@infuro/cms-core 1.0.66 → 1.0.67
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/admin.cjs +94 -21
- package/dist/admin.js +94 -21
- package/dist/api.cjs +36 -36
- package/dist/api.js +3 -3
- package/dist/auth.cjs +51 -51
- package/dist/auth.js +3 -3
- package/dist/{chunk-6DBDJ4VD.js → chunk-2ISSXYBZ.js} +2 -2
- package/dist/{chunk-MVHDC3XF.js → chunk-5NOZSG6J.js} +22 -11
- package/dist/{chunk-QYRXLURF.cjs → chunk-BVLN75LP.cjs} +443 -78
- package/dist/{chunk-T33KU5G5.js → chunk-GLLCLRCQ.js} +394 -29
- package/dist/{chunk-J7FMZK66.cjs → chunk-O4AFPDQ4.cjs} +22 -11
- package/dist/{chunk-4U6DATGZ.cjs → chunk-OV5TRZET.cjs} +7 -7
- package/dist/{chunk-KM2I6AFP.cjs → chunk-SS3K7OIM.cjs} +9 -9
- package/dist/{chunk-NR44CK5E.js → chunk-ZY64VJMS.js} +1 -1
- package/dist/index.cjs +269 -265
- package/dist/index.d.cts +14 -1
- package/dist/index.d.ts +14 -1
- package/dist/index.js +6 -6
- package/dist/migrations/1783300000000-CreateOrderAssigneesTable.ts +43 -0
- package/dist/{order-assignees-handlers-NPKD64P6.cjs → order-assignees-handlers-KF7RMTV5.cjs} +77 -8
- package/dist/{order-assignees-handlers-LKMAGLG6.js → order-assignees-handlers-L3RVKUBS.js} +77 -8
- package/dist/{order-completion-otp-handlers-NK65LOLV.cjs → order-completion-otp-handlers-DZAXK4GQ.cjs} +67 -13
- package/dist/{order-completion-otp-handlers-LFRHXWK4.js → order-completion-otp-handlers-HFGCPC4O.js} +67 -13
- package/dist/{rbac-debug-db-5R6XFPSV.js → rbac-debug-db-DFZWZ6GV.js} +1 -1
- package/dist/{rbac-debug-db-JKK2MCWF.cjs → rbac-debug-db-KWV7D5PQ.cjs} +2 -2
- package/package.json +1 -1
package/dist/api.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-
|
|
1
|
+
export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-GLLCLRCQ.js';
|
|
2
2
|
import './chunk-OVTOP42W.js';
|
|
3
3
|
import './chunk-XJNNOSJR.js';
|
|
4
4
|
import './chunk-3K5AIEIZ.js';
|
|
@@ -14,8 +14,8 @@ import './chunk-YRCKEGL2.js';
|
|
|
14
14
|
import './chunk-MQBT33IV.js';
|
|
15
15
|
import './chunk-CRFV5WJK.js';
|
|
16
16
|
import './chunk-AYERBA7I.js';
|
|
17
|
-
export { createCmsAuthBundle } from './chunk-
|
|
17
|
+
export { createCmsAuthBundle } from './chunk-ZY64VJMS.js';
|
|
18
18
|
import './chunk-DBPSJYLZ.js';
|
|
19
|
-
import './chunk-
|
|
19
|
+
import './chunk-5NOZSG6J.js';
|
|
20
20
|
import './chunk-SYBOCAWB.js';
|
|
21
21
|
import './chunk-SHUYVCID.js';
|
package/dist/auth.cjs
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
var
|
|
4
|
-
var
|
|
3
|
+
var chunkSS3K7OIM_cjs = require('./chunk-SS3K7OIM.cjs');
|
|
4
|
+
var chunkOV5TRZET_cjs = require('./chunk-OV5TRZET.cjs');
|
|
5
5
|
require('./chunk-OY2YTBMP.cjs');
|
|
6
|
-
var
|
|
6
|
+
var chunkO4AFPDQ4_cjs = require('./chunk-O4AFPDQ4.cjs');
|
|
7
7
|
var chunk7L6KWI7S_cjs = require('./chunk-7L6KWI7S.cjs');
|
|
8
8
|
require('./chunk-USNT2KNT.cjs');
|
|
9
9
|
|
|
@@ -11,195 +11,195 @@ require('./chunk-USNT2KNT.cjs');
|
|
|
11
11
|
|
|
12
12
|
Object.defineProperty(exports, "AUTH_PROVIDERS_SETTINGS_GROUP", {
|
|
13
13
|
enumerable: true,
|
|
14
|
-
get: function () { return
|
|
14
|
+
get: function () { return chunkSS3K7OIM_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
|
|
15
15
|
});
|
|
16
16
|
Object.defineProperty(exports, "buildNextAuthOptions", {
|
|
17
17
|
enumerable: true,
|
|
18
|
-
get: function () { return
|
|
18
|
+
get: function () { return chunkSS3K7OIM_cjs.buildNextAuthOptions; }
|
|
19
19
|
});
|
|
20
20
|
Object.defineProperty(exports, "buildStorefrontNextAuthOptions", {
|
|
21
21
|
enumerable: true,
|
|
22
|
-
get: function () { return
|
|
22
|
+
get: function () { return chunkSS3K7OIM_cjs.buildStorefrontNextAuthOptions; }
|
|
23
23
|
});
|
|
24
24
|
Object.defineProperty(exports, "createCustomerUserFromGoogleOAuth", {
|
|
25
25
|
enumerable: true,
|
|
26
|
-
get: function () { return
|
|
26
|
+
get: function () { return chunkSS3K7OIM_cjs.createCustomerUserFromGoogleOAuth; }
|
|
27
27
|
});
|
|
28
28
|
Object.defineProperty(exports, "getNextAuthOptions", {
|
|
29
29
|
enumerable: true,
|
|
30
|
-
get: function () { return
|
|
30
|
+
get: function () { return chunkSS3K7OIM_cjs.getNextAuthOptions; }
|
|
31
31
|
});
|
|
32
32
|
Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
|
|
33
33
|
enumerable: true,
|
|
34
|
-
get: function () { return
|
|
34
|
+
get: function () { return chunkSS3K7OIM_cjs.getStorefrontNextAuthOptions; }
|
|
35
35
|
});
|
|
36
36
|
Object.defineProperty(exports, "googleOAuthRedirectUri", {
|
|
37
37
|
enumerable: true,
|
|
38
|
-
get: function () { return
|
|
38
|
+
get: function () { return chunkSS3K7OIM_cjs.googleOAuthRedirectUri; }
|
|
39
39
|
});
|
|
40
40
|
Object.defineProperty(exports, "isGoogleAuthPubliclyEnabled", {
|
|
41
41
|
enumerable: true,
|
|
42
|
-
get: function () { return
|
|
42
|
+
get: function () { return chunkSS3K7OIM_cjs.isGoogleAuthPubliclyEnabled; }
|
|
43
43
|
});
|
|
44
44
|
Object.defineProperty(exports, "resolveGoogleAuthConfig", {
|
|
45
45
|
enumerable: true,
|
|
46
|
-
get: function () { return
|
|
46
|
+
get: function () { return chunkSS3K7OIM_cjs.resolveGoogleAuthConfig; }
|
|
47
47
|
});
|
|
48
48
|
Object.defineProperty(exports, "seedAdministratorPermissions", {
|
|
49
49
|
enumerable: true,
|
|
50
|
-
get: function () { return
|
|
50
|
+
get: function () { return chunkSS3K7OIM_cjs.seedAdministratorPermissions; }
|
|
51
51
|
});
|
|
52
52
|
Object.defineProperty(exports, "OPEN_ENDPOINTS", {
|
|
53
53
|
enumerable: true,
|
|
54
|
-
get: function () { return
|
|
54
|
+
get: function () { return chunkOV5TRZET_cjs.OPEN_ENDPOINTS; }
|
|
55
55
|
});
|
|
56
56
|
Object.defineProperty(exports, "PERMISSION_REQUIRED_ENDPOINTS", {
|
|
57
57
|
enumerable: true,
|
|
58
|
-
get: function () { return
|
|
58
|
+
get: function () { return chunkOV5TRZET_cjs.PERMISSION_REQUIRED_ENDPOINTS; }
|
|
59
59
|
});
|
|
60
60
|
Object.defineProperty(exports, "RBAC_ADMIN_ONLY_ENTITIES", {
|
|
61
61
|
enumerable: true,
|
|
62
|
-
get: function () { return
|
|
62
|
+
get: function () { return chunkOV5TRZET_cjs.RBAC_ADMIN_ONLY_ENTITIES; }
|
|
63
63
|
});
|
|
64
64
|
Object.defineProperty(exports, "canManageRoles", {
|
|
65
65
|
enumerable: true,
|
|
66
|
-
get: function () { return
|
|
66
|
+
get: function () { return chunkOV5TRZET_cjs.canManageRoles; }
|
|
67
67
|
});
|
|
68
68
|
Object.defineProperty(exports, "createAuthHelpers", {
|
|
69
69
|
enumerable: true,
|
|
70
|
-
get: function () { return
|
|
70
|
+
get: function () { return chunkOV5TRZET_cjs.createAuthHelpers; }
|
|
71
71
|
});
|
|
72
72
|
Object.defineProperty(exports, "createCmsAuthBundle", {
|
|
73
73
|
enumerable: true,
|
|
74
|
-
get: function () { return
|
|
74
|
+
get: function () { return chunkOV5TRZET_cjs.createCmsAuthBundle; }
|
|
75
75
|
});
|
|
76
76
|
Object.defineProperty(exports, "getRequiredPermission", {
|
|
77
77
|
enumerable: true,
|
|
78
|
-
get: function () { return
|
|
78
|
+
get: function () { return chunkOV5TRZET_cjs.getRequiredPermission; }
|
|
79
79
|
});
|
|
80
80
|
Object.defineProperty(exports, "isOpenEndpoint", {
|
|
81
81
|
enumerable: true,
|
|
82
|
-
get: function () { return
|
|
82
|
+
get: function () { return chunkOV5TRZET_cjs.isOpenEndpoint; }
|
|
83
83
|
});
|
|
84
84
|
Object.defineProperty(exports, "isPublicMethod", {
|
|
85
85
|
enumerable: true,
|
|
86
|
-
get: function () { return
|
|
86
|
+
get: function () { return chunkOV5TRZET_cjs.isPublicMethod; }
|
|
87
87
|
});
|
|
88
88
|
Object.defineProperty(exports, "sessionHasEntityAccess", {
|
|
89
89
|
enumerable: true,
|
|
90
|
-
get: function () { return
|
|
90
|
+
get: function () { return chunkOV5TRZET_cjs.sessionHasEntityAccess; }
|
|
91
91
|
});
|
|
92
92
|
Object.defineProperty(exports, "ADMIN_GROUP_NAME", {
|
|
93
93
|
enumerable: true,
|
|
94
|
-
get: function () { return
|
|
94
|
+
get: function () { return chunkO4AFPDQ4_cjs.ADMIN_GROUP_NAME; }
|
|
95
95
|
});
|
|
96
96
|
Object.defineProperty(exports, "SUPER_ADMIN_GROUP_ID", {
|
|
97
97
|
enumerable: true,
|
|
98
|
-
get: function () { return
|
|
98
|
+
get: function () { return chunkO4AFPDQ4_cjs.SUPER_ADMIN_GROUP_ID; }
|
|
99
99
|
});
|
|
100
100
|
Object.defineProperty(exports, "VENDOR_ADMIN_GROUP_ID", {
|
|
101
101
|
enumerable: true,
|
|
102
|
-
get: function () { return
|
|
102
|
+
get: function () { return chunkO4AFPDQ4_cjs.VENDOR_ADMIN_GROUP_ID; }
|
|
103
103
|
});
|
|
104
104
|
Object.defineProperty(exports, "VENDOR_GROUP_NAME", {
|
|
105
105
|
enumerable: true,
|
|
106
|
-
get: function () { return
|
|
106
|
+
get: function () { return chunkO4AFPDQ4_cjs.VENDOR_GROUP_NAME; }
|
|
107
107
|
});
|
|
108
108
|
Object.defineProperty(exports, "VENDOR_OWNER_GROUP_NAME", {
|
|
109
109
|
enumerable: true,
|
|
110
|
-
get: function () { return
|
|
110
|
+
get: function () { return chunkO4AFPDQ4_cjs.VENDOR_OWNER_GROUP_NAME; }
|
|
111
111
|
});
|
|
112
112
|
Object.defineProperty(exports, "VENDOR_SCOPED_STORE_ENTITIES", {
|
|
113
113
|
enumerable: true,
|
|
114
|
-
get: function () { return
|
|
114
|
+
get: function () { return chunkO4AFPDQ4_cjs.VENDOR_SCOPED_STORE_ENTITIES; }
|
|
115
115
|
});
|
|
116
116
|
Object.defineProperty(exports, "VENDOR_STORE_RBAC_ENTITIES", {
|
|
117
117
|
enumerable: true,
|
|
118
|
-
get: function () { return
|
|
118
|
+
get: function () { return chunkO4AFPDQ4_cjs.VENDOR_STORE_RBAC_ENTITIES; }
|
|
119
119
|
});
|
|
120
120
|
Object.defineProperty(exports, "canManageVendorRoles", {
|
|
121
121
|
enumerable: true,
|
|
122
|
-
get: function () { return
|
|
122
|
+
get: function () { return chunkO4AFPDQ4_cjs.canManageVendorRoles; }
|
|
123
123
|
});
|
|
124
124
|
Object.defineProperty(exports, "canManageVendorTeam", {
|
|
125
125
|
enumerable: true,
|
|
126
|
-
get: function () { return
|
|
126
|
+
get: function () { return chunkO4AFPDQ4_cjs.canManageVendorTeam; }
|
|
127
127
|
});
|
|
128
128
|
Object.defineProperty(exports, "canOnboardVendors", {
|
|
129
129
|
enumerable: true,
|
|
130
|
-
get: function () { return
|
|
130
|
+
get: function () { return chunkO4AFPDQ4_cjs.canOnboardVendors; }
|
|
131
131
|
});
|
|
132
132
|
Object.defineProperty(exports, "explainSessionEntityAccess", {
|
|
133
133
|
enumerable: true,
|
|
134
|
-
get: function () { return
|
|
134
|
+
get: function () { return chunkO4AFPDQ4_cjs.explainSessionEntityAccess; }
|
|
135
135
|
});
|
|
136
136
|
Object.defineProperty(exports, "getPermissionableEntityKeys", {
|
|
137
137
|
enumerable: true,
|
|
138
|
-
get: function () { return
|
|
138
|
+
get: function () { return chunkO4AFPDQ4_cjs.getPermissionableEntityKeys; }
|
|
139
139
|
});
|
|
140
140
|
Object.defineProperty(exports, "hasEntityPermission", {
|
|
141
141
|
enumerable: true,
|
|
142
|
-
get: function () { return
|
|
142
|
+
get: function () { return chunkO4AFPDQ4_cjs.hasEntityPermission; }
|
|
143
143
|
});
|
|
144
144
|
Object.defineProperty(exports, "isPlatformAdministrator", {
|
|
145
145
|
enumerable: true,
|
|
146
|
-
get: function () { return
|
|
146
|
+
get: function () { return chunkO4AFPDQ4_cjs.isPlatformAdministrator; }
|
|
147
147
|
});
|
|
148
148
|
Object.defineProperty(exports, "isRbacDebugEnabled", {
|
|
149
149
|
enumerable: true,
|
|
150
|
-
get: function () { return
|
|
150
|
+
get: function () { return chunkO4AFPDQ4_cjs.isRbacDebugEnabled; }
|
|
151
151
|
});
|
|
152
152
|
Object.defineProperty(exports, "isSuperAdmin", {
|
|
153
153
|
enumerable: true,
|
|
154
|
-
get: function () { return
|
|
154
|
+
get: function () { return chunkO4AFPDQ4_cjs.isSuperAdmin; }
|
|
155
155
|
});
|
|
156
156
|
Object.defineProperty(exports, "isSuperAdminGroupName", {
|
|
157
157
|
enumerable: true,
|
|
158
|
-
get: function () { return
|
|
158
|
+
get: function () { return chunkO4AFPDQ4_cjs.isSuperAdminGroupName; }
|
|
159
159
|
});
|
|
160
160
|
Object.defineProperty(exports, "isVendorAdmin", {
|
|
161
161
|
enumerable: true,
|
|
162
|
-
get: function () { return
|
|
162
|
+
get: function () { return chunkO4AFPDQ4_cjs.isVendorAdmin; }
|
|
163
163
|
});
|
|
164
164
|
Object.defineProperty(exports, "isVendorGroupName", {
|
|
165
165
|
enumerable: true,
|
|
166
|
-
get: function () { return
|
|
166
|
+
get: function () { return chunkO4AFPDQ4_cjs.isVendorGroupName; }
|
|
167
167
|
});
|
|
168
168
|
Object.defineProperty(exports, "isVendorOwner", {
|
|
169
169
|
enumerable: true,
|
|
170
|
-
get: function () { return
|
|
170
|
+
get: function () { return chunkO4AFPDQ4_cjs.isVendorOwner; }
|
|
171
171
|
});
|
|
172
172
|
Object.defineProperty(exports, "isVendorPortalUser", {
|
|
173
173
|
enumerable: true,
|
|
174
|
-
get: function () { return
|
|
174
|
+
get: function () { return chunkO4AFPDQ4_cjs.isVendorPortalUser; }
|
|
175
175
|
});
|
|
176
176
|
Object.defineProperty(exports, "isVendorStaff", {
|
|
177
177
|
enumerable: true,
|
|
178
|
-
get: function () { return
|
|
178
|
+
get: function () { return chunkO4AFPDQ4_cjs.isVendorStaff; }
|
|
179
179
|
});
|
|
180
180
|
Object.defineProperty(exports, "logEntityAccessDecision", {
|
|
181
181
|
enumerable: true,
|
|
182
|
-
get: function () { return
|
|
182
|
+
get: function () { return chunkO4AFPDQ4_cjs.logEntityAccessDecision; }
|
|
183
183
|
});
|
|
184
184
|
Object.defineProperty(exports, "logRbac", {
|
|
185
185
|
enumerable: true,
|
|
186
|
-
get: function () { return
|
|
186
|
+
get: function () { return chunkO4AFPDQ4_cjs.logRbac; }
|
|
187
187
|
});
|
|
188
188
|
Object.defineProperty(exports, "permissionRowsToRecord", {
|
|
189
189
|
enumerable: true,
|
|
190
|
-
get: function () { return
|
|
190
|
+
get: function () { return chunkO4AFPDQ4_cjs.permissionRowsToRecord; }
|
|
191
191
|
});
|
|
192
192
|
Object.defineProperty(exports, "resolveVendorScopeFromSessionUser", {
|
|
193
193
|
enumerable: true,
|
|
194
|
-
get: function () { return
|
|
194
|
+
get: function () { return chunkO4AFPDQ4_cjs.resolveVendorScopeFromSessionUser; }
|
|
195
195
|
});
|
|
196
196
|
Object.defineProperty(exports, "summarizeEntityPerms", {
|
|
197
197
|
enumerable: true,
|
|
198
|
-
get: function () { return
|
|
198
|
+
get: function () { return chunkO4AFPDQ4_cjs.summarizeEntityPerms; }
|
|
199
199
|
});
|
|
200
200
|
Object.defineProperty(exports, "vendorPortalFlagsFromUser", {
|
|
201
201
|
enumerable: true,
|
|
202
|
-
get: function () { return
|
|
202
|
+
get: function () { return chunkO4AFPDQ4_cjs.vendorPortalFlagsFromUser; }
|
|
203
203
|
});
|
|
204
204
|
Object.defineProperty(exports, "createCmsMiddleware", {
|
|
205
205
|
enumerable: true,
|
package/dist/auth.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-
|
|
2
|
-
export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-
|
|
1
|
+
export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-2ISSXYBZ.js';
|
|
2
|
+
export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-ZY64VJMS.js';
|
|
3
3
|
import './chunk-DBPSJYLZ.js';
|
|
4
|
-
export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-
|
|
4
|
+
export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-5NOZSG6J.js';
|
|
5
5
|
export { createCmsMiddleware, defaultPublicApiMethods, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, summarizeSessionUserForLog } from './chunk-WUQAOTHA.js';
|
|
6
6
|
import './chunk-SHUYVCID.js';
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import { linkUnclaimedContactToUser, ensureCustomerForUser } from './chunk-
|
|
1
|
+
import { linkUnclaimedContactToUser, ensureCustomerForUser } from './chunk-ZY64VJMS.js';
|
|
2
2
|
import { retireSoftDeletedUniqueValue } from './chunk-DBPSJYLZ.js';
|
|
3
|
-
import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-
|
|
3
|
+
import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-5NOZSG6J.js';
|
|
4
4
|
import { logAuth, nextAuthCookieDebugInfo, summarizeSessionUserForLog } from './chunk-WUQAOTHA.js';
|
|
5
5
|
import { __name } from './chunk-SHUYVCID.js';
|
|
6
6
|
import _CredentialsProvider from 'next-auth/providers/credentials';
|
|
@@ -190,23 +190,34 @@ function canOnboardVendors(user) {
|
|
|
190
190
|
}
|
|
191
191
|
__name(canOnboardVendors, "canOnboardVendors");
|
|
192
192
|
function resolveVendorScopeFromSessionUser(user) {
|
|
193
|
-
if (!user?.email)
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
}
|
|
193
|
+
if (!user?.email) {
|
|
194
|
+
console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] No user email -> deny");
|
|
195
|
+
return {
|
|
196
|
+
type: "deny"
|
|
197
|
+
};
|
|
198
|
+
}
|
|
199
|
+
if (isPlatformAdministrator(user)) {
|
|
200
|
+
console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User is Platform Admin -> all");
|
|
201
|
+
return {
|
|
202
|
+
type: "all"
|
|
203
|
+
};
|
|
204
|
+
}
|
|
199
205
|
const vendorIds = user.vendorIds ?? [];
|
|
200
|
-
if (vendorIds.length === 0)
|
|
201
|
-
|
|
202
|
-
|
|
206
|
+
if (vendorIds.length === 0) {
|
|
207
|
+
console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User has 0 vendorIds -> deny. User:", user.email);
|
|
208
|
+
return {
|
|
209
|
+
type: "deny"
|
|
210
|
+
};
|
|
211
|
+
}
|
|
203
212
|
const preferred = user.activeVendorId ?? vendorIds[0];
|
|
204
213
|
const vendorId = vendorIds.includes(preferred) ? preferred : vendorIds[0];
|
|
205
|
-
|
|
214
|
+
const res = {
|
|
206
215
|
type: "vendor",
|
|
207
216
|
vendorId,
|
|
208
217
|
vendorIds
|
|
209
218
|
};
|
|
219
|
+
console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User:", user.email, "-> scope:", res);
|
|
220
|
+
return res;
|
|
210
221
|
}
|
|
211
222
|
__name(resolveVendorScopeFromSessionUser, "resolveVendorScopeFromSessionUser");
|
|
212
223
|
function vendorPortalFlagsFromUser(input) {
|
|
@@ -612,7 +623,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
|
|
|
612
623
|
const id = Number(user.id);
|
|
613
624
|
if (Number.isFinite(id)) {
|
|
614
625
|
try {
|
|
615
|
-
const { loadDbPermissionsForUser } = await import('./rbac-debug-db-
|
|
626
|
+
const { loadDbPermissionsForUser } = await import('./rbac-debug-db-DFZWZ6GV.js');
|
|
616
627
|
dbPermissions = await loadDbPermissionsForUser(dataSource, id);
|
|
617
628
|
} catch (e) {
|
|
618
629
|
dbPermissions = {
|