@infuro/cms-core 1.0.33 → 1.0.35

package/dist/migrations/helpers/vendor-role-seed.ts

@@ -0,0 +1,243 @@
+import type { QueryRunner } from 'typeorm';
+
+/** Self-contained for dist/migrations — do not import from src/lib. */
+
+const RBAC_ENTITIES = [
+  'products',
+  'collections',
+  'brands',
+  'product_categories',
+  'orders',
+  'payments',
+  'taxes',
+  'attributes',
+  'vendor_customers',
+  'discounts',
+  'order_discounts',
+  'order_addresses',
+  'events',
+  'event_products',
+  'dashboard',
+  'settings',
+  'team',
+  'roles',
+] as const;
+
+type Perm = { c: boolean; r: boolean; u: boolean; d: boolean };
+
+type RoleDef = {
+  name: string;
+  description: string;
+  isSystem: boolean;
+  isOwnerRole: boolean;
+  permissions: Record<string, Perm>;
+};
+
+function full(): Perm {
+  return { c: true, r: true, u: true, d: true };
+}
+function read(): Perm {
+  return { c: false, r: true, u: false, d: false };
+}
+function none(): Perm {
+  return { c: false, r: false, u: false, d: false };
+}
+function readUpdate(): Perm {
+  return { c: false, r: true, u: true, d: false };
+}
+
+const STORE_ENTITIES = RBAC_ENTITIES.filter(
+  (e) => !['dashboard', 'settings', 'team', 'roles'].includes(e)
+);
+
+function storePerms(spec: Record<string, Perm | 'full' | 'read' | 'none'>): Record<string, Perm> {
+  const resolve = (v: Perm | 'full' | 'read' | 'none'): Perm => {
+    if (v === 'full') return full();
+    if (v === 'read') return read();
+    if (v === 'none') return none();
+    return v;
+  };
+  const out: Record<string, Perm> = {};
+  for (const entity of STORE_ENTITIES) {
+    out[entity] = resolve(spec[entity] ?? 'none');
+  }
+  return out;
+}
+
+const DEFAULT_ROLES: RoleDef[] = [
+  {
+    name: 'Owner',
+    description: 'Full store access and team/role management',
+    isSystem: true,
+    isOwnerRole: true,
+    permissions: {
+      ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [e, 'full']))),
+      dashboard: read(),
+      settings: readUpdate(),
+      team: full(),
+      roles: full(),
+    },
+  },
+  {
+    name: 'Manager',
+    description: 'Day-to-day store operations',
+    isSystem: true,
+    isOwnerRole: false,
+    permissions: {
+      ...storePerms({
+        products: 'full',
+        collections: 'full',
+        brands: 'full',
+        product_categories: 'full',
+        orders: 'full',
+        vendor_customers: 'full',
+        discounts: 'full',
+        order_discounts: 'full',
+        order_addresses: 'full',
+        payments: 'read',
+        taxes: 'read',
+        attributes: 'read',
+      }),
+      dashboard: read(),
+      settings: read(),
+      team: none(),
+      roles: none(),
+    },
+  },
+  {
+    name: 'Catalog Staff',
+    description: 'Manage products and catalog content',
+    isSystem: true,
+    isOwnerRole: false,
+    permissions: {
+      ...storePerms({
+        products: 'full',
+        collections: 'full',
+        brands: 'full',
+        product_categories: 'full',
+        attributes: 'full',
+        orders: 'read',
+        vendor_customers: 'read',
+      }),
+      dashboard: read(),
+      settings: none(),
+      team: none(),
+      roles: none(),
+    },
+  },
+  {
+    name: 'Fulfillment',
+    description: 'Orders and fulfillment',
+    isSystem: true,
+    isOwnerRole: false,
+    permissions: {
+      ...storePerms({
+        products: 'read',
+        orders: 'full',
+        order_addresses: 'full',
+        order_discounts: 'read',
+        vendor_customers: 'read',
+      }),
+      dashboard: read(),
+      settings: none(),
+      team: none(),
+      roles: none(),
+    },
+  },
+  {
+    name: 'Viewer',
+    description: 'Read-only access to store data',
+    isSystem: true,
+    isOwnerRole: false,
+    permissions: {
+      ...storePerms(Object.fromEntries(STORE_ENTITIES.map((e) => [e, 'read']))),
+      dashboard: read(),
+      settings: none(),
+      team: none(),
+      roles: none(),
+    },
+  },
+];
+
+async function insertRolePermissions(
+  queryRunner: QueryRunner,
+  vendorRoleId: number,
+  permissions: Record<string, Perm>
+): Promise<void> {
+  for (const entity of RBAC_ENTITIES) {
+    const p = permissions[entity];
+    if (!p) continue;
+    await queryRunner.query(
+      `
+      INSERT INTO "vendor_role_permissions"
+        ("vendorRoleId", "entity", "canCreate", "canRead", "canUpdate", "canDelete")
+      VALUES ($1, $2, $3, $4, $5, $6)
+      ON CONFLICT ("vendorRoleId", "entity") DO NOTHING
+      `,
+      [vendorRoleId, entity, p.c, p.r, p.u, p.d]
+    );
+  }
+}
+
+/** Seed default vendor roles + backfill vendor_users.vendorRoleId (migration-safe). */
+export async function seedVendorRolesForMigration(
+  queryRunner: QueryRunner,
+  vendorId: number
+): Promise<void> {
+  const existing = (await queryRunner.query(
+    `SELECT id, name, "isOwnerRole" FROM "vendor_roles" WHERE "vendorId" = $1 AND "deleted" = false`,
+    [vendorId]
+  )) as Array<{ id: number; name: string; isOwnerRole: boolean }>;
+
+  let ownerRoleId = 0;
+  let viewerRoleId = 0;
+
+  if (existing.length > 0) {
+    for (const r of existing) {
+      if (r.isOwnerRole) ownerRoleId = r.id;
+      if (r.name === 'Viewer') viewerRoleId = r.id;
+    }
+  } else {
+    for (const def of DEFAULT_ROLES) {
+      const inserted = (await queryRunner.query(
+        `
+        INSERT INTO "vendor_roles"
+          ("vendorId", "name", "description", "isSystem", "isOwnerRole")
+        VALUES ($1, $2, $3, $4, $5)
+        RETURNING id
+        `,
+        [vendorId, def.name, def.description, def.isSystem, def.isOwnerRole]
+      )) as Array<{ id: number }>;
+      const roleId = inserted[0]?.id;
+      if (!roleId) continue;
+      if (def.isOwnerRole) ownerRoleId = roleId;
+      if (def.name === 'Viewer') viewerRoleId = roleId;
+      await insertRolePermissions(queryRunner, roleId, def.permissions);
+    }
+  }
+
+  if (ownerRoleId) {
+    await queryRunner.query(
+      `
+      UPDATE "vendor_users" vu
+      SET "vendorRoleId" = $1
+      WHERE vu."vendorId" = $2
+        AND vu."role" = 'owner'
+        AND vu."vendorRoleId" IS NULL
+      `,
+      [ownerRoleId, vendorId]
+    );
+  }
+  if (viewerRoleId) {
+    await queryRunner.query(
+      `
+      UPDATE "vendor_users" vu
+      SET "vendorRoleId" = $1
+      WHERE vu."vendorId" = $2
+        AND vu."role" = 'staff'
+        AND vu."vendorRoleId" IS NULL
+      `,
+      [viewerRoleId, vendorId]
+    );
+  }
+}

package/dist/paid-order-erp-3USEG6WL.js

@@ -0,0 +1,3 @@
+export { queueErpPaidOrderForOrderId } from './chunk-TDV6EJHV.js';
+import './chunk-SYBOCAWB.js';
+import './chunk-SHUYVCID.js';

package/dist/paid-order-erp-FSQ3GSXE.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var chunkHF3L2GIT_cjs = require('./chunk-HF3L2GIT.cjs');
+require('./chunk-D5FBNKQM.cjs');
+require('./chunk-USNT2KNT.cjs');
+
+
+
+Object.defineProperty(exports, "queueErpPaidOrderForOrderId", {
+  enumerable: true,
+  get: function () { return chunkHF3L2GIT_cjs.queueErpPaidOrderForOrderId; }
+});

package/dist/pg-boss-service-4XF2TQ2E.js

@@ -0,0 +1,2 @@
+export { JOB_RUNNER_QUEUE, PgBossService } from './chunk-GO7PPYNU.js';
+import './chunk-SHUYVCID.js';

package/dist/pg-boss-service-L6MTF4EQ.cjs

@@ -0,0 +1,15 @@
+'use strict';
+
+var chunkXQ3QUHWR_cjs = require('./chunk-XQ3QUHWR.cjs');
+require('./chunk-USNT2KNT.cjs');
+
+
+
+Object.defineProperty(exports, "JOB_RUNNER_QUEUE", {
+  enumerable: true,
+  get: function () { return chunkXQ3QUHWR_cjs.JOB_RUNNER_QUEUE; }
+});
+Object.defineProperty(exports, "PgBossService", {
+  enumerable: true,
+  get: function () { return chunkXQ3QUHWR_cjs.PgBossService; }
+});

package/dist/razorpay-KLO2KNCB.js

@@ -0,0 +1,49 @@
+import { __name } from './chunk-SHUYVCID.js';
+import Razorpay from 'razorpay';
+import crypto from 'crypto';
+
+var RazorpayPaymentService = class {
+  static {
+    __name(this, "RazorpayPaymentService");
+  }
+  razorpay;
+  keySecret;
+  webhookSecret;
+  constructor(config) {
+    this.razorpay = new Razorpay({
+      key_id: config.keyId,
+      key_secret: config.keySecret
+    });
+    this.keySecret = config.keySecret;
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createPaymentIntent(amount, currency, metadata) {
+    const order = await this.razorpay.orders.create({
+      amount: Math.round(amount * 100),
+      currency: currency.toUpperCase(),
+      notes: metadata
+    });
+    return {
+      id: order.id,
+      clientSecret: order.id,
+      amount,
+      currency,
+      status: order.status
+    };
+  }
+  async capturePayment(paymentId, amount) {
+    try {
+      await this.razorpay.payments.capture(paymentId, amount ? Math.round(amount * 100) : 0, "INR");
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  verifyWebhookSignature(payload, signature) {
+    const secret = this.webhookSecret || this.keySecret;
+    const expectedSignature = crypto.createHmac("sha256", secret).update(typeof payload === "string" ? payload : payload.toString("utf8")).digest("hex");
+    return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature));
+  }
+};
+
+export { RazorpayPaymentService };

package/dist/razorpay-U23LGY72.cjs

@@ -0,0 +1,56 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var Razorpay = require('razorpay');
+var crypto = require('crypto');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var Razorpay__default = /*#__PURE__*/_interopDefault(Razorpay);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+
+var RazorpayPaymentService = class {
+  static {
+    chunkUSNT2KNT_cjs.__name(this, "RazorpayPaymentService");
+  }
+  razorpay;
+  keySecret;
+  webhookSecret;
+  constructor(config) {
+    this.razorpay = new Razorpay__default.default({
+      key_id: config.keyId,
+      key_secret: config.keySecret
+    });
+    this.keySecret = config.keySecret;
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createPaymentIntent(amount, currency, metadata) {
+    const order = await this.razorpay.orders.create({
+      amount: Math.round(amount * 100),
+      currency: currency.toUpperCase(),
+      notes: metadata
+    });
+    return {
+      id: order.id,
+      clientSecret: order.id,
+      amount,
+      currency,
+      status: order.status
+    };
+  }
+  async capturePayment(paymentId, amount) {
+    try {
+      await this.razorpay.payments.capture(paymentId, amount ? Math.round(amount * 100) : 0, "INR");
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  verifyWebhookSignature(payload, signature) {
+    const secret = this.webhookSecret || this.keySecret;
+    const expectedSignature = crypto__default.default.createHmac("sha256", secret).update(typeof payload === "string" ? payload : payload.toString("utf8")).digest("hex");
+    return crypto__default.default.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature));
+  }
+};
+
+exports.RazorpayPaymentService = RazorpayPaymentService;

package/dist/rbac-debug-db-D7ME7QUY.cjs

@@ -0,0 +1,35 @@
+'use strict';
+
+var chunk3KPNTQBV_cjs = require('./chunk-3KPNTQBV.cjs');
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/auth/rbac-debug-db.ts
+async function loadDbPermissionsForUser(dataSource, userId) {
+  const rows = await dataSource.query(`
+    SELECT u."groupId" AS "groupId", g.name AS "groupName",
+           p.entity, p."canCreate", p."canRead", p."canUpdate", p."canDelete"
+    FROM users u
+    LEFT JOIN user_groups g ON g.id = u."groupId" AND g.deleted = false
+    LEFT JOIN permissions p ON p."groupId" = g.id
+    WHERE u.id = $1
+    `, [
+    userId
+  ]);
+  const groupId = rows[0]?.groupId ?? null;
+  const groupName = rows[0]?.groupName ?? null;
+  const permRows = rows.filter((r) => r.entity).map((r) => ({
+    entity: r.entity,
+    canCreate: !!r.canCreate,
+    canRead: !!r.canRead,
+    canUpdate: !!r.canUpdate,
+    canDelete: !!r.canDelete
+  }));
+  return {
+    groupId,
+    groupName,
+    dbEntityPerms: chunk3KPNTQBV_cjs.summarizeEntityPerms(chunk3KPNTQBV_cjs.permissionRowsToRecord(permRows))
+  };
+}
+chunkUSNT2KNT_cjs.__name(loadDbPermissionsForUser, "loadDbPermissionsForUser");
+
+exports.loadDbPermissionsForUser = loadDbPermissionsForUser;

package/dist/rbac-debug-db-MTCTVNNM.js

@@ -0,0 +1,33 @@
+import { summarizeEntityPerms, permissionRowsToRecord } from './chunk-4TRPKBKO.js';
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/auth/rbac-debug-db.ts
+async function loadDbPermissionsForUser(dataSource, userId) {
+  const rows = await dataSource.query(`
+    SELECT u."groupId" AS "groupId", g.name AS "groupName",
+           p.entity, p."canCreate", p."canRead", p."canUpdate", p."canDelete"
+    FROM users u
+    LEFT JOIN user_groups g ON g.id = u."groupId" AND g.deleted = false
+    LEFT JOIN permissions p ON p."groupId" = g.id
+    WHERE u.id = $1
+    `, [
+    userId
+  ]);
+  const groupId = rows[0]?.groupId ?? null;
+  const groupName = rows[0]?.groupName ?? null;
+  const permRows = rows.filter((r) => r.entity).map((r) => ({
+    entity: r.entity,
+    canCreate: !!r.canCreate,
+    canRead: !!r.canRead,
+    canUpdate: !!r.canUpdate,
+    canDelete: !!r.canDelete
+  }));
+  return {
+    groupId,
+    groupName,
+    dbEntityPerms: summarizeEntityPerms(permissionRowsToRecord(permRows))
+  };
+}
+__name(loadDbPermissionsForUser, "loadDbPermissionsForUser");
+
+export { loadDbPermissionsForUser };

package/dist/sms-defaults-2NL24H57.js

@@ -0,0 +1,2 @@
+export { SMS_MESSAGE_TEMPLATE_DEFAULTS, getSmsTemplateDefault, resolveSmsTemplateForSend } from './chunk-MQBT33IV.js';
+import './chunk-SHUYVCID.js';

package/dist/sms-defaults-KCOPKQBA.cjs

@@ -0,0 +1,19 @@
+'use strict';
+
+var chunk3DZRIZOD_cjs = require('./chunk-3DZRIZOD.cjs');
+require('./chunk-USNT2KNT.cjs');
+
+
+
+Object.defineProperty(exports, "SMS_MESSAGE_TEMPLATE_DEFAULTS", {
+  enumerable: true,
+  get: function () { return chunk3DZRIZOD_cjs.SMS_MESSAGE_TEMPLATE_DEFAULTS; }
+});
+Object.defineProperty(exports, "getSmsTemplateDefault", {
+  enumerable: true,
+  get: function () { return chunk3DZRIZOD_cjs.getSmsTemplateDefault; }
+});
+Object.defineProperty(exports, "resolveSmsTemplateForSend", {
+  enumerable: true,
+  get: function () { return chunk3DZRIZOD_cjs.resolveSmsTemplateForSend; }
+});

package/dist/stripe-4FD27QVJ.js

@@ -0,0 +1,51 @@
+import { __name } from './chunk-SHUYVCID.js';
+import Stripe from 'stripe';
+
+var StripePaymentService = class {
+  static {
+    __name(this, "StripePaymentService");
+  }
+  stripe;
+  webhookSecret;
+  constructor(config) {
+    this.stripe = new Stripe(config.secretKey, {
+      apiVersion: "2026-02-25.clover"
+    });
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createPaymentIntent(amount, currency, metadata) {
+    const intent = await this.stripe.paymentIntents.create({
+      amount: Math.round(amount * 100),
+      currency: currency.toLowerCase(),
+      metadata
+    });
+    return {
+      id: intent.id,
+      clientSecret: intent.client_secret || "",
+      amount,
+      currency,
+      status: intent.status
+    };
+  }
+  async capturePayment(paymentId, amount) {
+    try {
+      await this.stripe.paymentIntents.capture(paymentId, {
+        amount_to_capture: amount ? Math.round(amount * 100) : void 0
+      });
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  verifyWebhookSignature(payload, signature) {
+    if (!this.webhookSecret) return false;
+    try {
+      this.stripe.webhooks.constructEvent(payload, signature, this.webhookSecret);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+};
+
+export { StripePaymentService };

package/dist/stripe-VU6OEG2D.cjs

@@ -0,0 +1,57 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var Stripe = require('stripe');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var Stripe__default = /*#__PURE__*/_interopDefault(Stripe);
+
+var StripePaymentService = class {
+  static {
+    chunkUSNT2KNT_cjs.__name(this, "StripePaymentService");
+  }
+  stripe;
+  webhookSecret;
+  constructor(config) {
+    this.stripe = new Stripe__default.default(config.secretKey, {
+      apiVersion: "2026-02-25.clover"
+    });
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createPaymentIntent(amount, currency, metadata) {
+    const intent = await this.stripe.paymentIntents.create({
+      amount: Math.round(amount * 100),
+      currency: currency.toLowerCase(),
+      metadata
+    });
+    return {
+      id: intent.id,
+      clientSecret: intent.client_secret || "",
+      amount,
+      currency,
+      status: intent.status
+    };
+  }
+  async capturePayment(paymentId, amount) {
+    try {
+      await this.stripe.paymentIntents.capture(paymentId, {
+        amount_to_capture: amount ? Math.round(amount * 100) : void 0
+      });
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  verifyWebhookSignature(payload, signature) {
+    if (!this.webhookSecret) return false;
+    try {
+      this.stripe.webhooks.constructEvent(payload, signature, this.webhookSecret);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+};
+
+exports.StripePaymentService = StripePaymentService;