@infuro/cms-core 1.0.39 → 1.0.41

package/dist/api.d.ts

@@ -137,7 +137,7 @@ interface InviteAcceptConfig extends AuthHandlersConfig {
     entityMap: EntityMap;
     beforeActivate?: (email: string, userId: number) => Promise<void>;
 }
-/** Decode invite token (base64 email) and set password + unblock user */
+/** Accept invite: vendor rotating token (preferred) or legacy base64 email token */
 declare function createInviteAcceptHandler(config: InviteAcceptConfig): (request: Request) => Promise<Response>;
 interface ChangePasswordConfig extends AuthHandlersConfig {
     dataSource: DataSource;
@@ -165,6 +165,7 @@ interface UserAuthApiConfig extends ForgotPasswordConfig, Omit<SetPasswordConfig
  * Path is the segment after the mount (e.g. "forgot-password"). Returns 404 for unknown paths.
  */
 declare function createUserAuthApiRouter(config: UserAuthApiConfig): {
+    GET(req: Request, pathname: string): Promise<Response>;
     POST(req: Request, pathname: string): Promise<Response>;
 };
 
@@ -564,6 +565,8 @@ interface VendorOnboardHandlersConfig {
 declare function createVendorOnboardHandlers(config: VendorOnboardHandlersConfig): {
     /** POST /api/admin/vendors/onboard — create vendor + owner user + vendor_users + invite */
     onboard(req: Request): Promise<Response>;
+    /** POST /api/admin/vendors/:id/resend-invite — rotate owner invite token and resend email */
+    resendInvite(req: Request, vendorIdStr: string): Promise<Response>;
     /** POST /api/admin/vendor/switch — set active vendor in session (JWT update via client) */
     switchVendor(req: Request): Promise<Response>;
     /** GET /api/admin/vendor/team */

package/dist/api.js

@@ -1,4 +1,4 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-SFDZMGHD.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-EG4ICILK.js';
 import './chunk-NNQBWDCI.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';

package/dist/auth.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkE6WVP7BK_cjs = require('./chunk-E6WVP7BK.cjs');
+var chunkETZN4OQI_cjs = require('./chunk-ETZN4OQI.cjs');
 var chunkOIGCAGH7_cjs = require('./chunk-OIGCAGH7.cjs');
 var chunkWMXPKKXU_cjs = require('./chunk-WMXPKKXU.cjs');
 require('./chunk-USNT2KNT.cjs');
@@ -9,47 +9,47 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createCmsMiddleware", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.createCmsMiddleware; }
+  get: function () { return chunkETZN4OQI_cjs.createCmsMiddleware; }
 });
 Object.defineProperty(exports, "defaultPublicApiMethods", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.defaultPublicApiMethods; }
+  get: function () { return chunkETZN4OQI_cjs.defaultPublicApiMethods; }
 });
 Object.defineProperty(exports, "getNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.getNextAuthOptions; }
+  get: function () { return chunkETZN4OQI_cjs.getNextAuthOptions; }
 });
 Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.getStorefrontNextAuthOptions; }
+  get: function () { return chunkETZN4OQI_cjs.getStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "isAuthDebugClientEnabled", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.isAuthDebugClientEnabled; }
+  get: function () { return chunkETZN4OQI_cjs.isAuthDebugClientEnabled; }
 });
 Object.defineProperty(exports, "isAuthDebugEnabled", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.isAuthDebugEnabled; }
+  get: function () { return chunkETZN4OQI_cjs.isAuthDebugEnabled; }
 });
 Object.defineProperty(exports, "logAuth", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.logAuth; }
+  get: function () { return chunkETZN4OQI_cjs.logAuth; }
 });
 Object.defineProperty(exports, "logAuthClient", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.logAuthClient; }
+  get: function () { return chunkETZN4OQI_cjs.logAuthClient; }
 });
 Object.defineProperty(exports, "nextAuthCookieDebugInfo", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.nextAuthCookieDebugInfo; }
+  get: function () { return chunkETZN4OQI_cjs.nextAuthCookieDebugInfo; }
 });
 Object.defineProperty(exports, "seedAdministratorPermissions", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.seedAdministratorPermissions; }
+  get: function () { return chunkETZN4OQI_cjs.seedAdministratorPermissions; }
 });
 Object.defineProperty(exports, "summarizeSessionUserForLog", {
   enumerable: true,
-  get: function () { return chunkE6WVP7BK_cjs.summarizeSessionUserForLog; }
+  get: function () { return chunkETZN4OQI_cjs.summarizeSessionUserForLog; }
 });
 Object.defineProperty(exports, "OPEN_ENDPOINTS", {
   enumerable: true,

package/dist/auth.js

@@ -1,4 +1,4 @@
-export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-SBRBR3VO.js';
+export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-4BG7XYSH.js';
 export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-UXMDSNIG.js';
 export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-P7QCLE5W.js';
 import './chunk-SHUYVCID.js';

package/dist/{chunk-SBRBR3VO.js → chunk-4BG7XYSH.js}

@@ -127,6 +127,7 @@ var defaultPublicApiMethods = {
     "POST"
   ],
   "/api/users/invite": [
+    "GET",
     "POST"
   ]
 };