@infuro/cms-core 1.0.47 → 1.0.51

package/dist/index.js

@@ -1,10 +1,9 @@
-export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-JE22VP6S.js';
-import { checkMultiVendorEnabled, loadUserVendorContext, getPublicSettingsGroup, BlogGeneratorService } from './chunk-W42UZLQO.js';
-export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, customerPhoneForEmail, customerPhoneForUser, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureCustomerForUser, ensureCustomerRecord, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isSyntheticCustomerPhone, isZipMedia, linkUnclaimedContactToUser, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizeCustomerPhone, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging } from './chunk-W42UZLQO.js';
+export { emitOrderNotificationTrigger, fireOrderNotificationTrigger } from './chunk-MXIWUFBP.js';
+import { checkMultiVendorEnabled, loadUserVendorContext, getPublicSettingsGroup, BlogGeneratorService } from './chunk-NUXR7BUG.js';
+export { Address, Attendee, Attribute, BLOG_GENERATOR_AGENT_NAME, BLOG_GENERATOR_DEFAULT_SYSTEM_INSTRUCTION, BLOG_GENERATOR_DEFAULT_VALIDATION_RULES, BLOG_GENERATOR_LLM_AGENT_SLUG, BLOG_GENERATOR_MARKDOWN_ARTICLE_SEPARATOR, BLOG_METADATA_ENRICHER_AGENT_NAME, BLOG_METADATA_ENRICHER_DEFAULT_SYSTEM_INSTRUCTION, BLOG_METADATA_ENRICHER_DEFAULT_VALIDATION_RULES, BLOG_METADATA_ENRICHER_LLM_AGENT_SLUG, Blog, BlogGeneratorService, Brand, CMS_ENTITY_MAP, Cart, CartItem, Category, ChatConversation, ChatMessage, Collection, Combo, ComboItem, Comment, Config, Contact, Currency, CurrencyExchange, Customer, Customer_Contacts, Discount, DiscountRules, Event, EventProduct, Form, FormField, FormSubmission, JobSchedule, JobScheduleRun, KnowledgeBaseChunk, KnowledgeBaseDocument, LlmAgent, LlmAgentKnowledgeDocument, Media, MessageTemplate, Order, OrderAddresses, OrderDiscounts, OrderItem, OrderNotificationBinding, OrderNotificationTrigger, OtpChallenge, Page, PasswordResetToken, Payment, Permission, Product, ProductAttribute, ProductCategory, ProductConfig, ProductVariant, RefundPolicy, RefundRequest, RssArticle, RssFeed, Seo, Tag, Tax, User, UserDeviceToken, UserGroup, Vendor, VendorCustomer, VendorRole, VendorRolePermission, VendorUser, VendorUserProfile, Wishlist, WishlistItem, ZIP_MIME_TYPES, applyApprovalStatusSideEffects, applyEventApprovalStatusSideEffects, applyRotatingVendorInvite, applyVendorCustomersContactFilter, applyVendorEventCreateApproval, applyVendorProductCreateApproval, assertCaptchaOk, assertContactAllowedForVendorOrder, assertEventApprovalUpdate, assertProductApprovalUpdate, buildBlogMetadataUserPrompt, buildCronFromSchedule, buildRssUserPromptFromFeeds, buildUserInviteLink, buildVendorInviteLink, calculateOrderRefundPreview, calculateRefundFromPolicy, checkAndIncrementDiscountUsage, checkEventsEnabled, checkMultiVendorEnabled, completeUserInviteAccept, consumeAppliedDiscountUsages, contactIsVendorCustomer, countDiscountOrdersForContact, countRecentOtpSends, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCmsApp, createCmsAppWithMessaging, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createEventOrderMessageTemplateHandlers, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createMessageTemplateRowLoader, createOtpChallenge, createSetPasswordHandler, createSettingsApiHandlers, createSocialMediaHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, daysBeforeEventStart, decrementDiscountUsage, describeEventTierPolicy, ensureMessagingPluginsOnCms, ensureScheduleQueueWorker, ensureVendorCustomerForOrderContact, ensureVendorCustomersForOrder, findActiveRefundPolicyForVendor, findUserByInviteToken, findVendorByInviteToken, formatTierRange, generateNumericOtp, getPublicSettingsGroup, getRequireEventApproval, getRequireProductApproval, getRssArticleSummaryFromItem, getVendorCatalogCreateFlags, hashOtpCode, hydrateVendorSessionUser, invalidateEventsCache, invalidateMultiVendorCache, invalidateRequireEventApprovalCache, invalidateRequireProductApprovalCache, invalidateVendorCatalogCreateFlagsCache, isCustomerTypeContact, isMaxPerUserUsageReached, isMaxTotalUsageReached, isZipMedia, llmAgentToChatAgentOptions, loadSettingsGroupFromDb, loadUserVendorContext, mergeGuardrailsIntoSystemPrompt, messagingPlugins, metaFetchUserManagedPages, metaPostPageFeed, metaPostPagePhoto, metaResolvePageAccessToken, newUserInviteToken, normalizePhoneE164, normalizeRefundTiers, overlayCmsPlugins, parseBlogGeneratorAgentContent, parseBlogGeneratorModelOutput, parseBlogMetadataEnrichmentJson, parseLlmAgentValidationRules, pgBossScheduleNameForId, queueErpCreateContactIfEnabled, queueJobScheduleNow, queuePlugin, queueSms, recordDiscountUsage, registerJobRunnerWorker, registerMessagingQueueProcessors, registerSmsQueueProcessor, relativePathFromMediaParentId, resolveBlogCategoryIdByName, resolveSettingsEncryptionKey, resolveVendorIdForContactCheck, sanitizeMediaFolderPath, sanitizeStorageSegment, sendVendorOnboardEmails, simpleDecrypt, simpleEncrypt, syncJobScheduleToPgBoss, validateRefundTiers, validateScheduleInput, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules, verifyAndConsumeOtpChallenge, verifyOtpCodeHash, whatsappPlugin, wrapGetCmsWithMessaging } from './chunk-NUXR7BUG.js';
 export { deductInventoryForConfirmedOrder, mergeInventoryLines, orderInventorySnapshotFromRow, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, restoreInventoryForCancelledOrder, validateInventoryForConfirmedOrderLines, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-export { activeUniqueValueExists, retireSoftDeletedUniqueValue } from './chunk-DBPSJYLZ.js';
-import { parseEmailRecipientsFromConfig } from './chunk-YXH2UUEZ.js';
-export { EmailService, buildEventOrderTemplateVariables, emailPlugin, emailTemplates, initWhatsappTriggerDispatcher, joinRecipientsForSend, parseEmailRecipientsFromConfig, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, serializeEmailRecipients } from './chunk-YXH2UUEZ.js';
+import { parseEmailRecipientsFromConfig } from './chunk-CTXBYO2J.js';
+export { EmailService, buildEventOrderTemplateVariables, emailPlugin, emailTemplates, initWhatsappTriggerDispatcher, joinRecipientsForSend, parseEmailRecipientsFromConfig, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, serializeEmailRecipients } from './chunk-CTXBYO2J.js';
 export { KNOWN_NOTIFICATION_TRIGGERS, notificationTriggerEmitter } from './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
 import { queueOrderPlacedEmails } from './chunk-L3525VXI.js';
@@ -13,11 +12,12 @@ import { mergeEmailLayoutCompanyDetails } from './chunk-2KUCQVAQ.js';
 export { INVOICE_TEMPLATE_IDS, INVOICE_TEMPLATE_OPTIONS, buildLocalInvoicePdfForOrder, generateLocalInvoicePdf, getCompanyDetailsFromSettings, isOrderEligibleForInvoiceEmail, mergeEmailLayoutCompanyDetails, normalizeInvoiceTemplateId, resolveInvoiceAssetUrl, resolveOrderInvoicePdfBytes, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
 import './chunk-MQBT33IV.js';
 import './chunk-CRFV5WJK.js';
-export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-2HU5R2JE.js';
+export { EVENT_ORDER_MESSAGE_TEMPLATE_DEFAULTS, EVENT_ORDER_TEMPLATE_KEY, EVENT_ORDER_TEMPLATE_VARIABLES, resolveEventOrderTemplate } from './chunk-AYERBA7I.js';
 import { PgBossService } from './chunk-GO7PPYNU.js';
 export { JOB_RUNNER_QUEUE, PgBossService } from './chunk-GO7PPYNU.js';
-export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-YC4NUZCS.js';
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-ZF2RQWXB.js';
+export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCmsMiddleware, createCustomerUserFromGoogleOAuth, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isAuthDebugClientEnabled, isAuthDebugEnabled, isGoogleAuthPubliclyEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, resolveGoogleAuthConfig, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-WRKV6MHB.js';
+export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, customerPhoneForEmail, customerPhoneForUser, ensureCustomerForUser, ensureCustomerRecord, getRequiredPermission, isOpenEndpoint, isPublicMethod, isSyntheticCustomerPhone, linkUnclaimedContactToUser, normalizeCustomerPhone, sessionHasEntityAccess } from './chunk-RK5ETF2I.js';
+export { activeUniqueValueExists, retireSoftDeletedUniqueValue } from './chunk-DBPSJYLZ.js';
 import { isSuperAdmin, isVendorGroupName } from './chunk-JIWUVQ6B.js';
 export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-JIWUVQ6B.js';
 export { queueErpPaidOrderForOrderId } from './chunk-TDV6EJHV.js';
@@ -2253,6 +2253,21 @@ async function sendOrderPlacedEmailsAfterConfirmation(orderId, deps) {
         hsn: r.hsn && String(r.hsn).trim() ? r.hsn : void 0
       };
     });
+    const attendeeEmails = /* @__PURE__ */ new Set();
+    try {
+      const rows = await ds.query(`SELECT DISTINCT email FROM order_attendees WHERE "orderId" = $1 AND email IS NOT NULL AND TRIM(email) != ''`, [
+        orderId
+      ]).catch(() => []);
+      if (Array.isArray(rows)) {
+        for (const r of rows) {
+          const e = String(r.email ?? "").trim().toLowerCase();
+          if (e && e !== customerEmail?.toLowerCase()) {
+            attendeeEmails.add(e);
+          }
+        }
+      }
+    } catch {
+    }
     const [branding, emailSettings] = await Promise.all([
       getSettingsGroup(deps, "branding"),
       getSettingsGroup(deps, "email")
@@ -2260,21 +2275,40 @@ async function sendOrderPlacedEmailsAfterConfirmation(orderId, deps) {
     const companyDetails = mergeEmailLayoutCompanyDetails(branding, emailSettings);
     const salesTeamEmails = parseEmailRecipientsFromConfig(emailSettings.salesTeamEmails ?? emailSettings.salesTeamEmail);
     const cms = await deps.getCms();
-    await queueOrderPlacedEmails(cms, {
-      orderId,
-      orderNumber: o.orderNumber,
-      total: o.total,
-      subtotal: o.subtotal,
-      tax: o.tax,
-      currency: o.currency,
-      customerName,
-      customerEmail,
-      salesTeamEmails,
-      companyDetails,
-      lineItems,
-      billingAddress: addrToRecord2(o.billingAddress),
-      shippingAddress: addrToRecord2(o.shippingAddress)
-    });
+    if (customerEmail) {
+      await queueOrderPlacedEmails(cms, {
+        orderId,
+        orderNumber: o.orderNumber,
+        total: o.total,
+        subtotal: o.subtotal,
+        tax: o.tax,
+        currency: o.currency,
+        customerName,
+        customerEmail,
+        salesTeamEmails,
+        companyDetails,
+        lineItems,
+        billingAddress: addrToRecord2(o.billingAddress),
+        shippingAddress: addrToRecord2(o.shippingAddress)
+      });
+    }
+    for (const attendeeEmail of attendeeEmails) {
+      await queueOrderPlacedEmails(cms, {
+        orderId,
+        orderNumber: o.orderNumber,
+        total: o.total,
+        subtotal: o.subtotal,
+        tax: o.tax,
+        currency: o.currency,
+        customerName: void 0,
+        customerEmail: attendeeEmail,
+        salesTeamEmails: [],
+        companyDetails,
+        lineItems,
+        billingAddress: addrToRecord2(o.billingAddress),
+        shippingAddress: addrToRecord2(o.shippingAddress)
+      });
+    }
   } catch {
   }
 }

package/dist/migrations/1782400000000-CreateUserDeviceTokens.ts

@@ -0,0 +1,36 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class CreateUserDeviceTokens1782400000000 implements MigrationInterface {
+  name = 'CreateUserDeviceTokens1782400000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      DO $$ BEGIN
+        CREATE TYPE "user_device_tokens_platform_enum" AS ENUM ('android', 'ios');
+      EXCEPTION WHEN duplicate_object THEN NULL; END $$;
+    `);
+
+    await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS "user_device_tokens" (
+        "id" uuid NOT NULL DEFAULT gen_random_uuid(),
+        "vendor_id" uuid NOT NULL,
+        "user_id" uuid NOT NULL,
+        "token" text NOT NULL,
+        "platform" "user_device_tokens_platform_enum" NOT NULL,
+        "device_id" character varying(255),
+        "app_version" character varying(50),
+        "is_active" boolean NOT NULL DEFAULT true,
+        "last_used_at" TIMESTAMP NULL,
+        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+        CONSTRAINT "PK_user_device_tokens" PRIMARY KEY ("id"),
+        CONSTRAINT "uq_user_device_token" UNIQUE ("user_id", "token")
+      )
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`DROP TABLE IF EXISTS "user_device_tokens"`);
+    await queryRunner.query(`DROP TYPE IF EXISTS "user_device_tokens_platform_enum"`);
+  }
+}

package/dist/migrations/1782500000000-AddPushToOrderNotificationBindingsChannelEnum.ts

@@ -0,0 +1,15 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class AddMobileToOrderNotificationBindingsChannelEnum1782500000000 implements MigrationInterface {
+  name = 'AddMobileToOrderNotificationBindingsChannelEnum1782500000000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      ALTER TYPE "order_notification_bindings_channel_enum" ADD VALUE IF NOT EXISTS 'mobile';
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    /* Postgres ENUM values cannot be safely removed once added */
+  }
+}

package/dist/{order-notification-dispatcher-6WNG24NY.js → order-notification-dispatcher-AT4IFAGL.js}

@@ -1,4 +1,4 @@
-export { initWhatsappTriggerDispatcher, resendOrderNotification } from './chunk-YXH2UUEZ.js';
+export { getSettingsGroup, initWhatsappTriggerDispatcher, resendOrderNotification } from './chunk-CTXBYO2J.js';
 import './chunk-HCIRL37O.js';
 import './chunk-L3525VXI.js';
 import './chunk-2KUCQVAQ.js';

package/dist/{order-notification-dispatcher-6XSU3AR7.cjs → order-notification-dispatcher-YBAWDOIO.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkLMJ7RKPF_cjs = require('./chunk-LMJ7RKPF.cjs');
+var chunkJN4AFHZ4_cjs = require('./chunk-JN4AFHZ4.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-V25RDUOU.cjs');
 require('./chunk-BXYZDMTZ.cjs');
@@ -10,11 +10,15 @@ require('./chunk-USNT2KNT.cjs');
 
 
 
+Object.defineProperty(exports, "getSettingsGroup", {
+  enumerable: true,
+  get: function () { return chunkJN4AFHZ4_cjs.getSettingsGroup; }
+});
 Object.defineProperty(exports, "initWhatsappTriggerDispatcher", {
   enumerable: true,
-  get: function () { return chunkLMJ7RKPF_cjs.initWhatsappTriggerDispatcher; }
+  get: function () { return chunkJN4AFHZ4_cjs.initWhatsappTriggerDispatcher; }
 });
 Object.defineProperty(exports, "resendOrderNotification", {
   enumerable: true,
-  get: function () { return chunkLMJ7RKPF_cjs.resendOrderNotification; }
+  get: function () { return chunkJN4AFHZ4_cjs.resendOrderNotification; }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infuro/cms-core",
-  "version": "1.0.47",
+  "version": "1.0.51",
   "private": false,
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/chunk-VUQFARRT.cjs

@@ -1,182 +0,0 @@
-'use strict';
-
-var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
-var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
-
-// src/auth/helpers.ts
-var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
-  "users",
-  "user_groups",
-  "permissions"
-]);
-function sessionHasEntityAccess(user, entity, action) {
-  return chunk77NUXO6A_cjs.explainSessionEntityAccess(user, entity, action).allowed;
-}
-chunkUSNT2KNT_cjs.__name(sessionHasEntityAccess, "sessionHasEntityAccess");
-function canManageRoles(user) {
-  return !!(user?.email && user.isRBACAdmin);
-}
-chunkUSNT2KNT_cjs.__name(canManageRoles, "canManageRoles");
-var OPEN_ENDPOINTS = [
-  {
-    "/api/contacts": [
-      "POST"
-    ]
-  },
-  {
-    "/api/form-submissions": [
-      "POST"
-    ]
-  },
-  {
-    "/api/blogs": [
-      "GET"
-    ]
-  }
-];
-var PERMISSION_REQUIRED_ENDPOINTS = {};
-function isOpenEndpoint(pathname) {
-  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
-}
-chunkUSNT2KNT_cjs.__name(isOpenEndpoint, "isOpenEndpoint");
-function getRequiredPermission(pathname) {
-  return null;
-}
-chunkUSNT2KNT_cjs.__name(getRequiredPermission, "getRequiredPermission");
-function isPublicMethod(pathname, method) {
-  for (const endpoint of OPEN_ENDPOINTS) {
-    const key = Object.keys(endpoint)[0];
-    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
-  }
-  return false;
-}
-chunkUSNT2KNT_cjs.__name(isPublicMethod, "isPublicMethod");
-function createAuthHelpers(getSession, NextResponse) {
-  return createAuthHelpersFromGetSession(getSession, NextResponse);
-}
-chunkUSNT2KNT_cjs.__name(createAuthHelpers, "createAuthHelpers");
-function createCmsAuthBundle(getSession, NextResponse) {
-  const auth = createAuthHelpers(getSession, NextResponse);
-  return {
-    requireAuth: auth.requireAuth,
-    requireAdminAccess: auth.requireAdminAccess,
-    requireEntityPermission: auth.requireEntityPermission,
-    getSessionUser: auth.getAuthenticatedUser,
-    getAuthenticatedUser: auth.getAuthenticatedUser
-  };
-}
-chunkUSNT2KNT_cjs.__name(createCmsAuthBundle, "createCmsAuthBundle");
-function createAuthHelpersFromGetSession(getSession, NextResponse) {
-  return {
-    async requireAuth(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requirePermission(_req, _permission) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requireEntityPermission(_req, entity, action) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = chunk77NUXO6A_cjs.explainSessionEntityAccess(u, entity, action);
-      chunk77NUXO6A_cjs.logRbac("authHelpers.requireEntityPermission", {
-        entity,
-        action,
-        allowed,
-        reason,
-        email: u.email,
-        groupName: u.groupName,
-        vendorIds: u.vendorIds,
-        isVendorPortal: u.isVendorPortal,
-        isVendorOwner: u.isVendorOwner
-      });
-      if (allowed) return null;
-      return NextResponse.json({
-        error: "Forbidden",
-        entity,
-        action,
-        reason
-      }, {
-        status: 403
-      });
-    },
-    async requireAdminAccess(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      if (u.isRBACAdmin) return null;
-      if (chunk77NUXO6A_cjs.isVendorPortalUser(u)) return null;
-      if (u.adminAccess === true) return null;
-      if (u.adminAccess === false) {
-        chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (adminAccess:false)", {
-          email: u.email,
-          groupName: u.groupName,
-          isVendorPortal: u.isVendorPortal
-        });
-        return NextResponse.json({
-          error: "Forbidden",
-          reason: "admin_access"
-        }, {
-          status: 403
-        });
-      }
-      chunk77NUXO6A_cjs.logRbac("requireAdminAccess denied (no matching rule)", {
-        email: u.email,
-        adminAccess: u.adminAccess,
-        groupName: u.groupName,
-        isVendorPortal: u.isVendorPortal
-      });
-      return NextResponse.json({
-        error: "Forbidden",
-        reason: "admin_access"
-      }, {
-        status: 403
-      });
-    },
-    async getAuthenticatedUser() {
-      const session = await getSession();
-      return session?.user ?? null;
-    }
-  };
-}
-chunkUSNT2KNT_cjs.__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
-
-exports.OPEN_ENDPOINTS = OPEN_ENDPOINTS;
-exports.PERMISSION_REQUIRED_ENDPOINTS = PERMISSION_REQUIRED_ENDPOINTS;
-exports.RBAC_ADMIN_ONLY_ENTITIES = RBAC_ADMIN_ONLY_ENTITIES;
-exports.canManageRoles = canManageRoles;
-exports.createAuthHelpers = createAuthHelpers;
-exports.createCmsAuthBundle = createCmsAuthBundle;
-exports.getRequiredPermission = getRequiredPermission;
-exports.isOpenEndpoint = isOpenEndpoint;
-exports.isPublicMethod = isPublicMethod;
-exports.sessionHasEntityAccess = sessionHasEntityAccess;

package/dist/chunk-ZF2RQWXB.js

@@ -1,171 +0,0 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-JIWUVQ6B.js';
-import { __name } from './chunk-SHUYVCID.js';
-
-// src/auth/helpers.ts
-var RBAC_ADMIN_ONLY_ENTITIES = /* @__PURE__ */ new Set([
-  "users",
-  "user_groups",
-  "permissions"
-]);
-function sessionHasEntityAccess(user, entity, action) {
-  return explainSessionEntityAccess(user, entity, action).allowed;
-}
-__name(sessionHasEntityAccess, "sessionHasEntityAccess");
-function canManageRoles(user) {
-  return !!(user?.email && user.isRBACAdmin);
-}
-__name(canManageRoles, "canManageRoles");
-var OPEN_ENDPOINTS = [
-  {
-    "/api/contacts": [
-      "POST"
-    ]
-  },
-  {
-    "/api/form-submissions": [
-      "POST"
-    ]
-  },
-  {
-    "/api/blogs": [
-      "GET"
-    ]
-  }
-];
-var PERMISSION_REQUIRED_ENDPOINTS = {};
-function isOpenEndpoint(pathname) {
-  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));
-}
-__name(isOpenEndpoint, "isOpenEndpoint");
-function getRequiredPermission(pathname) {
-  return null;
-}
-__name(getRequiredPermission, "getRequiredPermission");
-function isPublicMethod(pathname, method) {
-  for (const endpoint of OPEN_ENDPOINTS) {
-    const key = Object.keys(endpoint)[0];
-    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;
-  }
-  return false;
-}
-__name(isPublicMethod, "isPublicMethod");
-function createAuthHelpers(getSession, NextResponse) {
-  return createAuthHelpersFromGetSession(getSession, NextResponse);
-}
-__name(createAuthHelpers, "createAuthHelpers");
-function createCmsAuthBundle(getSession, NextResponse) {
-  const auth = createAuthHelpers(getSession, NextResponse);
-  return {
-    requireAuth: auth.requireAuth,
-    requireAdminAccess: auth.requireAdminAccess,
-    requireEntityPermission: auth.requireEntityPermission,
-    getSessionUser: auth.getAuthenticatedUser,
-    getAuthenticatedUser: auth.getAuthenticatedUser
-  };
-}
-__name(createCmsAuthBundle, "createCmsAuthBundle");
-function createAuthHelpersFromGetSession(getSession, NextResponse) {
-  return {
-    async requireAuth(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requirePermission(_req, _permission) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      return null;
-    },
-    async requireEntityPermission(_req, entity, action) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      const allowed = sessionHasEntityAccess(u, entity, action);
-      const { reason } = explainSessionEntityAccess(u, entity, action);
-      logRbac("authHelpers.requireEntityPermission", {
-        entity,
-        action,
-        allowed,
-        reason,
-        email: u.email,
-        groupName: u.groupName,
-        vendorIds: u.vendorIds,
-        isVendorPortal: u.isVendorPortal,
-        isVendorOwner: u.isVendorOwner
-      });
-      if (allowed) return null;
-      return NextResponse.json({
-        error: "Forbidden",
-        entity,
-        action,
-        reason
-      }, {
-        status: 403
-      });
-    },
-    async requireAdminAccess(_req) {
-      const session = await getSession();
-      if (!session?.user?.email) {
-        return NextResponse.json({
-          error: "Unauthorized"
-        }, {
-          status: 401
-        });
-      }
-      const u = session.user;
-      if (u.isRBACAdmin) return null;
-      if (isVendorPortalUser(u)) return null;
-      if (u.adminAccess === true) return null;
-      if (u.adminAccess === false) {
-        logRbac("requireAdminAccess denied (adminAccess:false)", {
-          email: u.email,
-          groupName: u.groupName,
-          isVendorPortal: u.isVendorPortal
-        });
-        return NextResponse.json({
-          error: "Forbidden",
-          reason: "admin_access"
-        }, {
-          status: 403
-        });
-      }
-      logRbac("requireAdminAccess denied (no matching rule)", {
-        email: u.email,
-        adminAccess: u.adminAccess,
-        groupName: u.groupName,
-        isVendorPortal: u.isVendorPortal
-      });
-      return NextResponse.json({
-        error: "Forbidden",
-        reason: "admin_access"
-      }, {
-        status: 403
-      });
-    },
-    async getAuthenticatedUser() {
-      const session = await getSession();
-      return session?.user ?? null;
-    }
-  };
-}
-__name(createAuthHelpersFromGetSession, "createAuthHelpersFromGetSession");
-
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess };