@infuro/cms-core 1.0.44 → 1.0.46

package/dist/chunk-DBPSJYLZ.js

@@ -0,0 +1,47 @@
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/lib/retire-soft-deleted-unique.ts
+async function retireSoftDeletedUniqueValue(repo, column, value) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed) return;
+  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
+  if (!cols.has(column) || !cols.has("deleted")) return;
+  const rows = await repo.find({
+    where: {
+      [column]: trimmed,
+      deleted: true
+    }
+  });
+  for (const row of rows) {
+    const id = row.id;
+    if (!Number.isFinite(id)) continue;
+    const current = String(row[column] ?? "");
+    if (current.includes("__deleted_")) continue;
+    await repo.update(id, {
+      [column]: `${trimmed}__deleted_${id}`
+    });
+  }
+}
+__name(retireSoftDeletedUniqueValue, "retireSoftDeletedUniqueValue");
+async function activeUniqueValueExists(repo, column, value, excludeId) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed) return false;
+  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
+  if (!cols.has(column)) return false;
+  const qb = repo.createQueryBuilder("row").where(`row.${column} = :value`, {
+    value: trimmed
+  });
+  if (cols.has("deleted")) {
+    qb.andWhere("row.deleted = false");
+  }
+  if (excludeId != null && Number.isFinite(excludeId) && excludeId > 0) {
+    qb.andWhere("row.id != :excludeId", {
+      excludeId
+    });
+  }
+  const hit = await qb.getOne();
+  return !!hit;
+}
+__name(activeUniqueValueExists, "activeUniqueValueExists");
+
+export { activeUniqueValueExists, retireSoftDeletedUniqueValue };

package/dist/{chunk-TAHX46EI.cjs → chunk-FBKDMRQL.cjs}

@@ -405,6 +405,14 @@ function getNextAuthOptions(config) {
             });
             return null;
           }
+          if (user.inviteStatus === "pending") {
+            logAuth("authorize(credentials) rejected", {
+              reason: "invite_pending",
+              email,
+              userId: user.id
+            });
+            return null;
+          }
           if (user.deleted) {
             logAuth("authorize(credentials) rejected", {
               reason: "deleted",
@@ -494,7 +502,7 @@ function getNextAuthOptions(config) {
             channel: ch,
             code
           });
-          if (!user || user.blocked || user.deleted) return null;
+          if (!user || user.blocked || user.inviteStatus === "pending" || user.deleted) return null;
           if (isCustomerGroupUser(user) && !permitsCustomerLogin(allowCustomerLogin, creds)) {
             logAuth("authorize(otp) rejected", {
               reason: "customer_group",