@infuro/cms-core 1.0.66 → 1.0.67

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. package/dist/admin.cjs +94 -21
  2. package/dist/admin.js +94 -21
  3. package/dist/api.cjs +36 -36
  4. package/dist/api.js +3 -3
  5. package/dist/auth.cjs +51 -51
  6. package/dist/auth.js +3 -3
  7. package/dist/{chunk-6DBDJ4VD.js → chunk-2ISSXYBZ.js} +2 -2
  8. package/dist/{chunk-MVHDC3XF.js → chunk-5NOZSG6J.js} +22 -11
  9. package/dist/{chunk-QYRXLURF.cjs → chunk-BVLN75LP.cjs} +443 -78
  10. package/dist/{chunk-T33KU5G5.js → chunk-GLLCLRCQ.js} +394 -29
  11. package/dist/{chunk-J7FMZK66.cjs → chunk-O4AFPDQ4.cjs} +22 -11
  12. package/dist/{chunk-4U6DATGZ.cjs → chunk-OV5TRZET.cjs} +7 -7
  13. package/dist/{chunk-KM2I6AFP.cjs → chunk-SS3K7OIM.cjs} +9 -9
  14. package/dist/{chunk-NR44CK5E.js → chunk-ZY64VJMS.js} +1 -1
  15. package/dist/index.cjs +269 -265
  16. package/dist/index.d.cts +14 -1
  17. package/dist/index.d.ts +14 -1
  18. package/dist/index.js +6 -6
  19. package/dist/migrations/1783300000000-CreateOrderAssigneesTable.ts +43 -0
  20. package/dist/{order-assignees-handlers-NPKD64P6.cjs → order-assignees-handlers-KF7RMTV5.cjs} +77 -8
  21. package/dist/{order-assignees-handlers-LKMAGLG6.js → order-assignees-handlers-L3RVKUBS.js} +77 -8
  22. package/dist/{order-completion-otp-handlers-NK65LOLV.cjs → order-completion-otp-handlers-DZAXK4GQ.cjs} +67 -13
  23. package/dist/{order-completion-otp-handlers-LFRHXWK4.js → order-completion-otp-handlers-HFGCPC4O.js} +67 -13
  24. package/dist/{rbac-debug-db-5R6XFPSV.js → rbac-debug-db-DFZWZ6GV.js} +1 -1
  25. package/dist/{rbac-debug-db-JKK2MCWF.cjs → rbac-debug-db-KWV7D5PQ.cjs} +2 -2
  26. package/package.json +1 -1
package/dist/api.js CHANGED
@@ -1,4 +1,4 @@
1
- export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-T33KU5G5.js';
1
+ export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-GLLCLRCQ.js';
2
2
  import './chunk-OVTOP42W.js';
3
3
  import './chunk-XJNNOSJR.js';
4
4
  import './chunk-3K5AIEIZ.js';
@@ -14,8 +14,8 @@ import './chunk-YRCKEGL2.js';
14
14
  import './chunk-MQBT33IV.js';
15
15
  import './chunk-CRFV5WJK.js';
16
16
  import './chunk-AYERBA7I.js';
17
- export { createCmsAuthBundle } from './chunk-NR44CK5E.js';
17
+ export { createCmsAuthBundle } from './chunk-ZY64VJMS.js';
18
18
  import './chunk-DBPSJYLZ.js';
19
- import './chunk-MVHDC3XF.js';
19
+ import './chunk-5NOZSG6J.js';
20
20
  import './chunk-SYBOCAWB.js';
21
21
  import './chunk-SHUYVCID.js';
package/dist/auth.cjs CHANGED
@@ -1,9 +1,9 @@
1
1
  'use strict';
2
2
 
3
- var chunkKM2I6AFP_cjs = require('./chunk-KM2I6AFP.cjs');
4
- var chunk4U6DATGZ_cjs = require('./chunk-4U6DATGZ.cjs');
3
+ var chunkSS3K7OIM_cjs = require('./chunk-SS3K7OIM.cjs');
4
+ var chunkOV5TRZET_cjs = require('./chunk-OV5TRZET.cjs');
5
5
  require('./chunk-OY2YTBMP.cjs');
6
- var chunkJ7FMZK66_cjs = require('./chunk-J7FMZK66.cjs');
6
+ var chunkO4AFPDQ4_cjs = require('./chunk-O4AFPDQ4.cjs');
7
7
  var chunk7L6KWI7S_cjs = require('./chunk-7L6KWI7S.cjs');
8
8
  require('./chunk-USNT2KNT.cjs');
9
9
 
@@ -11,195 +11,195 @@ require('./chunk-USNT2KNT.cjs');
11
11
 
12
12
  Object.defineProperty(exports, "AUTH_PROVIDERS_SETTINGS_GROUP", {
13
13
  enumerable: true,
14
- get: function () { return chunkKM2I6AFP_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
14
+ get: function () { return chunkSS3K7OIM_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
15
15
  });
16
16
  Object.defineProperty(exports, "buildNextAuthOptions", {
17
17
  enumerable: true,
18
- get: function () { return chunkKM2I6AFP_cjs.buildNextAuthOptions; }
18
+ get: function () { return chunkSS3K7OIM_cjs.buildNextAuthOptions; }
19
19
  });
20
20
  Object.defineProperty(exports, "buildStorefrontNextAuthOptions", {
21
21
  enumerable: true,
22
- get: function () { return chunkKM2I6AFP_cjs.buildStorefrontNextAuthOptions; }
22
+ get: function () { return chunkSS3K7OIM_cjs.buildStorefrontNextAuthOptions; }
23
23
  });
24
24
  Object.defineProperty(exports, "createCustomerUserFromGoogleOAuth", {
25
25
  enumerable: true,
26
- get: function () { return chunkKM2I6AFP_cjs.createCustomerUserFromGoogleOAuth; }
26
+ get: function () { return chunkSS3K7OIM_cjs.createCustomerUserFromGoogleOAuth; }
27
27
  });
28
28
  Object.defineProperty(exports, "getNextAuthOptions", {
29
29
  enumerable: true,
30
- get: function () { return chunkKM2I6AFP_cjs.getNextAuthOptions; }
30
+ get: function () { return chunkSS3K7OIM_cjs.getNextAuthOptions; }
31
31
  });
32
32
  Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
33
33
  enumerable: true,
34
- get: function () { return chunkKM2I6AFP_cjs.getStorefrontNextAuthOptions; }
34
+ get: function () { return chunkSS3K7OIM_cjs.getStorefrontNextAuthOptions; }
35
35
  });
36
36
  Object.defineProperty(exports, "googleOAuthRedirectUri", {
37
37
  enumerable: true,
38
- get: function () { return chunkKM2I6AFP_cjs.googleOAuthRedirectUri; }
38
+ get: function () { return chunkSS3K7OIM_cjs.googleOAuthRedirectUri; }
39
39
  });
40
40
  Object.defineProperty(exports, "isGoogleAuthPubliclyEnabled", {
41
41
  enumerable: true,
42
- get: function () { return chunkKM2I6AFP_cjs.isGoogleAuthPubliclyEnabled; }
42
+ get: function () { return chunkSS3K7OIM_cjs.isGoogleAuthPubliclyEnabled; }
43
43
  });
44
44
  Object.defineProperty(exports, "resolveGoogleAuthConfig", {
45
45
  enumerable: true,
46
- get: function () { return chunkKM2I6AFP_cjs.resolveGoogleAuthConfig; }
46
+ get: function () { return chunkSS3K7OIM_cjs.resolveGoogleAuthConfig; }
47
47
  });
48
48
  Object.defineProperty(exports, "seedAdministratorPermissions", {
49
49
  enumerable: true,
50
- get: function () { return chunkKM2I6AFP_cjs.seedAdministratorPermissions; }
50
+ get: function () { return chunkSS3K7OIM_cjs.seedAdministratorPermissions; }
51
51
  });
52
52
  Object.defineProperty(exports, "OPEN_ENDPOINTS", {
53
53
  enumerable: true,
54
- get: function () { return chunk4U6DATGZ_cjs.OPEN_ENDPOINTS; }
54
+ get: function () { return chunkOV5TRZET_cjs.OPEN_ENDPOINTS; }
55
55
  });
56
56
  Object.defineProperty(exports, "PERMISSION_REQUIRED_ENDPOINTS", {
57
57
  enumerable: true,
58
- get: function () { return chunk4U6DATGZ_cjs.PERMISSION_REQUIRED_ENDPOINTS; }
58
+ get: function () { return chunkOV5TRZET_cjs.PERMISSION_REQUIRED_ENDPOINTS; }
59
59
  });
60
60
  Object.defineProperty(exports, "RBAC_ADMIN_ONLY_ENTITIES", {
61
61
  enumerable: true,
62
- get: function () { return chunk4U6DATGZ_cjs.RBAC_ADMIN_ONLY_ENTITIES; }
62
+ get: function () { return chunkOV5TRZET_cjs.RBAC_ADMIN_ONLY_ENTITIES; }
63
63
  });
64
64
  Object.defineProperty(exports, "canManageRoles", {
65
65
  enumerable: true,
66
- get: function () { return chunk4U6DATGZ_cjs.canManageRoles; }
66
+ get: function () { return chunkOV5TRZET_cjs.canManageRoles; }
67
67
  });
68
68
  Object.defineProperty(exports, "createAuthHelpers", {
69
69
  enumerable: true,
70
- get: function () { return chunk4U6DATGZ_cjs.createAuthHelpers; }
70
+ get: function () { return chunkOV5TRZET_cjs.createAuthHelpers; }
71
71
  });
72
72
  Object.defineProperty(exports, "createCmsAuthBundle", {
73
73
  enumerable: true,
74
- get: function () { return chunk4U6DATGZ_cjs.createCmsAuthBundle; }
74
+ get: function () { return chunkOV5TRZET_cjs.createCmsAuthBundle; }
75
75
  });
76
76
  Object.defineProperty(exports, "getRequiredPermission", {
77
77
  enumerable: true,
78
- get: function () { return chunk4U6DATGZ_cjs.getRequiredPermission; }
78
+ get: function () { return chunkOV5TRZET_cjs.getRequiredPermission; }
79
79
  });
80
80
  Object.defineProperty(exports, "isOpenEndpoint", {
81
81
  enumerable: true,
82
- get: function () { return chunk4U6DATGZ_cjs.isOpenEndpoint; }
82
+ get: function () { return chunkOV5TRZET_cjs.isOpenEndpoint; }
83
83
  });
84
84
  Object.defineProperty(exports, "isPublicMethod", {
85
85
  enumerable: true,
86
- get: function () { return chunk4U6DATGZ_cjs.isPublicMethod; }
86
+ get: function () { return chunkOV5TRZET_cjs.isPublicMethod; }
87
87
  });
88
88
  Object.defineProperty(exports, "sessionHasEntityAccess", {
89
89
  enumerable: true,
90
- get: function () { return chunk4U6DATGZ_cjs.sessionHasEntityAccess; }
90
+ get: function () { return chunkOV5TRZET_cjs.sessionHasEntityAccess; }
91
91
  });
92
92
  Object.defineProperty(exports, "ADMIN_GROUP_NAME", {
93
93
  enumerable: true,
94
- get: function () { return chunkJ7FMZK66_cjs.ADMIN_GROUP_NAME; }
94
+ get: function () { return chunkO4AFPDQ4_cjs.ADMIN_GROUP_NAME; }
95
95
  });
96
96
  Object.defineProperty(exports, "SUPER_ADMIN_GROUP_ID", {
97
97
  enumerable: true,
98
- get: function () { return chunkJ7FMZK66_cjs.SUPER_ADMIN_GROUP_ID; }
98
+ get: function () { return chunkO4AFPDQ4_cjs.SUPER_ADMIN_GROUP_ID; }
99
99
  });
100
100
  Object.defineProperty(exports, "VENDOR_ADMIN_GROUP_ID", {
101
101
  enumerable: true,
102
- get: function () { return chunkJ7FMZK66_cjs.VENDOR_ADMIN_GROUP_ID; }
102
+ get: function () { return chunkO4AFPDQ4_cjs.VENDOR_ADMIN_GROUP_ID; }
103
103
  });
104
104
  Object.defineProperty(exports, "VENDOR_GROUP_NAME", {
105
105
  enumerable: true,
106
- get: function () { return chunkJ7FMZK66_cjs.VENDOR_GROUP_NAME; }
106
+ get: function () { return chunkO4AFPDQ4_cjs.VENDOR_GROUP_NAME; }
107
107
  });
108
108
  Object.defineProperty(exports, "VENDOR_OWNER_GROUP_NAME", {
109
109
  enumerable: true,
110
- get: function () { return chunkJ7FMZK66_cjs.VENDOR_OWNER_GROUP_NAME; }
110
+ get: function () { return chunkO4AFPDQ4_cjs.VENDOR_OWNER_GROUP_NAME; }
111
111
  });
112
112
  Object.defineProperty(exports, "VENDOR_SCOPED_STORE_ENTITIES", {
113
113
  enumerable: true,
114
- get: function () { return chunkJ7FMZK66_cjs.VENDOR_SCOPED_STORE_ENTITIES; }
114
+ get: function () { return chunkO4AFPDQ4_cjs.VENDOR_SCOPED_STORE_ENTITIES; }
115
115
  });
116
116
  Object.defineProperty(exports, "VENDOR_STORE_RBAC_ENTITIES", {
117
117
  enumerable: true,
118
- get: function () { return chunkJ7FMZK66_cjs.VENDOR_STORE_RBAC_ENTITIES; }
118
+ get: function () { return chunkO4AFPDQ4_cjs.VENDOR_STORE_RBAC_ENTITIES; }
119
119
  });
120
120
  Object.defineProperty(exports, "canManageVendorRoles", {
121
121
  enumerable: true,
122
- get: function () { return chunkJ7FMZK66_cjs.canManageVendorRoles; }
122
+ get: function () { return chunkO4AFPDQ4_cjs.canManageVendorRoles; }
123
123
  });
124
124
  Object.defineProperty(exports, "canManageVendorTeam", {
125
125
  enumerable: true,
126
- get: function () { return chunkJ7FMZK66_cjs.canManageVendorTeam; }
126
+ get: function () { return chunkO4AFPDQ4_cjs.canManageVendorTeam; }
127
127
  });
128
128
  Object.defineProperty(exports, "canOnboardVendors", {
129
129
  enumerable: true,
130
- get: function () { return chunkJ7FMZK66_cjs.canOnboardVendors; }
130
+ get: function () { return chunkO4AFPDQ4_cjs.canOnboardVendors; }
131
131
  });
132
132
  Object.defineProperty(exports, "explainSessionEntityAccess", {
133
133
  enumerable: true,
134
- get: function () { return chunkJ7FMZK66_cjs.explainSessionEntityAccess; }
134
+ get: function () { return chunkO4AFPDQ4_cjs.explainSessionEntityAccess; }
135
135
  });
136
136
  Object.defineProperty(exports, "getPermissionableEntityKeys", {
137
137
  enumerable: true,
138
- get: function () { return chunkJ7FMZK66_cjs.getPermissionableEntityKeys; }
138
+ get: function () { return chunkO4AFPDQ4_cjs.getPermissionableEntityKeys; }
139
139
  });
140
140
  Object.defineProperty(exports, "hasEntityPermission", {
141
141
  enumerable: true,
142
- get: function () { return chunkJ7FMZK66_cjs.hasEntityPermission; }
142
+ get: function () { return chunkO4AFPDQ4_cjs.hasEntityPermission; }
143
143
  });
144
144
  Object.defineProperty(exports, "isPlatformAdministrator", {
145
145
  enumerable: true,
146
- get: function () { return chunkJ7FMZK66_cjs.isPlatformAdministrator; }
146
+ get: function () { return chunkO4AFPDQ4_cjs.isPlatformAdministrator; }
147
147
  });
148
148
  Object.defineProperty(exports, "isRbacDebugEnabled", {
149
149
  enumerable: true,
150
- get: function () { return chunkJ7FMZK66_cjs.isRbacDebugEnabled; }
150
+ get: function () { return chunkO4AFPDQ4_cjs.isRbacDebugEnabled; }
151
151
  });
152
152
  Object.defineProperty(exports, "isSuperAdmin", {
153
153
  enumerable: true,
154
- get: function () { return chunkJ7FMZK66_cjs.isSuperAdmin; }
154
+ get: function () { return chunkO4AFPDQ4_cjs.isSuperAdmin; }
155
155
  });
156
156
  Object.defineProperty(exports, "isSuperAdminGroupName", {
157
157
  enumerable: true,
158
- get: function () { return chunkJ7FMZK66_cjs.isSuperAdminGroupName; }
158
+ get: function () { return chunkO4AFPDQ4_cjs.isSuperAdminGroupName; }
159
159
  });
160
160
  Object.defineProperty(exports, "isVendorAdmin", {
161
161
  enumerable: true,
162
- get: function () { return chunkJ7FMZK66_cjs.isVendorAdmin; }
162
+ get: function () { return chunkO4AFPDQ4_cjs.isVendorAdmin; }
163
163
  });
164
164
  Object.defineProperty(exports, "isVendorGroupName", {
165
165
  enumerable: true,
166
- get: function () { return chunkJ7FMZK66_cjs.isVendorGroupName; }
166
+ get: function () { return chunkO4AFPDQ4_cjs.isVendorGroupName; }
167
167
  });
168
168
  Object.defineProperty(exports, "isVendorOwner", {
169
169
  enumerable: true,
170
- get: function () { return chunkJ7FMZK66_cjs.isVendorOwner; }
170
+ get: function () { return chunkO4AFPDQ4_cjs.isVendorOwner; }
171
171
  });
172
172
  Object.defineProperty(exports, "isVendorPortalUser", {
173
173
  enumerable: true,
174
- get: function () { return chunkJ7FMZK66_cjs.isVendorPortalUser; }
174
+ get: function () { return chunkO4AFPDQ4_cjs.isVendorPortalUser; }
175
175
  });
176
176
  Object.defineProperty(exports, "isVendorStaff", {
177
177
  enumerable: true,
178
- get: function () { return chunkJ7FMZK66_cjs.isVendorStaff; }
178
+ get: function () { return chunkO4AFPDQ4_cjs.isVendorStaff; }
179
179
  });
180
180
  Object.defineProperty(exports, "logEntityAccessDecision", {
181
181
  enumerable: true,
182
- get: function () { return chunkJ7FMZK66_cjs.logEntityAccessDecision; }
182
+ get: function () { return chunkO4AFPDQ4_cjs.logEntityAccessDecision; }
183
183
  });
184
184
  Object.defineProperty(exports, "logRbac", {
185
185
  enumerable: true,
186
- get: function () { return chunkJ7FMZK66_cjs.logRbac; }
186
+ get: function () { return chunkO4AFPDQ4_cjs.logRbac; }
187
187
  });
188
188
  Object.defineProperty(exports, "permissionRowsToRecord", {
189
189
  enumerable: true,
190
- get: function () { return chunkJ7FMZK66_cjs.permissionRowsToRecord; }
190
+ get: function () { return chunkO4AFPDQ4_cjs.permissionRowsToRecord; }
191
191
  });
192
192
  Object.defineProperty(exports, "resolveVendorScopeFromSessionUser", {
193
193
  enumerable: true,
194
- get: function () { return chunkJ7FMZK66_cjs.resolveVendorScopeFromSessionUser; }
194
+ get: function () { return chunkO4AFPDQ4_cjs.resolveVendorScopeFromSessionUser; }
195
195
  });
196
196
  Object.defineProperty(exports, "summarizeEntityPerms", {
197
197
  enumerable: true,
198
- get: function () { return chunkJ7FMZK66_cjs.summarizeEntityPerms; }
198
+ get: function () { return chunkO4AFPDQ4_cjs.summarizeEntityPerms; }
199
199
  });
200
200
  Object.defineProperty(exports, "vendorPortalFlagsFromUser", {
201
201
  enumerable: true,
202
- get: function () { return chunkJ7FMZK66_cjs.vendorPortalFlagsFromUser; }
202
+ get: function () { return chunkO4AFPDQ4_cjs.vendorPortalFlagsFromUser; }
203
203
  });
204
204
  Object.defineProperty(exports, "createCmsMiddleware", {
205
205
  enumerable: true,
package/dist/auth.js CHANGED
@@ -1,6 +1,6 @@
1
- export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-6DBDJ4VD.js';
2
- export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-NR44CK5E.js';
1
+ export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-2ISSXYBZ.js';
2
+ export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-ZY64VJMS.js';
3
3
  import './chunk-DBPSJYLZ.js';
4
- export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-MVHDC3XF.js';
4
+ export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-5NOZSG6J.js';
5
5
  export { createCmsMiddleware, defaultPublicApiMethods, isAuthDebugClientEnabled, isAuthDebugEnabled, logAuth, logAuthClient, nextAuthCookieDebugInfo, summarizeSessionUserForLog } from './chunk-WUQAOTHA.js';
6
6
  import './chunk-SHUYVCID.js';
@@ -1,6 +1,6 @@
1
- import { linkUnclaimedContactToUser, ensureCustomerForUser } from './chunk-NR44CK5E.js';
1
+ import { linkUnclaimedContactToUser, ensureCustomerForUser } from './chunk-ZY64VJMS.js';
2
2
  import { retireSoftDeletedUniqueValue } from './chunk-DBPSJYLZ.js';
3
- import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-MVHDC3XF.js';
3
+ import { getPermissionableEntityKeys, ADMIN_GROUP_NAME, isSuperAdmin, permissionRowsToRecord, vendorPortalFlagsFromUser } from './chunk-5NOZSG6J.js';
4
4
  import { logAuth, nextAuthCookieDebugInfo, summarizeSessionUserForLog } from './chunk-WUQAOTHA.js';
5
5
  import { __name } from './chunk-SHUYVCID.js';
6
6
  import _CredentialsProvider from 'next-auth/providers/credentials';
@@ -190,23 +190,34 @@ function canOnboardVendors(user) {
190
190
  }
191
191
  __name(canOnboardVendors, "canOnboardVendors");
192
192
  function resolveVendorScopeFromSessionUser(user) {
193
- if (!user?.email) return {
194
- type: "deny"
195
- };
196
- if (isPlatformAdministrator(user)) return {
197
- type: "all"
198
- };
193
+ if (!user?.email) {
194
+ console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] No user email -> deny");
195
+ return {
196
+ type: "deny"
197
+ };
198
+ }
199
+ if (isPlatformAdministrator(user)) {
200
+ console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User is Platform Admin -> all");
201
+ return {
202
+ type: "all"
203
+ };
204
+ }
199
205
  const vendorIds = user.vendorIds ?? [];
200
- if (vendorIds.length === 0) return {
201
- type: "deny"
202
- };
206
+ if (vendorIds.length === 0) {
207
+ console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User has 0 vendorIds -> deny. User:", user.email);
208
+ return {
209
+ type: "deny"
210
+ };
211
+ }
203
212
  const preferred = user.activeVendorId ?? vendorIds[0];
204
213
  const vendorId = vendorIds.includes(preferred) ? preferred : vendorIds[0];
205
- return {
214
+ const res = {
206
215
  type: "vendor",
207
216
  vendorId,
208
217
  vendorIds
209
218
  };
219
+ console.log("[ORDERS-DEBUG][RESOLVE_VENDOR_SCOPE] User:", user.email, "-> scope:", res);
220
+ return res;
210
221
  }
211
222
  __name(resolveVendorScopeFromSessionUser, "resolveVendorScopeFromSessionUser");
212
223
  function vendorPortalFlagsFromUser(input) {
@@ -612,7 +623,7 @@ async function logEntityAccessDecision(dataSource, context, user, entity, action
612
623
  const id = Number(user.id);
613
624
  if (Number.isFinite(id)) {
614
625
  try {
615
- const { loadDbPermissionsForUser } = await import('./rbac-debug-db-5R6XFPSV.js');
626
+ const { loadDbPermissionsForUser } = await import('./rbac-debug-db-DFZWZ6GV.js');
616
627
  dbPermissions = await loadDbPermissionsForUser(dataSource, id);
617
628
  } catch (e) {
618
629
  dbPermissions = {