includio-cms 0.27.0 → 0.33.0

package/dist/core/cms.js

@@ -23,6 +23,7 @@ export class CMS {
     sidebarHelp;
     shopConfig;
     cmpConfig;
+    adminConfig;
     /**
      * Resolves once the shop's variant-attribute GIN indexes have been applied
      * by `initCMS()`. `null` when the CMS is configured without a shop. Tests
@@ -47,6 +48,7 @@ export class CMS {
         this.sidebarHelp = config.sidebarHelp ?? true;
         this.shopConfig = config.shop ?? null;
         this.cmpConfig = config.cmp ?? null;
+        this.adminConfig = config.admin ?? null;
         this.collections = {};
         this.singles = {};
         this.forms = {};
@@ -134,6 +136,7 @@ export class CMS {
                 database: drizzleAdapter(drizzleDb, { provider: 'pg', schema: authSchema }),
                 secret: this.authConfig.secret,
                 baseURL: this.authConfig.baseURL,
+                ...(this.authConfig.rateLimit ? { rateLimit: this.authConfig.rateLimit } : {}),
                 emailAndPassword: {
                     enabled: true,
                     async sendResetPassword({ user, url }, request) {
@@ -185,6 +188,18 @@ export function initCMS(config) {
                 console.warn('[shop] Failed to apply variant attribute indexes:', e);
             });
         }
+        // Smoke-test built-in shop email templates — fast lookup-only sweep.
+        // Catches corrupt installs (missing files in dist) at boot instead of
+        // at first email send. Dynamic import avoids loading shop server code
+        // when there is no shop configured.
+        import('../shop/server/email.js')
+            .then(({ REQUIRED_TEMPLATE_NAMES }) => import('../shop/server/emailTemplateRegistry.js').then(({ validateBuiltinTemplates }) => {
+            const defaultLang = cms.languages[0] ?? 'pl';
+            validateBuiltinTemplates([...REQUIRED_TEMPLATE_NAMES], defaultLang);
+        }))
+            .catch((e) => {
+            console.error('[shop] Built-in email template validation failed:', e);
+        });
     }
     return cms;
 }
@@ -210,3 +225,52 @@ export function getCMS() {
     }
     return cms;
 }
+/**
+ * Returns the configured email adapter from the active CMS singleton, or
+ * `null` when no `email` was passed to `defineConfig`. Use this in userland
+ * hooks (e.g. `ShopConfig.onOrderPaid`) to reuse the same SMTP transport the
+ * CMS already opened — no second nodemailer instance, no duplicated ENV.
+ *
+ * @returns The current `EmailAdapter` or `null`.
+ * @throws {Error} when called before `initCMS()` has run.
+ * @public
+ * @example
+ * ```ts
+ * import { getMailer } from 'includio-cms/core';
+ *
+ * const mailer = getMailer();
+ * if (mailer) await mailer.sendMail({ to: 'admin@…', subject: '…', html: '…' });
+ * ```
+ */
+export function getMailer() {
+    return getCMS().emailAdapter;
+}
+/**
+ * Send an email through the configured CMS email adapter. Thin convenience
+ * wrapper around `getCMS().emailAdapter.sendMail` — same options shape, same
+ * From address, same SMTP transport as the built-in flows (reset password,
+ * shop order status, form notifications).
+ *
+ * @throws {Error} when no email adapter is configured (matches
+ *   `defineConfig({ email: ... })` not being set) or when the CMS has not
+ *   been initialized yet.
+ * @public
+ * @example
+ * ```ts
+ * import { sendMail } from 'includio-cms/core';
+ *
+ * await sendMail({
+ *   to: process.env.ADMIN_EMAIL!,
+ *   subject: '[shop] New consent',
+ *   text: 'Plain fallback for clients that prefer text.',
+ *   html: '<p>Body…</p>'
+ * });
+ * ```
+ */
+export async function sendMail(options) {
+    const mailer = getCMS().emailAdapter;
+    if (!mailer) {
+        throw new Error('[includio-cms] sendMail() called but no `email` adapter is configured in defineConfig.');
+    }
+    await mailer.sendMail(options);
+}

package/dist/core/index.d.ts

@@ -1,5 +1,3 @@
-export { getCMS } from './cms.js';
-export { resolveMediaWithStyles, type ResolvedMedia } from './server/fields/utils/resolveMedia.js';
 export { resolveSeo, type ResolvedSeo } from './fields/resolveSeo.js';
-export { createEntityAPI } from '../entity/index.js';
-export { getAuth } from '../server/auth.js';
+export { getMailer, sendMail } from './cms.js';
+export type { EmailAdapter, SendMailOptions } from '../types/adapters/email.js';

package/dist/core/index.js

@@ -1,5 +1,2 @@
-export { getCMS } from './cms.js';
-export { resolveMediaWithStyles } from './server/fields/utils/resolveMedia.js';
 export { resolveSeo } from './fields/resolveSeo.js';
-export { createEntityAPI } from '../entity/index.js';
-export { getAuth } from '../server/auth.js';
+export { getMailer, sendMail } from './cms.js';

package/dist/core/server/index.d.ts

@@ -1 +1,4 @@
-export {};
+export { getCMS } from '../cms.js';
+export { resolveMediaWithStyles, type ResolvedMedia } from './fields/utils/resolveMedia.js';
+export { createEntityAPI } from '../../entity/index.js';
+export { getAuth } from '../../server/auth.js';

package/dist/core/server/index.js

@@ -1 +1,4 @@
-"use strict";
+export { getCMS } from '../cms.js';
+export { resolveMediaWithStyles } from './fields/utils/resolveMedia.js';
+export { createEntityAPI } from '../../entity/index.js';
+export { getAuth } from '../../server/auth.js';

package/dist/db-postgres/schema/shop/index.d.ts

@@ -7,6 +7,7 @@ export * from './orderStatusHistory.js';
 export * from './payment.js';
 export * from './stockReservation.js';
 export * from './refunds.js';
+export * from './invoice.js';
 export * from './webhookEvents.js';
 export * from './coupons.js';
 export * from './couponRedemptions.js';

package/dist/db-postgres/schema/shop/index.js

@@ -7,6 +7,7 @@ export * from './orderStatusHistory.js';
 export * from './payment.js';
 export * from './stockReservation.js';
 export * from './refunds.js';
+export * from './invoice.js';
 export * from './webhookEvents.js';
 export * from './coupons.js';
 export * from './couponRedemptions.js';

package/dist/db-postgres/schema/shop/invoice.d.ts

@@ -0,0 +1,254 @@
+export type ShopInvoiceStatus = 'pending' | 'issued' | 'sent' | 'failed';
+/**
+ * One invoice per order (`order_id` is unique → idempotency guard). `external_id`
+ * / `number` / `pdf_url` come from the invoicing provider once issued. The
+ * `attempts` / `next_retry_at` columns are reserved for a future automatic-retry
+ * mechanism; the current flow only retries manually from the admin.
+ */
+export declare const shopInvoicesTable: import("drizzle-orm/pg-core/table", { with: { "resolution-mode": "require" } }).PgTableWithColumns<{
+    name: "shop_invoices";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "id";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        orderId: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "order_id";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        provider: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "provider";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        externalId: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "external_id";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        number: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "number";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pdfUrl: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "pdf_url";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        kind: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "kind";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "status";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: ShopInvoiceStatus;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: ShopInvoiceStatus;
+        }>;
+        attempts: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "attempts";
+            tableName: "shop_invoices";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        nextRetryAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "next_retry_at";
+            tableName: "shop_invoices";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastError: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "last_error";
+            tableName: "shop_invoices";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        raw: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "raw";
+            tableName: "shop_invoices";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "created_at";
+            tableName: "shop_invoices";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "updated_at";
+            tableName: "shop_invoices";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;

package/dist/db-postgres/schema/shop/invoice.js

@@ -0,0 +1,27 @@
+import { integer, jsonb, pgTable, text, timestamp, uuid } from 'drizzle-orm/pg-core';
+import { shopOrdersTable } from './order.js';
+/**
+ * One invoice per order (`order_id` is unique → idempotency guard). `external_id`
+ * / `number` / `pdf_url` come from the invoicing provider once issued. The
+ * `attempts` / `next_retry_at` columns are reserved for a future automatic-retry
+ * mechanism; the current flow only retries manually from the admin.
+ */
+export const shopInvoicesTable = pgTable('shop_invoices', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    orderId: uuid('order_id')
+        .notNull()
+        .unique()
+        .references(() => shopOrdersTable.id, { onDelete: 'cascade' }),
+    provider: text('provider').notNull(),
+    externalId: text('external_id'),
+    number: text('number'),
+    pdfUrl: text('pdf_url'),
+    kind: text('kind').notNull().default('vat'),
+    status: text('status').$type().notNull().default('pending'),
+    attempts: integer('attempts').notNull().default(0),
+    nextRetryAt: timestamp('next_retry_at', { withTimezone: true }),
+    lastError: text('last_error'),
+    raw: jsonb('raw'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull()
+});

package/dist/db-postgres/schema/shop/order.d.ts

@@ -124,6 +124,40 @@ export declare const shopOrdersTable: import("drizzle-orm/pg-core/table", { with
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        customerNip: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "customer_nip";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        customerCompanyName: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "customer_company_name";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         shippingAddress: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "shipping_address";
             tableName: "shop_orders";
@@ -143,6 +177,42 @@ export declare const shopOrdersTable: import("drizzle-orm/pg-core/table", { with
         }, {}, {
             $type: Record<string, string>;
         }>;
+        billingAddress: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "billing_address";
+            tableName: "shop_orders";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, string>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, string>;
+        }>;
+        invoiceRequested: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "invoice_requested";
+            tableName: "shop_orders";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         totalNet: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "total_net";
             tableName: "shop_orders";
@@ -495,6 +565,40 @@ export declare const shopOrdersTable: import("drizzle-orm/pg-core/table", { with
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        deletedAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "deleted_at";
+            tableName: "shop_orders";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        deletedBy: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "deleted_by";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createdAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "created_at";
             tableName: "shop_orders";

package/dist/db-postgres/schema/shop/order.js

@@ -8,7 +8,11 @@ export const shopOrdersTable = pgTable('shop_orders', {
     customerEmail: text('customer_email').notNull(),
     customerName: text('customer_name'),
     customerPhone: text('customer_phone'),
+    customerNip: text('customer_nip'),
+    customerCompanyName: text('customer_company_name'),
     shippingAddress: jsonb('shipping_address').$type(),
+    billingAddress: jsonb('billing_address').$type(),
+    invoiceRequested: boolean('invoice_requested').default(false).notNull(),
     totalNet: integer('total_net').notNull(),
     totalGross: integer('total_gross').notNull(),
     vatAmount: integer('vat_amount').notNull(),
@@ -31,6 +35,10 @@ export const shopOrdersTable = pgTable('shop_orders', {
     accessToken: uuid('access_token').defaultRandom().notNull(),
     partialPayment: jsonb('partial_payment').$type(),
     balanceOwed: boolean('balance_owed').default(false).notNull(),
+    // Soft-delete: admin can hide an order from the admin list without losing
+    // the row (accounting/audit safety). NULL = visible. See softDeleteOrder.
+    deletedAt: timestamp('deleted_at', { withTimezone: true }),
+    deletedBy: text('deleted_by'),
     createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
     updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull()
 });

package/dist/shop/adapters/fakturownia/client.d.ts

@@ -0,0 +1,33 @@
+import type { FakturowniaInvoiceBody } from './payload.js';
+export interface FakturowniaClientOptions {
+    /** Account subdomain (`acme`) or full host/URL (`acme.fakturownia.pl`) — normalised either way. */
+    domain: string;
+    apiToken: string;
+    fetch?: typeof fetch;
+}
+export interface FakturowniaInvoice {
+    id: number | string;
+    number?: string;
+    view_url?: string;
+    [key: string]: unknown;
+}
+export declare class FakturowniaApiError extends Error {
+    readonly status: number;
+    readonly body?: unknown | undefined;
+    constructor(message: string, status: number, body?: unknown | undefined);
+}
+export declare class FakturowniaClient {
+    private readonly base;
+    private readonly apiToken;
+    private readonly fetchFn;
+    constructor(opts: FakturowniaClientOptions);
+    createInvoice(invoice: FakturowniaInvoiceBody): Promise<FakturowniaInvoice>;
+    sendByEmail(id: number | string): Promise<void>;
+    /**
+     * Read-only account lookup — used for connectivity/auth health checks.
+     * Does NOT create or modify anything. A 200 means domain + token are valid.
+     */
+    getAccount(): Promise<unknown>;
+    private postRaw;
+    private post;
+}