@infuro/cms-core 1.0.34 → 1.0.35

package/dist/chunk-5ELSW2UP.js

@@ -0,0 +1,150 @@
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/plugins/email/email-queue.ts
+var EMAIL_QUEUE_NAME = "email";
+function registerEmailQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const email = cms.getPlugin("email");
+  if (!queue || !email) return;
+  queue.registerProcessor(EMAIL_QUEUE_NAME, async (data) => {
+    const payload = data;
+    const { to, templateName, ctx, subject, html, text } = payload;
+    if (!to) return;
+    if (templateName && ctx) {
+      const rendered = email.renderTemplate(templateName, ctx);
+      await email.send({
+        to,
+        subject: rendered.subject,
+        html: rendered.html,
+        text: rendered.text
+      });
+    } else if (subject != null && html != null) {
+      await email.send({
+        to,
+        subject,
+        html,
+        text
+      });
+    }
+  });
+}
+__name(registerEmailQueueProcessor, "registerEmailQueueProcessor");
+async function queueEmail(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  if (queue) {
+    await queue.add(EMAIL_QUEUE_NAME, payload);
+    return;
+  }
+  const email = cms.getPlugin("email");
+  if (email && payload.templateName && payload.ctx) {
+    const rendered = email.renderTemplate(payload.templateName, payload.ctx);
+    await email.send({
+      to: payload.to,
+      subject: rendered.subject,
+      html: rendered.html,
+      text: rendered.text
+    });
+  } else if (email && payload.subject != null && payload.html != null) {
+    await email.send({
+      to: payload.to,
+      subject: payload.subject,
+      html: payload.html,
+      text: payload.text
+    });
+  }
+}
+__name(queueEmail, "queueEmail");
+async function queueOrderPlacedEmails(cms, payload) {
+  const { orderNumber, total, subtotal, tax, currency, customerName, customerEmail, salesTeamEmails, companyDetails, lineItems, billingAddress, shippingAddress } = payload;
+  const base = {
+    orderNumber,
+    total: total != null ? String(total) : void 0,
+    subtotal: subtotal != null ? String(subtotal) : void 0,
+    tax: tax != null ? String(tax) : void 0,
+    currency,
+    customerName,
+    companyDetails: companyDetails ?? {},
+    lineItems: lineItems ?? [],
+    billingAddress,
+    shippingAddress
+  };
+  const customerLower = customerEmail?.trim().toLowerCase() ?? "";
+  const jobs = [];
+  if (customerEmail?.trim()) {
+    jobs.push(queueEmail(cms, {
+      to: customerEmail.trim(),
+      templateName: "orderPlaced",
+      ctx: {
+        ...base,
+        audience: "customer"
+      }
+    }));
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of salesTeamEmails) {
+    const to = raw.trim();
+    if (!to) continue;
+    const key = to.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (customerLower && key === customerLower) continue;
+    jobs.push(queueEmail(cms, {
+      to,
+      templateName: "orderPlaced",
+      ctx: {
+        ...base,
+        audience: "sales",
+        internalCustomerEmail: customerEmail?.trim() || void 0
+      }
+    }));
+  }
+  await Promise.all(jobs);
+}
+__name(queueOrderPlacedEmails, "queueOrderPlacedEmails");
+async function queueVendorOnboardEmails(cms, payload) {
+  const { vendorName, vendorSlug, ownerName, ownerEmail, activation, inviteLink, signInLink, kind = "vendor_onboard", notifyEmails, companyDetails, sendToOwner = true } = payload;
+  const base = {
+    vendorName,
+    vendorSlug,
+    ownerName,
+    ownerEmail,
+    activation,
+    inviteLink,
+    signInLink,
+    kind,
+    companyDetails: companyDetails ?? {}
+  };
+  const ownerLower = ownerEmail?.trim().toLowerCase() ?? "";
+  const jobs = [];
+  if (sendToOwner && ownerEmail?.trim()) {
+    jobs.push(queueEmail(cms, {
+      to: ownerEmail.trim(),
+      templateName: "vendorOnboarded",
+      ctx: {
+        ...base,
+        audience: "owner"
+      }
+    }));
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of notifyEmails) {
+    const to = raw.trim();
+    if (!to) continue;
+    const key = to.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (ownerLower && key === ownerLower) continue;
+    jobs.push(queueEmail(cms, {
+      to,
+      templateName: "vendorOnboarded",
+      ctx: {
+        ...base,
+        audience: "internal"
+      }
+    }));
+  }
+  await Promise.all(jobs);
+}
+__name(queueVendorOnboardEmails, "queueVendorOnboardEmails");
+
+export { queueEmail, queueOrderPlacedEmails, queueVendorOnboardEmails, registerEmailQueueProcessor };

package/dist/chunk-6KPQWRFW.js

@@ -0,0 +1,171 @@
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-4TRPKBKO.js';
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/auth/helpers.ts
+var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
+  "users",
+  "user_groups",
+  "permissions"
+]);
+function sessionHasEntityAccess(user, entity, action) {
+  return explainSessionEntityAccess(user, entity, action).allowed;
+}
+__name(sessionHasEntityAccess, "sessionHasEntityAccess");
+function canManageRoles(user) {
+  return !!(user?.email && user.isRBACAdmin);
+}
+__name(canManageRoles, "canManageRoles");
+var OPEN_ENDPOINTS = [
+  {
+    "/api/contacts": [
+      "POST"
+    ]
+  },
+  {
+    "/api/form-submissions": [
+      "POST"
+    ]
+  },
+  {
+    "/api/blogs": [
+      "GET"
+    ]
+  }
+];
+var PERMISSION_REQUIRED_ENDPOINTS = {};
+function isOpenEndpoint(pathname) {
+  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
+}
+__name(isOpenEndpoint, "isOpenEndpoint");
+function getRequiredPermission(pathname) {
+  return null;
+}
+__name(getRequiredPermission, "getRequiredPermission");
+function isPublicMethod(pathname, method) {
+  for (const endpoint of OPEN_ENDPOINTS) {
+    const key = Object.keys(endpoint)[0];
+    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
+  }
+  return false;
+}
+__name(isPublicMethod, "isPublicMethod");
+function createAuthHelpers(getSession, NextResponse) {
+  return createAuthHelpersFromGetSession(getSession, NextResponse);
+}
+__name(createAuthHelpers, "createAuthHelpers");
+function createCmsAuthBundle(getSession, NextResponse) {
+  const auth = createAuthHelpers(getSession, NextResponse);
+  return {
+    requireAuth: auth.requireAuth,
+    requireAdminAccess: auth.requireAdminAccess,
+    requireEntityPermission: auth.requireEntityPermission,
+    getSessionUser: auth.getAuthenticatedUser,
+    getAuthenticatedUser: auth.getAuthenticatedUser
+  };
+}
+__name(createCmsAuthBundle, "createCmsAuthBundle");
+function createAuthHelpersFromGetSession(getSession, NextResponse) {
+  return {
+    async requireAuth() {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({
+          error: "Unauthorized"
+        }, {
+          status: 401
+        });
+      }
+      return null;
+    },
+    async requirePermission() {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({
+          error: "Unauthorized"
+        }, {
+          status: 401
+        });
+      }
+      return null;
+    },
+    async requireEntityPermission(_req, entity, action) {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({
+          error: "Unauthorized"
+        }, {
+          status: 401
+        });
+      }
+      const u = session.user;
+      const allowed = sessionHasEntityAccess(u, entity, action);
+      const { reason } = explainSessionEntityAccess(u, entity, action);
+      logRbac("authHelpers.requireEntityPermission", {
+        entity,
+        action,
+        allowed,
+        reason,
+        email: u.email,
+        groupName: u.groupName,
+        vendorIds: u.vendorIds,
+        isVendorPortal: u.isVendorPortal,
+        isVendorOwner: u.isVendorOwner
+      });
+      if (allowed) return null;
+      return NextResponse.json({
+        error: "Forbidden",
+        entity,
+        action,
+        reason
+      }, {
+        status: 403
+      });
+    },
+    async requireAdminAccess() {
+      const session = await getSession();
+      if (!session?.user?.email) {
+        return NextResponse.json({
+          error: "Unauthorized"
+        }, {
+          status: 401
+        });
+      }
+      const u = session.user;
+      if (u.isRBACAdmin) return null;
+      if (isVendorPortalUser(u)) return null;
+      if (u.adminAccess === true) return null;
+      if (u.adminAccess === false) {
+        logRbac("requireAdminAccess denied (adminAccess:false)", {
+          email: u.email,
+          groupName: u.groupName,
+          isVendorPortal: u.isVendorPortal
+        });
+        return NextResponse.json({
+          error: "Forbidden",
+          reason: "admin_access"
+        }, {
+          status: 403
+        });
+      }
+      logRbac("requireAdminAccess denied (no matching rule)", {
+        email: u.email,
+        adminAccess: u.adminAccess,
+        groupName: u.groupName,
+        isVendorPortal: u.isVendorPortal
+      });
+      return NextResponse.json({
+        error: "Forbidden",
+        reason: "admin_access"
+      }, {
+        status: 403
+      });
+    },
+    async getAuthenticatedUser() {
+      const session = await getSession();
+      return session?.user ?? null;
+    }
+  };
+}
+__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
+
+export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess };

package/dist/chunk-7NMT3GBR.cjs

@@ -0,0 +1,29 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/lib/vendor-invite-status.ts
+function inviteStatusForActivation(activation) {
+  return activation === "invite" ? "pending" : "accepted";
+}
+chunkUSNT2KNT_cjs.__name(inviteStatusForActivation, "inviteStatusForActivation");
+async function markVendorInviteAcceptedForUser(dataSource, vendorEntity, userId) {
+  await dataSource.getRepository(vendorEntity).update({
+    userId
+  }, {
+    inviteStatus: "accepted"
+  });
+}
+chunkUSNT2KNT_cjs.__name(markVendorInviteAcceptedForUser, "markVendorInviteAcceptedForUser");
+async function markVendorInvitePendingForUser(dataSource, vendorEntity, userId) {
+  await dataSource.getRepository(vendorEntity).update({
+    userId
+  }, {
+    inviteStatus: "pending"
+  });
+}
+chunkUSNT2KNT_cjs.__name(markVendorInvitePendingForUser, "markVendorInvitePendingForUser");
+
+exports.inviteStatusForActivation = inviteStatusForActivation;
+exports.markVendorInviteAcceptedForUser = markVendorInviteAcceptedForUser;
+exports.markVendorInvitePendingForUser = markVendorInvitePendingForUser;

package/dist/chunk-7YIBMQDR.cjs

@@ -0,0 +1,86 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/plugins/whatsapp/whatsapp-queue.ts
+var WHATSAPP_QUEUE_NAME = "whatsapp";
+function maskPhone(raw) {
+  const digits = raw.replace(/\D/g, "");
+  if (digits.length <= 4) return "****";
+  return `${"*".repeat(Math.max(0, digits.length - 4))}${digits.slice(-4)}`;
+}
+chunkUSNT2KNT_cjs.__name(maskPhone, "maskPhone");
+function registerWhatsAppQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const whatsapp = cms.getPlugin("whatsapp");
+  if (!queue) {
+    console.warn("[whatsapp] queue processor not registered: queue plugin missing");
+    return;
+  }
+  if (!whatsapp || typeof whatsapp.send !== "function") {
+    console.warn("[whatsapp] queue processor not registered: whatsapp plugin missing or not configured");
+    return;
+  }
+  queue.registerProcessor(WHATSAPP_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) {
+      console.warn("[whatsapp] queue job skipped: missing recipient");
+      return;
+    }
+    console.log("[whatsapp] queue job processing", {
+      to: maskPhone(payload.to),
+      templateKey: payload.templateKey ?? null,
+      externalTemplateRef: payload.externalTemplateRef ?? null
+    });
+    try {
+      const ok = await whatsapp.send(payload);
+      if (ok) {
+        console.log("[whatsapp] queue job completed", {
+          to: maskPhone(payload.to),
+          sent: true
+        });
+      } else {
+        console.warn("[whatsapp] queue job completed without delivery", {
+          to: maskPhone(payload.to),
+          sent: false
+        });
+      }
+    } catch (err) {
+      console.error("[whatsapp] queue job failed", {
+        to: maskPhone(payload.to),
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  });
+  console.log("[whatsapp] queue processor registered", {
+    queue: WHATSAPP_QUEUE_NAME
+  });
+}
+chunkUSNT2KNT_cjs.__name(registerWhatsAppQueueProcessor, "registerWhatsAppQueueProcessor");
+async function queueWhatsApp(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  if (queue) {
+    console.log("[whatsapp] enqueue", {
+      to: maskPhone(payload.to),
+      templateKey: payload.templateKey ?? null,
+      externalTemplateRef: payload.externalTemplateRef ?? null
+    });
+    await queue.add(WHATSAPP_QUEUE_NAME, payload);
+    return true;
+  }
+  const whatsapp = cms.getPlugin("whatsapp");
+  if (whatsapp && typeof whatsapp.send === "function") {
+    console.log("[whatsapp] no queue plugin \u2014 sending immediately", {
+      to: maskPhone(payload.to)
+    });
+    return whatsapp.send(payload);
+  }
+  console.warn("[whatsapp] send skipped: neither queue nor whatsapp plugin available", {
+    to: maskPhone(payload.to)
+  });
+  return false;
+}
+chunkUSNT2KNT_cjs.__name(queueWhatsApp, "queueWhatsApp");
+
+exports.queueWhatsApp = queueWhatsApp;
+exports.registerWhatsAppQueueProcessor = registerWhatsAppQueueProcessor;