@infuro/cms-core 1.0.57 → 1.0.59

package/dist/admin.cjs

@@ -887,7 +887,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.57" ;
+    CMS_VERSION = "1.0.59" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/admin.js

@@ -853,7 +853,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.57" ;
+    CMS_VERSION = "1.0.59" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/api.cjs

@@ -1,9 +1,9 @@
 'use strict';
 
-var chunkCMXNHMHP_cjs = require('./chunk-CMXNHMHP.cjs');
+var chunkMCCA7WLQ_cjs = require('./chunk-MCCA7WLQ.cjs');
 require('./chunk-XQ3QUHWR.cjs');
 require('./chunk-HY3AXLOI.cjs');
-require('./chunk-JN4AFHZ4.cjs');
+require('./chunk-HXLC56ZK.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
 require('./chunk-V25RDUOU.cjs');
@@ -20,129 +20,133 @@ require('./chunk-USNT2KNT.cjs');
 
 
 
+Object.defineProperty(exports, "autoExpireOrderIfPaymentTimeExceeded", {
+  enumerable: true,
+  get: function () { return chunkMCCA7WLQ_cjs.autoExpireOrderIfPaymentTimeExceeded; }
+});
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createChangePasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createCmsApiHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createCrudByIdHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createCrudHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createFormBySlugHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createSetPasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createUploadHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createUserAvatarHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createUserProfileHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createUsersApiHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkMCCA7WLQ_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkMCCA7WLQ_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.simpleDecrypt; }
+  get: function () { return chunkMCCA7WLQ_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.simpleEncrypt; }
+  get: function () { return chunkMCCA7WLQ_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkCMXNHMHP_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.d.cts

@@ -68,6 +68,7 @@ type VendorScope = {
 };
 
 type EntityMap = Record<string, typeorm.EntityTarget<typeorm.ObjectLiteral>>;
+declare function autoExpireOrderIfPaymentTimeExceeded(dataSource: typeorm.DataSource, entityMap: Record<string, unknown>, order: Record<string, unknown> | null | undefined): Promise<Record<string, unknown> | null | undefined>;
 interface CrudHandlerOptions {
     requireAuth: (req: Request) => Promise<Response | null>;
     json: (body: unknown, init?: {
@@ -641,4 +642,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };
+export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };

package/dist/api.d.ts

@@ -68,6 +68,7 @@ type VendorScope = {
 };
 
 type EntityMap = Record<string, typeorm.EntityTarget<typeorm.ObjectLiteral>>;
+declare function autoExpireOrderIfPaymentTimeExceeded(dataSource: typeorm.DataSource, entityMap: Record<string, unknown>, order: Record<string, unknown> | null | undefined): Promise<Record<string, unknown> | null | undefined>;
 interface CrudHandlerOptions {
     requireAuth: (req: Request) => Promise<Response | null>;
     json: (body: unknown, init?: {
@@ -641,4 +642,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };
+export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };

package/dist/api.js

@@ -1,7 +1,7 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-BAUV5FZQ.js';
+export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-BTUEUA5H.js';
 import './chunk-GO7PPYNU.js';
 import './chunk-3K5AIEIZ.js';
-import './chunk-CTXBYO2J.js';
+import './chunk-HYW3MUXT.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
 import './chunk-L3525VXI.js';

package/dist/{chunk-BAUV5FZQ.js → chunk-BTUEUA5H.js}

@@ -1,6 +1,6 @@
 import { JOB_RUNNER_QUEUE } from './chunk-GO7PPYNU.js';
 import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-CTXBYO2J.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-HYW3MUXT.js';
 import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
 import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-L3525VXI.js';
 import { mergeEmailLayoutCompanyDetails, unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
@@ -1510,6 +1510,36 @@ async function validateLlmAgentScopeForWrite(dataSource, entityMap, scope, exclu
 __name(validateLlmAgentScopeForWrite, "validateLlmAgentScopeForWrite");
 
 // src/api/crud.ts
+async function autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order) {
+  if (!order || typeof order !== "object") return order;
+  const status = String(order.status ?? "").toLowerCase();
+  if (status !== "pending") return order;
+  const meta = typeof order.metadata === "object" && order.metadata ? order.metadata : {};
+  const expiresAtStr = meta.paymentExpiresAt ? String(meta.paymentExpiresAt) : null;
+  if (!expiresAtStr) return order;
+  const expiresMs = new Date(expiresAtStr).getTime();
+  if (Number.isNaN(expiresMs) || Date.now() <= expiresMs) return order;
+  try {
+    const orderId = Number(order.id);
+    if (orderId && entityMap.orders) {
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const updatedMeta = {
+        ...meta,
+        cancelReason: "Payment window expired (10 minutes)"
+      };
+      await orderRepo.update(orderId, {
+        status: "cancelled",
+        metadata: updatedMeta
+      });
+      order.status = "cancelled";
+      order.metadata = updatedMeta;
+    }
+  } catch (err) {
+    console.error("[payment-expiry] Auto-cancelling expired order failed", err);
+  }
+  return order;
+}
+__name(autoExpireOrderIfPaymentTimeExceeded, "autoExpireOrderIfPaymentTimeExceeded");
 var CRUD_LOG = "[cms-crud]";
 function logCrudClientError(op, detail) {
   console.warn(CRUD_LOG, op, detail);
@@ -3554,6 +3584,12 @@ function createCrudHandler(dataSource, entityMap, options) {
           }
           const itemsSummary = parts.join(", ") || "\u2014";
           const { payments: _payments, ...orderWithoutPayments } = order;
+          const rawPayStatus = String(orderPayments[0]?.status ?? "unpaid").toLowerCase();
+          const orderStatus = String(order.status ?? "").toLowerCase();
+          let paymentStatus2 = rawPayStatus;
+          if (orderStatus === "cancelled" && rawPayStatus !== "paid" && rawPayStatus !== "captured" && rawPayStatus !== "refunded") {
+            paymentStatus2 = "unpaid";
+          }
           return {
             ...orderWithoutPayments,
             contact: contact ? {
@@ -3563,7 +3599,7 @@ function createCrudHandler(dataSource, entityMap, options) {
               phone: contact.phone
             } : null,
             itemsSummary,
-            paymentStatus: orderPayments[0]?.status ?? "unpaid"
+            paymentStatus: paymentStatus2
           };
         }));
         return json({
@@ -5448,6 +5484,9 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             "payments"
           ]
         });
+        if (order) {
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
+        }
         const orderDenied = await vendorScopeAccessJson(order, scope2, resource);
         if (orderDenied) return orderDenied;
         const relatedOrders = await repo.find({
@@ -12056,6 +12095,7 @@ var UserDeviceToken = class {
     __name(this, "UserDeviceToken");
   }
   id;
+  /** Staff/vendor app store. Null for customer/marketplace tokens (membership is `vendor_customers`). */
   vendorId;
   vendor;
   userId;
@@ -12076,13 +12116,15 @@ _ts_decorate2([
 _ts_decorate2([
   Column({
     type: "integer",
-    name: "vendor_id"
+    name: "vendor_id",
+    nullable: true
   }),
-  _ts_metadata2("design:type", Number)
+  _ts_metadata2("design:type", Object)
 ], UserDeviceToken.prototype, "vendorId", void 0);
 _ts_decorate2([
   ManyToOne("Vendor", {
-    onDelete: "CASCADE"
+    onDelete: "CASCADE",
+    nullable: true
   }),
   JoinColumn({
     name: "vendor_id"
@@ -12179,6 +12221,22 @@ UserDeviceToken = _ts_decorate2([
 ], UserDeviceToken);
 
 // src/api/device-tokens-handlers.ts
+function parseRequiredPositiveInt(value, field) {
+  const n = parseInt(String(value ?? "").trim(), 10);
+  if (!Number.isFinite(n) || n <= 0) {
+    return {
+      error: `${field} must be a positive integer`
+    };
+  }
+  return n;
+}
+__name(parseRequiredPositiveInt, "parseRequiredPositiveInt");
+function parseOptionalVendorId(value) {
+  if (value == null) return null;
+  if (typeof value === "string" && value.trim() === "") return null;
+  return parseRequiredPositiveInt(value, "vendor_id");
+}
+__name(parseOptionalVendorId, "parseOptionalVendorId");
 function createDeviceTokensHandlers(config) {
   const { dataSource, entityMap, json } = config;
   return /* @__PURE__ */ __name(async function handleDeviceTokensApi(req, pathSegments) {
@@ -12250,18 +12308,28 @@ function createDeviceTokensHandlers(config) {
       if (method === "POST") {
         try {
           const body = await req.json().catch(() => ({}));
-          const vendorId = body.vendor_id?.trim();
-          const userId = body.user_id?.trim();
+          const vendorParsed = parseOptionalVendorId(body.vendor_id);
+          const userParsed = parseRequiredPositiveInt(body.user_id, "user_id");
           const token = body.token?.trim();
           const platformRaw = body.platform?.trim().toLowerCase();
-          if (!vendorId || !userId || !token || !platformRaw) {
+          if (vendorParsed !== null && typeof vendorParsed === "object") {
+            return json({
+              success: false,
+              error: vendorParsed.error
+            }, {
+              status: 400
+            });
+          }
+          if (typeof userParsed === "object" || !token || !platformRaw) {
             return json({
               success: false,
-              error: "vendor_id, user_id, token, and platform (android|ios) are required"
+              error: (typeof userParsed === "object" ? userParsed.error : null) || "user_id, token, and platform (android|ios) are required"
             }, {
               status: 400
             });
           }
+          const vendorId = vendorParsed;
+          const userId = userParsed;
           if (platformRaw !== "android" && platformRaw !== "ios") {
             return json({
               success: false,
@@ -12327,13 +12395,35 @@ function createDeviceTokensHandlers(config) {
       if (method === "GET") {
         try {
           const url = new URL(req.url);
-          const userId = url.searchParams.get("userId")?.trim();
-          const vendorId = url.searchParams.get("vendorId")?.trim();
+          const userIdRaw = url.searchParams.get("userId")?.trim();
+          const vendorIdRaw = url.searchParams.get("vendorId")?.trim();
           const whereCondition = {
             isActive: true
           };
-          if (userId) whereCondition.userId = userId;
-          if (vendorId) whereCondition.vendorId = vendorId;
+          if (userIdRaw) {
+            const userId = parseRequiredPositiveInt(userIdRaw, "userId");
+            if (typeof userId === "object") {
+              return json({
+                success: false,
+                error: userId.error
+              }, {
+                status: 400
+              });
+            }
+            whereCondition.userId = userId;
+          }
+          if (vendorIdRaw) {
+            const vendorId = parseRequiredPositiveInt(vendorIdRaw, "vendorId");
+            if (typeof vendorId === "object") {
+              return json({
+                success: false,
+                error: vendorId.error
+              }, {
+                status: 400
+              });
+            }
+            whereCondition.vendorId = vendorId;
+          }
           const tokens = await tokenRepo.find({
             where: whereCondition,
             order: {
@@ -12360,16 +12450,17 @@ function createDeviceTokensHandlers(config) {
       if (method === "DELETE") {
         try {
           const body = await req.json().catch(() => ({}));
-          const userId = body.user_id?.trim();
+          const userParsed = parseRequiredPositiveInt(body.user_id, "user_id");
           const token = body.token?.trim();
-          if (!userId || !token) {
+          if (typeof userParsed === "object" || !token) {
             return json({
               success: false,
-              error: "user_id and token are required to deactivate"
+              error: (typeof userParsed === "object" ? userParsed.error : null) || "user_id and token are required to deactivate"
             }, {
               status: 400
             });
           }
+          const userId = userParsed;
           await tokenRepo.update({
             userId,
             token
@@ -29791,7 +29882,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-AT4IFAGL.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-64WDCHHG.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,
@@ -32832,6 +32923,23 @@ function createStorefrontApiHandler(config) {
           });
           return json(body);
         }
+        if (path2[0] === "cart" && path2.length === 1 && method === "DELETE") {
+          const { cart, err } = await getOrCreateCart(req);
+          if (err) return err;
+          const cartId = cart?.id;
+          if (cartId && Number.isFinite(cartId) && cartId > 0) {
+            await cartItemRepo().delete({
+              cartId
+            });
+            await cartRepo().update(cartId, {
+              updatedAt: /* @__PURE__ */ new Date()
+            });
+          }
+          return json({
+            ok: true,
+            message: "Cart cleared"
+          });
+        }
         if (path2[0] === "cart" && path2[1] === "items" && path2.length === 2 && method === "POST") {
           const body = await req.json().catch(() => ({}));
           const capCart = await assertCaptchaOk(getCms, body, req, json);
@@ -33351,7 +33459,8 @@ function createStorefrontApiHandler(config) {
             total: prepOrd.orderTotal,
             currency: cart.currency || "INR",
             metadata: {
-              cartId
+              cartId,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
             }
           }));
           const oid = ord.id;
@@ -33424,7 +33533,11 @@ function createStorefrontApiHandler(config) {
             tax: prepChk.orderTax,
             discount: 0,
             total: prepChk.orderTotal,
-            currency: cart.currency || "INR"
+            currency: cart.currency || "INR",
+            metadata: {
+              cartId: cart.id,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
+            }
           }));
           const oid = ord.id;
           await orderRepo().update(oid, {
@@ -33670,6 +33783,7 @@ function createStorefrontApiHandler(config) {
             status: 404
           });
           const o = order;
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, o);
           const lines = (o.items || []).map((line) => {
             const p = line.product;
             return {
@@ -33730,6 +33844,73 @@ function createStorefrontApiHandler(config) {
             fulfillmentPreview: fulfillmentPreview || void 0
           });
         }
+        if (path2[0] === "orders" && path2.length === 3 && path2[2] === "cancel" && method === "POST") {
+          const orderId = parseInt(path2[1], 10);
+          if (!Number.isFinite(orderId)) return json({
+            error: "Invalid order id"
+          }, {
+            status: 400
+          });
+          const order = await orderRepo().findOne({
+            where: {
+              id: orderId,
+              deleted: false
+            }
+          });
+          if (!order) return json({
+            error: "Not found"
+          }, {
+            status: 404
+          });
+          const o = order;
+          const status = String(o.status || "").toLowerCase();
+          if (status === "pending") {
+            const meta = typeof o.metadata === "object" && o.metadata ? o.metadata : {};
+            const updatedMeta = {
+              ...meta,
+              cancelReason: "Cancelled by user during payment window"
+            };
+            await orderRepo().update(orderId, {
+              status: "cancelled",
+              metadata: updatedMeta
+            });
+            try {
+              if (entityMap.payments) {
+                const payRepo = dataSource.getRepository(entityMap.payments);
+                const pendingPayment = await payRepo.findOne({
+                  where: {
+                    orderId,
+                    status: "pending"
+                  }
+                });
+                if (pendingPayment) {
+                  await payRepo.update(pendingPayment.id, {
+                    status: "unpaid"
+                  });
+                }
+              }
+            } catch {
+            }
+            try {
+              const { cart } = await getOrCreateCart(req);
+              const cartId = cart?.id;
+              if (cartId && Number.isFinite(cartId) && cartId > 0) {
+                await cartItemRepo().delete({
+                  cartId
+                });
+                await cartRepo().update(cartId, {
+                  updatedAt: /* @__PURE__ */ new Date()
+                });
+              }
+            } catch {
+            }
+          }
+          return json({
+            ok: true,
+            orderId,
+            status: "cancelled"
+          });
+        }
         return json({
           error: "Not found"
         }, {
@@ -33747,4 +33928,4 @@ function createStorefrontApiHandler(config) {
 }
 __name(createStorefrontApiHandler, "createStorefrontApiHandler");
 
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };