includio-cms 0.28.0 → 0.34.0

package/dist/core/cms.js

@@ -23,6 +23,7 @@ export class CMS {
     sidebarHelp;
     shopConfig;
     cmpConfig;
+    adminConfig;
     /**
      * Resolves once the shop's variant-attribute GIN indexes have been applied
      * by `initCMS()`. `null` when the CMS is configured without a shop. Tests
@@ -47,6 +48,7 @@ export class CMS {
         this.sidebarHelp = config.sidebarHelp ?? true;
         this.shopConfig = config.shop ?? null;
         this.cmpConfig = config.cmp ?? null;
+        this.adminConfig = config.admin ?? null;
         this.collections = {};
         this.singles = {};
         this.forms = {};
@@ -134,6 +136,7 @@ export class CMS {
                 database: drizzleAdapter(drizzleDb, { provider: 'pg', schema: authSchema }),
                 secret: this.authConfig.secret,
                 baseURL: this.authConfig.baseURL,
+                ...(this.authConfig.rateLimit ? { rateLimit: this.authConfig.rateLimit } : {}),
                 emailAndPassword: {
                     enabled: true,
                     async sendResetPassword({ user, url }, request) {
@@ -185,6 +188,18 @@ export function initCMS(config) {
                 console.warn('[shop] Failed to apply variant attribute indexes:', e);
             });
         }
+        // Smoke-test built-in shop email templates — fast lookup-only sweep.
+        // Catches corrupt installs (missing files in dist) at boot instead of
+        // at first email send. Dynamic import avoids loading shop server code
+        // when there is no shop configured.
+        import('../shop/server/email.js')
+            .then(({ REQUIRED_TEMPLATE_NAMES }) => import('../shop/server/emailTemplateRegistry.js').then(({ validateBuiltinTemplates }) => {
+            const defaultLang = cms.languages[0] ?? 'pl';
+            validateBuiltinTemplates([...REQUIRED_TEMPLATE_NAMES], defaultLang);
+        }))
+            .catch((e) => {
+            console.error('[shop] Built-in email template validation failed:', e);
+        });
     }
     return cms;
 }
@@ -210,3 +225,52 @@ export function getCMS() {
     }
     return cms;
 }
+/**
+ * Returns the configured email adapter from the active CMS singleton, or
+ * `null` when no `email` was passed to `defineConfig`. Use this in userland
+ * hooks (e.g. `ShopConfig.onOrderPaid`) to reuse the same SMTP transport the
+ * CMS already opened — no second nodemailer instance, no duplicated ENV.
+ *
+ * @returns The current `EmailAdapter` or `null`.
+ * @throws {Error} when called before `initCMS()` has run.
+ * @public
+ * @example
+ * ```ts
+ * import { getMailer } from 'includio-cms/core';
+ *
+ * const mailer = getMailer();
+ * if (mailer) await mailer.sendMail({ to: 'admin@…', subject: '…', html: '…' });
+ * ```
+ */
+export function getMailer() {
+    return getCMS().emailAdapter;
+}
+/**
+ * Send an email through the configured CMS email adapter. Thin convenience
+ * wrapper around `getCMS().emailAdapter.sendMail` — same options shape, same
+ * From address, same SMTP transport as the built-in flows (reset password,
+ * shop order status, form notifications).
+ *
+ * @throws {Error} when no email adapter is configured (matches
+ *   `defineConfig({ email: ... })` not being set) or when the CMS has not
+ *   been initialized yet.
+ * @public
+ * @example
+ * ```ts
+ * import { sendMail } from 'includio-cms/core';
+ *
+ * await sendMail({
+ *   to: process.env.ADMIN_EMAIL!,
+ *   subject: '[shop] New consent',
+ *   text: 'Plain fallback for clients that prefer text.',
+ *   html: '<p>Body…</p>'
+ * });
+ * ```
+ */
+export async function sendMail(options) {
+    const mailer = getCMS().emailAdapter;
+    if (!mailer) {
+        throw new Error('[includio-cms] sendMail() called but no `email` adapter is configured in defineConfig.');
+    }
+    await mailer.sendMail(options);
+}

package/dist/core/index.d.ts

@@ -1,5 +1,2 @@
-export { getCMS } from './cms.js';
-export { resolveMediaWithStyles, type ResolvedMedia } from './server/fields/utils/resolveMedia.js';
 export { resolveSeo, type ResolvedSeo } from './fields/resolveSeo.js';
-export { createEntityAPI } from '../entity/index.js';
-export { getAuth } from '../server/auth.js';
+export type { EmailAdapter, SendMailOptions } from '../types/adapters/email.js';

package/dist/core/index.js

@@ -1,5 +1,5 @@
-export { getCMS } from './cms.js';
-export { resolveMediaWithStyles } from './server/fields/utils/resolveMedia.js';
+// `resolveSeo` is client-safe (pure). `getMailer`/`sendMail` moved to the server
+// entry (`includio-cms/sveltekit/server`) so importing SEO helpers in a
+// browser/component bundle no longer pulls in `cms.js` and its server graph
+// ($env/dynamic/private).
 export { resolveSeo } from './fields/resolveSeo.js';
-export { createEntityAPI } from '../entity/index.js';
-export { getAuth } from '../server/auth.js';

package/dist/core/server/index.d.ts

@@ -1 +1,4 @@
-export {};
+export { getCMS } from '../cms.js';
+export { resolveMediaWithStyles, type ResolvedMedia } from './fields/utils/resolveMedia.js';
+export { createEntityAPI } from '../../entity/index.js';
+export { getAuth } from '../../server/auth.js';

package/dist/core/server/index.js

@@ -1 +1,4 @@
-"use strict";
+export { getCMS } from '../cms.js';
+export { resolveMediaWithStyles } from './fields/utils/resolveMedia.js';
+export { createEntityAPI } from '../../entity/index.js';
+export { getAuth } from '../../server/auth.js';

package/dist/db-postgres/schema/shop/order.d.ts

@@ -565,6 +565,40 @@ export declare const shopOrdersTable: import("drizzle-orm/pg-core/table", { with
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        deletedAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "deleted_at";
+            tableName: "shop_orders";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        deletedBy: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "deleted_by";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createdAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "created_at";
             tableName: "shop_orders";

package/dist/db-postgres/schema/shop/order.js

@@ -35,6 +35,10 @@ export const shopOrdersTable = pgTable('shop_orders', {
     accessToken: uuid('access_token').defaultRandom().notNull(),
     partialPayment: jsonb('partial_payment').$type(),
     balanceOwed: boolean('balance_owed').default(false).notNull(),
+    // Soft-delete: admin can hide an order from the admin list without losing
+    // the row (accounting/audit safety). NULL = visible. See softDeleteOrder.
+    deletedAt: timestamp('deleted_at', { withTimezone: true }),
+    deletedBy: text('deleted_by'),
     createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
     updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull()
 });

package/dist/paraglide/messages/_index.d.ts

@@ -1,36 +1,3 @@
-export function hello_world(inputs: {
-    name: NonNullable<unknown>;
-}, options?: {
-    locale?: "en" | "pl";
-}): string;
-/**
-* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
-*
-* - Changing this function will be over-written by the next build.
-*
-* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
-* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
-*
-* @param {{}} inputs
-* @param {{ locale?: "en" | "pl" }} options
-* @returns {string}
-*/
-declare function login_hello(inputs?: {}, options?: {
-    locale?: "en" | "pl";
-}): string;
-/**
-* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
-*
-* - Changing this function will be over-written by the next build.
-*
-* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
-* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
-*
-* @param {{}} inputs
-* @param {{ locale?: "en" | "pl" }} options
-* @returns {string}
-*/
-declare function login_please_login(inputs?: {}, options?: {
-    locale?: "en" | "pl";
-}): string;
-export { login_hello as login.hello, login_please_login as login.please_login };
+export * from "./hello_world.js";
+export * from "./login_hello.js";
+export * from "./login_please_login.js";

package/dist/paraglide/messages/_index.js

@@ -1,72 +1,4 @@
 /* eslint-disable */
-import { getLocale, trackMessageCall, experimentalMiddlewareLocaleSplitting, isServer } from "../runtime.js"
-import * as en from "./en.js"
-import * as pl from "./pl.js"
-/**
-* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
-*
-* - Changing this function will be over-written by the next build.
-*
-* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
-* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
-* 
-* @param {{ name: NonNullable<unknown> }} inputs
-* @param {{ locale?: "en" | "pl" }} options
-* @returns {string}
-*/
-/* @__NO_SIDE_EFFECTS__ */
-export const hello_world = (inputs, options = {}) => {
-	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
-		return /** @type {any} */ (globalThis).__paraglide_ssr.hello_world(inputs) 
-	}
-	const locale = options.locale ?? getLocale()
-	trackMessageCall("hello_world", locale)
-	if (locale === "en") return en.hello_world(inputs)
-	return pl.hello_world(inputs)
-};
-/**
-* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
-*
-* - Changing this function will be over-written by the next build.
-*
-* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
-* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
-* 
-* @param {{}} inputs
-* @param {{ locale?: "en" | "pl" }} options
-* @returns {string}
-*/
-/* @__NO_SIDE_EFFECTS__ */
-const login_hello = (inputs = {}, options = {}) => {
-	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
-		return /** @type {any} */ (globalThis).__paraglide_ssr.login_hello(inputs) 
-	}
-	const locale = options.locale ?? getLocale()
-	trackMessageCall("login_hello", locale)
-	if (locale === "en") return en.login_hello(inputs)
-	return pl.login_hello(inputs)
-};
-export { login_hello as "login.hello" }
-/**
-* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
-*
-* - Changing this function will be over-written by the next build.
-*
-* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
-* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
-* 
-* @param {{}} inputs
-* @param {{ locale?: "en" | "pl" }} options
-* @returns {string}
-*/
-/* @__NO_SIDE_EFFECTS__ */
-const login_please_login = (inputs = {}, options = {}) => {
-	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
-		return /** @type {any} */ (globalThis).__paraglide_ssr.login_please_login(inputs) 
-	}
-	const locale = options.locale ?? getLocale()
-	trackMessageCall("login_please_login", locale)
-	if (locale === "en") return en.login_please_login(inputs)
-	return pl.login_please_login(inputs)
-};
-export { login_please_login as "login.please_login" }
+export * from './hello_world.js'
+export * from './login_hello.js'
+export * from './login_please_login.js'

package/dist/paraglide/messages/hello_world.d.ts

@@ -0,0 +1,5 @@
+export function hello_world(inputs: {
+    name: NonNullable<unknown>;
+}, options?: {
+    locale?: "en" | "pl";
+}): string;

package/dist/paraglide/messages/hello_world.js

@@ -0,0 +1,33 @@
+/* eslint-disable */
+import { getLocale, trackMessageCall, experimentalMiddlewareLocaleSplitting, isServer } from '../runtime.js';
+
+const en_hello_world = /** @type {(inputs: { name: NonNullable<unknown> }) => string} */ (i) => {
+	return `Hello, ${i.name} from en!`
+};
+
+const pl_hello_world = /** @type {(inputs: { name: NonNullable<unknown> }) => string} */ (i) => {
+	return `Hello, ${i.name} from pl!`
+};
+
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{ name: NonNullable<unknown> }} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+export const hello_world = (inputs, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.hello_world(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("hello_world", locale)
+	if (locale === "en") return en_hello_world(inputs)
+	return pl_hello_world(inputs)
+};

package/dist/paraglide/messages/login_hello.d.ts

@@ -0,0 +1,16 @@
+export { login_hello as login.hello };
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+*
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+declare function login_hello(inputs?: {}, options?: {
+    locale?: "en" | "pl";
+}): string;

package/dist/paraglide/messages/login_hello.js

@@ -0,0 +1,34 @@
+/* eslint-disable */
+import { getLocale, trackMessageCall, experimentalMiddlewareLocaleSplitting, isServer } from '../runtime.js';
+
+const en_login_hello = /** @type {(inputs: {}) => string} */ () => {
+	return `Welcome back`
+};
+
+const pl_login_hello = /** @type {(inputs: {}) => string} */ () => {
+	return `Witaj ponownie`
+};
+
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+const login_hello = (inputs = {}, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.login_hello(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("login_hello", locale)
+	if (locale === "en") return en_login_hello(inputs)
+	return pl_login_hello(inputs)
+};
+export { login_hello as "login.hello" }

package/dist/paraglide/messages/login_please_login.d.ts

@@ -0,0 +1,16 @@
+export { login_please_login as login.please_login };
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+*
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+declare function login_please_login(inputs?: {}, options?: {
+    locale?: "en" | "pl";
+}): string;

package/dist/paraglide/messages/login_please_login.js

@@ -0,0 +1,34 @@
+/* eslint-disable */
+import { getLocale, trackMessageCall, experimentalMiddlewareLocaleSplitting, isServer } from '../runtime.js';
+
+const en_login_please_login = /** @type {(inputs: {}) => string} */ () => {
+	return `Login to your account`
+};
+
+const pl_login_please_login = /** @type {(inputs: {}) => string} */ () => {
+	return `Zaloguj się na swoje konto`
+};
+
+/**
+* This function has been compiled by [Paraglide JS](https://inlang.com/m/gerre34r).
+*
+* - Changing this function will be over-written by the next build.
+*
+* - If you want to change the translations, you can either edit the source files e.g. `en.json`, or
+* use another inlang app like [Fink](https://inlang.com/m/tdozzpar) or the [VSCode extension Sherlock](https://inlang.com/m/r7kp499g).
+* 
+* @param {{}} inputs
+* @param {{ locale?: "en" | "pl" }} options
+* @returns {string}
+*/
+/* @__NO_SIDE_EFFECTS__ */
+const login_please_login = (inputs = {}, options = {}) => {
+	if (experimentalMiddlewareLocaleSplitting && isServer === false) {
+		return /** @type {any} */ (globalThis).__paraglide_ssr.login_please_login(inputs) 
+	}
+	const locale = options.locale ?? getLocale()
+	trackMessageCall("login_please_login", locale)
+	if (locale === "en") return en_login_please_login(inputs)
+	return pl_login_please_login(inputs)
+};
+export { login_please_login as "login.please_login" }

package/dist/shop/adapters/fakturownia/client.d.ts

@@ -23,6 +23,11 @@ export declare class FakturowniaClient {
     constructor(opts: FakturowniaClientOptions);
     createInvoice(invoice: FakturowniaInvoiceBody): Promise<FakturowniaInvoice>;
     sendByEmail(id: number | string): Promise<void>;
+    /**
+     * Read-only account lookup — used for connectivity/auth health checks.
+     * Does NOT create or modify anything. A 200 means domain + token are valid.
+     */
+    getAccount(): Promise<unknown>;
     private postRaw;
     private post;
 }

package/dist/shop/adapters/fakturownia/client.js

@@ -40,6 +40,26 @@ export class FakturowniaClient {
             api_token: this.apiToken
         });
     }
+    /**
+     * Read-only account lookup — used for connectivity/auth health checks.
+     * Does NOT create or modify anything. A 200 means domain + token are valid.
+     */
+    async getAccount() {
+        const res = await this.fetchFn(`${this.base}/account.json?api_token=${encodeURIComponent(this.apiToken)}`, { headers: { Accept: 'application/json' } });
+        if (!res.ok) {
+            let body;
+            try {
+                body = await res.json();
+            }
+            catch {
+                body = await res.text().catch(() => undefined);
+            }
+            const raw = body == null ? '' : typeof body === 'string' ? body : JSON.stringify(body);
+            const detail = raw ? `: ${raw.slice(0, 400)}` : '';
+            throw new FakturowniaApiError(`Fakturownia /account.json → ${res.status}${detail}`, res.status, body);
+        }
+        return res.json();
+    }
     async postRaw(path, payload) {
         const res = await this.fetchFn(`${this.base}${path}`, {
             method: 'POST',

package/dist/shop/adapters/fakturownia/index.js

@@ -32,5 +32,16 @@ export function fakturowniaAdapter(opts) {
             await client.sendByEmail(externalId);
         };
     }
+    adapter.healthCheck = async () => {
+        // Read-only /account.json lookup — verifies domain + token without
+        // issuing an invoice.
+        try {
+            await client.getAccount();
+            return { ok: true };
+        }
+        catch (e) {
+            return { ok: false, message: e instanceof Error ? e.message : String(e) };
+        }
+    };
     return adapter;
 }

package/dist/shop/adapters/payu/index.js

@@ -99,6 +99,17 @@ export function payuAdapter(opts) {
                 amount: input.amount ?? 0,
                 raw: result.raw
             };
+        },
+        async healthCheck() {
+            // OAuth client_credentials token fetch — reaches PayU and verifies
+            // posId/clientId/clientSecret without creating an order.
+            try {
+                await client.getAccessToken();
+                return { ok: true };
+            }
+            catch (e) {
+                return { ok: false, message: e instanceof Error ? e.message : String(e) };
+            }
         }
     };
 }

package/dist/shop/index.d.ts

@@ -12,5 +12,5 @@ export type { InpostAdapterOptions, InpostSenderAddress, GeowidgetConfigPreset,
 export { fakturowniaAdapter } from './adapters/fakturownia/index.js';
 export type { FakturowniaAdapterOptions } from './adapters/fakturownia/index.js';
 export { isValidNip } from './nip.js';
-export type { ShopConfig, ResolvedShopConfig, Currency, OrderStatus, PaymentAdapter, PaymentCreateContext, PaymentRefundInput, PaymentRefundResult, CarrierAdapter, CarrierEvent, ShipmentCreateInput, ShipmentCreateResult, ShipmentLabel, ConsentConfig, ShopFeatures, PaymentCreateResult, PaymentEvent, OrderRef, CouponRef, I18nText, VariantAttribute, VariantAttributeText, VariantAttributeNumber, VariantAttributeDatetime, VariantAttributeSelect, VariantAttributeBoolean, VariantAttributeImage, VariantAttributeEntry, VariantAttributeSlug, VariantLabelConfig, VariantExpiryConfig, PaymentPolicy, DepositAmount, PartialPayment, InvoicingAdapter, InvoiceIssuePolicy, InvoiceBuyer, InvoiceLineItem, InvoicePayload, InvoiceCreateResult, InvoiceContext } from './types.js';
+export type { ShopConfig, ResolvedShopConfig, Currency, Order, OrderStatus, PaymentAdapter, PaymentCreateContext, PaymentRefundInput, PaymentRefundResult, CarrierAdapter, CarrierEvent, ShipmentCreateInput, ShipmentCreateResult, ShipmentLabel, ConsentConfig, ShopFeatures, PaymentCreateResult, PaymentEvent, OrderRef, CouponRef, I18nText, VariantAttribute, VariantAttributeText, VariantAttributeNumber, VariantAttributeDatetime, VariantAttributeSelect, VariantAttributeBoolean, VariantAttributeImage, VariantAttributeEntry, VariantAttributeSlug, VariantLabelConfig, VariantExpiryConfig, PaymentPolicy, DepositAmount, PartialPayment, InvoicingAdapter, InvoiceIssuePolicy, InvoiceBuyer, InvoiceLineItem, InvoicePayload, InvoiceCreateResult, InvoiceContext } from './types.js';
 export { interpolateTemplate } from './template.js';

package/dist/shop/server/coupons.d.ts

@@ -51,3 +51,13 @@ export declare function recordCouponRedemption(input: {
  * row commits.
  */
 export declare function releaseCouponSlot(couponId: string): Promise<void>;
+/**
+ * Read the coupon applied to an order (if any), via the redemption row.
+ * Returns `null` when the order had no coupon or the redemption row is missing.
+ * Safe to call from email/admin/storefront — uses the same authoritative
+ * `shop_coupon_redemptions` table that `recordCouponRedemption` writes to.
+ */
+export declare function getOrderCoupon(orderId: string): Promise<{
+    code: string;
+    discountAmount: number;
+} | null>;

package/dist/shop/server/coupons.js

@@ -115,3 +115,22 @@ export async function releaseCouponSlot(couponId) {
     })
         .where(eq(shopCouponsTable.id, couponId));
 }
+/**
+ * Read the coupon applied to an order (if any), via the redemption row.
+ * Returns `null` when the order had no coupon or the redemption row is missing.
+ * Safe to call from email/admin/storefront — uses the same authoritative
+ * `shop_coupon_redemptions` table that `recordCouponRedemption` writes to.
+ */
+export async function getOrderCoupon(orderId) {
+    const db = getShopDb();
+    const [row] = await db
+        .select({
+        code: shopCouponsTable.code,
+        discountAmount: shopCouponRedemptionsTable.discountAmount
+    })
+        .from(shopCouponRedemptionsTable)
+        .innerJoin(shopCouponsTable, eq(shopCouponRedemptionsTable.couponId, shopCouponsTable.id))
+        .where(eq(shopCouponRedemptionsTable.orderId, orderId))
+        .limit(1);
+    return row ?? null;
+}

package/dist/shop/server/email.d.ts

@@ -1,11 +1,15 @@
 import type { OrderStatus } from '../types.js';
+/**
+ * List of template names a shop install must ship in `dist/shop/templates/`.
+ * Consumed by `validateBuiltinTemplates` at CMS bootstrap.
+ * @internal
+ */
+export declare const REQUIRED_TEMPLATE_NAMES: readonly string[];
 export declare function sendOrderStatusEmail(orderId: string, status: OrderStatus): Promise<void>;
 /**
  * Notify the shop admin that a product crossed its low-stock threshold.
  * Fire-and-forget — silently no-ops when no `shop.adminEmail` or no email
- * adapter is configured. Stays inside email.ts to keep the adapter call
- * site centralised (HTML, escaping, logging behaviour identical to status
- * emails).
+ * adapter is configured.
  *
  * @internal
  */