@infuro/cms-core 1.0.59 → 1.0.61

package/dist/{chunk-77NUXO6A.cjs → chunk-J7FMZK66.cjs}

@@ -137,7 +137,15 @@ var VENDOR_STORE_RBAC_ENTITIES = /* @__PURE__ */ new Set([
   ...VENDOR_SCOPED_STORE_ENTITIES,
   "order_discounts",
   "order_addresses",
-  "event_products"
+  "event_products",
+  "attendees",
+  "order-attendees",
+  "order_attendees",
+  "scan",
+  "verify-attendee-qr",
+  "verify_attendee_qr",
+  "forms",
+  "cms-forms"
 ]);
 var VENDOR_GROUP_NAME = "Vendor";
 var VENDOR_OWNER_GROUP_NAME = VENDOR_GROUP_NAME;
@@ -606,7 +614,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-6PWTLBEL.cjs');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-JKK2MCWF.cjs');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {

package/dist/{chunk-BC22I7C7.cjs → chunk-KM2I6AFP.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunk3EOM4V2M_cjs = require('./chunk-3EOM4V2M.cjs');
+var chunk4U6DATGZ_cjs = require('./chunk-4U6DATGZ.cjs');
 var chunkOY2YTBMP_cjs = require('./chunk-OY2YTBMP.cjs');
-var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
+var chunkJ7FMZK66_cjs = require('./chunk-J7FMZK66.cjs');
 var chunk7L6KWI7S_cjs = require('./chunk-7L6KWI7S.cjs');
 var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var _CredentialsProvider = require('next-auth/providers/credentials');
@@ -15,12 +15,12 @@ var _GoogleProvider__default = /*#__PURE__*/_interopDefault(_GoogleProvider);
 
 // src/auth/seed-permissions.ts
 async function seedAdministratorPermissions(dataSource, entityMap) {
-  const entities = chunk77NUXO6A_cjs.getPermissionableEntityKeys(entityMap);
+  const entities = chunkJ7FMZK66_cjs.getPermissionableEntityKeys(entityMap);
   const groupRepo = dataSource.getRepository(entityMap.user_groups);
   const permRepo = dataSource.getRepository(entityMap.permissions);
   const adminGroup = await groupRepo.findOne({
     where: {
-      name: chunk77NUXO6A_cjs.ADMIN_GROUP_NAME,
+      name: chunkJ7FMZK66_cjs.ADMIN_GROUP_NAME,
       deleted: false
     }
   });
@@ -260,13 +260,13 @@ async function createCustomerUserFromGoogleOAuth(input) {
     }
     if (input.entityMap.contacts) {
       try {
-        await chunk3EOM4V2M_cjs.linkUnclaimedContactToUser(input.dataSource, input.entityMap.contacts, userId, email);
+        await chunk4U6DATGZ_cjs.linkUnclaimedContactToUser(input.dataSource, input.entityMap.contacts, userId, email);
       } catch {
       }
     }
     if (input.entityMap.customer) {
       try {
-        await chunk3EOM4V2M_cjs.ensureCustomerForUser(input.dataSource, input.entityMap.customer, {
+        await chunk4U6DATGZ_cjs.ensureCustomerForUser(input.dataSource, input.entityMap.customer, {
           id: userId,
           name: displayName,
           email,
@@ -387,18 +387,18 @@ async function checkMultiVendorEnabledViaSettingsApi() {
 chunkUSNT2KNT_cjs.__name(checkMultiVendorEnabledViaSettingsApi, "checkMultiVendorEnabledViaSettingsApi");
 function sessionUserFromNextAuthUser(user) {
   const g = user.group;
-  const isRBACAdmin = chunk77NUXO6A_cjs.isSuperAdmin({
+  const isRBACAdmin = chunkJ7FMZK66_cjs.isSuperAdmin({
     groupId: user.groupId ?? void 0,
     groupName: g?.name,
     isRBACAdmin: false
   });
-  const entityPerms = chunk77NUXO6A_cjs.permissionRowsToRecord(g?.permissions);
+  const entityPerms = chunkJ7FMZK66_cjs.permissionRowsToRecord(g?.permissions);
   const rawAdminAccess = user.adminAccess;
   const adminAccess = rawAdminAccess === true ? true : rawAdminAccess === false ? false : void 0;
   const vendorIds = user.vendorIds ?? [];
   const vendorRole = user.vendorRole ?? null;
   const isVendorRoleOwner = user.isVendorRoleOwner ?? false;
-  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunk77NUXO6A_cjs.vendorPortalFlagsFromUser({
+  const { isVendorPortal, isVendorOwner: isVendorOwner2 } = chunkJ7FMZK66_cjs.vendorPortalFlagsFromUser({
     email: user.email,
     isRBACAdmin,
     groupName: g?.name,

package/dist/{chunk-JIWUVQ6B.js → chunk-MVHDC3XF.js}

@@ -135,7 +135,15 @@ var VENDOR_STORE_RBAC_ENTITIES = /* @__PURE__ */ new Set([
   ...VENDOR_SCOPED_STORE_ENTITIES,
   "order_discounts",
   "order_addresses",
-  "event_products"
+  "event_products",
+  "attendees",
+  "order-attendees",
+  "order_attendees",
+  "scan",
+  "verify-attendee-qr",
+  "verify_attendee_qr",
+  "forms",
+  "cms-forms"
 ]);
 var VENDOR_GROUP_NAME = "Vendor";
 var VENDOR_OWNER_GROUP_NAME = VENDOR_GROUP_NAME;
@@ -604,7 +612,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-6EMIVMGF.js');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-5R6XFPSV.js');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {

package/dist/{chunk-RK5ETF2I.js → chunk-NR44CK5E.js}

@@ -1,4 +1,4 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-JIWUVQ6B.js';
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-MVHDC3XF.js';
 import { __name } from './chunk-SHUYVCID.js';
 import { IsNull } from 'typeorm';
 

package/dist/{chunk-MXIWUFBP.js → chunk-O2642WVS.js}

@@ -1,4 +1,4 @@
-import { notificationTriggerEmitter } from './chunk-HCIRL37O.js';
+import { notificationTriggerEmitter } from './chunk-T3HPSF7K.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/lib/emit-order-notification-trigger.ts
@@ -51,6 +51,32 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
       orderId
     });
   }
+  let resolvedRefundAmount = extra?.refundAmount ?? null;
+  if (resolvedRefundAmount == null) {
+    const meta = typeof fullOrder.metadata === "object" && fullOrder.metadata ? fullOrder.metadata : {};
+    const metaRefund = Number(meta.finalRefund ?? meta.approvedRefundAmount ?? meta.expectedRefundAmount);
+    if (Number.isFinite(metaRefund) && metaRefund > 0) {
+      resolvedRefundAmount = metaRefund;
+    } else if (deps.entityMap.refund_requests) {
+      try {
+        const rrRepo = deps.dataSource.getRepository(deps.entityMap.refund_requests);
+        const rr = await rrRepo.findOne({
+          where: {
+            orderId
+          },
+          order: {
+            id: "DESC"
+          }
+        });
+        if (rr) {
+          const rrObj = rr;
+          const amt = Number(rrObj.approvedRefundAmount ?? rrObj.expectedRefundAmount);
+          if (Number.isFinite(amt) && amt > 0) resolvedRefundAmount = amt;
+        }
+      } catch {
+      }
+    }
+  }
   notificationTriggerEmitter.emitTrigger(triggerKey, {
     orderId,
     orderNumber: String(fo.orderNumber ?? ""),
@@ -60,9 +86,7 @@ async function emitOrderNotificationTrigger(triggerKey, orderId, deps, extra) {
     currency: String(fo.currency ?? "INR"),
     vendorId: fo.vendorId ?? null,
     extraVariables: extra?.extraVariables,
-    ...extra?.refundAmount != null ? {
-      refundAmount: extra.refundAmount
-    } : {}
+    refundAmount: resolvedRefundAmount
   });
 }
 __name(emitOrderNotificationTrigger, "emitOrderNotificationTrigger");

package/dist/{chunk-HCIRL37O.js → chunk-T3HPSF7K.js}

@@ -3,7 +3,10 @@ import { EventEmitter } from 'events';
 
 var KNOWN_NOTIFICATION_TRIGGERS = {
   ORDER_PLACED: "order_placed",
-  ORDER_CANCELLED: "order_cancelled"
+  ORDER_CANCELLED: "order_cancelled",
+  PAYMENT_SUCCESS: "payment_success",
+  PAYMENT_FAILED: "payment_failed",
+  PAYMENT_REFUND_INITIATED: "payment_refund_initiated"
 };
 var NotificationTriggerEmitter = class NotificationTriggerEmitter2 extends EventEmitter {
   static {