@infuro/cms-core 1.0.35 → 1.0.36

package/dist/{chunk-EF2JBPDM.js → chunk-KFFB6EMZ.js}

@@ -84,12 +84,18 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
   let subject = def.subject;
   let body = def.body;
   let externalTemplateRef = def.externalTemplateRef;
+  let name;
+  let language;
+  let paramOrder;
   let enabled = true;
   if (row) {
     enabled = row.enabled !== false;
     if (row.subject?.trim()) subject = row.subject.trim();
     if (row.body.trim()) body = row.body;
     if (row.externalTemplateRef?.trim()) externalTemplateRef = row.externalTemplateRef.trim();
+    name = row.name?.trim() || void 0;
+    language = row.language?.trim() || void 0;
+    paramOrder = row.paramOrder?.length ? row.paramOrder : void 0;
   }
   if (eventOverride) {
     if (eventOverride.subject?.trim()) subject = eventOverride.subject.trim();
@@ -102,6 +108,9 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
     subject,
     body,
     externalTemplateRef: externalTemplateRef?.trim() || void 0,
+    name,
+    language,
+    paramOrder,
     enabled
   };
 }

package/dist/{chunk-3KPNTQBV.cjs → chunk-KPKFNLQQ.cjs}

@@ -17,6 +17,8 @@ var PERMISSION_ENTITY_INTERNAL_EXCLUDE = /* @__PURE__ */ new Set([
   "wishlists",
   "wishlist_items",
   "message_templates",
+  "order_notification_triggers",
+  "whatsapp_trigger_bindings",
   "vendor_users",
   "vendor_roles",
   "vendor_role_permissions"
@@ -69,7 +71,52 @@ function hasEntityPermission(record, entity, action) {
 }
 chunkUSNT2KNT_cjs.__name(hasEntityPermission, "hasEntityPermission");
 
+// src/auth/role-helpers.ts
+var SUPER_ADMIN_GROUP_ID = 1;
+var VENDOR_ADMIN_GROUP_ID = 5;
+function isSuperAdmin(user) {
+  if (!user) return false;
+  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
+  if (user.isRBACAdmin === true) return true;
+  return isSuperAdminGroupName(user.groupName);
+}
+chunkUSNT2KNT_cjs.__name(isSuperAdmin, "isSuperAdmin");
+function isVendorAdmin(user) {
+  if (!user?.email || isSuperAdmin(user)) return false;
+  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
+  if ((user.vendorIds?.length ?? 0) > 0) return true;
+  return isVendorGroupName(user.groupName);
+}
+chunkUSNT2KNT_cjs.__name(isVendorAdmin, "isVendorAdmin");
+
 // src/auth/vendor-scope.ts
+var DEFAULT_VENDOR_SLUG = "default";
+async function resolveDefaultVendorId(dataSource) {
+  try {
+    const rows = await dataSource.query(`SELECT id FROM vendors WHERE slug = $1 AND deleted = false LIMIT 1`, [
+      DEFAULT_VENDOR_SLUG
+    ]);
+    const id = rows[0]?.id;
+    return typeof id === "number" ? id : null;
+  } catch {
+    return null;
+  }
+}
+chunkUSNT2KNT_cjs.__name(resolveDefaultVendorId, "resolveDefaultVendorId");
+async function resolveDisabledMultiVendorScope(dataSource) {
+  const defaultVendorId = await resolveDefaultVendorId(dataSource);
+  if (defaultVendorId == null) return {
+    type: "deny"
+  };
+  return {
+    type: "vendor",
+    vendorId: defaultVendorId,
+    vendorIds: [
+      defaultVendorId
+    ]
+  };
+}
+chunkUSNT2KNT_cjs.__name(resolveDisabledMultiVendorScope, "resolveDisabledMultiVendorScope");
 var VENDOR_SCOPED_STORE_ENTITIES = /* @__PURE__ */ new Set([
   "products",
   "collections",
@@ -166,24 +213,6 @@ function vendorPortalFlagsFromUser(input) {
 }
 chunkUSNT2KNT_cjs.__name(vendorPortalFlagsFromUser, "vendorPortalFlagsFromUser");
 
-// src/auth/role-helpers.ts
-var SUPER_ADMIN_GROUP_ID = 1;
-var VENDOR_ADMIN_GROUP_ID = 5;
-function isSuperAdmin(user) {
-  if (!user) return false;
-  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
-  if (user.isRBACAdmin === true) return true;
-  return isSuperAdminGroupName(user.groupName);
-}
-chunkUSNT2KNT_cjs.__name(isSuperAdmin, "isSuperAdmin");
-function isVendorAdmin(user) {
-  if (!user?.email || isSuperAdmin(user)) return false;
-  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
-  if ((user.vendorIds?.length ?? 0) > 0) return true;
-  return isVendorGroupName(user.groupName);
-}
-chunkUSNT2KNT_cjs.__name(isVendorAdmin, "isVendorAdmin");
-
 // src/lib/vendor-role-defaults.ts
 var VENDOR_RBAC_ENTITIES = [
   ...VENDOR_STORE_RBAC_ENTITIES,
@@ -351,9 +380,7 @@ var VENDOR_VIEWER_ROLE_NAME = "Viewer";
 var LOG_PREFIX = "[cms-rbac]";
 function isRbacDebugEnabled() {
   const v = process.env.CMS_RBAC_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 chunkUSNT2KNT_cjs.__name(isRbacDebugEnabled, "isRbacDebugEnabled");
 function logRbac(message, data) {
@@ -567,7 +594,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-D7ME7QUY.cjs');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-HWP65A4O.cjs');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {
@@ -615,6 +642,7 @@ exports.isVendorStaff = isVendorStaff;
 exports.logEntityAccessDecision = logEntityAccessDecision;
 exports.logRbac = logRbac;
 exports.permissionRowsToRecord = permissionRowsToRecord;
+exports.resolveDisabledMultiVendorScope = resolveDisabledMultiVendorScope;
 exports.resolveVendorScopeFromSessionUser = resolveVendorScopeFromSessionUser;
 exports.summarizeEntityPerms = summarizeEntityPerms;
 exports.vendorPortalFlagsFromUser = vendorPortalFlagsFromUser;

package/dist/{chunk-6KPQWRFW.js → chunk-LI2IXVAY.js}

@@ -1,4 +1,4 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-4TRPKBKO.js';
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-UF3BYUXY.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/auth/helpers.ts

package/dist/{chunk-N44BJZ4C.cjs → chunk-SPQFNIYJ.cjs}

@@ -86,12 +86,18 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
   let subject = def.subject;
   let body = def.body;
   let externalTemplateRef = def.externalTemplateRef;
+  let name;
+  let language;
+  let paramOrder;
   let enabled = true;
   if (row) {
     enabled = row.enabled !== false;
     if (row.subject?.trim()) subject = row.subject.trim();
     if (row.body.trim()) body = row.body;
     if (row.externalTemplateRef?.trim()) externalTemplateRef = row.externalTemplateRef.trim();
+    name = row.name?.trim() || void 0;
+    language = row.language?.trim() || void 0;
+    paramOrder = row.paramOrder?.length ? row.paramOrder : void 0;
   }
   if (eventOverride) {
     if (eventOverride.subject?.trim()) subject = eventOverride.subject.trim();
@@ -104,6 +110,9 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
     subject,
     body,
     externalTemplateRef: externalTemplateRef?.trim() || void 0,
+    name,
+    language,
+    paramOrder,
     enabled
   };
 }

package/dist/chunk-UCKN4BBY.cjs

@@ -0,0 +1,24 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var events = require('events');
+
+var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PLACED: "order_placed",
+  ORDER_CANCELLED: "order_cancelled"
+};
+var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends events.EventEmitter {
+  static {
+    chunkUSNT2KNT_cjs.__name(this, "NotificationTriggerEmitter");
+  }
+  emitTrigger(triggerKey, payload) {
+    this.emit("__any__", triggerKey, payload);
+  }
+  onAnyTrigger(listener) {
+    this.on("__any__", listener);
+  }
+};
+var notificationTriggerEmitter = new NotificationTriggerEmitter();
+
+exports.KNOWN_NOTIFICATION_TRIGGERS = KNOWN_NOTIFICATION_TRIGGERS;
+exports.notificationTriggerEmitter = notificationTriggerEmitter;

package/dist/{chunk-4TRPKBKO.js → chunk-UF3BYUXY.js}

@@ -15,6 +15,8 @@ var PERMISSION_ENTITY_INTERNAL_EXCLUDE = /* @__PURE__ */ new Set([
   "wishlists",
   "wishlist_items",
   "message_templates",
+  "order_notification_triggers",
+  "whatsapp_trigger_bindings",
   "vendor_users",
   "vendor_roles",
   "vendor_role_permissions"
@@ -67,7 +69,52 @@ function hasEntityPermission(record, entity, action) {
 }
 __name(hasEntityPermission, "hasEntityPermission");
 
+// src/auth/role-helpers.ts
+var SUPER_ADMIN_GROUP_ID = 1;
+var VENDOR_ADMIN_GROUP_ID = 5;
+function isSuperAdmin(user) {
+  if (!user) return false;
+  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
+  if (user.isRBACAdmin === true) return true;
+  return isSuperAdminGroupName(user.groupName);
+}
+__name(isSuperAdmin, "isSuperAdmin");
+function isVendorAdmin(user) {
+  if (!user?.email || isSuperAdmin(user)) return false;
+  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
+  if ((user.vendorIds?.length ?? 0) > 0) return true;
+  return isVendorGroupName(user.groupName);
+}
+__name(isVendorAdmin, "isVendorAdmin");
+
 // src/auth/vendor-scope.ts
+var DEFAULT_VENDOR_SLUG = "default";
+async function resolveDefaultVendorId(dataSource) {
+  try {
+    const rows = await dataSource.query(`SELECT id FROM vendors WHERE slug = $1 AND deleted = false LIMIT 1`, [
+      DEFAULT_VENDOR_SLUG
+    ]);
+    const id = rows[0]?.id;
+    return typeof id === "number" ? id : null;
+  } catch {
+    return null;
+  }
+}
+__name(resolveDefaultVendorId, "resolveDefaultVendorId");
+async function resolveDisabledMultiVendorScope(dataSource) {
+  const defaultVendorId = await resolveDefaultVendorId(dataSource);
+  if (defaultVendorId == null) return {
+    type: "deny"
+  };
+  return {
+    type: "vendor",
+    vendorId: defaultVendorId,
+    vendorIds: [
+      defaultVendorId
+    ]
+  };
+}
+__name(resolveDisabledMultiVendorScope, "resolveDisabledMultiVendorScope");
 var VENDOR_SCOPED_STORE_ENTITIES = /* @__PURE__ */ new Set([
   "products",
   "collections",
@@ -164,24 +211,6 @@ function vendorPortalFlagsFromUser(input) {
 }
 __name(vendorPortalFlagsFromUser, "vendorPortalFlagsFromUser");
 
-// src/auth/role-helpers.ts
-var SUPER_ADMIN_GROUP_ID = 1;
-var VENDOR_ADMIN_GROUP_ID = 5;
-function isSuperAdmin(user) {
-  if (!user) return false;
-  if (user.groupId === SUPER_ADMIN_GROUP_ID) return true;
-  if (user.isRBACAdmin === true) return true;
-  return isSuperAdminGroupName(user.groupName);
-}
-__name(isSuperAdmin, "isSuperAdmin");
-function isVendorAdmin(user) {
-  if (!user?.email || isSuperAdmin(user)) return false;
-  if (user.groupId === VENDOR_ADMIN_GROUP_ID) return true;
-  if ((user.vendorIds?.length ?? 0) > 0) return true;
-  return isVendorGroupName(user.groupName);
-}
-__name(isVendorAdmin, "isVendorAdmin");
-
 // src/lib/vendor-role-defaults.ts
 var VENDOR_RBAC_ENTITIES = [
   ...VENDOR_STORE_RBAC_ENTITIES,
@@ -349,9 +378,7 @@ var VENDOR_VIEWER_ROLE_NAME = "Viewer";
 var LOG_PREFIX = "[cms-rbac]";
 function isRbacDebugEnabled() {
   const v = process.env.CMS_RBAC_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 __name(isRbacDebugEnabled, "isRbacDebugEnabled");
 function logRbac(message, data) {
@@ -565,7 +592,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-MTCTVNNM.js');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-QJH3AD34.js');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {
@@ -586,4 +613,4 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
 }
 __name(logEntityAccessDecision, "logEntityAccessDecision");
 
-export { ADMIN_GROUP_NAME, DEFAULT_VENDOR_ROLE_DEFS, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_RBAC_ENTITIES, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser };
+export { ADMIN_GROUP_NAME, DEFAULT_VENDOR_ROLE_DEFS, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_RBAC_ENTITIES, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveDisabledMultiVendorScope, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser };