@infuro/cms-core 1.0.60 → 1.0.62

package/dist/chunk-H3IVLIPR.cjs

@@ -0,0 +1,86 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/plugins/whatsapp/whatsapp-queue.ts
+var WHATSAPP_QUEUE_NAME = "whatsapp";
+function maskPhone(raw) {
+  const digits = raw.replace(/\D/g, "");
+  if (digits.length <= 4) return "****";
+  return `${"*".repeat(Math.max(0, digits.length - 4))}${digits.slice(-4)}`;
+}
+chunkUSNT2KNT_cjs.__name(maskPhone, "maskPhone");
+function registerWhatsAppQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const whatsapp = cms.getPlugin("whatsapp");
+  if (!queue) {
+    console.warn("[whatsapp] queue processor not registered: queue plugin missing");
+    return;
+  }
+  if (!whatsapp || typeof whatsapp.send !== "function") {
+    console.warn("[whatsapp] queue processor not registered: whatsapp plugin missing or not configured");
+    return;
+  }
+  queue.registerProcessor(WHATSAPP_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) {
+      console.warn("[whatsapp] queue job skipped: missing recipient");
+      return;
+    }
+    console.log("[whatsapp] queue job processing", {
+      to: maskPhone(payload.to),
+      templateKey: payload.templateKey ?? null,
+      externalTemplateRef: payload.externalTemplateRef ?? null
+    });
+    try {
+      const ok = await whatsapp.send(payload);
+      if (ok) {
+        console.log("[whatsapp] queue job completed", {
+          to: maskPhone(payload.to),
+          sent: true
+        });
+      } else {
+        console.warn("[whatsapp] queue job completed without delivery", {
+          to: maskPhone(payload.to),
+          sent: false
+        });
+      }
+    } catch (err) {
+      console.error("[whatsapp] queue job failed", {
+        to: maskPhone(payload.to),
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  });
+  console.log("[whatsapp] queue processor registered", {
+    queue: WHATSAPP_QUEUE_NAME
+  });
+}
+chunkUSNT2KNT_cjs.__name(registerWhatsAppQueueProcessor, "registerWhatsAppQueueProcessor");
+async function queueWhatsApp(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  if (queue) {
+    console.log("[whatsapp] enqueue", {
+      to: maskPhone(payload.to),
+      templateKey: payload.templateKey ?? null,
+      externalTemplateRef: payload.externalTemplateRef ?? null
+    });
+    await queue.add(WHATSAPP_QUEUE_NAME, payload);
+    return true;
+  }
+  const whatsapp = cms.getPlugin("whatsapp");
+  if (whatsapp && typeof whatsapp.send === "function") {
+    console.log("[whatsapp] no queue plugin \u2014 sending immediately", {
+      to: maskPhone(payload.to)
+    });
+    return whatsapp.send(payload);
+  }
+  console.warn("[whatsapp] send skipped: neither queue nor whatsapp plugin available", {
+    to: maskPhone(payload.to)
+  });
+  return false;
+}
+chunkUSNT2KNT_cjs.__name(queueWhatsApp, "queueWhatsApp");
+
+exports.queueWhatsApp = queueWhatsApp;
+exports.registerWhatsAppQueueProcessor = registerWhatsAppQueueProcessor;

package/dist/{chunk-2KUCQVAQ.js → chunk-HMLVPIJR.js}

@@ -1,4 +1,5 @@
 import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
+import { mergeEmailLayoutCompanyDetails, getCompanyDetailsFromSettings } from './chunk-NMYGQWHV.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { rgb, PDFDocument, StandardFonts } from 'pdf-lib';
 
@@ -583,96 +584,6 @@ function resolveInvoiceAssetUrl(raw) {
 }
 __name(resolveInvoiceAssetUrl, "resolveInvoiceAssetUrl");
 
-// src/plugins/email/templates/types.ts
-function normalizeSocialLinkItem(o) {
-  const url = String(o.url ?? "").trim();
-  if (!url) return null;
-  let iconUrl = String(o.iconUrl ?? o.icon_image ?? "").trim();
-  let icon = String(o.icon ?? "").trim();
-  if (!iconUrl && /^https?:\/\//i.test(icon)) {
-    iconUrl = icon;
-    icon = "";
-  }
-  const item = {
-    url
-  };
-  if (iconUrl) item.iconUrl = iconUrl;
-  if (icon) item.icon = icon;
-  return item;
-}
-__name(normalizeSocialLinkItem, "normalizeSocialLinkItem");
-function parseSocialLinksJson(raw) {
-  if (raw == null || raw.trim() === "") return void 0;
-  try {
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return void 0;
-    const out = [];
-    for (const item of parsed) {
-      if (item && typeof item === "object" && "url" in item) {
-        const n = normalizeSocialLinkItem(item);
-        if (n) out.push(n);
-      }
-    }
-    return out.length ? out : void 0;
-  } catch {
-    return void 0;
-  }
-}
-__name(parseSocialLinksJson, "parseSocialLinksJson");
-function mergeEmailLayoutCompanyDetails(branding, emailSettings) {
-  const fromBranding = getCompanyDetailsFromSettings(branding);
-  const pick = /* @__PURE__ */ __name((emailVal, fallback) => {
-    const t = emailVal?.trim();
-    return t || fallback?.trim() || void 0;
-  }, "pick");
-  const logoUrl = pick(emailSettings.logoUrl ?? emailSettings.emailLogoUrl, fromBranding.logoUrl);
-  const companyName = pick(emailSettings.companyName ?? emailSettings.emailCompanyName, fromBranding.companyName);
-  const supportEmail = pick(emailSettings.supportEmail ?? emailSettings.emailSupportEmail, fromBranding.supportEmail);
-  const supportPhone = pick(emailSettings.supportPhone, void 0);
-  const footerDisclaimer = pick(emailSettings.footerDisclaimer, void 0);
-  const followUsTitle = pick(emailSettings.followUsTitle, "Follow Us") || "Follow Us";
-  const socialFromEmail = parseSocialLinksJson(emailSettings.socialLinks);
-  const socialLinks = socialFromEmail?.length ? socialFromEmail : fromBranding.socialLinks;
-  return {
-    logoUrl,
-    companyName,
-    supportEmail,
-    supportPhone,
-    socialLinks,
-    footerDisclaimer,
-    followUsTitle
-  };
-}
-__name(mergeEmailLayoutCompanyDetails, "mergeEmailLayoutCompanyDetails");
-function getCompanyDetailsFromSettings(settingsGroup) {
-  const logoUrl = settingsGroup.logo ?? settingsGroup.logoUrl ?? "";
-  const companyName = settingsGroup.companyName ?? settingsGroup.company_name ?? "";
-  const supportEmail = settingsGroup.supportEmail ?? settingsGroup.support_email ?? "";
-  let socialLinks = [];
-  const raw = settingsGroup.socialLinks ?? settingsGroup.social_links;
-  if (typeof raw === "string") {
-    try {
-      const arr = JSON.parse(raw);
-      if (Array.isArray(arr)) {
-        for (const item of arr) {
-          if (item && typeof item === "object") {
-            const n = normalizeSocialLinkItem(item);
-            if (n) socialLinks.push(n);
-          }
-        }
-      }
-    } catch {
-    }
-  }
-  return {
-    logoUrl: logoUrl || void 0,
-    companyName: companyName || void 0,
-    supportEmail: supportEmail || void 0,
-    socialLinks: socialLinks.length ? socialLinks : void 0
-  };
-}
-__name(getCompanyDetailsFromSettings, "getCompanyDetailsFromSettings");
-
 // src/lib/invoice/build-local-invoice-for-order.ts
 async function loadSettingsGroup(ds, entityMap, group) {
   if (!entityMap.configs) return {};
@@ -933,4 +844,4 @@ async function streamOrderInvoicePdf(cms, dataSource, entityMap, orderId, option
 }
 __name(streamOrderInvoicePdf, "streamOrderInvoicePdf");
 
-export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES, buildLocalInvoicePdfForOrder, extractChildOrderRefsFromSalePayload, generateLocalInvoicePdf, getCompanyDetailsFromSettings, isOrderEligibleForInvoiceEmail, mapErpPayloadToFulfillment, mapErpPayloadToInvoiceNumber, mergeEmailLayoutCompanyDetails, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf, unwrapErpReadData };
+export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES, buildLocalInvoicePdfForOrder, extractChildOrderRefsFromSalePayload, generateLocalInvoicePdf, isOrderEligibleForInvoiceEmail, mapErpPayloadToFulfillment, mapErpPayloadToInvoiceNumber, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf, unwrapErpReadData };

package/dist/{chunk-V25RDUOU.cjs → chunk-LRD4CGOG.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkBXYZDMTZ_cjs = require('./chunk-BXYZDMTZ.cjs');
+var chunkAXMP2U43_cjs = require('./chunk-AXMP2U43.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/plugins/email/email-queue.ts
@@ -50,13 +50,13 @@ async function resolveInvoiceAttachmentForJob(cms, payload, options) {
       invoiceAttached: false
     };
     const o = order;
-    if (!chunkBXYZDMTZ_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
+    if (!chunkAXMP2U43_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
       return {
         attachments: payload.attachments,
         invoiceAttached: false
       };
     }
-    const resolved = await chunkBXYZDMTZ_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
+    const resolved = await chunkAXMP2U43_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
     if ("error" in resolved) {
       console.warn("[email] order invoice attach failed", {
         orderId: payload.orderId,
@@ -130,7 +130,41 @@ async function queueEmail(cms, payload) {
     await queue.add(EMAIL_QUEUE_NAME, payload);
     return;
   }
-  const email = cms.getPlugin("email");
+  let email = cms && typeof cms.getPlugin === "function" ? cms.getPlugin("email") : void 0;
+  if (!email) {
+    try {
+      const { EmailService } = await import('./email-service-RDOTY3CO.cjs');
+      const env = typeof process !== "undefined" && process.env ? process.env : {};
+      const type = String(env.SMTP_TYPE || "SMTP").toUpperCase();
+      const port = env.SMTP_PORT ? parseInt(env.SMTP_PORT, 10) : void 0;
+      const fallbackService = new EmailService({
+        type: type === "AWS" || type === "GMAIL" || type === "SENDGRID" ? type : "SMTP",
+        from: env.SMTP_FROM || "no-reply@example.com",
+        to: env.SMTP_TO || "info@example.com",
+        user: env.SMTP_USER,
+        password: env.SMTP_PASSWORD || env.SMTP_PASS,
+        host: env.SMTP_HOST,
+        port,
+        secure: env.SMTP_SECURE === "true",
+        region: env.AWS_SES_REGION || env.AWS_REGION,
+        accessKeyId: env.AWS_ACCESS_KEY_ID,
+        secretAccessKey: env.AWS_SECRET_ACCESS_KEY
+      });
+      if (payload.subject != null && payload.html != null) {
+        await fallbackService.send({
+          to: payload.to,
+          subject: payload.subject,
+          html: payload.html,
+          text: payload.text,
+          attachments: payload.attachments
+        });
+        return;
+      }
+    } catch (e) {
+      console.error("[email-queue] fallback email send error", e);
+      return;
+    }
+  }
   if (!email) return;
   const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
   if (payload.templateName && payload.ctx) {

package/dist/{chunk-73WVHINE.cjs → chunk-LVQSG25Y.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk77I3KS7V_cjs = require('./chunk-77I3KS7V.cjs');
+var chunkUEE4PTTB_cjs = require('./chunk-UEE4PTTB.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/lib/emit-order-notification-trigger.ts
@@ -18,7 +18,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     });
     return;
   }
-  const listenerCount = chunk77I3KS7V_cjs.notificationTriggerEmitter.listenerCount("__any__");
+  const listenerCount = chunkUEE4PTTB_cjs.notificationTriggerEmitter.listenerCount("__any__");
   if (listenerCount === 0) {
     console.warn("[notification-triggers] no WhatsApp dispatcher listener \u2014 ensure createCmsApiHandler passes getCms (initWhatsappTriggerDispatcher)");
   }
@@ -79,7 +79,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       }
     }
   }
-  chunk77I3KS7V_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, {
+  const triggerPayload = {
     orderId,
     orderNumber: String(fo.orderNumber ?? ""),
     customerName: fo.contact?.name ?? "",
@@ -89,7 +89,21 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     vendorId: fo.vendorId ?? null,
     extraVariables: extra?.extraVariables,
     refundAmount: resolvedRefundAmount
-  });
+  };
+  if (listenerCount === 0) {
+    try {
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-X2XM5VUY.cjs');
+      await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
+    } catch (err) {
+      console.error("[notification-triggers] direct dispatch failed", {
+        triggerKey,
+        orderId,
+        err
+      });
+    }
+  } else {
+    chunkUEE4PTTB_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, triggerPayload);
+  }
 }
 chunkUSNT2KNT_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
 function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {

package/dist/chunk-NMYGQWHV.js

@@ -0,0 +1,93 @@
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/plugins/email/templates/types.ts
+function normalizeSocialLinkItem(o) {
+  const url = String(o.url ?? "").trim();
+  if (!url) return null;
+  let iconUrl = String(o.iconUrl ?? o.icon_image ?? "").trim();
+  let icon = String(o.icon ?? "").trim();
+  if (!iconUrl && /^https?:\/\//i.test(icon)) {
+    iconUrl = icon;
+    icon = "";
+  }
+  const item = {
+    url
+  };
+  if (iconUrl) item.iconUrl = iconUrl;
+  if (icon) item.icon = icon;
+  return item;
+}
+__name(normalizeSocialLinkItem, "normalizeSocialLinkItem");
+function parseSocialLinksJson(raw) {
+  if (raw == null || raw.trim() === "") return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return void 0;
+    const out = [];
+    for (const item of parsed) {
+      if (item && typeof item === "object" && "url" in item) {
+        const n = normalizeSocialLinkItem(item);
+        if (n) out.push(n);
+      }
+    }
+    return out.length ? out : void 0;
+  } catch {
+    return void 0;
+  }
+}
+__name(parseSocialLinksJson, "parseSocialLinksJson");
+function mergeEmailLayoutCompanyDetails(branding, emailSettings) {
+  const fromBranding = getCompanyDetailsFromSettings(branding);
+  const pick = /* @__PURE__ */ __name((emailVal, fallback) => {
+    const t = emailVal?.trim();
+    return t || fallback?.trim() || void 0;
+  }, "pick");
+  const logoUrl = pick(emailSettings.logoUrl ?? emailSettings.emailLogoUrl, fromBranding.logoUrl);
+  const companyName = pick(emailSettings.companyName ?? emailSettings.emailCompanyName, fromBranding.companyName);
+  const supportEmail = pick(emailSettings.supportEmail ?? emailSettings.emailSupportEmail, fromBranding.supportEmail);
+  const supportPhone = pick(emailSettings.supportPhone, void 0);
+  const footerDisclaimer = pick(emailSettings.footerDisclaimer, void 0);
+  const followUsTitle = pick(emailSettings.followUsTitle, "Follow Us") || "Follow Us";
+  const socialFromEmail = parseSocialLinksJson(emailSettings.socialLinks);
+  const socialLinks = socialFromEmail?.length ? socialFromEmail : fromBranding.socialLinks;
+  return {
+    logoUrl,
+    companyName,
+    supportEmail,
+    supportPhone,
+    socialLinks,
+    footerDisclaimer,
+    followUsTitle
+  };
+}
+__name(mergeEmailLayoutCompanyDetails, "mergeEmailLayoutCompanyDetails");
+function getCompanyDetailsFromSettings(settingsGroup) {
+  const logoUrl = settingsGroup.logo ?? settingsGroup.logoUrl ?? "";
+  const companyName = settingsGroup.companyName ?? settingsGroup.company_name ?? "";
+  const supportEmail = settingsGroup.supportEmail ?? settingsGroup.support_email ?? "";
+  let socialLinks = [];
+  const raw = settingsGroup.socialLinks ?? settingsGroup.social_links;
+  if (typeof raw === "string") {
+    try {
+      const arr = JSON.parse(raw);
+      if (Array.isArray(arr)) {
+        for (const item of arr) {
+          if (item && typeof item === "object") {
+            const n = normalizeSocialLinkItem(item);
+            if (n) socialLinks.push(n);
+          }
+        }
+      }
+    } catch {
+    }
+  }
+  return {
+    logoUrl: logoUrl || void 0,
+    companyName: companyName || void 0,
+    supportEmail: supportEmail || void 0,
+    socialLinks: socialLinks.length ? socialLinks : void 0
+  };
+}
+__name(getCompanyDetailsFromSettings, "getCompanyDetailsFromSettings");
+
+export { getCompanyDetailsFromSettings, mergeEmailLayoutCompanyDetails };

package/dist/chunk-OVTOP42W.js

@@ -0,0 +1,199 @@
+import { __name } from './chunk-SHUYVCID.js';
+import { createHmac, timingSafeEqual, randomInt } from 'crypto';
+import { MoreThan, IsNull } from 'typeorm';
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+__name(queueSms, "queueSms");
+var OTP_TTL_MS = 10 * 60 * 1e3;
+var MAX_SENDS_PER_HOUR = 5;
+var MAX_VERIFY_ATTEMPTS = 8;
+function getPepper(explicit) {
+  return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
+}
+__name(getPepper, "getPepper");
+function hashOtpCode(code, purpose, identifier, pepper) {
+  return createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
+}
+__name(hashOtpCode, "hashOtpCode");
+function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
+  const h = hashOtpCode(code, purpose, identifier, pepper);
+  try {
+    return timingSafeEqual(Buffer.from(h, "utf8"), Buffer.from(storedHash, "utf8"));
+  } catch {
+    return false;
+  }
+}
+__name(verifyOtpCodeHash, "verifyOtpCodeHash");
+function generateNumericOtp(length = 6) {
+  const max = 10 ** length;
+  return randomInt(0, max).toString().padStart(length, "0");
+}
+__name(generateNumericOtp, "generateNumericOtp");
+function normalizePhoneE164(raw, defaultCountryCode) {
+  const t = raw.trim();
+  const digitsOnly = t.replace(/\D/g, "");
+  if (digitsOnly.length < 10) return null;
+  if (t.startsWith("+")) return `+${digitsOnly}`;
+  const cc = (defaultCountryCode || process.env.DEFAULT_PHONE_COUNTRY_CODE || "91").replace(/\D/g, "");
+  if (digitsOnly.length > 10) return `+${digitsOnly}`;
+  return `+${cc}${digitsOnly}`;
+}
+__name(normalizePhoneE164, "normalizePhoneE164");
+async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  return repo.count({
+    where: {
+      purpose,
+      identifier,
+      createdAt: MoreThan(since)
+    }
+  });
+}
+__name(countRecentOtpSends, "countRecentOtpSends");
+async function createOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, channel, identifier, code, pepper } = input;
+  const since = new Date(Date.now() - 60 * 60 * 1e3);
+  const recent = await countRecentOtpSends(dataSource, entityMap, purpose, identifier, since);
+  if (recent >= MAX_SENDS_PER_HOUR) {
+    return {
+      ok: false,
+      error: "Too many codes sent. Try again later.",
+      status: 429
+    };
+  }
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  await repo.delete({
+    purpose,
+    identifier,
+    consumedAt: IsNull()
+  });
+  const expiresAt = new Date(Date.now() + OTP_TTL_MS);
+  const codeHash = hashOtpCode(code, purpose, identifier, pepper);
+  await repo.save(repo.create({
+    purpose,
+    channel,
+    identifier,
+    codeHash,
+    expiresAt,
+    attempts: 0,
+    consumedAt: null
+  }));
+  return {
+    ok: true
+  };
+}
+__name(createOtpChallenge, "createOtpChallenge");
+async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, identifier, code, pepper } = input;
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  const row = await repo.findOne({
+    where: {
+      purpose,
+      identifier,
+      consumedAt: IsNull()
+    },
+    order: {
+      id: "DESC"
+    }
+  });
+  if (!row) {
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const r = row;
+  if (new Date(r.expiresAt) < /* @__PURE__ */ new Date()) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const attempts = r.attempts || 0;
+  if (attempts >= MAX_VERIFY_ATTEMPTS) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Too many attempts",
+      status: 400
+    };
+  }
+  const valid = verifyOtpCodeHash(code, r.codeHash, purpose, identifier, pepper);
+  if (!valid) {
+    await repo.update(row.id, {
+      attempts: attempts + 1
+    });
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  await repo.update(row.id, {
+    consumedAt: /* @__PURE__ */ new Date(),
+    attempts: attempts + 1
+  });
+  return {
+    ok: true
+  };
+}
+__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
+
+export { countRecentOtpSends, createOtpChallenge, generateNumericOtp, hashOtpCode, normalizePhoneE164, queueSms, registerSmsQueueProcessor, verifyAndConsumeOtpChallenge, verifyOtpCodeHash };