@infuro/cms-core 1.0.35 → 1.0.36

package/dist/{chunk-EQPITOP6.js → chunk-FG6I64HP.js}

@@ -1,4 +1,4 @@
-import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-4TRPKBKO.js';
+import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-UF3BYUXY.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { getToken } from 'next-auth/jwt';
 import _CredentialsProvider from 'next-auth/providers/credentials';
@@ -14,7 +14,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
       deleted: false
     }
   });
-  console.log("ADMIN GROUP", adminGroup);
   if (!adminGroup) return;
   const fullCrud = {
     canCreate: true,
@@ -29,7 +28,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
         entity
       }
     });
-    console.log("EXISTING", existing);
     if (existing) {
       existing.canCreate = true;
       existing.canRead = true;
@@ -51,17 +49,13 @@ __name(seedAdministratorPermissions, "seedAdministratorPermissions");
 var LOG_PREFIX = "[cms-auth]";
 function isAuthDebugEnabled() {
   const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 __name(isAuthDebugEnabled, "isAuthDebugEnabled");
 function isAuthDebugClientEnabled() {
   if (typeof window === "undefined") return false;
   const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 __name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
 function logAuth(message, data) {
@@ -240,6 +234,62 @@ function createCmsMiddleware(config = {}) {
 }
 __name(createCmsMiddleware, "createCmsMiddleware");
 var CredentialsProvider = _CredentialsProvider.default ?? _CredentialsProvider;
+function parseBooleanSetting(value) {
+  if (typeof value === "boolean") return value;
+  if (typeof value === "number") return value !== 0;
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if ([
+      "true",
+      "1",
+      "yes",
+      "on"
+    ].includes(normalized)) return true;
+    if ([
+      "false",
+      "0",
+      "no",
+      "off"
+    ].includes(normalized)) return false;
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const nested = parseBooleanSetting(record.value ?? record.enabled ?? record.isEnabled ?? record.active ?? record.state);
+    if (nested != null) return nested;
+  }
+  return null;
+}
+__name(parseBooleanSetting, "parseBooleanSetting");
+async function checkMultiVendorEnabledViaSettingsApi() {
+  const FAIL_OPEN_DEFAULT = true;
+  const base = process.env.NEXTAUTH_URL?.replace(/\/$/, "");
+  if (!base) {
+    logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
+      multiVendorEnabled: FAIL_OPEN_DEFAULT
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+  try {
+    const res = await fetch(`${base}/api/settings/multi_vendor`, {
+      cache: "no-store"
+    });
+    if (!res.ok) {
+      logAuth("multiVendorCheck: non-OK response, defaulting", {
+        status: res.status
+      });
+      return FAIL_OPEN_DEFAULT;
+    }
+    const data = await res.json();
+    const parsed = parseBooleanSetting(data?.enabled ?? data?.value ?? data?.isEnabled ?? data?.active ?? data?.state);
+    return parsed ?? FAIL_OPEN_DEFAULT;
+  } catch (err) {
+    logAuth("multiVendorCheck: fetch failed, defaulting", {
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+}
+__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
   const isRBACAdmin = isSuperAdmin({
@@ -383,6 +433,17 @@ function getNextAuthOptions(config) {
             return null;
           }
           const sessionUser = sessionUserFromNextAuthUser(user);
+          if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
+            const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
+            if (!multiVendorEnabled) {
+              logAuth("authorize(credentials) rejected", {
+                reason: "multi_vendor_disabled",
+                email,
+                userId: user.id
+              });
+              return null;
+            }
+          }
           logAuth("authorize(credentials) ok", summarizeSessionUserForLog(sessionUser));
           return sessionUser;
         } catch (err) {

package/dist/chunk-HCIRL37O.js

@@ -0,0 +1,21 @@
+import { __name } from './chunk-SHUYVCID.js';
+import { EventEmitter } from 'events';
+
+var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PLACED: "order_placed",
+  ORDER_CANCELLED: "order_cancelled"
+};
+var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends EventEmitter {
+  static {
+    __name(this, "NotificationTriggerEmitter");
+  }
+  emitTrigger(triggerKey, payload) {
+    this.emit("__any__", triggerKey, payload);
+  }
+  onAnyTrigger(listener) {
+    this.on("__any__", listener);
+  }
+};
+var notificationTriggerEmitter = new NotificationTriggerEmitter();
+
+export { KNOWN_NOTIFICATION_TRIGGERS, notificationTriggerEmitter };

package/dist/chunk-HT5DI3XW.cjs

@@ -0,0 +1,82 @@
+'use strict';
+
+var chunkUCKN4BBY_cjs = require('./chunk-UCKN4BBY.cjs');
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/lib/emit-order-notification-trigger.ts
+function maskPhone(raw) {
+  const digits = String(raw ?? "").replace(/\D/g, "");
+  if (digits.length <= 4) return "(none)";
+  return `***${digits.slice(-4)}`;
+}
+chunkUSNT2KNT_cjs.__name(maskPhone, "maskPhone");
+async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  if (!deps.entityMap.orders) {
+    console.warn("[notification-triggers] skip emit: orders entity missing from entityMap", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const listenerCount = chunkUCKN4BBY_cjs.notificationTriggerEmitter.listenerCount("__any__");
+  if (listenerCount === 0) {
+    console.warn("[notification-triggers] no WhatsApp dispatcher listener \u2014 ensure createCmsApiHandler passes getCms (initWhatsappTriggerDispatcher)");
+  }
+  const orderRepo = deps.dataSource.getRepository(deps.entityMap.orders);
+  const fullOrder = await orderRepo.findOne({
+    where: {
+      id: orderId,
+      deleted: false
+    },
+    relations: [
+      "contact"
+    ]
+  });
+  if (!fullOrder) {
+    console.warn("[notification-triggers] skip emit: order not found", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const fo = fullOrder;
+  const phone = fo.contact?.phone ?? null;
+  console.log("[notification-triggers] emit", {
+    triggerKey,
+    orderId,
+    orderNumber: fo.orderNumber ?? null,
+    phone: maskPhone(phone),
+    listeners: listenerCount
+  });
+  if (!phone?.trim()) {
+    console.warn("[notification-triggers] order contact has no phone \u2014 WhatsApp will be skipped", {
+      orderId
+    });
+  }
+  chunkUCKN4BBY_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, {
+    orderId,
+    orderNumber: String(fo.orderNumber ?? ""),
+    customerName: fo.contact?.name ?? "",
+    customerPhone: phone,
+    total: fo.total ?? 0,
+    currency: String(fo.currency ?? "INR"),
+    vendorId: fo.vendorId ?? null,
+    ...extra?.refundAmount != null ? {
+      refundAmount: extra.refundAmount
+    } : {}
+  });
+}
+chunkUSNT2KNT_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
+function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  console.log("[notification-triggers] fire", {
+    triggerKey,
+    orderId
+  });
+  void emitOrderNotificationTrigger(triggerKey, orderId, deps, extra).catch((err) => {
+    console.error("[notification-triggers]", triggerKey, orderId, err);
+  });
+}
+chunkUSNT2KNT_cjs.__name(fireOrderNotificationTrigger, "fireOrderNotificationTrigger");
+
+exports.emitOrderNotificationTrigger = emitOrderNotificationTrigger;
+exports.fireOrderNotificationTrigger = fireOrderNotificationTrigger;