@infuro/cms-core 1.0.35 → 1.0.36

package/dist/{chunk-TIAEXJLI.cjs → chunk-WO2DW4AU.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk3KPNTQBV_cjs = require('./chunk-3KPNTQBV.cjs');
+var chunkKPKFNLQQ_cjs = require('./chunk-KPKFNLQQ.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/auth/helpers.ts
@@ -10,7 +10,7 @@ var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
   "permissions"
 ]);
 function sessionHasEntityAccess(user, entity, action) {
-  return chunk3KPNTQBV_cjs.explainSessionEntityAccess(user, entity, action).allowed;
+  return chunkKPKFNLQQ_cjs.explainSessionEntityAccess(user, entity, action).allowed;
 }
 chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
 function canManageRoles(user) {
@@ -101,8 +101,8 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunk3KPNTQBV_cjs.explainSessionEntityAccess(u, entity, action);
-      chunk3KPNTQBV_cjs.logRbac("authHelpers.requireEntityPermission", {
+      const { reason } = chunkKPKFNLQQ_cjs.explainSessionEntityAccess(u, entity, action);
+      chunkKPKFNLQQ_cjs.logRbac("authHelpers.requireEntityPermission", {
         entity,
         action,
         allowed,
@@ -134,10 +134,10 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       if (u.isRBACAdmin) return null;
-      if (chunk3KPNTQBV_cjs.isVendorPortalUser(u)) return null;
+      if (chunkKPKFNLQQ_cjs.isVendorPortalUser(u)) return null;
       if (u.adminAccess === true) return null;
       if (u.adminAccess === false) {
-        chunk3KPNTQBV_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
+        chunkKPKFNLQQ_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
           email: u.email,
           groupName: u.groupName,
           isVendorPortal: u.isVendorPortal
@@ -149,7 +149,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
           status: 403
         });
       }
-      chunk3KPNTQBV_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
+      chunkKPKFNLQQ_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
         email: u.email,
         adminAccess: u.adminAccess,
         groupName: u.groupName,

package/dist/chunk-X47PBV4I.js

@@ -0,0 +1,79 @@
+import { notificationTriggerEmitter } from './chunk-HCIRL37O.js';
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/lib/emit-order-notification-trigger.ts
+function maskPhone(raw) {
+  const digits = String(raw ?? "").replace(/\D/g, "");
+  if (digits.length <= 4) return "(none)";
+  return `***${digits.slice(-4)}`;
+}
+__name(maskPhone, "maskPhone");
+async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  if (!deps.entityMap.orders) {
+    console.warn("[notification-triggers] skip emit: orders entity missing from entityMap", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const listenerCount = notificationTriggerEmitter.listenerCount("__any__");
+  if (listenerCount === 0) {
+    console.warn("[notification-triggers] no WhatsApp dispatcher listener \u2014 ensure createCmsApiHandler passes getCms (initWhatsappTriggerDispatcher)");
+  }
+  const orderRepo = deps.dataSource.getRepository(deps.entityMap.orders);
+  const fullOrder = await orderRepo.findOne({
+    where: {
+      id: orderId,
+      deleted: false
+    },
+    relations: [
+      "contact"
+    ]
+  });
+  if (!fullOrder) {
+    console.warn("[notification-triggers] skip emit: order not found", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const fo = fullOrder;
+  const phone = fo.contact?.phone ?? null;
+  console.log("[notification-triggers] emit", {
+    triggerKey,
+    orderId,
+    orderNumber: fo.orderNumber ?? null,
+    phone: maskPhone(phone),
+    listeners: listenerCount
+  });
+  if (!phone?.trim()) {
+    console.warn("[notification-triggers] order contact has no phone \u2014 WhatsApp will be skipped", {
+      orderId
+    });
+  }
+  notificationTriggerEmitter.emitTrigger(triggerKey, {
+    orderId,
+    orderNumber: String(fo.orderNumber ?? ""),
+    customerName: fo.contact?.name ?? "",
+    customerPhone: phone,
+    total: fo.total ?? 0,
+    currency: String(fo.currency ?? "INR"),
+    vendorId: fo.vendorId ?? null,
+    ...extra?.refundAmount != null ? {
+      refundAmount: extra.refundAmount
+    } : {}
+  });
+}
+__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
+function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  console.log("[notification-triggers] fire", {
+    triggerKey,
+    orderId
+  });
+  void emitOrderNotificationTrigger(triggerKey, orderId, deps, extra).catch((err) => {
+    console.error("[notification-triggers]", triggerKey, orderId, err);
+  });
+}
+__name(fireOrderNotificationTrigger, "fireOrderNotificationTrigger");
+
+export { emitOrderNotificationTrigger, fireOrderNotificationTrigger };

package/dist/{chunk-CNTSLED2.cjs → chunk-X6H5VBQ2.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk3KPNTQBV_cjs = require('./chunk-3KPNTQBV.cjs');
+var chunkKPKFNLQQ_cjs = require('./chunk-KPKFNLQQ.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var jwt = require('next-auth/jwt');
 var _CredentialsProvider = require('next-auth/providers/credentials');
@@ -11,16 +11,15 @@ var _CredentialsProvider__default = /*#__PURE__*/_interopDefault(_CredentialsPro
 
 // src/auth/seed-permissions.ts
 async function seedAdministratorPermissions(dataSource, entityMap) {
-  const entities = chunk3KPNTQBV_cjs.getPermissionableEntityKeys(entityMap);
+  const entities = chunkKPKFNLQQ_cjs.getPermissionableEntityKeys(entityMap);
   const groupRepo = dataSource.getRepository(entityMap.user_groups);
   const permRepo = dataSource.getRepository(entityMap.permissions);
   const adminGroup = await groupRepo.findOne({
     where: {
-      name: chunk3KPNTQBV_cjs.ADMIN_GROUP_NAME,
+      name: chunkKPKFNLQQ_cjs.ADMIN_GROUP_NAME,
       deleted: false
     }
   });
-  console.log("ADMIN GROUP", adminGroup);
   if (!adminGroup) return;
   const fullCrud = {
     canCreate: true,
@@ -35,7 +34,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
         entity
       }
     });
-    console.log("EXISTING", existing);
     if (existing) {
       existing.canCreate = true;
       existing.canRead = true;
@@ -57,17 +55,13 @@ chunkUSNT2KNT_cjs.__name(seedAdministratorPermissions, "seedAdministratorPermiss
 var LOG_PREFIX = "[cms-auth]";
 function isAuthDebugEnabled() {
   const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 chunkUSNT2KNT_cjs.__name(isAuthDebugEnabled, "isAuthDebugEnabled");
 function isAuthDebugClientEnabled() {
   if (typeof window === "undefined") return false;
   const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 chunkUSNT2KNT_cjs.__name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
 function logAuth(message, data) {
@@ -246,20 +240,76 @@ function createCmsMiddleware(config = {}) {
 }
 chunkUSNT2KNT_cjs.__name(createCmsMiddleware, "createCmsMiddleware");
 var CredentialsProvider = _CredentialsProvider__default.default.default ?? _CredentialsProvider__default.default;
+function parseBooleanSetting(value) {
+  if (typeof value === "boolean") return value;
+  if (typeof value === "number") return value !== 0;
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if ([
+      "true",
+      "1",
+      "yes",
+      "on"
+    ].includes(normalized)) return true;
+    if ([
+      "false",
+      "0",
+      "no",
+      "off"
+    ].includes(normalized)) return false;
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const nested = parseBooleanSetting(record.value ?? record.enabled ?? record.isEnabled ?? record.active ?? record.state);
+    if (nested != null) return nested;
+  }
+  return null;
+}
+chunkUSNT2KNT_cjs.__name(parseBooleanSetting, "parseBooleanSetting");
+async function checkMultiVendorEnabledViaSettingsApi() {
+  const FAIL_OPEN_DEFAULT = true;
+  const base = process.env.NEXTAUTH_URL?.replace(/\/$/, "");
+  if (!base) {
+    logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
+      multiVendorEnabled: FAIL_OPEN_DEFAULT
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+  try {
+    const res = await fetch(`${base}/api/settings/multi_vendor`, {
+      cache: "no-store"
+    });
+    if (!res.ok) {
+      logAuth("multiVendorCheck: non-OK response, defaulting", {
+        status: res.status
+      });
+      return FAIL_OPEN_DEFAULT;
+    }
+    const data = await res.json();
+    const parsed = parseBooleanSetting(data?.enabled ?? data?.value ?? data?.isEnabled ?? data?.active ?? data?.state);
+    return parsed ?? FAIL_OPEN_DEFAULT;
+  } catch (err) {
+    logAuth("multiVendorCheck: fetch failed, defaulting", {
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+}
+chunkUSNT2KNT_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
-  const isRBACAdmin = chunk3KPNTQBV_cjs.isSuperAdmin({
+  const isRBACAdmin = chunkKPKFNLQQ_cjs.isSuperAdmin({
     groupId: user.groupId ?? void 0,
     groupName: g?.name,
     isRBACAdmin: false
   });
-  const entityPerms = chunk3KPNTQBV_cjs.permissionRowsToRecord(g?.permissions);
+  const entityPerms = chunkKPKFNLQQ_cjs.permissionRowsToRecord(g?.permissions);
   const rawAdminAccess = user.adminAccess;
   const adminAccess = rawAdminAccess === true ? true : rawAdminAccess === false ? false : void 0;
   const vendorIds = user.vendorIds ?? [];
   const vendorRole = user.vendorRole ?? null;
   const isVendorRoleOwner = user.isVendorRoleOwner ?? false;
-  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunk3KPNTQBV_cjs.vendorPortalFlagsFromUser({
+  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkKPKFNLQQ_cjs.vendorPortalFlagsFromUser({
     email: user.email,
     isRBACAdmin,
     groupName: g?.name,
@@ -389,6 +439,17 @@ function getNextAuthOptions(config) {
             return null;
           }
           const sessionUser = sessionUserFromNextAuthUser(user);
+          if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
+            const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
+            if (!multiVendorEnabled) {
+              logAuth("authorize(credentials) rejected", {
+                reason: "multi_vendor_disabled",
+                email,
+                userId: user.id
+              });
+              return null;
+            }
+          }
           logAuth("authorize(credentials) ok", summarizeSessionUserForLog(sessionUser));
           return sessionUser;
         } catch (err) {

package/dist/cli.cjs

@@ -67,13 +67,14 @@ export const requireAdminAccess = helpers.requireAdminAccess;
 export const getAuthenticatedUser = helpers.getAuthenticatedUser;
 `,
   "src/lib/cms.ts": `import {
-  createCmsApp,
+  createCmsAppWithMessaging,
   localStoragePlugin,
   blogGeneratorPlugin,
   pgBossPlugin,
   socialMediaPlugin,
   type CmsApp,
 } from '@infuro/cms-core';
+import { CMS_ENTITY_MAP } from '@infuro/cms-core';
 import { getDataSourceInitialized } from './data-source';
 
 let cmsPromise: Promise<CmsApp> | null = null;
@@ -81,8 +82,9 @@ let cmsPromise: Promise<CmsApp> | null = null;
 export async function getCms(): Promise<CmsApp> {
   if (cmsPromise) return cmsPromise;
   const dataSource = await getDataSourceInitialized();
-  cmsPromise = createCmsApp({
+  cmsPromise = createCmsAppWithMessaging({
     dataSource,
+    entityMap: CMS_ENTITY_MAP,
     config: process.env as unknown as Record<string, string>,
     plugins: [
       localStoragePlugin({ dir: 'public/uploads' }),

package/dist/cli.js

@@ -60,13 +60,14 @@ export const requireAdminAccess = helpers.requireAdminAccess;
 export const getAuthenticatedUser = helpers.getAuthenticatedUser;
 `,
   "src/lib/cms.ts": `import {
-  createCmsApp,
+  createCmsAppWithMessaging,
   localStoragePlugin,
   blogGeneratorPlugin,
   pgBossPlugin,
   socialMediaPlugin,
   type CmsApp,
 } from '@infuro/cms-core';
+import { CMS_ENTITY_MAP } from '@infuro/cms-core';
 import { getDataSourceInitialized } from './data-source';
 
 let cmsPromise: Promise<CmsApp> | null = null;
@@ -74,8 +75,9 @@ let cmsPromise: Promise<CmsApp> | null = null;
 export async function getCms(): Promise<CmsApp> {
   if (cmsPromise) return cmsPromise;
   const dataSource = await getDataSourceInitialized();
-  cmsPromise = createCmsApp({
+  cmsPromise = createCmsAppWithMessaging({
     dataSource,
+    entityMap: CMS_ENTITY_MAP,
     config: process.env as unknown as Record<string, string>,
     plugins: [
       localStoragePlugin({ dir: 'public/uploads' }),

package/dist/emit-order-notification-trigger-D2N3KFHL.cjs

@@ -0,0 +1,16 @@
+'use strict';
+
+var chunkHT5DI3XW_cjs = require('./chunk-HT5DI3XW.cjs');
+require('./chunk-UCKN4BBY.cjs');
+require('./chunk-USNT2KNT.cjs');
+
+
+
+Object.defineProperty(exports, "emitOrderNotificationTrigger", {
+  enumerable: true,
+  get: function () { return chunkHT5DI3XW_cjs.emitOrderNotificationTrigger; }
+});
+Object.defineProperty(exports, "fireOrderNotificationTrigger", {
+  enumerable: true,
+  get: function () { return chunkHT5DI3XW_cjs.fireOrderNotificationTrigger; }
+});

package/dist/emit-order-notification-trigger-IVLWKKJL.js

@@ -0,0 +1,3 @@
+export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-X47PBV4I.js';
+import './chunk-HCIRL37O.js';
+import './chunk-SHUYVCID.js';

package/dist/{event-order-defaults-DUGDVGJI.cjs → event-order-defaults-EMWBIGL3.cjs}

@@ -1,39 +1,39 @@
 'use strict';
 
-var chunkN44BJZ4C_cjs = require('./chunk-N44BJZ4C.cjs');
+var chunkSPQFNIYJ_cjs = require('./chunk-SPQFNIYJ.cjs');
 require('./chunk-USNT2KNT.cjs');
 
 
 
 Object.defineProperty(exports, "EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS; }
+  get: function () { return chunkSPQFNIYJ_cjs.EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS; }
 });
 Object.defineProperty(exports, "EVENT_ORDER_TEMPLATE_KEY", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.EVENT_ORDER_TEMPLATE_KEY; }
+  get: function () { return chunkSPQFNIYJ_cjs.EVENT_ORDER_TEMPLATE_KEY; }
 });
 Object.defineProperty(exports, "EVENT_ORDER_TEMPLATE_VARIABLES", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.EVENT_ORDER_TEMPLATE_VARIABLES; }
+  get: function () { return chunkSPQFNIYJ_cjs.EVENT_ORDER_TEMPLATE_VARIABLES; }
 });
 Object.defineProperty(exports, "EVENT_ORDER_TEMPLATE_VARIABLE_HINTS", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.EVENT_ORDER_TEMPLATE_VARIABLE_HINTS; }
+  get: function () { return chunkSPQFNIYJ_cjs.EVENT_ORDER_TEMPLATE_VARIABLE_HINTS; }
 });
 Object.defineProperty(exports, "EVENT_ORDER_WHATSAPP_PARAM_KEYS", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.EVENT_ORDER_WHATSAPP_PARAM_KEYS; }
+  get: function () { return chunkSPQFNIYJ_cjs.EVENT_ORDER_WHATSAPP_PARAM_KEYS; }
 });
 Object.defineProperty(exports, "getEventOrderTemplateDefault", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.getEventOrderTemplateDefault; }
+  get: function () { return chunkSPQFNIYJ_cjs.getEventOrderTemplateDefault; }
 });
 Object.defineProperty(exports, "pickWhatsAppTemplateParams", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.pickWhatsAppTemplateParams; }
+  get: function () { return chunkSPQFNIYJ_cjs.pickWhatsAppTemplateParams; }
 });
 Object.defineProperty(exports, "resolveEventOrderTemplate", {
   enumerable: true,
-  get: function () { return chunkN44BJZ4C_cjs.resolveEventOrderTemplate; }
+  get: function () { return chunkSPQFNIYJ_cjs.resolveEventOrderTemplate; }
 });

package/dist/{event-order-defaults-6E543227.js → event-order-defaults-SDRNAZHC.js}

@@ -1,2 +1,2 @@
-export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, EVENT_ORDER_TEMPLATE_VARIABLE_HINTS, EVENT_ORDER_WHATSAPP_PARAM_KEYS, getEventOrderTemplateDefault, pickWhatsAppTemplateParams, resolveEventOrderTemplate } from './chunk-EF2JBPDM.js';
+export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, EVENT_ORDER_TEMPLATE_VARIABLE_HINTS, EVENT_ORDER_WHATSAPP_PARAM_KEYS, getEventOrderTemplateDefault, pickWhatsAppTemplateParams, resolveEventOrderTemplate } from './chunk-KFFB6EMZ.js';
 import './chunk-SHUYVCID.js';