JSON parsing fails.
+ */
+declare function parseBlogGeneratorAgentContent(raw: string): BlogGeneratorBlogDraft;
+declare function resolveBlogCategoryIdByName(needle: string | null | undefined, rows: readonly {
+    id: number;
+    name: string;
+}[]): {
+    categoryId: number | null;
+    matched: boolean;
+};
+/**
+ * Minimal user payload: latest item per feed only (system prompt carries writing rules).
+ */
+declare function buildRssUserPromptFromFeeds(feeds: ReadonlyArray<{
+    rssUrl: string;
+    article: LatestArticleFromFeed;
+}>): string;
+/**
+ * User message for the metadata-only LLM step (one blog at a time).
+ */
+declare function buildBlogMetadataUserPrompt(opts: {
+    title: string;
+    markdown: string;
+    categoryNames: readonly string[];
+    tagNames: readonly string[];
+}): string;
+/** Parses JSON from the metadata-enrichment LLM (category, slug, seo, tags). */
+declare function parseBlogMetadataEnrichmentJson(raw: string): {
+    categoryName: string | null;
+    blogSlug: string | null;
+    seo: BlogGeneratorSeoDraft;
+    tags: string[];
+};
+/**
+ * Parses LLM output: prefers HTML + {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR} for multiple articles.
+ * If the model still returns legacy JSON with `blogHtml` / `blogMarkdown`, returns a single draft from that object.
+ */
+declare function parseBlogGeneratorModelOutput(raw: string): BlogGeneratorBlogDraft[];
+declare class BlogGeneratorService {
+    readonly version: "1.0.0";
+    getLatestArticleFromFeed(rssUrl: string): Promise<LatestArticleFromFeed | null>;
+    /** Defaults for the Blog Generator Agent (admin can override per request). */
+    getAgentDefaults(): {
+        agentName: string;
+        systemInstruction: string;
+        validationRules: string;
+    };
+    /**
+     * Second LLM call: one draft at a time — category, URL slug, SEO fields, tags (JSON).
+     */
+    private enrichBlogDraftWithLlmMetadata;
+    /**
+     * Third LLM call: one draft at a time — short social copy (JSON `{ socialMediaContent }`).
+     */
+    private enrichBlogDraftWithLlmSocial;
+    /**
+     * Fetches the latest item for each RSS URL, then calls {@link LlmServiceInterface.chatAgent}.
+     * `userPrompt` is only per-feed source material; rules live in the system prompt.
+     * Expects HTML article fragment(s), optionally separated by {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR}.
+     */
+    generateBlogMarkdownFromRss(params: {
+        llm: LlmServiceInterface;
+        /** Single feed (legacy). */
+        rssUrl?: string;
+        /** One or more feeds; latest item per URL is sent together. Prefer this when multiple URLs. */
+        rssUrls?: readonly string[];
+        systemInstruction?: string;
+        validationRules?: string;
+        /** Reserved for future structured output; writer does not inject categories into the user prompt. */
+        categoryNamesHint?: readonly string[];
+        /** Names of non-deleted tags in CMS (hint for reuse). */
+        tagNamesHint?: readonly string[];
+        /** From optional `llm_agents` row (slug `blog-generator`): model / sampling for the writer step. */
+        llmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+        /** Optional overrides for the metadata step; defaults live in `blog-generator-metadata-defaults.ts`. */
+        metadataSystemInstruction?: string;
+        metadataValidationRules?: string;
+        /** From optional `llm_agents` row (slug `blog-generator-metadata`): model / sampling for metadata only. */
+        metadataLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+        /** Optional overrides for the social-summary step; defaults in `blog-generator-social-defaults.ts`. */
+        socialSystemInstruction?: string;
+        socialValidationRules?: string;
+        /** From optional `llm_agents` row (slug `blog-generator-social`): model / sampling for social copy only. */
+        socialLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+    }): Promise<{
+        agentName: string;
+        feedArticles: Array<{
+            rssUrl: string;
+            article: LatestArticleFromFeed;
+        }>;
+        /** First feed's article (backward compatibility). */
+        article: LatestArticleFromFeed;
+        /** Raw model reply (HTML body per defaults; legacy markdown or JSON still parsed when present). */
+        blogMarkdown: string;
+        blogDrafts: BlogGeneratorBlogDraft[];
+        /** Same as first draft; backward compatibility. */
+        blogDraft: BlogGeneratorBlogDraft;
+    }>;
+}
+
+/** Stable display name; not persisted as DB agent row in v1. */
+declare const BLOG_GENERATOR_AGENT_NAME = "Blog Generator Agent";
+/**
+ * Optional `llm_agents` row: when present and enabled, model / temperature / max_tokens
+ * are applied to {@link LlmServiceInterface.chatAgent} (system + user content still come from blog generator defaults / UI).
+ */
+declare const BLOG_GENERATOR_LLM_AGENT_SLUG = "blog-generator";
+/** Line that separates multiple articles in the model reply (HTML or legacy markdown; must match parser and prompts). */
+declare const BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR = "---BLOG_GENERATOR_NEXT---";
+declare const BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION = "You are a professional financial and business content writer.\n\nYour task is to generate completely original, high-quality blog article(s) from the latest RSS-derived source material in the user message (one block per feed). The user message is factual input only.\n\nIMPORTANT RULES:\n\n1. NEVER copy the RSS article directly.\n2. Rewrite the information into a fresh, human-like article.\n3. Expand the topic with professional insights and explanations.\n4. Maintain a natural editorial tone.\n5. Make the article SEO-friendly.\n6. Use engaging headings and subheadings.\n7. Avoid robotic AI phrasing.\n8. Do not mention that the content came from RSS or feeds.\n9. Preserve factual accuracy from the source material.\n10. The output should feel like a professionally written industry blog.\n\nMULTIPLE FEEDS:\n- If several feeds are provided, compare them: if they largely cover the same story or overlap heavily, produce ONE cohesive article.\n- If they cover clearly different topics or distinct stories, produce MULTIPLE articles (one per distinct story).\n- You may also produce one synthesis plus a short separate angle when that best serves the reader\u2014use your judgment.\n\nWRITING STYLE:\n- Professional\n- Clear\n- Informative\n- Business-focused\n- Human sounding\n- Modern editorial style\n\nARTICLE STRUCTURE (each article \u2014 express in HTML):\n1. Engaging introduction\n2. Industry context\n3. Main developments\n4. Key implications\n5. Expert/business analysis\n6. Conclusion\n\nHTML STRUCTURE (STRICT \u2014 each article must be valid, semantic HTML only):\n- Output HTML only. Do not use Markdown (no # headings, no **bold**, no `code fences`).\n- Wrap each complete article in a single root: <article class=\"blog-post\"> ... </article>\n- Inside <article>, use this outline:\n  - <header><h1 class=\"blog-post-title\">\u2026main title\u2026</h1></header> (exactly one h1 per article)\n  - <section class=\"blog-post-body\"> for all following content\n  - Use <h2> and <h3> for section and subsection titles (never skip levels: h1 \u2192 h2 \u2192 h3).\n  - Use <p> for paragraphs; keep paragraphs focused (avoid huge unbroken text).\n  - Use <ul>/<ol> with <li> for lists where appropriate.\n  - Use <strong> and <em> for emphasis sparingly; use <blockquote> only when quoting or callouts fit.\n- Do not include <html>, <head>, <body>, or document-level wrappers \u2014 only the fragment(s) described above.\n- Do not use <script>, <style>, <iframe>, or inline event handlers. Avoid inline style=\"\" except when essential for accessibility (prefer none).\n- Escape angle brackets in body text if you must mention markup; keep output safe for embedding in a CMS.\n\nCONTENT REQUIREMENTS:\n- Minimum 800 words per article unless source material is very small.\n- Add context around industry trends where appropriate.\n- Explain why the topic matters.\n- Include practical implications for businesses/professionals.\n\nIF RSS CONTENT IS LIMITED:\n- Expand intelligently using general industry knowledge.\n- Keep the article relevant to the original topic.\n- Do not invent fake facts or statistics.\n\nOUTPUT FORMAT (STRICT \u2014 HTML only):\n- Return ONLY the article HTML fragment(s). No JSON, no preamble or postscript (\"Here is your article\u2026\"), no markdown.\n- If you output more than one article, output multiple <article class=\"blog-post\">\u2026</article> blocks in sequence, and between articles put a single line containing exactly this (and nothing else on that line):\n---BLOG_GENERATOR_NEXT---\n- If you output a single article, use one <article> only and do not use that separator line.";
+/**
+ * JSON so {@link parseLlmAgentValidationRules} can attach guardrails and allow long source payloads.
+ * Edit in the admin UI if needed; defaults match product intent.
+ */
+declare const BLOG_GENERATOR_DEFAULT_VALIDATION_RULES: string;
+
+/**
+ * Second-step LLM: classifies one finished HTML blog body into CMS fields (category, SEO, tags).
+ *
+ * Optional `llm_agents` row: slug {@link BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG} — when present and enabled,
+ * model / temperature / max_tokens apply to this call only (writer step uses `blog-generator`).
+ *
+ * To change how metadata is produced, edit the constants in this file (system instruction + validation JSON).
+ * No admin UI override is wired yet; add request body fields in `cms-api-handler` if you need runtime overrides later.
+ */
+declare const BLOG_METADATA_ENRICHER_AGENT_NAME = "Blog Generator Metadata";
+/** `llm_agents.slug` for routing model/temperature for the metadata-only chat step. */
+declare const BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG = "blog-generator-metadata";
+declare const BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION = "You are a careful CMS metadata assistant for a publishing system.\n\nYou receive ONE complete blog post as HTML (title is usually in <h1 class=\"blog-post-title\"> or the first <h1>). Your job is to propose structured fields so an editor can save the post: category, URL slug, SEO block, and topical tags.\n\nRULES:\n1. Read the whole article and infer the primary topic and audience.\n2. categoryName must be EXACTLY one string from AVAILABLE_BLOG_CATEGORIES in the user message, or \"\" if none fit.\n3. blogSlug: lowercase kebab-case, ASCII letters/digits/hyphens only, no leading/trailing hyphens, max ~80 chars. Derive from the main topic or title.\n4. seo.title: concise meta title (~50\u201360 characters when reasonable).\n5. seo.description: meta description (~150\u2013160 characters when reasonable), plain text.\n6. seo.keywords: comma-separated phrases, no stuffing.\n7. seo.ogTitle / seo.ogDescription: may mirror title/description or be slightly adapted for social.\n8. tags: 4\u201310 short labels (1\u20133 words each). Prefer exact matches from EXISTING_TAG_NAMES when they truly apply; otherwise invent precise new labels (they may be created in the CMS later).\n9. Do not invent statistics, quotes, or URLs not implied by the article.\n10. Output JSON only \u2014 no markdown outside the JSON, no commentary.\n\nOUTPUT FORMAT (STRICT):\nReturn a single JSON object only. Do not wrap it in a markdown code fence.\n\n{\n  \"categoryName\": \"string \u2014 exact match from list or empty string\",\n  \"blogSlug\": \"string \u2014 url-safe kebab-case\",\n  \"seo\": {\n    \"title\": \"string or empty\",\n    \"description\": \"string or empty\",\n    \"keywords\": \"string or empty\",\n    \"ogTitle\": \"string or empty\",\n    \"ogDescription\": \"string or empty\"\n  },\n  \"tags\": [\"tag-one\", \"tag-two\"]\n}";
+declare const BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES: string;
+
+interface BlogGeneratorPluginConfig {
+    /** Set to false to skip registering the plugin. */
+    enabled?: boolean;
+}
+declare function blogGeneratorPlugin(config?: BlogGeneratorPluginConfig): CmsPlugin<BlogGeneratorService | undefined>;
+
+interface SocialMediaApiConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
+    encryptionKey?: string;
+    /** Used to resolve relative cover image URLs (e.g. https://mysite.com). */
+    publicSiteUrl?: string;
+    /**
+     * When true (default), `console.info` / `console.warn` lines are emitted for LinkedIn blog publish
+     * (text vs image path, sizes, errors). Set false or `CMS_LINKEDIN_PUBLISH_LOG=0` to silence.
+     */
+    linkedInPublishLogging?: boolean;
+}
+declare function createSocialMediaHandlers(config: SocialMediaApiConfig): {
+    getLinkedInStatus(req: Request): Promise<Response>;
+    fetchLinkedInOrganizations(req: Request): Promise<Response>;
+    syncLinkedInProfile(req: Request): Promise<Response>;
+    publishBlogToLinkedIn(req: Request, blogId: number): Promise<Response>;
+    getFacebookStatus(req: Request): Promise<Response>;
+    publishBlogToFacebook(req: Request, blogId: number): Promise<Response>;
+    /**
+     * POST JSON `{ appId, appSecret, userAccessToken }`. Calls Graph `GET /me/accounts` with the user token.
+     * App ID and secret are validated but not used yet (reserved for future token flows).
+     * Persist credentials via Plugins → Save: `meta_app_id` (public), `meta_app_secret` and `meta_user_access_token` (encrypted).
+     */
+    fetchFacebookManagedPages(req: Request): Promise<Response>;
+};
+
+/**
+ * Meta (Facebook) Graph API helpers (server-side). Uses fetch — no SDK.
+ * @see https://developers.facebook.com/docs/graph-api/reference/user/accounts
+ */
+type FacebookPageAccount = {
+    access_token?: string;
+    category?: string;
+    name?: string;
+    id?: string;
+    /** Graph may return additional fields */
+    [key: string]: unknown;
+};
+type FacebookMeAccountsResponse = {
+    data?: FacebookPageAccount[];
+    paging?: Record<string, unknown>;
+    error?: {
+        message?: string;
+        type?: string;
+        code?: number;
+        fbtrace_id?: string;
+    };
+};
+/**
+ * Lists Facebook Pages the user manages (page access tokens + metadata).
+ * Requires a User access token with `pages_show_list` or equivalent page permissions.
+ */
+declare function metaFetchUserManagedPages(userAccessToken: string): Promise<FacebookMeAccountsResponse>;
+type MetaGraphMutationResponse = {
+    id?: string;
+    post_id?: string;
+    error?: {
+        message?: string;
+        type?: string;
+        code?: number;
+        fbtrace_id?: string;
+    };
+};
+/** Resolves the long-lived page access token for a Page ID from `/me/accounts` data. */
+declare function metaResolvePageAccessToken(accounts: FacebookMeAccountsResponse, pageId: string): string | null;
+/**
+ * Upload a photo to a Page timeline (multipart).
+ * @see https://developers.facebook.com/docs/graph-api/reference/page/photos#Creating
+ */
+declare function metaPostPagePhoto(opts: {
+    pageId: string;
+    pageAccessToken: string;
+    imageBuffer: Buffer;
+    contentType: string;
+    caption: string;
+}): Promise<MetaGraphMutationResponse>;
+/**
+ * Publish a text-only post to the Page feed (when no JPEG/PNG image is available).
+ * @see https://developers.facebook.com/docs/graph-api/reference/page/feed#Creating
+ */
+declare function metaPostPageFeed(opts: {
+    pageId: string;
+    pageAccessToken: string;
+    message: string;
+}): Promise<MetaGraphMutationResponse>;
+
+interface SocialMediaPluginConfig {
+    /** Set to false to skip registering the plugin instance (API routes still work if wired in the app handler). */
+    enabled?: boolean;
+}
+/**
+ * Optional CMS plugin instance for `getPlugin('social_media')`.
+ * LinkedIn publishing is implemented in {@link createSocialMediaHandlers} and mounted from the CMS API handler.
+ */
+declare function socialMediaPlugin(config?: SocialMediaPluginConfig): CmsPlugin<{
+    name: string;
+} | undefined>;
+
+declare function cn(...inputs: ClassValue[]): string;
+declare function generateSlug(title: string): string;
+declare function validateSlug(slug: string): boolean;
+declare function formatDate(date: Date | string): string;
+declare function formatDateTime(date: Date | string): string;
+declare function formatDateOnly(date: Date | string): string;
+declare function truncateText(text: string, maxLength: number): string;
+
+/** Minimal SEO row shape (DB or API). */
+type SeoLike = {
+    title?: string | null;
+    description?: string | null;
+    keywords?: string | null;
+    ogTitle?: string | null;
+    ogDescription?: string | null;
+    ogImage?: string | null;
+};
+type SeoMetadataOverrides = {
+    title?: string;
+    description?: string;
+    keywords?: string;
+    ogTitle?: string;
+    ogDescription?: string;
+    ogImage?: string;
+};
+/** Per-field: join row wins over slug row. */
+declare function mergeSeoBySlug(join: SeoLike | null | undefined, bySlug: SeoLike | null): SeoLike | null;
+declare function fetchSeoBySlug(dataSource: DataSource, entityMap: EntityMap$2, slug: string): Promise<SeoLike | null>;
+/**
+ * Build Next.js Metadata from merged SEO + optional layers.
+ * `overrides` win over SEO; `fallbacks` apply when SEO (and overrides) omit a field.
+ * Returns a partial object; omit fields so the root layout defaults apply.
+ */
+declare function resolvePublicMetadata(args: {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    slug: string;
+    seoFromJoin?: SeoLike | null;
+    overrides?: SeoMetadataOverrides;
+    fallbacks?: SeoMetadataOverrides;
+    canonicalPath?: string;
+    metadataBase?: URL;
+}): Promise<Metadata>;
+
+/** Links an unclaimed contact (same email, no userId) to the new user after signup or invite. */
+declare function linkUnclaimedContactToUser(dataSource: DataSource, contactsEntity: EntityTarget<ObjectLiteral>, userId: number, email: string): Promise<void>;
+
+type EnsureCustomerUserInput = {
+    id: number;
+    name: string;
+    email: string;
+    phone?: string | null;
+};
+/** Stable unique placeholder when no phone is available (customer.phone is NOT NULL + UNIQUE). */
+declare function customerPhoneForUser(userId: number, phone?: string | null): string;
+/**
+ * Ensures a `customer` row exists for the given user (idempotent by userId / email).
+ * Returns null when customer entity is missing or email belongs to another user.
+ */
+declare function ensureCustomerForUser(dsOrEm: DataSource | EntityManager, customerEntity: EntityTarget<ObjectLiteral>, user: EnsureCustomerUserInput, overrides?: {
+    phone?: string | null;
+}): Promise<{
+    id: number;
+} | null>;
+
+/** Parse stored config value into a list of emails (JSON array, or comma/semicolon-separated string). */
+declare function parseEmailRecipientsFromConfig(raw: string | undefined | null): string[];
+/** Serialize email list for config storage (JSON array in DB). */
+declare function serializeEmailRecipients(emails: string[]): string;
+/** Join for SMTP `to` header (multiple recipients). */
+declare function joinRecipientsForSend(emails: string[]): string | null;
+
+type OtpPurpose = 'login' | 'verify_email' | 'verify_phone';
+type OtpChannel = 'email' | 'sms';
+declare function hashOtpCode(code: string, purpose: string, identifier: string, pepper?: string): string;
+declare function verifyOtpCodeHash(code: string, storedHash: string, purpose: string, identifier: string, pepper?: string): boolean;
+declare function generateNumericOtp(length?: number): string;
+/** Normalize to E.164-like +digits */
+declare function normalizePhoneE164(raw: string, defaultCountryCode?: string): string | null;
+type EntityMap$1 = Record<string, EntityTarget<ObjectLiteral>>;
+declare function countRecentOtpSends(dataSource: DataSource, entityMap: EntityMap$1, purpose: OtpPurpose, identifier: string, since: Date): Promise<number>;
+declare function createOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
+    purpose: OtpPurpose;
+    channel: OtpChannel;
+    identifier: string;
+    code: string;
+    pepper?: string;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+}>;
+declare function verifyAndConsumeOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
+    purpose: OtpPurpose;
+    identifier: string;
+    code: string;
+    pepper?: string;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+}>;
+
+/** Returns true if request is allowed; false if rate limited. */
+declare function allowRateLimit(key: string): Promise<boolean>;
+type ExtraPublicWriteRule = (method: string, segments: string[]) => boolean;
+/** Segments are path parts after `/api/` (e.g. `['form-submissions']`). */
+declare function shouldRateLimitPublicWrite(method: string, segments: string[], extraRule?: ExtraPublicWriteRule): boolean;
+declare function rateLimitKeyForApiRequest(req: Request, segments: string[]): string;
+declare function rateLimitPublicApiIfNeeded(req: Request, method: string, segments: string[], options?: {
+    extraRule?: ExtraPublicWriteRule;
+}): Promise<Response | null>;
+declare function rateLimitCheckoutPost(req: Request): Promise<Response | null>;
+
+interface EntityMapLike$1 {
+    configs: unknown;
+    orders: unknown;
+    order_items: unknown;
+}
+interface SendOrderPlacedEmailDeps {
+    getDataSource: () => Promise<DataSource>;
+    entityMap: EntityMapLike$1;
+    getCms: () => Promise<CmsApp>;
+}
+/** After payment confirmation: email customer + each sales team address from plugin settings. */
+declare function sendOrderPlacedEmailsAfterConfirmation(orderId: number, deps: SendOrderPlacedEmailDeps): Promise<void>;
+
+type VendorOnboardedActivation = 'invite' | 'password';
+type VendorOnboardedKind = 'vendor_onboard' | 'team_invite';
+
+interface EntityMapLike {
+    configs: unknown;
+}
+interface SendVendorOnboardEmailInput {
+    vendorName: string;
+    vendorSlug?: string;
+    ownerName: string;
+    ownerEmail: string;
+    activation: VendorOnboardedActivation;
+    inviteLink?: string;
+    signInLink: string;
+    kind?: VendorOnboardedKind;
+    /** When false, skips owner email but still notifies internal recipients. Default true. */
+    sendToOwner?: boolean;
+}
+interface SendVendorOnboardEmailDeps {
+    getDataSource: () => Promise<DataSource>;
+    entityMap: EntityMapLike;
+    getCms: () => Promise<CmsAppLike$3>;
+}
+/** After vendor onboard / team invite: email owner + platform team from plugin settings. */
+declare function sendVendorOnboardEmails(input: SendVendorOnboardEmailInput, deps: SendVendorOnboardEmailDeps): Promise<{
+    ownerEmailSent: boolean;
+}>;
+
+interface DataSourceManager {
+    getDataSource: () => DataSource;
+    getDataSourceInitialized: () => Promise<DataSource>;
+    resetDataSource: () => void;
+    registerOnReset: (cb: () => void) => void;
+    isConnectionError: (e: unknown) => boolean;
+}
+declare function createDataSourceManager(entityMap: Record<string, unknown>, options?: {
+    databaseUrl?: string;
+    idleTimeoutMillis?: number;
+}): DataSourceManager;
+
+interface SeedEntityMap {
+    users: unknown;
+    user_groups: unknown;
+}
+declare function seedDefaultAdmin(ds: DataSource, entityMap: SeedEntityMap, opts?: {
+    email?: string;
+    password?: string;
+}): Promise<void>;
+
+type UserVendorContext = {
+    vendorIds: number[];
+    activeVendorId: number | null;
+    /** @deprecated legacy vendor_users.role */
+    vendorRole: VendorUserRole | null;
+    vendorRoleId: number | null;
+    vendorRoleName: string | null;
+    isVendorRoleOwner: boolean;
+    vendorEntityPerms: Record<string, EntityPermissionFlags>;
+};
+/** Load vendor membership + active vendor role permissions for session. */
+declare function loadUserVendorContext(dataSource: DataSource, userId: number, preferredVendorId?: number | null): Promise<UserVendorContext>;
+
+/**
+ * Build NextAuth options for credentials auth. App can extend/override via extend().
+ */
+
+interface NextAuthUser {
+    id: number;
+    email: string;
+    name: string | null;
+    password: string | null;
+    blocked?: boolean;
+    deleted?: boolean;
+    groupId?: number | null;
+    adminAccess?: boolean;
+    group?: {
+        name?: string;
+        permissions?: Array<{
+            entity: string;
+            canCreate: boolean;
+            canRead: boolean;
+            canUpdate: boolean;
+            canDelete: boolean;
+        }>;
+    };
+    vendorIds?: number[];
+    activeVendorId?: number | null;
+    vendorRole?: 'owner' | 'staff' | null;
+    vendorRoleId?: number | null;
+    vendorRoleName?: string | null;
+    isVendorRoleOwner?: boolean;
+    vendorEntityPerms?: Record<string, {
+        c: boolean;
+        r: boolean;
+        u: boolean;
+        d: boolean;
+    }>;
+}
+interface AuthorizeOtpInput {
+    identifier: string;
+    channel: 'email' | 'sms';
+    code: string;
 }
-declare class OrderAddresses {
-    id: number;
-    contactId: number;
-    addressType: AddressType;
-    line1: string;
-    line2: string | null;
-    city: string;
-    state: string;
-    postalCode: string;
-    country: string;
-    createdAt: Date;
-    updatedAt: Date;
-    contact: Contact;
-    billingOrders: Order[];
-    shippingOrders: Order[];
+interface NextAuthOptionsConfig {
+    /** Resolve user by email (e.g. from TypeORM). Return null if not found. */
+    getUserByEmail: (email: string) => Promise<NextAuthUser | null>;
+    comparePassword: (plain: string, hash: string) => Promise<boolean>;
+    signInPage?: string;
+    secret?: string;
+    extend?: (options: NextAuthOptions) => NextAuthOptions;
+    /** When false, password CredentialsProvider is omitted. Default true. */
+    enablePasswordLogin?: boolean;
+    /** When true, registers CredentialsProvider id `otp`. Requires authorizeOtp. Default false. */
+    enableOtpLogin?: boolean;
+    /** Validate OTP and return user (same shape as password flow) or null. */
+    authorizeOtp?: (input: AuthorizeOtpInput) => Promise<NextAuthUser | null>;
+    /**
+     * Customer group sign-in policy for credentials/OTP on a shared `/api/auth` route:
+     * - `true` — always allow (dedicated storefront auth)
+     * - `false` — always block
+     * - omitted — auto: allow unless `callbackUrl` targets `/admin` (storefront `/signin` works unchanged)
+     */
+    allowCustomerLogin?: boolean;
 }
+declare function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions;
+/** Storefront sign-in: allows Customer group; use with signInPage `/signin`. */
+declare function getStorefrontNextAuthOptions(config: Omit<NextAuthOptionsConfig, 'allowCustomerLogin'>): NextAuthOptions;
 
-type OrderKind = 'sale' | 'return' | 'replacement';
-declare class Order {
-    id: number;
-    vendorId: number;
-    orderNumber: string;
-    qrToken: string | null;
-    orderKind: OrderKind;
-    parentOrderId: number | null;
-    contactId: number;
-    billingAddressId: number | null;
-    shippingAddressId: number | null;
-    status: 'pending' | 'confirmed' | 'processing' | 'completed' | 'cancelled';
-    subtotal: number;
-    tax: number;
-    discount: number;
-    total: number;
-    currency: string;
-    metadata: Record<string, unknown> | null;
-    createdAt: Date;
-    updatedAt: Date;
-    deletedAt: Date | null;
-    deleted: boolean;
-    createdBy: number | null;
-    updatedBy: number | null;
-    deletedBy: number | null;
-    vendor: Vendor;
-    parentOrder: Order | null;
-    children: Order[];
-    contact: Contact;
-    billingAddress: OrderAddresses | null;
-    shippingAddress: OrderAddresses | null;
-    items: OrderItem[];
-    payments: Payment[];
+/** Attach vendor membership + role permissions for NextAuth (use in app getUserByEmail). */
+declare function enrichUserWithVendorContext(dataSource: DataSource, user: NextAuthUser | null): Promise<NextAuthUser | null>;
+
+/** Merge DB group + vendor_users into session (JWT often missing these). Server/API only. */
+declare function hydrateVendorSessionUser(dataSource: DataSource, user: SessionUser | null | undefined): Promise<SessionUser | null | undefined>;
+
+interface NavItem {
+    id: string;
+    label: string;
+    url: string;
+    openInNewTab?: boolean;
+    /** When set, url is derived from the linked page slug. */
+    pageId?: number;
+    children?: NavItem[];
+}
+interface NavbarConfig {
+    logo: string;
+    items: NavItem[];
+    ctaLabel?: string;
+    ctaUrl?: string;
+    /** Optional variant for theme-specific layout (e.g. "page2"). */
+    variant?: string;
+}
+interface FooterConfig {
+    copyright: string;
+    columns: {
+        title: string;
+        links: {
+            label: string;
+            url: string;
+        }[];
+    }[];
+    socialLinks: {
+        icon: string;
+        url: string;
+    }[];
+    /** When set, footer shows this logo (e.g. same as navbar). */
+    logo?: string;
 }
 
-declare class ChatMessage {
-    id: number;
-    conversationId: number;
-    role: 'user' | 'assistant' | 'system';
-    content: string;
-    createdAt: Date;
-    conversation: ChatConversation;
+interface PublicThemeSettingsPayload {
+    activeThemeId: string;
+    primaryColor: string;
+    secondaryColor: string;
+    navbarConfig: NavbarConfig;
+    footerOverrides: Partial<FooterConfig>;
 }
+declare function loadPublicThemeSettings(config: {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    encryptionKey?: string;
+    defaultActiveThemeId?: string;
+    defaultPrimaryColor?: string;
+    defaultSecondaryColor?: string;
+}): Promise<PublicThemeSettingsPayload>;
 
-declare class ChatConversation {
+/** Normalize a logical media folder path: no leading/trailing slashes, no ".." segments, max length. */
+declare function sanitizeMediaFolderPath(input: unknown): string;
+/** Single path segment for storage (folder name or legacy path segment). */
+declare function sanitizeStorageSegment(name: string): string;
+
+type EntityMap = Record<string, EntityTarget<ObjectLiteral>>;
+/** Build `a/b/c` path under `uploads/` from the chain of folder rows up to root. */
+declare function relativePathFromMediaParentId(dataSource: DataSource, entityMap: EntityMap, parentId: number | null): Promise<string>;
+
+declare const ZIP_MIME_TYPES: Set<string>;
+declare function isZipMedia(mime: string | null | undefined, filename: string): boolean;
+
+/**
+ * Executes `fn` inside a transaction where the PostgreSQL GUC
+ * `app.vendor_id` is set for the duration of that transaction.
+ *
+ * This activates the `vendor_isolation` RLS policy added by the
+ * `VendorRls1775940000000` migration.
+ *
+ * vendorId = 0  →  admin / all-access (policy allows everything)
+ * vendorId > 0  →  only rows whose `vendorId` column matches
+ *
+ * Example:
+ *   const orders = await withVendorRlsContext(dataSource, 4, (ds) =>
+ *     ds.getRepository(Order).find({ where: { deleted: false } })
+ *   );
+ */
+declare function withVendorRlsContext<T>(dataSource: DataSource, vendorId: number, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
+/**
+ * Convenience wrapper: sets admin mode (vendor_id = '0') so all rows are
+ * visible regardless of their vendorId.  Use for platform-admin queries.
+ */
+declare function withAdminRlsContext<T>(dataSource: DataSource, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
+
+type EnsureVendorCustomerDetails = {
+    name: string;
+    email: string;
+    phone?: string | null;
+};
+declare function isCustomerTypeContact(type: unknown): boolean;
+/** Restrict contact list to rows linked in `vendor_customers` with type customer. */
+declare function applyVendorCustomersContactFilter(qb: SelectQueryBuilder<typeorm.ObjectLiteral>, contactAlias: string, scope: VendorScope, vendorIdFilter: number | null): void;
+declare function contactIsVendorCustomer(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<boolean>;
+/** Returns an error message when the contact is not a vendor-linked customer; otherwise null. */
+declare function assertContactAllowedForVendorOrder(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<string | null>;
+declare function resolveVendorIdForContactCheck(scope: VendorScope, bodyOrRow: Record<string, unknown>): number | null;
+/**
+ * When an order is placed for a manually entered customer, ensure they appear in
+ * vendor customers: customer row, vendor_customers link, and contact type.
+ */
+declare function ensureVendorCustomerForOrderContact(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number, details: EnsureVendorCustomerDetails): Promise<void>;
+
+/** One band: refund % when cancellation falls N days before event start. */
+type RefundPolicyTier = {
+    /** Inclusive lower bound (days before event start; 0 = event day). */
+    fromDaysBefore: number;
+    /** Exclusive upper bound, or null for open-ended (e.g. 20+ days). */
+    toDaysBefore: number | null;
+    percentage: number;
+};
+type RefundPolicyType = 'percentage' | 'event_tiers';
+type RefundPolicyLike = {
+    id?: number;
+    type: RefundPolicyType;
+    value: number;
+    refundWindowDays: number;
+    tiers?: RefundPolicyTier[] | null;
+};
+type RefundCalculationResult = {
+    amount: number;
+    percentage: number;
+    daysBeforeEvent: number | null;
+    daysSincePurchase: number | null;
+    policyId: number | null;
+    summary: string;
+    /** Order cancelled without policy-based refund (no policy on event). */
+    directCancellation?: boolean;
+    eventId?: number | null;
+    eventName?: string | null;
+};
+declare function normalizeRefundTiers(raw: unknown): RefundPolicyTier[];
+declare function validateRefundTiers(tiers: RefundPolicyTier[]): string | null;
+declare function daysBeforeEventStart(eventStart: Date, asOf?: Date): number;
+declare function formatTierRange(tier: RefundPolicyTier): string;
+declare function describeEventTierPolicy(tiers: RefundPolicyTier[]): string;
+declare function calculateRefundFromPolicy(policy: RefundPolicyLike | null | undefined, orderTotal: number, options?: {
+    orderCreatedAt?: Date | null;
+    eventStartDate?: Date | null;
+    asOf?: Date;
+}): RefundCalculationResult;
+
+type PolicyRow = RefundPolicyLike & {
     id: number;
-    contactId: number;
+};
+declare function calculateOrderRefundPreview(dataSource: DataSource, entityMap: EntityMap$2, order: {
+    id: number;
+    vendorId?: number | null;
+    total?: number | null;
+    createdAt?: Date | string | null;
+}, asOf?: Date): Promise<RefundCalculationResult & {
+    eventStartDate: string | null;
+    directCancellation: boolean;
+    eventId: number | null;
+    eventName: string | null;
+}>;
+/** @deprecated Use event-attached policy via calculateOrderRefundPreview. */
+declare function findActiveRefundPolicyForVendor(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number | null | undefined): Promise<PolicyRow | null>;
+
+declare class OtpChallenge {
+    id: number;
+    purpose: string;
+    channel: string;
+    identifier: string;
+    codeHash: string;
+    expiresAt: Date;
+    attempts: number;
+    consumedAt: Date | null;
     createdAt: Date;
-    updatedAt: Date;
-    /** Set when a chat lead email was sent for this conversation (intent tool). */
-    leadEmailSentAt: Date | null;
-    contact: Contact;
-    messages: ChatMessage[];
 }
 
-declare class Contact {
+declare class PasswordResetToken {
     id: number;
-    name: string;
     email: string;
-    phone: string | null;
-    type: string | null;
-    company: string | null;
-    taxId: string | null;
-    notes: string | null;
+    token: string;
+    expiresAt: Date;
     createdAt: Date;
-    updatedAt: Date;
-    deletedAt: Date | null;
-    deleted: boolean;
-    createdBy: number | null;
-    updatedBy: number | null;
-    deletedBy: number | null;
-    userId: number | null;
-    user: User | null;
-    form_submissions: FormSubmission[];
-    addresses: Address[];
-    orders: Order[];
-    payments: Payment[];
-    chatConversations: ChatConversation[];
-    orderAddresses: OrderAddresses[];
 }
 
 declare class Config {
@@ -2211,7 +3474,8 @@ declare class RssFeed {
 declare class VendorCustomer {
     id: number;
     vendorId: number;
-    contactId: number;
+    contactId: number | null;
+    customerId: number;
     /** Optional vendor-specific notes about this customer. */
     notes: string | null;
     /** Optional vendor-specific tags/labels. */
@@ -2219,10 +3483,252 @@ declare class VendorCustomer {
     createdAt: Date;
     updatedAt: Date;
     vendor: Vendor;
-    contact: Contact;
+    contact: Contact | null;
+    customer: Customer;
+}
+
+declare enum ComboItemType {
+    FIXED = "fixed",
+    ADDONS = "addons"
+}
+declare class ComboItem {
+    id: number;
+    comboId: number;
+    combo: Combo;
+    productId: number;
+    product: Product;
+    type: ComboItemType;
+}
+
+declare enum ComboStatus {
+    ACTIVE = "active",
+    INACTIVE = "inactive",
+    DRAFT = "draft"
+}
+declare class Combo {
+    id: number;
+    name: string;
+    desc?: string;
+    eventId: number;
+    event: Event;
+    price: number;
+    currencyPrices: Record<string, number> | null;
+    minSelectableItems: number;
+    maxSelectableItems: number;
+    status: ComboStatus;
+    startsAt?: Date;
+    endsAt?: Date;
+    metadata?: Record<string, any>;
+    items: ComboItem[];
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date;
+    deleted: boolean;
+    createdBy?: number;
+    updatedBy?: number;
+    deletedBy?: number;
+}
+
+declare enum RefundMethod {
+    CARD = "card",
+    UPI = "upi",
+    NET_BANKING = "net_banking"
+}
+declare enum RefundRequestStatus {
+    REQUESTED = "requested",
+    APPROVED = "approved",
+    REJECTED = "rejected",
+    REFUNDED = "refunded"
+}
+declare class RefundRequest {
+    id: number;
+    refundPolicyId: number;
+    refundPolicy: RefundPolicy;
+    orderId: number;
+    order: Order;
+    customerId: number;
+    customer: Customer;
+    reason?: string;
+    refundMethod: RefundMethod;
+    status: RefundRequestStatus;
+    expectedRefundAmount: number;
+    approvedRefundAmount?: number;
+}
+
+declare class Attendee {
+    id: number;
+    displayName: string;
+    email: string;
+    contactId: number | null;
+    contact: Contact | null;
 }
 
 /** Map API resource segment (e.g. "blogs", "form_submissions") to entity. Used by CRUD handler. */
 declare const CMS_ENTITY_MAP: Record<string, EntityTarget<typeorm.ObjectLiteral>>;
 
-export { Address, type AnalyticsPluginConfig, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, type BlogGeneratorBlogDraft, type BlogGeneratorDraftParseMode, type BlogGeneratorPluginConfig, type BlogGeneratorSeoDraft, BlogGeneratorService, Brand, CMS_ENTITY_MAP, type CachePluginConfig, type CacheService, type CaptchaProviderId, type CaptchaPublicConfig, CaptchaService, type CaptchaVerifyResult, Cart, CartItem, Category, ChatConversation, ChatMessage, type CmsApp, type CmsPlugin, Collection, Comment, CompanyDetails, Config, Contact, type CreateCmsAppOptions, Currency, CurrencyExchange, type DataSourceManager, Discount, DiscountRules, type ERPPluginConfig, type ERPPluginInstance, ERPSubmissionService, type EmailData, type EmailJobPayload, type EmailPluginConfig, EmailService, type EmailServiceInterface, EmailTemplateName, EmailTemplateResult, EntityCrudAction, EntityMap$2 as EntityMap, type ErpContactSyncInput, type ErpCreateContactPayload, type ErpJobPayload, type ErpPaidOrderDataSource, type ErpPaidOrderEntityMap, type ExtraPublicWriteRule, type FacebookMeAccountsResponse, type FacebookPageAccount, Form, FormField, FormSubmission, JOB_RUNNER_QUEUE, type CmsAppLike as JobRunnerCmsAppLike, type JobRunnerDeps, type JobRunnerPayload, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, type LatestArticleFromFeed, LlmAgent, type LlmAgentOptions, type LlmChatOptions, type LlmEmbeddingProvider, type LlmMessage, type LlmPluginConfig, LlmService, type LlmServiceEmbedOptions, type LlmServiceInterface, type LocalStoragePluginConfig, type Logger, Media, MessageTemplate, type MetaGraphMutationResponse, NextAuthUser, Order, OrderAddresses, OrderDiscounts, OrderItem, type OrderPlacedEmailPayload, OrderPlacedLineItem, OtpChallenge, type OtpChannel, type OtpPurpose, Page, PasswordResetToken, Payment, type PaymentIntent, type PaymentPluginConfig, type PaymentServiceInterface, Permission, type PgBossPluginConfig, PgBossService, type PipelineNames, type PluginContext, Product, ProductAttribute, ProductCategory, ProductTax, type PublicThemeSettingsPayload, type QueuePluginConfig, type QueueService, type RenderEmailOptions, type RenderedEmail, RssArticle, RssFeed, type S3StoragePluginConfig, Seo, type SeoLike, type SeoMetadataOverrides, SessionUser, type SmsJobPayload, type SmsPluginConfig, type SmsProviderChoice, type SmsProviderId, type SmsServiceConfig, type SmsServiceInterface, type SocialMediaPluginConfig, StorageService, Tag, Tax, TemplateContext, User, UserGroup, Vendor, VendorCustomer, VendorUser, Wishlist, WishlistItem, ZIP_MIME_TYPES, allowRateLimit, analyticsPlugin, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, blogGeneratorPlugin, buildBlogMetadataUserPrompt, buildCaptchaPublicConfig, buildCronFromSchedule, buildRssUserPromptFromFeeds, cachePlugin, captchaPlugin, cn, contactIsVendorCustomer, countRecentOtpSends, createCmsApp, createDataSourceManager, createOtpChallenge, createSocialMediaHandlers, emailPlugin, emailTemplates, enrichUserWithVendorContext, ensureScheduleQueueWorker, erpPlugin, fetchSeoBySlug, formatDate, formatDateOnly, formatDateTime, generateNumericOtp, generateSlug, getRssArticleSummaryFromItem, hashOtpCode, hydrateVendorSessionUser, isCustomerTypeContact, isZipMedia, joinRecipientsForSend, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, llmPlugin, loadPublicThemeSettings, loadUserVendorContext, localStoragePlugin, mergeSeoBySlug, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, normalizePhoneE164, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseEmailRecipientsFromConfig, parseHfInferenceEmbeddingBody, paymentPlugin, pgBossPlugin, pgBossScheduleNameForId, queueEmail, queueErp, queueErpCreateContactIfEnabled, queueErpPaidOrderForOrderId, queueJobScheduleNow, queueOrderPlacedEmails, queuePlugin, queueSms, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, registerEmailQueueProcessor, registerErpQueueProcessor, registerJobRunnerWorker, registerSmsQueueProcessor, relativePathFromMediaParentId, renderEmail, renderLayout, resolveBlogCategoryIdByName, resolvePublicMetadata, resolveVendorIdForContactCheck, s3StoragePlugin, sanitizeMediaFolderPath, sanitizeStorageSegment, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, serializeEmailRecipients, shouldRateLimitPublicWrite, smsPlugin, socialMediaPlugin, syncJobScheduleToPgBoss, truncateText, validateScheduleInput, validateSlug, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, withAdminRlsContext, withVendorRlsContext };
+/** Minimal DB handle for RBAC debug (avoids importing `typeorm` in the auth bundle). */
+type RbacDebugDataSource = {
+    query: (sql: string, parameters?: unknown[]) => Promise<unknown>;
+};
+/** Set `CMS_RBAC_DEBUG=true` in `.env` to log permission decisions (server console). */
+declare function isRbacDebugEnabled(): boolean;
+declare function logRbac(message: string, data?: Record<string, unknown>): void;
+declare function summarizeEntityPerms(entityPerms: Record<string, EntityPermissionFlags> | undefined): Record<string, {
+    c: boolean;
+    r: boolean;
+    u: boolean;
+    d: boolean;
+}>;
+interface EntityAccessExplanation {
+    allowed: boolean;
+    reason: string;
+    userSnapshot: Record<string, unknown>;
+}
+/** Same rules as `sessionHasEntityAccess`, but returns why access was granted or denied. */
+declare function explainSessionEntityAccess(user: SessionUser | null | undefined, entity: string, action: EntityCrudAction): EntityAccessExplanation;
+declare function logEntityAccessDecision(dataSource: RbacDebugDataSource | undefined, context: string, user: SessionUser | null | undefined, entity: string, action: EntityCrudAction, extra?: Record<string, unknown>): Promise<void>;
+
+/** Platform super admin (`user_groups.id = 1` or Administrator group). */
+declare const SUPER_ADMIN_GROUP_ID = 1;
+/** Vendor store admin (`user_groups.id = 5` or vendor-linked portal users). */
+declare const VENDOR_ADMIN_GROUP_ID = 5;
+declare function isSuperAdmin(user: SessionUser | null | undefined): boolean;
+declare function isVendorAdmin(user: SessionUser | null | undefined): boolean;
+
+/**
+ * Ensures the Administrator group has full CRUD on every permissionable entity
+ * for the given entity map. Idempotent: upserts per entity.
+ */
+declare function seedAdministratorPermissions(dataSource: DataSource, entityMap: Record<string, unknown>): Promise<void>;
+
+interface CmsMiddlewareRequest {
+    nextUrl: {
+        pathname: string;
+    };
+    url: string;
+    method: string;
+    cookies: {
+        get: (name: string) => {
+            value?: string;
+        } | undefined;
+    };
+    /**
+     * Full Next.js request (e.g. `NextRequest`). When provided, session is resolved via
+     * `getToken()` so chunked `next-auth.session-token.N` cookies work.
+     */
+    req?: Parameters<typeof getToken>[0]['req'];
+}
+interface CmsMiddlewareConfig {
+    publicAdminPaths?: string[];
+    publicApiPaths?: string[];
+    /** path -> allowed methods */
+    publicApiMethods?: Record<string, string[]>;
+    signInPath?: string;
+    /** @deprecated Prefer passing `req` on the request; used only when `req` is omitted. */
+    getSessionToken?: (request: CmsMiddlewareRequest) => string | undefined;
+    secret?: string;
+}
+/** Default public API paths (no auth). Sites should extend this with their own routes. */
+declare const defaultPublicApiMethods: Record<string, string[]>;
+/**
+ * Returns middleware logic. Use from Next.js middleware:
+ *   import { createCmsMiddleware } from '@infuro/cms-core';
+ *   export async function middleware(request: NextRequest) {
+ *     const result = await cmsMiddleware({ ...request fields, req: request });
+ *     ...
+ *   }
+ *   export const config = { matcher: ['/admin/:path*', '/api/:path*'] };
+ */
+declare function createCmsMiddleware(config?: CmsMiddlewareConfig): (request: CmsMiddlewareRequest) => Promise<{
+    type: "next";
+} | {
+    type: "redirect";
+    url: string;
+} | {
+    type: "json";
+    status: number;
+    body: unknown;
+}>;
+
+/** Set `CMS_AUTH_DEBUG=false` to silence server auth logs in development. */
+declare function isAuthDebugEnabled(): boolean;
+/** Browser console logs; set `NEXT_PUBLIC_CMS_AUTH_DEBUG=false` to silence. */
+declare function isAuthDebugClientEnabled(): boolean;
+declare function logAuth(message: string, data?: Record<string, unknown>): void;
+declare function logAuthClient(message: string, data?: Record<string, unknown>): void;
+declare function summarizeSessionUserForLog(user: unknown): Record<string, unknown>;
+declare function nextAuthCookieDebugInfo(): Record<string, unknown>;
+
+type VendorOwnerActivation = 'invite' | 'password';
+interface VendorOnboardHandlersConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    getSessionUser: () => Promise<SessionUser | null>;
+    baseUrl: string;
+    getCms?: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    hashPassword?: (plain: string) => Promise<string>;
+    minPasswordLength?: number;
+}
+declare function createVendorOnboardHandlers(config: VendorOnboardHandlersConfig): {
+    /** POST /api/admin/vendors/onboard — create vendor + owner user + vendor_users + invite */
+    onboard(req: Request): Promise<Response>;
+    /** POST /api/admin/vendor/switch — set active vendor in session (JWT update via client) */
+    switchVendor(req: Request): Promise<Response>;
+    /** GET /api/admin/vendor/team */
+    listTeam(): Promise<Response>;
+    /** POST /api/admin/vendor/team — add staff to vendor */
+    addTeamMember(req: Request): Promise<Response>;
+    /** PATCH /api/admin/vendor/team/:userId — change member store role */
+    updateTeamMemberRole(req: Request, userIdStr: string): Promise<Response>;
+    /** DELETE /api/admin/vendor/team/:userId */
+    removeTeamMember(_req: Request, userIdStr: string): Promise<Response>;
+};
+
+interface StorefrontOtpFlags {
+    login?: boolean;
+    verifyEmail?: boolean;
+    verifyPhone?: boolean;
+}
+interface StorefrontApiConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+        headers?: HeadersInit;
+    }) => Response;
+    getSessionUser: () => Promise<SessionUser | null>;
+    guestCookieName?: string;
+    /** Required for POST storefront/register */
+    hashPassword?: (plain: string) => Promise<string>;
+    /** When set, new registrations are blocked until email is verified and a signup email is sent. */
+    getCms?: () => Promise<{
+        getPlugin: (name: string) => unknown;
+    }>;
+    getCompanyDetails?: () => Promise<CompanyDetails>;
+    /** Origin for verify links (e.g. process.env.NEXTAUTH_URL). Required with getCms for verification URLs. */
+    publicSiteUrl?: string;
+    /** When a flag is true, the corresponding OTP storefront route is enabled. */
+    otpFlags?: StorefrontOtpFlags;
+    /** Defaults to OTP_PEPPER or NEXTAUTH_SECRET. */
+    otpPepper?: string;
+    defaultPhoneCountryCode?: string;
+    /** When false, login OTP send accepts email only (no phone). Default true. */
+    otpAllowPhoneLogin?: boolean;
+}
+declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
+    handle(method: string, path: string[], req: Request): Promise<Response>;
+};
+
+interface AdminNavItem {
+    href: string;
+    label: string;
+    icon?: string;
+}
+declare const DEFAULT_ADMIN_NAV: AdminNavItem[];
+
+export { ADMIN_GROUP_NAME, Address, type AdminNavItem, type AnalyticsHandlerConfig, type AnalyticsPluginConfig, Attendee, Attribute, type AuthHandlersConfig, type AuthHelpers, type AuthorizeOtpInput, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, type BlogBySlugConfig, type BlogGeneratorBlogDraft, type BlogGeneratorDraftParseMode, type BlogGeneratorPluginConfig, type BlogGeneratorSeoDraft, BlogGeneratorService, Brand, CMS_ENTITY_MAP, type CachePluginConfig, type CacheService, type CaptchaProviderId, type CaptchaPublicConfig, CaptchaService, type CaptchaVerifyResult, Cart, CartItem, Category, type ChangePasswordConfig, ChatConversation, ChatMessage, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsApp, type CmsGetter, type CmsMiddlewareConfig, type CmsMiddlewareRequest, type CmsPlugin, Collection, Combo, ComboItem, Comment, type CompanyDetails, Config, Contact, type CreateCmsAppOptions, type CrudHandlerOptions, Currency, CurrencyExchange, Customer, Customer_Contacts, DEFAULT_ADMIN_NAV, type DashboardStatsConfig, type DataSourceManager, Discount, DiscountRules, type ERPPluginConfig, type ERPPluginInstance, ERPSubmissionService, EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, type EcommerceAnalyticsConfig, type EmailData, type EmailJobPayload, type EmailPluginConfig, EmailService, type EmailServiceInterface, type EmailTemplateName, type EmailTemplateResult, type EnsureCustomerUserInput, type EnsureVendorCustomerDetails, type EntityCrudAction, type EntityMap$2 as EntityMap, type EntityPermissionFlags, type ErpContactSyncInput, type ErpCreateContactPayload, type ErpJobPayload, type ErpPaidOrderDataSource, type ErpPaidOrderEntityMap, Event, type EventNotificationHandlersConfig, type EventOrderMessageTemplateHandlersConfig, type EventOrderNotificationChannel$1 as EventOrderNotificationChannel, type EventOrderNotificationTemplates, type EventOrderTemplateOverride$1 as EventOrderTemplateOverride, EventProduct, type ExtraPublicWriteRule, type FacebookMeAccountsResponse, type FacebookPageAccount, type ForgotPasswordConfig, Form, type FormBySlugConfig, FormField, FormSubmission, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type GetSession, type InviteAcceptConfig, JOB_RUNNER_QUEUE, type CmsAppLike as JobRunnerCmsAppLike, type JobRunnerDeps, type JobRunnerPayload, JobSchedule, type JobScheduleApiConfig, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, type LatestArticleFromFeed, LlmAgent, type LlmAgentKnowledgeApiConfig, type LlmAgentOptions, type LlmAgentValidationRulesJson, type LlmChatOptions, type LlmEmbeddingProvider, type LlmMessage, type LlmPluginConfig, LlmService, type LlmServiceEmbedOptions, type LlmServiceInterface, type LocalStoragePluginConfig, type Logger, Media, MessageTemplate, type MetaGraphMutationResponse, type NextAuthOptionsConfig, type NextAuthUser, OPEN_ENDPOINTS, Order, OrderAddresses, OrderDiscounts, OrderItem, type OrderPlacedEmailPayload, type OrderPlacedLineItem, OtpChallenge, type OtpChannel, type OtpPurpose, PERMISSION_REQUIRED_ENDPOINTS, Page, type ParsedLlmAgentValidation, PasswordResetToken, Payment, type PaymentIntent, type PaymentPluginConfig, type PaymentServiceInterface, Permission, type PgBossPluginConfig, PgBossService, type PipelineNames, type PluginContext, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, type PublicThemeSettingsPayload, type QueuePluginConfig, type QueueService, RBAC_ADMIN_ONLY_ENTITIES, type RefundCalculationResult, RefundPolicy, type RefundPolicyLike, type RefundPolicyTier, RefundRequest, type RenderEmailOptions, type RenderedEmail, RssArticle, RssFeed, type S3StoragePluginConfig, SUPER_ADMIN_GROUP_ID, type SendVendorOnboardEmailInput, Seo, type SeoLike, type SeoMetadataOverrides, type SessionUser, type SetPasswordConfig, type SettingsApiConfig, type SmsJobPayload, type SmsPluginConfig, type SmsProviderChoice, type SmsProviderId, type SmsServiceConfig, type SmsServiceInterface, type SocialLinkItem, type SocialMediaPluginConfig, type StorageService, type StorefrontApiConfig, type StorefrontOtpFlags, Tag, Tax, type TemplateContext, type UploadHandlerConfig, User, type UserAuthApiConfig, type UserAvatarConfig, UserGroup, type UserProfileConfig, type UsersApiConfig, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, Vendor, VendorCustomer, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, VendorRole, VendorRolePermission, VendorUser, type WhatsAppJobPayload, type WhatsAppPluginConfig, type WhatsAppServiceConfig, type WhatsAppServiceInterface, Wishlist, WishlistItem, ZIP_MIME_TYPES, allowRateLimit, analyticsPlugin, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, blogGeneratorPlugin, buildBlogMetadataUserPrompt, buildCaptchaPublicConfig, buildCronFromSchedule, buildEventOrderTemplateVariables, buildRssUserPromptFromFeeds, cachePlugin, calculateOrderRefundPreview, calculateRefundFromPolicy, canManageRoles, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, captchaPlugin, cn, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createAuthHelpers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAuthBundle, createCmsMiddleware, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createDataSourceManager, createEcommerceAnalyticsHandler, createEventNotificationHandlers, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForUser, daysBeforeEventStart, defaultPublicApiMethods, describeEventTierPolicy, dispatchEventOrderNotifications, emailPlugin, emailTemplates, enrichUserWithVendorContext, ensureCustomerForUser, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, erpPlugin, explainSessionEntityAccess, fetchSeoBySlug, findActiveRefundPolicyForVendor, formatDate, formatDateOnly, formatDateTime, formatTierRange, generateNumericOtp, generateSlug, getCompanyDetailsFromSettings, getNextAuthOptions, getPermissionableEntityKeys, getPublicSettingsGroup, getRequiredPermission, getRssArticleSummaryFromItem, getStorefrontNextAuthOptions, hasEntityPermission, hashOtpCode, hydrateVendorSessionUser, isAuthDebugClientEnabled, isAuthDebugEnabled, isCustomerTypeContact, isOpenEndpoint, isPlatformAdministrator, isPublicMethod, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, isZipMedia, joinRecipientsForSend, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, llmPlugin, loadPublicThemeSettings, loadUserVendorContext, localStoragePlugin, logAuth, logAuthClient, logEntityAccessDecision, logRbac, mergeEmailLayoutCompanyDetails, mergeGuardrailsIntoSystemPrompt, mergeSeoBySlug, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, nextAuthCookieDebugInfo, normalizePhoneE164, normalizeRefundTiers, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseEmailRecipientsFromConfig, parseHfInferenceEmbeddingBody, parseLlmAgentValidationRules, paymentPlugin, permissionRowsToRecord, pgBossPlugin, pgBossScheduleNameForId, queueEmail, queueErp, queueErpCreateContactIfEnabled, queueErpPaidOrderForOrderId, queueJobScheduleNow, queueOrderPlacedEmails, queuePlugin, queueSms, queueVendorOnboardEmails, queueWhatsApp, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, registerEmailQueueProcessor, registerErpQueueProcessor, registerJobRunnerWorker, registerSmsQueueProcessor, registerWhatsAppQueueProcessor, relativePathFromMediaParentId, renderEmail, renderLayout, resolveBlogCategoryIdByName, resolveEventOrderTemplate, resolvePublicMetadata, resolveVendorIdForContactCheck, resolveVendorScopeFromSessionUser, s3StoragePlugin, sanitizeMediaFolderPath, sanitizeStorageSegment, seedAdministratorPermissions, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, sendVendorOnboardEmails, serializeEmailRecipients, sessionHasEntityAccess, shouldRateLimitPublicWrite, simpleDecrypt, simpleEncrypt, smsPlugin, socialMediaPlugin, summarizeEntityPerms, summarizeSessionUserForLog, syncJobScheduleToPgBoss, truncateText, validateRefundTiers, validateScheduleInput, validateSlug, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, vendorPortalFlagsFromUser, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, withAdminRlsContext, withVendorRlsContext };