@infuro/cms-core 1.0.66 → 1.0.68

package/dist/{chunk-T33KU5G5.js → chunk-MYUGQHU4.js}

@@ -1,18 +1,18 @@
+import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
 import { normalizePhoneE164, generateNumericOtp, createOtpChallenge, queueSms, verifyAndConsumeOtpChallenge } from './chunk-OVTOP42W.js';
+import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-AYERBA7I.js';
 import { JOB_RUNNER_QUEUE } from './chunk-XJNNOSJR.js';
 import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, WhatsAppService, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-NV5IRHI3.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, WhatsAppService, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-N4LBZXBG.js';
 import { registerWhatsAppQueueProcessor } from './chunk-GWDI752Q.js';
-import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
-import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-TU23GJPJ.js';
-import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-OPJEV44S.js';
+import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-7JCCPQEF.js';
+import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-ZIT4IP6N.js';
 import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
 import { mergeEmailLayoutCompanyDetails } from './chunk-YRCKEGL2.js';
 import { getSmsTemplateDefault, SMS_MESSAGE_TEMPLATE_DEFAULTS } from './chunk-MQBT33IV.js';
-import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-AYERBA7I.js';
-import { ensureCustomerRecord, linkUnclaimedContactToUser, ensureCustomerForUser, canManageRoles, sessionHasEntityAccess } from './chunk-NR44CK5E.js';
+import { ensureCustomerRecord, linkUnclaimedContactToUser, ensureCustomerForUser, canManageRoles, sessionHasEntityAccess } from './chunk-ZY64VJMS.js';
+import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-5NOZSG6J.js';
 import { retireSoftDeletedUniqueValue, activeUniqueValueExists } from './chunk-DBPSJYLZ.js';
-import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-MVHDC3XF.js';
 import { queueErp } from './chunk-SYBOCAWB.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { PrimaryGeneratedColumn, Column, Entity, ManyToOne, JoinColumn, CreateDateColumn, UpdateDateColumn, Unique, OneToMany, Index, ManyToMany, JoinTable, In, ILike, Between, MoreThanOrEqual, LessThanOrEqual, Not, MoreThan, IsNull } from 'typeorm';
@@ -1674,6 +1674,30 @@ function entityHasSoftDelete(repo) {
   return repo.metadata.columns.some((c) => c.propertyName === "deleted");
 }
 __name(entityHasSoftDelete, "entityHasSoftDelete");
+async function recordOrderAssigneeHistory(dataSource, entityMap, orderId, userId, vendorId) {
+  if (!entityMap.order_assignees) return 1;
+  const assigneeRepo = dataSource.getRepository(entityMap.order_assignees);
+  const maxRow = await assigneeRepo.findOne({
+    where: {
+      orderId
+    },
+    order: {
+      sortOrder: "DESC"
+    }
+  });
+  const currentMax = Number(maxRow?.sortOrder ?? 0);
+  const nextSortOrder = currentMax + 1;
+  await assigneeRepo.save({
+    orderId,
+    userId,
+    vendorId,
+    sortOrder: nextSortOrder,
+    assignedAt: /* @__PURE__ */ new Date()
+  });
+  console.log(`[ORDERS-DEBUG][ASSIGNEE_HISTORY] Recorded assignment for order ${orderId}: user ${userId}, vendor ${vendorId}, sortOrder ${nextSortOrder}`);
+  return nextSortOrder;
+}
+__name(recordOrderAssigneeHistory, "recordOrderAssigneeHistory");
 var LIST_QUERY_RESERVED = /* @__PURE__ */ new Set([
   "page",
   "limit",
@@ -3556,10 +3580,38 @@ function createCrudHandler(dataSource, entityMap, options) {
             });
           }
         }
-        const qb = repo2.createQueryBuilder("order").leftJoinAndSelect("order.contact", "contact").leftJoinAndSelect("order.items", "items").leftJoinAndSelect("items.product", "product").leftJoinAndSelect("product.collection", "collection").leftJoinAndSelect("order.payments", "payments").leftJoinAndSelect("order.assignedUser", "assignedUser").andWhere("order.deleted = :orderDel", {
+        const qb = repo2.createQueryBuilder("order").leftJoinAndSelect("order.contact", "contact").leftJoinAndSelect("order.items", "items").leftJoinAndSelect("items.product", "product").leftJoinAndSelect("product.collection", "collection").leftJoinAndSelect("order.payments", "payments").leftJoinAndSelect("order.assignedUser", "assignedUser").leftJoinAndSelect("order.vendor", "vendor").andWhere("order.deleted = :orderDel", {
           orderDel: false
         }).orderBy(`order.${sortField2}`, sortOrderOrders).skip(skip).take(limit);
-        applyVendorScopeToQueryBuilder(qb, "order", scope);
+        const session = await getHydratedSessionUser?.() ?? null;
+        console.log("[ORDERS-DEBUG][LIST] Querying orders. Session:", {
+          id: session?.id,
+          email: session?.email,
+          role: session?.role,
+          isRBACAdmin: session?.isRBACAdmin,
+          isVendorPortal: session?.isVendorPortal,
+          isVendorOwner: session?.isVendorOwner,
+          isVendorRoleOwner: session?.isVendorRoleOwner,
+          vendorIds: session?.vendorIds,
+          activeVendorId: session?.activeVendorId
+        }, "Scope:", scope);
+        if (scope.type === "deny") {
+          qb.andWhere("1 = 0");
+        } else if (scope.type === "vendor") {
+          const isOwner = Boolean(session?.isVendorOwner || session?.isVendorRoleOwner || session?.isRBACAdmin);
+          console.log("[ORDERS-DEBUG][LIST] Vendor scope applied. isOwner:", isOwner, "vendorId:", scope.vendorId);
+          if (isOwner) {
+            qb.andWhere('(order.vendorId = :vendorScopeId OR order.assignedUserId IN (SELECT vu."userId" FROM vendor_users vu WHERE vu."vendorId" = :vendorScopeId))', {
+              vendorScopeId: scope.vendorId
+            });
+          } else {
+            const teamMemberId = Number(session?.id);
+            console.log("[ORDERS-DEBUG][LIST] Team member scoping to teamMemberId:", teamMemberId);
+            qb.andWhere("order.assignedUserId = :teamMemberId", {
+              teamMemberId
+            });
+          }
+        }
         const vendorIdFilter = searchParams.get("vendorId")?.trim();
         if (vendorIdFilter) {
           const n = Number(vendorIdFilter);
@@ -3612,7 +3664,15 @@ function createCrudHandler(dataSource, entityMap, options) {
             });
           }
         }
+        console.log("[ORDERS-DEBUG][LIST] Executing SQL:", qb.getSql(), "Params:", qb.getParameters());
         const [rows, total2] = await qb.getManyAndCount();
+        console.log("[ORDERS-DEBUG][LIST] Query result: total =", total2, "rows length =", rows.length, "Orders:", rows.map((r) => ({
+          id: r.id,
+          orderNumber: r.orderNumber,
+          vendorId: r.vendorId,
+          assignedUserId: r.assignedUserId,
+          status: r.status
+        })));
         const data2 = await Promise.all(rows.map(async (order) => {
           await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
           const contact = order.contact;
@@ -3656,6 +3716,7 @@ function createCrudHandler(dataSource, entityMap, options) {
           if (orderStatus === "cancelled" && rawPayStatus !== "paid" && rawPayStatus !== "captured" && rawPayStatus !== "refunded") {
             paymentStatus2 = "unpaid";
           }
+          const vendorObj = order.vendor;
           return {
             ...orderWithoutPayments,
             contact: contact ? {
@@ -3669,6 +3730,11 @@ function createCrudHandler(dataSource, entityMap, options) {
               name: assignedUserObj.name || assignedUserObj.email,
               email: assignedUserObj.email
             } : null,
+            vendor: vendorObj ? {
+              id: vendorObj.id,
+              name: vendorObj.name || vendorObj.slug || `Vendor #${vendorObj.id}`,
+              slug: vendorObj.slug
+            } : null,
             itemsSummary,
             paymentStatus: paymentStatus2
           };
@@ -4201,6 +4267,18 @@ function createCrudHandler(dataSource, entityMap, options) {
               isCatalog: true
             });
           }
+        } else if (resource === "orders" && scope.type === "vendor") {
+          const session = await getHydratedSessionUser?.() ?? null;
+          const isOwner = Boolean(session?.isVendorOwner || session?.isVendorRoleOwner || session?.isRBACAdmin);
+          if (!isOwner) {
+            const teamMemberId = Number(session?.id);
+            where = mergeListWhereAnd(where, {
+              vendorId: scope.vendorId,
+              assignedUserId: teamMemberId
+            });
+          } else {
+            where = mergeVendorScopeIntoWhere(where, scope, resource, catalogFlags);
+          }
         } else {
           where = mergeVendorScopeIntoWhere(where, scope, resource, catalogFlags);
         }
@@ -5165,6 +5243,12 @@ function createCrudHandler(dataSource, entityMap, options) {
               shippingAddressId: savedShipping?.id ?? null
             });
           }
+          if (persistBody.assignedUserId) {
+            const initAssignee = Number(persistBody.assignedUserId);
+            if (Number.isFinite(initAssignee) && initAssignee > 0) {
+              await recordOrderAssigneeHistory(dataSource, entityMap, created.id, initAssignee, Number(created.vendorId) || null);
+            }
+          }
           const reloadedOrder = await repo.findOne({
             where: {
               id: created.id,
@@ -5229,7 +5313,7 @@ function createCrudHandler(dataSource, entityMap, options) {
           const orderIdForNotify = created.id;
           const finalCreatedStatus = String(created.status ?? createdStatus ?? "pending").toLowerCase();
           const initialPayStatus = String(persistBody.paymentStatus ?? body.paymentStatus ?? "unpaid").toLowerCase();
-          void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
             if (finalCreatedStatus === "pending") {
               if (initialPayStatus === "failed") {
                 fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
@@ -5484,7 +5568,16 @@ function createCrudHandler(dataSource, entityMap, options) {
       const scope = await resolveScope();
       const flags = await getVendorCatalogCreateFlags(dataSource);
       if (scope.type !== "all") {
-        data = data.filter((row) => vendorScopeRowAccess(row, scope, resource, flags) === "ok");
+        const session = await getHydratedSessionUser?.() ?? null;
+        const isOwner = Boolean(session?.isVendorOwner || session?.isVendorRoleOwner || session?.isRBACAdmin);
+        const teamMemberId = Number(session?.id);
+        data = data.filter((row) => {
+          if (vendorScopeRowAccess(row, scope, resource, flags) !== "ok") return false;
+          if (resource === "orders" && scope.type === "vendor" && !isOwner) {
+            return Number(row?.assignedUserId) === teamMemberId;
+          }
+          return true;
+        });
       }
       const excludeCols = /* @__PURE__ */ new Set([
         "deletedAt",
@@ -5522,6 +5615,51 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
     type: "all"
   }));
   async function vendorScopeAccessJson(row, scope, resource) {
+    if (!row) return json({
+      message: "Not found"
+    }, {
+      status: 404
+    });
+    if (resource === "orders" && scope.type === "vendor") {
+      const rowVendorId = Number(row?.vendorId);
+      let orderBelongsToVendorScope = rowVendorId === scope.vendorId;
+      if (!orderBelongsToVendorScope) {
+        const aId = Number(row?.assignedUserId);
+        if (Number.isFinite(aId) && aId > 0 && entityMap["vendor_users"]) {
+          const vuRepo = dataSource.getRepository(entityMap["vendor_users"]);
+          const isTeamMember = await vuRepo.count({
+            where: {
+              vendorId: scope.vendorId,
+              userId: aId
+            }
+          });
+          if (isTeamMember > 0) {
+            orderBelongsToVendorScope = true;
+          }
+        }
+      }
+      if (!orderBelongsToVendorScope) {
+        return json({
+          error: "Forbidden"
+        }, {
+          status: 403
+        });
+      }
+      const session = await getHydratedSessionUser?.() ?? null;
+      const isOwner = Boolean(session?.isVendorOwner || session?.isVendorRoleOwner || session?.isRBACAdmin);
+      if (!isOwner) {
+        const sessionUserId = Number(session?.id);
+        const orderAssignee = Number(row?.assignedUserId);
+        if (!Number.isFinite(orderAssignee) || orderAssignee !== sessionUserId) {
+          return json({
+            error: "Forbidden: You can only access orders assigned directly to you"
+          }, {
+            status: 403
+          });
+        }
+      }
+      return null;
+    }
     const flags = await getVendorCatalogCreateFlags(dataSource);
     const access = vendorScopeRowAccess(row, scope, resource, flags);
     if (access === "ok") return null;
@@ -5646,6 +5784,17 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
       }
       if (resource === "orders") {
         const scope2 = await resolveScopeById();
+        const session = await getHydratedSessionUser?.() ?? null;
+        console.log("[ORDERS-DEBUG][GET_BY_ID] Fetching order id:", id, "Scope:", scope2, "Session:", {
+          id: session?.id,
+          email: session?.email,
+          role: session?.role,
+          isRBACAdmin: session?.isRBACAdmin,
+          isVendorOwner: session?.isVendorOwner,
+          isVendorRoleOwner: session?.isVendorRoleOwner,
+          activeVendorId: session?.activeVendorId,
+          vendorIds: session?.vendorIds
+        });
         const order = await repo.findOne({
           where: {
             id: Number(id)
@@ -5658,14 +5807,26 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             "items.product",
             "items.product.collection",
             "payments",
-            "assignedUser"
+            "assignedUser",
+            "vendor"
           ]
         });
+        console.log("[ORDERS-DEBUG][GET_BY_ID] Order found in DB:", order ? {
+          id: order.id,
+          orderNumber: order.orderNumber,
+          vendorId: order.vendorId,
+          assignedUserId: order.assignedUserId,
+          status: order.status
+        } : null);
         if (order) {
           await autoExpireOrderIfPaymentTimeExceeded(dataSource, entityMap, order);
         }
         const orderDenied = await vendorScopeAccessJson(order, scope2, resource);
-        if (orderDenied) return orderDenied;
+        if (orderDenied) {
+          console.log("[ORDERS-DEBUG][GET_BY_ID] Access DENIED for order id:", id);
+          return orderDenied;
+        }
+        console.log("[ORDERS-DEBUG][GET_BY_ID] Access GRANTED for order id:", id);
         const relatedOrders = await repo.find({
           where: {
             parentOrderId: Number(id)
@@ -6049,21 +6210,67 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             lines: []
           } : await calculateOrderTotalsFromLines(dataSource, entityMap, orderLinesNorm, effectiveCurrency, putDiscountId, Number.isFinite(putOrderVendorId) ? putOrderVendorId : null);
           const scalarUpdate = pickColumnUpdates(repo, rawBody);
-          if (rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
-            const aId = Number(rawBody.assignedUserId);
-            if (Number.isFinite(aId) && aId > 0) {
-              scalarUpdate.assignedUserId = aId;
-              scalarUpdate.assignedAt = /* @__PURE__ */ new Date();
-            } else {
-              scalarUpdate.assignedUserId = null;
-              scalarUpdate.assignedAt = null;
+          if (rawBody && typeof rawBody === "object") {
+            if (scopePutEarly.type === "all" && "vendorId" in rawBody && rawBody.vendorId !== void 0) {
+              const vId = Number(rawBody.vendorId);
+              if (Number.isFinite(vId) && vId > 0) {
+                scalarUpdate.vendorId = vId;
+              }
+            }
+            if ("assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
+              const aId = Number(rawBody.assignedUserId);
+              if (Number.isFinite(aId) && aId > 0) {
+                if (scopePutEarly.type === "vendor" && entityMap.vendor_users) {
+                  const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+                  const vuLink = await vuRepo.findOne({
+                    where: {
+                      vendorId: scopePutEarly.vendorId,
+                      userId: aId
+                    }
+                  });
+                  if (!vuLink) {
+                    return json({
+                      error: "Cannot assign order to a user outside your vendor team."
+                    }, {
+                      status: 403
+                    });
+                  }
+                  scalarUpdate.vendorId = scopePutEarly.vendorId;
+                } else if (scopePutEarly.type === "all" && entityMap.vendor_users) {
+                  if (entityMap.vendors) {
+                    const activeVu = await dataSource.query(`SELECT vu."vendorId"
+                       FROM vendor_users vu
+                       JOIN vendors v ON v.id = vu."vendorId"
+                       WHERE vu."userId" = $1 AND v.deleted = false
+                       ORDER BY vu.id DESC
+                       LIMIT 1`, [
+                      aId
+                    ]);
+                    if (activeVu.length > 0 && activeVu[0].vendorId) {
+                      scalarUpdate.vendorId = Number(activeVu[0].vendorId);
+                    }
+                  }
+                }
+                const prevAssigned = Number(existingOrderRow?.assignedUserId);
+                const prevVendor = Number(existingOrderRow?.vendorId);
+                const targetVendor = Number.isFinite(Number(scalarUpdate.vendorId)) ? Number(scalarUpdate.vendorId) : Number(existingOrderRow?.vendorId) || null;
+                if (aId !== prevAssigned || targetVendor && targetVendor !== prevVendor) {
+                  await recordOrderAssigneeHistory(dataSource, entityMap, numericId, aId, targetVendor);
+                }
+                scalarUpdate.assignedUserId = aId;
+                scalarUpdate.assignedAt = /* @__PURE__ */ new Date();
+              } else {
+                scalarUpdate.assignedUserId = null;
+                scalarUpdate.assignedAt = null;
+              }
             }
           }
           if (scalarUpdate.status === "processing") {
             const effectiveAssignee = scalarUpdate.assignedUserId !== void 0 ? scalarUpdate.assignedUserId : existingOrderRow?.assignedUserId ?? null;
-            if (!effectiveAssignee) {
+            const effectiveVendor = scalarUpdate.vendorId !== void 0 ? Number(scalarUpdate.vendorId) : Number(existingOrderRow?.vendorId);
+            if (!effectiveAssignee && (!Number.isFinite(effectiveVendor) || effectiveVendor <= 0)) {
               return json({
-                error: "Cannot start processing without assigning a teammate. Please assign a teammate first."
+                error: "Cannot start processing without assigning a vendor or teammate. Please assign first."
               }, {
                 status: 400
               });
@@ -6309,7 +6516,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
           const assigneeUpdated = Boolean(rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0 && Number(rawBody.assignedUserId) > 0 && Number(rawBody.assignedUserId) !== Number(existingOrderRow?.assignedUserId));
           if (assigneeUpdated) {
-            void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+            void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
               fireOrderNotificationTrigger("order_assigned", updatedOrder.id, {
                 dataSource,
                 entityMap
@@ -6326,7 +6533,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             const payments = Array.isArray(updatedOrder.payments) ? updatedOrder.payments : [];
             const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
             const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
-            void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+            void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
               if (newStatus === "pending") {
                 if (curPayStatus === "failed") {
                   fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
@@ -6480,7 +6687,9 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
       }
       const updatePayload = rawBody && typeof rawBody === "object" ? pickColumnUpdates(repo, rawBody) : {};
       if (resourceUsesVendorScope(resource)) {
-        delete updatePayload.vendorId;
+        if (!(resource === "orders" && scopePut.type === "all")) {
+          delete updatePayload.vendorId;
+        }
       }
       if (resource === "contacts" && "type" in updatePayload) {
         const t = updatePayload.type;
@@ -6876,9 +7085,59 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
         }
       }
       if (resource === "orders" && orderInvPrev && rawBody && typeof rawBody === "object") {
+        console.log("[ORDERS-DEBUG][UPDATE] PUT /api/orders/" + numericId, "Scope:", scopePut, "rawBody:", rawBody, "existingOrder:", {
+          id: existingOrderRow?.id,
+          vendorId: existingOrderRow?.vendorId,
+          assignedUserId: existingOrderRow?.assignedUserId,
+          status: existingOrderRow?.status
+        });
+        if (scopePut.type === "all" && "vendorId" in rawBody && rawBody.vendorId !== void 0) {
+          const vId = Number(rawBody.vendorId);
+          if (Number.isFinite(vId) && vId > 0) {
+            updatePayload.vendorId = vId;
+          }
+        }
         if ("assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
           const aId = Number(rawBody.assignedUserId);
+          console.log("[ORDERS-DEBUG][UPDATE] Updating assignedUserId to:", aId);
           if (Number.isFinite(aId) && aId > 0) {
+            if (scopePut.type === "vendor" && entityMap.vendor_users) {
+              const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+              const vuLink = await vuRepo.findOne({
+                where: {
+                  vendorId: scopePut.vendorId,
+                  userId: aId
+                }
+              });
+              if (!vuLink) {
+                return json({
+                  error: "Cannot assign order to a user outside your vendor team."
+                }, {
+                  status: 403
+                });
+              }
+              updatePayload.vendorId = scopePut.vendorId;
+            } else if (scopePut.type === "all" && entityMap.vendor_users) {
+              if (entityMap.vendors) {
+                const activeVu = await dataSource.query(`SELECT vu."vendorId"
+                   FROM vendor_users vu
+                   JOIN vendors v ON v.id = vu."vendorId"
+                   WHERE vu."userId" = $1 AND v.deleted = false
+                   ORDER BY vu.id DESC
+                   LIMIT 1`, [
+                  aId
+                ]);
+                if (activeVu.length > 0 && activeVu[0].vendorId) {
+                  updatePayload.vendorId = Number(activeVu[0].vendorId);
+                }
+              }
+            }
+            const prevAssigned = Number(existingOrderRow?.assignedUserId);
+            const prevVendor = Number(existingOrderRow?.vendorId);
+            const targetVendor = Number.isFinite(Number(updatePayload.vendorId)) ? Number(updatePayload.vendorId) : Number(existingOrderRow?.vendorId) || null;
+            if (aId !== prevAssigned || targetVendor && targetVendor !== prevVendor) {
+              await recordOrderAssigneeHistory(dataSource, entityMap, numericId, aId, targetVendor);
+            }
             updatePayload.assignedUserId = aId;
             updatePayload.assignedAt = /* @__PURE__ */ new Date();
           } else {
@@ -6886,11 +7145,13 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             updatePayload.assignedAt = null;
           }
         }
+        console.log("[ORDERS-DEBUG][UPDATE] Final updatePayload for order:", updatePayload);
         if (updatePayload.status === "processing") {
           const effectiveAssignee = updatePayload.assignedUserId !== void 0 ? updatePayload.assignedUserId : existingOrderRow?.assignedUserId ?? null;
-          if (!effectiveAssignee) {
+          const effectiveVendor = updatePayload.vendorId !== void 0 ? Number(updatePayload.vendorId) : Number(existingOrderRow?.vendorId);
+          if (!effectiveAssignee && (!Number.isFinite(effectiveVendor) || effectiveVendor <= 0)) {
             return json({
-              error: "Cannot start processing without assigning a teammate. Please assign a teammate first."
+              error: "Cannot start processing without assigning a vendor or teammate. Please assign first."
             }, {
               status: 400
             });
@@ -6980,7 +7241,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                     });
                   }
                   if (ordStatus === "pending" || ordStatus === "confirmed") {
-                    void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+                    void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
                       fireOrderNotificationTrigger("order_placed", pOrder, {
                         dataSource,
                         entityMap
@@ -6994,7 +7255,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                   }
                 }
               } else if (newPayStatus === "failed") {
-                void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+                void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
                   fireOrderNotificationTrigger("payment_failed", pOrder, {
                     dataSource,
                     entityMap
@@ -7002,7 +7263,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                 }).catch(() => {
                 });
               } else if (newPayStatus === "refunded") {
-                void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+                void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
                   fireOrderNotificationTrigger("payment_refund_initiated", pOrder, {
                     dataSource,
                     entityMap
@@ -7129,7 +7390,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
         const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
         const assigneeUpdated = Boolean(rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0 && Number(rawBody.assignedUserId) > 0 && Number(rawBody.assignedUserId) !== Number(existingOrderRow?.assignedUserId));
         if (assigneeUpdated) {
-          void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_assigned", ord.id, {
               dataSource,
               entityMap
@@ -7146,7 +7407,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           const payments = Array.isArray(ord.payments) ? ord.payments : [];
           const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
           const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
-          void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
             if (newStatus === "pending") {
               if (curPayStatus === "failed") {
                 fireOrderNotificationTrigger("payment_failed", ord.id, {
@@ -15281,6 +15542,7 @@ function createVendorOnboardHandlers(config) {
           state: vp?.state ?? null,
           postalCode: vp?.postalCode ?? null,
           blocked: u?.blocked ?? false,
+          inviteStatus: u?.inviteStatus ?? (u?.password ? "active" : "pending"),
           groupName: u?.group?.name ?? null
         };
       });
@@ -15754,14 +16016,24 @@ function createVendorOnboardHandlers(config) {
             });
           }
         }
-        const token = String(user.inviteToken ?? "").trim();
-        if (!token || user.inviteStatus !== "pending") {
+        const hasPassword = !!(user.password && String(user.password).trim());
+        const isPending = user.inviteStatus === "pending" || !hasPassword;
+        if (!isPending) {
           return json({
-            error: "No pending invite for this user"
+            error: "User has already accepted the invite"
           }, {
             status: 400
           });
         }
+        let token = String(user.inviteToken ?? "").trim();
+        if (!token) {
+          token = newUserInviteToken();
+          await dataSource.getRepository(entityMap.users).update(user.id, {
+            inviteToken: token,
+            inviteStatus: "pending",
+            password: null
+          });
+        }
         const inviteLink = buildUserInviteLink(baseUrl, token);
         const emailSent = await trySendVendorOnboardEmails({
           vendorName,
@@ -25135,6 +25407,109 @@ _ts_decorate69([
 OrderNotificationTrigger = _ts_decorate69([
   Entity("order_notification_triggers")
 ], OrderNotificationTrigger);
+function _ts_decorate70(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate70, "_ts_decorate");
+function _ts_metadata70(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata70, "_ts_metadata");
+var OrderAssignee = class {
+  static {
+    __name(this, "OrderAssignee");
+  }
+  id;
+  orderId;
+  userId;
+  vendorId;
+  sortOrder;
+  assignedAt;
+  createdAt;
+  order;
+  user;
+  vendor;
+};
+_ts_decorate70([
+  PrimaryGeneratedColumn(),
+  _ts_metadata70("design:type", Number)
+], OrderAssignee.prototype, "id", void 0);
+_ts_decorate70([
+  Column("int"),
+  _ts_metadata70("design:type", Number)
+], OrderAssignee.prototype, "orderId", void 0);
+_ts_decorate70([
+  Column("int"),
+  _ts_metadata70("design:type", Number)
+], OrderAssignee.prototype, "userId", void 0);
+_ts_decorate70([
+  Column("int", {
+    nullable: true
+  }),
+  _ts_metadata70("design:type", Object)
+], OrderAssignee.prototype, "vendorId", void 0);
+_ts_decorate70([
+  Column("int", {
+    default: 1
+  }),
+  _ts_metadata70("design:type", Number)
+], OrderAssignee.prototype, "sortOrder", void 0);
+_ts_decorate70([
+  Column({
+    type: "timestamp with time zone",
+    default: /* @__PURE__ */ __name(() => "CURRENT_TIMESTAMP", "default")
+  }),
+  _ts_metadata70("design:type", typeof Date === "undefined" ? Object : Date)
+], OrderAssignee.prototype, "assignedAt", void 0);
+_ts_decorate70([
+  CreateDateColumn({
+    type: "timestamp with time zone"
+  }),
+  _ts_metadata70("design:type", typeof Date === "undefined" ? Object : Date)
+], OrderAssignee.prototype, "createdAt", void 0);
+_ts_decorate70([
+  ManyToOne(() => Order, {
+    onDelete: "CASCADE"
+  }),
+  JoinColumn({
+    name: "orderId"
+  }),
+  _ts_metadata70("design:type", typeof Order === "undefined" ? Object : Order)
+], OrderAssignee.prototype, "order", void 0);
+_ts_decorate70([
+  ManyToOne(() => User, {
+    onDelete: "CASCADE"
+  }),
+  JoinColumn({
+    name: "userId"
+  }),
+  _ts_metadata70("design:type", typeof User === "undefined" ? Object : User)
+], OrderAssignee.prototype, "user", void 0);
+_ts_decorate70([
+  ManyToOne(() => Vendor, {
+    nullable: true,
+    onDelete: "SET NULL"
+  }),
+  JoinColumn({
+    name: "vendorId"
+  }),
+  _ts_metadata70("design:type", Object)
+], OrderAssignee.prototype, "vendor", void 0);
+OrderAssignee = _ts_decorate70([
+  Entity("order_assignees"),
+  Index("idx_order_assignees_order", [
+    "orderId"
+  ]),
+  Index("idx_order_assignees_user", [
+    "userId"
+  ]),
+  Index("idx_order_assignees_vendor", [
+    "vendorId"
+  ])
+], OrderAssignee);
 
 // src/entities/index.ts
 var CMS_ENTITY_MAP = {
@@ -25206,7 +25581,8 @@ var CMS_ENTITY_MAP = {
   attendees: Attendee,
   order_notification_bindings: OrderNotificationBinding,
   order_notification_triggers: OrderNotificationTrigger,
-  user_device_tokens: UserDeviceToken
+  user_device_tokens: UserDeviceToken,
+  order_assignees: OrderAssignee
 };
 
 // src/plugins/blog-generator/blog-generator-agent-defaults.ts
@@ -29062,7 +29438,7 @@ function createCmsApiHandler(config) {
         companyDetails
       };
       if (queue) {
-        const { queueEmail: queueEmail2 } = await import('./email-queue-HGXB2FIS.js');
+        const { queueEmail: queueEmail2 } = await import('./email-queue-3QBQ63F7.js');
         await queueEmail2(cms, {
           to: opts.to,
           templateName: "passwordReset",
@@ -30072,6 +30448,110 @@ function createCmsApiHandler(config) {
           return socialMediaHandlers.publishBlogToFacebook(req, id);
         }
       }
+      if (path2[0] === "settings" && path2.length === 2 && path2[1] === "invoice-preview" && m === "GET") {
+        const a = await config.requireAuth(req);
+        if (a) return a;
+        const pe = await requireEntityPermissionEffective(req, "settings", "read");
+        if (pe) return pe;
+        const url = new URL(req.url);
+        const templateParam = url.searchParams.get("template") || "classic";
+        const qrParam = url.searchParams.get("qr");
+        const configRepo = dataSource.getRepository(entityMap.configs);
+        const rows = await configRepo.find({
+          where: {
+            settings: "store",
+            deleted: false
+          }
+        });
+        const storeMap = {};
+        for (const r of rows) {
+          storeMap[r.key] = r.value;
+        }
+        const { normalizeInvoiceTemplateId } = await import('./invoice-templates-GZ33OENC.js');
+        const { generateLocalInvoicePdf } = await import('./generate-local-invoice-pdf-OCFG47SE.js');
+        const { resolveInvoiceAssetUrl } = await import('./resolve-invoice-asset-url-QZ2FRDHI.js');
+        const templateId = normalizeInvoiceTemplateId(templateParam);
+        const includeQr = qrParam != null ? qrParam === "1" || qrParam === "true" : storeMap.invoice_include_qr === "true";
+        const sampleInput = {
+          templateId,
+          orderNumber: "SAMPLE-10024",
+          orderDate: (/* @__PURE__ */ new Date()).toISOString(),
+          currency: storeMap.currency || "INR",
+          company: {
+            name: storeMap.companyName || storeMap.invoiceCompanyName || "ETOE Services",
+            supportEmail: storeMap.companyEmail || storeMap.invoiceEmail || "support@example.com",
+            supportPhone: storeMap.companyPhone || storeMap.invoicePhone || "+91 98765 43210",
+            address: storeMap.companyAddress || storeMap.invoiceAddress || "65 Sanjay Nagar B, Kalwar Road, Jhotwara, Jaipur, Rajasthan, 302012, India",
+            logoUrl: resolveInvoiceAssetUrl(storeMap.invoiceLogoUrl || storeMap.companyLogo || storeMap.logo)
+          },
+          customerName: "Sahil Sharma",
+          customerEmail: "sahil@example.com",
+          customerPhone: "+91 98875 51178",
+          billingAddress: {
+            line1: "65 Sanjay Nagar B, Kalwar Road",
+            city: "Jaipur",
+            state: "Rajasthan",
+            postalCode: "302012",
+            country: "India"
+          },
+          shippingAddress: {
+            line1: "65 Sanjay Nagar B, Kalwar Road",
+            city: "Jaipur",
+            state: "Rajasthan",
+            postalCode: "302012",
+            country: "India"
+          },
+          serviceDate: (/* @__PURE__ */ new Date()).toISOString(),
+          timeSlot: "6:00 PM",
+          assignedTo: "Raaj Sharma",
+          qrToken: "sample-track-token-12345",
+          qrData: "https://etoe.in/track/sample-track-token-12345",
+          includeQrCode: includeQr,
+          lineItems: [
+            {
+              name: "Complete Home Deep Cleaning Service",
+              sku: "ETOE-HDC-001",
+              quantity: 1,
+              unitPrice: 3499,
+              tax: 0,
+              total: 3499
+            },
+            {
+              name: "Kitchen & Bathroom Sanitization Add-on",
+              sku: "ETOE-SAN-002",
+              quantity: 1,
+              unitPrice: 999,
+              tax: 0,
+              total: 999
+            }
+          ],
+          subtotal: 4498,
+          discount: 499,
+          tax: 0,
+          total: 3999
+        };
+        try {
+          const bytes = await generateLocalInvoicePdf(sampleInput);
+          return new Response(Buffer.from(bytes), {
+            status: 200,
+            headers: {
+              "Content-Type": "application/pdf",
+              "Content-Disposition": `inline; filename="preview-invoice-${templateId}.pdf"`
+            }
+          });
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.error("[invoice-preview] failed", {
+            templateId,
+            error: msg
+          });
+          return config.json({
+            error: `Preview generation failed: ${msg}`
+          }, {
+            status: 500
+          });
+        }
+      }
       if (path2[0] === "settings" && path2.length === 2 && settingsHandlers) {
         const group = path2[1];
         const isPublic = group === "multi_vendor" || group === "turnstile" || group === "auth_providers" || settingsConfig?.publicGetGroups?.includes(group);
@@ -30376,7 +30856,7 @@ function createCmsApiHandler(config) {
         const pe = await requireEntityPermissionEffective(req, "orders", "read");
         if (pe) return pe;
         const cms = await getCms();
-        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-H6HCJ7YS.js');
+        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-XSYHAMBS.js');
         const oid = Number(path2[1]);
         if (!Number.isFinite(oid)) return config.json({
           error: "Invalid id"
@@ -30758,7 +31238,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-ECPFI7CD.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-KM2SY7TX.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,
@@ -30857,7 +31337,7 @@ function createCmsApiHandler(config) {
           status: "cancelled"
         });
         const fireOrderCancelledNotification = /* @__PURE__ */ __name((refundAmount) => {
-          void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_cancelled", orderId, {
               dataSource,
               entityMap
@@ -31102,8 +31582,8 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-LFRHXWK4.js');
-        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.getChannels(req, orderId);
       }
       if (path2[0] === "orders" && path2.length === 4 && path2[2] === "completion-otp" && path2[3] === "send" && m === "POST" && getCms) {
@@ -31117,8 +31597,8 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-LFRHXWK4.js');
-        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.sendOtp(req, orderId);
       }
       if (path2[0] === "orders" && path2.length === 4 && path2[2] === "completion-otp" && path2[3] === "verify" && m === "POST" && getCms) {
@@ -31132,8 +31612,8 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-LFRHXWK4.js');
-        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms);
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.verifyOtp(req, orderId);
       }
       if (path2[0] === "orders" && path2.length === 3 && path2[2] === "eligible-assignees" && m === "GET") {
@@ -31147,7 +31627,7 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderAssigneesHandlers } = await import('./order-assignees-handlers-LKMAGLG6.js');
+        const { createOrderAssigneesHandlers } = await import('./order-assignees-handlers-L3RVKUBS.js');
         const handlers = createOrderAssigneesHandlers(dataSource, entityMap, getHydratedSessionUser);
         return handlers.listEligibleAssignees(req, orderId);
       }
@@ -31764,7 +32244,7 @@ function createStorefrontApiHandler(config) {
   const otpPepper = config.otpPepper;
   const defaultPhoneCc = config.defaultPhoneCountryCode;
   function fireStorefrontCheckoutNotifications(orderId) {
-    void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+    void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
       fireOrderNotificationTrigger("order_pending", orderId, {
         dataSource,
         entityMap
@@ -34528,7 +35008,9 @@ function createStorefrontApiHandler(config) {
             },
             relations: [
               "items",
-              "items.product"
+              "items.product",
+              "assignedUser",
+              "payments"
             ]
           });
           if (!order) return json({
@@ -34554,7 +35036,9 @@ function createStorefrontApiHandler(config) {
               },
               relations: [
                 "items",
-                "items.product"
+                "items.product",
+                "assignedUser",
+                "payments"
               ]
             });
           }
@@ -34620,6 +35104,17 @@ function createStorefrontApiHandler(config) {
               currency: o.currency,
               createdAt: o.createdAt,
               metadata: o.metadata ?? null,
+              assignedUser: o.assignedUser ? {
+                id: o.assignedUser.id,
+                name: o.assignedUser.name,
+                phone: o.assignedUser.phone
+              } : null,
+              payments: Array.isArray(o.payments) ? o.payments.map((pm) => ({
+                id: pm.id,
+                amount: pm.amount,
+                method: pm.method,
+                status: pm.status
+              })) : [],
               items: lines
             },
             relatedOrders: relatedOrders.map((r) => ({
@@ -34694,7 +35189,7 @@ function createStorefrontApiHandler(config) {
             } catch {
             }
             try {
-              void import('./emit-order-notification-trigger-EJJZ6XTS.js').then(({ fireOrderNotificationTrigger }) => {
+              void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
                 fireOrderNotificationTrigger("order_cancelled", orderId, {
                   dataSource,
                   entityMap
@@ -34735,4 +35230,4 @@ function createStorefrontApiHandler(config) {
 }
 __name(createStorefrontApiHandler, "createStorefrontApiHandler");
 
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, whatsappPlugin, wrapGetCmsWithMessaging };
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderAssignee, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, autoExpireOrderIfPaymentTimeExceeded, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, whatsappPlugin, wrapGetCmsWithMessaging };