@infuro/cms-core 1.0.45 → 1.0.47

package/dist/{chunk-MVXLRANV.js → chunk-W42UZLQO.js}

@@ -1,12 +1,14 @@
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, mergeEmailLayoutCompanyDetails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-NNQBWDCI.js';
+import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
+import { retireSoftDeletedUniqueValue, activeUniqueValueExists } from './chunk-DBPSJYLZ.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-YXH2UUEZ.js';
 import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
-import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-WEMDMVHQ.js';
-import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-5ELSW2UP.js';
+import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-L3525VXI.js';
+import { mergeEmailLayoutCompanyDetails, unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
 import { getSmsTemplateDefault, SMS_MESSAGE_TEMPLATE_DEFAULTS } from './chunk-MQBT33IV.js';
-import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-KFFB6EMZ.js';
+import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-2HU5R2JE.js';
 import { JOB_RUNNER_QUEUE } from './chunk-GO7PPYNU.js';
-import { canManageRoles, sessionHasEntityAccess } from './chunk-BLR6H5GL.js';
-import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_OWNER_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-DN65KDIA.js';
+import { canManageRoles, sessionHasEntityAccess } from './chunk-ZF2RQWXB.js';
+import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-JIWUVQ6B.js';
 import { queueErp } from './chunk-SYBOCAWB.js';
 import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
 import { __name } from './chunk-SHUYVCID.js';
@@ -31,7 +33,6 @@ async function queryVendorLinks(dataSource, userId) {
     return await dataSource.query(`
       SELECT
         vu."vendorId" AS "vendorId",
-        vu."role" AS "role",
         vu."vendorRoleId" AS "vendorRoleId",
         vr."name" AS "vendorRoleName",
         vr."isOwnerRole" AS "isOwnerRole"
@@ -45,22 +46,25 @@ async function queryVendorLinks(dataSource, userId) {
     ]);
   } catch (err) {
     if (!isMissingVendorRoleSchemaError(err)) throw err;
-    const legacy = await dataSource.query(`
-      SELECT vu."vendorId" AS "vendorId", vu."role" AS "role"
-      FROM "vendor_users" vu
-      INNER JOIN "vendors" v ON v.id = vu."vendorId" AND v.deleted = false
-      WHERE vu."userId" = $1
-      ORDER BY vu.id ASC
-      `, [
-      userId
-    ]);
-    return legacy.map((r) => ({
-      vendorId: Number(r.vendorId),
-      role: r.role,
-      vendorRoleId: null,
-      vendorRoleName: null,
-      isOwnerRole: r.role === "owner" ? true : null
-    }));
+    try {
+      const legacy = await dataSource.query(`
+        SELECT vu."vendorId" AS "vendorId", vu."role" AS "role"
+        FROM "vendor_users" vu
+        INNER JOIN "vendors" v ON v.id = vu."vendorId" AND v.deleted = false
+        WHERE vu."userId" = $1
+        ORDER BY vu.id ASC
+        `, [
+        userId
+      ]);
+      return legacy.map((r) => ({
+        vendorId: Number(r.vendorId),
+        vendorRoleId: null,
+        vendorRoleName: null,
+        isOwnerRole: r.role === "owner" ? true : null
+      }));
+    } catch {
+      return [];
+    }
   }
 }
 __name(queryVendorLinks, "queryVendorLinks");
@@ -87,7 +91,6 @@ async function loadUserVendorContext(dataSource, userId, preferredVendorId) {
     if (linkIds.has(ownedId)) continue;
     rows.push({
       vendorId: ownedId,
-      role: "owner",
       vendorRoleId: null,
       vendorRoleName: null,
       isOwnerRole: true
@@ -112,13 +115,14 @@ async function loadUserVendorContext(dataSource, userId, preferredVendorId) {
       if (!isMissingVendorRoleSchemaError(err)) throw err;
     }
   }
+  const isOwner = !!primary?.isOwnerRole;
   return {
     vendorIds,
     activeVendorId: primary != null ? Number(primary.vendorId) : vendorIds[0] ?? null,
-    vendorRole: primary?.role ?? null,
+    vendorRole: isOwner ? "owner" : primary ? "staff" : null,
     vendorRoleId: primary?.vendorRoleId != null ? Number(primary.vendorRoleId) : null,
     vendorRoleName: primary?.vendorRoleName ?? null,
-    isVendorRoleOwner: !!primary?.isOwnerRole || primary?.role === "owner",
+    isVendorRoleOwner: isOwner,
     vendorEntityPerms
   };
 }
@@ -646,6 +650,144 @@ function applyEventApprovalStatusSideEffects(updatePayload, opts) {
 }
 __name(applyEventApprovalStatusSideEffects, "applyEventApprovalStatusSideEffects");
 
+// src/lib/discount-usage.ts
+async function countDiscountOrdersForContact(dataSource, discountId, contactId) {
+  try {
+    const rows = await dataSource.query(`SELECT COUNT(DISTINCT od."orderId")::int AS count
+       FROM order_discounts od
+       WHERE od."discountId" = $1 AND od."userId" = $2`, [
+      discountId,
+      contactId
+    ]);
+    return Number(rows?.[0]?.count ?? 0);
+  } catch {
+    return 0;
+  }
+}
+__name(countDiscountOrdersForContact, "countDiscountOrdersForContact");
+function isMaxTotalUsageReached(discount) {
+  if (discount.maxTotalUsage == null) return false;
+  return Number(discount.usedCount ?? 0) >= Number(discount.maxTotalUsage);
+}
+__name(isMaxTotalUsageReached, "isMaxTotalUsageReached");
+async function isMaxPerUserUsageReached(dataSource, discount, contactId) {
+  if (discount.maxUsagePerUser == null || contactId == null) return false;
+  const count = await countDiscountOrdersForContact(dataSource, discount.id, contactId);
+  return count >= Number(discount.maxUsagePerUser);
+}
+__name(isMaxPerUserUsageReached, "isMaxPerUserUsageReached");
+async function checkAndIncrementDiscountUsage(dataSource, entityMap, discountId, contactId) {
+  if (!entityMap.discounts) return null;
+  const discountRepo = dataSource.getRepository(entityMap.discounts);
+  const discount = await discountRepo.findOne({
+    where: {
+      id: discountId
+    }
+  });
+  if (!discount) return `Discount #${discountId} not found`;
+  const d = discount;
+  if (d.maxUsagePerUser != null) {
+    const usageCount = await countDiscountOrdersForContact(dataSource, discountId, contactId);
+    if (usageCount >= Number(d.maxUsagePerUser)) {
+      return "You have reached the maximum usage limit for this discount";
+    }
+  }
+  const updated = await dataSource.query(`UPDATE discounts
+     SET "usedCount" = "usedCount" + 1
+     WHERE id = $1
+       AND ("maxTotalUsage" IS NULL OR "usedCount" < "maxTotalUsage")
+     RETURNING id`, [
+    discountId
+  ]);
+  if (!Array.isArray(updated) || updated.length === 0) {
+    return "Discount usage limit has been reached";
+  }
+  return null;
+}
+__name(checkAndIncrementDiscountUsage, "checkAndIncrementDiscountUsage");
+async function decrementDiscountUsage(dataSource, entityMap, discountId, orderId) {
+  if (!entityMap.discounts) return;
+  try {
+    await dataSource.query(`UPDATE discounts SET "usedCount" = GREATEST("usedCount" - 1, 0) WHERE id = $1`, [
+      discountId
+    ]);
+    if (entityMap.order_discounts) {
+      await dataSource.getRepository(entityMap.order_discounts).delete({
+        orderId,
+        discountId
+      });
+    }
+  } catch (err) {
+    console.error("[discountEngine] decrementDiscountUsage failed:", err);
+  }
+}
+__name(decrementDiscountUsage, "decrementDiscountUsage");
+async function recordDiscountUsage(dataSource, entityMap, orderId, discountId, contactId, discountAmount) {
+  if (!entityMap.order_discounts) return;
+  try {
+    let discountCode = "";
+    if (entityMap.discounts) {
+      const discountRow = await dataSource.getRepository(entityMap.discounts).findOne({
+        where: {
+          id: discountId
+        }
+      });
+      discountCode = discountRow?.couponCode ?? "";
+    }
+    const odRepo = dataSource.getRepository(entityMap.order_discounts);
+    const orderItemRepo = dataSource.getRepository(entityMap.order_items);
+    const items = await orderItemRepo.find({
+      where: {
+        orderId
+      }
+    });
+    const discountedItems = items.filter((item) => Number(item.discount ?? 0) > 0);
+    if (discountedItems.length === 0) {
+      const firstItem = items[0];
+      if (!firstItem) return;
+      await odRepo.save(odRepo.create({
+        orderId,
+        orderItemId: firstItem.id,
+        discountId,
+        discountCode,
+        discountAmount,
+        userId: contactId
+      }));
+      return;
+    }
+    for (const item of discountedItems) {
+      const i = item;
+      await odRepo.save(odRepo.create({
+        orderId,
+        orderItemId: i.id,
+        discountId,
+        discountCode,
+        discountAmount: Number(i.discount ?? 0),
+        userId: contactId
+      }));
+    }
+  } catch (err) {
+    console.error("[discountEngine] recordDiscountUsage failed:", err);
+  }
+}
+__name(recordDiscountUsage, "recordDiscountUsage");
+async function consumeAppliedDiscountUsages(dataSource, entityMap, orderId, contactId, applied) {
+  const unique = /* @__PURE__ */ new Map();
+  for (const row of applied) {
+    const id = Number(row.id);
+    if (!Number.isFinite(id) || id < 1) continue;
+    const amount = Math.max(0, Number(row.calculatedDiscount) || 0);
+    unique.set(id, (unique.get(id) ?? 0) + amount);
+  }
+  for (const [discountId, discountAmount] of unique) {
+    const usageErr = await checkAndIncrementDiscountUsage(dataSource, entityMap, discountId, contactId);
+    if (usageErr) return usageErr;
+    await recordDiscountUsage(dataSource, entityMap, orderId, discountId, contactId, discountAmount);
+  }
+  return null;
+}
+__name(consumeAppliedDiscountUsages, "consumeAppliedDiscountUsages");
+
 // src/lib/default-vendor-id.ts
 function getDefaultVendorId() {
   const raw = process.env.DEFAULT_VENDOR_ID;
@@ -1989,6 +2131,7 @@ async function ensureUniqueProductSlug(repo, baseSlug, vendorId, excludeId) {
   let slug = baseSlug;
   let suffix = 0;
   while (true) {
+    await retireSoftDeletedUniqueValue(repo, "slug", slug);
     const where = excludeId != null ? {
       slug,
       vendorId,
@@ -2008,6 +2151,21 @@ async function ensureUniqueProductSlug(repo, baseSlug, vendorId, excludeId) {
   }
 }
 __name(ensureUniqueProductSlug, "ensureUniqueProductSlug");
+async function normalizeComboNameAndSlug(repo, body, vendorId, existing, excludeId) {
+  const incomingName = typeof body.name === "string" ? body.name.trim() : "";
+  const incomingSlugRaw = typeof body.slug === "string" ? body.slug.trim() : "";
+  const existingName = typeof existing?.name === "string" ? existing.name.trim() : "";
+  const existingSlug = typeof existing?.slug === "string" ? existing.slug.trim() : "";
+  const name = incomingName || existingName;
+  if (!name) return "Name is required";
+  if (incomingName) body.name = name;
+  const nameBasedSlug = slugifyProductLabel(name);
+  const typedSlug = incomingSlugRaw ? slugifyProductLabel(incomingSlugRaw) : "";
+  const slug = typedSlug || (excludeId != null ? existingSlug : "") || nameBasedSlug;
+  body.slug = await ensureUniqueProductSlug(repo, slug, vendorId, excludeId);
+  return null;
+}
+__name(normalizeComboNameAndSlug, "normalizeComboNameAndSlug");
 async function hydrateProductEventNames(dataSource, entityMap, products) {
   if (!products.length) return products;
   if (!entityMap.event_products || !entityMap.events) {
@@ -2254,6 +2412,20 @@ async function normalizeProductNameAndSlug(repo, body, vendorId, existing, exclu
   return null;
 }
 __name(normalizeProductNameAndSlug, "normalizeProductNameAndSlug");
+async function retireSoftDeletedUniquesFromBody(repo, body) {
+  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
+  if (!cols.has("deleted")) return;
+  for (const col of [
+    "slug",
+    "email"
+  ]) {
+    if (!cols.has(col)) continue;
+    const raw = body[col];
+    if (typeof raw !== "string" || !raw.trim()) continue;
+    await retireSoftDeletedUniqueValue(repo, col, raw.trim());
+  }
+}
+__name(retireSoftDeletedUniquesFromBody, "retireSoftDeletedUniquesFromBody");
 function buildSoftDeletePayload(meta, deletedBy) {
   const payload = {
     deleted: true
@@ -2490,6 +2662,7 @@ function discountEvaluateRule(rule, cartLines, cartTotal) {
     case "category":
     case "cart":
     case "paymentMethod":
+    case "deviceType":
     case "order": {
       if (rule.subType === "nthOrder") {
         return true;
@@ -2673,87 +2846,22 @@ function applyDiscountToOrderLines(lines, evalResult, maxDiscountAmount) {
   return totalDiscountApplied;
 }
 __name(applyDiscountToOrderLines, "applyDiscountToOrderLines");
-async function checkAndIncrementDiscountUsage(dataSource, entityMap, discountId, contactId) {
-  if (!entityMap["discounts"]) return null;
-  const discountRepo = dataSource.getRepository(entityMap["discounts"]);
-  const discount = await discountRepo.findOne({
-    where: {
-      id: discountId
-    }
-  });
-  if (!discount) return `Discount #${discountId} not found`;
-  await dataSource.query(`UPDATE discounts SET "usedCount" = "usedCount" + 1 WHERE id = $1`, [
-    discountId
-  ]);
-  return null;
+function asDiscountUsageEntityMap(entityMap) {
+  return entityMap;
 }
-__name(checkAndIncrementDiscountUsage, "checkAndIncrementDiscountUsage");
-async function decrementDiscountUsage(dataSource, entityMap, discountId, orderId) {
-  if (!entityMap["discounts"]) return;
-  try {
-    await dataSource.query(`UPDATE discounts SET "usedCount" = GREATEST("usedCount" - 1, 0) WHERE id = $1`, [
-      discountId
-    ]);
-    if (entityMap["order_discounts"]) {
-      await dataSource.getRepository(entityMap["order_discounts"]).delete({
-        orderId,
-        discountId
-      });
-    }
-  } catch (err) {
-    console.error("[discountEngine] decrementDiscountUsage failed:", err);
-  }
+__name(asDiscountUsageEntityMap, "asDiscountUsageEntityMap");
+async function checkAndIncrementDiscountUsage2(dataSource, entityMap, discountId, contactId) {
+  return checkAndIncrementDiscountUsage(dataSource, asDiscountUsageEntityMap(entityMap), discountId, contactId);
 }
-__name(decrementDiscountUsage, "decrementDiscountUsage");
-async function recordDiscountUsage(dataSource, entityMap, orderId, discountId, contactId, discountAmount) {
-  if (!entityMap["order_discounts"]) return;
-  try {
-    let discountCode = "";
-    if (entityMap["discounts"]) {
-      const discountRow = await dataSource.getRepository(entityMap["discounts"]).findOne({
-        where: {
-          id: discountId
-        }
-      });
-      discountCode = discountRow?.couponCode ?? "";
-    }
-    const odRepo = dataSource.getRepository(entityMap["order_discounts"]);
-    const orderItemRepo = dataSource.getRepository(entityMap.order_items);
-    const items = await orderItemRepo.find({
-      where: {
-        orderId
-      }
-    });
-    const discountedItems = items.filter((item) => Number(item.discount ?? 0) > 0);
-    if (discountedItems.length === 0) {
-      const firstItem = items[0];
-      if (!firstItem) return;
-      await odRepo.save(odRepo.create({
-        orderId,
-        orderItemId: firstItem.id,
-        discountId,
-        discountCode,
-        discountAmount,
-        userId: contactId
-      }));
-      return;
-    }
-    for (const item of discountedItems) {
-      const i = item;
-      await odRepo.save(odRepo.create({
-        orderId,
-        orderItemId: i.id,
-        discountId,
-        discountCode,
-        discountAmount: Number(i.discount ?? 0),
-        userId: contactId
-      }));
-    }
-  } catch (err) {
-    console.error("[discountEngine] recordDiscountUsage failed:", err);
-  }
+__name(checkAndIncrementDiscountUsage2, "checkAndIncrementDiscountUsage");
+async function decrementDiscountUsage2(dataSource, entityMap, discountId, orderId) {
+  return decrementDiscountUsage(dataSource, asDiscountUsageEntityMap(entityMap), discountId, orderId);
 }
-__name(recordDiscountUsage, "recordDiscountUsage");
+__name(decrementDiscountUsage2, "decrementDiscountUsage");
+async function recordDiscountUsage2(dataSource, entityMap, orderId, discountId, contactId, discountAmount) {
+  return recordDiscountUsage(dataSource, asDiscountUsageEntityMap(entityMap), orderId, discountId, contactId, discountAmount);
+}
+__name(recordDiscountUsage2, "recordDiscountUsage");
 async function validateCoupon(dataSource, entityMap, couponCode, orderLines, currency = "INR", contactId, isAutomatic, discountId, vendorId) {
   if (!entityMap["discounts"]) return {
     valid: false,
@@ -2798,21 +2906,12 @@ async function validateCoupon(dataSource, entityMap, couponCode, orderLines, cur
     };
   }
   if (contactId != null && d.maxUsagePerUser != null) {
-    try {
-      const userUsage = await dataSource.query(`SELECT COUNT(DISTINCT od."orderId") as count FROM order_discounts od
-         WHERE od."discountId" = $1 
-         AND od."userId" = $2`, [
-        d.id,
-        contactId
-      ]);
-      const usageCount = Number(userUsage?.[0]?.count ?? 0);
-      if (usageCount >= d.maxUsagePerUser) {
-        return {
-          valid: false,
-          error: "You have reached the maximum usage limit for this discount"
-        };
-      }
-    } catch {
+    const usageCount = await countDiscountOrdersForContact(dataSource, d.id, contactId);
+    if (usageCount >= d.maxUsagePerUser) {
+      return {
+        valid: false,
+        error: "You have reached the maximum usage limit for this discount"
+      };
     }
   }
   const flatRules = entityMap["discount_rules"] ? await dataSource.getRepository(entityMap["discount_rules"]).find({
@@ -2890,128 +2989,32 @@ function normalizeOrderLinesInput(raw) {
     if (!Number.isFinite(productId) || productId <= 0) continue;
     const qRaw = Number(r.quantity ?? 1);
     const q = Number.isFinite(qRaw) ? Math.min(99999, Math.max(1, Math.floor(qRaw))) : 1;
-    merged.set(productId, (merged.get(productId) ?? 0) + q);
+    const vidRaw = r.variantId ?? r.variant_id;
+    const vid = vidRaw != null && String(vidRaw).trim() !== "" ? Number(vidRaw) : NaN;
+    const variantId = Number.isFinite(vid) && vid > 0 ? vid : null;
+    const key = `${productId}:${variantId ?? 0}`;
+    const prev = merged.get(key);
+    if (prev) prev.quantity += q;
+    else merged.set(key, {
+      productId,
+      quantity: q,
+      variantId
+    });
   }
   return [
-    ...merged.entries()
-  ].map(([productId, quantity]) => ({
-    productId,
-    quantity
-  }));
+    ...merged.values()
+  ];
 }
 __name(normalizeOrderLinesInput, "normalizeOrderLinesInput");
 var ORDER_STATUS_CONFIRMED = "confirmed";
-function orderInventorySnapshotFromRow(order) {
-  return {
-    status: order.status ?? "pending",
-    lines: (order.items ?? []).map((i) => ({
-      productId: Number(i.productId),
-      quantity: Math.max(0, Math.floor(Number(i.quantity) || 0))
-    })).filter((l) => l.productId > 0 && l.quantity > 0)
-  };
-}
-__name(orderInventorySnapshotFromRow, "orderInventorySnapshotFromRow");
-function mergeInventoryLinesByProduct(lines) {
-  const m = /* @__PURE__ */ new Map();
-  for (const { productId, quantity } of lines) {
-    if (!Number.isFinite(productId) || productId <= 0 || quantity <= 0) continue;
-    m.set(productId, (m.get(productId) ?? 0) + quantity);
-  }
-  return m;
-}
-__name(mergeInventoryLinesByProduct, "mergeInventoryLinesByProduct");
-async function validateInventoryForConfirmedOrderLines(dataSource, entityMap, calcLines) {
-  const productRepo = dataSource.getRepository(entityMap.products);
-  const merged = mergeInventoryLinesByProduct(calcLines.filter((l) => l.found && l.productId != null).map((l) => ({
+async function validateInventoryForConfirmedOrderLines2(dataSource, entityMap, calcLines) {
+  const lines = calcLines.filter((l) => l.found && l.productId != null).map((l) => ({
     productId: l.productId,
     quantity: l.quantity
-  })));
-  for (const [productId, qty] of merged) {
-    const row = await productRepo.findOne({
-      where: {
-        id: productId,
-        deleted: false
-      }
-    });
-    if (!row) return `Product #${productId} not found`;
-    if (row.type === "service") continue;
-    const cur = Number(row.quantity ?? 0);
-    if (cur < qty) {
-      const name = row.name ?? String(productId);
-      return `Insufficient stock for ${name}: available ${cur}, required ${qty}`;
-    }
-  }
-  return null;
-}
-__name(validateInventoryForConfirmedOrderLines, "validateInventoryForConfirmedOrderLines");
-async function applyInventoryDeltaForMergedLines(dataSource, entityMap, merged, sign, validateDeduct) {
-  const productRepo = dataSource.getRepository(entityMap.products);
-  for (const [productId, qty] of merged) {
-    const row = await productRepo.findOne({
-      where: {
-        id: productId,
-        deleted: false
-      }
-    });
-    if (!row) return `Product #${productId} not found`;
-    if (row.type === "service") continue;
-    const cur = Number(row.quantity ?? 0);
-    if (sign === -1) {
-      if (validateDeduct && cur < qty) {
-        const name = row.name ?? String(productId);
-        return `Insufficient stock for ${name}: available ${cur}, required ${qty}`;
-      }
-      await productRepo.update(productId, {
-        quantity: Math.max(0, cur - qty)
-      });
-    } else {
-      await productRepo.update(productId, {
-        quantity: cur + qty
-      });
-    }
-  }
-  return null;
-}
-__name(applyInventoryDeltaForMergedLines, "applyInventoryDeltaForMergedLines");
-async function validateInventoryForOrderBecomingConfirmed(dataSource, entityMap, prevSnap, nextLines) {
-  const mergedNext = mergeInventoryLinesByProduct(nextLines);
-  const productRepo = dataSource.getRepository(entityMap.products);
-  const prevByProduct = prevSnap?.status === ORDER_STATUS_CONFIRMED ? mergeInventoryLinesByProduct(prevSnap.lines) : /* @__PURE__ */ new Map();
-  for (const [productId, need] of mergedNext) {
-    const row = await productRepo.findOne({
-      where: {
-        id: productId,
-        deleted: false
-      }
-    });
-    if (!row) return `Product #${productId} not found`;
-    if (row.type === "service") continue;
-    let available = Number(row.quantity ?? 0);
-    available += prevByProduct.get(productId) ?? 0;
-    if (available < need) {
-      const name = row.name ?? String(productId);
-      return `Insufficient stock for ${name}: available ${available}, required ${need}`;
-    }
-  }
-  return null;
-}
-__name(validateInventoryForOrderBecomingConfirmed, "validateInventoryForOrderBecomingConfirmed");
-async function reconcileOrderInventoryBetweenSnapshots(dataSource, entityMap, prev, next) {
-  const wasConfirmed = prev.status === ORDER_STATUS_CONFIRMED;
-  const isConfirmed = next.status === ORDER_STATUS_CONFIRMED;
-  if (wasConfirmed) {
-    const merged = mergeInventoryLinesByProduct(prev.lines);
-    const err = await applyInventoryDeltaForMergedLines(dataSource, entityMap, merged, 1, false);
-    if (err) return err;
-  }
-  if (isConfirmed) {
-    const merged = mergeInventoryLinesByProduct(next.lines);
-    const err = await applyInventoryDeltaForMergedLines(dataSource, entityMap, merged, -1, true);
-    if (err) return err;
-  }
-  return null;
+  }));
+  return validateInventoryForConfirmedOrderLines(dataSource, entityMap, lines);
 }
-__name(reconcileOrderInventoryBetweenSnapshots, "reconcileOrderInventoryBetweenSnapshots");
+__name(validateInventoryForConfirmedOrderLines2, "validateInventoryForConfirmedOrderLines");
 async function resolveProductTaxRate(dataSource, entityMap, productId, productVendorId) {
   if (!entityMap.product_config || !entityMap.taxes) {
     return {
@@ -4997,6 +5000,22 @@ function createCrudHandler(dataSource, entityMap, options) {
           status: 400
         });
       }
+      if (resource === "combos") {
+        const vendorIdForSlug = scopeCreate.type === "vendor" ? scopeCreate.vendorId : Number(persistBody.vendorId);
+        if (!Number.isFinite(vendorIdForSlug) || vendorIdForSlug <= 0) {
+          return json({
+            error: "vendorId is required"
+          }, {
+            status: 400
+          });
+        }
+        const comboSlugErr = await normalizeComboNameAndSlug(repo, persistBody, vendorIdForSlug);
+        if (comboSlugErr) return json({
+          error: comboSlugErr
+        }, {
+          status: 400
+        });
+      }
       sanitizeBodyForEntity(repo, persistBody);
       let created;
       try {
@@ -5095,6 +5114,7 @@ function createCrudHandler(dataSource, entityMap, options) {
           persistBody.orderNumber = `ORD00${randomPart}`;
           persistBody.qrToken = crypto2.randomBytes(16).toString("hex");
         }
+        await retireSoftDeletedUniquesFromBody(repo, persistBody);
         created = await repo.save(repo.create(persistBody));
         if (resource === "orders") {
           const orderItemRepo = dataSource.getRepository(entityMap.order_items);
@@ -5136,8 +5156,8 @@ function createCrudHandler(dataSource, entityMap, options) {
             }
           }
           const createdStatus = String(persistBody.status ?? "pending");
-          if (createdStatus === ORDER_STATUS_CONFIRMED) {
-            const stockErr = await validateInventoryForConfirmedOrderLines(dataSource, entityMap, lines);
+          if (orderStatusHoldsStock(createdStatus)) {
+            const stockErr = await validateInventoryForConfirmedOrderLines2(dataSource, entityMap, lines);
             if (stockErr) {
               await repo.delete(created.id);
               return json({
@@ -5159,6 +5179,7 @@ function createCrudHandler(dataSource, entityMap, options) {
             await orderItemRepo.save(orderItemRepo.create({
               orderId: created.id,
               productId: line.productId,
+              variantId: null,
               quantity: line.quantity,
               unitPrice: line.unitPrice,
               subTotal: line.subtotal,
@@ -5252,7 +5273,7 @@ function createCrudHandler(dataSource, entityMap, options) {
           }
           if (orderDiscountId) {
             if (createdStatus === ORDER_STATUS_CONFIRMED) {
-              const usageErr = await checkAndIncrementDiscountUsage(dataSource, entityMap, orderDiscountId, persistBody.contactId);
+              const usageErr = await checkAndIncrementDiscountUsage2(dataSource, entityMap, orderDiscountId, persistBody.contactId);
               if (usageErr) {
                 await repo.delete(created.id);
                 return json({
@@ -5262,10 +5283,10 @@ function createCrudHandler(dataSource, entityMap, options) {
                 });
               }
             }
-            await recordDiscountUsage(dataSource, entityMap, created.id, orderDiscountId, persistBody.contactId, discount);
+            await recordDiscountUsage2(dataSource, entityMap, created.id, orderDiscountId, persistBody.contactId, discount);
           }
           const orderIdForNotify = created.id;
-          void import('./emit-order-notification-trigger-IVLWKKJL.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-6XX7LSC4.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_placed", orderIdForNotify, {
               dataSource,
               entityMap
@@ -5916,6 +5937,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           }
         }
         sanitizeBodyForEntity(repo, updatePayload2);
+        await retireSoftDeletedUniquesFromBody(repo, updatePayload2);
         await repo.update(numericId, updatePayload2);
         if (Array.isArray(rawBody.tags)) {
           const tagNames = rawBody.tags.map((t) => String(t).trim()).filter(Boolean);
@@ -6004,7 +6026,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           } : await calculateOrderTotalsFromLines(dataSource, entityMap, orderLinesNorm, effectiveCurrency, putDiscountId, Number.isFinite(putOrderVendorId) ? putOrderVendorId : null);
           const scalarUpdate = pickColumnUpdates(repo, rawBody);
           const nextStatus = typeof scalarUpdate.status === "string" && scalarUpdate.status ? String(scalarUpdate.status) : orderInvPrev?.status ?? "pending";
-          if (nextStatus === ORDER_STATUS_CONFIRMED && lines.length > 0) {
+          if (orderStatusHoldsStock(nextStatus) && lines.length > 0) {
             const verr = await validateInventoryForOrderBecomingConfirmed(dataSource, entityMap, orderInvPrev, lines.filter((l) => l.found && l.productId != null).map((l) => ({
               productId: l.productId,
               quantity: l.quantity
@@ -6133,17 +6155,17 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
               }) : null;
               const existingDiscountId = existingOd ? existingOd.discountId : null;
               if (!putDiscountId && existingDiscountId && wasConfirmed) {
-                await decrementDiscountUsage(dataSource, entityMap, existingDiscountId, numericId);
+                await decrementDiscountUsage2(dataSource, entityMap, existingDiscountId, numericId);
                 if (entityMap["order_discounts"] && existingOd) {
                   await dataSource.getRepository(entityMap["order_discounts"]).delete(existingOd.id);
                 }
               }
               if (putDiscountId && existingDiscountId && putDiscountId !== existingDiscountId) {
                 if (wasConfirmed) {
-                  await decrementDiscountUsage(dataSource, entityMap, existingDiscountId, numericId);
+                  await decrementDiscountUsage2(dataSource, entityMap, existingDiscountId, numericId);
                 }
                 if (isNowConfirmed) {
-                  const usageErr = await checkAndIncrementDiscountUsage(dataSource, entityMap, putDiscountId);
+                  const usageErr = await checkAndIncrementDiscountUsage2(dataSource, entityMap, putDiscountId, cid);
                   if (usageErr) return json({
                     error: usageErr
                   }, {
@@ -6156,12 +6178,12 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                     discountAmount: discount
                   });
                 } else {
-                  await recordDiscountUsage(dataSource, entityMap, numericId, putDiscountId, cid, discount);
+                  await recordDiscountUsage2(dataSource, entityMap, numericId, putDiscountId, cid, discount);
                 }
               }
               if (putDiscountId && existingDiscountId && putDiscountId === existingDiscountId) {
                 if (!wasConfirmed && isNowConfirmed) {
-                  const usageErr = await checkAndIncrementDiscountUsage(dataSource, entityMap, putDiscountId);
+                  const usageErr = await checkAndIncrementDiscountUsage2(dataSource, entityMap, putDiscountId, cid);
                   if (usageErr) return json({
                     error: usageErr
                   }, {
@@ -6169,7 +6191,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                   });
                 }
                 if (wasConfirmed && !isNowConfirmed) {
-                  await decrementDiscountUsage(dataSource, entityMap, putDiscountId, numericId);
+                  await decrementDiscountUsage2(dataSource, entityMap, putDiscountId, numericId);
                 }
                 if (existingOd && entityMap["order_discounts"]) {
                   await dataSource.getRepository(entityMap["order_discounts"]).update(existingOd.id, {
@@ -6179,14 +6201,14 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
               }
               if (putDiscountId && !existingDiscountId) {
                 if (isNowConfirmed) {
-                  const usageErr = await checkAndIncrementDiscountUsage(dataSource, entityMap, putDiscountId);
+                  const usageErr = await checkAndIncrementDiscountUsage2(dataSource, entityMap, putDiscountId, cid);
                   if (usageErr) return json({
                     error: usageErr
                   }, {
                     status: 400
                   });
                 }
-                await recordDiscountUsage(dataSource, entityMap, numericId, putDiscountId, cid, discount);
+                await recordDiscountUsage2(dataSource, entityMap, numericId, putDiscountId, cid, discount);
               }
             }
           }
@@ -6657,7 +6679,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
       }
       if (resource === "orders" && orderInvPrev) {
         const nextSt = typeof updatePayload.status === "string" && updatePayload.status ? String(updatePayload.status) : orderInvPrev.status;
-        if (nextSt === ORDER_STATUS_CONFIRMED && orderInvPrev.lines.length > 0) {
+        if (orderStatusHoldsStock(nextSt) && orderInvPrev.lines.length > 0) {
           const verr = await validateInventoryForOrderBecomingConfirmed(dataSource, entityMap, orderInvPrev, orderInvPrev.lines);
           if (verr) return json({
             error: verr
@@ -6666,6 +6688,33 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           });
         }
       }
+      if (resource === "combos") {
+        const currentCombo = await repo.findOne({
+          where: {
+            id: numericId,
+            deleted: false
+          }
+        });
+        if (!currentCombo) return json({
+          message: "Not found"
+        }, {
+          status: 404
+        });
+        const vendorIdForSlug = scopePut.type === "vendor" ? scopePut.vendorId : Number(currentCombo.vendorId);
+        if (!Number.isFinite(vendorIdForSlug) || vendorIdForSlug <= 0) {
+          return json({
+            error: "vendorId is required"
+          }, {
+            status: 400
+          });
+        }
+        const comboSlugErr = await normalizeComboNameAndSlug(repo, updatePayload, vendorIdForSlug, currentCombo, numericId);
+        if (comboSlugErr) return json({
+          error: comboSlugErr
+        }, {
+          status: 400
+        });
+      }
       if (Object.keys(updatePayload).length > 0) {
         if (resource === "payments" && updatePayload.status === "paid" && updatePayload.paidAt == null) {
           const existingPayment = await repo.findOne({
@@ -6679,6 +6728,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           }
         }
         sanitizeBodyForEntity(repo, updatePayload);
+        await retireSoftDeletedUniquesFromBody(repo, updatePayload);
         await repo.update(numericId, updatePayload);
       }
       if (resource === "orders" && rawBody && entityMap["order_addresses"]) {
@@ -6854,7 +6904,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             });
             if (od) {
               const odRow = od;
-              await decrementDiscountUsage(dataSource, entityMap, odRow.discountId, numericId);
+              await decrementDiscountUsage2(dataSource, entityMap, odRow.discountId, numericId);
             }
           }
         }
@@ -6867,11 +6917,19 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           }
         }
         await repo.update(numericId, buildSoftDeletePayload(repo.metadata, deletedBy));
-        if ((resource === "forms" || resource === "vendors") && existing && typeof existing.slug === "string") {
-          const slug = String(existing.slug).trim();
-          if (slug && !slug.includes("__deleted_")) {
+        const softDeletedCols = repo.metadata.columns.map((c) => c.propertyName);
+        const uniqueColsToRetire = [
+          "slug",
+          "email"
+        ].filter((col) => softDeletedCols.includes(col));
+        if (existing && uniqueColsToRetire.length > 0) {
+          for (const col of uniqueColsToRetire) {
+            const raw = existing[col];
+            if (typeof raw !== "string") continue;
+            const value = raw.trim();
+            if (!value || value.includes("__deleted_")) continue;
             await repo.update(numericId, {
-              slug: `${slug}__deleted_${numericId}`
+              [col]: `${value}__deleted_${numericId}`
             });
           }
         }
@@ -6919,6 +6977,49 @@ async function linkUnclaimedContactToUser(dataSource, contactsEntity, userId, em
   });
 }
 __name(linkUnclaimedContactToUser, "linkUnclaimedContactToUser");
+function buildUserInviteLink(baseUrl, token) {
+  const base = baseUrl.replace(/\/+$/, "");
+  return `${base}/admin/invite?token=${encodeURIComponent(token)}`;
+}
+__name(buildUserInviteLink, "buildUserInviteLink");
+function newUserInviteToken() {
+  return randomBytes(32).toString("hex");
+}
+__name(newUserInviteToken, "newUserInviteToken");
+async function findUserByInviteToken(dataSource, userEntity, token) {
+  const trimmed = token.trim();
+  if (!trimmed) return null;
+  const repo = dataSource.getRepository(userEntity);
+  const row = await repo.findOne({
+    where: {
+      inviteToken: trimmed,
+      deleted: false
+    },
+    select: [
+      "id",
+      "email",
+      "blocked",
+      "password",
+      "inviteStatus",
+      "inviteToken"
+    ]
+  });
+  if (!row) return null;
+  const u = row;
+  return u;
+}
+__name(findUserByInviteToken, "findUserByInviteToken");
+async function completeUserInviteAccept(dataSource, userEntity, userId, passwordHash) {
+  await dataSource.getRepository(userEntity).update(userId, {
+    password: passwordHash,
+    blocked: false,
+    inviteStatus: "active",
+    inviteToken: null
+  });
+}
+__name(completeUserInviteAccept, "completeUserInviteAccept");
+
+// src/lib/vendor-invite-token.ts
 var VENDOR_INVITE_METADATA_TOKEN = "inviteToken";
 var VENDOR_INVITE_METADATA_EXPIRES = "inviteExpiresAt";
 var VENDOR_INVITE_METADATA_SENT = "inviteSentAt";
@@ -6943,6 +7044,13 @@ function invalidatedInviteMessage() {
   return "This invitation is no longer valid. Ask an admin to resend the invite.";
 }
 __name(invalidatedInviteMessage, "invalidatedInviteMessage");
+function userAlreadyActive(user) {
+  const hasPassword = !!(user.password && String(user.password).trim());
+  if (user.inviteStatus === "active" && hasPassword) return true;
+  if (user.inviteStatus === "pending") return false;
+  return !user.blocked && hasPassword;
+}
+__name(userAlreadyActive, "userAlreadyActive");
 async function validateInviteTokenForActivation(dataSource, entityMap, token) {
   const trimmedToken = String(token ?? "").trim();
   if (!trimmedToken) {
@@ -6989,15 +7097,15 @@ async function validateInviteTokenForActivation(dataSource, entityMap, token) {
           "id",
           "email",
           "blocked",
-          "password"
+          "password",
+          "inviteStatus"
         ]
       });
       if (!user2) return {
         ok: false,
         error: "User not found"
       };
-      const hasPassword2 = !!user2.password;
-      if (!user2.blocked && hasPassword2) {
+      if (userAlreadyActive(user2)) {
         return {
           ok: false,
           error: "User is already active"
@@ -7013,6 +7121,24 @@ async function validateInviteTokenForActivation(dataSource, entityMap, token) {
       };
     }
   }
+  if (userRepo && entityMap.users) {
+    const userMatch = await findUserByInviteToken(dataSource, entityMap.users, trimmedToken);
+    if (userMatch) {
+      if (userMatch.inviteStatus === "active" || userAlreadyActive(userMatch)) {
+        return {
+          ok: false,
+          error: "This invitation has already been accepted"
+        };
+      }
+      return {
+        ok: true,
+        target: {
+          userId: userMatch.id,
+          email: userMatch.email
+        }
+      };
+    }
+  }
   let email;
   try {
     email = Buffer.from(trimmedToken, "base64").toString("utf8").trim();
@@ -7042,22 +7168,30 @@ async function validateInviteTokenForActivation(dataSource, entityMap, token) {
       "id",
       "email",
       "blocked",
-      "password"
+      "password",
+      "inviteStatus",
+      "inviteToken"
     ]
   });
   if (!user) return {
     ok: false,
     error: "User not found"
   };
-  const hasPassword = !!user.password;
-  if (!user.blocked && hasPassword) {
+  const u = user;
+  if (userAlreadyActive(u)) {
     return {
       ok: false,
       error: "User is already active"
     };
   }
+  if (u.inviteToken && String(u.inviteToken).trim()) {
+    return {
+      ok: false,
+      error: invalidatedInviteMessage()
+    };
+  }
   if (entityMap.vendors) {
-    const ownerVendor = await loadOwnerVendorForUser(dataSource, entityMap.vendors, user.id);
+    const ownerVendor = await loadOwnerVendorForUser(dataSource, entityMap.vendors, u.id);
     if (ownerVendor && readVendorInviteToken(ownerVendor.metadata)) {
       return {
         ok: false,
@@ -7068,8 +7202,8 @@ async function validateInviteTokenForActivation(dataSource, entityMap, token) {
   return {
     ok: true,
     target: {
-      userId: user.id,
-      email: String(user.email)
+      userId: u.id,
+      email: String(u.email)
     }
   };
 }
@@ -7287,10 +7421,7 @@ function createInviteAcceptHandler(config) {
       }
       if (beforeActivate) await beforeActivate(email, userId);
       const hashedPassword = await hashPassword(password);
-      await dataSource.getRepository(entityMap.users).update(userId, {
-        password: hashedPassword,
-        blocked: false
-      });
+      await completeUserInviteAccept(dataSource, entityMap.users, userId, hashedPassword);
       if (vendorId != null && entityMap.vendors) {
         await completeVendorInviteAccept(dataSource, entityMap.vendors, vendorId);
       }
@@ -7651,50 +7782,6 @@ async function findLlmAgentByScope(dataSource, entityMap, scope, options = {}) {
 }
 __name(findLlmAgentByScope, "findLlmAgentByScope");
 
-// src/lib/retire-soft-deleted-unique.ts
-async function retireSoftDeletedUniqueValue(repo, column, value) {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  if (!trimmed) return;
-  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
-  if (!cols.has(column) || !cols.has("deleted")) return;
-  const rows = await repo.find({
-    where: {
-      [column]: trimmed,
-      deleted: true
-    }
-  });
-  for (const row of rows) {
-    const id = row.id;
-    if (!Number.isFinite(id)) continue;
-    const current = String(row[column] ?? "");
-    if (current.includes("__deleted_")) continue;
-    await repo.update(id, {
-      [column]: `${trimmed}__deleted_${id}`
-    });
-  }
-}
-__name(retireSoftDeletedUniqueValue, "retireSoftDeletedUniqueValue");
-async function activeUniqueValueExists(repo, column, value, excludeId) {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  if (!trimmed) return false;
-  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
-  if (!cols.has(column)) return false;
-  const qb = repo.createQueryBuilder("row").where(`row.${column} = :value`, {
-    value: trimmed
-  });
-  if (cols.has("deleted")) {
-    qb.andWhere("row.deleted = false");
-  }
-  if (excludeId != null && Number.isFinite(excludeId) && excludeId > 0) {
-    qb.andWhere("row.id != :excludeId", {
-      excludeId
-    });
-  }
-  const hit = await qb.getOne();
-  return !!hit;
-}
-__name(activeUniqueValueExists, "activeUniqueValueExists");
-
 // src/lib/media-folder-path.ts
 function sanitizeMediaFolderPath(input) {
   if (input == null) return "";
@@ -8761,6 +8848,9 @@ function createUploadHandler(config) {
     "image/png",
     "image/gif",
     "image/webp",
+    "video/mp4",
+    "video/webm",
+    "video/quicktime",
     "application/pdf",
     "text/plain",
     "application/zip",
@@ -8788,8 +8878,11 @@ function createUploadHandler(config) {
       });
       const defaultMax = 10 * 1024 * 1024;
       const maxZipBytes = 80 * 1024 * 1024;
+      const maxVideoBytes = 100 * 1024 * 1024;
       const baseMax = maxSizeBytes ?? defaultMax;
-      const effectiveMax = file.type === "application/zip" || file.type === "application/x-zip-compressed" ? Math.max(baseMax, maxZipBytes) : baseMax;
+      const isZip = file.type === "application/zip" || file.type === "application/x-zip-compressed";
+      const isVideo = file.type === "video/mp4" || file.type === "video/webm" || file.type === "video/quicktime";
+      const effectiveMax = isZip ? Math.max(baseMax, maxZipBytes) : isVideo ? Math.max(baseMax, maxVideoBytes) : baseMax;
       if (file.size > effectiveMax) return json({
         error: "File size exceeds limit"
       }, {
@@ -8862,12 +8955,20 @@ function createUploadHandler(config) {
         parentId
       });
     } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
       console.error("[upload] File upload failed", {
-        error: err instanceof Error ? err.message : String(err),
+        error: message,
         stack: err instanceof Error ? err.stack : void 0,
         name: err instanceof Error ? err.name : void 0,
         metadata: err && typeof err === "object" && "$metadata" in err ? err.$metadata : void 0
       });
+      if (/Failed to parse body as FormData/i.test(message)) {
+        return json({
+          error: "File upload failed: request body could not be read as FormData. Exclude /api/upload from middleware matcher and raise proxyClientMaxBodySize."
+        }, {
+          status: 500
+        });
+      }
       return json({
         error: "File upload failed"
       }, {
@@ -9621,7 +9722,8 @@ function createUsersApiHandlers(config) {
           "name",
           "email",
           "id",
-          "blocked"
+          "blocked",
+          "inviteStatus"
         ]);
         const sortField = allowedSort.has(sortFieldRaw) ? sortFieldRaw : "createdAt";
         const sortOrder = url.searchParams.get("sortOrder") === "desc" ? "DESC" : "ASC";
@@ -9634,6 +9736,7 @@ function createUsersApiHandlers(config) {
           "u.name",
           "u.email",
           "u.blocked",
+          "u.inviteStatus",
           "u.createdAt",
           "u.updatedAt",
           "u.groupId",
@@ -9729,6 +9832,7 @@ function createUsersApiHandlers(config) {
         const isCustomer = !!(customerG && gid === customerG.id);
         const adminAccess = isCustomer ? false : body.adminAccess === false ? false : true;
         const blocked = body.blocked === true || body.blocked === "true" || body.blocked === 1 || body.blocked === "1";
+        const inviteToken = newUserInviteToken();
         const newUser = existing?.deleted ? await (async () => {
           await userRepo().update(existing.id, {
             deleted: false,
@@ -9738,6 +9842,8 @@ function createUsersApiHandlers(config) {
             email,
             password: null,
             blocked,
+            inviteStatus: "pending",
+            inviteToken,
             groupId: gid,
             adminAccess,
             updatedAt: /* @__PURE__ */ new Date()
@@ -9754,6 +9860,8 @@ function createUsersApiHandlers(config) {
           email,
           password: null,
           blocked,
+          inviteStatus: "pending",
+          inviteToken,
           groupId: gid,
           adminAccess
         }));
@@ -9771,13 +9879,12 @@ function createUsersApiHandlers(config) {
             phone
           });
         }
-        const emailToken = Buffer.from(newUser.email).toString("base64");
-        const inviteLink = `${baseUrl}/admin/invite?token=${emailToken}`;
-        await trySendInviteEmail(newUser.email, inviteLink, newUser.name ?? "");
+        const inviteLink = buildUserInviteLink(baseUrl, inviteToken);
         return json({
-          message: blocked ? "User created successfully (blocked until password is set)" : "User created successfully",
+          message: "User created successfully. Invite is pending until they set a password.",
           user: newUser,
-          inviteLink
+          inviteLink,
+          emailSent: false
         }, {
           status: 201
         });
@@ -9811,6 +9918,7 @@ function createUsersApiHandlers(config) {
             "email",
             "phone",
             "blocked",
+            "inviteStatus",
             "createdAt",
             "updatedAt",
             "groupId"
@@ -9923,6 +10031,7 @@ function createUsersApiHandlers(config) {
             "email",
             "phone",
             "blocked",
+            "inviteStatus",
             "createdAt",
             "updatedAt",
             "groupId"
@@ -9990,13 +10099,21 @@ function createUsersApiHandlers(config) {
         });
       }
     },
-    async regenerateInvite(_req, id) {
-      const authErr = await requireAuth(new Request(_req.url));
+    async regenerateInvite(req, id) {
+      const authErr = await requireAuth(new Request(req.url));
       if (authErr) return authErr;
       if (requireEntityPermission) {
-        const pe = await requireEntityPermission(_req, "users", "update");
+        const pe = await requireEntityPermission(req, "users", "update");
         if (pe) return pe;
       }
+      let sendEmail = true;
+      let rotate = true;
+      try {
+        const body = await req.json().catch(() => ({}));
+        if (body.sendEmail === false) sendEmail = false;
+        if (body.rotate === false) rotate = false;
+      } catch {
+      }
       try {
         const user = await userRepo().findOne({
           where: {
@@ -10006,7 +10123,11 @@ function createUsersApiHandlers(config) {
           select: [
             "id",
             "email",
-            "name"
+            "name",
+            "password",
+            "inviteStatus",
+            "inviteToken",
+            "blocked"
           ]
         });
         if (!user) return json({
@@ -10014,34 +10135,75 @@ function createUsersApiHandlers(config) {
         }, {
           status: 404
         });
-        let inviteLink = `${baseUrl}/admin/invite?token=${Buffer.from(user.email).toString("base64")}`;
+        const u = user;
+        const hasPassword = !!(u.password && String(u.password).trim());
+        if (u.inviteStatus === "active" && hasPassword) {
+          return json({
+            error: "User has already accepted the invite"
+          }, {
+            status: 400
+          });
+        }
+        let inviteLink = "";
         if (entityMap.vendors) {
           const vendorRepo = dataSource.getRepository(entityMap.vendors);
           const vendor = await vendorRepo.findOne({
             where: {
-              userId: user.id,
+              userId: u.id,
               deleted: false
             }
           });
           const v = vendor;
           if (v && (v.inviteStatus === "pending" || v.inviteStatus === "expired")) {
-            const rotatedMetadata = applyRotatingVendorInvite(v.metadata);
-            await vendorRepo.update(v.id, {
-              metadata: rotatedMetadata,
-              inviteStatus: "pending"
-            });
-            const token = readVendorInviteToken(rotatedMetadata);
+            const nextMetadata = rotate ? applyRotatingVendorInvite(v.metadata) : {
+              ...v.metadata ?? {}
+            };
+            if (rotate || v.inviteStatus !== "pending") {
+              await vendorRepo.update(v.id, {
+                metadata: nextMetadata,
+                inviteStatus: "pending"
+              });
+            }
+            const token = readVendorInviteToken(nextMetadata);
             if (token) {
               inviteLink = buildVendorInviteLink(baseUrl, token);
             }
+            const { markVendorInvitePendingForUser } = await import('./vendor-invite-status-PWJ3DE76.js');
+            await markVendorInvitePendingForUser(dataSource, entityMap.vendors, u.id);
+          }
+        }
+        if (!inviteLink) {
+          let token = u.inviteToken?.trim() || "";
+          if (rotate || !token) {
+            token = newUserInviteToken();
+            await userRepo().update(u.id, {
+              inviteToken: token,
+              inviteStatus: "pending",
+              password: null
+            });
+          } else if (u.inviteStatus !== "pending") {
+            await userRepo().update(u.id, {
+              inviteStatus: "pending"
+            });
           }
-          const { markVendorInvitePendingForUser } = await import('./vendor-invite-status-PWJ3DE76.js');
-          await markVendorInvitePendingForUser(dataSource, entityMap.vendors, user.id);
+          inviteLink = buildUserInviteLink(baseUrl, token);
+        } else if (rotate) {
+          await userRepo().update(u.id, {
+            inviteStatus: "pending",
+            password: null
+          });
+        }
+        let emailSent = false;
+        if (sendEmail && inviteLink) {
+          await trySendInviteEmail(u.email, inviteLink, u.name ?? "");
+          emailSent = true;
         }
-        await trySendInviteEmail(user.email, inviteLink, user.name ?? "");
+        const rotatedNote = rotate ? " Previous invite link is no longer valid." : "";
         return json({
-          message: "New invite link generated successfully",
-          inviteLink
+          message: emailSent ? `Invite email sent.${rotatedNote}` : sendEmail ? `Invite link ready (email may not have been sent \u2014 check email plugin).${rotatedNote}` : rotate ? "New invite link created. Previous invite link is no longer valid." : "Invite link ready.",
+          emailSent,
+          inviteLink,
+          inviteStatus: "pending"
         });
       } catch {
         return json({
@@ -12857,6 +13019,15 @@ async function seedVendorDefaultRoles(em, vendorId) {
 }
 __name(seedVendorDefaultRoles, "seedVendorDefaultRoles");
 async function backfillVendorUserRoleIds(em, vendorId, seeded) {
+  const cols = await em.query(`
+    SELECT 1
+    FROM information_schema.columns
+    WHERE table_schema = 'public'
+      AND table_name = 'vendor_users'
+      AND column_name = 'role'
+    LIMIT 1
+    `);
+  if (!cols.length) return;
   if (seeded.ownerRoleId) {
     await em.query(`
       UPDATE "vendor_users"
@@ -12948,11 +13119,29 @@ function parseVendorProfileFromBody(raw, options) {
     country: trimOrNull(raw?.country) ?? "IN",
     postalCode: trimOrNull(raw?.postalCode),
     gstin: trimOrNull(raw?.gstin)?.toUpperCase() ?? null,
-    pan: trimOrNull(raw?.pan)?.toUpperCase() ?? null,
     registrationStatus: parseRegistrationStatus(raw?.registrationStatus, defaultStatus)
   };
 }
 __name(parseVendorProfileFromBody, "parseVendorProfileFromBody");
+function parseVendorPersonProfileFromBody(raw, fallbacks) {
+  const name = trimOrNull(raw?.name) ?? trimOrNull(fallbacks?.name) ?? "";
+  const email = (trimOrNull(raw?.email) ?? trimOrNull(fallbacks?.email) ?? "").toLowerCase();
+  const aadhaarRaw = trimOrNull(raw?.aadhaarNo) ?? trimOrNull(raw?.aadhaar);
+  const panRaw = trimOrNull(raw?.panNo) ?? trimOrNull(raw?.pan);
+  return {
+    name,
+    email,
+    phone: trimOrNull(raw?.phone) ?? trimOrNull(fallbacks?.phone),
+    aadhaarNo: aadhaarRaw ? aadhaarRaw.replace(/\s+/g, "") : null,
+    panNo: panRaw ? panRaw.toUpperCase() : null,
+    addressLine1: trimOrNull(raw?.addressLine1),
+    addressLine2: trimOrNull(raw?.addressLine2),
+    city: trimOrNull(raw?.city),
+    state: trimOrNull(raw?.state),
+    postalCode: trimOrNull(raw?.postalCode)
+  };
+}
+__name(parseVendorPersonProfileFromBody, "parseVendorPersonProfileFromBody");
 function validateIndiaTaxIds(gstin, pan) {
   if (gstin && !/^[0-9]{2}[A-Z]{5}[0-9]{4}[A-Z][1-9A-Z]Z[0-9A-Z]$/i.test(gstin)) {
     return "Invalid GSTIN format (15 characters, e.g. 22AAAAA0000A1Z5)";
@@ -12963,6 +13152,25 @@ function validateIndiaTaxIds(gstin, pan) {
   return null;
 }
 __name(validateIndiaTaxIds, "validateIndiaTaxIds");
+function validateAadhaar(aadhaar) {
+  if (!aadhaar) return null;
+  if (!/^[0-9]{12}$/.test(aadhaar)) {
+    return "Invalid Aadhaar number (12 digits)";
+  }
+  return null;
+}
+__name(validateAadhaar, "validateAadhaar");
+function validatePersonKyc(person, options) {
+  const required = options?.required === true;
+  if (required && !person.aadhaarNo) return "Aadhaar number is required";
+  if (required && !person.panNo) return "PAN is required";
+  const aadhaarErr = validateAadhaar(person.aadhaarNo ?? null);
+  if (aadhaarErr) return aadhaarErr;
+  const panErr = validateIndiaTaxIds(null, person.panNo ?? null);
+  if (panErr) return panErr;
+  return null;
+}
+__name(validatePersonKyc, "validatePersonKyc");
 function buildVendorMetadata(existing, input) {
   const next = {
     ...existing ?? {}
@@ -12977,11 +13185,86 @@ function buildVendorMetadata(existing, input) {
 }
 __name(buildVendorMetadata, "buildVendorMetadata");
 
+// src/lib/vendor-pending-team-invite.ts
+var VENDOR_PENDING_TEAM_INVITES_KEY = "pendingTeamInvites";
+function asMetadata(raw) {
+  if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+    return {
+      ...raw
+    };
+  }
+  return {};
+}
+__name(asMetadata, "asMetadata");
+function readPendingTeamInvites(metadata) {
+  const list = metadata?.[VENDOR_PENDING_TEAM_INVITES_KEY];
+  if (!Array.isArray(list)) return [];
+  return list.filter((row) => {
+    if (!row || typeof row !== "object") return false;
+    const r = row;
+    return typeof r.token === "string" && typeof r.userId === "number" && typeof r.email === "string" && typeof r.vendorRoleId === "number" && typeof r.vendorUserProfileId === "number" && typeof r.name === "string";
+  });
+}
+__name(readPendingTeamInvites, "readPendingTeamInvites");
+function findPendingTeamInviteByToken(metadata, token) {
+  const trimmed = token.trim();
+  if (!trimmed) return null;
+  return readPendingTeamInvites(metadata).find((i) => i.token === trimmed) ?? null;
+}
+__name(findPendingTeamInviteByToken, "findPendingTeamInviteByToken");
+function findPendingTeamInviteByUserId(metadata, userId) {
+  if (!Number.isFinite(userId) || userId <= 0) return null;
+  return readPendingTeamInvites(metadata).find((i) => i.userId === userId) ?? null;
+}
+__name(findPendingTeamInviteByUserId, "findPendingTeamInviteByUserId");
+function upsertPendingTeamInviteInMetadata(metadata, email, next) {
+  const meta = asMetadata(metadata);
+  const emailLc = email.trim().toLowerCase();
+  const rest = readPendingTeamInvites(meta).filter((i) => i.email.toLowerCase() !== emailLc);
+  const pending = next ? [
+    ...rest,
+    next
+  ] : rest;
+  if (pending.length === 0) {
+    delete meta[VENDOR_PENDING_TEAM_INVITES_KEY];
+  } else {
+    meta[VENDOR_PENDING_TEAM_INVITES_KEY] = pending;
+  }
+  return meta;
+}
+__name(upsertPendingTeamInviteInMetadata, "upsertPendingTeamInviteInMetadata");
+function removePendingTeamInviteTokenFromMetadata(metadata, token) {
+  const meta = asMetadata(metadata);
+  const trimmed = token.trim();
+  const pending = readPendingTeamInvites(meta).filter((i) => i.token !== trimmed);
+  if (pending.length === 0) {
+    delete meta[VENDOR_PENDING_TEAM_INVITES_KEY];
+  } else {
+    meta[VENDOR_PENDING_TEAM_INVITES_KEY] = pending;
+  }
+  return meta;
+}
+__name(removePendingTeamInviteTokenFromMetadata, "removePendingTeamInviteTokenFromMetadata");
+
 // src/api/vendor-handlers.ts
 function slugify(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
 }
 __name(slugify, "slugify");
+function userHasActiveLogin(user) {
+  if (user.deleted) return false;
+  if (user.blocked) return false;
+  const hasPassword = !!(user.password && String(user.password).trim());
+  if (!hasPassword) return false;
+  if (user.inviteStatus === "pending") return false;
+  return true;
+}
+__name(userHasActiveLogin, "userHasActiveLogin");
+function buildTeamMembershipInviteLink(baseUrl, token, vendorId) {
+  const base = baseUrl.replace(/\/+$/, "");
+  return `${base}/admin/invite?token=${encodeURIComponent(token)}&mode=team&vendorId=${vendorId}`;
+}
+__name(buildTeamMembershipInviteLink, "buildTeamMembershipInviteLink");
 async function userHasActiveVendor(em, entityMap, userId) {
   const vendorRepo = em.getRepository(entityMap.vendors);
   const owned = await vendorRepo.findOne({
@@ -13034,7 +13317,7 @@ function vendorOnboardErrorResponse(json, err) {
   }
   if (msg === "VENDOR_OWNER_GROUP_MISSING") {
     return json({
-      error: "Vendor Owner group not found. Run migrations (VendorOwnerRbacSeed)."
+      error: "Vendor group not found. Run migrations (VendorTeamProfiles / VendorOwnerRbacSeed)."
     }, {
       status: 500
     });
@@ -13094,7 +13377,7 @@ function vendorOnboardErrorResponse(json, err) {
 }
 __name(vendorOnboardErrorResponse, "vendorOnboardErrorResponse");
 function createVendorOnboardHandlers(config) {
-  const { dataSource, entityMap, json, getSessionUser, baseUrl, getCms, hashPassword, minPasswordLength = 6 } = config;
+  const { dataSource, entityMap, json, getSessionUser, baseUrl, getCms } = config;
   async function gateAdmin() {
     const u = await getSessionUser();
     if (!u?.email) return json({
@@ -13244,7 +13527,7 @@ function createVendorOnboardHandlers(config) {
     async getProfile() {
       const gated = await gateVendorPortal();
       if (gated instanceof Response) return gated;
-      const { vendorId } = gated;
+      const { user, vendorId } = gated;
       if (!entityMap.vendors) {
         return json({
           error: "Vendors not configured"
@@ -13264,7 +13547,39 @@ function createVendorOnboardHandlers(config) {
         }, {
           status: 404
         });
-        return json(row);
+        let personProfile = null;
+        const userId = user.id != null ? Number(user.id) : null;
+        if (userId != null && Number.isFinite(userId) && entityMap.vendor_users && entityMap.vendor_user_profiles) {
+          const link = await dataSource.getRepository(entityMap.vendor_users).findOne({
+            where: {
+              vendorId,
+              userId
+            },
+            relations: [
+              "vendorUserProfile"
+            ]
+          });
+          const vp = link?.vendorUserProfile;
+          if (vp) {
+            personProfile = {
+              id: vp.id,
+              name: vp.name ?? null,
+              email: vp.email ?? null,
+              phone: vp.phone ?? null,
+              aadhaarNo: vp.aadhaarNo ?? null,
+              panNo: vp.panNo ?? null,
+              addressLine1: vp.addressLine1 ?? null,
+              addressLine2: vp.addressLine2 ?? null,
+              city: vp.city ?? null,
+              state: vp.state ?? null,
+              postalCode: vp.postalCode ?? null
+            };
+          }
+        }
+        return json({
+          ...row,
+          personProfile
+        });
       } catch (e) {
         console.error("[vendor.profile]", e);
         return json({
@@ -13285,6 +13600,13 @@ function createVendorOnboardHandlers(config) {
           status: 500
         });
       }
+      if (!entityMap.vendor_user_profiles) {
+        return json({
+          error: "vendor_user_profiles not configured. Run migrations."
+        }, {
+          status: 500
+        });
+      }
       try {
         const body = await req.json();
         const vendorName = trimOrNull(body.vendor?.name);
@@ -13316,12 +13638,35 @@ function createVendorOnboardHandlers(config) {
         const profile = parseVendorProfileFromBody(body.vendor, {
           defaultRegistrationStatus: "approved"
         });
-        const taxError = validateIndiaTaxIds(profile.gstin, profile.pan);
-        if (taxError) return json({
-          error: taxError
+        const gstError = validateIndiaTaxIds(profile.gstin, null);
+        if (gstError) return json({
+          error: gstError
+        }, {
+          status: 400
+        });
+        const person = parseVendorPersonProfileFromBody({
+          ...body.ownerProfile ?? {},
+          ...body.user ?? {}
+        }, {
+          name: userName,
+          email: userEmail,
+          phone: ownerPhone
+        });
+        const personErr = validatePersonKyc(person, {
+          required: true
+        });
+        if (personErr) return json({
+          error: personErr
         }, {
           status: 400
         });
+        if (!person.addressLine1?.trim()) {
+          return json({
+            error: "Owner address line 1 is required"
+          }, {
+            status: 400
+          });
+        }
         const activation = "invite";
         const ownerPasswordHash = null;
         const slug = trimOrNull(body.vendor?.slug) || slugify(vendorName);
@@ -13335,6 +13680,7 @@ function createVendorOnboardHandlers(config) {
           const userRepo = em.getRepository(entityMap.users);
           const vuRepo = em.getRepository(entityMap.vendor_users);
           const groupRepo = em.getRepository(entityMap.user_groups);
+          const profileRepo = em.getRepository(entityMap.vendor_user_profiles);
           const dupVendor = await vendorRepo.findOne({
             where: {
               slug,
@@ -13345,24 +13691,32 @@ function createVendorOnboardHandlers(config) {
           await retireSoftDeletedUniqueValue(vendorRepo, "slug", slug);
           let ownerGroup = await groupRepo.findOne({
             where: {
-              name: VENDOR_OWNER_GROUP_NAME,
+              name: VENDOR_GROUP_NAME,
               deleted: false
             }
           });
+          if (!ownerGroup) {
+            ownerGroup = await groupRepo.findOne({
+              where: {
+                name: "Vendor Owner",
+                deleted: false
+              }
+            });
+          }
           if (!ownerGroup) {
             try {
               await groupRepo.save(groupRepo.create({
-                name: VENDOR_OWNER_GROUP_NAME,
+                name: VENDOR_GROUP_NAME,
                 deleted: false
               }));
               ownerGroup = await groupRepo.findOne({
                 where: {
-                  name: VENDOR_OWNER_GROUP_NAME,
+                  name: VENDOR_GROUP_NAME,
                   deleted: false
                 }
               });
             } catch (seedErr) {
-              console.error("[vendor-onboard] failed to seed Vendor Owner group", seedErr);
+              console.error("[vendor-onboard] failed to seed Vendor group", seedErr);
             }
           }
           if (!ownerGroup) throw new Error("VENDOR_OWNER_GROUP_MISSING");
@@ -13430,7 +13784,6 @@ function createVendorOnboardHandlers(config) {
             country: profile.country,
             postalCode: profile.postalCode,
             gstin: profile.gstin,
-            pan: profile.pan,
             registrationStatus: profile.registrationStatus,
             metadata,
             active: body.vendor?.active !== false,
@@ -13438,6 +13791,18 @@ function createVendorOnboardHandlers(config) {
             userId: newUser.id,
             inviteStatus: inviteStatusForActivation(activation)
           }));
+          const personRow = await profileRepo.save(profileRepo.create({
+            name: person.name || userName,
+            email: person.email || userEmail,
+            phone: person.phone,
+            aadhaarNo: person.aadhaarNo,
+            panNo: person.panNo,
+            addressLine1: person.addressLine1,
+            addressLine2: person.addressLine2,
+            city: person.city,
+            state: person.state,
+            postalCode: person.postalCode
+          }));
           const seeded = await ensureVendorRolesForVendor(em, vendor.id);
           if (!seeded.ownerRoleId) {
             throw new Error("VENDOR_ROLES_SEED_FAILED");
@@ -13452,12 +13817,13 @@ function createVendorOnboardHandlers(config) {
             await vuRepo.save(vuRepo.create({
               vendorId: vendor.id,
               userId: newUser.id,
-              role: "owner",
-              vendorRoleId: seeded.ownerRoleId
+              vendorRoleId: seeded.ownerRoleId,
+              vendorUserProfileId: personRow.id
             }));
-          } else if (!existingLink.vendorRoleId) {
+          } else {
             await vuRepo.update(existingLink.id, {
-              vendorRoleId: seeded.ownerRoleId
+              vendorRoleId: seeded.ownerRoleId,
+              vendorUserProfileId: personRow.id
             });
           }
           if (entityMap.customer) {
@@ -13686,9 +14052,14 @@ function createVendorOnboardHandlers(config) {
         order: {
           id: "ASC"
         },
-        relations: entityMap.vendor_roles ? [
-          "vendorRole"
-        ] : []
+        relations: [
+          ...entityMap.vendor_roles ? [
+            "vendorRole"
+          ] : [],
+          ...entityMap.vendor_user_profiles ? [
+            "vendorUserProfile"
+          ] : []
+        ]
       });
       if (links.length === 0) return json({
         vendorId,
@@ -13721,28 +14092,38 @@ function createVendorOnboardHandlers(config) {
           select: [
             "id",
             "name",
-            "isOwnerRole"
+            "isOwnerRole",
+            "isSystem"
           ]
         });
         roles = roleRows.map((r) => ({
           id: r.id,
           name: r.name,
-          isOwnerRole: r.isOwnerRole
+          isOwnerRole: r.isOwnerRole,
+          isSystem: r.isSystem === true
         }));
       }
       const members = links.map((l) => {
         const u = userById.get(l.userId);
         const vr = l.vendorRole;
+        const vp = l.vendorUserProfile;
         return {
           vendorUserId: l.id,
           userId: l.userId,
-          role: l.role,
           vendorRoleId: l.vendorRoleId ?? null,
           vendorRoleName: vr?.name ?? null,
-          isOwnerRole: vr?.isOwnerRole ?? l.role === "owner",
+          isOwnerRole: vr?.isOwnerRole === true,
+          vendorUserProfileId: l.vendorUserProfileId ?? null,
           name: u?.name ?? null,
           email: u?.email ?? null,
-          phone: u?.phone ?? null,
+          phone: vp?.phone ?? u?.phone ?? null,
+          aadhaarNo: vp?.aadhaarNo ?? null,
+          panNo: vp?.panNo ?? null,
+          addressLine1: vp?.addressLine1 ?? null,
+          addressLine2: vp?.addressLine2 ?? null,
+          city: vp?.city ?? null,
+          state: vp?.state ?? null,
+          postalCode: vp?.postalCode ?? null,
           blocked: u?.blocked ?? false,
           groupName: u?.group?.name ?? null
         };
@@ -13753,7 +14134,7 @@ function createVendorOnboardHandlers(config) {
         roles
       });
     },
-    /** POST /api/admin/vendor/team — add staff to vendor */
+    /** POST /api/admin/vendor/team — invite staff (set-password for new; accept-only for existing vendor people) */
     async addTeamMember(req) {
       const gated = await gateVendorTeam();
       if (gated instanceof Response) return gated;
@@ -13765,8 +14146,16 @@ function createVendorOnboardHandlers(config) {
           status: 500
         });
       }
+      if (!entityMap.vendor_user_profiles) {
+        return json({
+          error: "vendor_user_profiles not configured. Run migrations."
+        }, {
+          status: 500
+        });
+      }
       try {
         const body = await req.json();
+        const sendEmail = body.sendEmail === true;
         const userName = body.name?.trim();
         const userEmail = body.email?.trim().toLowerCase();
         if (!userName || !userEmail) {
@@ -13776,125 +14165,248 @@ function createVendorOnboardHandlers(config) {
             status: 400
           });
         }
-        const activation = body.activation === "password" ? "password" : "invite";
-        const sendOwnerEmail = body.sendOwnerEmail !== false && body.sendInviteEmail !== false;
-        let ownerPasswordHash = null;
-        if (activation === "password") {
-          const plain = body.user?.password?.trim();
-          if (!plain) return json({
-            error: "Password is required"
+        if (body.activation === "password" || body.user?.password) {
+          return json({
+            error: "Setting a password for team members is not supported. Invite by email or copy the invite link."
           }, {
             status: 400
           });
-          if (plain.length < minPasswordLength) {
-            return json({
-              error: `Password must be at least ${minPasswordLength} characters`
-            }, {
-              status: 400
-            });
-          }
-          if (!hashPassword) return json({
-            error: "Password hashing not configured"
-          }, {
-            status: 501
-          });
-          ownerPasswordHash = await hashPassword(plain);
         }
-        const staffGroupId = actor.groupId;
-        const result = await dataSource.transaction(async (em) => {
-          const userRepo = em.getRepository(entityMap.users);
-          const vuRepo = em.getRepository(entityMap.vendor_users);
-          const groupRepo = em.getRepository(entityMap.user_groups);
-          await ensureVendorRolesForVendor(em, vendorId);
-          let staffRoleId = body.vendorRoleId;
-          if (staffRoleId != null && entityMap.vendor_roles) {
-            const roleRow = await em.getRepository(entityMap.vendor_roles).findOne({
-              where: {
-                id: staffRoleId,
-                vendorId,
-                deleted: false
-              }
-            });
-            if (!roleRow) throw new Error("INVALID_VENDOR_ROLE");
-            if (roleRow.isOwnerRole) throw new Error("CANNOT_ASSIGN_OWNER_ROLE");
-          } else {
-            staffRoleId = await getDefaultStaffRoleIdForVendor(em, vendorId) ?? void 0;
-          }
-          let groupId = staffGroupId ?? null;
-          if (!groupId) {
-            const g = await groupRepo.findOne({
-              where: {
-                name: VENDOR_OWNER_GROUP_NAME,
-                deleted: false
-              }
-            });
-            groupId = g?.id ?? null;
+        const person = parseVendorPersonProfileFromBody(body, {
+          name: userName,
+          email: userEmail,
+          phone: body.phone
+        });
+        const vendorRow = await dataSource.getRepository(entityMap.vendors).findOne({
+          where: {
+            id: vendorId,
+            deleted: false
+          }
+        });
+        const vendorName = String(vendorRow?.name ?? "Vendor store");
+        const vendorSlug = String(vendorRow?.slug ?? "");
+        const profileRepo = dataSource.getRepository(entityMap.vendor_user_profiles);
+        const existingProfile = await profileRepo.createQueryBuilder("p").where("LOWER(p.email) = :email", {
+          email: userEmail
+        }).orderBy("p.id", "ASC").getOne();
+        const existingUser = await dataSource.getRepository(entityMap.users).findOne({
+          where: {
+            email: userEmail
+          },
+          select: [
+            "id",
+            "email",
+            "name",
+            "password",
+            "inviteStatus",
+            "blocked",
+            "deleted"
+          ]
+        });
+        const isExistingVendorPerson = !!existingProfile && !!existingUser && !existingUser.deleted && userHasActiveLogin(existingUser);
+        if (isExistingVendorPerson) {
+          const membershipToken = newUserInviteToken();
+          const invitee = await dataSource.transaction(async (em) => {
+            const vuRepo = em.getRepository(entityMap.vendor_users);
+            const vendorRepo = em.getRepository(entityMap.vendors);
+            await ensureVendorRolesForVendor(em, vendorId);
+            let staffRoleId = body.vendorRoleId;
+            if (staffRoleId != null && entityMap.vendor_roles) {
+              const roleRow = await em.getRepository(entityMap.vendor_roles).findOne({
+                where: {
+                  id: staffRoleId,
+                  vendorId,
+                  deleted: false
+                }
+              });
+              if (!roleRow) throw new Error("INVALID_VENDOR_ROLE");
+              if (roleRow.isOwnerRole) throw new Error("CANNOT_ASSIGN_OWNER_ROLE");
+            } else {
+              staffRoleId = await getDefaultStaffRoleIdForVendor(em, vendorId) ?? void 0;
+            }
+            if (staffRoleId == null) throw new Error("INVALID_VENDOR_ROLE");
+            const link = await vuRepo.findOne({
+              where: {
+                vendorId,
+                userId: existingUser.id
+              }
+            });
+            if (link) throw new Error("USER_ALREADY_ON_TEAM");
+            const priorLink = await vuRepo.findOne({
+              where: {
+                userId: existingUser.id
+              },
+              order: {
+                id: "ASC"
+              }
+            });
+            const vendorUserProfileId = priorLink?.vendorUserProfileId ?? existingProfile.id;
+            const vendorFresh = await vendorRepo.findOne({
+              where: {
+                id: vendorId,
+                deleted: false
+              }
+            });
+            if (!vendorFresh) throw new Error("VENDOR_NOT_FOUND");
+            const pending = {
+              token: membershipToken,
+              userId: existingUser.id,
+              email: userEmail,
+              vendorRoleId: staffRoleId,
+              vendorUserProfileId,
+              name: userName || String(existingUser.name ?? ""),
+              createdAt: (/* @__PURE__ */ new Date()).toISOString()
+            };
+            const nextMeta = upsertPendingTeamInviteInMetadata(vendorFresh.metadata, userEmail, pending);
+            await vendorRepo.update(vendorId, {
+              metadata: nextMeta,
+              updatedAt: /* @__PURE__ */ new Date()
+            });
+            return existingUser;
+          });
+          const inviteLink2 = buildTeamMembershipInviteLink(baseUrl, membershipToken, vendorId);
+          let emailSent2 = false;
+          if (sendEmail) {
+            emailSent2 = await trySendVendorOnboardEmails({
+              vendorName,
+              vendorSlug,
+              ownerName: userName,
+              ownerEmail: userEmail,
+              activation: "membership",
+              inviteLink: inviteLink2,
+              kind: "team_invite",
+              sendToOwner: true
+            });
+          }
+          return json({
+            message: sendEmail ? emailSent2 ? "Existing vendor invited. They can accept without setting a new password." : "Existing vendor invited (email may not have been sent). Share the accept link." : "Existing vendor invited. Send the invite email or copy the invite link.",
+            activation: "membership",
+            emailSent: emailSent2,
+            inviteLink: inviteLink2,
+            user: {
+              id: invitee.id,
+              name: invitee.name,
+              email: invitee.email
+            }
+          }, {
+            status: 201
+          });
+        }
+        const personErr = validatePersonKyc(person, {
+          required: true
+        });
+        if (personErr) return json({
+          error: personErr
+        }, {
+          status: 400
+        });
+        const activation = "invite";
+        const staffGroupId = actor.groupId;
+        const inviteToken = newUserInviteToken();
+        const result = await dataSource.transaction(async (em) => {
+          const userRepo = em.getRepository(entityMap.users);
+          const vuRepo = em.getRepository(entityMap.vendor_users);
+          const groupRepo = em.getRepository(entityMap.user_groups);
+          const profileRepoTx = em.getRepository(entityMap.vendor_user_profiles);
+          await ensureVendorRolesForVendor(em, vendorId);
+          let staffRoleId = body.vendorRoleId;
+          if (staffRoleId != null && entityMap.vendor_roles) {
+            const roleRow = await em.getRepository(entityMap.vendor_roles).findOne({
+              where: {
+                id: staffRoleId,
+                vendorId,
+                deleted: false
+              }
+            });
+            if (!roleRow) throw new Error("INVALID_VENDOR_ROLE");
+            if (roleRow.isOwnerRole) throw new Error("CANNOT_ASSIGN_OWNER_ROLE");
+          } else {
+            staffRoleId = await getDefaultStaffRoleIdForVendor(em, vendorId) ?? void 0;
+          }
+          if (staffRoleId == null) throw new Error("INVALID_VENDOR_ROLE");
+          let groupId = staffGroupId ?? null;
+          if (!groupId) {
+            const g = await groupRepo.findOne({
+              where: {
+                name: VENDOR_GROUP_NAME,
+                deleted: false
+              }
+            }) ?? await groupRepo.findOne({
+              where: {
+                name: "Vendor Owner",
+                deleted: false
+              }
+            });
+            groupId = g?.id ?? null;
           }
           if (!groupId) throw new Error("VENDOR_OWNER_GROUP_MISSING");
-          const existingUser = await userRepo.findOne({
+          const existing = await userRepo.findOne({
             where: {
               email: userEmail
             }
           });
-          if (existingUser && !existingUser.deleted) {
+          if (existing && !existing.deleted) {
             const link = await vuRepo.findOne({
               where: {
                 vendorId,
-                userId: existingUser.id
+                userId: existing.id
               }
             });
             if (link) throw new Error("USER_ALREADY_ON_TEAM");
           }
-          let newUser = existingUser;
-          if (existingUser?.deleted) {
-            await userRepo.update(existingUser.id, {
+          let newUser = existing;
+          const inviteUserFields = {
+            name: userName,
+            email: userEmail,
+            phone: person.phone,
+            password: null,
+            blocked: true,
+            inviteStatus: "pending",
+            inviteToken,
+            groupId,
+            adminAccess: true
+          };
+          if (existing?.deleted) {
+            await userRepo.update(existing.id, {
               deleted: false,
               deletedAt: null,
               deletedBy: null,
-              name: userName,
-              email: userEmail,
-              password: ownerPasswordHash,
-              blocked: activation === "invite",
-              groupId,
-              adminAccess: true,
+              ...inviteUserFields,
               updatedAt: /* @__PURE__ */ new Date()
             });
             newUser = await userRepo.findOne({
               where: {
-                id: existingUser.id
+                id: existing.id
               }
             });
             if (!newUser) throw new Error("user missing after restore");
-          } else if (existingUser && !existingUser.deleted) {
-            await userRepo.update(existingUser.id, {
-              name: userName,
-              groupId,
-              adminAccess: true,
-              ...ownerPasswordHash ? {
-                password: ownerPasswordHash,
-                blocked: false
-              } : activation === "invite" ? {
-                password: null,
-                blocked: true
-              } : {}
+          } else if (existing && !existing.deleted) {
+            await userRepo.update(existing.id, {
+              ...inviteUserFields,
+              updatedAt: /* @__PURE__ */ new Date()
             });
             newUser = await userRepo.findOne({
               where: {
-                id: existingUser.id
+                id: existing.id
               }
             });
             if (!newUser) throw new Error("user missing after update");
-          } else if (!existingUser) {
-            newUser = await userRepo.save(userRepo.create({
-              name: userName,
-              email: userEmail,
-              password: ownerPasswordHash,
-              blocked: activation === "invite",
-              groupId,
-              adminAccess: true
-            }));
+          } else if (!existing) {
+            newUser = await userRepo.save(userRepo.create(inviteUserFields));
           }
           if (!newUser) throw new Error("user missing");
+          const personRow = await profileRepoTx.save(profileRepoTx.create({
+            name: person.name || userName,
+            email: person.email || userEmail,
+            phone: person.phone,
+            aadhaarNo: person.aadhaarNo,
+            panNo: person.panNo,
+            addressLine1: person.addressLine1,
+            addressLine2: person.addressLine2,
+            city: person.city,
+            state: person.state,
+            postalCode: person.postalCode
+          }));
           const existingLink = await vuRepo.findOne({
             where: {
               vendorId,
@@ -13905,40 +14417,32 @@ function createVendorOnboardHandlers(config) {
             await vuRepo.save(vuRepo.create({
               vendorId,
               userId: newUser.id,
-              role: "staff",
-              vendorRoleId: staffRoleId ?? null
+              vendorRoleId: staffRoleId,
+              vendorUserProfileId: personRow.id
             }));
-          } else if (staffRoleId) {
+          } else {
             await vuRepo.update(existingLink.id, {
               vendorRoleId: staffRoleId,
-              role: "staff"
+              vendorUserProfileId: personRow.id
             });
           }
           if (entityMap.customer) {
-            await ensureCustomerForUser(em, entityMap.customer, {
-              id: newUser.id,
-              name: userName,
-              email: userEmail,
-              phone: newUser.phone ?? null
-            });
+            try {
+              await ensureCustomerForUser(em, entityMap.customer, {
+                id: newUser.id,
+                name: userName,
+                email: userEmail,
+                phone: person.phone
+              });
+            } catch (customerErr) {
+              console.error("[vendor-team] ensureCustomerForUser skipped", customerErr);
+            }
           }
           return newUser;
         });
-        const vendorRow = await dataSource.getRepository(entityMap.vendors).findOne({
-          where: {
-            id: vendorId,
-            deleted: false
-          }
-        });
-        const vendorName = String(vendorRow?.name ?? "Vendor store");
-        const vendorSlug = String(vendorRow?.slug ?? "");
-        let inviteLink;
+        const inviteLink = buildUserInviteLink(baseUrl, inviteToken);
         let emailSent = false;
-        if (activation === "invite") {
-          const emailToken = Buffer.from(result.email).toString("base64");
-          inviteLink = `${baseUrl}/admin/invite?token=${emailToken}`;
-        }
-        if (sendOwnerEmail || getCms) {
+        if (sendEmail) {
           emailSent = await trySendVendorOnboardEmails({
             vendorName,
             vendorSlug,
@@ -13947,18 +14451,19 @@ function createVendorOnboardHandlers(config) {
             activation,
             inviteLink,
             kind: "team_invite",
-            sendToOwner: sendOwnerEmail
+            sendToOwner: true
           });
         }
         return json({
-          message: emailSent ? "Team member added. Invitation email sent." : sendOwnerEmail ? "Team member added (email may not have been sent \u2014 check email plugin)." : "Team member added",
+          message: sendEmail ? emailSent ? "Team member invited. Invitation email sent." : "Team member invited (email may not have been sent \u2014 check email plugin). Share the invite link so they can set their password." : "Team member invited. Send the invite email or copy the invite link.",
+          activation,
           emailSent,
+          inviteLink,
           user: {
             id: result.id,
             name: result.name,
             email: result.email
-          },
-          inviteLink
+          }
         }, {
           status: 201
         });
@@ -13971,9 +14476,16 @@ function createVendorOnboardHandlers(config) {
             status: 400
           });
         }
+        if (msg === "VENDOR_NOT_FOUND") {
+          return json({
+            error: "Vendor not found"
+          }, {
+            status: 404
+          });
+        }
         if (msg === "VENDOR_OWNER_GROUP_MISSING") {
           return json({
-            error: "Vendor role group not found. Run migrations."
+            error: "Vendor group not found. Run migrations."
           }, {
             status: 500
           });
@@ -13985,18 +14497,334 @@ function createVendorOnboardHandlers(config) {
             status: 400
           });
         }
-        if (msg === "CANNOT_ASSIGN_OWNER_ROLE") {
+        if (msg === "CANNOT_ASSIGN_OWNER_ROLE") {
+          return json({
+            error: "Cannot assign the owner role to a team member"
+          }, {
+            status: 400
+          });
+        }
+        return vendorOnboardErrorResponse(json, e);
+      }
+    },
+    /** POST /api/admin/vendor/team/send-invite — send invite email for a pending team member */
+    async sendTeamInviteEmail(req) {
+      const gated = await gateVendorTeam();
+      if (gated instanceof Response) return gated;
+      const { vendorId } = gated;
+      if (!entityMap.vendors || !entityMap.users) {
+        return json({
+          error: "Vendor entities not configured"
+        }, {
+          status: 500
+        });
+      }
+      try {
+        const body = await req.json().catch(() => ({}));
+        const userId = Number(body.userId);
+        if (!Number.isFinite(userId) || userId <= 0) {
+          return json({
+            error: "userId is required"
+          }, {
+            status: 400
+          });
+        }
+        const vendorRow = await dataSource.getRepository(entityMap.vendors).findOne({
+          where: {
+            id: vendorId,
+            deleted: false
+          }
+        });
+        if (!vendorRow) return json({
+          error: "Vendor not found"
+        }, {
+          status: 404
+        });
+        const vendorName = String(vendorRow.name ?? "Vendor store");
+        const vendorSlug = String(vendorRow.slug ?? "");
+        const meta = vendorRow.metadata;
+        const pending = findPendingTeamInviteByUserId(meta, userId);
+        if (pending) {
+          const inviteLink2 = buildTeamMembershipInviteLink(baseUrl, pending.token, vendorId);
+          const emailSent2 = await trySendVendorOnboardEmails({
+            vendorName,
+            vendorSlug,
+            ownerName: pending.name,
+            ownerEmail: pending.email,
+            activation: "membership",
+            inviteLink: inviteLink2,
+            kind: "team_invite",
+            sendToOwner: true
+          });
+          return json({
+            message: emailSent2 ? "Invite email sent" : "Invite email may not have been sent",
+            emailSent: emailSent2,
+            inviteLink: inviteLink2,
+            activation: "membership"
+          });
+        }
+        const user = await dataSource.getRepository(entityMap.users).findOne({
+          where: {
+            id: userId,
+            deleted: false
+          },
+          select: [
+            "id",
+            "name",
+            "email",
+            "inviteToken",
+            "inviteStatus",
+            "password",
+            "blocked"
+          ]
+        });
+        if (!user) return json({
+          error: "User not found"
+        }, {
+          status: 404
+        });
+        if (entityMap.vendor_users) {
+          const link = await dataSource.getRepository(entityMap.vendor_users).findOne({
+            where: {
+              vendorId,
+              userId
+            }
+          });
+          if (!link) {
+            return json({
+              error: "User is not on this vendor team"
+            }, {
+              status: 400
+            });
+          }
+        }
+        const token = String(user.inviteToken ?? "").trim();
+        if (!token || user.inviteStatus !== "pending") {
+          return json({
+            error: "No pending invite for this user"
+          }, {
+            status: 400
+          });
+        }
+        const inviteLink = buildUserInviteLink(baseUrl, token);
+        const emailSent = await trySendVendorOnboardEmails({
+          vendorName,
+          vendorSlug,
+          ownerName: String(user.name ?? ""),
+          ownerEmail: String(user.email ?? ""),
+          activation: "invite",
+          inviteLink,
+          kind: "team_invite",
+          sendToOwner: true
+        });
+        return json({
+          message: emailSent ? "Invite email sent" : "Invite email may not have been sent",
+          emailSent,
+          inviteLink,
+          activation: "invite"
+        });
+      } catch (e) {
+        console.error("[vendor.team send-invite]", e);
+        return json({
+          error: "Server Error"
+        }, {
+          status: 500
+        });
+      }
+    },
+    /** GET /api/admin/vendor/team-invite?token=&vendorId= — preflight for membership accept (no password) */
+    async validateTeamInvite(req) {
+      if (!entityMap.vendors) {
+        return json({
+          valid: false,
+          error: "Vendors not configured"
+        }, {
+          status: 500
+        });
+      }
+      try {
+        const url = new URL(req.url);
+        const token = url.searchParams.get("token")?.trim() ?? "";
+        const vendorId = Number(url.searchParams.get("vendorId"));
+        if (!token) return json({
+          valid: false,
+          error: "Invalid invite link. Token is missing."
+        }, {
+          status: 400
+        });
+        if (!Number.isFinite(vendorId) || vendorId <= 0) {
+          return json({
+            valid: false,
+            error: "Invalid invite link. Store is missing."
+          }, {
+            status: 400
+          });
+        }
+        const vendor = await dataSource.getRepository(entityMap.vendors).findOne({
+          where: {
+            id: vendorId,
+            deleted: false
+          }
+        });
+        if (!vendor) {
+          return json({
+            valid: false,
+            error: "This invitation is no longer valid."
+          }, {
+            status: 400
+          });
+        }
+        const invite = findPendingTeamInviteByToken(vendor.metadata, token);
+        if (!invite) {
+          return json({
+            valid: false,
+            error: "This invitation is no longer valid."
+          }, {
+            status: 400
+          });
+        }
+        return json({
+          valid: true,
+          mode: "team",
+          vendorId,
+          vendorName: vendor.name ?? "Vendor store",
+          email: invite.email
+        });
+      } catch (e) {
+        console.error("[vendor.team-invite GET]", e);
+        return json({
+          valid: false,
+          error: "Server Error"
+        }, {
+          status: 500
+        });
+      }
+    },
+    /** POST /api/admin/vendor/team-invite — accept membership (token; no password) */
+    async acceptTeamInvite(req) {
+      if (!entityMap.vendors || !entityMap.vendor_users || !entityMap.vendor_user_profiles || !entityMap.users) {
+        return json({
+          error: "Vendor entities not configured"
+        }, {
+          status: 500
+        });
+      }
+      try {
+        const body = await req.json().catch(() => ({}));
+        const token = typeof body.token === "string" ? body.token.trim() : "";
+        const vendorId = Number(body.vendorId);
+        if (!token) return json({
+          error: "token is required"
+        }, {
+          status: 400
+        });
+        if (!Number.isFinite(vendorId) || vendorId <= 0) {
+          return json({
+            error: "vendorId is required"
+          }, {
+            status: 400
+          });
+        }
+        const result = await dataSource.transaction(async (em) => {
+          const vendorRepo = em.getRepository(entityMap.vendors);
+          const vendor = await vendorRepo.findOne({
+            where: {
+              id: vendorId,
+              deleted: false
+            }
+          });
+          if (!vendor) throw new Error("INVITE_INVALID");
+          const meta = vendor.metadata;
+          const inv = findPendingTeamInviteByToken(meta, token);
+          if (!inv) throw new Error("INVITE_INVALID");
+          const user = await em.getRepository(entityMap.users).findOne({
+            where: {
+              id: inv.userId,
+              deleted: false
+            }
+          });
+          if (!user || !userHasActiveLogin(user)) {
+            throw new Error("INVITE_USER_INACTIVE");
+          }
+          const vuRepo = em.getRepository(entityMap.vendor_users);
+          const existingLink = await vuRepo.findOne({
+            where: {
+              vendorId,
+              userId: inv.userId
+            }
+          });
+          if (existingLink) {
+            await vendorRepo.update(vendorId, {
+              metadata: removePendingTeamInviteTokenFromMetadata(meta, token),
+              updatedAt: /* @__PURE__ */ new Date()
+            });
+            return {
+              alreadyMember: true,
+              vendorId
+            };
+          }
+          if (entityMap.vendor_roles) {
+            const roleRow = await em.getRepository(entityMap.vendor_roles).findOne({
+              where: {
+                id: inv.vendorRoleId,
+                vendorId,
+                deleted: false
+              }
+            });
+            if (!roleRow || roleRow.isOwnerRole) {
+              throw new Error("INVALID_VENDOR_ROLE");
+            }
+          }
+          const profile = await em.getRepository(entityMap.vendor_user_profiles).findOne({
+            where: {
+              id: inv.vendorUserProfileId
+            }
+          });
+          if (!profile) throw new Error("INVITE_INVALID");
+          await vuRepo.save(vuRepo.create({
+            vendorId,
+            userId: inv.userId,
+            vendorRoleId: inv.vendorRoleId,
+            vendorUserProfileId: inv.vendorUserProfileId
+          }));
+          await vendorRepo.update(vendorId, {
+            metadata: removePendingTeamInviteTokenFromMetadata(meta, token),
+            updatedAt: /* @__PURE__ */ new Date()
+          });
+          return {
+            alreadyMember: false,
+            vendorId
+          };
+        });
+        return json({
+          success: true,
+          message: result.alreadyMember ? "You are already on this store team. Sign in to continue." : "You joined the store team. Sign in with your existing password.",
+          vendorId: result.vendorId
+        });
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (msg === "INVITE_INVALID") {
+          return json({
+            error: "This invitation is no longer valid."
+          }, {
+            status: 400
+          });
+        }
+        if (msg === "INVITE_USER_INACTIVE") {
+          return json({
+            error: "Your account is not active. Complete account setup first, or contact support."
+          }, {
+            status: 400
+          });
+        }
+        if (msg === "INVALID_VENDOR_ROLE") {
           return json({
-            error: "Cannot assign the owner role to a team member"
+            error: "Invalid store role on this invitation"
           }, {
             status: 400
           });
         }
-        return json({
-          error: "Server error"
-        }, {
-          status: 500
-        });
+        return vendorOnboardErrorResponse(json, e);
       }
     },
     /** PATCH /api/admin/vendor/team/:userId — change member store role */
@@ -14051,14 +14879,18 @@ function createVendorOnboardHandlers(config) {
           where: {
             vendorId,
             userId
-          }
+          },
+          relations: entityMap.vendor_roles ? [
+            "vendorRole"
+          ] : []
         });
         if (!link) return json({
           error: "Not found"
         }, {
           status: 404
         });
-        if (link.role === "owner") {
+        const linkIsOwner = link.vendorRole?.isOwnerRole === true;
+        if (linkIsOwner) {
           return json({
             error: "Cannot change the store owner role here"
           }, {
@@ -14066,8 +14898,7 @@ function createVendorOnboardHandlers(config) {
           });
         }
         await vuRepo.update(link.id, {
-          vendorRoleId,
-          role: "staff"
+          vendorRoleId
         });
         return json({
           ok: true,
@@ -14113,7 +14944,7 @@ function createVendorOnboardHandlers(config) {
       }, {
         status: 404
       });
-      const isOwner = link.role === "owner" || !!link.vendorRole?.isOwnerRole;
+      const isOwner = !!link.vendorRole?.isOwnerRole;
       if (isOwner && Number(actor.id) !== userId) {
         return json({
           error: "Cannot remove the store owner"
@@ -14258,13 +15089,28 @@ function createVendorRolesHandlers(config) {
           isSystem: false,
           isOwnerRole: false
         }));
+        const permRepo = dataSource.getRepository(entityMap.vendor_role_permissions);
+        await permRepo.save(vendorRoleEntities.map((entity) => permRepo.create({
+          vendorRoleId: role.id,
+          entity,
+          canCreate: false,
+          canRead: false,
+          canUpdate: false,
+          canDelete: false
+        })));
         return json({
           id: role.id,
           name: role.name,
           description: role.description,
           isSystem: role.isSystem,
           isOwnerRole: role.isOwnerRole,
-          permissions: []
+          permissions: vendorRoleEntities.map((entity) => ({
+            entity,
+            canCreate: false,
+            canRead: false,
+            canUpdate: false,
+            canDelete: false
+          }))
         }, {
           status: 201
         });
@@ -14462,16 +15308,15 @@ function createVendorRolesHandlers(config) {
           await em.getRepository(entityMap.vendor_role_permissions).delete({
             vendorRoleId: id
           });
-          for (const r of rows) {
-            await em.getRepository(entityMap.vendor_role_permissions).save(em.getRepository(entityMap.vendor_role_permissions).create({
-              vendorRoleId: id,
-              entity: r.entity,
-              canCreate: !!r.canCreate,
-              canRead: !!r.canRead,
-              canUpdate: !!r.canUpdate,
-              canDelete: !!r.canDelete
-            }));
-          }
+          const permRepo = em.getRepository(entityMap.vendor_role_permissions);
+          await permRepo.save(rows.map((r) => permRepo.create({
+            vendorRoleId: id,
+            entity: r.entity,
+            canCreate: !!r.canCreate,
+            canRead: !!r.canRead,
+            canUpdate: !!r.canUpdate,
+            canDelete: !!r.canDelete
+          })));
         });
         const updated = await roleRepo.findOne({
           where: {
@@ -14491,7 +15336,8 @@ function createVendorRolesHandlers(config) {
             canDelete: p.canDelete
           }))
         });
-      } catch {
+      } catch (e) {
+        console.error("[vendor-roles.putPermissions]", e);
         return json({
           error: "Server error"
         }, {
@@ -14746,6 +15592,13 @@ var User = class {
   phoneVerifiedAt;
   emailVerifiedAt;
   password;
+  /**
+  * `pending` = invite outstanding (cannot sign in until password is set).
+  * `active` = invite accepted / account usable (subject to `blocked`).
+  */
+  inviteStatus;
+  /** Rotating invite token; null when active or no invite outstanding. */
+  inviteToken;
   blocked;
   adminAccess;
   groupId;
@@ -14798,6 +15651,24 @@ _ts_decorate4([
   }),
   _ts_metadata4("design:type", Object)
 ], User.prototype, "password", void 0);
+_ts_decorate4([
+  Column({
+    type: "enum",
+    enum: [
+      "pending",
+      "active"
+    ],
+    enumName: "users_invitestatus_enum",
+    default: "active"
+  }),
+  _ts_metadata4("design:type", typeof UserInviteStatus === "undefined" ? Object : UserInviteStatus)
+], User.prototype, "inviteStatus", void 0);
+_ts_decorate4([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata4("design:type", Object)
+], User.prototype, "inviteToken", void 0);
 _ts_decorate4([
   Column("boolean", {
     default: false
@@ -16103,7 +16974,6 @@ var Vendor = class {
   country;
   postalCode;
   gstin;
-  pan;
   logo;
   description;
   metadata;
@@ -16207,12 +17077,6 @@ _ts_decorate16([
   }),
   _ts_metadata16("design:type", Object)
 ], Vendor.prototype, "gstin", void 0);
-_ts_decorate16([
-  Column("varchar", {
-    nullable: true
-  }),
-  _ts_metadata16("design:type", Object)
-], Vendor.prototype, "pan", void 0);
 _ts_decorate16([
   Column("varchar", {
     nullable: true
@@ -19531,6 +20395,8 @@ var OrderItem = class {
   id;
   orderId;
   productId;
+  /** Selected product variant at order time (optional). */
+  variantId;
   discountIds;
   vendorId;
   vendor;
@@ -19566,6 +20432,12 @@ _ts_decorate39([
   Column("int"),
   _ts_metadata39("design:type", Number)
 ], OrderItem.prototype, "productId", void 0);
+_ts_decorate39([
+  Column("int", {
+    nullable: true
+  }),
+  _ts_metadata39("design:type", Object)
+], OrderItem.prototype, "variantId", void 0);
 _ts_decorate39([
   Column({
     type: "int",
@@ -20375,6 +21247,7 @@ var Type = /* @__PURE__ */ (function(Type2) {
   Type2["CATEGORY"] = "category";
   Type2["CART"] = "cart";
   Type2["PAYMENT_METHOD"] = "paymentMethod";
+  Type2["DEVICE_TYPE"] = "deviceType";
   Type2["ORDER"] = "order";
   Type2["QUANTITY"] = "quantity";
   Type2["TIME"] = "time";
@@ -21519,8 +22392,6 @@ VendorRole = _ts_decorate57([
     "vendorId"
   ])
 ], VendorRole);
-
-// src/entities/vendor-user.entity.ts
 function _ts_decorate58(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -21532,89 +22403,201 @@ function _ts_metadata58(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata58, "_ts_metadata");
-var VendorUser = class {
+var VendorUserProfile = class {
   static {
-    __name(this, "VendorUser");
+    __name(this, "VendorUserProfile");
   }
   id;
-  vendorId;
-  userId;
-  /** @deprecated use vendorRoleId — kept for migration compatibility */
-  role;
-  vendorRoleId;
+  name;
+  email;
+  phone;
+  aadhaarNo;
+  panNo;
+  addressLine1;
+  addressLine2;
+  city;
+  state;
+  postalCode;
   createdAt;
   updatedAt;
-  vendor;
-  user;
-  vendorRole;
 };
 _ts_decorate58([
   PrimaryGeneratedColumn(),
   _ts_metadata58("design:type", Number)
-], VendorUser.prototype, "id", void 0);
+], VendorUserProfile.prototype, "id", void 0);
 _ts_decorate58([
-  Column("int"),
-  _ts_metadata58("design:type", Number)
-], VendorUser.prototype, "vendorId", void 0);
+  Column("varchar"),
+  _ts_metadata58("design:type", String)
+], VendorUserProfile.prototype, "name", void 0);
 _ts_decorate58([
-  Column("int"),
-  _ts_metadata58("design:type", Number)
-], VendorUser.prototype, "userId", void 0);
+  Column("varchar"),
+  _ts_metadata58("design:type", String)
+], VendorUserProfile.prototype, "email", void 0);
 _ts_decorate58([
   Column("varchar", {
-    default: "staff"
+    nullable: true
   }),
-  _ts_metadata58("design:type", typeof VendorUserRole === "undefined" ? Object : VendorUserRole)
-], VendorUser.prototype, "role", void 0);
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "phone", void 0);
 _ts_decorate58([
-  Column("int", {
+  Column("varchar", {
     nullable: true
   }),
   _ts_metadata58("design:type", Object)
-], VendorUser.prototype, "vendorRoleId", void 0);
+], VendorUserProfile.prototype, "aadhaarNo", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "panNo", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "addressLine1", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "addressLine2", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "city", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "state", void 0);
+_ts_decorate58([
+  Column("varchar", {
+    nullable: true
+  }),
+  _ts_metadata58("design:type", Object)
+], VendorUserProfile.prototype, "postalCode", void 0);
 _ts_decorate58([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
   _ts_metadata58("design:type", typeof Date === "undefined" ? Object : Date)
-], VendorUser.prototype, "createdAt", void 0);
+], VendorUserProfile.prototype, "createdAt", void 0);
 _ts_decorate58([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
   _ts_metadata58("design:type", typeof Date === "undefined" ? Object : Date)
+], VendorUserProfile.prototype, "updatedAt", void 0);
+VendorUserProfile = _ts_decorate58([
+  Entity("vendor_user_profiles")
+], VendorUserProfile);
+
+// src/entities/vendor-user.entity.ts
+function _ts_decorate59(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate59, "_ts_decorate");
+function _ts_metadata59(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata59, "_ts_metadata");
+var VendorUser = class {
+  static {
+    __name(this, "VendorUser");
+  }
+  id;
+  vendorId;
+  userId;
+  vendorRoleId;
+  vendorUserProfileId;
+  createdAt;
+  updatedAt;
+  vendor;
+  user;
+  vendorRole;
+  vendorUserProfile;
+};
+_ts_decorate59([
+  PrimaryGeneratedColumn(),
+  _ts_metadata59("design:type", Number)
+], VendorUser.prototype, "id", void 0);
+_ts_decorate59([
+  Column("int"),
+  _ts_metadata59("design:type", Number)
+], VendorUser.prototype, "vendorId", void 0);
+_ts_decorate59([
+  Column("int"),
+  _ts_metadata59("design:type", Number)
+], VendorUser.prototype, "userId", void 0);
+_ts_decorate59([
+  Column("int"),
+  _ts_metadata59("design:type", Number)
+], VendorUser.prototype, "vendorRoleId", void 0);
+_ts_decorate59([
+  Column("int"),
+  _ts_metadata59("design:type", Number)
+], VendorUser.prototype, "vendorUserProfileId", void 0);
+_ts_decorate59([
+  Column({
+    type: "timestamp",
+    default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
+  }),
+  _ts_metadata59("design:type", typeof Date === "undefined" ? Object : Date)
+], VendorUser.prototype, "createdAt", void 0);
+_ts_decorate59([
+  Column({
+    type: "timestamp",
+    default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
+  }),
+  _ts_metadata59("design:type", typeof Date === "undefined" ? Object : Date)
 ], VendorUser.prototype, "updatedAt", void 0);
-_ts_decorate58([
+_ts_decorate59([
   ManyToOne(() => Vendor, (v) => v.vendorUsers, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "vendorId"
   }),
-  _ts_metadata58("design:type", typeof Vendor === "undefined" ? Object : Vendor)
+  _ts_metadata59("design:type", typeof Vendor === "undefined" ? Object : Vendor)
 ], VendorUser.prototype, "vendor", void 0);
-_ts_decorate58([
+_ts_decorate59([
   ManyToOne(() => User, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "userId"
   }),
-  _ts_metadata58("design:type", typeof User === "undefined" ? Object : User)
+  _ts_metadata59("design:type", typeof User === "undefined" ? Object : User)
 ], VendorUser.prototype, "user", void 0);
-_ts_decorate58([
+_ts_decorate59([
   ManyToOne(() => VendorRole, {
-    onDelete: "SET NULL",
-    nullable: true
+    onDelete: "RESTRICT"
   }),
   JoinColumn({
     name: "vendorRoleId"
   }),
-  _ts_metadata58("design:type", Object)
+  _ts_metadata59("design:type", typeof VendorRole === "undefined" ? Object : VendorRole)
 ], VendorUser.prototype, "vendorRole", void 0);
-VendorUser = _ts_decorate58([
+_ts_decorate59([
+  ManyToOne(() => VendorUserProfile, {
+    onDelete: "RESTRICT"
+  }),
+  JoinColumn({
+    name: "vendorUserProfileId"
+  }),
+  _ts_metadata59("design:type", typeof VendorUserProfile === "undefined" ? Object : VendorUserProfile)
+], VendorUser.prototype, "vendorUserProfile", void 0);
+VendorUser = _ts_decorate59([
   Entity("vendor_users"),
   Unique("UQ_vendor_users_vendor_user", [
     "vendorId",
@@ -21628,19 +22611,22 @@ VendorUser = _ts_decorate58([
   ]),
   Index("IDX_vendor_users_vendor_role", [
     "vendorRoleId"
+  ]),
+  Index("IDX_vendor_users_profile", [
+    "vendorUserProfileId"
   ])
 ], VendorUser);
-function _ts_decorate59(decorators, target, key, desc) {
+function _ts_decorate60(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate59, "_ts_decorate");
-function _ts_metadata59(k, v) {
+__name(_ts_decorate60, "_ts_decorate");
+function _ts_metadata60(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata59, "_ts_metadata");
+__name(_ts_metadata60, "_ts_metadata");
 var VendorCustomer = class {
   static {
     __name(this, "VendorCustomer");
@@ -21659,78 +22645,78 @@ var VendorCustomer = class {
   contact;
   customer;
 };
-_ts_decorate59([
+_ts_decorate60([
   PrimaryGeneratedColumn(),
-  _ts_metadata59("design:type", Number)
+  _ts_metadata60("design:type", Number)
 ], VendorCustomer.prototype, "id", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column("int"),
-  _ts_metadata59("design:type", Number)
+  _ts_metadata60("design:type", Number)
 ], VendorCustomer.prototype, "vendorId", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata59("design:type", Object)
+  _ts_metadata60("design:type", Object)
 ], VendorCustomer.prototype, "contactId", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column("int"),
-  _ts_metadata59("design:type", Number)
+  _ts_metadata60("design:type", Number)
 ], VendorCustomer.prototype, "customerId", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column("text", {
     nullable: true
   }),
-  _ts_metadata59("design:type", Object)
+  _ts_metadata60("design:type", Object)
 ], VendorCustomer.prototype, "notes", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column("simple-array", {
     nullable: true
   }),
-  _ts_metadata59("design:type", Object)
+  _ts_metadata60("design:type", Object)
 ], VendorCustomer.prototype, "tags", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata59("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata60("design:type", typeof Date === "undefined" ? Object : Date)
 ], VendorCustomer.prototype, "createdAt", void 0);
-_ts_decorate59([
+_ts_decorate60([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata59("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata60("design:type", typeof Date === "undefined" ? Object : Date)
 ], VendorCustomer.prototype, "updatedAt", void 0);
-_ts_decorate59([
+_ts_decorate60([
   ManyToOne(() => Vendor, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "vendorId"
   }),
-  _ts_metadata59("design:type", typeof Vendor === "undefined" ? Object : Vendor)
+  _ts_metadata60("design:type", typeof Vendor === "undefined" ? Object : Vendor)
 ], VendorCustomer.prototype, "vendor", void 0);
-_ts_decorate59([
+_ts_decorate60([
   ManyToOne(() => Contact, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "contactId"
   }),
-  _ts_metadata59("design:type", Object)
+  _ts_metadata60("design:type", Object)
 ], VendorCustomer.prototype, "contact", void 0);
-_ts_decorate59([
+_ts_decorate60([
   ManyToOne(() => Customer, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "customerId"
   }),
-  _ts_metadata59("design:type", typeof Customer === "undefined" ? Object : Customer)
+  _ts_metadata60("design:type", typeof Customer === "undefined" ? Object : Customer)
 ], VendorCustomer.prototype, "customer", void 0);
-VendorCustomer = _ts_decorate59([
+VendorCustomer = _ts_decorate60([
   Entity("vendor_customers"),
   Index("IDX_vendor_customers_vendor", [
     "vendorId"
@@ -21739,17 +22725,17 @@ VendorCustomer = _ts_decorate59([
     "contactId"
   ])
 ], VendorCustomer);
-function _ts_decorate60(decorators, target, key, desc) {
+function _ts_decorate61(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate60, "_ts_decorate");
-function _ts_metadata60(k, v) {
+__name(_ts_decorate61, "_ts_decorate");
+function _ts_metadata61(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata60, "_ts_metadata");
+__name(_ts_metadata61, "_ts_metadata");
 var Event = class {
   static {
     __name(this, "Event");
@@ -21822,341 +22808,341 @@ var Event = class {
   refundPolicy;
   eventProducts;
 };
-_ts_decorate60([
+_ts_decorate61([
   PrimaryGeneratedColumn(),
-  _ts_metadata60("design:type", Number)
+  _ts_metadata61("design:type", Number)
 ], Event.prototype, "id", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "vendorId", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar"),
-  _ts_metadata60("design:type", String)
+  _ts_metadata61("design:type", String)
 ], Event.prototype, "name", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar"),
-  _ts_metadata60("design:type", String)
+  _ts_metadata61("design:type", String)
 ], Event.prototype, "slug", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("text", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "description", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "expectedSpeakers", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "expectedParticipants", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("boolean", {
     default: true
   }),
-  _ts_metadata60("design:type", Boolean)
+  _ts_metadata61("design:type", Boolean)
 ], Event.prototype, "isActive", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "approvalStatus", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("text", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "rejectionReason", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamptz",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "rejectedAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "rejectedBy", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("boolean", {
     default: false
   }),
-  _ts_metadata60("design:type", Boolean)
+  _ts_metadata61("design:type", Boolean)
 ], Event.prototype, "comingSoon", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "bannerImageUrl", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "logoUrl", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "venue", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("text", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "additionalVenueDetails", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     default: "public"
   }),
-  _ts_metadata60("design:type", typeof EventVisibility === "undefined" ? Object : EventVisibility)
+  _ts_metadata61("design:type", typeof EventVisibility === "undefined" ? Object : EventVisibility)
 ], Event.prototype, "visibility", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "startDate", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "endDate", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "registrationOpensAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "registrationClosesAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "pricingType", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "entityTypes", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "entityMode", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "city", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "country", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "cityCountry", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "defaultCurrency", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "supportedCurrencies", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "timezone", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "socialMediaLinks", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "officialWebsiteUrl", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("varchar", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "supportContact", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("boolean", {
     default: false
   }),
-  _ts_metadata60("design:type", Boolean)
+  _ts_metadata61("design:type", Boolean)
 ], Event.prototype, "allowGroupOrders", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("boolean", {
     default: false
   }),
-  _ts_metadata60("design:type", Boolean)
+  _ts_metadata61("design:type", Boolean)
 ], Event.prototype, "sendIndividualTicketPDFToAttendees", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "contactFormId", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "taxId", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "refundPolicyId", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("decimal", {
     precision: 5,
     scale: 2,
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "taxRate", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "maxGroupPurchaseQuantity", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "sponsors", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "agenda", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "workshops", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "exhibitors", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "partners", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("jsonb", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "speakers", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     default: 0
   }),
-  _ts_metadata60("design:type", Number)
+  _ts_metadata61("design:type", Number)
 ], Event.prototype, "sortOrder", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata60("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata61("design:type", typeof Date === "undefined" ? Object : Date)
 ], Event.prototype, "createdAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata60("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata61("design:type", typeof Date === "undefined" ? Object : Date)
 ], Event.prototype, "updatedAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "deletedAt", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("boolean", {
     default: false
   }),
-  _ts_metadata60("design:type", Boolean)
+  _ts_metadata61("design:type", Boolean)
 ], Event.prototype, "deleted", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "createdBy", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "updatedBy", void 0);
-_ts_decorate60([
+_ts_decorate61([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "deletedBy", void 0);
-_ts_decorate60([
+_ts_decorate61([
   ManyToOne(() => Vendor, {
     onDelete: "RESTRICT",
     nullable: true
@@ -22164,9 +23150,9 @@ _ts_decorate60([
   JoinColumn({
     name: "vendorId"
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "vendor", void 0);
-_ts_decorate60([
+_ts_decorate61([
   ManyToOne(() => Form, {
     onDelete: "SET NULL",
     nullable: true
@@ -22174,9 +23160,9 @@ _ts_decorate60([
   JoinColumn({
     name: "contactFormId"
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "contactForm", void 0);
-_ts_decorate60([
+_ts_decorate61([
   ManyToOne(() => Tax, {
     onDelete: "SET NULL",
     nullable: true
@@ -22184,9 +23170,9 @@ _ts_decorate60([
   JoinColumn({
     name: "taxId"
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "tax", void 0);
-_ts_decorate60([
+_ts_decorate61([
   ManyToOne(() => RefundPolicy, {
     onDelete: "SET NULL",
     nullable: true
@@ -22194,30 +23180,30 @@ _ts_decorate60([
   JoinColumn({
     name: "refundPolicyId"
   }),
-  _ts_metadata60("design:type", Object)
+  _ts_metadata61("design:type", Object)
 ], Event.prototype, "refundPolicy", void 0);
-_ts_decorate60([
+_ts_decorate61([
   OneToMany("EventProduct", "event"),
-  _ts_metadata60("design:type", Array)
+  _ts_metadata61("design:type", Array)
 ], Event.prototype, "eventProducts", void 0);
-Event = _ts_decorate60([
+Event = _ts_decorate61([
   Entity("events"),
   Unique("UQ_events_vendor_slug", [
     "vendorId",
     "slug"
   ])
 ], Event);
-function _ts_decorate61(decorators, target, key, desc) {
+function _ts_decorate62(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate61, "_ts_decorate");
-function _ts_metadata61(k, v) {
+__name(_ts_decorate62, "_ts_decorate");
+function _ts_metadata62(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata61, "_ts_metadata");
+__name(_ts_metadata62, "_ts_metadata");
 var EventProduct = class {
   static {
     __name(this, "EventProduct");
@@ -22232,63 +23218,63 @@ var EventProduct = class {
   event;
   product;
 };
-_ts_decorate61([
+_ts_decorate62([
   PrimaryGeneratedColumn(),
-  _ts_metadata61("design:type", Number)
+  _ts_metadata62("design:type", Number)
 ], EventProduct.prototype, "id", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column("int"),
-  _ts_metadata61("design:type", Number)
+  _ts_metadata62("design:type", Number)
 ], EventProduct.prototype, "eventId", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column("int"),
-  _ts_metadata61("design:type", Number)
+  _ts_metadata62("design:type", Number)
 ], EventProduct.prototype, "productId", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column("int", {
     default: 0
   }),
-  _ts_metadata61("design:type", Number)
+  _ts_metadata62("design:type", Number)
 ], EventProduct.prototype, "displayOrder", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column("boolean", {
     default: true
   }),
-  _ts_metadata61("design:type", Boolean)
+  _ts_metadata62("design:type", Boolean)
 ], EventProduct.prototype, "isActive", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata61("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata62("design:type", typeof Date === "undefined" ? Object : Date)
 ], EventProduct.prototype, "createdAt", void 0);
-_ts_decorate61([
+_ts_decorate62([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
   }),
-  _ts_metadata61("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata62("design:type", typeof Date === "undefined" ? Object : Date)
 ], EventProduct.prototype, "updatedAt", void 0);
-_ts_decorate61([
+_ts_decorate62([
   ManyToOne(() => Event, (event) => event.eventProducts, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "eventId"
   }),
-  _ts_metadata61("design:type", typeof Event === "undefined" ? Object : Event)
+  _ts_metadata62("design:type", typeof Event === "undefined" ? Object : Event)
 ], EventProduct.prototype, "event", void 0);
-_ts_decorate61([
+_ts_decorate62([
   ManyToOne(() => Product, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "productId"
   }),
-  _ts_metadata61("design:type", typeof Product === "undefined" ? Object : Product)
+  _ts_metadata62("design:type", typeof Product === "undefined" ? Object : Product)
 ], EventProduct.prototype, "product", void 0);
-EventProduct = _ts_decorate61([
+EventProduct = _ts_decorate62([
   Entity("event_products"),
   Unique("UQ_event_products_event_product", [
     "eventId",
@@ -22298,17 +23284,17 @@ EventProduct = _ts_decorate61([
     "eventId"
   ])
 ], EventProduct);
-function _ts_decorate62(decorators, target, key, desc) {
+function _ts_decorate63(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate62, "_ts_decorate");
-function _ts_metadata62(k, v) {
+__name(_ts_decorate63, "_ts_decorate");
+function _ts_metadata63(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata62, "_ts_metadata");
+__name(_ts_metadata63, "_ts_metadata");
 var ComboItemType = /* @__PURE__ */ (function(ComboItemType2) {
   ComboItemType2["FIXED"] = "fixed";
   ComboItemType2["ADDONS"] = "addons";
@@ -22325,64 +23311,64 @@ var ComboItem = class {
   product;
   type;
 };
-_ts_decorate62([
+_ts_decorate63([
   PrimaryGeneratedColumn(),
-  _ts_metadata62("design:type", Number)
+  _ts_metadata63("design:type", Number)
 ], ComboItem.prototype, "id", void 0);
-_ts_decorate62([
+_ts_decorate63([
   Column({
     type: "integer"
   }),
-  _ts_metadata62("design:type", Number)
+  _ts_metadata63("design:type", Number)
 ], ComboItem.prototype, "comboId", void 0);
-_ts_decorate62([
+_ts_decorate63([
   ManyToOne(() => Combo, (combo) => combo.items, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "comboId"
   }),
-  _ts_metadata62("design:type", typeof Combo === "undefined" ? Object : Combo)
+  _ts_metadata63("design:type", typeof Combo === "undefined" ? Object : Combo)
 ], ComboItem.prototype, "combo", void 0);
-_ts_decorate62([
+_ts_decorate63([
   Column({
     type: "integer"
   }),
-  _ts_metadata62("design:type", Number)
+  _ts_metadata63("design:type", Number)
 ], ComboItem.prototype, "productId", void 0);
-_ts_decorate62([
+_ts_decorate63([
   ManyToOne(() => Product, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "productId"
   }),
-  _ts_metadata62("design:type", typeof Product === "undefined" ? Object : Product)
+  _ts_metadata63("design:type", typeof Product === "undefined" ? Object : Product)
 ], ComboItem.prototype, "product", void 0);
-_ts_decorate62([
+_ts_decorate63([
   Column({
     type: "enum",
     enum: ComboItemType,
     default: "fixed"
   }),
-  _ts_metadata62("design:type", String)
+  _ts_metadata63("design:type", String)
 ], ComboItem.prototype, "type", void 0);
-ComboItem = _ts_decorate62([
+ComboItem = _ts_decorate63([
   Entity("combo_items")
 ], ComboItem);
 
 // src/entities/combo.entity.ts
-function _ts_decorate63(decorators, target, key, desc) {
+function _ts_decorate64(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate63, "_ts_decorate");
-function _ts_metadata63(k, v) {
+__name(_ts_decorate64, "_ts_decorate");
+function _ts_metadata64(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata63, "_ts_metadata");
+__name(_ts_metadata64, "_ts_metadata");
 var ComboStatus = /* @__PURE__ */ (function(ComboStatus2) {
   ComboStatus2["ACTIVE"] = "active";
   ComboStatus2["INACTIVE"] = "inactive";
@@ -22397,6 +23383,7 @@ var Combo = class {
   vendorId;
   vendor;
   name;
+  slug;
   desc;
   eventId;
   event;
@@ -22417,44 +23404,50 @@ var Combo = class {
   updatedBy;
   deletedBy;
 };
-_ts_decorate63([
+_ts_decorate64([
   PrimaryGeneratedColumn(),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "id", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column("int"),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "vendorId", void 0);
-_ts_decorate63([
+_ts_decorate64([
   ManyToOne(() => Vendor, {
     onDelete: "RESTRICT"
   }),
   JoinColumn({
     name: "vendorId"
   }),
-  _ts_metadata63("design:type", typeof Vendor === "undefined" ? Object : Vendor)
+  _ts_metadata64("design:type", typeof Vendor === "undefined" ? Object : Vendor)
 ], Combo.prototype, "vendor", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "varchar"
   }),
-  _ts_metadata63("design:type", String)
+  _ts_metadata64("design:type", String)
 ], Combo.prototype, "name", void 0);
-_ts_decorate63([
+_ts_decorate64([
+  Column({
+    type: "varchar"
+  }),
+  _ts_metadata64("design:type", String)
+], Combo.prototype, "slug", void 0);
+_ts_decorate64([
   Column({
     type: "text",
     nullable: true
   }),
-  _ts_metadata63("design:type", String)
+  _ts_metadata64("design:type", String)
 ], Combo.prototype, "desc", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     nullable: true
   }),
-  _ts_metadata63("design:type", Object)
+  _ts_metadata64("design:type", Object)
 ], Combo.prototype, "eventId", void 0);
-_ts_decorate63([
+_ts_decorate64([
   ManyToOne(() => Event, {
     onDelete: "CASCADE",
     nullable: true
@@ -22462,134 +23455,138 @@ _ts_decorate63([
   JoinColumn({
     name: "eventId"
   }),
-  _ts_metadata63("design:type", Object)
+  _ts_metadata64("design:type", Object)
 ], Combo.prototype, "event", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "decimal",
     precision: 12,
     scale: 2,
     default: 0
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "price", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "jsonb",
     nullable: true
   }),
-  _ts_metadata63("design:type", Object)
+  _ts_metadata64("design:type", Object)
 ], Combo.prototype, "currencyPrices", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     default: 1
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "minSelectableItems", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     default: 1
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "maxSelectableItems", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "enum",
     enum: ComboStatus,
     default: "active"
   }),
-  _ts_metadata63("design:type", String)
+  _ts_metadata64("design:type", String)
 ], Combo.prototype, "status", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata63("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata64("design:type", typeof Date === "undefined" ? Object : Date)
 ], Combo.prototype, "startsAt", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata63("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata64("design:type", typeof Date === "undefined" ? Object : Date)
 ], Combo.prototype, "endsAt", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "jsonb",
     nullable: true
   }),
-  _ts_metadata63("design:type", typeof Record === "undefined" ? Object : Record)
+  _ts_metadata64("design:type", typeof Record === "undefined" ? Object : Record)
 ], Combo.prototype, "metadata", void 0);
-_ts_decorate63([
+_ts_decorate64([
   OneToMany(() => ComboItem, (item) => item.combo),
-  _ts_metadata63("design:type", Array)
+  _ts_metadata64("design:type", Array)
 ], Combo.prototype, "items", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "now()", "default")
   }),
-  _ts_metadata63("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata64("design:type", typeof Date === "undefined" ? Object : Date)
 ], Combo.prototype, "createdAt", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "timestamp",
     default: /* @__PURE__ */ __name(() => "now()", "default")
   }),
-  _ts_metadata63("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata64("design:type", typeof Date === "undefined" ? Object : Date)
 ], Combo.prototype, "updatedAt", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "timestamp",
     nullable: true
   }),
-  _ts_metadata63("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata64("design:type", typeof Date === "undefined" ? Object : Date)
 ], Combo.prototype, "deletedAt", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "boolean",
     default: false
   }),
-  _ts_metadata63("design:type", Boolean)
+  _ts_metadata64("design:type", Boolean)
 ], Combo.prototype, "deleted", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     nullable: true
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "createdBy", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     nullable: true
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "updatedBy", void 0);
-_ts_decorate63([
+_ts_decorate64([
   Column({
     type: "integer",
     nullable: true
   }),
-  _ts_metadata63("design:type", Number)
+  _ts_metadata64("design:type", Number)
 ], Combo.prototype, "deletedBy", void 0);
-Combo = _ts_decorate63([
-  Entity("combos")
+Combo = _ts_decorate64([
+  Entity("combos"),
+  Unique("UQ_combos_vendor_slug", [
+    "vendorId",
+    "slug"
+  ])
 ], Combo);
-function _ts_decorate64(decorators, target, key, desc) {
+function _ts_decorate65(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate64, "_ts_decorate");
-function _ts_metadata64(k, v) {
+__name(_ts_decorate65, "_ts_decorate");
+function _ts_metadata65(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata64, "_ts_metadata");
+__name(_ts_metadata65, "_ts_metadata");
 var RefundMethod = /* @__PURE__ */ (function(RefundMethod2) {
   RefundMethod2["CARD"] = "card";
   RefundMethod2["UPI"] = "upi";
@@ -22620,109 +23617,109 @@ var RefundRequest = class {
   expectedRefundAmount;
   approvedRefundAmount;
 };
-_ts_decorate64([
+_ts_decorate65([
   PrimaryGeneratedColumn(),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "id", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "integer"
   }),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "refundPolicyId", void 0);
-_ts_decorate64([
+_ts_decorate65([
   ManyToOne(() => RefundPolicy, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "refundPolicyId"
   }),
-  _ts_metadata64("design:type", typeof RefundPolicy === "undefined" ? Object : RefundPolicy)
+  _ts_metadata65("design:type", typeof RefundPolicy === "undefined" ? Object : RefundPolicy)
 ], RefundRequest.prototype, "refundPolicy", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "integer"
   }),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "orderId", void 0);
-_ts_decorate64([
+_ts_decorate65([
   ManyToOne(() => Order, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "orderId"
   }),
-  _ts_metadata64("design:type", typeof Order === "undefined" ? Object : Order)
+  _ts_metadata65("design:type", typeof Order === "undefined" ? Object : Order)
 ], RefundRequest.prototype, "order", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "integer"
   }),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "customerId", void 0);
-_ts_decorate64([
+_ts_decorate65([
   ManyToOne(() => Customer, {
     onDelete: "CASCADE"
   }),
   JoinColumn({
     name: "customerId"
   }),
-  _ts_metadata64("design:type", typeof Customer === "undefined" ? Object : Customer)
+  _ts_metadata65("design:type", typeof Customer === "undefined" ? Object : Customer)
 ], RefundRequest.prototype, "customer", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "text",
     nullable: true
   }),
-  _ts_metadata64("design:type", String)
+  _ts_metadata65("design:type", String)
 ], RefundRequest.prototype, "reason", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "enum",
     enum: RefundMethod
   }),
-  _ts_metadata64("design:type", String)
+  _ts_metadata65("design:type", String)
 ], RefundRequest.prototype, "refundMethod", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "enum",
     enum: RefundRequestStatus,
     default: "requested"
   }),
-  _ts_metadata64("design:type", String)
+  _ts_metadata65("design:type", String)
 ], RefundRequest.prototype, "status", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "decimal",
     precision: 10,
     scale: 2,
     default: 0
   }),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "expectedRefundAmount", void 0);
-_ts_decorate64([
+_ts_decorate65([
   Column({
     type: "decimal",
     precision: 10,
     scale: 2,
     nullable: true
   }),
-  _ts_metadata64("design:type", Number)
+  _ts_metadata65("design:type", Number)
 ], RefundRequest.prototype, "approvedRefundAmount", void 0);
-RefundRequest = _ts_decorate64([
+RefundRequest = _ts_decorate65([
   Entity("refund_requests")
 ], RefundRequest);
-function _ts_decorate65(decorators, target, key, desc) {
+function _ts_decorate66(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate65, "_ts_decorate");
-function _ts_metadata65(k, v) {
+__name(_ts_decorate66, "_ts_decorate");
+function _ts_metadata66(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata65, "_ts_metadata");
+__name(_ts_metadata66, "_ts_metadata");
 var Attendee = class {
   static {
     __name(this, "Attendee");
@@ -22733,34 +23730,34 @@ var Attendee = class {
   contactId;
   contact;
 };
-_ts_decorate65([
+_ts_decorate66([
   PrimaryGeneratedColumn(),
-  _ts_metadata65("design:type", Number)
+  _ts_metadata66("design:type", Number)
 ], Attendee.prototype, "id", void 0);
-_ts_decorate65([
+_ts_decorate66([
   Column("varchar"),
-  _ts_metadata65("design:type", String)
+  _ts_metadata66("design:type", String)
 ], Attendee.prototype, "displayName", void 0);
-_ts_decorate65([
+_ts_decorate66([
   Column("varchar"),
-  _ts_metadata65("design:type", String)
+  _ts_metadata66("design:type", String)
 ], Attendee.prototype, "email", void 0);
-_ts_decorate65([
+_ts_decorate66([
   Column("int", {
     nullable: true
   }),
-  _ts_metadata65("design:type", Object)
+  _ts_metadata66("design:type", Object)
 ], Attendee.prototype, "contactId", void 0);
-_ts_decorate65([
+_ts_decorate66([
   ManyToOne(() => Contact, {
     onDelete: "SET NULL"
   }),
   JoinColumn({
     name: "contactId"
   }),
-  _ts_metadata65("design:type", Object)
+  _ts_metadata66("design:type", Object)
 ], Attendee.prototype, "contact", void 0);
-Attendee = _ts_decorate65([
+Attendee = _ts_decorate66([
   Entity("attendees"),
   Index("IDX_attendees_contactId", [
     "contactId"
@@ -22769,22 +23766,28 @@ Attendee = _ts_decorate65([
     "email"
   ])
 ], Attendee);
-function _ts_decorate66(decorators, target, key, desc) {
+function _ts_decorate67(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate66, "_ts_decorate");
-function _ts_metadata66(k, v) {
+__name(_ts_decorate67, "_ts_decorate");
+function _ts_metadata67(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata66, "_ts_metadata");
+__name(_ts_metadata67, "_ts_metadata");
 var NotificationChannel = /* @__PURE__ */ (function(NotificationChannel2) {
   NotificationChannel2["WHATSAPP"] = "whatsapp";
   NotificationChannel2["EMAIL"] = "email";
   return NotificationChannel2;
 })({});
+var NotificationAudienceType = /* @__PURE__ */ (function(NotificationAudienceType2) {
+  NotificationAudienceType2["CUSTOMERS"] = "customers";
+  NotificationAudienceType2["VENDORS"] = "vendors";
+  NotificationAudienceType2["ADMIN"] = "admin";
+  return NotificationAudienceType2;
+})({});
 var OrderNotificationBinding = class {
   static {
     __name(this, "OrderNotificationBinding");
@@ -22792,71 +23795,81 @@ var OrderNotificationBinding = class {
   id;
   triggerKey;
   channel;
+  type;
   messageTemplateId;
   enabled;
   createdAt;
   updatedAt;
 };
-_ts_decorate66([
+_ts_decorate67([
   PrimaryGeneratedColumn(),
-  _ts_metadata66("design:type", Number)
+  _ts_metadata67("design:type", Number)
 ], OrderNotificationBinding.prototype, "id", void 0);
-_ts_decorate66([
+_ts_decorate67([
   Column({
     type: "varchar"
   }),
-  _ts_metadata66("design:type", String)
+  _ts_metadata67("design:type", String)
 ], OrderNotificationBinding.prototype, "triggerKey", void 0);
-_ts_decorate66([
+_ts_decorate67([
   Column({
     type: "enum",
     enum: NotificationChannel,
     default: "whatsapp"
   }),
-  _ts_metadata66("design:type", String)
+  _ts_metadata67("design:type", String)
 ], OrderNotificationBinding.prototype, "channel", void 0);
-_ts_decorate66([
+_ts_decorate67([
+  Column({
+    type: "enum",
+    enum: NotificationAudienceType,
+    default: "customers"
+  }),
+  _ts_metadata67("design:type", String)
+], OrderNotificationBinding.prototype, "type", void 0);
+_ts_decorate67([
   Column({
     type: "int",
     nullable: true
   }),
-  _ts_metadata66("design:type", Object)
+  _ts_metadata67("design:type", Object)
 ], OrderNotificationBinding.prototype, "messageTemplateId", void 0);
-_ts_decorate66([
+_ts_decorate67([
   Column({
     type: "boolean",
     default: true
   }),
-  _ts_metadata66("design:type", Boolean)
+  _ts_metadata67("design:type", Boolean)
 ], OrderNotificationBinding.prototype, "enabled", void 0);
-_ts_decorate66([
+_ts_decorate67([
   CreateDateColumn(),
-  _ts_metadata66("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata67("design:type", typeof Date === "undefined" ? Object : Date)
 ], OrderNotificationBinding.prototype, "createdAt", void 0);
-_ts_decorate66([
+_ts_decorate67([
   UpdateDateColumn(),
-  _ts_metadata66("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata67("design:type", typeof Date === "undefined" ? Object : Date)
 ], OrderNotificationBinding.prototype, "updatedAt", void 0);
-OrderNotificationBinding = _ts_decorate66([
+OrderNotificationBinding = _ts_decorate67([
   Entity("order_notification_bindings"),
   Index([
     "triggerKey",
-    "channel"
+    "channel",
+    "type"
   ], {
     unique: true
   })
 ], OrderNotificationBinding);
-function _ts_decorate67(decorators, target, key, desc) {
+function _ts_decorate68(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate67, "_ts_decorate");
-function _ts_metadata67(k, v) {
+__name(_ts_decorate68, "_ts_decorate");
+function _ts_metadata68(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata67, "_ts_metadata");
+__name(_ts_metadata68, "_ts_metadata");
 var OrderNotificationTrigger = class {
   static {
     __name(this, "OrderNotificationTrigger");
@@ -22871,60 +23884,60 @@ var OrderNotificationTrigger = class {
   createdAt;
   updatedAt;
 };
-_ts_decorate67([
+_ts_decorate68([
   PrimaryGeneratedColumn(),
-  _ts_metadata67("design:type", Number)
+  _ts_metadata68("design:type", Number)
 ], OrderNotificationTrigger.prototype, "id", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "varchar",
     unique: true
   }),
-  _ts_metadata67("design:type", String)
+  _ts_metadata68("design:type", String)
 ], OrderNotificationTrigger.prototype, "triggerKey", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "varchar"
   }),
-  _ts_metadata67("design:type", String)
+  _ts_metadata68("design:type", String)
 ], OrderNotificationTrigger.prototype, "label", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "text",
     nullable: true
   }),
-  _ts_metadata67("design:type", Object)
+  _ts_metadata68("design:type", Object)
 ], OrderNotificationTrigger.prototype, "description", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "varchar",
     default: "order"
   }),
-  _ts_metadata67("design:type", String)
+  _ts_metadata68("design:type", String)
 ], OrderNotificationTrigger.prototype, "category", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "boolean",
     default: true
   }),
-  _ts_metadata67("design:type", Boolean)
+  _ts_metadata68("design:type", Boolean)
 ], OrderNotificationTrigger.prototype, "enabled", void 0);
-_ts_decorate67([
+_ts_decorate68([
   Column({
     type: "int",
     default: 0
   }),
-  _ts_metadata67("design:type", Number)
+  _ts_metadata68("design:type", Number)
 ], OrderNotificationTrigger.prototype, "sortOrder", void 0);
-_ts_decorate67([
+_ts_decorate68([
   CreateDateColumn(),
-  _ts_metadata67("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata68("design:type", typeof Date === "undefined" ? Object : Date)
 ], OrderNotificationTrigger.prototype, "createdAt", void 0);
-_ts_decorate67([
+_ts_decorate68([
   UpdateDateColumn(),
-  _ts_metadata67("design:type", typeof Date === "undefined" ? Object : Date)
+  _ts_metadata68("design:type", typeof Date === "undefined" ? Object : Date)
 ], OrderNotificationTrigger.prototype, "updatedAt", void 0);
-OrderNotificationTrigger = _ts_decorate67([
+OrderNotificationTrigger = _ts_decorate68([
   Entity("order_notification_triggers")
 ], OrderNotificationTrigger);
 
@@ -22983,6 +23996,7 @@ var CMS_ENTITY_MAP = {
   job_schedule_runs: JobScheduleRun,
   vendors: Vendor,
   vendor_users: VendorUser,
+  vendor_user_profiles: VendorUserProfile,
   vendor_roles: VendorRole,
   vendor_role_permissions: VendorRolePermission,
   vendor_customers: VendorCustomer,
@@ -26503,8 +27517,11 @@ function createMessageTemplateRowLoader(dataSource, entityMap) {
   };
 }
 __name(createMessageTemplateRowLoader, "createMessageTemplateRowLoader");
-function registerMessagingQueueProcessors(cms) {
-  registerEmailQueueProcessor(cms);
+function registerMessagingQueueProcessors(cms, entityMap) {
+  registerEmailQueueProcessor(cms, {
+    getDataSource: /* @__PURE__ */ __name(async () => cms.dataSource, "getDataSource"),
+    entityMap
+  });
   registerWhatsAppQueueProcessor(cms);
 }
 __name(registerMessagingQueueProcessors, "registerMessagingQueueProcessors");
@@ -26556,7 +27573,7 @@ async function ensureMessagingPluginsOnCms(base, options) {
     }
   }
   const merged = Object.keys(overlay).length > 0 ? overlayCmsPlugins(cms, overlay) : cms;
-  registerMessagingQueueProcessors(merged);
+  registerMessagingQueueProcessors(merged, entityMap);
   return merged;
 }
 __name(ensureMessagingPluginsOnCms, "ensureMessagingPluginsOnCms");
@@ -26605,7 +27622,7 @@ async function createCmsAppWithMessaging(options) {
     logger,
     plugins: mergedPlugins
   });
-  registerMessagingQueueProcessors(cms);
+  registerMessagingQueueProcessors(cms, entityMap);
   return cms;
 }
 __name(createCmsAppWithMessaging, "createCmsAppWithMessaging");
@@ -26802,7 +27819,7 @@ function createCmsApiHandler(config) {
         companyDetails
       };
       if (queue) {
-        const { queueEmail: queueEmail2 } = await import('./email-queue-CGZBVVAS.js');
+        const { queueEmail: queueEmail2 } = await import('./email-queue-OI2HSCGE.js');
         await queueEmail2(cms, {
           to: opts.to,
           templateName: "passwordReset",
@@ -26877,9 +27894,7 @@ function createCmsApiHandler(config) {
     getSessionUser: getHydratedSessionUser,
     baseUrl: vendorOnboardBaseUrl,
     getCms,
-    hashPassword: userAuth?.hashPassword,
-    minPasswordLength: 6
-  });
+    hashPassword: userAuth?.hashPassword});
   const vendorRolesHandlers = getHydratedSessionUser && createVendorRolesHandlers({
     dataSource,
     entityMap,
@@ -26919,10 +27934,30 @@ function createCmsApiHandler(config) {
   const zipExtractPost = uploadMerged ? createMediaZipExtractHandler(uploadMerged) : null;
   const blogBySlugGet = blogBySlug ? createBlogBySlugHandler(blogBySlug) : null;
   const formBySlugGet = formBySlug ? createFormBySlugHandler(formBySlug) : null;
-  const formSaveHandlers = formSaveConfig ? createFormSaveHandlers(mergePerm(formSaveConfig) ?? formSaveConfig) : null;
-  const formSubmissionPost = formSubmissionConfig ? createFormSubmissionHandler(formSubmissionConfig) : null;
-  const formSubmissionGetById = formSubmissionGetByIdConfig ? createFormSubmissionGetByIdHandler(mergePerm(formSubmissionGetByIdConfig) ?? formSubmissionGetByIdConfig) : null;
-  const formSubmissionList = formSubmissionGetByIdConfig ? createFormSubmissionListHandler(mergePerm(formSubmissionGetByIdConfig) ?? formSubmissionGetByIdConfig) : null;
+  const formSaveResolved = formSaveConfig ?? {
+    dataSource,
+    entityMap,
+    json: config.json,
+    requireAuth: config.requireAuth
+  };
+  const formSaveHandlers = createFormSaveHandlers(mergePerm(formSaveResolved) ?? formSaveResolved);
+  const formSubmissionResolved = formSubmissionConfig ?? {
+    dataSource,
+    entityMap,
+    json: config.json,
+    getCms,
+    getCompanyDetails: config.getCompanyDetails,
+    getRecipientForChannel: config.getRecipientForChannel
+  };
+  const formSubmissionPost = createFormSubmissionHandler(formSubmissionResolved);
+  const formSubmissionGetByIdResolved = formSubmissionGetByIdConfig ?? {
+    dataSource,
+    entityMap,
+    json: config.json,
+    requireAuth: config.requireAuth
+  };
+  const formSubmissionGetById = createFormSubmissionGetByIdHandler(mergePerm(formSubmissionGetByIdResolved) ?? formSubmissionGetByIdResolved);
+  const formSubmissionList = createFormSubmissionListHandler(mergePerm(formSubmissionGetByIdResolved) ?? formSubmissionGetByIdResolved);
   const usersApiMerged = usersApi && getCms ? {
     ...usersApi,
     getCms: usersApi.getCms ?? getCms,
@@ -27117,7 +28152,19 @@ function createCmsApiHandler(config) {
           status: 404
         });
       }
+      if (path2[0] === "admin" && path2[1] === "vendor" && path2[2] === "team-invite" && vendorHandlers) {
+        if (path2.length === 3 && m === "GET") return vendorHandlers.validateTeamInvite(req);
+        if (path2.length === 3 && m === "POST") return vendorHandlers.acceptTeamInvite(req);
+        return config.json({
+          error: "Not found"
+        }, {
+          status: 404
+        });
+      }
       if (path2[0] === "admin" && path2[1] === "vendor" && path2[2] === "team" && vendorHandlers) {
+        if (path2.length === 4 && path2[3] === "send-invite" && m === "POST") {
+          return vendorHandlers.sendTeamInviteEmail(req);
+        }
         if (path2.length === 3 && m === "GET") return vendorHandlers.listTeam();
         if (path2.length === 3 && m === "POST") return vendorHandlers.addTeamMember(req);
         if (path2.length === 4 && m === "PATCH") return vendorHandlers.updateTeamMemberRole(req, path2[3]);
@@ -28056,14 +29103,27 @@ function createCmsApiHandler(config) {
         const pe = await requireEntityPermissionEffective(req, "orders", "read");
         if (pe) return pe;
         const cms = await getCms();
-        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-3YISSOWW.js');
+        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-3GXDE443.js');
         const oid = Number(path2[1]);
         if (!Number.isFinite(oid)) return config.json({
           error: "Invalid id"
         }, {
           status: 400
         });
-        return streamOrderInvoicePdf2(cms, dataSource, entityMap, oid, {});
+        try {
+          return await streamOrderInvoicePdf2(cms, dataSource, entityMap, oid, {});
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.error("[invoice] route failed", {
+            orderId: oid,
+            error: msg
+          });
+          return config.json({
+            error: `Invoice failed: ${msg}`
+          }, {
+            status: 500
+          });
+        }
       }
       if (path2[0] === "orders" && path2.length === 3 && path2[2] === "repost-erp" && getCms) {
         const a = await config.requireAuth(req);
@@ -28410,7 +29470,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-XWIJYDGA.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-6WNG24NY.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,
@@ -28482,11 +29542,35 @@ function createCmsApiHandler(config) {
             paymentId = Number(payment.id);
           }
         }
+        const orderWithItems = await orderRepo.findOne({
+          where: {
+            id: orderId,
+            deleted: false
+          },
+          relations: [
+            "items"
+          ]
+        });
+        if (orderWithItems) {
+          const { reconcileOrderInventoryBetweenSnapshots: reconcileOrderInventoryBetweenSnapshots2, orderInventorySnapshotFromRow: orderInventorySnapshotFromRow2 } = await import('./order-inventory-76V4XIGW.js');
+          const prevSnap = orderInventorySnapshotFromRow2(orderWithItems);
+          const invErr = await reconcileOrderInventoryBetweenSnapshots2(dataSource, entityMap, prevSnap, {
+            status: "cancelled",
+            lines: prevSnap.lines
+          });
+          if (invErr) {
+            return config.json({
+              error: invErr
+            }, {
+              status: 400
+            });
+          }
+        }
         await orderRepo.update(orderId, {
           status: "cancelled"
         });
         const fireOrderCancelledNotification = /* @__PURE__ */ __name((refundAmount) => {
-          void import('./emit-order-notification-trigger-IVLWKKJL.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-6XX7LSC4.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_cancelled", orderId, {
               dataSource,
               entityMap
@@ -29519,7 +30603,7 @@ function createStorefrontApiHandler(config) {
   const otpPepper = config.otpPepper;
   const defaultPhoneCc = config.defaultPhoneCountryCode;
   function fireOrderPlacedNotification(orderId) {
-    void import('./emit-order-notification-trigger-IVLWKKJL.js').then(({ fireOrderNotificationTrigger }) => {
+    void import('./emit-order-notification-trigger-6XX7LSC4.js').then(({ fireOrderNotificationTrigger }) => {
       fireOrderNotificationTrigger("order_placed", orderId, {
         dataSource,
         entityMap
@@ -31293,9 +32377,12 @@ function createStorefrontApiHandler(config) {
           }, {
             status: 400
           });
+          const { retireSoftDeletedUniqueValue: retireSoftDeletedUniqueValue2 } = await import('./retire-soft-deleted-unique-NXQIH4BC.js');
+          await retireSoftDeletedUniqueValue2(userRepo(), "email", email);
           const existing = await userRepo().findOne({
             where: {
-              email
+              email,
+              deleted: false
             }
           });
           if (existing) return json({
@@ -31924,7 +33011,6 @@ function createStorefrontApiHandler(config) {
             }));
           }
           await linkOrderContactToVendors(contactId, vendorRes.vendorIds);
-          fireOrderPlacedNotification(oid);
           return json({
             orderId: oid,
             orderNumber: ord.orderNumber,
@@ -32001,7 +33087,6 @@ function createStorefrontApiHandler(config) {
             cartId: cart.id
           });
           await cartRepo().delete(cart.id);
-          fireOrderPlacedNotification(oid);
           return json({
             orderId: oid,
             orderNumber: ord.orderNumber,
@@ -32176,6 +33261,7 @@ function createStorefrontApiHandler(config) {
               unitPrice: line.unitPrice,
               tax: line.tax,
               total: line.total,
+              metadata: line.metadata ?? null,
               product: p ? {
                 name: p.name,
                 slug: p.slug,
@@ -32243,4 +33329,4 @@ function createStorefrontApiHandler(config) {
 }
 __name(createStorefrontApiHandler, "createStorefrontApiHandler");
 
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkEventsEnabled, checkMultiVendorEnabled, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForEmail, customerPhoneForUser, daysBeforeEventStart, describeEventTierPolicy, ensureCustomerForUser, ensureCustomerRecord, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isSyntheticCustomerPhone, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, normalizeCustomerPhone, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForEmail, customerPhoneForUser, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureCustomerForUser, ensureCustomerRecord, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isSyntheticCustomerPhone, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeCustomerPhone, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };