@infuro/cms-core 1.0.40 → 1.0.42

package/dist/api.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkT7GCOO5Y_cjs = require('./chunk-T7GCOO5Y.cjs');
+var chunkGINYYPXK_cjs = require('./chunk-GINYYPXK.cjs');
 require('./chunk-22FFHLTO.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
@@ -10,8 +10,8 @@ require('./chunk-3DZRIZOD.cjs');
 require('./chunk-OOTLNH63.cjs');
 require('./chunk-SPQFNIYJ.cjs');
 require('./chunk-XQ3QUHWR.cjs');
-var chunkOIGCAGH7_cjs = require('./chunk-OIGCAGH7.cjs');
-require('./chunk-WMXPKKXU.cjs');
+var chunkZMRQ72F6_cjs = require('./chunk-ZMRQ72F6.cjs');
+require('./chunk-X6UQFV4X.cjs');
 require('./chunk-D5FBNKQM.cjs');
 require('./chunk-UPLVMVRX.cjs');
 require('./chunk-USNT2KNT.cjs');
@@ -20,129 +20,129 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createChangePasswordHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createCmsApiHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createCrudByIdHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createCrudHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createFormBySlugHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createSetPasswordHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createUploadHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkGINYYPXK_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createUserAvatarHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createUserProfileHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createUsersApiHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkGINYYPXK_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkGINYYPXK_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkGINYYPXK_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkGINYYPXK_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkGINYYPXK_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.simpleDecrypt; }
+  get: function () { return chunkGINYYPXK_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.simpleEncrypt; }
+  get: function () { return chunkGINYYPXK_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkT7GCOO5Y_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.createCmsAuthBundle; }
+  get: function () { return chunkZMRQ72F6_cjs.createCmsAuthBundle; }
 });

package/dist/api.js

@@ -1,4 +1,4 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-RCMUL6SZ.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-W2NL365N.js';
 import './chunk-NNQBWDCI.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
@@ -8,8 +8,8 @@ import './chunk-MQBT33IV.js';
 import './chunk-CRFV5WJK.js';
 import './chunk-KFFB6EMZ.js';
 import './chunk-GO7PPYNU.js';
-export { createCmsAuthBundle } from './chunk-UXMDSNIG.js';
-import './chunk-P7QCLE5W.js';
+export { createCmsAuthBundle } from './chunk-BLR6H5GL.js';
+import './chunk-DN65KDIA.js';
 import './chunk-SYBOCAWB.js';
 import './chunk-JC6DLWTE.js';
 import './chunk-SHUYVCID.js';

package/dist/auth.cjs

@@ -1,201 +1,201 @@
 'use strict';
 
-var chunkETZN4OQI_cjs = require('./chunk-ETZN4OQI.cjs');
-var chunkOIGCAGH7_cjs = require('./chunk-OIGCAGH7.cjs');
-var chunkWMXPKKXU_cjs = require('./chunk-WMXPKKXU.cjs');
+var chunkTAHX46EI_cjs = require('./chunk-TAHX46EI.cjs');
+var chunkZMRQ72F6_cjs = require('./chunk-ZMRQ72F6.cjs');
+var chunkX6UQFV4X_cjs = require('./chunk-X6UQFV4X.cjs');
 require('./chunk-USNT2KNT.cjs');
 
 
 
 Object.defineProperty(exports, "createCmsMiddleware", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.createCmsMiddleware; }
+  get: function () { return chunkTAHX46EI_cjs.createCmsMiddleware; }
 });
 Object.defineProperty(exports, "defaultPublicApiMethods", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.defaultPublicApiMethods; }
+  get: function () { return chunkTAHX46EI_cjs.defaultPublicApiMethods; }
 });
 Object.defineProperty(exports, "getNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.getNextAuthOptions; }
+  get: function () { return chunkTAHX46EI_cjs.getNextAuthOptions; }
 });
 Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.getStorefrontNextAuthOptions; }
+  get: function () { return chunkTAHX46EI_cjs.getStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "isAuthDebugClientEnabled", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.isAuthDebugClientEnabled; }
+  get: function () { return chunkTAHX46EI_cjs.isAuthDebugClientEnabled; }
 });
 Object.defineProperty(exports, "isAuthDebugEnabled", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.isAuthDebugEnabled; }
+  get: function () { return chunkTAHX46EI_cjs.isAuthDebugEnabled; }
 });
 Object.defineProperty(exports, "logAuth", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.logAuth; }
+  get: function () { return chunkTAHX46EI_cjs.logAuth; }
 });
 Object.defineProperty(exports, "logAuthClient", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.logAuthClient; }
+  get: function () { return chunkTAHX46EI_cjs.logAuthClient; }
 });
 Object.defineProperty(exports, "nextAuthCookieDebugInfo", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.nextAuthCookieDebugInfo; }
+  get: function () { return chunkTAHX46EI_cjs.nextAuthCookieDebugInfo; }
 });
 Object.defineProperty(exports, "seedAdministratorPermissions", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.seedAdministratorPermissions; }
+  get: function () { return chunkTAHX46EI_cjs.seedAdministratorPermissions; }
 });
 Object.defineProperty(exports, "summarizeSessionUserForLog", {
   enumerable: true,
-  get: function () { return chunkETZN4OQI_cjs.summarizeSessionUserForLog; }
+  get: function () { return chunkTAHX46EI_cjs.summarizeSessionUserForLog; }
 });
 Object.defineProperty(exports, "OPEN_ENDPOINTS", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.OPEN_ENDPOINTS; }
+  get: function () { return chunkZMRQ72F6_cjs.OPEN_ENDPOINTS; }
 });
 Object.defineProperty(exports, "PERMISSION_REQUIRED_ENDPOINTS", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.PERMISSION_REQUIRED_ENDPOINTS; }
+  get: function () { return chunkZMRQ72F6_cjs.PERMISSION_REQUIRED_ENDPOINTS; }
 });
 Object.defineProperty(exports, "RBAC_ADMIN_ONLY_ENTITIES", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.RBAC_ADMIN_ONLY_ENTITIES; }
+  get: function () { return chunkZMRQ72F6_cjs.RBAC_ADMIN_ONLY_ENTITIES; }
 });
 Object.defineProperty(exports, "canManageRoles", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.canManageRoles; }
+  get: function () { return chunkZMRQ72F6_cjs.canManageRoles; }
 });
 Object.defineProperty(exports, "createAuthHelpers", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.createAuthHelpers; }
+  get: function () { return chunkZMRQ72F6_cjs.createAuthHelpers; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.createCmsAuthBundle; }
+  get: function () { return chunkZMRQ72F6_cjs.createCmsAuthBundle; }
 });
 Object.defineProperty(exports, "getRequiredPermission", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.getRequiredPermission; }
+  get: function () { return chunkZMRQ72F6_cjs.getRequiredPermission; }
 });
 Object.defineProperty(exports, "isOpenEndpoint", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.isOpenEndpoint; }
+  get: function () { return chunkZMRQ72F6_cjs.isOpenEndpoint; }
 });
 Object.defineProperty(exports, "isPublicMethod", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.isPublicMethod; }
+  get: function () { return chunkZMRQ72F6_cjs.isPublicMethod; }
 });
 Object.defineProperty(exports, "sessionHasEntityAccess", {
   enumerable: true,
-  get: function () { return chunkOIGCAGH7_cjs.sessionHasEntityAccess; }
+  get: function () { return chunkZMRQ72F6_cjs.sessionHasEntityAccess; }
 });
 Object.defineProperty(exports, "ADMIN_GROUP_NAME", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.ADMIN_GROUP_NAME; }
+  get: function () { return chunkX6UQFV4X_cjs.ADMIN_GROUP_NAME; }
 });
 Object.defineProperty(exports, "SUPER_ADMIN_GROUP_ID", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.SUPER_ADMIN_GROUP_ID; }
+  get: function () { return chunkX6UQFV4X_cjs.SUPER_ADMIN_GROUP_ID; }
 });
 Object.defineProperty(exports, "VENDOR_ADMIN_GROUP_ID", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.VENDOR_ADMIN_GROUP_ID; }
+  get: function () { return chunkX6UQFV4X_cjs.VENDOR_ADMIN_GROUP_ID; }
 });
 Object.defineProperty(exports, "VENDOR_OWNER_GROUP_NAME", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.VENDOR_OWNER_GROUP_NAME; }
+  get: function () { return chunkX6UQFV4X_cjs.VENDOR_OWNER_GROUP_NAME; }
 });
 Object.defineProperty(exports, "VENDOR_SCOPED_STORE_ENTITIES", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.VENDOR_SCOPED_STORE_ENTITIES; }
+  get: function () { return chunkX6UQFV4X_cjs.VENDOR_SCOPED_STORE_ENTITIES; }
 });
 Object.defineProperty(exports, "VENDOR_STORE_RBAC_ENTITIES", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.VENDOR_STORE_RBAC_ENTITIES; }
+  get: function () { return chunkX6UQFV4X_cjs.VENDOR_STORE_RBAC_ENTITIES; }
 });
 Object.defineProperty(exports, "canManageVendorRoles", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.canManageVendorRoles; }
+  get: function () { return chunkX6UQFV4X_cjs.canManageVendorRoles; }
 });
 Object.defineProperty(exports, "canManageVendorTeam", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.canManageVendorTeam; }
+  get: function () { return chunkX6UQFV4X_cjs.canManageVendorTeam; }
 });
 Object.defineProperty(exports, "canOnboardVendors", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.canOnboardVendors; }
+  get: function () { return chunkX6UQFV4X_cjs.canOnboardVendors; }
 });
 Object.defineProperty(exports, "explainSessionEntityAccess", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.explainSessionEntityAccess; }
+  get: function () { return chunkX6UQFV4X_cjs.explainSessionEntityAccess; }
 });
 Object.defineProperty(exports, "getPermissionableEntityKeys", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.getPermissionableEntityKeys; }
+  get: function () { return chunkX6UQFV4X_cjs.getPermissionableEntityKeys; }
 });
 Object.defineProperty(exports, "hasEntityPermission", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.hasEntityPermission; }
+  get: function () { return chunkX6UQFV4X_cjs.hasEntityPermission; }
 });
 Object.defineProperty(exports, "isPlatformAdministrator", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isPlatformAdministrator; }
+  get: function () { return chunkX6UQFV4X_cjs.isPlatformAdministrator; }
 });
 Object.defineProperty(exports, "isRbacDebugEnabled", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isRbacDebugEnabled; }
+  get: function () { return chunkX6UQFV4X_cjs.isRbacDebugEnabled; }
 });
 Object.defineProperty(exports, "isSuperAdmin", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isSuperAdmin; }
+  get: function () { return chunkX6UQFV4X_cjs.isSuperAdmin; }
 });
 Object.defineProperty(exports, "isSuperAdminGroupName", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isSuperAdminGroupName; }
+  get: function () { return chunkX6UQFV4X_cjs.isSuperAdminGroupName; }
 });
 Object.defineProperty(exports, "isVendorAdmin", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isVendorAdmin; }
+  get: function () { return chunkX6UQFV4X_cjs.isVendorAdmin; }
 });
 Object.defineProperty(exports, "isVendorGroupName", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isVendorGroupName; }
+  get: function () { return chunkX6UQFV4X_cjs.isVendorGroupName; }
 });
 Object.defineProperty(exports, "isVendorOwner", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isVendorOwner; }
+  get: function () { return chunkX6UQFV4X_cjs.isVendorOwner; }
 });
 Object.defineProperty(exports, "isVendorPortalUser", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isVendorPortalUser; }
+  get: function () { return chunkX6UQFV4X_cjs.isVendorPortalUser; }
 });
 Object.defineProperty(exports, "isVendorStaff", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.isVendorStaff; }
+  get: function () { return chunkX6UQFV4X_cjs.isVendorStaff; }
 });
 Object.defineProperty(exports, "logEntityAccessDecision", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.logEntityAccessDecision; }
+  get: function () { return chunkX6UQFV4X_cjs.logEntityAccessDecision; }
 });
 Object.defineProperty(exports, "logRbac", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.logRbac; }
+  get: function () { return chunkX6UQFV4X_cjs.logRbac; }
 });
 Object.defineProperty(exports, "permissionRowsToRecord", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.permissionRowsToRecord; }
+  get: function () { return chunkX6UQFV4X_cjs.permissionRowsToRecord; }
 });
 Object.defineProperty(exports, "resolveVendorScopeFromSessionUser", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.resolveVendorScopeFromSessionUser; }
+  get: function () { return chunkX6UQFV4X_cjs.resolveVendorScopeFromSessionUser; }
 });
 Object.defineProperty(exports, "summarizeEntityPerms", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.summarizeEntityPerms; }
+  get: function () { return chunkX6UQFV4X_cjs.summarizeEntityPerms; }
 });
 Object.defineProperty(exports, "vendorPortalFlagsFromUser", {
   enumerable: true,
-  get: function () { return chunkWMXPKKXU_cjs.vendorPortalFlagsFromUser; }
+  get: function () { return chunkX6UQFV4X_cjs.vendorPortalFlagsFromUser; }
 });

package/dist/auth.js

@@ -1,4 +1,4 @@
-export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-4BG7XYSH.js';
-export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-UXMDSNIG.js';
-export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-P7QCLE5W.js';
+export { createCmsMiddleware, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-I6NH72MO.js';
+export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-BLR6H5GL.js';
+export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-DN65KDIA.js';
 import './chunk-SHUYVCID.js';

package/dist/{chunk-UXMDSNIG.js → chunk-BLR6H5GL.js}

@@ -1,4 +1,4 @@
-import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-P7QCLE5W.js';
+import { explainSessionEntityAccess, isVendorPortalUser, logRbac } from './chunk-DN65KDIA.js';
 import { __name } from './chunk-SHUYVCID.js';
 
 // src/auth/helpers.ts

package/dist/{chunk-P7QCLE5W.js → chunk-DN65KDIA.js}

@@ -407,6 +407,9 @@ function vendorPortalFallbackReason(user, entity, action) {
   if (entity === "dashboard" && action === "read") return "vendor_portal_dashboard_fallback";
   if (entity === "analytics" && action === "read") return "vendor_portal_analytics_fallback";
   if (entity === "settings" && action === "read") return "vendor_portal_settings_read_fallback";
+  if (entity === "upload" && (action === "create" || action === "read")) {
+    return "vendor_portal_upload_fallback";
+  }
   if (VENDOR_STORE_RBAC_ENTITIES.has(entity) && action === "read") return "vendor_portal_store_read_fallback";
   return null;
 }
@@ -447,6 +450,13 @@ function explainSessionEntityAccess(user, entity, action) {
       userSnapshot
     };
   }
+  if ((isVendorPortalUser(user) || (user.vendorIds?.length ?? 0) > 0) && entity === "upload" && (action === "create" || action === "read")) {
+    return {
+      allowed: true,
+      reason: "vendor_portal_upload",
+      userSnapshot
+    };
+  }
   const vendorIds = user.vendorIds ?? [];
   const isStaff = user.vendorRole === "staff";
   const vendorPerms = user.vendorEntityPerms;
@@ -593,7 +603,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
     const id = Number(user.id);
     if (Number.isFinite(id)) {
       try {
-        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-QWHOENBR.js');
+        const { loadDbPermissionsForUser } = await import('./rbac-debug-db-2SGNLANF.js');
         dbPermissions = await loadDbPermissionsForUser(dataSource, id);
       } catch (e) {
         dbPermissions = {