@infuro/cms-core 1.0.45 → 1.0.47

package/dist/index.js

@@ -1,22 +1,25 @@
-export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-X47PBV4I.js';
-import { checkMultiVendorEnabled, loadUserVendorContext, getPublicSettingsGroup, BlogGeneratorService } from './chunk-MVXLRANV.js';
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkEventsEnabled, checkMultiVendorEnabled, contactIsVendorCustomer, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForEmail, customerPhoneForUser, daysBeforeEventStart, describeEventTierPolicy, ensureCustomerForUser, ensureCustomerRecord, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isSyntheticCustomerPhone, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, normalizeCustomerPhone, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging } from './chunk-MVXLRANV.js';
-import { mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig } from './chunk-NNQBWDCI.js';
-export { EmailService, buildEventOrderTemplateVariables, emailPlugin, emailTemplates, getCompanyDetailsFromSettings, initWhatsappTriggerDispatcher, joinRecipientsForSend, mergeEmailLayoutCompanyDetails, parseEmailRecipientsFromConfig, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, serializeEmailRecipients } from './chunk-NNQBWDCI.js';
+export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-JE22VP6S.js';
+import { checkMultiVendorEnabled, loadUserVendorContext, getPublicSettingsGroup, BlogGeneratorService } from './chunk-W42UZLQO.js';
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForEmail, customerPhoneForUser, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureCustomerForUser, ensureCustomerRecord, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isSyntheticCustomerPhone, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeCustomerPhone, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging } from './chunk-W42UZLQO.js';
+export { deductInventoryForConfirmedOrder, mergeInventoryLines, orderInventorySnapshotFromRow, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, restoreInventoryForCancelledOrder, validateInventoryForConfirmedOrderLines, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
+export { activeUniqueValueExists, retireSoftDeletedUniqueValue } from './chunk-DBPSJYLZ.js';
+import { parseEmailRecipientsFromConfig } from './chunk-YXH2UUEZ.js';
+export { EmailService, buildEventOrderTemplateVariables, emailPlugin, emailTemplates, initWhatsappTriggerDispatcher, joinRecipientsForSend, parseEmailRecipientsFromConfig, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, serializeEmailRecipients } from './chunk-YXH2UUEZ.js';
 export { KNOWN_NOTIFICATION_TRIGGERS, notificationTriggerEmitter } from './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
-import './chunk-WEMDMVHQ.js';
-import { queueOrderPlacedEmails } from './chunk-5ELSW2UP.js';
-export { queueEmail, queueOrderPlacedEmails, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-5ELSW2UP.js';
+import { queueOrderPlacedEmails } from './chunk-L3525VXI.js';
+export { queueEmail, queueOrderPlacedEmails, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-L3525VXI.js';
+import { mergeEmailLayoutCompanyDetails } from './chunk-2KUCQVAQ.js';
+export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, buildLocalInvoicePdfForOrder, generateLocalInvoicePdf, getCompanyDetailsFromSettings, isOrderEligibleForInvoiceEmail, mergeEmailLayoutCompanyDetails, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
 import './chunk-MQBT33IV.js';
 import './chunk-CRFV5WJK.js';
-export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-KFFB6EMZ.js';
+export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-2HU5R2JE.js';
 import { PgBossService } from './chunk-GO7PPYNU.js';
 export { JOB_RUNNER_QUEUE, PgBossService } from './chunk-GO7PPYNU.js';
-export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-I6NH72MO.js';
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-BLR6H5GL.js';
-import { isSuperAdmin, isVendorGroupName } from './chunk-DN65KDIA.js';
-export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-DN65KDIA.js';
+export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-YC4NUZCS.js';
+export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-ZF2RQWXB.js';
+import { isSuperAdmin, isVendorGroupName } from './chunk-JIWUVQ6B.js';
+export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-JIWUVQ6B.js';
 export { queueErpPaidOrderForOrderId } from './chunk-TDV6EJHV.js';
 import { erpSafeWebhookUrl, logErp, warnErp, errorErp } from './chunk-SYBOCAWB.js';
 export { queueErp, registerErpQueueProcessor } from './chunk-SYBOCAWB.js';
@@ -2258,6 +2261,7 @@ async function sendOrderPlacedEmailsAfterConfirmation(orderId, deps) {
     const salesTeamEmails = parseEmailRecipientsFromConfig(emailSettings.salesTeamEmails ?? emailSettings.salesTeamEmail);
     const cms = await deps.getCms();
     await queueOrderPlacedEmails(cms, {
+      orderId,
       orderNumber: o.orderNumber,
       total: o.total,
       subtotal: o.subtotal,

package/dist/migrations/1781810000000-OrderItemsVariantId.ts

@@ -0,0 +1,44 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class OrderItemsVariantId1781810000000 implements MigrationInterface {
+  name = 'OrderItemsVariantId1781810000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      ALTER TABLE "order_items"
+      ADD COLUMN IF NOT EXISTS "variantId" integer
+    `);
+    await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS "IDX_order_items_variantId"
+      ON "order_items" ("variantId")
+    `);
+    // Best-effort FK when product_variants exists
+    await queryRunner.query(`
+      DO $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1 FROM information_schema.tables
+          WHERE table_name = 'product_variants'
+        ) AND NOT EXISTS (
+          SELECT 1 FROM information_schema.table_constraints
+          WHERE constraint_name = 'FK_order_items_variant'
+        ) THEN
+          ALTER TABLE "order_items"
+          ADD CONSTRAINT "FK_order_items_variant"
+          FOREIGN KEY ("variantId") REFERENCES "product_variants"("id")
+          ON DELETE SET NULL ON UPDATE NO ACTION;
+        END IF;
+      END $$;
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      ALTER TABLE "order_items" DROP CONSTRAINT IF EXISTS "FK_order_items_variant"
+    `);
+    await queryRunner.query(`DROP INDEX IF EXISTS "IDX_order_items_variantId"`);
+    await queryRunner.query(`
+      ALTER TABLE "order_items" DROP COLUMN IF EXISTS "variantId"
+    `);
+  }
+}

package/dist/migrations/1781900000000-UserInviteStatusToken.ts

@@ -0,0 +1,46 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class UserInviteStatusToken1781900000000 implements MigrationInterface {
+  name = 'UserInviteStatusToken1781900000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      DO $$ BEGIN
+        CREATE TYPE "users_invitestatus_enum" AS ENUM ('pending', 'active');
+      EXCEPTION WHEN duplicate_object THEN NULL;
+      END $$
+    `);
+
+    await queryRunner.query(`
+      ALTER TABLE "users"
+      ADD COLUMN IF NOT EXISTS "inviteStatus" "users_invitestatus_enum" NOT NULL DEFAULT 'active'
+    `);
+    await queryRunner.query(`
+      ALTER TABLE "users"
+      ADD COLUMN IF NOT EXISTS "inviteToken" character varying
+    `);
+
+    // Existing users with a password are active; password-less users are pending invites.
+    await queryRunner.query(`
+      UPDATE "users"
+      SET "inviteStatus" = CASE
+        WHEN "password" IS NOT NULL AND TRIM("password") <> '' THEN 'active'::"users_invitestatus_enum"
+        ELSE 'pending'::"users_invitestatus_enum"
+      END
+      WHERE "deleted" = false
+    `);
+
+    await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS "IDX_users_inviteToken"
+      ON "users" ("inviteToken")
+      WHERE "inviteToken" IS NOT NULL
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`DROP INDEX IF EXISTS "IDX_users_inviteToken"`);
+    await queryRunner.query(`ALTER TABLE "users" DROP COLUMN IF EXISTS "inviteToken"`);
+    await queryRunner.query(`ALTER TABLE "users" DROP COLUMN IF EXISTS "inviteStatus"`);
+    await queryRunner.query(`DROP TYPE IF EXISTS "users_invitestatus_enum"`);
+  }
+}

package/dist/migrations/1782000000000-ComboSlug.ts

@@ -0,0 +1,58 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+/**
+ * Add combos.slug (unique per vendor), backfill from name.
+ */
+export class ComboSlug1782000000000 implements MigrationInterface {
+  name = 'ComboSlug1782000000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      ALTER TABLE "combos"
+      ADD COLUMN IF NOT EXISTS "slug" character varying
+    `);
+
+    // Slugify name; empty → combo-{id}
+    await queryRunner.query(`
+      UPDATE "combos"
+      SET "slug" = CASE
+        WHEN NULLIF(TRIM(BOTH '-' FROM LOWER(REGEXP_REPLACE(COALESCE(TRIM("name"), ''), '[^a-zA-Z0-9]+', '-', 'g'))), '') IS NULL
+          THEN 'combo-' || "id"::text
+        ELSE TRIM(BOTH '-' FROM LOWER(REGEXP_REPLACE(COALESCE(TRIM("name"), ''), '[^a-zA-Z0-9]+', '-', 'g')))
+      END
+      WHERE "slug" IS NULL OR TRIM("slug") = ''
+    `);
+
+    // Deduplicate within vendor (append -id when collisions remain)
+    await queryRunner.query(`
+      WITH ranked AS (
+        SELECT
+          id,
+          "vendorId",
+          slug,
+          ROW_NUMBER() OVER (PARTITION BY "vendorId", slug ORDER BY id) AS rn
+        FROM "combos"
+        WHERE deleted = false OR deleted IS NULL
+      )
+      UPDATE "combos" c
+      SET slug = c.slug || '-' || c.id::text
+      FROM ranked r
+      WHERE c.id = r.id AND r.rn > 1
+    `);
+
+    await queryRunner.query(`
+      ALTER TABLE "combos"
+      ALTER COLUMN "slug" SET NOT NULL
+    `);
+
+    await queryRunner.query(`
+      CREATE UNIQUE INDEX IF NOT EXISTS "UQ_combos_vendor_slug"
+      ON "combos" ("vendorId", "slug")
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`DROP INDEX IF EXISTS "UQ_combos_vendor_slug"`);
+    await queryRunner.query(`ALTER TABLE "combos" DROP COLUMN IF EXISTS "slug"`);
+  }
+}

package/dist/migrations/1782100000000-DiscountDeviceType.ts

@@ -0,0 +1,20 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+/**
+ * Add discount_rules.type value `deviceType` (Web / Mobile condition; admin-only for now).
+ */
+export class DiscountDeviceType1782100000000 implements MigrationInterface {
+  name = 'DiscountDeviceType1782100000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      ALTER TYPE "public"."discount_rules_type_enum"
+      ADD VALUE IF NOT EXISTS 'deviceType'
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    // Postgres cannot easily remove a single enum value; leave as no-op.
+    void queryRunner;
+  }
+}

package/dist/migrations/1782200000000-VendorTeamProfiles.ts

@@ -0,0 +1,233 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+/**
+ * Vendor team/profiles redesign:
+ * - Rename user group "Vendor Owner" → "Vendor"
+ * - Create vendor_user_profiles
+ * - Add vendor_users.vendorUserProfileId; backfill profiles + vendorRoleId
+ * - Drop vendor_users.role and vendors.pan
+ */
+export class VendorTeamProfiles1782200000000 implements MigrationInterface {
+  name = 'VendorTeamProfiles1782200000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      UPDATE "user_groups"
+      SET "name" = 'Vendor'
+      WHERE "name" = 'Vendor Owner' AND "deleted" = false
+    `);
+
+    await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS "vendor_user_profiles" (
+        "id" SERIAL PRIMARY KEY,
+        "name" character varying NOT NULL,
+        "email" character varying NOT NULL,
+        "phone" character varying,
+        "aadhaarNo" character varying,
+        "panNo" character varying,
+        "addressLine1" character varying,
+        "addressLine2" character varying,
+        "city" character varying,
+        "state" character varying,
+        "postalCode" character varying,
+        "createdAt" TIMESTAMP NOT NULL DEFAULT now(),
+        "updatedAt" TIMESTAMP NOT NULL DEFAULT now()
+      )
+    `);
+
+    const hasProfileFk = (await queryRunner.query(`
+      SELECT 1 FROM information_schema.columns
+      WHERE table_name = 'vendor_users' AND column_name = 'vendorUserProfileId'
+      LIMIT 1
+    `)) as unknown[];
+    if (!hasProfileFk.length) {
+      await queryRunner.query(`
+        ALTER TABLE "vendor_users"
+        ADD COLUMN "vendorUserProfileId" integer
+      `);
+    }
+
+    // One profile per membership (loop keeps vu.id ↔ profile.id aligned)
+    await queryRunner.query(`
+      DO $$
+      DECLARE
+        r RECORD;
+        new_id integer;
+        is_owner boolean;
+      BEGIN
+        FOR r IN
+          SELECT
+            vu.id AS vu_id,
+            vu.role AS vu_role,
+            vu."vendorRoleId" AS vendor_role_id,
+            COALESCE(NULLIF(TRIM(u.name), ''), COALESCE(NULLIF(TRIM(u.email), ''), 'Vendor user')) AS pname,
+            COALESCE(NULLIF(TRIM(u.email), ''), CONCAT('vendor-user-', vu.id, '@placeholder.local')) AS pemail,
+            NULLIF(TRIM(u.phone), '') AS pphone,
+            v.pan AS vpan,
+            v."addressLine1" AS a1,
+            v."addressLine2" AS a2,
+            v.city AS city,
+            v.state AS state,
+            v."postalCode" AS postal,
+            COALESCE(vr."isOwnerRole", false) AS role_is_owner
+          FROM "vendor_users" vu
+          INNER JOIN "users" u ON u.id = vu."userId"
+          INNER JOIN "vendors" v ON v.id = vu."vendorId"
+          LEFT JOIN "vendor_roles" vr ON vr.id = vu."vendorRoleId"
+          WHERE vu."vendorUserProfileId" IS NULL
+          ORDER BY vu.id
+        LOOP
+          is_owner := (r.vu_role = 'owner') OR (r.role_is_owner = true);
+          INSERT INTO "vendor_user_profiles" (
+            "name", "email", "phone", "aadhaarNo", "panNo",
+            "addressLine1", "addressLine2", "city", "state", "postalCode",
+            "createdAt", "updatedAt"
+          ) VALUES (
+            r.pname,
+            r.pemail,
+            r.pphone,
+            NULL,
+            CASE WHEN is_owner THEN NULLIF(TRIM(r.vpan), '') ELSE NULL END,
+            CASE WHEN is_owner THEN r.a1 ELSE NULL END,
+            CASE WHEN is_owner THEN r.a2 ELSE NULL END,
+            CASE WHEN is_owner THEN r.city ELSE NULL END,
+            CASE WHEN is_owner THEN r.state ELSE NULL END,
+            CASE WHEN is_owner THEN r.postal ELSE NULL END,
+            now(),
+            now()
+          ) RETURNING id INTO new_id;
+          UPDATE "vendor_users" SET "vendorUserProfileId" = new_id WHERE id = r.vu_id;
+        END LOOP;
+      END $$;
+    `);
+
+    // Ensure vendorRoleId for legacy rows (while role column still exists)
+    await queryRunner.query(`
+      UPDATE "vendor_users" vu
+      SET "vendorRoleId" = vr.id
+      FROM "vendor_roles" vr
+      WHERE vu."vendorId" = vr."vendorId"
+        AND vu."vendorRoleId" IS NULL
+        AND vr.deleted = false
+        AND vu.role = 'owner'
+        AND vr."isOwnerRole" = true
+    `);
+
+    await queryRunner.query(`
+      UPDATE "vendor_users" vu
+      SET "vendorRoleId" = vr.id
+      FROM "vendor_roles" vr
+      WHERE vu."vendorId" = vr."vendorId"
+        AND vu."vendorRoleId" IS NULL
+        AND vr.deleted = false
+        AND vu.role IS DISTINCT FROM 'owner'
+        AND vr.name = 'Viewer'
+        AND vr."isSystem" = true
+    `);
+
+    await queryRunner.query(`
+      UPDATE "vendor_users" vu
+      SET "vendorRoleId" = vr.id
+      FROM "vendor_roles" vr
+      WHERE vu."vendorId" = vr."vendorId"
+        AND vu."vendorRoleId" IS NULL
+        AND vr.deleted = false
+        AND vr."isOwnerRole" = false
+        AND vr."isSystem" = true
+        AND vr.name = 'Manager'
+    `);
+
+    const nullProfiles = (await queryRunner.query(`
+      SELECT COUNT(*)::int AS c FROM "vendor_users" WHERE "vendorUserProfileId" IS NULL
+    `)) as Array<{ c: number }>;
+    if (Number(nullProfiles[0]?.c ?? 0) > 0) {
+      throw new Error('VendorTeamProfiles migration: some vendor_users still lack vendorUserProfileId');
+    }
+
+    await queryRunner.query(`
+      ALTER TABLE "vendor_users"
+      ALTER COLUMN "vendorUserProfileId" SET NOT NULL
+    `);
+
+    const fkExists = (await queryRunner.query(`
+      SELECT 1 FROM pg_constraint WHERE conname = 'FK_vendor_users_vendorUserProfileId' LIMIT 1
+    `)) as unknown[];
+    if (!fkExists.length) {
+      await queryRunner.query(`
+        ALTER TABLE "vendor_users"
+        ADD CONSTRAINT "FK_vendor_users_vendorUserProfileId"
+        FOREIGN KEY ("vendorUserProfileId") REFERENCES "vendor_user_profiles"("id")
+        ON DELETE RESTRICT
+      `);
+    }
+
+    const roleCol = (await queryRunner.query(`
+      SELECT 1 FROM information_schema.columns
+      WHERE table_name = 'vendor_users' AND column_name = 'role'
+      LIMIT 1
+    `)) as unknown[];
+    if (roleCol.length) {
+      await queryRunner.query(`ALTER TABLE "vendor_users" DROP COLUMN "role"`);
+    }
+
+    const panCol = (await queryRunner.query(`
+      SELECT 1 FROM information_schema.columns
+      WHERE table_name = 'vendors' AND column_name = 'pan'
+      LIMIT 1
+    `)) as unknown[];
+    if (panCol.length) {
+      await queryRunner.query(`ALTER TABLE "vendors" DROP COLUMN "pan"`);
+    }
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    const panCol = (await queryRunner.query(`
+      SELECT 1 FROM information_schema.columns
+      WHERE table_name = 'vendors' AND column_name = 'pan'
+      LIMIT 1
+    `)) as unknown[];
+    if (!panCol.length) {
+      await queryRunner.query(`ALTER TABLE "vendors" ADD COLUMN "pan" character varying`);
+      await queryRunner.query(`
+        UPDATE "vendors" v
+        SET pan = p."panNo"
+        FROM "vendor_users" vu
+        INNER JOIN "vendor_user_profiles" p ON p.id = vu."vendorUserProfileId"
+        INNER JOIN "vendor_roles" vr ON vr.id = vu."vendorRoleId" AND vr."isOwnerRole" = true
+        WHERE vu."vendorId" = v.id AND p."panNo" IS NOT NULL
+      `);
+    }
+
+    const roleCol = (await queryRunner.query(`
+      SELECT 1 FROM information_schema.columns
+      WHERE table_name = 'vendor_users' AND column_name = 'role'
+      LIMIT 1
+    `)) as unknown[];
+    if (!roleCol.length) {
+      await queryRunner.query(`
+        ALTER TABLE "vendor_users"
+        ADD COLUMN "role" character varying NOT NULL DEFAULT 'staff'
+      `);
+      await queryRunner.query(`
+        UPDATE "vendor_users" vu
+        SET "role" = 'owner'
+        FROM "vendor_roles" vr
+        WHERE vu."vendorRoleId" = vr.id AND vr."isOwnerRole" = true
+      `);
+    }
+
+    await queryRunner.query(`
+      ALTER TABLE "vendor_users" DROP CONSTRAINT IF EXISTS "FK_vendor_users_vendorUserProfileId"
+    `);
+    await queryRunner.query(`
+      ALTER TABLE "vendor_users" DROP COLUMN IF EXISTS "vendorUserProfileId"
+    `);
+    await queryRunner.query(`DROP TABLE IF EXISTS "vendor_user_profiles"`);
+
+    await queryRunner.query(`
+      UPDATE "user_groups"
+      SET "name" = 'Vendor Owner'
+      WHERE "name" = 'Vendor' AND "deleted" = false
+    `);
+  }
+}

package/dist/migrations/1782300000000-AddTypeToOrderNotificationBindings.ts

@@ -0,0 +1,75 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class AddTypeToOrderNotificationBindings1782300000000
+  implements MigrationInterface
+{
+  name = 'AddTypeToOrderNotificationBindings1782300000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    // 1. Create the audience type enum.
+    await queryRunner.query(`
+      CREATE TYPE "order_notification_bindings_type_enum" AS ENUM ('customers', 'vendors', 'admin')
+    `);
+
+    // 2. Add the type column, defaulting existing rows to 'customers'.
+    await queryRunner.query(`
+      ALTER TABLE "order_notification_bindings"
+      ADD COLUMN "type" "order_notification_bindings_type_enum" NOT NULL DEFAULT 'customers'
+    `);
+
+    // 3. Drop old unique constraint on (triggerKey, channel).
+    await queryRunner.query(`
+      DO $$
+      DECLARE
+        old_constraint_name text;
+      BEGIN
+        SELECT con.conname INTO old_constraint_name
+        FROM pg_constraint con
+        JOIN pg_class rel ON rel.oid = con.conrelid
+        WHERE rel.relname = 'order_notification_bindings'
+          AND con.contype = 'u'
+          AND con.conname LIKE '%triggerKey_channel%'
+        LIMIT 1;
+
+        IF old_constraint_name IS NOT NULL THEN
+          EXECUTE format('ALTER TABLE "order_notification_bindings" DROP CONSTRAINT %I', old_constraint_name);
+        END IF;
+      END $$;
+    `);
+
+    // 4. Add new composite unique constraint on (triggerKey, channel, type).
+    await queryRunner.query(`
+      ALTER TABLE "order_notification_bindings"
+      ADD CONSTRAINT "UQ_order_notification_bindings_triggerKey_channel_type" UNIQUE ("triggerKey", "channel", "type")
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    // 1. Drop composite unique constraint.
+    await queryRunner.query(`
+      ALTER TABLE "order_notification_bindings"
+      DROP CONSTRAINT "UQ_order_notification_bindings_triggerKey_channel_type"
+    `);
+
+    // 2. Remove vendor/admin audience rows prior to rollback.
+    await queryRunner.query(`
+      DELETE FROM "order_notification_bindings" WHERE "type" != 'customers'
+    `);
+
+    // 3. Drop type column.
+    await queryRunner.query(`
+      ALTER TABLE "order_notification_bindings" DROP COLUMN "type"
+    `);
+
+    // 4. Restore original unique constraint on (triggerKey, channel).
+    await queryRunner.query(`
+      ALTER TABLE "order_notification_bindings"
+      ADD CONSTRAINT "UQ_order_notification_bindings_triggerKey_channel" UNIQUE ("triggerKey", "channel")
+    `);
+
+    // 5. Drop enum type.
+    await queryRunner.query(`
+      DROP TYPE "order_notification_bindings_type_enum"
+    `);
+  }
+}

package/dist/order-inventory-2MYRKEPC.cjs

@@ -0,0 +1,39 @@
+'use strict';
+
+var chunkHY3AXLOI_cjs = require('./chunk-HY3AXLOI.cjs');
+require('./chunk-USNT2KNT.cjs');
+
+
+
+Object.defineProperty(exports, "deductInventoryForConfirmedOrder", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.deductInventoryForConfirmedOrder; }
+});
+Object.defineProperty(exports, "mergeInventoryLines", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.mergeInventoryLines; }
+});
+Object.defineProperty(exports, "orderInventorySnapshotFromRow", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.orderInventorySnapshotFromRow; }
+});
+Object.defineProperty(exports, "orderStatusHoldsStock", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.orderStatusHoldsStock; }
+});
+Object.defineProperty(exports, "reconcileOrderInventoryBetweenSnapshots", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.reconcileOrderInventoryBetweenSnapshots; }
+});
+Object.defineProperty(exports, "restoreInventoryForCancelledOrder", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.restoreInventoryForCancelledOrder; }
+});
+Object.defineProperty(exports, "validateInventoryForConfirmedOrderLines", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.validateInventoryForConfirmedOrderLines; }
+});
+Object.defineProperty(exports, "validateInventoryForOrderBecomingConfirmed", {
+  enumerable: true,
+  get: function () { return chunkHY3AXLOI_cjs.validateInventoryForOrderBecomingConfirmed; }
+});

package/dist/order-inventory-76V4XIGW.js

@@ -0,0 +1,2 @@
+export { deductInventoryForConfirmedOrder, mergeInventoryLines, orderInventorySnapshotFromRow, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, restoreInventoryForCancelledOrder, validateInventoryForConfirmedOrderLines, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
+import './chunk-SHUYVCID.js';

package/dist/{order-notification-dispatcher-XWIJYDGA.js → order-notification-dispatcher-6WNG24NY.js}

@@ -1,5 +1,7 @@
-export { initWhatsappTriggerDispatcher, resendOrderNotification } from './chunk-NNQBWDCI.js';
+export { initWhatsappTriggerDispatcher, resendOrderNotification } from './chunk-YXH2UUEZ.js';
 import './chunk-HCIRL37O.js';
-import './chunk-5ELSW2UP.js';
+import './chunk-L3525VXI.js';
+import './chunk-2KUCQVAQ.js';
 import './chunk-CRFV5WJK.js';
+import './chunk-JC6DLWTE.js';
 import './chunk-SHUYVCID.js';

package/dist/{order-notification-dispatcher-RU7BTGGX.cjs → order-notification-dispatcher-6XSU3AR7.cjs}

@@ -1,18 +1,20 @@
 'use strict';
 
-var chunk22FFHLTO_cjs = require('./chunk-22FFHLTO.cjs');
+var chunkLMJ7RKPF_cjs = require('./chunk-LMJ7RKPF.cjs');
 require('./chunk-UCKN4BBY.cjs');
-require('./chunk-XW5ATPRW.cjs');
+require('./chunk-V25RDUOU.cjs');
+require('./chunk-BXYZDMTZ.cjs');
 require('./chunk-OOTLNH63.cjs');
+require('./chunk-UPLVMVRX.cjs');
 require('./chunk-USNT2KNT.cjs');
 
 
 
 Object.defineProperty(exports, "initWhatsappTriggerDispatcher", {
   enumerable: true,
-  get: function () { return chunk22FFHLTO_cjs.initWhatsappTriggerDispatcher; }
+  get: function () { return chunkLMJ7RKPF_cjs.initWhatsappTriggerDispatcher; }
 });
 Object.defineProperty(exports, "resendOrderNotification", {
   enumerable: true,
-  get: function () { return chunk22FFHLTO_cjs.resendOrderNotification; }
+  get: function () { return chunkLMJ7RKPF_cjs.resendOrderNotification; }
 });

package/dist/{rbac-debug-db-2SGNLANF.js → rbac-debug-db-6EMIVMGF.js}

@@ -1,4 +1,4 @@
-import { summarizeEntityPerms, permissionRowsToRecord } from './chunk-DN65KDIA.js';
+import { summarizeEntityPerms, permissionRowsToRecord } from './chunk-JIWUVQ6B.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/auth/rbac-debug-db.ts

package/dist/{rbac-debug-db-4Z6A425H.cjs → rbac-debug-db-6PWTLBEL.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkX6UQFV4X_cjs = require('./chunk-X6UQFV4X.cjs');
+var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/auth/rbac-debug-db.ts
@@ -27,7 +27,7 @@ async function loadDbPermissionsForUser(dataSource, userId) {
   return {
     groupId,
     groupName,
-    dbEntityPerms: chunkX6UQFV4X_cjs.summarizeEntityPerms(chunkX6UQFV4X_cjs.permissionRowsToRecord(permRows))
+    dbEntityPerms: chunk77NUXO6A_cjs.summarizeEntityPerms(chunk77NUXO6A_cjs.permissionRowsToRecord(permRows))
   };
 }
 chunkUSNT2KNT_cjs.__name(loadDbPermissionsForUser, "loadDbPermissionsForUser");