@litusarchieve18/agricore-utils 1.0.20 → 1.0.21

package/README.md

@@ -183,6 +183,8 @@ Run the publish command:
 Bash
 npm publish --access public
 📝 Version History
+V1.0.20 — add finance access and some top menu section that were missing
+
 V1.0.20 — add inventory access reconcile
  
 V1.0.19 — refactor inventory access in RESOURCE_PATHS 

package/dist/{chunk-XD36URZU.mjs → chunk-DZW2VL6D.mjs}

@@ -345,38 +345,47 @@ var RESOURCE_PATHS = {
   // ── Operations ────────────────────────────────────────────────────────────
   farmManagement: "operations.farmManagement",
   packhouse: "operations.packhouse",
+  accommodation: "operations.accommodation",
   // ── Inventory ────────────────────────────────────────────────────────────
   // === Consumables ===
+  inventory: "inventory",
+  inventoryConsumable: "inventory.consumable",
   inventoryConsumableProduct: "inventory.consumable.product",
   inventoryConsumableStock: "inventory.consumable.stock",
   inventoryConsumableStockEditThreshold: "inventory.consumable.stock.editThreshold",
   inventoryConsumableStockReconcile: "inventory.consumable.stock.reconcile",
   inventoryConsumableStockMovement: "inventory.consumable.stockMovement",
   inventoryConsumableStockMovementTransfer: "inventory.consumable.stockMovement.transfer",
-  inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
+  // inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
   // === Chemicals ===
+  inventoryChemical: "inventory.chemical",
   inventoryChemicalProduct: "inventory.chemical.product",
   inventoryChemicalStock: "inventory.chemical.stock",
   inventoryChemicalStockEditThreshold: "inventory.chemical.stock.editThreshold",
   inventoryChemicalStockReconcile: "inventory.chemical.stock.reconcile",
   inventoryChemicalStockMovement: "inventory.chemical.stockMovement",
   inventoryChemicalStockMovementTransfer: "inventory.chemical.stockMovement.transfer",
-  inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
+  // inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
   // === Maintenance Parts ===
+  inventoryMaintenancePart: "inventory.maintenancePart",
   inventoryMaintenancePartProduct: "inventory.maintenancePart.product",
   inventoryMaintenancePartStock: "inventory.maintenancePart.stock",
   inventoryMaintenancePartStockEditThreshold: "inventory.maintenancePart.stock.editThreshold",
   inventoryMaintenancePartStockReconcile: "inventory.maintenancePart.stock.reconcile",
   inventoryMaintenancePartStockMovement: "inventory.maintenancePart.stockMovement",
   inventoryMaintenancePartStockMovementTransfer: "inventory.maintenancePart.stockMovement.transfer",
-  inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
-  accommodation: "operations.accommodation",
+  // inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
   // ── Equipment & Fleet ──────────────────────────────────────────────────────
   equipPreStart: "equipment.preStart",
   equipMaintenance: "equipment.maintenance",
   equipFuelRegister: "equipment.fuelRegister",
   equipCalibration: "equipment.calibration",
   equipFleet: "equipment.fleetManagement",
+  finance: "finance",
+  financeProductRequisition: "finance.product.requistion",
+  financeDashboard: "finance.dashboard",
+  financeTransaction: "finance.transaction",
+  financeBudgetAllocation: "finance.budgetAllocation",
   // ── Safety, Quality & Compliance ──────────────────────────────────────────
   safetyAuditing: "safety.auditing",
   safetyFood: "safety.foodSafety",
@@ -402,14 +411,20 @@ var RESOURCE_MODULE_MAP = {
   [RESOURCE_PATHS.equipment]: ALL_OPERATIONS,
   [RESOURCE_PATHS.safety]: ALL_OPERATIONS,
   [RESOURCE_PATHS.team]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventory]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.finance]: ALL_OPERATIONS,
   [RESOURCE_PATHS.records]: ALL_OPERATIONS,
   [RESOURCE_PATHS.adminSettings]: ALL_OPERATIONS,
   // ── Inventory ──────────────────────────────────────────────────────
+  [RESOURCE_PATHS.inventoryConsumable]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemical]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalStock]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemicalStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryMaintenancePart]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: ALL_OPERATIONS,
@@ -498,9 +513,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryConsumableStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   // CHEMICALS PERMISSIONS
   [RESOURCE_PATHS.inventoryChemicalProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
@@ -516,9 +531,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryChemicalStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
@@ -530,11 +545,24 @@ var RESOURCE_REQUIREMENTS = {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: { allowedRoles: EVERYONE },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
+  // [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
+  // ── Finance ────────────────────────────────────────────────────────────────
+  [RESOURCE_PATHS.financeProductRequisition]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
   },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
+  [RESOURCE_PATHS.financeBudgetAllocation]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeDashboard]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeTransaction]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
   },
   // ── Admin Settings ─────────────────────────────────────────────────────────
   [RESOURCE_PATHS.adminUserRoster]: {

package/dist/{constants-C_Pwif6Q.d.mts → constants-BQmsBTQ7.d.mts}

@@ -430,33 +430,39 @@ declare const RESOURCE_PATHS: {
     adminCompanySettings: string;
     farmManagement: string;
     packhouse: string;
+    accommodation: string;
+    inventory: string;
+    inventoryConsumable: string;
     inventoryConsumableProduct: string;
     inventoryConsumableStock: string;
     inventoryConsumableStockEditThreshold: string;
     inventoryConsumableStockReconcile: string;
     inventoryConsumableStockMovement: string;
     inventoryConsumableStockMovementTransfer: string;
-    inventoryConsumableStockMovementPurchase: string;
+    inventoryChemical: string;
     inventoryChemicalProduct: string;
     inventoryChemicalStock: string;
     inventoryChemicalStockEditThreshold: string;
     inventoryChemicalStockReconcile: string;
     inventoryChemicalStockMovement: string;
     inventoryChemicalStockMovementTransfer: string;
-    inventoryChemicalStockMovementPurchase: string;
+    inventoryMaintenancePart: string;
     inventoryMaintenancePartProduct: string;
     inventoryMaintenancePartStock: string;
     inventoryMaintenancePartStockEditThreshold: string;
     inventoryMaintenancePartStockReconcile: string;
     inventoryMaintenancePartStockMovement: string;
     inventoryMaintenancePartStockMovementTransfer: string;
-    inventoryMaintenancePartStockMovementPurchase: string;
-    accommodation: string;
     equipPreStart: string;
     equipMaintenance: string;
     equipFuelRegister: string;
     equipCalibration: string;
     equipFleet: string;
+    finance: string;
+    financeProductRequisition: string;
+    financeDashboard: string;
+    financeTransaction: string;
+    financeBudgetAllocation: string;
     safetyAuditing: string;
     safetyFood: string;
     safetyWhs: string;

package/dist/{constants-C_Pwif6Q.d.ts → constants-BQmsBTQ7.d.ts}

@@ -430,33 +430,39 @@ declare const RESOURCE_PATHS: {
     adminCompanySettings: string;
     farmManagement: string;
     packhouse: string;
+    accommodation: string;
+    inventory: string;
+    inventoryConsumable: string;
     inventoryConsumableProduct: string;
     inventoryConsumableStock: string;
     inventoryConsumableStockEditThreshold: string;
     inventoryConsumableStockReconcile: string;
     inventoryConsumableStockMovement: string;
     inventoryConsumableStockMovementTransfer: string;
-    inventoryConsumableStockMovementPurchase: string;
+    inventoryChemical: string;
     inventoryChemicalProduct: string;
     inventoryChemicalStock: string;
     inventoryChemicalStockEditThreshold: string;
     inventoryChemicalStockReconcile: string;
     inventoryChemicalStockMovement: string;
     inventoryChemicalStockMovementTransfer: string;
-    inventoryChemicalStockMovementPurchase: string;
+    inventoryMaintenancePart: string;
     inventoryMaintenancePartProduct: string;
     inventoryMaintenancePartStock: string;
     inventoryMaintenancePartStockEditThreshold: string;
     inventoryMaintenancePartStockReconcile: string;
     inventoryMaintenancePartStockMovement: string;
     inventoryMaintenancePartStockMovementTransfer: string;
-    inventoryMaintenancePartStockMovementPurchase: string;
-    accommodation: string;
     equipPreStart: string;
     equipMaintenance: string;
     equipFuelRegister: string;
     equipCalibration: string;
     equipFleet: string;
+    finance: string;
+    financeProductRequisition: string;
+    financeDashboard: string;
+    financeTransaction: string;
+    financeBudgetAllocation: string;
     safetyAuditing: string;
     safetyFood: string;
     safetyWhs: string;

package/dist/constants.d.mts

@@ -1 +1 @@
-export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, B as BarcodeNamespace, l as BarcodeType, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, x as CatalogSyncStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a1 as NotificationMode, a2 as OrderStatus, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a8 as ProductUnit, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ah as ResourceRequirement, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, ao as SoilTexture, ap as StockPolicyTier, ar as StoragePhases, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-C_Pwif6Q.mjs';
+export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, B as BarcodeNamespace, l as BarcodeType, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, x as CatalogSyncStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a1 as NotificationMode, a2 as OrderStatus, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a8 as ProductUnit, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ah as ResourceRequirement, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, ao as SoilTexture, ap as StockPolicyTier, ar as StoragePhases, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-BQmsBTQ7.mjs';

package/dist/constants.d.ts

@@ -1 +1 @@
-export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, B as BarcodeNamespace, l as BarcodeType, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, x as CatalogSyncStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a1 as NotificationMode, a2 as OrderStatus, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a8 as ProductUnit, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ah as ResourceRequirement, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, ao as SoilTexture, ap as StockPolicyTier, ar as StoragePhases, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-C_Pwif6Q.js';
+export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, B as BarcodeNamespace, l as BarcodeType, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, x as CatalogSyncStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a1 as NotificationMode, a2 as OrderStatus, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a8 as ProductUnit, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ah as ResourceRequirement, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, ao as SoilTexture, ap as StockPolicyTier, ar as StoragePhases, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-BQmsBTQ7.js';

package/dist/constants.js

@@ -430,38 +430,47 @@ var RESOURCE_PATHS = {
   // ── Operations ────────────────────────────────────────────────────────────
   farmManagement: "operations.farmManagement",
   packhouse: "operations.packhouse",
+  accommodation: "operations.accommodation",
   // ── Inventory ────────────────────────────────────────────────────────────
   // === Consumables ===
+  inventory: "inventory",
+  inventoryConsumable: "inventory.consumable",
   inventoryConsumableProduct: "inventory.consumable.product",
   inventoryConsumableStock: "inventory.consumable.stock",
   inventoryConsumableStockEditThreshold: "inventory.consumable.stock.editThreshold",
   inventoryConsumableStockReconcile: "inventory.consumable.stock.reconcile",
   inventoryConsumableStockMovement: "inventory.consumable.stockMovement",
   inventoryConsumableStockMovementTransfer: "inventory.consumable.stockMovement.transfer",
-  inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
+  // inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
   // === Chemicals ===
+  inventoryChemical: "inventory.chemical",
   inventoryChemicalProduct: "inventory.chemical.product",
   inventoryChemicalStock: "inventory.chemical.stock",
   inventoryChemicalStockEditThreshold: "inventory.chemical.stock.editThreshold",
   inventoryChemicalStockReconcile: "inventory.chemical.stock.reconcile",
   inventoryChemicalStockMovement: "inventory.chemical.stockMovement",
   inventoryChemicalStockMovementTransfer: "inventory.chemical.stockMovement.transfer",
-  inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
+  // inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
   // === Maintenance Parts ===
+  inventoryMaintenancePart: "inventory.maintenancePart",
   inventoryMaintenancePartProduct: "inventory.maintenancePart.product",
   inventoryMaintenancePartStock: "inventory.maintenancePart.stock",
   inventoryMaintenancePartStockEditThreshold: "inventory.maintenancePart.stock.editThreshold",
   inventoryMaintenancePartStockReconcile: "inventory.maintenancePart.stock.reconcile",
   inventoryMaintenancePartStockMovement: "inventory.maintenancePart.stockMovement",
   inventoryMaintenancePartStockMovementTransfer: "inventory.maintenancePart.stockMovement.transfer",
-  inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
-  accommodation: "operations.accommodation",
+  // inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
   // ── Equipment & Fleet ──────────────────────────────────────────────────────
   equipPreStart: "equipment.preStart",
   equipMaintenance: "equipment.maintenance",
   equipFuelRegister: "equipment.fuelRegister",
   equipCalibration: "equipment.calibration",
   equipFleet: "equipment.fleetManagement",
+  finance: "finance",
+  financeProductRequisition: "finance.product.requistion",
+  financeDashboard: "finance.dashboard",
+  financeTransaction: "finance.transaction",
+  financeBudgetAllocation: "finance.budgetAllocation",
   // ── Safety, Quality & Compliance ──────────────────────────────────────────
   safetyAuditing: "safety.auditing",
   safetyFood: "safety.foodSafety",
@@ -487,14 +496,20 @@ var RESOURCE_MODULE_MAP = {
   [RESOURCE_PATHS.equipment]: ALL_OPERATIONS,
   [RESOURCE_PATHS.safety]: ALL_OPERATIONS,
   [RESOURCE_PATHS.team]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventory]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.finance]: ALL_OPERATIONS,
   [RESOURCE_PATHS.records]: ALL_OPERATIONS,
   [RESOURCE_PATHS.adminSettings]: ALL_OPERATIONS,
   // ── Inventory ──────────────────────────────────────────────────────
+  [RESOURCE_PATHS.inventoryConsumable]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemical]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalStock]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemicalStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryMaintenancePart]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: ALL_OPERATIONS,
@@ -583,9 +598,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryConsumableStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   // CHEMICALS PERMISSIONS
   [RESOURCE_PATHS.inventoryChemicalProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
@@ -601,9 +616,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryChemicalStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
@@ -615,11 +630,24 @@ var RESOURCE_REQUIREMENTS = {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: { allowedRoles: EVERYONE },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
+  // [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
+  // ── Finance ────────────────────────────────────────────────────────────────
+  [RESOURCE_PATHS.financeProductRequisition]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
   },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
+  [RESOURCE_PATHS.financeBudgetAllocation]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeDashboard]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeTransaction]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
   },
   // ── Admin Settings ─────────────────────────────────────────────────────────
   [RESOURCE_PATHS.adminUserRoster]: {

package/dist/constants.mjs

@@ -61,7 +61,7 @@ import {
   UserRole,
   VigorRating,
   WaterSource
-} from "./chunk-XD36URZU.mjs";
+} from "./chunk-DZW2VL6D.mjs";
 export {
   ACCESS_RANK,
   ACT,

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { d as AgriCoreSession, aF as UserRoleType, ah as ResourceRequirement, c as AccessLevelType, j as AvailableScope, U as InfrastructureFields, S as FormMeta, av as TabConfig, af as ResolvedError } from './constants-C_Pwif6Q.mjs';
-export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, i as AuthScopeFields, B as BarcodeNamespace, k as BarcodeNamespaceType, l as BarcodeType, m as BarcodeTypeType, n as Base44Id, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, t as CanonicalId, u as CarSupportedEvidenceMimeType, v as CarSupportedSignatureMimeType, w as CarTemplateFileMetadata, x as CatalogSyncStatus, y as CatalogSyncStatusType, z as CompanyConfig, D as CorrectiveActionCompileTaskMetadata, E as CorrectiveActionGenerationSource, F as CorrectiveActionStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, R as FileUploadTaskType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a0 as NormalizedSignatureValue, a1 as NotificationMode, a2 as OrderStatus, a3 as PermissionLevel, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a7 as ProductTypeType, a8 as ProductUnit, a9 as ProductUnitType, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ag as ResourceOverrides, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, al as ScopeType, am as SignatureInput, an as SignatureMode, ao as SoilTexture, ap as StockPolicyTier, aq as StockPolicyTierType, ar as StoragePhases, as as StorageType, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, az as TaskTypeConfig, aA as TemplateScopeLevel, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-C_Pwif6Q.mjs';
+import { d as AgriCoreSession, aF as UserRoleType, ah as ResourceRequirement, c as AccessLevelType, j as AvailableScope, U as InfrastructureFields, S as FormMeta, av as TabConfig, af as ResolvedError } from './constants-BQmsBTQ7.mjs';
+export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, i as AuthScopeFields, B as BarcodeNamespace, k as BarcodeNamespaceType, l as BarcodeType, m as BarcodeTypeType, n as Base44Id, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, t as CanonicalId, u as CarSupportedEvidenceMimeType, v as CarSupportedSignatureMimeType, w as CarTemplateFileMetadata, x as CatalogSyncStatus, y as CatalogSyncStatusType, z as CompanyConfig, D as CorrectiveActionCompileTaskMetadata, E as CorrectiveActionGenerationSource, F as CorrectiveActionStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, R as FileUploadTaskType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a0 as NormalizedSignatureValue, a1 as NotificationMode, a2 as OrderStatus, a3 as PermissionLevel, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a7 as ProductTypeType, a8 as ProductUnit, a9 as ProductUnitType, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ag as ResourceOverrides, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, al as ScopeType, am as SignatureInput, an as SignatureMode, ao as SoilTexture, ap as StockPolicyTier, aq as StockPolicyTierType, ar as StoragePhases, as as StorageType, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, az as TaskTypeConfig, aA as TemplateScopeLevel, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-BQmsBTQ7.mjs';
 
 declare const AgriLogger: {
     log(level: "INFO" | "WARN" | "ERROR", message: string, meta: any): void;
@@ -104,24 +104,15 @@ declare function generateCanonicalId(): string;
  * Standardizes the creation of new entities by walking up the scope tree.
  */
 declare function generateInfrastructureFields(activeScope: AvailableScope, availableScopes: AvailableScope[]): InfrastructureFields;
-declare function buildRlsFilter(session: AgriCoreSession, extra?: Record<string, any>): {
-    authScopeId: {
-        $in: string[];
-    };
-};
-declare function canRead(session: AgriCoreSession, authScopeId: string): boolean;
-declare function canWrite(session: AgriCoreSession, authScopeId: string, resourcePath: string): boolean;
 /**
  * Hard-throws if the user cannot write.
  * Use this on the backend (inside Deno functions) to enforce server-side.
  */
-declare function assertCanWrite(session: AgriCoreSession, authScopeId: string, resourcePath: string): void;
 /**
  * Full resolution: DB override → static config fallback → public default.
  * Returns 'NONE' | 'READ' | 'WRITE'.
  */
 declare function resolveAccess(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): 'NONE' | 'READ' | 'WRITE';
-declare function resolveMenuVisibility(session: AgriCoreSession, authScopeId: string, resourcePath: string): 'hidden' | 'read_only' | 'active';
 declare function isTabVisible(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): boolean;
 declare function isTabWritable(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): boolean;
 declare function evaluateBaseAccess(resourcePath: string, session: {
@@ -172,4 +163,4 @@ declare function calculateFileMetadataMatch(criteria: {
     contextMatch?: string[];
 }, fileMetadata: Record<string, any>, auditContext: Record<string, any>): number;
 
-export { AccessLevelType, AgriCoreSession, AgriLogger, AppError, AvailableScope, Converter, ErrorFactory, FormMeta, InfrastructureFields, ResolvedError, ResourceRequirement, TabConfig, UserRoleType, Validator, assertCanWrite, assertTenantBoundary, buildRlsFilter, calculateFileMetadataMatch, canRead, canWrite, evaluateBaseAccess, extractAppCode, findSpecificOverride, generateCanonicalId, generateDocumentPath, generateInfrastructureFields, getAcceptedMimeTypes, getApproveAction, getFormMeta, getFormsGroupedByModule, getTaskTypeOptions, handleAppErrorResponse, isTabVisible, isTabWritable, resolveAccess, resolveAppError, resolveEffectiveAccess, resolveError, resolveMenuVisibility, verifyAndExtractSession, withAgriLogging };
+export { AccessLevelType, AgriCoreSession, AgriLogger, AppError, AvailableScope, Converter, ErrorFactory, FormMeta, InfrastructureFields, ResolvedError, ResourceRequirement, TabConfig, UserRoleType, Validator, assertTenantBoundary, calculateFileMetadataMatch, evaluateBaseAccess, extractAppCode, findSpecificOverride, generateCanonicalId, generateDocumentPath, generateInfrastructureFields, getAcceptedMimeTypes, getApproveAction, getFormMeta, getFormsGroupedByModule, getTaskTypeOptions, handleAppErrorResponse, isTabVisible, isTabWritable, resolveAccess, resolveAppError, resolveEffectiveAccess, resolveError, verifyAndExtractSession, withAgriLogging };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { d as AgriCoreSession, aF as UserRoleType, ah as ResourceRequirement, c as AccessLevelType, j as AvailableScope, U as InfrastructureFields, S as FormMeta, av as TabConfig, af as ResolvedError } from './constants-C_Pwif6Q.js';
-export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, i as AuthScopeFields, B as BarcodeNamespace, k as BarcodeNamespaceType, l as BarcodeType, m as BarcodeTypeType, n as Base44Id, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, t as CanonicalId, u as CarSupportedEvidenceMimeType, v as CarSupportedSignatureMimeType, w as CarTemplateFileMetadata, x as CatalogSyncStatus, y as CatalogSyncStatusType, z as CompanyConfig, D as CorrectiveActionCompileTaskMetadata, E as CorrectiveActionGenerationSource, F as CorrectiveActionStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, R as FileUploadTaskType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a0 as NormalizedSignatureValue, a1 as NotificationMode, a2 as OrderStatus, a3 as PermissionLevel, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a7 as ProductTypeType, a8 as ProductUnit, a9 as ProductUnitType, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ag as ResourceOverrides, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, al as ScopeType, am as SignatureInput, an as SignatureMode, ao as SoilTexture, ap as StockPolicyTier, aq as StockPolicyTierType, ar as StoragePhases, as as StorageType, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, az as TaskTypeConfig, aA as TemplateScopeLevel, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-C_Pwif6Q.js';
+import { d as AgriCoreSession, aF as UserRoleType, ah as ResourceRequirement, c as AccessLevelType, j as AvailableScope, U as InfrastructureFields, S as FormMeta, av as TabConfig, af as ResolvedError } from './constants-BQmsBTQ7.js';
+export { A as ACCESS_RANK, a as ACT, b as AccessLevel, e as ApprovalStatus, f as ApprovalType, g as AuditStatus, h as AuditType, i as AuthScopeFields, B as BarcodeNamespace, k as BarcodeNamespaceType, l as BarcodeType, m as BarcodeTypeType, n as Base44Id, C as CAR_SUPPORTED_EVIDENCE_MIME_TYPES, o as CAR_SUPPORTED_SIGNATURE_MIME_TYPES, p as CAT, q as CATEGORY_TABS, r as CORRECTIVE_ACTION_GENERATION_SOURCES, s as CORRECTIVE_ACTION_STATUSES, t as CanonicalId, u as CarSupportedEvidenceMimeType, v as CarSupportedSignatureMimeType, w as CarTemplateFileMetadata, x as CatalogSyncStatus, y as CatalogSyncStatusType, z as CompanyConfig, D as CorrectiveActionCompileTaskMetadata, E as CorrectiveActionGenerationSource, F as CorrectiveActionStatus, G as CropCycleStatus, H as DOCUMENT_DISPLAY_INFO, I as DOCUMENT_MENU_MAP, J as DocumentCategory, K as DocumentType, L as ERROR_DICTIONARY, M as EVERYONE, N as EmitterType, O as EnabledModule, P as FORM_REGISTRY, Q as FacilityType, R as FileUploadTaskType, T as HarvestMethod, V as LinkedStatus, W as MOD, X as MODULE_LABELS, Y as MicroclimateZone, Z as MimeType, _ as ModCode, $ as NettingType, a0 as NormalizedSignatureValue, a1 as NotificationMode, a2 as OrderStatus, a3 as PermissionLevel, a4 as PhysicalState, a5 as PlantingMethod, a6 as ProductType, a7 as ProductTypeType, a8 as ProductUnit, a9 as ProductUnitType, aa as RESOURCE_MODULE_MAP, ab as RESOURCE_PATHS, ac as RESOURCE_REQUIREMENTS, ad as ROLE_SECTIONS_BY_KEY, ae as RelationshipType, ag as ResourceOverrides, ai as RowOrientation, aj as SENTINEL_UUID, ak as SIGNATURE_MODES, al as ScopeType, am as SignatureInput, an as SignatureMode, ao as SoilTexture, ap as StockPolicyTier, aq as StockPolicyTierType, ar as StoragePhases, as as StorageType, at as TASK_TYPE_REGISTRY, au as TEMPLATE_SCOPE_LEVELS, aw as TargetEntityType, ax as TaskStatus, ay as TaskType, az as TaskTypeConfig, aA as TemplateScopeLevel, aB as TransactionType, aC as TrellisType, aD as UserPrivilege, aE as UserRole, aG as VigorRating, aH as WaterSource } from './constants-BQmsBTQ7.js';
 
 declare const AgriLogger: {
     log(level: "INFO" | "WARN" | "ERROR", message: string, meta: any): void;
@@ -104,24 +104,15 @@ declare function generateCanonicalId(): string;
  * Standardizes the creation of new entities by walking up the scope tree.
  */
 declare function generateInfrastructureFields(activeScope: AvailableScope, availableScopes: AvailableScope[]): InfrastructureFields;
-declare function buildRlsFilter(session: AgriCoreSession, extra?: Record<string, any>): {
-    authScopeId: {
-        $in: string[];
-    };
-};
-declare function canRead(session: AgriCoreSession, authScopeId: string): boolean;
-declare function canWrite(session: AgriCoreSession, authScopeId: string, resourcePath: string): boolean;
 /**
  * Hard-throws if the user cannot write.
  * Use this on the backend (inside Deno functions) to enforce server-side.
  */
-declare function assertCanWrite(session: AgriCoreSession, authScopeId: string, resourcePath: string): void;
 /**
  * Full resolution: DB override → static config fallback → public default.
  * Returns 'NONE' | 'READ' | 'WRITE'.
  */
 declare function resolveAccess(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): 'NONE' | 'READ' | 'WRITE';
-declare function resolveMenuVisibility(session: AgriCoreSession, authScopeId: string, resourcePath: string): 'hidden' | 'read_only' | 'active';
 declare function isTabVisible(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): boolean;
 declare function isTabWritable(session: AgriCoreSession, activeScopeId: string, tabConfig: TabConfig): boolean;
 declare function evaluateBaseAccess(resourcePath: string, session: {
@@ -172,4 +163,4 @@ declare function calculateFileMetadataMatch(criteria: {
     contextMatch?: string[];
 }, fileMetadata: Record<string, any>, auditContext: Record<string, any>): number;
 
-export { AccessLevelType, AgriCoreSession, AgriLogger, AppError, AvailableScope, Converter, ErrorFactory, FormMeta, InfrastructureFields, ResolvedError, ResourceRequirement, TabConfig, UserRoleType, Validator, assertCanWrite, assertTenantBoundary, buildRlsFilter, calculateFileMetadataMatch, canRead, canWrite, evaluateBaseAccess, extractAppCode, findSpecificOverride, generateCanonicalId, generateDocumentPath, generateInfrastructureFields, getAcceptedMimeTypes, getApproveAction, getFormMeta, getFormsGroupedByModule, getTaskTypeOptions, handleAppErrorResponse, isTabVisible, isTabWritable, resolveAccess, resolveAppError, resolveEffectiveAccess, resolveError, resolveMenuVisibility, verifyAndExtractSession, withAgriLogging };
+export { AccessLevelType, AgriCoreSession, AgriLogger, AppError, AvailableScope, Converter, ErrorFactory, FormMeta, InfrastructureFields, ResolvedError, ResourceRequirement, TabConfig, UserRoleType, Validator, assertTenantBoundary, calculateFileMetadataMatch, evaluateBaseAccess, extractAppCode, findSpecificOverride, generateCanonicalId, generateDocumentPath, generateInfrastructureFields, getAcceptedMimeTypes, getApproveAction, getFormMeta, getFormsGroupedByModule, getTaskTypeOptions, handleAppErrorResponse, isTabVisible, isTabWritable, resolveAccess, resolveAppError, resolveEffectiveAccess, resolveError, verifyAndExtractSession, withAgriLogging };

package/dist/index.js

@@ -87,12 +87,8 @@ __export(index_exports, {
   Validator: () => Validator,
   VigorRating: () => VigorRating,
   WaterSource: () => WaterSource,
-  assertCanWrite: () => assertCanWrite,
   assertTenantBoundary: () => assertTenantBoundary,
-  buildRlsFilter: () => buildRlsFilter,
   calculateFileMetadataMatch: () => calculateFileMetadataMatch,
-  canRead: () => canRead,
-  canWrite: () => canWrite,
   evaluateBaseAccess: () => evaluateBaseAccess,
   extractAppCode: () => extractAppCode,
   findSpecificOverride: () => findSpecificOverride,
@@ -111,7 +107,6 @@ __export(index_exports, {
   resolveAppError: () => resolveAppError,
   resolveEffectiveAccess: () => resolveEffectiveAccess,
   resolveError: () => resolveError,
-  resolveMenuVisibility: () => resolveMenuVisibility,
   verifyAndExtractSession: () => verifyAndExtractSession,
   withAgriLogging: () => withAgriLogging
 });
@@ -651,38 +646,47 @@ var RESOURCE_PATHS = {
   // ── Operations ────────────────────────────────────────────────────────────
   farmManagement: "operations.farmManagement",
   packhouse: "operations.packhouse",
+  accommodation: "operations.accommodation",
   // ── Inventory ────────────────────────────────────────────────────────────
   // === Consumables ===
+  inventory: "inventory",
+  inventoryConsumable: "inventory.consumable",
   inventoryConsumableProduct: "inventory.consumable.product",
   inventoryConsumableStock: "inventory.consumable.stock",
   inventoryConsumableStockEditThreshold: "inventory.consumable.stock.editThreshold",
   inventoryConsumableStockReconcile: "inventory.consumable.stock.reconcile",
   inventoryConsumableStockMovement: "inventory.consumable.stockMovement",
   inventoryConsumableStockMovementTransfer: "inventory.consumable.stockMovement.transfer",
-  inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
+  // inventoryConsumableStockMovementPurchase: "inventory.consumable.stockMovement.purchase",
   // === Chemicals ===
+  inventoryChemical: "inventory.chemical",
   inventoryChemicalProduct: "inventory.chemical.product",
   inventoryChemicalStock: "inventory.chemical.stock",
   inventoryChemicalStockEditThreshold: "inventory.chemical.stock.editThreshold",
   inventoryChemicalStockReconcile: "inventory.chemical.stock.reconcile",
   inventoryChemicalStockMovement: "inventory.chemical.stockMovement",
   inventoryChemicalStockMovementTransfer: "inventory.chemical.stockMovement.transfer",
-  inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
+  // inventoryChemicalStockMovementPurchase: "inventory.chemical.stockMovement.purchase",
   // === Maintenance Parts ===
+  inventoryMaintenancePart: "inventory.maintenancePart",
   inventoryMaintenancePartProduct: "inventory.maintenancePart.product",
   inventoryMaintenancePartStock: "inventory.maintenancePart.stock",
   inventoryMaintenancePartStockEditThreshold: "inventory.maintenancePart.stock.editThreshold",
   inventoryMaintenancePartStockReconcile: "inventory.maintenancePart.stock.reconcile",
   inventoryMaintenancePartStockMovement: "inventory.maintenancePart.stockMovement",
   inventoryMaintenancePartStockMovementTransfer: "inventory.maintenancePart.stockMovement.transfer",
-  inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
-  accommodation: "operations.accommodation",
+  // inventoryMaintenancePartStockMovementPurchase: "inventory.maintenancePart.stockMovement.purchase",
   // ── Equipment & Fleet ──────────────────────────────────────────────────────
   equipPreStart: "equipment.preStart",
   equipMaintenance: "equipment.maintenance",
   equipFuelRegister: "equipment.fuelRegister",
   equipCalibration: "equipment.calibration",
   equipFleet: "equipment.fleetManagement",
+  finance: "finance",
+  financeProductRequisition: "finance.product.requistion",
+  financeDashboard: "finance.dashboard",
+  financeTransaction: "finance.transaction",
+  financeBudgetAllocation: "finance.budgetAllocation",
   // ── Safety, Quality & Compliance ──────────────────────────────────────────
   safetyAuditing: "safety.auditing",
   safetyFood: "safety.foodSafety",
@@ -708,14 +712,20 @@ var RESOURCE_MODULE_MAP = {
   [RESOURCE_PATHS.equipment]: ALL_OPERATIONS,
   [RESOURCE_PATHS.safety]: ALL_OPERATIONS,
   [RESOURCE_PATHS.team]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventory]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.finance]: ALL_OPERATIONS,
   [RESOURCE_PATHS.records]: ALL_OPERATIONS,
   [RESOURCE_PATHS.adminSettings]: ALL_OPERATIONS,
   // ── Inventory ──────────────────────────────────────────────────────
+  [RESOURCE_PATHS.inventoryConsumable]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryConsumableStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemical]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryChemicalStock]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryChemicalStockMovement]: ALL_OPERATIONS,
+  [RESOURCE_PATHS.inventoryMaintenancePart]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStock]: ALL_OPERATIONS,
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: ALL_OPERATIONS,
@@ -804,9 +814,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryConsumableStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryConsumableStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   // CHEMICALS PERMISSIONS
   [RESOURCE_PATHS.inventoryChemicalProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
@@ -822,9 +832,9 @@ var RESOURCE_REQUIREMENTS = {
   [RESOURCE_PATHS.inventoryChemicalStockMovementTransfer]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
-  [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
-  },
+  // [RESOURCE_PATHS.inventoryChemicalStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
   [RESOURCE_PATHS.inventoryMaintenancePartProduct]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
@@ -836,11 +846,24 @@ var RESOURCE_REQUIREMENTS = {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER, UserRole.SUPERVISOR]
   },
   [RESOURCE_PATHS.inventoryMaintenancePartStockMovement]: { allowedRoles: EVERYONE },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
+  // [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: { 
+  //   allowedRoles: [UserRole.OWNER, UserRole.MANAGER] 
+  // },
+  // ── Finance ────────────────────────────────────────────────────────────────
+  [RESOURCE_PATHS.financeProductRequisition]: {
     allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
   },
-  [RESOURCE_PATHS.inventoryMaintenancePartStockMovementPurchase]: {
-    allowedRoles: [UserRole.OWNER, UserRole.MANAGER]
+  [RESOURCE_PATHS.financeBudgetAllocation]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeDashboard]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
+  },
+  [RESOURCE_PATHS.financeTransaction]: {
+    allowedRoles: [UserRole.OWNER],
+    requiredPrivileges: [UserPrivilege.FINANCE]
   },
   // ── Admin Settings ─────────────────────────────────────────────────────────
   [RESOURCE_PATHS.adminUserRoster]: {
@@ -1308,39 +1331,6 @@ function generateInfrastructureFields(activeScope, availableScopes) {
     authScopeId: activeScope.authScopeId
   };
 }
-function buildRlsFilter(session, extra = {}) {
-  return { ...extra, authScopeId: { $in: session.readScopes || [] } };
-}
-function canRead(session, authScopeId) {
-  return session.readScopes?.includes(authScopeId) ?? false;
-}
-function canWrite(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "WRITE") return true;
-  if (override === "NONE" || override === "READ") return false;
-  return session.writeScopes?.includes(authScopeId) ?? false;
-}
-function assertCanWrite(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "WRITE") return;
-  if (override === "NONE" || override === "READ") {
-    throw new AppError(
-      403,
-      MOD.SESSION,
-      CAT.PERMISSION,
-      ACT.GENERIC,
-      `You do not have write access to "${resourcePath}" in this scope.`
-    );
-  }
-  if (session.writeScopes?.includes(authScopeId)) return;
-  throw new AppError(
-    403,
-    MOD.SESSION,
-    CAT.PERMISSION,
-    ACT.GENERIC,
-    "You do not have permission to modify records in this scope."
-  );
-}
 function resolveAccess(session, activeScopeId, tabConfig) {
   const resourcePath = tabConfig?.resourceId;
   const overrides = session.resourceOverrides?.[activeScopeId] ?? {};
@@ -1364,15 +1354,6 @@ function resolveAccess(session, activeScopeId, tabConfig) {
   }
   return "READ";
 }
-function resolveMenuVisibility(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "NONE") return "hidden";
-  if (override === "READ") return "read_only";
-  if (override === "WRITE") return "active";
-  if (session.writeScopes?.includes(authScopeId)) return "active";
-  if (session.readScopes?.includes(authScopeId)) return "read_only";
-  return "hidden";
-}
 function isTabVisible(session, activeScopeId, tabConfig) {
   return resolveAccess(session, activeScopeId, tabConfig) !== "NONE";
 }
@@ -1586,12 +1567,8 @@ function calculateFileMetadataMatch(criteria, fileMetadata, auditContext) {
   Validator,
   VigorRating,
   WaterSource,
-  assertCanWrite,
   assertTenantBoundary,
-  buildRlsFilter,
   calculateFileMetadataMatch,
-  canRead,
-  canWrite,
   evaluateBaseAccess,
   extractAppCode,
   findSpecificOverride,
@@ -1610,7 +1587,6 @@ function calculateFileMetadataMatch(criteria, fileMetadata, auditContext) {
   resolveAppError,
   resolveEffectiveAccess,
   resolveError,
-  resolveMenuVisibility,
   verifyAndExtractSession,
   withAgriLogging
 });

package/dist/index.mjs

@@ -61,7 +61,7 @@ import {
   UserRole,
   VigorRating,
   WaterSource
-} from "./chunk-XD36URZU.mjs";
+} from "./chunk-DZW2VL6D.mjs";
 
 // src/index.ts
 import { jwtVerify } from "jose";
@@ -360,39 +360,6 @@ function generateInfrastructureFields(activeScope, availableScopes) {
     authScopeId: activeScope.authScopeId
   };
 }
-function buildRlsFilter(session, extra = {}) {
-  return { ...extra, authScopeId: { $in: session.readScopes || [] } };
-}
-function canRead(session, authScopeId) {
-  return session.readScopes?.includes(authScopeId) ?? false;
-}
-function canWrite(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "WRITE") return true;
-  if (override === "NONE" || override === "READ") return false;
-  return session.writeScopes?.includes(authScopeId) ?? false;
-}
-function assertCanWrite(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "WRITE") return;
-  if (override === "NONE" || override === "READ") {
-    throw new AppError(
-      403,
-      MOD.SESSION,
-      CAT.PERMISSION,
-      ACT.GENERIC,
-      `You do not have write access to "${resourcePath}" in this scope.`
-    );
-  }
-  if (session.writeScopes?.includes(authScopeId)) return;
-  throw new AppError(
-    403,
-    MOD.SESSION,
-    CAT.PERMISSION,
-    ACT.GENERIC,
-    "You do not have permission to modify records in this scope."
-  );
-}
 function resolveAccess(session, activeScopeId, tabConfig) {
   const resourcePath = tabConfig?.resourceId;
   const overrides = session.resourceOverrides?.[activeScopeId] ?? {};
@@ -416,15 +383,6 @@ function resolveAccess(session, activeScopeId, tabConfig) {
   }
   return "READ";
 }
-function resolveMenuVisibility(session, authScopeId, resourcePath) {
-  const override = session.resourceOverrides?.[authScopeId]?.[resourcePath];
-  if (override === "NONE") return "hidden";
-  if (override === "READ") return "read_only";
-  if (override === "WRITE") return "active";
-  if (session.writeScopes?.includes(authScopeId)) return "active";
-  if (session.readScopes?.includes(authScopeId)) return "read_only";
-  return "hidden";
-}
 function isTabVisible(session, activeScopeId, tabConfig) {
   return resolveAccess(session, activeScopeId, tabConfig) !== "NONE";
 }
@@ -637,12 +595,8 @@ export {
   Validator,
   VigorRating,
   WaterSource,
-  assertCanWrite,
   assertTenantBoundary,
-  buildRlsFilter,
   calculateFileMetadataMatch,
-  canRead,
-  canWrite,
   evaluateBaseAccess,
   extractAppCode,
   findSpecificOverride,
@@ -661,7 +615,6 @@ export {
   resolveAppError,
   resolveEffectiveAccess,
   resolveError,
-  resolveMenuVisibility,
   verifyAndExtractSession,
   withAgriLogging
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litusarchieve18/agricore-utils",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "description": "Canonical Backend Utility Library for AgriCore",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",