@infuro/cms-core 1.0.61 → 1.0.63

package/dist/{chunk-2KUCQVAQ.js → chunk-MWEK7N3F.js}

@@ -1,4 +1,5 @@
 import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
+import { mergeEmailLayoutCompanyDetails, getCompanyDetailsFromSettings } from './chunk-3VZAAQUV.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { rgb, PDFDocument, StandardFonts } from 'pdf-lib';
 
@@ -583,96 +584,6 @@ function resolveInvoiceAssetUrl(raw) {
 }
 __name(resolveInvoiceAssetUrl, "resolveInvoiceAssetUrl");
 
-// src/plugins/email/templates/types.ts
-function normalizeSocialLinkItem(o) {
-  const url = String(o.url ?? "").trim();
-  if (!url) return null;
-  let iconUrl = String(o.iconUrl ?? o.icon_image ?? "").trim();
-  let icon = String(o.icon ?? "").trim();
-  if (!iconUrl && /^https?:\/\//i.test(icon)) {
-    iconUrl = icon;
-    icon = "";
-  }
-  const item = {
-    url
-  };
-  if (iconUrl) item.iconUrl = iconUrl;
-  if (icon) item.icon = icon;
-  return item;
-}
-__name(normalizeSocialLinkItem, "normalizeSocialLinkItem");
-function parseSocialLinksJson(raw) {
-  if (raw == null || raw.trim() === "") return void 0;
-  try {
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return void 0;
-    const out = [];
-    for (const item of parsed) {
-      if (item && typeof item === "object" && "url" in item) {
-        const n = normalizeSocialLinkItem(item);
-        if (n) out.push(n);
-      }
-    }
-    return out.length ? out : void 0;
-  } catch {
-    return void 0;
-  }
-}
-__name(parseSocialLinksJson, "parseSocialLinksJson");
-function mergeEmailLayoutCompanyDetails(branding, emailSettings) {
-  const fromBranding = getCompanyDetailsFromSettings(branding);
-  const pick = /* @__PURE__ */ __name((emailVal, fallback) => {
-    const t = emailVal?.trim();
-    return t || fallback?.trim() || void 0;
-  }, "pick");
-  const logoUrl = pick(emailSettings.logoUrl ?? emailSettings.emailLogoUrl, fromBranding.logoUrl);
-  const companyName = pick(emailSettings.companyName ?? emailSettings.emailCompanyName, fromBranding.companyName);
-  const supportEmail = pick(emailSettings.supportEmail ?? emailSettings.emailSupportEmail, fromBranding.supportEmail);
-  const supportPhone = pick(emailSettings.supportPhone, void 0);
-  const footerDisclaimer = pick(emailSettings.footerDisclaimer, void 0);
-  const followUsTitle = pick(emailSettings.followUsTitle, "Follow Us") || "Follow Us";
-  const socialFromEmail = parseSocialLinksJson(emailSettings.socialLinks);
-  const socialLinks = socialFromEmail?.length ? socialFromEmail : fromBranding.socialLinks;
-  return {
-    logoUrl,
-    companyName,
-    supportEmail,
-    supportPhone,
-    socialLinks,
-    footerDisclaimer,
-    followUsTitle
-  };
-}
-__name(mergeEmailLayoutCompanyDetails, "mergeEmailLayoutCompanyDetails");
-function getCompanyDetailsFromSettings(settingsGroup) {
-  const logoUrl = settingsGroup.logo ?? settingsGroup.logoUrl ?? "";
-  const companyName = settingsGroup.companyName ?? settingsGroup.company_name ?? "";
-  const supportEmail = settingsGroup.supportEmail ?? settingsGroup.support_email ?? "";
-  let socialLinks = [];
-  const raw = settingsGroup.socialLinks ?? settingsGroup.social_links;
-  if (typeof raw === "string") {
-    try {
-      const arr = JSON.parse(raw);
-      if (Array.isArray(arr)) {
-        for (const item of arr) {
-          if (item && typeof item === "object") {
-            const n = normalizeSocialLinkItem(item);
-            if (n) socialLinks.push(n);
-          }
-        }
-      }
-    } catch {
-    }
-  }
-  return {
-    logoUrl: logoUrl || void 0,
-    companyName: companyName || void 0,
-    supportEmail: supportEmail || void 0,
-    socialLinks: socialLinks.length ? socialLinks : void 0
-  };
-}
-__name(getCompanyDetailsFromSettings, "getCompanyDetailsFromSettings");
-
 // src/lib/invoice/build-local-invoice-for-order.ts
 async function loadSettingsGroup(ds, entityMap, group) {
   if (!entityMap.configs) return {};
@@ -933,4 +844,4 @@ async function streamOrderInvoicePdf(cms, dataSource, entityMap, orderId, option
 }
 __name(streamOrderInvoicePdf, "streamOrderInvoicePdf");
 
-export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES, buildLocalInvoicePdfForOrder, extractChildOrderRefsFromSalePayload, generateLocalInvoicePdf, getCompanyDetailsFromSettings, isOrderEligibleForInvoiceEmail, mapErpPayloadToFulfillment, mapErpPayloadToInvoiceNumber, mergeEmailLayoutCompanyDetails, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf, unwrapErpReadData };
+export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES, buildLocalInvoicePdfForOrder, extractChildOrderRefsFromSalePayload, generateLocalInvoicePdf, isOrderEligibleForInvoiceEmail, mapErpPayloadToFulfillment, mapErpPayloadToInvoiceNumber, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf, unwrapErpReadData };

package/dist/{chunk-V25RDUOU.cjs → chunk-MXABMVF7.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkBXYZDMTZ_cjs = require('./chunk-BXYZDMTZ.cjs');
+var chunk7L556RGL_cjs = require('./chunk-7L556RGL.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/plugins/email/email-queue.ts
@@ -50,13 +50,13 @@ async function resolveInvoiceAttachmentForJob(cms, payload, options) {
       invoiceAttached: false
     };
     const o = order;
-    if (!chunkBXYZDMTZ_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
+    if (!chunk7L556RGL_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
       return {
         attachments: payload.attachments,
         invoiceAttached: false
       };
     }
-    const resolved = await chunkBXYZDMTZ_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
+    const resolved = await chunk7L556RGL_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
     if ("error" in resolved) {
       console.warn("[email] order invoice attach failed", {
         orderId: payload.orderId,
@@ -130,7 +130,41 @@ async function queueEmail(cms, payload) {
     await queue.add(EMAIL_QUEUE_NAME, payload);
     return;
   }
-  const email = cms.getPlugin("email");
+  let email = cms && typeof cms.getPlugin === "function" ? cms.getPlugin("email") : void 0;
+  if (!email) {
+    try {
+      const { EmailService } = await import('./email-service-ATCPJFWG.cjs');
+      const env = typeof process !== "undefined" && process.env ? process.env : {};
+      const type = String(env.SMTP_TYPE || "SMTP").toUpperCase();
+      const port = env.SMTP_PORT ? parseInt(env.SMTP_PORT, 10) : void 0;
+      const fallbackService = new EmailService({
+        type: type === "AWS" || type === "GMAIL" || type === "SENDGRID" ? type : "SMTP",
+        from: env.SMTP_FROM || "no-reply@example.com",
+        to: env.SMTP_TO || "info@example.com",
+        user: env.SMTP_USER,
+        password: env.SMTP_PASSWORD || env.SMTP_PASS,
+        host: env.SMTP_HOST,
+        port,
+        secure: env.SMTP_SECURE === "true",
+        region: env.AWS_SES_REGION || env.AWS_REGION,
+        accessKeyId: env.AWS_ACCESS_KEY_ID,
+        secretAccessKey: env.AWS_SECRET_ACCESS_KEY
+      });
+      if (payload.subject != null && payload.html != null) {
+        await fallbackService.send({
+          to: payload.to,
+          subject: payload.subject,
+          html: payload.html,
+          text: payload.text,
+          attachments: payload.attachments
+        });
+        return;
+      }
+    } catch (e) {
+      console.error("[email-queue] fallback email send error", e);
+      return;
+    }
+  }
   if (!email) return;
   const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
   if (payload.templateName && payload.ctx) {

package/dist/chunk-OVTOP42W.js

@@ -0,0 +1,199 @@
+import { __name } from './chunk-SHUYVCID.js';
+import { createHmac, timingSafeEqual, randomInt } from 'crypto';
+import { MoreThan, IsNull } from 'typeorm';
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+__name(queueSms, "queueSms");
+var OTP_TTL_MS = 10 * 60 * 1e3;
+var MAX_SENDS_PER_HOUR = 5;
+var MAX_VERIFY_ATTEMPTS = 8;
+function getPepper(explicit) {
+  return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
+}
+__name(getPepper, "getPepper");
+function hashOtpCode(code, purpose, identifier, pepper) {
+  return createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
+}
+__name(hashOtpCode, "hashOtpCode");
+function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
+  const h = hashOtpCode(code, purpose, identifier, pepper);
+  try {
+    return timingSafeEqual(Buffer.from(h, "utf8"), Buffer.from(storedHash, "utf8"));
+  } catch {
+    return false;
+  }
+}
+__name(verifyOtpCodeHash, "verifyOtpCodeHash");
+function generateNumericOtp(length = 6) {
+  const max = 10 ** length;
+  return randomInt(0, max).toString().padStart(length, "0");
+}
+__name(generateNumericOtp, "generateNumericOtp");
+function normalizePhoneE164(raw, defaultCountryCode) {
+  const t = raw.trim();
+  const digitsOnly = t.replace(/\D/g, "");
+  if (digitsOnly.length < 10) return null;
+  if (t.startsWith("+")) return `+${digitsOnly}`;
+  const cc = (defaultCountryCode || process.env.DEFAULT_PHONE_COUNTRY_CODE || "91").replace(/\D/g, "");
+  if (digitsOnly.length > 10) return `+${digitsOnly}`;
+  return `+${cc}${digitsOnly}`;
+}
+__name(normalizePhoneE164, "normalizePhoneE164");
+async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  return repo.count({
+    where: {
+      purpose,
+      identifier,
+      createdAt: MoreThan(since)
+    }
+  });
+}
+__name(countRecentOtpSends, "countRecentOtpSends");
+async function createOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, channel, identifier, code, pepper } = input;
+  const since = new Date(Date.now() - 60 * 60 * 1e3);
+  const recent = await countRecentOtpSends(dataSource, entityMap, purpose, identifier, since);
+  if (recent >= MAX_SENDS_PER_HOUR) {
+    return {
+      ok: false,
+      error: "Too many codes sent. Try again later.",
+      status: 429
+    };
+  }
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  await repo.delete({
+    purpose,
+    identifier,
+    consumedAt: IsNull()
+  });
+  const expiresAt = new Date(Date.now() + OTP_TTL_MS);
+  const codeHash = hashOtpCode(code, purpose, identifier, pepper);
+  await repo.save(repo.create({
+    purpose,
+    channel,
+    identifier,
+    codeHash,
+    expiresAt,
+    attempts: 0,
+    consumedAt: null
+  }));
+  return {
+    ok: true
+  };
+}
+__name(createOtpChallenge, "createOtpChallenge");
+async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, identifier, code, pepper } = input;
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  const row = await repo.findOne({
+    where: {
+      purpose,
+      identifier,
+      consumedAt: IsNull()
+    },
+    order: {
+      id: "DESC"
+    }
+  });
+  if (!row) {
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const r = row;
+  if (new Date(r.expiresAt) < /* @__PURE__ */ new Date()) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const attempts = r.attempts || 0;
+  if (attempts >= MAX_VERIFY_ATTEMPTS) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Too many attempts",
+      status: 400
+    };
+  }
+  const valid = verifyOtpCodeHash(code, r.codeHash, purpose, identifier, pepper);
+  if (!valid) {
+    await repo.update(row.id, {
+      attempts: attempts + 1
+    });
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  await repo.update(row.id, {
+    consumedAt: /* @__PURE__ */ new Date(),
+    attempts: attempts + 1
+  });
+  return {
+    ok: true
+  };
+}
+__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
+
+export { countRecentOtpSends, createOtpChallenge, generateNumericOtp, hashOtpCode, normalizePhoneE164, queueSms, registerSmsQueueProcessor, verifyAndConsumeOtpChallenge, verifyOtpCodeHash };

package/dist/{chunk-73WVHINE.cjs → chunk-RHYVNRYG.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk77I3KS7V_cjs = require('./chunk-77I3KS7V.cjs');
+var chunkUEE4PTTB_cjs = require('./chunk-UEE4PTTB.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/lib/emit-order-notification-trigger.ts
@@ -18,7 +18,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     });
     return;
   }
-  const listenerCount = chunk77I3KS7V_cjs.notificationTriggerEmitter.listenerCount("__any__");
+  const listenerCount = chunkUEE4PTTB_cjs.notificationTriggerEmitter.listenerCount("__any__");
   if (listenerCount === 0) {
     console.warn("[notification-triggers] no WhatsApp dispatcher listener \u2014 ensure createCmsApiHandler passes getCms (initWhatsappTriggerDispatcher)");
   }
@@ -79,7 +79,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       }
     }
   }
-  chunk77I3KS7V_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, {
+  const triggerPayload = {
     orderId,
     orderNumber: String(fo.orderNumber ?? ""),
     customerName: fo.contact?.name ?? "",
@@ -89,7 +89,21 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     vendorId: fo.vendorId ?? null,
     extraVariables: extra?.extraVariables,
     refundAmount: resolvedRefundAmount
-  });
+  };
+  if (listenerCount === 0) {
+    try {
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-5TUFCDU7.cjs');
+      await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
+    } catch (err) {
+      console.error("[notification-triggers] direct dispatch failed", {
+        triggerKey,
+        orderId,
+        err
+      });
+    }
+  } else {
+    chunkUEE4PTTB_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, triggerPayload);
+  }
 }
 chunkUSNT2KNT_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
 function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {

package/dist/{chunk-L3525VXI.js → chunk-RXTUSF3R.js}

@@ -1,4 +1,4 @@
-import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-2KUCQVAQ.js';
+import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-MWEK7N3F.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/plugins/email/email-queue.ts
@@ -128,7 +128,41 @@ async function queueEmail(cms, payload) {
     await queue.add(EMAIL_QUEUE_NAME, payload);
     return;
   }
-  const email = cms.getPlugin("email");
+  let email = cms && typeof cms.getPlugin === "function" ? cms.getPlugin("email") : void 0;
+  if (!email) {
+    try {
+      const { EmailService } = await import('./email-service-DPKVQOKP.js');
+      const env = typeof process !== "undefined" && process.env ? process.env : {};
+      const type = String(env.SMTP_TYPE || "SMTP").toUpperCase();
+      const port = env.SMTP_PORT ? parseInt(env.SMTP_PORT, 10) : void 0;
+      const fallbackService = new EmailService({
+        type: type === "AWS" || type === "GMAIL" || type === "SENDGRID" ? type : "SMTP",
+        from: env.SMTP_FROM || "no-reply@example.com",
+        to: env.SMTP_TO || "info@example.com",
+        user: env.SMTP_USER,
+        password: env.SMTP_PASSWORD || env.SMTP_PASS,
+        host: env.SMTP_HOST,
+        port,
+        secure: env.SMTP_SECURE === "true",
+        region: env.AWS_SES_REGION || env.AWS_REGION,
+        accessKeyId: env.AWS_ACCESS_KEY_ID,
+        secretAccessKey: env.AWS_SECRET_ACCESS_KEY
+      });
+      if (payload.subject != null && payload.html != null) {
+        await fallbackService.send({
+          to: payload.to,
+          subject: payload.subject,
+          html: payload.html,
+          text: payload.text,
+          attachments: payload.attachments
+        });
+        return;
+      }
+    } catch (e) {
+      console.error("[email-queue] fallback email send error", e);
+      return;
+    }
+  }
   if (!email) return;
   const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
   if (payload.templateName && payload.ctx) {

package/dist/{chunk-77I3KS7V.cjs → chunk-UEE4PTTB.cjs}

@@ -4,6 +4,9 @@ var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var events = require('events');
 
 var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PENDING: "order_pending",
+  ORDER_PROCESSING: "order_processing",
+  ORDER_COMPLETED: "order_completed",
   ORDER_PLACED: "order_placed",
   ORDER_CANCELLED: "order_cancelled",
   PAYMENT_SUCCESS: "payment_success",

package/dist/chunk-WFMVD567.cjs

@@ -0,0 +1,209 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var crypto = require('crypto');
+var typeorm = require('typeorm');
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+chunkUSNT2KNT_cjs.__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+chunkUSNT2KNT_cjs.__name(queueSms, "queueSms");
+var OTP_TTL_MS = 10 * 60 * 1e3;
+var MAX_SENDS_PER_HOUR = 5;
+var MAX_VERIFY_ATTEMPTS = 8;
+function getPepper(explicit) {
+  return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
+}
+chunkUSNT2KNT_cjs.__name(getPepper, "getPepper");
+function hashOtpCode(code, purpose, identifier, pepper) {
+  return crypto.createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
+}
+chunkUSNT2KNT_cjs.__name(hashOtpCode, "hashOtpCode");
+function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
+  const h = hashOtpCode(code, purpose, identifier, pepper);
+  try {
+    return crypto.timingSafeEqual(Buffer.from(h, "utf8"), Buffer.from(storedHash, "utf8"));
+  } catch {
+    return false;
+  }
+}
+chunkUSNT2KNT_cjs.__name(verifyOtpCodeHash, "verifyOtpCodeHash");
+function generateNumericOtp(length = 6) {
+  const max = 10 ** length;
+  return crypto.randomInt(0, max).toString().padStart(length, "0");
+}
+chunkUSNT2KNT_cjs.__name(generateNumericOtp, "generateNumericOtp");
+function normalizePhoneE164(raw, defaultCountryCode) {
+  const t = raw.trim();
+  const digitsOnly = t.replace(/\D/g, "");
+  if (digitsOnly.length < 10) return null;
+  if (t.startsWith("+")) return `+${digitsOnly}`;
+  const cc = (defaultCountryCode || process.env.DEFAULT_PHONE_COUNTRY_CODE || "91").replace(/\D/g, "");
+  if (digitsOnly.length > 10) return `+${digitsOnly}`;
+  return `+${cc}${digitsOnly}`;
+}
+chunkUSNT2KNT_cjs.__name(normalizePhoneE164, "normalizePhoneE164");
+async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  return repo.count({
+    where: {
+      purpose,
+      identifier,
+      createdAt: typeorm.MoreThan(since)
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(countRecentOtpSends, "countRecentOtpSends");
+async function createOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, channel, identifier, code, pepper } = input;
+  const since = new Date(Date.now() - 60 * 60 * 1e3);
+  const recent = await countRecentOtpSends(dataSource, entityMap, purpose, identifier, since);
+  if (recent >= MAX_SENDS_PER_HOUR) {
+    return {
+      ok: false,
+      error: "Too many codes sent. Try again later.",
+      status: 429
+    };
+  }
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  await repo.delete({
+    purpose,
+    identifier,
+    consumedAt: typeorm.IsNull()
+  });
+  const expiresAt = new Date(Date.now() + OTP_TTL_MS);
+  const codeHash = hashOtpCode(code, purpose, identifier, pepper);
+  await repo.save(repo.create({
+    purpose,
+    channel,
+    identifier,
+    codeHash,
+    expiresAt,
+    attempts: 0,
+    consumedAt: null
+  }));
+  return {
+    ok: true
+  };
+}
+chunkUSNT2KNT_cjs.__name(createOtpChallenge, "createOtpChallenge");
+async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, identifier, code, pepper } = input;
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  const row = await repo.findOne({
+    where: {
+      purpose,
+      identifier,
+      consumedAt: typeorm.IsNull()
+    },
+    order: {
+      id: "DESC"
+    }
+  });
+  if (!row) {
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const r = row;
+  if (new Date(r.expiresAt) < /* @__PURE__ */ new Date()) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const attempts = r.attempts || 0;
+  if (attempts >= MAX_VERIFY_ATTEMPTS) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Too many attempts",
+      status: 400
+    };
+  }
+  const valid = verifyOtpCodeHash(code, r.codeHash, purpose, identifier, pepper);
+  if (!valid) {
+    await repo.update(row.id, {
+      attempts: attempts + 1
+    });
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  await repo.update(row.id, {
+    consumedAt: /* @__PURE__ */ new Date(),
+    attempts: attempts + 1
+  });
+  return {
+    ok: true
+  };
+}
+chunkUSNT2KNT_cjs.__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
+
+exports.countRecentOtpSends = countRecentOtpSends;
+exports.createOtpChallenge = createOtpChallenge;
+exports.generateNumericOtp = generateNumericOtp;
+exports.hashOtpCode = hashOtpCode;
+exports.normalizePhoneE164 = normalizePhoneE164;
+exports.queueSms = queueSms;
+exports.registerSmsQueueProcessor = registerSmsQueueProcessor;
+exports.verifyAndConsumeOtpChallenge = verifyAndConsumeOtpChallenge;
+exports.verifyOtpCodeHash = verifyOtpCodeHash;