@infuro/cms-core 1.0.35 → 1.0.38

package/dist/index.js

@@ -1,24 +1,22 @@
-export { dispatchEventOrderNotifications } from './chunk-QM733NUK.js';
-export { EmailService, emailPlugin, emailTemplates, renderEmail } from './chunk-J7XHLOLO.js';
-export { renderLayout } from './chunk-ZQ4X6OAU.js';
-import './chunk-CRFV5WJK.js';
-export { queueWhatsApp, registerWhatsAppQueueProcessor } from './chunk-ZSVCP6N3.js';
-import { BlogGeneratorService, loadUserVendorContext, getPublicSettingsGroup } from './chunk-2XE4X74C.js';
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, calculateOrderRefundPreview, calculateRefundFromPolicy, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventNotificationHandlers, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForUser, daysBeforeEventStart, describeEventTierPolicy, ensureCustomerForUser, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, findActiveRefundPolicyForVendor, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRssArticleSummaryFromItem, hashOtpCode, hydrateVendorSessionUser, isCustomerTypeContact, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, normalizePhoneE164, normalizeRefundTiers, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queueSms, registerJobRunnerWorker, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash } from './chunk-2XE4X74C.js';
-import { PgBossService } from './chunk-GO7PPYNU.js';
-export { JOB_RUNNER_QUEUE, PgBossService } from './chunk-GO7PPYNU.js';
-export { buildEventOrderTemplateVariables } from './chunk-JBRR5UYL.js';
+export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-X47PBV4I.js';
+import { checkMultiVendorEnabled, loadUserVendorContext, getPublicSettingsGroup, BlogGeneratorService } from './chunk-PYUXVU75.js';
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyVendorCustomersContactFilter, assertCaptchaOk, assertContactAllowedForVendorOrder, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, calculateOrderRefundPreview, calculateRefundFromPolicy, checkEventsEnabled, checkMultiVendorEnabled, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForUser, daysBeforeEventStart, describeEventTierPolicy, ensureCustomerForUser, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, findActiveRefundPolicyForVendor, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRssArticleSummaryFromItem, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, isCustomerTypeContact, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging } from './chunk-PYUXVU75.js';
+import { mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig } from './chunk-NNQBWDCI.js';
+export { EmailService, buildEventOrderTemplateVariables, emailPlugin, emailTemplates, getCompanyDetailsFromSettings, initWhatsappTriggerDispatcher, joinRecipientsForSend, mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, serializeEmailRecipients } from './chunk-NNQBWDCI.js';
+export { KNOWN_NOTIFICATION_TRIGGERS, notificationTriggerEmitter } from './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
 import './chunk-WEMDMVHQ.js';
-import { mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig } from './chunk-XDSNZUW7.js';
-export { getCompanyDetailsFromSettings, joinRecipientsForSend, mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig, serializeEmailRecipients } from './chunk-XDSNZUW7.js';
 import { queueOrderPlacedEmails } from './chunk-5ELSW2UP.js';
 export { queueEmail, queueOrderPlacedEmails, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-5ELSW2UP.js';
 import './chunk-MQBT33IV.js';
-export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-EF2JBPDM.js';
-export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-EQPITOP6.js';
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-6KPQWRFW.js';
-export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-4TRPKBKO.js';
+import './chunk-CRFV5WJK.js';
+export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-KFFB6EMZ.js';
+import { PgBossService } from './chunk-GO7PPYNU.js';
+export { JOB_RUNNER_QUEUE, PgBossService } from './chunk-GO7PPYNU.js';
+export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-SBRBR3VO.js';
+export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-UXMDSNIG.js';
+import { isSuperAdmin, isVendorGroupName } from './chunk-P7QCLE5W.js';
+export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-P7QCLE5W.js';
 export { queueErpPaidOrderForOrderId } from './chunk-TDV6EJHV.js';
 import { erpSafeWebhookUrl, logErp, warnErp, errorErp } from './chunk-SYBOCAWB.js';
 export { queueErp, registerErpQueueProcessor } from './chunk-SYBOCAWB.js';
@@ -27,8 +25,6 @@ import { __name } from './chunk-SHUYVCID.js';
 import { google } from 'googleapis';
 import Redis from 'ioredis';
 import { LRUCache } from 'lru-cache';
-import { Worker, Queue } from 'bullmq';
-import fastq from 'fastq';
 import { clsx } from 'clsx';
 import { twMerge } from 'tailwind-merge';
 import { NextResponse } from 'next/server';
@@ -36,40 +32,6 @@ import 'reflect-metadata';
 import { DataSource } from 'typeorm';
 import bcrypt from 'bcryptjs';
 
-// src/plugins/registry.ts
-var noopLogger = {
-  info: /* @__PURE__ */ __name(() => {
-  }, "info"),
-  warn: /* @__PURE__ */ __name(() => {
-  }, "warn"),
-  error: /* @__PURE__ */ __name(() => {
-  }, "error")
-};
-async function createCmsApp(options) {
-  const { dataSource, config = {}, plugins = [], logger = noopLogger } = options;
-  const context = {
-    dataSource,
-    config,
-    logger
-  };
-  const registry = /* @__PURE__ */ new Map();
-  for (const plugin of plugins) {
-    try {
-      const instance = await plugin.init(context);
-      registry.set(plugin.name, instance !== void 0 ? instance : plugin);
-    } catch (err) {
-      logger.warn(`Plugin "${plugin.name}" failed to init: ${err instanceof Error ? err.message : err}`);
-    }
-  }
-  return {
-    dataSource,
-    getPlugin(name) {
-      return registry.get(name);
-    }
-  };
-}
-__name(createCmsApp, "createCmsApp");
-
 // src/plugins/erp/erp-submission.ts
 var ERPSubmissionService = class {
   static {
@@ -1039,268 +1001,6 @@ function smsPlugin(config = {}) {
 }
 __name(smsPlugin, "smsPlugin");
 
-// src/plugins/whatsapp/whatsapp-service.ts
-function norm2(v) {
-  const t = v?.trim();
-  return t || void 0;
-}
-__name(norm2, "norm");
-function pick2(plugin, db, env, ...keys) {
-  for (const key of keys) {
-    const pk = key;
-    if (pk in plugin && plugin[pk] !== void 0 && String(plugin[pk]).trim() !== "") {
-      const v = norm2(String(plugin[pk]));
-      if (v) return v;
-    }
-    if (norm2(db[key])) return norm2(db[key]);
-    if (norm2(env[key])) return norm2(env[key]);
-  }
-  return void 0;
-}
-__name(pick2, "pick");
-function mergeWhatsAppConfigLayers(env, db, plugin) {
-  return {
-    accessToken: pick2(plugin, db, env, "accessToken", "WHATSAPP_ACCESS_TOKEN"),
-    phoneNumberId: pick2(plugin, db, env, "phoneNumberId", "WHATSAPP_PHONE_NUMBER_ID"),
-    apiVersion: pick2(plugin, db, env, "apiVersion", "WHATSAPP_API_VERSION") ?? "v21.0"
-  };
-}
-__name(mergeWhatsAppConfigLayers, "mergeWhatsAppConfigLayers");
-function isWhatsAppPluginEnabled(db) {
-  const v = (db.enabled ?? "true").toLowerCase();
-  return v !== "false" && v !== "0";
-}
-__name(isWhatsAppPluginEnabled, "isWhatsAppPluginEnabled");
-function whatsAppConfigured(config) {
-  return Boolean(config.accessToken?.trim() && config.phoneNumberId?.trim());
-}
-__name(whatsAppConfigured, "whatsAppConfigured");
-function normalizeWhatsAppRecipient(to) {
-  const digits = to.replace(/\D/g, "");
-  return digits;
-}
-__name(normalizeWhatsAppRecipient, "normalizeWhatsAppRecipient");
-function maskPhone(digits) {
-  if (digits.length <= 4) return "****";
-  return `${"*".repeat(Math.max(0, digits.length - 4))}${digits.slice(-4)}`;
-}
-__name(maskPhone, "maskPhone");
-function logWhatsApp(level, message, extra) {
-  const line = extra ? `${message} ${JSON.stringify(extra)}` : message;
-  if (level === "info") console.log(`[whatsapp] ${line}`);
-  else if (level === "warn") console.warn(`[whatsapp] ${line}`);
-  else console.error(`[whatsapp] ${line}`);
-}
-__name(logWhatsApp, "logWhatsApp");
-var WhatsAppService = class {
-  static {
-    __name(this, "WhatsAppService");
-  }
-  getWhatsAppSettings;
-  config;
-  getMessageTemplateRow;
-  constructor(env, plugin = {}, getWhatsAppSettings, getMessageTemplateRow) {
-    this.getWhatsAppSettings = getWhatsAppSettings;
-    this.getMessageTemplateRow = getMessageTemplateRow;
-    this.config = mergeWhatsAppConfigLayers(env, {}, plugin);
-  }
-  async mergedConfig() {
-    let db = {};
-    try {
-      db = await this.getWhatsAppSettings?.() ?? {};
-    } catch {
-    }
-    return mergeWhatsAppConfigLayers((typeof process !== "undefined" ? process.env : {}) ?? {}, db, this.config);
-  }
-  async send(opts) {
-    const cfg = await this.mergedConfig();
-    if (!whatsAppConfigured(cfg)) {
-      logWhatsApp("warn", "send skipped: not configured (WHATSAPP_ACCESS_TOKEN + WHATSAPP_PHONE_NUMBER_ID)");
-      return false;
-    }
-    const to = normalizeWhatsAppRecipient(opts.to);
-    if (!to) {
-      logWhatsApp("warn", "send skipped: invalid recipient", {
-        rawTo: opts.to
-      });
-      return false;
-    }
-    logWhatsApp("info", "send started", {
-      to: maskPhone(to),
-      templateKey: opts.templateKey ?? null,
-      externalTemplateRef: opts.externalTemplateRef ?? null,
-      phoneNumberId: cfg.phoneNumberId
-    });
-    let templateName = opts.externalTemplateRef?.trim();
-    let body = opts.body?.trim() ?? "";
-    const variables = opts.variables ?? {};
-    if (opts.templateKey?.trim() && this.getMessageTemplateRow) {
-      const { resolveEventOrderTemplate: resolveEventOrderTemplate2 } = await import('./event-order-defaults-6E543227.js');
-      const resolved = await resolveEventOrderTemplate2("whatsapp", async (ch, key) => {
-        const row = await this.getMessageTemplateRow(ch, key);
-        if (!row) return null;
-        return {
-          subject: null,
-          body: row.body,
-          externalTemplateRef: row.externalTemplateRef,
-          enabled: row.enabled
-        };
-      });
-      if (resolved && !resolved.enabled) {
-        logWhatsApp("warn", "send skipped: template disabled in message_templates", {
-          templateKey: opts.templateKey
-        });
-        return false;
-      }
-      if (resolved) {
-        body = resolved.body;
-        if (resolved.externalTemplateRef) templateName = resolved.externalTemplateRef;
-      }
-    }
-    const { applyTemplateVars } = await import('./interpolate-WDUWDF3I.js');
-    if (body) body = applyTemplateVars(body, variables);
-    if (templateName) {
-      const paramValues = opts.templateParamOrder?.length ? opts.templateParamOrder.map((key) => String(variables[key] ?? "").slice(0, 1024)) : Object.keys(variables).length ? Object.values(variables) : body ? [
-        body
-      ] : [];
-      logWhatsApp("info", "sending template message", {
-        to: maskPhone(to),
-        templateName,
-        paramCount: paramValues.length,
-        paramOrder: opts.templateParamOrder ?? null
-      });
-      return this.sendTemplateMessage(cfg, to, templateName, paramValues);
-    }
-    if (!body) {
-      logWhatsApp("warn", "send skipped: no template name and empty body", {
-        to: maskPhone(to)
-      });
-      return false;
-    }
-    logWhatsApp("info", "sending text message", {
-      to: maskPhone(to),
-      bodyLength: body.length
-    });
-    return this.sendTextMessage(cfg, to, body);
-  }
-  async sendTextMessage(cfg, to, body) {
-    const url = `https://graph.facebook.com/${cfg.apiVersion}/${cfg.phoneNumberId}/messages`;
-    const res = await fetch(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${cfg.accessToken}`,
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        messaging_product: "whatsapp",
-        to,
-        type: "text",
-        text: {
-          body
-        }
-      })
-    });
-    if (!res.ok) {
-      const errText = await res.text().catch(() => "");
-      logWhatsApp("error", "text send failed", {
-        status: res.status,
-        to: maskPhone(to),
-        error: errText
-      });
-      return false;
-    }
-    const data = await res.json().catch(() => ({}));
-    logWhatsApp("info", "text send succeeded", {
-      to: maskPhone(to),
-      messageId: data.messages?.[0]?.id ?? null
-    });
-    return true;
-  }
-  async sendTemplateMessage(cfg, to, templateName, paramValues) {
-    const components = paramValues.length > 0 ? [
-      {
-        type: "body",
-        parameters: paramValues.map((text) => ({
-          type: "text",
-          text: String(text).slice(0, 1024)
-        }))
-      }
-    ] : void 0;
-    const url = `https://graph.facebook.com/${cfg.apiVersion}/${cfg.phoneNumberId}/messages`;
-    const payload = {
-      messaging_product: "whatsapp",
-      to,
-      type: "template",
-      template: {
-        name: templateName,
-        language: {
-          code: "en"
-        },
-        ...components ? {
-          components
-        } : {}
-      }
-    };
-    const res = await fetch(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${cfg.accessToken}`,
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(payload)
-    });
-    if (!res.ok) {
-      const errText = await res.text().catch(() => "");
-      logWhatsApp("error", "template send failed", {
-        status: res.status,
-        to: maskPhone(to),
-        templateName,
-        paramCount: paramValues.length,
-        error: errText
-      });
-      return false;
-    }
-    const data = await res.json().catch(() => ({}));
-    logWhatsApp("info", "template send succeeded", {
-      to: maskPhone(to),
-      templateName,
-      messageId: data.messages?.[0]?.id ?? null
-    });
-    return true;
-  }
-};
-
-// src/plugins/whatsapp/index.ts
-function whatsappPlugin(config = {}) {
-  return {
-    name: "whatsapp",
-    version: "1.0.0",
-    async init(context) {
-      const env = context.config;
-      const { getWhatsAppSettings, getMessageTemplateRow, ...staticRest } = config;
-      let db = {};
-      try {
-        db = await getWhatsAppSettings?.() ?? {};
-      } catch {
-      }
-      const merged = mergeWhatsAppConfigLayers(env, db, staticRest);
-      if (!isWhatsAppPluginEnabled(db)) {
-        context.logger.warn("WhatsApp plugin skipped: disabled in settings");
-        return null;
-      }
-      if (!whatsAppConfigured(merged)) {
-        context.logger.warn("WhatsApp plugin skipped: set WHATSAPP_ACCESS_TOKEN and WHATSAPP_PHONE_NUMBER_ID (Meta Cloud API)");
-        return null;
-      }
-      const svc = new WhatsAppService(env, staticRest, getWhatsAppSettings, getMessageTemplateRow);
-      return {
-        send: /* @__PURE__ */ __name((opts) => svc.send(opts), "send")
-      };
-    }
-  };
-}
-__name(whatsappPlugin, "whatsappPlugin");
-
 // src/plugins/payment/index.ts
 function paymentPlugin(config) {
   return {
@@ -2148,103 +1848,6 @@ function cachePlugin(config) {
   };
 }
 __name(cachePlugin, "cachePlugin");
-function connectionFromUrl(redisUrl) {
-  const u = new URL(redisUrl);
-  return {
-    host: u.hostname,
-    port: u.port ? parseInt(u.port, 10) : 6379,
-    ...u.username && {
-      username: u.username
-    },
-    ...u.password && {
-      password: u.password
-    },
-    maxRetriesPerRequest: null
-  };
-}
-__name(connectionFromUrl, "connectionFromUrl");
-var BullMQQueue = class {
-  static {
-    __name(this, "BullMQQueue");
-  }
-  connectionOptions;
-  queues = /* @__PURE__ */ new Map();
-  workers = /* @__PURE__ */ new Map();
-  constructor(redisUrl) {
-    this.connectionOptions = connectionFromUrl(redisUrl);
-  }
-  async add(queueName, data) {
-    const queue = this.getOrCreateQueue(queueName);
-    await queue.add(queueName, data);
-  }
-  registerProcessor(queueName, processor) {
-    if (this.workers.has(queueName)) return;
-    const worker = new Worker(queueName, async (job) => {
-      await processor(job.data);
-    }, {
-      connection: this.connectionOptions
-    });
-    this.workers.set(queueName, worker);
-  }
-  getOrCreateQueue(queueName) {
-    let queue = this.queues.get(queueName);
-    if (!queue) {
-      queue = new Queue(queueName, {
-        connection: this.connectionOptions
-      });
-      this.queues.set(queueName, queue);
-    }
-    return queue;
-  }
-  async destroy() {
-    for (const w of this.workers.values()) await w.close();
-    this.workers.clear();
-    for (const q of this.queues.values()) await q.close();
-    this.queues.clear();
-  }
-};
-var MemoryQueue = class {
-  static {
-    __name(this, "MemoryQueue");
-  }
-  queues = /* @__PURE__ */ new Map();
-  async add(queueName, data) {
-    const q = this.queues.get(queueName);
-    if (!q) throw new Error(`No processor registered for queue: ${queueName}`);
-    void Promise.resolve(q.push(data)).catch(() => void 0);
-  }
-  registerProcessor(queueName, processor) {
-    if (this.queues.has(queueName)) return;
-    const worker = /* @__PURE__ */ __name(async (task) => processor(task), "worker");
-    const q = fastq.promise(worker, 1);
-    this.queues.set(queueName, q);
-  }
-};
-
-// src/plugins/queue/index.ts
-function queuePlugin(config) {
-  let instance;
-  return {
-    name: "queue",
-    version: "1.0.0",
-    async init(context) {
-      const redisUrl = config?.redisUrl ?? context.config.REDIS_URL ?? "";
-      const url = typeof redisUrl === "string" ? redisUrl.trim() : "";
-      if (url) {
-        instance = new BullMQQueue(url);
-        return instance;
-      }
-      instance = new MemoryQueue();
-      return instance;
-    },
-    async destroy() {
-      if (instance && "destroy" in instance && typeof instance.destroy === "function") {
-        await instance.destroy();
-      }
-    }
-  };
-}
-__name(queuePlugin, "queuePlugin");
 
 // src/plugins/pg-boss/index.ts
 function pgBossPlugin(config = {}) {
@@ -2271,310 +1874,46 @@ function pgBossPlugin(config = {}) {
   };
 }
 __name(pgBossPlugin, "pgBossPlugin");
-
-// src/plugins/captcha/captcha-service.ts
-function resolveKeys(config) {
-  const turnstile = config.TURNSTILE_SITE_KEY?.trim() && config.TURNSTILE_SECRET_KEY?.trim() ? {
-    site: config.TURNSTILE_SITE_KEY.trim(),
-    secret: config.TURNSTILE_SECRET_KEY.trim()
-  } : null;
-  const recaptcha = config.RECAPTCHA_SITE_KEY?.trim() && config.RECAPTCHA_SECRET_KEY?.trim() ? {
-    site: config.RECAPTCHA_SITE_KEY.trim(),
-    secret: config.RECAPTCHA_SECRET_KEY.trim()
-  } : null;
-  const raw = config.CAPTCHA_PROVIDER?.trim().toLowerCase();
-  let envDefaultProvider = null;
-  if (raw === "turnstile") envDefaultProvider = "turnstile";
-  else if (raw === "recaptcha_v3" || raw === "recaptcha") envDefaultProvider = "recaptcha_v3";
-  const minScore = parseFloat(config.RECAPTCHA_MIN_SCORE ?? "0.5");
-  return {
-    turnstile,
-    recaptcha,
-    envDefaultProvider,
-    minScore: Number.isFinite(minScore) ? minScore : 0.5
-  };
+function cn(...inputs) {
+  return twMerge(clsx(inputs));
 }
-__name(resolveKeys, "resolveKeys");
-function buildCaptchaPublicConfig(config) {
-  const r = resolveKeys(config);
-  const available = [];
-  if (r.turnstile) available.push({
-    id: "turnstile",
-    siteKey: r.turnstile.site
-  });
-  if (r.recaptcha) available.push({
-    id: "recaptcha_v3",
-    siteKey: r.recaptcha.site
+__name(cn, "cn");
+function generateSlug(title) {
+  return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
+}
+__name(generateSlug, "generateSlug");
+function validateSlug(slug) {
+  const slugRegex = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+  return slugRegex.test(slug) && slug.length >= 3 && slug.length <= 50;
+}
+__name(validateSlug, "validateSlug");
+function formatDate(date) {
+  const d = new Date(date);
+  return d.toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "long",
+    day: "numeric"
   });
-  const enabled = available.length > 0;
-  const multipleProviders = available.length > 1;
-  let activeProvider = null;
-  if (r.turnstile && !r.recaptcha) activeProvider = "turnstile";
-  else if (r.recaptcha && !r.turnstile) activeProvider = "recaptcha_v3";
-  else if (multipleProviders) {
-    activeProvider = r.envDefaultProvider ?? available[0].id;
-  }
-  let siteKey = null;
-  if (activeProvider === "turnstile" && r.turnstile) siteKey = r.turnstile.site;
-  else if (activeProvider === "recaptcha_v3" && r.recaptcha) siteKey = r.recaptcha.site;
-  if (!siteKey && available.length === 1) siteKey = available[0].siteKey;
-  return {
-    enabled,
-    activeProvider,
-    siteKey,
-    availableProviders: available,
-    multipleProviders
-  };
 }
-__name(buildCaptchaPublicConfig, "buildCaptchaPublicConfig");
-function clientIp(req) {
-  const cf = req.headers.get("cf-connecting-ip")?.trim();
-  if (cf) return cf;
-  const xff = req.headers.get("x-forwarded-for")?.trim();
-  if (xff) return xff.split(",")[0].trim();
-  const real = req.headers.get("x-real-ip")?.trim();
-  if (real) return real;
-  return void 0;
+__name(formatDate, "formatDate");
+function formatDateTime(date) {
+  const d = new Date(date);
+  return d.toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "short",
+    day: "numeric",
+    hour: "2-digit",
+    minute: "2-digit"
+  });
 }
-__name(clientIp, "clientIp");
-function normalizeBodyProvider(v) {
-  if (v === "turnstile") return "turnstile";
-  if (v === "recaptcha_v3" || v === "recaptcha") return "recaptcha_v3";
-  return null;
-}
-__name(normalizeBodyProvider, "normalizeBodyProvider");
-function pickVerifyProvider(body, r) {
-  const bodyP = normalizeBodyProvider(body.captchaProvider);
-  const hasT = !!r.turnstile;
-  const hasR = !!r.recaptcha;
-  if (hasT && !hasR) {
-    if (bodyP && bodyP !== "turnstile") return {
-      error: "Invalid captchaProvider"
-    };
-    return {
-      provider: "turnstile",
-      secret: r.turnstile.secret
-    };
-  }
-  if (hasR && !hasT) {
-    if (bodyP && bodyP !== "recaptcha_v3") return {
-      error: "Invalid captchaProvider"
-    };
-    return {
-      provider: "recaptcha_v3",
-      secret: r.recaptcha.secret
-    };
-  }
-  if (!hasT && !hasR) return {
-    error: "Captcha not configured"
-  };
-  if (bodyP === "turnstile" && hasT) return {
-    provider: "turnstile",
-    secret: r.turnstile.secret
-  };
-  if (bodyP === "recaptcha_v3" && hasR) return {
-    provider: "recaptcha_v3",
-    secret: r.recaptcha.secret
-  };
-  if (r.envDefaultProvider === "turnstile" && hasT) return {
-    provider: "turnstile",
-    secret: r.turnstile.secret
-  };
-  if (r.envDefaultProvider === "recaptcha_v3" && hasR) return {
-    provider: "recaptcha_v3",
-    secret: r.recaptcha.secret
-  };
-  return {
-    error: "captchaProvider required (turnstile or recaptcha_v3)"
-  };
-}
-__name(pickVerifyProvider, "pickVerifyProvider");
-async function verifyTurnstile(secret, token, remoteip) {
-  const body = new URLSearchParams({
-    secret,
-    response: token
-  });
-  if (remoteip) body.set("remoteip", remoteip);
-  const res = await fetch("https://challenges.cloudflare.com/turnstile/v0/siteverify", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
-    body: body.toString()
-  });
-  if (!res.ok) return false;
-  const data = await res.json();
-  return data.success === true;
-}
-__name(verifyTurnstile, "verifyTurnstile");
-async function verifyRecaptcha(secret, token, remoteip, minScore) {
-  const body = new URLSearchParams({
-    secret,
-    response: token
-  });
-  if (remoteip) body.set("remoteip", remoteip);
-  const res = await fetch("https://www.google.com/recaptcha/api/siteverify", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
-    body: body.toString()
-  });
-  if (!res.ok) return {
-    ok: false
-  };
-  const data = await res.json();
-  if (data.success !== true) return {
-    ok: false
-  };
-  const score = typeof data.score === "number" ? data.score : 0;
-  return {
-    ok: score >= minScore,
-    score
-  };
-}
-__name(verifyRecaptcha, "verifyRecaptcha");
-var CaptchaService = class {
-  static {
-    __name(this, "CaptchaService");
-  }
-  env;
-  constructor(env) {
-    this.env = env;
-  }
-  isEnforced() {
-    return buildCaptchaPublicConfig(this.env).enabled;
-  }
-  getPublicConfig() {
-    return buildCaptchaPublicConfig(this.env);
-  }
-  async verify(body, req) {
-    if (!this.isEnforced()) return {
-      ok: true
-    };
-    const token = typeof body.captchaToken === "string" ? body.captchaToken.trim() : "";
-    if (!token) return {
-      ok: false,
-      status: 400,
-      message: "captchaToken required"
-    };
-    const r = resolveKeys(this.env);
-    const picked = pickVerifyProvider(body, r);
-    if ("error" in picked) return {
-      ok: false,
-      status: 400,
-      message: picked.error
-    };
-    const ip = clientIp(req);
-    if (picked.provider === "turnstile") {
-      const ok = await verifyTurnstile(picked.secret, token, ip);
-      if (!ok) return {
-        ok: false,
-        status: 400,
-        message: "Captcha verification failed"
-      };
-      return {
-        ok: true
-      };
-    }
-    const vr = await verifyRecaptcha(picked.secret, token, ip, r.minScore);
-    if (!vr.ok) return {
-      ok: false,
-      status: 400,
-      message: "Captcha verification failed or score too low"
-    };
-    return {
-      ok: true
-    };
-  }
-};
-
-// src/plugins/captcha/captcha-plugin.ts
-function captchaPlugin() {
-  return {
-    name: "captcha",
-    version: "1.0.0",
-    async init(ctx) {
-      const s = new CaptchaService(ctx.config);
-      return s.isEnforced() ? s : void 0;
-    }
-  };
-}
-__name(captchaPlugin, "captchaPlugin");
-
-// src/plugins/blog-generator/index.ts
-function blogGeneratorPlugin(config = {}) {
-  return {
-    name: "blog_generator",
-    version: "1.0.0",
-    async init(context) {
-      if (config.enabled === false) {
-        context.logger.warn("Blog Generator plugin skipped: disabled in config");
-        return void 0;
-      }
-      return new BlogGeneratorService();
-    }
-  };
-}
-__name(blogGeneratorPlugin, "blogGeneratorPlugin");
-
-// src/plugins/social-media/index.ts
-function socialMediaPlugin(config = {}) {
-  return {
-    name: "social_media",
-    version: "1.0.0",
-    async init(context) {
-      if (config.enabled === false) {
-        context.logger.warn("Social media plugin skipped: disabled in config");
-        return void 0;
-      }
-      return {
-        name: "social_media"
-      };
-    }
-  };
-}
-__name(socialMediaPlugin, "socialMediaPlugin");
-function cn(...inputs) {
-  return twMerge(clsx(inputs));
-}
-__name(cn, "cn");
-function generateSlug(title) {
-  return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
-}
-__name(generateSlug, "generateSlug");
-function validateSlug(slug) {
-  const slugRegex = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-  return slugRegex.test(slug) && slug.length >= 3 && slug.length <= 50;
-}
-__name(validateSlug, "validateSlug");
-function formatDate(date) {
-  const d = new Date(date);
-  return d.toLocaleDateString("en-US", {
-    year: "numeric",
-    month: "long",
-    day: "numeric"
-  });
-}
-__name(formatDate, "formatDate");
-function formatDateTime(date) {
-  const d = new Date(date);
-  return d.toLocaleDateString("en-US", {
-    year: "numeric",
-    month: "short",
-    day: "numeric",
-    hour: "2-digit",
-    minute: "2-digit"
-  });
-}
-__name(formatDateTime, "formatDateTime");
-function formatDateOnly(date) {
-  const d = new Date(date);
-  return d.toLocaleDateString("en-US", {
-    year: "numeric",
-    month: "long",
-    day: "numeric"
-  });
+__name(formatDateTime, "formatDateTime");
+function formatDateOnly(date) {
+  const d = new Date(date);
+  return d.toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "long",
+    day: "numeric"
+  });
 }
 __name(formatDateOnly, "formatDateOnly");
 function truncateText(text, maxLength) {
@@ -2713,14 +2052,14 @@ async function resolvePublicMetadata(args) {
   return out;
 }
 __name(resolvePublicMetadata, "resolvePublicMetadata");
-function clientIp2(req) {
+function clientIp(req) {
   const cf = req.headers.get("cf-connecting-ip")?.trim();
   if (cf) return cf;
   const xff = req.headers.get("x-forwarded-for")?.trim();
   if (xff) return xff.split(",")[0].trim();
   return req.headers.get("x-real-ip")?.trim() || "unknown";
 }
-__name(clientIp2, "clientIp");
+__name(clientIp, "clientIp");
 var WINDOW_MS = Math.max(1e3, parseInt(process.env.RATE_LIMIT_WINDOW_MS ?? "60000", 10) || 6e4);
 var MAX_REQ = Math.max(1, parseInt(process.env.RATE_LIMIT_MAX ?? "120", 10) || 120);
 var redisClient;
@@ -2808,7 +2147,7 @@ function shouldRateLimitPublicWrite(method, segments, extraRule) {
 }
 __name(shouldRateLimitPublicWrite, "shouldRateLimitPublicWrite");
 function rateLimitKeyForApiRequest(req, segments) {
-  return `${clientIp2(req)}:${segments.join("/")}`;
+  return `${clientIp(req)}:${segments.join("/")}`;
 }
 __name(rateLimitKeyForApiRequest, "rateLimitKeyForApiRequest");
 async function rateLimitPublicApiIfNeeded(req, method, segments, options) {
@@ -2825,7 +2164,7 @@ async function rateLimitPublicApiIfNeeded(req, method, segments, options) {
 __name(rateLimitPublicApiIfNeeded, "rateLimitPublicApiIfNeeded");
 var CHECKOUT_PREFIX = "checkout:";
 async function rateLimitCheckoutPost(req) {
-  const key = `${CHECKOUT_PREFIX}${clientIp2(req)}`;
+  const key = `${CHECKOUT_PREFIX}${clientIp(req)}`;
   const ok = await allowRateLimit(key);
   if (ok) return null;
   return NextResponse.json({
@@ -2935,6 +2274,36 @@ async function sendOrderPlacedEmailsAfterConfirmation(orderId, deps) {
   }
 }
 __name(sendOrderPlacedEmailsAfterConfirmation, "sendOrderPlacedEmailsAfterConfirmation");
+
+// src/lib/order-notification-trigger-seeds.ts
+var DEFAULT_ORDER_NOTIFICATION_TRIGGER_SEEDS = [
+  {
+    triggerKey: "order_placed",
+    label: "Order placed",
+    description: "Fires when a new order is created (storefront checkout or admin).",
+    category: "order",
+    sortOrder: 1
+  },
+  {
+    triggerKey: "order_cancelled",
+    label: "Order cancelled",
+    description: "Fires when an order is cancelled (includes refund amount when applicable).",
+    category: "order",
+    sortOrder: 2
+  }
+];
+
+// src/lib/order-notification-triggers.ts
+var ORDER_NOTIFICATION_TRIGGERS = [
+  {
+    key: "order_placed",
+    label: "Order placed"
+  },
+  {
+    key: "order_cancelled",
+    label: "Order cancelled"
+  }
+];
 function createDataSourceManager(entityMap, options) {
   const entities = Object.values(entityMap);
   const databaseUrl = options?.databaseUrl ?? process.env.DATABASE_URL;
@@ -3043,16 +2412,44 @@ __name(seedDefaultAdmin, "seedDefaultAdmin");
 // src/lib/enrich-user-vendor-context.ts
 async function enrichUserWithVendorContext(dataSource, user) {
   if (!user) return null;
+  const multiVendorEnabled = await checkMultiVendorEnabled(dataSource);
   const ctx = await loadUserVendorContext(dataSource, user.id);
+  const isRBACAdmin = isSuperAdmin({
+    groupId: user.groupId ?? void 0,
+    groupName: user.group?.name,
+    isRBACAdmin: false
+  });
+  const isVendorOnlyUser = !isRBACAdmin && (ctx.vendorIds.length > 0 || isVendorGroupName(user.group?.name));
+  if (!multiVendorEnabled && isVendorOnlyUser) {
+    console.log("[enrich-vendor]", {
+      email: user.email,
+      multiVendorEnabled,
+      vendorIdsFromCtx: ctx.vendorIds,
+      groupName: user.group?.name,
+      isRBACAdmin,
+      adminAccess: user.adminAccess,
+      isVendorOnlyUser
+    });
+    return null;
+  }
+  const effectiveCtx = multiVendorEnabled ? ctx : {
+    vendorIds: [],
+    activeVendorId: null,
+    vendorRole: null,
+    vendorRoleId: null,
+    vendorRoleName: null,
+    isVendorRoleOwner: false,
+    vendorEntityPerms: {}
+  };
   return {
     ...user,
-    vendorIds: ctx.vendorIds,
-    activeVendorId: ctx.activeVendorId,
-    vendorRole: ctx.vendorRole,
-    vendorRoleId: ctx.vendorRoleId,
-    vendorRoleName: ctx.vendorRoleName,
-    isVendorRoleOwner: ctx.isVendorRoleOwner,
-    vendorEntityPerms: ctx.vendorEntityPerms
+    vendorIds: effectiveCtx.vendorIds,
+    activeVendorId: effectiveCtx.activeVendorId,
+    vendorRole: effectiveCtx.vendorRole,
+    vendorRoleId: effectiveCtx.vendorRoleId,
+    vendorRoleName: effectiveCtx.vendorRoleName,
+    isVendorRoleOwner: effectiveCtx.isVendorRoleOwner,
+    vendorEntityPerms: effectiveCtx.vendorEntityPerms
   };
 }
 __name(enrichUserWithVendorContext, "enrichUserWithVendorContext");
@@ -3131,6 +2528,270 @@ async function withAdminRlsContext(dataSource, fn) {
 }
 __name(withAdminRlsContext, "withAdminRlsContext");
 
+// src/plugins/captcha/captcha-service.ts
+function resolveKeys(config) {
+  const turnstile = config.TURNSTILE_SITE_KEY?.trim() && config.TURNSTILE_SECRET_KEY?.trim() ? {
+    site: config.TURNSTILE_SITE_KEY.trim(),
+    secret: config.TURNSTILE_SECRET_KEY.trim()
+  } : null;
+  const recaptcha = config.RECAPTCHA_SITE_KEY?.trim() && config.RECAPTCHA_SECRET_KEY?.trim() ? {
+    site: config.RECAPTCHA_SITE_KEY.trim(),
+    secret: config.RECAPTCHA_SECRET_KEY.trim()
+  } : null;
+  const raw = config.CAPTCHA_PROVIDER?.trim().toLowerCase();
+  let envDefaultProvider = null;
+  if (raw === "turnstile") envDefaultProvider = "turnstile";
+  else if (raw === "recaptcha_v3" || raw === "recaptcha") envDefaultProvider = "recaptcha_v3";
+  const minScore = parseFloat(config.RECAPTCHA_MIN_SCORE ?? "0.5");
+  return {
+    turnstile,
+    recaptcha,
+    envDefaultProvider,
+    minScore: Number.isFinite(minScore) ? minScore : 0.5
+  };
+}
+__name(resolveKeys, "resolveKeys");
+function buildCaptchaPublicConfig(config) {
+  const r = resolveKeys(config);
+  const available = [];
+  if (r.turnstile) available.push({
+    id: "turnstile",
+    siteKey: r.turnstile.site
+  });
+  if (r.recaptcha) available.push({
+    id: "recaptcha_v3",
+    siteKey: r.recaptcha.site
+  });
+  const enabled = available.length > 0;
+  const multipleProviders = available.length > 1;
+  let activeProvider = null;
+  if (r.turnstile && !r.recaptcha) activeProvider = "turnstile";
+  else if (r.recaptcha && !r.turnstile) activeProvider = "recaptcha_v3";
+  else if (multipleProviders) {
+    activeProvider = r.envDefaultProvider ?? available[0].id;
+  }
+  let siteKey = null;
+  if (activeProvider === "turnstile" && r.turnstile) siteKey = r.turnstile.site;
+  else if (activeProvider === "recaptcha_v3" && r.recaptcha) siteKey = r.recaptcha.site;
+  if (!siteKey && available.length === 1) siteKey = available[0].siteKey;
+  return {
+    enabled,
+    activeProvider,
+    siteKey,
+    availableProviders: available,
+    multipleProviders
+  };
+}
+__name(buildCaptchaPublicConfig, "buildCaptchaPublicConfig");
+function clientIp2(req) {
+  const cf = req.headers.get("cf-connecting-ip")?.trim();
+  if (cf) return cf;
+  const xff = req.headers.get("x-forwarded-for")?.trim();
+  if (xff) return xff.split(",")[0].trim();
+  const real = req.headers.get("x-real-ip")?.trim();
+  if (real) return real;
+  return void 0;
+}
+__name(clientIp2, "clientIp");
+function normalizeBodyProvider(v) {
+  if (v === "turnstile") return "turnstile";
+  if (v === "recaptcha_v3" || v === "recaptcha") return "recaptcha_v3";
+  return null;
+}
+__name(normalizeBodyProvider, "normalizeBodyProvider");
+function pickVerifyProvider(body, r) {
+  const bodyP = normalizeBodyProvider(body.captchaProvider);
+  const hasT = !!r.turnstile;
+  const hasR = !!r.recaptcha;
+  if (hasT && !hasR) {
+    if (bodyP && bodyP !== "turnstile") return {
+      error: "Invalid captchaProvider"
+    };
+    return {
+      provider: "turnstile",
+      secret: r.turnstile.secret
+    };
+  }
+  if (hasR && !hasT) {
+    if (bodyP && bodyP !== "recaptcha_v3") return {
+      error: "Invalid captchaProvider"
+    };
+    return {
+      provider: "recaptcha_v3",
+      secret: r.recaptcha.secret
+    };
+  }
+  if (!hasT && !hasR) return {
+    error: "Captcha not configured"
+  };
+  if (bodyP === "turnstile" && hasT) return {
+    provider: "turnstile",
+    secret: r.turnstile.secret
+  };
+  if (bodyP === "recaptcha_v3" && hasR) return {
+    provider: "recaptcha_v3",
+    secret: r.recaptcha.secret
+  };
+  if (r.envDefaultProvider === "turnstile" && hasT) return {
+    provider: "turnstile",
+    secret: r.turnstile.secret
+  };
+  if (r.envDefaultProvider === "recaptcha_v3" && hasR) return {
+    provider: "recaptcha_v3",
+    secret: r.recaptcha.secret
+  };
+  return {
+    error: "captchaProvider required (turnstile or recaptcha_v3)"
+  };
+}
+__name(pickVerifyProvider, "pickVerifyProvider");
+async function verifyTurnstile(secret, token, remoteip) {
+  const body = new URLSearchParams({
+    secret,
+    response: token
+  });
+  if (remoteip) body.set("remoteip", remoteip);
+  const res = await fetch("https://challenges.cloudflare.com/turnstile/v0/siteverify", {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: body.toString()
+  });
+  if (!res.ok) return false;
+  const data = await res.json();
+  return data.success === true;
+}
+__name(verifyTurnstile, "verifyTurnstile");
+async function verifyRecaptcha(secret, token, remoteip, minScore) {
+  const body = new URLSearchParams({
+    secret,
+    response: token
+  });
+  if (remoteip) body.set("remoteip", remoteip);
+  const res = await fetch("https://www.google.com/recaptcha/api/siteverify", {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: body.toString()
+  });
+  if (!res.ok) return {
+    ok: false
+  };
+  const data = await res.json();
+  if (data.success !== true) return {
+    ok: false
+  };
+  const score = typeof data.score === "number" ? data.score : 0;
+  return {
+    ok: score >= minScore,
+    score
+  };
+}
+__name(verifyRecaptcha, "verifyRecaptcha");
+var CaptchaService = class {
+  static {
+    __name(this, "CaptchaService");
+  }
+  env;
+  constructor(env) {
+    this.env = env;
+  }
+  isEnforced() {
+    return buildCaptchaPublicConfig(this.env).enabled;
+  }
+  getPublicConfig() {
+    return buildCaptchaPublicConfig(this.env);
+  }
+  async verify(body, req) {
+    if (!this.isEnforced()) return {
+      ok: true
+    };
+    const token = typeof body.captchaToken === "string" ? body.captchaToken.trim() : "";
+    if (!token) return {
+      ok: false,
+      status: 400,
+      message: "captchaToken required"
+    };
+    const r = resolveKeys(this.env);
+    const picked = pickVerifyProvider(body, r);
+    if ("error" in picked) return {
+      ok: false,
+      status: 400,
+      message: picked.error
+    };
+    const ip = clientIp2(req);
+    if (picked.provider === "turnstile") {
+      const ok = await verifyTurnstile(picked.secret, token, ip);
+      if (!ok) return {
+        ok: false,
+        status: 400,
+        message: "Captcha verification failed"
+      };
+      return {
+        ok: true
+      };
+    }
+    const vr = await verifyRecaptcha(picked.secret, token, ip, r.minScore);
+    if (!vr.ok) return {
+      ok: false,
+      status: 400,
+      message: "Captcha verification failed or score too low"
+    };
+    return {
+      ok: true
+    };
+  }
+};
+
+// src/plugins/captcha/captcha-plugin.ts
+function captchaPlugin() {
+  return {
+    name: "captcha",
+    version: "1.0.0",
+    async init(ctx) {
+      const s = new CaptchaService(ctx.config);
+      return s.isEnforced() ? s : void 0;
+    }
+  };
+}
+__name(captchaPlugin, "captchaPlugin");
+
+// src/plugins/blog-generator/index.ts
+function blogGeneratorPlugin(config = {}) {
+  return {
+    name: "blog_generator",
+    version: "1.0.0",
+    async init(context) {
+      if (config.enabled === false) {
+        context.logger.warn("Blog Generator plugin skipped: disabled in config");
+        return void 0;
+      }
+      return new BlogGeneratorService();
+    }
+  };
+}
+__name(blogGeneratorPlugin, "blogGeneratorPlugin");
+
+// src/plugins/social-media/index.ts
+function socialMediaPlugin(config = {}) {
+  return {
+    name: "social_media",
+    version: "1.0.0",
+    async init(context) {
+      if (config.enabled === false) {
+        context.logger.warn("Social media plugin skipped: disabled in config");
+        return void 0;
+      }
+      return {
+        name: "social_media"
+      };
+    }
+  };
+}
+__name(socialMediaPlugin, "socialMediaPlugin");
+
 // src/admin/config.ts
 var DEFAULT_ADMIN_NAV = [
   {
@@ -3172,6 +2833,6 @@ var DEFAULT_ADMIN_NAV = [
 ];
 
 // src/index.ts
-console.log("\u{1F525} USING\u{1F525}");
+console.log("\u{1F525}USING LOCAL CMS CORE \u{1F525}");
 
-export { CaptchaService, DEFAULT_ADMIN_NAV, ERPSubmissionService, LlmService, allowRateLimit, analyticsPlugin, blogGeneratorPlugin, buildCaptchaPublicConfig, cachePlugin, captchaPlugin, cn, createCmsApp, createDataSourceManager, enrichUserWithVendorContext, erpPlugin, fetchSeoBySlug, formatDate, formatDateOnly, formatDateTime, generateSlug, llmPlugin, loadPublicThemeSettings, localStoragePlugin, mergeSeoBySlug, parseHfInferenceEmbeddingBody, paymentPlugin, pgBossPlugin, queuePlugin, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, resolvePublicMetadata, s3StoragePlugin, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, shouldRateLimitPublicWrite, smsPlugin, socialMediaPlugin, truncateText, validateSlug, whatsappPlugin, withAdminRlsContext, withVendorRlsContext };
+export { CaptchaService, DEFAULT_ADMIN_NAV, DEFAULT_ORDER_NOTIFICATION_TRIGGER_SEEDS, ERPSubmissionService, LlmService, ORDER_NOTIFICATION_TRIGGERS, allowRateLimit, analyticsPlugin, blogGeneratorPlugin, buildCaptchaPublicConfig, cachePlugin, captchaPlugin, cn, createDataSourceManager, enrichUserWithVendorContext, erpPlugin, fetchSeoBySlug, formatDate, formatDateOnly, formatDateTime, generateSlug, llmPlugin, loadPublicThemeSettings, localStoragePlugin, mergeSeoBySlug, parseHfInferenceEmbeddingBody, paymentPlugin, pgBossPlugin, rateLimitCheckoutPost, rateLimitKeyForApiRequest, rateLimitPublicApiIfNeeded, resolvePublicMetadata, s3StoragePlugin, seedDefaultAdmin, sendOrderPlacedEmailsAfterConfirmation, shouldRateLimitPublicWrite, smsPlugin, socialMediaPlugin, truncateText, validateSlug, withAdminRlsContext, withVendorRlsContext };