@infuro/cms-core 1.0.47 → 1.0.51

package/dist/{chunk-YXH2UUEZ.js → chunk-CTXBYO2J.js}

@@ -6,6 +6,7 @@ import { __name } from './chunk-SHUYVCID.js';
 import { SESClient, SendRawEmailCommand, SendEmailCommand } from '@aws-sdk/client-ses';
 import { createRequire } from 'module';
 import nodemailer from 'nodemailer';
+import * as crypto from 'crypto';
 
 // src/lib/event-order-template-context.ts
 function resolvePublicSiteUrl() {
@@ -26,12 +27,6 @@ function buildOrderTrackUrl(qrToken, siteUrl, orderNumber) {
   return `${base}/track/${token}`;
 }
 __name(buildOrderTrackUrl, "buildOrderTrackUrl");
-function buildOrderQrImageUrl(trackUrl, size = 200, fallbackData) {
-  const data = trackUrl.trim() || fallbackData?.trim() || "";
-  if (!data) return "";
-  return `https://api.qrserver.com/v1/create-qr-code/?size=${size}x${size}&data=${encodeURIComponent(data)}`;
-}
-__name(buildOrderQrImageUrl, "buildOrderQrImageUrl");
 function formatOrderDetailsText(input) {
   const { orderNumber, total, currency, lines } = input;
   const header = `Order: ${orderNumber}
@@ -53,8 +48,6 @@ __name(formatOrderDetailsHtml, "formatOrderDetailsHtml");
 function buildEventOrderTemplateVariables(input) {
   const { event, order, contact, productNames, vendorName = "", orderLines = [], siteUrl } = input;
   const trackUrl = buildOrderTrackUrl(order.qrToken, siteUrl, order.orderNumber);
-  const qrImageUrl = buildOrderQrImageUrl(trackUrl, 200, order.orderNumber);
-  const ticketQr = qrImageUrl ? `<img src="${qrImageUrl}" alt="Ticket QR Code" width="200" height="200" style="display:block;margin:12px 0;border:1px solid #e5e7eb;border-radius:8px;" />` : "";
   const baseSite = (siteUrl ?? resolvePublicSiteUrl()).replace(/\/+$/, "");
   const invoiceNumber = `INV-${order.orderNumber ?? ""}`;
   const invoiceUrl = baseSite ? `${baseSite}/api/orders/${order.orderNumber ?? ""}/invoice` : `/api/orders/${order.orderNumber ?? ""}/invoice`;
@@ -64,6 +57,9 @@ function buildEventOrderTemplateVariables(input) {
     currency: String(order.currency ?? "INR"),
     lines: orderLines
   };
+  const qrToken = order.qrToken?.trim() || order.orderNumber?.trim() || "";
+  const fallbackQrUrl = qrToken ? `https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=${encodeURIComponent(qrToken)}` : "";
+  const fallbackTicketQr = fallbackQrUrl ? `<img src="${fallbackQrUrl}" alt="Ticket QR Code" width="200" height="200" style="display:block;margin:12px 0;border:1px solid #e5e7eb;border-radius:8px;" />` : "";
   return {
     eventName: event.name ?? productNames ?? "",
     vendorName: vendorName.trim(),
@@ -78,10 +74,10 @@ function buildEventOrderTemplateVariables(input) {
     customerPhone: contact.phone?.trim() || "",
     productNames,
     trackUrl,
-    qrImageUrl,
-    ticketQr,
     invoiceNumber,
     invoiceUrl,
+    ticketQr: fallbackTicketQr,
+    qrImageUrl: fallbackQrUrl,
     orderDetails: formatOrderDetailsText(orderDetailsPayload),
     orderDetailsHtml: formatOrderDetailsHtml(orderDetailsPayload)
   };
@@ -497,7 +493,7 @@ var WhatsAppService = class {
     let body = opts.body?.trim() ?? "";
     const variables = opts.variables ?? {};
     if (opts.templateKey?.trim() && this.getMessageTemplateRow) {
-      const { resolveEventOrderTemplate, EVENT_ORDER_TEMPLATE_KEY } = await import('./event-order-defaults-XQ3IDPD7.js');
+      const { resolveEventOrderTemplate, EVENT_ORDER_TEMPLATE_KEY } = await import('./event-order-defaults-H4RT7NMR.js');
       if (opts.templateKey.trim() === EVENT_ORDER_TEMPLATE_KEY) {
         const resolved = await resolveEventOrderTemplate("whatsapp", async (ch, key) => {
           const row = await this.getMessageTemplateRow(ch, key);
@@ -2061,6 +2057,117 @@ function emailPlugin(config) {
   };
 }
 __name(emailPlugin, "emailPlugin");
+function base64UrlEncode(str) {
+  const buf = typeof str === "string" ? Buffer.from(str, "utf8") : str;
+  return buf.toString("base64").replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+__name(base64UrlEncode, "base64UrlEncode");
+async function getGoogleAccessToken(clientEmail, privateKey) {
+  const now = Math.floor(Date.now() / 1e3);
+  const header = {
+    alg: "RS256",
+    typ: "JWT"
+  };
+  const claimSet = {
+    iss: clientEmail,
+    scope: "https://www.googleapis.com/auth/firebase.messaging",
+    aud: "https://oauth2.googleapis.com/token",
+    exp: now + 3600,
+    iat: now
+  };
+  const encodedHeader = base64UrlEncode(JSON.stringify(header));
+  const encodedClaimSet = base64UrlEncode(JSON.stringify(claimSet));
+  const signatureInput = `${encodedHeader}.${encodedClaimSet}`;
+  const formattedKey = privateKey.replace(/\\n/g, "\n");
+  const signer = crypto.createSign("RSA-SHA256");
+  signer.update(signatureInput);
+  const signature = signer.sign(formattedKey, "base64");
+  const jwt = `${signatureInput}.${signature.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_")}`;
+  const tokenRes = await fetch("https://oauth2.googleapis.com/token", {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: new URLSearchParams({
+      grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+      assertion: jwt
+    }).toString()
+  });
+  if (!tokenRes.ok) {
+    const errText = await tokenRes.text();
+    throw new Error(`Failed to obtain Google access token: ${errText}`);
+  }
+  const tokenData = await tokenRes.json();
+  if (!tokenData.access_token) {
+    throw new Error("Google OAuth token response missing access_token");
+  }
+  return tokenData.access_token;
+}
+__name(getGoogleAccessToken, "getGoogleAccessToken");
+async function sendFcmPushNotification(dataSource, entityMap, msg) {
+  try {
+    const pushSettings = await getSettingsGroup(dataSource, entityMap, "push");
+    let projectId = pushSettings.firebase_project_id?.trim();
+    let clientEmail = pushSettings.firebase_client_email?.trim();
+    let privateKey = pushSettings.firebase_private_key?.trim();
+    if (pushSettings.firebase_service_account_json?.trim()) {
+      try {
+        const parsed = JSON.parse(pushSettings.firebase_service_account_json.trim());
+        if (parsed.project_id) projectId = parsed.project_id;
+        if (parsed.client_email) clientEmail = parsed.client_email;
+        if (parsed.private_key) privateKey = parsed.private_key;
+      } catch {
+      }
+    }
+    if (!projectId || !clientEmail || !privateKey) {
+      return {
+        success: false,
+        error: "Firebase Service Account JSON / credentials are not configured"
+      };
+    }
+    const accessToken = await getGoogleAccessToken(clientEmail, privateKey);
+    const fcmEndpoint = `https://fcm.googleapis.com/v1/projects/${projectId}/messages:send`;
+    const fcmPayload = {
+      message: {
+        token: msg.token,
+        notification: {
+          title: msg.title,
+          body: msg.body
+        },
+        data: msg.data || {}
+      }
+    };
+    const response = await fetch(fcmEndpoint, {
+      method: "POST",
+      headers: {
+        "Authorization": `Bearer ${accessToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(fcmPayload)
+    });
+    const resData = await response.json();
+    if (!response.ok) {
+      const errorMsg = resData.error?.message || "FCM request failed";
+      console.error("[fcm-push] Error sending push notification", errorMsg);
+      return {
+        success: false,
+        error: errorMsg
+      };
+    }
+    return {
+      success: true,
+      messageId: resData.name
+    };
+  } catch (err) {
+    const errorMsg = err instanceof Error ? err.message : "Unknown push error";
+    console.error("[fcm-push] Exception in sendFcmPushNotification", errorMsg);
+    return {
+      success: false,
+      error: errorMsg
+    };
+  }
+}
+__name(sendFcmPushNotification, "sendFcmPushNotification");
 
 // src/lib/order-notification-dispatcher.ts
 var initialized = false;
@@ -2128,59 +2235,69 @@ async function loadBoundTemplate(triggerKey, channel, audienceType = "customers"
     console.warn("[order-notifications] order_notification_bindings or message_templates missing from entityMap");
     return null;
   }
-  const bindingRepo = dataSource.getRepository(entityMap.order_notification_bindings);
-  let binding = await bindingRepo.findOne({
-    where: {
-      triggerKey,
-      channel,
-      type: audienceType,
-      enabled: true
-    }
-  });
-  if (!binding && audienceType === "customers") {
-    binding = await bindingRepo.findOne({
+  try {
+    const bindingRepo = dataSource.getRepository(entityMap.order_notification_bindings);
+    let binding = await bindingRepo.findOne({
       where: {
         triggerKey,
         channel,
+        type: audienceType,
         enabled: true
       }
-    });
-  }
-  if (!binding) {
-    console.warn("[order-notifications] no order_notification_bindings row", {
-      triggerKey,
-      channel,
-      audienceType
-    });
-    return null;
-  }
-  const templateId = binding.messageTemplateId;
-  if (templateId == null) {
-    console.warn("[order-notifications] binding exists but no template selected", {
-      triggerKey,
-      channel,
-      audienceType
-    });
-    return null;
-  }
-  const template = await dataSource.getRepository(entityMap.message_templates).findOne({
-    where: {
-      id: templateId,
-      channel,
-      deleted: false,
-      enabled: true
+    }).catch(() => null);
+    if (!binding && audienceType === "customers") {
+      binding = await bindingRepo.findOne({
+        where: {
+          triggerKey,
+          channel,
+          enabled: true
+        }
+      }).catch(() => null);
     }
-  });
-  if (!template) {
-    console.warn("[order-notifications] bound template not found or disabled", {
+    if (!binding) {
+      console.warn("[order-notifications] no order_notification_bindings row", {
+        triggerKey,
+        channel,
+        audienceType
+      });
+      return null;
+    }
+    const templateId = binding.messageTemplateId;
+    if (templateId == null) {
+      console.warn("[order-notifications] binding exists but no template selected", {
+        triggerKey,
+        channel,
+        audienceType
+      });
+      return null;
+    }
+    const template = await dataSource.getRepository(entityMap.message_templates).findOne({
+      where: {
+        id: templateId,
+        channel,
+        deleted: false,
+        enabled: true
+      }
+    }).catch(() => null);
+    if (!template) {
+      console.warn("[order-notifications] bound template not found or disabled", {
+        triggerKey,
+        channel,
+        audienceType,
+        templateId
+      });
+      return null;
+    }
+    return template;
+  } catch (err) {
+    console.warn("[order-notifications] loadBoundTemplate query failed", {
       triggerKey,
       channel,
       audienceType,
-      templateId
+      error: err instanceof Error ? err.message : String(err)
     });
     return null;
   }
-  return template;
 }
 __name(loadBoundTemplate, "loadBoundTemplate");
 function mergeTriggerVariables(payload, rich) {
@@ -2197,9 +2314,11 @@ function mergeTriggerVariables(payload, rich) {
       refundAmount: String(payload.refundAmount)
     } : {}
   };
+  const extraVars = payload.extraVariables ?? {};
   return {
     ...basic,
-    ...rich ?? {}
+    ...rich ?? {},
+    ...extraVars
   };
 }
 __name(mergeTriggerVariables, "mergeTriggerVariables");
@@ -2211,6 +2330,82 @@ async function isAudienceEmailEnabled(dataSource, entityMap, audience) {
   return settings[key] !== "false" && settings[key] !== "0";
 }
 __name(isAudienceEmailEnabled, "isAudienceEmailEnabled");
+async function isPushNotificationsEnabled(dataSource, entityMap) {
+  const settings = await getSettingsGroup(dataSource, entityMap, "event_notifications");
+  if (settings.enabled === "false" || settings.enabled === "0") return false;
+  return settings.push_enabled !== "false" && settings.push_enabled !== "0";
+}
+__name(isPushNotificationsEnabled, "isPushNotificationsEnabled");
+async function isAudiencePushEnabled(dataSource, entityMap, audience) {
+  const settings = await getSettingsGroup(dataSource, entityMap, "event_notifications");
+  if (settings.enabled === "false" || settings.enabled === "0") return false;
+  if (settings.push_enabled === "false" || settings.push_enabled === "0") return false;
+  const key = `push_${audience}_enabled`;
+  return settings[key] !== "false" && settings[key] !== "0";
+}
+__name(isAudiencePushEnabled, "isAudiencePushEnabled");
+async function sendPushNotificationForTrigger(triggerKey, orderId, audienceType, targetId, variables, dataSource, entityMap) {
+  let template = await loadBoundTemplate(triggerKey, "mobile", audienceType, dataSource, entityMap);
+  if (!template) {
+    template = await loadBoundTemplate(triggerKey, "push", audienceType, dataSource, entityMap);
+  }
+  if (!template || !template.body) return;
+  const rawTitle = template.subject?.trim() || "Order Notification";
+  const title = applyTemplateVars(rawTitle, variables);
+  const body = applyTemplateVars(template.body, variables);
+  if (!entityMap.user_device_tokens) return;
+  const tokenRepo = dataSource.getRepository(entityMap.user_device_tokens);
+  let targetTokens = [];
+  try {
+    if (audienceType === "customers") {
+      targetTokens = await tokenRepo.find({
+        where: {
+          userId: targetId,
+          isActive: true
+        },
+        select: [
+          "token"
+        ]
+      });
+    } else if (audienceType === "vendors") {
+      targetTokens = await tokenRepo.find({
+        where: {
+          vendorId: targetId,
+          isActive: true
+        },
+        select: [
+          "token"
+        ]
+      });
+    } else if (audienceType === "admin") {
+      targetTokens = await tokenRepo.find({
+        where: {
+          isActive: true
+        },
+        select: [
+          "token"
+        ]
+      });
+    }
+  } catch (err) {
+    console.error("[order-notifications] Error querying device tokens for push", err);
+    return;
+  }
+  for (const t of targetTokens) {
+    if (t.token?.trim()) {
+      await sendFcmPushNotification(dataSource, entityMap, {
+        token: t.token.trim(),
+        title,
+        body,
+        data: {
+          orderId: String(orderId),
+          triggerKey
+        }
+      });
+    }
+  }
+}
+__name(sendPushNotificationForTrigger, "sendPushNotificationForTrigger");
 async function getOrderVendorEmails(orderId, orderVendorId, dataSource, entityMap) {
   const emails = /* @__PURE__ */ new Set();
   if (!entityMap.vendors) return [];
@@ -2319,7 +2514,23 @@ async function getAdminRecipientEmails(dataSource, entityMap) {
     }
   } catch {
   }
-  return Array.from(emails);
+  const vendorEmails = /* @__PURE__ */ new Set();
+  try {
+    const vRows = await dataSource.query(`SELECT DISTINCT LOWER(TRIM(email)) AS email FROM vendors WHERE COALESCE(deleted, false) = false AND email IS NOT NULL AND TRIM(email) != ''`).catch(() => []);
+    for (const r of vRows) {
+      if (r.email) vendorEmails.add(r.email.toLowerCase());
+    }
+    const vuRows = await dataSource.query(`SELECT DISTINCT LOWER(TRIM(u.email)) AS email
+           FROM users u
+      LEFT JOIN user_groups g ON g.id = u."groupId"
+          WHERE COALESCE(u.deleted, false) = false
+            AND (LOWER(g.name) LIKE '%vendor%' OR u."groupId" = 5)`).catch(() => []);
+    for (const r of vuRows) {
+      if (r.email) vendorEmails.add(r.email.toLowerCase());
+    }
+  } catch {
+  }
+  return Array.from(emails).filter((e) => !vendorEmails.has(e.toLowerCase()));
 }
 __name(getAdminRecipientEmails, "getAdminRecipientEmails");
 function formatBodyForEmailHtml(body) {
@@ -2473,12 +2684,13 @@ async function handleTrigger(triggerKey, payload, dataSource, entityMap, getCms)
       return;
     }
   }
-  const [emailChannelEnabled, whatsappChannelEnabled] = await Promise.all([
+  const [emailChannelEnabled, whatsappChannelEnabled, pushChannelEnabled] = await Promise.all([
     isEmailNotificationsEnabled(dataSource, entityMap),
-    isWhatsappNotificationsEnabled(dataSource, entityMap)
+    isWhatsappNotificationsEnabled(dataSource, entityMap),
+    isPushNotificationsEnabled(dataSource, entityMap)
   ]);
-  if (!emailChannelEnabled && !whatsappChannelEnabled) {
-    console.warn("[order-notifications] skip: Both Email and WhatsApp notifications are disabled");
+  if (!emailChannelEnabled && !whatsappChannelEnabled && !pushChannelEnabled) {
+    console.warn("[order-notifications] skip: Email, WhatsApp, and Mobile Push notifications are disabled");
     return;
   }
   const triggerEnabled = await isTriggerCatalogEnabled(triggerKey, dataSource, entityMap);
@@ -2517,6 +2729,23 @@ async function handleTrigger(triggerKey, payload, dataSource, entityMap, getCms)
   } else {
     console.log("[order-notifications] skip email: Email notifications channel is disabled");
   }
+  if (pushChannelEnabled) {
+    const [pushCustomerEnabled, pushVendorEnabled, pushAdminEnabled] = await Promise.all([
+      isAudiencePushEnabled(dataSource, entityMap, "customer"),
+      isAudiencePushEnabled(dataSource, entityMap, "vendor"),
+      isAudiencePushEnabled(dataSource, entityMap, "admin")
+    ]);
+    const targetCustomerId = context?.order?.customerContactId || context?.order?.contactId || context?.order?.userId || context?.order?.id;
+    if (pushCustomerEnabled && targetCustomerId) {
+      await sendPushNotificationForTrigger(triggerKey, payload.orderId, "customers", String(targetCustomerId), variables, dataSource, entityMap);
+    }
+    if (pushVendorEnabled && payload.vendorId) {
+      await sendPushNotificationForTrigger(triggerKey, payload.orderId, "vendors", String(payload.vendorId), variables, dataSource, entityMap);
+    }
+    if (pushAdminEnabled) {
+      await sendPushNotificationForTrigger(triggerKey, payload.orderId, "admin", "admin", variables, dataSource, entityMap);
+    }
+  }
   if (whatsappChannelEnabled) {
     if (contactPhone) {
       await sendWhatsAppForTrigger(triggerKey, payload.orderId, contactPhone, variables, dataSource, entityMap, getCms);
@@ -2535,6 +2764,8 @@ function initWhatsappTriggerDispatcher(deps) {
   if (initialized) return;
   initialized = true;
   const { dataSource, entityMap, getCms } = deps;
+  void dataSource.query(`ALTER TYPE "order_notification_bindings_channel_enum" ADD VALUE IF NOT EXISTS 'mobile'`).catch(() => {
+  });
   notificationTriggerEmitter.onAnyTrigger((triggerKey, payload) => {
     void handleTrigger(triggerKey, payload, dataSource, entityMap, getCms).catch((err) => {
       console.error("[order-notifications]", triggerKey, err);
@@ -2594,4 +2825,4 @@ async function resendOrderNotification(triggerKey, orderId, deps) {
 }
 __name(resendOrderNotification, "resendOrderNotification");
 
-export { CHAT_EMAIL_LOG, EmailService, WhatsAppService, buildChatbotSystemPromptWithEmailTool, buildEventOrderTemplateVariables, buildTranscriptForLeadEmail, detectChatLeadIntent, emailPlugin, emailTemplates, initWhatsappTriggerDispatcher, isWhatsAppPluginEnabled, joinRecipientsForSend, mergeWhatsAppConfigLayers, parseEmailRecipientsFromConfig, parseIntentRecipientEmails, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, resolveChatEmailToolSettings, sendChatLeadEmail, serializeEmailRecipients, whatsAppConfigured };
+export { CHAT_EMAIL_LOG, EmailService, WhatsAppService, buildChatbotSystemPromptWithEmailTool, buildEventOrderTemplateVariables, buildTranscriptForLeadEmail, detectChatLeadIntent, emailPlugin, emailTemplates, getSettingsGroup, initWhatsappTriggerDispatcher, isWhatsAppPluginEnabled, joinRecipientsForSend, mergeWhatsAppConfigLayers, parseEmailRecipientsFromConfig, parseIntentRecipientEmails, queueWhatsApp, registerWhatsAppQueueProcessor, renderEmail, renderLayout, resendOrderNotification, resolveChatEmailToolSettings, sendChatLeadEmail, sendFcmPushNotification, serializeEmailRecipients, whatsAppConfigured };