@infuro/cms-core 1.0.35 → 1.0.38

package/dist/index.d.cts

@@ -3,6 +3,7 @@ import * as typeorm from 'typeorm';
 import { DataSource, EntityTarget, ObjectLiteral, EntityManager, SelectQueryBuilder } from 'typeorm';
 import { ClassValue } from 'clsx';
 import { Metadata } from 'next';
+import { EventEmitter } from 'events';
 import { NextAuthOptions } from 'next-auth';
 import { getToken } from 'next-auth/jwt';
 
@@ -34,6 +35,8 @@ interface CmsApp {
     dataSource: unknown;
     getPlugin<T = unknown>(name: string): T | undefined;
 }
+/** Merge extra plugin instances on top of an existing CMS app (overlay wins). */
+declare function overlayCmsPlugins(base: CmsApp, plugins: Record<string, unknown>): CmsApp;
 declare function createCmsApp(options: CreateCmsAppOptions): Promise<CmsApp>;
 
 interface ContactFormData {
@@ -527,6 +530,7 @@ interface WhatsAppJobPayload {
     body?: string;
     templateKey?: string;
     externalTemplateRef?: string;
+    templateLanguage?: string;
     variables?: Record<string, string>;
     templateParamOrder?: readonly string[];
 }
@@ -1487,22 +1491,6 @@ declare function createJobScheduleHandlers(apiConfig: JobScheduleApiConfig): {
     listRuns(req: Request, id: string): Promise<Response>;
 };
 
-interface EventNotificationHandlersConfig {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    json: (body: unknown, init?: {
-        status?: number;
-    }) => Response;
-    requireAuth: (req: Request) => Promise<Response | null>;
-    requireEntityPermission?: RequireEntityPermissionFn;
-    getCms?: () => Promise<CmsAppLike$3>;
-}
-declare function createEventNotificationHandlers(config: EventNotificationHandlersConfig): {
-    getSettings(req: Request, id: string): Promise<Response>;
-    updateSettings(req: Request, id: string): Promise<Response>;
-    sendTest(req: Request, id: string): Promise<Response>;
-};
-
 interface EventOrderMessageTemplateHandlersConfig {
     dataSource: DataSource;
     entityMap: EntityMap$2;
@@ -1517,6 +1505,137 @@ declare function createEventOrderMessageTemplateHandlers(config: EventOrderMessa
     PUT(req: Request): Promise<Response>;
 };
 
+declare function cn(...inputs: ClassValue[]): string;
+declare function generateSlug(title: string): string;
+declare function validateSlug(slug: string): boolean;
+declare function formatDate(date: Date | string): string;
+declare function formatDateTime(date: Date | string): string;
+declare function formatDateOnly(date: Date | string): string;
+declare function truncateText(text: string, maxLength: number): string;
+
+/** Minimal SEO row shape (DB or API). */
+type SeoLike = {
+    title?: string | null;
+    description?: string | null;
+    keywords?: string | null;
+    ogTitle?: string | null;
+    ogDescription?: string | null;
+    ogImage?: string | null;
+};
+type SeoMetadataOverrides = {
+    title?: string;
+    description?: string;
+    keywords?: string;
+    ogTitle?: string;
+    ogDescription?: string;
+    ogImage?: string;
+};
+/** Per-field: join row wins over slug row. */
+declare function mergeSeoBySlug(join: SeoLike | null | undefined, bySlug: SeoLike | null): SeoLike | null;
+declare function fetchSeoBySlug(dataSource: DataSource, entityMap: EntityMap$2, slug: string): Promise<SeoLike | null>;
+/**
+ * Build Next.js Metadata from merged SEO + optional layers.
+ * `overrides` win over SEO; `fallbacks` apply when SEO (and overrides) omit a field.
+ * Returns a partial object; omit fields so the root layout defaults apply.
+ */
+declare function resolvePublicMetadata(args: {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    slug: string;
+    seoFromJoin?: SeoLike | null;
+    overrides?: SeoMetadataOverrides;
+    fallbacks?: SeoMetadataOverrides;
+    canonicalPath?: string;
+    metadataBase?: URL;
+}): Promise<Metadata>;
+
+/** Links an unclaimed contact (same email, no userId) to the new user after signup or invite. */
+declare function linkUnclaimedContactToUser(dataSource: DataSource, contactsEntity: EntityTarget<ObjectLiteral>, userId: number, email: string): Promise<void>;
+
+type EnsureCustomerUserInput = {
+    id: number;
+    name: string;
+    email: string;
+    phone?: string | null;
+};
+/** Stable unique placeholder when no phone is available (customer.phone is NOT NULL + UNIQUE). */
+declare function customerPhoneForUser(userId: number, phone?: string | null): string;
+/**
+ * Ensures a `customer` row exists for the given user (idempotent by userId / email).
+ * Returns null when customer entity is missing or email belongs to another user.
+ */
+declare function ensureCustomerForUser(dsOrEm: DataSource | EntityManager, customerEntity: EntityTarget<ObjectLiteral>, user: EnsureCustomerUserInput, overrides?: {
+    phone?: string | null;
+}): Promise<{
+    id: number;
+} | null>;
+
+/** Parse stored config value into a list of emails (JSON array, or comma/semicolon-separated string). */
+declare function parseEmailRecipientsFromConfig(raw: string | undefined | null): string[];
+/** Serialize email list for config storage (JSON array in DB). */
+declare function serializeEmailRecipients(emails: string[]): string;
+/** Join for SMTP `to` header (multiple recipients). */
+declare function joinRecipientsForSend(emails: string[]): string | null;
+
+type OtpPurpose = 'login' | 'verify_email' | 'verify_phone';
+type OtpChannel = 'email' | 'sms';
+declare function hashOtpCode(code: string, purpose: string, identifier: string, pepper?: string): string;
+declare function verifyOtpCodeHash(code: string, storedHash: string, purpose: string, identifier: string, pepper?: string): boolean;
+declare function generateNumericOtp(length?: number): string;
+/** Normalize to E.164-like +digits */
+declare function normalizePhoneE164(raw: string, defaultCountryCode?: string): string | null;
+type EntityMap$1 = Record<string, EntityTarget<ObjectLiteral>>;
+declare function countRecentOtpSends(dataSource: DataSource, entityMap: EntityMap$1, purpose: OtpPurpose, identifier: string, since: Date): Promise<number>;
+declare function createOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
+    purpose: OtpPurpose;
+    channel: OtpChannel;
+    identifier: string;
+    code: string;
+    pepper?: string;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+}>;
+declare function verifyAndConsumeOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
+    purpose: OtpPurpose;
+    identifier: string;
+    code: string;
+    pepper?: string;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+}>;
+
+/** Returns true if request is allowed; false if rate limited. */
+declare function allowRateLimit(key: string): Promise<boolean>;
+type ExtraPublicWriteRule = (method: string, segments: string[]) => boolean;
+/** Segments are path parts after `/api/` (e.g. `['form-submissions']`). */
+declare function shouldRateLimitPublicWrite(method: string, segments: string[], extraRule?: ExtraPublicWriteRule): boolean;
+declare function rateLimitKeyForApiRequest(req: Request, segments: string[]): string;
+declare function rateLimitPublicApiIfNeeded(req: Request, method: string, segments: string[], options?: {
+    extraRule?: ExtraPublicWriteRule;
+}): Promise<Response | null>;
+declare function rateLimitCheckoutPost(req: Request): Promise<Response | null>;
+
+interface EntityMapLike$1 {
+    configs: unknown;
+    orders: unknown;
+    order_items: unknown;
+}
+interface SendOrderPlacedEmailDeps {
+    getDataSource: () => Promise<DataSource>;
+    entityMap: EntityMapLike$1;
+    getCms: () => Promise<CmsApp>;
+}
+/** After payment confirmation: email customer + each sales team address from plugin settings. */
+declare function sendOrderPlacedEmailsAfterConfirmation(orderId: number, deps: SendOrderPlacedEmailDeps): Promise<void>;
+
 declare class Permission {
     id: number;
     groupId: number;
@@ -2265,13 +2384,6 @@ type EventSocialMediaLinks = {
 type EventPricingType = 'free' | 'paid';
 type EventEntityMode = 'inperson' | 'online' | 'hybrid';
 type EventVisibility = 'public' | 'private';
-type EventOrderNotificationChannel$1 = 'email' | 'whatsapp';
-type EventOrderTemplateOverride$1 = {
-    subject?: string;
-    body?: string;
-    externalTemplateRef?: string;
-};
-type EventOrderNotificationTemplates = Partial<Record<EventOrderNotificationChannel$1, EventOrderTemplateOverride$1>>;
 declare class Event {
     id: number;
     vendorId: number | null;
@@ -2305,12 +2417,6 @@ declare class Event {
     supportContact: string | null;
     allowGroupOrders: boolean;
     sendIndividualTicketPDFToAttendees: boolean;
-    /** Send email/WhatsApp when an order containing this event's products is created. */
-    orderNotificationsEnabled: boolean;
-    /** Enabled channels, e.g. ["email","whatsapp"]. */
-    orderNotificationChannels: EventOrderNotificationChannel$1[] | null;
-    /** Per-event template overrides keyed by channel. */
-    orderNotificationTemplates: EventOrderNotificationTemplates | null;
     /** CMS contact/attendee form used for this event's registration checkout. */
     contactFormId: number | null;
     /** GST / tax applied to event ticket sales. */
@@ -2371,6 +2477,7 @@ type EventOrderTemplateOverride = {
     body?: string;
     externalTemplateRef?: string;
 };
+type EventOrderNotificationTemplates = Partial<Record<EventOrderNotificationChannel, EventOrderTemplateOverride>>;
 type EventOrderMessageTemplateDefault = {
     channel: EventOrderNotificationChannel;
     templateKey: string;
@@ -2386,777 +2493,716 @@ type ResolvedEventOrderTemplate = {
     subject?: string;
     body: string;
     externalTemplateRef?: string;
+    name?: string;
+    language?: string;
+    paramOrder?: string[];
     enabled: boolean;
 };
 declare function resolveEventOrderTemplate(channel: EventOrderNotificationChannel, getRow: (channel: string, key: string) => Promise<{
     subject: string | null;
     body: string;
     externalTemplateRef: string | null;
+    name?: string | null;
+    language?: string | null;
+    paramOrder?: string[] | null;
     enabled: boolean;
 } | null>, eventOverride?: EventOrderTemplateOverride | null): Promise<ResolvedEventOrderTemplate | null>;
 
-interface DispatchEventOrderNotificationsDeps {
+interface EmitOrderNotificationTriggerDeps {
     dataSource: DataSource;
     entityMap: Record<string, unknown>;
-    getCms: () => Promise<CmsAppLike$3>;
 }
+declare function emitOrderNotificationTrigger(triggerKey: string, orderId: number, deps: EmitOrderNotificationTriggerDeps, extra?: {
+    refundAmount?: number | null;
+}): Promise<void>;
+/** Fire-and-forget wrapper for API handlers (storefront, CRUD, CMS). */
+declare function fireOrderNotificationTrigger(triggerKey: string, orderId: number, deps: EmitOrderNotificationTriggerDeps, extra?: {
+    refundAmount?: number | null;
+}): void;
 
-declare function dispatchEventOrderNotifications(orderId: number, deps: DispatchEventOrderNotificationsDeps): Promise<void>;
-
-type CaptchaProviderId = 'turnstile' | 'recaptcha_v3';
-interface CaptchaPublicConfig {
-    enabled: boolean;
-    activeProvider: CaptchaProviderId | null;
-    siteKey: string | null;
-    availableProviders: Array<{
-        id: CaptchaProviderId;
-        siteKey: string;
-    }>;
-    multipleProviders: boolean;
-}
-type CaptchaVerifyResult = {
-    ok: true;
-} | {
-    ok: false;
-    status: number;
-    message: string;
-};
-declare function buildCaptchaPublicConfig(config: Record<string, string>): CaptchaPublicConfig;
-declare class CaptchaService {
-    private readonly env;
-    constructor(env: Record<string, string>);
-    isEnforced(): boolean;
-    getPublicConfig(): CaptchaPublicConfig;
-    verify(body: Record<string, unknown>, req: Request): Promise<CaptchaVerifyResult>;
+interface OrderNotificationDispatcherDeps {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    getCms: () => Promise<CmsAppLike$1>;
 }
+declare function initWhatsappTriggerDispatcher(deps: OrderNotificationDispatcherDeps): void;
+/** Manually re-fire a trigger for an existing order (admin testing / resend). */
+declare function resendOrderNotification(triggerKey: string, orderId: number, deps: OrderNotificationDispatcherDeps): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
 
-declare function captchaPlugin(): CmsPlugin<CaptchaService | void>;
+declare const KNOWN_NOTIFICATION_TRIGGERS: {
+    readonly ORDER_PLACED: "order_placed";
+    readonly ORDER_CANCELLED: "order_cancelled";
+};
+interface OrderTriggerPayload {
+    orderId: number;
+    orderNumber: string;
+    customerName: string;
+    customerPhone: string | null;
+    total: number | string;
+    currency: string;
+    vendorId?: number | null;
+    refundAmount?: number | null;
+}
+declare class NotificationTriggerEmitter extends EventEmitter {
+    emitTrigger(triggerKey: string, payload: OrderTriggerPayload): void;
+    onAnyTrigger(listener: (triggerKey: string, payload: OrderTriggerPayload) => void): void;
+}
+declare const notificationTriggerEmitter: NotificationTriggerEmitter;
+
+/** Default order lifecycle triggers — seeded by migration, not tied to the `events` table. */
+declare const DEFAULT_ORDER_NOTIFICATION_TRIGGER_SEEDS: readonly [{
+    readonly triggerKey: "order_placed";
+    readonly label: "Order placed";
+    readonly description: "Fires when a new order is created (storefront checkout or admin).";
+    readonly category: "order";
+    readonly sortOrder: 1;
+}, {
+    readonly triggerKey: "order_cancelled";
+    readonly label: "Order cancelled";
+    readonly description: "Fires when an order is cancelled (includes refund amount when applicable).";
+    readonly category: "order";
+    readonly sortOrder: 2;
+}];
+
+/** @deprecated Use DB catalog `order_notification_triggers`; kept for type hints. */
+declare const ORDER_NOTIFICATION_TRIGGERS: readonly [{
+    readonly key: "order_placed";
+    readonly label: "Order placed";
+}, {
+    readonly key: "order_cancelled";
+    readonly label: "Order cancelled";
+}];
+type OrderNotificationTriggerKey = (typeof ORDER_NOTIFICATION_TRIGGERS)[number]['key'];
 
-type JsonResponse = (body: unknown, init?: {
-    status?: number;
-    headers?: HeadersInit;
-}) => Response;
-declare function assertCaptchaOk(getCms: (() => Promise<{
-    getPlugin: (name: string) => unknown;
-}>) | undefined, body: Record<string, unknown>, req: Request, json: JsonResponse): Promise<Response | null>;
+type VendorOnboardedActivation = 'invite' | 'password';
+type VendorOnboardedKind = 'vendor_onboard' | 'team_invite';
 
-interface LatestArticleFromFeed {
-    title?: string;
-    link?: string;
-    /** Short excerpt */
-    summary?: string;
-    /** Full content if available */
-    content?: string;
-    date: Date;
-    creator?: string;
-    categories?: string[];
+interface EntityMapLike {
+    configs: unknown;
 }
-type RssItem = {
-    title?: string;
-    link?: string;
-    pubDate?: string;
-    isoDate?: string;
-    contentSnippet?: string;
-    summary?: string;
-    description?: string;
-    content?: string;
-    creator?: string;
-    'dc:creator'?: string;
-    'content:encoded'?: string;
-    categories?: string[];
-    guid?: string | {
-        _: string;
-    };
-};
-declare function getRssArticleSummaryFromItem(item: RssItem): {
-    summary: string;
-    fullContent: string;
-};
-type BlogGeneratorDraftParseMode = 'json' | 'plaintext';
-interface BlogGeneratorSeoDraft {
-    title: string | null;
-    description: string | null;
-    keywords: string | null;
-    ogTitle: string | null;
-    ogDescription: string | null;
+interface SendVendorOnboardEmailInput {
+    vendorName: string;
+    vendorSlug?: string;
+    ownerName: string;
+    ownerEmail: string;
+    activation: VendorOnboardedActivation;
+    inviteLink?: string;
+    signInLink: string;
+    kind?: VendorOnboardedKind;
+    /** When false, skips owner email but still notifies internal recipients. Default true. */
+    sendToOwner?: boolean;
 }
-interface BlogGeneratorBlogDraft {
-    title: string;
-    slug?: string;
-    markdown: string;
-    /** Short plain-text copy for social (e.g. LinkedIn); optional until social LLM step runs. */
-    socialMediaContent?: string | null;
-    categoryName: string | null;
-    seo: BlogGeneratorSeoDraft;
-    /** Suggested tag labels (may not exist in CMS yet). */
-    tags: string[];
-    parseMode: BlogGeneratorDraftParseMode;
+interface SendVendorOnboardEmailDeps {
+    getDataSource: () => Promise<DataSource>;
+    entityMap: EntityMapLike;
+    getCms: () => Promise<CmsAppLike$3>;
 }
-/**
- * Parses the LLM reply: prefers a single JSON object with blogTitle, blogHtml/blogMarkdown/content, categoryName, seo, …
- * Falls back to treating the entire string as HTML (or legacy markdown) if JSON parsing fails.
- */
-declare function parseBlogGeneratorAgentContent(raw: string): BlogGeneratorBlogDraft;
-declare function resolveBlogCategoryIdByName(needle: string | null | undefined, rows: readonly {
-    id: number;
-    name: string;
-}[]): {
-    categoryId: number | null;
-    matched: boolean;
-};
-/**
- * Minimal user payload: latest item per feed only (system prompt carries writing rules).
- */
-declare function buildRssUserPromptFromFeeds(feeds: ReadonlyArray<{
-    rssUrl: string;
-    article: LatestArticleFromFeed;
-}>): string;
-/**
- * User message for the metadata-only LLM step (one blog at a time).
- */
-declare function buildBlogMetadataUserPrompt(opts: {
-    title: string;
-    markdown: string;
-    categoryNames: readonly string[];
-    tagNames: readonly string[];
-}): string;
-/** Parses JSON from the metadata-enrichment LLM (category, slug, seo, tags). */
-declare function parseBlogMetadataEnrichmentJson(raw: string): {
-    categoryName: string | null;
-    blogSlug: string | null;
-    seo: BlogGeneratorSeoDraft;
-    tags: string[];
+/** After vendor onboard / team invite: email owner + platform team from plugin settings. */
+declare function sendVendorOnboardEmails(input: SendVendorOnboardEmailInput, deps: SendVendorOnboardEmailDeps): Promise<{
+    ownerEmailSent: boolean;
+}>;
+
+interface DataSourceManager {
+    getDataSource: () => DataSource;
+    getDataSourceInitialized: () => Promise<DataSource>;
+    resetDataSource: () => void;
+    registerOnReset: (cb: () => void) => void;
+    isConnectionError: (e: unknown) => boolean;
+}
+declare function createDataSourceManager(entityMap: Record<string, unknown>, options?: {
+    databaseUrl?: string;
+    idleTimeoutMillis?: number;
+}): DataSourceManager;
+
+interface SeedEntityMap {
+    users: unknown;
+    user_groups: unknown;
+}
+declare function seedDefaultAdmin(ds: DataSource, entityMap: SeedEntityMap, opts?: {
+    email?: string;
+    password?: string;
+}): Promise<void>;
+
+type UserVendorContext = {
+    vendorIds: number[];
+    activeVendorId: number | null;
+    /** @deprecated legacy vendor_users.role */
+    vendorRole: VendorUserRole | null;
+    vendorRoleId: number | null;
+    vendorRoleName: string | null;
+    isVendorRoleOwner: boolean;
+    vendorEntityPerms: Record<string, EntityPermissionFlags>;
 };
+/** Load vendor membership + active vendor role permissions for session. */
+declare function loadUserVendorContext(dataSource: DataSource, userId: number, preferredVendorId?: number | null): Promise<UserVendorContext>;
+
 /**
- * Parses LLM output: prefers HTML + {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR} for multiple articles.
- * If the model still returns legacy JSON with `blogHtml` / `blogMarkdown`, returns a single draft from that object.
+ * Build NextAuth options for credentials auth. App can extend/override via extend().
  */
-declare function parseBlogGeneratorModelOutput(raw: string): BlogGeneratorBlogDraft[];
-declare class BlogGeneratorService {
-    readonly version: "1.0.0";
-    getLatestArticleFromFeed(rssUrl: string): Promise<LatestArticleFromFeed | null>;
-    /** Defaults for the Blog Generator Agent (admin can override per request). */
-    getAgentDefaults(): {
-        agentName: string;
-        systemInstruction: string;
-        validationRules: string;
+
+interface NextAuthUser {
+    id: number;
+    email: string;
+    name: string | null;
+    password: string | null;
+    blocked?: boolean;
+    deleted?: boolean;
+    groupId?: number | null;
+    adminAccess?: boolean;
+    group?: {
+        name?: string;
+        permissions?: Array<{
+            entity: string;
+            canCreate: boolean;
+            canRead: boolean;
+            canUpdate: boolean;
+            canDelete: boolean;
+        }>;
     };
+    vendorIds?: number[];
+    activeVendorId?: number | null;
+    vendorRole?: 'owner' | 'staff' | null;
+    vendorRoleId?: number | null;
+    vendorRoleName?: string | null;
+    isVendorRoleOwner?: boolean;
+    vendorEntityPerms?: Record<string, {
+        c: boolean;
+        r: boolean;
+        u: boolean;
+        d: boolean;
+    }>;
+}
+interface AuthorizeOtpInput {
+    identifier: string;
+    channel: 'email' | 'sms';
+    code: string;
+}
+interface NextAuthOptionsConfig {
+    /** Resolve user by email (e.g. from TypeORM). Return null if not found. */
+    getUserByEmail: (email: string) => Promise<NextAuthUser | null>;
+    comparePassword: (plain: string, hash: string) => Promise<boolean>;
+    signInPage?: string;
+    secret?: string;
+    extend?: (options: NextAuthOptions) => NextAuthOptions;
+    /** When false, password CredentialsProvider is omitted. Default true. */
+    enablePasswordLogin?: boolean;
+    /** When true, registers CredentialsProvider id `otp`. Requires authorizeOtp. Default false. */
+    enableOtpLogin?: boolean;
+    /** Validate OTP and return user (same shape as password flow) or null. */
+    authorizeOtp?: (input: AuthorizeOtpInput) => Promise<NextAuthUser | null>;
     /**
-     * Second LLM call: one draft at a time — category, URL slug, SEO fields, tags (JSON).
-     */
-    private enrichBlogDraftWithLlmMetadata;
-    /**
-     * Third LLM call: one draft at a time — short social copy (JSON `{ socialMediaContent }`).
-     */
-    private enrichBlogDraftWithLlmSocial;
-    /**
-     * Fetches the latest item for each RSS URL, then calls {@link LlmServiceInterface.chatAgent}.
-     * `userPrompt` is only per-feed source material; rules live in the system prompt.
-     * Expects HTML article fragment(s), optionally separated by {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR}.
+     * Customer group sign-in policy for credentials/OTP on a shared `/api/auth` route:
+     * - `true` — always allow (dedicated storefront auth)
+     * - `false` — always block
+     * - omitted — auto: allow unless `callbackUrl` targets `/admin` (storefront `/signin` works unchanged)
      */
-    generateBlogMarkdownFromRss(params: {
-        llm: LlmServiceInterface;
-        /** Single feed (legacy). */
-        rssUrl?: string;
-        /** One or more feeds; latest item per URL is sent together. Prefer this when multiple URLs. */
-        rssUrls?: readonly string[];
-        systemInstruction?: string;
-        validationRules?: string;
-        /** Reserved for future structured output; writer does not inject categories into the user prompt. */
-        categoryNamesHint?: readonly string[];
-        /** Names of non-deleted tags in CMS (hint for reuse). */
-        tagNamesHint?: readonly string[];
-        /** From optional `llm_agents` row (slug `blog-generator`): model / sampling for the writer step. */
-        llmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-        /** Optional overrides for the metadata step; defaults live in `blog-generator-metadata-defaults.ts`. */
-        metadataSystemInstruction?: string;
-        metadataValidationRules?: string;
-        /** From optional `llm_agents` row (slug `blog-generator-metadata`): model / sampling for metadata only. */
-        metadataLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-        /** Optional overrides for the social-summary step; defaults in `blog-generator-social-defaults.ts`. */
-        socialSystemInstruction?: string;
-        socialValidationRules?: string;
-        /** From optional `llm_agents` row (slug `blog-generator-social`): model / sampling for social copy only. */
-        socialLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
-    }): Promise<{
-        agentName: string;
-        feedArticles: Array<{
-            rssUrl: string;
-            article: LatestArticleFromFeed;
-        }>;
-        /** First feed's article (backward compatibility). */
-        article: LatestArticleFromFeed;
-        /** Raw model reply (HTML body per defaults; legacy markdown or JSON still parsed when present). */
-        blogMarkdown: string;
-        blogDrafts: BlogGeneratorBlogDraft[];
-        /** Same as first draft; backward compatibility. */
-        blogDraft: BlogGeneratorBlogDraft;
-    }>;
+    allowCustomerLogin?: boolean;
 }
+declare function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions;
+/** Storefront sign-in: allows Customer group; use with signInPage `/signin`. */
+declare function getStorefrontNextAuthOptions(config: Omit<NextAuthOptionsConfig, 'allowCustomerLogin'>): NextAuthOptions;
 
-/** Stable display name; not persisted as DB agent row in v1. */
-declare const BLOG_GENERATOR_AGENT_NAME = "Blog Generator Agent";
-/**
- * Optional `llm_agents` row: when present and enabled, model / temperature / max_tokens
- * are applied to {@link LlmServiceInterface.chatAgent} (system + user content still come from blog generator defaults / UI).
- */
-declare const BLOG_GENERATOR_LLM_AGENT_SLUG = "blog-generator";
-/** Line that separates multiple articles in the model reply (HTML or legacy markdown; must match parser and prompts). */
-declare const BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR = "---BLOG_GENERATOR_NEXT---";
-declare const BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION = "You are a professional financial and business content writer.\n\nYour task is to generate completely original, high-quality blog article(s) from the latest RSS-derived source material in the user message (one block per feed). The user message is factual input only.\n\nIMPORTANT RULES:\n\n1. NEVER copy the RSS article directly.\n2. Rewrite the information into a fresh, human-like article.\n3. Expand the topic with professional insights and explanations.\n4. Maintain a natural editorial tone.\n5. Make the article SEO-friendly.\n6. Use engaging headings and subheadings.\n7. Avoid robotic AI phrasing.\n8. Do not mention that the content came from RSS or feeds.\n9. Preserve factual accuracy from the source material.\n10. The output should feel like a professionally written industry blog.\n\nMULTIPLE FEEDS:\n- If several feeds are provided, compare them: if they largely cover the same story or overlap heavily, produce ONE cohesive article.\n- If they cover clearly different topics or distinct stories, produce MULTIPLE articles (one per distinct story).\n- You may also produce one synthesis plus a short separate angle when that best serves the reader\u2014use your judgment.\n\nWRITING STYLE:\n- Professional\n- Clear\n- Informative\n- Business-focused\n- Human sounding\n- Modern editorial style\n\nARTICLE STRUCTURE (each article \u2014 express in HTML):\n1. Engaging introduction\n2. Industry context\n3. Main developments\n4. Key implications\n5. Expert/business analysis\n6. Conclusion\n\nHTML STRUCTURE (STRICT \u2014 each article must be valid, semantic HTML only):\n- Output HTML only. Do not use Markdown (no # headings, no **bold**, no `code fences`).\n- Wrap each complete article in a single root: <article class=\"blog-post\"> ... </article>\n- Inside <article>, use this outline:\n  - <header><h1 class=\"blog-post-title\">\u2026main title\u2026</h1></header> (exactly one h1 per article)\n  - <section class=\"blog-post-body\"> for all following content\n  - Use <h2> and <h3> for section and subsection titles (never skip levels: h1 \u2192 h2 \u2192 h3).\n  - Use <p> for paragraphs; keep paragraphs focused (avoid huge unbroken text).\n  - Use <ul>/<ol> with <li> for lists where appropriate.\n  - Use <strong> and <em> for emphasis sparingly; use <blockquote> only when quoting or callouts fit.\n- Do not include <html>, <head>, <body>, or document-level wrappers \u2014 only the fragment(s) described above.\n- Do not use <script>, <style>, <iframe>, or inline event handlers. Avoid inline style=\"\" except when essential for accessibility (prefer none).\n- Escape angle brackets in body text if you must mention markup; keep output safe for embedding in a CMS.\n\nCONTENT REQUIREMENTS:\n- Minimum 800 words per article unless source material is very small.\n- Add context around industry trends where appropriate.\n- Explain why the topic matters.\n- Include practical implications for businesses/professionals.\n\nIF RSS CONTENT IS LIMITED:\n- Expand intelligently using general industry knowledge.\n- Keep the article relevant to the original topic.\n- Do not invent fake facts or statistics.\n\nOUTPUT FORMAT (STRICT \u2014 HTML only):\n- Return ONLY the article HTML fragment(s). No JSON, no preamble or postscript (\"Here is your article\u2026\"), no markdown.\n- If you output more than one article, output multiple <article class=\"blog-post\">\u2026</article> blocks in sequence, and between articles put a single line containing exactly this (and nothing else on that line):\n---BLOG_GENERATOR_NEXT---\n- If you output a single article, use one <article> only and do not use that separator line.";
-/**
- * JSON so {@link parseLlmAgentValidationRules} can attach guardrails and allow long source payloads.
- * Edit in the admin UI if needed; defaults match product intent.
- */
-declare const BLOG_GENERATOR_DEFAULT_VALIDATION_RULES: string;
+declare function enrichUserWithVendorContext(dataSource: DataSource, user: NextAuthUser | null): Promise<NextAuthUser | null>;
 
-/**
- * Second-step LLM: classifies one finished HTML blog body into CMS fields (category, SEO, tags).
- *
- * Optional `llm_agents` row: slug {@link BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG} — when present and enabled,
- * model / temperature / max_tokens apply to this call only (writer step uses `blog-generator`).
- *
- * To change how metadata is produced, edit the constants in this file (system instruction + validation JSON).
- * No admin UI override is wired yet; add request body fields in `cms-api-handler` if you need runtime overrides later.
- */
-declare const BLOG_METADATA_ENRICHER_AGENT_NAME = "Blog Generator Metadata";
-/** `llm_agents.slug` for routing model/temperature for the metadata-only chat step. */
-declare const BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG = "blog-generator-metadata";
-declare const BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION = "You are a careful CMS metadata assistant for a publishing system.\n\nYou receive ONE complete blog post as HTML (title is usually in <h1 class=\"blog-post-title\"> or the first <h1>). Your job is to propose structured fields so an editor can save the post: category, URL slug, SEO block, and topical tags.\n\nRULES:\n1. Read the whole article and infer the primary topic and audience.\n2. categoryName must be EXACTLY one string from AVAILABLE_BLOG_CATEGORIES in the user message, or \"\" if none fit.\n3. blogSlug: lowercase kebab-case, ASCII letters/digits/hyphens only, no leading/trailing hyphens, max ~80 chars. Derive from the main topic or title.\n4. seo.title: concise meta title (~50\u201360 characters when reasonable).\n5. seo.description: meta description (~150\u2013160 characters when reasonable), plain text.\n6. seo.keywords: comma-separated phrases, no stuffing.\n7. seo.ogTitle / seo.ogDescription: may mirror title/description or be slightly adapted for social.\n8. tags: 4\u201310 short labels (1\u20133 words each). Prefer exact matches from EXISTING_TAG_NAMES when they truly apply; otherwise invent precise new labels (they may be created in the CMS later).\n9. Do not invent statistics, quotes, or URLs not implied by the article.\n10. Output JSON only \u2014 no markdown outside the JSON, no commentary.\n\nOUTPUT FORMAT (STRICT):\nReturn a single JSON object only. Do not wrap it in a markdown code fence.\n\n{\n  \"categoryName\": \"string \u2014 exact match from list or empty string\",\n  \"blogSlug\": \"string \u2014 url-safe kebab-case\",\n  \"seo\": {\n    \"title\": \"string or empty\",\n    \"description\": \"string or empty\",\n    \"keywords\": \"string or empty\",\n    \"ogTitle\": \"string or empty\",\n    \"ogDescription\": \"string or empty\"\n  },\n  \"tags\": [\"tag-one\", \"tag-two\"]\n}";
-declare const BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES: string;
+/** Merge DB group + vendor_users into session (JWT often missing these). Server/API only. */
+declare function hydrateVendorSessionUser(dataSource: DataSource, user: SessionUser | null | undefined): Promise<SessionUser | null | undefined>;
+declare function invalidateMultiVendorCache(): void;
+declare function checkMultiVendorEnabled(dataSource: DataSource): Promise<boolean>;
+declare function invalidateEventsCache(): void;
+declare function checkEventsEnabled(dataSource: DataSource): Promise<boolean>;
 
-interface BlogGeneratorPluginConfig {
-    /** Set to false to skip registering the plugin. */
-    enabled?: boolean;
+interface NavItem {
+    id: string;
+    label: string;
+    url: string;
+    openInNewTab?: boolean;
+    /** When set, url is derived from the linked page slug. */
+    pageId?: number;
+    children?: NavItem[];
 }
-declare function blogGeneratorPlugin(config?: BlogGeneratorPluginConfig): CmsPlugin<BlogGeneratorService | undefined>;
-
-interface SocialMediaApiConfig {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    json: (body: unknown, init?: {
-        status?: number;
-    }) => Response;
-    requireAuth: (req: Request) => Promise<Response | null>;
-    requireEntityPermission: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
-    encryptionKey?: string;
-    /** Used to resolve relative cover image URLs (e.g. https://mysite.com). */
-    publicSiteUrl?: string;
-    /**
-     * When true (default), `console.info` / `console.warn` lines are emitted for LinkedIn blog publish
-     * (text vs image path, sizes, errors). Set false or `CMS_LINKEDIN_PUBLISH_LOG=0` to silence.
-     */
-    linkedInPublishLogging?: boolean;
+interface NavbarConfig {
+    logo: string;
+    items: NavItem[];
+    ctaLabel?: string;
+    ctaUrl?: string;
+    /** Optional variant for theme-specific layout (e.g. "page2"). */
+    variant?: string;
+}
+interface FooterConfig {
+    copyright: string;
+    columns: {
+        title: string;
+        links: {
+            label: string;
+            url: string;
+        }[];
+    }[];
+    socialLinks: {
+        icon: string;
+        url: string;
+    }[];
+    /** When set, footer shows this logo (e.g. same as navbar). */
+    logo?: string;
 }
-declare function createSocialMediaHandlers(config: SocialMediaApiConfig): {
-    getLinkedInStatus(req: Request): Promise<Response>;
-    fetchLinkedInOrganizations(req: Request): Promise<Response>;
-    syncLinkedInProfile(req: Request): Promise<Response>;
-    publishBlogToLinkedIn(req: Request, blogId: number): Promise<Response>;
-    getFacebookStatus(req: Request): Promise<Response>;
-    publishBlogToFacebook(req: Request, blogId: number): Promise<Response>;
-    /**
-     * POST JSON `{ appId, appSecret, userAccessToken }`. Calls Graph `GET /me/accounts` with the user token.
-     * App ID and secret are validated but not used yet (reserved for future token flows).
-     * Persist credentials via Plugins → Save: `meta_app_id` (public), `meta_app_secret` and `meta_user_access_token` (encrypted).
-     */
-    fetchFacebookManagedPages(req: Request): Promise<Response>;
-};
-
-/**
- * Meta (Facebook) Graph API helpers (server-side). Uses fetch — no SDK.
- * @see https://developers.facebook.com/docs/graph-api/reference/user/accounts
- */
-type FacebookPageAccount = {
-    access_token?: string;
-    category?: string;
-    name?: string;
-    id?: string;
-    /** Graph may return additional fields */
-    [key: string]: unknown;
-};
-type FacebookMeAccountsResponse = {
-    data?: FacebookPageAccount[];
-    paging?: Record<string, unknown>;
-    error?: {
-        message?: string;
-        type?: string;
-        code?: number;
-        fbtrace_id?: string;
-    };
-};
-/**
- * Lists Facebook Pages the user manages (page access tokens + metadata).
- * Requires a User access token with `pages_show_list` or equivalent page permissions.
- */
-declare function metaFetchUserManagedPages(userAccessToken: string): Promise<FacebookMeAccountsResponse>;
-type MetaGraphMutationResponse = {
-    id?: string;
-    post_id?: string;
-    error?: {
-        message?: string;
-        type?: string;
-        code?: number;
-        fbtrace_id?: string;
-    };
-};
-/** Resolves the long-lived page access token for a Page ID from `/me/accounts` data. */
-declare function metaResolvePageAccessToken(accounts: FacebookMeAccountsResponse, pageId: string): string | null;
-/**
- * Upload a photo to a Page timeline (multipart).
- * @see https://developers.facebook.com/docs/graph-api/reference/page/photos#Creating
- */
-declare function metaPostPagePhoto(opts: {
-    pageId: string;
-    pageAccessToken: string;
-    imageBuffer: Buffer;
-    contentType: string;
-    caption: string;
-}): Promise<MetaGraphMutationResponse>;
-/**
- * Publish a text-only post to the Page feed (when no JPEG/PNG image is available).
- * @see https://developers.facebook.com/docs/graph-api/reference/page/feed#Creating
- */
-declare function metaPostPageFeed(opts: {
-    pageId: string;
-    pageAccessToken: string;
-    message: string;
-}): Promise<MetaGraphMutationResponse>;
 
-interface SocialMediaPluginConfig {
-    /** Set to false to skip registering the plugin instance (API routes still work if wired in the app handler). */
-    enabled?: boolean;
+interface PublicThemeSettingsPayload {
+    activeThemeId: string;
+    primaryColor: string;
+    secondaryColor: string;
+    navbarConfig: NavbarConfig;
+    footerOverrides: Partial<FooterConfig>;
 }
-/**
- * Optional CMS plugin instance for `getPlugin('social_media')`.
- * LinkedIn publishing is implemented in {@link createSocialMediaHandlers} and mounted from the CMS API handler.
- */
-declare function socialMediaPlugin(config?: SocialMediaPluginConfig): CmsPlugin<{
-    name: string;
-} | undefined>;
+declare function loadPublicThemeSettings(config: {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    encryptionKey?: string;
+    defaultActiveThemeId?: string;
+    defaultPrimaryColor?: string;
+    defaultSecondaryColor?: string;
+}): Promise<PublicThemeSettingsPayload>;
 
-declare function cn(...inputs: ClassValue[]): string;
-declare function generateSlug(title: string): string;
-declare function validateSlug(slug: string): boolean;
-declare function formatDate(date: Date | string): string;
-declare function formatDateTime(date: Date | string): string;
-declare function formatDateOnly(date: Date | string): string;
-declare function truncateText(text: string, maxLength: number): string;
+/** Normalize a logical media folder path: no leading/trailing slashes, no ".." segments, max length. */
+declare function sanitizeMediaFolderPath(input: unknown): string;
+/** Single path segment for storage (folder name or legacy path segment). */
+declare function sanitizeStorageSegment(name: string): string;
+
+type EntityMap = Record<string, EntityTarget<ObjectLiteral>>;
+/** Build `a/b/c` path under `uploads/` from the chain of folder rows up to root. */
+declare function relativePathFromMediaParentId(dataSource: DataSource, entityMap: EntityMap, parentId: number | null): Promise<string>;
+
+declare const ZIP_MIME_TYPES: Set<string>;
+declare function isZipMedia(mime: string | null | undefined, filename: string): boolean;
 
-/** Minimal SEO row shape (DB or API). */
-type SeoLike = {
-    title?: string | null;
-    description?: string | null;
-    keywords?: string | null;
-    ogTitle?: string | null;
-    ogDescription?: string | null;
-    ogImage?: string | null;
-};
-type SeoMetadataOverrides = {
-    title?: string;
-    description?: string;
-    keywords?: string;
-    ogTitle?: string;
-    ogDescription?: string;
-    ogImage?: string;
-};
-/** Per-field: join row wins over slug row. */
-declare function mergeSeoBySlug(join: SeoLike | null | undefined, bySlug: SeoLike | null): SeoLike | null;
-declare function fetchSeoBySlug(dataSource: DataSource, entityMap: EntityMap$2, slug: string): Promise<SeoLike | null>;
 /**
- * Build Next.js Metadata from merged SEO + optional layers.
- * `overrides` win over SEO; `fallbacks` apply when SEO (and overrides) omit a field.
- * Returns a partial object; omit fields so the root layout defaults apply.
+ * Executes `fn` inside a transaction where the PostgreSQL GUC
+ * `app.vendor_id` is set for the duration of that transaction.
+ *
+ * This activates the `vendor_isolation` RLS policy added by the
+ * `VendorRls1775940000000` migration.
+ *
+ * vendorId = 0  →  admin / all-access (policy allows everything)
+ * vendorId > 0  →  only rows whose `vendorId` column matches
+ *
+ * Example:
+ *   const orders = await withVendorRlsContext(dataSource, 4, (ds) =>
+ *     ds.getRepository(Order).find({ where: { deleted: false } })
+ *   );
  */
-declare function resolvePublicMetadata(args: {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    slug: string;
-    seoFromJoin?: SeoLike | null;
-    overrides?: SeoMetadataOverrides;
-    fallbacks?: SeoMetadataOverrides;
-    canonicalPath?: string;
-    metadataBase?: URL;
-}): Promise<Metadata>;
-
-/** Links an unclaimed contact (same email, no userId) to the new user after signup or invite. */
-declare function linkUnclaimedContactToUser(dataSource: DataSource, contactsEntity: EntityTarget<ObjectLiteral>, userId: number, email: string): Promise<void>;
+declare function withVendorRlsContext<T>(dataSource: DataSource, vendorId: number, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
+/**
+ * Convenience wrapper: sets admin mode (vendor_id = '0') so all rows are
+ * visible regardless of their vendorId.  Use for platform-admin queries.
+ */
+declare function withAdminRlsContext<T>(dataSource: DataSource, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
 
-type EnsureCustomerUserInput = {
-    id: number;
+type EnsureVendorCustomerDetails = {
     name: string;
     email: string;
     phone?: string | null;
 };
-/** Stable unique placeholder when no phone is available (customer.phone is NOT NULL + UNIQUE). */
-declare function customerPhoneForUser(userId: number, phone?: string | null): string;
+declare function isCustomerTypeContact(type: unknown): boolean;
+/** Restrict contact list to rows linked in `vendor_customers` with type customer. */
+declare function applyVendorCustomersContactFilter(qb: SelectQueryBuilder<typeorm.ObjectLiteral>, contactAlias: string, scope: VendorScope, vendorIdFilter: number | null): void;
+declare function contactIsVendorCustomer(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<boolean>;
+/** Returns an error message when the contact is not a vendor-linked customer; otherwise null. */
+declare function assertContactAllowedForVendorOrder(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<string | null>;
+declare function resolveVendorIdForContactCheck(scope: VendorScope, bodyOrRow: Record<string, unknown>): number | null;
 /**
- * Ensures a `customer` row exists for the given user (idempotent by userId / email).
- * Returns null when customer entity is missing or email belongs to another user.
+ * When an order is placed for a manually entered customer, ensure they appear in
+ * vendor customers: customer row, vendor_customers link, and contact type.
  */
-declare function ensureCustomerForUser(dsOrEm: DataSource | EntityManager, customerEntity: EntityTarget<ObjectLiteral>, user: EnsureCustomerUserInput, overrides?: {
-    phone?: string | null;
-}): Promise<{
-    id: number;
-} | null>;
-
-/** Parse stored config value into a list of emails (JSON array, or comma/semicolon-separated string). */
-declare function parseEmailRecipientsFromConfig(raw: string | undefined | null): string[];
-/** Serialize email list for config storage (JSON array in DB). */
-declare function serializeEmailRecipients(emails: string[]): string;
-/** Join for SMTP `to` header (multiple recipients). */
-declare function joinRecipientsForSend(emails: string[]): string | null;
+declare function ensureVendorCustomerForOrderContact(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number, details: EnsureVendorCustomerDetails): Promise<void>;
 
-type OtpPurpose = 'login' | 'verify_email' | 'verify_phone';
-type OtpChannel = 'email' | 'sms';
-declare function hashOtpCode(code: string, purpose: string, identifier: string, pepper?: string): string;
-declare function verifyOtpCodeHash(code: string, storedHash: string, purpose: string, identifier: string, pepper?: string): boolean;
-declare function generateNumericOtp(length?: number): string;
-/** Normalize to E.164-like +digits */
-declare function normalizePhoneE164(raw: string, defaultCountryCode?: string): string | null;
-type EntityMap$1 = Record<string, EntityTarget<ObjectLiteral>>;
-declare function countRecentOtpSends(dataSource: DataSource, entityMap: EntityMap$1, purpose: OtpPurpose, identifier: string, since: Date): Promise<number>;
-declare function createOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
-    purpose: OtpPurpose;
-    channel: OtpChannel;
-    identifier: string;
-    code: string;
-    pepper?: string;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-    status: number;
-}>;
-declare function verifyAndConsumeOtpChallenge(dataSource: DataSource, entityMap: EntityMap$1, input: {
-    purpose: OtpPurpose;
-    identifier: string;
-    code: string;
-    pepper?: string;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    error: string;
-    status: number;
-}>;
+/** One band: refund % when cancellation falls N days before event start. */
+type RefundPolicyTier = {
+    /** Inclusive lower bound (days before event start; 0 = event day). */
+    fromDaysBefore: number;
+    /** Exclusive upper bound, or null for open-ended (e.g. 20+ days). */
+    toDaysBefore: number | null;
+    percentage: number;
+};
+type RefundPolicyType = 'percentage' | 'event_tiers';
+type RefundPolicyLike = {
+    id?: number;
+    type: RefundPolicyType;
+    value: number;
+    refundWindowDays: number;
+    tiers?: RefundPolicyTier[] | null;
+};
+type RefundCalculationResult = {
+    amount: number;
+    percentage: number;
+    daysBeforeEvent: number | null;
+    daysSincePurchase: number | null;
+    policyId: number | null;
+    summary: string;
+    /** Order cancelled without policy-based refund (no policy on event). */
+    directCancellation?: boolean;
+    eventId?: number | null;
+    eventName?: string | null;
+};
+declare function normalizeRefundTiers(raw: unknown): RefundPolicyTier[];
+declare function validateRefundTiers(tiers: RefundPolicyTier[]): string | null;
+declare function daysBeforeEventStart(eventStart: Date, asOf?: Date): number;
+declare function formatTierRange(tier: RefundPolicyTier): string;
+declare function describeEventTierPolicy(tiers: RefundPolicyTier[]): string;
+declare function calculateRefundFromPolicy(policy: RefundPolicyLike | null | undefined, orderTotal: number, options?: {
+    orderCreatedAt?: Date | null;
+    eventStartDate?: Date | null;
+    asOf?: Date;
+}): RefundCalculationResult;
 
-/** Returns true if request is allowed; false if rate limited. */
-declare function allowRateLimit(key: string): Promise<boolean>;
-type ExtraPublicWriteRule = (method: string, segments: string[]) => boolean;
-/** Segments are path parts after `/api/` (e.g. `['form-submissions']`). */
-declare function shouldRateLimitPublicWrite(method: string, segments: string[], extraRule?: ExtraPublicWriteRule): boolean;
-declare function rateLimitKeyForApiRequest(req: Request, segments: string[]): string;
-declare function rateLimitPublicApiIfNeeded(req: Request, method: string, segments: string[], options?: {
-    extraRule?: ExtraPublicWriteRule;
-}): Promise<Response | null>;
-declare function rateLimitCheckoutPost(req: Request): Promise<Response | null>;
+type PolicyRow = RefundPolicyLike & {
+    id: number;
+};
+declare function calculateOrderRefundPreview(dataSource: DataSource, entityMap: EntityMap$2, order: {
+    id: number;
+    vendorId?: number | null;
+    total?: number | null;
+    createdAt?: Date | string | null;
+}, asOf?: Date): Promise<RefundCalculationResult & {
+    eventStartDate: string | null;
+    directCancellation: boolean;
+    eventId: number | null;
+    eventName: string | null;
+}>;
+/** @deprecated Use event-attached policy via calculateOrderRefundPreview. */
+declare function findActiveRefundPolicyForVendor(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number | null | undefined): Promise<PolicyRow | null>;
 
-interface EntityMapLike$1 {
-    configs: unknown;
-    orders: unknown;
-    order_items: unknown;
+type CaptchaProviderId = 'turnstile' | 'recaptcha_v3';
+interface CaptchaPublicConfig {
+    enabled: boolean;
+    activeProvider: CaptchaProviderId | null;
+    siteKey: string | null;
+    availableProviders: Array<{
+        id: CaptchaProviderId;
+        siteKey: string;
+    }>;
+    multipleProviders: boolean;
 }
-interface SendOrderPlacedEmailDeps {
-    getDataSource: () => Promise<DataSource>;
-    entityMap: EntityMapLike$1;
-    getCms: () => Promise<CmsApp>;
+type CaptchaVerifyResult = {
+    ok: true;
+} | {
+    ok: false;
+    status: number;
+    message: string;
+};
+declare function buildCaptchaPublicConfig(config: Record<string, string>): CaptchaPublicConfig;
+declare class CaptchaService {
+    private readonly env;
+    constructor(env: Record<string, string>);
+    isEnforced(): boolean;
+    getPublicConfig(): CaptchaPublicConfig;
+    verify(body: Record<string, unknown>, req: Request): Promise<CaptchaVerifyResult>;
 }
-/** After payment confirmation: email customer + each sales team address from plugin settings. */
-declare function sendOrderPlacedEmailsAfterConfirmation(orderId: number, deps: SendOrderPlacedEmailDeps): Promise<void>;
-
-type VendorOnboardedActivation = 'invite' | 'password';
-type VendorOnboardedKind = 'vendor_onboard' | 'team_invite';
 
-interface EntityMapLike {
-    configs: unknown;
-}
-interface SendVendorOnboardEmailInput {
-    vendorName: string;
-    vendorSlug?: string;
-    ownerName: string;
-    ownerEmail: string;
-    activation: VendorOnboardedActivation;
-    inviteLink?: string;
-    signInLink: string;
-    kind?: VendorOnboardedKind;
-    /** When false, skips owner email but still notifies internal recipients. Default true. */
-    sendToOwner?: boolean;
-}
-interface SendVendorOnboardEmailDeps {
-    getDataSource: () => Promise<DataSource>;
-    entityMap: EntityMapLike;
-    getCms: () => Promise<CmsAppLike$3>;
-}
-/** After vendor onboard / team invite: email owner + platform team from plugin settings. */
-declare function sendVendorOnboardEmails(input: SendVendorOnboardEmailInput, deps: SendVendorOnboardEmailDeps): Promise<{
-    ownerEmailSent: boolean;
-}>;
+declare function captchaPlugin(): CmsPlugin<CaptchaService | void>;
 
-interface DataSourceManager {
-    getDataSource: () => DataSource;
-    getDataSourceInitialized: () => Promise<DataSource>;
-    resetDataSource: () => void;
-    registerOnReset: (cb: () => void) => void;
-    isConnectionError: (e: unknown) => boolean;
-}
-declare function createDataSourceManager(entityMap: Record<string, unknown>, options?: {
-    databaseUrl?: string;
-    idleTimeoutMillis?: number;
-}): DataSourceManager;
+type JsonResponse = (body: unknown, init?: {
+    status?: number;
+    headers?: HeadersInit;
+}) => Response;
+declare function assertCaptchaOk(getCms: (() => Promise<{
+    getPlugin: (name: string) => unknown;
+}>) | undefined, body: Record<string, unknown>, req: Request, json: JsonResponse): Promise<Response | null>;
 
-interface SeedEntityMap {
-    users: unknown;
-    user_groups: unknown;
+interface LatestArticleFromFeed {
+    title?: string;
+    link?: string;
+    /** Short excerpt */
+    summary?: string;
+    /** Full content if available */
+    content?: string;
+    date: Date;
+    creator?: string;
+    categories?: string[];
 }
-declare function seedDefaultAdmin(ds: DataSource, entityMap: SeedEntityMap, opts?: {
-    email?: string;
-    password?: string;
-}): Promise<void>;
-
-type UserVendorContext = {
-    vendorIds: number[];
-    activeVendorId: number | null;
-    /** @deprecated legacy vendor_users.role */
-    vendorRole: VendorUserRole | null;
-    vendorRoleId: number | null;
-    vendorRoleName: string | null;
-    isVendorRoleOwner: boolean;
-    vendorEntityPerms: Record<string, EntityPermissionFlags>;
+type RssItem = {
+    title?: string;
+    link?: string;
+    pubDate?: string;
+    isoDate?: string;
+    contentSnippet?: string;
+    summary?: string;
+    description?: string;
+    content?: string;
+    creator?: string;
+    'dc:creator'?: string;
+    'content:encoded'?: string;
+    categories?: string[];
+    guid?: string | {
+        _: string;
+    };
 };
-/** Load vendor membership + active vendor role permissions for session. */
-declare function loadUserVendorContext(dataSource: DataSource, userId: number, preferredVendorId?: number | null): Promise<UserVendorContext>;
-
+declare function getRssArticleSummaryFromItem(item: RssItem): {
+    summary: string;
+    fullContent: string;
+};
+type BlogGeneratorDraftParseMode = 'json' | 'plaintext';
+interface BlogGeneratorSeoDraft {
+    title: string | null;
+    description: string | null;
+    keywords: string | null;
+    ogTitle: string | null;
+    ogDescription: string | null;
+}
+interface BlogGeneratorBlogDraft {
+    title: string;
+    slug?: string;
+    markdown: string;
+    /** Short plain-text copy for social (e.g. LinkedIn); optional until social LLM step runs. */
+    socialMediaContent?: string | null;
+    categoryName: string | null;
+    seo: BlogGeneratorSeoDraft;
+    /** Suggested tag labels (may not exist in CMS yet). */
+    tags: string[];
+    parseMode: BlogGeneratorDraftParseMode;
+}
 /**
- * Build NextAuth options for credentials auth. App can extend/override via extend().
+ * Parses the LLM reply: prefers a single JSON object with blogTitle, blogHtml/blogMarkdown/content, categoryName, seo, …
+ * Falls back to treating the entire string as HTML (or legacy markdown) if JSON parsing fails.
  */
-
-interface NextAuthUser {
+declare function parseBlogGeneratorAgentContent(raw: string): BlogGeneratorBlogDraft;
+declare function resolveBlogCategoryIdByName(needle: string | null | undefined, rows: readonly {
     id: number;
-    email: string;
-    name: string | null;
-    password: string | null;
-    blocked?: boolean;
-    deleted?: boolean;
-    groupId?: number | null;
-    adminAccess?: boolean;
-    group?: {
-        name?: string;
-        permissions?: Array<{
-            entity: string;
-            canCreate: boolean;
-            canRead: boolean;
-            canUpdate: boolean;
-            canDelete: boolean;
-        }>;
+    name: string;
+}[]): {
+    categoryId: number | null;
+    matched: boolean;
+};
+/**
+ * Minimal user payload: latest item per feed only (system prompt carries writing rules).
+ */
+declare function buildRssUserPromptFromFeeds(feeds: ReadonlyArray<{
+    rssUrl: string;
+    article: LatestArticleFromFeed;
+}>): string;
+/**
+ * User message for the metadata-only LLM step (one blog at a time).
+ */
+declare function buildBlogMetadataUserPrompt(opts: {
+    title: string;
+    markdown: string;
+    categoryNames: readonly string[];
+    tagNames: readonly string[];
+}): string;
+/** Parses JSON from the metadata-enrichment LLM (category, slug, seo, tags). */
+declare function parseBlogMetadataEnrichmentJson(raw: string): {
+    categoryName: string | null;
+    blogSlug: string | null;
+    seo: BlogGeneratorSeoDraft;
+    tags: string[];
+};
+/**
+ * Parses LLM output: prefers HTML + {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR} for multiple articles.
+ * If the model still returns legacy JSON with `blogHtml` / `blogMarkdown`, returns a single draft from that object.
+ */
+declare function parseBlogGeneratorModelOutput(raw: string): BlogGeneratorBlogDraft[];
+declare class BlogGeneratorService {
+    readonly version: "1.0.0";
+    getLatestArticleFromFeed(rssUrl: string): Promise<LatestArticleFromFeed | null>;
+    /** Defaults for the Blog Generator Agent (admin can override per request). */
+    getAgentDefaults(): {
+        agentName: string;
+        systemInstruction: string;
+        validationRules: string;
     };
-    vendorIds?: number[];
-    activeVendorId?: number | null;
-    vendorRole?: 'owner' | 'staff' | null;
-    vendorRoleId?: number | null;
-    vendorRoleName?: string | null;
-    isVendorRoleOwner?: boolean;
-    vendorEntityPerms?: Record<string, {
-        c: boolean;
-        r: boolean;
-        u: boolean;
-        d: boolean;
-    }>;
-}
-interface AuthorizeOtpInput {
-    identifier: string;
-    channel: 'email' | 'sms';
-    code: string;
-}
-interface NextAuthOptionsConfig {
-    /** Resolve user by email (e.g. from TypeORM). Return null if not found. */
-    getUserByEmail: (email: string) => Promise<NextAuthUser | null>;
-    comparePassword: (plain: string, hash: string) => Promise<boolean>;
-    signInPage?: string;
-    secret?: string;
-    extend?: (options: NextAuthOptions) => NextAuthOptions;
-    /** When false, password CredentialsProvider is omitted. Default true. */
-    enablePasswordLogin?: boolean;
-    /** When true, registers CredentialsProvider id `otp`. Requires authorizeOtp. Default false. */
-    enableOtpLogin?: boolean;
-    /** Validate OTP and return user (same shape as password flow) or null. */
-    authorizeOtp?: (input: AuthorizeOtpInput) => Promise<NextAuthUser | null>;
     /**
-     * Customer group sign-in policy for credentials/OTP on a shared `/api/auth` route:
-     * - `true` — always allow (dedicated storefront auth)
-     * - `false` — always block
-     * - omitted — auto: allow unless `callbackUrl` targets `/admin` (storefront `/signin` works unchanged)
+     * Second LLM call: one draft at a time — category, URL slug, SEO fields, tags (JSON).
      */
-    allowCustomerLogin?: boolean;
-}
-declare function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions;
-/** Storefront sign-in: allows Customer group; use with signInPage `/signin`. */
-declare function getStorefrontNextAuthOptions(config: Omit<NextAuthOptionsConfig, 'allowCustomerLogin'>): NextAuthOptions;
-
-/** Attach vendor membership + role permissions for NextAuth (use in app getUserByEmail). */
-declare function enrichUserWithVendorContext(dataSource: DataSource, user: NextAuthUser | null): Promise<NextAuthUser | null>;
-
-/** Merge DB group + vendor_users into session (JWT often missing these). Server/API only. */
-declare function hydrateVendorSessionUser(dataSource: DataSource, user: SessionUser | null | undefined): Promise<SessionUser | null | undefined>;
-
-interface NavItem {
-    id: string;
-    label: string;
-    url: string;
-    openInNewTab?: boolean;
-    /** When set, url is derived from the linked page slug. */
-    pageId?: number;
-    children?: NavItem[];
-}
-interface NavbarConfig {
-    logo: string;
-    items: NavItem[];
-    ctaLabel?: string;
-    ctaUrl?: string;
-    /** Optional variant for theme-specific layout (e.g. "page2"). */
-    variant?: string;
-}
-interface FooterConfig {
-    copyright: string;
-    columns: {
-        title: string;
-        links: {
-            label: string;
-            url: string;
-        }[];
-    }[];
-    socialLinks: {
-        icon: string;
-        url: string;
-    }[];
-    /** When set, footer shows this logo (e.g. same as navbar). */
-    logo?: string;
-}
-
-interface PublicThemeSettingsPayload {
-    activeThemeId: string;
-    primaryColor: string;
-    secondaryColor: string;
-    navbarConfig: NavbarConfig;
-    footerOverrides: Partial<FooterConfig>;
+    private enrichBlogDraftWithLlmMetadata;
+    /**
+     * Third LLM call: one draft at a time — short social copy (JSON `{ socialMediaContent }`).
+     */
+    private enrichBlogDraftWithLlmSocial;
+    /**
+     * Fetches the latest item for each RSS URL, then calls {@link LlmServiceInterface.chatAgent}.
+     * `userPrompt` is only per-feed source material; rules live in the system prompt.
+     * Expects HTML article fragment(s), optionally separated by {@link BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR}.
+     */
+    generateBlogMarkdownFromRss(params: {
+        llm: LlmServiceInterface;
+        /** Single feed (legacy). */
+        rssUrl?: string;
+        /** One or more feeds; latest item per URL is sent together. Prefer this when multiple URLs. */
+        rssUrls?: readonly string[];
+        systemInstruction?: string;
+        validationRules?: string;
+        /** Reserved for future structured output; writer does not inject categories into the user prompt. */
+        categoryNamesHint?: readonly string[];
+        /** Names of non-deleted tags in CMS (hint for reuse). */
+        tagNamesHint?: readonly string[];
+        /** From optional `llm_agents` row (slug `blog-generator`): model / sampling for the writer step. */
+        llmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+        /** Optional overrides for the metadata step; defaults live in `blog-generator-metadata-defaults.ts`. */
+        metadataSystemInstruction?: string;
+        metadataValidationRules?: string;
+        /** From optional `llm_agents` row (slug `blog-generator-metadata`): model / sampling for metadata only. */
+        metadataLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+        /** Optional overrides for the social-summary step; defaults in `blog-generator-social-defaults.ts`. */
+        socialSystemInstruction?: string;
+        socialValidationRules?: string;
+        /** From optional `llm_agents` row (slug `blog-generator-social`): model / sampling for social copy only. */
+        socialLlmAgentChatOptions?: Pick<LlmAgentOptions, 'model' | 'temperature' | 'max_tokens'>;
+    }): Promise<{
+        agentName: string;
+        feedArticles: Array<{
+            rssUrl: string;
+            article: LatestArticleFromFeed;
+        }>;
+        /** First feed's article (backward compatibility). */
+        article: LatestArticleFromFeed;
+        /** Raw model reply (HTML body per defaults; legacy markdown or JSON still parsed when present). */
+        blogMarkdown: string;
+        blogDrafts: BlogGeneratorBlogDraft[];
+        /** Same as first draft; backward compatibility. */
+        blogDraft: BlogGeneratorBlogDraft;
+    }>;
 }
-declare function loadPublicThemeSettings(config: {
-    dataSource: DataSource;
-    entityMap: EntityMap$2;
-    encryptionKey?: string;
-    defaultActiveThemeId?: string;
-    defaultPrimaryColor?: string;
-    defaultSecondaryColor?: string;
-}): Promise<PublicThemeSettingsPayload>;
-
-/** Normalize a logical media folder path: no leading/trailing slashes, no ".." segments, max length. */
-declare function sanitizeMediaFolderPath(input: unknown): string;
-/** Single path segment for storage (folder name or legacy path segment). */
-declare function sanitizeStorageSegment(name: string): string;
-
-type EntityMap = Record<string, EntityTarget<ObjectLiteral>>;
-/** Build `a/b/c` path under `uploads/` from the chain of folder rows up to root. */
-declare function relativePathFromMediaParentId(dataSource: DataSource, entityMap: EntityMap, parentId: number | null): Promise<string>;
 
-declare const ZIP_MIME_TYPES: Set<string>;
-declare function isZipMedia(mime: string | null | undefined, filename: string): boolean;
+/** Stable display name; not persisted as DB agent row in v1. */
+declare const BLOG_GENERATOR_AGENT_NAME = "Blog Generator Agent";
+/**
+ * Optional `llm_agents` row: when present and enabled, model / temperature / max_tokens
+ * are applied to {@link LlmServiceInterface.chatAgent} (system + user content still come from blog generator defaults / UI).
+ */
+declare const BLOG_GENERATOR_LLM_AGENT_SLUG = "blog-generator";
+/** Line that separates multiple articles in the model reply (HTML or legacy markdown; must match parser and prompts). */
+declare const BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR = "---BLOG_GENERATOR_NEXT---";
+declare const BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION = "You are a professional financial and business content writer.\n\nYour task is to generate completely original, high-quality blog article(s) from the latest RSS-derived source material in the user message (one block per feed). The user message is factual input only.\n\nIMPORTANT RULES:\n\n1. NEVER copy the RSS article directly.\n2. Rewrite the information into a fresh, human-like article.\n3. Expand the topic with professional insights and explanations.\n4. Maintain a natural editorial tone.\n5. Make the article SEO-friendly.\n6. Use engaging headings and subheadings.\n7. Avoid robotic AI phrasing.\n8. Do not mention that the content came from RSS or feeds.\n9. Preserve factual accuracy from the source material.\n10. The output should feel like a professionally written industry blog.\n\nMULTIPLE FEEDS:\n- If several feeds are provided, compare them: if they largely cover the same story or overlap heavily, produce ONE cohesive article.\n- If they cover clearly different topics or distinct stories, produce MULTIPLE articles (one per distinct story).\n- You may also produce one synthesis plus a short separate angle when that best serves the reader\u2014use your judgment.\n\nWRITING STYLE:\n- Professional\n- Clear\n- Informative\n- Business-focused\n- Human sounding\n- Modern editorial style\n\nARTICLE STRUCTURE (each article \u2014 express in HTML):\n1. Engaging introduction\n2. Industry context\n3. Main developments\n4. Key implications\n5. Expert/business analysis\n6. Conclusion\n\nHTML STRUCTURE (STRICT \u2014 each article must be valid, semantic HTML only):\n- Output HTML only. Do not use Markdown (no # headings, no **bold**, no `code fences`).\n- Wrap each complete article in a single root: <article class=\"blog-post\"> ... </article>\n- Inside <article>, use this outline:\n  - <header><h1 class=\"blog-post-title\">\u2026main title\u2026</h1></header> (exactly one h1 per article)\n  - <section class=\"blog-post-body\"> for all following content\n  - Use <h2> and <h3> for section and subsection titles (never skip levels: h1 \u2192 h2 \u2192 h3).\n  - Use <p> for paragraphs; keep paragraphs focused (avoid huge unbroken text).\n  - Use <ul>/<ol> with <li> for lists where appropriate.\n  - Use <strong> and <em> for emphasis sparingly; use <blockquote> only when quoting or callouts fit.\n- Do not include <html>, <head>, <body>, or document-level wrappers \u2014 only the fragment(s) described above.\n- Do not use <script>, <style>, <iframe>, or inline event handlers. Avoid inline style=\"\" except when essential for accessibility (prefer none).\n- Escape angle brackets in body text if you must mention markup; keep output safe for embedding in a CMS.\n\nCONTENT REQUIREMENTS:\n- Minimum 800 words per article unless source material is very small.\n- Add context around industry trends where appropriate.\n- Explain why the topic matters.\n- Include practical implications for businesses/professionals.\n\nIF RSS CONTENT IS LIMITED:\n- Expand intelligently using general industry knowledge.\n- Keep the article relevant to the original topic.\n- Do not invent fake facts or statistics.\n\nOUTPUT FORMAT (STRICT \u2014 HTML only):\n- Return ONLY the article HTML fragment(s). No JSON, no preamble or postscript (\"Here is your article\u2026\"), no markdown.\n- If you output more than one article, output multiple <article class=\"blog-post\">\u2026</article> blocks in sequence, and between articles put a single line containing exactly this (and nothing else on that line):\n---BLOG_GENERATOR_NEXT---\n- If you output a single article, use one <article> only and do not use that separator line.";
+/**
+ * JSON so {@link parseLlmAgentValidationRules} can attach guardrails and allow long source payloads.
+ * Edit in the admin UI if needed; defaults match product intent.
+ */
+declare const BLOG_GENERATOR_DEFAULT_VALIDATION_RULES: string;
 
 /**
- * Executes `fn` inside a transaction where the PostgreSQL GUC
- * `app.vendor_id` is set for the duration of that transaction.
- *
- * This activates the `vendor_isolation` RLS policy added by the
- * `VendorRls1775940000000` migration.
+ * Second-step LLM: classifies one finished HTML blog body into CMS fields (category, SEO, tags).
  *
- * vendorId = 0  →  admin / all-access (policy allows everything)
- * vendorId > 0  →  only rows whose `vendorId` column matches
+ * Optional `llm_agents` row: slug {@link BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG} — when present and enabled,
+ * model / temperature / max_tokens apply to this call only (writer step uses `blog-generator`).
  *
- * Example:
- *   const orders = await withVendorRlsContext(dataSource, 4, (ds) =>
- *     ds.getRepository(Order).find({ where: { deleted: false } })
- *   );
- */
-declare function withVendorRlsContext<T>(dataSource: DataSource, vendorId: number, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
-/**
- * Convenience wrapper: sets admin mode (vendor_id = '0') so all rows are
- * visible regardless of their vendorId.  Use for platform-admin queries.
+ * To change how metadata is produced, edit the constants in this file (system instruction + validation JSON).
+ * No admin UI override is wired yet; add request body fields in `cms-api-handler` if you need runtime overrides later.
  */
-declare function withAdminRlsContext<T>(dataSource: DataSource, fn: (dataSource: DataSource) => Promise<T>): Promise<T>;
+declare const BLOG_METADATA_ENRICHER_AGENT_NAME = "Blog Generator Metadata";
+/** `llm_agents.slug` for routing model/temperature for the metadata-only chat step. */
+declare const BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG = "blog-generator-metadata";
+declare const BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION = "You are a careful CMS metadata assistant for a publishing system.\n\nYou receive ONE complete blog post as HTML (title is usually in <h1 class=\"blog-post-title\"> or the first <h1>). Your job is to propose structured fields so an editor can save the post: category, URL slug, SEO block, and topical tags.\n\nRULES:\n1. Read the whole article and infer the primary topic and audience.\n2. categoryName must be EXACTLY one string from AVAILABLE_BLOG_CATEGORIES in the user message, or \"\" if none fit.\n3. blogSlug: lowercase kebab-case, ASCII letters/digits/hyphens only, no leading/trailing hyphens, max ~80 chars. Derive from the main topic or title.\n4. seo.title: concise meta title (~50\u201360 characters when reasonable).\n5. seo.description: meta description (~150\u2013160 characters when reasonable), plain text.\n6. seo.keywords: comma-separated phrases, no stuffing.\n7. seo.ogTitle / seo.ogDescription: may mirror title/description or be slightly adapted for social.\n8. tags: 4\u201310 short labels (1\u20133 words each). Prefer exact matches from EXISTING_TAG_NAMES when they truly apply; otherwise invent precise new labels (they may be created in the CMS later).\n9. Do not invent statistics, quotes, or URLs not implied by the article.\n10. Output JSON only \u2014 no markdown outside the JSON, no commentary.\n\nOUTPUT FORMAT (STRICT):\nReturn a single JSON object only. Do not wrap it in a markdown code fence.\n\n{\n  \"categoryName\": \"string \u2014 exact match from list or empty string\",\n  \"blogSlug\": \"string \u2014 url-safe kebab-case\",\n  \"seo\": {\n    \"title\": \"string or empty\",\n    \"description\": \"string or empty\",\n    \"keywords\": \"string or empty\",\n    \"ogTitle\": \"string or empty\",\n    \"ogDescription\": \"string or empty\"\n  },\n  \"tags\": [\"tag-one\", \"tag-two\"]\n}";
+declare const BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES: string;
 
-type EnsureVendorCustomerDetails = {
-    name: string;
-    email: string;
-    phone?: string | null;
+interface BlogGeneratorPluginConfig {
+    /** Set to false to skip registering the plugin. */
+    enabled?: boolean;
+}
+declare function blogGeneratorPlugin(config?: BlogGeneratorPluginConfig): CmsPlugin<BlogGeneratorService | undefined>;
+
+interface SocialMediaApiConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+    requireAuth: (req: Request) => Promise<Response | null>;
+    requireEntityPermission: (req: Request, entity: string, action: EntityCrudAction) => Promise<Response | null>;
+    encryptionKey?: string;
+    /** Used to resolve relative cover image URLs (e.g. https://mysite.com). */
+    publicSiteUrl?: string;
+    /**
+     * When true (default), `console.info` / `console.warn` lines are emitted for LinkedIn blog publish
+     * (text vs image path, sizes, errors). Set false or `CMS_LINKEDIN_PUBLISH_LOG=0` to silence.
+     */
+    linkedInPublishLogging?: boolean;
+}
+declare function createSocialMediaHandlers(config: SocialMediaApiConfig): {
+    getLinkedInStatus(req: Request): Promise<Response>;
+    fetchLinkedInOrganizations(req: Request): Promise<Response>;
+    syncLinkedInProfile(req: Request): Promise<Response>;
+    publishBlogToLinkedIn(req: Request, blogId: number): Promise<Response>;
+    getFacebookStatus(req: Request): Promise<Response>;
+    publishBlogToFacebook(req: Request, blogId: number): Promise<Response>;
+    /**
+     * POST JSON `{ appId, appSecret, userAccessToken }`. Calls Graph `GET /me/accounts` with the user token.
+     * App ID and secret are validated but not used yet (reserved for future token flows).
+     * Persist credentials via Plugins → Save: `meta_app_id` (public), `meta_app_secret` and `meta_user_access_token` (encrypted).
+     */
+    fetchFacebookManagedPages(req: Request): Promise<Response>;
 };
-declare function isCustomerTypeContact(type: unknown): boolean;
-/** Restrict contact list to rows linked in `vendor_customers` with type customer. */
-declare function applyVendorCustomersContactFilter(qb: SelectQueryBuilder<typeorm.ObjectLiteral>, contactAlias: string, scope: VendorScope, vendorIdFilter: number | null): void;
-declare function contactIsVendorCustomer(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<boolean>;
-/** Returns an error message when the contact is not a vendor-linked customer; otherwise null. */
-declare function assertContactAllowedForVendorOrder(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number): Promise<string | null>;
-declare function resolveVendorIdForContactCheck(scope: VendorScope, bodyOrRow: Record<string, unknown>): number | null;
+
 /**
- * When an order is placed for a manually entered customer, ensure they appear in
- * vendor customers: customer row, vendor_customers link, and contact type.
+ * Meta (Facebook) Graph API helpers (server-side). Uses fetch — no SDK.
+ * @see https://developers.facebook.com/docs/graph-api/reference/user/accounts
  */
-declare function ensureVendorCustomerForOrderContact(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number, contactId: number, details: EnsureVendorCustomerDetails): Promise<void>;
-
-/** One band: refund % when cancellation falls N days before event start. */
-type RefundPolicyTier = {
-    /** Inclusive lower bound (days before event start; 0 = event day). */
-    fromDaysBefore: number;
-    /** Exclusive upper bound, or null for open-ended (e.g. 20+ days). */
-    toDaysBefore: number | null;
-    percentage: number;
+type FacebookPageAccount = {
+    access_token?: string;
+    category?: string;
+    name?: string;
+    id?: string;
+    /** Graph may return additional fields */
+    [key: string]: unknown;
 };
-type RefundPolicyType = 'percentage' | 'event_tiers';
-type RefundPolicyLike = {
-    id?: number;
-    type: RefundPolicyType;
-    value: number;
-    refundWindowDays: number;
-    tiers?: RefundPolicyTier[] | null;
+type FacebookMeAccountsResponse = {
+    data?: FacebookPageAccount[];
+    paging?: Record<string, unknown>;
+    error?: {
+        message?: string;
+        type?: string;
+        code?: number;
+        fbtrace_id?: string;
+    };
 };
-type RefundCalculationResult = {
-    amount: number;
-    percentage: number;
-    daysBeforeEvent: number | null;
-    daysSincePurchase: number | null;
-    policyId: number | null;
-    summary: string;
-    /** Order cancelled without policy-based refund (no policy on event). */
-    directCancellation?: boolean;
-    eventId?: number | null;
-    eventName?: string | null;
+/**
+ * Lists Facebook Pages the user manages (page access tokens + metadata).
+ * Requires a User access token with `pages_show_list` or equivalent page permissions.
+ */
+declare function metaFetchUserManagedPages(userAccessToken: string): Promise<FacebookMeAccountsResponse>;
+type MetaGraphMutationResponse = {
+    id?: string;
+    post_id?: string;
+    error?: {
+        message?: string;
+        type?: string;
+        code?: number;
+        fbtrace_id?: string;
+    };
 };
-declare function normalizeRefundTiers(raw: unknown): RefundPolicyTier[];
-declare function validateRefundTiers(tiers: RefundPolicyTier[]): string | null;
-declare function daysBeforeEventStart(eventStart: Date, asOf?: Date): number;
-declare function formatTierRange(tier: RefundPolicyTier): string;
-declare function describeEventTierPolicy(tiers: RefundPolicyTier[]): string;
-declare function calculateRefundFromPolicy(policy: RefundPolicyLike | null | undefined, orderTotal: number, options?: {
-    orderCreatedAt?: Date | null;
-    eventStartDate?: Date | null;
-    asOf?: Date;
-}): RefundCalculationResult;
+/** Resolves the long-lived page access token for a Page ID from `/me/accounts` data. */
+declare function metaResolvePageAccessToken(accounts: FacebookMeAccountsResponse, pageId: string): string | null;
+/**
+ * Upload a photo to a Page timeline (multipart).
+ * @see https://developers.facebook.com/docs/graph-api/reference/page/photos#Creating
+ */
+declare function metaPostPagePhoto(opts: {
+    pageId: string;
+    pageAccessToken: string;
+    imageBuffer: Buffer;
+    contentType: string;
+    caption: string;
+}): Promise<MetaGraphMutationResponse>;
+/**
+ * Publish a text-only post to the Page feed (when no JPEG/PNG image is available).
+ * @see https://developers.facebook.com/docs/graph-api/reference/page/feed#Creating
+ */
+declare function metaPostPageFeed(opts: {
+    pageId: string;
+    pageAccessToken: string;
+    message: string;
+}): Promise<MetaGraphMutationResponse>;
 
-type PolicyRow = RefundPolicyLike & {
-    id: number;
-};
-declare function calculateOrderRefundPreview(dataSource: DataSource, entityMap: EntityMap$2, order: {
-    id: number;
-    vendorId?: number | null;
-    total?: number | null;
-    createdAt?: Date | string | null;
-}, asOf?: Date): Promise<RefundCalculationResult & {
-    eventStartDate: string | null;
-    directCancellation: boolean;
-    eventId: number | null;
-    eventName: string | null;
-}>;
-/** @deprecated Use event-attached policy via calculateOrderRefundPreview. */
-declare function findActiveRefundPolicyForVendor(dataSource: DataSource, entityMap: EntityMap$2, vendorId: number | null | undefined): Promise<PolicyRow | null>;
+interface SocialMediaPluginConfig {
+    /** Set to false to skip registering the plugin instance (API routes still work if wired in the app handler). */
+    enabled?: boolean;
+}
+/**
+ * Optional CMS plugin instance for `getPlugin('social_media')`.
+ * LinkedIn publishing is implemented in {@link createSocialMediaHandlers} and mounted from the CMS API handler.
+ */
+declare function socialMediaPlugin(config?: SocialMediaPluginConfig): CmsPlugin<{
+    name: string;
+} | undefined>;
 
 declare class OtpChallenge {
     id: number;
@@ -3507,6 +3553,8 @@ declare enum ComboStatus {
 }
 declare class Combo {
     id: number;
+    vendorId: number;
+    vendor: Vendor;
     name: string;
     desc?: string;
     eventId: number;
@@ -3563,6 +3611,32 @@ declare class Attendee {
     contact: Contact | null;
 }
 
+declare enum NotificationChannel {
+    WHATSAPP = "whatsapp",
+    EMAIL = "email"
+}
+declare class OrderNotificationBinding {
+    id: number;
+    triggerKey: string;
+    channel: NotificationChannel;
+    messageTemplateId: number | null;
+    enabled: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
+declare class OrderNotificationTrigger {
+    id: number;
+    triggerKey: string;
+    label: string;
+    description: string | null;
+    category: string;
+    enabled: boolean;
+    sortOrder: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+
 /** Map API resource segment (e.g. "blogs", "form_submissions") to entity. Used by CRUD handler. */
 declare const CMS_ENTITY_MAP: Record<string, EntityTarget<typeorm.ObjectLiteral>>;
 
@@ -3570,7 +3644,7 @@ declare const CMS_ENTITY_MAP: Record<string, EntityTarget<typeorm.ObjectLiteral>
 type RbacDebugDataSource = {
     query: (sql: string, parameters?: unknown[]) => Promise<unknown>;
 };
-/** Set `CMS_RBAC_DEBUG=true` in `.env` to log permission decisions (server console). */
+/** Set `CMS_RBAC_DEBUG=true` in `.env` to log permission decisions (server console). Off by default. */
 declare function isRbacDebugEnabled(): boolean;
 declare function logRbac(message: string, data?: Record<string, unknown>): void;
 declare function summarizeEntityPerms(entityPerms: Record<string, EntityPermissionFlags> | undefined): Record<string, {
@@ -3650,9 +3724,9 @@ declare function createCmsMiddleware(config?: CmsMiddlewareConfig): (request: Cm
     body: unknown;
 }>;
 
-/** Set `CMS_AUTH_DEBUG=false` to silence server auth logs in development. */
+/** Set `CMS_AUTH_DEBUG=true` to log server auth decisions. Off by default (including in development). */
 declare function isAuthDebugEnabled(): boolean;
-/** Browser console logs; set `NEXT_PUBLIC_CMS_AUTH_DEBUG=false` to silence. */
+/** Browser console logs; set `NEXT_PUBLIC_CMS_AUTH_DEBUG=true` to enable. */
 declare function isAuthDebugClientEnabled(): boolean;
 declare function logAuth(message: string, data?: Record<string, unknown>): void;
 declare function logAuthClient(message: string, data?: Record<string, unknown>): void;
@@ -3731,4 +3805,36 @@ interface AdminNavItem {
 }
 declare const DEFAULT_ADMIN_NAV: AdminNavItem[];
 
-export { ADMIN_GROUP_NAME, Address, type AdminNavItem, type AnalyticsHandlerConfig, type AnalyticsPluginConfig, Attendee, Attribute, type AuthHandlersConfig, type AuthHelpers, type AuthorizeOtpInput, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, type BlogBySlugConfig, type BlogGeneratorBlogDraft, type BlogGeneratorDraftParseMode, type BlogGeneratorPluginConfig, type BlogGeneratorSeoDraft, BlogGeneratorService, Brand, CMS_ENTITY_MAP, type CachePluginConfig, type CacheService, type CaptchaProviderId, type CaptchaPublicConfig, CaptchaService, type CaptchaVerifyResult, Cart, CartItem, Category, type ChangePasswordConfig, ChatConversation, ChatMessage, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsApp, type CmsGetter, type CmsMiddlewareConfig, type CmsMiddlewareRequest, type CmsPlugin, Collection, Combo, ComboItem, Comment, type CompanyDetails, Config, Contact, type CreateCmsAppOptions, type CrudHandlerOptions, Currency, CurrencyExchange, Customer, Customer_Contacts, DEFAULT_ADMIN_NAV, type DashboardStatsConfig, type DataSourceManager, Discount, DiscountRules, type ERPPluginConfig, type ERPPluginInstance, ERPSubmissionService, EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, type EcommerceAnalyticsConfig, type EmailData, type EmailJobPayload, type EmailPluginConfig, EmailService, type EmailServiceInterface, type EmailTemplateName, type EmailTemplateResult, type EnsureCustomerUserInput, type EnsureVendorCustomerDetails, type EntityCrudAction, type EntityMap$2 as EntityMap, type EntityPermissionFlags, type ErpContactSyncInput, type ErpCreateContactPayload, type ErpJobPayload, type ErpPaidOrderDataSource, type ErpPaidOrderEntityMap, Event, type EventNotificationHandlersConfig, type EventOrderMessageTemplateHandlersConfig, type EventOrderNotificationChannel$1 as EventOrderNotificationChannel, type EventOrderNotificationTemplates, type EventOrderTemplateOverride$1 as EventOrderTemplateOverride, EventProduct, type ExtraPublicWriteRule, type FacebookMeAccountsResponse, type FacebookPageAccount, type ForgotPasswordConfig, Form, type FormBySlugConfig, FormField, FormSubmission, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type GetSession, type InviteAcceptConfig, JOB_RUNNER_QUEUE, type CmsAppLike as JobRunnerCmsAppLike, type JobRunnerDeps, type JobRunnerPayload, JobSchedule, type JobScheduleApiConfig, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, type LatestArticleFromFeed, LlmAgent, type LlmAgentKnowledgeApiConfig, type LlmAgentOptions, type LlmAgentValidationRulesJson, type LlmChatOptions, type LlmEmbeddingProvider, type LlmMessage, type LlmPluginConfig, LlmService, type LlmServiceEmbedOptions, type LlmServiceInterface, type LocalStoragePluginConfig, type Logger, Media, MessageTemplate, type MetaGraphMutationResponse, type NextAuthOptionsConfig, type NextAuthUser, OPEN_ENDPOINTS, Order, OrderAddresses, OrderDiscounts, OrderItem, type OrderPlacedEmailPayload, type OrderPlacedLineItem, OtpChallenge, type OtpChannel, type OtpPurpose, PERMISSION_REQUIRED_ENDPOINTS, Page, type ParsedLlmAgentValidation, PasswordResetToken, Payment, type PaymentIntent, type PaymentPluginConfig, type PaymentServiceInterface, Permission, type PgBossPluginConfig, PgBossService, type PipelineNames, type PluginContext, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, type PublicThemeSettingsPayload, type QueuePluginConfig, type QueueService, RBAC_ADMIN_ONLY_ENTITIES, type RefundCalculationResult, RefundPolicy, type RefundPolicyLike, type RefundPolicyTier, RefundRequest, type RenderEmailOptions, type RenderedEmail, RssArticle, RssFeed, type S3StoragePluginConfig, SUPER_ADMIN_GROUP_ID, type SendVendorOnboardEmailInput, Seo, type SeoLike, type SeoMetadataOverrides, type SessionUser, type SetPasswordConfig, type SettingsApiConfig, type SmsJobPayload, type SmsPluginConfig, type SmsProviderChoice, type SmsProviderId, type SmsServiceConfig, type SmsServiceInterface, type SocialLinkItem, type SocialMediaPluginConfig, type StorageService, type StorefrontApiConfig, type StorefrontOtpFlags, Tag, Tax, type TemplateContext, type UploadHandlerConfig, User, type UserAuthApiConfig, type UserAvatarConfig, UserGroup, type UserProfileConfig, type UsersApiConfig, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, Vendor, VendorCustomer, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, VendorRole, VendorRolePermission, VendorUser, type WhatsAppJobPayload, type WhatsAppPluginConfig, type WhatsAppServiceConfig, type WhatsAppServiceInterface, Wishlist, WishlistItem, ZIP_MIME_TYPES, allowRateLimit, analyticsPlugin, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, blogGeneratorPlugin, buildBlogMetadataUserPrompt, buildCaptchaPublicConfig, buildCronFromSchedule, buildEventOrderTemplateVariables, buildRssUserPromptFromFeeds, cachePlugin, calculateOrderRefundPreview, calculateRefundFromPolicy, canManageRoles, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, captchaPlugin, cn, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createAuthHelpers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAuthBundle, createCmsMiddleware, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createDataSourceManager, createEcommerceAnalyticsHandler, createEventNotificationHandlers, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForUser, daysBeforeEventStart, defaultPublicApiMethods, describeEventTierPolicy, dispatchEventOrderNotifications, emailPlugin, emailTemplates, enrichUserWithVendorContext, ensureCustomerForUser, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, erpPlugin, explainSessionEntityAccess, fetchSeoBySlug, findActiveRefundPolicyForVendor, formatDate, formatDateOnly, formatDateTime, formatTierRange, generateNumericOtp, generateSlug, getCompanyDetailsFromSettings, getNextAuthOptions, getPermissionableEntityKeys, getPublicSettingsGroup, getRequiredPermission, getRssArticleSummaryFromItem, getStorefrontNextAuthOptions, hasEntityPermission, hashOtpCode, hydrateVendorSessionUser, isAuthDebugClientEnabled, isAuthDebugEnabled, isCustomerTypeContact, isOpenEndpoint, isPlatformAdministrator, isPublicMethod, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, isZipMedia, joinRecipientsForSend, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, llmPlugin, loadPublicThemeSettings, loadUserVendorContext, localStoragePlugin, logAuth, logAuthClient, logEntityAccessDecision, logRbac, mergeEmailLayoutCompanyDetails, mergeGuardrailsIntoSystemPrompt, mergeSeoBySlug, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, nextAuthCookieDebugInfo, normalizePhoneE164, normalizeRefundTiers, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseEmailRecipientsFromConfig, parseHfInferenceEmbeddingBody, parseLlmAgentValidationRules, paymentPlugin, permissionRowsToRecord, pgBossPlugin, pgBossScheduleNameForId, queueEmail, queueErp, queueErpCreateContactIfEnabled, queueErpPaidOrderForOrderId, queueJobScheduleNow, queueOrderPlacedEmails, queuePlugin, queueSms, queueVendorOnboardEmails, queueWhatsApp, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, registerEmailQueueProcessor, registerErpQueueProcessor, registerJobRunnerWorker, registerSmsQueueProcessor, registerWhatsAppQueueProcessor, relativePathFromMediaParentId, renderEmail, renderLayout, resolveBlogCategoryIdByName, resolveEventOrderTemplate, resolvePublicMetadata, resolveVendorIdForContactCheck, resolveVendorScopeFromSessionUser, s3StoragePlugin, sanitizeMediaFolderPath, sanitizeStorageSegment, seedAdministratorPermissions, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, sendVendorOnboardEmails, serializeEmailRecipients, sessionHasEntityAccess, shouldRateLimitPublicWrite, simpleDecrypt, simpleEncrypt, smsPlugin, socialMediaPlugin, summarizeEntityPerms, summarizeSessionUserForLog, syncJobScheduleToPgBoss, truncateText, validateRefundTiers, validateScheduleInput, validateSlug, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, vendorPortalFlagsFromUser, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, withAdminRlsContext, withVendorRlsContext };
+interface EnsureMessagingPluginsOptions {
+    dataSource: DataSource;
+    entityMap: EntityMap$2;
+    config?: Record<string, string>;
+    /** Decrypts `configs.encrypted` rows (defaults to SETTINGS_ENCRYPTION_KEY or NEXTAUTH_SECRET). */
+    encryptionKey?: string;
+    logger?: Logger;
+}
+/** Minimal CMS handle (matches `CmsGetter` in cms-api-handler). */
+interface MessagingCmsLike {
+    getPlugin(name: string): unknown;
+    dataSource?: unknown;
+}
+/** Same key used by Plugins → settings PUT for encrypted secrets (e.g. WhatsApp access token). */
+declare function resolveSettingsEncryptionKey(config?: Record<string, string>): string | undefined;
+declare function loadSettingsGroupFromDb(dataSource: DataSource, entityMap: EntityMap$2, group: string, encryptionKey?: string): Promise<Record<string, string>>;
+declare function createMessageTemplateRowLoader(dataSource: DataSource, entityMap: EntityMap$2): MessageTemplateRowLoader;
+/** Register email + WhatsApp queue processors when a queue plugin is present. */
+declare function registerMessagingQueueProcessors(cms: CmsApp): void;
+/**
+ * Ensures queue, email, and WhatsApp plugins exist on the CMS app (lazy overlay).
+ * Consumer apps that omit `whatsappPlugin()` / `queuePlugin()` still get order notifications when env/DB is configured.
+ */
+declare function ensureMessagingPluginsOnCms(base: MessagingCmsLike, options: EnsureMessagingPluginsOptions): Promise<CmsApp>;
+/** Cached wrapper so messaging plugins are initialized once per process. */
+declare function wrapGetCmsWithMessaging(getCms: () => Promise<MessagingCmsLike>, options: EnsureMessagingPluginsOptions): () => Promise<CmsApp>;
+/** Standard messaging plugins for `createCmsApp({ plugins: [...] })`. */
+declare function messagingPlugins(options: EnsureMessagingPluginsOptions): CmsPlugin[];
+type CreateCmsAppWithMessagingOptions = CreateCmsAppOptions & EnsureMessagingPluginsOptions;
+/** `createCmsApp` + messaging plugins + queue processor registration. */
+declare function createCmsAppWithMessaging(options: CreateCmsAppWithMessagingOptions): Promise<CmsApp>;
+
+export { ADMIN_GROUP_NAME, Address, type AdminNavItem, type AnalyticsHandlerConfig, type AnalyticsPluginConfig, Attendee, Attribute, type AuthHandlersConfig, type AuthHelpers, type AuthorizeOtpInput, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, type BlogBySlugConfig, type BlogGeneratorBlogDraft, type BlogGeneratorDraftParseMode, type BlogGeneratorPluginConfig, type BlogGeneratorSeoDraft, BlogGeneratorService, Brand, CMS_ENTITY_MAP, type CachePluginConfig, type CacheService, type CaptchaProviderId, type CaptchaPublicConfig, CaptchaService, type CaptchaVerifyResult, Cart, CartItem, Category, type ChangePasswordConfig, ChatConversation, ChatMessage, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsApp, type CmsGetter, type CmsMiddlewareConfig, type CmsMiddlewareRequest, type CmsPlugin, Collection, Combo, ComboItem, Comment, type CompanyDetails, Config, Contact, type CreateCmsAppOptions, type CreateCmsAppWithMessagingOptions, type CrudHandlerOptions, Currency, CurrencyExchange, Customer, Customer_Contacts, DEFAULT_ADMIN_NAV, DEFAULT_ORDER_NOTIFICATION_TRIGGER_SEEDS, type DashboardStatsConfig, type DataSourceManager, Discount, DiscountRules, type ERPPluginConfig, type ERPPluginInstance, ERPSubmissionService, EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, type EcommerceAnalyticsConfig, type EmailData, type EmailJobPayload, type EmailPluginConfig, EmailService, type EmailServiceInterface, type EmailTemplateName, type EmailTemplateResult, type EmitOrderNotificationTriggerDeps, type EnsureCustomerUserInput, type EnsureMessagingPluginsOptions, type EnsureVendorCustomerDetails, type EntityCrudAction, type EntityMap$2 as EntityMap, type EntityPermissionFlags, type ErpContactSyncInput, type ErpCreateContactPayload, type ErpJobPayload, type ErpPaidOrderDataSource, type ErpPaidOrderEntityMap, Event, type EventOrderMessageTemplateHandlersConfig, type EventOrderNotificationChannel, type EventOrderNotificationTemplates, type EventOrderTemplateOverride, EventProduct, type ExtraPublicWriteRule, type FacebookMeAccountsResponse, type FacebookPageAccount, type ForgotPasswordConfig, Form, type FormBySlugConfig, FormField, FormSubmission, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type GetSession, type InviteAcceptConfig, JOB_RUNNER_QUEUE, type CmsAppLike as JobRunnerCmsAppLike, type JobRunnerDeps, type JobRunnerPayload, JobSchedule, type JobScheduleApiConfig, JobScheduleRun, KNOWN_NOTIFICATION_TRIGGERS, KnowledgeBaseChunk, KnowledgeBaseDocument, type LatestArticleFromFeed, LlmAgent, type LlmAgentKnowledgeApiConfig, type LlmAgentOptions, type LlmAgentValidationRulesJson, type LlmChatOptions, type LlmEmbeddingProvider, type LlmMessage, type LlmPluginConfig, LlmService, type LlmServiceEmbedOptions, type LlmServiceInterface, type LocalStoragePluginConfig, type Logger, Media, MessageTemplate, type MetaGraphMutationResponse, type NextAuthOptionsConfig, type NextAuthUser, OPEN_ENDPOINTS, ORDER_NOTIFICATION_TRIGGERS, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, type OrderNotificationTriggerKey, type OrderPlacedEmailPayload, type OrderPlacedLineItem, type OrderTriggerPayload, OtpChallenge, type OtpChannel, type OtpPurpose, PERMISSION_REQUIRED_ENDPOINTS, Page, type ParsedLlmAgentValidation, PasswordResetToken, Payment, type PaymentIntent, type PaymentPluginConfig, type PaymentServiceInterface, Permission, type PgBossPluginConfig, PgBossService, type PipelineNames, type PluginContext, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, type PublicThemeSettingsPayload, type QueuePluginConfig, type QueueService, RBAC_ADMIN_ONLY_ENTITIES, type RefundCalculationResult, RefundPolicy, type RefundPolicyLike, type RefundPolicyTier, RefundRequest, type RenderEmailOptions, type RenderedEmail, RssArticle, RssFeed, type S3StoragePluginConfig, SUPER_ADMIN_GROUP_ID, type SendVendorOnboardEmailInput, Seo, type SeoLike, type SeoMetadataOverrides, type SessionUser, type SetPasswordConfig, type SettingsApiConfig, type SmsJobPayload, type SmsPluginConfig, type SmsProviderChoice, type SmsProviderId, type SmsServiceConfig, type SmsServiceInterface, type SocialLinkItem, type SocialMediaPluginConfig, type StorageService, type StorefrontApiConfig, type StorefrontOtpFlags, Tag, Tax, type TemplateContext, type UploadHandlerConfig, User, type UserAuthApiConfig, type UserAvatarConfig, UserGroup, type UserProfileConfig, type UsersApiConfig, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, Vendor, VendorCustomer, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, VendorRole, VendorRolePermission, VendorUser, type WhatsAppJobPayload, type WhatsAppPluginConfig, type WhatsAppServiceConfig, type WhatsAppServiceInterface, Wishlist, WishlistItem, ZIP_MIME_TYPES, allowRateLimit, analyticsPlugin, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, blogGeneratorPlugin, buildBlogMetadataUserPrompt, buildCaptchaPublicConfig, buildCronFromSchedule, buildEventOrderTemplateVariables, buildRssUserPromptFromFeeds, cachePlugin, calculateOrderRefundPreview, calculateRefundFromPolicy, canManageRoles, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, captchaPlugin, checkEventsEnabled, checkMultiVendorEnabled, cn, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createAuthHelpers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCmsAuthBundle, createCmsMiddleware, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createDataSourceManager, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForUser, daysBeforeEventStart, defaultPublicApiMethods, describeEventTierPolicy, emailPlugin, emailTemplates, emitOrderNotificationTrigger, enrichUserWithVendorContext, ensureCustomerForUser, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, erpPlugin, explainSessionEntityAccess, fetchSeoBySlug, findActiveRefundPolicyForVendor, fireOrderNotificationTrigger, formatDate, formatDateOnly, formatDateTime, formatTierRange, generateNumericOtp, generateSlug, getCompanyDetailsFromSettings, getNextAuthOptions, getPermissionableEntityKeys, getPublicSettingsGroup, getRequiredPermission, getRssArticleSummaryFromItem, getStorefrontNextAuthOptions, hasEntityPermission, hashOtpCode, hydrateVendorSessionUser, initWhatsappTriggerDispatcher, invalidateEventsCache, invalidateMultiVendorCache, isAuthDebugClientEnabled, isAuthDebugEnabled, isCustomerTypeContact, isOpenEndpoint, isPlatformAdministrator, isPublicMethod, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, isZipMedia, joinRecipientsForSend, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, llmPlugin, loadPublicThemeSettings, loadSettingsGroupFromDb, loadUserVendorContext, localStoragePlugin, logAuth, logAuthClient, logEntityAccessDecision, logRbac, mergeEmailLayoutCompanyDetails, mergeGuardrailsIntoSystemPrompt, mergeSeoBySlug, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, nextAuthCookieDebugInfo, normalizePhoneE164, normalizeRefundTiers, notificationTriggerEmitter, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseEmailRecipientsFromConfig, parseHfInferenceEmbeddingBody, parseLlmAgentValidationRules, paymentPlugin, permissionRowsToRecord, pgBossPlugin, pgBossScheduleNameForId, queueEmail, queueErp, queueErpCreateContactIfEnabled, queueErpPaidOrderForOrderId, queueJobScheduleNow, queueOrderPlacedEmails, queuePlugin, queueSms, queueVendorOnboardEmails, queueWhatsApp, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, registerEmailQueueProcessor, registerErpQueueProcessor, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, registerWhatsAppQueueProcessor, relativePathFromMediaParentId, renderEmail, renderLayout, resendOrderNotification, resolveBlogCategoryIdByName, resolveEventOrderTemplate, resolvePublicMetadata, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, resolveVendorScopeFromSessionUser, s3StoragePlugin, sanitizeMediaFolderPath, sanitizeStorageSegment, seedAdministratorPermissions, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, sendVendorOnboardEmails, serializeEmailRecipients, sessionHasEntityAccess, shouldRateLimitPublicWrite, simpleDecrypt, simpleEncrypt, smsPlugin, socialMediaPlugin, summarizeEntityPerms, summarizeSessionUserForLog, syncJobScheduleToPgBoss, truncateText, validateRefundTiers, validateScheduleInput, validateSlug, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, vendorPortalFlagsFromUser, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, withAdminRlsContext, withVendorRlsContext, wrapGetCmsWithMessaging };