@infuro/cms-core 1.0.66 → 1.0.68

package/dist/{chunk-NV5IRHI3.js → chunk-N4LBZXBG.js}

@@ -1,9 +1,9 @@
 import { queueWhatsApp } from './chunk-GWDI752Q.js';
 import { notifyLog, logFcmToken, maskNotifyEmail, maskNotifyPhone, notificationTriggerEmitter } from './chunk-FLUF2GZH.js';
+import { applyTemplateVars } from './chunk-CRFV5WJK.js';
 import { sesRegionSupportsSmtp, sesSmtpHost, EmailService, renderLayout } from './chunk-6YOQ7G5O.js';
-import { queueEmail } from './chunk-TU23GJPJ.js';
+import { queueEmail } from './chunk-7JCCPQEF.js';
 import { mergeEmailLayoutCompanyDetails } from './chunk-YRCKEGL2.js';
-import { applyTemplateVars } from './chunk-CRFV5WJK.js';
 import { __name } from './chunk-SHUYVCID.js';
 import * as crypto from 'crypto';
 

package/dist/{chunk-J7FMZK66.cjs → chunk-O4AFPDQ4.cjs}

@@ -192,23 +192,34 @@ function canOnboardVendors(user) {
 }
 chunkUSNT2KNT_cjs.__name(canOnboardVendors, "canOnboardVendors");
 function resolveVendorScopeFromSessionUser(user) {
-  if (!user?.email) return {
-    type: "deny"
-  };
-  if (isPlatformAdministrator(user)) return {
-    type: "all"
-  };
+  if (!user?.email) {
+    console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] No user email -> deny");
+    return {
+      type: "deny"
+    };
+  }
+  if (isPlatformAdministrator(user)) {
+    console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User is Platform Admin -> all");
+    return {
+      type: "all"
+    };
+  }
   const vendorIds = user.vendorIds ?? [];
-  if (vendorIds.length === 0) return {
-    type: "deny"
-  };
+  if (vendorIds.length === 0) {
+    console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User has 0 vendorIds -> deny. User:", user.email);
+    return {
+      type: "deny"
+    };
+  }
   const preferred = user.activeVendorId ?? vendorIds[0];
   const vendorId = vendorIds.includes(preferred) ? preferred : vendorIds[0];
-  return {
+  const res = {
     type: "vendor",
     vendorId,
     vendorIds
   };
+  console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User:", user.email, "-> scope:", res);
+  return res;
 }
 chunkUSNT2KNT_cjs.__name(resolveVendorScopeFromSessionUser, "resolveVendorScopeFromSessionUser");
 function vendorPortalFlagsFromUser(input) {
@@ -614,7 +625,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-JKK2MCWF.cjs');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-KWV7D5PQ.cjs');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {

package/dist/{chunk-4U6DATGZ.cjs → chunk-OV5TRZET.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkJ7FMZK66_cjs = require('./chunk-J7FMZK66.cjs');
+var chunkO4AFPDQ4_cjs = require('./chunk-O4AFPDQ4.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var typeorm = require('typeorm');
 
@@ -273,7 +273,7 @@ var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
   "permissions"
 ]);
 function sessionHasEntityAccess(user, entity, action) {
-  return chunkJ7FMZK66_cjs.explainSessionEntityAccess(user, entity, action).allowed;
+  return chunkO4AFPDQ4_cjs.explainSessionEntityAccess(user, entity, action).allowed;
 }
 chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
 function canManageRoles(user) {
@@ -364,8 +364,8 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunkJ7FMZK66_cjs.explainSessionEntityAccess(u, entity, action);
-      chunkJ7FMZK66_cjs.logRbac("authHelpers.requireEntityPermission", {
+      const { reason } = chunkO4AFPDQ4_cjs.explainSessionEntityAccess(u, entity, action);
+      chunkO4AFPDQ4_cjs.logRbac("authHelpers.requireEntityPermission", {
         entity,
         action,
         allowed,
@@ -397,10 +397,10 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       if (u.isRBACAdmin) return null;
-      if (chunkJ7FMZK66_cjs.isVendorPortalUser(u)) return null;
+      if (chunkO4AFPDQ4_cjs.isVendorPortalUser(u)) return null;
       if (u.adminAccess === true) return null;
       if (u.adminAccess === false) {
-        chunkJ7FMZK66_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
+        chunkO4AFPDQ4_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
           email: u.email,
           groupName: u.groupName,
           isVendorPortal: u.isVendorPortal
@@ -412,7 +412,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
           status: 403
         });
       }
-      chunkJ7FMZK66_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
+      chunkO4AFPDQ4_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
         email: u.email,
         adminAccess: u.adminAccess,
         groupName: u.groupName,

package/dist/chunk-P6S4XFZO.cjs

@@ -0,0 +1,18 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/lib/invoice/resolve-invoice-asset-url.ts
+function resolveInvoiceAssetUrl(raw) {
+  const t = String(raw ?? "").trim();
+  if (!t) return null;
+  if (/^https?:\/\//i.test(t)) return t;
+  if (t.startsWith("//")) return `https:${t}`;
+  const base = (process.env.CMS_PUBLIC_URL || process.env.NEXT_PUBLIC_SITE_URL || process.env.NEXTAUTH_URL || "").trim().replace(/\/+$/, "");
+  if (!base) return null;
+  if (t.startsWith("/")) return `${base}${t}`;
+  return `${base}/${t}`;
+}
+chunkUSNT2KNT_cjs.__name(resolveInvoiceAssetUrl, "resolveInvoiceAssetUrl");
+
+exports.resolveInvoiceAssetUrl = resolveInvoiceAssetUrl;

package/dist/{chunk-RCE5SJBA.js → chunk-SKJH7PX4.js}

@@ -94,7 +94,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       orderId
     });
     try {
-      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-ECPFI7CD.js');
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-KM2SY7TX.js');
       await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
     } catch (err) {
       notifyLog.error("TRIGGER", "direct dispatch failed", {

package/dist/{chunk-5MZFQRDW.cjs → chunk-SMHQV3WL.cjs}

@@ -2,10 +2,10 @@
 
 var chunkH3IVLIPR_cjs = require('./chunk-H3IVLIPR.cjs');
 var chunkPA6YDMFZ_cjs = require('./chunk-PA6YDMFZ.cjs');
+var chunkOOTLNH63_cjs = require('./chunk-OOTLNH63.cjs');
 var chunkVM6OVUUM_cjs = require('./chunk-VM6OVUUM.cjs');
-var chunkXFDIIVZB_cjs = require('./chunk-XFDIIVZB.cjs');
+var chunkUMC7W5G3_cjs = require('./chunk-UMC7W5G3.cjs');
 var chunkTZEMLHSP_cjs = require('./chunk-TZEMLHSP.cjs');
-var chunkOOTLNH63_cjs = require('./chunk-OOTLNH63.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var crypto = require('crypto');
 
@@ -1060,7 +1060,7 @@ async function sendChatLeadEmail(cms, emailSettings, brandingSettings, input) {
   };
   let anySent = false;
   for (const to of recipients) {
-    await chunkXFDIIVZB_cjs.queueEmail(cms, {
+    await chunkUMC7W5G3_cjs.queueEmail(cms, {
       to,
       templateName: "chatLead",
       ctx
@@ -1933,7 +1933,7 @@ async function sendEmailForTrigger(triggerKey, orderId, audienceType, variables,
     companyDetails
   });
   const cms = await getCms();
-  await chunkXFDIIVZB_cjs.queueEmail(cms, {
+  await chunkUMC7W5G3_cjs.queueEmail(cms, {
     to: contactEmail,
     subject,
     html,

package/dist/chunk-SUUD7OUG.cjs

@@ -0,0 +1,455 @@
+'use strict';
+
+var chunkUPLVMVRX_cjs = require('./chunk-UPLVMVRX.cjs');
+var chunkZX5U3VCB_cjs = require('./chunk-ZX5U3VCB.cjs');
+var chunkM5GPOPGX_cjs = require('./chunk-M5GPOPGX.cjs');
+var chunkP6S4XFZO_cjs = require('./chunk-P6S4XFZO.cjs');
+var chunkTZEMLHSP_cjs = require('./chunk-TZEMLHSP.cjs');
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/plugins/erp/erp-response-map.ts
+function pickString(o, keys) {
+  for (const k of keys) {
+    const v = o[k];
+    if (typeof v === "string" && v.trim()) return v.trim();
+  }
+  return void 0;
+}
+chunkUSNT2KNT_cjs.__name(pickString, "pickString");
+function unwrapErpReadData(json) {
+  if (!json || typeof json !== "object") return null;
+  const o = json;
+  const d = o.data;
+  if (d && typeof d === "object" && !Array.isArray(d)) return d;
+  return o;
+}
+chunkUSNT2KNT_cjs.__name(unwrapErpReadData, "unwrapErpReadData");
+function firstObject(data, keys) {
+  for (const k of keys) {
+    const v = data[k];
+    if (v && typeof v === "object" && !Array.isArray(v)) return v;
+  }
+  return null;
+}
+chunkUSNT2KNT_cjs.__name(firstObject, "firstObject");
+function extractEvents(src) {
+  const timeline = src.timeline ?? src.events ?? src.history ?? src.trackingEvents;
+  if (!Array.isArray(timeline) || !timeline.length) return void 0;
+  const events = [];
+  for (const row of timeline) {
+    if (!row || typeof row !== "object") continue;
+    const r = row;
+    const at = pickString(r, [
+      "at",
+      "timestamp",
+      "date",
+      "occurredAt"
+    ]) ?? (r.at instanceof Date ? r.at.toISOString() : void 0);
+    const label = pickString(r, [
+      "label",
+      "status",
+      "title",
+      "message",
+      "description"
+    ]);
+    const detail = pickString(r, [
+      "detail",
+      "notes",
+      "description"
+    ]);
+    if (at || label || detail) events.push({
+      at,
+      label,
+      detail
+    });
+  }
+  return events.length ? events : void 0;
+}
+chunkUSNT2KNT_cjs.__name(extractEvents, "extractEvents");
+function mapErpPayloadToFulfillment(data) {
+  const nested = firstObject(data, [
+    "fulfillment",
+    "packaging",
+    "shipment",
+    "shipping",
+    "delivery"
+  ]);
+  const src = nested || data;
+  const status = pickString(src, [
+    "status",
+    "fulfillmentStatus",
+    "state",
+    "label",
+    "packagingStatus"
+  ]);
+  const trackingId = pickString(src, [
+    "trackingId",
+    "tracking_id",
+    "trackingNumber",
+    "awb",
+    "trackingUrl"
+  ]);
+  const events = extractEvents(src);
+  if (!status && !trackingId && !(events && events.length)) return void 0;
+  return {
+    status,
+    trackingId,
+    events
+  };
+}
+chunkUSNT2KNT_cjs.__name(mapErpPayloadToFulfillment, "mapErpPayloadToFulfillment");
+function mapErpPayloadToInvoiceNumber(data) {
+  const nested = firstObject(data, [
+    "invoice",
+    "latestInvoice",
+    "postedInvoice"
+  ]);
+  const src = nested || data;
+  return pickString(src, [
+    "invoiceNumber",
+    "invoice_number",
+    "number",
+    "name",
+    "id"
+  ]);
+}
+chunkUSNT2KNT_cjs.__name(mapErpPayloadToInvoiceNumber, "mapErpPayloadToInvoiceNumber");
+function extractChildOrderRefsFromSalePayload(data) {
+  const lists = [
+    data.returns,
+    data.returnOrders,
+    data.relatedReturns,
+    data.childOrders,
+    data.children
+  ];
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const list of lists) {
+    if (!Array.isArray(list)) continue;
+    for (const item of list) {
+      if (!item || typeof item !== "object") continue;
+      const o = item;
+      const ref = pickString(o, [
+        "platformReturnId",
+        "platform_return_id",
+        "refId",
+        "ref_id"
+      ]) ?? (typeof o.id === "string" ? o.id : void 0);
+      if (!ref || seen.has(ref)) continue;
+      seen.add(ref);
+      const t = (pickString(o, [
+        "kind",
+        "type",
+        "orderKind"
+      ]) || "").toLowerCase();
+      const orderKind = /replac/.test(t) ? "replacement" : "return";
+      out.push({
+        ref,
+        orderKind
+      });
+    }
+  }
+  return out;
+}
+chunkUSNT2KNT_cjs.__name(extractChildOrderRefsFromSalePayload, "extractChildOrderRefsFromSalePayload");
+
+// src/lib/invoice/build-local-invoice-for-order.ts
+async function loadSettingsGroup(ds, entityMap, group) {
+  if (!entityMap.configs) return {};
+  const rows = await ds.getRepository(entityMap.configs).find({
+    where: {
+      settings: group,
+      deleted: false
+    }
+  });
+  return Object.fromEntries(rows.map((r) => [
+    r.key,
+    String(r.value ?? "")
+  ]));
+}
+chunkUSNT2KNT_cjs.__name(loadSettingsGroup, "loadSettingsGroup");
+function addrFromRow(row) {
+  if (!row || typeof row !== "object") return null;
+  const a = row;
+  return {
+    line1: String(a.line1 ?? "").trim() || void 0,
+    line2: a.line2 != null ? String(a.line2).trim() || null : null,
+    city: String(a.city ?? "").trim() || void 0,
+    state: String(a.state ?? "").trim() || void 0,
+    postalCode: String(a.postalCode ?? "").trim() || void 0,
+    country: String(a.country ?? "").trim() || void 0
+  };
+}
+chunkUSNT2KNT_cjs.__name(addrFromRow, "addrFromRow");
+async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
+  if (!entityMap.orders || !entityMap.order_items) {
+    return {
+      error: "Orders not configured",
+      status: 503
+    };
+  }
+  const orderRepo = ds.getRepository(entityMap.orders);
+  let order = null;
+  try {
+    order = await orderRepo.findOne({
+      where: {
+        id: orderId,
+        deleted: false
+      },
+      relations: [
+        "contact",
+        "billingAddress",
+        "shippingAddress",
+        "items",
+        "items.product",
+        "assignedUser"
+      ]
+    });
+  } catch {
+    try {
+      order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact",
+          "billingAddress",
+          "shippingAddress",
+          "items",
+          "assignedUser"
+        ]
+      });
+    } catch {
+      order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact",
+          "billingAddress",
+          "shippingAddress",
+          "items"
+        ]
+      });
+    }
+  }
+  if (!order) return {
+    error: "Not found",
+    status: 404
+  };
+  const o = order;
+  const kind = o.orderKind || "sale";
+  if (kind !== "sale") return {
+    error: "Invoice only for sale orders",
+    status: 400
+  };
+  const [store, branding, email] = await Promise.all([
+    loadSettingsGroup(ds, entityMap, "store"),
+    loadSettingsGroup(ds, entityMap, "branding"),
+    loadSettingsGroup(ds, entityMap, "email")
+  ]);
+  const companyDetails = chunkTZEMLHSP_cjs.mergeEmailLayoutCompanyDetails(branding, email, store);
+  const fromBranding = chunkTZEMLHSP_cjs.getCompanyDetailsFromSettings(branding);
+  const rawLogo = store.invoiceLogoUrl || store.companyLogo || store.logo || companyDetails.logoUrl || fromBranding.logoUrl || null;
+  const logoUrl = chunkP6S4XFZO_cjs.resolveInvoiceAssetUrl(rawLogo);
+  const companyName = store.companyName || store.invoiceCompanyName || store.name || companyDetails.companyName || fromBranding.companyName || "Store";
+  const supportEmail = store.companyEmail || store.invoiceEmail || store.email || companyDetails.supportEmail || fromBranding.supportEmail;
+  const supportPhone = store.companyPhone || store.invoicePhone || store.phone || companyDetails.supportPhone;
+  const address = store.companyAddress || store.invoiceAddress || store.address;
+  const lineItems = (o.items ?? []).map((it) => {
+    const name = it.product?.name && String(it.product.name).trim() || `Product #${it.productId ?? ""}`;
+    return {
+      name,
+      quantity: Math.max(0, Math.floor(Number(it.quantity) || 0)),
+      unitPrice: Number(it.unitPrice) || 0,
+      tax: Number(it.tax) || 0,
+      total: Number(it.total) || 0,
+      sku: it.product?.sku ?? null
+    };
+  });
+  const rawMeta = o.metadata || {};
+  const serviceDate = rawMeta.serviceDate || rawMeta.bookingDate || rawMeta.date || null;
+  const timeSlot = rawMeta.timeSlot || rawMeta.slot || rawMeta.time || null;
+  const assignedTo = o.assignedUser?.name || null;
+  const qrToken = o.qrToken || null;
+  const baseUrl = process.env.NEXTAUTH_URL || process.env.PUBLIC_APP_URL || "";
+  const qrData = qrToken ? baseUrl ? `${baseUrl.replace(/\/$/, "")}/track/${qrToken}` : `/track/${qrToken}` : String(o.orderNumber || orderId);
+  const includeQrCode = store.invoice_include_qr === "true" || store.invoiceIncludeQr === "true";
+  const bytes = await chunkZX5U3VCB_cjs.generateLocalInvoicePdf({
+    templateId: chunkM5GPOPGX_cjs.normalizeInvoiceTemplateId(store.invoiceTemplate),
+    orderNumber: String(o.orderNumber || orderId),
+    orderDate: o.createdAt || /* @__PURE__ */ new Date(),
+    serviceDate,
+    timeSlot,
+    assignedTo,
+    qrToken,
+    qrData,
+    includeQrCode,
+    currency: String(o.currency || store.currency || "INR"),
+    customerName: String(o.contact?.name ?? "").trim() || "Customer",
+    customerEmail: o.contact?.email ?? null,
+    customerPhone: o.contact?.phone ?? null,
+    billingAddress: addrFromRow(o.billingAddress),
+    shippingAddress: addrFromRow(o.shippingAddress),
+    lineItems,
+    subtotal: Number(o.subtotal) || 0,
+    tax: Number(o.tax) || 0,
+    discount: Number(o.discount) || 0,
+    total: Number(o.total) || 0,
+    company: {
+      name: companyName,
+      logoUrl,
+      supportEmail,
+      supportPhone,
+      address
+    }
+  });
+  return {
+    bytes,
+    filename: `invoice-${String(o.orderNumber || orderId).replace(/[^\w.-]+/g, "_")}.pdf`
+  };
+}
+chunkUSNT2KNT_cjs.__name(buildLocalInvoicePdfForOrder, "buildLocalInvoicePdfForOrder");
+
+// src/plugins/erp/erp-order-invoice.ts
+function pickInvoiceId(data) {
+  const nested = data.invoice && typeof data.invoice === "object" && !Array.isArray(data.invoice) ? data.invoice : null;
+  const src = nested || data;
+  for (const k of [
+    "invoiceId",
+    "invoice_id",
+    "id"
+  ]) {
+    const v = src[k];
+    if (typeof v === "string" && v.trim()) return v.trim();
+  }
+  return void 0;
+}
+chunkUSNT2KNT_cjs.__name(pickInvoiceId, "pickInvoiceId");
+function jsonErr(msg, status) {
+  return new Response(JSON.stringify({
+    error: msg
+  }), {
+    status,
+    headers: {
+      "Content-Type": "application/json"
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(jsonErr, "jsonErr");
+var ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES = /* @__PURE__ */ new Set([
+  "pending",
+  "placed",
+  "confirmed",
+  "processing",
+  "completed"
+]);
+function isOrderEligibleForInvoiceEmail(status, orderKind) {
+  const kind = (orderKind || "sale").trim().toLowerCase();
+  if (kind !== "sale") return false;
+  return ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES.has(String(status ?? "").trim().toLowerCase());
+}
+chunkUSNT2KNT_cjs.__name(isOrderEligibleForInvoiceEmail, "isOrderEligibleForInvoiceEmail");
+async function resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId, options = {}) {
+  try {
+    const orderRepo = dataSource.getRepository(entityMap.orders);
+    const order = await orderRepo.findOne({
+      where: {
+        id: orderId,
+        deleted: false
+      }
+    });
+    if (!order) return {
+      error: "Not found",
+      status: 404
+    };
+    const kind = order.orderKind || "sale";
+    if (kind !== "sale") return {
+      error: "Invoice only for sale orders",
+      status: 400
+    };
+    if (options.ownerContactId != null && order.contactId !== options.ownerContactId) {
+      return {
+        error: "Not found",
+        status: 404
+      };
+    }
+    const on = await chunkUPLVMVRX_cjs.isErpIntegrationEnabled(cms, dataSource, entityMap);
+    const erp = cms.getPlugin("erp");
+    if (on && erp?.submission) {
+      const meta = order.metadata && typeof order.metadata === "object" && !Array.isArray(order.metadata) ? order.metadata : {};
+      const inv = meta.invoice && typeof meta.invoice === "object" && !Array.isArray(meta.invoice) ? meta.invoice : {};
+      let invoiceId = typeof inv.invoiceId === "string" ? inv.invoiceId.trim() : "";
+      if (!invoiceId) {
+        const refId = String(order.orderNumber || "");
+        try {
+          const r = await erp.submission.postErpReadAction("get-invoice", {
+            platformOrderId: refId
+          });
+          const d = r.ok ? unwrapErpReadData(r.json) : null;
+          invoiceId = d ? pickInvoiceId(d) || "" : "";
+        } catch {
+          invoiceId = "";
+        }
+      }
+      if (invoiceId) {
+        const pdf = await erp.submission.fetchInvoicePdf(invoiceId);
+        if (pdf.ok && pdf.buffer) {
+          return {
+            bytes: new Uint8Array(pdf.buffer),
+            filename: `order-invoice-${orderId}.pdf`,
+            contentType: pdf.contentType || "application/pdf",
+            source: "erp"
+          };
+        }
+      }
+    }
+    const local = await buildLocalInvoicePdfForOrder(dataSource, entityMap, orderId);
+    if ("error" in local) return {
+      error: local.error,
+      status: local.status
+    };
+    return {
+      bytes: local.bytes,
+      filename: local.filename.startsWith("invoice-") ? local.filename.replace(/^invoice-/, "order-invoice-") : local.filename,
+      contentType: "application/pdf",
+      source: "local"
+    };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error("[invoice] resolveOrderInvoicePdfBytes failed", {
+      orderId,
+      error: msg
+    });
+    return {
+      error: `Invoice failed: ${msg}`,
+      status: 500
+    };
+  }
+}
+chunkUSNT2KNT_cjs.__name(resolveOrderInvoicePdfBytes, "resolveOrderInvoicePdfBytes");
+async function streamOrderInvoicePdf(cms, dataSource, entityMap, orderId, options) {
+  const resolved = await resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId, options);
+  if ("error" in resolved) return jsonErr(resolved.error, resolved.status);
+  return new Response(Buffer.from(resolved.bytes), {
+    status: 200,
+    headers: {
+      "Content-Type": resolved.contentType,
+      "Content-Disposition": `attachment; filename="${resolved.filename}"`,
+      "X-Invoice-Source": resolved.source
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(streamOrderInvoicePdf, "streamOrderInvoicePdf");
+
+exports.ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES = ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES;
+exports.buildLocalInvoicePdfForOrder = buildLocalInvoicePdfForOrder;
+exports.extractChildOrderRefsFromSalePayload = extractChildOrderRefsFromSalePayload;
+exports.isOrderEligibleForInvoiceEmail = isOrderEligibleForInvoiceEmail;
+exports.mapErpPayloadToFulfillment = mapErpPayloadToFulfillment;
+exports.mapErpPayloadToInvoiceNumber = mapErpPayloadToInvoiceNumber;
+exports.resolveOrderInvoicePdfBytes = resolveOrderInvoicePdfBytes;
+exports.streamOrderInvoicePdf = streamOrderInvoicePdf;
+exports.unwrapErpReadData = unwrapErpReadData;

package/dist/{chunk-XFDIIVZB.cjs → chunk-UMC7W5G3.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkGLD263KW_cjs = require('./chunk-GLD263KW.cjs');
+var chunkSUUD7OUG_cjs = require('./chunk-SUUD7OUG.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/plugins/email/email-queue.ts
@@ -50,13 +50,13 @@ async function resolveInvoiceAttachmentForJob(cms, payload, options) {
       invoiceAttached: false
     };
     const o = order;
-    if (!chunkGLD263KW_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
+    if (!chunkSUUD7OUG_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
       return {
         attachments: payload.attachments,
         invoiceAttached: false
       };
     }
-    const resolved = await chunkGLD263KW_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
+    const resolved = await chunkSUUD7OUG_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
     if ("error" in resolved) {
       console.warn("[email] order invoice attach failed", {
         orderId: payload.orderId,