@infuro/cms-core 1.0.45 → 1.0.47

package/dist/chunk-3K5AIEIZ.js

@@ -0,0 +1,256 @@
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/lib/order-inventory.ts
+var STOCK_HELD = /* @__PURE__ */ new Set([
+  "confirmed",
+  "completed"
+]);
+function orderStatusHoldsStock(status) {
+  return STOCK_HELD.has(String(status ?? "").trim().toLowerCase());
+}
+__name(orderStatusHoldsStock, "orderStatusHoldsStock");
+function orderInventorySnapshotFromRow(order) {
+  return {
+    status: order.status ?? "pending",
+    lines: (order.items ?? []).map((i) => {
+      const meta = i.metadata && typeof i.metadata === "object" ? i.metadata : null;
+      const metaVid = meta?.variantId ?? meta?.variant_id;
+      const fromCol = i.variantId != null ? Number(i.variantId) : NaN;
+      const fromMeta = metaVid != null && String(metaVid).trim() !== "" ? Number(metaVid) : NaN;
+      const variantId = Number.isFinite(fromCol) && fromCol > 0 ? fromCol : Number.isFinite(fromMeta) && fromMeta > 0 ? fromMeta : null;
+      return {
+        productId: Number(i.productId),
+        quantity: Math.max(0, Math.floor(Number(i.quantity) || 0)),
+        variantId
+      };
+    }).filter((l) => l.productId > 0 && l.quantity > 0)
+  };
+}
+__name(orderInventorySnapshotFromRow, "orderInventorySnapshotFromRow");
+function lineKey(productId, variantId) {
+  const vid = variantId != null && Number.isFinite(Number(variantId)) && Number(variantId) > 0 ? Number(variantId) : 0;
+  return `${productId}:${vid}`;
+}
+__name(lineKey, "lineKey");
+function mergeInventoryLines(lines) {
+  const m = /* @__PURE__ */ new Map();
+  for (const line of lines) {
+    const productId = Number(line.productId);
+    const quantity = Math.max(0, Math.floor(Number(line.quantity) || 0));
+    if (!Number.isFinite(productId) || productId <= 0 || quantity <= 0) continue;
+    const variantId = line.variantId != null && Number.isFinite(Number(line.variantId)) && Number(line.variantId) > 0 ? Number(line.variantId) : null;
+    const key = lineKey(productId, variantId);
+    const prev = m.get(key);
+    if (prev) {
+      prev.quantity += quantity;
+    } else {
+      m.set(key, {
+        productId,
+        quantity,
+        variantId
+      });
+    }
+  }
+  return m;
+}
+__name(mergeInventoryLines, "mergeInventoryLines");
+function productRepo(ds, entityMap) {
+  const target = entityMap.products;
+  if (!target) throw new Error("products entity not configured");
+  return ds.getRepository(target);
+}
+__name(productRepo, "productRepo");
+function variantRepo(ds, entityMap) {
+  const target = entityMap.product_variants;
+  if (!target) return null;
+  return ds.getRepository(target);
+}
+__name(variantRepo, "variantRepo");
+async function validateInventoryForConfirmedOrderLines(ds, entityMap, lines) {
+  const merged = mergeInventoryLines(lines);
+  const byProduct = /* @__PURE__ */ new Map();
+  for (const line of merged.values()) {
+    byProduct.set(line.productId, (byProduct.get(line.productId) ?? 0) + line.quantity);
+  }
+  const pRepo = productRepo(ds, entityMap);
+  const vRepo = variantRepo(ds, entityMap);
+  for (const [productId, qty] of byProduct) {
+    const row = await pRepo.findOne({
+      where: {
+        id: productId,
+        deleted: false
+      }
+    });
+    if (!row) return `Product #${productId} not found`;
+    if (row.type === "service") continue;
+    const name = row.name ?? String(productId);
+    const productQty = Number(row.quantity ?? 0);
+    if (productQty < qty) {
+      return `Insufficient stock for ${name}: available ${productQty}, required ${qty}`;
+    }
+  }
+  for (const line of merged.values()) {
+    if (!line.variantId || !vRepo) continue;
+    const row = await pRepo.findOne({
+      where: {
+        id: line.productId,
+        deleted: false
+      }
+    });
+    if (!row) continue;
+    if (row.type === "service") continue;
+    const name = row.name ?? String(line.productId);
+    const variant = await vRepo.findOne({
+      where: {
+        id: line.variantId,
+        productId: line.productId
+      }
+    });
+    if (!variant) return `Variant #${line.variantId} not found for ${name}`;
+    const inv = Number(variant.inventory ?? 0);
+    if (inv < line.quantity) {
+      return `Insufficient variant stock for ${name}: available ${inv}, required ${line.quantity}`;
+    }
+  }
+  return null;
+}
+__name(validateInventoryForConfirmedOrderLines, "validateInventoryForConfirmedOrderLines");
+async function validateInventoryForOrderBecomingConfirmed(ds, entityMap, prevSnap, nextLines) {
+  const mergedNext = mergeInventoryLines(nextLines);
+  const prevByKey = prevSnap && orderStatusHoldsStock(prevSnap.status) ? mergeInventoryLines(prevSnap.lines) : /* @__PURE__ */ new Map();
+  const nextByProduct = /* @__PURE__ */ new Map();
+  for (const line of mergedNext.values()) {
+    nextByProduct.set(line.productId, (nextByProduct.get(line.productId) ?? 0) + line.quantity);
+  }
+  const prevByProduct = /* @__PURE__ */ new Map();
+  for (const line of prevByKey.values()) {
+    prevByProduct.set(line.productId, (prevByProduct.get(line.productId) ?? 0) + line.quantity);
+  }
+  const pRepo = productRepo(ds, entityMap);
+  const vRepo = variantRepo(ds, entityMap);
+  for (const [productId, need] of nextByProduct) {
+    const row = await pRepo.findOne({
+      where: {
+        id: productId,
+        deleted: false
+      }
+    });
+    if (!row) return `Product #${productId} not found`;
+    if (row.type === "service") continue;
+    const name = row.name ?? String(productId);
+    const available = Number(row.quantity ?? 0) + (prevByProduct.get(productId) ?? 0);
+    if (available < need) {
+      return `Insufficient stock for ${name}: available ${available}, required ${need}`;
+    }
+  }
+  for (const line of mergedNext.values()) {
+    if (!line.variantId || !vRepo) continue;
+    const row = await pRepo.findOne({
+      where: {
+        id: line.productId,
+        deleted: false
+      }
+    });
+    if (!row || row.type === "service") continue;
+    const name = row.name ?? String(line.productId);
+    const key = lineKey(line.productId, line.variantId);
+    const variant = await vRepo.findOne({
+      where: {
+        id: line.variantId,
+        productId: line.productId
+      }
+    });
+    if (!variant) return `Variant #${line.variantId} not found for ${name}`;
+    let inv = Number(variant.inventory ?? 0);
+    inv += prevByKey.get(key)?.quantity ?? 0;
+    if (inv < line.quantity) {
+      return `Insufficient variant stock for ${name}: available ${inv}, required ${line.quantity}`;
+    }
+  }
+  return null;
+}
+__name(validateInventoryForOrderBecomingConfirmed, "validateInventoryForOrderBecomingConfirmed");
+async function applyInventoryDelta(ds, entityMap, lines, sign, validateDeduct) {
+  const merged = mergeInventoryLines(lines);
+  const pRepo = productRepo(ds, entityMap);
+  const vRepo = variantRepo(ds, entityMap);
+  for (const line of merged.values()) {
+    const row = await pRepo.findOne({
+      where: sign === 1 ? {
+        id: line.productId
+      } : {
+        id: line.productId,
+        deleted: false
+      }
+    });
+    if (!row) return `Product #${line.productId} not found`;
+    if (row.type === "service") continue;
+    const name = row.name ?? String(line.productId);
+    const cur = Number(row.quantity ?? 0);
+    if (line.variantId && vRepo) {
+      const variant = await vRepo.findOne({
+        where: {
+          id: line.variantId,
+          productId: line.productId
+        }
+      });
+      if (!variant) return `Variant #${line.variantId} not found for ${name}`;
+      const inv = Number(variant.inventory ?? 0);
+      if (sign === -1) {
+        if (validateDeduct && inv < line.quantity) {
+          return `Insufficient variant stock for ${name}: available ${inv}, required ${line.quantity}`;
+        }
+        await vRepo.update(line.variantId, {
+          inventory: Math.max(0, inv - line.quantity)
+        });
+      } else {
+        await vRepo.update(line.variantId, {
+          inventory: inv + line.quantity
+        });
+      }
+    }
+    if (sign === -1) {
+      if (validateDeduct && cur < line.quantity) {
+        return `Insufficient stock for ${name}: available ${cur}, required ${line.quantity}`;
+      }
+      await pRepo.update(line.productId, {
+        quantity: Math.max(0, cur - line.quantity)
+      });
+    } else {
+      await pRepo.update(line.productId, {
+        quantity: cur + line.quantity
+      });
+    }
+  }
+  return null;
+}
+__name(applyInventoryDelta, "applyInventoryDelta");
+async function reconcileOrderInventoryBetweenSnapshots(ds, entityMap, prev, next) {
+  const wasHeld = orderStatusHoldsStock(prev.status);
+  const isHeld = orderStatusHoldsStock(next.status);
+  if (wasHeld) {
+    const err = await applyInventoryDelta(ds, entityMap, prev.lines, 1, false);
+    if (err) return err;
+  }
+  if (isHeld) {
+    const err = await applyInventoryDelta(ds, entityMap, next.lines, -1, true);
+    if (err) return err;
+  }
+  return null;
+}
+__name(reconcileOrderInventoryBetweenSnapshots, "reconcileOrderInventoryBetweenSnapshots");
+async function deductInventoryForConfirmedOrder(ds, entityMap, lines, options) {
+  const validate = options?.validate !== false;
+  if (validate) {
+    const err = await validateInventoryForConfirmedOrderLines(ds, entityMap, lines);
+    if (err) return err;
+  }
+  return applyInventoryDelta(ds, entityMap, lines, -1, validate);
+}
+__name(deductInventoryForConfirmedOrder, "deductInventoryForConfirmedOrder");
+async function restoreInventoryForCancelledOrder(ds, entityMap, lines) {
+  return applyInventoryDelta(ds, entityMap, lines, 1, false);
+}
+__name(restoreInventoryForCancelledOrder, "restoreInventoryForCancelledOrder");
+
+export { deductInventoryForConfirmedOrder, mergeInventoryLines, orderInventorySnapshotFromRow, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, restoreInventoryForCancelledOrder, validateInventoryForConfirmedOrderLines, validateInventoryForOrderBecomingConfirmed };

package/dist/{chunk-SPQFNIYJ.cjs → chunk-4PMK3RNA.cjs}

@@ -6,6 +6,7 @@ var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var EVENT_ORDER_TEMPLATE_KEY = "eventOrderPlaced";
 var EVENT_ORDER_TEMPLATE_VARIABLES = [
   "eventName",
+  "vendorName",
   "eventSlug",
   "venue",
   "startDate",
@@ -33,6 +34,7 @@ var EVENT_ORDER_WHATSAPP_PARAM_KEYS = [
 ];
 var EVENT_ORDER_TEMPLATE_VARIABLE_HINTS = {
   eventName: "Event title",
+  vendorName: "Vendor / store name",
   eventSlug: "Event URL slug",
   venue: "Venue name",
   startDate: "Formatted event start",

package/dist/{chunk-X6UQFV4X.cjs → chunk-77NUXO6A.cjs}

@@ -50,12 +50,13 @@ chunkUSNT2KNT_cjs.__name(getPermissionableEntityKeys, "getPermissionableEntityKe
 function permissionRowsToRecord(rows) {
   const out = {};
   if (!rows?.length) return out;
+  const flag = /* @__PURE__ */ chunkUSNT2KNT_cjs.__name((v) => v === true || v === 1 || v === "1" || v === "t" || v === "true", "flag");
   for (const p of rows) {
     out[p.entity] = {
-      c: !!p.canCreate,
-      r: !!p.canRead,
-      u: !!p.canUpdate,
-      d: !!p.canDelete
+      c: flag(p.canCreate),
+      r: flag(p.canRead),
+      u: flag(p.canUpdate),
+      d: flag(p.canDelete)
     };
   }
   return out;
@@ -138,11 +139,12 @@ var VENDOR_STORE_RBAC_ENTITIES = /* @__PURE__ */ new Set([
   "order_addresses",
   "event_products"
 ]);
-var VENDOR_OWNER_GROUP_NAME = "Vendor Owner";
+var VENDOR_GROUP_NAME = "Vendor";
+var VENDOR_OWNER_GROUP_NAME = VENDOR_GROUP_NAME;
 function isVendorGroupName(name) {
   if (!name?.trim()) return false;
   const n = name.trim().toLowerCase();
-  return n === VENDOR_OWNER_GROUP_NAME.toLowerCase() || n.includes("vendor");
+  return n === "vendor" || n === "vendor owner" || n.includes("vendor");
 }
 chunkUSNT2KNT_cjs.__name(isVendorGroupName, "isVendorGroupName");
 function isPlatformAdministrator(user) {
@@ -165,10 +167,8 @@ function isVendorOwner(user) {
   if (user?.isVendorOwner === true) return true;
   if (!user?.email || isPlatformAdministrator(user)) return false;
   if (user.isVendorRoleOwner === true) return true;
-  if (user.vendorRole === "staff") return false;
   if (user.vendorRole === "owner") return true;
-  if (!isVendorPortalUser(user)) return false;
-  return user.groupName?.trim().toLowerCase() === VENDOR_OWNER_GROUP_NAME.toLowerCase();
+  return false;
 }
 chunkUSNT2KNT_cjs.__name(isVendorOwner, "isVendorOwner");
 function canManageVendorTeam(user) {
@@ -206,7 +206,7 @@ chunkUSNT2KNT_cjs.__name(resolveVendorScopeFromSessionUser, "resolveVendorScopeF
 function vendorPortalFlagsFromUser(input) {
   const vendorIds = input.vendorIds ?? [];
   const isVendorPortal = !input.isRBACAdmin && (vendorIds.length > 0 || isVendorGroupName(input.groupName));
-  const isVendorOwner2 = isVendorPortal && (input.isVendorRoleOwner === true || input.vendorRole !== "staff" && (input.vendorRole === "owner" || input.groupName?.trim().toLowerCase() === VENDOR_OWNER_GROUP_NAME.toLowerCase()));
+  const isVendorOwner2 = isVendorPortal && (input.isVendorRoleOwner === true || input.vendorRole === "owner");
   return {
     isVendorPortal,
     isVendorOwner: isVendorOwner2
@@ -463,7 +463,8 @@ function explainSessionEntityAccess(user, entity, action) {
   const isStaff = user.vendorRole === "staff";
   const vendorPerms = user.vendorEntityPerms;
   const hasVendorRolePerms = vendorPerms != null && Object.keys(vendorPerms).length > 0;
-  if (vendorIds.length > 0 && hasVendorRolePerms) {
+  const enforceVendorRoleMatrix = vendorIds.length > 0 && (hasVendorRolePerms || user.vendorRoleId != null);
+  if (enforceVendorRoleMatrix) {
     const vendorRbacSet = new Set(VENDOR_RBAC_ENTITIES);
     if (vendorRbacSet.has(entity) || entity === "analytics") {
       if (entity === "analytics" && action === "read") {
@@ -605,7 +606,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-4Z6A425H.cjs');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-6PWTLBEL.cjs');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {
@@ -630,6 +631,7 @@ exports.ADMIN_GROUP_NAME = ADMIN_GROUP_NAME;
 exports.DEFAULT_VENDOR_ROLE_DEFS = DEFAULT_VENDOR_ROLE_DEFS;
 exports.SUPER_ADMIN_GROUP_ID = SUPER_ADMIN_GROUP_ID;
 exports.VENDOR_ADMIN_GROUP_ID = VENDOR_ADMIN_GROUP_ID;
+exports.VENDOR_GROUP_NAME = VENDOR_GROUP_NAME;
 exports.VENDOR_OWNER_GROUP_NAME = VENDOR_OWNER_GROUP_NAME;
 exports.VENDOR_RBAC_ENTITIES = VENDOR_RBAC_ENTITIES;
 exports.VENDOR_SCOPED_STORE_ENTITIES = VENDOR_SCOPED_STORE_ENTITIES;