@infuro/cms-core 1.0.59 → 1.0.61

package/dist/admin.cjs

@@ -361,7 +361,15 @@ var init_vendor_scope = __esm({
       ...VENDOR_SCOPED_STORE_ENTITIES,
       "order_discounts",
       "order_addresses",
-      "event_products"
+      "event_products",
+      "attendees",
+      "order-attendees",
+      "order_attendees",
+      "scan",
+      "verify-attendee-qr",
+      "verify_attendee_qr",
+      "forms",
+      "cms-forms"
     ]);
     __name(isVendorGroupName, "isVendorGroupName");
     __name(isPlatformAdministrator, "isPlatformAdministrator");
@@ -887,7 +895,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.59" ;
+    CMS_VERSION = "1.0.61" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -1609,6 +1617,15 @@ var init_builtin_plugin_descriptors = __esm({
         enabled: true,
         icon: "auth_providers",
         settingsGroup: "auth_providers"
+      },
+      {
+        name: "turnstile",
+        label: "Cloudflare Turnstile",
+        version: "1.0.0",
+        description: "Protect forms, registration, and authentication from spam and bots with Cloudflare Turnstile.",
+        enabled: true,
+        icon: "turnstile",
+        settingsGroup: "turnstile"
       }
     ];
   }
@@ -2209,6 +2226,11 @@ function FileUpload({ onUploadSuccess }) {
     if (!selectedFile) return;
     setUploading(true);
     setProgress(10);
+    console.info("[upload] file-upload start", {
+      name: selectedFile.name,
+      type: selectedFile.type,
+      size: selectedFile.size
+    });
     const formData = new FormData();
     formData.append("file", selectedFile);
     try {
@@ -2217,20 +2239,47 @@ function FileUpload({ onUploadSuccess }) {
         body: formData
       });
       setProgress(60);
-      const data = await response.json();
+      const data = await response.json().catch((parseErr) => {
+        console.error("[upload] file-upload JSON parse failed", {
+          status: response.status,
+          parseErr
+        });
+        return {};
+      });
+      console.info("[upload] file-upload response", {
+        status: response.status,
+        ok: response.ok,
+        url: data.url ?? data.filePath ?? null,
+        error: data.error ?? null,
+        details: data.details ?? null
+      });
       if (response.ok) {
-        setFileUrl(data.url);
+        const url = data.url ?? data.filePath;
+        setFileUrl(url);
         setProgress(100);
-        onUploadSuccess(data.url);
+        console.info("[upload] file-upload ok", {
+          url,
+          name: selectedFile.name
+        });
+        onUploadSuccess(url);
       } else {
         console.error("[upload] API error", {
           status: response.status,
           error: data.error,
-          details: data.details
+          details: data.details,
+          name: selectedFile.name,
+          type: selectedFile.type,
+          size: selectedFile.size
         });
       }
     } catch (error) {
-      console.error("Upload error:", error);
+      console.error("[upload] file-upload failed", {
+        name: selectedFile.name,
+        type: selectedFile.type,
+        size: selectedFile.size,
+        error: error instanceof Error ? error.message : String(error),
+        stack: error instanceof Error ? error.stack : void 0
+      });
     }
     setUploading(false);
   }, "handleUpload");
@@ -2362,28 +2411,64 @@ function ImageOrUrlField({ label, value, onChange, placeholder = "https://\u2026
       return;
     }
     setIsUploading(true);
+    console.info("[upload] ImageOrUrlField start", {
+      name: file.name,
+      type: file.type,
+      size: file.size,
+      isVideo: isVideo2,
+      maxSizeMb
+    });
     try {
       const formData = new FormData();
       formData.append("file", file);
+      console.info("[upload] ImageOrUrlField POST /api/upload", {
+        name: file.name,
+        type: file.type,
+        size: file.size
+      });
       const response = await fetch("/api/upload", {
         method: "POST",
         body: formData
       });
-      const data = await response.json().catch(() => ({}));
+      const data = await response.json().catch((parseErr) => {
+        console.error("[upload] ImageOrUrlField JSON parse failed", {
+          status: response.status,
+          parseErr
+        });
+        return {};
+      });
+      console.info("[upload] ImageOrUrlField response", {
+        status: response.status,
+        ok: response.ok,
+        filePath: data.filePath ?? null,
+        error: data.error ?? null,
+        details: data.details ?? null
+      });
       if (!response.ok) {
         console.error("[upload] API error", {
           status: response.status,
           error: data.error,
-          details: data.details
+          details: data.details,
+          fileName: file.name,
+          fileType: file.type,
+          fileSize: file.size
         });
         throw new Error(data.details || data.error || "Upload failed");
       }
       console.info("[upload] API ok", {
-        filePath: data.filePath
+        filePath: data.filePath,
+        name: file.name,
+        type: file.type
       });
       onChange(data.filePath ?? "");
     } catch (err) {
-      console.error("[upload] client failed", err);
+      console.error("[upload] client failed", {
+        name: file.name,
+        type: file.type,
+        size: file.size,
+        error: err instanceof Error ? err.message : String(err),
+        stack: err instanceof Error ? err.stack : void 0
+      });
       setError(err instanceof Error ? err.message : "Upload failed");
     } finally {
       setIsUploading(false);
@@ -5082,6 +5167,9 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
         });
         if (cancelled) return;
         if (!res.ok) {
+          if (res.status === 403) {
+            throw new Error("You don't have access to this section");
+          }
           throw new Error(`HTTP error! status: ${res.status}`);
         }
         const result = await res.json();
@@ -5498,15 +5586,26 @@ function AdminCRUD({ title, apiEndpoint, columns, addEditPageUrl, customViewPage
     }, "Loading...")));
   }
   if (error) {
+    const isForbidden = error.toLowerCase().includes("don't have access") || error.toLowerCase().includes("forbidden") || error.includes("403");
     return /* @__PURE__ */ React.createElement("div", {
       className: embedded ? "p-4" : "rounded-lg bg-white p-6 shadow-md"
     }, /* @__PURE__ */ React.createElement("div", {
-      className: "text-center py-8"
-    }, /* @__PURE__ */ React.createElement("p", {
+      className: "text-center py-10"
+    }, isForbidden ? /* @__PURE__ */ React.createElement("div", {
+      className: "max-w-md mx-auto"
+    }, /* @__PURE__ */ React.createElement("div", {
+      className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-red-100 mb-3"
+    }, /* @__PURE__ */ React.createElement(LucideIcons.ShieldAlert, {
+      className: "h-6 w-6 text-red-600"
+    })), /* @__PURE__ */ React.createElement("h3", {
+      className: "text-base font-semibold text-gray-900 mb-1"
+    }, "You don't have access"), /* @__PURE__ */ React.createElement("p", {
+      className: "text-sm text-gray-500"
+    }, "You don't have permission to view or manage this tab.")) : /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("p", {
       className: "text-red-600 mb-4"
     }, "Error loading data: ", error), /* @__PURE__ */ React.createElement(Button, {
       onClick: /* @__PURE__ */ __name(() => window.location.reload(), "onClick")
-    }, "Retry")));
+    }, "Retry"))));
   }
   return /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("div", {
     className: shellCls
@@ -6343,6 +6442,7 @@ function FormBuilder({ formId, duplicateFromId }) {
     campaign: "",
     slug: "",
     published: false,
+    enableTurnstile: false,
     fields: []
   });
   const [errors, setErrors] = React25.useState([]);
@@ -6376,6 +6476,7 @@ function FormBuilder({ formId, duplicateFromId }) {
           campaign: data.campaign || "",
           slug: slugNext,
           published: isDup ? false : data.published,
+          enableTurnstile: Boolean(data.enableTurnstile ?? data.enable_turnstile),
           fields: (data.fields ?? []).map((field, index) => ({
             ...field,
             id: isDup ? `field_dup_${Date.now()}_${index}` : field?.id != null ? String(field.id) : `field_${Date.now()}_${index}`,
@@ -6684,7 +6785,21 @@ function FormBuilder({ formId, duplicateFromId }) {
     })), "onCheckedChange")
   }), /* @__PURE__ */ React.createElement("label", {
     className: "text-sm font-medium text-gray-700"
-  }, "Published"))))), /* @__PURE__ */ React.createElement("div", {
+  }, "Published")), /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center space-x-2 pt-2 border-t border-gray-100"
+  }, /* @__PURE__ */ React.createElement(Switch, {
+    checked: formData.enableTurnstile ?? false,
+    onCheckedChange: /* @__PURE__ */ __name((checked) => setFormData((prev) => ({
+      ...prev,
+      enableTurnstile: checked
+    })), "onCheckedChange")
+  }), /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-col"
+  }, /* @__PURE__ */ React.createElement("label", {
+    className: "text-sm font-medium text-gray-700"
+  }, "Enable Cloudflare Turnstile"), /* @__PURE__ */ React.createElement("span", {
+    className: "text-xs text-gray-500"
+  }, "Requires user verification before submission (when Turnstile plugin is active)")))))), /* @__PURE__ */ React.createElement("div", {
     className: "lg:col-span-2"
   }, /* @__PURE__ */ React.createElement("div", {
     className: "bg-white rounded-lg shadow"
@@ -6854,26 +6969,63 @@ function ImageUpload({ value, onChange, onRemove, label, required = false, class
       return;
     }
     setIsUploading(true);
+    console.info("[upload] client image-upload start", {
+      name: file.name,
+      type: file.type,
+      size: file.size,
+      maxSizeMb: maxSize
+    });
     try {
       const formData = new FormData();
       formData.append("file", file);
+      console.info("[upload] client POST /api/upload", {
+        name: file.name,
+        type: file.type,
+        size: file.size
+      });
       const response = await fetch("/api/upload", {
         method: "POST",
         body: formData
       });
-      const data = await response.json();
+      const data = await response.json().catch((parseErr) => {
+        console.error("[upload] client failed to parse JSON response", {
+          status: response.status,
+          parseErr
+        });
+        return {};
+      });
+      console.info("[upload] client response", {
+        status: response.status,
+        ok: response.ok,
+        filePath: data.filePath ?? null,
+        error: data.error ?? null,
+        details: data.details ?? null
+      });
       if (!response.ok) {
         console.error("[upload] API error", {
           status: response.status,
           error: data.error,
-          details: data.details
+          details: data.details,
+          fileName: file.name,
+          fileType: file.type,
+          fileSize: file.size
         });
         throw new Error(data.details || data.error || "Upload failed");
       }
+      console.info("[upload] client image-upload ok", {
+        filePath: data.filePath,
+        name: file.name
+      });
       onChange(data.filePath);
       setUploadProgress(100);
     } catch (error2) {
-      console.error("Upload error:", error2);
+      console.error("[upload] client image-upload failed", {
+        name: file.name,
+        type: file.type,
+        size: file.size,
+        error: error2 instanceof Error ? error2.message : String(error2),
+        stack: error2 instanceof Error ? error2.stack : void 0
+      });
       setError(error2 instanceof Error ? error2.message : "Failed to upload image");
     } finally {
       setIsUploading(false);
@@ -16177,6 +16329,7 @@ var init_order_notification_bindings_shared = __esm({
       "orderNumber",
       "customerName",
       "customerPhone",
+      "customerEmail",
       "eventName",
       "vendorName",
       "total",
@@ -16184,7 +16337,8 @@ var init_order_notification_bindings_shared = __esm({
       "vendorId",
       "refundAmount",
       "invoiceNumber",
-      "invoiceUrl"
+      "invoiceAttachment",
+      "orderDetails"
     ];
     __name(useNotificationVariables, "useNotificationVariables");
     EMAIL_TRIGGER_DEFAULTS = {
@@ -16216,6 +16370,43 @@ If you have any questions, please contact us.
 
 Thank you!`,
         bodyPlaceholder: "Hi {{customerName}},\n\nYour order {{orderNumber}} has been cancelled.\n\nIf a refund is due, it will be returned to your original payment method."
+      },
+      payment_success: {
+        subject: "Payment Successful for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Successful for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+We have received your payment for order {{orderNumber}} of {{total}} {{currency}}.
+
+Order Details:
+{{orderDetails}}
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nPayment for order {{orderNumber}} was successful.\n\nThank you!"
+      },
+      payment_failed: {
+        subject: "Payment Failed for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+Your payment for order {{orderNumber}} of {{total}} {{currency}} could not be completed or remains unpaid.
+
+If you were charged, please contact us with your order number {{orderNumber}}.
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nPayment for order {{orderNumber}} failed or remains unpaid.\n\nThank you!"
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated for Order {{orderNumber}}",
+        body: `Hi {{customerName}},
+
+Your order {{orderNumber}} has been cancelled and a refund of {{refundAmount}} {{currency}} has been initiated.
+
+The amount will be credited back to your original payment method.
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{customerName}},\n\nRefund of {{refundAmount}} {{currency}} for order {{orderNumber}} has been initiated."
       }
     };
     VENDOR_EMAIL_TRIGGER_DEFAULTS = {
@@ -16240,12 +16431,48 @@ Thank you!`,
 
 Order {{orderNumber}} for {{total}} {{currency}} has been cancelled.
 
-Customer: {{customerName}
+Customer: {{customerName}}
 Order Items:
 {{orderDetails}}
 
 Thank you.`,
         bodyPlaceholder: "Hi {{vendorName}},\n\nOrder {{orderNumber}} was cancelled."
+      },
+      payment_success: {
+        subject: "Payment Confirmed for Order {{orderNumber}} - {{customerName}}",
+        subjectPlaceholder: "e.g. Payment Confirmed for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Payment has been confirmed for order {{orderNumber}} ({{total}} {{currency}}).
+
+Customer: {{customerName}}
+Order Items:
+{{orderDetails}}
+
+Thank you!`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nPayment for order {{orderNumber}} confirmed."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid / Failed for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Unpaid for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Payment for order {{orderNumber}} ({{total}} {{currency}}) is unpaid or failed.
+
+Customer: {{customerName}}
+
+Thank you.`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nPayment for order {{orderNumber}} failed or unpaid."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated for Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated for Order {{orderNumber}}",
+        body: `Hi {{vendorName}},
+
+Order {{orderNumber}} has been cancelled and a refund of {{refundAmount}} {{currency}} has been initiated for {{customerName}}.
+
+Thank you.`,
+        bodyPlaceholder: "Hi {{vendorName}},\n\nRefund initiated for order {{orderNumber}}."
       }
     };
     ADMIN_EMAIL_TRIGGER_DEFAULTS = {
@@ -16277,6 +16504,42 @@ Customer: {{customerName}}
 Vendor: {{vendorName}}
 Refund Due: {{refundAmount}} {{currency}}`,
         bodyPlaceholder: "Hi Admin,\n\nOrder {{orderNumber}} cancelled."
+      },
+      payment_success: {
+        subject: "Payment Success Alert: Order {{orderNumber}} ({{total}} {{currency}})",
+        subjectPlaceholder: "e.g. Payment Success Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Payment of {{total}} {{currency}} was successfully captured for order {{orderNumber}}.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}
+
+Order Summary:
+{{orderDetails}}`,
+        bodyPlaceholder: "Payment received for order {{orderNumber}}."
+      },
+      payment_failed: {
+        subject: "Payment Failed / Unpaid Alert: Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Payment for order {{orderNumber}} ({{total}} {{currency}}) is unpaid or failed.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}`,
+        bodyPlaceholder: "Payment failed/unpaid for order {{orderNumber}}."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated Alert: Order {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated Alert: Order {{orderNumber}}",
+        body: `Hi Admin,
+
+Order {{orderNumber}} was cancelled and refund of {{refundAmount}} {{currency}} was initiated.
+
+Customer: {{customerName}}
+Vendor: {{vendorName}}`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     __name(getEmailTriggerDefaults, "getEmailTriggerDefaults");
@@ -16292,6 +16555,24 @@ Refund Due: {{refundAmount}} {{currency}}`,
         subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
         body: `Hi {{customerName}}, your order {{orderNumber}} for {{total}} {{currency}} has been cancelled.`,
         bodyPlaceholder: "Hi {{customerName}}, your order {{orderNumber}} has been cancelled."
+      },
+      payment_success: {
+        subject: "Payment Successful!",
+        subjectPlaceholder: "e.g. Payment Successful!",
+        body: `Hi {{customerName}}, payment for order {{orderNumber}} ({{total}} {{currency}}) was successful.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} successful."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid / Failed",
+        subjectPlaceholder: "e.g. Payment Unpaid / Failed",
+        body: `Hi {{customerName}}, payment for order {{orderNumber}} failed or remains unpaid.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} failed."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated",
+        subjectPlaceholder: "e.g. Refund Initiated",
+        body: `Hi {{customerName}}, a refund of {{refundAmount}} {{currency}} for order {{orderNumber}} has been initiated.`,
+        bodyPlaceholder: "Refund for order {{orderNumber}} initiated."
       }
     };
     VENDOR_PUSH_TRIGGER_DEFAULTS = {
@@ -16306,6 +16587,24 @@ Refund Due: {{refundAmount}} {{currency}}`,
         subjectPlaceholder: "e.g. Order {{orderNumber}} Cancelled",
         body: `Hi {{vendorName}}, order {{orderNumber}} from {{customerName}} has been cancelled.`,
         bodyPlaceholder: "Hi {{vendorName}}, order {{orderNumber}} was cancelled."
+      },
+      payment_success: {
+        subject: "Payment Confirmed: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Confirmed: {{orderNumber}}",
+        body: `Hi {{vendorName}}, payment for order {{orderNumber}} from {{customerName}} has been confirmed.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} confirmed."
+      },
+      payment_failed: {
+        subject: "Payment Unpaid: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Unpaid: {{orderNumber}}",
+        body: `Hi {{vendorName}}, payment for order {{orderNumber}} from {{customerName}} is unpaid or failed.`,
+        bodyPlaceholder: "Payment for order {{orderNumber}} unpaid."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated: {{orderNumber}}",
+        body: `Hi {{vendorName}}, refund initiated for order {{orderNumber}} ({{customerName}}).`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     ADMIN_PUSH_TRIGGER_DEFAULTS = {
@@ -16337,6 +16636,24 @@ Customer: {{customerName}}
 Vendor: {{vendorName}}
 Refund Due: {{refundAmount}} {{currency}}`,
         bodyPlaceholder: "Hi Admin,\n\nOrder {{orderNumber}} cancelled."
+      },
+      payment_success: {
+        subject: "Payment Success: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Success: {{orderNumber}}",
+        body: `Payment of {{total}} {{currency}} captured for order {{orderNumber}} ({{customerName}}).`,
+        bodyPlaceholder: "Payment captured for order {{orderNumber}}."
+      },
+      payment_failed: {
+        subject: "Payment Failed/Unpaid: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Payment Failed: {{orderNumber}}",
+        body: `Payment for order {{orderNumber}} ({{customerName}}) is unpaid or failed.`,
+        bodyPlaceholder: "Payment failed for order {{orderNumber}}."
+      },
+      payment_refund_initiated: {
+        subject: "Refund Initiated: {{orderNumber}}",
+        subjectPlaceholder: "e.g. Refund Initiated: {{orderNumber}}",
+        body: `Refund of {{refundAmount}} {{currency}} initiated for order {{orderNumber}}.`,
+        bodyPlaceholder: "Refund initiated for order {{orderNumber}}."
       }
     };
     __name(getPushTriggerDefaults, "getPushTriggerDefaults");
@@ -16990,6 +17307,7 @@ var init_emailTriggersBindingsPage = __esm({
       orderNumber: "Display order number",
       customerName: "Customer full name",
       customerPhone: "Customer phone",
+      customerEmail: "Customer email address",
       eventName: "Event title / product name",
       vendorName: "Vendor / store name",
       total: "Order total amount",
@@ -16997,7 +17315,8 @@ var init_emailTriggersBindingsPage = __esm({
       vendorId: "Vendor / store ID",
       refundAmount: "Refund amount (refund triggers)",
       invoiceNumber: "Generated invoice number",
-      invoiceUrl: "Link to download invoice PDF"
+      invoiceAttachment: "Include this variable to attach Tax Invoice PDF to email",
+      orderDetails: "Formatted item details summary"
     };
     __name(EmailTriggerBindings, "EmailTriggerBindings");
     __name(TriggerEmailEditor, "TriggerEmailEditor");
@@ -17295,6 +17614,7 @@ var init_pushTriggersBindingsPage = __esm({
       orderNumber: "Display order number",
       customerName: "Customer full name",
       customerPhone: "Customer phone",
+      customerEmail: "Customer email address",
       eventName: "Event title / product name",
       vendorName: "Vendor / store name",
       total: "Order total amount",
@@ -17302,7 +17622,8 @@ var init_pushTriggersBindingsPage = __esm({
       vendorId: "Vendor / store ID",
       refundAmount: "Refund amount (refund triggers)",
       invoiceNumber: "Generated invoice number",
-      invoiceUrl: "Link to download invoice PDF"
+      invoiceAttachment: "Include this variable to attach Tax Invoice PDF to email",
+      orderDetails: "Formatted item details summary"
     };
     __name(PushTriggerBindings, "PushTriggerBindings");
   }
@@ -18140,6 +18461,177 @@ var init_AuthProvidersPluginSettings = __esm({
     __name(AuthProvidersPluginSettings, "AuthProvidersPluginSettings");
   }
 });
+function TurnstilePluginSettings({ settingsGroup, onEnabledChange }) {
+  const [loading, setLoading] = React25.useState(true);
+  const [saving, setSaving] = React25.useState(false);
+  const [enabled, setEnabled] = React25.useState(false);
+  const [siteKey, setSiteKey] = React25.useState("");
+  const [secretKey, setSecretKey] = React25.useState("");
+  const [hasSavedSecret, setHasSavedSecret] = React25.useState(false);
+  const [showSecret, setShowSecret] = React25.useState(false);
+  const onEnabledChangeRef = React25.useRef(onEnabledChange);
+  onEnabledChangeRef.current = onEnabledChange;
+  React25.useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      setLoading(true);
+      try {
+        const res = await fetch(`/api/settings/${settingsGroup}`, {
+          cache: "no-store"
+        });
+        const data = res.ok ? await res.json() : {};
+        if (cancelled) return;
+        const isEnabled = data.enabled === "true" || data.enabled === "1";
+        setEnabled(isEnabled);
+        setSiteKey(String(data.siteKey ?? data.TURNSTILE_SITE_KEY ?? "").trim());
+        const secret = String(data.secretKey ?? data.TURNSTILE_SECRET_KEY ?? "").trim();
+        setSecretKey("");
+        setHasSavedSecret(Boolean(secret));
+      } catch {
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    settingsGroup
+  ]);
+  const handleSave = /* @__PURE__ */ __name(async () => {
+    setSaving(true);
+    try {
+      const payload = {
+        enabled: {
+          value: enabled ? "true" : "false",
+          type: "public"
+        },
+        siteKey: {
+          value: siteKey.trim(),
+          type: "public"
+        }
+      };
+      if (secretKey.trim()) {
+        payload.secretKey = {
+          value: secretKey.trim(),
+          type: "private",
+          encrypted: true
+        };
+      }
+      const res = await fetch(`/api/settings/${settingsGroup}`, {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(payload)
+      });
+      if (res.ok) {
+        sonner.toast.success("Turnstile settings saved");
+        if (secretKey.trim()) {
+          setHasSavedSecret(true);
+          setSecretKey("");
+        }
+        onEnabledChangeRef.current?.(enabled);
+      } else {
+        const err = await res.json().catch(() => ({}));
+        sonner.toast.error(err?.message || "Failed to save settings");
+      }
+    } catch {
+      sonner.toast.error("Failed to save settings");
+    } finally {
+      setSaving(false);
+    }
+  }, "handleSave");
+  if (loading) {
+    return /* @__PURE__ */ React.createElement("div", {
+      className: "flex items-center justify-center p-8 text-muted-foreground text-sm"
+    }, /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+      className: "mr-2 h-4 w-4 animate-spin"
+    }), "Loading settings\u2026");
+  }
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-6"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "rounded-lg border border-gray-200 bg-gray-50/80 p-4 dark:border-gray-700 dark:bg-gray-800/40"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-0.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-enabled`,
+    className: "text-sm font-semibold text-gray-900 dark:text-white"
+  }, "Enable Cloudflare Turnstile"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Master switch for bot protection. When enabled, helps protect supported forms from automated bots, while forms can apply their configured bot protection settings.")), /* @__PURE__ */ React.createElement(Switch, {
+    id: `${settingsGroup}-enabled`,
+    checked: enabled,
+    onCheckedChange: setEnabled
+  }))), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-siteKey`,
+    className: "text-sm font-medium"
+  }, "Turnstile Site Key (Public)"), /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-siteKey`,
+    value: siteKey,
+    onChange: /* @__PURE__ */ __name((e) => setSiteKey(e.target.value), "onChange"),
+    placeholder: "0x4AAAAAA...",
+    className: "h-9 font-mono text-sm"
+  }), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Obtained from your Cloudflare dashboard under Turnstile Sites. Safe to expose to the frontend.")), /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-1.5"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex items-center justify-between"
+  }, /* @__PURE__ */ React.createElement(Label3, {
+    htmlFor: `${settingsGroup}-secretKey`,
+    className: "text-sm font-medium"
+  }, "Turnstile Secret Key (Private)"), hasSavedSecret && /* @__PURE__ */ React.createElement("span", {
+    className: "inline-flex items-center gap-1 text-xs font-medium text-emerald-600 dark:text-emerald-400"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.ShieldCheck, {
+    className: "h-3.5 w-3.5"
+  }), "Secret key configured")), /* @__PURE__ */ React.createElement("div", {
+    className: "relative"
+  }, /* @__PURE__ */ React.createElement(Input, {
+    id: `${settingsGroup}-secretKey`,
+    type: showSecret ? "text" : "password",
+    value: secretKey,
+    onChange: /* @__PURE__ */ __name((e) => setSecretKey(e.target.value), "onChange"),
+    placeholder: hasSavedSecret ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022 (leave blank to keep unchanged)" : "0x4AAAAAA...",
+    className: "h-9 font-mono text-sm pr-10"
+  }), /* @__PURE__ */ React.createElement("button", {
+    type: "button",
+    className: "absolute right-2.5 top-1/2 -translate-y-1/2 text-gray-400 hover:text-gray-600 dark:hover:text-gray-200",
+    onClick: /* @__PURE__ */ __name(() => setShowSecret(!showSecret), "onClick")
+  }, showSecret ? /* @__PURE__ */ React.createElement(LucideIcons.EyeOff, {
+    className: "h-4 w-4"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Eye, {
+    className: "h-4 w-4"
+  }))), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-muted-foreground"
+  }, "Used only on the server to verify tokens with Cloudflare Siteverify API. Never sent to browsers."))), /* @__PURE__ */ React.createElement(Button, {
+    onClick: handleSave,
+    disabled: saving,
+    size: "sm",
+    className: "gap-2"
+  }, saving ? /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-4 w-4 animate-spin"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Save, {
+    className: "h-4 w-4"
+  }), "Save Settings"));
+}
+var init_TurnstilePluginSettings = __esm({
+  "src/admin/components/TurnstilePluginSettings.tsx"() {
+    "use client";
+    init_button();
+    init_input();
+    init_label();
+    init_switch();
+    __name(TurnstilePluginSettings, "TurnstilePluginSettings");
+  }
+});
 
 // src/plugins/llm/chat-email-intent.ts
 function normalizeIntentKey(raw) {
@@ -18518,6 +19010,7 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
   const isSocialMedia = settingsGroup === "social_media";
   const isMultiVendor = settingsGroup === "multi_vendor";
   const isAuthProviders = settingsGroup === "auth_providers";
+  const isTurnstile = settingsGroup === "turnstile";
   const [enabled, setEnabled] = React25.useState(true);
   const [botName, setBotName] = React25.useState("");
   const [icon, setIcon] = React25.useState("");
@@ -19861,6 +20354,15 @@ function PluginSettingsPanel({ descriptor, onSaved }) {
       }, "onEnabledChange")
     });
   }
+  if (isTurnstile) {
+    return /* @__PURE__ */ React.createElement(TurnstilePluginSettings, {
+      settingsGroup,
+      onEnabledChange: /* @__PURE__ */ __name((value) => {
+        setEnabled(value);
+        onSaved?.();
+      }, "onEnabledChange")
+    });
+  }
   if (loading) return /* @__PURE__ */ React.createElement("div", {
     className: "text-sm text-gray-500 dark:text-gray-400"
   }, "Loading...");
@@ -21201,6 +21703,10 @@ function PluginsPage() {
       const ap = pluginDescriptors.find((p) => p.name === "auth_providers");
       if (ap) setSelectedName(ap.name);
     }
+    if (q === "turnstile" || q === "cloudflare_turnstile" || q === "captcha") {
+      const ts = pluginDescriptors.find((p) => p.name === "turnstile");
+      if (ts) setSelectedName(ts.name);
+    }
   }, [
     searchParams,
     pluginDescriptors
@@ -21313,6 +21819,7 @@ var init_PluginsPage = __esm({
     init_select();
     init_EventNotificationsPluginSettings();
     init_AuthProvidersPluginSettings();
+    init_TurnstilePluginSettings();
     init_ImageOrUrlField();
     init_chat_email_intent();
     init_llm_agent_scope();
@@ -21332,7 +21839,8 @@ var init_PluginsPage = __esm({
       share: LucideIcons.Share2,
       whatsapp: LucideIcons.MessageCircle,
       event_notifications: LucideIcons.Bell,
-      auth_providers: LucideIcons.KeyRound
+      auth_providers: LucideIcons.KeyRound,
+      turnstile: LucideIcons.ShieldCheck
     };
     __name(normalizeSmsProviderChoice, "normalizeSmsProviderChoice");
     __name(normalizeMsg91ApiMode, "normalizeMsg91ApiMode");
@@ -22294,7 +22802,7 @@ function VendorTeamPage() {
     }
   }, []);
   React25.useEffect(() => {
-    if (canManage) load();
+    if (canManage) void load();
     else setLoading(false);
   }, [
     canManage,
@@ -22352,10 +22860,18 @@ function VendorTeamPage() {
   }, "closeInviteDialog");
   if (!canManage) {
     return /* @__PURE__ */ React25__namespace.default.createElement("div", {
-      className: "p-6 max-w-lg"
+      className: "min-w-0 rounded-lg bg-white shadow-md"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
+      className: "rounded-t-lg border-b border-gray-700 bg-gray-800 px-4 py-2.5"
+    }, /* @__PURE__ */ React25__namespace.default.createElement("h1", {
+      className: "text-base font-semibold text-white"
+    }, "Vendor Team"), /* @__PURE__ */ React25__namespace.default.createElement("p", {
+      className: "mt-0.5 text-xs text-gray-300"
+    }, "Invite members and assign a store role")), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+      className: "p-6"
     }, /* @__PURE__ */ React25__namespace.default.createElement("p", {
       className: "text-sm text-red-600"
-    }, "Only the store owner can manage the vendor team."));
+    }, "Only the store owner can manage the vendor team.")));
   }
   const handleAdd = /* @__PURE__ */ __name(async (e) => {
     e.preventDefault();
@@ -22457,17 +22973,21 @@ function VendorTeamPage() {
     }
   }, "handleRemove");
   return /* @__PURE__ */ React25__namespace.default.createElement("div", {
-    className: "p-6 max-w-3xl"
+    className: "min-w-0 rounded-lg bg-white shadow-md"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
+    className: "rounded-t-lg border-b border-gray-700 bg-gray-800 px-4 py-2.5"
   }, /* @__PURE__ */ React25__namespace.default.createElement("h1", {
-    className: "text-xl font-semibold text-gray-900"
+    className: "text-base font-semibold text-white"
   }, "Vendor Team"), /* @__PURE__ */ React25__namespace.default.createElement("p", {
-    className: "mt-1 text-sm text-gray-600"
-  }, "Invite member and assign a store role."), /* @__PURE__ */ React25__namespace.default.createElement("div", {
-    className: "mt-6 rounded-lg border border-gray-200 overflow-hidden"
+    className: "mt-0.5 text-xs text-gray-300"
+  }, "Invite member and assign a store role")), /* @__PURE__ */ React25__namespace.default.createElement("div", {
+    className: "p-6 space-y-6"
+  }, /* @__PURE__ */ React25__namespace.default.createElement("div", {
+    className: "rounded-lg border border-gray-200 overflow-hidden"
   }, /* @__PURE__ */ React25__namespace.default.createElement("table", {
     className: "min-w-full text-sm"
   }, /* @__PURE__ */ React25__namespace.default.createElement("thead", {
-    className: "bg-gray-50 text-left text-gray-600"
+    className: "bg-gray-50 text-left text-gray-600 border-b border-gray-200"
   }, /* @__PURE__ */ React25__namespace.default.createElement("tr", null, /* @__PURE__ */ React25__namespace.default.createElement("th", {
     className: "px-3 py-2 font-medium"
   }, "Name"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
@@ -22477,8 +22997,10 @@ function VendorTeamPage() {
   }, "Phone"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
     className: "px-3 py-2 font-medium"
   }, "Store role"), /* @__PURE__ */ React25__namespace.default.createElement("th", {
-    className: "px-3 py-2 font-medium"
-  }))), /* @__PURE__ */ React25__namespace.default.createElement("tbody", null, loading ? /* @__PURE__ */ React25__namespace.default.createElement("tr", null, /* @__PURE__ */ React25__namespace.default.createElement("td", {
+    className: "px-3 py-2 font-medium text-right"
+  }))), /* @__PURE__ */ React25__namespace.default.createElement("tbody", {
+    className: "divide-y divide-gray-100"
+  }, loading ? /* @__PURE__ */ React25__namespace.default.createElement("tr", null, /* @__PURE__ */ React25__namespace.default.createElement("td", {
     colSpan: 5,
     className: "px-3 py-4 text-gray-500"
   }, "Loading\u2026")) : members.length === 0 ? /* @__PURE__ */ React25__namespace.default.createElement("tr", null, /* @__PURE__ */ React25__namespace.default.createElement("td", {
@@ -22488,15 +23010,17 @@ function VendorTeamPage() {
     key: m.vendorUserId,
     className: "border-t border-gray-100"
   }, /* @__PURE__ */ React25__namespace.default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 font-medium text-gray-900"
   }, m.name ?? "\u2014"), /* @__PURE__ */ React25__namespace.default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 text-gray-600"
   }, m.email), /* @__PURE__ */ React25__namespace.default.createElement("td", {
-    className: "px-3 py-2"
+    className: "px-3 py-2 text-gray-600"
   }, m.phone ?? "\u2014"), /* @__PURE__ */ React25__namespace.default.createElement("td", {
     className: "px-3 py-2"
-  }, m.isOwnerRole ? /* @__PURE__ */ React25__namespace.default.createElement("span", null, m.vendorRoleName ?? "Owner") : /* @__PURE__ */ React25__namespace.default.createElement("select", {
-    className: "rounded border border-gray-200 px-2 py-1 text-sm",
+  }, m.isOwnerRole ? /* @__PURE__ */ React25__namespace.default.createElement("span", {
+    className: "text-gray-900 font-medium"
+  }, m.vendorRoleName ?? "Owner") : /* @__PURE__ */ React25__namespace.default.createElement("select", {
+    className: "rounded border border-gray-200 px-2 py-1 text-sm bg-white",
     value: m.vendorRoleId ?? "",
     disabled: roleUpdating === m.userId,
     onChange: /* @__PURE__ */ __name((e) => handleRoleChange(m.userId, Number(e.target.value)), "onChange")
@@ -22512,7 +23036,7 @@ function VendorTeamPage() {
     onClick: /* @__PURE__ */ __name(() => handleRemove(m.userId), "onClick")
   }, "Remove"))))))), /* @__PURE__ */ React25__namespace.default.createElement("form", {
     onSubmit: handleAdd,
-    className: "mt-8 space-y-4 rounded-lg border border-gray-200 p-4"
+    className: "space-y-4 rounded-lg border border-gray-200 p-4"
   }, /* @__PURE__ */ React25__namespace.default.createElement("h2", {
     className: "text-sm font-medium text-gray-900"
   }, "Invite team member"), /* @__PURE__ */ React25__namespace.default.createElement("div", {
@@ -22546,7 +23070,7 @@ function VendorTeamPage() {
     htmlFor: "teamRole"
   }, "Store role"), /* @__PURE__ */ React25__namespace.default.createElement("select", {
     id: "teamRole",
-    className: "mt-1 w-full rounded-md border border-gray-200 px-3 py-2 text-sm",
+    className: "mt-1 w-full rounded-md border border-gray-200 px-3 py-2 text-sm bg-white",
     value: vendorRoleId,
     onChange: /* @__PURE__ */ __name((e) => setVendorRoleId(e.target.value ? Number(e.target.value) : ""), "onChange")
   }, assignableRoles.map((r) => /* @__PURE__ */ React25__namespace.default.createElement("option", {
@@ -22585,7 +23109,7 @@ function VendorTeamPage() {
   }, message), /* @__PURE__ */ React25__namespace.default.createElement(Button, {
     type: "submit",
     disabled: submitting
-  }, submitting ? "Inviting\u2026" : "Invite member")), /* @__PURE__ */ React25__namespace.default.createElement(Dialog, {
+  }, submitting ? "Inviting\u2026" : "Invite member"))), /* @__PURE__ */ React25__namespace.default.createElement(Dialog, {
     open: inviteDialog != null,
     onOpenChange: /* @__PURE__ */ __name((open) => {
       if (!open) closeInviteDialog();
@@ -22605,7 +23129,7 @@ function VendorTeamPage() {
     variant: "outline",
     onClick: /* @__PURE__ */ __name(() => void copyInviteLink(), "onClick")
   }, linkCopied ? /* @__PURE__ */ React25__namespace.default.createElement(LucideIcons.Check, {
-    className: "h-4 w-4 mr-2"
+    className: "h-4 w-4 mr-2 text-green-600"
   }) : /* @__PURE__ */ React25__namespace.default.createElement(LucideIcons.Copy, {
     className: "h-4 w-4 mr-2"
   }), linkCopied ? "Copied" : "Copy invite link")), /* @__PURE__ */ React25__namespace.default.createElement(DialogFooter, null, /* @__PURE__ */ React25__namespace.default.createElement(Button, {
@@ -30620,15 +31144,15 @@ function ProductEditPage({ productId }) {
             })));
           }
         }
-        if (!cancelled && formsRes.ok) {
-          const d = await formsRes.json();
-          if (Array.isArray(d.data)) {
-            setContactForms(d.data.filter((row) => row.id != null).map((row) => ({
-              id: Number(row.id),
-              name: row.name?.trim() || `Form #${row.id}`,
-              slug: row.slug
-            })));
-          }
+        const formsResActual = formsRes.ok ? formsRes : await fetch("/api/admin/cms-forms/product-options").catch(() => null);
+        if (!cancelled && formsResActual && formsResActual.ok) {
+          const d = await formsResActual.json();
+          const rows = Array.isArray(d.data) ? d.data : Array.isArray(d) ? d : [];
+          setContactForms(rows.filter((row) => row.id != null || row.value != null).map((row) => ({
+            id: Number(row.id ?? row.value),
+            name: row.name?.trim() || row.label?.trim() || `Form #${row.id ?? row.value}`,
+            slug: row.slug
+          })));
         }
         if (!cancelled && refundRes.ok) {
           const d = await refundRes.json();
@@ -32880,6 +33404,252 @@ var init_EventProductsSection = __esm({
     __name(EventProductsSection, "EventProductsSection");
   }
 });
+function AttachComboModal({ open, onOpenChange, excludeComboIds = [], onAttach }) {
+  const [attachingId, setAttachingId] = React25.useState(null);
+  const [error, setError] = React25.useState(null);
+  const comboColumns = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.columns.filter((c) => c.field !== "eventId"), []);
+  const comboFilterColumns = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.columns.filter((c) => c.field !== "eventId"), []);
+  const comboFilters = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.filters?.filter((f) => f.param !== "eventId"), []);
+  const extraListParams = React25.useMemo(() => {
+    const params = {};
+    if (excludeComboIds.length > 0) {
+      params.excludeIds = excludeComboIds.join(",");
+    }
+    return params;
+  }, [
+    excludeComboIds
+  ]);
+  const handleAttach = /* @__PURE__ */ __name(async (comboId) => {
+    setError(null);
+    setAttachingId(comboId);
+    try {
+      await onAttach(comboId);
+      onOpenChange(false);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Failed to attach combo");
+    } finally {
+      setAttachingId(null);
+    }
+  }, "handleAttach");
+  return /* @__PURE__ */ React.createElement(Dialog, {
+    open,
+    onOpenChange
+  }, /* @__PURE__ */ React.createElement(DialogContent, {
+    className: "max-w-4xl max-h-[90vh] overflow-y-auto"
+  }, /* @__PURE__ */ React.createElement(DialogHeader, null, /* @__PURE__ */ React.createElement(DialogTitle, null, "Attach Event Combo"), /* @__PURE__ */ React.createElement(DialogDescription, null, "Choose a combo to link to this event.")), error ? /* @__PURE__ */ React.createElement("p", {
+    className: "text-sm text-red-600 bg-red-50 rounded-md px-3 py-2"
+  }, error) : null, /* @__PURE__ */ React.createElement(AdminCRUD, {
+    key: `attach-combos-${excludeComboIds.join(",")}-${open}`,
+    title: "Combos",
+    apiEndpoint: "/api/combos",
+    columns: comboColumns,
+    filterColumns: comboFilterColumns,
+    addEditPageUrl: "",
+    defaultSortField: exports.STORE_CRUD_CONFIGS.combos.defaultSortField,
+    defaultSortOrder: exports.STORE_CRUD_CONFIGS.combos.defaultSortOrder,
+    filters: comboFilters,
+    extraListParams,
+    embedded: true,
+    disableRowClick: true,
+    emptyState: {
+      title: "No combos available",
+      description: excludeComboIds.length ? "All existing combos are already attached to this event, or none exist yet." : "Create a combo first, then attach it here."
+    },
+    customRowActions: /* @__PURE__ */ __name((item) => {
+      const id = Number(item.id);
+      const busy = attachingId === id;
+      return /* @__PURE__ */ React.createElement(Button, {
+        type: "button",
+        size: "sm",
+        variant: "outline",
+        disabled: !Number.isFinite(id) || busy,
+        className: "h-7 text-xs",
+        onClick: /* @__PURE__ */ __name(() => void handleAttach(id), "onClick")
+      }, /* @__PURE__ */ React.createElement(LucideIcons.Link2, {
+        className: "h-3.5 w-3.5 mr-1"
+      }), busy ? "Attaching\u2026" : "Attach");
+    }, "customRowActions")
+  })));
+}
+var init_AttachComboModal = __esm({
+  "src/components/Admin/AttachComboModal.tsx"() {
+    "use client";
+    init_dialog();
+    init_button();
+    init_CRUD();
+    init_store_crud_configs();
+    __name(AttachComboModal, "AttachComboModal");
+  }
+});
+function EventCombosSection({ eventId, returnUrl, readOnly = false }) {
+  const [rows, setRows] = React25.useState([]);
+  const [loading, setLoading] = React25.useState(true);
+  const [attachModalOpen, setAttachModalOpen] = React25.useState(false);
+  const [listRefreshKey, setListRefreshKey] = React25.useState(0);
+  const [detachingId, setDetachingId] = React25.useState(null);
+  const comboColumns = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.columns.filter((c) => c.field !== "eventId"), []);
+  const comboFilterColumns = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.columns.filter((c) => c.field !== "eventId"), []);
+  const comboFilters = React25.useMemo(() => exports.STORE_CRUD_CONFIGS.combos.filters?.filter((f) => f.param !== "eventId"), []);
+  const loadRows = React25.useCallback(async () => {
+    setLoading(true);
+    try {
+      const res = await fetch(`/api/combos?eventId=${encodeURIComponent(eventId)}&limit=200`);
+      if (!res.ok) throw new Error("Failed to load");
+      const data = await res.json();
+      const list = Array.isArray(data.data) ? data.data : [];
+      setRows(list);
+    } catch {
+      setRows([]);
+    } finally {
+      setLoading(false);
+    }
+  }, [
+    eventId
+  ]);
+  React25.useEffect(() => {
+    void loadRows();
+  }, [
+    loadRows
+  ]);
+  const attachedComboIds = React25.useMemo(() => rows.map((r) => Number(r.id)).filter((id) => Number.isFinite(id) && id > 0), [
+    rows
+  ]);
+  const attachToEvent = /* @__PURE__ */ __name(async (comboId) => {
+    const res = await fetch(`/api/combos/${comboId}`, {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        eventId: Number(eventId)
+      })
+    });
+    if (!res.ok) {
+      const data = await res.json().catch(() => ({}));
+      throw new Error(data.error ?? "Failed to attach combo");
+    }
+    await loadRows();
+    setListRefreshKey((k) => k + 1);
+  }, "attachToEvent");
+  const detachFromEvent = /* @__PURE__ */ __name(async (comboId) => {
+    if (!window.confirm("Remove this combo from the event?")) return;
+    setDetachingId(comboId);
+    try {
+      const res = await fetch(`/api/combos/${comboId}`, {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          eventId: null
+        })
+      });
+      if (res.ok) {
+        await loadRows();
+        setListRefreshKey((k) => k + 1);
+      }
+    } finally {
+      setDetachingId(null);
+    }
+  }, "detachFromEvent");
+  const comboCreateHref = !readOnly ? `/admin/combos/create?eventId=${encodeURIComponent(eventId)}${returnUrl ? `&from=${encodeURIComponent(returnUrl)}` : ""}` : null;
+  if (loading) {
+    return /* @__PURE__ */ React.createElement("section", {
+      className: "border border-gray-200 rounded-lg p-8 text-center text-sm text-gray-500"
+    }, "Loading combos\u2026");
+  }
+  if (readOnly && rows.length === 0) {
+    return /* @__PURE__ */ React.createElement("section", {
+      className: "border border-gray-200 rounded-lg p-6"
+    }, /* @__PURE__ */ React.createElement("h2", {
+      className: "text-sm font-semibold text-gray-900"
+    }, "Event Combos"), /* @__PURE__ */ React.createElement("p", {
+      className: "mt-2 text-sm text-gray-600"
+    }, "No combos are linked to this event yet."));
+  }
+  return /* @__PURE__ */ React.createElement("div", {
+    className: "space-y-4"
+  }, /* @__PURE__ */ React.createElement("section", {
+    className: "border border-gray-200 rounded-lg overflow-hidden bg-white"
+  }, /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-wrap items-center justify-between gap-3 px-4 py-3 border-b border-gray-200"
+  }, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("h2", {
+    className: "text-sm font-semibold text-gray-900"
+  }, "Event Combos"), /* @__PURE__ */ React.createElement("p", {
+    className: "text-xs text-gray-500"
+  }, "Event Combos linked to this event.")), !readOnly ? /* @__PURE__ */ React.createElement("div", {
+    className: "flex flex-wrap items-center gap-2"
+  }, /* @__PURE__ */ React.createElement(Button, {
+    type: "button",
+    variant: "outline",
+    size: "sm",
+    className: "h-8 text-xs",
+    onClick: /* @__PURE__ */ __name(() => setAttachModalOpen(true), "onClick")
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Link2, {
+    className: "h-3.5 w-3.5 mr-1"
+  }), "Attach event combo"), comboCreateHref ? /* @__PURE__ */ React.createElement(Link2__default.default, {
+    href: comboCreateHref,
+    className: "inline-flex items-center gap-1.5 rounded-md border border-gray-300 bg-white px-2.5 py-1.5 text-xs font-medium text-gray-700 hover:bg-gray-50 h-8"
+  }, /* @__PURE__ */ React.createElement(LucideIcons.Plus, {
+    className: "h-3.5 w-3.5"
+  }), "New event combo") : null) : null), /* @__PURE__ */ React.createElement("div", {
+    className: "[&>div]:shadow-none [&>div]:rounded-none"
+  }, rows.length === 0 ? /* @__PURE__ */ React.createElement("div", {
+    className: "px-4 py-8 text-center text-sm text-gray-500"
+  }, "No combos attached to this event yet.") : /* @__PURE__ */ React.createElement(AdminCRUD, {
+    key: `event-combos-${eventId}-${attachedComboIds.join(",")}-${listRefreshKey}`,
+    title: "Event Combos",
+    apiEndpoint: "/api/combos",
+    columns: comboColumns,
+    filterColumns: comboFilterColumns,
+    addEditPageUrl: "/admin/combos",
+    defaultSortField: exports.STORE_CRUD_CONFIGS.combos.defaultSortField,
+    defaultSortOrder: exports.STORE_CRUD_CONFIGS.combos.defaultSortOrder,
+    filters: comboFilters,
+    extraListParams: {
+      eventId: String(eventId)
+    },
+    embedded: true,
+    disableRowClick: readOnly,
+    emptyState: {
+      title: "No combos attached",
+      description: "Attach or create a combo for this event.",
+      action: !readOnly && comboCreateHref ? /* @__PURE__ */ React.createElement(Link2__default.default, {
+        href: comboCreateHref,
+        className: "inline-flex items-center rounded-md bg-gray-900 px-3 py-1.5 text-sm font-medium text-white hover:bg-gray-800"
+      }, "Create combo") : void 0
+    },
+    customRowActions: readOnly ? void 0 : (item) => {
+      const comboId = Number(item.id);
+      const busy = detachingId === comboId;
+      return /* @__PURE__ */ React.createElement(Button, {
+        type: "button",
+        size: "sm",
+        variant: "outline",
+        disabled: !Number.isFinite(comboId) || busy,
+        className: "h-7 text-xs border-red-200 text-red-600 hover:text-red-700",
+        onClick: /* @__PURE__ */ __name(() => void detachFromEvent(comboId), "onClick")
+      }, /* @__PURE__ */ React.createElement(LucideIcons.Unlink, {
+        className: "h-3.5 w-3.5 mr-1"
+      }), busy ? "Removing\u2026" : "Detach");
+    }
+  }))), attachModalOpen ? /* @__PURE__ */ React.createElement(AttachComboModal, {
+    open: attachModalOpen,
+    onOpenChange: setAttachModalOpen,
+    excludeComboIds: attachedComboIds,
+    onAttach: attachToEvent
+  }) : null);
+}
+var init_EventCombosSection = __esm({
+  "src/admin/pages/EventCombosSection.tsx"() {
+    "use client";
+    init_button();
+    init_CRUD();
+    init_AttachComboModal();
+    init_store_crud_configs();
+    __name(EventCombosSection, "EventCombosSection");
+  }
+});
 
 // src/lib/social-media-links.ts
 function isValidHttpUrl(value) {
@@ -34373,10 +35143,13 @@ function EventEditPage({ eventId }) {
     onClick: goToNextTab,
     className: "rounded-md bg-gray-900 px-4 py-2 text-sm font-medium text-white hover:bg-gray-800"
   }, "Next") : /* @__PURE__ */ React.createElement("div", null)), showEventProducts ? /* @__PURE__ */ React.createElement("div", {
-    className: "border-t border-gray-200 px-4 py-4 sm:px-6"
+    className: "border-t border-gray-200 px-4 py-4 sm:px-6 space-y-6"
   }, /* @__PURE__ */ React.createElement(EventProductsSection, {
     eventId: eventRecordId,
     returnUrl: eventEditUrl
+  }), /* @__PURE__ */ React.createElement(EventCombosSection, {
+    eventId: eventRecordId,
+    returnUrl: eventEditUrl
   })) : null);
 }
 var ADDITIONAL_VENUE_MAX_CHARS, DEFAULT_EVENT_TIMEZONE, DEFAULT_EVENT_CURRENCY, EVENT_SOCIAL_KEYS, isCreate4, sectionCls4, labelCls6, inputCls6, ENTITY_TYPE_OPTIONS;
@@ -34391,6 +35164,7 @@ var init_EventEditPage = __esm({
     init_media_url();
     init_JoditRichText();
     init_EventProductsSection();
+    init_EventCombosSection();
     init_admin_config_context();
     init_dialog();
     init_button();
@@ -34428,7 +35202,13 @@ function formatDateTimeLocal(value) {
   if (value == null) return "";
   const date = new Date(String(value));
   if (isNaN(date.getTime())) return "";
-  return date.toISOString().slice(0, 16);
+  const pad = /* @__PURE__ */ __name((n) => String(n).padStart(2, "0"), "pad");
+  const y = date.getFullYear();
+  const m = pad(date.getMonth() + 1);
+  const d = pad(date.getDate());
+  const hh = pad(date.getHours());
+  const mm = pad(date.getMinutes());
+  return `${y}-${m}-${d}T${hh}:${mm}`;
 }
 async function fetchEventDefaultCurrency(eventId) {
   try {
@@ -34475,13 +35255,14 @@ function ComboEditPage({ comboId }) {
   const create = isCreate5(comboId);
   const duplicateFrom = searchParams.get("duplicateFrom")?.trim();
   const duplicateSourceId = create && duplicateFrom && /^\d+$/.test(duplicateFrom) ? duplicateFrom : null;
+  const initialEventId = create ? searchParams.get("eventId")?.trim() || "" : "";
   const [loading, setLoading] = React25.useState(!create || !!duplicateSourceId);
   const [saving, setSaving] = React25.useState(false);
   const [errors, setErrors] = React25.useState([]);
   const [name, setName] = React25.useState("");
   const [slug, setSlug] = React25.useState("");
   const [desc, setDesc] = React25.useState("");
-  const [eventId, setEventId] = React25.useState("");
+  const [eventId, setEventId] = React25.useState(initialEventId);
   const [priceStr, setPriceStr] = React25.useState("");
   const [defaultCurrency, setDefaultCurrency] = React25.useState("INR");
   const [minSelectableItems, setMinSelectableItems] = React25.useState(1);
@@ -34718,15 +35499,9 @@ function ComboEditPage({ comboId }) {
       ]);
       return;
     }
-    if (!startsAt) {
+    if (startsAt && endsAt && new Date(endsAt).getTime() < new Date(startsAt).getTime()) {
       setErrors([
-        "Starts at is required"
-      ]);
-      return;
-    }
-    if (!endsAt) {
-      setErrors([
-        "Ends at is required"
+        "Ends at cannot be earlier than Starts at"
       ]);
       return;
     }
@@ -34794,8 +35569,8 @@ function ComboEditPage({ comboId }) {
         minSelectableItems,
         maxSelectableItems,
         status,
-        startsAt: startsAt || null,
-        endsAt: endsAt || null,
+        startsAt: startsAt ? new Date(startsAt).toISOString() : null,
+        endsAt: endsAt ? new Date(endsAt).toISOString() : null,
         comboItems: [
           ...fixedItems.map((i) => ({
             productId: Number(i.productId),
@@ -35019,21 +35794,23 @@ function ComboEditPage({ comboId }) {
       className: "grid grid-cols-2 gap-4"
     }, /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: "block text-xs font-medium text-gray-600 mb-1"
-    }, "Starts at *"), /* @__PURE__ */ React.createElement("input", {
+    }, "Starts at (optional)"), /* @__PURE__ */ React.createElement("input", {
       type: "datetime-local",
       value: startsAt,
       onChange: /* @__PURE__ */ __name((e) => setStartsAt(e.target.value), "onChange"),
-      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm",
-      required: true
-    })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
+      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
+    }), /* @__PURE__ */ React.createElement("p", {
+      className: "text-xs text-gray-400 mt-1"
+    }, "Leave empty to be available immediately.")), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: "block text-xs font-medium text-gray-600 mb-1"
-    }, "Ends at *"), /* @__PURE__ */ React.createElement("input", {
+    }, "Ends at (optional)"), /* @__PURE__ */ React.createElement("input", {
       type: "datetime-local",
       value: endsAt,
       onChange: /* @__PURE__ */ __name((e) => setEndsAt(e.target.value), "onChange"),
-      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm",
-      required: true
-    })))))),
+      className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
+    }), /* @__PURE__ */ React.createElement("p", {
+      className: "text-xs text-gray-400 mt-1"
+    }, "Leave empty if no expiration date.")))))),
     sidebar: /* @__PURE__ */ React.createElement(React.Fragment, null)
   }));
 }
@@ -35149,6 +35926,130 @@ function VendorEditPage({ vendorId }) {
   const [inviteDialog, setInviteDialog] = React25.useState(null);
   const [sendingInviteEmail, setSendingInviteEmail] = React25.useState(false);
   const [linkCopied, setLinkCopied] = React25.useState(false);
+  const VENDOR_CREATE_DRAFT_KEY = "cms_vendor_create_draft";
+  React25.useEffect(() => {
+    if (!create || typeof window === "undefined") return;
+    try {
+      const saved = sessionStorage.getItem(VENDOR_CREATE_DRAFT_KEY);
+      if (saved) {
+        const draft = JSON.parse(saved);
+        if (draft && typeof draft === "object") {
+          if (draft.name) setName(draft.name);
+          if (draft.legalName) setLegalName(draft.legalName);
+          if (draft.slug) setSlug(draft.slug);
+          if (draft.businessType) setBusinessType(draft.businessType);
+          if (draft.description) setDescription(draft.description);
+          if (draft.website) setWebsite(draft.website);
+          if (draft.logo) setLogo(draft.logo);
+          if (draft.email) setEmail(draft.email);
+          if (draft.storePhoneCode) setStorePhoneCode(draft.storePhoneCode);
+          if (draft.storePhoneNum) setStorePhoneNum(draft.storePhoneNum);
+          if (draft.addressLine1) setAddressLine1(draft.addressLine1);
+          if (draft.addressLine2) setAddressLine2(draft.addressLine2);
+          if (draft.city) setCity(draft.city);
+          if (draft.state) setState(draft.state);
+          if (draft.country) setCountry(draft.country);
+          if (draft.postalCode) setPostalCode(draft.postalCode);
+          if (draft.gstin) setGstin(draft.gstin);
+          if (typeof draft.active === "boolean") setActive(draft.active);
+          if (draft.registrationStatus) setRegistrationStatus(draft.registrationStatus);
+          if (draft.ownerName) setOwnerName(draft.ownerName);
+          if (draft.ownerEmail) setOwnerEmail(draft.ownerEmail);
+          if (draft.ownerPhoneCode) setOwnerPhoneCode(draft.ownerPhoneCode);
+          if (draft.ownerPhoneNum) setOwnerPhoneNum(draft.ownerPhoneNum);
+          if (draft.ownerDesignation) setOwnerDesignation(draft.ownerDesignation);
+          if (draft.ownerAadhaarNo) setOwnerAadhaarNo(draft.ownerAadhaarNo);
+          if (draft.ownerPanNo) setOwnerPanNo(draft.ownerPanNo);
+          if (draft.ownerAddressLine1) setOwnerAddressLine1(draft.ownerAddressLine1);
+          if (draft.ownerAddressLine2) setOwnerAddressLine2(draft.ownerAddressLine2);
+          if (draft.ownerCity) setOwnerCity(draft.ownerCity);
+          if (draft.ownerState) setOwnerState(draft.ownerState);
+          if (draft.ownerPostalCode) setOwnerPostalCode(draft.ownerPostalCode);
+          if (typeof draft.termsAccepted === "boolean") setTermsAccepted(draft.termsAccepted);
+        }
+      }
+    } catch {
+    }
+  }, [
+    create
+  ]);
+  React25.useEffect(() => {
+    if (!create || typeof window === "undefined") return;
+    const hasAnyData = Boolean(name || legalName || gstin || ownerName || ownerEmail || ownerPhoneNum || ownerAadhaarNo || ownerPanNo || ownerAddressLine1);
+    if (!hasAnyData) return;
+    try {
+      const draft = {
+        name,
+        legalName,
+        slug,
+        businessType,
+        description,
+        website,
+        logo,
+        email,
+        storePhoneCode,
+        storePhoneNum,
+        addressLine1,
+        addressLine2,
+        city,
+        state,
+        country,
+        postalCode,
+        gstin,
+        active,
+        registrationStatus,
+        ownerName,
+        ownerEmail,
+        ownerPhoneCode,
+        ownerPhoneNum,
+        ownerDesignation,
+        ownerAadhaarNo,
+        ownerPanNo,
+        ownerAddressLine1,
+        ownerAddressLine2,
+        ownerCity,
+        ownerState,
+        ownerPostalCode,
+        termsAccepted
+      };
+      sessionStorage.setItem(VENDOR_CREATE_DRAFT_KEY, JSON.stringify(draft));
+    } catch {
+    }
+  }, [
+    create,
+    name,
+    legalName,
+    slug,
+    businessType,
+    description,
+    website,
+    logo,
+    email,
+    storePhoneCode,
+    storePhoneNum,
+    addressLine1,
+    addressLine2,
+    city,
+    state,
+    country,
+    postalCode,
+    gstin,
+    active,
+    registrationStatus,
+    ownerName,
+    ownerEmail,
+    ownerPhoneCode,
+    ownerPhoneNum,
+    ownerDesignation,
+    ownerAadhaarNo,
+    ownerPanNo,
+    ownerAddressLine1,
+    ownerAddressLine2,
+    ownerCity,
+    ownerState,
+    ownerPostalCode,
+    termsAccepted
+  ]);
   const vendorPayload = /* @__PURE__ */ __name(() => ({
     name: name.trim(),
     legalName: legalName.trim() || null,
@@ -35392,12 +36293,15 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
       return;
     }
+    const abortController = new AbortController();
+    const timeoutId = setTimeout(() => abortController.abort(), 15e3);
     try {
       const res = await fetch("/api/admin/vendors/onboard", {
         method: "POST",
         headers: {
           "Content-Type": "application/json"
         },
+        signal: abortController.signal,
         body: JSON.stringify({
           activation: "invite",
           sendOwnerEmail: false,
@@ -35418,15 +36322,20 @@ function VendorEditPage({ vendorId }) {
           }
         })
       });
-      const data = await res.json();
+      clearTimeout(timeoutId);
+      const data = await res.json().catch(() => ({}));
       if (!res.ok) {
         setErrors([
           data.error || "Onboarding failed"
         ]);
         return;
       }
+      try {
+        sessionStorage.removeItem(VENDOR_CREATE_DRAFT_KEY);
+      } catch {
+      }
       const vendorIdNum = Number(data.vendor?.id);
-      const inviteLink = typeof data.inviteLink === "string" && data.inviteLink.trim() ? data.inviteLink.trim() : "";
+      const inviteLink = typeof data.inviteLink === "string" && data.inviteLink?.trim() ? data.inviteLink.trim() : "";
       if (!Number.isFinite(vendorIdNum) || vendorIdNum <= 0 || !inviteLink) {
         sonner.toast.success(data.message || "Vendor created");
         router.push(listReturnUrl);
@@ -35438,11 +36347,18 @@ function VendorEditPage({ vendorId }) {
         vendorId: vendorIdNum,
         inviteLink
       });
-    } catch {
-      setErrors([
-        "Request failed"
-      ]);
+    } catch (err) {
+      if (err instanceof DOMException && err.name === "AbortError") {
+        setErrors([
+          "Request timed out. Your entered data is preserved. Please click submit again."
+        ]);
+      } else {
+        setErrors([
+          err instanceof Error && err.message || "Request failed"
+        ]);
+      }
     } finally {
+      clearTimeout(timeoutId);
       setSaving(false);
     }
   }, "handleCreate");
@@ -35481,12 +36397,15 @@ function VendorEditPage({ vendorId }) {
       setSaving(false);
       return;
     }
+    const abortController = new AbortController();
+    const timeoutId = setTimeout(() => abortController.abort(), 15e3);
     try {
       const res = await fetch(`/api/vendors/${vendorId}`, {
         method: "PUT",
         headers: {
           "Content-Type": "application/json"
         },
+        signal: abortController.signal,
         body: JSON.stringify({
           ...vendorPayload(),
           slug: slug.trim(),
@@ -35502,6 +36421,7 @@ function VendorEditPage({ vendorId }) {
         })
       });
       if (!res.ok) {
+        clearTimeout(timeoutId);
         const data = await res.json().catch(() => ({}));
         setErrors([
           data.error || "Failed to save"
@@ -35515,6 +36435,7 @@ function VendorEditPage({ vendorId }) {
           headers: {
             "Content-Type": "application/json"
           },
+          signal: abortController.signal,
           body: JSON.stringify({
             name: ownerName.trim(),
             email: ownerEmail.trim(),
@@ -35522,6 +36443,7 @@ function VendorEditPage({ vendorId }) {
           })
         });
         if (!userRes.ok) {
+          clearTimeout(timeoutId);
           const data = await userRes.json().catch(() => ({}));
           setErrors([
             data.error || "Vendor saved, but updating owner details failed"
@@ -35529,13 +36451,21 @@ function VendorEditPage({ vendorId }) {
           return;
         }
       }
+      clearTimeout(timeoutId);
       sonner.toast.success("Vendor saved");
       router.push(listReturnUrl);
-    } catch {
-      setErrors([
-        "Failed to save"
-      ]);
+    } catch (err) {
+      if (err instanceof DOMException && err.name === "AbortError") {
+        setErrors([
+          "Request timed out. Please try saving again."
+        ]);
+      } else {
+        setErrors([
+          err instanceof Error && err.message || "Failed to save"
+        ]);
+      }
     } finally {
+      clearTimeout(timeoutId);
       setSaving(false);
     }
   }, "handleSave");
@@ -40941,6 +41871,8 @@ var init_AdminPageResolver = __esm({
       submissions: {
         title: "Submissions",
         apiEndpoint: "/api/form-submissions",
+        defaultSortField: "createdAt",
+        defaultSortOrder: "desc",
         columns: [
           {
             field: "form.name",
@@ -41486,6 +42418,10 @@ function EventDetailPage({ eventId }) {
       eventId: String(event.id),
       returnUrl: detailUrl,
       readOnly: true
+    }), /* @__PURE__ */ React.createElement(EventCombosSection, {
+      eventId: String(event.id),
+      returnUrl: detailUrl,
+      readOnly: true
     }))
   }));
 }
@@ -41501,6 +42437,7 @@ var init_EventDetailPage = __esm({
     init_DetailPageLayout();
     init_DetailPageHeader();
     init_EventProductsSection();
+    init_EventCombosSection();
     sectionCls6 = "border border-gray-200 rounded-lg p-4 bg-gray-50/50";
     labelCls7 = "text-xs font-medium text-gray-500";
     valueCls = "text-sm text-gray-900 mt-0.5";