@infuro/cms-core 1.0.45 → 1.0.47

package/dist/chunk-OY2YTBMP.cjs

@@ -0,0 +1,50 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/lib/retire-soft-deleted-unique.ts
+async function retireSoftDeletedUniqueValue(repo, column, value) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed) return;
+  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
+  if (!cols.has(column) || !cols.has("deleted")) return;
+  const rows = await repo.find({
+    where: {
+      [column]: trimmed,
+      deleted: true
+    }
+  });
+  for (const row of rows) {
+    const id = row.id;
+    if (!Number.isFinite(id)) continue;
+    const current = String(row[column] ?? "");
+    if (current.includes("__deleted_")) continue;
+    await repo.update(id, {
+      [column]: `${trimmed}__deleted_${id}`
+    });
+  }
+}
+chunkUSNT2KNT_cjs.__name(retireSoftDeletedUniqueValue, "retireSoftDeletedUniqueValue");
+async function activeUniqueValueExists(repo, column, value, excludeId) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed) return false;
+  const cols = new Set(repo.metadata.columns.map((c) => c.propertyName));
+  if (!cols.has(column)) return false;
+  const qb = repo.createQueryBuilder("row").where(`row.${column} = :value`, {
+    value: trimmed
+  });
+  if (cols.has("deleted")) {
+    qb.andWhere("row.deleted = false");
+  }
+  if (excludeId != null && Number.isFinite(excludeId) && excludeId > 0) {
+    qb.andWhere("row.id != :excludeId", {
+      excludeId
+    });
+  }
+  const hit = await qb.getOne();
+  return !!hit;
+}
+chunkUSNT2KNT_cjs.__name(activeUniqueValueExists, "activeUniqueValueExists");
+
+exports.activeUniqueValueExists = activeUniqueValueExists;
+exports.retireSoftDeletedUniqueValue = retireSoftDeletedUniqueValue;

package/dist/{chunk-TAHX46EI.cjs → chunk-Q3HQEM4R.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkX6UQFV4X_cjs = require('./chunk-X6UQFV4X.cjs');
+var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var jwt = require('next-auth/jwt');
 var _CredentialsProvider = require('next-auth/providers/credentials');
@@ -11,12 +11,12 @@ var _CredentialsProvider__default = /*#__PURE__*/_interopDefault(_CredentialsPro
 
 // src/auth/seed-permissions.ts
 async function seedAdministratorPermissions(dataSource, entityMap) {
-  const entities = chunkX6UQFV4X_cjs.getPermissionableEntityKeys(entityMap);
+  const entities = chunk77NUXO6A_cjs.getPermissionableEntityKeys(entityMap);
   const groupRepo = dataSource.getRepository(entityMap.user_groups);
   const permRepo = dataSource.getRepository(entityMap.permissions);
   const adminGroup = await groupRepo.findOne({
     where: {
-      name: chunkX6UQFV4X_cjs.ADMIN_GROUP_NAME,
+      name: chunk77NUXO6A_cjs.ADMIN_GROUP_NAME,
       deleted: false
     }
   });
@@ -299,18 +299,18 @@ async function checkMultiVendorEnabledViaSettingsApi() {
 chunkUSNT2KNT_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
-  const isRBACAdmin = chunkX6UQFV4X_cjs.isSuperAdmin({
+  const isRBACAdmin = chunk77NUXO6A_cjs.isSuperAdmin({
     groupId: user.groupId ?? void 0,
     groupName: g?.name,
     isRBACAdmin: false
   });
-  const entityPerms = chunkX6UQFV4X_cjs.permissionRowsToRecord(g?.permissions);
+  const entityPerms = chunk77NUXO6A_cjs.permissionRowsToRecord(g?.permissions);
   const rawAdminAccess = user.adminAccess;
   const adminAccess = rawAdminAccess === true ? true : rawAdminAccess === false ? false : void 0;
   const vendorIds = user.vendorIds ?? [];
   const vendorRole = user.vendorRole ?? null;
   const isVendorRoleOwner = user.isVendorRoleOwner ?? false;
-  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkX6UQFV4X_cjs.vendorPortalFlagsFromUser({
+  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunk77NUXO6A_cjs.vendorPortalFlagsFromUser({
     email: user.email,
     isRBACAdmin,
     groupName: g?.name,
@@ -405,6 +405,14 @@ function getNextAuthOptions(config) {
             });
             return null;
           }
+          if (user.inviteStatus === "pending") {
+            logAuth("authorize(credentials) rejected", {
+              reason: "invite_pending",
+              email,
+              userId: user.id
+            });
+            return null;
+          }
           if (user.deleted) {
             logAuth("authorize(credentials) rejected", {
               reason: "deleted",
@@ -494,7 +502,7 @@ function getNextAuthOptions(config) {
             channel: ch,
             code
           });
-          if (!user || user.blocked || user.deleted) return null;
+          if (!user || user.blocked || user.inviteStatus === "pending" || user.deleted) return null;
           if (isCustomerGroupUser(user) && !permitsCustomerLogin(allowCustomerLogin, creds)) {
             logAuth("authorize(otp) rejected", {
               reason: "customer_group",

package/dist/chunk-V25RDUOU.cjs

@@ -0,0 +1,248 @@
+'use strict';
+
+var chunkBXYZDMTZ_cjs = require('./chunk-BXYZDMTZ.cjs');
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/plugins/email/email-queue.ts
+var EMAIL_QUEUE_NAME = "email";
+var registeredInvoiceOptions = {};
+async function resolveInvoiceAttachmentForJob(cms, payload, options) {
+  if (!payload.attachInvoice || payload.orderId == null || payload.orderId < 1) {
+    return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+  }
+  const entityMap = options.entityMap;
+  if (!entityMap?.orders) {
+    console.warn("[email] attachInvoice skipped: entityMap not registered on email queue processor");
+    return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+  }
+  let dataSource;
+  try {
+    dataSource = options.getDataSource ? await options.getDataSource() : cms.dataSource;
+  } catch (err) {
+    console.error("[email] attachInvoice: getDataSource failed", err);
+    return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+  }
+  if (!dataSource) {
+    console.warn("[email] attachInvoice skipped: no dataSource");
+    return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+  }
+  try {
+    const order = await dataSource.getRepository(entityMap.orders).findOne({
+      where: {
+        id: payload.orderId,
+        deleted: false
+      }
+    });
+    if (!order) return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+    const o = order;
+    if (!chunkBXYZDMTZ_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
+      return {
+        attachments: payload.attachments,
+        invoiceAttached: false
+      };
+    }
+    const resolved = await chunkBXYZDMTZ_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
+    if ("error" in resolved) {
+      console.warn("[email] order invoice attach failed", {
+        orderId: payload.orderId,
+        error: resolved.error,
+        status: resolved.status
+      });
+      return {
+        attachments: payload.attachments,
+        invoiceAttached: false
+      };
+    }
+    const invoiceAtt = {
+      filename: resolved.filename,
+      content: resolved.bytes,
+      contentType: resolved.contentType
+    };
+    return {
+      attachments: [
+        ...payload.attachments ?? [],
+        invoiceAtt
+      ],
+      invoiceAttached: true
+    };
+  } catch (err) {
+    console.error("[email] order invoice attach error", {
+      orderId: payload.orderId,
+      err
+    });
+    return {
+      attachments: payload.attachments,
+      invoiceAttached: false
+    };
+  }
+}
+chunkUSNT2KNT_cjs.__name(resolveInvoiceAttachmentForJob, "resolveInvoiceAttachmentForJob");
+async function sendRendered(email, to, subject, html, text, attachments) {
+  await email.send({
+    to,
+    subject,
+    html,
+    text,
+    attachments
+  });
+}
+chunkUSNT2KNT_cjs.__name(sendRendered, "sendRendered");
+function registerEmailQueueProcessor(cms, options = {}) {
+  registeredInvoiceOptions = options;
+  const queue = cms.getPlugin("queue");
+  const email = cms.getPlugin("email");
+  if (!queue || !email) return;
+  queue.registerProcessor(EMAIL_QUEUE_NAME, async (data) => {
+    const payload = data;
+    const { to, templateName, ctx, subject, html, text } = payload;
+    if (!to) return;
+    const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
+    if (templateName && ctx) {
+      const rendered = email.renderTemplate(templateName, {
+        ...ctx,
+        invoiceAttached: attachmentsResult.invoiceAttached
+      });
+      await sendRendered(email, to, rendered.subject, rendered.html, rendered.text, attachmentsResult.attachments);
+    } else if (subject != null && html != null) {
+      await sendRendered(email, to, subject, html, text, attachmentsResult.attachments);
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(registerEmailQueueProcessor, "registerEmailQueueProcessor");
+async function queueEmail(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  if (queue) {
+    await queue.add(EMAIL_QUEUE_NAME, payload);
+    return;
+  }
+  const email = cms.getPlugin("email");
+  if (!email) return;
+  const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
+  if (payload.templateName && payload.ctx) {
+    const rendered = email.renderTemplate(payload.templateName, {
+      ...payload.ctx,
+      invoiceAttached: attachmentsResult.invoiceAttached
+    });
+    await sendRendered(email, payload.to, rendered.subject, rendered.html, rendered.text, attachmentsResult.attachments);
+  } else if (payload.subject != null && payload.html != null) {
+    await sendRendered(email, payload.to, payload.subject, payload.html, payload.text, attachmentsResult.attachments ?? payload.attachments);
+  }
+}
+chunkUSNT2KNT_cjs.__name(queueEmail, "queueEmail");
+async function queueOrderPlacedEmails(cms, payload) {
+  const { orderNumber, total, subtotal, tax, currency, customerName, customerEmail, salesTeamEmails, companyDetails, lineItems, billingAddress, shippingAddress, orderId, attachInvoiceToCustomer = true } = payload;
+  const base = {
+    orderNumber,
+    total: total != null ? String(total) : void 0,
+    subtotal: subtotal != null ? String(subtotal) : void 0,
+    tax: tax != null ? String(tax) : void 0,
+    currency,
+    customerName,
+    companyDetails: companyDetails ?? {},
+    lineItems: lineItems ?? [],
+    billingAddress,
+    shippingAddress
+  };
+  const customerLower = customerEmail?.trim().toLowerCase() ?? "";
+  const jobs = [];
+  const shouldAttach = attachInvoiceToCustomer && orderId != null && Number.isFinite(orderId) && orderId > 0;
+  if (customerEmail?.trim()) {
+    jobs.push(queueEmail(cms, {
+      to: customerEmail.trim(),
+      templateName: "orderPlaced",
+      ctx: {
+        ...base,
+        audience: "customer"
+      },
+      ...shouldAttach ? {
+        orderId,
+        attachInvoice: true
+      } : {}
+    }));
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of salesTeamEmails) {
+    const to = raw.trim();
+    if (!to) continue;
+    const key = to.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (customerLower && key === customerLower) continue;
+    jobs.push(queueEmail(cms, {
+      to,
+      templateName: "orderPlaced",
+      ctx: {
+        ...base,
+        audience: "sales",
+        internalCustomerEmail: customerEmail?.trim() || void 0
+      }
+    }));
+  }
+  await Promise.all(jobs);
+}
+chunkUSNT2KNT_cjs.__name(queueOrderPlacedEmails, "queueOrderPlacedEmails");
+async function queueVendorOnboardEmails(cms, payload) {
+  const { vendorName, vendorSlug, ownerName, ownerEmail, activation, inviteLink, signInLink, kind = "vendor_onboard", notifyEmails, companyDetails, sendToOwner = true } = payload;
+  const base = {
+    vendorName,
+    vendorSlug,
+    ownerName,
+    ownerEmail,
+    activation,
+    inviteLink,
+    signInLink,
+    kind,
+    companyDetails: companyDetails ?? {}
+  };
+  const ownerLower = ownerEmail?.trim().toLowerCase() ?? "";
+  const jobs = [];
+  if (sendToOwner && ownerEmail?.trim()) {
+    jobs.push(queueEmail(cms, {
+      to: ownerEmail.trim(),
+      templateName: "vendorOnboarded",
+      ctx: {
+        ...base,
+        audience: "owner"
+      }
+    }));
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of notifyEmails) {
+    const to = raw.trim();
+    if (!to) continue;
+    const key = to.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (ownerLower && key === ownerLower) continue;
+    jobs.push(queueEmail(cms, {
+      to,
+      templateName: "vendorOnboarded",
+      ctx: {
+        ...base,
+        audience: "internal"
+      }
+    }));
+  }
+  await Promise.all(jobs);
+}
+chunkUSNT2KNT_cjs.__name(queueVendorOnboardEmails, "queueVendorOnboardEmails");
+
+exports.queueEmail = queueEmail;
+exports.queueOrderPlacedEmails = queueOrderPlacedEmails;
+exports.queueVendorOnboardEmails = queueVendorOnboardEmails;
+exports.registerEmailQueueProcessor = registerEmailQueueProcessor;

package/dist/{chunk-ZMRQ72F6.cjs → chunk-VUQFARRT.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkX6UQFV4X_cjs = require('./chunk-X6UQFV4X.cjs');
+var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 
 // src/auth/helpers.ts
@@ -10,7 +10,7 @@ var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
   "permissions"
 ]);
 function sessionHasEntityAccess(user, entity, action) {
-  return chunkX6UQFV4X_cjs.explainSessionEntityAccess(user, entity, action).allowed;
+  return chunk77NUXO6A_cjs.explainSessionEntityAccess(user, entity, action).allowed;
 }
 chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
 function canManageRoles(user) {
@@ -68,7 +68,7 @@ function createCmsAuthBundle(getSession, NextResponse) {
 chunkUSNT2KNT_cjs.__name(createCmsAuthBundle, "createCmsAuthBundle");
 function createAuthHelpersFromGetSession(getSession, NextResponse) {
   return {
-    async requireAuth() {
+    async requireAuth(_req) {
       const session = await getSession();
       if (!session?.user?.email) {
         return NextResponse.json({
@@ -79,7 +79,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       return null;
     },
-    async requirePermission() {
+    async requirePermission(_req, _permission) {
       const session = await getSession();
       if (!session?.user?.email) {
         return NextResponse.json({
@@ -101,8 +101,8 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunkX6UQFV4X_cjs.explainSessionEntityAccess(u, entity, action);
-      chunkX6UQFV4X_cjs.logRbac("authHelpers.requireEntityPermission", {
+      const { reason } = chunk77NUXO6A_cjs.explainSessionEntityAccess(u, entity, action);
+      chunk77NUXO6A_cjs.logRbac("authHelpers.requireEntityPermission", {
         entity,
         action,
         allowed,
@@ -123,7 +123,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
         status: 403
       });
     },
-    async requireAdminAccess() {
+    async requireAdminAccess(_req) {
       const session = await getSession();
       if (!session?.user?.email) {
         return NextResponse.json({
@@ -134,10 +134,10 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
       }
       const u = session.user;
       if (u.isRBACAdmin) return null;
-      if (chunkX6UQFV4X_cjs.isVendorPortalUser(u)) return null;
+      if (chunk77NUXO6A_cjs.isVendorPortalUser(u)) return null;
       if (u.adminAccess === true) return null;
       if (u.adminAccess === false) {
-        chunkX6UQFV4X_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
+        chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
           email: u.email,
           groupName: u.groupName,
           isVendorPortal: u.isVendorPortal
@@ -149,7 +149,7 @@ function createAuthHelpersFromGetSession(getSession, NextResponse) {
           status: 403
         });
       }
-      chunkX6UQFV4X_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
+      chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
         email: u.email,
         adminAccess: u.adminAccess,
         groupName: u.groupName,