@infuro/cms-core 1.0.58 → 1.0.59

package/dist/admin.cjs

@@ -887,7 +887,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.58" ;
+    CMS_VERSION = "1.0.59" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/admin.js

@@ -853,7 +853,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.58" ;
+    CMS_VERSION = "1.0.59" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/api.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkBHUEXLD2_cjs = require('./chunk-BHUEXLD2.cjs');
+var chunkMCCA7WLQ_cjs = require('./chunk-MCCA7WLQ.cjs');
 require('./chunk-XQ3QUHWR.cjs');
 require('./chunk-HY3AXLOI.cjs');
 require('./chunk-HXLC56ZK.cjs');
@@ -20,129 +20,133 @@ require('./chunk-USNT2KNT.cjs');
 
 
 
+Object.defineProperty(exports, "autoExpireOrderIfPaymentTimeExceeded", {
+  enumerable: true,
+  get: function () { return chunkMCCA7WLQ_cjs.autoExpireOrderIfPaymentTimeExceeded; }
+});
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createChangePasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createCmsApiHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createCrudByIdHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createCrudHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createFormBySlugHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createSetPasswordHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createUploadHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createUserAvatarHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createUserProfileHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createUsersApiHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkMCCA7WLQ_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkMCCA7WLQ_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkMCCA7WLQ_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkMCCA7WLQ_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.simpleDecrypt; }
+  get: function () { return chunkMCCA7WLQ_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.simpleEncrypt; }
+  get: function () { return chunkMCCA7WLQ_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkBHUEXLD2_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkMCCA7WLQ_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.d.cts

@@ -68,6 +68,7 @@ type VendorScope = {
 };
 
 type EntityMap = Record<string, typeorm.EntityTarget<typeorm.ObjectLiteral>>;
+declare function autoExpireOrderIfPaymentTimeExceeded(dataSource: typeorm.DataSource, entityMap: Record<string, unknown>, order: Record<string, unknown> | null | undefined): Promise<Record<string, unknown> | null | undefined>;
 interface CrudHandlerOptions {
     requireAuth: (req: Request) => Promise<Response | null>;
     json: (body: unknown, init?: {
@@ -641,4 +642,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };
+export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };

package/dist/api.d.ts

@@ -68,6 +68,7 @@ type VendorScope = {
 };
 
 type EntityMap = Record<string, typeorm.EntityTarget<typeorm.ObjectLiteral>>;
+declare function autoExpireOrderIfPaymentTimeExceeded(dataSource: typeorm.DataSource, entityMap: Record<string, unknown>, order: Record<string, unknown> | null | undefined): Promise<Record<string, unknown> | null | undefined>;
 interface CrudHandlerOptions {
     requireAuth: (req: Request) => Promise<Response | null>;
     json: (body: unknown, init?: {
@@ -641,4 +642,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };
+export { type AnalyticsHandlerConfig, type AuthHandlersConfig, type BlogBySlugConfig, type ChangePasswordConfig, type ChatPublicConfig, type CmsApiHandlerConfig, type CmsGetter, type CrudHandlerOptions, type DashboardStatsConfig, type EcommerceAnalyticsConfig, type EntityMap, type ForgotPasswordConfig, type FormBySlugConfig, type GetPublicSettingsGroupConfig, type GetPublicSettingsGroupDataSource, type InviteAcceptConfig, type JobScheduleApiConfig, type LlmAgentKnowledgeApiConfig, type LlmAgentValidationRulesJson, type ParsedLlmAgentValidation, type SetPasswordConfig, type SettingsApiConfig, type StorefrontApiConfig, type StorefrontOtpFlags, type UploadHandlerConfig, type UserAuthApiConfig, type UserAvatarConfig, type UserProfileConfig, type UsersApiConfig, type VendorDashboardConfig, type VendorOnboardHandlersConfig, type VendorOwnerActivation, autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsAuthBundle, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules };

package/dist/api.js

@@ -1,4 +1,4 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-AGU3B5JW.js';
+export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-BTUEUA5H.js';
 import './chunk-GO7PPYNU.js';
 import './chunk-3K5AIEIZ.js';
 import './chunk-HYW3MUXT.js';

package/dist/{chunk-AGU3B5JW.js → chunk-BTUEUA5H.js}

@@ -1510,6 +1510,36 @@ async function validateLlmAgentScopeForWrite(dataSource, entityMap, scope, exclu
 __name(validateLlmAgentScopeForWrite, "validateLlmAgentScopeForWrite");
 
 // src/api/crud.ts
+async function autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order) {
+  if (!order || typeof order !== "object") return order;
+  const status = String(order.status ?? "").toLowerCase();
+  if (status !== "pending") return order;
+  const meta = typeof order.metadata === "object" && order.metadata ? order.metadata : {};
+  const expiresAtStr = meta.paymentExpiresAt ? String(meta.paymentExpiresAt) : null;
+  if (!expiresAtStr) return order;
+  const expiresMs = new Date(expiresAtStr).getTime();
+  if (Number.isNaN(expiresMs) || Date.now() <= expiresMs) return order;
+  try {
+    const orderId = Number(order.id);
+    if (orderId && entityMap.orders) {
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const updatedMeta = {
+        ...meta,
+        cancelReason: "Payment window expired (10 minutes)"
+      };
+      await orderRepo.update(orderId, {
+        status: "cancelled",
+        metadata: updatedMeta
+      });
+      order.status = "cancelled";
+      order.metadata = updatedMeta;
+    }
+  } catch (err) {
+    console.error("[payment-expiry] Auto-cancelling expired order failed", err);
+  }
+  return order;
+}
+__name(autoExpireOrderIfPaymentTimeExceeded, "autoExpireOrderIfPaymentTimeExceeded");
 var CRUD_LOG = "[cms-crud]";
 function logCrudClientError(op, detail) {
   console.warn(CRUD_LOG, op, detail);
@@ -3554,6 +3584,12 @@ function createCrudHandler(dataSource, entityMap, options) {
           }
           const itemsSummary = parts.join(", ") || "\u2014";
           const { payments: _payments, ...orderWithoutPayments } = order;
+          const rawPayStatus = String(orderPayments[0]?.status ?? "unpaid").toLowerCase();
+          const orderStatus = String(order.status ?? "").toLowerCase();
+          let paymentStatus2 = rawPayStatus;
+          if (orderStatus === "cancelled" && rawPayStatus !== "paid" && rawPayStatus !== "captured" && rawPayStatus !== "refunded") {
+            paymentStatus2 = "unpaid";
+          }
           return {
             ...orderWithoutPayments,
             contact: contact ? {
@@ -3563,7 +3599,7 @@ function createCrudHandler(dataSource, entityMap, options) {
               phone: contact.phone
             } : null,
             itemsSummary,
-            paymentStatus: orderPayments[0]?.status ?? "unpaid"
+            paymentStatus: paymentStatus2
           };
         }));
         return json({
@@ -5448,6 +5484,9 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             "payments"
           ]
         });
+        if (order) {
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
+        }
         const orderDenied = await vendorScopeAccessJson(order, scope2, resource);
         if (orderDenied) return orderDenied;
         const relatedOrders = await repo.find({
@@ -32884,6 +32923,23 @@ function createStorefrontApiHandler(config) {
           });
           return json(body);
         }
+        if (path2[0] === "cart" && path2.length === 1 && method === "DELETE") {
+          const { cart, err } = await getOrCreateCart(req);
+          if (err) return err;
+          const cartId = cart?.id;
+          if (cartId && Number.isFinite(cartId) && cartId > 0) {
+            await cartItemRepo().delete({
+              cartId
+            });
+            await cartRepo().update(cartId, {
+              updatedAt: /* @__PURE__ */ new Date()
+            });
+          }
+          return json({
+            ok: true,
+            message: "Cart cleared"
+          });
+        }
         if (path2[0] === "cart" && path2[1] === "items" && path2.length === 2 && method === "POST") {
           const body = await req.json().catch(() => ({}));
           const capCart = await assertCaptchaOk(getCms, body, req, json);
@@ -33403,7 +33459,8 @@ function createStorefrontApiHandler(config) {
             total: prepOrd.orderTotal,
             currency: cart.currency || "INR",
             metadata: {
-              cartId
+              cartId,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
             }
           }));
           const oid = ord.id;
@@ -33476,7 +33533,11 @@ function createStorefrontApiHandler(config) {
             tax: prepChk.orderTax,
             discount: 0,
             total: prepChk.orderTotal,
-            currency: cart.currency || "INR"
+            currency: cart.currency || "INR",
+            metadata: {
+              cartId: cart.id,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
+            }
           }));
           const oid = ord.id;
           await orderRepo().update(oid, {
@@ -33722,6 +33783,7 @@ function createStorefrontApiHandler(config) {
             status: 404
           });
           const o = order;
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, o);
           const lines = (o.items || []).map((line) => {
             const p = line.product;
             return {
@@ -33782,6 +33844,73 @@ function createStorefrontApiHandler(config) {
             fulfillmentPreview: fulfillmentPreview || void 0
           });
         }
+        if (path2[0] === "orders" && path2.length === 3 && path2[2] === "cancel" && method === "POST") {
+          const orderId = parseInt(path2[1], 10);
+          if (!Number.isFinite(orderId)) return json({
+            error: "Invalid order id"
+          }, {
+            status: 400
+          });
+          const order = await orderRepo().findOne({
+            where: {
+              id: orderId,
+              deleted: false
+            }
+          });
+          if (!order) return json({
+            error: "Not found"
+          }, {
+            status: 404
+          });
+          const o = order;
+          const status = String(o.status || "").toLowerCase();
+          if (status === "pending") {
+            const meta = typeof o.metadata === "object" && o.metadata ? o.metadata : {};
+            const updatedMeta = {
+              ...meta,
+              cancelReason: "Cancelled by user during payment window"
+            };
+            await orderRepo().update(orderId, {
+              status: "cancelled",
+              metadata: updatedMeta
+            });
+            try {
+              if (entityMap.payments) {
+                const payRepo = dataSource.getRepository(entityMap.payments);
+                const pendingPayment = await payRepo.findOne({
+                  where: {
+                    orderId,
+                    status: "pending"
+                  }
+                });
+                if (pendingPayment) {
+                  await payRepo.update(pendingPayment.id, {
+                    status: "unpaid"
+                  });
+                }
+              }
+            } catch {
+            }
+            try {
+              const { cart } = await getOrCreateCart(req);
+              const cartId = cart?.id;
+              if (cartId && Number.isFinite(cartId) && cartId > 0) {
+                await cartItemRepo().delete({
+                  cartId
+                });
+                await cartRepo().update(cartId, {
+                  updatedAt: /* @__PURE__ */ new Date()
+                });
+              }
+            } catch {
+            }
+          }
+          return json({
+            ok: true,
+            orderId,
+            status: "cancelled"
+          });
+        }
         return json({
           error: "Not found"
         }, {
@@ -33799,4 +33928,4 @@ function createStorefrontApiHandler(config) {
 }
 __name(createStorefrontApiHandler, "createStorefrontApiHandler");
 
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };

package/dist/{chunk-BHUEXLD2.cjs → chunk-MCCA7WLQ.cjs}

@@ -1520,6 +1520,36 @@ async function validateLlmAgentScopeForWrite(dataSource, entityMap, scope, exclu
 chunkUSNT2KNT_cjs.__name(validateLlmAgentScopeForWrite, "validateLlmAgentScopeForWrite");
 
 // src/api/crud.ts
+async function autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order) {
+  if (!order || typeof order !== "object") return order;
+  const status = String(order.status ?? "").toLowerCase();
+  if (status !== "pending") return order;
+  const meta = typeof order.metadata === "object" && order.metadata ? order.metadata : {};
+  const expiresAtStr = meta.paymentExpiresAt ? String(meta.paymentExpiresAt) : null;
+  if (!expiresAtStr) return order;
+  const expiresMs = new Date(expiresAtStr).getTime();
+  if (Number.isNaN(expiresMs) || Date.now() <= expiresMs) return order;
+  try {
+    const orderId = Number(order.id);
+    if (orderId && entityMap.orders) {
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const updatedMeta = {
+        ...meta,
+        cancelReason: "Payment window expired (10 minutes)"
+      };
+      await orderRepo.update(orderId, {
+        status: "cancelled",
+        metadata: updatedMeta
+      });
+      order.status = "cancelled";
+      order.metadata = updatedMeta;
+    }
+  } catch (err) {
+    console.error("[payment-expiry] Auto-cancelling expired order failed", err);
+  }
+  return order;
+}
+chunkUSNT2KNT_cjs.__name(autoExpireOrderIfPaymentTimeExceeded, "autoExpireOrderIfPaymentTimeExceeded");
 var CRUD_LOG = "[cms-crud]";
 function logCrudClientError(op, detail) {
   console.warn(CRUD_LOG, op, detail);
@@ -3564,6 +3594,12 @@ function createCrudHandler(dataSource, entityMap, options) {
           }
           const itemsSummary = parts.join(", ") || "\u2014";
           const { payments: _payments, ...orderWithoutPayments } = order;
+          const rawPayStatus = String(orderPayments[0]?.status ?? "unpaid").toLowerCase();
+          const orderStatus = String(order.status ?? "").toLowerCase();
+          let paymentStatus2 = rawPayStatus;
+          if (orderStatus === "cancelled" && rawPayStatus !== "paid" && rawPayStatus !== "captured" && rawPayStatus !== "refunded") {
+            paymentStatus2 = "unpaid";
+          }
           return {
             ...orderWithoutPayments,
             contact: contact ? {
@@ -3573,7 +3609,7 @@ function createCrudHandler(dataSource, entityMap, options) {
               phone: contact.phone
             } : null,
             itemsSummary,
-            paymentStatus: orderPayments[0]?.status ?? "unpaid"
+            paymentStatus: paymentStatus2
           };
         }));
         return json({
@@ -5458,6 +5494,9 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             "payments"
           ]
         });
+        if (order) {
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
+        }
         const orderDenied = await vendorScopeAccessJson(order, scope2, resource);
         if (orderDenied) return orderDenied;
         const relatedOrders = await repo.find({
@@ -32894,6 +32933,23 @@ function createStorefrontApiHandler(config) {
           });
           return json(body);
         }
+        if (path2[0] === "cart" && path2.length === 1 && method === "DELETE") {
+          const { cart, err } = await getOrCreateCart(req);
+          if (err) return err;
+          const cartId = cart?.id;
+          if (cartId && Number.isFinite(cartId) && cartId > 0) {
+            await cartItemRepo().delete({
+              cartId
+            });
+            await cartRepo().update(cartId, {
+              updatedAt: /* @__PURE__ */ new Date()
+            });
+          }
+          return json({
+            ok: true,
+            message: "Cart cleared"
+          });
+        }
         if (path2[0] === "cart" && path2[1] === "items" && path2.length === 2 && method === "POST") {
           const body = await req.json().catch(() => ({}));
           const capCart = await assertCaptchaOk(getCms, body, req, json);
@@ -33413,7 +33469,8 @@ function createStorefrontApiHandler(config) {
             total: prepOrd.orderTotal,
             currency: cart.currency || "INR",
             metadata: {
-              cartId
+              cartId,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
             }
           }));
           const oid = ord.id;
@@ -33486,7 +33543,11 @@ function createStorefrontApiHandler(config) {
             tax: prepChk.orderTax,
             discount: 0,
             total: prepChk.orderTotal,
-            currency: cart.currency || "INR"
+            currency: cart.currency || "INR",
+            metadata: {
+              cartId: cart.id,
+              paymentExpiresAt: new Date(Date.now() + 10 * 60 * 1e3).toISOString()
+            }
           }));
           const oid = ord.id;
           await orderRepo().update(oid, {
@@ -33732,6 +33793,7 @@ function createStorefrontApiHandler(config) {
             status: 404
           });
           const o = order;
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, o);
           const lines = (o.items || []).map((line) => {
             const p = line.product;
             return {
@@ -33792,6 +33854,73 @@ function createStorefrontApiHandler(config) {
             fulfillmentPreview: fulfillmentPreview || void 0
           });
         }
+        if (path2[0] === "orders" && path2.length === 3 && path2[2] === "cancel" && method === "POST") {
+          const orderId = parseInt(path2[1], 10);
+          if (!Number.isFinite(orderId)) return json({
+            error: "Invalid order id"
+          }, {
+            status: 400
+          });
+          const order = await orderRepo().findOne({
+            where: {
+              id: orderId,
+              deleted: false
+            }
+          });
+          if (!order) return json({
+            error: "Not found"
+          }, {
+            status: 404
+          });
+          const o = order;
+          const status = String(o.status || "").toLowerCase();
+          if (status === "pending") {
+            const meta = typeof o.metadata === "object" && o.metadata ? o.metadata : {};
+            const updatedMeta = {
+              ...meta,
+              cancelReason: "Cancelled by user during payment window"
+            };
+            await orderRepo().update(orderId, {
+              status: "cancelled",
+              metadata: updatedMeta
+            });
+            try {
+              if (entityMap.payments) {
+                const payRepo = dataSource.getRepository(entityMap.payments);
+                const pendingPayment = await payRepo.findOne({
+                  where: {
+                    orderId,
+                    status: "pending"
+                  }
+                });
+                if (pendingPayment) {
+                  await payRepo.update(pendingPayment.id, {
+                    status: "unpaid"
+                  });
+                }
+              }
+            } catch {
+            }
+            try {
+              const { cart } = await getOrCreateCart(req);
+              const cartId = cart?.id;
+              if (cartId && Number.isFinite(cartId) && cartId > 0) {
+                await cartItemRepo().delete({
+                  cartId
+                });
+                await cartRepo().update(cartId, {
+                  updatedAt: /* @__PURE__ */ new Date()
+                });
+              }
+            } catch {
+            }
+          }
+          return json({
+            ok: true,
+            orderId,
+            status: "cancelled"
+          });
+        }
         return json({
           error: "Not found"
         }, {
@@ -33831,6 +33960,7 @@ exports.assertCaptchaOk = assertCaptchaOk;
 exports.assertContactAllowedForVendorOrder = assertContactAllowedForVendorOrder;
 exports.assertEventApprovalUpdate = assertEventApprovalUpdate;
 exports.assertProductApprovalUpdate = assertProductApprovalUpdate;
+exports.autoExpireOrderIfPaymentTimeExceeded = autoExpireOrderIfPaymentTimeExceeded;
 exports.buildBlogMetadataUserPrompt = buildBlogMetadataUserPrompt;
 exports.buildCronFromSchedule = buildCronFromSchedule;
 exports.buildRssUserPromptFromFeeds = buildRssUserPromptFromFeeds;