@infuro/cms-core 1.0.39 → 1.0.41

package/dist/admin.js

@@ -10,7 +10,7 @@ import { Slot } from '@radix-ui/react-slot';
 import { cva } from 'class-variance-authority';
 import * as DropdownMenuPrimitive from '@radix-ui/react-dropdown-menu';
 import * as LucideIcons from 'lucide-react';
-import { ChevronDown, User, Settings, LogOut, LayoutDashboard, Store, FolderTree, Layers, Building2, CalendarDays, ShoppingBag, Package, Receipt, BadgePercent, ShoppingCart, CreditCard, Users, Inbox, File, LinkIcon, ClipboardList, MessageSquare, Image as Image$1, FileText, Shield, Puzzle, X, Plus, MoreVertical, Upload, Download, Edit, Copy, RefreshCw, Trash2, Save, Check, Search, AlertCircle, MapPin, BarChart3, TrendingUp, UserCheck, Activity, Globe, Eye, MousePointer, ArrowLeftRight, RotateCcw, KeyRound, Loader2, CalendarClock, Rss, ArrowLeft, Pencil, FolderPlus, LayoutGrid, List, Move, Archive, Edit2, ExternalLink, Power, Star, ChevronUp, Zap, Filter, CheckCircle2, ImageIcon, GripVertical, ChevronRight, ArrowRight, ArrowUpRight, IndianRupee, XCircle, Clock, Play, MessageCircle, Mail, Bot, FileUp, Tag, Box, SlidersHorizontal, Calculator, Link2 as Link2$1, Unlink, Gift, MoreHorizontal, Bell, QrCode, Car, Circle, Settings2, DollarSign, Hash, ChevronLeft, Share2, Smartphone, HardDrive, Folder, Film } from 'lucide-react';
+import { ChevronDown, User, Settings, LogOut, LayoutDashboard, Store, FolderTree, Layers, Building2, CalendarDays, ShoppingBag, Package, Receipt, BadgePercent, ShoppingCart, CreditCard, Users, Inbox, File, LinkIcon, ClipboardList, MessageSquare, Image as Image$1, FileText, Shield, Puzzle, X, Plus, MoreVertical, Upload, Download, Edit, Copy, RefreshCw, Trash2, Save, Check, Search, AlertCircle, MapPin, BarChart3, TrendingUp, UserCheck, Activity, Globe, Eye, MousePointer, ArrowLeftRight, RotateCcw, KeyRound, Loader2, CalendarClock, Rss, ArrowLeft, Pencil, FolderPlus, LayoutGrid, List, Move, Archive, Edit2, ExternalLink, Power, Star, ChevronUp, Mail, Zap, Filter, CheckCircle2, ImageIcon, GripVertical, ChevronRight, ArrowRight, ArrowUpRight, IndianRupee, XCircle, Clock, Play, MessageCircle, Bot, FileUp, Tag, Box, SlidersHorizontal, Calculator, Link2 as Link2$1, Unlink, Gift, MoreHorizontal, Bell, QrCode, Car, Circle, Settings2, DollarSign, Hash, ChevronLeft, Share2, Smartphone, HardDrive, Folder, Film } from 'lucide-react';
 import Image from 'next/image';
 import Link2 from 'next/link';
 import { usePathname, useSearchParams, useRouter } from 'next/navigation';
@@ -457,7 +457,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.39" ;
+    CMS_VERSION = "1.0.41" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -9110,11 +9110,40 @@ function InvitePageContent() {
     confirmPassword: ""
   });
   const [loading, setLoading] = useState(false);
+  const [checking, setChecking] = useState(Boolean(token));
+  const [inviteValid, setInviteValid] = useState(false);
   const [message, setMessage] = useState("");
   useEffect(() => {
     if (!token) {
       setMessage("Invalid invite link. Token is missing.");
+      setChecking(false);
+      return;
     }
+    let cancelled = false;
+    void (async () => {
+      try {
+        const res = await fetch(`/api/users/invite?token=${encodeURIComponent(token)}`);
+        const result = await res.json();
+        if (cancelled) return;
+        if (res.ok && result.valid === true) {
+          setInviteValid(true);
+          setMessage("");
+        } else {
+          setInviteValid(false);
+          setMessage(result.error || "This invitation is no longer valid.");
+        }
+      } catch {
+        if (!cancelled) {
+          setInviteValid(false);
+          setMessage("Could not verify this invite link. Please try again.");
+        }
+      } finally {
+        if (!cancelled) setChecking(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
   }, [
     token
   ]);
@@ -9157,12 +9186,21 @@ function InvitePageContent() {
       setLoading(false);
     }
   }, "handleSubmit");
-  if (!token) {
+  if (!token || checking) {
     return /* @__PURE__ */ React26__default.createElement(AuthPageLayout, null, /* @__PURE__ */ React26__default.createElement("div", {
       className: "w-full space-y-4 p-5 sm:p-6 bg-white rounded-lg shadow-md text-center"
     }, /* @__PURE__ */ React26__default.createElement("h2", {
       className: "text-xl font-bold text-gray-900"
-    }, "Invalid invite"), /* @__PURE__ */ React26__default.createElement("p", {
+    }, checking ? "Checking invite\u2026" : "Invalid invite"), !checking && /* @__PURE__ */ React26__default.createElement("p", {
+      className: "text-sm text-gray-600"
+    }, message)));
+  }
+  if (!inviteValid) {
+    return /* @__PURE__ */ React26__default.createElement(AuthPageLayout, null, /* @__PURE__ */ React26__default.createElement("div", {
+      className: "w-full space-y-4 p-5 sm:p-6 bg-white rounded-lg shadow-md text-center"
+    }, /* @__PURE__ */ React26__default.createElement("h2", {
+      className: "text-xl font-bold text-gray-900"
+    }, "Invite unavailable"), /* @__PURE__ */ React26__default.createElement("p", {
       className: "text-sm text-gray-600"
     }, message)));
   }
@@ -12670,7 +12708,7 @@ function SettingsPage() {
     onCheckedChange: setMultiVendorEnabled
   }), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement(Label3, {
     className: "text-sm font-medium text-gray-700"
-  }, "Multi Vendor Support"), /* @__PURE__ */ React.createElement("p", {
+  }, "Multi Vendor"), /* @__PURE__ */ React.createElement("p", {
     className: "text-xs text-gray-500"
   }, "Enable vendor portals, vendor logins, and vendor-scoped store data. Disabling this blocks vendor-only accounts from signing in."))), storeEnabled && /* @__PURE__ */ React.createElement("div", {
     className: "mt-4 flex items-center gap-3 p-4 bg-gray-50 rounded-lg border border-gray-200"
@@ -31495,10 +31533,10 @@ function VendorEditPage({ vendorId }) {
   const [ownerPhone, setOwnerPhone] = useState("");
   const [ownerDesignation, setOwnerDesignation] = useState("");
   const [termsAccepted, setTermsAccepted] = useState(false);
-  const [activationMode, setActivationMode] = useState("invite");
-  const [sendOwnerEmail, setSendOwnerEmail] = useState(true);
-  const [ownerPassword, setOwnerPassword] = useState("");
-  const [ownerPasswordConfirm, setOwnerPasswordConfirm] = useState("");
+  const [reinviting, setReinviting] = useState(false);
+  const [inviteDialog, setInviteDialog] = useState(null);
+  const [sendingInviteEmail, setSendingInviteEmail] = useState(false);
+  const [linkCopied, setLinkCopied] = useState(false);
   const vendorPayload = /* @__PURE__ */ __name(() => ({
     name: name.trim(),
     legalName: legalName.trim() || null,
@@ -31578,11 +31616,115 @@ function VendorEditPage({ vendorId }) {
     vendorId,
     create
   ]);
+  const canReinviteOwner = !create && (inviteStatus === "pending" || inviteStatus === "expired");
+  const handleReinviteOwner = /* @__PURE__ */ __name(async () => {
+    setReinviting(true);
+    setErrors([]);
+    try {
+      const res = await fetch(`/api/admin/vendors/${vendorId}/resend-invite`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          sendEmail: true
+        })
+      });
+      const data = await res.json();
+      if (!res.ok) {
+        setErrors([
+          data.error || data.message || "Failed to resend invite"
+        ]);
+        return;
+      }
+      const refreshRes = await fetch(`/api/vendors/${vendorId}`);
+      if (refreshRes.ok) {
+        const refreshed = await refreshRes.json();
+        setInviteStatus(refreshed.inviteStatus ?? "pending");
+        setMetadata(refreshed.metadata && typeof refreshed.metadata === "object" ? refreshed.metadata : null);
+      } else {
+        setInviteStatus("pending");
+      }
+      const inviteLink = typeof data.inviteLink === "string" ? data.inviteLink.trim() : "";
+      if (inviteLink) {
+        try {
+          await navigator.clipboard.writeText(inviteLink);
+          toast.success(data.message || "Invite resent. New link copied \u2014 previous invite links no longer work.");
+        } catch {
+          toast.success(data.message || "Invite resent.");
+          toast.message("New invite link (previous links are invalid)", {
+            description: inviteLink
+          });
+        }
+      } else {
+        toast.success(data.message || "Invite resent.");
+      }
+    } catch {
+      setErrors([
+        "Failed to resend invite"
+      ]);
+    } finally {
+      setReinviting(false);
+    }
+  }, "handleReinviteOwner");
   if (!canOnboardVendors(session?.user)) {
     return /* @__PURE__ */ React26__default.createElement(VendorAccessDenied, {
       groupName: sessionUser?.groupName
     });
   }
+  const copyInviteLink = /* @__PURE__ */ __name(async () => {
+    const inviteLink = inviteDialog?.inviteLink;
+    if (!inviteLink) {
+      toast.error("Invite link is not available");
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(inviteLink);
+      setLinkCopied(true);
+      toast.success("Invite link copied");
+      window.setTimeout(() => setLinkCopied(false), 2e3);
+    } catch {
+      toast.error("Could not copy invite link");
+    }
+  }, "copyInviteLink");
+  const sendInviteEmail = /* @__PURE__ */ __name(async () => {
+    if (!inviteDialog) return;
+    setSendingInviteEmail(true);
+    try {
+      const res = await fetch(`/api/admin/vendors/${inviteDialog.vendorId}/resend-invite`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          sendEmail: true,
+          rotate: false
+        })
+      });
+      const data = await res.json();
+      if (!res.ok) {
+        toast.error(data.error || data.message || "Failed to send invite email");
+        return;
+      }
+      const nextLink = typeof data.inviteLink === "string" ? data.inviteLink.trim() : "";
+      if (nextLink) {
+        setInviteDialog((prev) => prev ? {
+          ...prev,
+          inviteLink: nextLink
+        } : prev);
+      }
+      toast.success(data.emailSent ? "Invite email sent" : data.message || "Invite email queued");
+    } catch {
+      toast.error("Failed to send invite email");
+    } finally {
+      setSendingInviteEmail(false);
+    }
+  }, "sendInviteEmail");
+  const closeInviteDialog = /* @__PURE__ */ __name(() => {
+    setInviteDialog(null);
+    setLinkCopied(false);
+    router.push(listReturnUrl);
+  }, "closeInviteDialog");
   const handleCreate = /* @__PURE__ */ __name(async () => {
     setSaving(true);
     setErrors([]);
@@ -31608,29 +31750,6 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
       return;
     }
-    if (activationMode === "password") {
-      if (!ownerPassword) {
-        setErrors([
-          "Enter a password for the owner account"
-        ]);
-        setSaving(false);
-        return;
-      }
-      if (ownerPassword !== ownerPasswordConfirm) {
-        setErrors([
-          "Passwords do not match"
-        ]);
-        setSaving(false);
-        return;
-      }
-      if (ownerPassword.length < 6) {
-        setErrors([
-          "Password must be at least 6 characters"
-        ]);
-        setSaving(false);
-        return;
-      }
-    }
     try {
       const res = await fetch("/api/admin/vendors/onboard", {
         method: "POST",
@@ -31638,18 +31757,15 @@ function VendorEditPage({ vendorId }) {
           "Content-Type": "application/json"
         },
         body: JSON.stringify({
-          activation: activationMode,
-          sendOwnerEmail,
+          activation: "invite",
+          sendOwnerEmail: false,
           termsAccepted: true,
           vendor: vendorPayload(),
           user: {
             name: ownerName.trim(),
             email: ownerEmail.trim(),
             phone: ownerPhone.trim() || void 0,
-            designation: ownerDesignation.trim() || void 0,
-            ...activationMode === "password" ? {
-              password: ownerPassword
-            } : {}
+            designation: ownerDesignation.trim() || void 0
           }
         })
       });
@@ -31660,22 +31776,19 @@ function VendorEditPage({ vendorId }) {
         ]);
         return;
       }
-      const message = data.message || "Vendor created";
-      const inviteLink = typeof data.inviteLink === "string" ? data.inviteLink.trim() : "";
-      if (inviteLink) {
-        try {
-          await navigator.clipboard.writeText(inviteLink);
-          toast.success(`${message} Invite link copied to clipboard.`);
-        } catch {
-          toast.success(message);
-          toast.message("Invite link", {
-            description: inviteLink
-          });
-        }
-      } else {
-        toast.success(message);
+      const vendorIdNum = Number(data.vendor?.id);
+      const inviteLink = typeof data.inviteLink === "string" && data.inviteLink.trim() ? data.inviteLink.trim() : "";
+      if (!Number.isFinite(vendorIdNum) || vendorIdNum <= 0 || !inviteLink) {
+        toast.success(data.message || "Vendor created");
+        router.push(listReturnUrl);
+        return;
       }
-      router.push(listReturnUrl);
+      toast.success(data.message || "Vendor created");
+      setLinkCopied(false);
+      setInviteDialog({
+        vendorId: vendorIdNum,
+        inviteLink
+      });
     } catch {
       setErrors([
         "Request failed"
@@ -31746,7 +31859,6 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
     }
   }, "handleSave");
-  const createSubmitLabel = activationMode === "password" ? sendOwnerEmail ? "Create vendor & send welcome email" : "Create vendor & set password" : sendOwnerEmail ? "Create vendor & send invite" : "Create vendor & copy invite link";
   if (loading) {
     return /* @__PURE__ */ React26__default.createElement("div", {
       className: "flex items-center justify-center py-12"
@@ -31758,11 +31870,11 @@ function VendorEditPage({ vendorId }) {
     className: "rounded-lg bg-white shadow-md min-h-[420px]"
   }, /* @__PURE__ */ React26__default.createElement(DetailPageHeader, {
     title: create ? "Add vendor" : "Edit vendor",
-    subtitle: create ? "Register a vendor store and create the owner account" : "Update store and registration details",
+    subtitle: create ? "Register a vendor store and create the owner invite" : "Update store and registration details",
     closeHref: listReturnUrl,
     menuItems: create ? [
       {
-        label: saving ? "Creating\u2026" : createSubmitLabel,
+        label: saving ? "Creating\u2026" : "Create vendor",
         icon: Save,
         onClick: handleCreate
       }
@@ -32009,7 +32121,20 @@ function VendorEditPage({ vendorId }) {
       readOnly: true,
       value: inviteStatus,
       className: `mt-1 ${fieldClass} bg-gray-100`
-    })), /* @__PURE__ */ React26__default.createElement("div", null, /* @__PURE__ */ React26__default.createElement(FieldLabel, null, "Active"), /* @__PURE__ */ React26__default.createElement(Input, {
+    })), canReinviteOwner && /* @__PURE__ */ React26__default.createElement("div", {
+      className: "pt-1"
+    }, /* @__PURE__ */ React26__default.createElement(Button, {
+      type: "button",
+      variant: "outline",
+      size: "sm",
+      className: "w-full",
+      disabled: reinviting || saving,
+      onClick: /* @__PURE__ */ __name(() => void handleReinviteOwner(), "onClick")
+    }, /* @__PURE__ */ React26__default.createElement(Mail, {
+      className: "h-4 w-4 mr-2"
+    }), reinviting ? "Sending invite\u2026" : "Re-invite owner"), /* @__PURE__ */ React26__default.createElement("p", {
+      className: "mt-2 text-xs text-gray-500"
+    }, "Sends a new invite email and invalidates any previous invite link immediately.")), /* @__PURE__ */ React26__default.createElement("div", null, /* @__PURE__ */ React26__default.createElement(FieldLabel, null, "Active"), /* @__PURE__ */ React26__default.createElement(Input, {
       readOnly: true,
       value: active ? "Yes" : "No",
       className: `mt-1 ${fieldClass} bg-gray-100`
@@ -32017,64 +32142,42 @@ function VendorEditPage({ vendorId }) {
       className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
     }, "Owner access"), /* @__PURE__ */ React26__default.createElement("div", {
       className: sectionCls6
-    }, /* @__PURE__ */ React26__default.createElement(RadioGroup2, {
-      value: activationMode,
-      onValueChange: /* @__PURE__ */ __name((v) => setActivationMode(v), "onValueChange"),
-      className: "gap-3"
-    }, /* @__PURE__ */ React26__default.createElement("div", {
-      className: "flex items-start gap-2"
-    }, /* @__PURE__ */ React26__default.createElement(RadioGroupItem, {
-      value: "invite",
-      id: "activation-invite",
-      className: "mt-0.5"
-    }), /* @__PURE__ */ React26__default.createElement(Label3, {
-      htmlFor: "activation-invite",
-      className: "font-normal cursor-pointer text-sm"
-    }, "Send invite link")), /* @__PURE__ */ React26__default.createElement("div", {
-      className: "flex items-start gap-2"
-    }, /* @__PURE__ */ React26__default.createElement(RadioGroupItem, {
-      value: "password",
-      id: "activation-password",
-      className: "mt-0.5"
-    }), /* @__PURE__ */ React26__default.createElement(Label3, {
-      htmlFor: "activation-password",
-      className: "font-normal cursor-pointer text-sm"
-    }, "Set password now"))), /* @__PURE__ */ React26__default.createElement("div", {
-      className: "flex items-center gap-2 pt-1"
-    }, /* @__PURE__ */ React26__default.createElement(Checkbox, {
-      id: "sendOwnerEmail",
-      checked: sendOwnerEmail,
-      onCheckedChange: /* @__PURE__ */ __name((checked) => setSendOwnerEmail(checked === true), "onCheckedChange")
-    }), /* @__PURE__ */ React26__default.createElement(Label3, {
-      htmlFor: "sendOwnerEmail",
-      className: "font-normal cursor-pointer text-sm"
-    }, activationMode === "invite" ? "Send invite email" : "Send welcome email")), activationMode === "password" && /* @__PURE__ */ React26__default.createElement("div", {
-      className: "space-y-3 pt-1"
-    }, /* @__PURE__ */ React26__default.createElement("div", null, /* @__PURE__ */ React26__default.createElement(FieldLabel, {
-      htmlFor: "ownerPassword",
-      required: true
-    }, "Password"), /* @__PURE__ */ React26__default.createElement(Input, {
-      id: "ownerPassword",
-      type: "password",
-      value: ownerPassword,
-      onChange: /* @__PURE__ */ __name((e) => setOwnerPassword(e.target.value), "onChange"),
-      className: `mt-1 ${fieldClass}`
-    })), /* @__PURE__ */ React26__default.createElement("div", null, /* @__PURE__ */ React26__default.createElement(FieldLabel, {
-      htmlFor: "ownerPasswordConfirm",
-      required: true
-    }, "Confirm password"), /* @__PURE__ */ React26__default.createElement(Input, {
-      id: "ownerPasswordConfirm",
-      type: "password",
-      value: ownerPasswordConfirm,
-      onChange: /* @__PURE__ */ __name((e) => setOwnerPasswordConfirm(e.target.value), "onChange"),
-      className: `mt-1 ${fieldClass}`
-    }))), /* @__PURE__ */ React26__default.createElement(Button, {
+    }, /* @__PURE__ */ React26__default.createElement("p", {
+      className: "text-sm text-gray-600"
+    }, "Creates the vendor and an invite for the owner. After create, you can send the invite email or copy the invite link."), /* @__PURE__ */ React26__default.createElement(Button, {
       type: "button",
       disabled: saving,
       onClick: handleCreate,
       className: "w-full"
-    }, saving ? "Creating\u2026" : createSubmitLabel))) : void 0)
-  }));
+    }, saving ? "Creating\u2026" : "Create vendor"))) : void 0)
+  }), /* @__PURE__ */ React26__default.createElement(Dialog, {
+    open: inviteDialog != null,
+    onOpenChange: /* @__PURE__ */ __name((open) => {
+      if (!open) closeInviteDialog();
+    }, "onOpenChange")
+  }, /* @__PURE__ */ React26__default.createElement(DialogContent, {
+    className: "max-w-md"
+  }, /* @__PURE__ */ React26__default.createElement(DialogHeader, null, /* @__PURE__ */ React26__default.createElement(DialogTitle, null, "Vendor created"), /* @__PURE__ */ React26__default.createElement(DialogDescription, null, "Send an invite email to the owner, or copy the invite link to share another way. The link is not shown here.")), /* @__PURE__ */ React26__default.createElement("div", {
+    className: "flex flex-col gap-2 py-2"
+  }, /* @__PURE__ */ React26__default.createElement(Button, {
+    type: "button",
+    disabled: sendingInviteEmail,
+    onClick: /* @__PURE__ */ __name(() => void sendInviteEmail(), "onClick")
+  }, /* @__PURE__ */ React26__default.createElement(Mail, {
+    className: "h-4 w-4 mr-2"
+  }), sendingInviteEmail ? "Sending\u2026" : "Send email"), /* @__PURE__ */ React26__default.createElement(Button, {
+    type: "button",
+    variant: "outline",
+    onClick: /* @__PURE__ */ __name(() => void copyInviteLink(), "onClick")
+  }, linkCopied ? /* @__PURE__ */ React26__default.createElement(Check, {
+    className: "h-4 w-4 mr-2"
+  }) : /* @__PURE__ */ React26__default.createElement(Copy, {
+    className: "h-4 w-4 mr-2"
+  }), linkCopied ? "Copied" : "Copy invite link")), /* @__PURE__ */ React26__default.createElement(DialogFooter, null, /* @__PURE__ */ React26__default.createElement(Button, {
+    type: "button",
+    variant: "secondary",
+    onClick: closeInviteDialog
+  }, "Done")))));
 }
 var isCreate6, fieldClass, selectClass, sectionCls6;
 var init_VendorEditPage = __esm({
@@ -32090,7 +32193,7 @@ var init_VendorEditPage = __esm({
     init_label();
     init_textarea();
     init_checkbox();
-    init_radio_group();
+    init_dialog();
     init_vendor_profile();
     init_vendor_list_config();
     init_vendor_access_denied();

package/dist/api.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkERJK5QXN_cjs = require('./chunk-ERJK5QXN.cjs');
+var chunkQU554KAZ_cjs = require('./chunk-QU554KAZ.cjs');
 require('./chunk-22FFHLTO.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
@@ -20,127 +20,127 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createChangePasswordHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createCmsApiHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createCrudByIdHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createCrudHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createFormBySlugHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createSetPasswordHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createUploadHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkQU554KAZ_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createUserAvatarHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createUserProfileHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createUsersApiHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkQU554KAZ_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkQU554KAZ_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkQU554KAZ_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkQU554KAZ_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkQU554KAZ_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.simpleDecrypt; }
+  get: function () { return chunkQU554KAZ_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.simpleEncrypt; }
+  get: function () { return chunkQU554KAZ_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkQU554KAZ_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkERJK5QXN_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkQU554KAZ_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.d.cts

@@ -137,7 +137,7 @@ interface InviteAcceptConfig extends AuthHandlersConfig {
     entityMap: EntityMap;
     beforeActivate?: (email: string, userId: number) => Promise<void>;
 }
-/** Decode invite token (base64 email) and set password + unblock user */
+/** Accept invite: vendor rotating token (preferred) or legacy base64 email token */
 declare function createInviteAcceptHandler(config: InviteAcceptConfig): (request: Request) => Promise<Response>;
 interface ChangePasswordConfig extends AuthHandlersConfig {
     dataSource: DataSource;
@@ -165,6 +165,7 @@ interface UserAuthApiConfig extends ForgotPasswordConfig, Omit<SetPasswordConfig
  * Path is the segment after the mount (e.g. "forgot-password"). Returns 404 for unknown paths.
  */
 declare function createUserAuthApiRouter(config: UserAuthApiConfig): {
+    GET(req: Request, pathname: string): Promise<Response>;
     POST(req: Request, pathname: string): Promise<Response>;
 };
 
@@ -564,6 +565,8 @@ interface VendorOnboardHandlersConfig {
 declare function createVendorOnboardHandlers(config: VendorOnboardHandlersConfig): {
     /** POST /api/admin/vendors/onboard — create vendor + owner user + vendor_users + invite */
     onboard(req: Request): Promise<Response>;
+    /** POST /api/admin/vendors/:id/resend-invite — rotate owner invite token and resend email */
+    resendInvite(req: Request, vendorIdStr: string): Promise<Response>;
     /** POST /api/admin/vendor/switch — set active vendor in session (JWT update via client) */
     switchVendor(req: Request): Promise<Response>;
     /** GET /api/admin/vendor/team */