@infuro/cms-core 1.0.47 → 1.0.51

package/dist/admin.cjs

@@ -26,10 +26,10 @@ require('jodit/es2021/jodit.min.css');
 var chart_js = require('chart.js');
 var reactChartjs2 = require('react-chartjs-2');
 var CheckboxPrimitive = require('@radix-ui/react-checkbox');
+var countryStateCity = require('country-state-city');
 var reactQrCode = require('react-qr-code');
 require('typeorm');
 var core = require('@craftjs/core');
-var countryStateCity = require('country-state-city');
 var nextThemes = require('next-themes');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -264,11 +264,20 @@ var init_infuro_favicon = __esm({
 function isSuperAdminGroupName(name) {
   return name === ADMIN_GROUP_NAME;
 }
+function hasEntityPermission(record, entity, action) {
+  const p = record?.[entity];
+  if (!p) return false;
+  if (action === "create") return p.c;
+  if (action === "read") return p.r;
+  if (action === "update") return p.u;
+  return p.d;
+}
 var ADMIN_GROUP_NAME;
 var init_permission_entities = __esm({
   "src/auth/permission-entities.ts"() {
     ADMIN_GROUP_NAME = "Administrator";
     __name(isSuperAdminGroupName, "isSuperAdminGroupName");
+    __name(hasEntityPermission, "hasEntityPermission");
   }
 });
 
@@ -470,6 +479,395 @@ var init_Header = __esm({
     __name(AdminHeader, "AdminHeader");
   }
 });
+
+// src/lib/vendor-role-defaults.ts
+function full() {
+  return {
+    canCreate: true,
+    canRead: true,
+    canUpdate: true,
+    canDelete: true
+  };
+}
+function read() {
+  return {
+    canCreate: false,
+    canRead: true,
+    canUpdate: false,
+    canDelete: false
+  };
+}
+function none() {
+  return {
+    canCreate: false,
+    canRead: false,
+    canUpdate: false,
+    canDelete: false
+  };
+}
+function readUpdate() {
+  return {
+    canCreate: false,
+    canRead: true,
+    canUpdate: true,
+    canDelete: false
+  };
+}
+function storePerms(spec) {
+  const resolve = /* @__PURE__ */ __name((v) => {
+    if (v === "full") return full();
+    if (v === "read") return read();
+    if (v === "none") return none();
+    return v;
+  }, "resolve");
+  const out = {};
+  for (const entity of STORE_ENTITIES) {
+    out[entity] = resolve(spec[entity] ?? "none");
+  }
+  return out;
+}
+var VENDOR_RBAC_ENTITIES, STORE_ENTITIES;
+var init_vendor_role_defaults = __esm({
+  "src/lib/vendor-role-defaults.ts"() {
+    init_vendor_scope();
+    VENDOR_RBAC_ENTITIES = [
+      ...VENDOR_STORE_RBAC_ENTITIES,
+      "dashboard",
+      "settings",
+      "team",
+      "roles"
+    ];
+    STORE_ENTITIES = [
+      ...VENDOR_STORE_RBAC_ENTITIES
+    ];
+    __name(full, "full");
+    __name(read, "read");
+    __name(none, "none");
+    __name(readUpdate, "readUpdate");
+    __name(storePerms, "storePerms");
+    [
+      {
+        name: "Owner",
+        description: "Full store access and team/role management",
+        isSystem: true,
+        isOwnerRole: true,
+        permissions: {
+          ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [
+            e,
+            "full"
+          ]))),
+          dashboard: read(),
+          settings: readUpdate(),
+          team: full(),
+          roles: full()
+        }
+      },
+      {
+        name: "Manager",
+        description: "Day-to-day store operations",
+        isSystem: true,
+        isOwnerRole: false,
+        permissions: {
+          ...storePerms({
+            products: "full",
+            collections: "full",
+            brands: "full",
+            product_categories: "full",
+            orders: "full",
+            vendor_customers: "full",
+            discounts: "full",
+            order_discounts: "full",
+            order_addresses: "full",
+            payments: "read",
+            taxes: "read",
+            attributes: "read"
+          }),
+          dashboard: read(),
+          settings: read(),
+          team: none(),
+          roles: none()
+        }
+      },
+      {
+        name: "Catalog Staff",
+        description: "Manage products and catalog content",
+        isSystem: true,
+        isOwnerRole: false,
+        permissions: {
+          ...storePerms({
+            products: "full",
+            collections: "full",
+            brands: "full",
+            product_categories: "full",
+            attributes: "full",
+            orders: "read",
+            vendor_customers: "read"
+          }),
+          dashboard: read(),
+          settings: none(),
+          team: none(),
+          roles: none()
+        }
+      },
+      {
+        name: "Fulfillment",
+        description: "Orders and fulfillment",
+        isSystem: true,
+        isOwnerRole: false,
+        permissions: {
+          ...storePerms({
+            products: "read",
+            orders: "full",
+            order_addresses: "full",
+            order_discounts: "read",
+            vendor_customers: "read"
+          }),
+          dashboard: read(),
+          settings: none(),
+          team: none(),
+          roles: none()
+        }
+      },
+      {
+        name: "Viewer",
+        description: "Read-only access to store data",
+        isSystem: true,
+        isOwnerRole: false,
+        permissions: {
+          ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [
+            e,
+            "read"
+          ]))),
+          dashboard: read(),
+          settings: none(),
+          team: none(),
+          roles: none()
+        }
+      }
+    ];
+  }
+});
+
+// src/auth/rbac-debug.ts
+function summarizeEntityPerms(entityPerms) {
+  const out = {};
+  if (!entityPerms) return out;
+  for (const [entity, p] of Object.entries(entityPerms)) {
+    out[entity] = {
+      c: p.c,
+      r: p.r,
+      u: p.u,
+      d: p.d
+    };
+  }
+  return out;
+}
+function vendorPortalFallbackReason(user, entity, action) {
+  if (!isVendorPortalUser(user)) return null;
+  if (entity === "dashboard" && action === "read") return "vendor_portal_dashboard_fallback";
+  if (entity === "analytics" && action === "read") return "vendor_portal_analytics_fallback";
+  if (entity === "settings" && action === "read") return "vendor_portal_settings_read_fallback";
+  if (entity === "upload" && (action === "create" || action === "read")) {
+    return "vendor_portal_upload_fallback";
+  }
+  if (VENDOR_STORE_RBAC_ENTITIES.has(entity) && action === "read") return "vendor_portal_store_read_fallback";
+  return null;
+}
+function explainSessionEntityAccess(user, entity, action) {
+  const userSnapshot = {
+    email: user?.email ?? null,
+    id: user?.id ?? null,
+    groupId: user?.groupId ?? null,
+    groupName: user?.groupName ?? null,
+    isRBACAdmin: user?.isRBACAdmin ?? false,
+    adminAccess: user?.adminAccess ?? null,
+    vendorIds: user?.vendorIds ?? [],
+    activeVendorId: user?.activeVendorId ?? null,
+    vendorRole: user?.vendorRole ?? null,
+    vendorRoleId: user?.vendorRoleId ?? null,
+    vendorRoleName: user?.vendorRoleName ?? null,
+    isVendorRoleOwner: user?.isVendorRoleOwner ?? false,
+    vendorEntityPerms: summarizeEntityPerms(user?.vendorEntityPerms),
+    isVendorPortal: user?.isVendorPortal ?? false,
+    isVendorOwner: user?.isVendorOwner ?? false,
+    isVendorPortalComputed: isVendorPortalUser(user),
+    isVendorOwnerComputed: isVendorOwner(user),
+    jwtEntityPerms: summarizeEntityPerms(user?.entityPerms),
+    jwtEntityPermForTarget: user?.entityPerms?.[entity] ?? null
+  };
+  if (!user?.email) {
+    return {
+      allowed: false,
+      reason: "no_session_email",
+      userSnapshot
+    };
+  }
+  if (user.isRBACAdmin) {
+    return {
+      allowed: true,
+      reason: "platform_administrator",
+      userSnapshot
+    };
+  }
+  if ((isVendorPortalUser(user) || (user.vendorIds?.length ?? 0) > 0) && entity === "upload" && (action === "create" || action === "read")) {
+    return {
+      allowed: true,
+      reason: "vendor_portal_upload",
+      userSnapshot
+    };
+  }
+  const vendorIds = user.vendorIds ?? [];
+  const isStaff = user.vendorRole === "staff";
+  const vendorPerms = user.vendorEntityPerms;
+  const hasVendorRolePerms = vendorPerms != null && Object.keys(vendorPerms).length > 0;
+  const enforceVendorRoleMatrix = vendorIds.length > 0 && (hasVendorRolePerms || user.vendorRoleId != null);
+  if (enforceVendorRoleMatrix) {
+    const vendorRbacSet = new Set(VENDOR_RBAC_ENTITIES);
+    if (vendorRbacSet.has(entity) || entity === "analytics") {
+      if (entity === "analytics" && action === "read") {
+        const allowed3 = hasEntityPermission(vendorPerms, "dashboard", "read");
+        return {
+          allowed: allowed3,
+          reason: allowed3 ? "vendor_role_analytics_via_dashboard" : "vendor_role_analytics_denied",
+          userSnapshot
+        };
+      }
+      if (user.isVendorRoleOwner === true) {
+        return {
+          allowed: true,
+          reason: "vendor_owner_role_full",
+          userSnapshot
+        };
+      }
+      const allowed2 = hasEntityPermission(vendorPerms, entity, action);
+      return {
+        allowed: allowed2,
+        reason: allowed2 ? "vendor_role_permissions_allow" : "vendor_role_permissions_deny",
+        userSnapshot
+      };
+    }
+  }
+  if (vendorIds.length > 0) {
+    if (entity === "dashboard" && action === "read") {
+      return {
+        allowed: true,
+        reason: "vendor_link_dashboard_read",
+        userSnapshot
+      };
+    }
+    if (entity === "analytics" && action === "read") {
+      return {
+        allowed: true,
+        reason: "vendor_link_analytics_read",
+        userSnapshot
+      };
+    }
+    if (entity === "settings") {
+      if (action === "read") {
+        return {
+          allowed: true,
+          reason: "vendor_link_settings_read",
+          userSnapshot
+        };
+      }
+      if (action === "update" && !isStaff) {
+        return {
+          allowed: true,
+          reason: "vendor_link_settings_update",
+          userSnapshot
+        };
+      }
+    }
+    if (VENDOR_STORE_RBAC_ENTITIES.has(entity)) {
+      if (isStaff && action === "read") {
+        return {
+          allowed: true,
+          reason: "vendor_staff_store_read",
+          userSnapshot
+        };
+      }
+      if (!isStaff) {
+        return {
+          allowed: true,
+          reason: "vendor_link_store_full",
+          userSnapshot
+        };
+      }
+      return {
+        allowed: false,
+        reason: "vendor_staff_store_write_denied",
+        userSnapshot
+      };
+    }
+  }
+  if (isVendorPortalUser(user) && isVendorOwner(user)) {
+    if (entity === "dashboard" && action === "read") {
+      return {
+        allowed: true,
+        reason: "vendor_owner_group_dashboard",
+        userSnapshot
+      };
+    }
+    if (entity === "analytics" && action === "read") {
+      return {
+        allowed: true,
+        reason: "vendor_owner_group_analytics",
+        userSnapshot
+      };
+    }
+    if (entity === "settings" && (action === "read" || action === "update")) {
+      return {
+        allowed: true,
+        reason: "vendor_owner_group_settings",
+        userSnapshot
+      };
+    }
+    if (VENDOR_STORE_RBAC_ENTITIES.has(entity)) {
+      return {
+        allowed: true,
+        reason: "vendor_owner_group_store",
+        userSnapshot
+      };
+    }
+  }
+  const vendorPortalReason = vendorPortalFallbackReason(user, entity, action);
+  if (vendorPortalReason) {
+    return {
+      allowed: true,
+      reason: vendorPortalReason,
+      userSnapshot
+    };
+  }
+  const explicit = user.entityPerms?.[entity];
+  if (explicit !== void 0) {
+    const allowed2 = hasEntityPermission(user.entityPerms, entity, action);
+    return {
+      allowed: allowed2,
+      reason: allowed2 ? "jwt_entity_perms_allow" : "jwt_entity_perms_deny",
+      userSnapshot
+    };
+  }
+  const allowed = hasEntityPermission(user.entityPerms, entity, action);
+  return {
+    allowed,
+    reason: allowed ? "entity_perms_fallback_allow" : "no_matching_rule",
+    userSnapshot
+  };
+}
+function sessionHasEntityAccessFromExplanation(user, entity, action) {
+  return explainSessionEntityAccess(user, entity, action).allowed;
+}
+var init_rbac_debug = __esm({
+  "src/auth/rbac-debug.ts"() {
+    init_permission_entities();
+    init_vendor_role_defaults();
+    init_vendor_scope();
+    __name(summarizeEntityPerms, "summarizeEntityPerms");
+    __name(vendorPortalFallbackReason, "vendorPortalFallbackReason");
+    __name(explainSessionEntityAccess, "explainSessionEntityAccess");
+    __name(sessionHasEntityAccessFromExplanation, "sessionHasEntityAccessFromExplanation");
+  }
+});
 var defaultValue; exports.AdminConfigContext = void 0;
 var init_admin_config_context = __esm({
   "src/admin/admin-config-context.tsx"() {
@@ -489,7 +887,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.47" ;
+    CMS_VERSION = "1.0.51" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -624,6 +1022,10 @@ function AdminSidebar({ variant = "sidebar" }) {
   const sectionCls7 = "mb-5";
   const headingCls = "text-[11px] font-semibold text-gray-400 uppercase tracking-wider px-2.5 mb-1.5";
   const asideCls = isDrawer ? "w-full h-full min-h-0 bg-white flex flex-col overflow-hidden" : "w-52 h-full min-h-0 bg-white border-r border-gray-200 flex-shrink-0 flex flex-col overflow-hidden";
+  const canReadEntity = /* @__PURE__ */ __name((entity) => {
+    if (!sessionUser) return true;
+    return sessionHasEntityAccessFromExplanation(sessionUser, entity, "read");
+  }, "canReadEntity");
   return /* @__PURE__ */ React.createElement("aside", {
     className: asideCls
   }, /* @__PURE__ */ React.createElement("div", {
@@ -641,30 +1043,40 @@ function AdminSidebar({ variant = "sidebar" }) {
     className: `${linkCls} ${isActive("/admin/dashboard") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.LayoutDashboard, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/dashboard") ? iconActive : iconInactive}`
-  }), "Dashboard")))), showPlatformNav && customNavSections.length > 0 && customNavSections.map((section) => /* @__PURE__ */ React.createElement("div", {
-    key: section.title,
-    className: sectionCls7
-  }, /* @__PURE__ */ React.createElement("h3", {
-    className: headingCls
-  }, section.title), /* @__PURE__ */ React.createElement("ul", {
-    className: "space-y-0.5"
-  }, section.items.map((item) => {
-    const Icon2 = getIconForItem(item.icon);
-    return /* @__PURE__ */ React.createElement("li", {
-      key: item.href
-    }, /* @__PURE__ */ React.createElement(Link2__default.default, {
-      href: item.href,
-      className: `${linkCls} ${isActive(item.href) ? linkActive : linkInactive}`
-    }, /* @__PURE__ */ React.createElement(Icon2, {
-      className: `h-4 w-4 mr-2 ${isActive(item.href) ? iconActive : iconInactive}`
-    }), item.label));
-  })))), showPlatformNav && customNavSections.length === 0 && customNavItems.length > 0 && /* @__PURE__ */ React.createElement("div", {
+  }), "Dashboard")))), showPlatformNav && customNavSections.length > 0 && customNavSections.map((section) => {
+    const filteredItems = section.items.filter((item) => {
+      const entity = item.href.replace("/admin/", "").split("/")[0];
+      return canReadEntity(entity);
+    });
+    if (filteredItems.length === 0) return null;
+    return /* @__PURE__ */ React.createElement("div", {
+      key: section.title,
+      className: sectionCls7
+    }, /* @__PURE__ */ React.createElement("h3", {
+      className: headingCls
+    }, section.title), /* @__PURE__ */ React.createElement("ul", {
+      className: "space-y-0.5"
+    }, filteredItems.map((item) => {
+      const Icon2 = getIconForItem(item.icon);
+      return /* @__PURE__ */ React.createElement("li", {
+        key: item.href
+      }, /* @__PURE__ */ React.createElement(Link2__default.default, {
+        href: item.href,
+        className: `${linkCls} ${isActive(item.href) ? linkActive : linkInactive}`
+      }, /* @__PURE__ */ React.createElement(Icon2, {
+        className: `h-4 w-4 mr-2 ${isActive(item.href) ? iconActive : iconInactive}`
+      }), item.label));
+    })));
+  }), showPlatformNav && customNavSections.length === 0 && customNavItems.length > 0 && /* @__PURE__ */ React.createElement("div", {
     className: sectionCls7
   }, /* @__PURE__ */ React.createElement("h3", {
     className: headingCls
   }, "Custom"), /* @__PURE__ */ React.createElement("ul", {
     className: "space-y-0.5"
-  }, customNavItems.map((item) => {
+  }, customNavItems.filter((item) => {
+    const entity = item.href.replace("/admin/", "").split("/")[0];
+    return canReadEntity(entity);
+  }).map((item) => {
     const Icon2 = getIconForItem(item.icon);
     return /* @__PURE__ */ React.createElement("li", {
       key: item.href
@@ -685,85 +1097,92 @@ function AdminSidebar({ variant = "sidebar" }) {
     className: `${linkCls} ${isActive("/admin/dashboard") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.LayoutDashboard, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/dashboard") ? iconActive : iconInactive}`
-  }), "Dashboard")))), vendorPortal && customNavSections.length > 0 && customNavSections.map((section) => /* @__PURE__ */ React.createElement("div", {
-    key: section.title,
-    className: sectionCls7
-  }, /* @__PURE__ */ React.createElement("h3", {
-    className: headingCls
-  }, section.title), /* @__PURE__ */ React.createElement("ul", {
-    className: "space-y-0.5"
-  }, section.items.map((item) => {
-    const Icon2 = getIconForItem(item.icon);
-    return /* @__PURE__ */ React.createElement("li", {
-      key: item.href
-    }, /* @__PURE__ */ React.createElement(Link2__default.default, {
-      href: item.href,
-      className: `${linkCls} ${isActive(item.href) ? linkActive : linkInactive}`
-    }, /* @__PURE__ */ React.createElement(Icon2, {
-      className: `h-4 w-4 mr-2 ${isActive(item.href) ? iconActive : iconInactive}`
-    }), item.label));
-  })))), showStoreNav && /* @__PURE__ */ React.createElement("div", {
+  }), "Dashboard")))), vendorPortal && customNavSections.length > 0 && customNavSections.map((section) => {
+    const filteredItems = section.items.filter((item) => {
+      const entity = item.href.replace("/admin/", "").split("/")[0];
+      return canReadEntity(entity);
+    });
+    if (filteredItems.length === 0) return null;
+    return /* @__PURE__ */ React.createElement("div", {
+      key: section.title,
+      className: sectionCls7
+    }, /* @__PURE__ */ React.createElement("h3", {
+      className: headingCls
+    }, section.title), /* @__PURE__ */ React.createElement("ul", {
+      className: "space-y-0.5"
+    }, filteredItems.map((item) => {
+      const Icon2 = getIconForItem(item.icon);
+      return /* @__PURE__ */ React.createElement("li", {
+        key: item.href
+      }, /* @__PURE__ */ React.createElement(Link2__default.default, {
+        href: item.href,
+        className: `${linkCls} ${isActive(item.href) ? linkActive : linkInactive}`
+      }, /* @__PURE__ */ React.createElement(Icon2, {
+        className: `h-4 w-4 mr-2 ${isActive(item.href) ? iconActive : iconInactive}`
+      }), item.label));
+    })));
+  }), showStoreNav && /* @__PURE__ */ React.createElement("div", {
     className: sectionCls7
   }, /* @__PURE__ */ React.createElement("h3", {
     className: headingCls
   }, "Store"), /* @__PURE__ */ React.createElement("ul", {
     className: "space-y-0.5"
-  }, showVendorOnboard && multiVendorEnabled !== false && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }, showVendorOnboard && multiVendorEnabled !== false && canReadEntity("vendors") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/vendors",
     className: `${linkCls} ${isActive("/admin/vendors") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Store, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/vendors") ? iconActive : iconInactive}`
-  }), "Vendors")), showVendorCategories && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Vendors")), showVendorCategories && canReadEntity("product_categories") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/product_categories",
     className: `${linkCls} ${isActive("/admin/product_categories") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.FolderTree, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/product_categories") ? iconActive : iconInactive}`
-  }), "Categories")), showVendorCollections && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Categories")), showVendorCollections && canReadEntity("collections") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/collections",
     className: `${linkCls} ${isActive("/admin/collections") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Layers, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/collections") ? iconActive : iconInactive}`
-  }), "Collections")), showVendorBrands && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Collections")), showVendorBrands && canReadEntity("brands") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/brands",
     className: `${linkCls} ${isActive("/admin/brands") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Building2, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/brands") ? iconActive : iconInactive}`
-  }), "Brands")), !hasCustomEventsNav && eventsEnabled !== false ? /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Brands")), !hasCustomEventsNav && eventsEnabled !== false && canReadEntity("events") ? /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/events",
     className: `${linkCls} ${isActive("/admin/events") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.CalendarDays, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/events") ? iconActive : iconInactive}`
-  }), "Events")) : null, /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Events")) : null, canReadEntity("products") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/products",
     className: `${linkCls} ${isActive("/admin/products") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.ShoppingBag, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/products") ? iconActive : iconInactive}`
-  }), "Products")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Products")), canReadEntity("combos") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/combos",
     className: `${linkCls} ${isActive("/admin/combos") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Package, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/combos") ? iconActive : iconInactive}`
-  }), "Combos")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Combos")), canReadEntity("taxes") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/taxes",
     className: `${linkCls} ${isActive("/admin/taxes") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Receipt, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/taxes") ? iconActive : iconInactive}`
-  }), "Taxes")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Taxes")), canReadEntity("discounts") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/discounts",
     className: `${linkCls} ${isActive("/admin/discounts") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.BadgePercent, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/discounts") ? iconActive : iconInactive}`
-  }), "Discounts")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Discounts")), canReadEntity("orders") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/orders",
     className: `${linkCls} ${isActive("/admin/orders") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.ShoppingCart, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/orders") ? iconActive : iconInactive}`
-  }), "Orders")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Orders")), canReadEntity("payments") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/payments",
     className: `${linkCls} ${isActive("/admin/payments") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.CreditCard, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/payments") ? iconActive : iconInactive}`
-  }), "Payments")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Payments")), canReadEntity("vendor_customers") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/vendor_customers",
     className: `${linkCls} ${isActive("/admin/vendor_customers") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Users, {
@@ -774,32 +1193,32 @@ function AdminSidebar({ variant = "sidebar" }) {
     className: headingCls
   }, "Management"), /* @__PURE__ */ React.createElement("ul", {
     className: "space-y-0.5"
-  }, /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }, canReadEntity("contacts") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/contacts",
     className: `${linkCls} ${isActive("/admin/contacts") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Inbox, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/contacts") ? iconActive : iconInactive}`
-  }), "Contacts")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Contacts")), canReadEntity("blogs") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/blogs",
     className: `${linkCls} ${isActive("/admin/blogs") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.File, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/blogs") ? iconActive : iconInactive}`
-  }), "Blogs")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Blogs")), canReadEntity("pages") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/pages",
     className: `${linkCls} ${isActive("/admin/pages") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.LinkIcon, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/pages") ? iconActive : iconInactive}`
-  }), "Pages")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Pages")), canReadEntity("forms") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/forms",
     className: `${linkCls} ${isActive("/admin/forms") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.ClipboardList, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/forms") ? iconActive : iconInactive}`
-  }), "Forms")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Forms")), canReadEntity("form_submissions") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/submissions",
     className: `${linkCls} ${isActive("/admin/submissions") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.MessageSquare, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/submissions") ? iconActive : iconInactive}`
-  }), "Submissions")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Submissions")), canReadEntity("upload") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/media",
     className: `${linkCls} ${isActive("/admin/media") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Image, {
@@ -836,12 +1255,12 @@ function AdminSidebar({ variant = "sidebar" }) {
     className: headingCls
   }, "System"), /* @__PURE__ */ React.createElement("ul", {
     className: "space-y-0.5"
-  }, /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }, canReadEntity("users") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/users",
     className: `${linkCls} ${isActive("/admin/users") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Users, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/users") ? iconActive : iconInactive}`
-  }), "Users")), /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Users")), canReadEntity("roles") && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/roles",
     className: `${linkCls} ${isActive("/admin/roles") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Shield, {
@@ -888,6 +1307,7 @@ var init_Sidebar = __esm({
   "src/components/Admin/Sidebar.tsx"() {
     "use client";
     init_vendor_scope();
+    init_rbac_debug();
     init_admin_config_context();
     init_infuro_favicon();
     init_cms_version();
@@ -1180,6 +1600,15 @@ var init_builtin_plugin_descriptors = __esm({
         enabled: true,
         icon: "event_notifications",
         settingsGroup: "event_notifications"
+      },
+      {
+        name: "auth_providers",
+        label: "Authentication Provider",
+        version: "1.0.0",
+        description: "Enable Google sign-in for admin and vendor users (existing accounts only).",
+        enabled: true,
+        icon: "auth_providers",
+        settingsGroup: "auth_providers"
       }
     ];
   }
@@ -1505,7 +1934,15 @@ function useEventsSettings() {
     requireEventApproval
   };
 }
-function AdminLayout({ children, customNavItems = [], customNavSections = [], customCrudConfigs = {}, categoryRelatedProductLabels = {}, renderOrderDetailFooter, theme, themeRegistry, pluginDescriptors = [] }) {
+function AdminLayout({ children, customNavItems = [], customNavSections = [], customCrudConfigs = {}, categoryRelatedProductLabels = {}, renderOrderDetailFooter, extraNotificationVariables, theme, themeRegistry, pluginDescriptors = [] }) {
+  React25.useEffect(() => {
+    document.documentElement.style.overflow = "hidden";
+    document.body.style.overflow = "hidden";
+    return () => {
+      document.documentElement.style.overflow = "";
+      document.body.style.overflow = "";
+    };
+  }, []);
   const resolvedTheme = useResolvedTheme(theme, themeRegistry);
   const { storeEnabled, currency } = useStoreEnabled();
   const { multiVendorEnabled, vendorCanCreateCategories, vendorCanCreateCollections, vendorCanCreateBrands, requireProductApproval } = useMultiVendorSettings();
@@ -1526,6 +1963,7 @@ function AdminLayout({ children, customNavItems = [], customNavSections = [], cu
     customCrudConfigs,
     categoryRelatedProductLabels,
     renderOrderDetailFooter,
+    extraNotificationVariables,
     theme: resolvedTheme,
     themeRegistry,
     pluginDescriptors: mergedPluginDescriptors,
@@ -1544,6 +1982,7 @@ function AdminLayout({ children, customNavItems = [], customNavSections = [], cu
     customCrudConfigs,
     categoryRelatedProductLabels,
     renderOrderDetailFooter,
+    extraNotificationVariables,
     resolvedTheme,
     themeRegistry,
     mergedPluginDescriptors,
@@ -4400,6 +4839,8 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
   const hasLoadedRef = React25.useRef(false);
   const isMobile = useIsMobile();
   const showGroupColumn = !!manageUserGroups && roleOptions.length > 0;
+  const { data: session } = react.useSession();
+  const sessionUser = session?.user;
   const listColumns = React25.useMemo(() => Array.isArray(columns) ? columns.filter((c) => !c.hideInTable) : [], [
     columns
   ]);
@@ -4940,6 +5381,9 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     withListFrom
   ]);
   const resourceName = apiEndpoint.replace("/api/", "");
+  const canCreate = !sessionUser || sessionHasEntityAccessFromExplanation(sessionUser, resourceName, "create");
+  const canUpdate = !sessionUser || sessionHasEntityAccessFromExplanation(sessionUser, resourceName, "update");
+  const canDelete = !sessionUser || sessionHasEntityAccessFromExplanation(sessionUser, resourceName, "delete");
   const dedicatedRecordEditHref = /* @__PURE__ */ __name((recordId) => addEditPage && (resourceName === "orders" || resourceName === "events") ? withListFrom(`${addEditPageUrl}/${recordId}/edit`) : addEditPage ? withListFrom(`${addEditPageUrl}/${recordId}`) : "", "dedicatedRecordEditHref");
   const showDedicatedDuplicate = addEditPage && !CRUD_NO_DUPLICATE_RESOURCES.has(resourceName);
   const hasCustomView = customViewPageUrl && customViewPageUrl.length > 0;
@@ -5099,15 +5543,15 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     onClick: /* @__PURE__ */ __name(() => setBulkDialogOpen(true), "onClick"),
     variant: "outline",
     className: "bg-transparent text-white border-gray-600 hover:bg-gray-700 text-xs h-8"
-  }, /* @__PURE__ */ React.createElement(LucideIcons.Upload, {
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Download, {
     className: "h-3.5 w-3.5 mr-1"
   }), "Import"), /* @__PURE__ */ React.createElement(Button, {
     onClick: handleExport,
     variant: "outline",
     className: "bg-transparent text-white border-gray-600 hover:bg-gray-700 text-xs h-8"
-  }, /* @__PURE__ */ React.createElement(LucideIcons.Download, {
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Upload, {
     className: "h-3.5 w-3.5 mr-1"
-  }), "Export"), !addEditPage && /* @__PURE__ */ React.createElement(Button, {
+  }), "Export"), canCreate && !addEditPage && /* @__PURE__ */ React.createElement(Button, {
     onClick: /* @__PURE__ */ __name(() => {
       setEditingItem(null);
       setDuplicateSeed(null);
@@ -5116,7 +5560,7 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     className: "bg-white text-gray-800 hover:bg-gray-100 border-0 text-xs h-8"
   }, /* @__PURE__ */ React.createElement(LucideIcons.Plus, {
     className: "h-3.5 w-3.5"
-  }), "Add"), addEditPage && dedicatedCreateHref && /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Add"), canCreate && addEditPage && dedicatedCreateHref && /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: dedicatedCreateHref,
     className: "inline-flex items-center gap-1 bg-white text-gray-800 hover:bg-gray-100 border-0 text-xs h-8 px-3 rounded-md font-medium"
   }, /* @__PURE__ */ React.createElement(LucideIcons.Plus, {
@@ -5275,7 +5719,7 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     onClick: /* @__PURE__ */ __name((e) => e.stopPropagation(), "onClick")
   }, /* @__PURE__ */ React.createElement("div", {
     className: "flex items-center justify-center gap-1"
-  }, customRowActions ? customRowActions(item) : /* @__PURE__ */ React.createElement(React.Fragment, null, !addEditPage && /* @__PURE__ */ React.createElement(Button, {
+  }, customRowActions ? customRowActions(item) : /* @__PURE__ */ React.createElement(React.Fragment, null, canUpdate && !addEditPage && /* @__PURE__ */ React.createElement(Button, {
     variant: "outline",
     size: "icon",
     className: "h-7 w-7",
@@ -5285,7 +5729,7 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     className: "h-3.5 w-3.5"
   }), /* @__PURE__ */ React.createElement("span", {
     className: "sr-only"
-  }, "Edit")), addEditPage && /* @__PURE__ */ React.createElement(Button, {
+  }, "Edit")), canUpdate && addEditPage && /* @__PURE__ */ React.createElement(Button, {
     variant: "outline",
     size: "icon",
     className: "h-7 w-7",
@@ -5295,7 +5739,7 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     className: "h-3.5 w-3.5"
   }), /* @__PURE__ */ React.createElement("span", {
     className: "sr-only"
-  }, "Edit")), showDuplicateEntry && /* @__PURE__ */ React.createElement(Button, {
+  }, "Edit")), canCreate && showDuplicateEntry && /* @__PURE__ */ React.createElement(Button, {
     variant: "outline",
     size: "icon",
     className: "h-7 w-7",
@@ -5321,7 +5765,7 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     className: "h-3.5 w-3.5"
   }), /* @__PURE__ */ React.createElement("span", {
     className: "sr-only"
-  }, "Resend invite")), /* @__PURE__ */ React.createElement(Button, {
+  }, "Resend invite")), canDelete && /* @__PURE__ */ React.createElement(Button, {
     variant: "outline",
     size: "icon",
     className: "h-7 w-7 border-red-300 text-red-600 hover:text-red-700",
@@ -5459,6 +5903,7 @@ var init_CRUD = __esm({
     init_dropdown_menu();
     init_utils();
     init_use_mobile();
+    init_rbac_debug();
     init_BulkUploadDialog();
     init_admin_list_return_url();
     init_build_crud_list_filters_from_columns();
@@ -9174,28 +9619,75 @@ var init_AuthPageLayout = __esm({
   }
 });
 
+// src/auth/auth-providers-settings.ts
+function parseEnabled(raw) {
+  if (typeof raw === "boolean") return raw;
+  if (typeof raw === "number") return raw !== 0;
+  if (typeof raw === "string") {
+    const n = raw.trim().toLowerCase();
+    return n === "true" || n === "1" || n === "yes" || n === "on";
+  }
+  return false;
+}
+function isGoogleAuthPubliclyEnabled(settings) {
+  if (!settings) return false;
+  if (settings.googleEnabled !== void 0 && settings.googleEnabled !== "") {
+    return parseEnabled(settings.googleEnabled);
+  }
+  return parseEnabled(settings.enabled);
+}
+var init_auth_providers_settings = __esm({
+  "src/auth/auth-providers-settings.ts"() {
+    init_auth_debug();
+    __name(parseEnabled, "parseEnabled");
+    __name(isGoogleAuthPubliclyEnabled, "isGoogleAuthPubliclyEnabled");
+  }
+});
+
 // src/admin/pages/SignInPage.tsx
 var SignInPage_exports = {};
 __export(SignInPage_exports, {
   default: () => exports.AdminSignInPage
 });
+function oauthErrorMessage(code) {
+  if (!code) return "";
+  const c = code.toLowerCase();
+  if (c === "accessdenied" || c === "access_denied") {
+    return "No account for this Google email. Ask an admin to invite you first.";
+  }
+  if (c === "oauthaccountnotlinked") {
+    return "This Google account is not linked to an existing user. Sign in with email/password or ask an admin to invite you.";
+  }
+  if (c === "oauthcallback" || c === "oauthsignin" || c === "oauthcreateaccount") {
+    return "Google sign-in failed. Check Authentication Provider settings and the redirect URI in Google Cloud Console.";
+  }
+  if (c === "configuration") {
+    return "Google sign-in is not configured correctly.";
+  }
+  return "Invalid email or password";
+}
 var SigninPage; exports.AdminSignInPage = void 0;
 var init_SignInPage = __esm({
   "src/admin/pages/SignInPage.tsx"() {
     "use client";
     init_AuthPageLayout();
     init_auth_debug();
+    init_auth_providers_settings();
+    __name(oauthErrorMessage, "oauthErrorMessage");
     SigninPage = /* @__PURE__ */ __name(() => {
       const [email, setEmail] = React25.useState("");
       const [password, setPassword] = React25.useState("");
       const [error, setError] = React25.useState("");
       const [success, setSuccess] = React25.useState("");
       const [loading, setLoading] = React25.useState(false);
+      const [googleLoading, setGoogleLoading] = React25.useState(false);
+      const [googleEnabled, setGoogleEnabled] = React25.useState(false);
       const { status } = react.useSession();
       const searchParams = navigation.useSearchParams();
       React25.useEffect(() => {
-        if (searchParams.get("error")) {
-          setError("Invalid email or password");
+        const err = searchParams.get("error");
+        if (err) {
+          setError(oauthErrorMessage(err));
         }
         if (searchParams.get("activated") === "1") {
           setSuccess("Account activated. Sign in with your new password.");
@@ -9206,6 +9698,23 @@ var init_SignInPage = __esm({
       }, [
         searchParams
       ]);
+      React25.useEffect(() => {
+        let cancelled = false;
+        (async () => {
+          try {
+            const res = await fetch("/api/settings/auth_providers", {
+              cache: "no-store"
+            });
+            if (!res.ok) return;
+            const data = await res.json();
+            if (!cancelled) setGoogleEnabled(isGoogleAuthPubliclyEnabled(data));
+          } catch {
+          }
+        })();
+        return () => {
+          cancelled = true;
+        };
+      }, []);
       React25.useEffect(() => {
         logAuthClient("SignInPage session status", {
           status
@@ -9263,6 +9772,19 @@ var init_SignInPage = __esm({
           setLoading(false);
         }
       }, "handleSubmit");
+      const handleGoogle = /* @__PURE__ */ __name(async () => {
+        setGoogleLoading(true);
+        setError("");
+        try {
+          logAuthClient("SignInPage Google signIn start");
+          await react.signIn("google", {
+            callbackUrl: "/admin/dashboard"
+          });
+        } catch {
+          setError("Google sign-in failed. Please try again.");
+          setGoogleLoading(false);
+        }
+      }, "handleGoogle");
       return /* @__PURE__ */ React.createElement(AuthPageLayout, null, /* @__PURE__ */ React.createElement("div", {
         className: "w-full shadow-md rounded-lg bg-white px-4 py-6 sm:px-6 sm:py-8"
       }, /* @__PURE__ */ React.createElement("h3", {
@@ -9315,9 +9837,42 @@ var init_SignInPage = __esm({
         className: "text-xs font-medium text-gray-600 hover:underline"
       }, "Forgot password?")), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("button", {
         type: "submit",
-        disabled: loading,
+        disabled: loading || googleLoading,
         className: "w-full rounded bg-gray-900 px-4 py-2 text-sm font-medium text-white hover:bg-gray-800 disabled:opacity-50 disabled:cursor-not-allowed"
-      }, loading ? "Signing in..." : "Sign in")))));
+      }, loading ? "Signing in..." : "Sign in"))), googleEnabled && /* @__PURE__ */ React.createElement("div", {
+        className: "mt-6"
+      }, /* @__PURE__ */ React.createElement("div", {
+        className: "relative mb-4"
+      }, /* @__PURE__ */ React.createElement("div", {
+        className: "absolute inset-0 flex items-center"
+      }, /* @__PURE__ */ React.createElement("div", {
+        className: "w-full border-t border-gray-200"
+      })), /* @__PURE__ */ React.createElement("div", {
+        className: "relative flex justify-center text-xs"
+      }, /* @__PURE__ */ React.createElement("span", {
+        className: "bg-white px-2 text-gray-500"
+      }, "or"))), /* @__PURE__ */ React.createElement("button", {
+        type: "button",
+        onClick: handleGoogle,
+        disabled: loading || googleLoading,
+        className: "flex w-full items-center justify-center gap-2 rounded border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-800 hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed"
+      }, /* @__PURE__ */ React.createElement("svg", {
+        className: "h-4 w-4",
+        viewBox: "0 0 24 24",
+        "aria-hidden": "true"
+      }, /* @__PURE__ */ React.createElement("path", {
+        fill: "#4285F4",
+        d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
+      }), /* @__PURE__ */ React.createElement("path", {
+        fill: "#34A853",
+        d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
+      }), /* @__PURE__ */ React.createElement("path", {
+        fill: "#FBBC05",
+        d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
+      }), /* @__PURE__ */ React.createElement("path", {
+        fill: "#EA4335",
+        d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
+      })), googleLoading ? "Redirecting\u2026" : "Continue with Google"))));
     }, "SigninPage");
     exports.AdminSignInPage = SigninPage;
   }
@@ -15417,6 +15972,18 @@ var init_email_recipients = __esm({
     __name(serializeEmailRecipients, "serializeEmailRecipients");
   }
 });
+function useNotificationVariables() {
+  const config = React25.useContext(exports.AdminConfigContext);
+  const extra = config?.extraNotificationVariables ?? [];
+  const vars = [
+    ...KNOWN_VARS,
+    ...extra.map((e) => e.name)
+  ];
+  return {
+    vars,
+    extra
+  };
+}
 function getEmailTriggerDefaults(triggerKey, audience = "customer") {
   if (audience === "vendor") {
     return VENDOR_EMAIL_TRIGGER_DEFAULTS[triggerKey] ?? {
@@ -15441,6 +16008,30 @@ function getEmailTriggerDefaults(triggerKey, audience = "customer") {
     bodyPlaceholder: "Hi {{customerName}},\n\nYour order {{orderNumber}} has been updated."
   };
 }
+function getPushTriggerDefaults(triggerKey, audience = "customer") {
+  if (audience === "vendor") {
+    return VENDOR_PUSH_TRIGGER_DEFAULTS[triggerKey] ?? {
+      subject: "Vendor Push Update",
+      body: "Hi {{vendorName}}, order {{orderNumber}} update.",
+      subjectPlaceholder: "e.g. Vendor Push Update",
+      bodyPlaceholder: "Hi {{vendorName}}, order {{orderNumber}} update."
+    };
+  }
+  if (audience === "admin") {
+    return ADMIN_PUSH_TRIGGER_DEFAULTS[triggerKey] ?? {
+      subject: "Admin Push Alert",
+      body: "Admin Alert: Order {{orderNumber}} update.",
+      subjectPlaceholder: "e.g. Admin Push Alert",
+      bodyPlaceholder: "Admin Alert: Order {{orderNumber}} update."
+    };
+  }
+  return PUSH_TRIGGER_DEFAULTS[triggerKey] ?? {
+    subject: "Order Update",
+    body: "Hi {{customerName}}, order {{orderNumber}} update.",
+    subjectPlaceholder: "e.g. Order Update",
+    bodyPlaceholder: "Hi {{customerName}}, order {{orderNumber}} update."
+  };
+}
 async function jsonFetch(url, init) {
   const res = await fetch(url, {
     credentials: "include",
@@ -15532,10 +16123,11 @@ function useOrderNotificationTriggerBindings(channel, audienceType = "customers"
     rebind
   };
 }
-var KNOWN_VARS, EMAIL_TRIGGER_DEFAULTS, VENDOR_EMAIL_TRIGGER_DEFAULTS, ADMIN_EMAIL_TRIGGER_DEFAULTS;
+var KNOWN_VARS, EMAIL_TRIGGER_DEFAULTS, VENDOR_EMAIL_TRIGGER_DEFAULTS, ADMIN_EMAIL_TRIGGER_DEFAULTS, PUSH_TRIGGER_DEFAULTS, VENDOR_PUSH_TRIGGER_DEFAULTS, ADMIN_PUSH_TRIGGER_DEFAULTS;
 var init_order_notification_bindings_shared = __esm({
   "src/admin/components/order-notification-bindings-shared.ts"() {
     "use client";
+    init_admin_config_context();
     KNOWN_VARS = [
       "orderId",
       "orderNumber",
@@ -15548,10 +16140,9 @@ var init_order_notification_bindings_shared = __esm({
       "vendorId",
       "refundAmount",
       "invoiceNumber",
-      "invoiceUrl",
-      "ticketQr",
-      "qrImageUrl"
+      "invoiceUrl"
     ];
+    __name(useNotificationVariables, "useNotificationVariables");
     EMAIL_TRIGGER_DEFAULTS = {
       order_placed: {
         subject: "Your order {{orderNumber}} is confirmed",
@@ -15629,7 +16220,7 @@ Order Summary:
 Customer Name: {{customerName}}
 Customer Email: {{customerEmail}}
 Customer Phone: {{customerPhone}}`,
-        bodyPlaceholder: "Admin Notification:\n\nNew order {{orderNumber}} placed by {{customerName}}."
+        bodyPlaceholder: "New order {{orderNumber}} placed by {{customerName}}."
       },
       order_cancelled: {
         subject: "Order {{orderNumber}} cancelled",
@@ -15645,6 +16236,66 @@ Refund Due: {{refundAmount}} {{currency}}`,
       }
     };
     __name(getEmailTriggerDefaults, "getEmailTriggerDefaults");
+    PUSH_TRIGGER_DEFAULTS = {
+      order_placed: {
+        subject: "Order {{orderNumber}} Confirmed!",
+        subjectPlaceholder: "e.g. Order {{orderNumber}} Confirmed!",
+        body: `Hi {{customerName}}, your order {{orderNumber}} for {{total}} {{currency}} is confirmed.`,
+        bodyPlaceholder: "Hi {{customerName}}, your order {{orderNumber}} is confirmed."
+      },
+      order_cancelled: {
+        subject: "Order {{orderNumber}} Cancelled",
+        subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
+        body: `Hi {{customerName}}, your order {{orderNumber}} for {{total}} {{currency}} has been cancelled.`,
+        bodyPlaceholder: "Hi {{customerName}}, your order {{orderNumber}} has been cancelled."
+      }
+    };
+    VENDOR_PUSH_TRIGGER_DEFAULTS = {
+      order_placed: {
+        subject: "New Order Received: {{orderNumber}}",
+        subjectPlaceholder: "e.g. New Order Received: {{orderNumber}}",
+        body: `Hi {{vendorName}}, you received a new order {{orderNumber}} for {{total}} {{currency}} from {{customerName}}.`,
+        bodyPlaceholder: "Hi {{vendorName}}, you received a new order {{orderNumber}}."
+      },
+      order_cancelled: {
+        subject: "Order {{orderNumber}} Cancelled",
+        subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
+        body: `Hi {{vendorName}}, order {{orderNumber}} from {{customerName}} has been cancelled.`,
+        bodyPlaceholder: "Hi {{vendorName}}, order {{orderNumber}} was cancelled."
+      }
+    };
+    ADMIN_PUSH_TRIGGER_DEFAULTS = {
+      order_placed: {
+        subject: "New Order {{orderNumber}} ({{total}} {{currency}})",
+        subjectPlaceholder: "e.g. New Order {{orderNumber}} placed",
+        body: `Hi Admin,
+
+A new order {{orderNumber}} of {{total}} {{currency}} was placed.
+
+Vendor: {{vendorName}}
+
+Order Summary:
+{{orderDetails}}
+
+Customer Name: {{customerName}}
+Customer Email: {{customerEmail}}
+Customer Phone: {{customerPhone}}`,
+        bodyPlaceholder: "New order {{orderNumber}} placed by {{customerName}}."
+      },
+      order_cancelled: {
+        subject: "Order {{orderNumber}} Cancelled",
+        subjectPlaceholder: "e.g. Order {{orderNumber}} cancelled",
+        body: `Hi Admin,
+
+Order {{orderNumber}} has been cancelled.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}
+Refund Due: {{refundAmount}} {{currency}}`,
+        bodyPlaceholder: "Hi Admin,\n\nOrder {{orderNumber}} cancelled."
+      }
+    };
+    __name(getPushTriggerDefaults, "getPushTriggerDefaults");
     __name(jsonFetch, "jsonFetch");
     __name(useOrderNotificationTriggerBindings, "useOrderNotificationTriggerBindings");
   }
@@ -16195,16 +16846,23 @@ function TriggerEmailEditor({ triggerKey, label, description, audience = "custom
       cancelled = true;
     };
   }, []);
+  const { vars: availableVars, extra: extraVars } = useNotificationVariables();
   const visibleVars = React25.useMemo(() => {
-    return KNOWN_VARS.filter((v) => {
+    return availableVars.filter((v) => {
       if (v === "vendorName" || v === "vendorId") return multiVendorOn;
       if (v === "eventName") return eventsOn;
       return true;
     });
   }, [
+    availableVars,
     multiVendorOn,
     eventsOn
   ]);
+  const getVarHint = /* @__PURE__ */ __name((v) => {
+    if (v in VAR_HINTS) return VAR_HINTS[v];
+    const match = extraVars.find((e) => e.name === v);
+    return match?.hint || match?.label || v;
+  }, "getVarHint");
   return /* @__PURE__ */ React.createElement("div", {
     className: "space-y-3 border-t border-gray-100 pt-4 first:border-t-0 first:pt-0 dark:border-gray-700"
   }, /* @__PURE__ */ React.createElement("div", {
@@ -16267,7 +16925,7 @@ function TriggerEmailEditor({ triggerKey, label, description, audience = "custom
   }, visibleVars.map((v) => /* @__PURE__ */ React.createElement("button", {
     key: v,
     type: "button",
-    title: VAR_HINTS[v],
+    title: getVarHint(v),
     onClick: /* @__PURE__ */ __name(() => insertVariable(v), "onClick"),
     className: "rounded border border-gray-200 bg-white px-2 py-1 font-mono text-[11px] text-gray-700 hover:border-blue-300 hover:bg-blue-50 dark:border-gray-600 dark:bg-gray-900 dark:text-gray-300 dark:hover:border-blue-700 dark:hover:bg-blue-950/40"
   }, `{{${v}}}`))), /* @__PURE__ */ React.createElement("p", {
@@ -16295,14 +16953,588 @@ var init_emailTriggersBindingsPage = __esm({
       vendorId: "Vendor / store ID",
       refundAmount: "Refund amount (refund triggers)",
       invoiceNumber: "Generated invoice number",
-      invoiceUrl: "Link to download invoice PDF",
-      ticketQr: "Embedded ticket QR code image",
-      qrImageUrl: "Direct QR code image URL"
+      invoiceUrl: "Link to download invoice PDF"
     };
     __name(EmailTriggerBindings, "EmailTriggerBindings");
     __name(TriggerEmailEditor, "TriggerEmailEditor");
   }
 });
+function PushTriggerBindings({ audience = "customer" }) {
+  const audienceType = audience === "vendor" ? "vendors" : audience === "admin" ? "admin" : "customers";
+  const { triggers, bindings, loading, reload, rebind } = useOrderNotificationTriggerBindings("mobile", audienceType);
+  const [selectedKey, setSelectedKey] = React25.useState("");
+  const [templates, setTemplates] = React25.useState([]);
+  const [loadingTpl, setLoadingTpl] = React25.useState(true);
+  const [title, setTitle] = React25.useState("");
+  const [body, setBody] = React25.useState("");
+  const [saving, setSaving] = React25.useState(false);
+  const bodyRef = React25.useRef(null);
+  const subjectRef = React25.useRef(null);
+  const lastFocused = React25.useRef("body");
+  const { vars: availableVars, extra: extraVars } = useNotificationVariables();
+  const getVarHint = /* @__PURE__ */ __name((v) => {
+    if (v in VAR_HINTS2) return VAR_HINTS2[v];
+    const match = extraVars.find((e) => e.name === v);
+    return match?.hint || match?.label || v;
+  }, "getVarHint");
+  React25.useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      try {
+        setLoadingTpl(true);
+        const res = await fetch("/api/message-templates/email", {
+          cache: "no-store"
+        });
+        if (!res.ok) throw new Error("Failed to load message templates");
+        const data = await res.json();
+        if (!cancelled) setTemplates(Array.isArray(data.items) ? data.items : []);
+      } catch {
+        if (!cancelled) sonner.toast.error("Could not load message templates");
+      } finally {
+        if (!cancelled) setLoadingTpl(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  React25.useEffect(() => {
+    if (triggers.length > 0 && !selectedKey) {
+      setSelectedKey(triggers[0].triggerKey);
+    }
+  }, [
+    triggers,
+    selectedKey
+  ]);
+  const activeTrigger = React25.useMemo(() => triggers.find((t) => t.triggerKey === selectedKey), [
+    triggers,
+    selectedKey
+  ]);
+  const bindingMap = React25.useMemo(() => {
+    const m = /* @__PURE__ */ new Map();
+    for (const b of bindings) {
+      if (b.messageTemplateId != null) m.set(b.triggerKey, b.messageTemplateId);
+    }
+    return m;
+  }, [
+    bindings
+  ]);
+  const activeBindingTplId = selectedKey ? bindingMap.get(selectedKey) ?? null : null;
+  const activeTemplate = React25.useMemo(() => {
+    if (!activeBindingTplId) return null;
+    return templates.find((t) => t.id === activeBindingTplId) ?? null;
+  }, [
+    activeBindingTplId,
+    templates
+  ]);
+  const defaults = React25.useMemo(() => {
+    if (!selectedKey) return {
+      subject: "",
+      body: "",
+      subjectPlaceholder: "",
+      bodyPlaceholder: ""
+    };
+    return getPushTriggerDefaults(selectedKey, audience);
+  }, [
+    selectedKey,
+    audience
+  ]);
+  React25.useEffect(() => {
+    if (activeTemplate) {
+      setTitle(activeTemplate.subject ?? "");
+      setBody(activeTemplate.body ?? "");
+    } else {
+      setTitle(defaults.subject);
+      setBody(defaults.body);
+    }
+  }, [
+    activeTemplate,
+    defaults,
+    selectedKey
+  ]);
+  const insertVariable = /* @__PURE__ */ __name((varName) => {
+    const token = `{{${varName}}}`;
+    if (lastFocused.current === "subject" && subjectRef.current) {
+      const el = subjectRef.current;
+      const start = el.selectionStart ?? title.length;
+      const end = el.selectionEnd ?? title.length;
+      const next = title.slice(0, start) + token + title.slice(end);
+      setTitle(next);
+      setTimeout(() => {
+        el.focus();
+        el.setSelectionRange(start + token.length, start + token.length);
+      }, 0);
+      return;
+    }
+    if (bodyRef.current) {
+      const el = bodyRef.current;
+      const start = el.selectionStart ?? body.length;
+      const end = el.selectionEnd ?? body.length;
+      const next = body.slice(0, start) + token + body.slice(end);
+      setBody(next);
+      setTimeout(() => {
+        el.focus();
+        el.setSelectionRange(start + token.length, start + token.length);
+      }, 0);
+    } else {
+      setBody((prev) => prev + token);
+    }
+  }, "insertVariable");
+  const handleSave = /* @__PURE__ */ __name(async () => {
+    if (!selectedKey) return;
+    setSaving(true);
+    try {
+      let tplId = activeBindingTplId;
+      if (tplId) {
+        const res = await jsonFetch(`/api/message-templates/email/${tplId}`, {
+          method: "PATCH",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({
+            name: `${audienceType}_push_${selectedKey}`,
+            subject: title,
+            body
+          })
+        });
+        if (res.item) {
+          setTemplates((prev) => prev.map((t) => t.id === res.item.id ? res.item : t));
+        }
+      } else {
+        const res = await jsonFetch("/api/message-templates/email", {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify({
+            name: `${audienceType}_push_${selectedKey}`,
+            subject: title,
+            body
+          })
+        });
+        const createdItem = res.item || res;
+        tplId = createdItem.id;
+        if (createdItem) {
+          setTemplates((prev) => [
+            createdItem,
+            ...prev
+          ]);
+        }
+      }
+      await rebind(selectedKey, tplId, `${audienceType}_push_${selectedKey}`);
+      sonner.toast.success("Push notification template saved");
+      await reload();
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : "Save failed";
+      sonner.toast.error(msg);
+    } finally {
+      setSaving(false);
+    }
+  }, "handleSave");
+  if (loading || loadingTpl) {
+    return /* @__PURE__ */ React.createElement("div", {
+      className: "flex items-center gap-2 p-6 text-sm text-gray-500"
+    }, /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+      className: "h-4 w-4 animate-spin"
+    }), " Loading push notification triggers\u2026");
+  }
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-col sm:flex-row sm:items-center justify-between gap-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1"
+  }, /* @__PURE__ */ React.createElement("h3", {
+    className: "text-base font-semibold text-gray-900 dark:text-gray-100 flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Smartphone, {
+    className: "h-5 w-5 text-gray-700 dark:text-gray-300"
+  }), "Mobile Push Notification Templates"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500"
+  }, "Configure push notification title and message body per trigger for", " ", /* @__PURE__ */ React.createElement("span", {
+    className: "font-semibold capitalize text-gray-700 dark:text-gray-300"
+  }, audience, "s"), ".")), /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    onClick: handleSave,
+    disabled: saving || !selectedKey,
+    className: "gap-2 shrink-0"
+  }, saving ? /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-4 w-4 animate-spin"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Save, {
+    className: "h-4 w-4"
+  }), "Save Template")), /* @__PURE__ */ React.createElement("div", {
+    className: "grid grid-cols-1 md:grid-cols-4 gap-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "md:col-span-1 space-y-2"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    className: "text-xs font-semibold text-gray-500 uppercase tracking-wider"
+  }, "Triggers"), /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-col gap-1"
+  }, triggers.map((t) => {
+    const isBound = bindingMap.has(t.triggerKey);
+    const isSelected = t.triggerKey === selectedKey;
+    return /* @__PURE__ */ React.createElement("button", {
+      key: t.triggerKey,
+      type: "button",
+      onClick: /* @__PURE__ */ __name(() => setSelectedKey(t.triggerKey), "onClick"),
+      className: `flex flex-col items-start p-3 rounded-lg border text-left transition-all ${isSelected ? "border-gray-900 bg-gray-900 text-white dark:border-gray-100 dark:bg-gray-100 dark:text-gray-900 shadow-sm" : "border-gray-200 bg-white hover:bg-gray-50 text-gray-700 dark:border-gray-800 dark:bg-gray-900 dark:text-gray-300"}`
+    }, /* @__PURE__ */ React.createElement("div", {
+      className: "flex items-center justify-between w-full"
+    }, /* @__PURE__ */ React.createElement("span", {
+      className: "font-medium text-sm"
+    }, t.label), isBound && /* @__PURE__ */ React.createElement("span", {
+      className: `text-[10px] px-1.5 py-0.5 rounded font-mono ${isSelected ? "bg-white/20 text-white dark:bg-black/20 dark:text-gray-900" : "bg-green-100 text-green-700 dark:bg-green-950 dark:text-green-300"}`
+    }, "Configured")), /* @__PURE__ */ React.createElement("span", {
+      className: `text-xs mt-1 ${isSelected ? "text-gray-300 dark:text-gray-600" : "text-gray-500 dark:text-gray-400"}`
+    }, t.triggerKey));
+  }))), /* @__PURE__ */ React.createElement("div", {
+    className: "md:col-span-3 space-y-5 bg-white dark:bg-gray-900 p-5 rounded-xl border border-gray-200 dark:border-gray-800 shadow-sm"
+  }, activeTrigger ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("h4", {
+    className: "text-sm font-semibold text-gray-900 dark:text-gray-100"
+  }, activeTrigger.label, " (", activeTrigger.triggerKey, ")"), activeTrigger.description && /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 mt-0.5"
+  }, activeTrigger.description)), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    className: "text-xs font-medium text-gray-700 dark:text-gray-300"
+  }, "Insert Variables"), /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-wrap gap-1.5"
+  }, availableVars.map((v) => /* @__PURE__ */ React.createElement("button", {
+    key: v,
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => insertVariable(v), "onClick"),
+    title: getVarHint(v),
+    className: "px-2 py-1 bg-gray-100 hover:bg-gray-200 dark:bg-gray-800 dark:hover:bg-gray-700 text-gray-700 dark:text-gray-300 rounded text-xs font-mono border border-gray-200 dark:border-gray-700 transition-colors"
+  }, `{{${v}}}`)))), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: "push-title",
+    className: "text-xs font-medium"
+  }, "Notification Title"), /* @__PURE__ */ React.createElement(Input, {
+    id: "push-title",
+    ref: subjectRef,
+    value: title,
+    onFocus: /* @__PURE__ */ __name(() => {
+      lastFocused.current = "subject";
+    }, "onFocus"),
+    onChange: /* @__PURE__ */ __name((e) => setTitle(e.target.value), "onChange"),
+    placeholder: defaults.subjectPlaceholder
+  })), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: "push-body",
+    className: "text-xs font-medium"
+  }, "Notification Body"), /* @__PURE__ */ React.createElement(Textarea, {
+    id: "push-body",
+    ref: bodyRef,
+    value: body,
+    onFocus: /* @__PURE__ */ __name(() => {
+      lastFocused.current = "body";
+    }, "onFocus"),
+    onChange: /* @__PURE__ */ __name((e) => setBody(e.target.value), "onChange"),
+    placeholder: defaults.bodyPlaceholder,
+    className: "h-36 font-mono text-xs"
+  }))) : /* @__PURE__ */ React.createElement("div", {
+    className: "p-12 text-center text-sm text-gray-500"
+  }, "Select a trigger from the left to configure push notification template."))));
+}
+var VAR_HINTS2;
+var init_pushTriggersBindingsPage = __esm({
+  "src/admin/pages/pushTriggersBindingsPage.tsx"() {
+    "use client";
+    init_button();
+    init_input();
+    init_textarea();
+    init_label();
+    init_order_notification_bindings_shared();
+    VAR_HINTS2 = {
+      orderId: "Internal order ID",
+      orderNumber: "Display order number",
+      customerName: "Customer full name",
+      customerPhone: "Customer phone",
+      eventName: "Event title / product name",
+      vendorName: "Vendor / store name",
+      total: "Order total amount",
+      currency: "Currency code (e.g. INR)",
+      vendorId: "Vendor / store ID",
+      refundAmount: "Refund amount (refund triggers)",
+      invoiceNumber: "Generated invoice number",
+      invoiceUrl: "Link to download invoice PDF"
+    };
+    __name(PushTriggerBindings, "PushTriggerBindings");
+  }
+});
+function PushConfigModal({ open, onOpenChange }) {
+  const [loading, setLoading] = React25.useState(false);
+  const [saving, setSaving] = React25.useState(false);
+  const [testing, setTesting] = React25.useState(false);
+  const [serviceAccountJson, setServiceAccountJson] = React25.useState("");
+  const [projectId, setProjectId] = React25.useState("");
+  const [clientEmail, setClientEmail] = React25.useState("");
+  const [privateKey, setPrivateKey] = React25.useState("");
+  const [isValidJson, setIsValidJson] = React25.useState(false);
+  const [testToken, setTestToken] = React25.useState("");
+  const [testTitle, setTestTitle] = React25.useState("Test Push Notification");
+  const [testBody, setTestBody] = React25.useState("Firebase Push Notification setup is working!");
+  React25.useEffect(() => {
+    if (!open) return;
+    let cancelled = false;
+    (async () => {
+      try {
+        setLoading(true);
+        const res = await fetch("/api/settings/push", {
+          cache: "no-store"
+        });
+        if (res.ok) {
+          const data = await res.json();
+          if (!cancelled && data) {
+            const rawJson = data.firebase_service_account_json || "";
+            setServiceAccountJson(rawJson);
+            if (rawJson.trim()) {
+              parseAndExtract(rawJson, false);
+            } else {
+              setProjectId(data.firebase_project_id || "");
+              setClientEmail(data.firebase_client_email || "");
+              setPrivateKey(data.firebase_private_key || "");
+            }
+          }
+        }
+      } catch {
+        sonner.toast.error("Failed to load push configuration");
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    open
+  ]);
+  const parseAndExtract = /* @__PURE__ */ __name((input, showToast = true) => {
+    if (!input.trim()) {
+      setIsValidJson(false);
+      return;
+    }
+    try {
+      const parsed = JSON.parse(input);
+      if (parsed.project_id) setProjectId(parsed.project_id);
+      if (parsed.client_email) setClientEmail(parsed.client_email);
+      if (parsed.private_key) setPrivateKey(parsed.private_key);
+      setIsValidJson(true);
+      if (showToast) {
+        sonner.toast.success("Valid Service Account JSON loaded");
+      }
+    } catch {
+      setIsValidJson(false);
+      if (showToast) {
+        sonner.toast.error("Invalid Service Account JSON format");
+      }
+    }
+  }, "parseAndExtract");
+  const handleJsonChange = /* @__PURE__ */ __name((val) => {
+    setServiceAccountJson(val);
+    if (val.trim()) {
+      parseAndExtract(val, false);
+    } else {
+      setIsValidJson(false);
+    }
+  }, "handleJsonChange");
+  const handleSaveConfig = /* @__PURE__ */ __name(async () => {
+    if (serviceAccountJson.trim() && !isValidJson) {
+      sonner.toast.error("Please enter a valid Firebase Service Account JSON file");
+      return;
+    }
+    setSaving(true);
+    try {
+      const res = await fetch("/api/settings/push", {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          firebase_service_account_json: {
+            value: serviceAccountJson.trim(),
+            type: "secret"
+          },
+          firebase_project_id: {
+            value: projectId.trim(),
+            type: "secret"
+          },
+          firebase_client_email: {
+            value: clientEmail.trim(),
+            type: "secret"
+          },
+          firebase_private_key: {
+            value: privateKey.trim(),
+            type: "secret"
+          }
+        })
+      });
+      if (!res.ok) {
+        sonner.toast.error("Failed to save push configuration");
+        return;
+      }
+      sonner.toast.success("Firebase Service Account JSON saved successfully");
+      onOpenChange(false);
+    } catch {
+      sonner.toast.error("Failed to save push configuration");
+    } finally {
+      setSaving(false);
+    }
+  }, "handleSaveConfig");
+  const handleSendTestPush = /* @__PURE__ */ __name(async () => {
+    if (!testToken.trim()) {
+      sonner.toast.error("Please enter a target FCM device token to test");
+      return;
+    }
+    setTesting(true);
+    try {
+      const res = await fetch("/api/settings/push/test", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          token: testToken.trim(),
+          title: testTitle.trim(),
+          body: testBody.trim()
+        })
+      });
+      const data = await res.json();
+      if (!res.ok || !data.success) {
+        sonner.toast.error(data.error || "Failed to send test push notification");
+        return;
+      }
+      sonner.toast.success("Test push notification sent successfully!");
+    } catch {
+      sonner.toast.error("Failed to send test push notification");
+    } finally {
+      setTesting(false);
+    }
+  }, "handleSendTestPush");
+  if (!open) return null;
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "fixed inset-0 z-50 flex items-center justify-center bg-black/50 p-4 backdrop-blur-sm animate-in fade-in duration-150"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "w-full max-w-2xl max-h-[90vh] overflow-y-auto rounded-xl bg-white p-6 shadow-2xl dark:bg-gray-900 border border-gray-200 dark:border-gray-800 space-y-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between border-b border-gray-200 pb-4 dark:border-gray-800"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Smartphone, {
+    className: "h-5 w-5 text-gray-800 dark:text-gray-200"
+  }), /* @__PURE__ */ React.createElement("h2", {
+    className: "text-lg font-semibold text-gray-900 dark:text-gray-100"
+  }, "Firebase Service Account JSON Configuration")), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => onOpenChange(false), "onClick"),
+    className: "text-gray-400 hover:text-gray-600 dark:hover:text-gray-300"
+  }, "\u2715")), loading ? /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-center py-12"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-6 w-6 animate-spin text-gray-500"
+  })) : /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-2"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: "service-account-json",
+    className: "text-xs font-semibold text-gray-800 dark:text-gray-200 flex items-center justify-between"
+  }, /* @__PURE__ */ React.createElement("span", {
+    className: "flex items-center gap-1.5"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.KeyRound, {
+    className: "h-4 w-4 text-blue-500"
+  }), "Firebase Service Account JSON File"), isValidJson && /* @__PURE__ */ React.createElement("span", {
+    className: "text-xs font-normal text-green-600 flex items-center gap-1"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.CheckCircle2, {
+    className: "h-3.5 w-3.5"
+  }), " Valid JSON")), /* @__PURE__ */ React.createElement(Textarea, {
+    id: "service-account-json",
+    value: serviceAccountJson,
+    onChange: /* @__PURE__ */ __name((e) => handleJsonChange(e.target.value), "onChange"),
+    placeholder: `Paste your entire service-account.json content here...
+{
+  "type": "service_account",
+  "project_id": "...",
+  "private_key": "...",
+  "client_email": "..."
+}`,
+    className: "h-44 font-mono text-xs border-gray-300 dark:border-gray-700"
+  })), isValidJson && /* @__PURE__ */ React.createElement("div", {
+    className: "rounded-lg border border-gray-200 bg-gray-50/50 p-4 dark:border-gray-800 dark:bg-gray-800/40 space-y-3"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    className: "text-xs font-semibold text-gray-700 dark:text-gray-300"
+  }, "Extracted Firebase Credentials Preview"), /* @__PURE__ */ React.createElement("div", {
+    className: "grid grid-cols-1 sm:grid-cols-2 gap-3 text-xs"
+  }, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("span", {
+    className: "font-medium text-gray-500"
+  }, "Project ID:"), /* @__PURE__ */ React.createElement("p", {
+    className: "font-mono text-gray-900 dark:text-gray-100 truncate"
+  }, projectId || "\u2014")), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("span", {
+    className: "font-medium text-gray-500"
+  }, "Client Email:"), /* @__PURE__ */ React.createElement("p", {
+    className: "font-mono text-gray-900 dark:text-gray-100 truncate"
+  }, clientEmail || "\u2014")))), /* @__PURE__ */ React.createElement("div", {
+    className: "rounded-lg border border-gray-200 bg-gray-50/50 p-4 dark:border-gray-800 dark:bg-gray-800/40 space-y-3"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    className: "text-xs font-semibold text-gray-800 dark:text-gray-200 flex items-center gap-1.5"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Send, {
+    className: "h-3.5 w-3.5 text-green-500"
+  }), "Test Push Notification (Target Device Token)"), /* @__PURE__ */ React.createElement("div", {
+    className: "grid grid-cols-1 sm:grid-cols-2 gap-2"
+  }, /* @__PURE__ */ React.createElement(Input, {
+    value: testTitle,
+    onChange: /* @__PURE__ */ __name((e) => setTestTitle(e.target.value), "onChange"),
+    placeholder: "Test Notification Title",
+    className: "text-xs"
+  }), /* @__PURE__ */ React.createElement(Input, {
+    value: testBody,
+    onChange: /* @__PURE__ */ __name((e) => setTestBody(e.target.value), "onChange"),
+    placeholder: "Test Notification Body",
+    className: "text-xs"
+  })), /* @__PURE__ */ React.createElement("div", {
+    className: "flex gap-2"
+  }, /* @__PURE__ */ React.createElement(Input, {
+    value: testToken,
+    onChange: /* @__PURE__ */ __name((e) => setTestToken(e.target.value), "onChange"),
+    placeholder: "Target FCM Device Token",
+    className: "text-xs font-mono"
+  }), /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    variant: "secondary",
+    size: "sm",
+    disabled: testing,
+    onClick: handleSendTestPush,
+    className: "shrink-0 gap-1.5"
+  }, testing ? /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-3.5 w-3.5 animate-spin"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Send, {
+    className: "h-3.5 w-3.5"
+  }), "Send Test"))), /* @__PURE__ */ React.createElement("div", {
+    className: "flex justify-end gap-2 border-t border-gray-200 pt-4 dark:border-gray-800"
+  }, /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    variant: "outline",
+    onClick: /* @__PURE__ */ __name(() => onOpenChange(false), "onClick")
+  }, "Cancel"), /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    disabled: saving,
+    onClick: handleSaveConfig,
+    className: "gap-1.5"
+  }, saving && /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-4 w-4 animate-spin"
+  }), "Save Service Account JSON")))));
+}
+var init_PushConfigModal = __esm({
+  "src/admin/components/PushConfigModal.tsx"() {
+    "use client";
+    init_button();
+    init_input();
+    init_textarea();
+    init_label();
+    __name(PushConfigModal, "PushConfigModal");
+  }
+});
 function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledChange, onSaveSettings, saving }) {
   const [mainTab, setMainTab] = React25.useState("email");
   const [audienceTab, setAudienceTab] = React25.useState("customer");
@@ -16310,6 +17542,10 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
   const [emailVendorEnabled, setEmailVendorEnabled] = React25.useState(true);
   const [emailAdminEnabled, setEmailAdminEnabled] = React25.useState(true);
   const [whatsappEnabled, setWhatsappEnabled] = React25.useState(true);
+  const [pushCustomerEnabled, setPushCustomerEnabled] = React25.useState(true);
+  const [pushVendorEnabled, setPushVendorEnabled] = React25.useState(true);
+  const [pushAdminEnabled, setPushAdminEnabled] = React25.useState(true);
+  const [showPushConfigModal, setShowPushConfigModal] = React25.useState(false);
   const [multiVendorOn, setMultiVendorOn] = React25.useState(true);
   const [loading, setLoading] = React25.useState(true);
   const [savingChannel, setSavingChannel] = React25.useState(false);
@@ -16340,6 +17576,9 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
             setEmailVendorEnabled(data.email_vendor_enabled !== "false" && data.email_vendor_enabled !== "0");
             setEmailAdminEnabled(data.email_admin_enabled !== "false" && data.email_admin_enabled !== "0");
             setWhatsappEnabled(data.whatsapp_enabled !== "false" && data.whatsapp_enabled !== "0");
+            setPushCustomerEnabled(data.push_customer_enabled !== "false" && data.push_customer_enabled !== "0");
+            setPushVendorEnabled(data.push_vendor_enabled !== "false" && data.push_vendor_enabled !== "0");
+            setPushAdminEnabled(data.push_admin_enabled !== "false" && data.push_admin_enabled !== "0");
           }
         }
       } catch {
@@ -16357,7 +17596,8 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
     setSavingChannel(true);
     try {
       const isAnyEmailEnabled = emailCustomerEnabled || emailVendorEnabled || emailAdminEnabled;
-      const isAnyChannelEnabled = isAnyEmailEnabled || whatsappEnabled;
+      const isAnyPushEnabled = pushCustomerEnabled || pushVendorEnabled || pushAdminEnabled;
+      const isAnyChannelEnabled = isAnyEmailEnabled || whatsappEnabled || isAnyPushEnabled;
       const res = await fetch(`/api/settings/${settingsGroup}`, {
         method: "PUT",
         headers: {
@@ -16384,6 +17624,22 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
             value: whatsappEnabled ? "true" : "false",
             type: "public"
           },
+          push_enabled: {
+            value: isAnyPushEnabled ? "true" : "false",
+            type: "public"
+          },
+          push_customer_enabled: {
+            value: pushCustomerEnabled ? "true" : "false",
+            type: "public"
+          },
+          push_vendor_enabled: {
+            value: pushVendorEnabled ? "true" : "false",
+            type: "public"
+          },
+          push_admin_enabled: {
+            value: pushAdminEnabled ? "true" : "false",
+            type: "public"
+          },
           enabled: {
             value: isAnyChannelEnabled ? "true" : "false",
             type: "public"
@@ -16405,7 +17661,10 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
   }, "handleSaveChannels");
   return /* @__PURE__ */ React.createElement("div", {
     className: "space-y-5"
-  }, /* @__PURE__ */ React.createElement("div", {
+  }, /* @__PURE__ */ React.createElement(PushConfigModal, {
+    open: showPushConfigModal,
+    onOpenChange: setShowPushConfigModal
+  }), /* @__PURE__ */ React.createElement("div", {
     className: "border-b border-gray-200 dark:border-gray-700"
   }, /* @__PURE__ */ React.createElement("div", {
     className: "flex gap-1"
@@ -16421,7 +17680,13 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
     className: `inline-flex items-center gap-2 px-4 py-2.5 text-sm font-medium border-b-2 ${mainTab === "whatsapp" ? "border-gray-800 text-gray-800 dark:border-gray-200 dark:text-gray-100" : "border-transparent text-gray-500 hover:text-gray-700"}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.MessageCircle, {
     className: "h-4 w-4"
-  }), "WhatsApp template"))), mainTab === "email" && /* @__PURE__ */ React.createElement("div", {
+  }), "WhatsApp template"), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => setMainTab("push"), "onClick"),
+    className: `inline-flex items-center gap-2 px-4 py-2.5 text-sm font-medium border-b-2 ${mainTab === "push" ? "border-gray-800 text-gray-800 dark:border-gray-200 dark:text-gray-100" : "border-transparent text-gray-500 hover:text-gray-700"}`
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Smartphone, {
+    className: "h-4 w-4"
+  }), "Mobile notification template"))), mainTab === "email" && /* @__PURE__ */ React.createElement("div", {
     className: "space-y-5"
   }, /* @__PURE__ */ React.createElement("div", {
     className: "flex rounded-md bg-gray-100 p-1 dark:bg-gray-800/60 w-fit"
@@ -16455,7 +17720,7 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
     className: "h-4 w-4 text-blue-600 dark:text-blue-400"
   }), "Enable Customer Email Notifications"), /* @__PURE__ */ React.createElement("p", {
     className: "text-xs text-gray-500 dark:text-gray-400"
-  }, "When enabled, order confirmations, tickets, and status updates are emailed to customers.")), /* @__PURE__ */ React.createElement(Switch, {
+  }, "When enabled, order updates, invoices, and ticket details are emailed to customers.")), /* @__PURE__ */ React.createElement(Switch, {
     id: "email-customer-notifications-enabled",
     checked: emailCustomerEnabled,
     onCheckedChange: setEmailCustomerEnabled,
@@ -16471,10 +17736,10 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
   }, /* @__PURE__ */ React.createElement("div", {
     className: "text-sm font-medium text-gray-900 dark:text-gray-100 flex items-center gap-2"
   }, /* @__PURE__ */ React.createElement(LucideIcons.Store, {
-    className: "h-4 w-4 text-purple-600 dark:text-purple-400"
+    className: "h-4 w-4 text-purple-600 dark:purple-400"
   }), "Enable Vendor Email Notifications"), /* @__PURE__ */ React.createElement("p", {
     className: "text-xs text-gray-500 dark:text-gray-400"
-  }, "When enabled, vendors are emailed automatically when order is placed/cancelled for their products.")), /* @__PURE__ */ React.createElement(Switch, {
+  }, "When enabled, vendors receive email notifications for new orders assigned to them.")), /* @__PURE__ */ React.createElement(Switch, {
     id: "email-vendor-notifications-enabled",
     checked: emailVendorEnabled,
     onCheckedChange: setEmailVendorEnabled,
@@ -16517,7 +17782,104 @@ function EventNotificationsPluginSettings({ settingsGroup, enabled, onEnabledCha
     checked: whatsappEnabled,
     onCheckedChange: setWhatsappEnabled,
     disabled: loading
-  })), /* @__PURE__ */ React.createElement(WhatsAppTriggerBindings, null)), /* @__PURE__ */ React.createElement(Button, {
+  })), /* @__PURE__ */ React.createElement(WhatsAppTriggerBindings, null)), mainTab === "push" && /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between gap-4 rounded-lg border border-blue-100 bg-blue-50/50 p-4 dark:border-blue-900/40 dark:bg-blue-950/20"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "text-sm font-semibold text-gray-900 dark:text-gray-100 flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Smartphone, {
+    className: "h-4 w-4 text-blue-600 dark:text-blue-400"
+  }), "Firebase Cloud Messaging (FCM) Setup"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 dark:text-gray-400"
+  }, "Set up your Firebase project credentials to send mobile push notifications to iOS and Android apps.")), /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    variant: "outline",
+    size: "sm",
+    onClick: /* @__PURE__ */ __name(() => setShowPushConfigModal(true), "onClick"),
+    className: "gap-1.5 bg-white dark:bg-gray-900 shrink-0"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Settings, {
+    className: "h-4 w-4 text-gray-600"
+  }), "Set Configuration")), /* @__PURE__ */ React.createElement("div", {
+    className: "flex rounded-md bg-gray-100 p-1 dark:bg-gray-800/60 w-fit"
+  }, /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => setAudienceTab("customer"), "onClick"),
+    className: `inline-flex items-center gap-1.5 rounded px-3 py-1.5 text-xs font-medium transition-all ${audienceTab === "customer" ? "bg-white text-gray-900 shadow-sm dark:bg-gray-900 dark:text-white" : "text-gray-600 hover:text-gray-900 dark:text-gray-400 dark:hover:text-white"}`
+  }, /* @__PURE__ */ React.createElement(LucideIcons.User, {
+    className: "h-3.5 w-3.5 text-blue-500"
+  }), "Customers"), multiVendorOn && /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => setAudienceTab("vendor"), "onClick"),
+    className: `inline-flex items-center gap-1.5 rounded px-3 py-1.5 text-xs font-medium transition-all ${audienceTab === "vendor" ? "bg-white text-gray-900 shadow-sm dark:bg-gray-900 dark:text-white" : "text-gray-600 hover:text-gray-900 dark:text-gray-400 dark:hover:text-white"}`
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Store, {
+    className: "h-3.5 w-3.5 text-purple-500"
+  }), "Vendors"), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: /* @__PURE__ */ __name(() => setAudienceTab("admin"), "onClick"),
+    className: `inline-flex items-center gap-1.5 rounded px-3 py-1.5 text-xs font-medium transition-all ${audienceTab === "admin" ? "bg-white text-gray-900 shadow-sm dark:bg-gray-900 dark:text-white" : "text-gray-600 hover:text-gray-900 dark:text-gray-400 dark:hover:text-white"}`
+  }, /* @__PURE__ */ React.createElement(LucideIcons.ShieldCheck, {
+    className: "h-3.5 w-3.5 text-amber-500"
+  }), "Admin")), audienceTab === "customer" && /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between gap-4 rounded-lg border border-gray-200 bg-gray-50/50 p-4 dark:border-gray-800 dark:bg-gray-900/50"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "text-sm font-medium text-gray-900 dark:text-gray-100 flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.User, {
+    className: "h-4 w-4 text-blue-600 dark:text-blue-400"
+  }), "Enable Customer Mobile Push Notifications"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 dark:text-gray-400"
+  }, "When enabled, order confirmation alerts and updates are pushed directly to customer mobile apps.")), /* @__PURE__ */ React.createElement(Switch, {
+    id: "push-customer-notifications-enabled",
+    checked: pushCustomerEnabled,
+    onCheckedChange: setPushCustomerEnabled,
+    disabled: loading
+  })), /* @__PURE__ */ React.createElement(PushTriggerBindings, {
+    audience: "customer"
+  })), audienceTab === "vendor" && multiVendorOn && /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between gap-4 rounded-lg border border-gray-200 bg-gray-50/50 p-4 dark:border-gray-800 dark:bg-gray-900/50"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "text-sm font-medium text-gray-900 dark:text-gray-100 flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Store, {
+    className: "h-4 w-4 text-purple-600 dark:text-purple-400"
+  }), "Enable Vendor Mobile Push Notifications"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 dark:text-gray-400"
+  }, "When enabled, vendor mobile app receives instant push alerts for assigned orders.")), /* @__PURE__ */ React.createElement(Switch, {
+    id: "push-vendor-notifications-enabled",
+    checked: pushVendorEnabled,
+    onCheckedChange: setPushVendorEnabled,
+    disabled: loading
+  })), /* @__PURE__ */ React.createElement(PushTriggerBindings, {
+    audience: "vendor"
+  })), audienceTab === "admin" && /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between gap-4 rounded-lg border border-gray-200 bg-gray-50/50 p-4 dark:border-gray-800 dark:bg-gray-900/50"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "text-sm font-medium text-gray-900 dark:text-gray-100 flex items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.ShieldCheck, {
+    className: "h-4 w-4 text-amber-600 dark:text-amber-400"
+  }), "Enable Admin Mobile Push Notifications"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 dark:text-gray-400"
+  }, "When enabled, store administrators receive mobile push alerts for all orders placed/cancelled.")), /* @__PURE__ */ React.createElement(Switch, {
+    id: "push-admin-notifications-enabled",
+    checked: pushAdminEnabled,
+    onCheckedChange: setPushAdminEnabled,
+    disabled: loading
+  })), /* @__PURE__ */ React.createElement(PushTriggerBindings, {
+    audience: "admin"
+  }))), /* @__PURE__ */ React.createElement(Button, {
     size: "sm",
     onClick: /* @__PURE__ */ __name(() => void handleSaveChannels(), "onClick"),
     disabled: saving || savingChannel || loading,
@@ -16533,9 +17895,207 @@ var init_EventNotificationsPluginSettings = __esm({
     init_switch();
     init_whatsappTriggerBindingsPage();
     init_emailTriggersBindingsPage();
+    init_pushTriggersBindingsPage();
+    init_PushConfigModal();
     __name(EventNotificationsPluginSettings, "EventNotificationsPluginSettings");
   }
 });
+function googleRedirectUri() {
+  if (typeof window === "undefined") {
+    const path2 = typeof process !== "undefined" && process.env.NEXT_PUBLIC_GOOGLE_OAUTH_CALLBACK_PATH?.trim() || "/api/auth/callback/google";
+    return path2.startsWith("http") ? path2 : path2;
+  }
+  const configured = process.env.NEXT_PUBLIC_GOOGLE_OAUTH_CALLBACK_PATH?.trim();
+  if (configured?.startsWith("http")) return configured;
+  const path = configured || "/api/auth/callback/google";
+  return `${window.location.origin}${path.startsWith("/") ? path : `/${path}`}`;
+}
+function AuthProvidersPluginSettings({ settingsGroup, onEnabledChange }) {
+  const [loading, setLoading] = React25.useState(true);
+  const [saving, setSaving] = React25.useState(false);
+  const [googleEnabled, setGoogleEnabled] = React25.useState(false);
+  const [googleClientId, setGoogleClientId] = React25.useState("");
+  const [googleClientSecret, setGoogleClientSecret] = React25.useState("");
+  const [hasSavedSecret, setHasSavedSecret] = React25.useState(false);
+  const [copied, setCopied] = React25.useState(false);
+  const onEnabledChangeRef = React25.useRef(onEnabledChange);
+  onEnabledChangeRef.current = onEnabledChange;
+  const redirectUri = React25.useMemo(() => googleRedirectUri(), []);
+  React25.useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      setLoading(true);
+      try {
+        const res = await fetch(`/api/settings/${settingsGroup}`, {
+          cache: "no-store"
+        });
+        const data = res.ok ? await res.json() : {};
+        if (cancelled) return;
+        const enabled = data.googleEnabled === "true" || data.googleEnabled === "1" || data.enabled === "true" && data.googleEnabled !== "false";
+        setGoogleEnabled(enabled);
+        setGoogleClientId(String(data.googleClientId ?? "").trim());
+        const secret = String(data.googleClientSecret ?? "").trim();
+        setGoogleClientSecret("");
+        setHasSavedSecret(Boolean(secret));
+      } catch {
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    settingsGroup
+  ]);
+  const handleCopyRedirect = /* @__PURE__ */ __name(async () => {
+    try {
+      await navigator.clipboard.writeText(redirectUri);
+      setCopied(true);
+      sonner.toast.success("Redirect URI copied");
+      setTimeout(() => setCopied(false), 2e3);
+    } catch {
+      sonner.toast.error("Could not copy redirect URI");
+    }
+  }, "handleCopyRedirect");
+  const handleSave = /* @__PURE__ */ __name(async () => {
+    setSaving(true);
+    try {
+      const payload = {
+        enabled: {
+          value: googleEnabled ? "true" : "false",
+          type: "public"
+        },
+        googleEnabled: {
+          value: googleEnabled ? "true" : "false",
+          type: "public"
+        },
+        googleClientId: {
+          value: googleClientId.trim(),
+          type: "private"
+        }
+      };
+      if (googleClientSecret.trim()) {
+        payload.googleClientSecret = {
+          value: googleClientSecret.trim(),
+          type: "private",
+          encrypted: true
+        };
+      }
+      const res = await fetch(`/api/settings/${settingsGroup}`, {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(payload)
+      });
+      if (!res.ok) {
+        sonner.toast.error("Failed to save Google auth settings");
+        return;
+      }
+      if (googleClientSecret.trim()) {
+        setHasSavedSecret(true);
+        setGoogleClientSecret("");
+      }
+      onEnabledChangeRef.current?.(googleEnabled);
+      sonner.toast.success("Authentication provider settings saved");
+    } catch {
+      sonner.toast.error("Failed to save Google auth settings");
+    } finally {
+      setSaving(false);
+    }
+  }, "handleSave");
+  if (loading) {
+    return /* @__PURE__ */ React.createElement("p", {
+      className: "text-sm text-gray-500 dark:text-gray-400"
+    }, "Loading\u2026");
+  }
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("h3", {
+    className: "text-sm font-semibold text-gray-900 dark:text-white"
+  }, "Google (Web)"), /* @__PURE__ */ React.createElement("p", {
+    className: "mt-1 text-xs text-gray-500 dark:text-gray-400"
+  }, "Create a Web OAuth client in Google Cloud Console, add the redirect URI below, then paste Client ID and Client Secret here. Only existing admin/vendor users (matching Google email) can sign in.")), /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between gap-2"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-googleEnabled`,
+    className: "text-sm"
+  }, "Enable Google sign-in"), /* @__PURE__ */ React.createElement(Switch, {
+    id: `${settingsGroup}-googleEnabled`,
+    checked: googleEnabled,
+    onCheckedChange: setGoogleEnabled
+  })), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-redirectUri`,
+    className: "text-sm"
+  }, "Redirect URI (add in Google Console)"), /* @__PURE__ */ React.createElement("div", {
+    className: "flex gap-2"
+  }, /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-redirectUri`,
+    value: redirectUri,
+    readOnly: true,
+    className: "h-9 flex-1 font-mono text-xs"
+  }), /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    size: "sm",
+    variant: "outline",
+    onClick: handleCopyRedirect,
+    className: "shrink-0 gap-1"
+  }, copied ? /* @__PURE__ */ React.createElement(LucideIcons.Check, {
+    className: "h-3.5 w-3.5"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Copy, {
+    className: "h-3.5 w-3.5"
+  }), copied ? "Copied" : "Copy")), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500 dark:text-gray-400"
+  }, "Must match ", /* @__PURE__ */ React.createElement("code", {
+    className: "text-[11px]"
+  }, "NEXTAUTH_URL"), " for this environment.")), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-googleClientId`,
+    className: "text-sm"
+  }, "Client ID"), /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-googleClientId`,
+    value: googleClientId,
+    onChange: /* @__PURE__ */ __name((e) => setGoogleClientId(e.target.value), "onChange"),
+    placeholder: "xxxxx.apps.googleusercontent.com",
+    className: "h-9 text-sm",
+    autoComplete: "off"
+  })), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-googleClientSecret`,
+    className: "text-sm"
+  }, "Client Secret ", hasSavedSecret && !googleClientSecret.trim() ? "(saved)" : ""), /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-googleClientSecret`,
+    type: "password",
+    value: googleClientSecret,
+    onChange: /* @__PURE__ */ __name((e) => setGoogleClientSecret(e.target.value), "onChange"),
+    placeholder: hasSavedSecret ? "Leave blank to keep saved secret" : "Paste client secret",
+    className: "h-9 text-sm",
+    autoComplete: "new-password"
+  })), /* @__PURE__ */ React.createElement(Button, {
+    size: "sm",
+    onClick: handleSave,
+    disabled: saving,
+    className: "gap-1"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Save, {
+    className: "h-3.5 w-3.5"
+  }), saving ? "Saving\u2026" : "Save"));
+}
+var init_AuthProvidersPluginSettings = __esm({
+  "src/admin/components/AuthProvidersPluginSettings.tsx"() {
+    "use client";
+    init_button();
+    init_input();
+    init_label();
+    init_switch();
+    __name(googleRedirectUri, "googleRedirectUri");
+    __name(AuthProvidersPluginSettings, "AuthProvidersPluginSettings");
+  }
+});
 
 // src/plugins/llm/chat-email-intent.ts
 function normalizeIntentKey(raw) {
@@ -16913,6 +18473,7 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
   const isEventNotifications = settingsGroup === "event_notifications";
   const isSocialMedia = settingsGroup === "social_media";
   const isMultiVendor = settingsGroup === "multi_vendor";
+  const isAuthProviders = settingsGroup === "auth_providers";
   const [enabled, setEnabled] = React25.useState(true);
   const [botName, setBotName] = React25.useState("");
   const [icon, setIcon] = React25.useState("");
@@ -17262,6 +18823,10 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
         setWhatsappPhoneNumberId(String(data.phoneNumberId ?? data.WHATSAPP_PHONE_NUMBER_ID ?? "").trim());
         setWhatsappWabaId(String(data.wabaId ?? data.WHATSAPP_WABA_ID ?? "").trim());
       }
+      if (isAuthProviders) {
+        const googleOn = data.googleEnabled === "true" || data.googleEnabled === "1" || data.enabled === "true" && data.googleEnabled !== "false";
+        setEnabled(googleOn);
+      }
       if (isSocialMedia) {
         const savedLiToken = String(data.linkedin_access_token ?? "").trim();
         setLinkedinAccessToken(savedLiToken);
@@ -17299,7 +18864,8 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
     isWhatsapp,
     isEventNotifications,
     isSocialMedia,
-    isMultiVendor
+    isMultiVendor,
+    isAuthProviders
   ]);
   React25.useEffect(() => {
     if (!isSocialMedia || loading || linkedInOrgsPrefetchedRef.current) return;
@@ -17745,6 +19311,18 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
         }
       };
     }
+    if (isAuthProviders) {
+      return {
+        enabled: {
+          value: enabled ? "true" : "false",
+          type: "public"
+        },
+        googleEnabled: {
+          value: enabled ? "true" : "false",
+          type: "public"
+        }
+      };
+    }
     if (isSocialMedia) {
       const payload2 = {
         enabled: {
@@ -18230,6 +19808,15 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
     sonner.toast.success("Removed from agent");
     await fetchAttachedKnowledge(slug);
   }, "handleUnlinkKbDoc");
+  if (isAuthProviders) {
+    return /* @__PURE__ */ React.createElement(AuthProvidersPluginSettings, {
+      settingsGroup,
+      onEnabledChange: /* @__PURE__ */ __name((value) => {
+        setEnabled(value);
+        onSaved?.();
+      }, "onEnabledChange")
+    });
+  }
   if (loading) return /* @__PURE__ */ React.createElement("div", {
     className: "text-sm text-gray-500 dark:text-gray-400"
   }, "Loading...");
@@ -19566,6 +21153,10 @@ function PluginsPage() {
       const en = pluginDescriptors.find((p) => p.name === "event_notifications");
       if (en) setSelectedName(en.name);
     }
+    if (q === "auth_providers" || q === "auth-providers" || q === "authentication") {
+      const ap = pluginDescriptors.find((p) => p.name === "auth_providers");
+      if (ap) setSelectedName(ap.name);
+    }
   }, [
     searchParams,
     pluginDescriptors
@@ -19573,10 +21164,13 @@ function PluginsPage() {
   React25.useEffect(() => {
     pluginDescriptors.forEach((p) => {
       if (!p.settingsGroup) return;
-      fetch(`/api/settings/${p.settingsGroup}`).then((r) => r.ok ? r.json() : {}).then((data) => setEnabledMap((prev) => ({
-        ...prev,
-        [p.name]: data.enabled !== "false"
-      }))).catch(() => {
+      fetch(`/api/settings/${p.settingsGroup}`).then((r) => r.ok ? r.json() : {}).then((data) => {
+        const on = p.settingsGroup === "auth_providers" ? data.googleEnabled === "true" || data.googleEnabled === "1" || data.enabled !== "false" && data.googleEnabled !== "false" && data.enabled === "true" : data.enabled !== "false";
+        setEnabledMap((prev) => ({
+          ...prev,
+          [p.name]: on
+        }));
+      }).catch(() => {
       });
     });
   }, [
@@ -19586,10 +21180,13 @@ function PluginsPage() {
   const refreshEnabled = /* @__PURE__ */ __name((name) => {
     const d = pluginDescriptors.find((p) => p.name === name);
     if (!d?.settingsGroup) return;
-    fetch(`/api/settings/${d.settingsGroup}`).then((r) => r.ok ? r.json() : {}).then((data) => setEnabledMap((prev) => ({
-      ...prev,
-      [name]: data.enabled !== "false"
-    }))).catch(() => {
+    fetch(`/api/settings/${d.settingsGroup}`).then((r) => r.ok ? r.json() : {}).then((data) => {
+      const on = d.settingsGroup === "auth_providers" ? data.googleEnabled === "true" || data.googleEnabled === "1" || data.enabled === "true" && data.googleEnabled !== "false" : data.enabled !== "false";
+      setEnabledMap((prev) => ({
+        ...prev,
+        [name]: on
+      }));
+    }).catch(() => {
     });
   }, "refreshEnabled");
   return /* @__PURE__ */ React.createElement("div", {
@@ -19671,6 +21268,7 @@ var init_PluginsPage = __esm({
     init_checkbox();
     init_select();
     init_EventNotificationsPluginSettings();
+    init_AuthProvidersPluginSettings();
     init_ImageOrUrlField();
     init_chat_email_intent();
     init_llm_agent_scope();
@@ -19689,7 +21287,8 @@ var init_PluginsPage = __esm({
       pg_boss: LucideIcons.CalendarClock,
       share: LucideIcons.Share2,
       whatsapp: LucideIcons.MessageCircle,
-      event_notifications: LucideIcons.Bell
+      event_notifications: LucideIcons.Bell,
+      auth_providers: LucideIcons.KeyRound
     };
     __name(normalizeSmsProviderChoice, "normalizeSmsProviderChoice");
     __name(normalizeMsg91ApiMode, "normalizeMsg91ApiMode");
@@ -19709,183 +21308,6 @@ var init_PluginsPage = __esm({
   }
 });
 
-// src/lib/vendor-role-defaults.ts
-function full() {
-  return {
-    canCreate: true,
-    canRead: true,
-    canUpdate: true,
-    canDelete: true
-  };
-}
-function read() {
-  return {
-    canCreate: false,
-    canRead: true,
-    canUpdate: false,
-    canDelete: false
-  };
-}
-function none() {
-  return {
-    canCreate: false,
-    canRead: false,
-    canUpdate: false,
-    canDelete: false
-  };
-}
-function readUpdate() {
-  return {
-    canCreate: false,
-    canRead: true,
-    canUpdate: true,
-    canDelete: false
-  };
-}
-function storePerms(spec) {
-  const resolve = /* @__PURE__ */ __name((v) => {
-    if (v === "full") return full();
-    if (v === "read") return read();
-    if (v === "none") return none();
-    return v;
-  }, "resolve");
-  const out = {};
-  for (const entity of STORE_ENTITIES) {
-    out[entity] = resolve(spec[entity] ?? "none");
-  }
-  return out;
-}
-var STORE_ENTITIES;
-var init_vendor_role_defaults = __esm({
-  "src/lib/vendor-role-defaults.ts"() {
-    init_vendor_scope();
-    [
-      ...VENDOR_STORE_RBAC_ENTITIES,
-      "dashboard",
-      "settings",
-      "team",
-      "roles"
-    ];
-    STORE_ENTITIES = [
-      ...VENDOR_STORE_RBAC_ENTITIES
-    ];
-    __name(full, "full");
-    __name(read, "read");
-    __name(none, "none");
-    __name(readUpdate, "readUpdate");
-    __name(storePerms, "storePerms");
-    [
-      {
-        name: "Owner",
-        description: "Full store access and team/role management",
-        isSystem: true,
-        isOwnerRole: true,
-        permissions: {
-          ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [
-            e,
-            "full"
-          ]))),
-          dashboard: read(),
-          settings: readUpdate(),
-          team: full(),
-          roles: full()
-        }
-      },
-      {
-        name: "Manager",
-        description: "Day-to-day store operations",
-        isSystem: true,
-        isOwnerRole: false,
-        permissions: {
-          ...storePerms({
-            products: "full",
-            collections: "full",
-            brands: "full",
-            product_categories: "full",
-            orders: "full",
-            vendor_customers: "full",
-            discounts: "full",
-            order_discounts: "full",
-            order_addresses: "full",
-            payments: "read",
-            taxes: "read",
-            attributes: "read"
-          }),
-          dashboard: read(),
-          settings: read(),
-          team: none(),
-          roles: none()
-        }
-      },
-      {
-        name: "Catalog Staff",
-        description: "Manage products and catalog content",
-        isSystem: true,
-        isOwnerRole: false,
-        permissions: {
-          ...storePerms({
-            products: "full",
-            collections: "full",
-            brands: "full",
-            product_categories: "full",
-            attributes: "full",
-            orders: "read",
-            vendor_customers: "read"
-          }),
-          dashboard: read(),
-          settings: none(),
-          team: none(),
-          roles: none()
-        }
-      },
-      {
-        name: "Fulfillment",
-        description: "Orders and fulfillment",
-        isSystem: true,
-        isOwnerRole: false,
-        permissions: {
-          ...storePerms({
-            products: "read",
-            orders: "full",
-            order_addresses: "full",
-            order_discounts: "read",
-            vendor_customers: "read"
-          }),
-          dashboard: read(),
-          settings: none(),
-          team: none(),
-          roles: none()
-        }
-      },
-      {
-        name: "Viewer",
-        description: "Read-only access to store data",
-        isSystem: true,
-        isOwnerRole: false,
-        permissions: {
-          ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [
-            e,
-            "read"
-          ]))),
-          dashboard: read(),
-          settings: none(),
-          team: none(),
-          roles: none()
-        }
-      }
-    ];
-  }
-});
-
-// src/auth/rbac-debug.ts
-var init_rbac_debug = __esm({
-  "src/auth/rbac-debug.ts"() {
-    init_permission_entities();
-    init_vendor_role_defaults();
-    init_vendor_scope();
-  }
-});
-
 // src/auth/helpers.ts
 function canManageRoles(user) {
   return !!(user?.email && user.isRBACAdmin);
@@ -20043,23 +21465,6 @@ function VendorRolesPage() {
       return next;
     });
   }, "setAllRows");
-  const toggleEntityRow = /* @__PURE__ */ __name((entity) => {
-    const isOwnerOnlyEntity = entity === "team" || entity === "roles";
-    setMatrix((prev) => {
-      const current = prev[entity];
-      const isAllChecked = current?.canRead && (isOwnerOnlyEntity || current.canCreate && current.canUpdate && current.canDelete);
-      return {
-        ...prev,
-        [entity]: {
-          entity,
-          canRead: !isAllChecked,
-          canCreate: isOwnerOnlyEntity ? false : !isAllChecked,
-          canUpdate: isOwnerOnlyEntity ? false : !isAllChecked,
-          canDelete: isOwnerOnlyEntity ? false : !isAllChecked
-        }
-      };
-    });
-  }, "toggleEntityRow");
   const saveMatrix = /* @__PURE__ */ __name(async () => {
     if (!selectedId) return;
     setSaving(true);
@@ -20162,9 +21567,7 @@ function VendorRolesPage() {
     className: "text-base font-semibold text-white"
   }, "Vendor Store Roles & Permissions"), /* @__PURE__ */ React25__namespace.default.createElement("p", {
     className: "mt-0.5 text-xs text-gray-300"
-  }, "Set CRUD permissions for any role (Viewer, Manager, Fulfillment, Catalog Staff, or custom roles). Permissions are stored in the ", /* @__PURE__ */ React25__namespace.default.createElement("code", {
-    className: "font-mono bg-gray-700 px-1 py-0.5 rounded text-gray-200"
-  }, "vendor_role_permissions"), " table and apply directly to team members assigned to that role.")), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+  }, "Set CRUD permissions for any role (Viewer, Manager, Fulfillment, Catalog Staff, or custom roles).")), /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "min-w-0 p-6"
   }, error ? /* @__PURE__ */ React25__namespace.default.createElement("p", {
     className: "mb-4 text-sm text-red-600 dark:text-red-400"
@@ -20255,31 +21658,35 @@ function VendorRolesPage() {
   }), " Clear All"))), /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "overflow-x-auto rounded-lg border border-gray-200 dark:border-gray-700"
   }, /* @__PURE__ */ React25__namespace.default.createElement("table", {
-    className: "min-w-full text-xs"
+    className: "min-w-full text-sm"
   }, /* @__PURE__ */ React25__namespace.default.createElement("thead", {
-    className: "bg-gray-100 text-left text-gray-700 dark:bg-gray-900 dark:text-gray-300"
-  }, /* @__PURE__ */ React25__namespace.default.createElement("tr", null, /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
-  }, "Entity"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
+    className: "bg-white dark:bg-gray-800"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("tr", {
+    className: "border-b border-gray-200 dark:border-gray-700"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("th", {
+    className: "px-3 py-2.5 text-left font-semibold text-gray-700 dark:text-gray-300"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
+    className: "flex items-center gap-2"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "Entity"))), /* @__PURE__ */ React25__namespace.default.createElement("th", {
+    className: "px-3 py-2.5 text-center font-semibold text-gray-700 dark:text-gray-300"
   }, "Create"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
+    className: "px-3 py-2.5 text-center font-semibold text-gray-700 dark:text-gray-300"
   }, "Read"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
+    className: "px-3 py-2.5 text-center font-semibold text-gray-700 dark:text-gray-300"
   }, "Update"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
-  }, "Delete"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium text-right"
-  }, "Row Actions"))), /* @__PURE__ */ React25__namespace.default.createElement("tbody", null, entities.map((entity) => {
+    className: "px-3 py-2.5 text-center font-semibold text-gray-700 dark:text-gray-300"
+  }, "Delete"))), /* @__PURE__ */ React25__namespace.default.createElement("tbody", null, entities.map((entity) => {
     const isOwnerOnlyEntity = entity === "team" || entity === "roles";
     return /* @__PURE__ */ React25__namespace.default.createElement("tr", {
       key: entity,
-      className: "border-t border-gray-100 dark:border-gray-700 hover:bg-gray-50/50 dark:hover:bg-gray-800/50"
+      className: "border-b border-gray-100 last:border-b-0 hover:bg-gray-50 dark:border-gray-700 dark:hover:bg-gray-800/50"
     }, /* @__PURE__ */ React25__namespace.default.createElement("td", {
-      className: "px-3 py-2 font-mono text-gray-800 dark:text-gray-200 font-medium"
-    }, entity, isOwnerOnlyEntity && /* @__PURE__ */ React25__namespace.default.createElement("span", {
-      className: "ml-2 text-[10px] text-amber-600 dark:text-amber-400 font-normal"
-    }, "(Owner managed)")), [
+      className: "px-3 py-2.5 font-mono text-sm text-gray-800 dark:text-gray-200"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
+      className: "flex items-center gap-2"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, entity), isOwnerOnlyEntity && /* @__PURE__ */ React25__namespace.default.createElement("span", {
+      className: "text-[10px] text-amber-600 dark:text-amber-400"
+    }, "(Owner managed)"))), [
       "canCreate",
       "canRead",
       "canUpdate",
@@ -20288,21 +21695,15 @@ function VendorRolesPage() {
       const disabled = isOwnerOnlyEntity && key !== "canRead";
       return /* @__PURE__ */ React25__namespace.default.createElement("td", {
         key,
-        className: "px-3 py-2"
+        className: "px-3 py-2.5 text-center"
       }, /* @__PURE__ */ React25__namespace.default.createElement("input", {
         type: "checkbox",
         checked: disabled ? false : !!matrix[entity]?.[key],
         disabled,
         onChange: /* @__PURE__ */ __name(() => toggle(entity, key), "onChange"),
-        className: disabled ? "cursor-not-allowed opacity-40" : "cursor-pointer"
+        className: disabled ? "h-4 w-4 cursor-not-allowed opacity-40" : "h-4 w-4 cursor-pointer"
       }));
-    }), /* @__PURE__ */ React25__namespace.default.createElement("td", {
-      className: "px-3 py-2 text-right"
-    }, /* @__PURE__ */ React25__namespace.default.createElement("button", {
-      type: "button",
-      onClick: /* @__PURE__ */ __name(() => toggleEntityRow(entity), "onClick"),
-      className: "text-[11px] text-blue-600 hover:underline dark:text-blue-400"
-    }, "Toggle")));
+    }));
   })))))))), /* @__PURE__ */ React25__namespace.default.createElement(Dialog, {
     open: deleteOpen,
     onOpenChange: setDeleteOpen
@@ -20663,7 +22064,7 @@ function PlatformRolesPage() {
     className: "p-2"
   }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "flex items-center justify-center gap-1"
-  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "C"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
+  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "Create"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
     type: "checkbox",
     checked: isColumnAllChecked("canCreate"),
     onChange: /* @__PURE__ */ __name(() => toggleColumn("canCreate"), "onChange")
@@ -20671,7 +22072,7 @@ function PlatformRolesPage() {
     className: "p-2"
   }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "flex items-center justify-center gap-1"
-  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "R"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
+  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "Read"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
     type: "checkbox",
     checked: isColumnAllChecked("canRead"),
     onChange: /* @__PURE__ */ __name(() => toggleColumn("canRead"), "onChange")
@@ -20679,7 +22080,7 @@ function PlatformRolesPage() {
     className: "p-2"
   }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "flex items-center justify-center gap-1"
-  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "U"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
+  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "Update"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
     type: "checkbox",
     checked: isColumnAllChecked("canUpdate"),
     onChange: /* @__PURE__ */ __name(() => toggleColumn("canUpdate"), "onChange")
@@ -20687,7 +22088,7 @@ function PlatformRolesPage() {
     className: "p-2"
   }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
     className: "flex items-center justify-center gap-1"
-  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "D"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
+  }, /* @__PURE__ */ React25__namespace.default.createElement("span", null, "Delete"), /* @__PURE__ */ React25__namespace.default.createElement("input", {
     type: "checkbox",
     checked: isColumnAllChecked("canDelete"),
     onChange: /* @__PURE__ */ __name(() => toggleColumn("canDelete"), "onChange")
@@ -21180,39 +22581,90 @@ var init_VendorTeamPage = __esm({
     __name(VendorTeamPage, "VendorTeamPage");
   }
 });
-
-// src/lib/vendor-profile.ts
-function validateIndiaTaxIds(gstin, pan) {
-  if (gstin && !/^[0-9]{2}[A-Z]{5}[0-9]{4}[A-Z][1-9A-Z]Z[0-9A-Z]$/i.test(gstin)) {
-    return "Invalid GSTIN format (15 characters, e.g. 22AAAAA0000A1Z5)";
+function splitPhoneAndCountryCode(rawPhone, defaultCode = "+91") {
+  if (!rawPhone || !rawPhone.trim()) {
+    return {
+      countryCode: defaultCode,
+      phoneNumber: ""
+    };
+  }
+  const trimmed = rawPhone.trim();
+  const match = COUNTRY_PHONE_CODES.find((c) => trimmed.startsWith(c.code));
+  if (match) {
+    return {
+      countryCode: match.code,
+      phoneNumber: trimmed.slice(match.code.length).replace(/\s+/g, "")
+    };
+  }
+  if (trimmed.startsWith("+")) {
+    const spaceIdx = trimmed.indexOf(" ");
+    if (spaceIdx > 0) {
+      return {
+        countryCode: trimmed.slice(0, spaceIdx),
+        phoneNumber: trimmed.slice(spaceIdx + 1).replace(/\s+/g, "")
+      };
+    }
+  }
+  return {
+    countryCode: defaultCode,
+    phoneNumber: trimmed.replace(/\D/g, "")
+  };
+}
+function formatPhoneWithCountryCode(countryCode, phoneNumber) {
+  const cleanNum = phoneNumber.replace(/\D/g, "");
+  if (!cleanNum) return null;
+  const cleanCode = countryCode.trim() || "+91";
+  return `${cleanCode}${cleanNum}`;
+}
+function validateGstin(gstin, options) {
+  const required = options?.required === true;
+  if (!gstin || !gstin.trim()) {
+    if (required) return "GSTIN number is required";
+    return null;
   }
-  if (pan && !/^[A-Z]{5}[0-9]{4}[A-Z]$/i.test(pan)) {
+  if (!/^[0-9]{2}[A-Z]{5}[0-9]{4}[A-Z][1-9A-Z]Z[0-9A-Z]$/i.test(gstin.trim())) {
+    return "Invalid GSTIN number (15 characters, e.g. 22AAAAA0000A1Z5)";
+  }
+  return null;
+}
+function validateIndiaTaxIds(gstin, pan, options) {
+  const gstinErr = validateGstin(gstin, {
+    required: options?.requiredGstin
+  });
+  if (gstinErr) return gstinErr;
+  if (options?.requiredPan && (!pan || !pan.trim())) {
+    return "PAN is required";
+  }
+  if (pan && !/^[A-Z]{5}[0-9]{4}[A-Z]$/i.test(pan.trim())) {
     return "Invalid PAN format (e.g. ABCDE1234F)";
   }
   return null;
 }
 function validateAadhaar(aadhaar) {
   if (!aadhaar) return null;
-  if (!/^[0-9]{12}$/.test(aadhaar)) {
+  if (!/^[0-9]{12}$/.test(aadhaar.replace(/\s+/g, ""))) {
     return "Invalid Aadhaar number (12 digits)";
   }
   return null;
 }
 function validatePersonKyc(person, options) {
   const required = options?.required === true;
-  if (required && !person.aadhaarNo) return "Aadhaar number is required";
-  if (required && !person.panNo) return "PAN is required";
+  if (required && (!person.aadhaarNo || !person.aadhaarNo.trim())) return "Aadhaar number is required";
+  if (required && (!person.panNo || !person.panNo.trim())) return "PAN is required";
   const aadhaarErr = validateAadhaar(person.aadhaarNo ?? null);
   if (aadhaarErr) return aadhaarErr;
-  const panErr = validateIndiaTaxIds(null, person.panNo ?? null);
+  const panErr = validateIndiaTaxIds(null, person.panNo ?? null, {
+    requiredPan: required
+  });
   if (panErr) return panErr;
   return null;
 }
 function readOwnerDesignation(metadata) {
-  const v = metadata?.ownerDesignation;
-  return typeof v === "string" ? v : "";
+  if (!metadata || typeof metadata !== "object") return "";
+  const d = metadata.ownerDesignation;
+  return typeof d === "string" ? d.trim() : "";
 }
-var VENDOR_REGISTRATION_STATUSES, VENDOR_BUSINESS_TYPES;
+var VENDOR_REGISTRATION_STATUSES, VENDOR_BUSINESS_TYPES, COUNTRY_PHONE_CODES;
 var init_vendor_profile = __esm({
   "src/lib/vendor-profile.ts"() {
     VENDOR_REGISTRATION_STATUSES = [
@@ -21259,7 +22711,34 @@ var init_vendor_profile = __esm({
         label: "Other"
       }
     ];
+    COUNTRY_PHONE_CODES = (() => {
+      const list = [];
+      const seenCodes = /* @__PURE__ */ new Set();
+      for (const c of countryStateCity.Country.getAllCountries()) {
+        if (!c.phonecode) continue;
+        const rawCode = c.phonecode.replace(/^\+/, "").trim();
+        if (!rawCode) continue;
+        const code = `+${rawCode}`;
+        const key = `${code}-${c.name}`;
+        if (seenCodes.has(key)) continue;
+        seenCodes.add(key);
+        list.push({
+          code,
+          country: c.name,
+          isoCode: c.isoCode,
+          label: `${code} (${c.name})`
+        });
+      }
+      return list.sort((a, b) => {
+        if (a.code === "+91" && b.code !== "+91") return -1;
+        if (b.code === "+91" && a.code !== "+91") return 1;
+        return a.country.localeCompare(b.country);
+      });
+    })();
+    __name(splitPhoneAndCountryCode, "splitPhoneAndCountryCode");
+    __name(formatPhoneWithCountryCode, "formatPhoneWithCountryCode");
     new Set(VENDOR_REGISTRATION_STATUSES.map((s) => s.value));
+    __name(validateGstin, "validateGstin");
     __name(validateIndiaTaxIds, "validateIndiaTaxIds");
     __name(validateAadhaar, "validateAadhaar");
     __name(validatePersonKyc, "validatePersonKyc");
@@ -21862,10 +23341,26 @@ function SubmissionDetailPage({ submissionId }) {
   }
   const formName = submission.form?.name ?? `Form #${submission.formId}`;
   const contact = submission.contact;
-  const fieldLabel = /* @__PURE__ */ __name((key) => {
-    const field = submission.form?.fields?.find((f) => String(f.id) === key);
-    return field?.label ?? key;
-  }, "fieldLabel");
+  const resolveFieldLabel = /* @__PURE__ */ __name((key) => {
+    if (!key) return "\u2014";
+    const rawKey = key.trim();
+    const numericIdMatch = rawKey.match(/^(?:field_)?(\d+)$/i);
+    const fieldIdStr = numericIdMatch ? numericIdMatch[1] : null;
+    const fields = submission?.form?.fields ?? [];
+    const field = fields.find((f) => fieldIdStr !== null && String(f.id) === fieldIdStr || String(f.id) === rawKey || f.name && f.name.trim().toLowerCase() === rawKey.toLowerCase() || f.label && f.label.trim().toLowerCase() === rawKey.toLowerCase());
+    if (field) {
+      if (field.label && field.label.trim() && !/^\d+$/.test(field.label.trim())) {
+        return field.label.trim();
+      }
+      if (field.name && field.name.trim() && !/^\d+$/.test(field.name.trim())) {
+        return field.name.trim().replace(/_/g, " ").replace(/([a-z])([A-Z])/g, "$1 $2").replace(/\b\w/g, (c) => c.toUpperCase());
+      }
+    }
+    if (fieldIdStr !== null) {
+      return `Field #${fieldIdStr}`;
+    }
+    return rawKey.replace(/_/g, " ").replace(/([a-z])([A-Z])/g, "$1 $2").replace(/\b\w/g, (c) => c.toUpperCase());
+  }, "resolveFieldLabel");
   return /* @__PURE__ */ React.createElement("div", {
     className: "rounded-lg bg-white shadow-md"
   }, /* @__PURE__ */ React.createElement(DetailPageHeader, {
@@ -21924,7 +23419,7 @@ function SubmissionDetailPage({ submissionId }) {
     key
   }, /* @__PURE__ */ React.createElement("td", {
     className: "py-2 px-3 text-gray-600 font-medium"
-  }, fieldLabel(key)), /* @__PURE__ */ React.createElement("td", {
+  }, resolveFieldLabel(key)), /* @__PURE__ */ React.createElement("td", {
     className: "py-2 px-3 text-gray-900 break-words min-w-0"
   }, value === null || value === void 0 ? "\u2014" : typeof value === "object" ? JSON.stringify(value) : String(value)))))))), /* @__PURE__ */ React.createElement("section", null, /* @__PURE__ */ React.createElement("h2", {
     className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
@@ -23579,7 +25074,7 @@ function OrderPlacementPage({ editOrderId }) {
     productQuery
   ]);
   const recalcPreview = React25.useCallback(async () => {
-    const orderLines = lines.filter((l) => !rewardProductIds.current.has(l.productId)).map((l) => ({
+    const orderLines = lines.filter((l) => !l.key.startsWith("reward-")).map((l) => ({
       productId: l.productId,
       quantity: l.quantity
     }));
@@ -23603,19 +25098,22 @@ function OrderPlacementPage({ editOrderId }) {
         body: JSON.stringify({
           orderLines,
           currency,
-          discountId: coupons[0]?.discountId ?? null
+          discountId: coupons[0]?.discountId ?? null,
+          discountIds: coupons.map((c) => c.discountId)
         })
       });
       if (!res.ok) throw new Error("Calculate failed");
       const data = await res.json();
       const correctedLines = data.lines.map((cl) => {
         if (cl.productId == null) return cl;
-        const cached = productCache.current.get(cl.productId);
+        const pid = Number(cl.productId);
+        const cached = productCache.current.get(pid);
         if (!cl.found && cached) {
-          const unitPrice2 = cached.price;
+          const unitPrice2 = Number(cached.price ?? 0);
           const subtotal3 = unitPrice2 * cl.quantity;
           return {
             ...cl,
+            productId: pid,
             found: true,
             unitPrice: unitPrice2,
             subtotal: subtotal3,
@@ -23623,15 +25121,16 @@ function OrderPlacementPage({ editOrderId }) {
             total: subtotal3
           };
         }
-        const unitPrice = cached?.price ?? cl.unitPrice;
+        const unitPrice = Number(cached?.price ?? cl.unitPrice ?? 0);
         const subtotal2 = unitPrice * cl.quantity;
-        const taxRate = cl.taxRate ?? (cl.subtotal > 0 && cl.tax > 0 ? cl.tax / cl.subtotal : 0);
-        const lineDiscount = cl.subtotal > 0 && subtotal2 > 0 ? cl.discount ?? 0 : 0;
+        const taxRate = Number(cl.taxRate ?? (cl.subtotal > 0 && cl.tax > 0 ? cl.tax / cl.subtotal * 100 : 0));
+        const lineDiscount = Number(cl.discount ?? 0);
         const discountedBase = Math.max(0, subtotal2 - lineDiscount);
         const tax2 = discountedBase * taxRate / 100;
         const total2 = discountedBase + tax2;
         return {
           ...cl,
+          productId: pid,
           unitPrice,
           subtotal: subtotal2,
           taxRate,
@@ -23639,13 +25138,14 @@ function OrderPlacementPage({ editOrderId }) {
           total: total2
         };
       });
-      const rewardDisplayLines = lines.filter((l) => rewardProductIds.current.has(l.productId)).map((l) => {
-        const cached = productCache.current.get(l.productId);
+      const rewardDisplayLines = lines.filter((l) => l.key.startsWith("reward-")).map((l) => {
+        const pid = Number(l.productId);
+        const cached = productCache.current.get(pid);
         return {
-          productId: l.productId,
+          productId: pid,
           productName: l.label,
           found: true,
-          unitPrice: cached?.price ?? 0,
+          unitPrice: Number(cached?.price ?? 0),
           quantity: l.quantity,
           subtotal: 0,
           tax: 0,
@@ -23687,7 +25187,7 @@ function OrderPlacementPage({ editOrderId }) {
   React25.useEffect(() => {
     const automaticCoupons = coupons.filter((c) => c.isAutomatic);
     if (automaticCoupons.length === 0) return;
-    const nonRewardLines = lines.filter((l) => !rewardProductIds.current.has(l.productId));
+    const nonRewardLines = lines.filter((l) => !l.key.startsWith("reward-"));
     if (nonRewardLines.length === 0) {
       const autoIds = new Set(automaticCoupons.map((c) => c.discountId));
       const rewardPids = new Set(automaticCoupons.flatMap((c) => c.rewardLines.map((r) => r.productId)));
@@ -23767,7 +25267,7 @@ function OrderPlacementPage({ editOrderId }) {
       cancelled = true;
     };
   }, [
-    lines.filter((l) => !rewardProductIds.current.has(l.productId)).map((l) => `${l.productId}:${l.quantity}`).join(","),
+    lines.filter((l) => !l.key.startsWith("reward-")).map((l) => `${l.productId}:${l.quantity}`).join(","),
     coupons.filter((c) => c.isAutomatic).map((c) => c.discountId).join(",")
   ]);
   function handleRemoveCoupon(couponCode) {
@@ -23889,7 +25389,10 @@ function OrderPlacementPage({ editOrderId }) {
   const calcByProductId = React25.useMemo(() => {
     const m = /* @__PURE__ */ new Map();
     for (const l of preview?.lines ?? []) {
-      if (l.productId != null && l.found) m.set(l.productId, l);
+      if (l.productId != null && l.found) {
+        const pid = Number(l.productId);
+        if (Number.isFinite(pid)) m.set(pid, l);
+      }
     }
     return m;
   }, [
@@ -23911,13 +25414,13 @@ function OrderPlacementPage({ editOrderId }) {
     }
     const unknown = preview?.lines.filter((l) => !l.found) ?? [];
     if (unknown.length > 0) {
-      sonner.toast.error("Some products are missing or unavailable. Remove invalid lines and try again.");
+      sonner.toast.error(`One or more items could not be validated: ${unknown.map((u) => u.productName).join(", ")}`);
       return;
     }
     setSubmitting(true);
+    let resolvedContactId = effectiveContactId;
     try {
-      let resolvedContactId = placeForSomeoneElse ? subContactId : null;
-      if (!resolvedContactId && effectiveEmail) {
+      if (resolvedContactId == null && effectiveEmail) {
         try {
           const res2 = await fetch(`/api/contacts?search=${encodeURIComponent(effectiveEmail)}&limit=1`);
           if (res2.ok) {
@@ -23939,12 +25442,12 @@ function OrderPlacementPage({ editOrderId }) {
         billingAddress,
         shippingAddress: sameAsBilling ? billingAddress : shippingAddress,
         orderLines: lines.map((l) => {
-          const isReward = rewardProductIds.current.has(l.productId);
-          const calc = preview?.lines.find((pl) => pl.productId === l.productId);
+          const isReward = l.key.startsWith("reward-");
+          const calc = preview?.lines.find((pl) => Number(pl.productId) === Number(l.productId));
           return {
             productId: l.productId,
             quantity: l.quantity,
-            unitPrice: isReward ? 0 : calc?.unitPrice ?? productCache.current.get(l.productId)?.price ?? 0
+            unitPrice: isReward ? 0 : calc?.unitPrice ?? Number(productCache.current.get(l.productId)?.price ?? 0)
           };
         })
       };
@@ -28920,8 +30423,8 @@ function ProductEditPage({ productId }) {
   const [price, setPrice] = React25.useState(0);
   const [defaultPriceStr, setDefaultPriceStr] = React25.useState("");
   const [pricingConfig, setPricingConfig] = React25.useState(DEFAULT_PRICING_CONFIG);
-  const [compareAtPrice, setCompareAtPrice] = React25.useState(0);
-  const [quantity, setQuantity] = React25.useState(1);
+  const [compareAtPrice, setCompareAtPrice] = React25.useState("");
+  const [quantity, setQuantity] = React25.useState("1");
   const [status, setStatus] = React25.useState("draft");
   const [approvalStatus, setApprovalStatus] = React25.useState("pending");
   const [rejectionReason, setRejectionReason] = React25.useState("");
@@ -29142,8 +30645,8 @@ function ProductEditPage({ productId }) {
         setDefaultPriceStr(product.price != null && Number.isFinite(Number(product.price)) ? String(product.price) : "");
         setPrice(product.price != null ? Number(product.price) : 0);
         const rawCompare = product.compareAtPrice != null ? Number(product.compareAtPrice) : 0;
-        setCompareAtPrice(Number.isFinite(rawCompare) ? rawCompare : 0);
-        setQuantity(product.quantity ?? 1);
+        setCompareAtPrice(rawCompare != null && Number.isFinite(rawCompare) ? String(rawCompare) : "");
+        setQuantity(product.quantity != null ? String(product.quantity) : "1");
         setStatus(product.status ?? "draft");
         setApprovalStatus(typeof product.approvalStatus === "string" && product.approvalStatus ? product.approvalStatus : "pending");
         setRejectionReason(typeof product.rejectionReason === "string" ? product.rejectionReason : "");
@@ -29310,22 +30813,6 @@ function ProductEditPage({ productId }) {
       return pricingConfig.defaultCurrency || "INR";
     }
   })();
-  const handleNumberChange = /* @__PURE__ */ __name((setter, options) => (e) => {
-    const value = e.target.value;
-    if (value === "") {
-      setter(0);
-      return;
-    }
-    let num = options?.integer ? Number.parseInt(value, 10) : Number(value);
-    if (Number.isNaN(num)) {
-      setter(0);
-      return;
-    }
-    if (options?.min !== void 0) {
-      num = Math.max(options.min, num);
-    }
-    setter(num);
-  }, "handleNumberChange");
   const openRejectModal = /* @__PURE__ */ __name((fromStatus) => {
     approvalBeforeRejectRef.current = fromStatus === "rejected" ? "pending" : fromStatus;
     setRejectDraft(rejectionReason);
@@ -29398,12 +30885,13 @@ function ProductEditPage({ productId }) {
         return;
       }
     }
-    const quantityErrors = validateProductQuantity(quantity, hasVariants, parsedVariants);
+    const quantityValue = quantity === "" ? 0 : Number(quantity);
+    const quantityErrors = validateProductQuantity(quantityValue, hasVariants, parsedVariants);
     if (quantityErrors.length) {
       setErrors(quantityErrors);
       return;
     }
-    const resolvedQuantity = hasVariants ? productQuantityFromVariants(parsedVariants) : quantity;
+    const resolvedQuantity = hasVariants ? productQuantityFromVariants(parsedVariants) : quantityValue;
     setSaving(true);
     try {
       const compareAtPriceValue = compareAtPrice ? Math.round(Number(compareAtPrice) * 100) / 100 : null;
@@ -30017,9 +31505,8 @@ function ProductEditPage({ productId }) {
       type: "number",
       value: compareAtPrice,
       className: inputCls3,
-      onChange: handleNumberChange(setCompareAtPrice, {
-        min: 0
-      })
+      min: 0,
+      onChange: /* @__PURE__ */ __name((e) => setCompareAtPrice(e.target.value), "onChange")
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: labelCls3
     }, "Contact form"), /* @__PURE__ */ React.createElement("select", {
@@ -30042,10 +31529,7 @@ function ProductEditPage({ productId }) {
       min: 0,
       step: 1,
       value: hasVariants ? productQuantityFromVariants(variantsFromForm(variantRows, pricingConfig.defaultCurrency)) : quantity,
-      onChange: handleNumberChange(setQuantity, {
-        min: 0,
-        integer: true
-      }),
+      onChange: /* @__PURE__ */ __name((e) => setQuantity(e.target.value), "onChange"),
       className: `${inputCls3}${hasVariants ? " bg-gray-100" : ""}`,
       required: !hasVariants,
       readOnly: hasVariants,
@@ -30122,8 +31606,18 @@ function ProductEditPage({ productId }) {
         value: row.taxId === "" ? "" : String(row.taxId),
         onChange: /* @__PURE__ */ __name((e) => {
           const v = e.target.value;
+          if (v === "") {
+            setTaxRow(i, {
+              taxId: "",
+              rate: ""
+            });
+            return;
+          }
+          const taxId = Number(v);
+          const selectedTax = taxMasterList.find((t) => t.id === taxId);
           setTaxRow(i, {
-            taxId: v === "" ? "" : Number(v)
+            taxId,
+            rate: selectedTax?.rate != null ? String(selectedTax.rate) : ""
           });
         }, "onChange"),
         className: inputCls3
@@ -31948,6 +33442,35 @@ function EventEditPage({ eventId }) {
   const [saving, setSaving] = React25.useState(false);
   const [errors, setErrors] = React25.useState([]);
   const [activeTab, setActiveTab] = React25.useState("basic");
+  const eventTabs = [
+    {
+      key: "basic",
+      label: "Basic info"
+    },
+    {
+      key: "venue",
+      label: "Venue"
+    },
+    {
+      key: "datetime",
+      label: "Date & time"
+    },
+    {
+      key: "settings",
+      label: "Settings"
+    }
+  ];
+  const activeTabIndex = eventTabs.findIndex((tab) => tab.key === activeTab);
+  const goToPreviousTab = /* @__PURE__ */ __name(() => {
+    if (activeTabIndex > 0) {
+      setActiveTab(eventTabs[activeTabIndex - 1].key);
+    }
+  }, "goToPreviousTab");
+  const goToNextTab = /* @__PURE__ */ __name(() => {
+    if (activeTabIndex < eventTabs.length - 1) {
+      setActiveTab(eventTabs[activeTabIndex + 1].key);
+    }
+  }, "goToNextTab");
   const [name, setName] = React25.useState("");
   const [slug, setSlug] = React25.useState("");
   const [description, setDescription] = React25.useState("");
@@ -32767,7 +34290,19 @@ function EventEditPage({ eventId }) {
         [key]: value
       })), "onChange")
     }))))
-  }), showEventProducts ? /* @__PURE__ */ React.createElement("div", {
+  }), /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between border-t border-gray-200 px-4 py-4 sm:px-6"
+  }, /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: goToPreviousTab,
+    disabled: activeTabIndex === 0,
+    className: "rounded-md border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-700 hover:bg-gray-50 disabled:cursor-not-allowed disabled:opacity-40"
+  }, "Previous"), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    onClick: goToNextTab,
+    disabled: activeTabIndex === eventTabs.length - 1,
+    className: "rounded-md bg-gray-900 px-4 py-2 text-sm font-medium text-white hover:bg-gray-800 disabled:cursor-not-allowed disabled:opacity-40"
+  }, "Next")), showEventProducts ? /* @__PURE__ */ React.createElement("div", {
     className: "border-t border-gray-200 px-4 py-4 sm:px-6"
   }, /* @__PURE__ */ React.createElement(EventProductsSection, {
     eventId: eventRecordId,
@@ -33112,6 +34647,18 @@ function ComboEditPage({ comboId }) {
       ]);
       return;
     }
+    if (!startsAt) {
+      setErrors([
+        "Starts at is required"
+      ]);
+      return;
+    }
+    if (!endsAt) {
+      setErrors([
+        "Ends at is required"
+      ]);
+      return;
+    }
     if (!priceStr.trim()) {
       setErrors([
         `Price (${defaultCurrency}) is required`
@@ -33401,18 +34948,20 @@ function ComboEditPage({ comboId }) {
       className: "grid grid-cols-2 gap-4"
     }, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: "block text-xs font-medium text-gray-600 mb-1"
-    }, "Starts at"), /* @__PURE__ */ React.createElement("input", {
+    }, "Starts at *"), /* @__PURE__ */ React.createElement("input", {
       type: "datetime-local",
       value: startsAt,
       onChange: /* @__PURE__ */ __name((e) => setStartsAt(e.target.value), "onChange"),
-      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
+      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm",
+      required: true
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: "block text-xs font-medium text-gray-600 mb-1"
-    }, "Ends at"), /* @__PURE__ */ React.createElement("input", {
+    }, "Ends at *"), /* @__PURE__ */ React.createElement("input", {
       type: "datetime-local",
       value: endsAt,
       onChange: /* @__PURE__ */ __name((e) => setEndsAt(e.target.value), "onChange"),
-      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
+      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm",
+      required: true
     })))))),
     sidebar: /* @__PURE__ */ React.createElement(React.Fragment, null)
   }));
@@ -33498,7 +35047,8 @@ function VendorEditPage({ vendorId }) {
   const [website, setWebsite] = React25.useState("");
   const [logo, setLogo] = React25.useState("");
   const [email, setEmail] = React25.useState("");
-  const [phone, setPhone] = React25.useState("");
+  const [storePhoneCode, setStorePhoneCode] = React25.useState("+91");
+  const [storePhoneNum, setStorePhoneNum] = React25.useState("");
   const [addressLine1, setAddressLine1] = React25.useState("");
   const [addressLine2, setAddressLine2] = React25.useState("");
   const [city, setCity] = React25.useState("");
@@ -33512,7 +35062,8 @@ function VendorEditPage({ vendorId }) {
   const [metadata, setMetadata] = React25.useState(null);
   const [ownerName, setOwnerName] = React25.useState("");
   const [ownerEmail, setOwnerEmail] = React25.useState("");
-  const [ownerPhone, setOwnerPhone] = React25.useState("");
+  const [ownerPhoneCode, setOwnerPhoneCode] = React25.useState("+91");
+  const [ownerPhoneNum, setOwnerPhoneNum] = React25.useState("");
   const [ownerDesignation, setOwnerDesignation] = React25.useState("");
   const [ownerAadhaarNo, setOwnerAadhaarNo] = React25.useState("");
   const [ownerPanNo, setOwnerPanNo] = React25.useState("");
@@ -33536,7 +35087,7 @@ function VendorEditPage({ vendorId }) {
     website: website.trim() || null,
     logo: logo.trim() || null,
     email: email.trim() || null,
-    phone: phone.trim() || null,
+    phone: formatPhoneWithCountryCode(storePhoneCode, storePhoneNum),
     addressLine1: addressLine1.trim() || null,
     addressLine2: addressLine2.trim() || null,
     city: city.trim() || null,
@@ -33564,7 +35115,9 @@ function VendorEditPage({ vendorId }) {
         setWebsite(data.website ?? "");
         setLogo(data.logo ?? "");
         setEmail(data.email ?? "");
-        setPhone(data.phone ?? "");
+        const sPhone = splitPhoneAndCountryCode(data.phone);
+        setStorePhoneCode(sPhone.countryCode);
+        setStorePhoneNum(sPhone.phoneNumber);
         setAddressLine1(data.addressLine1 ?? "");
         setAddressLine2(data.addressLine2 ?? "");
         setCity(data.city ?? "");
@@ -33586,7 +35139,9 @@ function VendorEditPage({ vendorId }) {
             if (!cancelled) {
               setOwnerName(user.name ?? "");
               setOwnerEmail(user.email ?? "");
-              setOwnerPhone(user.phone ?? "");
+              const oPhone = splitPhoneAndCountryCode(user.phone);
+              setOwnerPhoneCode(oPhone.countryCode);
+              setOwnerPhoneNum(oPhone.phoneNumber);
             }
           }
         } else if (!cancelled) {
@@ -33733,7 +35288,10 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
       return;
     }
-    const taxError = validateIndiaTaxIds(gstin.trim().toUpperCase() || null, null);
+    const formattedOwnerPhone = formatPhoneWithCountryCode(ownerPhoneCode, ownerPhoneNum);
+    const taxError = validateGstin(gstin.trim().toUpperCase() || null, {
+      required: true
+    });
     if (taxError) {
       setErrors([
         taxError
@@ -33775,7 +35333,7 @@ function VendorEditPage({ vendorId }) {
           user: {
             name: ownerName.trim(),
             email: ownerEmail.trim(),
-            phone: ownerPhone.trim() || void 0,
+            phone: formattedOwnerPhone || void 0,
             designation: ownerDesignation.trim() || void 0,
             aadhaarNo: ownerAadhaarNo.trim(),
             panNo: ownerPanNo.trim().toUpperCase(),
@@ -33839,7 +35397,9 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
       return;
     }
-    const taxError = validateIndiaTaxIds(gstin.trim().toUpperCase() || null, null);
+    const taxError = validateGstin(gstin.trim().toUpperCase() || null, {
+      required: false
+    });
     if (taxError) {
       setErrors([
         taxError
@@ -33875,6 +35435,7 @@ function VendorEditPage({ vendorId }) {
         return;
       }
       if (ownerUserId != null) {
+        const formattedOwnerPhone = formatPhoneWithCountryCode(ownerPhoneCode, ownerPhoneNum);
         const userRes = await fetch(`/api/users/${ownerUserId}`, {
           method: "PUT",
           headers: {
@@ -33883,7 +35444,7 @@ function VendorEditPage({ vendorId }) {
           body: JSON.stringify({
             name: ownerName.trim(),
             email: ownerEmail.trim(),
-            phone: ownerPhone.trim() || null
+            phone: formattedOwnerPhone || null
           })
         });
         if (!userRes.ok) {
@@ -34017,12 +35578,23 @@ function VendorEditPage({ vendorId }) {
       className: `mt-1 ${fieldClass}`
     })), /* @__PURE__ */ React25__namespace.default.createElement("div", null, /* @__PURE__ */ React25__namespace.default.createElement(FieldLabel, {
       htmlFor: "vendorPhone"
-    }, "Store phone"), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
+    }, "Store phone"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+      className: "flex gap-2 mt-1"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("select", {
+      value: storePhoneCode,
+      onChange: /* @__PURE__ */ __name((e) => setStorePhoneCode(e.target.value), "onChange"),
+      className: "w-36 rounded-md border border-gray-300 px-3 py-2 text-sm bg-white focus:outline-none focus:ring-1 focus:ring-black"
+    }, COUNTRY_PHONE_CODES.map((c) => /* @__PURE__ */ React25__namespace.default.createElement("option", {
+      key: c.code,
+      value: c.code
+    }, c.label))), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
       id: "vendorPhone",
-      value: phone,
-      onChange: /* @__PURE__ */ __name((e) => setPhone(e.target.value), "onChange"),
-      className: `mt-1 ${fieldClass}`
-    })))), /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
+      type: "tel",
+      placeholder: "9876543210",
+      value: storePhoneNum,
+      onChange: /* @__PURE__ */ __name((e) => setStorePhoneNum(e.target.value.replace(/\D/g, "")), "onChange"),
+      className: `flex-1 ${fieldClass}`
+    }))))), /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
       className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
     }, "Store address"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
       className: sectionCls5
@@ -34075,12 +35647,15 @@ function VendorEditPage({ vendorId }) {
       className: `mt-1 ${fieldClass}`
     }))))), /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
       className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
-    }, "Tax (India)"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+    }, "Tax"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
       className: sectionCls5
     }, /* @__PURE__ */ React25__namespace.default.createElement("div", null, /* @__PURE__ */ React25__namespace.default.createElement(FieldLabel, {
-      htmlFor: "gstin"
+      htmlFor: "gstin",
+      required: create
     }, "GSTIN"), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
       id: "gstin",
+      required: create,
+      maxLength: 15,
       value: gstin,
       onChange: /* @__PURE__ */ __name((e) => setGstin(e.target.value.toUpperCase()), "onChange"),
       placeholder: "22AAAAA0000A1Z5",
@@ -34110,12 +35685,23 @@ function VendorEditPage({ vendorId }) {
       className: `mt-1 ${fieldClass}`
     })), /* @__PURE__ */ React25__namespace.default.createElement("div", null, /* @__PURE__ */ React25__namespace.default.createElement(FieldLabel, {
       htmlFor: "ownerPhone"
-    }, "Phone"), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
+    }, "Phone"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+      className: "flex gap-2 mt-1"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("select", {
+      value: ownerPhoneCode,
+      onChange: /* @__PURE__ */ __name((e) => setOwnerPhoneCode(e.target.value), "onChange"),
+      className: "w-36 rounded-md border border-gray-300 px-3 py-2 text-sm bg-white focus:outline-none focus:ring-1 focus:ring-black"
+    }, COUNTRY_PHONE_CODES.map((c) => /* @__PURE__ */ React25__namespace.default.createElement("option", {
+      key: c.code,
+      value: c.code
+    }, c.label))), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
       id: "ownerPhone",
-      value: ownerPhone,
-      onChange: /* @__PURE__ */ __name((e) => setOwnerPhone(e.target.value), "onChange"),
-      className: `mt-1 ${fieldClass}`
-    })), /* @__PURE__ */ React25__namespace.default.createElement("div", null, /* @__PURE__ */ React25__namespace.default.createElement(FieldLabel, {
+      type: "tel",
+      placeholder: "9876543210",
+      value: ownerPhoneNum,
+      onChange: /* @__PURE__ */ __name((e) => setOwnerPhoneNum(e.target.value.replace(/\D/g, "")), "onChange"),
+      className: `flex-1 ${fieldClass}`
+    }))), /* @__PURE__ */ React25__namespace.default.createElement("div", null, /* @__PURE__ */ React25__namespace.default.createElement(FieldLabel, {
       htmlFor: "ownerDesignation"
     }, "Designation"), /* @__PURE__ */ React25__namespace.default.createElement(Input, {
       id: "ownerDesignation",
@@ -34199,8 +35785,8 @@ function VendorEditPage({ vendorId }) {
     }), /* @__PURE__ */ React25__namespace.default.createElement(Label3, {
       htmlFor: "termsAccepted",
       className: "font-normal cursor-pointer text-sm leading-snug"
-    }, "I confirm the vendor has read and accepted the terms and conditions for selling on this platform."))))),
-    sidebar: /* @__PURE__ */ React25__namespace.default.createElement(React25__namespace.default.Fragment, null, !create && /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
+    }, "I confirm I have read and accepted the terms and conditions for selling on this platform."))))),
+    sidebar: create ? void 0 : /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
       className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
     }, "Status"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
       className: sectionCls5
@@ -34235,18 +35821,7 @@ function VendorEditPage({ vendorId }) {
       readOnly: true,
       value: active ? "Yes" : "No",
       className: `mt-1 ${fieldClass} bg-gray-100`
-    })))), create ? /* @__PURE__ */ React25__namespace.default.createElement("section", null, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
-      className: "text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2"
-    }, "Owner access"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
-      className: sectionCls5
-    }, /* @__PURE__ */ React25__namespace.default.createElement("p", {
-      className: "text-sm text-gray-600"
-    }, "Creates the vendor and an invite for the owner. After create, you can send the invite email or copy the invite link."), /* @__PURE__ */ React25__namespace.default.createElement(Button, {
-      type: "button",
-      disabled: saving,
-      onClick: handleCreate,
-      className: "w-full"
-    }, saving ? "Creating\u2026" : "Create vendor"))) : void 0)
+    }))))
   }), /* @__PURE__ */ React25__namespace.default.createElement(Dialog, {
     open: inviteDialog != null,
     onOpenChange: /* @__PURE__ */ __name((open) => {
@@ -35841,7 +37416,7 @@ function ConditionCard({ condition, onChange, onRemove, eventsOn }) {
     value: "minAmount"
   }, "Minimum order amount"), /* @__PURE__ */ React.createElement(SelectItem, {
     value: "minQuantity"
-  }, "Minimum quantity"), /* @__PURE__ */ React.createElement(SelectItem, {
+  }, "Minimum Cart Quantity"), /* @__PURE__ */ React.createElement(SelectItem, {
     value: "productMinQuantity"
   }, "Product"), (eventsOn || condition.kind === "events") && /* @__PURE__ */ React.createElement(SelectItem, {
     value: "events"
@@ -37296,8 +38871,8 @@ function ContactDetailPage({ contactId }) {
       setAddAddressError("Select country, state, and city from the lists.");
       return;
     }
-    const { Country: Country2, State: State2 } = await import('country-state-city');
-    const countryName = Country2.getCountryByCode(addressGeo.countryIso)?.name ?? "";
+    const { Country: Country3, State: State2 } = await import('country-state-city');
+    const countryName = Country3.getCountryByCode(addressGeo.countryIso)?.name ?? "";
     const stateName = State2.getStatesOfCountry(addressGeo.countryIso).find((s) => s.isoCode === addressGeo.stateIso)?.name ?? "";
     const payload = {
       contactId: Number(contactId),