@infuro/cms-core 1.0.68 → 1.0.70

package/dist/{chunk-MYUGQHU4.js → chunk-7NQMGB2S.js}

@@ -1,20 +1,20 @@
-import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
-import { normalizePhoneE164, generateNumericOtp, createOtpChallenge, queueSms, verifyAndConsumeOtpChallenge } from './chunk-OVTOP42W.js';
-import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-AYERBA7I.js';
-import { JOB_RUNNER_QUEUE } from './chunk-XJNNOSJR.js';
-import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, WhatsAppService, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-N4LBZXBG.js';
-import { registerWhatsAppQueueProcessor } from './chunk-GWDI752Q.js';
-import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-7JCCPQEF.js';
-import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-ZIT4IP6N.js';
-import { isErpIntegrationEnabled } from './chunk-JC6DLWTE.js';
-import { mergeEmailLayoutCompanyDetails } from './chunk-YRCKEGL2.js';
-import { getSmsTemplateDefault, SMS_MESSAGE_TEMPLATE_DEFAULTS } from './chunk-MQBT33IV.js';
-import { ensureCustomerRecord, linkUnclaimedContactToUser, ensureCustomerForUser, canManageRoles, sessionHasEntityAccess } from './chunk-ZY64VJMS.js';
-import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-5NOZSG6J.js';
-import { retireSoftDeletedUniqueValue, activeUniqueValueExists } from './chunk-DBPSJYLZ.js';
-import { queueErp } from './chunk-SYBOCAWB.js';
-import { __name } from './chunk-SHUYVCID.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, WhatsAppService, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-3LF4RYAJ.js';
+import { normalizePhoneE164, generateNumericOtp, createOtpChallenge, verifyAndConsumeOtpChallenge } from './chunk-ECUGNV2I.js';
+import { registerWhatsAppQueueProcessor, queueSms } from './chunk-K6JT7BKY.js';
+import { inviteStatusForActivation } from './chunk-ZMIMKNSQ.js';
+import { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES } from './chunk-5NVGWJSY.js';
+import { JOB_RUNNER_QUEUE } from './chunk-2BNVRFUQ.js';
+import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-JYRFSFXH.js';
+import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-LJ5C4RBF.js';
+import { unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-PQJIJ4ZX.js';
+import { isErpIntegrationEnabled } from './chunk-WQZ4AH2P.js';
+import { mergeEmailLayoutCompanyDetails } from './chunk-YDMHG6BA.js';
+import { getSmsTemplateDefault, SMS_MESSAGE_TEMPLATE_DEFAULTS } from './chunk-MGT4DJ2D.js';
+import { ensureCustomerRecord, linkUnclaimedContactToUser, ensureCustomerForUser, canManageRoles, sessionHasEntityAccess } from './chunk-NQF6H656.js';
+import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-CJY2HUJC.js';
+import { retireSoftDeletedUniqueValue, activeUniqueValueExists } from './chunk-BK5XW5XH.js';
+import { queueErp } from './chunk-7QJI56OL.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import { PrimaryGeneratedColumn, Column, Entity, ManyToOne, JoinColumn, CreateDateColumn, UpdateDateColumn, Unique, OneToMany, Index, ManyToMany, JoinTable, In, ILike, Between, MoreThanOrEqual, LessThanOrEqual, Not, MoreThan, IsNull } from 'typeorm';
 import { Country, State, City } from 'country-state-city';
 import crypto2, { randomBytes, randomUUID } from 'crypto';
@@ -1698,6 +1698,82 @@ async function recordOrderAssigneeHistory(dataSource, entityMap, orderId, userId
   return nextSortOrder;
 }
 __name(recordOrderAssigneeHistory, "recordOrderAssigneeHistory");
+async function validateAssigneeOrderPermission(dataSource, entityMap, userId) {
+  if (!Number.isFinite(userId) || userId <= 0) return {
+    valid: true
+  };
+  if (entityMap.users) {
+    const uRepo = dataSource.getRepository(entityMap.users);
+    const u = await uRepo.findOne({
+      where: {
+        id: userId,
+        deleted: false
+      },
+      relations: [
+        "group"
+      ]
+    });
+    if (!u) {
+      return {
+        valid: false,
+        error: "Assignee user not found."
+      };
+    }
+    const userRow = u;
+    if (userRow.adminAccess) {
+      return {
+        valid: true
+      };
+    }
+    if (userRow.group?.name && userRow.group.name.toLowerCase() === "customer") {
+      return {
+        valid: false,
+        error: "Customer accounts cannot be assigned to orders."
+      };
+    }
+  }
+  if (entityMap.vendor_users) {
+    const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+    const vuLinks = await vuRepo.find({
+      where: {
+        userId
+      },
+      relations: [
+        "vendorRole",
+        "vendorRole.permissions"
+      ]
+    });
+    if (vuLinks && vuLinks.length > 0) {
+      let anyRoleHasAccess = false;
+      for (const vu of vuLinks) {
+        const r = vu.vendorRole;
+        if (r) {
+          if (r.isOwnerRole) {
+            anyRoleHasAccess = true;
+            break;
+          }
+          if (Array.isArray(r.permissions)) {
+            const orderPerm = r.permissions.find((p) => String(p?.entity).toLowerCase() === "orders");
+            if (orderPerm && orderPerm.canRead) {
+              anyRoleHasAccess = true;
+              break;
+            }
+          }
+        }
+      }
+      if (!anyRoleHasAccess) {
+        return {
+          valid: false,
+          error: "Cannot assign order: This team member does not have permission to access orders. Please grant order access in Roles & Permissions."
+        };
+      }
+    }
+  }
+  return {
+    valid: true
+  };
+}
+__name(validateAssigneeOrderPermission, "validateAssigneeOrderPermission");
 var LIST_QUERY_RESERVED = /* @__PURE__ */ new Set([
   "page",
   "limit",
@@ -5112,6 +5188,16 @@ function createCrudHandler(dataSource, entityMap, options) {
           persistBody.orderNumber = `ORD00${randomPart}`;
           persistBody.qrToken = crypto2.randomBytes(16).toString("hex");
         }
+        if (resource === "orders" && persistBody.assignedUserId) {
+          const assignCheck = await validateAssigneeOrderPermission(dataSource, entityMap, Number(persistBody.assignedUserId));
+          if (!assignCheck.valid) {
+            return json({
+              error: assignCheck.error ?? "Invalid order assignee"
+            }, {
+              status: 400
+            });
+          }
+        }
         await retireSoftDeletedUniquesFromBody(repo, persistBody);
         created = await repo.save(repo.create(persistBody));
         if (resource === "orders") {
@@ -5313,7 +5399,7 @@ function createCrudHandler(dataSource, entityMap, options) {
           const orderIdForNotify = created.id;
           const finalCreatedStatus = String(created.status ?? createdStatus ?? "pending").toLowerCase();
           const initialPayStatus = String(persistBody.paymentStatus ?? body.paymentStatus ?? "unpaid").toLowerCase();
-          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
             if (finalCreatedStatus === "pending") {
               if (initialPayStatus === "failed") {
                 fireOrderNotificationTrigger("payment_failed", orderIdForNotify, {
@@ -6220,6 +6306,14 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             if ("assignedUserId" in rawBody && rawBody.assignedUserId !== void 0) {
               const aId = Number(rawBody.assignedUserId);
               if (Number.isFinite(aId) && aId > 0) {
+                const assignCheck = await validateAssigneeOrderPermission(dataSource, entityMap, aId);
+                if (!assignCheck.valid) {
+                  return json({
+                    error: assignCheck.error ?? "Invalid order assignee"
+                  }, {
+                    status: 400
+                  });
+                }
                 if (scopePutEarly.type === "vendor" && entityMap.vendor_users) {
                   const vuRepo = dataSource.getRepository(entityMap.vendor_users);
                   const vuLink = await vuRepo.findOne({
@@ -6516,7 +6610,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
           const assigneeUpdated = Boolean(rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0 && Number(rawBody.assignedUserId) > 0 && Number(rawBody.assignedUserId) !== Number(existingOrderRow?.assignedUserId));
           if (assigneeUpdated) {
-            void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+            void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
               fireOrderNotificationTrigger("order_assigned", updatedOrder.id, {
                 dataSource,
                 entityMap
@@ -6533,7 +6627,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
             const payments = Array.isArray(updatedOrder.payments) ? updatedOrder.payments : [];
             const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
             const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
-            void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+            void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
               if (newStatus === "pending") {
                 if (curPayStatus === "failed") {
                   fireOrderNotificationTrigger("payment_failed", updatedOrder.id, {
@@ -7101,6 +7195,14 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           const aId = Number(rawBody.assignedUserId);
           console.log("[ORDERS-DEBUG][UPDATE] Updating assignedUserId to:", aId);
           if (Number.isFinite(aId) && aId > 0) {
+            const assignCheck = await validateAssigneeOrderPermission(dataSource, entityMap, aId);
+            if (!assignCheck.valid) {
+              return json({
+                error: assignCheck.error ?? "Invalid order assignee"
+              }, {
+                status: 400
+              });
+            }
             if (scopePut.type === "vendor" && entityMap.vendor_users) {
               const vuRepo = dataSource.getRepository(entityMap.vendor_users);
               const vuLink = await vuRepo.findOne({
@@ -7241,7 +7343,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                     });
                   }
                   if (ordStatus === "pending" || ordStatus === "confirmed") {
-                    void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+                    void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
                       fireOrderNotificationTrigger("order_placed", pOrder, {
                         dataSource,
                         entityMap
@@ -7255,7 +7357,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                   }
                 }
               } else if (newPayStatus === "failed") {
-                void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+                void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
                   fireOrderNotificationTrigger("payment_failed", pOrder, {
                     dataSource,
                     entityMap
@@ -7263,7 +7365,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
                 }).catch(() => {
                 });
               } else if (newPayStatus === "refunded") {
-                void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+                void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
                   fireOrderNotificationTrigger("payment_refund_initiated", pOrder, {
                     dataSource,
                     entityMap
@@ -7390,7 +7492,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
         const paymentUpdated = Boolean(rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null);
         const assigneeUpdated = Boolean(rawBody && typeof rawBody === "object" && "assignedUserId" in rawBody && rawBody.assignedUserId !== void 0 && Number(rawBody.assignedUserId) > 0 && Number(rawBody.assignedUserId) !== Number(existingOrderRow?.assignedUserId));
         if (assigneeUpdated) {
-          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_assigned", ord.id, {
               dataSource,
               entityMap
@@ -7407,7 +7509,7 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
           const payments = Array.isArray(ord.payments) ? ord.payments : [];
           const bodyPayStatus = rawBody && typeof rawBody === "object" && rawBody.paymentStatus != null ? String(rawBody.paymentStatus).toLowerCase() : null;
           const curPayStatus = bodyPayStatus || String(payments[0]?.status || "unpaid").toLowerCase();
-          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
             if (newStatus === "pending") {
               if (curPayStatus === "failed") {
                 fireOrderNotificationTrigger("payment_failed", ord.id, {
@@ -11061,7 +11163,7 @@ function createUsersApiHandlers(config) {
             if (token) {
               inviteLink = buildVendorInviteLink(baseUrl, token);
             }
-            const { markVendorInvitePendingForUser } = await import('./vendor-invite-status-PWJ3DE76.js');
+            const { markVendorInvitePendingForUser } = await import('./vendor-invite-status-45ZCWKCX.js');
             await markVendorInvitePendingForUser(dataSource, entityMap.vendors, u.id);
           }
         }
@@ -27861,7 +27963,7 @@ async function queueJobScheduleNow(cms, scheduleId) {
   if (!boss) {
     throw new Error("pg-boss is not configured (DATABASE_URL required)");
   }
-  const { JOB_RUNNER_QUEUE: JOB_RUNNER_QUEUE2 } = await import('./pg-boss-service-WCBJD4JB.js');
+  const { JOB_RUNNER_QUEUE: JOB_RUNNER_QUEUE2 } = await import('./pg-boss-service-CMW3KQJM.js');
   await boss.send(JOB_RUNNER_QUEUE2, {
     scheduleId,
     triggeredBy: "manual"
@@ -29036,6 +29138,7 @@ function whatsappPlugin(config = {}) {
       const { getWhatsAppSettings, getMessageTemplateRow, ...staticRest } = config;
       let settingsLoader = getWhatsAppSettings;
       if (!settingsLoader && context.dataSource) {
+        const encKey = resolveSettingsEncryptionKey(env);
         settingsLoader = /* @__PURE__ */ __name(async () => {
           try {
             const ds = context.dataSource;
@@ -29046,10 +29149,18 @@ function whatsappPlugin(config = {}) {
                 deleted: false
               }
             });
-            return Object.fromEntries(rows.map((r) => [
-              r.key,
-              r.value
-            ]));
+            const result = {};
+            for (const r of rows) {
+              let val = String(r.value ?? "");
+              if (r.encrypted && encKey) {
+                try {
+                  val = simpleDecrypt(val, encKey);
+                } catch {
+                }
+              }
+              result[r.key] = val;
+            }
+            return result;
           } catch {
             return {};
           }
@@ -29438,7 +29549,7 @@ function createCmsApiHandler(config) {
         companyDetails
       };
       if (queue) {
-        const { queueEmail: queueEmail2 } = await import('./email-queue-3QBQ63F7.js');
+        const { queueEmail: queueEmail2 } = await import('./email-queue-MWP4R67H.js');
         await queueEmail2(cms, {
           to: opts.to,
           templateName: "passwordReset",
@@ -29463,7 +29574,7 @@ function createCmsApiHandler(config) {
     const prevActivate = userAuth.beforeActivate;
     userAuth.beforeActivate = async (email, userId) => {
       if (prevActivate) await prevActivate(email, userId);
-      const { markVendorInviteAcceptedForUser } = await import('./vendor-invite-status-PWJ3DE76.js');
+      const { markVendorInviteAcceptedForUser } = await import('./vendor-invite-status-45ZCWKCX.js');
       await markVendorInviteAcceptedForUser(ds, vendorEntity, userId);
     };
   }
@@ -30467,9 +30578,9 @@ function createCmsApiHandler(config) {
         for (const r of rows) {
           storeMap[r.key] = r.value;
         }
-        const { normalizeInvoiceTemplateId } = await import('./invoice-templates-GZ33OENC.js');
-        const { generateLocalInvoicePdf } = await import('./generate-local-invoice-pdf-OCFG47SE.js');
-        const { resolveInvoiceAssetUrl } = await import('./resolve-invoice-asset-url-QZ2FRDHI.js');
+        const { normalizeInvoiceTemplateId } = await import('./invoice-templates-3AXTXERZ.js');
+        const { generateLocalInvoicePdf } = await import('./generate-local-invoice-pdf-XUH6GYEJ.js');
+        const { resolveInvoiceAssetUrl } = await import('./resolve-invoice-asset-url-64QQUVC3.js');
         const templateId = normalizeInvoiceTemplateId(templateParam);
         const includeQr = qrParam != null ? qrParam === "1" || qrParam === "true" : storeMap.invoice_include_qr === "true";
         const sampleInput = {
@@ -30856,7 +30967,7 @@ function createCmsApiHandler(config) {
         const pe = await requireEntityPermissionEffective(req, "orders", "read");
         if (pe) return pe;
         const cms = await getCms();
-        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-XSYHAMBS.js');
+        const { streamOrderInvoicePdf: streamOrderInvoicePdf2 } = await import('./erp-order-invoice-JEQKFXG4.js');
         const oid = Number(path2[1]);
         if (!Number.isFinite(oid)) return config.json({
           error: "Invalid id"
@@ -30890,7 +31001,7 @@ function createCmsApiHandler(config) {
           status: 400
         });
         const cms = await getCms();
-        const { isErpIntegrationEnabled: isErpIntegrationEnabled3 } = await import('./erp-config-enabled-T37X7T34.js');
+        const { isErpIntegrationEnabled: isErpIntegrationEnabled3 } = await import('./erp-config-enabled-CASE5YVI.js');
         const enabled = await isErpIntegrationEnabled3(cms, dataSource, entityMap);
         if (m === "GET") {
           return config.json({
@@ -30903,7 +31014,7 @@ function createCmsApiHandler(config) {
           }, {
             status: 409
           });
-          const { queueErpPaidOrderForOrderId } = await import('./paid-order-erp-3USEG6WL.js');
+          const { queueErpPaidOrderForOrderId } = await import('./paid-order-erp-GRXR2OG6.js');
           await queueErpPaidOrderForOrderId(cms, dataSource, entityMap, oid);
           return config.json({
             ok: true
@@ -31006,7 +31117,7 @@ function createCmsApiHandler(config) {
         }
       }
       if (path2[0] === "sms-notification-templates" && path2.length === 1 && m === "GET") {
-        const { createSmsNotificationTemplatesHandlers } = await import('./sms-notification-templates-handlers-SJLO7JGZ.js');
+        const { createSmsNotificationTemplatesHandlers } = await import('./sms-notification-templates-handlers-ZGDCVS5Z.js');
         const handlers = createSmsNotificationTemplatesHandlers(dataSource, entityMap);
         return handlers.GET(req);
       }
@@ -31081,7 +31192,7 @@ function createCmsApiHandler(config) {
               "Content-Type": "text/html; charset=utf-8"
             }
           });
-          const { renderOrderTrackingPage } = await import('./OrderTrackPage-W3J6WIG2.js');
+          const { renderOrderTrackingPage } = await import('./OrderTrackPage-VBZUVZOU.js');
           const html = renderOrderTrackingPage(order);
           return new Response(html, {
             status: 200,
@@ -31238,7 +31349,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-KM2SY7TX.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-Z3MXNF4U.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,
@@ -31319,7 +31430,7 @@ function createCmsApiHandler(config) {
           ]
         });
         if (orderWithItems) {
-          const { reconcileOrderInventoryBetweenSnapshots: reconcileOrderInventoryBetweenSnapshots2, orderInventorySnapshotFromRow: orderInventorySnapshotFromRow2 } = await import('./order-inventory-76V4XIGW.js');
+          const { reconcileOrderInventoryBetweenSnapshots: reconcileOrderInventoryBetweenSnapshots2, orderInventorySnapshotFromRow: orderInventorySnapshotFromRow2 } = await import('./order-inventory-R3AU6N4V.js');
           const prevSnap = orderInventorySnapshotFromRow2(orderWithItems);
           const invErr = await reconcileOrderInventoryBetweenSnapshots2(dataSource, entityMap, prevSnap, {
             status: "cancelled",
@@ -31337,7 +31448,7 @@ function createCmsApiHandler(config) {
           status: "cancelled"
         });
         const fireOrderCancelledNotification = /* @__PURE__ */ __name((refundAmount) => {
-          void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+          void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
             fireOrderNotificationTrigger("order_cancelled", orderId, {
               dataSource,
               entityMap
@@ -31582,7 +31693,7 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-KHLZQQJX.js');
         const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.getChannels(req, orderId);
       }
@@ -31597,7 +31708,7 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-KHLZQQJX.js');
         const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.sendOtp(req, orderId);
       }
@@ -31612,7 +31723,7 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-NROWBGXN.js');
+        const { createOrderCompletionOtpHandlers } = await import('./order-completion-otp-handlers-KHLZQQJX.js');
         const handlers = createOrderCompletionOtpHandlers(dataSource, entityMap, getCms, getHydratedSessionUser);
         return handlers.verifyOtp(req, orderId);
       }
@@ -31627,7 +31738,7 @@ function createCmsApiHandler(config) {
         }, {
           status: 400
         });
-        const { createOrderAssigneesHandlers } = await import('./order-assignees-handlers-L3RVKUBS.js');
+        const { createOrderAssigneesHandlers } = await import('./order-assignees-handlers-YCT3Q3KC.js');
         const handlers = createOrderAssigneesHandlers(dataSource, entityMap, getHydratedSessionUser);
         return handlers.listEligibleAssignees(req, orderId);
       }
@@ -32244,7 +32355,7 @@ function createStorefrontApiHandler(config) {
   const otpPepper = config.otpPepper;
   const defaultPhoneCc = config.defaultPhoneCountryCode;
   function fireStorefrontCheckoutNotifications(orderId) {
-    void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+    void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
       fireOrderNotificationTrigger("order_pending", orderId, {
         dataSource,
         entityMap
@@ -34095,7 +34206,7 @@ function createStorefrontApiHandler(config) {
           }, {
             status: 400
           });
-          const { retireSoftDeletedUniqueValue: retireSoftDeletedUniqueValue2 } = await import('./retire-soft-deleted-unique-NXQIH4BC.js');
+          const { retireSoftDeletedUniqueValue: retireSoftDeletedUniqueValue2 } = await import('./retire-soft-deleted-unique-F25KZBZK.js');
           await retireSoftDeletedUniqueValue2(userRepo(), "email", email);
           const existing = await userRepo().findOne({
             where: {
@@ -35189,7 +35300,7 @@ function createStorefrontApiHandler(config) {
             } catch {
             }
             try {
-              void import('./emit-order-notification-trigger-YUQTPELC.js').then(({ fireOrderNotificationTrigger }) => {
+              void import('./emit-order-notification-trigger-TBXAZAPS.js').then(({ fireOrderNotificationTrigger }) => {
                 fireOrderNotificationTrigger("order_cancelled", orderId, {
                   dataSource,
                   entityMap

package/dist/{chunk-SYBOCAWB.js → chunk-7QJI56OL.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/plugins/erp/erp-log.ts
 var ERP_LOG = "[webcore:erp]";

package/dist/{chunk-DBPSJYLZ.js → chunk-BK5XW5XH.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 
 // src/lib/retire-soft-deleted-unique.ts
 async function retireSoftDeletedUniqueValue(repo, column, value) {

package/dist/{chunk-SUUD7OUG.cjs → chunk-BQQMTQ4C.cjs}

@@ -1,11 +1,11 @@
 'use strict';
 
-var chunkUPLVMVRX_cjs = require('./chunk-UPLVMVRX.cjs');
-var chunkZX5U3VCB_cjs = require('./chunk-ZX5U3VCB.cjs');
-var chunkM5GPOPGX_cjs = require('./chunk-M5GPOPGX.cjs');
-var chunkP6S4XFZO_cjs = require('./chunk-P6S4XFZO.cjs');
-var chunkTZEMLHSP_cjs = require('./chunk-TZEMLHSP.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var chunkRQCXRCYM_cjs = require('./chunk-RQCXRCYM.cjs');
+var chunk2JHGIWH7_cjs = require('./chunk-2JHGIWH7.cjs');
+var chunkE62LKM6Z_cjs = require('./chunk-E62LKM6Z.cjs');
+var chunk47G65M5Q_cjs = require('./chunk-47G65M5Q.cjs');
+var chunkEYUBL7YH_cjs = require('./chunk-EYUBL7YH.cjs');
+var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/plugins/erp/erp-response-map.ts
 function pickString(o, keys) {
@@ -15,7 +15,7 @@ function pickString(o, keys) {
   }
   return void 0;
 }
-chunkUSNT2KNT_cjs.__name(pickString, "pickString");
+chunkXHPRD45G_cjs.__name(pickString, "pickString");
 function unwrapErpReadData(json) {
   if (!json || typeof json !== "object") return null;
   const o = json;
@@ -23,7 +23,7 @@ function unwrapErpReadData(json) {
   if (d && typeof d === "object" && !Array.isArray(d)) return d;
   return o;
 }
-chunkUSNT2KNT_cjs.__name(unwrapErpReadData, "unwrapErpReadData");
+chunkXHPRD45G_cjs.__name(unwrapErpReadData, "unwrapErpReadData");
 function firstObject(data, keys) {
   for (const k of keys) {
     const v = data[k];
@@ -31,7 +31,7 @@ function firstObject(data, keys) {
   }
   return null;
 }
-chunkUSNT2KNT_cjs.__name(firstObject, "firstObject");
+chunkXHPRD45G_cjs.__name(firstObject, "firstObject");
 function extractEvents(src) {
   const timeline = src.timeline ?? src.events ?? src.history ?? src.trackingEvents;
   if (!Array.isArray(timeline) || !timeline.length) return void 0;
@@ -65,7 +65,7 @@ function extractEvents(src) {
   }
   return events.length ? events : void 0;
 }
-chunkUSNT2KNT_cjs.__name(extractEvents, "extractEvents");
+chunkXHPRD45G_cjs.__name(extractEvents, "extractEvents");
 function mapErpPayloadToFulfillment(data) {
   const nested = firstObject(data, [
     "fulfillment",
@@ -97,7 +97,7 @@ function mapErpPayloadToFulfillment(data) {
     events
   };
 }
-chunkUSNT2KNT_cjs.__name(mapErpPayloadToFulfillment, "mapErpPayloadToFulfillment");
+chunkXHPRD45G_cjs.__name(mapErpPayloadToFulfillment, "mapErpPayloadToFulfillment");
 function mapErpPayloadToInvoiceNumber(data) {
   const nested = firstObject(data, [
     "invoice",
@@ -113,7 +113,7 @@ function mapErpPayloadToInvoiceNumber(data) {
     "id"
   ]);
 }
-chunkUSNT2KNT_cjs.__name(mapErpPayloadToInvoiceNumber, "mapErpPayloadToInvoiceNumber");
+chunkXHPRD45G_cjs.__name(mapErpPayloadToInvoiceNumber, "mapErpPayloadToInvoiceNumber");
 function extractChildOrderRefsFromSalePayload(data) {
   const lists = [
     data.returns,
@@ -151,7 +151,7 @@ function extractChildOrderRefsFromSalePayload(data) {
   }
   return out;
 }
-chunkUSNT2KNT_cjs.__name(extractChildOrderRefsFromSalePayload, "extractChildOrderRefsFromSalePayload");
+chunkXHPRD45G_cjs.__name(extractChildOrderRefsFromSalePayload, "extractChildOrderRefsFromSalePayload");
 
 // src/lib/invoice/build-local-invoice-for-order.ts
 async function loadSettingsGroup(ds, entityMap, group) {
@@ -167,7 +167,7 @@ async function loadSettingsGroup(ds, entityMap, group) {
     String(r.value ?? "")
   ]));
 }
-chunkUSNT2KNT_cjs.__name(loadSettingsGroup, "loadSettingsGroup");
+chunkXHPRD45G_cjs.__name(loadSettingsGroup, "loadSettingsGroup");
 function addrFromRow(row) {
   if (!row || typeof row !== "object") return null;
   const a = row;
@@ -180,7 +180,7 @@ function addrFromRow(row) {
     country: String(a.country ?? "").trim() || void 0
   };
 }
-chunkUSNT2KNT_cjs.__name(addrFromRow, "addrFromRow");
+chunkXHPRD45G_cjs.__name(addrFromRow, "addrFromRow");
 async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
   if (!entityMap.orders || !entityMap.order_items) {
     return {
@@ -250,10 +250,10 @@ async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
     loadSettingsGroup(ds, entityMap, "branding"),
     loadSettingsGroup(ds, entityMap, "email")
   ]);
-  const companyDetails = chunkTZEMLHSP_cjs.mergeEmailLayoutCompanyDetails(branding, email, store);
-  const fromBranding = chunkTZEMLHSP_cjs.getCompanyDetailsFromSettings(branding);
+  const companyDetails = chunkEYUBL7YH_cjs.mergeEmailLayoutCompanyDetails(branding, email, store);
+  const fromBranding = chunkEYUBL7YH_cjs.getCompanyDetailsFromSettings(branding);
   const rawLogo = store.invoiceLogoUrl || store.companyLogo || store.logo || companyDetails.logoUrl || fromBranding.logoUrl || null;
-  const logoUrl = chunkP6S4XFZO_cjs.resolveInvoiceAssetUrl(rawLogo);
+  const logoUrl = chunk47G65M5Q_cjs.resolveInvoiceAssetUrl(rawLogo);
   const companyName = store.companyName || store.invoiceCompanyName || store.name || companyDetails.companyName || fromBranding.companyName || "Store";
   const supportEmail = store.companyEmail || store.invoiceEmail || store.email || companyDetails.supportEmail || fromBranding.supportEmail;
   const supportPhone = store.companyPhone || store.invoicePhone || store.phone || companyDetails.supportPhone;
@@ -277,8 +277,8 @@ async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
   const baseUrl = process.env.NEXTAUTH_URL || process.env.PUBLIC_APP_URL || "";
   const qrData = qrToken ? baseUrl ? `${baseUrl.replace(/\/$/, "")}/track/${qrToken}` : `/track/${qrToken}` : String(o.orderNumber || orderId);
   const includeQrCode = store.invoice_include_qr === "true" || store.invoiceIncludeQr === "true";
-  const bytes = await chunkZX5U3VCB_cjs.generateLocalInvoicePdf({
-    templateId: chunkM5GPOPGX_cjs.normalizeInvoiceTemplateId(store.invoiceTemplate),
+  const bytes = await chunk2JHGIWH7_cjs.generateLocalInvoicePdf({
+    templateId: chunkE62LKM6Z_cjs.normalizeInvoiceTemplateId(store.invoiceTemplate),
     orderNumber: String(o.orderNumber || orderId),
     orderDate: o.createdAt || /* @__PURE__ */ new Date(),
     serviceDate,
@@ -311,7 +311,7 @@ async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
     filename: `invoice-${String(o.orderNumber || orderId).replace(/[^\w.-]+/g, "_")}.pdf`
   };
 }
-chunkUSNT2KNT_cjs.__name(buildLocalInvoicePdfForOrder, "buildLocalInvoicePdfForOrder");
+chunkXHPRD45G_cjs.__name(buildLocalInvoicePdfForOrder, "buildLocalInvoicePdfForOrder");
 
 // src/plugins/erp/erp-order-invoice.ts
 function pickInvoiceId(data) {
@@ -327,7 +327,7 @@ function pickInvoiceId(data) {
   }
   return void 0;
 }
-chunkUSNT2KNT_cjs.__name(pickInvoiceId, "pickInvoiceId");
+chunkXHPRD45G_cjs.__name(pickInvoiceId, "pickInvoiceId");
 function jsonErr(msg, status) {
   return new Response(JSON.stringify({
     error: msg
@@ -338,7 +338,7 @@ function jsonErr(msg, status) {
     }
   });
 }
-chunkUSNT2KNT_cjs.__name(jsonErr, "jsonErr");
+chunkXHPRD45G_cjs.__name(jsonErr, "jsonErr");
 var ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES = /* @__PURE__ */ new Set([
   "pending",
   "placed",
@@ -351,7 +351,7 @@ function isOrderEligibleForInvoiceEmail(status, orderKind) {
   if (kind !== "sale") return false;
   return ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES.has(String(status ?? "").trim().toLowerCase());
 }
-chunkUSNT2KNT_cjs.__name(isOrderEligibleForInvoiceEmail, "isOrderEligibleForInvoiceEmail");
+chunkXHPRD45G_cjs.__name(isOrderEligibleForInvoiceEmail, "isOrderEligibleForInvoiceEmail");
 async function resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId, options = {}) {
   try {
     const orderRepo = dataSource.getRepository(entityMap.orders);
@@ -376,7 +376,7 @@ async function resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId,
         status: 404
       };
     }
-    const on = await chunkUPLVMVRX_cjs.isErpIntegrationEnabled(cms, dataSource, entityMap);
+    const on = await chunkRQCXRCYM_cjs.isErpIntegrationEnabled(cms, dataSource, entityMap);
     const erp = cms.getPlugin("erp");
     if (on && erp?.submission) {
       const meta = order.metadata && typeof order.metadata === "object" && !Array.isArray(order.metadata) ? order.metadata : {};
@@ -429,7 +429,7 @@ async function resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId,
     };
   }
 }
-chunkUSNT2KNT_cjs.__name(resolveOrderInvoicePdfBytes, "resolveOrderInvoicePdfBytes");
+chunkXHPRD45G_cjs.__name(resolveOrderInvoicePdfBytes, "resolveOrderInvoicePdfBytes");
 async function streamOrderInvoicePdf(cms, dataSource, entityMap, orderId, options) {
   const resolved = await resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, orderId, options);
   if ("error" in resolved) return jsonErr(resolved.error, resolved.status);
@@ -442,7 +442,7 @@ async function streamOrderInvoicePdf(cms, dataSource, entityMap, orderId, option
     }
   });
 }
-chunkUSNT2KNT_cjs.__name(streamOrderInvoicePdf, "streamOrderInvoicePdf");
+chunkXHPRD45G_cjs.__name(streamOrderInvoicePdf, "streamOrderInvoicePdf");
 
 exports.ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES = ORDER_INVOICE_EMAIL_ELIGIBLE_STATUSES;
 exports.buildLocalInvoicePdfForOrder = buildLocalInvoicePdfForOrder;

package/dist/{chunk-6YOQ7G5O.js → chunk-CFUSYGSA.js}

@@ -1,4 +1,4 @@
-import { __name } from './chunk-SHUYVCID.js';
+import { __name } from './chunk-5BKT4CS5.js';
 import { SESClient, SendRawEmailCommand, SendEmailCommand } from '@aws-sdk/client-ses';
 import { createRequire } from 'module';
 import nodemailer from 'nodemailer';