@infuro/cms-core 1.0.68 → 1.0.70

package/dist/{chunk-WFMVD567.cjs → chunk-KB7EBYPR.cjs}

@@ -1,76 +1,20 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var crypto = require('crypto');
 var typeorm = require('typeorm');
 
-// src/plugins/sms/sms-queue.ts
-var SMS_QUEUE_NAME = "sms";
-function registerSmsQueueProcessor(cms) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (!queue || !sms || typeof sms.send !== "function") return;
-  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
-    const payload = data;
-    if (!payload.to) return;
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (!payload.body?.trim()) return;
-    await sms.send({
-      to: payload.to,
-      body: payload.body,
-      otpCode: payload.otpCode,
-      variables: payload.variables
-    });
-  });
-}
-chunkUSNT2KNT_cjs.__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
-async function queueSms(cms, payload) {
-  const queue = cms.getPlugin("queue");
-  const sms = cms.getPlugin("sms");
-  if (queue) {
-    await queue.add(SMS_QUEUE_NAME, payload);
-    return;
-  }
-  if (sms && typeof sms.send === "function") {
-    if (payload.templateKey?.trim()) {
-      await sms.send({
-        to: payload.to,
-        templateKey: payload.templateKey.trim(),
-        variables: payload.variables,
-        otpCode: payload.otpCode
-      });
-      return;
-    }
-    if (payload.body?.trim()) {
-      await sms.send({
-        to: payload.to,
-        body: payload.body,
-        otpCode: payload.otpCode,
-        variables: payload.variables
-      });
-    }
-  }
-}
-chunkUSNT2KNT_cjs.__name(queueSms, "queueSms");
 var OTP_TTL_MS = 10 * 60 * 1e3;
 var MAX_SENDS_PER_HOUR = 5;
 var MAX_VERIFY_ATTEMPTS = 8;
 function getPepper(explicit) {
   return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
 }
-chunkUSNT2KNT_cjs.__name(getPepper, "getPepper");
+chunkXHPRD45G_cjs.__name(getPepper, "getPepper");
 function hashOtpCode(code, purpose, identifier, pepper) {
   return crypto.createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
 }
-chunkUSNT2KNT_cjs.__name(hashOtpCode, "hashOtpCode");
+chunkXHPRD45G_cjs.__name(hashOtpCode, "hashOtpCode");
 function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
   const h = hashOtpCode(code, purpose, identifier, pepper);
   try {
@@ -79,12 +23,12 @@ function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
     return false;
   }
 }
-chunkUSNT2KNT_cjs.__name(verifyOtpCodeHash, "verifyOtpCodeHash");
+chunkXHPRD45G_cjs.__name(verifyOtpCodeHash, "verifyOtpCodeHash");
 function generateNumericOtp(length = 6) {
   const max = 10 ** length;
   return crypto.randomInt(0, max).toString().padStart(length, "0");
 }
-chunkUSNT2KNT_cjs.__name(generateNumericOtp, "generateNumericOtp");
+chunkXHPRD45G_cjs.__name(generateNumericOtp, "generateNumericOtp");
 function normalizePhoneE164(raw, defaultCountryCode) {
   const t = raw.trim();
   const digitsOnly = t.replace(/\D/g, "");
@@ -94,7 +38,7 @@ function normalizePhoneE164(raw, defaultCountryCode) {
   if (digitsOnly.length > 10) return `+${digitsOnly}`;
   return `+${cc}${digitsOnly}`;
 }
-chunkUSNT2KNT_cjs.__name(normalizePhoneE164, "normalizePhoneE164");
+chunkXHPRD45G_cjs.__name(normalizePhoneE164, "normalizePhoneE164");
 async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
   const repo = dataSource.getRepository(entityMap.otp_challenges);
   return repo.count({
@@ -105,7 +49,7 @@ async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, s
     }
   });
 }
-chunkUSNT2KNT_cjs.__name(countRecentOtpSends, "countRecentOtpSends");
+chunkXHPRD45G_cjs.__name(countRecentOtpSends, "countRecentOtpSends");
 async function createOtpChallenge(dataSource, entityMap, input) {
   const { purpose, channel, identifier, code, pepper } = input;
   const since = new Date(Date.now() - 60 * 60 * 1e3);
@@ -138,7 +82,7 @@ async function createOtpChallenge(dataSource, entityMap, input) {
     ok: true
   };
 }
-chunkUSNT2KNT_cjs.__name(createOtpChallenge, "createOtpChallenge");
+chunkXHPRD45G_cjs.__name(createOtpChallenge, "createOtpChallenge");
 async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
   const { purpose, identifier, code, pepper } = input;
   const repo = dataSource.getRepository(entityMap.otp_challenges);
@@ -196,14 +140,12 @@ async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
     ok: true
   };
 }
-chunkUSNT2KNT_cjs.__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
+chunkXHPRD45G_cjs.__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
 
 exports.countRecentOtpSends = countRecentOtpSends;
 exports.createOtpChallenge = createOtpChallenge;
 exports.generateNumericOtp = generateNumericOtp;
 exports.hashOtpCode = hashOtpCode;
 exports.normalizePhoneE164 = normalizePhoneE164;
-exports.queueSms = queueSms;
-exports.registerSmsQueueProcessor = registerSmsQueueProcessor;
 exports.verifyAndConsumeOtpChallenge = verifyAndConsumeOtpChallenge;
 exports.verifyOtpCodeHash = verifyOtpCodeHash;

package/dist/{chunk-H3IVLIPR.cjs → chunk-KJB5LBFQ.cjs}

@@ -1,6 +1,63 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+chunkXHPRD45G_cjs.__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+chunkXHPRD45G_cjs.__name(queueSms, "queueSms");
 
 // src/plugins/whatsapp/whatsapp-queue.ts
 var WHATSAPP_QUEUE_NAME = "whatsapp";
@@ -9,7 +66,7 @@ function maskPhone(raw) {
   if (digits.length <= 4) return "****";
   return `${"*".repeat(Math.max(0, digits.length - 4))}${digits.slice(-4)}`;
 }
-chunkUSNT2KNT_cjs.__name(maskPhone, "maskPhone");
+chunkXHPRD45G_cjs.__name(maskPhone, "maskPhone");
 function registerWhatsAppQueueProcessor(cms) {
   const queue = cms.getPlugin("queue");
   const whatsapp = cms.getPlugin("whatsapp");
@@ -56,7 +113,7 @@ function registerWhatsAppQueueProcessor(cms) {
     queue: WHATSAPP_QUEUE_NAME
   });
 }
-chunkUSNT2KNT_cjs.__name(registerWhatsAppQueueProcessor, "registerWhatsAppQueueProcessor");
+chunkXHPRD45G_cjs.__name(registerWhatsAppQueueProcessor, "registerWhatsAppQueueProcessor");
 async function queueWhatsApp(cms, payload) {
   const queue = cms.getPlugin("queue");
   if (queue) {
@@ -80,7 +137,9 @@ async function queueWhatsApp(cms, payload) {
   });
   return false;
 }
-chunkUSNT2KNT_cjs.__name(queueWhatsApp, "queueWhatsApp");
+chunkXHPRD45G_cjs.__name(queueWhatsApp, "queueWhatsApp");
 
+exports.queueSms = queueSms;
 exports.queueWhatsApp = queueWhatsApp;
+exports.registerSmsQueueProcessor = registerSmsQueueProcessor;
 exports.registerWhatsAppQueueProcessor = registerWhatsAppQueueProcessor;

package/dist/{chunk-O4AFPDQ4.cjs → chunk-LCZZ3S4I.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/auth/permission-entities.ts
 var PERMISSION_ENTITY_INTERNAL_EXCLUDE = /* @__PURE__ */ new Set([
@@ -37,7 +37,7 @@ var ADMIN_GROUP_NAME = "Administrator";
 function isSuperAdminGroupName(name) {
   return name === ADMIN_GROUP_NAME;
 }
-chunkUSNT2KNT_cjs.__name(isSuperAdminGroupName, "isSuperAdminGroupName");
+chunkXHPRD45G_cjs.__name(isSuperAdminGroupName, "isSuperAdminGroupName");
 function getPermissionableEntityKeys(entityMap) {
   const fromMap = Object.keys(entityMap).filter((k) => !PERMISSION_ENTITY_INTERNAL_EXCLUDE.has(k));
   const logical = PERMISSION_LOGICAL_ENTITIES.filter((k) => !fromMap.includes(k));
@@ -46,11 +46,11 @@ function getPermissionableEntityKeys(entityMap) {
     ...logical
   ].filter((k, i, a) => a.indexOf(k) === i);
 }
-chunkUSNT2KNT_cjs.__name(getPermissionableEntityKeys, "getPermissionableEntityKeys");
+chunkXHPRD45G_cjs.__name(getPermissionableEntityKeys, "getPermissionableEntityKeys");
 function permissionRowsToRecord(rows) {
   const out = {};
   if (!rows?.length) return out;
-  const flag = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((v) => v === true || v === 1 || v === "1" || v === "t" || v === "true", "flag");
+  const flag = /* @__PURE__ */ chunkXHPRD45G_cjs.__name((v) => v === true || v === 1 || v === "1" || v === "t" || v === "true", "flag");
   for (const p of rows) {
     out[p.entity] = {
       c: flag(p.canCreate),
@@ -61,7 +61,7 @@ function permissionRowsToRecord(rows) {
   }
   return out;
 }
-chunkUSNT2KNT_cjs.__name(permissionRowsToRecord, "permissionRowsToRecord");
+chunkXHPRD45G_cjs.__name(permissionRowsToRecord, "permissionRowsToRecord");
 function hasEntityPermission(record, entity, action) {
   const p = record?.[entity];
   if (!p) return false;
@@ -70,25 +70,7 @@ function hasEntityPermission(record, entity, action) {
   if (action === "update") return p.u;
   return p.d;
 }
-chunkUSNT2KNT_cjs.__name(hasEntityPermission, "hasEntityPermission");
-
-// src/auth/role-helpers.ts
-var SUPER_ADMIN_GROUP_ID = 1;
-var VENDOR_ADMIN_GROUP_ID = 5;
-function isSuperAdmin(user) {
-  if (!user) return false;
-  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
-  if (user.isRBACAdmin === true) return true;
-  return isSuperAdminGroupName(user.groupName);
-}
-chunkUSNT2KNT_cjs.__name(isSuperAdmin, "isSuperAdmin");
-function isVendorAdmin(user) {
-  if (!user?.email || isSuperAdmin(user)) return false;
-  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
-  if ((user.vendorIds?.length ?? 0) > 0) return true;
-  return isVendorGroupName(user.groupName);
-}
-chunkUSNT2KNT_cjs.__name(isVendorAdmin, "isVendorAdmin");
+chunkXHPRD45G_cjs.__name(hasEntityPermission, "hasEntityPermission");
 
 // src/auth/vendor-scope.ts
 var DEFAULT_VENDOR_SLUG = "default";
@@ -103,7 +85,7 @@ async function resolveDefaultVendorId(dataSource) {
     return null;
   }
 }
-chunkUSNT2KNT_cjs.__name(resolveDefaultVendorId, "resolveDefaultVendorId");
+chunkXHPRD45G_cjs.__name(resolveDefaultVendorId, "resolveDefaultVendorId");
 async function resolveDisabledMultiVendorScope(dataSource) {
   const defaultVendorId = await resolveDefaultVendorId(dataSource);
   if (defaultVendorId == null) return {
@@ -117,7 +99,7 @@ async function resolveDisabledMultiVendorScope(dataSource) {
     ]
   };
 }
-chunkUSNT2KNT_cjs.__name(resolveDisabledMultiVendorScope, "resolveDisabledMultiVendorScope");
+chunkXHPRD45G_cjs.__name(resolveDisabledMultiVendorScope, "resolveDisabledMultiVendorScope");
 var VENDOR_SCOPED_STORE_ENTITIES = /* @__PURE__ */ new Set([
   "products",
   "collections",
@@ -154,23 +136,23 @@ function isVendorGroupName(name) {
   const n = name.trim().toLowerCase();
   return n === "vendor" || n === "vendor owner" || n.includes("vendor");
 }
-chunkUSNT2KNT_cjs.__name(isVendorGroupName, "isVendorGroupName");
+chunkXHPRD45G_cjs.__name(isVendorGroupName, "isVendorGroupName");
 function isPlatformAdministrator(user) {
   if (!user?.email) return false;
   return isSuperAdmin(user);
 }
-chunkUSNT2KNT_cjs.__name(isPlatformAdministrator, "isPlatformAdministrator");
+chunkXHPRD45G_cjs.__name(isPlatformAdministrator, "isPlatformAdministrator");
 function isVendorPortalUser(user) {
   if (user?.isVendorPortal === true) return true;
   if (!user?.email || isPlatformAdministrator(user)) return false;
   if (isVendorAdmin(user)) return true;
   return isVendorGroupName(user.groupName);
 }
-chunkUSNT2KNT_cjs.__name(isVendorPortalUser, "isVendorPortalUser");
+chunkXHPRD45G_cjs.__name(isVendorPortalUser, "isVendorPortalUser");
 function isVendorStaff(user) {
   return isVendorPortalUser(user);
 }
-chunkUSNT2KNT_cjs.__name(isVendorStaff, "isVendorStaff");
+chunkXHPRD45G_cjs.__name(isVendorStaff, "isVendorStaff");
 function isVendorOwner(user) {
   if (user?.isVendorOwner === true) return true;
   if (!user?.email || isPlatformAdministrator(user)) return false;
@@ -178,19 +160,19 @@ function isVendorOwner(user) {
   if (user.vendorRole === "owner") return true;
   return false;
 }
-chunkUSNT2KNT_cjs.__name(isVendorOwner, "isVendorOwner");
+chunkXHPRD45G_cjs.__name(isVendorOwner, "isVendorOwner");
 function canManageVendorTeam(user) {
   return isPlatformAdministrator(user) || isVendorOwner(user);
 }
-chunkUSNT2KNT_cjs.__name(canManageVendorTeam, "canManageVendorTeam");
+chunkXHPRD45G_cjs.__name(canManageVendorTeam, "canManageVendorTeam");
 function canManageVendorRoles(user) {
   return isPlatformAdministrator(user) || isVendorOwner(user);
 }
-chunkUSNT2KNT_cjs.__name(canManageVendorRoles, "canManageVendorRoles");
+chunkXHPRD45G_cjs.__name(canManageVendorRoles, "canManageVendorRoles");
 function canOnboardVendors(user) {
   return isPlatformAdministrator(user);
 }
-chunkUSNT2KNT_cjs.__name(canOnboardVendors, "canOnboardVendors");
+chunkXHPRD45G_cjs.__name(canOnboardVendors, "canOnboardVendors");
 function resolveVendorScopeFromSessionUser(user) {
   if (!user?.email) {
     console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] No user email -> deny");
@@ -221,7 +203,7 @@ function resolveVendorScopeFromSessionUser(user) {
   console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User:", user.email, "-> scope:", res);
   return res;
 }
-chunkUSNT2KNT_cjs.__name(resolveVendorScopeFromSessionUser, "resolveVendorScopeFromSessionUser");
+chunkXHPRD45G_cjs.__name(resolveVendorScopeFromSessionUser, "resolveVendorScopeFromSessionUser");
 function vendorPortalFlagsFromUser(input) {
   const vendorIds = input.vendorIds ?? [];
   const isVendorPortal = !input.isRBACAdmin && (vendorIds.length > 0 || isVendorGroupName(input.groupName));
@@ -231,7 +213,25 @@ function vendorPortalFlagsFromUser(input) {
     isVendorOwner: isVendorOwner2
   };
 }
-chunkUSNT2KNT_cjs.__name(vendorPortalFlagsFromUser, "vendorPortalFlagsFromUser");
+chunkXHPRD45G_cjs.__name(vendorPortalFlagsFromUser, "vendorPortalFlagsFromUser");
+
+// src/auth/role-helpers.ts
+var SUPER_ADMIN_GROUP_ID = 1;
+var VENDOR_ADMIN_GROUP_ID = 5;
+function isSuperAdmin(user) {
+  if (!user) return false;
+  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
+  if (user.isRBACAdmin === true) return true;
+  return isSuperAdminGroupName(user.groupName);
+}
+chunkXHPRD45G_cjs.__name(isSuperAdmin, "isSuperAdmin");
+function isVendorAdmin(user) {
+  if (!user?.email || isSuperAdmin(user)) return false;
+  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
+  if ((user.vendorIds?.length ?? 0) > 0) return true;
+  return isVendorGroupName(user.groupName);
+}
+chunkXHPRD45G_cjs.__name(isVendorAdmin, "isVendorAdmin");
 
 // src/lib/vendor-role-defaults.ts
 var VENDOR_RBAC_ENTITIES = [
@@ -252,7 +252,7 @@ function full() {
     canDelete: true
   };
 }
-chunkUSNT2KNT_cjs.__name(full, "full");
+chunkXHPRD45G_cjs.__name(full, "full");
 function read() {
   return {
     canCreate: false,
@@ -261,7 +261,7 @@ function read() {
     canDelete: false
   };
 }
-chunkUSNT2KNT_cjs.__name(read, "read");
+chunkXHPRD45G_cjs.__name(read, "read");
 function none() {
   return {
     canCreate: false,
@@ -270,7 +270,7 @@ function none() {
     canDelete: false
   };
 }
-chunkUSNT2KNT_cjs.__name(none, "none");
+chunkXHPRD45G_cjs.__name(none, "none");
 function readUpdate() {
   return {
     canCreate: false,
@@ -279,9 +279,9 @@ function readUpdate() {
     canDelete: false
   };
 }
-chunkUSNT2KNT_cjs.__name(readUpdate, "readUpdate");
+chunkXHPRD45G_cjs.__name(readUpdate, "readUpdate");
 function storePerms(spec) {
-  const resolve = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((v) => {
+  const resolve = /* @__PURE__ */ chunkXHPRD45G_cjs.__name((v) => {
     if (v === "full") return full();
     if (v === "read") return read();
     if (v === "none") return none();
@@ -293,7 +293,7 @@ function storePerms(spec) {
   }
   return out;
 }
-chunkUSNT2KNT_cjs.__name(storePerms, "storePerms");
+chunkXHPRD45G_cjs.__name(storePerms, "storePerms");
 var DEFAULT_VENDOR_ROLE_DEFS = [
   {
     name: "Owner",
@@ -402,13 +402,13 @@ function isRbacDebugEnabled() {
   const v = process.env.CMS_RBAC_DEBUG?.trim().toLowerCase();
   return v === "1" || v === "true" || v === "yes";
 }
-chunkUSNT2KNT_cjs.__name(isRbacDebugEnabled, "isRbacDebugEnabled");
+chunkXHPRD45G_cjs.__name(isRbacDebugEnabled, "isRbacDebugEnabled");
 function logRbac(message, data) {
   if (!isRbacDebugEnabled()) return;
   if (data) console.info(LOG_PREFIX, message, data);
   else console.info(LOG_PREFIX, message);
 }
-chunkUSNT2KNT_cjs.__name(logRbac, "logRbac");
+chunkXHPRD45G_cjs.__name(logRbac, "logRbac");
 function summarizeEntityPerms(entityPerms) {
   const out = {};
   if (!entityPerms) return out;
@@ -422,7 +422,7 @@ function summarizeEntityPerms(entityPerms) {
   }
   return out;
 }
-chunkUSNT2KNT_cjs.__name(summarizeEntityPerms, "summarizeEntityPerms");
+chunkXHPRD45G_cjs.__name(summarizeEntityPerms, "summarizeEntityPerms");
 function vendorPortalFallbackReason(user, entity, action) {
   if (!isVendorPortalUser(user)) return null;
   if (entity === "dashboard" && action === "read") return "vendor_portal_dashboard_fallback";
@@ -434,7 +434,7 @@ function vendorPortalFallbackReason(user, entity, action) {
   if (VENDOR_STORE_RBAC_ENTITIES.has(entity) && action === "read") return "vendor_portal_store_read_fallback";
   return null;
 }
-chunkUSNT2KNT_cjs.__name(vendorPortalFallbackReason, "vendorPortalFallbackReason");
+chunkXHPRD45G_cjs.__name(vendorPortalFallbackReason, "vendorPortalFallbackReason");
 function explainSessionEntityAccess(user, entity, action) {
   const userSnapshot = {
     email: user?.email ?? null,
@@ -616,7 +616,7 @@ function explainSessionEntityAccess(user, entity, action) {
     userSnapshot
   };
 }
-chunkUSNT2KNT_cjs.__name(explainSessionEntityAccess, "explainSessionEntityAccess");
+chunkXHPRD45G_cjs.__name(explainSessionEntityAccess, "explainSessionEntityAccess");
 async function logEntityAccessDecision(dataSource, context, user, entity, action, extra) {
   if (!isRbacDebugEnabled()) return;
   const explanation = explainSessionEntityAccess(user, entity, action);
@@ -625,7 +625,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-KWV7D5PQ.cjs');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-S3D6N6HN.cjs');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {
@@ -644,7 +644,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     ...extra
   });
 }
-chunkUSNT2KNT_cjs.__name(logEntityAccessDecision, "logEntityAccessDecision");
+chunkXHPRD45G_cjs.__name(logEntityAccessDecision, "logEntityAccessDecision");
 
 exports.ADMIN_GROUP_NAME = ADMIN_GROUP_NAME;
 exports.DEFAULT_VENDOR_ROLE_DEFS = DEFAULT_VENDOR_ROLE_DEFS;

package/dist/{chunk-7JCCPQEF.js → chunk-LJ5C4RBF.js}

@@ -1,5 +1,5 @@
-import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-ZIT4IP6N.js';
-import { __name } from './chunk-SHUYVCID.js';
+import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-PQJIJ4ZX.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/plugins/email/email-queue.ts
 var EMAIL_QUEUE_NAME = "email";
@@ -131,7 +131,7 @@ async function queueEmail(cms, payload) {
   let email = cms && typeof cms.getPlugin === "function" ? cms.getPlugin("email") : void 0;
   if (!email) {
     try {
-      const { EmailService } = await import('./email-service-ADDF52PJ.js');
+      const { EmailService } = await import('./email-service-6JODEMUA.js');
       const env = typeof process !== "undefined" && process.env ? process.env : {};
       const type = String(env.SMTP_TYPE || "SMTP").toUpperCase();
       const port = env.SMTP_PORT ? parseInt(env.SMTP_PORT, 10) : void 0;

package/dist/{chunk-EIZKW2PF.js → chunk-LY7CDNC6.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import React from 'react';
 
 function ForceLightMode() {

package/dist/{chunk-MQBT33IV.js → chunk-MGT4DJ2D.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/message-templates/sms-defaults.ts
 var SMS_MESSAGE_TEMPLATE_DEFAULTS = [

package/dist/{chunk-GN4LKG4V.cjs → chunk-NIBEGDD4.cjs}

@@ -1,20 +1,20 @@
 'use strict';
 
-var chunkPA6YDMFZ_cjs = require('./chunk-PA6YDMFZ.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkK742UE6S_cjs = require('./chunk-K742UE6S.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/lib/emit-order-notification-trigger.ts
 async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
   if (!deps.entityMap.orders) {
-    chunkPA6YDMFZ_cjs.notifyLog.skip("TRIGGER", "orders entity missing from entityMap", {
+    chunkK742UE6S_cjs.notifyLog.skip("TRIGGER", "orders entity missing from entityMap", {
       triggerKey,
       orderId
     });
     return;
   }
-  const listenerCount = chunkPA6YDMFZ_cjs.notificationTriggerEmitter.listenerCount("__any__");
+  const listenerCount = chunkK742UE6S_cjs.notificationTriggerEmitter.listenerCount("__any__");
   if (listenerCount === 0) {
-    chunkPA6YDMFZ_cjs.notifyLog.skip("TRIGGER", "no dispatcher listener \u2014 will try direct dispatch (pass getCms to createCmsApiHandler)", {
+    chunkK742UE6S_cjs.notifyLog.skip("TRIGGER", "no dispatcher listener \u2014 will try direct dispatch (pass getCms to createCmsApiHandler)", {
       triggerKey,
       orderId
     });
@@ -30,7 +30,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     ]
   });
   if (!fullOrder) {
-    chunkPA6YDMFZ_cjs.notifyLog.skip("TRIGGER", "order not found", {
+    chunkK742UE6S_cjs.notifyLog.skip("TRIGGER", "order not found", {
       triggerKey,
       orderId
     });
@@ -38,17 +38,17 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
   }
   const fo = fullOrder;
   const phone = fo.contact?.phone ?? null;
-  chunkPA6YDMFZ_cjs.notifyLog.trigger("emit", {
+  chunkK742UE6S_cjs.notifyLog.trigger("emit", {
     triggerKey,
     orderId,
     orderNumber: fo.orderNumber ?? null,
-    phone: chunkPA6YDMFZ_cjs.maskNotifyPhone(phone),
+    phone: chunkK742UE6S_cjs.maskNotifyPhone(phone),
     listeners: listenerCount,
     vendorId: fo.vendorId ?? null,
     source: extra?.source ?? "api"
   });
   if (!phone?.trim()) {
-    chunkPA6YDMFZ_cjs.notifyLog.skip("WHATSAPP", "order contact has no phone", {
+    chunkK742UE6S_cjs.notifyLog.skip("WHATSAPP", "order contact has no phone", {
       triggerKey,
       orderId
     });
@@ -91,15 +91,15 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     refundAmount: resolvedRefundAmount
   };
   if (listenerCount === 0) {
-    chunkPA6YDMFZ_cjs.notifyLog.trigger("direct dispatch (no in-process listener)", {
+    chunkK742UE6S_cjs.notifyLog.trigger("direct dispatch (no in-process listener)", {
       triggerKey,
       orderId
     });
     try {
-      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-6HCJ6Q75.cjs');
+      const { dispatchOrderNotificationDirectly } = await import('./order-notification-dispatcher-37KDVHBM.cjs');
       await dispatchOrderNotificationDirectly(triggerKey, triggerPayload, deps.dataSource, deps.entityMap);
     } catch (err) {
-      chunkPA6YDMFZ_cjs.notifyLog.error("TRIGGER", "direct dispatch failed", {
+      chunkK742UE6S_cjs.notifyLog.error("TRIGGER", "direct dispatch failed", {
         triggerKey,
         orderId,
         error: err instanceof Error ? err.message : String(err),
@@ -107,23 +107,23 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       });
     }
   } else {
-    chunkPA6YDMFZ_cjs.notifyLog.trigger("emit to dispatcher listener", {
+    chunkK742UE6S_cjs.notifyLog.trigger("emit to dispatcher listener", {
       triggerKey,
       orderId,
       listeners: listenerCount
     });
-    chunkPA6YDMFZ_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, triggerPayload);
+    chunkK742UE6S_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, triggerPayload);
   }
 }
-chunkUSNT2KNT_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
+chunkXHPRD45G_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
 function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
-  chunkPA6YDMFZ_cjs.notifyLog.trigger("FIRE", {
+  chunkK742UE6S_cjs.notifyLog.trigger("FIRE", {
     triggerKey,
     orderId,
     source: extra?.source ?? "api"
   });
   void emitOrderNotificationTrigger(triggerKey, orderId, deps, extra).catch((err) => {
-    chunkPA6YDMFZ_cjs.notifyLog.error("TRIGGER", "fire failed", {
+    chunkK742UE6S_cjs.notifyLog.error("TRIGGER", "fire failed", {
       triggerKey,
       orderId,
       error: err instanceof Error ? err.message : String(err),
@@ -131,7 +131,7 @@ function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     });
   });
 }
-chunkUSNT2KNT_cjs.__name(fireOrderNotificationTrigger, "fireOrderNotificationTrigger");
+chunkXHPRD45G_cjs.__name(fireOrderNotificationTrigger, "fireOrderNotificationTrigger");
 
 exports.emitOrderNotificationTrigger = emitOrderNotificationTrigger;
 exports.fireOrderNotificationTrigger = fireOrderNotificationTrigger;

package/dist/{chunk-ZY64VJMS.js → chunk-NQF6H656.js}

@@ -1,5 +1,5 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-5NOZSG6J.js';
-import { __name } from './chunk-SHUYVCID.js';
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-CJY2HUJC.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import { IsNull } from 'typeorm';
 
 async function linkUnclaimedContactToUser(dataSource, contactsEntity, userId, email) {