@infuro/cms-core 1.0.51 → 1.0.52

package/dist/admin.cjs

@@ -887,7 +887,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.51" ;
+    CMS_VERSION = "1.0.52" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/admin.js

@@ -853,7 +853,7 @@ var init_admin_config_context = __esm({
 var CMS_VERSION;
 var init_cms_version = __esm({
   "src/lib/cms-version.ts"() {
-    CMS_VERSION = "1.0.51" ;
+    CMS_VERSION = "1.0.52" ;
   }
 });
 function useCatalogCategories(enabled = true) {

package/dist/api.cjs

@@ -1,148 +1,148 @@
 'use strict';
 
-var chunkYOW457RA_cjs = require('./chunk-YOW457RA.cjs');
+var chunk3BPD5NGU_cjs = require('./chunk-3BPD5NGU.cjs');
+require('./chunk-XQ3QUHWR.cjs');
 require('./chunk-HY3AXLOI.cjs');
 require('./chunk-JN4AFHZ4.cjs');
 require('./chunk-UCKN4BBY.cjs');
 require('./chunk-7NMT3GBR.cjs');
 require('./chunk-V25RDUOU.cjs');
 require('./chunk-BXYZDMTZ.cjs');
+require('./chunk-UPLVMVRX.cjs');
 require('./chunk-3DZRIZOD.cjs');
 require('./chunk-OOTLNH63.cjs');
 require('./chunk-TJ2MIQUT.cjs');
-require('./chunk-XQ3QUHWR.cjs');
 var chunk3EOM4V2M_cjs = require('./chunk-3EOM4V2M.cjs');
 require('./chunk-OY2YTBMP.cjs');
 require('./chunk-77NUXO6A.cjs');
 require('./chunk-D5FBNKQM.cjs');
-require('./chunk-UPLVMVRX.cjs');
 require('./chunk-USNT2KNT.cjs');
 
 
 
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createAnalyticsHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createBlogBySlugHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createChangePasswordHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createCmsApiHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createCrudByIdHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createCrudHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createDashboardStatsHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createForgotPasswordHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createFormBySlugHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createInviteAcceptHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createJobScheduleHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createSetPasswordHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createSettingsApiHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createStorefrontApiHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createUploadHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createUserAuthApiRouter; }
+  get: function () { return chunk3BPD5NGU_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createUserAvatarHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createUserProfileHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createUsersApiHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createVendorDashboardHandler; }
+  get: function () { return chunk3BPD5NGU_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunk3BPD5NGU_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.getPublicSettingsGroup; }
+  get: function () { return chunk3BPD5NGU_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunk3BPD5NGU_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunk3BPD5NGU_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.simpleDecrypt; }
+  get: function () { return chunk3BPD5NGU_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.simpleEncrypt; }
+  get: function () { return chunk3BPD5NGU_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunk3BPD5NGU_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkYOW457RA_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunk3BPD5NGU_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.js

@@ -1,17 +1,17 @@
-export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-NUXR7BUG.js';
+export { createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-UO5Q5RXB.js';
+import './chunk-GO7PPYNU.js';
 import './chunk-3K5AIEIZ.js';
 import './chunk-CTXBYO2J.js';
 import './chunk-HCIRL37O.js';
 import './chunk-JXF23MPG.js';
 import './chunk-L3525VXI.js';
 import './chunk-2KUCQVAQ.js';
+import './chunk-JC6DLWTE.js';
 import './chunk-MQBT33IV.js';
 import './chunk-CRFV5WJK.js';
 import './chunk-AYERBA7I.js';
-import './chunk-GO7PPYNU.js';
 export { createCmsAuthBundle } from './chunk-RK5ETF2I.js';
 import './chunk-DBPSJYLZ.js';
 import './chunk-JIWUVQ6B.js';
 import './chunk-SYBOCAWB.js';
-import './chunk-JC6DLWTE.js';
 import './chunk-SHUYVCID.js';

package/dist/auth.cjs

@@ -1,84 +1,53 @@
 'use strict';
 
-var chunkYV5PK4JW_cjs = require('./chunk-YV5PK4JW.cjs');
+var chunkBC22I7C7_cjs = require('./chunk-BC22I7C7.cjs');
 var chunk3EOM4V2M_cjs = require('./chunk-3EOM4V2M.cjs');
 require('./chunk-OY2YTBMP.cjs');
 var chunk77NUXO6A_cjs = require('./chunk-77NUXO6A.cjs');
+var chunk7L6KWI7S_cjs = require('./chunk-7L6KWI7S.cjs');
 require('./chunk-USNT2KNT.cjs');
 
 
 
 Object.defineProperty(exports, "AUTH_PROVIDERS_SETTINGS_GROUP", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
+  get: function () { return chunkBC22I7C7_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
 });
 Object.defineProperty(exports, "buildNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.buildNextAuthOptions; }
+  get: function () { return chunkBC22I7C7_cjs.buildNextAuthOptions; }
 });
 Object.defineProperty(exports, "buildStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.buildStorefrontNextAuthOptions; }
-});
-Object.defineProperty(exports, "createCmsMiddleware", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.createCmsMiddleware; }
+  get: function () { return chunkBC22I7C7_cjs.buildStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "createCustomerUserFromGoogleOAuth", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.createCustomerUserFromGoogleOAuth; }
-});
-Object.defineProperty(exports, "defaultPublicApiMethods", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.defaultPublicApiMethods; }
+  get: function () { return chunkBC22I7C7_cjs.createCustomerUserFromGoogleOAuth; }
 });
 Object.defineProperty(exports, "getNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.getNextAuthOptions; }
+  get: function () { return chunkBC22I7C7_cjs.getNextAuthOptions; }
 });
 Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.getStorefrontNextAuthOptions; }
+  get: function () { return chunkBC22I7C7_cjs.getStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "googleOAuthRedirectUri", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.googleOAuthRedirectUri; }
-});
-Object.defineProperty(exports, "isAuthDebugClientEnabled", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.isAuthDebugClientEnabled; }
-});
-Object.defineProperty(exports, "isAuthDebugEnabled", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.isAuthDebugEnabled; }
+  get: function () { return chunkBC22I7C7_cjs.googleOAuthRedirectUri; }
 });
 Object.defineProperty(exports, "isGoogleAuthPubliclyEnabled", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.isGoogleAuthPubliclyEnabled; }
-});
-Object.defineProperty(exports, "logAuth", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.logAuth; }
-});
-Object.defineProperty(exports, "logAuthClient", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.logAuthClient; }
-});
-Object.defineProperty(exports, "nextAuthCookieDebugInfo", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.nextAuthCookieDebugInfo; }
+  get: function () { return chunkBC22I7C7_cjs.isGoogleAuthPubliclyEnabled; }
 });
 Object.defineProperty(exports, "resolveGoogleAuthConfig", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.resolveGoogleAuthConfig; }
+  get: function () { return chunkBC22I7C7_cjs.resolveGoogleAuthConfig; }
 });
 Object.defineProperty(exports, "seedAdministratorPermissions", {
   enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.seedAdministratorPermissions; }
-});
-Object.defineProperty(exports, "summarizeSessionUserForLog", {
-  enumerable: true,
-  get: function () { return chunkYV5PK4JW_cjs.summarizeSessionUserForLog; }
+  get: function () { return chunkBC22I7C7_cjs.seedAdministratorPermissions; }
 });
 Object.defineProperty(exports, "OPEN_ENDPOINTS", {
   enumerable: true,
@@ -232,3 +201,35 @@ Object.defineProperty(exports, "vendorPortalFlagsFromUser", {
   enumerable: true,
   get: function () { return chunk77NUXO6A_cjs.vendorPortalFlagsFromUser; }
 });
+Object.defineProperty(exports, "createCmsMiddleware", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.createCmsMiddleware; }
+});
+Object.defineProperty(exports, "defaultPublicApiMethods", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.defaultPublicApiMethods; }
+});
+Object.defineProperty(exports, "isAuthDebugClientEnabled", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.isAuthDebugClientEnabled; }
+});
+Object.defineProperty(exports, "isAuthDebugEnabled", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.isAuthDebugEnabled; }
+});
+Object.defineProperty(exports, "logAuth", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.logAuth; }
+});
+Object.defineProperty(exports, "logAuthClient", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.logAuthClient; }
+});
+Object.defineProperty(exports, "nextAuthCookieDebugInfo", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.nextAuthCookieDebugInfo; }
+});
+Object.defineProperty(exports, "summarizeSessionUserForLog", {
+  enumerable: true,
+  get: function () { return chunk7L6KWI7S_cjs.summarizeSessionUserForLog; }
+});

package/dist/auth.d.cts

@@ -1,5 +1,4 @@
 import { DataSource } from 'typeorm';
-import { getToken } from 'next-auth/jwt';
 import { NextAuthOptions } from 'next-auth';
 
 /** Canonical name for new installs / migrations */
@@ -188,9 +187,9 @@ interface CmsMiddlewareRequest {
     };
     /**
      * Full Next.js request (e.g. `NextRequest`). When provided, session is resolved via
-     * `getToken()` so chunked `next-auth.session-token.N` cookies work.
+     * cookie presence or `getToken()`.
      */
-    req?: Parameters<typeof getToken>[0]['req'];
+    req?: unknown;
 }
 interface CmsMiddlewareConfig {
     publicAdminPaths?: string[];

package/dist/auth.d.ts

@@ -1,5 +1,4 @@
 import { DataSource } from 'typeorm';
-import { getToken } from 'next-auth/jwt';
 import { NextAuthOptions } from 'next-auth';
 
 /** Canonical name for new installs / migrations */
@@ -188,9 +187,9 @@ interface CmsMiddlewareRequest {
     };
     /**
      * Full Next.js request (e.g. `NextRequest`). When provided, session is resolved via
-     * `getToken()` so chunked `next-auth.session-token.N` cookies work.
+     * cookie presence or `getToken()`.
      */
-    req?: Parameters<typeof getToken>[0]['req'];
+    req?: unknown;
 }
 interface CmsMiddlewareConfig {
     publicAdminPaths?: string[];

package/dist/auth.js

@@ -1,5 +1,6 @@
-export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCmsMiddleware, createCustomerUserFromGoogleOAuth, defaultPublicApiMethods, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isAuthDebugClientEnabled, isAuthDebugEnabled, isGoogleAuthPubliclyEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, resolveGoogleAuthConfig, seedAdministratorPermissions, summarizeSessionUserForLog } from './chunk-WRKV6MHB.js';
+export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-BNKZNLEX.js';
 export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-RK5ETF2I.js';
 import './chunk-DBPSJYLZ.js';
 export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-JIWUVQ6B.js';
+export { createCmsMiddleware, defaultPublicApiMethods, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, summarizeSessionUserForLog } from './chunk-WUQAOTHA.js';
 import './chunk-SHUYVCID.js';

package/dist/chunk-7L6KWI7S.cjs

@@ -0,0 +1,212 @@
+'use strict';
+
+var chunkUSNT2KNT_cjs = require('./chunk-USNT2KNT.cjs');
+
+// src/auth/auth-debug.ts
+var LOG_PREFIX = "[cms-auth]";
+function isAuthDebugEnabled() {
+  const v = process.env.CMS_AUTH_DEBUG?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+chunkUSNT2KNT_cjs.__name(isAuthDebugEnabled, "isAuthDebugEnabled");
+function isAuthDebugClientEnabled() {
+  if (typeof window === "undefined") return false;
+  const v = process.env.NEXT_PUBLIC_CMS_AUTH_DEBUG?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+chunkUSNT2KNT_cjs.__name(isAuthDebugClientEnabled, "isAuthDebugClientEnabled");
+function logAuth(message, data) {
+  if (!isAuthDebugEnabled()) return;
+  if (data) console.info(LOG_PREFIX, message, data);
+  else console.info(LOG_PREFIX, message);
+}
+chunkUSNT2KNT_cjs.__name(logAuth, "logAuth");
+function logAuthClient(message, data) {
+  if (!isAuthDebugClientEnabled()) return;
+  if (data) console.info(LOG_PREFIX, message, data);
+  else console.info(LOG_PREFIX, message);
+}
+chunkUSNT2KNT_cjs.__name(logAuthClient, "logAuthClient");
+function summarizeSessionUserForLog(user) {
+  if (!user || typeof user !== "object") return {
+    present: false
+  };
+  const u = user;
+  return {
+    present: true,
+    email: u.email ?? null,
+    id: u.id ?? null,
+    adminAccess: u.adminAccess ?? null,
+    isRBACAdmin: u.isRBACAdmin ?? null,
+    isVendorPortal: u.isVendorPortal ?? null,
+    groupName: u.groupName ?? null
+  };
+}
+chunkUSNT2KNT_cjs.__name(summarizeSessionUserForLog, "summarizeSessionUserForLog");
+function nextAuthCookieDebugInfo() {
+  const nextAuthUrl = process.env.NEXTAUTH_URL ?? "(unset)";
+  const isHttps = nextAuthUrl.startsWith("https");
+  return {
+    nextAuthUrl,
+    hasSecret: Boolean(process.env.NEXTAUTH_SECRET),
+    cookieName: isHttps ? "__Secure-next-auth.session-token" : "next-auth.session-token",
+    cookieSecure: isHttps,
+    nodeEnv: process.env.NODE_ENV ?? "(unset)"
+  };
+}
+chunkUSNT2KNT_cjs.__name(nextAuthCookieDebugInfo, "nextAuthCookieDebugInfo");
+
+// src/auth/middleware.ts
+var defaultPublicApiMethods = {
+  "/api/contacts": [
+    "POST"
+  ],
+  "/api/form-submissions": [
+    "POST"
+  ],
+  "/api/blogs": [
+    "GET"
+  ],
+  "/api/forms": [
+    "GET"
+  ],
+  "/api/auth": [
+    "GET",
+    "POST"
+  ],
+  "/api/health": [
+    "GET"
+  ],
+  "/api/users/forgot-password": [
+    "POST"
+  ],
+  "/api/users/set-password": [
+    "POST"
+  ],
+  "/api/users/invite": [
+    "GET",
+    "POST"
+  ],
+  /** Public keys only (e.g. googleEnabled); secrets stay private in the settings handler. */
+  "/api/settings/auth_providers": [
+    "GET"
+  ]
+};
+function legacyGetSessionToken(request) {
+  const secure = request.cookies.get("__Secure-next-auth.session-token")?.value;
+  const regular = request.cookies.get("next-auth.session-token")?.value;
+  return secure ?? regular;
+}
+chunkUSNT2KNT_cjs.__name(legacyGetSessionToken, "legacyGetSessionToken");
+function sessionCookiePresence(request) {
+  const secure = request.cookies.get("__Secure-next-auth.session-token")?.value;
+  const regular = request.cookies.get("next-auth.session-token")?.value;
+  const hasChunked = Boolean(request.cookies.get("next-auth.session-token.0")?.value) || Boolean(request.cookies.get("__Secure-next-auth.session-token.0")?.value);
+  return {
+    hasSecureToken: Boolean(secure),
+    hasRegularToken: Boolean(regular),
+    hasChunkedToken: hasChunked,
+    resolved: Boolean(secure ?? regular ?? hasChunked)
+  };
+}
+chunkUSNT2KNT_cjs.__name(sessionCookiePresence, "sessionCookiePresence");
+function isPublicMethod(pathname, method, publicApiMethods) {
+  for (const [endpoint, methods] of Object.entries(publicApiMethods)) {
+    if (pathname.startsWith(endpoint) && methods.includes(method)) return true;
+  }
+  return false;
+}
+chunkUSNT2KNT_cjs.__name(isPublicMethod, "isPublicMethod");
+async function hasValidSession(request, secret, legacyGetToken) {
+  const presence = sessionCookiePresence(request);
+  if (presence.resolved || presence.hasChunkedToken) return true;
+  if (request.req) {
+    try {
+      const { getToken } = await import('next-auth/jwt');
+      const token = await getToken({
+        req: request.req,
+        secret
+      });
+      if (token != null) return true;
+    } catch {
+    }
+  }
+  return Boolean(legacyGetToken(request));
+}
+chunkUSNT2KNT_cjs.__name(hasValidSession, "hasValidSession");
+function createCmsMiddleware(config = {}) {
+  const { publicAdminPaths = [
+    "/admin/signin",
+    "/admin/forgot-password",
+    "/admin/reset-password",
+    "/admin/invite"
+  ], publicApiMethods = defaultPublicApiMethods, signInPath = "/admin/signin", getSessionToken = legacyGetSessionToken, secret = process.env.NEXTAUTH_SECRET } = config;
+  return /* @__PURE__ */ chunkUSNT2KNT_cjs.__name(async function cmsMiddleware(request) {
+    const pathname = request.nextUrl.pathname;
+    const method = request.method;
+    if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + "/"))) {
+      return {
+        type: "next"
+      };
+    }
+    if (pathname.startsWith("/admin")) {
+      const authenticated = await hasValidSession(request, secret, getSessionToken);
+      const cookies = sessionCookiePresence(request);
+      if (!authenticated) {
+        logAuth("middleware: admin redirect to signin (no session)", {
+          pathname,
+          method,
+          usesGetToken: Boolean(request.req),
+          ...cookies,
+          expectedCookieName: process.env.NEXTAUTH_URL?.startsWith("https") ? "__Secure-next-auth.session-token" : "next-auth.session-token"
+        });
+        return {
+          type: "redirect",
+          url: new URL(signInPath, request.url).toString()
+        };
+      }
+      logAuth("middleware: admin allowed", {
+        pathname,
+        method,
+        usesGetToken: Boolean(request.req),
+        ...cookies
+      });
+    }
+    if (pathname.startsWith("/api")) {
+      if (isPublicMethod(pathname, method, publicApiMethods)) {
+        return {
+          type: "next"
+        };
+      }
+      const authenticated = await hasValidSession(request, secret, getSessionToken);
+      if (!authenticated) {
+        logAuth("middleware: api 401 (no session)", {
+          pathname,
+          method,
+          usesGetToken: Boolean(request.req),
+          ...sessionCookiePresence(request)
+        });
+        return {
+          type: "json",
+          status: 401,
+          body: {
+            error: "Unauthorized"
+          }
+        };
+      }
+    }
+    return {
+      type: "next"
+    };
+  }, "cmsMiddleware");
+}
+chunkUSNT2KNT_cjs.__name(createCmsMiddleware, "createCmsMiddleware");
+
+exports.createCmsMiddleware = createCmsMiddleware;
+exports.defaultPublicApiMethods = defaultPublicApiMethods;
+exports.isAuthDebugClientEnabled = isAuthDebugClientEnabled;
+exports.isAuthDebugEnabled = isAuthDebugEnabled;
+exports.logAuth = logAuth;
+exports.logAuthClient = logAuthClient;
+exports.nextAuthCookieDebugInfo = nextAuthCookieDebugInfo;
+exports.summarizeSessionUserForLog = summarizeSessionUserForLog;