@infuro/cms-core 1.0.61 → 1.0.62

package/dist/{chunk-77I3KS7V.cjs → chunk-UEE4PTTB.cjs}

@@ -4,6 +4,9 @@ var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
 var events = require('events');
 
 var KNOWN_NOTIFICATION_TRIGGERS = {
+  ORDER_PENDING: "order_pending",
+  ORDER_PROCESSING: "order_processing",
+  ORDER_COMPLETED: "order_completed",
   ORDER_PLACED: "order_placed",
   ORDER_CANCELLED: "order_cancelled",
   PAYMENT_SUCCESS: "payment_success",

package/dist/chunk-WFMVD567.cjs

@@ -0,0 +1,209 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+var crypto = require('crypto');
+var typeorm = require('typeorm');
+
+// src/plugins/sms/sms-queue.ts
+var SMS_QUEUE_NAME = "sms";
+function registerSmsQueueProcessor(cms) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (!queue || !sms || typeof sms.send !== "function") return;
+  queue.registerProcessor(SMS_QUEUE_NAME, async (data) => {
+    const payload = data;
+    if (!payload.to) return;
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (!payload.body?.trim()) return;
+    await sms.send({
+      to: payload.to,
+      body: payload.body,
+      otpCode: payload.otpCode,
+      variables: payload.variables
+    });
+  });
+}
+chunkUSNT2KNT_cjs.__name(registerSmsQueueProcessor, "registerSmsQueueProcessor");
+async function queueSms(cms, payload) {
+  const queue = cms.getPlugin("queue");
+  const sms = cms.getPlugin("sms");
+  if (queue) {
+    await queue.add(SMS_QUEUE_NAME, payload);
+    return;
+  }
+  if (sms && typeof sms.send === "function") {
+    if (payload.templateKey?.trim()) {
+      await sms.send({
+        to: payload.to,
+        templateKey: payload.templateKey.trim(),
+        variables: payload.variables,
+        otpCode: payload.otpCode
+      });
+      return;
+    }
+    if (payload.body?.trim()) {
+      await sms.send({
+        to: payload.to,
+        body: payload.body,
+        otpCode: payload.otpCode,
+        variables: payload.variables
+      });
+    }
+  }
+}
+chunkUSNT2KNT_cjs.__name(queueSms, "queueSms");
+var OTP_TTL_MS = 10 * 60 * 1e3;
+var MAX_SENDS_PER_HOUR = 5;
+var MAX_VERIFY_ATTEMPTS = 8;
+function getPepper(explicit) {
+  return (explicit || process.env.OTP_PEPPER || process.env.NEXTAUTH_SECRET || "dev-otp-pepper").trim();
+}
+chunkUSNT2KNT_cjs.__name(getPepper, "getPepper");
+function hashOtpCode(code, purpose, identifier, pepper) {
+  return crypto.createHmac("sha256", getPepper(pepper)).update(`${purpose}|${identifier}|${code}`).digest("hex");
+}
+chunkUSNT2KNT_cjs.__name(hashOtpCode, "hashOtpCode");
+function verifyOtpCodeHash(code, storedHash, purpose, identifier, pepper) {
+  const h = hashOtpCode(code, purpose, identifier, pepper);
+  try {
+    return crypto.timingSafeEqual(Buffer.from(h, "utf8"), Buffer.from(storedHash, "utf8"));
+  } catch {
+    return false;
+  }
+}
+chunkUSNT2KNT_cjs.__name(verifyOtpCodeHash, "verifyOtpCodeHash");
+function generateNumericOtp(length = 6) {
+  const max = 10 ** length;
+  return crypto.randomInt(0, max).toString().padStart(length, "0");
+}
+chunkUSNT2KNT_cjs.__name(generateNumericOtp, "generateNumericOtp");
+function normalizePhoneE164(raw, defaultCountryCode) {
+  const t = raw.trim();
+  const digitsOnly = t.replace(/\D/g, "");
+  if (digitsOnly.length < 10) return null;
+  if (t.startsWith("+")) return `+${digitsOnly}`;
+  const cc = (defaultCountryCode || process.env.DEFAULT_PHONE_COUNTRY_CODE || "91").replace(/\D/g, "");
+  if (digitsOnly.length > 10) return `+${digitsOnly}`;
+  return `+${cc}${digitsOnly}`;
+}
+chunkUSNT2KNT_cjs.__name(normalizePhoneE164, "normalizePhoneE164");
+async function countRecentOtpSends(dataSource, entityMap, purpose, identifier, since) {
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  return repo.count({
+    where: {
+      purpose,
+      identifier,
+      createdAt: typeorm.MoreThan(since)
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(countRecentOtpSends, "countRecentOtpSends");
+async function createOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, channel, identifier, code, pepper } = input;
+  const since = new Date(Date.now() - 60 * 60 * 1e3);
+  const recent = await countRecentOtpSends(dataSource, entityMap, purpose, identifier, since);
+  if (recent >= MAX_SENDS_PER_HOUR) {
+    return {
+      ok: false,
+      error: "Too many codes sent. Try again later.",
+      status: 429
+    };
+  }
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  await repo.delete({
+    purpose,
+    identifier,
+    consumedAt: typeorm.IsNull()
+  });
+  const expiresAt = new Date(Date.now() + OTP_TTL_MS);
+  const codeHash = hashOtpCode(code, purpose, identifier, pepper);
+  await repo.save(repo.create({
+    purpose,
+    channel,
+    identifier,
+    codeHash,
+    expiresAt,
+    attempts: 0,
+    consumedAt: null
+  }));
+  return {
+    ok: true
+  };
+}
+chunkUSNT2KNT_cjs.__name(createOtpChallenge, "createOtpChallenge");
+async function verifyAndConsumeOtpChallenge(dataSource, entityMap, input) {
+  const { purpose, identifier, code, pepper } = input;
+  const repo = dataSource.getRepository(entityMap.otp_challenges);
+  const row = await repo.findOne({
+    where: {
+      purpose,
+      identifier,
+      consumedAt: typeorm.IsNull()
+    },
+    order: {
+      id: "DESC"
+    }
+  });
+  if (!row) {
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const r = row;
+  if (new Date(r.expiresAt) < /* @__PURE__ */ new Date()) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  const attempts = r.attempts || 0;
+  if (attempts >= MAX_VERIFY_ATTEMPTS) {
+    await repo.delete(row.id);
+    return {
+      ok: false,
+      error: "Too many attempts",
+      status: 400
+    };
+  }
+  const valid = verifyOtpCodeHash(code, r.codeHash, purpose, identifier, pepper);
+  if (!valid) {
+    await repo.update(row.id, {
+      attempts: attempts + 1
+    });
+    return {
+      ok: false,
+      error: "Invalid or expired code",
+      status: 400
+    };
+  }
+  await repo.update(row.id, {
+    consumedAt: /* @__PURE__ */ new Date(),
+    attempts: attempts + 1
+  });
+  return {
+    ok: true
+  };
+}
+chunkUSNT2KNT_cjs.__name(verifyAndConsumeOtpChallenge, "verifyAndConsumeOtpChallenge");
+
+exports.countRecentOtpSends = countRecentOtpSends;
+exports.createOtpChallenge = createOtpChallenge;
+exports.generateNumericOtp = generateNumericOtp;
+exports.hashOtpCode = hashOtpCode;
+exports.normalizePhoneE164 = normalizePhoneE164;
+exports.queueSms = queueSms;
+exports.registerSmsQueueProcessor = registerSmsQueueProcessor;
+exports.verifyAndConsumeOtpChallenge = verifyAndConsumeOtpChallenge;
+exports.verifyOtpCodeHash = verifyOtpCodeHash;

package/dist/{chunk-L3525VXI.js → chunk-YW7EF7K7.js}

@@ -1,4 +1,4 @@
-import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-2KUCQVAQ.js';
+import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-HMLVPIJR.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/plugins/email/email-queue.ts
@@ -128,7 +128,41 @@ async function queueEmail(cms, payload) {
     await queue.add(EMAIL_QUEUE_NAME, payload);
     return;
   }
-  const email = cms.getPlugin("email");
+  let email = cms && typeof cms.getPlugin === "function" ? cms.getPlugin("email") : void 0;
+  if (!email) {
+    try {
+      const { EmailService } = await import('./email-service-F7HA4X63.js');
+      const env = typeof process !== "undefined" && process.env ? process.env : {};
+      const type = String(env.SMTP_TYPE || "SMTP").toUpperCase();
+      const port = env.SMTP_PORT ? parseInt(env.SMTP_PORT, 10) : void 0;
+      const fallbackService = new EmailService({
+        type: type === "AWS" || type === "GMAIL" || type === "SENDGRID" ? type : "SMTP",
+        from: env.SMTP_FROM || "no-reply@example.com",
+        to: env.SMTP_TO || "info@example.com",
+        user: env.SMTP_USER,
+        password: env.SMTP_PASSWORD || env.SMTP_PASS,
+        host: env.SMTP_HOST,
+        port,
+        secure: env.SMTP_SECURE === "true",
+        region: env.AWS_SES_REGION || env.AWS_REGION,
+        accessKeyId: env.AWS_ACCESS_KEY_ID,
+        secretAccessKey: env.AWS_SECRET_ACCESS_KEY
+      });
+      if (payload.subject != null && payload.html != null) {
+        await fallbackService.send({
+          to: payload.to,
+          subject: payload.subject,
+          html: payload.html,
+          text: payload.text,
+          attachments: payload.attachments
+        });
+        return;
+      }
+    } catch (e) {
+      console.error("[email-queue] fallback email send error", e);
+      return;
+    }
+  }
   if (!email) return;
   const attachmentsResult = await resolveInvoiceAttachmentForJob(cms, payload, registeredInvoiceOptions);
   if (payload.templateName && payload.ctx) {