includio-cms 0.27.0 → 0.33.0

package/dist/admin/remote/shop.remote.d.ts

@@ -93,28 +93,26 @@ export declare const reorderShippingMethodsCmd: import("@sveltejs/kit").RemoteCo
 }>>;
 export declare const listOrdersAdmin: import("@sveltejs/kit").RemoteQueryFunction<{
     status?: "done" | "new" | "awaitingPayment" | "paid" | "preparing" | "sent" | "cancelled" | "paymentRejected" | "refunded" | undefined;
-    email?: string | undefined;
+    search?: string | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
+    deleted?: "exclude" | "only" | "include" | undefined;
 } | undefined, {
     items: {
         number: string;
-        currency: string;
-        consents: {
-            id: string;
-            accepted: boolean;
-            label: string;
-        }[] | null;
         id: string;
-        status: import("../../shop/types.js").OrderStatus;
-        createdAt: Date;
-        updatedAt: Date;
-        language: string | null;
         carrierType: string | null;
+        createdAt: Date;
+        status: import("../../shop/types.js").OrderStatus;
+        currency: string;
         customerEmail: string;
         customerName: string | null;
         customerPhone: string | null;
+        customerNip: string | null;
+        customerCompanyName: string | null;
         shippingAddress: Record<string, string> | null;
+        billingAddress: Record<string, string> | null;
+        invoiceRequested: boolean;
         totalNet: number;
         totalGross: number;
         vatAmount: number;
@@ -128,10 +126,19 @@ export declare const listOrdersAdmin: import("@sveltejs/kit").RemoteQueryFunctio
         shipmentCreatedAt: Date | null;
         paymentMethod: string | null;
         paymentProviderRef: string | null;
+        consents: {
+            id: string;
+            accepted: boolean;
+            label: string;
+        }[] | null;
         notes: string | null;
+        language: string | null;
         accessToken: string;
         partialPayment: import("../../shop/types.js").PartialPayment | null;
         balanceOwed: boolean;
+        deletedAt: Date | null;
+        deletedBy: string | null;
+        updatedAt: Date;
     }[];
     total: number;
     limit: number;
@@ -140,22 +147,19 @@ export declare const listOrdersAdmin: import("@sveltejs/kit").RemoteQueryFunctio
 export declare const getOrderForAdmin: import("@sveltejs/kit").RemoteQueryFunction<string, {
     order: {
         number: string;
-        currency: string;
-        consents: {
-            id: string;
-            accepted: boolean;
-            label: string;
-        }[] | null;
         id: string;
-        status: import("../../shop/types.js").OrderStatus;
-        createdAt: Date;
-        updatedAt: Date;
-        language: string | null;
         carrierType: string | null;
+        createdAt: Date;
+        status: import("../../shop/types.js").OrderStatus;
+        currency: string;
         customerEmail: string;
         customerName: string | null;
         customerPhone: string | null;
+        customerNip: string | null;
+        customerCompanyName: string | null;
         shippingAddress: Record<string, string> | null;
+        billingAddress: Record<string, string> | null;
+        invoiceRequested: boolean;
         totalNet: number;
         totalGross: number;
         vatAmount: number;
@@ -169,10 +173,19 @@ export declare const getOrderForAdmin: import("@sveltejs/kit").RemoteQueryFuncti
         shipmentCreatedAt: Date | null;
         paymentMethod: string | null;
         paymentProviderRef: string | null;
+        consents: {
+            id: string;
+            accepted: boolean;
+            label: string;
+        }[] | null;
         notes: string | null;
+        language: string | null;
         accessToken: string;
         partialPayment: import("../../shop/types.js").PartialPayment | null;
         balanceOwed: boolean;
+        deletedAt: Date | null;
+        deletedBy: string | null;
+        updatedAt: Date;
     };
     items: {
         id: string;
@@ -188,12 +201,16 @@ export declare const getOrderForAdmin: import("@sveltejs/kit").RemoteQueryFuncti
     }[];
     history: {
         id: string;
-        note: string | null;
         status: import("../../shop/types.js").OrderStatus;
+        note: string | null;
         orderId: string;
         changedBy: string | null;
         changedAt: Date;
     }[];
+    coupon: {
+        code: string;
+        discountAmount: number;
+    } | null;
 } | null>;
 export declare const updateOrderStatusCmd: import("@sveltejs/kit").RemoteCommand<{
     orderId: string;
@@ -201,22 +218,19 @@ export declare const updateOrderStatusCmd: import("@sveltejs/kit").RemoteCommand
     note?: string | undefined;
 }, Promise<{
     number: string;
-    currency: string;
-    consents: {
-        id: string;
-        accepted: boolean;
-        label: string;
-    }[] | null;
     id: string;
-    status: import("../../shop/types.js").OrderStatus;
-    createdAt: Date;
-    updatedAt: Date;
-    language: string | null;
     carrierType: string | null;
+    createdAt: Date;
+    status: import("../../shop/types.js").OrderStatus;
+    currency: string;
     customerEmail: string;
     customerName: string | null;
     customerPhone: string | null;
+    customerNip: string | null;
+    customerCompanyName: string | null;
     shippingAddress: Record<string, string> | null;
+    billingAddress: Record<string, string> | null;
+    invoiceRequested: boolean;
     totalNet: number;
     totalGross: number;
     vatAmount: number;
@@ -230,10 +244,35 @@ export declare const updateOrderStatusCmd: import("@sveltejs/kit").RemoteCommand
     shipmentCreatedAt: Date | null;
     paymentMethod: string | null;
     paymentProviderRef: string | null;
+    consents: {
+        id: string;
+        accepted: boolean;
+        label: string;
+    }[] | null;
     notes: string | null;
+    language: string | null;
     accessToken: string;
     partialPayment: import("../../shop/types.js").PartialPayment | null;
     balanceOwed: boolean;
+    deletedAt: Date | null;
+    deletedBy: string | null;
+    updatedAt: Date;
+}>>;
+export declare const deleteOrderCmd: import("@sveltejs/kit").RemoteCommand<{
+    orderId: string;
+}, Promise<{
+    success: true;
+    reason?: undefined;
+    error?: undefined;
+} | {
+    success: false;
+    reason: "status" | "invoice";
+    error: string;
+}>>;
+export declare const restoreOrderCmd: import("@sveltejs/kit").RemoteCommand<{
+    orderId: string;
+}, Promise<{
+    success: true;
 }>>;
 export declare const resendOrderEmailCmd: import("@sveltejs/kit").RemoteCommand<{
     orderId: string;
@@ -274,12 +313,12 @@ export declare const listShopableCollections: import("@sveltejs/kit").RemoteQuer
 }[]>;
 export declare const getOrderRefundsAdmin: import("@sveltejs/kit").RemoteQueryFunction<string, {
     refunds: {
-        amount: number;
-        currency: string;
         id: string;
-        status: import("../../db-postgres/schema/shop/index.js").ShopRefundStatus;
         createdAt: Date;
+        status: import("../../db-postgres/schema/shop/index.js").ShopRefundStatus;
+        currency: string;
         updatedAt: Date;
+        amount: number;
         orderId: string;
         provider: string;
         providerRef: string | null;
@@ -312,6 +351,52 @@ export declare const refundOrderCmd: import("@sveltejs/kit").RemoteCommand<{
     code: "order_not_found" | "order_not_paid" | "no_provider_ref" | "unknown_provider" | "refund_unsupported" | "invalid_amount" | "amount_exceeds_remaining" | "provider_error" | "no_payment_kind";
     error: string;
 }>>;
+export declare const getOrderInvoiceAdmin: import("@sveltejs/kit").RemoteQueryFunction<string, {
+    invoice: {
+        number: string | null;
+        id: string;
+        createdAt: Date;
+        status: import("../../db-postgres/schema/shop/index.js").ShopInvoiceStatus;
+        updatedAt: Date;
+        raw: unknown;
+        orderId: string;
+        provider: string;
+        kind: string;
+        externalId: string | null;
+        pdfUrl: string | null;
+        attempts: number;
+        nextRetryAt: Date | null;
+        lastError: string | null;
+    } | null;
+    invoicingEnabled: boolean;
+}>;
+export declare const issueInvoiceCmd: import("@sveltejs/kit").RemoteCommand<{
+    orderId: string;
+    force?: boolean | undefined;
+}, Promise<{
+    success: true;
+    invoice: {
+        number: string | null;
+        id: string;
+        createdAt: Date;
+        status: import("../../db-postgres/schema/shop/index.js").ShopInvoiceStatus;
+        updatedAt: Date;
+        raw: unknown;
+        orderId: string;
+        provider: string;
+        kind: string;
+        externalId: string | null;
+        pdfUrl: string | null;
+        attempts: number;
+        nextRetryAt: Date | null;
+        lastError: string | null;
+    } | null;
+    error?: undefined;
+} | {
+    success: false;
+    error: string;
+    invoice?: undefined;
+}>>;
 export declare const generateBalanceLinkForOrder: import("@sveltejs/kit").RemoteCommand<string, Promise<{
     success: false;
     error: string;
@@ -351,7 +436,7 @@ export declare const getCouponAdmin: import("@sveltejs/kit").RemoteQueryFunction
 }>;
 export declare const createCouponCmd: import("@sveltejs/kit").RemoteCommand<{
     code: string;
-    type: "percent" | "fixed";
+    type: "fixed" | "percent";
     value: number;
     minOrderAmount?: number | null | undefined;
     maxUses?: number | null | undefined;
@@ -360,10 +445,10 @@ export declare const createCouponCmd: import("@sveltejs/kit").RemoteCommand<{
 }, Promise<{
     code: string;
     id: string;
-    type: import("../../db-postgres/schema/shop/index.js").ShopCouponType;
+    isActive: boolean;
     createdAt: Date;
     updatedAt: Date;
-    isActive: boolean;
+    type: import("../../db-postgres/schema/shop/index.js").ShopCouponType;
     expiresAt: Date | null;
     value: string;
     minOrderAmount: number | null;
@@ -374,7 +459,7 @@ export declare const updateCouponCmd: import("@sveltejs/kit").RemoteCommand<{
     id: string;
     input: {
         code?: string | undefined;
-        type?: "percent" | "fixed" | undefined;
+        type?: "fixed" | "percent" | undefined;
         value?: number | undefined;
         minOrderAmount?: number | null | undefined;
         maxUses?: number | null | undefined;
@@ -399,7 +484,7 @@ export declare const deleteCouponCmd: import("@sveltejs/kit").RemoteCommand<stri
 }>>;
 export declare const exportOrdersCsv: import("@sveltejs/kit").RemoteQueryFunction<{
     status?: "done" | "new" | "awaitingPayment" | "paid" | "preparing" | "sent" | "cancelled" | "paymentRejected" | "refunded" | undefined;
-    email?: string | undefined;
+    search?: string | undefined;
 } | undefined, {
     csv: string;
     count: number;

package/dist/admin/remote/shop.remote.js

@@ -3,14 +3,16 @@ import z from 'zod';
 import { getCMS } from '../../core/cms.js';
 import { deleteShopData, getShopDataByEntry, listShopEntries, upsertShopData } from '../../shop/server/shop-data.js';
 import { createShippingMethod, deleteShippingMethod, getShippingMethod, listShippingMethods, reorderShippingMethods, updateShippingMethod } from '../../shop/server/shipping.js';
-import { countOrders, getOrderById, getOrderItems, getOrderStatusHistory, listOrders, updateOrderStatus } from '../../shop/server/orders.js';
+import { countOrders, getOrderById, getOrderItems, getOrderStatusHistory, listOrders, OrderNotDeletableError, restoreOrder, softDeleteOrder, updateOrderStatus } from '../../shop/server/orders.js';
 import { cancelShipmentForOrder, createShipmentForOrder } from '../../shop/server/shipments.js';
 import { sendOrderStatusEmail } from '../../shop/server/email.js';
+import { getOrderCoupon } from '../../shop/server/coupons.js';
+import { getInvoiceByOrderId, issueInvoiceForOrder } from '../../shop/server/invoices.js';
 import { getRefundedAmount, listRefunds, refundOrder, RefundError } from '../../shop/server/refund.js';
 import { getShopDb } from '../../shop/server/db.js';
 import { shopCouponsTable } from '../../db-postgres/schema/shop/index.js';
 import { eq } from 'drizzle-orm';
-import { requireAuth } from './middleware/auth.js';
+import { requireAuth, requireRole } from './middleware/auth.js';
 export const getShopEnabled = query(async () => {
     return getCMS().shopConfig !== null;
 });
@@ -137,18 +139,25 @@ const orderStatusSchema = z.enum([
 export const listOrdersAdmin = query(z
     .object({
     status: orderStatusSchema.optional(),
-    email: z.string().optional(),
+    search: z.string().trim().min(1).optional(),
     limit: z.number().int().optional(),
-    offset: z.number().int().optional()
+    offset: z.number().int().optional(),
+    deleted: z.enum(['exclude', 'only', 'include']).optional()
 })
     .optional(), async (opts) => {
-    requireAuth();
     const params = opts ?? {};
+    const deleted = params.deleted ?? 'exclude';
+    // The trash (soft-deleted orders) is admin-only; the normal list is for
+    // any authenticated admin-panel user.
+    if (deleted === 'exclude')
+        requireAuth();
+    else
+        requireRole('admin');
     const limit = params.limit ?? 50;
     const offset = params.offset ?? 0;
     const [items, total] = await Promise.all([
-        listOrders({ ...params, limit, offset }),
-        countOrders({ status: params.status, email: params.email })
+        listOrders({ ...params, deleted, limit, offset }),
+        countOrders({ status: params.status, search: params.search, deleted })
     ]);
     return { items, total, limit, offset };
 });
@@ -157,8 +166,12 @@ export const getOrderForAdmin = query(z.string(), async (id) => {
     const order = await getOrderById(id);
     if (!order)
         return null;
-    const [items, history] = await Promise.all([getOrderItems(id), getOrderStatusHistory(id)]);
-    return { order, items, history };
+    const [items, history, coupon] = await Promise.all([
+        getOrderItems(id),
+        getOrderStatusHistory(id),
+        getOrderCoupon(id).catch(() => null)
+    ]);
+    return { order, items, history, coupon };
 });
 export const updateOrderStatusCmd = command(z.object({
     orderId: z.string(),
@@ -169,6 +182,25 @@ export const updateOrderStatusCmd = command(z.object({
     const updated = await updateOrderStatus(orderId, status, { note, changedBy: 'admin' });
     return updated;
 });
+export const deleteOrderCmd = command(z.object({ orderId: z.string() }), async ({ orderId }) => {
+    const { user } = requireRole('admin');
+    try {
+        await softDeleteOrder(orderId, user.id);
+        return { success: true };
+    }
+    catch (err) {
+        if (err instanceof OrderNotDeletableError) {
+            return { success: false, reason: err.reason, error: err.message };
+        }
+        const message = err instanceof Error ? err.message : 'Nie udało się usunąć zamówienia';
+        return { success: false, reason: 'status', error: message };
+    }
+});
+export const restoreOrderCmd = command(z.object({ orderId: z.string() }), async ({ orderId }) => {
+    requireRole('admin');
+    await restoreOrder(orderId);
+    return { success: true };
+});
 export const resendOrderEmailCmd = command(z.object({ orderId: z.string(), status: orderStatusSchema }), async ({ orderId, status }) => {
     requireAuth();
     await sendOrderStatusEmail(orderId, status);
@@ -261,6 +293,23 @@ export const refundOrderCmd = command(z.object({
         return { success: false, code: 'provider_error', error: message };
     }
 });
+export const getOrderInvoiceAdmin = query(z.string(), async (orderId) => {
+    requireAuth();
+    const invoice = await getInvoiceByOrderId(orderId);
+    const invoicingEnabled = !!getCMS().shopConfig?.invoicing;
+    return { invoice, invoicingEnabled };
+});
+export const issueInvoiceCmd = command(z.object({ orderId: z.string(), force: z.boolean().optional() }), async ({ orderId, force }) => {
+    requireAuth();
+    try {
+        const invoice = await issueInvoiceForOrder(orderId, { force });
+        return { success: true, invoice };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Invoice issuance failed';
+        return { success: false, error: message };
+    }
+});
 export const generateBalanceLinkForOrder = command(z.string(), async (orderId) => {
     requireAuth();
     const { generateBalanceToken, requireBalanceTokenSecret } = await import('../../shop/server/balance-payment.js');
@@ -375,7 +424,7 @@ function csvEscape(value) {
 const exportFiltersSchema = z
     .object({
     status: orderStatusSchema.optional(),
-    email: z.string().optional()
+    search: z.string().trim().min(1).optional()
 })
     .optional();
 export const exportOrdersCsv = query(exportFiltersSchema, async (opts) => {

package/dist/admin/types.d.ts

@@ -8,3 +8,18 @@ export interface Breadcrumb {
     label: string;
     href?: string;
 }
+/**
+ * One additional sidebar entry rendered below built-in nav sections
+ * (Dashboard, Collections, Singles, Forms, Shop). Configure via
+ * `defineConfig({ admin: { extraNavItems: [...] } })` — see CMSConfig.
+ *
+ * Icons are intentionally omitted from the public surface to keep userland
+ * free of `@tabler/icons-svelte` (or any specific icon library) as a
+ * dependency. The sidebar renders the title alone when no icon is provided.
+ *
+ * @public
+ */
+export interface AdminNavItem {
+    title: string;
+    url: string;
+}

package/dist/admin/utils/csv-export.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Build a CSV string from `headers` and `rows`. Values are escaped per
+ * RFC 4180: any cell containing `"`, `,`, `;`, `\n`, or `\r` is wrapped in
+ * double quotes and embedded `"` are doubled. `null` / `undefined` become
+ * empty cells. Lines are joined with CRLF.
+ *
+ * Pure (no DOM access) — safe on the server. Use together with
+ * `downloadCsv()` on the client, or return as a `Response` from a server
+ * action.
+ *
+ * @public
+ */
+export declare function buildCsv(opts: {
+    headers: string[];
+    rows: (string | number | null | undefined)[][];
+}): string;
+/**
+ * Trigger a client-side CSV download. Wraps the given `csv` string in a
+ * `Blob` with `text/csv;charset=utf-8` and clicks a synthetic
+ * `<a download>`. Prepends a UTF-8 BOM (``) unless one is already
+ * present, so Excel honors UTF-8 (PL diacritics).
+ *
+ * Must be called from a browser context — relies on `document`, `Blob`,
+ * and `URL.createObjectURL`. Throws when called server-side.
+ *
+ * Typical wiring: server returns a precomposed CSV (e.g. via a
+ * `query()` remote like `exportOrdersCsv`) → client calls
+ * `downloadCsv({ filename, csv: result.csv })`.
+ *
+ * @public
+ * @example
+ * ```ts
+ * import { buildCsv, downloadCsv } from 'includio-cms/admin/client';
+ *
+ * const csv = buildCsv({
+ *   headers: ['email', 'name', 'consentedAt'],
+ *   rows: items.map((i) => [i.email, i.name, i.consentedAt])
+ * });
+ * downloadCsv({ filename: 'newsletter-2026-06-02.csv', csv });
+ * ```
+ */
+export declare function downloadCsv(opts: {
+    filename: string;
+    csv: string;
+}): void;

package/dist/admin/utils/csv-export.js

@@ -0,0 +1,61 @@
+/**
+ * Build a CSV string from `headers` and `rows`. Values are escaped per
+ * RFC 4180: any cell containing `"`, `,`, `;`, `\n`, or `\r` is wrapped in
+ * double quotes and embedded `"` are doubled. `null` / `undefined` become
+ * empty cells. Lines are joined with CRLF.
+ *
+ * Pure (no DOM access) — safe on the server. Use together with
+ * `downloadCsv()` on the client, or return as a `Response` from a server
+ * action.
+ *
+ * @public
+ */
+export function buildCsv(opts) {
+    const escape = (v) => {
+        const s = v == null ? '' : String(v);
+        return /["\n\r,;]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
+    };
+    const lines = [opts.headers, ...opts.rows].map((row) => row.map(escape).join(','));
+    return lines.join('\r\n');
+}
+/**
+ * Trigger a client-side CSV download. Wraps the given `csv` string in a
+ * `Blob` with `text/csv;charset=utf-8` and clicks a synthetic
+ * `<a download>`. Prepends a UTF-8 BOM (``) unless one is already
+ * present, so Excel honors UTF-8 (PL diacritics).
+ *
+ * Must be called from a browser context — relies on `document`, `Blob`,
+ * and `URL.createObjectURL`. Throws when called server-side.
+ *
+ * Typical wiring: server returns a precomposed CSV (e.g. via a
+ * `query()` remote like `exportOrdersCsv`) → client calls
+ * `downloadCsv({ filename, csv: result.csv })`.
+ *
+ * @public
+ * @example
+ * ```ts
+ * import { buildCsv, downloadCsv } from 'includio-cms/admin/client';
+ *
+ * const csv = buildCsv({
+ *   headers: ['email', 'name', 'consentedAt'],
+ *   rows: items.map((i) => [i.email, i.name, i.consentedAt])
+ * });
+ * downloadCsv({ filename: 'newsletter-2026-06-02.csv', csv });
+ * ```
+ */
+export function downloadCsv(opts) {
+    if (typeof document === 'undefined') {
+        throw new Error('[includio-cms] downloadCsv() must be called from a browser context.');
+    }
+    const csv = opts.csv.startsWith('') ? opts.csv : '' + opts.csv;
+    const blob = new Blob([csv], { type: 'text/csv;charset=utf-8' });
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = opts.filename;
+    a.style.display = 'none';
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    URL.revokeObjectURL(url);
+}

package/dist/cli/scaffold/admin.js

@@ -348,7 +348,7 @@ export const { GET, POST, PUT, DELETE } = createRestApiHandler();
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 import { createFormSubmission, parseFormDataForSubmission } from 'includio-cms/sveltekit/server';
-import { getCMS } from 'includio-cms/core';
+import { getCMS } from 'includio-cms/core/server';
 
 const counts = new Map<string, { count: number; resetAt: number }>();
 const LIMIT = 5;

package/dist/components/ui/input/input.svelte.d.ts

@@ -8,6 +8,6 @@ type Props = WithElementRef<Omit<HTMLInputAttributes, "type"> & ({
     type?: InputType;
     files?: undefined;
 })>;
-declare const Input: import("svelte").Component<Props, {}, "files" | "ref" | "value">;
+declare const Input: import("svelte").Component<Props, {}, "ref" | "files" | "value">;
 type Input = ReturnType<typeof Input>;
 export default Input;

package/dist/components/ui/input-group/input-group-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const InputGroupInput: import("svelte").Component<(Omit<import("svelte/e
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "color" | "button" | "checkbox" | "search" | (string & {}) | "email" | "tel" | "password" | "time" | "hidden" | "reset" | "submit" | "datetime-local" | "month" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "color" | "button" | "checkbox" | (string & {}) | "email" | "tel" | "password" | "time" | "month" | "hidden" | "reset" | "submit" | "datetime-local" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/components/ui/sidebar/sidebar-input.svelte.d.ts

@@ -2,7 +2,7 @@ declare const SidebarInput: import("svelte").Component<(Omit<import("svelte/elem
     type: "file";
     files?: FileList;
 } | {
-    type?: "number" | "image" | "url" | "text" | "date" | "radio" | "color" | "button" | "checkbox" | "search" | (string & {}) | "email" | "tel" | "password" | "time" | "hidden" | "reset" | "submit" | "datetime-local" | "month" | "range" | "week";
+    type?: "number" | "image" | "url" | "text" | "date" | "search" | "radio" | "color" | "button" | "checkbox" | (string & {}) | "email" | "tel" | "password" | "time" | "month" | "hidden" | "reset" | "submit" | "datetime-local" | "range" | "week";
     files?: undefined;
 })) & {
     ref?: HTMLElement | null | undefined;

package/dist/core/cms.d.ts

@@ -1,13 +1,13 @@
 import type { DatabaseAdapter } from '../types/adapters/db.js';
 import type { FilesAdapter } from '../types/adapters/files.js';
-import type { ApiKeyConfig, AuthConfig, CMSConfig, ICMS, MediaConfig, TypographyConfig } from '../types/cms.js';
+import type { AdminConfig, ApiKeyConfig, AuthConfig, CMSConfig, ICMS, MediaConfig, TypographyConfig } from '../types/cms.js';
 import type { CollectionConfigWithType } from '../types/collections.js';
 import type { Language } from '../types/languages.js';
 import type { SingleConfigWithType } from '../types/singles.js';
 import type { CustomFieldDefinition, IconSetPlugin, Plugin } from '../types/plugins.js';
 import type { FormConfig } from '../types/forms.js';
 import type { AIAdapter } from '../types/adapters/ai.js';
-import type { EmailAdapter } from '../types/adapters/email.js';
+import type { EmailAdapter, SendMailOptions } from '../types/adapters/email.js';
 import { betterAuth } from 'better-auth';
 import type { ResolvedShopConfig } from '../shop/types.js';
 import type { ResolvedCmpConfig } from '../cmp/types.js';
@@ -28,6 +28,7 @@ export declare class CMS implements ICMS {
     sidebarHelp: boolean;
     shopConfig: ResolvedShopConfig | null;
     cmpConfig: ResolvedCmpConfig | null;
+    adminConfig: AdminConfig | null;
     /**
      * Resolves once the shop's variant-attribute GIN indexes have been applied
      * by `initCMS()`. `null` when the CMS is configured without a shop. Tests
@@ -64,3 +65,44 @@ export declare function initCMS(config: CMSConfig): CMS;
  * ```
  */
 export declare function getCMS(): CMS;
+/**
+ * Returns the configured email adapter from the active CMS singleton, or
+ * `null` when no `email` was passed to `defineConfig`. Use this in userland
+ * hooks (e.g. `ShopConfig.onOrderPaid`) to reuse the same SMTP transport the
+ * CMS already opened — no second nodemailer instance, no duplicated ENV.
+ *
+ * @returns The current `EmailAdapter` or `null`.
+ * @throws {Error} when called before `initCMS()` has run.
+ * @public
+ * @example
+ * ```ts
+ * import { getMailer } from 'includio-cms/core';
+ *
+ * const mailer = getMailer();
+ * if (mailer) await mailer.sendMail({ to: 'admin@…', subject: '…', html: '…' });
+ * ```
+ */
+export declare function getMailer(): EmailAdapter | null;
+/**
+ * Send an email through the configured CMS email adapter. Thin convenience
+ * wrapper around `getCMS().emailAdapter.sendMail` — same options shape, same
+ * From address, same SMTP transport as the built-in flows (reset password,
+ * shop order status, form notifications).
+ *
+ * @throws {Error} when no email adapter is configured (matches
+ *   `defineConfig({ email: ... })` not being set) or when the CMS has not
+ *   been initialized yet.
+ * @public
+ * @example
+ * ```ts
+ * import { sendMail } from 'includio-cms/core';
+ *
+ * await sendMail({
+ *   to: process.env.ADMIN_EMAIL!,
+ *   subject: '[shop] New consent',
+ *   text: 'Plain fallback for clients that prefer text.',
+ *   html: '<p>Body…</p>'
+ * });
+ * ```
+ */
+export declare function sendMail(options: SendMailOptions): Promise<void>;