@infuro/cms-core 1.0.42 → 1.0.43

package/dist/admin.cjs

@@ -492,7 +492,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.42" ;
+    CMS_VERSION = "1.0.43" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -6708,9 +6708,10 @@ var init_CategoryAutocomplete = __esm({
     __name(CategoryAutocomplete, "CategoryAutocomplete");
   }
 });
-function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select author...", className = "" }) {
+function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select author...", className = "", groupName = ADMIN_GROUP_NAME }) {
   const [inputValue, setInputValue] = React26.useState("");
   const [suggestions, setSuggestions] = React26.useState([]);
+  const [selectedUser, setSelectedUser] = React26.useState(null);
   const [isLoading, setIsLoading] = React26.useState(false);
   const [showSuggestions, setShowSuggestions] = React26.useState(false);
   const inputRef = React26.useRef(null);
@@ -6719,14 +6720,18 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     setIsLoading(true);
     try {
       const params = new URLSearchParams();
-      if (query.trim()) {
-        params.append("search", query);
-      }
+      if (query.trim()) params.append("search", query);
       params.append("limit", "50");
+      const group = groupName.trim() || ADMIN_GROUP_NAME;
+      params.append("groupName", group);
       const response = await fetch(`/api/users?${params}`);
       if (response.ok) {
         const data = await response.json();
-        setSuggestions(data.data || []);
+        const rows = Array.isArray(data.data) ? data.data : [];
+        setSuggestions(rows.filter((u) => {
+          const g = u.group?.name;
+          return g == null || g === group;
+        }));
       }
     } catch (error) {
       console.error("Error fetching users:", error);
@@ -6740,28 +6745,57 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     }, 300);
     return () => clearTimeout(timeoutId);
   }, [
-    inputValue
+    inputValue,
+    groupName
+  ]);
+  React26.useEffect(() => {
+    if (selectedUserId == null) {
+      setSelectedUser(null);
+      return;
+    }
+    if (selectedUser?.id === selectedUserId) return;
+    let cancelled = false;
+    (async () => {
+      try {
+        const res = await fetch(`/api/users/${selectedUserId}`);
+        if (!res.ok || cancelled) return;
+        const data = await res.json();
+        if (!cancelled && data?.id != null) {
+          setSelectedUser({
+            id: Number(data.id),
+            name: String(data.name ?? ""),
+            email: String(data.email ?? "")
+          });
+        }
+      } catch {
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    selectedUserId,
+    selectedUser?.id
   ]);
   const handleInputChange = /* @__PURE__ */ __name((e) => {
-    const value = e.target.value;
-    setInputValue(value);
+    setInputValue(e.target.value);
     setShowSuggestions(true);
   }, "handleInputChange");
   const handleSuggestionSelect = /* @__PURE__ */ __name((user) => {
     onUserChange(user.id);
+    setSelectedUser(user);
     setInputValue("");
     setShowSuggestions(false);
     setSuggestions([]);
   }, "handleSuggestionSelect");
   const handleRemoveUser = /* @__PURE__ */ __name(() => {
     onUserChange(null);
+    setSelectedUser(null);
   }, "handleRemoveUser");
   const handleKeyPress = /* @__PURE__ */ __name((e) => {
     if (e.key === "Enter") {
       e.preventDefault();
-      if (suggestions.length > 0) {
-        handleSuggestionSelect(suggestions[0]);
-      }
+      if (suggestions.length > 0) handleSuggestionSelect(suggestions[0]);
     } else if (e.key === "Escape") {
       setShowSuggestions(false);
       inputRef.current?.blur();
@@ -6776,14 +6810,13 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     document.addEventListener("mousedown", handleClickOutside);
     return () => document.removeEventListener("mousedown", handleClickOutside);
   }, []);
-  const selectedUser = suggestions.find((user) => user.id === selectedUserId);
   return /* @__PURE__ */ React.createElement("div", {
     className: `relative ${className}`
   }, selectedUser && /* @__PURE__ */ React.createElement("div", {
     className: "mb-2"
   }, /* @__PURE__ */ React.createElement(Badge, {
     className: "flex items-center gap-1"
-  }, selectedUser.name, /* @__PURE__ */ React.createElement(LucideIcons.X, {
+  }, selectedUser.name || selectedUser.email || `User #${selectedUser.id}`, /* @__PURE__ */ React.createElement(LucideIcons.X, {
     size: 12,
     className: "cursor-pointer hover:text-red-500",
     onClick: handleRemoveUser
@@ -6827,6 +6860,7 @@ var init_UserAutocomplete = __esm({
     "use client";
     init_input();
     init_badge();
+    init_permission_entities();
     __name(UserAutocomplete, "UserAutocomplete");
   }
 });
@@ -7257,7 +7291,8 @@ function BlogEditor({ existingBlog, duplicateSource }) {
     selectedUserId: authorId,
     onUserChange: setAuthorId,
     placeholder: "Select author...",
-    className: "w-full"
+    className: "w-full",
+    groupName: "Administrator"
   })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement(ImageUpload, {
     value: coverImage,
     onChange: setCoverImage,
@@ -13991,7 +14026,11 @@ function ScheduleAuthorSelect({ value, onChange, disabled }) {
     (async () => {
       setLoading(true);
       try {
-        const res = await fetch("/api/users?limit=500");
+        const params = new URLSearchParams({
+          limit: "100",
+          groupName: ADMIN_GROUP_NAME
+        });
+        const res = await fetch(`/api/users?${params}`);
         if (!res.ok || cancelled) return;
         const data = await res.json();
         const rows = Array.isArray(data.data) ? data.data : [];
@@ -14024,7 +14063,7 @@ function ScheduleAuthorSelect({ value, onChange, disabled }) {
   }, /* @__PURE__ */ React.createElement(SelectTrigger, {
     className: "w-full"
   }, /* @__PURE__ */ React.createElement(SelectValue, {
-    placeholder: users.length === 0 ? "No users found" : "Select author"
+    placeholder: users.length === 0 ? "No administrators found" : "Select author"
   })), /* @__PURE__ */ React.createElement(SelectContent, {
     className: "max-h-72"
   }, users.map((u) => /* @__PURE__ */ React.createElement(SelectItem, {
@@ -14036,6 +14075,7 @@ var init_ScheduleAuthorSelect = __esm({
   "src/admin/ScheduleAuthorSelect.tsx"() {
     "use client";
     init_select();
+    init_permission_entities();
     __name(userLabel, "userLabel");
     __name(ScheduleAuthorSelect, "ScheduleAuthorSelect");
   }

package/dist/admin.d.cts

@@ -407,8 +407,10 @@ interface UserAutocompleteProps {
     onUserChange: (userId: number | null) => void;
     placeholder?: string;
     className?: string;
+    /** When set, only users in this group are listed (default: Administrator / super admins). */
+    groupName?: string;
 }
-declare function UserAutocomplete({ selectedUserId, onUserChange, placeholder, className }: UserAutocompleteProps): react_jsx_runtime.JSX.Element;
+declare function UserAutocomplete({ selectedUserId, onUserChange, placeholder, className, groupName, }: UserAutocompleteProps): react_jsx_runtime.JSX.Element;
 
 interface ComponentSettingsProps {
     meta: ComponentMeta;

package/dist/admin.d.ts

@@ -407,8 +407,10 @@ interface UserAutocompleteProps {
     onUserChange: (userId: number | null) => void;
     placeholder?: string;
     className?: string;
+    /** When set, only users in this group are listed (default: Administrator / super admins). */
+    groupName?: string;
 }
-declare function UserAutocomplete({ selectedUserId, onUserChange, placeholder, className }: UserAutocompleteProps): react_jsx_runtime.JSX.Element;
+declare function UserAutocomplete({ selectedUserId, onUserChange, placeholder, className, groupName, }: UserAutocompleteProps): react_jsx_runtime.JSX.Element;
 
 interface ComponentSettingsProps {
     meta: ComponentMeta;

package/dist/admin.js

@@ -457,7 +457,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.42" ;
+    CMS_VERSION = "1.0.43" ;
   }
 });
 function useCatalogCategories(enabled = true) {
@@ -6673,9 +6673,10 @@ var init_CategoryAutocomplete = __esm({
     __name(CategoryAutocomplete, "CategoryAutocomplete");
   }
 });
-function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select author...", className = "" }) {
+function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select author...", className = "", groupName = ADMIN_GROUP_NAME }) {
   const [inputValue, setInputValue] = useState("");
   const [suggestions, setSuggestions] = useState([]);
+  const [selectedUser, setSelectedUser] = useState(null);
   const [isLoading, setIsLoading] = useState(false);
   const [showSuggestions, setShowSuggestions] = useState(false);
   const inputRef = useRef(null);
@@ -6684,14 +6685,18 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     setIsLoading(true);
     try {
       const params = new URLSearchParams();
-      if (query.trim()) {
-        params.append("search", query);
-      }
+      if (query.trim()) params.append("search", query);
       params.append("limit", "50");
+      const group = groupName.trim() || ADMIN_GROUP_NAME;
+      params.append("groupName", group);
       const response = await fetch(`/api/users?${params}`);
       if (response.ok) {
         const data = await response.json();
-        setSuggestions(data.data || []);
+        const rows = Array.isArray(data.data) ? data.data : [];
+        setSuggestions(rows.filter((u) => {
+          const g = u.group?.name;
+          return g == null || g === group;
+        }));
       }
     } catch (error) {
       console.error("Error fetching users:", error);
@@ -6705,28 +6710,57 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     }, 300);
     return () => clearTimeout(timeoutId);
   }, [
-    inputValue
+    inputValue,
+    groupName
+  ]);
+  useEffect(() => {
+    if (selectedUserId == null) {
+      setSelectedUser(null);
+      return;
+    }
+    if (selectedUser?.id === selectedUserId) return;
+    let cancelled = false;
+    (async () => {
+      try {
+        const res = await fetch(`/api/users/${selectedUserId}`);
+        if (!res.ok || cancelled) return;
+        const data = await res.json();
+        if (!cancelled && data?.id != null) {
+          setSelectedUser({
+            id: Number(data.id),
+            name: String(data.name ?? ""),
+            email: String(data.email ?? "")
+          });
+        }
+      } catch {
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    selectedUserId,
+    selectedUser?.id
   ]);
   const handleInputChange = /* @__PURE__ */ __name((e) => {
-    const value = e.target.value;
-    setInputValue(value);
+    setInputValue(e.target.value);
     setShowSuggestions(true);
   }, "handleInputChange");
   const handleSuggestionSelect = /* @__PURE__ */ __name((user) => {
     onUserChange(user.id);
+    setSelectedUser(user);
     setInputValue("");
     setShowSuggestions(false);
     setSuggestions([]);
   }, "handleSuggestionSelect");
   const handleRemoveUser = /* @__PURE__ */ __name(() => {
     onUserChange(null);
+    setSelectedUser(null);
   }, "handleRemoveUser");
   const handleKeyPress = /* @__PURE__ */ __name((e) => {
     if (e.key === "Enter") {
       e.preventDefault();
-      if (suggestions.length > 0) {
-        handleSuggestionSelect(suggestions[0]);
-      }
+      if (suggestions.length > 0) handleSuggestionSelect(suggestions[0]);
     } else if (e.key === "Escape") {
       setShowSuggestions(false);
       inputRef.current?.blur();
@@ -6741,14 +6775,13 @@ function UserAutocomplete({ selectedUserId, onUserChange, placeholder = "Select
     document.addEventListener("mousedown", handleClickOutside);
     return () => document.removeEventListener("mousedown", handleClickOutside);
   }, []);
-  const selectedUser = suggestions.find((user) => user.id === selectedUserId);
   return /* @__PURE__ */ React.createElement("div", {
     className: `relative ${className}`
   }, selectedUser && /* @__PURE__ */ React.createElement("div", {
     className: "mb-2"
   }, /* @__PURE__ */ React.createElement(Badge, {
     className: "flex items-center gap-1"
-  }, selectedUser.name, /* @__PURE__ */ React.createElement(X, {
+  }, selectedUser.name || selectedUser.email || `User #${selectedUser.id}`, /* @__PURE__ */ React.createElement(X, {
     size: 12,
     className: "cursor-pointer hover:text-red-500",
     onClick: handleRemoveUser
@@ -6792,6 +6825,7 @@ var init_UserAutocomplete = __esm({
     "use client";
     init_input();
     init_badge();
+    init_permission_entities();
     __name(UserAutocomplete, "UserAutocomplete");
   }
 });
@@ -7222,7 +7256,8 @@ function BlogEditor({ existingBlog, duplicateSource }) {
     selectedUserId: authorId,
     onUserChange: setAuthorId,
     placeholder: "Select author...",
-    className: "w-full"
+    className: "w-full",
+    groupName: "Administrator"
   })), /* @__PURE__ */ React.createElement("div", null, /* @__PURE__ */ React.createElement(ImageUpload, {
     value: coverImage,
     onChange: setCoverImage,
@@ -13956,7 +13991,11 @@ function ScheduleAuthorSelect({ value, onChange, disabled }) {
     (async () => {
       setLoading(true);
       try {
-        const res = await fetch("/api/users?limit=500");
+        const params = new URLSearchParams({
+          limit: "100",
+          groupName: ADMIN_GROUP_NAME
+        });
+        const res = await fetch(`/api/users?${params}`);
         if (!res.ok || cancelled) return;
         const data = await res.json();
         const rows = Array.isArray(data.data) ? data.data : [];
@@ -13989,7 +14028,7 @@ function ScheduleAuthorSelect({ value, onChange, disabled }) {
   }, /* @__PURE__ */ React.createElement(SelectTrigger, {
     className: "w-full"
   }, /* @__PURE__ */ React.createElement(SelectValue, {
-    placeholder: users.length === 0 ? "No users found" : "Select author"
+    placeholder: users.length === 0 ? "No administrators found" : "Select author"
   })), /* @__PURE__ */ React.createElement(SelectContent, {
     className: "max-h-72"
   }, users.map((u) => /* @__PURE__ */ React.createElement(SelectItem, {
@@ -14001,6 +14040,7 @@ var init_ScheduleAuthorSelect = __esm({
   "src/admin/ScheduleAuthorSelect.tsx"() {
     "use client";
     init_select();
+    init_permission_entities();
     __name(userLabel, "userLabel");
     __name(ScheduleAuthorSelect, "ScheduleAuthorSelect");
   }

package/dist/api.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkGINYYPXK_cjs = require('./chunk-GINYYPXK.cjs');
+var chunkSCPKMZG5_cjs = require('./chunk-SCPKMZG5.cjs');
 require('./chunk-22FFHLTO.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
@@ -20,127 +20,127 @@ require('./chunk-USNT2KNT.cjs');
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createChangePasswordHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCmsApiHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCrudByIdHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createCrudHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createFormBySlugHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createSetPasswordHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUploadHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkSCPKMZG5_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserAvatarHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUserProfileHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createUsersApiHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkSCPKMZG5_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkSCPKMZG5_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkSCPKMZG5_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkSCPKMZG5_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkSCPKMZG5_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.simpleDecrypt; }
+  get: function () { return chunkSCPKMZG5_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.simpleEncrypt; }
+  get: function () { return chunkSCPKMZG5_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkSCPKMZG5_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkGINYYPXK_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkSCPKMZG5_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.js

@@ -1,4 +1,4 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-W2NL365N.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-IX7X4ILO.js';
 import './chunk-NNQBWDCI.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';

package/dist/{chunk-W2NL365N.js → chunk-IX7X4ILO.js}

@@ -8625,6 +8625,12 @@ function createUploadHandler(config) {
         parentId
       });
     } catch (err) {
+      console.error("[upload] File upload failed", {
+        error: err instanceof Error ? err.message : String(err),
+        stack: err instanceof Error ? err.stack : void 0,
+        name: err instanceof Error ? err.name : void 0,
+        metadata: err && typeof err === "object" && "$metadata" in err ? err.$metadata : void 0
+      });
       return json({
         error: "File upload failed"
       }, {
@@ -9330,41 +9336,68 @@ function createUsersApiHandlers(config) {
         const page = Math.max(1, parseInt(url.searchParams.get("page") || "1", 10));
         const limit = Math.min(100, parseInt(url.searchParams.get("limit") || "10", 10));
         const skip = (page - 1) * limit;
-        const sortField = url.searchParams.get("sortField") || "createdAt";
+        const sortFieldRaw = url.searchParams.get("sortField") || "createdAt";
+        const allowedSort = /* @__PURE__ */ new Set([
+          "createdAt",
+          "updatedAt",
+          "name",
+          "email",
+          "id",
+          "blocked"
+        ]);
+        const sortField = allowedSort.has(sortFieldRaw) ? sortFieldRaw : "createdAt";
         const sortOrder = url.searchParams.get("sortOrder") === "desc" ? "DESC" : "ASC";
-        const search = url.searchParams.get("search");
-        const where = search ? [
-          {
-            name: ILike(`%${search}%`),
-            deleted: false
-          },
-          {
-            email: ILike(`%${search}%`),
-            deleted: false
-          }
-        ] : {
+        const search = url.searchParams.get("search")?.trim() || "";
+        const groupName = url.searchParams.get("groupName")?.trim() || "";
+        const qb = userRepo().createQueryBuilder("u").leftJoinAndSelect("u.group", "g").where("u.deleted = :deleted", {
           deleted: false
-        };
-        const [data, total] = await userRepo().findAndCount({
-          skip,
-          take: limit,
-          order: {
-            [sortField]: sortOrder
-          },
-          where,
-          relations: [
-            "group"
-          ],
-          select: [
-            "id",
-            "name",
-            "email",
-            "blocked",
-            "createdAt",
-            "updatedAt",
-            "groupId"
-          ]
-        });
+        }).orderBy(`u.${sortField}`, sortOrder).skip(skip).take(limit).select([
+          "u.id",
+          "u.name",
+          "u.email",
+          "u.blocked",
+          "u.createdAt",
+          "u.updatedAt",
+          "u.groupId",
+          "g.id",
+          "g.name"
+        ]);
+        if (search) {
+          qb.andWhere("(u.name ILIKE :search OR u.email ILIKE :search)", {
+            search: `%${search}%`
+          });
+        }
+        if (groupName) {
+          if (!entityMap.user_groups) {
+            return json({
+              total: 0,
+              page,
+              limit,
+              totalPages: 0,
+              data: []
+            });
+          }
+          const groupRepo = dataSource.getRepository(entityMap.user_groups);
+          const group = await groupRepo.findOne({
+            where: {
+              name: groupName,
+              deleted: false
+            }
+          });
+          if (!group) {
+            return json({
+              total: 0,
+              page,
+              limit,
+              totalPages: 0,
+              data: []
+            });
+          }
+          qb.andWhere("u.groupId = :groupId", {
+            groupId: Number(group.id)
+          });
+        }
+        const [data, total] = await qb.getManyAndCount();
         return json({
           total,
           page,