@infuro/cms-core 1.0.72 → 1.0.74

package/dist/api.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkSRGDHASW_cjs = require('./chunk-SRGDHASW.cjs');
-require('./chunk-TTOEY7AH.cjs');
+var chunkH4UIIBFD_cjs = require('./chunk-H4UIIBFD.cjs');
+require('./chunk-2JV4EDY3.cjs');
 require('./chunk-KB7EBYPR.cjs');
 require('./chunk-KJB5LBFQ.cjs');
 require('./chunk-K742UE6S.cjs');
@@ -11,10 +11,10 @@ require('./chunk-JRW3GQD4.cjs');
 require('./chunk-Y54WDY2O.cjs');
 require('./chunk-PRXVSSIF.cjs');
 require('./chunk-QN6PZLAP.cjs');
-require('./chunk-4MNVIGVJ.cjs');
-require('./chunk-BQQMTQ4C.cjs');
+require('./chunk-D3SR6CYU.cjs');
+require('./chunk-25T6HP5T.cjs');
 require('./chunk-RQCXRCYM.cjs');
-require('./chunk-2JHGIWH7.cjs');
+require('./chunk-X5ILLSTD.cjs');
 require('./chunk-E62LKM6Z.cjs');
 require('./chunk-47G65M5Q.cjs');
 require('./chunk-EYUBL7YH.cjs');
@@ -29,131 +29,131 @@ require('./chunk-XHPRD45G.cjs');
 
 Object.defineProperty(exports, "autoExpireOrderIfPaymentTimeExceeded", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.autoExpireOrderIfPaymentTimeExceeded; }
+  get: function () { return chunkH4UIIBFD_cjs.autoExpireOrderIfPaymentTimeExceeded; }
 });
 Object.defineProperty(exports, "createAnalyticsHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createAnalyticsHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createAnalyticsHandlers; }
 });
 Object.defineProperty(exports, "createBlogBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createBlogBySlugHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createBlogBySlugHandler; }
 });
 Object.defineProperty(exports, "createChangePasswordHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createChangePasswordHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createChangePasswordHandler; }
 });
 Object.defineProperty(exports, "createCmsApiHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createCmsApiHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createCmsApiHandler; }
 });
 Object.defineProperty(exports, "createCrudByIdHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createCrudByIdHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createCrudByIdHandler; }
 });
 Object.defineProperty(exports, "createCrudHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createCrudHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createCrudHandler; }
 });
 Object.defineProperty(exports, "createDashboardStatsHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createDashboardStatsHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createDashboardStatsHandler; }
 });
 Object.defineProperty(exports, "createEcommerceAnalyticsHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createEcommerceAnalyticsHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createEcommerceAnalyticsHandler; }
 });
 Object.defineProperty(exports, "createForgotPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createForgotPasswordHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createForgotPasswordHandler; }
 });
 Object.defineProperty(exports, "createFormBySlugHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createFormBySlugHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createFormBySlugHandler; }
 });
 Object.defineProperty(exports, "createInviteAcceptHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createInviteAcceptHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createInviteAcceptHandler; }
 });
 Object.defineProperty(exports, "createJobScheduleHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createJobScheduleHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createJobScheduleHandlers; }
 });
 Object.defineProperty(exports, "createLlmAgentKnowledgeHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createLlmAgentKnowledgeHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createLlmAgentKnowledgeHandlers; }
 });
 Object.defineProperty(exports, "createMediaZipExtractHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createMediaZipExtractHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createMediaZipExtractHandler; }
 });
 Object.defineProperty(exports, "createSetPasswordHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createSetPasswordHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createSetPasswordHandler; }
 });
 Object.defineProperty(exports, "createSettingsApiHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createSettingsApiHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createSettingsApiHandlers; }
 });
 Object.defineProperty(exports, "createStorefrontApiHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createStorefrontApiHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createStorefrontApiHandler; }
 });
 Object.defineProperty(exports, "createUploadHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createUploadHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createUploadHandler; }
 });
 Object.defineProperty(exports, "createUserAuthApiRouter", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createUserAuthApiRouter; }
+  get: function () { return chunkH4UIIBFD_cjs.createUserAuthApiRouter; }
 });
 Object.defineProperty(exports, "createUserAvatarHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createUserAvatarHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createUserAvatarHandler; }
 });
 Object.defineProperty(exports, "createUserProfileHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createUserProfileHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createUserProfileHandler; }
 });
 Object.defineProperty(exports, "createUsersApiHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createUsersApiHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createUsersApiHandlers; }
 });
 Object.defineProperty(exports, "createVendorDashboardHandler", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createVendorDashboardHandler; }
+  get: function () { return chunkH4UIIBFD_cjs.createVendorDashboardHandler; }
 });
 Object.defineProperty(exports, "createVendorOnboardHandlers", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.createVendorOnboardHandlers; }
+  get: function () { return chunkH4UIIBFD_cjs.createVendorOnboardHandlers; }
 });
 Object.defineProperty(exports, "getPublicSettingsGroup", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.getPublicSettingsGroup; }
+  get: function () { return chunkH4UIIBFD_cjs.getPublicSettingsGroup; }
 });
 Object.defineProperty(exports, "mergeGuardrailsIntoSystemPrompt", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.mergeGuardrailsIntoSystemPrompt; }
+  get: function () { return chunkH4UIIBFD_cjs.mergeGuardrailsIntoSystemPrompt; }
 });
 Object.defineProperty(exports, "parseLlmAgentValidationRules", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.parseLlmAgentValidationRules; }
+  get: function () { return chunkH4UIIBFD_cjs.parseLlmAgentValidationRules; }
 });
 Object.defineProperty(exports, "simpleDecrypt", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.simpleDecrypt; }
+  get: function () { return chunkH4UIIBFD_cjs.simpleDecrypt; }
 });
 Object.defineProperty(exports, "simpleEncrypt", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.simpleEncrypt; }
+  get: function () { return chunkH4UIIBFD_cjs.simpleEncrypt; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstAgentRules", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.validateUserMessageAgainstAgentRules; }
+  get: function () { return chunkH4UIIBFD_cjs.validateUserMessageAgainstAgentRules; }
 });
 Object.defineProperty(exports, "validateUserMessageAgainstStructuredRules", {
   enumerable: true,
-  get: function () { return chunkSRGDHASW_cjs.validateUserMessageAgainstStructuredRules; }
+  get: function () { return chunkH4UIIBFD_cjs.validateUserMessageAgainstStructuredRules; }
 });
 Object.defineProperty(exports, "createCmsAuthBundle", {
   enumerable: true,

package/dist/api.d.cts

@@ -25,6 +25,14 @@ interface SessionUser {
     adminAccess?: boolean;
     /** Vendor stores this user can access (from vendor_users). */
     vendorIds?: number[];
+    /** Full list of accessible vendor stores with names & roles */
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     /** Active vendor for scoped CRUD (vendor staff). */
     activeVendorId?: number | null;
     /** @deprecated Prefer isVendorRoleOwner / vendorRoleId. Legacy owner|staff hint. */
@@ -479,10 +487,6 @@ declare function createLlmAgentKnowledgeHandlers(config: LlmAgentKnowledgeApiCon
     unlink(req: Request, slug: string, documentIdStr: string): Promise<Response>;
 } | null;
 
-/**
- * Single CMS API handler: dashboard, analytics, upload, media zip extract, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
- */
-
 /** CMS instance with getPlugin; when provided, analytics and userAuth.sendEmail can be resolved from plugins when not passed. */
 type CmsGetter = () => Promise<{
     getPlugin: (name: string) => unknown;
@@ -546,9 +550,10 @@ interface CmsApiHandlerConfig {
     /** Same as `getSessionUser` (from `createAuthHelpers().getAuthenticatedUser`). */
     getAuthenticatedUser?: () => Promise<SessionUser | null>;
 }
-declare function createCmsApiHandler(config: CmsApiHandlerConfig): {
-    handle(method: string, pathInput: string[], req: Request): Promise<Response>;
+type CmsApiHandler = {
+    handle: (method: string, pathInput: string[], req: Request) => Promise<Response>;
 };
+declare function createCmsApiHandler(config: CmsApiHandlerConfig): CmsApiHandler;
 
 type VendorOwnerActivation = 'invite' | 'password' | 'membership';
 interface VendorOnboardHandlersConfig {
@@ -574,6 +579,8 @@ declare function createVendorOnboardHandlers(config: VendorOnboardHandlersConfig
     resendInvite(req: Request, vendorIdStr: string): Promise<Response>;
     /** POST /api/admin/vendor/switch — set active vendor in session (JWT update via client) */
     switchVendor(req: Request): Promise<Response>;
+    /** GET /api/admin/vendor/context — get user's vendor stores, roles and active vendor */
+    getVendorContext(req?: Request): Promise<Response>;
     /** GET /api/admin/vendor/team */
     listTeam(): Promise<Response>;
     /** POST /api/admin/vendor/team — invite staff (set-password for new; accept-only for existing vendor people) */

package/dist/api.d.ts

@@ -25,6 +25,14 @@ interface SessionUser {
     adminAccess?: boolean;
     /** Vendor stores this user can access (from vendor_users). */
     vendorIds?: number[];
+    /** Full list of accessible vendor stores with names & roles */
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     /** Active vendor for scoped CRUD (vendor staff). */
     activeVendorId?: number | null;
     /** @deprecated Prefer isVendorRoleOwner / vendorRoleId. Legacy owner|staff hint. */
@@ -479,10 +487,6 @@ declare function createLlmAgentKnowledgeHandlers(config: LlmAgentKnowledgeApiCon
     unlink(req: Request, slug: string, documentIdStr: string): Promise<Response>;
 } | null;
 
-/**
- * Single CMS API handler: dashboard, analytics, upload, media zip extract, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
- */
-
 /** CMS instance with getPlugin; when provided, analytics and userAuth.sendEmail can be resolved from plugins when not passed. */
 type CmsGetter = () => Promise<{
     getPlugin: (name: string) => unknown;
@@ -546,9 +550,10 @@ interface CmsApiHandlerConfig {
     /** Same as `getSessionUser` (from `createAuthHelpers().getAuthenticatedUser`). */
     getAuthenticatedUser?: () => Promise<SessionUser | null>;
 }
-declare function createCmsApiHandler(config: CmsApiHandlerConfig): {
-    handle(method: string, pathInput: string[], req: Request): Promise<Response>;
+type CmsApiHandler = {
+    handle: (method: string, pathInput: string[], req: Request) => Promise<Response>;
 };
+declare function createCmsApiHandler(config: CmsApiHandlerConfig): CmsApiHandler;
 
 type VendorOwnerActivation = 'invite' | 'password' | 'membership';
 interface VendorOnboardHandlersConfig {
@@ -574,6 +579,8 @@ declare function createVendorOnboardHandlers(config: VendorOnboardHandlersConfig
     resendInvite(req: Request, vendorIdStr: string): Promise<Response>;
     /** POST /api/admin/vendor/switch — set active vendor in session (JWT update via client) */
     switchVendor(req: Request): Promise<Response>;
+    /** GET /api/admin/vendor/context — get user's vendor stores, roles and active vendor */
+    getVendorContext(req?: Request): Promise<Response>;
     /** GET /api/admin/vendor/team */
     listTeam(): Promise<Response>;
     /** POST /api/admin/vendor/team — invite staff (set-password for new; accept-only for existing vendor people) */

package/dist/api.js

@@ -1,5 +1,5 @@
-export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-43UVXBEH.js';
-import './chunk-3LF4RYAJ.js';
+export { autoExpireOrderIfPaymentTimeExceeded, createAnalyticsHandlers, createBlogBySlugHandler, createChangePasswordHandler, createCmsApiHandler, createCrudByIdHandler, createCrudHandler, createDashboardStatsHandler, createEcommerceAnalyticsHandler, createForgotPasswordHandler, createFormBySlugHandler, createInviteAcceptHandler, createJobScheduleHandlers, createLlmAgentKnowledgeHandlers, createMediaZipExtractHandler, createSetPasswordHandler, createSettingsApiHandlers, createStorefrontApiHandler, createUploadHandler, createUserAuthApiRouter, createUserAvatarHandler, createUserProfileHandler, createUsersApiHandlers, createVendorDashboardHandler, createVendorOnboardHandlers, getPublicSettingsGroup, mergeGuardrailsIntoSystemPrompt, parseLlmAgentValidationRules, simpleDecrypt, simpleEncrypt, validateUserMessageAgainstAgentRules, validateUserMessageAgainstStructuredRules } from './chunk-OQOO2JMB.js';
+import './chunk-X3IJG25M.js';
 import './chunk-ECUGNV2I.js';
 import './chunk-K6JT7BKY.js';
 import './chunk-W2ZTGLUH.js';
@@ -9,10 +9,10 @@ import './chunk-5NVGWJSY.js';
 import './chunk-2BNVRFUQ.js';
 import './chunk-JYRFSFXH.js';
 import './chunk-CFUSYGSA.js';
-import './chunk-LJ5C4RBF.js';
-import './chunk-PQJIJ4ZX.js';
+import './chunk-6TRH3VY7.js';
+import './chunk-DAUBLBTP.js';
 import './chunk-WQZ4AH2P.js';
-import './chunk-YHVA5NHI.js';
+import './chunk-LUSJITTI.js';
 import './chunk-K6RXCLD5.js';
 import './chunk-5DSY3GQI.js';
 import './chunk-YDMHG6BA.js';

package/dist/auth.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkCKTRA3Q2_cjs = require('./chunk-CKTRA3Q2.cjs');
+var chunkF3FKBNMQ_cjs = require('./chunk-F3FKBNMQ.cjs');
 var chunkFNLF6G2N_cjs = require('./chunk-FNLF6G2N.cjs');
 var chunkLCZZ3S4I_cjs = require('./chunk-LCZZ3S4I.cjs');
 require('./chunk-4WZNRVEZ.cjs');
@@ -11,43 +11,43 @@ require('./chunk-XHPRD45G.cjs');
 
 Object.defineProperty(exports, "AUTH_PROVIDERS_SETTINGS_GROUP", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
+  get: function () { return chunkF3FKBNMQ_cjs.AUTH_PROVIDERS_SETTINGS_GROUP; }
 });
 Object.defineProperty(exports, "buildNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.buildNextAuthOptions; }
+  get: function () { return chunkF3FKBNMQ_cjs.buildNextAuthOptions; }
 });
 Object.defineProperty(exports, "buildStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.buildStorefrontNextAuthOptions; }
+  get: function () { return chunkF3FKBNMQ_cjs.buildStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "createCustomerUserFromGoogleOAuth", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.createCustomerUserFromGoogleOAuth; }
+  get: function () { return chunkF3FKBNMQ_cjs.createCustomerUserFromGoogleOAuth; }
 });
 Object.defineProperty(exports, "getNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.getNextAuthOptions; }
+  get: function () { return chunkF3FKBNMQ_cjs.getNextAuthOptions; }
 });
 Object.defineProperty(exports, "getStorefrontNextAuthOptions", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.getStorefrontNextAuthOptions; }
+  get: function () { return chunkF3FKBNMQ_cjs.getStorefrontNextAuthOptions; }
 });
 Object.defineProperty(exports, "googleOAuthRedirectUri", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.googleOAuthRedirectUri; }
+  get: function () { return chunkF3FKBNMQ_cjs.googleOAuthRedirectUri; }
 });
 Object.defineProperty(exports, "isGoogleAuthPubliclyEnabled", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.isGoogleAuthPubliclyEnabled; }
+  get: function () { return chunkF3FKBNMQ_cjs.isGoogleAuthPubliclyEnabled; }
 });
 Object.defineProperty(exports, "resolveGoogleAuthConfig", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.resolveGoogleAuthConfig; }
+  get: function () { return chunkF3FKBNMQ_cjs.resolveGoogleAuthConfig; }
 });
 Object.defineProperty(exports, "seedAdministratorPermissions", {
   enumerable: true,
-  get: function () { return chunkCKTRA3Q2_cjs.seedAdministratorPermissions; }
+  get: function () { return chunkF3FKBNMQ_cjs.seedAdministratorPermissions; }
 });
 Object.defineProperty(exports, "OPEN_ENDPOINTS", {
   enumerable: true,

package/dist/auth.d.cts

@@ -43,6 +43,14 @@ interface SessionUser {
     adminAccess?: boolean;
     /** Vendor stores this user can access (from vendor_users). */
     vendorIds?: number[];
+    /** Full list of accessible vendor stores with names & roles */
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     /** Active vendor for scoped CRUD (vendor staff). */
     activeVendorId?: number | null;
     /** @deprecated Prefer isVendorRoleOwner / vendorRoleId. Legacy owner|staff hint. */
@@ -292,6 +300,13 @@ interface NextAuthUser {
         }>;
     };
     vendorIds?: number[];
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     activeVendorId?: number | null;
     vendorRole?: 'owner' | 'staff' | null;
     vendorRoleId?: number | null;

package/dist/auth.d.ts

@@ -43,6 +43,14 @@ interface SessionUser {
     adminAccess?: boolean;
     /** Vendor stores this user can access (from vendor_users). */
     vendorIds?: number[];
+    /** Full list of accessible vendor stores with names & roles */
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     /** Active vendor for scoped CRUD (vendor staff). */
     activeVendorId?: number | null;
     /** @deprecated Prefer isVendorRoleOwner / vendorRoleId. Legacy owner|staff hint. */
@@ -292,6 +300,13 @@ interface NextAuthUser {
         }>;
     };
     vendorIds?: number[];
+    vendorStores?: Array<{
+        id: number;
+        name: string;
+        slug?: string;
+        roleName?: string;
+        isOwner?: boolean;
+    }>;
     activeVendorId?: number | null;
     vendorRole?: 'owner' | 'staff' | null;
     vendorRoleId?: number | null;

package/dist/auth.js

@@ -1,4 +1,4 @@
-export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-SCE2GIKH.js';
+export { AUTH_PROVIDERS_SETTINGS_GROUP, buildNextAuthOptions, buildStorefrontNextAuthOptions, createCustomerUserFromGoogleOAuth, getNextAuthOptions, getStorefrontNextAuthOptions, googleOAuthRedirectUri, isGoogleAuthPubliclyEnabled, resolveGoogleAuthConfig, seedAdministratorPermissions } from './chunk-DEGN4BTH.js';
 export { OPEN_ENDPOINTS, PERMISSION_REQUIRED_ENDPOINTS, RBAC_ADMIN_ONLY_ENTITIES, canManageRoles, createAuthHelpers, createCmsAuthBundle, getRequiredPermission, isOpenEndpoint, isPublicMethod, sessionHasEntityAccess } from './chunk-NQF6H656.js';
 export { ADMIN_GROUP_NAME, SUPER_ADMIN_GROUP_ID, VENDOR_ADMIN_GROUP_ID, VENDOR_GROUP_NAME, VENDOR_OWNER_GROUP_NAME, VENDOR_SCOPED_STORE_ENTITIES, VENDOR_STORE_RBAC_ENTITIES, canManageVendorRoles, canManageVendorTeam, canOnboardVendors, explainSessionEntityAccess, getPermissionableEntityKeys, hasEntityPermission, isPlatformAdministrator, isRbacDebugEnabled, isSuperAdmin, isSuperAdminGroupName, isVendorAdmin, isVendorGroupName, isVendorOwner, isVendorPortalUser, isVendorStaff, logEntityAccessDecision, logRbac, permissionRowsToRecord, resolveVendorScopeFromSessionUser, summarizeEntityPerms, vendorPortalFlagsFromUser } from './chunk-CJY2HUJC.js';
 import './chunk-BK5XW5XH.js';

package/dist/{chunk-BQQMTQ4C.cjs → chunk-25T6HP5T.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkRQCXRCYM_cjs = require('./chunk-RQCXRCYM.cjs');
-var chunk2JHGIWH7_cjs = require('./chunk-2JHGIWH7.cjs');
+var chunkX5ILLSTD_cjs = require('./chunk-X5ILLSTD.cjs');
 var chunkE62LKM6Z_cjs = require('./chunk-E62LKM6Z.cjs');
 var chunk47G65M5Q_cjs = require('./chunk-47G65M5Q.cjs');
 var chunkEYUBL7YH_cjs = require('./chunk-EYUBL7YH.cjs');
@@ -277,7 +277,7 @@ async function buildLocalInvoicePdfForOrder(ds, entityMap, orderId) {
   const baseUrl = process.env.NEXTAUTH_URL || process.env.PUBLIC_APP_URL || "";
   const qrData = qrToken ? baseUrl ? `${baseUrl.replace(/\/$/, "")}/track/${qrToken}` : `/track/${qrToken}` : String(o.orderNumber || orderId);
   const includeQrCode = store.invoice_include_qr === "true" || store.invoiceIncludeQr === "true";
-  const bytes = await chunk2JHGIWH7_cjs.generateLocalInvoicePdf({
+  const bytes = await chunkX5ILLSTD_cjs.generateLocalInvoicePdf({
     templateId: chunkE62LKM6Z_cjs.normalizeInvoiceTemplateId(store.invoiceTemplate),
     orderNumber: String(o.orderNumber || orderId),
     orderDate: o.createdAt || /* @__PURE__ */ new Date(),

package/dist/{chunk-TTOEY7AH.cjs → chunk-2JV4EDY3.cjs}

@@ -4,7 +4,7 @@ var chunkKJB5LBFQ_cjs = require('./chunk-KJB5LBFQ.cjs');
 var chunkK742UE6S_cjs = require('./chunk-K742UE6S.cjs');
 var chunkCIZZX57T_cjs = require('./chunk-CIZZX57T.cjs');
 var chunkQN6PZLAP_cjs = require('./chunk-QN6PZLAP.cjs');
-var chunk4MNVIGVJ_cjs = require('./chunk-4MNVIGVJ.cjs');
+var chunkD3SR6CYU_cjs = require('./chunk-D3SR6CYU.cjs');
 var chunkEYUBL7YH_cjs = require('./chunk-EYUBL7YH.cjs');
 var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 var crypto = require('crypto');
@@ -1062,7 +1062,7 @@ async function sendChatLeadEmail(cms, emailSettings, brandingSettings, input) {
   };
   let anySent = false;
   for (const to of recipients) {
-    await chunk4MNVIGVJ_cjs.queueEmail(cms, {
+    await chunkD3SR6CYU_cjs.queueEmail(cms, {
       to,
       templateName: "chatLead",
       ctx
@@ -2091,7 +2091,7 @@ async function sendEmailForTrigger(triggerKey, orderId, audienceType, variables,
     companyDetails
   });
   const cms = await getCms();
-  await chunk4MNVIGVJ_cjs.queueEmail(cms, {
+  await chunkD3SR6CYU_cjs.queueEmail(cms, {
     to: contactEmail,
     subject,
     html,

package/dist/{chunk-LJ5C4RBF.js → chunk-6TRH3VY7.js}

@@ -1,4 +1,4 @@
-import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-PQJIJ4ZX.js';
+import { isOrderEligibleForInvoiceEmail, resolveOrderInvoicePdfBytes } from './chunk-DAUBLBTP.js';
 import { __name } from './chunk-5BKT4CS5.js';
 
 // src/plugins/email/email-queue.ts

package/dist/{chunk-4MNVIGVJ.cjs → chunk-D3SR6CYU.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkBQQMTQ4C_cjs = require('./chunk-BQQMTQ4C.cjs');
+var chunk25T6HP5T_cjs = require('./chunk-25T6HP5T.cjs');
 var chunkXHPRD45G_cjs = require('./chunk-XHPRD45G.cjs');
 
 // src/plugins/email/email-queue.ts
@@ -50,13 +50,13 @@ async function resolveInvoiceAttachmentForJob(cms, payload, options) {
       invoiceAttached: false
     };
     const o = order;
-    if (!chunkBQQMTQ4C_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
+    if (!chunk25T6HP5T_cjs.isOrderEligibleForInvoiceEmail(o.status, o.orderKind)) {
       return {
         attachments: payload.attachments,
         invoiceAttached: false
       };
     }
-    const resolved = await chunkBQQMTQ4C_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
+    const resolved = await chunk25T6HP5T_cjs.resolveOrderInvoicePdfBytes(cms, dataSource, entityMap, payload.orderId);
     if ("error" in resolved) {
       console.warn("[email] order invoice attach failed", {
         orderId: payload.orderId,

package/dist/{chunk-PQJIJ4ZX.js → chunk-DAUBLBTP.js}

@@ -1,5 +1,5 @@
 import { isErpIntegrationEnabled } from './chunk-WQZ4AH2P.js';
-import { generateLocalInvoicePdf } from './chunk-YHVA5NHI.js';
+import { generateLocalInvoicePdf } from './chunk-LUSJITTI.js';
 import { normalizeInvoiceTemplateId } from './chunk-K6RXCLD5.js';
 import { resolveInvoiceAssetUrl } from './chunk-5DSY3GQI.js';
 import { mergeEmailLayoutCompanyDetails, getCompanyDetailsFromSettings } from './chunk-YDMHG6BA.js';

package/dist/{chunk-SCE2GIKH.js → chunk-DEGN4BTH.js}

@@ -409,6 +409,7 @@ function sessionUserFromNextAuthUser(user) {
     entityPerms,
     adminAccess,
     vendorIds,
+    vendorStores: user.vendorStores ?? [],
     activeVendorId: user.activeVendorId ?? vendorIds[0] ?? null,
     vendorRole,
     vendorRoleId: user.vendorRoleId ?? null,
@@ -735,6 +736,7 @@ function getNextAuthOptions(config) {
           token.entityPerms = u.entityPerms;
           token.adminAccess = u.adminAccess;
           token.vendorIds = u.vendorIds;
+          token.vendorStores = u.vendorStores;
           token.activeVendorId = u.activeVendorId;
           token.vendorRole = u.vendorRole;
           token.vendorRoleId = u.vendorRoleId;
@@ -753,6 +755,12 @@ function getNextAuthOptions(config) {
           if (typeof s.name === "string") t.name = s.name;
           if (typeof s.email === "string") t.email = s.email;
           if (typeof s.activeVendorId === "number") t.activeVendorId = s.activeVendorId;
+          if ("vendorStores" in s) t.vendorStores = s.vendorStores;
+          if ("vendorRole" in s) t.vendorRole = s.vendorRole;
+          if ("vendorRoleId" in s) t.vendorRoleId = s.vendorRoleId;
+          if ("vendorRoleName" in s) t.vendorRoleName = s.vendorRoleName;
+          if ("isVendorRoleOwner" in s) t.isVendorRoleOwner = s.isVendorRoleOwner;
+          if ("vendorEntityPerms" in s) t.vendorEntityPerms = s.vendorEntityPerms;
         }
         return token;
       },
@@ -773,6 +781,7 @@ function getNextAuthOptions(config) {
           session.user.entityPerms = t.entityPerms;
           session.user.adminAccess = t.adminAccess;
           session.user.vendorIds = t.vendorIds;
+          session.user.vendorStores = t.vendorStores;
           session.user.activeVendorId = t.activeVendorId;
           session.user.vendorRole = t.vendorRole;
           session.user.vendorRoleId = t.vendorRoleId;

package/dist/{chunk-CKTRA3Q2.cjs → chunk-F3FKBNMQ.cjs}

@@ -416,6 +416,7 @@ function sessionUserFromNextAuthUser(user) {
     entityPerms,
     adminAccess,
     vendorIds,
+    vendorStores: user.vendorStores ?? [],
     activeVendorId: user.activeVendorId ?? vendorIds[0] ?? null,
     vendorRole,
     vendorRoleId: user.vendorRoleId ?? null,
@@ -742,6 +743,7 @@ function getNextAuthOptions(config) {
           token.entityPerms = u.entityPerms;
           token.adminAccess = u.adminAccess;
           token.vendorIds = u.vendorIds;
+          token.vendorStores = u.vendorStores;
           token.activeVendorId = u.activeVendorId;
           token.vendorRole = u.vendorRole;
           token.vendorRoleId = u.vendorRoleId;
@@ -760,6 +762,12 @@ function getNextAuthOptions(config) {
           if (typeof s.name === "string") t.name = s.name;
           if (typeof s.email === "string") t.email = s.email;
           if (typeof s.activeVendorId === "number") t.activeVendorId = s.activeVendorId;
+          if ("vendorStores" in s) t.vendorStores = s.vendorStores;
+          if ("vendorRole" in s) t.vendorRole = s.vendorRole;
+          if ("vendorRoleId" in s) t.vendorRoleId = s.vendorRoleId;
+          if ("vendorRoleName" in s) t.vendorRoleName = s.vendorRoleName;
+          if ("isVendorRoleOwner" in s) t.isVendorRoleOwner = s.isVendorRoleOwner;
+          if ("vendorEntityPerms" in s) t.vendorEntityPerms = s.vendorEntityPerms;
         }
         return token;
       },
@@ -780,6 +788,7 @@ function getNextAuthOptions(config) {
           session.user.entityPerms = t.entityPerms;
           session.user.adminAccess = t.adminAccess;
           session.user.vendorIds = t.vendorIds;
+          session.user.vendorStores = t.vendorStores;
           session.user.activeVendorId = t.activeVendorId;
           session.user.vendorRole = t.vendorRole;
           session.user.vendorRoleId = t.vendorRoleId;