@infuro/cms-core 1.0.68 → 1.0.69

package/dist/{chunk-HBUV73RB.cjs → chunk-SWSTGV4F.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkOV5TRZET_cjs = require('./chunk-OV5TRZET.cjs');
-var chunkO4AFPDQ4_cjs = require('./chunk-O4AFPDQ4.cjs');
-var chunkOY2YTBMP_cjs = require('./chunk-OY2YTBMP.cjs');
-var chunk7L6KWI7S_cjs = require('./chunk-7L6KWI7S.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkQXAQ3V7R_cjs = require('./chunk-QXAQ3V7R.cjs');
+var chunkLXWF6T7F_cjs = require('./chunk-LXWF6T7F.cjs');
+var chunk4WZNRVEZ_cjs = require('./chunk-4WZNRVEZ.cjs');
+var chunkCTTV375J_cjs = require('./chunk-CTTV375J.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var _CredentialsProvider = require('next-auth/providers/credentials');
 var _GoogleProvider = require('next-auth/providers/google');
 
@@ -15,12 +15,12 @@ var _GoogleProvider__default = /*#__PURE__*/_interopDefault(_GoogleProvider);
 
 // src/auth/seed-permissions.ts
 async function seedAdministratorPermissions(dataSource, entityMap) {
-  const entities = chunkO4AFPDQ4_cjs.getPermissionableEntityKeys(entityMap);
+  const entities = chunkLXWF6T7F_cjs.getPermissionableEntityKeys(entityMap);
   const groupRepo = dataSource.getRepository(entityMap.user_groups);
   const permRepo = dataSource.getRepository(entityMap.permissions);
   const adminGroup = await groupRepo.findOne({
     where: {
-      name: chunkO4AFPDQ4_cjs.ADMIN_GROUP_NAME,
+      name: chunkLXWF6T7F_cjs.ADMIN_GROUP_NAME,
       deleted: false
     }
   });
@@ -53,7 +53,7 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
     }
   }
 }
-chunkUSNT2KNT_cjs.__name(seedAdministratorPermissions, "seedAdministratorPermissions");
+chunkXHPRD45G_cjs.__name(seedAdministratorPermissions, "seedAdministratorPermissions");
 
 // src/auth/auth-providers-settings.ts
 var AUTH_PROVIDERS_SETTINGS_GROUP = "auth_providers";
@@ -66,12 +66,12 @@ function parseEnabled(raw) {
   }
   return false;
 }
-chunkUSNT2KNT_cjs.__name(parseEnabled, "parseEnabled");
+chunkXHPRD45G_cjs.__name(parseEnabled, "parseEnabled");
 function resolveSettingsEncryptionKey() {
   if (typeof process === "undefined") return void 0;
   return process.env.SETTINGS_ENCRYPTION_KEY?.trim() || process.env.NEXTAUTH_SECRET?.trim() || void 0;
 }
-chunkUSNT2KNT_cjs.__name(resolveSettingsEncryptionKey, "resolveSettingsEncryptionKey");
+chunkXHPRD45G_cjs.__name(resolveSettingsEncryptionKey, "resolveSettingsEncryptionKey");
 function decryptSettingValue(encoded, key) {
   const buf = Buffer.from(encoded, "base64");
   const keyBuf = Buffer.from(key.padEnd(32, "0").slice(0, 32), "utf8");
@@ -79,7 +79,7 @@ function decryptSettingValue(encoded, key) {
   for (let i = 0; i < buf.length; i++) out[i] = buf[i] ^ keyBuf[i % keyBuf.length];
   return out.toString("utf8");
 }
-chunkUSNT2KNT_cjs.__name(decryptSettingValue, "decryptSettingValue");
+chunkXHPRD45G_cjs.__name(decryptSettingValue, "decryptSettingValue");
 async function loadAuthProvidersSettingsFromDb(dataSource, entityMap, encryptionKey) {
   if (!entityMap.configs) return {};
   const key = encryptionKey ?? resolveSettingsEncryptionKey();
@@ -102,7 +102,7 @@ async function loadAuthProvidersSettingsFromDb(dataSource, entityMap, encryption
   }
   return out;
 }
-chunkUSNT2KNT_cjs.__name(loadAuthProvidersSettingsFromDb, "loadAuthProvidersSettingsFromDb");
+chunkXHPRD45G_cjs.__name(loadAuthProvidersSettingsFromDb, "loadAuthProvidersSettingsFromDb");
 function fromSettingsMap(map) {
   const clientId = String(map.googleClientId ?? map.GOOGLE_CLIENT_ID ?? "").trim();
   const clientSecret = String(map.googleClientSecret ?? map.GOOGLE_CLIENT_SECRET ?? "").trim();
@@ -114,7 +114,7 @@ function fromSettingsMap(map) {
     clientSecret
   };
 }
-chunkUSNT2KNT_cjs.__name(fromSettingsMap, "fromSettingsMap");
+chunkXHPRD45G_cjs.__name(fromSettingsMap, "fromSettingsMap");
 function fromEnv() {
   const env = typeof process !== "undefined" ? process.env : void 0;
   if (!env) return null;
@@ -129,12 +129,12 @@ function fromEnv() {
     clientSecret
   };
 }
-chunkUSNT2KNT_cjs.__name(fromEnv, "fromEnv");
+chunkXHPRD45G_cjs.__name(fromEnv, "fromEnv");
 async function resolveGoogleAuthConfig(input = {}) {
   if (input.settings) {
     const fromExplicit = fromSettingsMap(input.settings);
     if (fromExplicit?.enabled) {
-      chunk7L6KWI7S_cjs.logAuth("resolveGoogleAuthConfig: from explicit settings", {
+      chunkCTTV375J_cjs.logAuth("resolveGoogleAuthConfig: from explicit settings", {
         enabled: true
       });
       return fromExplicit;
@@ -145,20 +145,20 @@ async function resolveGoogleAuthConfig(input = {}) {
       const map = await loadAuthProvidersSettingsFromDb(input.dataSource, input.entityMap, input.encryptionKey);
       const fromDb = fromSettingsMap(map);
       if (fromDb?.enabled) {
-        chunk7L6KWI7S_cjs.logAuth("resolveGoogleAuthConfig: from DB settings", {
+        chunkCTTV375J_cjs.logAuth("resolveGoogleAuthConfig: from DB settings", {
           enabled: true
         });
         return fromDb;
       }
       if (map.googleEnabled !== void 0 || map.googleClientId !== void 0) {
-        chunk7L6KWI7S_cjs.logAuth("resolveGoogleAuthConfig: DB present but incomplete/disabled", {
+        chunkCTTV375J_cjs.logAuth("resolveGoogleAuthConfig: DB present but incomplete/disabled", {
           googleEnabled: map.googleEnabled ?? null,
           hasClientId: Boolean(String(map.googleClientId ?? "").trim()),
           hasClientSecret: Boolean(String(map.googleClientSecret ?? "").trim())
         });
       }
     } catch (err) {
-      chunk7L6KWI7S_cjs.logAuth("resolveGoogleAuthConfig: DB load failed", {
+      chunkCTTV375J_cjs.logAuth("resolveGoogleAuthConfig: DB load failed", {
         message: err instanceof Error ? err.message : String(err)
       });
     }
@@ -166,7 +166,7 @@ async function resolveGoogleAuthConfig(input = {}) {
   if (!input.skipEnvFallback) {
     const envCfg = fromEnv();
     if (envCfg) {
-      chunk7L6KWI7S_cjs.logAuth("resolveGoogleAuthConfig: from env", {
+      chunkCTTV375J_cjs.logAuth("resolveGoogleAuthConfig: from env", {
         enabled: true
       });
       return envCfg;
@@ -174,12 +174,12 @@ async function resolveGoogleAuthConfig(input = {}) {
   }
   return null;
 }
-chunkUSNT2KNT_cjs.__name(resolveGoogleAuthConfig, "resolveGoogleAuthConfig");
+chunkXHPRD45G_cjs.__name(resolveGoogleAuthConfig, "resolveGoogleAuthConfig");
 function googleOAuthRedirectUri(baseUrl) {
   const base = (baseUrl ?? process.env.NEXTAUTH_URL ?? "").replace(/\/$/, "");
   return base ? `${base}/api/auth/callback/google` : "/api/auth/callback/google";
 }
-chunkUSNT2KNT_cjs.__name(googleOAuthRedirectUri, "googleOAuthRedirectUri");
+chunkXHPRD45G_cjs.__name(googleOAuthRedirectUri, "googleOAuthRedirectUri");
 function isGoogleAuthPubliclyEnabled(settings) {
   if (!settings) return false;
   if (settings.googleEnabled !== void 0 && settings.googleEnabled !== "") {
@@ -187,17 +187,17 @@ function isGoogleAuthPubliclyEnabled(settings) {
   }
   return parseEnabled(settings.enabled);
 }
-chunkUSNT2KNT_cjs.__name(isGoogleAuthPubliclyEnabled, "isGoogleAuthPubliclyEnabled");
+chunkXHPRD45G_cjs.__name(isGoogleAuthPubliclyEnabled, "isGoogleAuthPubliclyEnabled");
 
 // src/auth/create-google-customer.ts
 function normalizeEmail(email) {
   return email.trim().toLowerCase();
 }
-chunkUSNT2KNT_cjs.__name(normalizeEmail, "normalizeEmail");
+chunkXHPRD45G_cjs.__name(normalizeEmail, "normalizeEmail");
 async function createCustomerUserFromGoogleOAuth(input) {
   const email = normalizeEmail(input.email);
   if (!email || !input.entityMap.users || !input.entityMap.user_groups) {
-    chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth skipped", {
+    chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth skipped", {
       reason: "missing_email_or_entities",
       hasUsers: Boolean(input.entityMap.users),
       hasGroups: Boolean(input.entityMap.user_groups)
@@ -207,7 +207,7 @@ async function createCustomerUserFromGoogleOAuth(input) {
   const userRepo = input.dataSource.getRepository(input.entityMap.users);
   const groupRepo = input.dataSource.getRepository(input.entityMap.user_groups);
   try {
-    await chunkOY2YTBMP_cjs.retireSoftDeletedUniqueValue(userRepo, "email", email);
+    await chunk4WZNRVEZ_cjs.retireSoftDeletedUniqueValue(userRepo, "email", email);
   } catch {
   }
   const existing = await userRepo.findOne({
@@ -231,7 +231,7 @@ async function createCustomerUserFromGoogleOAuth(input) {
   });
   const groupId = customerG ? Number(customerG.id) : null;
   if (!Number.isFinite(groupId) || groupId == null) {
-    chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
+    chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
       reason: "customer_group_missing",
       email
     });
@@ -252,7 +252,7 @@ async function createCustomerUserFromGoogleOAuth(input) {
     }));
     const userId = Number(created.id);
     if (!Number.isFinite(userId)) {
-      chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
+      chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
         reason: "invalid_id",
         email
       });
@@ -260,13 +260,13 @@ async function createCustomerUserFromGoogleOAuth(input) {
     }
     if (input.entityMap.contacts) {
       try {
-        await chunkOV5TRZET_cjs.linkUnclaimedContactToUser(input.dataSource, input.entityMap.contacts, userId, email);
+        await chunkQXAQ3V7R_cjs.linkUnclaimedContactToUser(input.dataSource, input.entityMap.contacts, userId, email);
       } catch {
       }
     }
     if (input.entityMap.customer) {
       try {
-        await chunkOV5TRZET_cjs.ensureCustomerForUser(input.dataSource, input.entityMap.customer, {
+        await chunkQXAQ3V7R_cjs.ensureCustomerForUser(input.dataSource, input.entityMap.customer, {
           id: userId,
           name: displayName,
           email,
@@ -287,14 +287,14 @@ async function createCustomerUserFromGoogleOAuth(input) {
       ]
     });
     if (!loaded) {
-      chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
+      chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth failed", {
         reason: "reload_failed",
         email,
         userId
       });
       return null;
     }
-    chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth ok", {
+    chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth ok", {
       email,
       userId
     });
@@ -311,20 +311,20 @@ async function createCustomerUserFromGoogleOAuth(input) {
       ]
     });
     if (raced) {
-      chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth raced_to_existing", {
+      chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth raced_to_existing", {
         email,
         userId: raced.id
       });
       return raced;
     }
-    chunk7L6KWI7S_cjs.logAuth("createCustomerUserFromGoogleOAuth error", {
+    chunkCTTV375J_cjs.logAuth("createCustomerUserFromGoogleOAuth error", {
       email,
       message: err instanceof Error ? err.message : String(err)
     });
     return null;
   }
 }
-chunkUSNT2KNT_cjs.__name(createCustomerUserFromGoogleOAuth, "createCustomerUserFromGoogleOAuth");
+chunkXHPRD45G_cjs.__name(createCustomerUserFromGoogleOAuth, "createCustomerUserFromGoogleOAuth");
 
 // src/auth/nextauth-options.ts
 var CredentialsProvider = _CredentialsProvider__default.default.default ?? _CredentialsProvider__default.default;
@@ -354,12 +354,12 @@ function parseBooleanSetting(value) {
   }
   return null;
 }
-chunkUSNT2KNT_cjs.__name(parseBooleanSetting, "parseBooleanSetting");
+chunkXHPRD45G_cjs.__name(parseBooleanSetting, "parseBooleanSetting");
 async function checkMultiVendorEnabledViaSettingsApi() {
   const FAIL_OPEN_DEFAULT = true;
   const base = process.env.NEXTAUTH_URL?.replace(/\/$/, "");
   if (!base) {
-    chunk7L6KWI7S_cjs.logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
+    chunkCTTV375J_cjs.logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
       multiVendorEnabled: FAIL_OPEN_DEFAULT
     });
     return FAIL_OPEN_DEFAULT;
@@ -369,7 +369,7 @@ async function checkMultiVendorEnabledViaSettingsApi() {
       cache: "no-store"
     });
     if (!res.ok) {
-      chunk7L6KWI7S_cjs.logAuth("multiVendorCheck: non-OK response, defaulting", {
+      chunkCTTV375J_cjs.logAuth("multiVendorCheck: non-OK response, defaulting", {
         status: res.status
       });
       return FAIL_OPEN_DEFAULT;
@@ -378,27 +378,27 @@ async function checkMultiVendorEnabledViaSettingsApi() {
     const parsed = parseBooleanSetting(data?.enabled ?? data?.value ?? data?.isEnabled ?? data?.active ?? data?.state);
     return parsed ?? FAIL_OPEN_DEFAULT;
   } catch (err) {
-    chunk7L6KWI7S_cjs.logAuth("multiVendorCheck: fetch failed, defaulting", {
+    chunkCTTV375J_cjs.logAuth("multiVendorCheck: fetch failed, defaulting", {
       message: err instanceof Error ? err.message : String(err)
     });
     return FAIL_OPEN_DEFAULT;
   }
 }
-chunkUSNT2KNT_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
+chunkXHPRD45G_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
-  const isRBACAdmin = chunkO4AFPDQ4_cjs.isSuperAdmin({
+  const isRBACAdmin = chunkLXWF6T7F_cjs.isSuperAdmin({
     groupId: user.groupId ?? void 0,
     groupName: g?.name,
     isRBACAdmin: false
   });
-  const entityPerms = chunkO4AFPDQ4_cjs.permissionRowsToRecord(g?.permissions);
+  const entityPerms = chunkLXWF6T7F_cjs.permissionRowsToRecord(g?.permissions);
   const rawAdminAccess = user.adminAccess;
   const adminAccess = rawAdminAccess === true ? true : rawAdminAccess === false ? false : void 0;
   const vendorIds = user.vendorIds ?? [];
   const vendorRole = user.vendorRole ?? null;
   const isVendorRoleOwner = user.isVendorRoleOwner ?? false;
-  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkO4AFPDQ4_cjs.vendorPortalFlagsFromUser({
+  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkLXWF6T7F_cjs.vendorPortalFlagsFromUser({
     email: user.email,
     isRBACAdmin,
     groupName: g?.name,
@@ -426,11 +426,11 @@ function sessionUserFromNextAuthUser(user) {
     isVendorOwner: isVendorOwner2
   };
 }
-chunkUSNT2KNT_cjs.__name(sessionUserFromNextAuthUser, "sessionUserFromNextAuthUser");
+chunkXHPRD45G_cjs.__name(sessionUserFromNextAuthUser, "sessionUserFromNextAuthUser");
 function isCustomerGroupUser(user) {
   return user.group?.name?.toLocaleLowerCase().trim() === "customer";
 }
-chunkUSNT2KNT_cjs.__name(isCustomerGroupUser, "isCustomerGroupUser");
+chunkXHPRD45G_cjs.__name(isCustomerGroupUser, "isCustomerGroupUser");
 function callbackUrlTargetsAdmin(callbackUrl) {
   const raw = callbackUrl.trim();
   if (!raw) return false;
@@ -442,21 +442,21 @@ function callbackUrlTargetsAdmin(callbackUrl) {
     return raw.includes("/admin");
   }
 }
-chunkUSNT2KNT_cjs.__name(callbackUrlTargetsAdmin, "callbackUrlTargetsAdmin");
+chunkXHPRD45G_cjs.__name(callbackUrlTargetsAdmin, "callbackUrlTargetsAdmin");
 function permitsCustomerLogin(allowCustomerLogin, credentials) {
   if (allowCustomerLogin === true) return true;
   if (allowCustomerLogin === false) return false;
   const callbackUrl = typeof credentials?.callbackUrl === "string" ? credentials.callbackUrl : "";
   return !callbackUrlTargetsAdmin(callbackUrl);
 }
-chunkUSNT2KNT_cjs.__name(permitsCustomerLogin, "permitsCustomerLogin");
+chunkXHPRD45G_cjs.__name(permitsCustomerLogin, "permitsCustomerLogin");
 function applySessionUserToAuthUser(target, sessionUser) {
   Object.assign(target, sessionUser);
 }
-chunkUSNT2KNT_cjs.__name(applySessionUserToAuthUser, "applySessionUserToAuthUser");
+chunkXHPRD45G_cjs.__name(applySessionUserToAuthUser, "applySessionUserToAuthUser");
 function getNextAuthOptions(config) {
   const { getUserByEmail, comparePassword, signInPage = "/admin/signin", secret, extend, enablePasswordLogin = true, enableOtpLogin = false, authorizeOtp, allowCustomerLogin, google, createCustomerUserFromGoogle } = config;
-  chunk7L6KWI7S_cjs.logAuth("getNextAuthOptions init", chunk7L6KWI7S_cjs.nextAuthCookieDebugInfo());
+  chunkCTTV375J_cjs.logAuth("getNextAuthOptions init", chunkCTTV375J_cjs.nextAuthCookieDebugInfo());
   const providers = [];
   if (enablePasswordLogin) {
     providers.push(CredentialsProvider({
@@ -475,7 +475,7 @@ function getNextAuthOptions(config) {
         const creds = credentials;
         const email = creds?.email?.trim() ?? "";
         if (!email || !creds?.password) {
-          chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+          chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
             reason: "missing_email_or_password"
           });
           return null;
@@ -483,14 +483,14 @@ function getNextAuthOptions(config) {
         try {
           const user = await getUserByEmail(email);
           if (!user) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "user_not_found",
               email
             });
             return null;
           }
           if (user.blocked) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "blocked",
               email,
               userId: user.id
@@ -498,7 +498,7 @@ function getNextAuthOptions(config) {
             return null;
           }
           if (user.inviteStatus === "pending") {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "invite_pending",
               email,
               userId: user.id
@@ -506,7 +506,7 @@ function getNextAuthOptions(config) {
             return null;
           }
           if (user.deleted) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "deleted",
               email,
               userId: user.id
@@ -514,7 +514,7 @@ function getNextAuthOptions(config) {
             return null;
           }
           if (!user.password) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "no_password",
               email,
               userId: user.id
@@ -523,7 +523,7 @@ function getNextAuthOptions(config) {
           }
           const valid = await comparePassword(creds.password, user.password);
           if (!valid) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "invalid_password",
               email,
               userId: user.id
@@ -531,7 +531,7 @@ function getNextAuthOptions(config) {
             return null;
           }
           if (isCustomerGroupUser(user) && !permitsCustomerLogin(allowCustomerLogin, creds)) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
               reason: "customer_group",
               email,
               userId: user.id,
@@ -543,7 +543,7 @@ function getNextAuthOptions(config) {
           if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
             const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
             if (!multiVendorEnabled) {
-              chunk7L6KWI7S_cjs.logAuth("authorize(credentials) rejected", {
+              chunkCTTV375J_cjs.logAuth("authorize(credentials) rejected", {
                 reason: "multi_vendor_disabled",
                 email,
                 userId: user.id
@@ -551,11 +551,11 @@ function getNextAuthOptions(config) {
               return null;
             }
           }
-          chunk7L6KWI7S_cjs.logAuth("authorize(credentials) ok", chunk7L6KWI7S_cjs.summarizeSessionUserForLog(sessionUser));
+          chunkCTTV375J_cjs.logAuth("authorize(credentials) ok", chunkCTTV375J_cjs.summarizeSessionUserForLog(sessionUser));
           return sessionUser;
         } catch (err) {
           console.error("[cms-auth] authorize error (credentials):", err instanceof Error ? err.message : err);
-          chunk7L6KWI7S_cjs.logAuth("authorize(credentials) error", {
+          chunkCTTV375J_cjs.logAuth("authorize(credentials) error", {
             email,
             message: err instanceof Error ? err.message : String(err)
           });
@@ -596,7 +596,7 @@ function getNextAuthOptions(config) {
           });
           if (!user || user.blocked || user.inviteStatus === "pending" || user.deleted) return null;
           if (isCustomerGroupUser(user) && !permitsCustomerLogin(allowCustomerLogin, creds)) {
-            chunk7L6KWI7S_cjs.logAuth("authorize(otp) rejected", {
+            chunkCTTV375J_cjs.logAuth("authorize(otp) rejected", {
               reason: "customer_group",
               identifier,
               callbackUrl: creds?.callbackUrl ?? null
@@ -617,7 +617,7 @@ function getNextAuthOptions(config) {
       clientSecret: google.clientSecret,
       allowDangerousEmailAccountLinking: true
     }));
-    chunk7L6KWI7S_cjs.logAuth("getNextAuthOptions: GoogleProvider registered");
+    chunkCTTV375J_cjs.logAuth("getNextAuthOptions: GoogleProvider registered");
   }
   const options = {
     secret: secret ?? process.env.NEXTAUTH_SECRET,
@@ -645,7 +645,7 @@ function getNextAuthOptions(config) {
         const emailRaw = typeof user?.email === "string" && user.email || (profile && typeof profile.email === "string" ? profile.email : "");
         const email = emailRaw.trim().toLowerCase();
         if (!email) {
-          chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+          chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
             reason: "missing_email"
           });
           return false;
@@ -659,21 +659,21 @@ function getNextAuthOptions(config) {
               name: profileName
             });
             if (dbUser) {
-              chunk7L6KWI7S_cjs.logAuth("signIn(google) created customer", {
+              chunkCTTV375J_cjs.logAuth("signIn(google) created customer", {
                 email,
                 userId: dbUser.id
               });
             }
           }
           if (!dbUser) {
-            chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+            chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
               reason: "user_not_found",
               email
             });
             return false;
           }
           if (dbUser.blocked) {
-            chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+            chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
               reason: "blocked",
               email,
               userId: dbUser.id
@@ -681,7 +681,7 @@ function getNextAuthOptions(config) {
             return false;
           }
           if (dbUser.inviteStatus === "pending") {
-            chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+            chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
               reason: "invite_pending",
               email,
               userId: dbUser.id
@@ -689,7 +689,7 @@ function getNextAuthOptions(config) {
             return false;
           }
           if (dbUser.deleted) {
-            chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+            chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
               reason: "deleted",
               email,
               userId: dbUser.id
@@ -697,7 +697,7 @@ function getNextAuthOptions(config) {
             return false;
           }
           if (isCustomerGroupUser(dbUser) && allowCustomerLogin !== true) {
-            chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+            chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
               reason: "customer_group",
               email,
               userId: dbUser.id
@@ -708,7 +708,7 @@ function getNextAuthOptions(config) {
           if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
             const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
             if (!multiVendorEnabled) {
-              chunk7L6KWI7S_cjs.logAuth("signIn(google) rejected", {
+              chunkCTTV375J_cjs.logAuth("signIn(google) rejected", {
                 reason: "multi_vendor_disabled",
                 email,
                 userId: dbUser.id
@@ -717,11 +717,11 @@ function getNextAuthOptions(config) {
             }
           }
           applySessionUserToAuthUser(user, sessionUser);
-          chunk7L6KWI7S_cjs.logAuth("signIn(google) ok", chunk7L6KWI7S_cjs.summarizeSessionUserForLog(sessionUser));
+          chunkCTTV375J_cjs.logAuth("signIn(google) ok", chunkCTTV375J_cjs.summarizeSessionUserForLog(sessionUser));
           return true;
         } catch (err) {
           console.error("[cms-auth] signIn error (google):", err instanceof Error ? err.message : err);
-          chunk7L6KWI7S_cjs.logAuth("signIn(google) error", {
+          chunkCTTV375J_cjs.logAuth("signIn(google) error", {
             email,
             message: err instanceof Error ? err.message : String(err)
           });
@@ -730,9 +730,9 @@ function getNextAuthOptions(config) {
       },
       async jwt({ token, user, trigger, session }) {
         if (user) {
-          chunk7L6KWI7S_cjs.logAuth("jwt callback: new sign-in", {
+          chunkCTTV375J_cjs.logAuth("jwt callback: new sign-in", {
             trigger,
-            user: chunk7L6KWI7S_cjs.summarizeSessionUserForLog(user)
+            user: chunkCTTV375J_cjs.summarizeSessionUserForLog(user)
           });
           const u = user;
           token.id = u.id;
@@ -752,7 +752,7 @@ function getNextAuthOptions(config) {
           token.isVendorOwner = u.isVendorOwner;
         }
         if (trigger === "update" && session && typeof session === "object") {
-          chunk7L6KWI7S_cjs.logAuth("jwt callback: session update", {
+          chunkCTTV375J_cjs.logAuth("jwt callback: session update", {
             trigger
           });
           const s = session;
@@ -765,10 +765,10 @@ function getNextAuthOptions(config) {
       },
       async session({ session, token }) {
         const t = token;
-        chunk7L6KWI7S_cjs.logAuth("session callback", {
+        chunkCTTV375J_cjs.logAuth("session callback", {
           tokenHasId: t.id != null,
           tokenEmail: typeof t.email === "string" ? t.email : null,
-          sessionUser: chunk7L6KWI7S_cjs.summarizeSessionUserForLog(session.user)
+          sessionUser: chunkCTTV375J_cjs.summarizeSessionUserForLog(session.user)
         });
         if (session.user) {
           if (typeof t.name === "string") session.user.name = t.name;
@@ -795,7 +795,7 @@ function getNextAuthOptions(config) {
   };
   return extend ? extend(options) : options;
 }
-chunkUSNT2KNT_cjs.__name(getNextAuthOptions, "getNextAuthOptions");
+chunkXHPRD45G_cjs.__name(getNextAuthOptions, "getNextAuthOptions");
 async function buildNextAuthOptions(config) {
   const { dataSource, entityMap, settingsEncryptionKey, googleResolve, google, createCustomerUserFromGoogle, ...rest } = config;
   const resolved = google ?? await resolveGoogleAuthConfig({
@@ -806,7 +806,7 @@ async function buildNextAuthOptions(config) {
   });
   let createCustomer = createCustomerUserFromGoogle;
   if (!createCustomer && rest.allowCustomerLogin === true && dataSource && entityMap && entityMap.users && entityMap.user_groups) {
-    createCustomer = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((input) => createCustomerUserFromGoogleOAuth({
+    createCustomer = /* @__PURE__ */ chunkXHPRD45G_cjs.__name((input) => createCustomerUserFromGoogleOAuth({
       dataSource,
       entityMap,
       email: input.email,
@@ -819,21 +819,21 @@ async function buildNextAuthOptions(config) {
     createCustomerUserFromGoogle: createCustomer
   });
 }
-chunkUSNT2KNT_cjs.__name(buildNextAuthOptions, "buildNextAuthOptions");
+chunkXHPRD45G_cjs.__name(buildNextAuthOptions, "buildNextAuthOptions");
 function getStorefrontNextAuthOptions(config) {
   return getNextAuthOptions({
     ...config,
     allowCustomerLogin: true
   });
 }
-chunkUSNT2KNT_cjs.__name(getStorefrontNextAuthOptions, "getStorefrontNextAuthOptions");
+chunkXHPRD45G_cjs.__name(getStorefrontNextAuthOptions, "getStorefrontNextAuthOptions");
 async function buildStorefrontNextAuthOptions(config) {
   return buildNextAuthOptions({
     ...config,
     allowCustomerLogin: true
   });
 }
-chunkUSNT2KNT_cjs.__name(buildStorefrontNextAuthOptions, "buildStorefrontNextAuthOptions");
+chunkXHPRD45G_cjs.__name(buildStorefrontNextAuthOptions, "buildStorefrontNextAuthOptions");
 
 exports.AUTH_PROVIDERS_SETTINGS_GROUP = AUTH_PROVIDERS_SETTINGS_GROUP;
 exports.buildNextAuthOptions = buildNextAuthOptions;

package/dist/{chunk-SKJH7PX4.js → chunk-T47VP2ZT.js}

@@ -1,5 +1,5 @@
-import { notifyLog, notificationTriggerEmitter, maskNotifyPhone } from './chunk-FLUF2GZH.js';
-import { __name } from './chunk-SHUYVCID.js';
+import { notifyLog, notificationTriggerEmitter, maskNotifyPhone } from './chunk-WHMIWJL7.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/lib/emit-order-notification-trigger.ts
 async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
@@ -94,7 +94,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       orderId
     });
     try {
-      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-KM2SY7TX.js');
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-FS54ANAV.js');
       await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
     } catch (err) {
       notifyLog.error("TRIGGER", "direct dispatch failed", {

package/dist/{chunk-FLUF2GZH.js → chunk-WHMIWJL7.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import { EventEmitter } from 'events';
 
 var KNOWN_NOTIFICATION_TRIGGERS = {

package/dist/{chunk-JC6DLWTE.js → chunk-WQZ4AH2P.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/plugins/erp/erp-config-enabled.ts
 async function isErpIntegrationEnabled(cms, dataSource, entityMap) {