@infuro/cms-core 1.0.58 → 1.0.60

package/dist/admin.js

@@ -10,7 +10,7 @@ import { Slot } from '@radix-ui/react-slot';
 import { cva } from 'class-variance-authority';
 import * as DropdownMenuPrimitive from '@radix-ui/react-dropdown-menu';
 import * as LucideIcons from 'lucide-react';
-import { ChevronDown, User, Settings, LogOut, LayoutDashboard, Store, FolderTree, Layers, Building2, CalendarDays, ShoppingBag, Package, Receipt, BadgePercent, ShoppingCart, CreditCard, Users, Inbox, File, LinkIcon, ClipboardList, MessageSquare, Image as Image$1, Shield, FileText, Puzzle, X, Plus, MoreVertical, Upload, Download, Edit, Copy, RefreshCw, Trash2, Mail, Check, Save, Search, AlertCircle, MapPin, BarChart3, TrendingUp, UserCheck, Activity, Globe, Eye, MousePointer, ArrowLeftRight, RotateCcw, KeyRound, Loader2, CalendarClock, CheckSquare, Square, XSquare, Rss, ArrowLeft, Pencil, FolderPlus, LayoutGrid, List, Move, Archive, Edit2, ExternalLink, Power, Star, ChevronUp, Zap, Filter, CheckCircle2, ImageIcon, GripVertical, ChevronRight, ArrowRight, ArrowUpRight, IndianRupee, XCircle, Clock, Play, MessageCircle, Bot, FileUp, Tag, Box, SlidersHorizontal, Calculator, Link2 as Link2$1, Unlink, Gift, MoreHorizontal, Smartphone, ShieldCheck, QrCode, Car, Send, Settings2, DollarSign, Hash, Circle, ChevronLeft, Bell, Share2, HardDrive, Folder, Film } from 'lucide-react';
+import { ChevronDown, User, Settings, LogOut, LayoutDashboard, Store, FolderTree, Layers, Building2, CalendarDays, ShoppingBag, Package, Receipt, BadgePercent, ShoppingCart, CreditCard, Users, Inbox, File, LinkIcon, ClipboardList, MessageSquare, Image as Image$1, Shield, FileText, Puzzle, X, Plus, MoreVertical, Upload, Download, Edit, Copy, RefreshCw, Trash2, Mail, Check, Save, Search, AlertCircle, MapPin, BarChart3, TrendingUp, UserCheck, Activity, Globe, Eye, MousePointer, ArrowLeftRight, RotateCcw, KeyRound, Loader2, CalendarClock, CheckSquare, Square, XSquare, Rss, ArrowLeft, Pencil, FolderPlus, LayoutGrid, List, Move, Archive, Edit2, ExternalLink, Power, Star, ChevronUp, Zap, Filter, CheckCircle2, ImageIcon, GripVertical, ChevronRight, ArrowRight, ArrowUpRight, IndianRupee, XCircle, Clock, Play, MessageCircle, Bot, FileUp, Tag, Box, SlidersHorizontal, Calculator, Link2 as Link2$1, Unlink, Gift, MoreHorizontal, ShieldCheck, EyeOff, Smartphone, QrCode, Car, Send, Settings2, DollarSign, Hash, Circle, ChevronLeft, Bell, Share2, HardDrive, Folder, Film } from 'lucide-react';
 import Image from 'next/image';
 import Link2 from 'next/link';
 import { usePathname, useSearchParams, useRouter } from 'next/navigation';
@@ -327,7 +327,15 @@ var init_vendor_scope = __esm({
       ...VENDOR_SCOPED_STORE_ENTITIES,
       "order_discounts",
       "order_addresses",
-      "event_products"
+      "event_products",
+      "attendees",
+      "order-attendees",
+      "order_attendees",
+      "scan",
+      "verify-attendee-qr",
+      "verify_attendee_qr",
+      "forms",
+      "cms-forms"
     ]);
     __name(isVendorGroupName, "isVendorGroupName");
     __name(isPlatformAdministrator, "isPlatformAdministrator");
@@ -853,7 +861,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.58" ;
+    CMS_VERSION = "1.0.60" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -1575,6 +1583,15 @@ var init_builtin_plugin_descriptors = __esm({
         enabled: true,
         icon: "auth_providers",
         settingsGroup: "auth_providers"
+      },
+      {
+        name: "turnstile",
+        label: "Cloudflare Turnstile",
+        version: "1.0.0",
+        description: "Protect forms, registration, and authentication from spam and bots with Cloudflare Turnstile.",
+        enabled: true,
+        icon: "turnstile",
+        settingsGroup: "turnstile"
       }
     ];
   }
@@ -6309,6 +6326,7 @@ function FormBuilder({ formId, duplicateFromId }) {
     campaign: "",
     slug: "",
     published: false,
+    enableTurnstile: false,
     fields: []
   });
   const [errors, setErrors] = useState([]);
@@ -6342,6 +6360,7 @@ function FormBuilder({ formId, duplicateFromId }) {
           campaign: data.campaign || "",
           slug: slugNext,
           published: isDup ? false : data.published,
+          enableTurnstile: Boolean(data.enableTurnstile ?? data.enable_turnstile),
           fields: (data.fields ?? []).map((field, index) => ({
             ...field,
             id: isDup ? `field_dup_${Date.now()}_${index}` : field?.id != null ? String(field.id) : `field_${Date.now()}_${index}`,
@@ -6650,7 +6669,21 @@ function FormBuilder({ formId, duplicateFromId }) {
     })), "onCheckedChange")
   }), /* @__PURE__ */ React.createElement("label", {
     className: "text-sm font-medium text-gray-700"
-  }, "Published"))))), /* @__PURE__ */ React.createElement("div", {
+  }, "Published")), /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center space-x-2 pt-2 border-t border-gray-100"
+  }, /* @__PURE__ */ React.createElement(Switch, {
+    checked: formData.enableTurnstile ?? false,
+    onCheckedChange: /* @__PURE__ */ __name((checked) => setFormData((prev) => ({
+      ...prev,
+      enableTurnstile: checked
+    })), "onCheckedChange")
+  }), /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-col"
+  }, /* @__PURE__ */ React.createElement("label", {
+    className: "text-sm font-medium text-gray-700"
+  }, "Enable Cloudflare Turnstile"), /* @__PURE__ */ React.createElement("span", {
+    className: "text-xs text-gray-500"
+  }, "Requires user verification before submission (when Turnstile plugin is active)")))))), /* @__PURE__ */ React.createElement("div", {
     className: "lg:col-span-2"
   }, /* @__PURE__ */ React.createElement("div", {
     className: "bg-white rounded-lg shadow"
@@ -16143,6 +16176,7 @@ var init_order_notification_bindings_shared = __esm({
       "orderNumber",
       "customerName",
       "customerPhone",
+      "customerEmail",
       "eventName",
       "vendorName",
       "total",
@@ -16150,7 +16184,8 @@ var init_order_notification_bindings_shared = __esm({
       "vendorId",
       "refundAmount",
       "invoiceNumber",
-      "invoiceUrl"
+      "invoiceAttachment",
+      "orderDetails"
     ];
     __name(useNotificationVariables, "useNotificationVariables");
     EMAIL_TRIGGER_DEFAULTS = {
@@ -16182,6 +16217,43 @@ If you have any questions, please contact us.
 
 Thank you!`,
         bodyPlaceholder: "Hi {{customerName}},\n\nYour order {{orderNumber}} has been cancelled.\n\nIf a refund is due, it will be returned to your original payment method."
+      },
+      payment_success: {
+        subject: "Payment Successful for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Successful for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+We have received your payment for order {{orderNumber}} of {{total}} {{currency}}.
+
+Order Details:
+{{orderDetails}}
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nPayment for order {{orderNumber}} was successful.\n\nThank you!"
+      },
+      payment_failed: {
+        subject: "Payment Failed for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+Your payment for order {{orderNumber}} of {{total}} {{currency}} could not be completed or remains unpaid.
+
+If you were charged, please contact us with your order number {{orderNumber}}.
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nPayment for order {{orderNumber}} failed or remains unpaid.\n\nThank you!"
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+Your order {{orderNumber}} has been cancelled and a refund of {{refundAmount}} {{currency}} has been initiated.
+
+The amount will be credited back to your original payment method.
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nRefund of {{refundAmount}} {{currency}} for order {{orderNumber}} has been initiated."
       }
     };
     VENDOR_EMAIL_TRIGGER_DEFAULTS = {
@@ -16206,12 +16278,48 @@ Thank you!`,
 
 Order {{orderNumber}} for {{total}} {{currency}} has been cancelled.
 
-Customer: {{customerName}
+Customer: {{customerName}}
 Order Items:
 {{orderDetails}}
 
 Thank you.`,
         bodyPlaceholder: "Hi {{vendorName}},\n\nOrder {{orderNumber}} was cancelled."
+      },
+      payment_success: {
+        subject: "Payment Confirmed for Order {{orderNumber}} - {{customerName}}",
+        subjectPlaceholder: "e.g. Payment Confirmed for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Payment has been confirmed for order {{orderNumber}} ({{total}} {{currency}}).
+
+Customer: {{customerName}}
+Order Items:
+{{orderDetails}}
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nPayment for order {{orderNumber}} confirmed."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid / Failed for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Unpaid for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Payment for order {{orderNumber}} ({{total}} {{currency}}) is unpaid or failed.
+
+Customer: {{customerName}}
+
+Thank you.`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nPayment for order {{orderNumber}} failed or unpaid."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Order {{orderNumber}} has been cancelled and a refund of {{refundAmount}} {{currency}} has been initiated for {{customerName}}.
+
+Thank you.`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nRefund initiated for order {{orderNumber}}."
       }
     };
     ADMIN_EMAIL_TRIGGER_DEFAULTS = {
@@ -16243,6 +16351,42 @@ Customer: {{customerName}}
 Vendor: {{vendorName}}
 Refund Due: {{refundAmount}} {{currency}}`,
         bodyPlaceholder: "Hi Admin,\n\nOrder {{orderNumber}} cancelled."
+      },
+      payment_success: {
+        subject: "Payment Success Alert: Order {{orderNumber}} ({{total}} {{currency}})",
+        subjectPlaceholder: "e.g. Payment Success Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Payment of {{total}} {{currency}} was successfully captured for order {{orderNumber}}.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}
+
+Order Summary:
+{{orderDetails}}`,
+        bodyPlaceholder: "Payment received for order {{orderNumber}}."
+      },
+      payment_failed: {
+        subject: "Payment Failed / Unpaid Alert: Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Payment for order {{orderNumber}} ({{total}} {{currency}}) is unpaid or failed.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}`,
+        bodyPlaceholder: "Payment failed/unpaid for order {{orderNumber}}."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated Alert: Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Order {{orderNumber}} was cancelled and refund of {{refundAmount}} {{currency}} was initiated.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     __name(getEmailTriggerDefaults, "getEmailTriggerDefaults");
@@ -16258,6 +16402,24 @@ Refund Due: {{refundAmount}} {{currency}}`,
         subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
         body: `Hi {{customerName}}, your order {{orderNumber}} for {{total}} {{currency}} has been cancelled.`,
         bodyPlaceholder: "Hi {{customerName}}, your order {{orderNumber}} has been cancelled."
+      },
+      payment_success: {
+        subject: "Payment Successful!",
+        subjectPlaceholder: "e.g. Payment Successful!",
+        body: `Hi {{customerName}}, payment for order {{orderNumber}} ({{total}} {{currency}}) was successful.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} successful."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid / Failed",
+        subjectPlaceholder: "e.g. Payment Unpaid / Failed",
+        body: `Hi {{customerName}}, payment for order {{orderNumber}} failed or remains unpaid.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} failed."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated",
+        subjectPlaceholder: "e.g. Refund Initiated",
+        body: `Hi {{customerName}}, a refund of {{refundAmount}} {{currency}} for order {{orderNumber}} has been initiated.`,
+        bodyPlaceholder: "Refund for order {{orderNumber}} initiated."
       }
     };
     VENDOR_PUSH_TRIGGER_DEFAULTS = {
@@ -16272,6 +16434,24 @@ Refund Due: {{refundAmount}} {{currency}}`,
         subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
         body: `Hi {{vendorName}}, order {{orderNumber}} from {{customerName}} has been cancelled.`,
         bodyPlaceholder: "Hi {{vendorName}}, order {{orderNumber}} was cancelled."
+      },
+      payment_success: {
+        subject: "Payment Confirmed: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Confirmed: {{orderNumber}}",
+        body: `Hi {{vendorName}}, payment for order {{orderNumber}} from {{customerName}} has been confirmed.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} confirmed."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Unpaid: {{orderNumber}}",
+        body: `Hi {{vendorName}}, payment for order {{orderNumber}} from {{customerName}} is unpaid or failed.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} unpaid."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated: {{orderNumber}}",
+        body: `Hi {{vendorName}}, refund initiated for order {{orderNumber}} ({{customerName}}).`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     ADMIN_PUSH_TRIGGER_DEFAULTS = {
@@ -16303,6 +16483,24 @@ Customer: {{customerName}}
 Vendor: {{vendorName}}
 Refund Due: {{refundAmount}} {{currency}}`,
         bodyPlaceholder: "Hi Admin,\n\nOrder {{orderNumber}} cancelled."
+      },
+      payment_success: {
+        subject: "Payment Success: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Success: {{orderNumber}}",
+        body: `Payment of {{total}} {{currency}} captured for order {{orderNumber}} ({{customerName}}).`,
+        bodyPlaceholder: "Payment captured for order {{orderNumber}}."
+      },
+      payment_failed: {
+        subject: "Payment Failed/Unpaid: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed: {{orderNumber}}",
+        body: `Payment for order {{orderNumber}} ({{customerName}}) is unpaid or failed.`,
+        bodyPlaceholder: "Payment failed for order {{orderNumber}}."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated: {{orderNumber}}",
+        body: `Refund of {{refundAmount}} {{currency}} initiated for order {{orderNumber}}.`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     __name(getPushTriggerDefaults, "getPushTriggerDefaults");
@@ -16956,6 +17154,7 @@ var init_emailTriggersBindingsPage = __esm({
       orderNumber: "Display order number",
       customerName: "Customer full name",
       customerPhone: "Customer phone",
+      customerEmail: "Customer email address",
       eventName: "Event title / product name",
       vendorName: "Vendor / store name",
       total: "Order total amount",
@@ -16963,7 +17162,8 @@ var init_emailTriggersBindingsPage = __esm({
       vendorId: "Vendor / store ID",
       refundAmount: "Refund amount (refund triggers)",
       invoiceNumber: "Generated invoice number",
-      invoiceUrl: "Link to download invoice PDF"
+      invoiceAttachment: "Include this variable to attach Tax Invoice PDF to email",
+      orderDetails: "Formatted item details summary"
     };
     __name(EmailTriggerBindings, "EmailTriggerBindings");
     __name(TriggerEmailEditor, "TriggerEmailEditor");
@@ -17261,6 +17461,7 @@ var init_pushTriggersBindingsPage = __esm({
       orderNumber: "Display order number",
       customerName: "Customer full name",
       customerPhone: "Customer phone",
+      customerEmail: "Customer email address",
       eventName: "Event title / product name",
       vendorName: "Vendor / store name",
       total: "Order total amount",
@@ -17268,7 +17469,8 @@ var init_pushTriggersBindingsPage = __esm({
       vendorId: "Vendor / store ID",
       refundAmount: "Refund amount (refund triggers)",
       invoiceNumber: "Generated invoice number",
-      invoiceUrl: "Link to download invoice PDF"
+      invoiceAttachment: "Include this variable to attach Tax Invoice PDF to email",
+      orderDetails: "Formatted item details summary"
     };
     __name(PushTriggerBindings, "PushTriggerBindings");
   }
@@ -18106,6 +18308,177 @@ var init_AuthProvidersPluginSettings = __esm({
     __name(AuthProvidersPluginSettings, "AuthProvidersPluginSettings");
   }
 });
+function TurnstilePluginSettings({ settingsGroup, onEnabledChange }) {
+  const [loading, setLoading] = useState(true);
+  const [saving, setSaving] = useState(false);
+  const [enabled, setEnabled] = useState(false);
+  const [siteKey, setSiteKey] = useState("");
+  const [secretKey, setSecretKey] = useState("");
+  const [hasSavedSecret, setHasSavedSecret] = useState(false);
+  const [showSecret, setShowSecret] = useState(false);
+  const onEnabledChangeRef = useRef(onEnabledChange);
+  onEnabledChangeRef.current = onEnabledChange;
+  useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      setLoading(true);
+      try {
+        const res = await fetch(`/api/settings/${settingsGroup}`, {
+          cache: "no-store"
+        });
+        const data = res.ok ? await res.json() : {};
+        if (cancelled) return;
+        const isEnabled = data.enabled === "true" || data.enabled === "1";
+        setEnabled(isEnabled);
+        setSiteKey(String(data.siteKey ?? data.TURNSTILE_SITE_KEY ?? "").trim());
+        const secret = String(data.secretKey ?? data.TURNSTILE_SECRET_KEY ?? "").trim();
+        setSecretKey("");
+        setHasSavedSecret(Boolean(secret));
+      } catch {
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    settingsGroup
+  ]);
+  const handleSave = /* @__PURE__ */ __name(async () => {
+    setSaving(true);
+    try {
+      const payload = {
+        enabled: {
+          value: enabled ? "true" : "false",
+          type: "public"
+        },
+        siteKey: {
+          value: siteKey.trim(),
+          type: "public"
+        }
+      };
+      if (secretKey.trim()) {
+        payload.secretKey = {
+          value: secretKey.trim(),
+          type: "private",
+          encrypted: true
+        };
+      }
+      const res = await fetch(`/api/settings/${settingsGroup}`, {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(payload)
+      });
+      if (res.ok) {
+        toast.success("Turnstile settings saved");
+        if (secretKey.trim()) {
+          setHasSavedSecret(true);
+          setSecretKey("");
+        }
+        onEnabledChangeRef.current?.(enabled);
+      } else {
+        const err = await res.json().catch(() => ({}));
+        toast.error(err?.message || "Failed to save settings");
+      }
+    } catch {
+      toast.error("Failed to save settings");
+    } finally {
+      setSaving(false);
+    }
+  }, "handleSave");
+  if (loading) {
+    return /* @__PURE__ */ React.createElement("div", {
+      className: "flex items-center justify-center p-8 text-muted-foreground text-sm"
+    }, /* @__PURE__ */ React.createElement(Loader2, {
+      className: "mr-2 h-4 w-4 animate-spin"
+    }), "Loading settings\u2026");
+  }
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "rounded-lg border border-gray-200 bg-gray-50/80 p-4 dark:border-gray-700 dark:bg-gray-800/40"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-enabled`,
+    className: "text-sm font-semibold text-gray-900 dark:text-white"
+  }, "Enable Cloudflare Turnstile"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Master switch for bot protection. When enabled, helps protect supported forms from automated bots, while forms can apply their configured bot protection settings.")), /* @__PURE__ */ React.createElement(Switch, {
+    id: `${settingsGroup}-enabled`,
+    checked: enabled,
+    onCheckedChange: setEnabled
+  }))), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-siteKey`,
+    className: "text-sm font-medium"
+  }, "Turnstile Site Key (Public)"), /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-siteKey`,
+    value: siteKey,
+    onChange: /* @__PURE__ */ __name((e) => setSiteKey(e.target.value), "onChange"),
+    placeholder: "0x4AAAAAA...",
+    className: "h-9 font-mono text-sm"
+  }), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Obtained from your Cloudflare dashboard under Turnstile Sites. Safe to expose to the frontend.")), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-secretKey`,
+    className: "text-sm font-medium"
+  }, "Turnstile Secret Key (Private)"), hasSavedSecret && /* @__PURE__ */ React.createElement("span", {
+    className: "inline-flex items-center gap-1 text-xs font-medium text-emerald-600 dark:text-emerald-400"
+  }, /* @__PURE__ */ React.createElement(ShieldCheck, {
+    className: "h-3.5 w-3.5"
+  }), "Secret key configured")), /* @__PURE__ */ React.createElement("div", {
+    className: "relative"
+  }, /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-secretKey`,
+    type: showSecret ? "text" : "password",
+    value: secretKey,
+    onChange: /* @__PURE__ */ __name((e) => setSecretKey(e.target.value), "onChange"),
+    placeholder: hasSavedSecret ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022 (leave blank to keep unchanged)" : "0x4AAAAAA...",
+    className: "h-9 font-mono text-sm pr-10"
+  }), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    className: "absolute right-2.5 top-1/2 -translate-y-1/2 text-gray-400 hover:text-gray-600 dark:hover:text-gray-200",
+    onClick: /* @__PURE__ */ __name(() => setShowSecret(!showSecret), "onClick")
+  }, showSecret ? /* @__PURE__ */ React.createElement(EyeOff, {
+    className: "h-4 w-4"
+  }) : /* @__PURE__ */ React.createElement(Eye, {
+    className: "h-4 w-4"
+  }))), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Used only on the server to verify tokens with Cloudflare Siteverify API. Never sent to browsers."))), /* @__PURE__ */ React.createElement(Button, {
+    onClick: handleSave,
+    disabled: saving,
+    size: "sm",
+    className: "gap-2"
+  }, saving ? /* @__PURE__ */ React.createElement(Loader2, {
+    className: "h-4 w-4 animate-spin"
+  }) : /* @__PURE__ */ React.createElement(Save, {
+    className: "h-4 w-4"
+  }), "Save Settings"));
+}
+var init_TurnstilePluginSettings = __esm({
+  "src/admin/components/TurnstilePluginSettings.tsx"() {
+    "use client";
+    init_button();
+    init_input();
+    init_label();
+    init_switch();
+    __name(TurnstilePluginSettings, "TurnstilePluginSettings");
+  }
+});
 
 // src/plugins/llm/chat-email-intent.ts
 function normalizeIntentKey(raw) {
@@ -18484,6 +18857,7 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
   const isSocialMedia = settingsGroup === "social_media";
   const isMultiVendor = settingsGroup === "multi_vendor";
   const isAuthProviders = settingsGroup === "auth_providers";
+  const isTurnstile = settingsGroup === "turnstile";
   const [enabled, setEnabled] = useState(true);
   const [botName, setBotName] = useState("");
   const [icon, setIcon] = useState("");
@@ -19827,6 +20201,15 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
       }, "onEnabledChange")
     });
   }
+  if (isTurnstile) {
+    return /* @__PURE__ */ React.createElement(TurnstilePluginSettings, {
+      settingsGroup,
+      onEnabledChange: /* @__PURE__ */ __name((value) => {
+        setEnabled(value);
+        onSaved?.();
+      }, "onEnabledChange")
+    });
+  }
   if (loading) return /* @__PURE__ */ React.createElement("div", {
     className: "text-sm text-gray-500 dark:text-gray-400"
   }, "Loading...");
@@ -21167,6 +21550,10 @@ function PluginsPage() {
       const ap = pluginDescriptors.find((p) => p.name === "auth_providers");
       if (ap) setSelectedName(ap.name);
     }
+    if (q === "turnstile" || q === "cloudflare_turnstile" || q === "captcha") {
+      const ts = pluginDescriptors.find((p) => p.name === "turnstile");
+      if (ts) setSelectedName(ts.name);
+    }
   }, [
     searchParams,
     pluginDescriptors
@@ -21279,6 +21666,7 @@ var init_PluginsPage = __esm({
     init_select();
     init_EventNotificationsPluginSettings();
     init_AuthProvidersPluginSettings();
+    init_TurnstilePluginSettings();
     init_ImageOrUrlField();
     init_chat_email_intent();
     init_llm_agent_scope();
@@ -21298,7 +21686,8 @@ var init_PluginsPage = __esm({
       share: Share2,
       whatsapp: MessageCircle,
       event_notifications: Bell,
-      auth_providers: KeyRound
+      auth_providers: KeyRound,
+      turnstile: ShieldCheck
     };
     __name(normalizeSmsProviderChoice, "normalizeSmsProviderChoice");
     __name(normalizeMsg91ApiMode, "normalizeMsg91ApiMode");
@@ -22260,7 +22649,7 @@ function VendorTeamPage() {
     }
   }, []);
   useEffect(() => {
-    if (canManage) load();
+    if (canManage) void load();
     else setLoading(false);
   }, [
     canManage,
@@ -22318,10 +22707,18 @@ function VendorTeamPage() {
   }, "closeInviteDialog");
   if (!canManage) {
     return /* @__PURE__ */ React25__default.createElement("div", {
-      className: "p-6 max-w-lg"
+      className: "min-w-0 rounded-lg bg-white shadow-md"
+    }, /* @__PURE__ */ React25__default.createElement("div", {
+      className: "rounded-t-lg border-b border-gray-700 bg-gray-800 px-4 py-2.5"
+    }, /* @__PURE__ */ React25__default.createElement("h1", {
+      className: "text-base font-semibold text-white"
+    }, "Vendor Team"), /* @__PURE__ */ React25__default.createElement("p", {
+      className: "mt-0.5 text-xs text-gray-300"
+    }, "Invite members and assign a store role")), /* @__PURE__ */ React25__default.createElement("div", {
+      className: "p-6"
     }, /* @__PURE__ */ React25__default.createElement("p", {
       className: "text-sm text-red-600"
-    }, "Only the store owner can manage the vendor team."));
+    }, "Only the store owner can manage the vendor team.")));
   }
   const handleAdd = /* @__PURE__ */ __name(async (e) => {
     e.preventDefault();
@@ -22423,17 +22820,21 @@ function VendorTeamPage() {
     }
   }, "handleRemove");
   return /* @__PURE__ */ React25__default.createElement("div", {
-    className: "p-6 max-w-3xl"
+    className: "min-w-0 rounded-lg bg-white shadow-md"
+  }, /* @__PURE__ */ React25__default.createElement("div", {
+    className: "rounded-t-lg border-b border-gray-700 bg-gray-800 px-4 py-2.5"
   }, /* @__PURE__ */ React25__default.createElement("h1", {
-    className: "text-xl font-semibold text-gray-900"
+    className: "text-base font-semibold text-white"
   }, "Vendor Team"), /* @__PURE__ */ React25__default.createElement("p", {
-    className: "mt-1 text-sm text-gray-600"
-  }, "Invite member and assign a store role."), /* @__PURE__ */ React25__default.createElement("div", {
-    className: "mt-6 rounded-lg border border-gray-200 overflow-hidden"
+    className: "mt-0.5 text-xs text-gray-300"
+  }, "Invite member and assign a store role")), /* @__PURE__ */ React25__default.createElement("div", {
+    className: "p-6 space-y-6"
+  }, /* @__PURE__ */ React25__default.createElement("div", {
+    className: "rounded-lg border border-gray-200 overflow-hidden"
   }, /* @__PURE__ */ React25__default.createElement("table", {
     className: "min-w-full text-sm"
   }, /* @__PURE__ */ React25__default.createElement("thead", {
-    className: "bg-gray-50 text-left text-gray-600"
+    className: "bg-gray-50 text-left text-gray-600 border-b border-gray-200"
   }, /* @__PURE__ */ React25__default.createElement("tr", null, /* @__PURE__ */ React25__default.createElement("th", {
     className: "px-3 py-2 font-medium"
   }, "Name"), /* @__PURE__ */ React25__default.createElement("th", {
@@ -22443,8 +22844,10 @@ function VendorTeamPage() {
   }, "Phone"), /* @__PURE__ */ React25__default.createElement("th", {
     className: "px-3 py-2 font-medium"
   }, "Store role"), /* @__PURE__ */ React25__default.createElement("th", {
-    className: "px-3 py-2 font-medium"
-  }))), /* @__PURE__ */ React25__default.createElement("tbody", null, loading ? /* @__PURE__ */ React25__default.createElement("tr", null, /* @__PURE__ */ React25__default.createElement("td", {
+    className: "px-3 py-2 font-medium text-right"
+  }))), /* @__PURE__ */ React25__default.createElement("tbody", {
+    className: "divide-y divide-gray-100"
+  }, loading ? /* @__PURE__ */ React25__default.createElement("tr", null, /* @__PURE__ */ React25__default.createElement("td", {
     colSpan: 5,
     className: "px-3 py-4 text-gray-500"
   }, "Loading\u2026")) : members.length === 0 ? /* @__PURE__ */ React25__default.createElement("tr", null, /* @__PURE__ */ React25__default.createElement("td", {
@@ -22454,15 +22857,17 @@ function VendorTeamPage() {
     key: m.vendorUserId,
     className: "border-t border-gray-100"
   }, /* @__PURE__ */ React25__default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 font-medium text-gray-900"
   }, m.name ?? "\u2014"), /* @__PURE__ */ React25__default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 text-gray-600"
   }, m.email), /* @__PURE__ */ React25__default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 text-gray-600"
   }, m.phone ?? "\u2014"), /* @__PURE__ */ React25__default.createElement("td", {
     className: "px-3 py-2"
-  }, m.isOwnerRole ? /* @__PURE__ */ React25__default.createElement("span", null, m.vendorRoleName ?? "Owner") : /* @__PURE__ */ React25__default.createElement("select", {
-    className: "rounded border border-gray-200 px-2 py-1 text-sm",
+  }, m.isOwnerRole ? /* @__PURE__ */ React25__default.createElement("span", {
+    className: "text-gray-900 font-medium"
+  }, m.vendorRoleName ?? "Owner") : /* @__PURE__ */ React25__default.createElement("select", {
+    className: "rounded border border-gray-200 px-2 py-1 text-sm bg-white",
     value: m.vendorRoleId ?? "",
     disabled: roleUpdating === m.userId,
     onChange: /* @__PURE__ */ __name((e) => handleRoleChange(m.userId, Number(e.target.value)), "onChange")
@@ -22478,7 +22883,7 @@ function VendorTeamPage() {
     onClick: /* @__PURE__ */ __name(() => handleRemove(m.userId), "onClick")
   }, "Remove"))))))), /* @__PURE__ */ React25__default.createElement("form", {
     onSubmit: handleAdd,
-    className: "mt-8 space-y-4 rounded-lg border border-gray-200 p-4"
+    className: "space-y-4 rounded-lg border border-gray-200 p-4"
   }, /* @__PURE__ */ React25__default.createElement("h2", {
     className: "text-sm font-medium text-gray-900"
   }, "Invite team member"), /* @__PURE__ */ React25__default.createElement("div", {
@@ -22512,7 +22917,7 @@ function VendorTeamPage() {
     htmlFor: "teamRole"
   }, "Store role"), /* @__PURE__ */ React25__default.createElement("select", {
     id: "teamRole",
-    className: "mt-1 w-full rounded-md border border-gray-200 px-3 py-2 text-sm",
+    className: "mt-1 w-full rounded-md border border-gray-200 px-3 py-2 text-sm bg-white",
     value: vendorRoleId,
     onChange: /* @__PURE__ */ __name((e) => setVendorRoleId(e.target.value ? Number(e.target.value) : ""), "onChange")
   }, assignableRoles.map((r) => /* @__PURE__ */ React25__default.createElement("option", {
@@ -22551,7 +22956,7 @@ function VendorTeamPage() {
   }, message), /* @__PURE__ */ React25__default.createElement(Button, {
     type: "submit",
     disabled: submitting
-  }, submitting ? "Inviting\u2026" : "Invite member")), /* @__PURE__ */ React25__default.createElement(Dialog, {
+  }, submitting ? "Inviting\u2026" : "Invite member"))), /* @__PURE__ */ React25__default.createElement(Dialog, {
     open: inviteDialog != null,
     onOpenChange: /* @__PURE__ */ __name((open) => {
       if (!open) closeInviteDialog();
@@ -22571,7 +22976,7 @@ function VendorTeamPage() {
     variant: "outline",
     onClick: /* @__PURE__ */ __name(() => void copyInviteLink(), "onClick")
   }, linkCopied ? /* @__PURE__ */ React25__default.createElement(Check, {
-    className: "h-4 w-4 mr-2"
+    className: "h-4 w-4 mr-2 text-green-600"
   }) : /* @__PURE__ */ React25__default.createElement(Copy, {
     className: "h-4 w-4 mr-2"
   }), linkCopied ? "Copied" : "Copy invite link")), /* @__PURE__ */ React25__default.createElement(DialogFooter, null, /* @__PURE__ */ React25__default.createElement(Button, {
@@ -30586,15 +30991,15 @@ function ProductEditPage({ productId }) {
             })));
           }
         }
-        if (!cancelled && formsRes.ok) {
-          const d = await formsRes.json();
-          if (Array.isArray(d.data)) {
-            setContactForms(d.data.filter((row) => row.id != null).map((row) => ({
-              id: Number(row.id),
-              name: row.name?.trim() || `Form #${row.id}`,
-              slug: row.slug
-            })));
-          }
+        const formsResActual = formsRes.ok ? formsRes : await fetch("/api/admin/cms-forms/product-options").catch(() => null);
+        if (!cancelled && formsResActual && formsResActual.ok) {
+          const d = await formsResActual.json();
+          const rows = Array.isArray(d.data) ? d.data : Array.isArray(d) ? d : [];
+          setContactForms(rows.filter((row) => row.id != null || row.value != null).map((row) => ({
+            id: Number(row.id ?? row.value),
+            name: row.name?.trim() || row.label?.trim() || `Form #${row.id ?? row.value}`,
+            slug: row.slug
+          })));
         }
         if (!cancelled && refundRes.ok) {
           const d = await refundRes.json();