@infuro/cms-core 1.0.61 → 1.0.62

package/dist/order-assignees-handlers-LKMAGLG6.js

@@ -0,0 +1,150 @@
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/api/order-assignees-handlers.ts
+function json(data, init) {
+  return new Response(JSON.stringify(data), {
+    status: init?.status ?? 200,
+    headers: {
+      "Content-Type": "application/json",
+      ...init?.headers || {}
+    }
+  });
+}
+__name(json, "json");
+function createOrderAssigneesHandlers(dataSource, entityMap, getHydratedSessionUser) {
+  return {
+    /** GET /api/orders/:id/eligible-assignees */
+    async listEligibleAssignees(req, orderId) {
+      if (!entityMap.orders || !entityMap.users) {
+        return json({
+          error: "Order or User entity not configured"
+        }, {
+          status: 500
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        select: [
+          "id",
+          "vendorId",
+          "assignedUserId"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const orderVendorId = order.vendorId;
+      const session = await getHydratedSessionUser?.() ?? null;
+      const userVendorIds = session?.vendorIds ?? [];
+      const isVendorSession = Boolean(session?.isVendorPortal || !session?.isRBACAdmin && userVendorIds.length > 0);
+      Boolean(session?.isRBACAdmin && !session?.isVendorPortal);
+      if (isVendorSession && orderVendorId && !userVendorIds.includes(orderVendorId)) {
+        return json({
+          error: "Forbidden: Access denied to vendor order"
+        }, {
+          status: 403
+        });
+      }
+      const assigneesMap = /* @__PURE__ */ new Map();
+      if (isVendorSession) {
+        const targetVendorId = orderVendorId ?? session?.activeVendorId ?? userVendorIds[0];
+        if (entityMap.vendor_users && targetVendorId) {
+          const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+          const vendorUsers = await vuRepo.find({
+            where: {
+              vendorId: targetVendorId
+            },
+            relations: [
+              "user",
+              "vendorRole"
+            ]
+          });
+          for (const vu of vendorUsers) {
+            const u = vu.user;
+            const r = vu.vendorRole;
+            if (u && u.id && !u.deleted && !u.blocked && u.inviteStatus === "active") {
+              const roleName = r?.name || (r?.isOwnerRole ? "Owner" : "Vendor Staff");
+              assigneesMap.set(u.id, {
+                id: u.id,
+                name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+                email: u.email || "",
+                role: roleName
+              });
+            }
+          }
+        }
+      } else {
+        if (entityMap.vendor_users) {
+          const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+          const vendorUsers = await vuRepo.find({
+            relations: [
+              "user",
+              "vendorRole"
+            ]
+          });
+          for (const vu of vendorUsers) {
+            const u = vu.user;
+            const r = vu.vendorRole;
+            if (u && u.id && !u.deleted && !u.blocked && u.inviteStatus === "active") {
+              const roleName = r?.name || (r?.isOwnerRole ? "Owner" : "Vendor Staff");
+              assigneesMap.set(u.id, {
+                id: u.id,
+                name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+                email: u.email || "",
+                role: roleName
+              });
+            }
+          }
+        }
+        const userRepo = dataSource.getRepository(entityMap.users);
+        const users = await userRepo.find({
+          where: {
+            deleted: false,
+            blocked: false,
+            inviteStatus: "active"
+          },
+          relations: [
+            "group"
+          ],
+          order: {
+            name: "ASC"
+          }
+        });
+        for (const u of users) {
+          const groupName = u.group?.name ? String(u.group.name).trim() : "";
+          const isCustomer = groupName.toLowerCase() === "customer";
+          if (isCustomer) continue;
+          if (!assigneesMap.has(u.id)) {
+            let roleLabel = "Staff";
+            if (groupName) {
+              roleLabel = groupName;
+            } else if (u.adminAccess) {
+              roleLabel = "Administrator";
+            }
+            assigneesMap.set(u.id, {
+              id: u.id,
+              name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+              email: u.email || "",
+              role: roleLabel
+            });
+          }
+        }
+      }
+      return json({
+        assignees: Array.from(assigneesMap.values()),
+        currentAssignedUserId: order.assignedUserId ?? null
+      });
+    }
+  };
+}
+__name(createOrderAssigneesHandlers, "createOrderAssigneesHandlers");
+
+export { createOrderAssigneesHandlers };

package/dist/order-assignees-handlers-NPKD64P6.cjs

@@ -0,0 +1,152 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/api/order-assignees-handlers.ts
+function json(data, init) {
+  return new Response(JSON.stringify(data), {
+    status: init?.status ?? 200,
+    headers: {
+      "Content-Type": "application/json",
+      ...init?.headers || {}
+    }
+  });
+}
+chunkUSNT2KNT_cjs.__name(json, "json");
+function createOrderAssigneesHandlers(dataSource, entityMap, getHydratedSessionUser) {
+  return {
+    /** GET /api/orders/:id/eligible-assignees */
+    async listEligibleAssignees(req, orderId) {
+      if (!entityMap.orders || !entityMap.users) {
+        return json({
+          error: "Order or User entity not configured"
+        }, {
+          status: 500
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        select: [
+          "id",
+          "vendorId",
+          "assignedUserId"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const orderVendorId = order.vendorId;
+      const session = await getHydratedSessionUser?.() ?? null;
+      const userVendorIds = session?.vendorIds ?? [];
+      const isVendorSession = Boolean(session?.isVendorPortal || !session?.isRBACAdmin && userVendorIds.length > 0);
+      Boolean(session?.isRBACAdmin && !session?.isVendorPortal);
+      if (isVendorSession && orderVendorId && !userVendorIds.includes(orderVendorId)) {
+        return json({
+          error: "Forbidden: Access denied to vendor order"
+        }, {
+          status: 403
+        });
+      }
+      const assigneesMap = /* @__PURE__ */ new Map();
+      if (isVendorSession) {
+        const targetVendorId = orderVendorId ?? session?.activeVendorId ?? userVendorIds[0];
+        if (entityMap.vendor_users && targetVendorId) {
+          const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+          const vendorUsers = await vuRepo.find({
+            where: {
+              vendorId: targetVendorId
+            },
+            relations: [
+              "user",
+              "vendorRole"
+            ]
+          });
+          for (const vu of vendorUsers) {
+            const u = vu.user;
+            const r = vu.vendorRole;
+            if (u && u.id && !u.deleted && !u.blocked && u.inviteStatus === "active") {
+              const roleName = r?.name || (r?.isOwnerRole ? "Owner" : "Vendor Staff");
+              assigneesMap.set(u.id, {
+                id: u.id,
+                name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+                email: u.email || "",
+                role: roleName
+              });
+            }
+          }
+        }
+      } else {
+        if (entityMap.vendor_users) {
+          const vuRepo = dataSource.getRepository(entityMap.vendor_users);
+          const vendorUsers = await vuRepo.find({
+            relations: [
+              "user",
+              "vendorRole"
+            ]
+          });
+          for (const vu of vendorUsers) {
+            const u = vu.user;
+            const r = vu.vendorRole;
+            if (u && u.id && !u.deleted && !u.blocked && u.inviteStatus === "active") {
+              const roleName = r?.name || (r?.isOwnerRole ? "Owner" : "Vendor Staff");
+              assigneesMap.set(u.id, {
+                id: u.id,
+                name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+                email: u.email || "",
+                role: roleName
+              });
+            }
+          }
+        }
+        const userRepo = dataSource.getRepository(entityMap.users);
+        const users = await userRepo.find({
+          where: {
+            deleted: false,
+            blocked: false,
+            inviteStatus: "active"
+          },
+          relations: [
+            "group"
+          ],
+          order: {
+            name: "ASC"
+          }
+        });
+        for (const u of users) {
+          const groupName = u.group?.name ? String(u.group.name).trim() : "";
+          const isCustomer = groupName.toLowerCase() === "customer";
+          if (isCustomer) continue;
+          if (!assigneesMap.has(u.id)) {
+            let roleLabel = "Staff";
+            if (groupName) {
+              roleLabel = groupName;
+            } else if (u.adminAccess) {
+              roleLabel = "Administrator";
+            }
+            assigneesMap.set(u.id, {
+              id: u.id,
+              name: u.name || u.email?.split("@")[0] || `User #${u.id}`,
+              email: u.email || "",
+              role: roleLabel
+            });
+          }
+        }
+      }
+      return json({
+        assignees: Array.from(assigneesMap.values()),
+        currentAssignedUserId: order.assignedUserId ?? null
+      });
+    }
+  };
+}
+chunkUSNT2KNT_cjs.__name(createOrderAssigneesHandlers, "createOrderAssigneesHandlers");
+
+exports.createOrderAssigneesHandlers = createOrderAssigneesHandlers;

package/dist/order-completion-otp-handlers-3NTOGEA5.js

@@ -0,0 +1,361 @@
+import { fireOrderNotificationTrigger } from './chunk-6XAVZE4I.js';
+import { verifyAndConsumeOtpChallenge, generateNumericOtp, createOtpChallenge, queueSms } from './chunk-OVTOP42W.js';
+import { queueWhatsApp } from './chunk-GWDI752Q.js';
+import './chunk-AYWDQFJZ.js';
+import { queueEmail } from './chunk-YW7EF7K7.js';
+import './chunk-HMLVPIJR.js';
+import './chunk-JC6DLWTE.js';
+import './chunk-NMYGQWHV.js';
+import { __name } from './chunk-SHUYVCID.js';
+
+// src/api/order-completion-otp-handlers.ts
+function json(data, init) {
+  return new Response(JSON.stringify(data), {
+    status: init?.status ?? 200,
+    headers: {
+      "Content-Type": "application/json",
+      ...init?.headers || {}
+    }
+  });
+}
+__name(json, "json");
+function maskEmail(email) {
+  if (!email) return "";
+  const parts = email.split("@");
+  if (parts.length !== 2) return "***";
+  const name = parts[0];
+  const domain = parts[1];
+  if (name.length <= 2) return `${name[0]}***@${domain}`;
+  return `${name.slice(0, 2)}***${name.slice(-1)}@${domain}`;
+}
+__name(maskEmail, "maskEmail");
+function maskPhone(phone) {
+  if (!phone) return "";
+  const digits = String(phone).replace(/\D/g, "");
+  if (digits.length <= 4) return "***";
+  return `+${digits.slice(0, 2)} ***${digits.slice(-4)}`;
+}
+__name(maskPhone, "maskPhone");
+async function getOtpChannelsConfig(dataSource, entityMap) {
+  if (!entityMap.configs) {
+    return {
+      email: true,
+      whatsapp: true,
+      sms: true,
+      push: false
+    };
+  }
+  const rows = await dataSource.getRepository(entityMap.configs).find({
+    where: {
+      settings: "event_notifications",
+      deleted: false
+    }
+  });
+  const map = Object.fromEntries(rows.map((r) => [
+    r.key,
+    r.value
+  ]));
+  return {
+    email: map.otp_email_enabled !== "false" && map.otp_email_enabled !== "0",
+    whatsapp: map.otp_whatsapp_enabled !== "false" && map.otp_whatsapp_enabled !== "0",
+    sms: map.otp_sms_enabled !== "false" && map.otp_sms_enabled !== "0",
+    push: map.otp_push_enabled === "true" || map.otp_push_enabled === "1"
+  };
+}
+__name(getOtpChannelsConfig, "getOtpChannelsConfig");
+function createOrderCompletionOtpHandlers(dataSource, entityMap, getCms) {
+  return {
+    /** GET /api/orders/:id/completion-otp/channels */
+    async getChannels(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const o = order;
+      const cfg = await getOtpChannelsConfig(dataSource, entityMap);
+      const customerEmail = o.contact?.email?.trim();
+      const customerPhone = o.contact?.phone?.trim();
+      const configuredChannels = [];
+      if (cfg.email) configuredChannels.push("email");
+      if (cfg.whatsapp) configuredChannels.push("whatsapp");
+      if (cfg.sms) configuredChannels.push("sms");
+      if (cfg.push) configuredChannels.push("push");
+      const activeChannels = [];
+      if (cfg.email && customerEmail) activeChannels.push("email");
+      if (cfg.whatsapp && customerPhone) activeChannels.push("whatsapp");
+      if (cfg.sms && customerPhone) activeChannels.push("sms");
+      if (cfg.push) activeChannels.push("push");
+      return json({
+        configuredChannels,
+        activeChannels,
+        maskedEmail: maskEmail(customerEmail),
+        maskedPhone: maskPhone(customerPhone),
+        rawEmail: customerEmail ?? null,
+        rawPhone: customerPhone ?? null
+      });
+    },
+    /** POST /api/orders/:id/completion-otp/send */
+    async sendOtp(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const o = order;
+      if (o.status === "completed") {
+        return json({
+          error: "Order is already completed"
+        }, {
+          status: 400
+        });
+      }
+      if (o.status === "cancelled") {
+        return json({
+          error: "Cannot complete a cancelled order"
+        }, {
+          status: 400
+        });
+      }
+      const customerEmail = o.contact?.email?.trim();
+      const customerPhone = o.contact?.phone?.trim();
+      if (!customerEmail && !customerPhone) {
+        return json({
+          error: "Customer email and phone number are both missing for this order."
+        }, {
+          status: 400
+        });
+      }
+      const cfg = await getOtpChannelsConfig(dataSource, entityMap);
+      const requestedChannels = Array.isArray(body.channels) && body.channels.length > 0 ? body.channels : [
+        ...cfg.email ? [
+          "email"
+        ] : [],
+        ...cfg.whatsapp ? [
+          "whatsapp"
+        ] : [],
+        ...cfg.sms ? [
+          "sms"
+        ] : [],
+        ...cfg.push ? [
+          "push"
+        ] : []
+      ];
+      const targetChannels = [];
+      if (requestedChannels.includes("email") && customerEmail && cfg.email) targetChannels.push("email");
+      if (requestedChannels.includes("whatsapp") && customerPhone && cfg.whatsapp) targetChannels.push("whatsapp");
+      if (requestedChannels.includes("sms") && customerPhone && cfg.sms) targetChannels.push("sms");
+      if (requestedChannels.includes("push") && cfg.push) targetChannels.push("push");
+      if (targetChannels.length === 0) {
+        if (customerEmail) targetChannels.push("email");
+        else if (customerPhone) targetChannels.push("whatsapp");
+      }
+      const code = generateNumericOtp(6);
+      const challengeResult = await createOtpChallenge(dataSource, entityMap, {
+        purpose: "order_completion",
+        channel: targetChannels[0] || "email",
+        identifier: `order:${orderId}`,
+        code
+      });
+      if (!challengeResult.ok) {
+        return json({
+          error: challengeResult.error
+        }, {
+          status: challengeResult.status
+        });
+      }
+      const cms = await getCms();
+      const customerName = o.contact?.name || "Valued Customer";
+      const channelsSent = [];
+      if (targetChannels.includes("email") && customerEmail) {
+        try {
+          const html = `
+            <div style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size: 15px; color: #1f2937; line-height: 1.6; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e5e7eb; border-radius: 8px;">
+              <h2 style="color: #111827; font-size: 20px; font-weight: 600; margin-bottom: 16px;">Order Completion Verification Code</h2>
+              <p>Hi ${customerName},</p>
+              <p>Your service/delivery representative is ready to mark your Order <strong>#${o.orderNumber}</strong> as completed.</p>
+              <p>Please share the following verification code with them to confirm completion:</p>
+              <div style="background-color: #f3f4f6; border-radius: 8px; padding: 20px; text-align: center; margin: 24px 0;">
+                <span style="font-size: 32px; font-weight: 700; letter-spacing: 8px; color: #111827;">${code}</span>
+              </div>
+              <p style="color: #6b7280; font-size: 13px;">This code is valid for 10 minutes. If you did not authorize this completion, please contact support immediately.</p>
+            </div>
+          `;
+          await queueEmail(cms, {
+            to: customerEmail,
+            subject: `Completion Code ${code} for Order #${o.orderNumber}`,
+            html,
+            text: `Your completion code for Order #${o.orderNumber} is ${code}. Valid for 10 minutes.`
+          });
+          channelsSent.push("email");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue email", err);
+        }
+      }
+      if (targetChannels.includes("whatsapp") && customerPhone) {
+        try {
+          const sent = await queueWhatsApp(cms, {
+            to: customerPhone,
+            body: `Your completion code for Order #${o.orderNumber} is ${code}. Share this with your representative to complete your order. Valid for 10 minutes.`,
+            variables: {
+              code,
+              orderNumber: o.orderNumber,
+              customerName
+            }
+          });
+          if (sent) channelsSent.push("whatsapp");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue WhatsApp", err);
+        }
+      }
+      if (targetChannels.includes("sms") && customerPhone) {
+        try {
+          await queueSms(cms, {
+            to: customerPhone,
+            body: `Your verification code for Order #${o.orderNumber} is ${code}. Valid for 10 minutes.`,
+            otpCode: code,
+            variables: {
+              code,
+              orderNumber: o.orderNumber
+            }
+          });
+          channelsSent.push("sms");
+        } catch (err) {
+          console.error("[completion-otp] failed to queue SMS", err);
+        }
+      }
+      return json({
+        ok: true,
+        message: "Verification code sent to customer",
+        channelsSent: channelsSent.length > 0 ? channelsSent : targetChannels,
+        maskedEmail: maskEmail(customerEmail),
+        maskedPhone: maskPhone(customerPhone)
+      });
+    },
+    /** POST /api/orders/:id/completion-otp/verify */
+    async verifyOtp(req, orderId) {
+      if (!entityMap.orders) {
+        return json({
+          error: "Orders entity not found"
+        }, {
+          status: 500
+        });
+      }
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {
+        return json({
+          error: "Invalid request body"
+        }, {
+          status: 400
+        });
+      }
+      const code = String(body.code ?? "").trim();
+      if (!code || code.length < 4) {
+        return json({
+          error: "Please enter a valid verification code"
+        }, {
+          status: 400
+        });
+      }
+      const verifyResult = await verifyAndConsumeOtpChallenge(dataSource, entityMap, {
+        purpose: "order_completion",
+        identifier: `order:${orderId}`,
+        code
+      });
+      if (!verifyResult.ok) {
+        return json({
+          error: verifyResult.error
+        }, {
+          status: verifyResult.status
+        });
+      }
+      const orderRepo = dataSource.getRepository(entityMap.orders);
+      const order = await orderRepo.findOne({
+        where: {
+          id: orderId,
+          deleted: false
+        },
+        relations: [
+          "contact"
+        ]
+      });
+      if (!order) {
+        return json({
+          error: "Order not found"
+        }, {
+          status: 404
+        });
+      }
+      const now = /* @__PURE__ */ new Date();
+      order.status = "completed";
+      order.completedAt = now;
+      order.updatedAt = now;
+      await orderRepo.save(order);
+      try {
+        await fireOrderNotificationTrigger("order_completed", orderId, {
+          dataSource,
+          entityMap
+        });
+      } catch (err) {
+        console.warn("[completion-otp] failed to fire order_completed notification trigger", err);
+      }
+      return json({
+        ok: true,
+        message: "Order verified and completed successfully",
+        order: {
+          id: order.id,
+          status: "completed",
+          completedAt: now
+        }
+      });
+    }
+  };
+}
+__name(createOrderCompletionOtpHandlers, "createOrderCompletionOtpHandlers");
+
+export { createOrderCompletionOtpHandlers };