@infuro/cms-core 1.0.42 → 1.0.44

package/dist/api.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkGINYYPXK_cjs = require('./chunk-GINYYPXK.cjs');
+var chunkP2IWWBJV_cjs = require('./chunk-P2IWWBJV.cjs');
 require('./chunk-22FFHLTO.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
@@ -20,127 +20,127 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createChangePasswordHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCmsApiHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCrudByIdHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCrudHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createFormBySlugHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createSetPasswordHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUploadHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkP2IWWBJV_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserAvatarHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserProfileHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUsersApiHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkP2IWWBJV_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkP2IWWBJV_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkP2IWWBJV_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkP2IWWBJV_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkP2IWWBJV_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.simpleDecrypt; }
+  get: function () { return chunkP2IWWBJV_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.simpleEncrypt; }
+  get: function () { return chunkP2IWWBJV_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkP2IWWBJV_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkP2IWWBJV_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.js

@@ -1,4 +1,4 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-W2NL365N.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-SQGBHYJF.js';
 import './chunk-NNQBWDCI.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';

package/dist/{chunk-GINYYPXK.cjs → chunk-P2IWWBJV.cjs}

@@ -462,6 +462,41 @@ function applyApprovalStatusSideEffects(updatePayload, opts) {
   }
 }
 chunkUSNT2KNT_cjs.__name(applyApprovalStatusSideEffects, "applyApprovalStatusSideEffects");
+async function syncProductVariantsStatusWithProduct(dataSource, entityMap, productId, productStatus) {
+  if (!entityMap.product_variants || !Number.isFinite(productId) || productId < 1) return;
+  const status = String(productStatus || "draft");
+  const repo = dataSource.getRepository(entityMap.product_variants);
+  if (status === "available") {
+    await repo.createQueryBuilder().update().set({
+      status: "available"
+    }).where('"productId" = :productId', {
+      productId
+    }).andWhere("status = :from", {
+      from: "draft"
+    }).execute();
+    return;
+  }
+  if (status === "draft") {
+    await repo.createQueryBuilder().update().set({
+      status: "draft"
+    }).where('"productId" = :productId', {
+      productId
+    }).andWhere("status = :from", {
+      from: "available"
+    }).execute();
+  }
+}
+chunkUSNT2KNT_cjs.__name(syncProductVariantsStatusWithProduct, "syncProductVariantsStatusWithProduct");
+function coerceVariantStatusForProduct(variantStatus, productStatus, opts) {
+  const next = String(variantStatus ?? "draft").trim() || "draft";
+  const productLive = String(productStatus ?? "draft") === "available";
+  const approvalOk = !opts?.requireApproval || String(opts?.approvalStatus ?? "") === "approved";
+  if (!productLive || !approvalOk) {
+    return "draft";
+  }
+  return next;
+}
+chunkUSNT2KNT_cjs.__name(coerceVariantStatusForProduct, "coerceVariantStatusForProduct");
 
 // src/lib/event-approval.ts
 var EVENT_APPROVAL_STATUSES = [
@@ -4604,6 +4639,26 @@ function createCrudHandler(dataSource, entityMap, options) {
           }
         }
       }
+      if (resource === "product_variants" && entityMap.products) {
+        const productIdRaw = persistBody.productId;
+        const productId = typeof productIdRaw === "number" ? productIdRaw : typeof productIdRaw === "string" && /^\d+$/.test(productIdRaw) ? parseInt(productIdRaw, 10) : NaN;
+        if (Number.isFinite(productId)) {
+          const parent = await dataSource.getRepository(entityMap.products).findOne({
+            where: {
+              id: productId
+            }
+          });
+          const parentStatus = parent?.status;
+          const parentApproval = parent?.approvalStatus;
+          const requireApproval = await getRequireProductApproval(dataSource);
+          persistBody.status = coerceVariantStatusForProduct(persistBody.status, parentStatus, {
+            approvalStatus: parentApproval,
+            requireApproval
+          });
+        } else if (!("status" in persistBody)) {
+          persistBody.status = "draft";
+        }
+      }
       if (resource === "products") {
         const scopeForProduct = await resolveScope();
         const productFlags = await getVendorCatalogCreateFlags(dataSource);
@@ -6243,6 +6298,34 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           delete u.parentId;
         }
       }
+      if (resource === "product_variants" && entityMap.products) {
+        const currentVariant = await repo.findOne({
+          where: {
+            id: numericId
+          }
+        });
+        if (!currentVariant) return json({
+          message: "Not found"
+        }, {
+          status: 404
+        });
+        const productId = "productId" in updatePayload && updatePayload.productId != null ? Number(updatePayload.productId) : Number(currentVariant.productId);
+        if (Number.isFinite(productId)) {
+          const parent = await dataSource.getRepository(entityMap.products).findOne({
+            where: {
+              id: productId
+            }
+          });
+          const parentStatus = parent?.status;
+          const parentApproval = parent?.approvalStatus;
+          const requireApproval = await getRequireProductApproval(dataSource);
+          const nextStatus = "status" in updatePayload ? updatePayload.status : currentVariant.status;
+          updatePayload.status = coerceVariantStatusForProduct(nextStatus, parentStatus, {
+            approvalStatus: parentApproval,
+            requireApproval
+          });
+        }
+      }
       if (resource === "products") {
         const currentRow = await repo.findOne({
           where: {
@@ -6598,6 +6681,10 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           if (reloaded) updated = reloaded;
         }
         updated = hydrateProductDisplayName(updated);
+        const productStatus = String(updated.status ?? "draft");
+        if (Number.isFinite(updatedId) && updatedId > 0) {
+          await syncProductVariantsStatusWithProduct(dataSource, entityMap, updatedId, productStatus);
+        }
         if (getCms) {
           const cms = await getCms();
           await queueErpProductUpsertIfEnabled(cms, dataSource, entityMap, updated);
@@ -8635,6 +8722,12 @@ function createUploadHandler(config) {
         parentId
       });
     } catch (err) {
+      console.error("[upload] File upload failed", {
+        error: err instanceof Error ? err.message : String(err),
+        stack: err instanceof Error ? err.stack : void 0,
+        name: err instanceof Error ? err.name : void 0,
+        metadata: err && typeof err === "object" && "$metadata" in err ? err.$metadata : void 0
+      });
       return json({
         error: "File upload failed"
       }, {
@@ -9340,41 +9433,68 @@ function createUsersApiHandlers(config) {
         const page = Math.max(1, parseInt(url.searchParams.get("page") || "1", 10));
         const limit = Math.min(100, parseInt(url.searchParams.get("limit") || "10", 10));
         const skip = (page - 1) * limit;
-        const sortField = url.searchParams.get("sortField") || "createdAt";
+        const sortFieldRaw = url.searchParams.get("sortField") || "createdAt";
+        const allowedSort = /* @__PURE__ */ new Set([
+          "createdAt",
+          "updatedAt",
+          "name",
+          "email",
+          "id",
+          "blocked"
+        ]);
+        const sortField = allowedSort.has(sortFieldRaw) ? sortFieldRaw : "createdAt";
         const sortOrder = url.searchParams.get("sortOrder") === "desc" ? "DESC" : "ASC";
-        const search = url.searchParams.get("search");
-        const where = search ? [
-          {
-            name: typeorm.ILike(`%${search}%`),
-            deleted: false
-          },
-          {
-            email: typeorm.ILike(`%${search}%`),
-            deleted: false
-          }
-        ] : {
+        const search = url.searchParams.get("search")?.trim() || "";
+        const groupName = url.searchParams.get("groupName")?.trim() || "";
+        const qb = userRepo().createQueryBuilder("u").leftJoinAndSelect("u.group", "g").where("u.deleted = :deleted", {
           deleted: false
-        };
-        const [data, total] = await userRepo().findAndCount({
-          skip,
-          take: limit,
-          order: {
-            [sortField]: sortOrder
-          },
-          where,
-          relations: [
-            "group"
-          ],
-          select: [
-            "id",
-            "name",
-            "email",
-            "blocked",
-            "createdAt",
-            "updatedAt",
-            "groupId"
-          ]
-        });
+        }).orderBy(`u.${sortField}`, sortOrder).skip(skip).take(limit).select([
+          "u.id",
+          "u.name",
+          "u.email",
+          "u.blocked",
+          "u.createdAt",
+          "u.updatedAt",
+          "u.groupId",
+          "g.id",
+          "g.name"
+        ]);
+        if (search) {
+          qb.andWhere("(u.name ILIKE :search OR u.email ILIKE :search)", {
+            search: `%${search}%`
+          });
+        }
+        if (groupName) {
+          if (!entityMap.user_groups) {
+            return json({
+              total: 0,
+              page,
+              limit,
+              totalPages: 0,
+              data: []
+            });
+          }
+          const groupRepo = dataSource.getRepository(entityMap.user_groups);
+          const group = await groupRepo.findOne({
+            where: {
+              name: groupName,
+              deleted: false
+            }
+          });
+          if (!group) {
+            return json({
+              total: 0,
+              page,
+              limit,
+              totalPages: 0,
+              data: []
+            });
+          }
+          qb.andWhere("u.groupId = :groupId", {
+            groupId: Number(group.id)
+          });
+        }
+        const [data, total] = await qb.getManyAndCount();
         return json({
           total,
           page,
@@ -29782,7 +29902,8 @@ function createStorefrontApiHandler(config) {
     const repo = dataSource.getRepository(entityMap.product_variants);
     const rows = await repo.find({
       where: {
-        productId
+        productId,
+        status: "available"
       },
       order: {
         id: "ASC"
@@ -29815,6 +29936,52 @@ function createStorefrontApiHandler(config) {
     return result;
   }
   chunkUSNT2KNT_cjs.__name(loadProductVariantsWithPricing, "loadProductVariantsWithPricing");
+  async function loadApplicableVendorPolicies(productId, vendorId) {
+    if (!entityMap.refund_policies) return [];
+    const policyRepo = dataSource.getRepository(entityMap.refund_policies);
+    const format = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((row) => ({
+      id: Number(row.id),
+      name: String(row.name ?? "").trim(),
+      desc: row.desc != null ? String(row.desc) : null,
+      refundWindowDays: Number(row.refundWindowDays) || 0,
+      type: String(row.type ?? "percentage"),
+      value: Number(row.value) || 0
+    }), "format");
+    const linkedIds = /* @__PURE__ */ new Set();
+    if (entityMap.product_config) {
+      const configs = await dataSource.getRepository(entityMap.product_config).find({
+        where: {
+          productId
+        }
+      });
+      for (const c of configs) {
+        const id = Number(c.refundPolicyId);
+        if (Number.isFinite(id) && id > 0) linkedIds.add(id);
+      }
+    }
+    if (linkedIds.size > 0) {
+      const rows = await policyRepo.find({
+        where: {
+          id: typeorm.In([
+            ...linkedIds
+          ])
+        }
+      });
+      return rows.map((r) => format(r)).filter((p) => p.name).sort((a, b) => a.id - b.id);
+    }
+    if (vendorId == null || !Number.isFinite(Number(vendorId))) return [];
+    const vendorRows = await policyRepo.find({
+      where: {
+        vendorId: Number(vendorId),
+        status: "active"
+      },
+      order: {
+        id: "ASC"
+      }
+    });
+    return vendorRows.map((r) => format(r)).filter((p) => p.name);
+  }
+  chunkUSNT2KNT_cjs.__name(loadApplicableVendorPolicies, "loadApplicableVendorPolicies");
   return {
     async handle(method, path2, req) {
       try {
@@ -29882,13 +30049,11 @@ function createStorefrontApiHandler(config) {
           const url = new URL(req.url || "", "http://localhost");
           const collectionSlug = url.searchParams.get("collection")?.trim();
           const collectionId = url.searchParams.get("collectionId");
+          const q = url.searchParams.get("q")?.trim() ?? "";
           const limit = Math.min(100, Math.max(1, parseInt(url.searchParams.get("limit") || "20", 10)));
           const offset = Math.max(0, parseInt(url.searchParams.get("offset") || "0", 10));
-          const where = {
-            status: "available",
-            deleted: false
-          };
           let collectionFilter = null;
+          let collectionIdFilter = null;
           if (collectionSlug) {
             let col = null;
             if (/^\d+$/.test(collectionSlug)) {
@@ -29915,30 +30080,59 @@ function createStorefrontApiHandler(config) {
                 collection: null
               });
             }
-            where.collectionId = col.id;
+            collectionIdFilter = Number(col.id);
             collectionFilter = {
               name: col.name,
               slug: col.slug
             };
           } else if (collectionId) {
             const cid = parseInt(collectionId, 10);
-            if (Number.isFinite(cid)) where.collectionId = cid;
+            if (Number.isFinite(cid)) collectionIdFilter = cid;
+          }
+          let items = [];
+          let total = 0;
+          if (q) {
+            const like = `%${q.replace(/[%_]/g, "\\$&")}%`;
+            const qb = productRepo().createQueryBuilder("p").where("p.status = :status", {
+              status: "available"
+            }).andWhere("p.deleted = :del", {
+              del: false
+            }).andWhere(`(p.name ILIKE :like OR p.slug ILIKE :like OR COALESCE(p.sku, '') ILIKE :like OR COALESCE(p.title, '') ILIKE :like OR COALESCE(p.metadata->>'description', '') ILIKE :like)`, {
+              like
+            }).orderBy("p.id", "ASC").take(limit).skip(offset);
+            if (collectionIdFilter != null) {
+              qb.andWhere("p.collectionId = :cid", {
+                cid: collectionIdFilter
+              });
+            }
+            [items, total] = await qb.getManyAndCount();
+          } else {
+            const where = {
+              status: "available",
+              deleted: false
+            };
+            if (collectionIdFilter != null) where.collectionId = collectionIdFilter;
+            const result = await productRepo().findAndCount({
+              where,
+              order: {
+                id: "ASC"
+              },
+              take: limit,
+              skip: offset
+            });
+            items = result[0];
+            total = result[1];
           }
-          const [items, total] = await productRepo().findAndCount({
-            where,
-            order: {
-              id: "ASC"
-            },
-            take: limit,
-            skip: offset
-          });
           const products = await Promise.all(items.map((item) => enrichProductPricing(item)));
           return json({
             products,
             total,
             ...collectionFilter && {
               collection: collectionFilter
-            }
+            },
+            ...q ? {
+              q
+            } : {}
           });
         }
         if (path2[0] === "products" && path2.length === 2 && method === "GET") {
@@ -29974,12 +30168,14 @@ function createStorefrontApiHandler(config) {
           const pricing = await resolveProductEventPricing(Number(p.id));
           const enriched = await enrichProductPricing(p, pricing);
           const variants = await loadProductVariantsWithPricing(Number(p.id), pricing);
+          const policies = await loadApplicableVendorPolicies(Number(p.id), p.vendorId != null ? Number(p.vendorId) : null);
           return json({
             ...enriched,
             attributes: attributeTags,
             ...variants.length ? {
               variants
-            } : {}
+            } : {},
+            policies
           });
         }
         if (path2[0] === "collections" && path2.length === 1 && method === "GET") {
@@ -30791,24 +30987,61 @@ function createStorefrontApiHandler(config) {
           }, {
             status: 404
           });
+          const rawVariantId = body.variantId ?? body.variant_id;
+          const variantIdNum = rawVariantId != null && String(rawVariantId).trim() !== "" ? Number(rawVariantId) : NaN;
+          const hasVariantId = Number.isFinite(variantIdNum) && variantIdNum > 0;
+          const bodyMeta = body.metadata && typeof body.metadata === "object" && !Array.isArray(body.metadata) ? body.metadata : {};
+          const optionsRaw = body.options && typeof body.options === "object" && !Array.isArray(body.options) ? body.options : bodyMeta.options && typeof bodyMeta.options === "object" && !Array.isArray(bodyMeta.options) ? bodyMeta.options : null;
+          const options = optionsRaw && Object.fromEntries(Object.entries(optionsRaw).map(([k, v]) => [
+            String(k),
+            String(v ?? "").trim()
+          ]).filter(([, v]) => v.length > 0));
+          const lineMetadata = {
+            ...bodyMeta,
+            ...hasVariantId ? {
+              variantId: variantIdNum
+            } : {},
+            ...options && Object.keys(options).length ? {
+              options
+            } : {}
+          };
+          if (typeof bodyMeta.imageUrl === "string" && bodyMeta.imageUrl.trim()) {
+            lineMetadata.imageUrl = bodyMeta.imageUrl.trim();
+          }
+          if (typeof bodyMeta.title === "string" && bodyMeta.title.trim()) {
+            lineMetadata.title = bodyMeta.title.trim();
+          }
+          const metadataPayload = Object.keys(lineMetadata).length ? lineMetadata : null;
           const { cart, setCookie, err } = await getOrCreateCart(req);
           if (err) return err;
           const cartId = cart.id;
-          const existing = await cartItemRepo().findOne({
+          const sameProductLines = await cartItemRepo().find({
             where: {
               cartId,
               productId
             }
           });
+          const existing = sameProductLines.find((row) => {
+            const m = row.metadata;
+            const existingVid = m?.variantId ?? m?.variant_id;
+            if (hasVariantId) {
+              return Number(existingVid) === variantIdNum;
+            }
+            return existingVid == null || existingVid === "";
+          });
           if (existing) {
             await cartItemRepo().update(existing.id, {
-              quantity: existing.quantity + quantity
+              quantity: existing.quantity + quantity,
+              ...metadataPayload ? {
+                metadata: metadataPayload
+              } : {}
             });
           } else {
             await cartItemRepo().save(cartItemRepo().create({
               cartId,
               productId,
-              quantity
+              quantity,
+              metadata: metadataPayload
             }));
           }
           await cartRepo().update(cartId, {