@infuro/cms-core 1.0.61 → 1.0.63

package/dist/{chunk-UHT4INVW.js → chunk-77YWLP4X.js}

@@ -1,10 +1,13 @@
+import { normalizePhoneE164, generateNumericOtp, createOtpChallenge, queueSms, verifyAndConsumeOtpChallenge } from './chunk-OVTOP42W.js';
 import { JOB_RUNNER_QUEUE } from './chunk-GO7PPYNU.js';
 import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-URN7GS23.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, WhatsAppService, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-BWOITUNI.js';
+import { registerWhatsAppQueueProcessor } from './chunk-GWDI752Q.js';
 import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
-import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-L3525VXI.js';
-import { mergeEmailLayoutCompanyDetails, unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
+import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-RXTUSF3R.js';
+import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-MWEK7N3F.js';
 import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
+import { mergeEmailLayoutCompanyDetails } from './chunk-3VZAAQUV.js';
 import { getSmsTemplateDefault, SMS_MESSAGE_TEMPLATE_DEFAULTS } from './chunk-MQBT33IV.js';
 import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-AYERBA7I.js';
 import { ensureCustomerRecord, linkUnclaimedContactToUser, ensureCustomerForUser, canManageRoles, sessionHasEntityAccess } from './chunk-NR44CK5E.js';
@@ -14,7 +17,7 @@ import { queueErp } from './chunk-SYBOCAWB.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { PrimaryGeneratedColumn, Column, Entity, ManyToOne, JoinColumn, CreateDateColumn, UpdateDateColumn, Unique, OneToMany, Index, ManyToMany, JoinTable, In, ILike, Between, MoreThanOrEqual, LessThanOrEqual, Not, MoreThan, IsNull } from 'typeorm';
 import { Country, State, City } from 'country-state-city';
-import crypto2, { randomBytes, randomUUID, createHmac, timingSafeEqual, randomInt } from 'crypto';
+import crypto2, { randomBytes, randomUUID } from 'crypto';
 import Parser from 'rss-parser';
 import fs from 'fs/promises';
 import path from 'path';
@@ -1516,9 +1519,15 @@ async function autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order
   if (status !== "pending") return order;
   const meta = typeof order.metadata === "object" && order.metadata ? order.metadata : {};
   const expiresAtStr = meta.paymentExpiresAt ? String(meta.paymentExpiresAt) : null;
-  if (!expiresAtStr) return order;
-  const expiresMs = new Date(expiresAtStr).getTime();
-  if (Number.isNaN(expiresMs) || Date.now() <= expiresMs) return order;
+  let isExpired = false;
+  if (expiresAtStr) {
+    const expiresMs = new Date(expiresAtStr).getTime();
+    if (!Number.isNaN(expiresMs) && Date.now() > expiresMs) isExpired = true;
+  } else if (order.createdAt) {
+    const createdMs = new Date(order.createdAt).getTime();
+    if (!Number.isNaN(createdMs) && Date.now() - createdMs > 10 * 60 * 1e3) isExpired = true;
+  }
+  if (!isExpired) return order;
   try {
     const orderId = Number(order.id);
     if (orderId && entityMap.orders) {
@@ -3547,7 +3556,7 @@ function createCrudHandler(dataSource, entityMap, options) {
             });
           }
         }
-        const qb = repo2.createQueryBuilder("order").leftJoinAndSelect("order.contact", "contact").leftJoinAndSelect("order.items", "items").leftJoinAndSelect("items.product", "product").leftJoinAndSelect("product.collection", "collection").leftJoinAndSelect("order.payments", "payments").andWhere("order.deleted = :orderDel", {
+        const qb = repo2.createQueryBuilder("order").leftJoinAndSelect("order.contact", "contact").leftJoinAndSelect("order.items", "items").leftJoinAndSelect("items.product", "product").leftJoinAndSelect("product.collection", "collection").leftJoinAndSelect("order.payments", "payments").leftJoinAndSelect("order.assignedUser", "assignedUser").andWhere("order.deleted = :orderDel", {
           orderDel: false
         }).orderBy(`order.${sortField2}`, sortOrderOrders).skip(skip).take(limit);
         applyVendorScopeToQueryBuilder(qb, "order", scope);
@@ -3605,7 +3614,9 @@ function createCrudHandler(dataSource, entityMap, options) {
         }
         const [rows, total2] = await qb.getManyAndCount();
         const data2 = await Promise.all(rows.map(async (order) => {
+          await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
           const contact = order.contact;
+          const assignedUserObj = order.assignedUser;
           const items = order.items ?? [];
           const orderPayments = order.payments ?? [];
           const parts = [];
@@ -3653,6 +3664,11 @@ function createCrudHandler(dataSource, entityMap, options) {
               email: contact.email,
               phone: contact.phone
             } : null,
+            assignedUser: assignedUserObj ? {
+              id: assignedUserObj.id,
+              name: assignedUserObj.name || assignedUserObj.email,
+              email: assignedUserObj.email
+            } : null,
             itemsSummary,
             paymentStatus: paymentStatus2
           };
@@ -5189,18 +5205,99 @@ function createCrudHandler(dataSource, entityMap, options) {
             }
             await recordDiscountUsage2(dataSource, entityMap, created.id, orderDiscountId, persistBody.contactId, discount);
           }
+          if (entityMap["payments"]) {
+            try {
+              const paymentRepo = dataSource.getRepository(entityMap["payments"]);
+              const initialPayStatus2 = String(persistBody.paymentStatus ?? body.paymentStatus ?? "unpaid").toLowerCase();
+              const isPaid = initialPayStatus2 === "paid" || initialPayStatus2 === "captured";
+              const vId = Number(orderVendorId ?? created?.vendorId ?? 1);
+              const cId = persistBody.contactId ? Number(persistBody.contactId) : null;
+              await paymentRepo.save(paymentRepo.create({
+                vendorId: vId,
+                contactId: cId,
+                orderId: created.id,
+                status: initialPayStatus2,
+                amount: Number(total ?? persistBody.total ?? 0),
+                currency: orderCurrency ?? persistBody.currency ?? "INR",
+                paidAt: isPaid ? /* @__PURE__ */ new Date() : null,
+                method: String(body.paymentMethod ?? "manual")
+              }));
+            } catch (payErr) {
+              console.error("[crud] failed to create initial payment for order", payErr);
+            }
+          }
           const orderIdForNotify = created.id;
-          const initialPayStatus = String(persistBody.paymentStatus ?? "unpaid").toLowerCase();
-          void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
-            fireOrderNotificationTrigger("order_placed", orderIdForNotify, {
-              dataSource,
-              entityMap
-            });
-            if (initialPayStatus === "paid" || initialPayStatus === "captured") {
-              fireOrderNotificationTrigger("payment_success", orderIdForNotify, {
+          const finalCreatedStatus = String(created.status ?? createdStatus ?? "pending").toLowerCase();
+          const initialPayStatus = String(persistBody.paymentStatus ?? body.paymentStatus ?? "unpaid").toLowerCase();
+          void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+            if (finalCreatedStatus === "pending") {
+              if (initialPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              } else {
+                fireOrderNotificationTrigger("order_pending", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (finalCreatedStatus === "confirmed") {
+              fireOrderNotificationTrigger("order_placed", orderIdForNotify, {
+                dataSource,
+                entityMap
+              });
+              if (initialPayStatus === "paid" || initialPayStatus === "captured") {
+                fireOrderNotificationTrigger("payment_success", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              } else if (initialPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (finalCreatedStatus === "processing") {
+              fireOrderNotificationTrigger("order_processing", orderIdForNotify, {
+                dataSource,
+                entityMap
+              });
+              if (initialPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (finalCreatedStatus === "completed") {
+              fireOrderNotificationTrigger("order_completed", orderIdForNotify, {
                 dataSource,
                 entityMap
               });
+              if (initialPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (finalCreatedStatus === "cancelled") {
+              if (initialPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+              } else {
+                fireOrderNotificationTrigger("order_cancelled", orderIdForNotify, {
+                  dataSource,
+                  entityMap
+                });
+                if (initialPayStatus === "paid" || initialPayStatus === "refunded") {
+                  fireOrderNotificationTrigger("payment_refund_initiated", orderIdForNotify, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              }
             }
           });
         }
@@ -5551,8 +5648,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
         const scope2 = await resolveScopeById();
         const order = await repo.findOne({
           where: {
-            id: Number(id),
-            deleted: false
+            id: Number(id)
           },
           relations: [
             "contact",
@@ -5561,7 +5657,8 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             "items",
             "items.product",
             "items.product.collection",
-            "payments"
+            "payments",
+            "assignedUser"
           ]
         });
         if (order) {
@@ -5571,8 +5668,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
         if (orderDenied) return orderDenied;
         const relatedOrders = await repo.find({
           where: {
-            parentOrderId: Number(id),
-            deleted: false
+            parentOrderId: Number(id)
           },
           order: {
             id: "ASC"
@@ -5951,6 +6047,36 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             lines: []
           } : await calculateOrderTotalsFromLines(dataSource, entityMap, orderLinesNorm, effectiveCurrency, putDiscountId, Number.isFinite(putOrderVendorId) ? putOrderVendorId : null);
           const scalarUpdate = pickColumnUpdates(repo, rawBody);
+          if (rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
+            const aId = Number(rawBody.assignedUserId);
+            if (Number.isFinite(aId) && aId > 0) {
+              scalarUpdate.assignedUserId = aId;
+              scalarUpdate.assignedAt = /* @__PURE__ */ new Date();
+              if (!scalarUpdate.status && (orderInvPrev?.status === "confirmed" || orderInvPrev?.status === "pending")) {
+                scalarUpdate.status = "processing";
+              }
+            } else {
+              scalarUpdate.assignedUserId = null;
+              scalarUpdate.assignedAt = null;
+            }
+          }
+          if (scalarUpdate.status === "processing") {
+            const effectiveAssignee = scalarUpdate.assignedUserId !== void 0 ? scalarUpdate.assignedUserId : orderInvPrev?.assignedUserId;
+            if (!effectiveAssignee) {
+              return json({
+                error: "Cannot start processing without assigning a teammate. Please assign a teammate first."
+              }, {
+                status: 400
+              });
+            }
+          }
+          if (scalarUpdate.status === "completed" && orderInvPrev?.status !== "completed" && !rawBody?.__internalBypassOtp) {
+            return json({
+              error: "Direct completion is disabled. Please complete the order via the customer OTP verification flow."
+            }, {
+              status: 400
+            });
+          }
           const nextStatus = typeof scalarUpdate.status === "string" && scalarUpdate.status ? String(scalarUpdate.status) : orderInvPrev?.status ?? "pending";
           if (orderStatusHoldsStock(nextStatus) && lines.length > 0) {
             const verr = await validateInventoryForOrderBecomingConfirmed(dataSource, entityMap, orderInvPrev, lines.filter((l) => l.found && l.productId != null).map((l) => ({
@@ -6138,6 +6264,128 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
               }
             }
           }
+          if (rawBody && entityMap["payments"]) {
+            try {
+              const bodyPayStatusRaw = rawBody.paymentStatus;
+              if (bodyPayStatusRaw != null && typeof bodyPayStatusRaw === "string") {
+                const payStatus = bodyPayStatusRaw.trim().toLowerCase();
+                const paymentRepo = dataSource.getRepository(entityMap["payments"]);
+                const existingPay = await paymentRepo.findOne({
+                  where: {
+                    orderId: numericId
+                  },
+                  order: {
+                    id: "DESC"
+                  }
+                });
+                const isPaid = payStatus === "paid" || payStatus === "captured";
+                if (existingPay) {
+                  await paymentRepo.update(existingPay.id, {
+                    status: payStatus,
+                    paidAt: isPaid && !existingPay.paidAt ? /* @__PURE__ */ new Date() : existingPay.paidAt
+                  });
+                } else {
+                  const orderRow = updatedOrder;
+                  const orderTotal = Number(orderRow?.total ?? 0);
+                  const orderCurrency = String(orderRow?.currency ?? "INR");
+                  const vId = Number(orderRow?.vendorId ?? 1);
+                  const cId = orderRow?.contactId ? Number(orderRow.contactId) : null;
+                  await paymentRepo.save(paymentRepo.create({
+                    vendorId: vId,
+                    contactId: cId,
+                    orderId: numericId,
+                    status: payStatus,
+                    amount: orderTotal,
+                    currency: orderCurrency,
+                    paidAt: isPaid ? /* @__PURE__ */ new Date() : null,
+                    method: "manual"
+                  }));
+                }
+              }
+            } catch (payErr) {
+              console.error("[crud] failed to update/create payment on order update", payErr);
+            }
+          }
+          const statusUpdated = Boolean(scalarUpdate.status || rawBody.status);
+          const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
+          if (statusUpdated || paymentUpdated) {
+            const newStatus = scalarUpdate.status ? String(scalarUpdate.status).toLowerCase() : rawBody.status ? String(rawBody.status).toLowerCase() : String(updatedOrder.status || "pending").toLowerCase();
+            const payments = Array.isArray(updatedOrder.payments) ? updatedOrder.payments : [];
+            const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
+            const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
+            void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+              if (newStatus === "pending") {
+                if (curPayStatus === "failed") {
+                  fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                } else {
+                  fireOrderNotificationTrigger("order_pending", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              } else if (newStatus === "confirmed") {
+                fireOrderNotificationTrigger("order_placed", updatedOrder.id, {
+                  dataSource,
+                  entityMap
+                });
+                if (curPayStatus === "paid" || curPayStatus === "captured") {
+                  fireOrderNotificationTrigger("payment_success", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                } else if (curPayStatus === "failed") {
+                  fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              } else if (newStatus === "processing") {
+                fireOrderNotificationTrigger("order_processing", updatedOrder.id, {
+                  dataSource,
+                  entityMap
+                });
+                if (curPayStatus === "failed") {
+                  fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              } else if (newStatus === "completed") {
+                fireOrderNotificationTrigger("order_completed", updatedOrder.id, {
+                  dataSource,
+                  entityMap
+                });
+                if (curPayStatus === "failed") {
+                  fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              } else if (newStatus === "cancelled") {
+                if (curPayStatus === "failed") {
+                  fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                } else {
+                  fireOrderNotificationTrigger("order_cancelled", updatedOrder.id, {
+                    dataSource,
+                    entityMap
+                  });
+                  if (curPayStatus === "paid" || curPayStatus === "refunded") {
+                    fireOrderNotificationTrigger("payment_refund_initiated", updatedOrder.id, {
+                      dataSource,
+                      entityMap
+                    });
+                  }
+                }
+              }
+            }).catch(() => {
+            });
+          }
           return json(updatedOrder);
         }
       }
@@ -6614,7 +6862,37 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           if (k in merged) updatePayload[k] = merged[k];
         }
       }
-      if (resource === "orders" && orderInvPrev) {
+      if (resource === "orders" && orderInvPrev && rawBody && typeof rawBody === "object") {
+        if ("assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
+          const aId = Number(rawBody.assignedUserId);
+          if (Number.isFinite(aId) && aId > 0) {
+            updatePayload.assignedUserId = aId;
+            updatePayload.assignedAt = /* @__PURE__ */ new Date();
+            if (!updatePayload.status && (orderInvPrev.status === "confirmed" || orderInvPrev.status === "pending")) {
+              updatePayload.status = "processing";
+            }
+          } else {
+            updatePayload.assignedUserId = null;
+            updatePayload.assignedAt = null;
+          }
+        }
+        if (updatePayload.status === "processing") {
+          const effectiveAssignee = updatePayload.assignedUserId !== void 0 ? updatePayload.assignedUserId : orderInvPrev?.assignedUserId;
+          if (!effectiveAssignee) {
+            return json({
+              error: "Cannot start processing without assigning a teammate. Please assign a teammate first."
+            }, {
+              status: 400
+            });
+          }
+        }
+        if (updatePayload.status === "completed" && orderInvPrev.status !== "completed" && !rawBody.__internalBypassOtp) {
+          return json({
+            error: "Direct completion is disabled. Please complete the order via the customer OTP verification flow."
+          }, {
+            status: 400
+          });
+        }
         const nextSt = typeof updatePayload.status === "string" && updatePayload.status ? String(updatePayload.status) : orderInvPrev.status;
         if (orderStatusHoldsStock(nextSt) && orderInvPrev.lines.length > 0) {
           const verr = await validateInventoryForOrderBecomingConfirmed(dataSource, entityMap, orderInvPrev, orderInvPrev.lines);
@@ -6679,24 +6957,43 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             if (pOrder && Number.isFinite(pOrder)) {
               if (newPayStatus === "paid" || newPayStatus === "captured") {
                 if (entityMap.orders) {
-                  await dataSource.getRepository(entityMap.orders).update(pOrder, {
-                    status: "confirmed"
+                  const ordRepo = dataSource.getRepository(entityMap.orders);
+                  const currentOrd = await ordRepo.findOne({
+                    where: {
+                      id: pOrder
+                    }
                   });
+                  const ordStatus = String(currentOrd?.status || "pending").toLowerCase();
+                  if (ordStatus === "pending") {
+                    await ordRepo.update(pOrder, {
+                      status: "confirmed"
+                    });
+                  }
+                  if (ordStatus === "pending" || ordStatus === "confirmed") {
+                    void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+                      fireOrderNotificationTrigger("order_placed", pOrder, {
+                        dataSource,
+                        entityMap
+                      });
+                      fireOrderNotificationTrigger("payment_success", pOrder, {
+                        dataSource,
+                        entityMap
+                      });
+                    }).catch(() => {
+                    });
+                  }
                 }
-                void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
-                  fireOrderNotificationTrigger("order_placed", pOrder, {
-                    dataSource,
-                    entityMap
-                  });
-                  fireOrderNotificationTrigger("payment_success", pOrder, {
+              } else if (newPayStatus === "failed") {
+                void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+                  fireOrderNotificationTrigger("payment_failed", pOrder, {
                     dataSource,
                     entityMap
                   });
                 }).catch(() => {
                 });
-              } else if (newPayStatus === "failed") {
-                void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
-                  fireOrderNotificationTrigger("payment_failed", pOrder, {
+              } else if (newPayStatus === "refunded") {
+                void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+                  fireOrderNotificationTrigger("payment_refund_initiated", pOrder, {
                     dataSource,
                     entityMap
                   });
@@ -6716,6 +7013,52 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           throw err;
         }
       }
+      if (resource === "orders" && rawBody && entityMap["payments"]) {
+        try {
+          const bodyPayStatusRaw = rawBody.paymentStatus;
+          if (bodyPayStatusRaw != null && typeof bodyPayStatusRaw === "string") {
+            const payStatus = bodyPayStatusRaw.trim().toLowerCase();
+            const paymentRepo = dataSource.getRepository(entityMap["payments"]);
+            const existingPay = await paymentRepo.findOne({
+              where: {
+                orderId: numericId
+              },
+              order: {
+                id: "DESC"
+              }
+            });
+            const isPaid = payStatus === "paid" || payStatus === "captured";
+            if (existingPay) {
+              await paymentRepo.update(existingPay.id, {
+                status: payStatus,
+                paidAt: isPaid && !existingPay.paidAt ? /* @__PURE__ */ new Date() : existingPay.paidAt
+              });
+            } else {
+              const orderRow = await repo.findOne({
+                where: {
+                  id: numericId
+                }
+              });
+              const orderTotal = Number(orderRow?.total ?? 0);
+              const orderCurrency = String(orderRow?.currency ?? "INR");
+              const vId = Number(orderRow?.vendorId ?? 1);
+              const cId = orderRow?.contactId ? Number(orderRow.contactId) : null;
+              await paymentRepo.save(paymentRepo.create({
+                vendorId: vId,
+                contactId: cId,
+                orderId: numericId,
+                status: payStatus,
+                amount: orderTotal,
+                currency: orderCurrency,
+                paidAt: isPaid ? /* @__PURE__ */ new Date() : null,
+                method: "manual"
+              }));
+            }
+          }
+        } catch (payErr) {
+          console.error("[crud] failed to update/create payment on order update", payErr);
+        }
+      }
       if (resource === "orders" && rawBody && entityMap["order_addresses"]) {
         const addressRawScalar = String(rawBody["contact.address"] ?? "").trim();
         if (addressRawScalar) {
@@ -6754,17 +7097,105 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
       }
       let updated = resource === "orders" ? await repo.findOne({
         where: {
-          id: numericId,
-          deleted: false
+          id: numericId
         },
         relations: [
-          "items"
+          "contact",
+          "billingAddress",
+          "shippingAddress",
+          "items",
+          "items.product",
+          "items.product.collection",
+          "payments"
         ]
       }) : await repo.findOne({
         where: {
           id: numericId
         }
       });
+      if (resource === "orders" && updated) {
+        const ord = updated;
+        const statusUpdated = Boolean(updatePayload.status);
+        const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
+        if (statusUpdated || paymentUpdated) {
+          const newStatus = updatePayload.status ? String(updatePayload.status).toLowerCase() : String(ord.status || "pending").toLowerCase();
+          const payments = Array.isArray(ord.payments) ? ord.payments : [];
+          const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
+          const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
+          void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
+            if (newStatus === "pending") {
+              if (curPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              } else {
+                fireOrderNotificationTrigger("order_pending", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (newStatus === "confirmed") {
+              fireOrderNotificationTrigger("order_placed", ord.id, {
+                dataSource,
+                entityMap
+              });
+              if (curPayStatus === "paid" || curPayStatus === "captured") {
+                fireOrderNotificationTrigger("payment_success", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              } else if (curPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (newStatus === "processing") {
+              fireOrderNotificationTrigger("order_processing", ord.id, {
+                dataSource,
+                entityMap
+              });
+              if (curPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (newStatus === "completed") {
+              fireOrderNotificationTrigger("order_completed", ord.id, {
+                dataSource,
+                entityMap
+              });
+              if (curPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              }
+            } else if (newStatus === "cancelled") {
+              if (curPayStatus === "failed") {
+                fireOrderNotificationTrigger("payment_failed", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+              } else {
+                fireOrderNotificationTrigger("order_cancelled", ord.id, {
+                  dataSource,
+                  entityMap
+                });
+                if (curPayStatus === "paid" || curPayStatus === "refunded") {
+                  fireOrderNotificationTrigger("payment_refund_initiated", ord.id, {
+                    dataSource,
+                    entityMap
+                  });
+                }
+              }
+            }
+          }).catch(() => {
+          });
+        }
+      }
       if (resource === "orders" && orderInvPrev && updated) {
         const invErr = await reconcileOrderInventoryBetweenSnapshots(dataSource, entityMap, orderInvPrev, orderInventorySnapshotFromRow(updated));
         if (invErr) return json({
@@ -18246,6 +18677,9 @@ var Order = class {
   customerContact;
   billingAddress;
   shippingAddress;
+  assignedUserId;
+  assignedAt;
+  assignedUser;
   items;
   payments;
 };
@@ -18458,6 +18892,29 @@ _ts_decorate21([
   }),
   _ts_metadata21("design:type", Object)
 ], Order.prototype, "shippingAddress", void 0);
+_ts_decorate21([
+  Column("int", {
+    nullable: true
+  }),
+  _ts_metadata21("design:type", Object)
+], Order.prototype, "assignedUserId", void 0);
+_ts_decorate21([
+  Column({
+    type: "timestamp",
+    nullable: true
+  }),
+  _ts_metadata21("design:type", Object)
+], Order.prototype, "assignedAt", void 0);
+_ts_decorate21([
+  ManyToOne(() => User, {
+    nullable: true,
+    onDelete: "SET NULL"
+  }),
+  JoinColumn({
+    name: "assignedUserId"
+  }),
+  _ts_metadata21("design:type", Object)
+], Order.prototype, "assignedUser", void 0);
 _ts_decorate21([
   OneToMany("OrderItem", "order"),
   _ts_metadata21("design:type", Array)
@@ -24489,6 +24946,7 @@ var NotificationChannel = /* @__PURE__ */ (function(NotificationChannel2) {
   NotificationChannel2["WHATSAPP"] = "whatsapp";
   NotificationChannel2["EMAIL"] = "email";
   NotificationChannel2["MOBILE"] = "mobile";
+  NotificationChannel2["SMS"] = "sms";
   return NotificationChannel2;
 })({});
 var NotificationAudienceType = /* @__PURE__ */ (function(NotificationAudienceType2) {
@@ -28143,21 +28601,37 @@ function whatsappPlugin(config = {}) {
     async init(context) {
       const env = context.config;
       const { getWhatsAppSettings, getMessageTemplateRow, ...staticRest } = config;
+      let settingsLoader = getWhatsAppSettings;
+      if (!settingsLoader && context.dataSource) {
+        settingsLoader = /* @__PURE__ */ __name(async () => {
+          try {
+            const ds = context.dataSource;
+            const repo = ds.getRepository("configs");
+            const rows = await repo.find({
+              where: {
+                settings: "whatsapp",
+                deleted: false
+              }
+            });
+            return Object.fromEntries(rows.map((r) => [
+              r.key,
+              r.value
+            ]));
+          } catch {
+            return {};
+          }
+        }, "settingsLoader");
+      }
       let db = {};
       try {
-        db = await getWhatsAppSettings?.() ?? {};
+        db = await settingsLoader?.() ?? {};
       } catch {
       }
       if (!isWhatsAppPluginEnabled(db)) {
         context.logger.warn("WhatsApp plugin skipped: disabled in Plugins \u2192 WhatsApp");
         return null;
       }
-      const merged = mergeWhatsAppConfigLayers(env, db, staticRest);
-      if (!getWhatsAppSettings && !whatsAppConfigured(merged)) {
-        context.logger.warn("WhatsApp plugin skipped: set WHATSAPP_ACCESS_TOKEN and WHATSAPP_PHONE_NUMBER_ID, or pass getWhatsAppSettings");
-        return null;
-      }
-      const svc = new WhatsAppService(env, staticRest, getWhatsAppSettings, getMessageTemplateRow);
+      const svc = new WhatsAppService(env, staticRest, settingsLoader, getMessageTemplateRow);
       return {
         send: /* @__PURE__ */ __name((opts) => svc.send(opts), "send")
       };
@@ -28531,7 +29005,7 @@ function createCmsApiHandler(config) {
         companyDetails
       };
       if (queue) {
-        const { queueEmail: queueEmail2 } = await import('./email-queue-OI2HSCGE.js');
+        const { queueEmail: queueEmail2 } = await import('./email-queue-YPRSVG56.js');
         await queueEmail2(cms, {
           to: opts.to,
           templateName: "passwordReset",
@@ -29831,7 +30305,7 @@ function createCmsApiHandler(config) {
         const pe = await requireEntityPermissionEffective(req, "orders", "read");
         if (pe) return pe;
         const cms = await getCms();
-        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-3GXDE443.js');
+        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-3UGWLICU.js');
         const oid = Number(path2[1]);
         if (!Number.isFinite(oid)) return config.json({
           error: "Invalid id"
@@ -29980,6 +30454,11 @@ function createCmsApiHandler(config) {
           });
         }
       }
+      if (path2[0] === "sms-notification-templates" && path2.length === 1 && m === "GET") {
+        const { createSmsNotificationTemplatesHandlers } = await import('./sms-notification-templates-handlers-SJLO7JGZ.js');
+        const handlers = createSmsNotificationTemplatesHandlers(dataSource, entityMap);
+        return handlers.GET(req);
+      }
       if (path2[0] === "orders" && path2[1] === "calculate" && path2.length === 2 && m === "POST") {
         const a = await config.requireAuth(req);
         if (a) return a;
@@ -30208,7 +30687,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-ZSFKEYMP.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-JKFQJYGG.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,
@@ -30307,25 +30786,20 @@ function createCmsApiHandler(config) {
           status: "cancelled"
         });
         const fireOrderCancelledNotification = /* @__PURE__ */ __name((refundAmount) => {
-          void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_cancelled", orderId, {
               dataSource,
               entityMap
             }, refundAmount != null && refundAmount > 0 ? {
               refundAmount
             } : void 0);
-            if (paymentStatus === "paid" || paymentStatus === "captured") {
+            if (paymentStatus === "paid" || paymentStatus === "captured" || paymentStatus === "refunded") {
               fireOrderNotificationTrigger("payment_refund_initiated", orderId, {
                 dataSource,
                 entityMap
               }, refundAmount != null && refundAmount > 0 ? {
                 refundAmount
               } : void 0);
-            } else {
-              fireOrderNotificationTrigger("payment_failed", orderId, {
-                dataSource,
-                entityMap
-              });
             }
           });
         }, "fireOrderCancelledNotification");
@@ -30546,6 +31020,66 @@ function createCmsApiHandler(config) {
           finalRefund: 0
         });
       }
+      if (path2[0] === "orders" && path2.length === 4 && path2[2] === "completion-otp" && path2[3] === "channels" && m === "GET" && getCms) {
+        const a = await config.requireAuth(req);
+        if (a) return a;
+        const pe = await requireEntityPermissionEffective(req, "orders", "read");
+        if (pe) return pe;
+        const orderId = Number(path2[1]);
+        if (!Number.isFinite(orderId)) return config.json({
+          error: "Invalid order ID"
+        }, {
+          status: 400
+        });
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-WGM7HWG4.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        return handlers.getChannels(req, orderId);
+      }
+      if (path2[0] === "orders" && path2.length === 4 && path2[2] === "completion-otp" && path2[3] === "send" && m === "POST" && getCms) {
+        const a = await config.requireAuth(req);
+        if (a) return a;
+        const pe = await requireEntityPermissionEffective(req, "orders", "update");
+        if (pe) return pe;
+        const orderId = Number(path2[1]);
+        if (!Number.isFinite(orderId)) return config.json({
+          error: "Invalid order ID"
+        }, {
+          status: 400
+        });
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-WGM7HWG4.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        return handlers.sendOtp(req, orderId);
+      }
+      if (path2[0] === "orders" && path2.length === 4 && path2[2] === "completion-otp" && path2[3] === "verify" && m === "POST" && getCms) {
+        const a = await config.requireAuth(req);
+        if (a) return a;
+        const pe = await requireEntityPermissionEffective(req, "orders", "update");
+        if (pe) return pe;
+        const orderId = Number(path2[1]);
+        if (!Number.isFinite(orderId)) return config.json({
+          error: "Invalid order ID"
+        }, {
+          status: 400
+        });
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-WGM7HWG4.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        return handlers.verifyOtp(req, orderId);
+      }
+      if (path2[0] === "orders" && path2.length === 3 && path2[2] === "eligible-assignees" && m === "GET") {
+        const a = await config.requireAuth(req);
+        if (a) return a;
+        const pe = await requireEntityPermissionEffective(req, "orders", "read");
+        if (pe) return pe;
+        const orderId = Number(path2[1]);
+        if (!Number.isFinite(orderId)) return config.json({
+          error: "Invalid order ID"
+        }, {
+          status: 400
+        });
+        const { createOrderAssigneesHandlers } = await import('./order-assignees-handlers-LKMAGLG6.js');
+        const handlers = createOrderAssigneesHandlers(dataSource, entityMap, getHydratedSessionUser);
+        return handlers.listEligibleAssignees(req, orderId);
+      }
       if (path2[0] === "refund-policies") {
         if (path2.length === 1) {
           if (m === "GET") {
@@ -31062,63 +31596,6 @@ async function tryRefreshOrderFromErpForStorefront(cms, dataSource, entityMap, o
 }
 __name(tryRefreshOrderFromErpForStorefront, "tryRefreshOrderFromErpForStorefront");
 
-// src/plugins/sms/sms-queue.ts
-var SMS_QUEUE_NAME = "sms";
-function registerSmsQueueProcessor(cms) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (!queue || !sms || typeof sms.send !== "function") return;
-  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
-    const payload = data;
-    if (!payload.to) return;
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (!payload.body?.trim()) return;
-    await sms.send({
-      to: payload.to,
-      body: payload.body,
-      otpCode: payload.otpCode,
-      variables: payload.variables
-    });
-  });
-}
-__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
-async function queueSms(cms, payload) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (queue) {
-    await queue.add(SMS_QUEUE_NAME, payload);
-    return;
-  }
-  if (sms && typeof sms.send === "function") {
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (payload.body?.trim()) {
-      await sms.send({
-        to: payload.to,
-        body: payload.body,
-        otpCode: payload.otpCode,
-        variables: payload.variables
-      });
-    }
-  }
-}
-__name(queueSms, "queueSms");
-
 // src/lib/storefront-product-pricing.ts
 function eventPricingFromRow(row) {
   const defaultCurrency = normalizeCurrencyCode(String(row?.defaultCurrency ?? "INR")) || "INR";
@@ -31187,143 +31664,6 @@ async function buildPricesForSupportedCurrencies(dataSource, entityMap, basePric
   return rows;
 }
 __name(buildPricesForSupportedCurrencies, "buildPricesForSupportedCurrencies");
-var OTP_TTL_MS = 10 * 60 * 1e3;
-var MAX_SENDS_PER_HOUR = 5;
-var MAX_VERIFY_ATTEMPTS = 8;
-function getPepper(explicit) {
-  return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
-}
-__name(getPepper, "getPepper");
-function hashOtpCode(code, purpose, identifier, pepper) {
-  return createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
-}
-__name(hashOtpCode, "hashOtpCode");
-function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
-  const h = hashOtpCode(code, purpose, identifier, pepper);
-  try {
-    return timingSafeEqual(Buffer.from(h, "utf8"), Buffer.from(storedHash, "utf8"));
-  } catch {
-    return false;
-  }
-}
-__name(verifyOtpCodeHash, "verifyOtpCodeHash");
-function generateNumericOtp(length = 6) {
-  const max = 10 ** length;
-  return randomInt(0, max).toString().padStart(length, "0");
-}
-__name(generateNumericOtp, "generateNumericOtp");
-function normalizePhoneE164(raw, defaultCountryCode) {
-  const t = raw.trim();
-  const digitsOnly = t.replace(/\D/g, "");
-  if (digitsOnly.length < 10) return null;
-  if (t.startsWith("+")) return `+${digitsOnly}`;
-  const cc = (defaultCountryCode || process.env.DEFAULT_PHONE_COUNTRY_CODE || "91").replace(/\D/g, "");
-  if (digitsOnly.length > 10) return `+${digitsOnly}`;
-  return `+${cc}${digitsOnly}`;
-}
-__name(normalizePhoneE164, "normalizePhoneE164");
-async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
-  const repo = dataSource.getRepository(entityMap.otp_challenges);
-  return repo.count({
-    where: {
-      purpose,
-      identifier,
-      createdAt: MoreThan(since)
-    }
-  });
-}
-__name(countRecentOtpSends, "countRecentOtpSends");
-async function createOtpChallenge(dataSource, entityMap, input) {
-  const { purpose, channel, identifier, code, pepper } = input;
-  const since = new Date(Date.now() - 60 * 60 * 1e3);
-  const recent = await countRecentOtpSends(dataSource, entityMap, purpose, identifier, since);
-  if (recent >= MAX_SENDS_PER_HOUR) {
-    return {
-      ok: false,
-      error: "Too many codes sent. Try again later.",
-      status: 429
-    };
-  }
-  const repo = dataSource.getRepository(entityMap.otp_challenges);
-  await repo.delete({
-    purpose,
-    identifier,
-    consumedAt: IsNull()
-  });
-  const expiresAt = new Date(Date.now() + OTP_TTL_MS);
-  const codeHash = hashOtpCode(code, purpose, identifier, pepper);
-  await repo.save(repo.create({
-    purpose,
-    channel,
-    identifier,
-    codeHash,
-    expiresAt,
-    attempts: 0,
-    consumedAt: null
-  }));
-  return {
-    ok: true
-  };
-}
-__name(createOtpChallenge, "createOtpChallenge");
-async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
-  const { purpose, identifier, code, pepper } = input;
-  const repo = dataSource.getRepository(entityMap.otp_challenges);
-  const row = await repo.findOne({
-    where: {
-      purpose,
-      identifier,
-      consumedAt: IsNull()
-    },
-    order: {
-      id: "DESC"
-    }
-  });
-  if (!row) {
-    return {
-      ok: false,
-      error: "Invalid or expired code",
-      status: 400
-    };
-  }
-  const r = row;
-  if (new Date(r.expiresAt) < /* @__PURE__ */ new Date()) {
-    await repo.delete(row.id);
-    return {
-      ok: false,
-      error: "Invalid or expired code",
-      status: 400
-    };
-  }
-  const attempts = r.attempts || 0;
-  if (attempts >= MAX_VERIFY_ATTEMPTS) {
-    await repo.delete(row.id);
-    return {
-      ok: false,
-      error: "Too many attempts",
-      status: 400
-    };
-  }
-  const valid = verifyOtpCodeHash(code, r.codeHash, purpose, identifier, pepper);
-  if (!valid) {
-    await repo.update(row.id, {
-      attempts: attempts + 1
-    });
-    return {
-      ok: false,
-      error: "Invalid or expired code",
-      status: 400
-    };
-  }
-  await repo.update(row.id, {
-    consumedAt: /* @__PURE__ */ new Date(),
-    attempts: attempts + 1
-  });
-  return {
-    ok: true
-  };
-}
-__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
 
 // src/api/storefront-handlers.ts
 var GUEST_COOKIE = "guest_id";
@@ -31353,7 +31693,7 @@ function createStorefrontApiHandler(config) {
   const otpPepper = config.otpPepper;
   const defaultPhoneCc = config.defaultPhoneCountryCode;
   function fireOrderPlacedNotification(orderId, isPaid) {
-    void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
+    void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
       fireOrderNotificationTrigger("order_placed", orderId, {
         dataSource,
         entityMap
@@ -31424,9 +31764,21 @@ function createStorefrontApiHandler(config) {
         },
         select: [
           "id",
-          "vendorId"
+          "vendorId",
+          "eventId"
         ]
       });
+      const comboEventId = Number(combo?.eventId);
+      if (Number.isInteger(comboEventId) && comboEventId > 0 && entityMap.events) {
+        const evRows = await dataSource.query(`SELECT "vendorId" FROM events WHERE id = $1 AND deleted = false LIMIT 1`, [
+          comboEventId
+        ]);
+        const evVid = Number(evRows[0]?.vendorId);
+        if (Number.isInteger(evVid) && evVid > 0) {
+          comboVendorCache.set(comboId, evVid);
+          return evVid;
+        }
+      }
       const vid = Number(combo?.vendorId);
       if (Number.isInteger(vid) && vid > 0) {
         comboVendorCache.set(comboId, vid);
@@ -31446,9 +31798,30 @@ function createStorefrontApiHandler(config) {
       }
       const p = it.product;
       if (!p || p.deleted || p.status !== "available") continue;
-      const vid = Number(p.vendorId);
+      let vid = Number(p.vendorId);
+      if (!Number.isInteger(vid) || vid <= 0) {
+        const prodId = Number(p.id);
+        if (Number.isInteger(prodId) && prodId > 0 && entityMap.event_products) {
+          const epRows = await dataSource.query(`SELECT e."vendorId" FROM event_products ep
+             JOIN events e ON e.id = ep."eventId"
+             WHERE ep."productId" = $1 AND e.deleted = false LIMIT 1`, [
+            prodId
+          ]);
+          const evVid = Number(epRows[0]?.vendorId);
+          if (Number.isInteger(evVid) && evVid > 0) vid = evVid;
+        }
+      }
       if (Number.isInteger(vid) && vid > 0) vendorIds.add(vid);
     }
+    if (vendorIds.size > 1) {
+      const nonDefault = [
+        ...vendorIds
+      ].filter((id) => id !== 1);
+      if (nonDefault.length === 1) {
+        vendorIds.clear();
+        vendorIds.add(nonDefault[0]);
+      }
+    }
     if (vendorIds.size === 0) return {
       error: "Cart has no valid products",
       status: 400
@@ -34257,7 +34630,7 @@ function createStorefrontApiHandler(config) {
             } catch {
             }
             try {
-              void import('./emit-order-notification-trigger-CZU3V2WE.js').then(({ fireOrderNotificationTrigger }) => {
+              void import('./emit-order-notification-trigger-XVG2B5ZF.js').then(({ fireOrderNotificationTrigger }) => {
                 fireOrderNotificationTrigger("order_cancelled", orderId, {
                   dataSource,
                   entityMap
@@ -34294,4 +34667,4 @@ function createStorefrontApiHandler(config) {
 }
 __name(createStorefrontApiHandler, "createStorefrontApiHandler");
 
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging };
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, whatsappPlugin, wrapGetCmsWithMessaging };