@infuro/cms-core 1.0.60 → 1.0.62

package/dist/order-completion-otp-handlers-3NTOGEA5.js

@@ -0,0 +1,361 @@
+import { fireOrderNotificationTrigger } from './chunk-6XAVZE4I.js';
+import { verifyAndConsumeOtpChallenge, generateNumericOtp, createOtpChallenge, queueSms } from './chunk-OVTOP42W.js';
+import { queueWhatsApp } from './chunk-GWDI752Q.js';
+import './chunk-AYWDQFJZ.js';
+import { queueEmail } from './chunk-YW7EF7K7.js';
+import './chunk-HMLVPIJR.js';
+import './chunk-JC6DLWTE.js';
+import './chunk-NMYGQWHV.js';
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/api/order-completion-otp-handlers.ts
+function json(data, init) {
+  return new Response(JSON.stringify(data), {
+    status: init?.status ?? 200,
+    headers: {
+      "Content-Type": "application/json",
+      ...init?.headers || {}
+    }
+  });
+}
+__name(json, "json");
+function maskEmail(email) {
+  if (!email) return "";
+  const parts = email.split("@");
+  if (parts.length !== 2) return "***";
+  const name = parts[0];
+  const domain = parts[1];
+  if (name.length <= 2) return `${name[0]}***@${domain}`;
+  return `${name.slice(0, 2)}***${name.slice(-1)}@${domain}`;
+}
+__name(maskEmail, "maskEmail");
+function maskPhone(phone) {
+  if (!phone) return "";
+  const digits = String(phone).replace(/\D/g, "");
+  if (digits.length <= 4) return "***";
+  return `+${digits.slice(0, 2)} ***${digits.slice(-4)}`;
+}
+__name(maskPhone, "maskPhone");
+async function getOtpChannelsConfig(dataSource, entityMap) {
+  if (!entityMap.configs) {
+    return {
+      email: true,
+      whatsapp: true,
+      sms: true,
+      push: false
+    };
+  }
+  const rows = await dataSource.getRepository(entityMap.configs).find({
+    where: {
+      settings: "event_notifications",
+      deleted: false
+    }
+  });
+  const map = Object.fromEntries(rows.map((r) => [
+    r.key,
+    r.value
+  ]));
+  return {
+    email: map.otp_email_enabled !== "false" && map.otp_email_enabled !== "0",
+    whatsapp: map.otp_whatsapp_enabled !== "false" && map.otp_whatsapp_enabled !== "0",
+    sms: map.otp_sms_enabled !== "false" && map.otp_sms_enabled !== "0",
+    push: map.otp_push_enabled === "true" || map.otp_push_enabled === "1"
+  };
+}
+__name(getOtpChannelsConfig, "getOtpChannelsConfig");
+function createOrderCompletionOtpHandlers(dataSource, entityMap, getCms) {
+  return {
+    /** GET /api/orders/:id/completion-otp/channels */
+    async getChannels(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const o = order;
+      const cfg = await getOtpChannelsConfig(dataSource, entityMap);
+      const customerEmail = o.contact?.email?.trim();
+      const customerPhone = o.contact?.phone?.trim();
+      const configuredChannels = [];
+      if (cfg.email) configuredChannels.push("email");
+      if (cfg.whatsapp) configuredChannels.push("whatsapp");
+      if (cfg.sms) configuredChannels.push("sms");
+      if (cfg.push) configuredChannels.push("push");
+      const activeChannels = [];
+      if (cfg.email && customerEmail) activeChannels.push("email");
+      if (cfg.whatsapp && customerPhone) activeChannels.push("whatsapp");
+      if (cfg.sms && customerPhone) activeChannels.push("sms");
+      if (cfg.push) activeChannels.push("push");
+      return json({
+        configuredChannels,
+        activeChannels,
+        maskedEmail: maskEmail(customerEmail),
+        maskedPhone: maskPhone(customerPhone),
+        rawEmail: customerEmail ?? null,
+        rawPhone: customerPhone ?? null
+      });
+    },
+    /** POST /api/orders/:id/completion-otp/send */
+    async sendOtp(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const o = order;
+      if (o.status === "completed") {
+        return json({
+          error: "Order is already completed"
+        }, {
+          status: 400
+        });
+      }
+      if (o.status === "cancelled") {
+        return json({
+          error: "Cannot complete a cancelled order"
+        }, {
+          status: 400
+        });
+      }
+      const customerEmail = o.contact?.email?.trim();
+      const customerPhone = o.contact?.phone?.trim();
+      if (!customerEmail && !customerPhone) {
+        return json({
+          error: "Customer email and phone number are both missing for this order."
+        }, {
+          status: 400
+        });
+      }
+      const cfg = await getOtpChannelsConfig(dataSource, entityMap);
+      const requestedChannels = Array.isArray(body.channels) && body.channels.length > 0 ? body.channels : [
+        ...cfg.email ? [
+          "email"
+        ] : [],
+        ...cfg.whatsapp ? [
+          "whatsapp"
+        ] : [],
+        ...cfg.sms ? [
+          "sms"
+        ] : [],
+        ...cfg.push ? [
+          "push"
+        ] : []
+      ];
+      const targetChannels = [];
+      if (requestedChannels.includes("email") && customerEmail && cfg.email) targetChannels.push("email");
+      if (requestedChannels.includes("whatsapp") && customerPhone && cfg.whatsapp) targetChannels.push("whatsapp");
+      if (requestedChannels.includes("sms") && customerPhone && cfg.sms) targetChannels.push("sms");
+      if (requestedChannels.includes("push") && cfg.push) targetChannels.push("push");
+      if (targetChannels.length === 0) {
+        if (customerEmail) targetChannels.push("email");
+        else if (customerPhone) targetChannels.push("whatsapp");
+      }
+      const code = generateNumericOtp(6);
+      const challengeResult = await createOtpChallenge(dataSource, entityMap, {
+        purpose: "order_completion",
+        channel: targetChannels[0] || "email",
+        identifier: `order:${orderId}`,
+        code
+      });
+      if (!challengeResult.ok) {
+        return json({
+          error: challengeResult.error
+        }, {
+          status: challengeResult.status
+        });
+      }
+      const cms = await getCms();
+      const customerName = o.contact?.name || "Valued Customer";
+      const channelsSent = [];
+      if (targetChannels.includes("email") && customerEmail) {
+        try {
+          const html = `
+            <div style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size: 15px; color: #1f2937; line-height: 1.6; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e5e7eb; border-radius: 8px;">
+              <h2 style="color: #111827; font-size: 20px; font-weight: 600; margin-bottom: 16px;">Order Completion Verification Code</h2>
+              <p>Hi ${customerName},</p>
+              <p>Your service/delivery representative is ready to mark your Order <strong>#${o.orderNumber}</strong> as completed.</p>
+              <p>Please share the following verification code with them to confirm completion:</p>
+              <div style="background-color: #f3f4f6; border-radius: 8px; padding: 20px; text-align: center; margin: 24px 0;">
+                <span style="font-size: 32px; font-weight: 700; letter-spacing: 8px; color: #111827;">${code}</span>
+              </div>
+              <p style="color: #6b7280; font-size: 13px;">This code is valid for 10 minutes. If you did not authorize this completion, please contact support immediately.</p>
+            </div>
+          `;
+          await queueEmail(cms, {
+            to: customerEmail,
+            subject: `Completion Code ${code} for Order #${o.orderNumber}`,
+            html,
+            text: `Your completion code for Order #${o.orderNumber} is ${code}. Valid for 10 minutes.`
+          });
+          channelsSent.push("email");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue email", err);
+        }
+      }
+      if (targetChannels.includes("whatsapp") && customerPhone) {
+        try {
+          const sent = await queueWhatsApp(cms, {
+            to: customerPhone,
+            body: `Your completion code for Order #${o.orderNumber} is ${code}. Share this with your representative to complete your order. Valid for 10 minutes.`,
+            variables: {
+              code,
+              orderNumber: o.orderNumber,
+              customerName
+            }
+          });
+          if (sent) channelsSent.push("whatsapp");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue WhatsApp", err);
+        }
+      }
+      if (targetChannels.includes("sms") && customerPhone) {
+        try {
+          await queueSms(cms, {
+            to: customerPhone,
+            body: `Your verification code for Order #${o.orderNumber} is ${code}. Valid for 10 minutes.`,
+            otpCode: code,
+            variables: {
+              code,
+              orderNumber: o.orderNumber
+            }
+          });
+          channelsSent.push("sms");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue SMS", err);
+        }
+      }
+      return json({
+        ok: true,
+        message: "Verification code sent to customer",
+        channelsSent: channelsSent.length > 0 ? channelsSent : targetChannels,
+        maskedEmail: maskEmail(customerEmail),
+        maskedPhone: maskPhone(customerPhone)
+      });
+    },
+    /** POST /api/orders/:id/completion-otp/verify */
+    async verifyOtp(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {
+        return json({
+          error: "Invalid request body"
+        }, {
+          status: 400
+        });
+      }
+      const code = String(body.code ?? "").trim();
+      if (!code || code.length < 4) {
+        return json({
+          error: "Please enter a valid verification code"
+        }, {
+          status: 400
+        });
+      }
+      const verifyResult = await verifyAndConsumeOtpChallenge(dataSource, entityMap, {
+        purpose: "order_completion",
+        identifier: `order:${orderId}`,
+        code
+      });
+      if (!verifyResult.ok) {
+        return json({
+          error: verifyResult.error
+        }, {
+          status: verifyResult.status
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const now = /* @__PURE__ */ new Date();
+      order.status = "completed";
+      order.completedAt = now;
+      order.updatedAt = now;
+      await orderRepo.save(order);
+      try {
+        await fireOrderNotificationTrigger("order_completed", orderId, {
+          dataSource,
+          entityMap
+        });
+      } catch (err) {
+        console.warn("[completion-otp] failed to fire order_completed notification trigger", err);
+      }
+      return json({
+        ok: true,
+        message: "Order verified and completed successfully",
+        order: {
+          id: order.id,
+          status: "completed",
+          completedAt: now
+        }
+      });
+    }
+  };
+}
+__name(createOrderCompletionOtpHandlers, "createOrderCompletionOtpHandlers");
+
+export { createOrderCompletionOtpHandlers };