@infuro/cms-core 1.0.35 → 1.0.38

package/dist/{chunk-CNTSLED2.cjs → chunk-E6WVP7BK.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk3KPNTQBV_cjs = require('./chunk-3KPNTQBV.cjs');
+var chunkWMXPKKXU_cjs = require('./chunk-WMXPKKXU.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var jwt = require('next-auth/jwt');
 var _CredentialsProvider = require('next-auth/providers/credentials');
@@ -11,16 +11,15 @@ var _CredentialsProvider__default = /*#__PURE__*/_interopDefault(_CredentialsPro
 
 // src/auth/seed-permissions.ts
 async function seedAdministratorPermissions(dataSource, entityMap) {
-  const entities = chunk3KPNTQBV_cjs.getPermissionableEntityKeys(entityMap);
+  const entities = chunkWMXPKKXU_cjs.getPermissionableEntityKeys(entityMap);
   const groupRepo = dataSource.getRepository(entityMap.user_groups);
   const permRepo = dataSource.getRepository(entityMap.permissions);
   const adminGroup = await groupRepo.findOne({
     where: {
-      name: chunk3KPNTQBV_cjs.ADMIN_GROUP_NAME,
+      name: chunkWMXPKKXU_cjs.ADMIN_GROUP_NAME,
       deleted: false
     }
   });
-  console.log("ADMIN GROUP", adminGroup);
   if (!adminGroup) return;
   const fullCrud = {
     canCreate: true,
@@ -35,7 +34,6 @@ async function seedAdministratorPermissions(dataSource, entityMap) {
         entity
       }
     });
-    console.log("EXISTING", existing);
     if (existing) {
       existing.canCreate = true;
       existing.canRead = true;
@@ -57,17 +55,13 @@ chunkUSNT2KNT_cjs.__name(seedAdministratorPermissions, "seedAdministratorPermiss
 var LOG_PREFIX = "[cms-auth]";
 function isAuthDebugEnabled() {
   const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 chunkUSNT2KNT_cjs.__name(isAuthDebugEnabled, "isAuthDebugEnabled");
 function isAuthDebugClientEnabled() {
   if (typeof window === "undefined") return false;
   const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
-  if (v === "1" || v === "true" || v === "yes") return true;
-  if (v === "0" || v === "false" || v === "no") return false;
-  return process.env.NODE_ENV === "development";
+  return v === "1" || v === "true" || v === "yes";
 }
 chunkUSNT2KNT_cjs.__name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
 function logAuth(message, data) {
@@ -246,20 +240,76 @@ function createCmsMiddleware(config = {}) {
 }
 chunkUSNT2KNT_cjs.__name(createCmsMiddleware, "createCmsMiddleware");
 var CredentialsProvider = _CredentialsProvider__default.default.default ?? _CredentialsProvider__default.default;
+function parseBooleanSetting(value) {
+  if (typeof value === "boolean") return value;
+  if (typeof value === "number") return value !== 0;
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if ([
+      "true",
+      "1",
+      "yes",
+      "on"
+    ].includes(normalized)) return true;
+    if ([
+      "false",
+      "0",
+      "no",
+      "off"
+    ].includes(normalized)) return false;
+  }
+  if (value && typeof value === "object") {
+    const record = value;
+    const nested = parseBooleanSetting(record.value ?? record.enabled ?? record.isEnabled ?? record.active ?? record.state);
+    if (nested != null) return nested;
+  }
+  return null;
+}
+chunkUSNT2KNT_cjs.__name(parseBooleanSetting, "parseBooleanSetting");
+async function checkMultiVendorEnabledViaSettingsApi() {
+  const FAIL_OPEN_DEFAULT = true;
+  const base = process.env.NEXTAUTH_URL?.replace(/\/$/, "");
+  if (!base) {
+    logAuth("multiVendorCheck: no NEXTAUTH_URL, defaulting", {
+      multiVendorEnabled: FAIL_OPEN_DEFAULT
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+  try {
+    const res = await fetch(`${base}/api/settings/multi_vendor`, {
+      cache: "no-store"
+    });
+    if (!res.ok) {
+      logAuth("multiVendorCheck: non-OK response, defaulting", {
+        status: res.status
+      });
+      return FAIL_OPEN_DEFAULT;
+    }
+    const data = await res.json();
+    const parsed = parseBooleanSetting(data?.enabled ?? data?.value ?? data?.isEnabled ?? data?.active ?? data?.state);
+    return parsed ?? FAIL_OPEN_DEFAULT;
+  } catch (err) {
+    logAuth("multiVendorCheck: fetch failed, defaulting", {
+      message: err instanceof Error ? err.message : String(err)
+    });
+    return FAIL_OPEN_DEFAULT;
+  }
+}
+chunkUSNT2KNT_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
-  const isRBACAdmin = chunk3KPNTQBV_cjs.isSuperAdmin({
+  const isRBACAdmin = chunkWMXPKKXU_cjs.isSuperAdmin({
     groupId: user.groupId ?? void 0,
     groupName: g?.name,
     isRBACAdmin: false
   });
-  const entityPerms = chunk3KPNTQBV_cjs.permissionRowsToRecord(g?.permissions);
+  const entityPerms = chunkWMXPKKXU_cjs.permissionRowsToRecord(g?.permissions);
   const rawAdminAccess = user.adminAccess;
   const adminAccess = rawAdminAccess === true ? true : rawAdminAccess === false ? false : void 0;
   const vendorIds = user.vendorIds ?? [];
   const vendorRole = user.vendorRole ?? null;
   const isVendorRoleOwner = user.isVendorRoleOwner ?? false;
-  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunk3KPNTQBV_cjs.vendorPortalFlagsFromUser({
+  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkWMXPKKXU_cjs.vendorPortalFlagsFromUser({
     email: user.email,
     isRBACAdmin,
     groupName: g?.name,
@@ -389,6 +439,17 @@ function getNextAuthOptions(config) {
             return null;
           }
           const sessionUser = sessionUserFromNextAuthUser(user);
+          if (sessionUser.isVendorPortal && !sessionUser.isRBACAdmin) {
+            const multiVendorEnabled = await checkMultiVendorEnabledViaSettingsApi();
+            if (!multiVendorEnabled) {
+              logAuth("authorize(credentials) rejected", {
+                reason: "multi_vendor_disabled",
+                email,
+                userId: user.id
+              });
+              return null;
+            }
+          }
           logAuth("authorize(credentials) ok", summarizeSessionUserForLog(sessionUser));
           return sessionUser;
         } catch (err) {

package/dist/chunk-HCIRL37O.js

@@ -0,0 +1,21 @@
+import { __name } from './chunk-SHUYVCID.js';
+import { EventEmitter } from 'events';
+
+var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PLACED: "order_placed",
+  ORDER_CANCELLED: "order_cancelled"
+};
+var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends EventEmitter {
+  static {
+    __name(this, "NotificationTriggerEmitter");
+  }
+  emitTrigger(triggerKey, payload) {
+    this.emit("__any__", triggerKey, payload);
+  }
+  onAnyTrigger(listener) {
+    this.on("__any__", listener);
+  }
+};
+var notificationTriggerEmitter = new NotificationTriggerEmitter();
+
+export { KNOWN_NOTIFICATION_TRIGGERS, notificationTriggerEmitter };

package/dist/chunk-HT5DI3XW.cjs

@@ -0,0 +1,82 @@
+'use strict';
+
+var chunkUCKN4BBY_cjs = require('./chunk-UCKN4BBY.cjs');
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/lib/emit-order-notification-trigger.ts
+function maskPhone(raw) {
+  const digits = String(raw ?? "").replace(/\D/g, "");
+  if (digits.length <= 4) return "(none)";
+  return `***${digits.slice(-4)}`;
+}
+chunkUSNT2KNT_cjs.__name(maskPhone, "maskPhone");
+async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  if (!deps.entityMap.orders) {
+    console.warn("[notification-triggers] skip emit: orders entity missing from entityMap", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const listenerCount = chunkUCKN4BBY_cjs.notificationTriggerEmitter.listenerCount("__any__");
+  if (listenerCount === 0) {
+    console.warn("[notification-triggers] no WhatsApp dispatcher listener \u2014 ensure createCmsApiHandler passes getCms (initWhatsappTriggerDispatcher)");
+  }
+  const orderRepo = deps.dataSource.getRepository(deps.entityMap.orders);
+  const fullOrder = await orderRepo.findOne({
+    where: {
+      id: orderId,
+      deleted: false
+    },
+    relations: [
+      "contact"
+    ]
+  });
+  if (!fullOrder) {
+    console.warn("[notification-triggers] skip emit: order not found", {
+      triggerKey,
+      orderId
+    });
+    return;
+  }
+  const fo = fullOrder;
+  const phone = fo.contact?.phone ?? null;
+  console.log("[notification-triggers] emit", {
+    triggerKey,
+    orderId,
+    orderNumber: fo.orderNumber ?? null,
+    phone: maskPhone(phone),
+    listeners: listenerCount
+  });
+  if (!phone?.trim()) {
+    console.warn("[notification-triggers] order contact has no phone \u2014 WhatsApp will be skipped", {
+      orderId
+    });
+  }
+  chunkUCKN4BBY_cjs.notificationTriggerEmitter.emitTrigger(triggerKey, {
+    orderId,
+    orderNumber: String(fo.orderNumber ?? ""),
+    customerName: fo.contact?.name ?? "",
+    customerPhone: phone,
+    total: fo.total ?? 0,
+    currency: String(fo.currency ?? "INR"),
+    vendorId: fo.vendorId ?? null,
+    ...extra?.refundAmount != null ? {
+      refundAmount: extra.refundAmount
+    } : {}
+  });
+}
+chunkUSNT2KNT_cjs.__name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");
+function fireOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
+  console.log("[notification-triggers] fire", {
+    triggerKey,
+    orderId
+  });
+  void emitOrderNotificationTrigger(triggerKey, orderId, deps, extra).catch((err) => {
+    console.error("[notification-triggers]", triggerKey, orderId, err);
+  });
+}
+chunkUSNT2KNT_cjs.__name(fireOrderNotificationTrigger, "fireOrderNotificationTrigger");
+
+exports.emitOrderNotificationTrigger = emitOrderNotificationTrigger;
+exports.fireOrderNotificationTrigger = fireOrderNotificationTrigger;

package/dist/{chunk-EF2JBPDM.js → chunk-KFFB6EMZ.js}

@@ -84,12 +84,18 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
   let subject = def.subject;
   let body = def.body;
   let externalTemplateRef = def.externalTemplateRef;
+  let name;
+  let language;
+  let paramOrder;
   let enabled = true;
   if (row) {
     enabled = row.enabled !== false;
     if (row.subject?.trim()) subject = row.subject.trim();
     if (row.body.trim()) body = row.body;
     if (row.externalTemplateRef?.trim()) externalTemplateRef = row.externalTemplateRef.trim();
+    name = row.name?.trim() || void 0;
+    language = row.language?.trim() || void 0;
+    paramOrder = row.paramOrder?.length ? row.paramOrder : void 0;
   }
   if (eventOverride) {
     if (eventOverride.subject?.trim()) subject = eventOverride.subject.trim();
@@ -102,6 +108,9 @@ async function resolveEventOrderTemplate(channel, getRow, eventOverride) {
     subject,
     body,
     externalTemplateRef: externalTemplateRef?.trim() || void 0,
+    name,
+    language,
+    paramOrder,
     enabled
   };
 }