@infuro/cms-core 1.0.71 → 1.0.73

package/dist/admin.cjs

@@ -381,9 +381,8 @@ var init_vendor_scope = __esm({
   }
 });
 function AdminHeader() {
-  const { data: session } = react.useSession();
+  const { data: session, update } = react.useSession();
   const sessionUser = session?.user;
-  const roleLabel = sessionUser?.groupName?.trim() || (sessionUser?.isRBACAdmin ? "Administrator" : "Admin user");
   const isVendor = isVendorPortalUser(sessionUser);
   const isMobile = useIsMobile();
   const configuredLogo = process.env.NEXT_PUBLIC_ADMIN_LOGO_URL || DEFAULT_ADMIN_LOGO;
@@ -392,9 +391,125 @@ function AdminHeader() {
   const isDataLogo = React26.useMemo(() => logoSrc.startsWith("data:"), [
     logoSrc
   ]);
+  const [isSwitching, setIsSwitching] = React26.useState(false);
+  const [cookieVendorId, setCookieVendorId] = React26.useState(() => {
+    if (typeof window === "undefined") return null;
+    try {
+      const match = document.cookie.match(/(?:^|;\s*)infuro_active_vendor_id=(\d+)/);
+      if (match && match[1]) return Number(match[1]);
+      const stored = localStorage.getItem("infuro_active_vendor_id");
+      if (stored) return Number(stored);
+    } catch {
+    }
+    return null;
+  });
+  const [fetchedStores, setFetchedStores] = React26.useState(null);
+  const [fetchedRoleName, setFetchedRoleName] = React26.useState(null);
+  const [fetchedActiveVendorId, setFetchedActiveVendorId] = React26.useState(null);
+  React26.useEffect(() => {
+    if (sessionUser?.vendorStores && sessionUser.vendorStores.length > 1 && !cookieVendorId) {
+      return;
+    }
+    let isMounted = true;
+    fetch("/api/admin/vendor/context").then((res) => res.ok ? res.json() : null).then((data) => {
+      if (!isMounted || !data) return;
+      if (Array.isArray(data.vendorStores)) {
+        setFetchedStores(data.vendorStores);
+      }
+      if (data.vendorRoleName) {
+        setFetchedRoleName(data.vendorRoleName);
+      }
+      if (typeof data.activeVendorId === "number") {
+        setFetchedActiveVendorId(data.activeVendorId);
+      }
+      try {
+        localStorage.setItem("infuro_active_vendor_context", JSON.stringify(data));
+        window.dispatchEvent(new CustomEvent("infuro_vendor_context_updated", {
+          detail: data
+        }));
+      } catch {
+      }
+    }).catch(() => {
+    });
+    return () => {
+      isMounted = false;
+    };
+  }, [
+    sessionUser?.email,
+    sessionUser?.vendorStores,
+    cookieVendorId
+  ]);
+  const stores = React26.useMemo(() => {
+    if (sessionUser?.vendorStores && sessionUser.vendorStores.length > 0) {
+      return sessionUser.vendorStores;
+    }
+    return fetchedStores || [];
+  }, [
+    sessionUser?.vendorStores,
+    fetchedStores
+  ]);
+  const effectiveActiveVendorId = cookieVendorId ?? sessionUser?.activeVendorId ?? fetchedActiveVendorId;
+  const activeStore = React26.useMemo(() => {
+    return stores.find((s) => s.id === effectiveActiveVendorId) || (stores.length > 0 ? stores[0] : null);
+  }, [
+    stores,
+    effectiveActiveVendorId
+  ]);
+  const effectiveRoleName = activeStore?.roleName || sessionUser?.vendorRoleName || fetchedRoleName;
+  const roleLabel = ((isVendor || stores.length > 0) && effectiveRoleName ? effectiveRoleName : null) || sessionUser?.groupName?.trim() || (sessionUser?.isRBACAdmin ? "Administrator" : "Admin user");
   const handleLogout = /* @__PURE__ */ __name(() => {
     void adminSignOut();
   }, "handleLogout");
+  const handleSwitchStore = /* @__PURE__ */ __name(async (vendorId) => {
+    if (vendorId === activeStore?.id || isSwitching) return;
+    try {
+      setIsSwitching(true);
+      document.cookie = `infuro_active_vendor_id=${vendorId}; path=/; max-age=31536000; SameSite=Lax`;
+      try {
+        localStorage.setItem("infuro_active_vendor_id", String(vendorId));
+      } catch {
+      }
+      setCookieVendorId(vendorId);
+      const res = await fetch("/api/admin/vendor/switch", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          vendorId
+        })
+      });
+      if (res.ok) {
+        const data = await res.json();
+        try {
+          localStorage.setItem("infuro_active_vendor_context", JSON.stringify(data));
+          window.dispatchEvent(new CustomEvent("infuro_vendor_context_updated", {
+            detail: data
+          }));
+        } catch {
+        }
+        if (typeof update === "function") {
+          try {
+            await update({
+              activeVendorId: vendorId,
+              vendorRole: data.vendorRole,
+              vendorRoleId: data.vendorRoleId,
+              vendorRoleName: data.vendorRoleName,
+              isVendorRoleOwner: data.isVendorRoleOwner,
+              vendorEntityPerms: data.vendorEntityPerms,
+              vendorStores: data.vendorStores
+            });
+          } catch {
+          }
+        }
+        window.location.reload();
+      }
+    } catch (err) {
+      console.error("Failed to switch store:", err);
+    } finally {
+      setIsSwitching(false);
+    }
+  }, "handleSwitchStore");
   return /* @__PURE__ */ React.createElement("header", {
     className: "bg-white border-b border-gray-200 px-4 py-2"
   }, /* @__PURE__ */ React.createElement("div", {
@@ -427,7 +542,46 @@ function AdminHeader() {
     className: "text-sm font-semibold text-gray-800"
   }, "Infuro"))), /* @__PURE__ */ React.createElement("div", {
     className: "flex items-center space-x-3"
-  }, /* @__PURE__ */ React.createElement(DropdownMenu, null, /* @__PURE__ */ React.createElement(DropdownMenuTrigger, {
+  }, stores.length > 1 && /* @__PURE__ */ React.createElement(DropdownMenu, null, /* @__PURE__ */ React.createElement(DropdownMenuTrigger, {
+    asChild: true
+  }, /* @__PURE__ */ React.createElement(Button, {
+    variant: "outline",
+    size: "sm",
+    disabled: isSwitching,
+    className: "h-8 px-2.5 flex items-center gap-1.5 border-gray-200 bg-gray-50/80 hover:bg-gray-100 text-gray-800 text-xs font-medium rounded-lg shadow-none transition-colors"
+  }, isSwitching ? /* @__PURE__ */ React.createElement(LucideIcons.Loader2, {
+    className: "h-3.5 w-3.5 animate-spin text-gray-500 shrink-0"
+  }) : /* @__PURE__ */ React.createElement(LucideIcons.Store, {
+    className: "h-3.5 w-3.5 text-gray-500 shrink-0"
+  }), /* @__PURE__ */ React.createElement("span", {
+    className: "max-w-[130px] sm:max-w-[180px] truncate font-semibold"
+  }, activeStore?.name || "Select Store"), activeStore?.roleName && /* @__PURE__ */ React.createElement("span", {
+    className: "hidden sm:inline-block px-1.5 py-0.5 text-[10px] font-medium bg-gray-200/80 text-gray-700 rounded"
+  }, activeStore.roleName), /* @__PURE__ */ React.createElement(LucideIcons.ChevronDown, {
+    className: "h-3 w-3 text-gray-400 shrink-0"
+  }))), /* @__PURE__ */ React.createElement(DropdownMenuContent, {
+    align: "end",
+    className: "w-56 p-1"
+  }, /* @__PURE__ */ React.createElement(DropdownMenuLabel, {
+    className: "text-[11px] font-semibold text-gray-500 uppercase px-2 py-1"
+  }, "Switch Store"), /* @__PURE__ */ React.createElement(DropdownMenuSeparator, {
+    className: "my-1"
+  }), stores.map((st) => {
+    const isSelected = st.id === activeStore?.id;
+    return /* @__PURE__ */ React.createElement(DropdownMenuItem, {
+      key: st.id,
+      onClick: /* @__PURE__ */ __name(() => handleSwitchStore(st.id), "onClick"),
+      className: "flex items-center justify-between px-2.5 py-2 cursor-pointer text-xs rounded-md"
+    }, /* @__PURE__ */ React.createElement("div", {
+      className: "flex flex-col gap-0.5 truncate pr-2"
+    }, /* @__PURE__ */ React.createElement("span", {
+      className: `font-medium ${isSelected ? "text-primary font-semibold" : "text-gray-800"}`
+    }, st.name), st.roleName && /* @__PURE__ */ React.createElement("span", {
+      className: "text-[10px] text-gray-400"
+    }, st.roleName)), isSelected && /* @__PURE__ */ React.createElement(LucideIcons.Check, {
+      className: "h-3.5 w-3.5 text-primary shrink-0"
+    }));
+  }))), /* @__PURE__ */ React.createElement(DropdownMenu, null, /* @__PURE__ */ React.createElement(DropdownMenuTrigger, {
     asChild: true
   }, /* @__PURE__ */ React.createElement(Button, {
     variant: "ghost",
@@ -895,7 +1049,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.71" ;
+    CMS_VERSION = "1.0.73" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -1003,8 +1157,54 @@ function AdminSidebar({ variant = "sidebar" }) {
   const searchParams = navigation.useSearchParams();
   const { data: session } = react.useSession();
   const sessionUser = session?.user;
-  const showVendorOnboard = canOnboardVendors(sessionUser);
-  const vendorPortal = isVendorPortalUser(sessionUser);
+  const [vendorContext, setVendorContext] = React26.useState(() => {
+    if (typeof window === "undefined") return null;
+    try {
+      const stored = localStorage.getItem("infuro_active_vendor_context");
+      if (stored) return JSON.parse(stored);
+    } catch {
+    }
+    return null;
+  });
+  React26.useEffect(() => {
+    const onContextUpdated = /* @__PURE__ */ __name((e) => {
+      const detail = e.detail;
+      if (detail) setVendorContext(detail);
+    }, "onContextUpdated");
+    window.addEventListener("infuro_vendor_context_updated", onContextUpdated);
+    fetch("/api/admin/vendor/context").then((r) => r.ok ? r.json() : null).then((data) => {
+      if (data) {
+        setVendorContext(data);
+        try {
+          localStorage.setItem("infuro_active_vendor_context", JSON.stringify(data));
+        } catch {
+        }
+      }
+    }).catch(() => {
+    });
+    return () => {
+      window.removeEventListener("infuro_vendor_context_updated", onContextUpdated);
+    };
+  }, []);
+  const effectiveSessionUser = React26.useMemo(() => {
+    if (!sessionUser) return null;
+    if (!vendorContext) return sessionUser;
+    return {
+      ...sessionUser,
+      activeVendorId: vendorContext.activeVendorId ?? sessionUser.activeVendorId,
+      vendorRole: vendorContext.vendorRole ?? sessionUser.vendorRole,
+      vendorRoleId: vendorContext.vendorRoleId ?? sessionUser.vendorRoleId,
+      vendorRoleName: vendorContext.vendorRoleName ?? sessionUser.vendorRoleName,
+      isVendorRoleOwner: vendorContext.isVendorRoleOwner ?? sessionUser.isVendorRoleOwner,
+      vendorEntityPerms: vendorContext.vendorEntityPerms ?? sessionUser.vendorEntityPerms,
+      vendorStores: vendorContext.vendorStores ?? sessionUser.vendorStores
+    };
+  }, [
+    sessionUser,
+    vendorContext
+  ]);
+  const showVendorOnboard = canOnboardVendors(effectiveSessionUser);
+  const vendorPortal = isVendorPortalUser(effectiveSessionUser);
   const { customNavItems, customNavSections = [], storeEnabled, multiVendorEnabled, eventsEnabled, vendorCanCreateCategories, vendorCanCreateCollections, vendorCanCreateBrands } = React26.useContext(exports.AdminConfigContext);
   const showStoreNav = storeEnabled || vendorPortal;
   const showPlatformNav = !vendorPortal;
@@ -1031,8 +1231,8 @@ function AdminSidebar({ variant = "sidebar" }) {
   const headingCls = "text-[11px] font-semibold text-gray-400 uppercase tracking-wider px-2.5 mb-1.5";
   const asideCls = isDrawer ? "w-full h-full min-h-0 bg-white flex flex-col overflow-hidden" : "w-52 h-full min-h-0 bg-white border-r border-gray-200 flex-shrink-0 flex flex-col overflow-hidden";
   const canReadEntity = /* @__PURE__ */ __name((entity) => {
-    if (!sessionUser) return true;
-    return sessionHasEntityAccessFromExplanation(sessionUser, entity, "read");
+    if (!effectiveSessionUser) return true;
+    return sessionHasEntityAccessFromExplanation(effectiveSessionUser, entity, "read");
   }, "canReadEntity");
   return /* @__PURE__ */ React.createElement("aside", {
     className: asideCls
@@ -1242,12 +1442,12 @@ function AdminSidebar({ variant = "sidebar" }) {
     className: `${linkCls} ${isActive("/admin/vendor-profile") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.User, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/vendor-profile") ? iconActive : iconInactive}`
-  }), "Profile")), canManageVendorTeam(sessionUser) && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Profile")), canManageVendorTeam(effectiveSessionUser) && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/vendor-team",
     className: `${linkCls} ${isActive("/admin/vendor-team") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Users, {
     className: `h-4 w-4 mr-2 ${isActive("/admin/vendor-team") ? iconActive : iconInactive}`
-  }), "Team")), canManageVendorRoles(sessionUser) && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
+  }), "Team")), canManageVendorRoles(effectiveSessionUser) && /* @__PURE__ */ React.createElement("li", null, /* @__PURE__ */ React.createElement(Link2__default.default, {
     href: "/admin/vendor-roles",
     className: `${linkCls} ${isActive("/admin/vendor-roles") ? linkActive : linkInactive}`
   }, /* @__PURE__ */ React.createElement(LucideIcons.Shield, {
@@ -6438,6 +6638,20 @@ var init_FieldConfiguration = __esm({
   }
 });
 
+// src/lib/slug-sanitizer.ts
+function sanitizeSlugInput(value) {
+  return value.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9-]/g, "").replace(/-+/g, "-");
+}
+function normalizeSlug(value) {
+  return sanitizeSlugInput(value).replace(/^-+|-+$/g, "");
+}
+var init_slug_sanitizer = __esm({
+  "src/lib/slug-sanitizer.ts"() {
+    __name(sanitizeSlugInput, "sanitizeSlugInput");
+    __name(normalizeSlug, "normalizeSlug");
+  }
+});
+
 // src/components/Admin/FormBuilder.tsx
 var FormBuilder_exports = {};
 __export(FormBuilder_exports, {
@@ -6516,18 +6730,6 @@ function FormBuilder({ formId, duplicateFromId }) {
     loadId,
     loadFormData
   ]);
-  React26.useEffect(() => {
-    if (formData.name && !formData.slug) {
-      const generatedSlug = formData.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
-      setFormData((prev) => ({
-        ...prev,
-        slug: generatedSlug
-      }));
-    }
-  }, [
-    formData.name,
-    formData.slug
-  ]);
   const addField = /* @__PURE__ */ __name(() => {
     const newField = {
       id: `field_${Date.now()}`,
@@ -6632,6 +6834,7 @@ function FormBuilder({ formId, duplicateFromId }) {
       setErrors([]);
       const payload = {
         ...formData,
+        slug: normalizeSlug(formData.slug),
         published: isPublishing ? true : formData.published,
         fields: formData.fields.map((field) => {
           const numericId = typeof field.id === "number" ? field.id : /^\d+$/.test(String(field.id)) ? parseInt(String(field.id), 10) : void 0;
@@ -6762,8 +6965,12 @@ function FormBuilder({ formId, duplicateFromId }) {
     value: formData.slug,
     onChange: /* @__PURE__ */ __name((e) => setFormData((prev) => ({
       ...prev,
-      slug: e.target.value
+      slug: sanitizeSlugInput(e.target.value)
     })), "onChange"),
+    onBlur: /* @__PURE__ */ __name(() => setFormData((prev) => ({
+      ...prev,
+      slug: normalizeSlug(prev.slug)
+    })), "onBlur"),
     placeholder: "form-slug"
   })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
     className: "block text-sm font-medium text-gray-700 mb-1"
@@ -6952,6 +7159,7 @@ var init_FormBuilder = __esm({
     init_switch();
     init_badge();
     init_FieldConfiguration();
+    init_slug_sanitizer();
     __name(FormBuilder, "FormBuilder");
   }
 });
@@ -8001,9 +8209,10 @@ function BlogEditor({ existingBlog, duplicateSource }) {
       setIsSaving(false);
       return;
     }
+    const normalizedSlug = normalizeSlug(slug);
     const body = {
       title,
-      slug,
+      slug: normalizedSlug,
       content,
       published: isPublishing,
       tags,
@@ -8273,7 +8482,8 @@ function BlogEditor({ existingBlog, duplicateSource }) {
     type: "text",
     placeholder: "blog-post-url",
     value: slug,
-    onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
+    onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+    onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
     className: "h-8 text-sm"
   }), /* @__PURE__ */ React.createElement("p", {
     className: "text-xs text-gray-500 mt-1"
@@ -8366,6 +8576,7 @@ var init_BlogEditorPage = __esm({
     init_JoditRichText();
     init_CategoryAutocomplete();
     init_UserAutocomplete();
+    init_slug_sanitizer();
     __name(BlogEditor, "BlogEditor");
   }
 });
@@ -24475,7 +24686,8 @@ function DetailPageHeader({ title, subtitle, backHref, backLabel = "Back", close
       size: "icon",
       className: "h-8 w-8 border border-gray-600 bg-transparent text-white hover:bg-gray-700",
       onClick: item.onClick,
-      title: item.label
+      title: item.label,
+      disabled: item.disabled
     }, /* @__PURE__ */ React.createElement(Icon2, {
       className: "h-4 w-4"
     }), /* @__PURE__ */ React.createElement("span", {
@@ -24489,7 +24701,8 @@ function DetailPageHeader({ title, subtitle, backHref, backLabel = "Back", close
       key: i,
       variant: item.variant ?? "outline",
       size: "sm",
-      onClick: item.onClick
+      onClick: item.onClick,
+      disabled: item.disabled
     }, /* @__PURE__ */ React.createElement(Icon2, {
       className: "h-4 w-4 mr-1"
     }), item.label);
@@ -26950,14 +27163,55 @@ function OrderPlacementPage({ editOrderId }) {
             status: "available"
           });
           if (q.length >= 2) params.set("search", q);
-          const res = await fetch(`/api/products?${params}`);
+          const [res, epRes, evRes] = await Promise.all([
+            fetch(`/api/products?${params}`),
+            fetch("/api/event_products?limit=500").catch(() => null),
+            fetch("/api/events?limit=500").catch(() => null)
+          ]);
           if (!res.ok) {
             setProductHits([]);
             return;
           }
           const body = await res.json();
           const hits = Array.isArray(body.data) ? body.data : [];
-          hits.forEach((p) => productCache.current.set(p.id, p));
+          const eventMap = /* @__PURE__ */ new Map();
+          if (evRes && evRes.ok) {
+            const evBody = await evRes.json().catch(() => ({}));
+            const evList = Array.isArray(evBody.data) ? evBody.data : [];
+            for (const ev of evList) {
+              if (ev && ev.id) eventMap.set(Number(ev.id), ev);
+            }
+          }
+          const productEventLimits = /* @__PURE__ */ new Map();
+          if (epRes && epRes.ok) {
+            const epBody = await epRes.json().catch(() => ({}));
+            const epList = Array.isArray(epBody.data) ? epBody.data : [];
+            for (const ep of epList) {
+              const ev = eventMap.get(Number(ep.eventId));
+              if (ev) {
+                const maxGroup = typeof ev.maxGroupPurchaseQuantity === "number" && Number.isFinite(ev.maxGroupPurchaseQuantity) && ev.maxGroupPurchaseQuantity > 0 ? Math.floor(ev.maxGroupPurchaseQuantity) : null;
+                const allowsGroup = ev.allowGroupOrders !== false;
+                let cap;
+                if (maxGroup !== null && maxGroup > 1) {
+                  cap = maxGroup;
+                } else if (!allowsGroup) {
+                  cap = 1;
+                } else if (maxGroup !== null) {
+                  cap = maxGroup;
+                } else {
+                  cap = 999;
+                }
+                productEventLimits.set(Number(ep.productId), cap);
+              }
+            }
+          }
+          hits.forEach((p) => {
+            const cap = productEventLimits.get(p.id);
+            if (cap !== void 0) {
+              p.maxPurchaseLimit = cap;
+            }
+            productCache.current.set(p.id, p);
+          });
           setProductHits(hits);
         } catch {
           setProductHits([]);
@@ -27234,6 +27488,7 @@ function OrderPlacementPage({ editOrderId }) {
       sonner.toast.message("Select one or more products in the list first");
       return;
     }
+    let reachedLimit = false;
     setLines((prev) => {
       const next = [
         ...prev
@@ -27241,29 +27496,47 @@ function OrderPlacementPage({ editOrderId }) {
       for (const id of stagedIds) {
         const hit = productCache.current.get(id);
         if (!hit) continue;
+        const maxAllowed = typeof hit.maxPurchaseLimit === "number" && hit.maxPurchaseLimit > 0 ? hit.maxPurchaseLimit : 99999;
         const idx = next.findIndex((l) => l.productId === id);
         if (idx >= 0) {
           const row = next[idx];
-          next[idx] = {
-            ...row,
-            quantity: row.quantity + 1
-          };
-        } else next.push({
-          key: String(id),
-          productId: id,
-          label: hit.name ?? `Product #${id}`,
-          sku: hit.sku,
-          quantity: 1
-        });
+          if (row.quantity >= maxAllowed) {
+            reachedLimit = true;
+          } else {
+            next[idx] = {
+              ...row,
+              quantity: Math.min(maxAllowed, row.quantity + 1)
+            };
+          }
+        } else {
+          next.push({
+            key: String(id),
+            productId: id,
+            label: hit.name ?? `Product #${id}`,
+            sku: hit.sku,
+            quantity: 1
+          });
+        }
       }
       return next;
     });
     setStagedIds(/* @__PURE__ */ new Set());
-    sonner.toast.success("Added to cart");
+    if (reachedLimit) {
+      sonner.toast.error("One or more items reached their maximum purchase limit");
+    } else {
+      sonner.toast.success("Added to cart");
+    }
   }
   __name(addStagedToCart, "addStagedToCart");
   function updateQty(key, quantity) {
-    const q = Math.min(99999, Math.max(1, Math.floor(quantity) || 1));
+    const line = lines.find((l) => l.key === key);
+    const hit = line ? productCache.current.get(line.productId) : null;
+    const maxAllowed = typeof hit?.maxPurchaseLimit === "number" && hit.maxPurchaseLimit > 0 ? hit.maxPurchaseLimit : 99999;
+    const parsed = Math.max(1, Math.floor(quantity) || 1);
+    const q = Math.min(maxAllowed, parsed);
+    if (parsed > maxAllowed) {
+      sonner.toast.error(`Maximum purchase limit for "${line?.label ?? "this product"}" is ${maxAllowed}`);
+    }
     setLines((prev) => prev.map((l) => l.key === key ? {
       ...l,
       quantity: q
@@ -27313,6 +27586,13 @@ function OrderPlacementPage({ editOrderId }) {
       sonner.toast.error("Add at least one product to the cart");
       return;
     }
+    for (const line of lines) {
+      const hit = productCache.current.get(line.productId);
+      if (hit?.maxPurchaseLimit && line.quantity > hit.maxPurchaseLimit) {
+        sonner.toast.error(`Quantity for "${line.label}" cannot exceed maximum allowed limit of ${hit.maxPurchaseLimit}`);
+        return;
+      }
+    }
     const unknown = preview?.lines.filter((l) => !l.found) ?? [];
     if (unknown.length > 0) {
       sonner.toast.error(`One or more items could not be validated: ${unknown.map((u) => u.productName).join(", ")}`);
@@ -27975,6 +28255,7 @@ function OrderPlacementPage({ editOrderId }) {
     }, /* @__PURE__ */ React.createElement(Input, {
       type: "number",
       min: 1,
+      max: productCache.current.get(line.productId)?.maxPurchaseLimit ?? void 0,
       className: "h-8 w-14 ml-auto text-right",
       value: line.quantity,
       onChange: /* @__PURE__ */ __name((e) => updateQty(line.key, Number(e.target.value)), "onChange"),
@@ -30575,9 +30856,10 @@ function SaveButton({ pageId, pageData, existingSeoId, onSeoIdChange, onSaved, c
           }
         }
       }
+      const normalizedSlug = normalizeSlug(pageData.slug);
       const payload = {
         title: pageData.title,
-        slug: pageData.slug,
+        slug: normalizedSlug,
         content,
         published: pageData.published
       };
@@ -30817,7 +31099,8 @@ function PageBuilderPage({ pageId }) {
     className: "block text-xs font-medium text-gray-600 mb-1"
   }, "Slug *"), /* @__PURE__ */ React26__namespace.default.createElement(Input, {
     value: slug,
-    onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
+    onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+    onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
     placeholder: "page-url-slug",
     className: "h-8 text-sm"
   })))), /* @__PURE__ */ React26__namespace.default.createElement(RightSidebar, {
@@ -30854,6 +31137,7 @@ var init_PageBuilderPage = __esm({
     init_admin_config_context();
     init_registry();
     init_ImageOrUrlField();
+    init_slug_sanitizer();
     __name(createSelectable, "createSelectable");
     __name(buildEditorResolver, "buildEditorResolver");
     __name(getIcon, "getIcon");
@@ -31087,7 +31371,8 @@ function BrandEditPage({ brandId }) {
       ]);
       return;
     }
-    if (!slug.trim()) {
+    const normalizedSlug = normalizeSlug(slug);
+    if (!normalizedSlug) {
       setErrors([
         "Slug is required"
       ]);
@@ -31095,10 +31380,10 @@ function BrandEditPage({ brandId }) {
     }
     setSaving(true);
     try {
-      const savedSeoId = await saveSeo(seo, slug.trim(), seoId);
+      const savedSeoId = await saveSeo(seo, normalizedSlug, seoId);
       const payload = {
         name: name.trim(),
-        slug: slug.trim(),
+        slug: normalizedSlug,
         description: description || null,
         logo: logo || null,
         active,
@@ -31188,7 +31473,9 @@ function BrandEditPage({ brandId }) {
     }, "Slug *"), /* @__PURE__ */ React.createElement("input", {
       type: "text",
       value: slug,
-      onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
+      placeholder: "brand-slug",
+      onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+      onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
       className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm",
       required: true
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
@@ -31248,6 +31535,7 @@ var init_BrandEditPage = __esm({
     init_DetailPageHeader();
     init_vendor_scope();
     init_ImageOrUrlField();
+    init_slug_sanitizer();
     isCreate = /* @__PURE__ */ __name((id) => id === "create", "isCreate");
     __name(BrandEditPage, "BrandEditPage");
   }
@@ -32712,11 +33000,21 @@ function ProductEditPage({ productId }) {
           const pcData = await pcRes.json();
           const pcs = Array.isArray(pcData.data) ? pcData.data : [];
           if (pcs.length > 0) {
-            setTaxRows(pcs.map((p) => ({
-              taxId: p.taxId,
-              rate: p.rate != null && p.rate !== "" ? String(p.rate) : ""
-            })));
-            const firstRefund = pcs[0].refundPolicyId;
+            const validTaxPcs = pcs.filter((p) => p.taxId != null && Number(p.taxId) > 0);
+            if (validTaxPcs.length > 0) {
+              setTaxRows(validTaxPcs.map((p) => ({
+                taxId: p.taxId,
+                rate: p.rate != null && p.rate !== "" ? String(p.rate) : ""
+              })));
+            } else if (!cancelled) {
+              setTaxRows([
+                {
+                  taxId: "",
+                  rate: ""
+                }
+              ]);
+            }
+            const firstRefund = pcs.find((p) => p.refundPolicyId != null)?.refundPolicyId;
             setRefundPolicyId(firstRefund != null ? Number(firstRefund) : null);
           } else if (!cancelled) {
             setTaxRows([
@@ -32725,6 +33023,7 @@ function ProductEditPage({ productId }) {
                 rate: ""
               }
             ]);
+            setRefundPolicyId(null);
           }
         }
         const paRes = await fetch(`/api/product_attributes?productId=${sourceProductId}&limit=100`);
@@ -33101,14 +33400,7 @@ function ProductEditPage({ productId }) {
         if (a == null || b == null) return true;
         return Math.abs(a - b) > 1e-6;
       }, "ratesDiffer");
-      const wantedConfig = /* @__PURE__ */ new Map();
-      for (const row of taxRows) {
-        if (row.taxId === "") continue;
-        wantedConfig.set(row.taxId, {
-          rate: parseTaxRate(row.rate),
-          refundPolicyId
-        });
-      }
+      const validTaxRows = taxRows.filter((row) => row.taxId !== "");
       console.log("[product_config rows to save]:", taxRows, "refundPolicyId:", refundPolicyId);
       const pcListRes = await fetch(`/api/product_config?productId=${savedId}&limit=200`);
       const pcListData = pcListRes.ok ? await pcListRes.json() : {
@@ -33116,17 +33408,60 @@ function ProductEditPage({ productId }) {
       };
       console.log("[product existing pc rows]:", pcListData);
       const existingPc = Array.isArray(pcListData.data) ? pcListData.data : [];
-      for (const ep of existingPc) {
-        if (!wantedConfig.has(ep.taxId)) {
-          await fetch(`/api/product_config/${ep.id}`, {
-            method: "DELETE"
-          });
+      if (validTaxRows.length > 0) {
+        const wantedTaxIds = new Set(validTaxRows.map((r) => Number(r.taxId)));
+        for (const ep of existingPc) {
+          if (ep.taxId == null || !wantedTaxIds.has(Number(ep.taxId))) {
+            await fetch(`/api/product_config/${ep.id}`, {
+              method: "DELETE"
+            });
+          }
         }
-      }
-      const survivors = existingPc.filter((ep) => wantedConfig.has(ep.taxId));
-      for (const [taxId, cfg] of wantedConfig) {
-        const ep = survivors.find((e) => e.taxId === taxId);
-        if (!ep) {
+        for (const row of validTaxRows) {
+          const taxId = Number(row.taxId);
+          const rate = parseTaxRate(row.rate);
+          const ep = existingPc.find((e) => e.taxId != null && Number(e.taxId) === taxId);
+          if (!ep) {
+            await fetch("/api/product_config", {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/json"
+              },
+              body: JSON.stringify({
+                productId: Number(savedId),
+                taxId,
+                rate,
+                refundPolicyId
+              })
+            });
+          } else {
+            const existingRate = ep.rate == null || String(ep.rate).trim() === "" ? null : Number(ep.rate);
+            const er = Number.isFinite(existingRate) ? existingRate : null;
+            const policyChanged = ep.refundPolicyId !== refundPolicyId;
+            if (ratesDiffer(er, rate) || policyChanged) {
+              await fetch(`/api/product_config/${ep.id}`, {
+                method: "PUT",
+                headers: {
+                  "Content-Type": "application/json"
+                },
+                body: JSON.stringify({
+                  rate,
+                  refundPolicyId
+                })
+              });
+            }
+          }
+        }
+      } else if (refundPolicyId != null) {
+        const nullTaxRow = existingPc.find((e) => e.taxId == null);
+        for (const ep of existingPc) {
+          if (ep.id !== nullTaxRow?.id) {
+            await fetch(`/api/product_config/${ep.id}`, {
+              method: "DELETE"
+            });
+          }
+        }
+        if (!nullTaxRow) {
           await fetch("/api/product_config", {
             method: "POST",
             headers: {
@@ -33134,27 +33469,27 @@ function ProductEditPage({ productId }) {
             },
             body: JSON.stringify({
               productId: Number(savedId),
-              taxId,
-              rate: cfg.rate,
-              refundPolicyId: cfg.refundPolicyId
+              taxId: null,
+              rate: null,
+              refundPolicyId
             })
           });
-        } else {
-          const existingRate = ep.rate == null || String(ep.rate).trim() === "" ? null : Number(ep.rate);
-          const er = Number.isFinite(existingRate) ? existingRate : null;
-          const policyChanged = ep.refundPolicyId !== cfg.refundPolicyId;
-          if (ratesDiffer(er, cfg.rate) || policyChanged) {
-            await fetch(`/api/product_config/${ep.id}`, {
-              method: "PUT",
-              headers: {
-                "Content-Type": "application/json"
-              },
-              body: JSON.stringify({
-                rate: cfg.rate,
-                refundPolicyId: cfg.refundPolicyId
-              })
-            });
-          }
+        } else if (nullTaxRow.refundPolicyId !== refundPolicyId) {
+          await fetch(`/api/product_config/${nullTaxRow.id}`, {
+            method: "PUT",
+            headers: {
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+              refundPolicyId
+            })
+          });
+        }
+      } else {
+        for (const ep of existingPc) {
+          await fetch(`/api/product_config/${ep.id}`, {
+            method: "DELETE"
+          });
         }
       }
       if (hasVariants) {
@@ -34070,7 +34405,8 @@ function CollectionEditPage({ collectionId }) {
       ]);
       return;
     }
-    if (!slug.trim()) {
+    const normalizedSlug = normalizeSlug(slug);
+    if (!normalizedSlug) {
       setErrors([
         "Slug is required"
       ]);
@@ -34078,10 +34414,10 @@ function CollectionEditPage({ collectionId }) {
     }
     setSaving(true);
     try {
-      const savedSeoId = await saveSeo(seo, slug.trim(), seoId);
+      const savedSeoId = await saveSeo(seo, normalizedSlug, seoId);
       const payload = {
         name: name.trim(),
-        slug: slug.trim(),
+        slug: normalizedSlug,
         hsn: hsn.trim() || null,
         categoryId: categoryId || null,
         brandId: brandId || null,
@@ -34250,7 +34586,9 @@ function CollectionEditPage({ collectionId }) {
     }, "Slug *"), /* @__PURE__ */ React.createElement("input", {
       type: "text",
       value: slug,
-      onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
+      placeholder: "collection-slug",
+      onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+      onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
       className: inputCls4,
       required: true
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
@@ -34486,6 +34824,7 @@ var init_CollectionEditPage = __esm({
     init_admin_config_context();
     init_category_related_product_labels();
     init_ImageOrUrlField();
+    init_slug_sanitizer();
     isCreate3 = /* @__PURE__ */ __name((id) => id === "create", "isCreate");
     emptySlide = /* @__PURE__ */ __name(() => ({
       url: "",
@@ -35665,7 +36004,9 @@ var init_event_entity_types = __esm({
 // src/admin/pages/EventEditPage.tsx
 var EventEditPage_exports = {};
 __export(EventEditPage_exports, {
-  default: () => EventEditPage
+  default: () => EventEditPage,
+  normalizeSlug: () => normalizeSlug2,
+  sanitizeSlugInput: () => sanitizeSlugInput2
 });
 function RequiredLabel({ children }) {
   return /* @__PURE__ */ React.createElement("label", {
@@ -35674,6 +36015,12 @@ function RequiredLabel({ children }) {
     className: "text-red-600"
   }, "*"));
 }
+function sanitizeSlugInput2(value) {
+  return value.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9-]/g, "").replace(/-+/g, "-");
+}
+function normalizeSlug2(value) {
+  return sanitizeSlugInput2(value).replace(/^-+|-+$/g, "");
+}
 function toIsoOrNull(value, timezone) {
   const trimmed = value.trim();
   if (!trimmed) return null;
@@ -35764,7 +36111,7 @@ function EventEditPage({ eventId }) {
   const [supportContact, setSupportContact] = React26.useState("");
   const [allowGroupOrders, setAllowGroupOrders] = React26.useState(false);
   const [sendIndividualTicketPDFToAttendees, setSendIndividualTicketPDFToAttendees] = React26.useState(false);
-  const [maxGroupPurchaseQuantity, setMaxGroupPurchaseQuantity] = React26.useState("");
+  const [maxGroupPurchaseQuantity, setMaxGroupPurchaseQuantity] = React26.useState("1");
   const [sponsors, setSponsors] = React26.useState([]);
   const [agenda, setAgenda] = React26.useState([]);
   const [workshops, setWorkshops] = React26.useState([]);
@@ -35890,9 +36237,10 @@ function EventEditPage({ eventId }) {
         }
         setOfficialWebsiteUrl(data.officialWebsiteUrl ?? "");
         setSupportContact(data.supportContact ?? "");
-        setAllowGroupOrders(data.allowGroupOrders ?? false);
+        const loadedAllowGroup = data.allowGroupOrders ?? false;
+        setAllowGroupOrders(loadedAllowGroup);
         setSendIndividualTicketPDFToAttendees(data.sendIndividualTicketPDFToAttendees ?? false);
-        setMaxGroupPurchaseQuantity(data.maxGroupPurchaseQuantity != null ? String(data.maxGroupPurchaseQuantity) : "");
+        setMaxGroupPurchaseQuantity(data.maxGroupPurchaseQuantity != null ? String(data.maxGroupPurchaseQuantity) : loadedAllowGroup ? "10" : "1");
         setSponsors(parseNamedListFromApi(data.sponsors, "sponsor"));
         setAgenda(parseNamedListFromApi(data.agenda, "agenda"));
         setWorkshops(parseNamedListFromApi(data.workshops, "workshop"));
@@ -35938,8 +36286,13 @@ function EventEditPage({ eventId }) {
   ]);
   const buildPayload = /* @__PURE__ */ __name(() => {
     const nextErrors = [];
+    const normalizedSlug = normalizeSlug2(slug);
     if (!name.trim()) nextErrors.push("Name is required");
-    if (!slug.trim()) nextErrors.push("Slug is required");
+    if (!normalizedSlug) {
+      nextErrors.push("Slug is required");
+    } else if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(normalizedSlug)) {
+      nextErrors.push("Slug must contain only lowercase letters, numbers, and hyphens without leading or trailing hyphens or slashes");
+    }
     if (!startDate.trim()) nextErrors.push("Event Start Date & Time is required");
     if (!endDate.trim()) nextErrors.push("Event End Date & Time is required");
     if (startDate.trim() && !timezone.trim()) {
@@ -35965,6 +36318,20 @@ function EventEditPage({ eventId }) {
         nextErrors.push("Event End Date & Time must be after Event Start Date & Time");
       }
     }
+    if (registrationOpensAt.trim() && registrationClosesAt.trim()) {
+      const regOpen = new Date(toIsoOrNull(registrationOpensAt, timezone) ?? "");
+      const regClose = new Date(toIsoOrNull(registrationClosesAt, timezone) ?? "");
+      if (!Number.isNaN(regOpen.getTime()) && !Number.isNaN(regClose.getTime()) && regClose < regOpen) {
+        nextErrors.push("Registration Closes Date & Time must be after Registration Opens Date & Time");
+      }
+    }
+    if (registrationClosesAt.trim() && endDate.trim()) {
+      const regClose = new Date(toIsoOrNull(registrationClosesAt, timezone) ?? "");
+      const end = new Date(toIsoOrNull(endDate, timezone) ?? "");
+      if (!Number.isNaN(regClose.getTime()) && !Number.isNaN(end.getTime()) && regClose > end) {
+        nextErrors.push("Registration cannot close after Event End Date & Time");
+      }
+    }
     if (additionalVenueDetails.length > ADDITIONAL_VENUE_MAX_CHARS) {
       nextErrors.push(`Additional Venue Details must be ${ADDITIONAL_VENUE_MAX_CHARS} characters or fewer`);
     }
@@ -35974,7 +36341,7 @@ function EventEditPage({ eventId }) {
     }
     const payload = {
       name: name.trim(),
-      slug: slug.trim(),
+      slug: normalizedSlug,
       description: description.trim() || null,
       isActive: create && vendorPortal && approvalOn ? false : isActive,
       comingSoon,
@@ -36002,7 +36369,7 @@ function EventEditPage({ eventId }) {
       supportContact: supportContact.trim() || null,
       allowGroupOrders,
       sendIndividualTicketPDFToAttendees,
-      maxGroupPurchaseQuantity: maxGroupPurchaseQuantity.trim() ? Number(maxGroupPurchaseQuantity) : null,
+      maxGroupPurchaseQuantity: allowGroupOrders ? Number(maxGroupPurchaseQuantity) > 0 ? Number(maxGroupPurchaseQuantity) : 10 : 1,
       sponsors: namedListToPayload(sponsors, {
         legacySponsorKeys: true
       }),
@@ -36270,9 +36637,16 @@ function EventEditPage({ eventId }) {
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: labelCls6
     }, "Slug"), /* @__PURE__ */ React.createElement("input", {
+      id: "event-slug",
       type: "text",
       value: slug,
-      onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
+      placeholder: "event-slug",
+      onChange: /* @__PURE__ */ __name((e) => {
+        setSlug(sanitizeSlugInput2(e.target.value));
+      }, "onChange"),
+      onBlur: /* @__PURE__ */ __name(() => {
+        setSlug((prev) => normalizeSlug2(prev));
+      }, "onBlur"),
       className: inputCls6
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: labelCls6
@@ -36532,7 +36906,16 @@ function EventEditPage({ eventId }) {
     }, "Max group purchase quantity"), /* @__PURE__ */ React.createElement("input", {
       type: "number",
       value: maxGroupPurchaseQuantity,
-      onChange: /* @__PURE__ */ __name((e) => setMaxGroupPurchaseQuantity(e.target.value), "onChange"),
+      onChange: /* @__PURE__ */ __name((e) => {
+        const val = e.target.value;
+        setMaxGroupPurchaseQuantity(val);
+        const num = Number(val);
+        if (Number.isFinite(num) && num > 1) {
+          setAllowGroupOrders(true);
+        } else if (Number.isFinite(num) && num <= 1) {
+          setAllowGroupOrders(false);
+        }
+      }, "onChange"),
       className: inputCls6,
       min: 1
     })), /* @__PURE__ */ React.createElement("div", {
@@ -36542,7 +36925,18 @@ function EventEditPage({ eventId }) {
     }, /* @__PURE__ */ React.createElement("input", {
       type: "checkbox",
       checked: allowGroupOrders,
-      onChange: /* @__PURE__ */ __name((e) => setAllowGroupOrders(e.target.checked), "onChange"),
+      onChange: /* @__PURE__ */ __name((e) => {
+        const checked = e.target.checked;
+        setAllowGroupOrders(checked);
+        if (!checked) {
+          setMaxGroupPurchaseQuantity("1");
+        } else {
+          const current = Number(maxGroupPurchaseQuantity);
+          if (!Number.isFinite(current) || current <= 1) {
+            setMaxGroupPurchaseQuantity("10");
+          }
+        }
+      }, "onChange"),
       className: "h-4 w-4 rounded border-gray-300"
     }), /* @__PURE__ */ React.createElement("span", {
       className: "text-sm text-gray-900"
@@ -36616,6 +37010,8 @@ var init_EventEditPage = __esm({
     labelCls6 = "block text-xs font-medium text-gray-600 mb-1";
     inputCls6 = "w-full rounded-md border border-gray-300 px-2 py-1.5 text-sm";
     __name(RequiredLabel, "RequiredLabel");
+    __name(sanitizeSlugInput2, "sanitizeSlugInput");
+    __name(normalizeSlug2, "normalizeSlug");
     ENTITY_TYPE_OPTIONS = [
       ...EVENT_ENTITY_TYPE_OPTIONS
     ];
@@ -36994,7 +37390,7 @@ function ComboEditPage({ comboId }) {
       const resolvedEventId = trimmedEventId && /^\d+$/.test(trimmedEventId) ? Number(trimmedEventId) : null;
       const payload = {
         name: trimmedName,
-        slug: slug.trim() || void 0,
+        slug: slug.trim() ? normalizeSlug(slug) : void 0,
         desc: desc || null,
         eventId: resolvedEventId,
         price,
@@ -37089,8 +37485,9 @@ function ComboEditPage({ comboId }) {
     }, "Slug"), /* @__PURE__ */ React.createElement("input", {
       type: "text",
       value: slug,
-      onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
-      placeholder: "Auto generate from name",
+      onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+      onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
+      placeholder: "combo-slug",
       className: "w-full rounded-md border border-gray-300 px-3 py-2 text-sm"
     })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement("label", {
       className: "block text-xs font-medium text-gray-600 mb-1"
@@ -37256,6 +37653,7 @@ var init_ComboEditPage = __esm({
     init_DetailPageHeader();
     init_inventory_validation();
     init_admin_config_context();
+    init_slug_sanitizer();
     isCreate5 = /* @__PURE__ */ __name((id) => id === "create", "isCreate");
     __name(formatDateTimeLocal, "formatDateTimeLocal");
     __name(fetchEventDefaultCurrency, "fetchEventDefaultCurrency");
@@ -37319,6 +37717,7 @@ function VendorEditPage({ vendorId }) {
   const create = isCreate6(vendorId);
   const [loading, setLoading] = React26.useState(!create);
   const [saving, setSaving] = React26.useState(false);
+  const createInFlightRef = React26.useRef(false);
   const [errors, setErrors] = React26.useState([]);
   const [name, setName] = React26.useState("");
   const [legalName, setLegalName] = React26.useState("");
@@ -37486,7 +37885,7 @@ function VendorEditPage({ vendorId }) {
   const vendorPayload = /* @__PURE__ */ __name(() => ({
     name: name.trim(),
     legalName: legalName.trim() || null,
-    slug: slug.trim() || void 0,
+    slug: slug.trim() ? normalizeSlug(slug) : void 0,
     businessType: businessType || null,
     description: description.trim() || null,
     website: website.trim() || null,
@@ -37677,7 +38076,7 @@ function VendorEditPage({ vendorId }) {
     router.push(listReturnUrl);
   }, "closeInviteDialog");
   const handleCreate = /* @__PURE__ */ __name(async () => {
-    setSaving(true);
+    if (createInFlightRef.current) return;
     setErrors([]);
     const createMissing = [];
     if (!name.trim()) createMissing.push("Store name is required");
@@ -37685,14 +38084,12 @@ function VendorEditPage({ vendorId }) {
     if (!ownerEmail.trim()) createMissing.push("Owner email is required");
     if (createMissing.length) {
       setErrors(createMissing);
-      setSaving(false);
       return;
     }
     if (!termsAccepted) {
       setErrors([
         "You must confirm that the vendor has accepted the terms and conditions"
       ]);
-      setSaving(false);
       return;
     }
     const formattedOwnerPhone = formatPhoneWithCountryCode(ownerPhoneCode, ownerPhoneNum);
@@ -37703,7 +38100,6 @@ function VendorEditPage({ vendorId }) {
       setErrors([
         taxError
       ]);
-      setSaving(false);
       return;
     }
     const personErr = validatePersonKyc({
@@ -37716,25 +38112,22 @@ function VendorEditPage({ vendorId }) {
       setErrors([
         personErr
       ]);
-      setSaving(false);
       return;
     }
     if (!ownerAddressLine1.trim()) {
       setErrors([
         "Owner address line 1 is required"
       ]);
-      setSaving(false);
       return;
     }
-    const abortController = new AbortController();
-    const timeoutId = setTimeout(() => abortController.abort(), 15e3);
+    createInFlightRef.current = true;
+    setSaving(true);
     try {
       const res = await fetch("/api/admin/vendors/onboard", {
         method: "POST",
         headers: {
           "Content-Type": "application/json"
         },
-        signal: abortController.signal,
         body: JSON.stringify({
           activation: "invite",
           sendOwnerEmail: false,
@@ -37755,7 +38148,6 @@ function VendorEditPage({ vendorId }) {
           }
         })
       });
-      clearTimeout(timeoutId);
       const data = await res.json().catch(() => ({}));
       if (!res.ok) {
         setErrors([
@@ -37781,17 +38173,11 @@ function VendorEditPage({ vendorId }) {
         inviteLink
       });
     } catch (err) {
-      if (err instanceof DOMException && err.name === "AbortError") {
-        setErrors([
-          "Request timed out. Your entered data is preserved. Please click submit again."
-        ]);
-      } else {
-        setErrors([
-          err instanceof Error && err.message || "Request failed"
-        ]);
-      }
+      setErrors([
+        err instanceof Error && err.message || "Request failed"
+      ]);
     } finally {
-      clearTimeout(timeoutId);
+      createInFlightRef.current = false;
       setSaving(false);
     }
   }, "handleCreate");
@@ -37841,7 +38227,7 @@ function VendorEditPage({ vendorId }) {
         signal: abortController.signal,
         body: JSON.stringify({
           ...vendorPayload(),
-          slug: slug.trim(),
+          slug: slug.trim() ? normalizeSlug(slug) : void 0,
           metadata: (() => {
             const next = {
               ...metadata ?? {}
@@ -37919,13 +38305,15 @@ function VendorEditPage({ vendorId }) {
       {
         label: saving ? "Creating\u2026" : "Create vendor",
         icon: LucideIcons.Save,
-        onClick: handleCreate
+        onClick: handleCreate,
+        disabled: saving
       }
     ] : [
       {
         label: saving ? "Saving\u2026" : "Save",
         icon: LucideIcons.Save,
-        onClick: handleSave
+        onClick: handleSave,
+        disabled: saving
       },
       {
         label: active ? "Deactivate" : "Activate",
@@ -37962,8 +38350,9 @@ function VendorEditPage({ vendorId }) {
     }, "Slug ", create ? "(optional)" : "*"), /* @__PURE__ */ React26__namespace.default.createElement(Input, {
       id: "vendorSlug",
       value: slug,
-      onChange: /* @__PURE__ */ __name((e) => setSlug(e.target.value), "onChange"),
-      placeholder: create ? "auto from name" : void 0,
+      onChange: /* @__PURE__ */ __name((e) => setSlug(sanitizeSlugInput(e.target.value)), "onChange"),
+      onBlur: /* @__PURE__ */ __name(() => setSlug((prev) => normalizeSlug(prev)), "onBlur"),
+      placeholder: "vendor-slug",
       className: `mt-1 ${fieldClass}`
     })), /* @__PURE__ */ React26__namespace.default.createElement("div", null, /* @__PURE__ */ React26__namespace.default.createElement(FieldLabel, {
       htmlFor: "businessType"
@@ -38304,6 +38693,7 @@ var init_VendorEditPage = __esm({
     init_checkbox();
     init_dialog();
     init_vendor_profile();
+    init_slug_sanitizer();
     init_vendor_list_config();
     init_vendor_access_denied();
     init_vendor_access_denied();