@infuro/cms-core 1.0.56 → 1.0.58

package/dist/admin.cjs

@@ -887,7 +887,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.56" ;
+    CMS_VERSION = "1.0.58" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/admin.js

@@ -853,7 +853,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.56" ;
+    CMS_VERSION = "1.0.58" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/api.cjs

@@ -1,9 +1,9 @@
 'use strict';
 
-var chunkJGR4ZUON_cjs = require('./chunk-JGR4ZUON.cjs');
+var chunkBHUEXLD2_cjs = require('./chunk-BHUEXLD2.cjs');
 require('./chunk-XQ3QUHWR.cjs');
 require('./chunk-HY3AXLOI.cjs');
-require('./chunk-JN4AFHZ4.cjs');
+require('./chunk-HXLC56ZK.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
 require('./chunk-V25RDUOU.cjs');
@@ -22,127 +22,127 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createChangePasswordHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createCmsApiHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createCrudByIdHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createCrudHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createFormBySlugHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createSetPasswordHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createUploadHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkBHUEXLD2_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createUserAvatarHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createUserProfileHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createUsersApiHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkBHUEXLD2_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkBHUEXLD2_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkBHUEXLD2_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkBHUEXLD2_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkBHUEXLD2_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.simpleDecrypt; }
+  get: function () { return chunkBHUEXLD2_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.simpleEncrypt; }
+  get: function () { return chunkBHUEXLD2_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkBHUEXLD2_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkJGR4ZUON_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkBHUEXLD2_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.js

@@ -1,7 +1,7 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-LI3CUI54.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-AGU3B5JW.js';
 import './chunk-GO7PPYNU.js';
 import './chunk-3K5AIEIZ.js';
-import './chunk-CTXBYO2J.js';
+import './chunk-HYW3MUXT.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
 import './chunk-L3525VXI.js';

package/dist/{chunk-LI3CUI54.js → chunk-AGU3B5JW.js}

@@ -1,6 +1,6 @@
 import { JOB_RUNNER_QUEUE } from './chunk-GO7PPYNU.js';
 import { validateInventoryForConfirmedOrderLines, orderStatusHoldsStock, reconcileOrderInventoryBetweenSnapshots, orderInventorySnapshotFromRow, validateInventoryForOrderBecomingConfirmed } from './chunk-3K5AIEIZ.js';
-import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-CTXBYO2J.js';
+import { resolveChatEmailToolSettings, CHAT_EMAIL_LOG, detectChatLeadIntent, parseIntentRecipientEmails, sendChatLeadEmail, buildTranscriptForLeadEmail, buildChatbotSystemPromptWithEmailTool, validateFcmCredentials, sendFcmPushNotification, parseEmailRecipientsFromConfig, isWhatsAppPluginEnabled, mergeWhatsAppConfigLayers, whatsAppConfigured, WhatsAppService, registerWhatsAppQueueProcessor, emailPlugin, initWhatsappTriggerDispatcher } from './chunk-HYW3MUXT.js';
 import { inviteStatusForActivation } from './chunk-JXF23MPG.js';
 import { queueEmail, queueVendorOnboardEmails, registerEmailQueueProcessor } from './chunk-L3525VXI.js';
 import { mergeEmailLayoutCompanyDetails, unwrapErpReadData, mapErpPayloadToFulfillment, extractChildOrderRefsFromSalePayload, mapErpPayloadToInvoiceNumber, streamOrderInvoicePdf } from './chunk-2KUCQVAQ.js';
@@ -12,7 +12,7 @@ import { retireSoftDeletedUniqueValue, activeUniqueValueExists } from './chunk-D
 import { permissionRowsToRecord, logRbac, isSuperAdmin, vendorPortalFlagsFromUser, VENDOR_SCOPED_STORE_ENTITIES, isVendorPortalUser, getPermissionableEntityKeys, VENDOR_STORE_RBAC_ENTITIES, isSuperAdminGroupName, VENDOR_RBAC_ENTITIES, VENDOR_VIEWER_ROLE_NAME, DEFAULT_VENDOR_ROLE_DEFS, VENDOR_GROUP_NAME, resolveVendorScopeFromSessionUser, canManageVendorRoles, isPlatformAdministrator, canManageVendorTeam, resolveDisabledMultiVendorScope, logEntityAccessDecision, explainSessionEntityAccess } from './chunk-JIWUVQ6B.js';
 import { queueErp } from './chunk-SYBOCAWB.js';
 import { __name } from './chunk-SHUYVCID.js';
-import { PrimaryGeneratedColumn, Column, Entity, CreateDateColumn, UpdateDateColumn, Unique, ManyToOne, JoinColumn, OneToMany, Index, ManyToMany, JoinTable, In, ILike, Between, MoreThanOrEqual, LessThanOrEqual, Not, MoreThan, IsNull } from 'typeorm';
+import { PrimaryGeneratedColumn, Column, Entity, ManyToOne, JoinColumn, CreateDateColumn, UpdateDateColumn, Unique, OneToMany, Index, ManyToMany, JoinTable, In, ILike, Between, MoreThanOrEqual, LessThanOrEqual, Not, MoreThan, IsNull } from 'typeorm';
 import { Country, State, City } from 'country-state-city';
 import crypto2, { randomBytes, randomUUID, createHmac, timingSafeEqual, randomInt } from 'crypto';
 import Parser from 'rss-parser';
@@ -12056,8 +12056,11 @@ var UserDeviceToken = class {
     __name(this, "UserDeviceToken");
   }
   id;
+  /** Staff/vendor app store. Null for customer/marketplace tokens (membership is `vendor_customers`). */
   vendorId;
+  vendor;
   userId;
+  user;
   token;
   platform;
   deviceId;
@@ -12073,18 +12076,38 @@ _ts_decorate2([
 ], UserDeviceToken.prototype, "id", void 0);
 _ts_decorate2([
   Column({
-    type: "uuid",
-    name: "vendor_id"
+    type: "integer",
+    name: "vendor_id",
+    nullable: true
   }),
-  _ts_metadata2("design:type", String)
+  _ts_metadata2("design:type", Object)
 ], UserDeviceToken.prototype, "vendorId", void 0);
+_ts_decorate2([
+  ManyToOne("Vendor", {
+    onDelete: "CASCADE",
+    nullable: true
+  }),
+  JoinColumn({
+    name: "vendor_id"
+  }),
+  _ts_metadata2("design:type", Object)
+], UserDeviceToken.prototype, "vendor", void 0);
 _ts_decorate2([
   Column({
-    type: "uuid",
+    type: "integer",
     name: "user_id"
   }),
-  _ts_metadata2("design:type", String)
+  _ts_metadata2("design:type", Number)
 ], UserDeviceToken.prototype, "userId", void 0);
+_ts_decorate2([
+  ManyToOne("User", {
+    onDelete: "CASCADE"
+  }),
+  JoinColumn({
+    name: "user_id"
+  }),
+  _ts_metadata2("design:type", Object)
+], UserDeviceToken.prototype, "user", void 0);
 _ts_decorate2([
   Column({
     type: "text"
@@ -12159,6 +12182,22 @@ UserDeviceToken = _ts_decorate2([
 ], UserDeviceToken);
 
 // src/api/device-tokens-handlers.ts
+function parseRequiredPositiveInt(value, field) {
+  const n = parseInt(String(value ?? "").trim(), 10);
+  if (!Number.isFinite(n) || n <= 0) {
+    return {
+      error: `${field} must be a positive integer`
+    };
+  }
+  return n;
+}
+__name(parseRequiredPositiveInt, "parseRequiredPositiveInt");
+function parseOptionalVendorId(value) {
+  if (value == null) return null;
+  if (typeof value === "string" && value.trim() === "") return null;
+  return parseRequiredPositiveInt(value, "vendor_id");
+}
+__name(parseOptionalVendorId, "parseOptionalVendorId");
 function createDeviceTokensHandlers(config) {
   const { dataSource, entityMap, json } = config;
   return /* @__PURE__ */ __name(async function handleDeviceTokensApi(req, pathSegments) {
@@ -12230,18 +12269,28 @@ function createDeviceTokensHandlers(config) {
       if (method === "POST") {
         try {
           const body = await req.json().catch(() => ({}));
-          const vendorId = body.vendor_id?.trim();
-          const userId = body.user_id?.trim();
+          const vendorParsed = parseOptionalVendorId(body.vendor_id);
+          const userParsed = parseRequiredPositiveInt(body.user_id, "user_id");
           const token = body.token?.trim();
           const platformRaw = body.platform?.trim().toLowerCase();
-          if (!vendorId || !userId || !token || !platformRaw) {
+          if (vendorParsed !== null && typeof vendorParsed === "object") {
+            return json({
+              success: false,
+              error: vendorParsed.error
+            }, {
+              status: 400
+            });
+          }
+          if (typeof userParsed === "object" || !token || !platformRaw) {
             return json({
               success: false,
-              error: "vendor_id, user_id, token, and platform (android|ios) are required"
+              error: (typeof userParsed === "object" ? userParsed.error : null) || "user_id, token, and platform (android|ios) are required"
             }, {
               status: 400
             });
           }
+          const vendorId = vendorParsed;
+          const userId = userParsed;
           if (platformRaw !== "android" && platformRaw !== "ios") {
             return json({
               success: false,
@@ -12307,13 +12356,35 @@ function createDeviceTokensHandlers(config) {
       if (method === "GET") {
         try {
           const url = new URL(req.url);
-          const userId = url.searchParams.get("userId")?.trim();
-          const vendorId = url.searchParams.get("vendorId")?.trim();
+          const userIdRaw = url.searchParams.get("userId")?.trim();
+          const vendorIdRaw = url.searchParams.get("vendorId")?.trim();
           const whereCondition = {
             isActive: true
           };
-          if (userId) whereCondition.userId = userId;
-          if (vendorId) whereCondition.vendorId = vendorId;
+          if (userIdRaw) {
+            const userId = parseRequiredPositiveInt(userIdRaw, "userId");
+            if (typeof userId === "object") {
+              return json({
+                success: false,
+                error: userId.error
+              }, {
+                status: 400
+              });
+            }
+            whereCondition.userId = userId;
+          }
+          if (vendorIdRaw) {
+            const vendorId = parseRequiredPositiveInt(vendorIdRaw, "vendorId");
+            if (typeof vendorId === "object") {
+              return json({
+                success: false,
+                error: vendorId.error
+              }, {
+                status: 400
+              });
+            }
+            whereCondition.vendorId = vendorId;
+          }
           const tokens = await tokenRepo.find({
             where: whereCondition,
             order: {
@@ -12340,16 +12411,17 @@ function createDeviceTokensHandlers(config) {
       if (method === "DELETE") {
         try {
           const body = await req.json().catch(() => ({}));
-          const userId = body.user_id?.trim();
+          const userParsed = parseRequiredPositiveInt(body.user_id, "user_id");
           const token = body.token?.trim();
-          if (!userId || !token) {
+          if (typeof userParsed === "object" || !token) {
             return json({
               success: false,
-              error: "user_id and token are required to deactivate"
+              error: (typeof userParsed === "object" ? userParsed.error : null) || "user_id and token are required to deactivate"
             }, {
               status: 400
             });
           }
+          const userId = userParsed;
           await tokenRepo.update({
             userId,
             token
@@ -29771,7 +29843,7 @@ function createCmsApiHandler(config) {
             status: 400
           });
         }
-        const { resendOrderNotification } = await import('./order-notification-dispatcher-AT4IFAGL.js');
+        const { resendOrderNotification } = await import('./order-notification-dispatcher-64WDCHHG.js');
         const result = await resendOrderNotification(triggerKey, orderId, {
           dataSource,
           entityMap,