@infuro/cms-core 1.0.68 → 1.0.70

package/dist/{chunk-7L6KWI7S.cjs → chunk-CTTV375J.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/auth/auth-debug.ts
 var LOG_PREFIX = "[cms-auth]";
@@ -8,25 +8,25 @@ function isAuthDebugEnabled() {
   const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
   return v === "1" || v === "true" || v === "yes";
 }
-chunkUSNT2KNT_cjs.__name(isAuthDebugEnabled, "isAuthDebugEnabled");
+chunkXHPRD45G_cjs.__name(isAuthDebugEnabled, "isAuthDebugEnabled");
 function isAuthDebugClientEnabled() {
   if (typeof window === "undefined") return false;
   const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
   return v === "1" || v === "true" || v === "yes";
 }
-chunkUSNT2KNT_cjs.__name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
+chunkXHPRD45G_cjs.__name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
 function logAuth(message, data) {
   if (!isAuthDebugEnabled()) return;
   if (data) console.info(LOG_PREFIX, message, data);
   else console.info(LOG_PREFIX, message);
 }
-chunkUSNT2KNT_cjs.__name(logAuth, "logAuth");
+chunkXHPRD45G_cjs.__name(logAuth, "logAuth");
 function logAuthClient(message, data) {
   if (!isAuthDebugClientEnabled()) return;
   if (data) console.info(LOG_PREFIX, message, data);
   else console.info(LOG_PREFIX, message);
 }
-chunkUSNT2KNT_cjs.__name(logAuthClient, "logAuthClient");
+chunkXHPRD45G_cjs.__name(logAuthClient, "logAuthClient");
 function summarizeSessionUserForLog(user) {
   if (!user || typeof user !== "object") return {
     present: false
@@ -42,7 +42,7 @@ function summarizeSessionUserForLog(user) {
     groupName: u.groupName ?? null
   };
 }
-chunkUSNT2KNT_cjs.__name(summarizeSessionUserForLog, "summarizeSessionUserForLog");
+chunkXHPRD45G_cjs.__name(summarizeSessionUserForLog, "summarizeSessionUserForLog");
 function nextAuthCookieDebugInfo() {
   const nextAuthUrl = process.env.NEXTAUTH_URL ?? "(unset)";
   const isHttps = nextAuthUrl.startsWith("https");
@@ -54,7 +54,7 @@ function nextAuthCookieDebugInfo() {
     nodeEnv: process.env.NODE_ENV ?? "(unset)"
   };
 }
-chunkUSNT2KNT_cjs.__name(nextAuthCookieDebugInfo, "nextAuthCookieDebugInfo");
+chunkXHPRD45G_cjs.__name(nextAuthCookieDebugInfo, "nextAuthCookieDebugInfo");
 
 // src/auth/middleware.ts
 var defaultPublicApiMethods = {
@@ -97,7 +97,7 @@ function legacyGetSessionToken(request) {
   const regular = request.cookies.get("next-auth.session-token")?.value;
   return secure ?? regular;
 }
-chunkUSNT2KNT_cjs.__name(legacyGetSessionToken, "legacyGetSessionToken");
+chunkXHPRD45G_cjs.__name(legacyGetSessionToken, "legacyGetSessionToken");
 function sessionCookiePresence(request) {
   const secure = request.cookies.get("__Secure-next-auth.session-token")?.value;
   const regular = request.cookies.get("next-auth.session-token")?.value;
@@ -109,14 +109,14 @@ function sessionCookiePresence(request) {
     resolved: Boolean(secure ?? regular ?? hasChunked)
   };
 }
-chunkUSNT2KNT_cjs.__name(sessionCookiePresence, "sessionCookiePresence");
+chunkXHPRD45G_cjs.__name(sessionCookiePresence, "sessionCookiePresence");
 function isPublicMethod(pathname, method, publicApiMethods) {
   for (const [endpoint, methods] of Object.entries(publicApiMethods)) {
     if (pathname.startsWith(endpoint) && methods.includes(method)) return true;
   }
   return false;
 }
-chunkUSNT2KNT_cjs.__name(isPublicMethod, "isPublicMethod");
+chunkXHPRD45G_cjs.__name(isPublicMethod, "isPublicMethod");
 async function hasValidSession(request, secret, legacyGetToken) {
   const presence = sessionCookiePresence(request);
   if (presence.resolved || presence.hasChunkedToken) return true;
@@ -133,7 +133,7 @@ async function hasValidSession(request, secret, legacyGetToken) {
   }
   return Boolean(legacyGetToken(request));
 }
-chunkUSNT2KNT_cjs.__name(hasValidSession, "hasValidSession");
+chunkXHPRD45G_cjs.__name(hasValidSession, "hasValidSession");
 function createCmsMiddleware(config = {}) {
   const { publicAdminPaths = [
     "/admin/signin",
@@ -141,7 +141,7 @@ function createCmsMiddleware(config = {}) {
     "/admin/reset-password",
     "/admin/invite"
   ], publicApiMethods = defaultPublicApiMethods, signInPath = "/admin/signin", getSessionToken = legacyGetSessionToken, secret = process.env.NEXTAUTH_SECRET } = config;
-  return /* @__PURE__ */ chunkUSNT2KNT_cjs.__name(async function cmsMiddleware(request) {
+  return /* @__PURE__ */ chunkXHPRD45G_cjs.__name(async function cmsMiddleware(request) {
     const pathname = request.nextUrl.pathname;
     const method = request.method;
     if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + "/"))) {
@@ -200,7 +200,7 @@ function createCmsMiddleware(config = {}) {
     };
   }, "cmsMiddleware");
 }
-chunkUSNT2KNT_cjs.__name(createCmsMiddleware, "createCmsMiddleware");
+chunkXHPRD45G_cjs.__name(createCmsMiddleware, "createCmsMiddleware");
 
 exports.createCmsMiddleware = createCmsMiddleware;
 exports.defaultPublicApiMethods = defaultPublicApiMethods;

package/dist/{chunk-2IAXTKQN.cjs → chunk-DZNWS2MM.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var React = require('react');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -14,6 +14,6 @@ function ForceLightMode() {
     }
   });
 }
-chunkUSNT2KNT_cjs.__name(ForceLightMode, "ForceLightMode");
+chunkXHPRD45G_cjs.__name(ForceLightMode, "ForceLightMode");
 
 exports.ForceLightMode = ForceLightMode;

package/dist/{chunk-M5GPOPGX.cjs → chunk-E62LKM6Z.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/lib/invoice/invoice-templates.ts
 var INVOICE_TEMPLATE_IDS = [
@@ -42,7 +42,7 @@ function normalizeInvoiceTemplateId(raw) {
   if (v === "service_qr") return "service_detailed";
   return INVOICE_TEMPLATE_IDS.includes(v) ? v : "classic";
 }
-chunkUSNT2KNT_cjs.__name(normalizeInvoiceTemplateId, "normalizeInvoiceTemplateId");
+chunkXHPRD45G_cjs.__name(normalizeInvoiceTemplateId, "normalizeInvoiceTemplateId");
 
 exports.INVOICE_TEMPLATE_IDS = INVOICE_TEMPLATE_IDS;
 exports.INVOICE_TEMPLATE_OPTIONS = INVOICE_TEMPLATE_OPTIONS;

package/dist/{chunk-CRFV5WJK.js → chunk-ECNYZG6T.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/message-templates/interpolate.ts
 function applyTemplateVars(template, variables) {

package/dist/{chunk-OVTOP42W.js → chunk-ECUGNV2I.js}

@@ -1,63 +1,7 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import { createHmac, timingSafeEqual, randomInt } from 'crypto';
 import { MoreThan, IsNull } from 'typeorm';
 
-// src/plugins/sms/sms-queue.ts
-var SMS_QUEUE_NAME = "sms";
-function registerSmsQueueProcessor(cms) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (!queue || !sms || typeof sms.send !== "function") return;
-  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
-    const payload = data;
-    if (!payload.to) return;
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (!payload.body?.trim()) return;
-    await sms.send({
-      to: payload.to,
-      body: payload.body,
-      otpCode: payload.otpCode,
-      variables: payload.variables
-    });
-  });
-}
-__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
-async function queueSms(cms, payload) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (queue) {
-    await queue.add(SMS_QUEUE_NAME, payload);
-    return;
-  }
-  if (sms && typeof sms.send === "function") {
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (payload.body?.trim()) {
-      await sms.send({
-        to: payload.to,
-        body: payload.body,
-        otpCode: payload.otpCode,
-        variables: payload.variables
-      });
-    }
-  }
-}
-__name(queueSms, "queueSms");
 var OTP_TTL_MS = 10 * 60 * 1e3;
 var MAX_SENDS_PER_HOUR = 5;
 var MAX_VERIFY_ATTEMPTS = 8;
@@ -196,4 +140,4 @@ async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
 }
 __name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
 
-export { countRecentOtpSends, createOtpChallenge, generateNumericOtp, hashOtpCode, normalizePhoneE164, queueSms, registerSmsQueueProcessor, verifyAndConsumeOtpChallenge, verifyOtpCodeHash };
+export { countRecentOtpSends, createOtpChallenge, generateNumericOtp, hashOtpCode, normalizePhoneE164, verifyAndConsumeOtpChallenge, verifyOtpCodeHash };

package/dist/{chunk-TZEMLHSP.cjs → chunk-EYUBL7YH.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/plugins/email/templates/types.ts
 function normalizeSocialLinkItem(o) {
@@ -19,7 +19,7 @@ function normalizeSocialLinkItem(o) {
   if (icon) item.icon = icon;
   return item;
 }
-chunkUSNT2KNT_cjs.__name(normalizeSocialLinkItem, "normalizeSocialLinkItem");
+chunkXHPRD45G_cjs.__name(normalizeSocialLinkItem, "normalizeSocialLinkItem");
 function parseSocialLinksJson(raw) {
   if (raw == null || raw.trim() === "") return void 0;
   try {
@@ -37,7 +37,7 @@ function parseSocialLinksJson(raw) {
     return void 0;
   }
 }
-chunkUSNT2KNT_cjs.__name(parseSocialLinksJson, "parseSocialLinksJson");
+chunkXHPRD45G_cjs.__name(parseSocialLinksJson, "parseSocialLinksJson");
 function absolutizeEmailAssetUrl(url) {
   const t = url?.trim();
   if (!t) return void 0;
@@ -46,10 +46,10 @@ function absolutizeEmailAssetUrl(url) {
   if (!base) return t;
   return `${base}${t.startsWith("/") ? t : `/${t}`}`;
 }
-chunkUSNT2KNT_cjs.__name(absolutizeEmailAssetUrl, "absolutizeEmailAssetUrl");
+chunkXHPRD45G_cjs.__name(absolutizeEmailAssetUrl, "absolutizeEmailAssetUrl");
 function mergeEmailLayoutCompanyDetails(branding, emailSettings, storeSettings) {
   const fromBranding = getCompanyDetailsFromSettings(branding);
-  const first = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((...vals) => {
+  const first = /* @__PURE__ */ chunkXHPRD45G_cjs.__name((...vals) => {
     for (const v of vals) {
       const t = v?.trim();
       if (t) return t;
@@ -81,7 +81,7 @@ function mergeEmailLayoutCompanyDetails(branding, emailSettings, storeSettings)
     followUsTitle
   };
 }
-chunkUSNT2KNT_cjs.__name(mergeEmailLayoutCompanyDetails, "mergeEmailLayoutCompanyDetails");
+chunkXHPRD45G_cjs.__name(mergeEmailLayoutCompanyDetails, "mergeEmailLayoutCompanyDetails");
 function getCompanyDetailsFromSettings(settingsGroup) {
   const logoUrl = settingsGroup.logo ?? settingsGroup.logoUrl ?? "";
   const companyName = settingsGroup.companyName ?? settingsGroup.company_name ?? "";
@@ -109,7 +109,7 @@ function getCompanyDetailsFromSettings(settingsGroup) {
     socialLinks: socialLinks.length ? socialLinks : void 0
   };
 }
-chunkUSNT2KNT_cjs.__name(getCompanyDetailsFromSettings, "getCompanyDetailsFromSettings");
+chunkXHPRD45G_cjs.__name(getCompanyDetailsFromSettings, "getCompanyDetailsFromSettings");
 
 exports.getCompanyDetailsFromSettings = getCompanyDetailsFromSettings;
 exports.mergeEmailLayoutCompanyDetails = mergeEmailLayoutCompanyDetails;

package/dist/{chunk-OV5TRZET.cjs → chunk-FNLF6G2N.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkO4AFPDQ4_cjs = require('./chunk-O4AFPDQ4.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkLCZZ3S4I_cjs = require('./chunk-LCZZ3S4I.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var typeorm = require('typeorm');
 
 async function linkUnclaimedContactToUser(dataSource, contactsEntity, userId, email) {
@@ -17,24 +17,24 @@ async function linkUnclaimedContactToUser(dataSource, contactsEntity, userId, em
     userId
   });
 }
-chunkUSNT2KNT_cjs.__name(linkUnclaimedContactToUser, "linkUnclaimedContactToUser");
+chunkXHPRD45G_cjs.__name(linkUnclaimedContactToUser, "linkUnclaimedContactToUser");
 
 // src/lib/ensure-customer-for-user.ts
 function normalizeEmail(email) {
   return email.trim().toLowerCase();
 }
-chunkUSNT2KNT_cjs.__name(normalizeEmail, "normalizeEmail");
+chunkXHPRD45G_cjs.__name(normalizeEmail, "normalizeEmail");
 function pgErrorCode(err) {
   if (!err || typeof err !== "object") return void 0;
   const driver = err.driverError;
   return driver?.code ?? err.code;
 }
-chunkUSNT2KNT_cjs.__name(pgErrorCode, "pgErrorCode");
+chunkXHPRD45G_cjs.__name(pgErrorCode, "pgErrorCode");
 function normalizeCustomerPhone(phone) {
   const p = typeof phone === "string" ? phone.trim() : "";
   return p || null;
 }
-chunkUSNT2KNT_cjs.__name(normalizeCustomerPhone, "normalizeCustomerPhone");
+chunkXHPRD45G_cjs.__name(normalizeCustomerPhone, "normalizeCustomerPhone");
 function isSyntheticCustomerPhone(phone) {
   const p = String(phone ?? "").trim();
   if (!p) return true;
@@ -42,22 +42,22 @@ function isSyntheticCustomerPhone(phone) {
   if (p.includes("@")) return true;
   return false;
 }
-chunkUSNT2KNT_cjs.__name(isSyntheticCustomerPhone, "isSyntheticCustomerPhone");
+chunkXHPRD45G_cjs.__name(isSyntheticCustomerPhone, "isSyntheticCustomerPhone");
 function customerPhoneForUser(_userId, phone) {
   return normalizeCustomerPhone(phone);
 }
-chunkUSNT2KNT_cjs.__name(customerPhoneForUser, "customerPhoneForUser");
+chunkXHPRD45G_cjs.__name(customerPhoneForUser, "customerPhoneForUser");
 function customerPhoneForEmail(_email, phone) {
   return normalizeCustomerPhone(phone);
 }
-chunkUSNT2KNT_cjs.__name(customerPhoneForEmail, "customerPhoneForEmail");
+chunkXHPRD45G_cjs.__name(customerPhoneForEmail, "customerPhoneForEmail");
 function resolveNextPhone(inputPhone, existingPhone) {
   if (inputPhone) return inputPhone;
   const existing = normalizeCustomerPhone(existingPhone);
   if (!existing || isSyntheticCustomerPhone(existing)) return null;
   return existing;
 }
-chunkUSNT2KNT_cjs.__name(resolveNextPhone, "resolveNextPhone");
+chunkXHPRD45G_cjs.__name(resolveNextPhone, "resolveNextPhone");
 async function ensureCustomerRecord(dsOrEm, customerEntity, input) {
   const repo = dsOrEm.getRepository(customerEntity);
   const email = normalizeEmail(input.email);
@@ -141,7 +141,7 @@ async function ensureCustomerRecord(dsOrEm, customerEntity, input) {
     throw err;
   }
 }
-chunkUSNT2KNT_cjs.__name(ensureCustomerRecord, "ensureCustomerRecord");
+chunkXHPRD45G_cjs.__name(ensureCustomerRecord, "ensureCustomerRecord");
 async function restoreCustomerRow(repo, row, user, name, email, phone) {
   const id = row.id;
   await repo.update(id, {
@@ -158,7 +158,7 @@ async function restoreCustomerRow(repo, row, user, name, email, phone) {
     id
   };
 }
-chunkUSNT2KNT_cjs.__name(restoreCustomerRow, "restoreCustomerRow");
+chunkXHPRD45G_cjs.__name(restoreCustomerRow, "restoreCustomerRow");
 async function ensureCustomerForUser(dsOrEm, customerEntity, user, overrides) {
   const repo = dsOrEm.getRepository(customerEntity);
   const email = normalizeEmail(user.email);
@@ -264,7 +264,7 @@ async function ensureCustomerForUser(dsOrEm, customerEntity, user, overrides) {
     throw err;
   }
 }
-chunkUSNT2KNT_cjs.__name(ensureCustomerForUser, "ensureCustomerForUser");
+chunkXHPRD45G_cjs.__name(ensureCustomerForUser, "ensureCustomerForUser");
 
 // src/auth/helpers.ts
 var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
@@ -273,13 +273,13 @@ var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
   "permissions"
 ]);
 function sessionHasEntityAccess(user, entity, action) {
-  return chunkO4AFPDQ4_cjs.explainSessionEntityAccess(user, entity, action).allowed;
+  return chunkLCZZ3S4I_cjs.explainSessionEntityAccess(user, entity, action).allowed;
 }
-chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
+chunkXHPRD45G_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
 function canManageRoles(user) {
   return !!(user?.email && user.isRBACAdmin);
 }
-chunkUSNT2KNT_cjs.__name(canManageRoles, "canManageRoles");
+chunkXHPRD45G_cjs.__name(canManageRoles, "canManageRoles");
 var OPEN_ENDPOINTS = [
   {
     "/api/contacts": [
@@ -301,11 +301,11 @@ var PERMISSION_REQUIRED_ENDPOINTS = {};
 function isOpenEndpoint(pathname) {
   return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
 }
-chunkUSNT2KNT_cjs.__name(isOpenEndpoint, "isOpenEndpoint");
+chunkXHPRD45G_cjs.__name(isOpenEndpoint, "isOpenEndpoint");
 function getRequiredPermission(pathname) {
   return null;
 }
-chunkUSNT2KNT_cjs.__name(getRequiredPermission, "getRequiredPermission");
+chunkXHPRD45G_cjs.__name(getRequiredPermission, "getRequiredPermission");
 function isPublicMethod(pathname, method) {
   for (const endpoint of OPEN_ENDPOINTS) {
     const key = Object.keys(endpoint)[0];
@@ -313,11 +313,11 @@ function isPublicMethod(pathname, method) {
   }
   return false;
 }
-chunkUSNT2KNT_cjs.__name(isPublicMethod, "isPublicMethod");
+chunkXHPRD45G_cjs.__name(isPublicMethod, "isPublicMethod");
 function createAuthHelpers(getSession, NextResponse) {
   return createAuthHelpersFromGetSession(getSession, NextResponse);
 }
-chunkUSNT2KNT_cjs.__name(createAuthHelpers, "createAuthHelpers");
+chunkXHPRD45G_cjs.__name(createAuthHelpers, "createAuthHelpers");
 function createCmsAuthBundle(getSession, NextResponse) {
   const auth = createAuthHelpers(getSession, NextResponse);
   return {
@@ -328,7 +328,7 @@ function createCmsAuthBundle(getSession, NextResponse) {
     getAuthenticatedUser: auth.getAuthenticatedUser
   };
 }
-chunkUSNT2KNT_cjs.__name(createCmsAuthBundle, "createCmsAuthBundle");
+chunkXHPRD45G_cjs.__name(createCmsAuthBundle, "createCmsAuthBundle");
 function createAuthHelpersFromGetSession(getSession, NextResponse) {
   return {
     async requireAuth(_req) {
@@ -364,8 +364,8 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunkO4AFPDQ4_cjs.explainSessionEntityAccess(u, entity, action);
-      chunkO4AFPDQ4_cjs.logRbac("authHelpers.requireEntityPermission", {
+      const { reason } = chunkLCZZ3S4I_cjs.explainSessionEntityAccess(u, entity, action);
+      chunkLCZZ3S4I_cjs.logRbac("authHelpers.requireEntityPermission", {
         entity,
         action,
         allowed,
@@ -397,10 +397,10 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       if (u.isRBACAdmin) return null;
-      if (chunkO4AFPDQ4_cjs.isVendorPortalUser(u)) return null;
+      if (chunkLCZZ3S4I_cjs.isVendorPortalUser(u)) return null;
       if (u.adminAccess === true) return null;
       if (u.adminAccess === false) {
-        chunkO4AFPDQ4_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
+        chunkLCZZ3S4I_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
           email: u.email,
           groupName: u.groupName,
           isVendorPortal: u.isVendorPortal
@@ -412,7 +412,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
           status: 403
         });
       }
-      chunkO4AFPDQ4_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
+      chunkLCZZ3S4I_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
         email: u.email,
         adminAccess: u.adminAccess,
         groupName: u.groupName,
@@ -431,7 +431,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
     }
   };
 }
-chunkUSNT2KNT_cjs.__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
+chunkXHPRD45G_cjs.__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
 
 exports.OPEN_ENDPOINTS = OPEN_ENDPOINTS;
 exports.PERMISSION_REQUIRED_ENDPOINTS = PERMISSION_REQUIRED_ENDPOINTS;

package/dist/{chunk-SKJH7PX4.js → chunk-HZZTDM5J.js}

@@ -1,5 +1,5 @@
-import { notifyLog, notificationTriggerEmitter, maskNotifyPhone } from './chunk-FLUF2GZH.js';
-import { __name } from './chunk-SHUYVCID.js';
+import { notifyLog, notificationTriggerEmitter, maskNotifyPhone } from './chunk-W2ZTGLUH.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/lib/emit-order-notification-trigger.ts
 async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
@@ -94,7 +94,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       orderId
     });
     try {
-      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-KM2SY7TX.js');
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-Z3MXNF4U.js');
       await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
     } catch (err) {
       notifyLog.error("TRIGGER", "direct dispatch failed", {

package/dist/{chunk-TJ2MIQUT.cjs → chunk-JRW3GQD4.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/message-templates/event-order-defaults.ts
 var EVENT_ORDER_TEMPLATE_KEY = "eventOrderPlaced";
@@ -74,7 +74,7 @@ var EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS = [
 function getEventOrderTemplateDefault(channel) {
   return EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS.find((d) => d.channel === channel);
 }
-chunkUSNT2KNT_cjs.__name(getEventOrderTemplateDefault, "getEventOrderTemplateDefault");
+chunkXHPRD45G_cjs.__name(getEventOrderTemplateDefault, "getEventOrderTemplateDefault");
 async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
   const def = getEventOrderTemplateDefault(channel);
   if (!def) return null;
@@ -112,11 +112,11 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
     enabled
   };
 }
-chunkUSNT2KNT_cjs.__name(resolveEventOrderTemplate, "resolveEventOrderTemplate");
+chunkXHPRD45G_cjs.__name(resolveEventOrderTemplate, "resolveEventOrderTemplate");
 function pickWhatsAppTemplateParams(variables) {
   return EVENT_ORDER_WHATSAPP_PARAM_KEYS.map((key) => String(variables[key] ?? "").slice(0, 1024));
 }
-chunkUSNT2KNT_cjs.__name(pickWhatsAppTemplateParams, "pickWhatsAppTemplateParams");
+chunkXHPRD45G_cjs.__name(pickWhatsAppTemplateParams, "pickWhatsAppTemplateParams");
 
 exports.EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS = EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS;
 exports.EVENT_ORDER_TEMPLATE_KEY = EVENT_ORDER_TEMPLATE_KEY;

package/dist/{chunk-3K5AIEIZ.js → chunk-JYRFSFXH.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/lib/order-inventory.ts
 var STOCK_HELD = /* @__PURE__ */ new Set([

package/dist/{chunk-GWDI752Q.js → chunk-K6JT7BKY.js}

@@ -1,4 +1,61 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+__name(queueSms, "queueSms");
 
 // src/plugins/whatsapp/whatsapp-queue.ts
 var WHATSAPP_QUEUE_NAME = "whatsapp";
@@ -80,4 +137,4 @@ async function queueWhatsApp(cms, payload) {
 }
 __name(queueWhatsApp, "queueWhatsApp");
 
-export { queueWhatsApp, registerWhatsAppQueueProcessor };
+export { queueSms, queueWhatsApp, registerSmsQueueProcessor, registerWhatsAppQueueProcessor };

package/dist/{chunk-WKDBMDUX.js → chunk-K6RXCLD5.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/lib/invoice/invoice-templates.ts
 var INVOICE_TEMPLATE_IDS = [

package/dist/{chunk-PA6YDMFZ.cjs → chunk-K742UE6S.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var events = require('events');
 
 var KNOWN_NOTIFICATION_TRIGGERS = {
@@ -15,7 +15,7 @@ var KNOWN_NOTIFICATION_TRIGGERS = {
 };
 var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends events.EventEmitter {
   static {
-    chunkUSNT2KNT_cjs.__name(this, "NotificationTriggerEmitter");
+    chunkXHPRD45G_cjs.__name(this, "NotificationTriggerEmitter");
   }
   emitTrigger(triggerKey, payload) {
     this.emit("__any__", triggerKey, payload);
@@ -32,7 +32,7 @@ function maskNotifyPhone(raw) {
   if (digits.length <= 4) return "(none)";
   return `***${digits.slice(-4)}`;
 }
-chunkUSNT2KNT_cjs.__name(maskNotifyPhone, "maskNotifyPhone");
+chunkXHPRD45G_cjs.__name(maskNotifyPhone, "maskNotifyPhone");
 function maskNotifyEmail(raw) {
   const e = String(raw ?? "").trim();
   if (!e || !e.includes("@")) return "(none)";
@@ -40,12 +40,12 @@ function maskNotifyEmail(raw) {
   const u = user.length <= 2 ? "**" : `${user.slice(0, 2)}***`;
   return `${u}@${domain}`;
 }
-chunkUSNT2KNT_cjs.__name(maskNotifyEmail, "maskNotifyEmail");
+chunkXHPRD45G_cjs.__name(maskNotifyEmail, "maskNotifyEmail");
 function logFcmToken(raw) {
   const s = String(raw ?? "").trim();
   return s || "(none)";
 }
-chunkUSNT2KNT_cjs.__name(logFcmToken, "logFcmToken");
+chunkXHPRD45G_cjs.__name(logFcmToken, "logFcmToken");
 function write(level, channel, message, data) {
   const banner = `========== [NOTIFY] ${channel} | ${message} ==========`;
   const payload = data ?? {};
@@ -60,14 +60,15 @@ ${banner}`, payload);
 ${banner}`, payload);
   }
 }
-chunkUSNT2KNT_cjs.__name(write, "write");
+chunkXHPRD45G_cjs.__name(write, "write");
 var notifyLog = {
-  trigger: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((message, data) => write("info", "TRIGGER", message, data), "trigger"),
-  email: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((message, data) => write("info", "EMAIL", message, data), "email"),
-  whatsapp: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((message, data) => write("info", "WHATSAPP", message, data), "whatsapp"),
-  push: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((message, data) => write("info", "PUSH", message, data), "push"),
-  skip: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((channel, message, data) => write("warn", `SKIP ${channel}`, message, data), "skip"),
-  error: /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((channel, message, data) => write("error", channel, message, data), "error")
+  trigger: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((message, data) => write("info", "TRIGGER", message, data), "trigger"),
+  email: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((message, data) => write("info", "EMAIL", message, data), "email"),
+  whatsapp: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((message, data) => write("info", "WHATSAPP", message, data), "whatsapp"),
+  sms: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((message, data) => write("info", "SMS", message, data), "sms"),
+  push: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((message, data) => write("info", "PUSH", message, data), "push"),
+  skip: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((channel, message, data) => write("warn", `SKIP ${channel}`, message, data), "skip"),
+  error: /* @__PURE__ */ chunkXHPRD45G_cjs.__name((channel, message, data) => write("error", channel, message, data), "error")
 };
 
 exports.KNOWN_NOTIFICATION_TRIGGERS = KNOWN_NOTIFICATION_TRIGGERS;