@infuro/cms-core 1.0.35 → 1.0.38

package/dist/{chunk-EQPITOP6.js → chunk-SBRBR3VO.js}

@@ -1,4 +1,4 @@
-import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-4TRPKBKO.js';
+import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-P7QCLE5W.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { getToken } from 'next-auth/jwt';
 import _CredentialsProvider from 'next-auth/providers/credentials';
@@ -14,7 +14,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
       deleted: false
     }
   });
-  console.log("ADMIN GROUP", adminGroup);
   if (!adminGroup) return;
   const fullCrud = {
     canCreate: true,
@@ -29,7 +28,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
         entity
       }
     });
-    console.log("EXISTING", existing);
     if (existing) {
       existing.canCreate = true;
       existing.canRead = true;
@@ -51,17 +49,13 @@ __name(seedAdministratorPermissions, "seedAdministratorPermissions");
 var LOG_PREFIX = "[cms-auth]";
 function isAuthDebugEnabled() {
   const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 __name(isAuthDebugEnabled, "isAuthDebugEnabled");
 function isAuthDebugClientEnabled() {
   if (typeof window === "undefined") return false;
   const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 __name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
 function logAuth(message, data) {
@@ -240,6 +234,62 @@ function createCmsMiddleware(config = {}) {
 }
 __name(createCmsMiddleware, "createCmsMiddleware");
 var CredentialsProvider = _CredentialsProvider.default ?? _CredentialsProvider;
+function parseBooleanSetting(value) {
+  if (typeof value === "boolean") return value;
+  if (typeof value === "number") return value !== 0;
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if ([
+      "true",
+      "1",
+      "yes",
+      "on"
+    ].includes(normalized)) return true;
+    if ([
+      "false",
+      "0",
+      "no",
+      "off"
+    ].includes(normalized)) return false;
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const nested = parseBooleanSetting(record.value ?? record.enabled ?? record.isEnabled ?? record.active ?? record.state);
+    if (nested != null) return nested;
+  }
+  return null;
+}
+__name(parseBooleanSetting, "parseBooleanSetting");
+async function checkMultiVendorEnabledViaSettingsApi() {
+  const FAIL_OPEN_DEFAULT = true;
+  const base = process.env.NEXTAUTH_URL?.replace(/\/$/, "");
+  if (!base) {
+    logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
+      multiVendorEnabled: FAIL_OPEN_DEFAULT
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+  try {
+    const res = await fetch(`${base}/api/settings/multi_vendor`, {
+      cache: "no-store"
+    });
+    if (!res.ok) {
+      logAuth("multiVendorCheck: non-OK response, defaulting", {
+        status: res.status
+      });
+      return FAIL_OPEN_DEFAULT;
+    }
+    const data = await res.json();
+    const parsed = parseBooleanSetting(data?.enabled ?? data?.value ?? data?.isEnabled ?? data?.active ?? data?.state);
+    return parsed ?? FAIL_OPEN_DEFAULT;
+  } catch (err) {
+    logAuth("multiVendorCheck: fetch failed, defaulting", {
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+}
+__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
   const isRBACAdmin = isSuperAdmin({
@@ -383,6 +433,17 @@ function getNextAuthOptions(config) {
             return null;
           }
           const sessionUser = sessionUserFromNextAuthUser(user);
+          if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
+            const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
+            if (!multiVendorEnabled) {
+              logAuth("authorize(credentials) rejected", {
+                reason: "multi_vendor_disabled",
+                email,
+                userId: user.id
+              });
+              return null;
+            }
+          }
           logAuth("authorize(credentials) ok", summarizeSessionUserForLog(sessionUser));
           return sessionUser;
         } catch (err) {

package/dist/{chunk-N44BJZ4C.cjs → chunk-SPQFNIYJ.cjs}

@@ -86,12 +86,18 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
   let subject = def.subject;
   let body = def.body;
   let externalTemplateRef = def.externalTemplateRef;
+  let name;
+  let language;
+  let paramOrder;
   let enabled = true;
   if (row) {
     enabled = row.enabled !== false;
     if (row.subject?.trim()) subject = row.subject.trim();
     if (row.body.trim()) body = row.body;
     if (row.externalTemplateRef?.trim()) externalTemplateRef = row.externalTemplateRef.trim();
+    name = row.name?.trim() || void 0;
+    language = row.language?.trim() || void 0;
+    paramOrder = row.paramOrder?.length ? row.paramOrder : void 0;
   }
   if (eventOverride) {
     if (eventOverride.subject?.trim()) subject = eventOverride.subject.trim();
@@ -104,6 +110,9 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
     subject,
     body,
     externalTemplateRef: externalTemplateRef?.trim() || void 0,
+    name,
+    language,
+    paramOrder,
     enabled
   };
 }

package/dist/chunk-UCKN4BBY.cjs

@@ -0,0 +1,24 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var events = require('events');
+
+var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PLACED: "order_placed",
+  ORDER_CANCELLED: "order_cancelled"
+};
+var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends events.EventEmitter {
+  static {
+    chunkUSNT2KNT_cjs.__name(this, "NotificationTriggerEmitter");
+  }
+  emitTrigger(triggerKey, payload) {
+    this.emit("__any__", triggerKey, payload);
+  }
+  onAnyTrigger(listener) {
+    this.on("__any__", listener);
+  }
+};
+var notificationTriggerEmitter = new NotificationTriggerEmitter();
+
+exports.KNOWN_NOTIFICATION_TRIGGERS = KNOWN_NOTIFICATION_TRIGGERS;
+exports.notificationTriggerEmitter = notificationTriggerEmitter;

package/dist/{chunk-6KPQWRFW.js → chunk-UXMDSNIG.js}

@@ -1,4 +1,4 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-4TRPKBKO.js';
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-P7QCLE5W.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/auth/helpers.ts