@medusajs/core-flows 2.22.3-snapshot-20261030141225 → 2.22.3

package/AGENTS.md

@@ -98,4 +98,4 @@ cd packages/core/core-flows && ../../../node_modules/.bin/jest src/cart/utils/__
 - `emitEventStep` emits with the workflow's `eventGroupId`; its compensation clears those grouped events, so emit inside the workflow rather than calling the event bus directly.
 - `createCartWorkflow` and `updateCartWorkflow` call `findOrCreateCustomerStep` with `hasAccount: false`: a cart email only resolves to a guest customer. A registered customer is set on a cart only through `customer_id` (the authenticated customer) or `transferCartCustomerWorkflow`.
 - Adding a step to an existing workflow that already uses the same step needs a unique `.config({ name })`, or registration fails with `Step <name> is already defined in workflow.`
-- `createCustomerAccountWorkflow` requires the customer's email to match the auth identity's `entity_id`, or any provider identity's `user_metadata.email`, ignoring case and surrounding whitespace. Otherwise it throws an `UNAUTHORIZED` error, so custom auth providers must set `user_metadata.email` for their customers to register.
+- `createCustomerAccountWorkflow` requires the customer's email to match a provider identity's `user_metadata.email`, or its `entity_id` when the provider is `emailpass` or the `entity_id` is an email, ignoring case and surrounding whitespace. Otherwise it throws an `UNAUTHORIZED` error. The check is skipped only when no provider identity has an email this way (e.g. phone auth), so custom providers whose `entity_id` isn't an email should set `user_metadata.email`. Add extra checks through the workflow's `validate` hook.

package/dist/auth/workflows/generate-reset-password-token.d.ts

@@ -1,4 +1,47 @@
-import type { ProjectConfigOptions } from "@medusajs/framework/types";
+import type { ProjectConfigOptions, RbacScope } from "@medusajs/framework/types";
+export type GenerateResetPasswordTokenWorkflowInput = {
+    /**
+     * The identifier of the auth identity, such as the user's email.
+     */
+    entityId: string;
+    /**
+     * The actor type, such as `user` or `customer`. Also used as the role
+     * assignment reference when validating the granting actor.
+     */
+    actorType: string;
+    provider: string;
+    secret: ProjectConfigOptions["http"]["jwtSecret"];
+    jwtOptions?: ProjectConfigOptions["http"]["jwtOptions"];
+    metadata?: Record<string, unknown>;
+    /**
+     * The ID of the actor (e.g. user ID) the token is generated for. Required
+     * when `granting_actor_id` is provided.
+     *
+     * @since 2.23.0
+     */
+    actor_id?: string;
+    /**
+     * The ID of the actor generating the token on behalf of `actor_id`. When set,
+     * the workflow validates that this actor holds all the policies of the
+     * target's roles, so a token can't be used to take over a more privileged
+     * account. Omit it for self-service resets.
+     *
+     * @since 2.23.0
+     */
+    granting_actor_id?: string;
+    /**
+     * The granting actor's type. Defaults to `user`.
+     *
+     * @since 2.23.0
+     */
+    granting_actor?: string;
+    /**
+     * The scope the granting actor is acting within.
+     *
+     * @since 2.23.0
+     */
+    granting_scope?: RbacScope;
+};
 /**
  * This workflow generates a reset password token for a user. It's used by the
  * [Generate Reset Password Token for Admin](https://docs.medusajs.com/api/admin/auth/generate-reset-password-token)
@@ -30,12 +73,5 @@ import type { ProjectConfigOptions } from "@medusajs/framework/types";
  *
  * @since 2.16.0
  */
-export declare const generateResetPasswordTokenWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<{
-    entityId: string;
-    actorType: string;
-    provider: string;
-    secret: ProjectConfigOptions["http"]["jwtSecret"];
-    jwtOptions?: ProjectConfigOptions["http"]["jwtOptions"];
-    metadata?: Record<string, unknown>;
-}, string, []>;
+export declare const generateResetPasswordTokenWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<GenerateResetPasswordTokenWorkflowInput, string, []>;
 //# sourceMappingURL=generate-reset-password-token.d.ts.map

package/dist/auth/workflows/generate-reset-password-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-reset-password-token.d.ts","sourceRoot":"","sources":["../../../src/auth/workflows/generate-reset-password-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAerE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,kCAAkC;cAGjC,MAAM;eACL,MAAM;cACP,MAAM;YACR,oBAAoB,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC;iBACpC,oBAAoB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;eAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;cAiDrC,CAAA"}
+{"version":3,"file":"generate-reset-password-token.d.ts","sourceRoot":"","sources":["../../../src/auth/workflows/generate-reset-password-token.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAuChF,MAAM,MAAM,uCAAuC,GAAG;IACpD;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAA;IACjD,UAAU,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAA;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,SAAS,CAAA;CAC3B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,kCAAkC,iHAiF9C,CAAA"}

package/dist/auth/workflows/generate-reset-password-token.js

@@ -1,11 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateResetPasswordTokenWorkflow = void 0;
+const modules_sdk_1 = require("@medusajs/framework/modules-sdk");
 const utils_1 = require("@medusajs/framework/utils");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const common_1 = require("../../common");
-const steps_1 = require("../steps");
+const steps_1 = require("../../rbac/steps");
+const steps_2 = require("../steps");
 const RESET_PASSWORD_TOKEN_TTL_SECONDS = 15 * 60;
+/**
+ * Ensures the target actor is known when a granting actor is provided, so the
+ * granting actor's permissions can be validated against the target's roles.
+ */
+const validateGrantedStep = (0, workflows_sdk_1.createStep)("validate-granted", async (input) => {
+    if (!!input.granting_actor_id && !input.actor_id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "actor_id is required when granting_actor_id is provided");
+    }
+});
 /**
  * This workflow generates a reset password token for a user. It's used by the
  * [Generate Reset Password Token for Admin](https://docs.medusajs.com/api/admin/auth/generate-reset-password-token)
@@ -38,7 +49,31 @@ const RESET_PASSWORD_TOKEN_TTL_SECONDS = 15 * 60;
  * @since 2.16.0
  */
 exports.generateResetPasswordTokenWorkflow = (0, workflows_sdk_1.createWorkflow)("generate-reset-password-token", (input) => {
-    const resetToken = (0, steps_1.createPasswordResetTokenStep)({
+    (0, workflows_sdk_1.when)({}, () => modules_sdk_1.MedusaModule.isInstalled(utils_1.Modules.RBAC)).then(() => {
+        validateGrantedStep({
+            actor_id: input.actor_id,
+            granting_actor_id: input.granting_actor_id,
+        });
+        const targetReferenceIds = (0, workflows_sdk_1.transform)({ input }, ({ input }) => [
+            input.actor_id,
+        ]);
+        const targetAssignments = (0, steps_1.getRoleAssignmentsStep)({
+            reference: input.actorType,
+            reference_id: targetReferenceIds,
+        });
+        (0, steps_1.validateActorRolePermissionsStep)({
+            actor_id: input.granting_actor_id,
+            actor: input.granting_actor,
+            granting_scope: input.granting_scope,
+            assignments: (0, workflows_sdk_1.transform)({ targetAssignments }, ({ targetAssignments }) => targetAssignments.map((assignment) => ({
+                role_id: assignment.role_id,
+                scope: assignment.scope && assignment.scope_id
+                    ? { type: assignment.scope, id: assignment.scope_id }
+                    : undefined,
+            }))),
+        });
+    });
+    const resetToken = (0, steps_2.createPasswordResetTokenStep)({
         entityId: input.entityId,
         provider: input.provider,
         ttlSeconds: RESET_PASSWORD_TOKEN_TTL_SECONDS,

package/dist/auth/workflows/generate-reset-password-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-reset-password-token.js","sourceRoot":"","sources":["../../../src/auth/workflows/generate-reset-password-token.ts"],"names":[],"mappings":";;;AACA,qDAGkC;AAClC,qEAI0C;AAC1C,yCAA4C;AAC5C,oCAAuD;AAEvD,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,kCAAkC,GAAG,IAAA,8BAAc,EAC9D,+BAA+B,EAC/B,CAAC,KAOA,EAAE,EAAE;IACH,MAAM,UAAU,GAAG,IAAA,oCAA4B,EAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,gCAAgC;KAC7C,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,IAAA,yBAAS,EACrB,EAAE,KAAK,EAAE,UAAU,EAAE,EACrB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;QACxB,OAAO,IAAA,wBAAgB,EACrB;YACE,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,OAAO,EAAE,OAAO;SACjB,EACD;YACE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,GAAG,gCAAgC,GAAG;YACjD,UAAU,EAAE;gBACV,GAAG,KAAK,CAAC,UAAU;gBACnB,KAAK,EAAE,UAAU,CAAC,GAAG;aACtB;SACF,CACF,CAAA;IACH,CAAC,CACF,CAAA;IAED,MAAM,OAAO,GAAG,IAAA,yBAAS,EAAC;QACxB,KAAK;QACL,KAAK;KACN,EAAE,CAAC,IAAI,EAAE,EAAE;QACV,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE;SACpC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,sBAAa,EAAC;QACZ,SAAS,EAAE,0BAAkB,CAAC,cAAc;QAC5C,IAAI,EAAE,OAAO;KACd,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC,CACF,CAAA"}
+{"version":3,"file":"generate-reset-password-token.js","sourceRoot":"","sources":["../../../src/auth/workflows/generate-reset-password-token.ts"],"names":[],"mappings":";;;AAAA,iEAA8D;AAE9D,qDAKkC;AAClC,qEAM0C;AAC1C,yCAA4C;AAC5C,4CAGyB;AACzB,oCAAuD;AAEvD,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,CAAA;AAEhD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAA,0BAAU,EACpC,kBAAkB,EAClB,KAAK,EAAE,KAAwD,EAAE,EAAE;IACjE,IAAI,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,yDAAyD,CAC1D,CAAA;IACH,CAAC;AACH,CAAC,CACF,CAAA;AA8CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,kCAAkC,GAAG,IAAA,8BAAc,EAC9D,+BAA+B,EAC/B,CAAC,KAA8C,EAAE,EAAE;IACjD,IAAA,oBAAI,EAAC,EAAE,EAAE,GAAG,EAAE,CAAC,0BAAY,CAAC,WAAW,CAAC,eAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAC/D,mBAAmB,CAAC;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAA;QAEF,MAAM,kBAAkB,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC7D,KAAK,CAAC,QAAS;SAChB,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAG,IAAA,8BAAsB,EAAC;YAC/C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,kBAAkB;SACjC,CAAC,CAAA;QAEF,IAAA,wCAAgC,EAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,iBAAkB;YAClC,KAAK,EAAE,KAAK,CAAC,cAAc;YAC3B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,IAAA,yBAAS,EAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CACtE,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EACH,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ;oBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE;oBACrD,CAAC,CAAC,SAAS;aAChB,CAAC,CAAC,CACJ;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,IAAA,oCAA4B,EAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,gCAAgC;KAC7C,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,IAAA,yBAAS,EACrB,EAAE,KAAK,EAAE,UAAU,EAAE,EACrB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;QACxB,OAAO,IAAA,wBAAgB,EACrB;YACE,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,OAAO,EAAE,OAAO;SACjB,EACD;YACE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,GAAG,gCAAgC,GAAG;YACjD,UAAU,EAAE;gBACV,GAAG,KAAK,CAAC,UAAU;gBACnB,KAAK,EAAE,UAAU,CAAC,GAAG;aACtB;SACF,CACF,CAAA;IACH,CAAC,CACF,CAAA;IAED,MAAM,OAAO,GAAG,IAAA,yBAAS,EAAC;QACxB,KAAK;QACL,KAAK;KACN,EAAE,CAAC,IAAI,EAAE,EAAE;QACV,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE;SACpC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,sBAAa,EAAC;QACZ,SAAS,EAAE,0BAAkB,CAAC,cAAc;QAC5C,IAAI,EAAE,OAAO;KACd,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC,CACF,CAAA"}

package/dist/customer/steps/validate-customer-account-creation.d.ts

@@ -5,8 +5,10 @@ export declare const validateCustomerAccountCreationStepId = "validate-customer-
  * The step throws an error if:
  *
  * - The email is missing
- * - An auth identity is provided, and the email doesn't match the auth identity's
- *   `entity_id` or the `user_metadata.email` of any of its provider identities.
+ * - An auth identity is provided, and the email doesn't match the `user_metadata.email`
+ *   of any of its provider identities, or the `entity_id` of an `emailpass` provider
+ *   identity or of one whose `entity_id` is an email. The check is skipped when none
+ *   of the provider identities has an email this way.
  * - A customer with the email already exists and has an account
  * - A guest customer with the email already exists
  *

package/dist/customer/steps/validate-customer-account-creation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-customer-account-creation.d.ts","sourceRoot":"","sources":["../../../src/customer/steps/validate-customer-account-creation.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kCAAkC,EAAE,MAAM,cAAc,CAAA;AAEjE,eAAO,MAAM,qCAAqC,uCACZ,CAAA;AAEtC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,+BAA+B,uGAiE3C,CAAA"}
+{"version":3,"file":"validate-customer-account-creation.d.ts","sourceRoot":"","sources":["../../../src/customer/steps/validate-customer-account-creation.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kCAAkC,EAAE,MAAM,cAAc,CAAA;AAEjE,eAAO,MAAM,qCAAqC,uCACZ,CAAA;AAItC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,+BAA+B,uGAwE3C,CAAA"}

package/dist/customer/steps/validate-customer-account-creation.js

@@ -4,13 +4,16 @@ exports.validateCustomerAccountCreation = exports.validateCustomerAccountCreatio
 const utils_1 = require("@medusajs/framework/utils");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 exports.validateCustomerAccountCreationStepId = "validate-customer-account-creation";
+const EMAILPASS_PROVIDER = "emailpass";
 /**
  * This step validates the input data for creating a customer account.
  * The step throws an error if:
  *
  * - The email is missing
- * - An auth identity is provided, and the email doesn't match the auth identity's
- *   `entity_id` or the `user_metadata.email` of any of its provider identities.
+ * - An auth identity is provided, and the email doesn't match the `user_metadata.email`
+ *   of any of its provider identities, or the `entity_id` of an `emailpass` provider
+ *   identity or of one whose `entity_id` is an email. The check is skipped when none
+ *   of the provider identities has an email this way.
  * - A customer with the email already exists and has an account
  * - A guest customer with the email already exists
  *
@@ -35,16 +38,21 @@ exports.validateCustomerAccountCreation = (0, workflows_sdk_1.createStep)(export
         const authIdentity = await authService.retrieveAuthIdentity(input.authIdentityId, { relations: ["provider_identities"] });
         const identityEmails = (authIdentity.provider_identities ?? [])
             .flatMap((providerIdentity) => {
+            const entityId = (0, utils_1.normalizeString)(providerIdentity.entity_id);
             const userMetadataEmail = providerIdentity.user_metadata?.email;
             return [
-                (0, utils_1.normalizeString)(providerIdentity.entity_id),
+                providerIdentity.provider === EMAILPASS_PROVIDER ||
+                    (0, utils_1.isEmail)(entityId)
+                    ? entityId
+                    : undefined,
                 (0, utils_1.isString)(userMetadataEmail)
                     ? (0, utils_1.normalizeString)(userMetadataEmail)
                     : undefined,
             ];
         })
-            .filter(Boolean);
-        if (!identityEmails.includes((0, utils_1.normalizeString)(email))) {
+            .filter((identityEmail) => !!identityEmail);
+        if (identityEmails.length &&
+            !identityEmails.includes((0, utils_1.normalizeString)(email))) {
             throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNAUTHORIZED, "The customer's email must match the email of the authenticated identity");
         }
     }

package/dist/customer/steps/validate-customer-account-creation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-customer-account-creation.js","sourceRoot":"","sources":["../../../src/customer/steps/validate-customer-account-creation.ts"],"names":[],"mappings":";;;AACA,qDAKkC;AAClC,qEAA8D;AAGjD,QAAA,qCAAqC,GAChD,oCAAoC,CAAA;AAEtC;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,+BAA+B,GAAG,IAAA,0BAAU,EACvD,6CAAqC,EACrC,KAAK,EAAE,KAAyC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACjE,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,eAAO,CAAC,QAAQ,CAAC,CAAA;IAE3D,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,CAAA;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,wCAAwC,CACzC,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAqB,eAAO,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,oBAAoB,CACzD,KAAK,CAAC,cAAc,EACpB,EAAE,SAAS,EAAE,CAAC,qBAAqB,CAAC,EAAE,CACvC,CAAA;QAED,MAAM,cAAc,GAAG,CAAC,YAAY,CAAC,mBAAmB,IAAI,EAAE,CAAC;aAC5D,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE;YAC5B,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAA;YAE/D,OAAO;gBACL,IAAA,uBAAe,EAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC3C,IAAA,gBAAQ,EAAC,iBAAiB,CAAC;oBACzB,CAAC,CAAC,IAAA,uBAAe,EAAC,iBAAiB,CAAC;oBACpC,CAAC,CAAC,SAAS;aACd,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC,CAAA;QAElB,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAA,uBAAe,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,yEAAyE,CAC1E,CAAA;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAExE,IAAI,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAC/C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CACnC,CAAA;QAED,IAAI,kBAAkB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,eAAe,EACjC,iDAAiD,CAClD,CAAA;QACH,CAAC;QAED,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,eAAe,EACjC,+CAA+C,CAChD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC,CACF,CAAA"}
+{"version":3,"file":"validate-customer-account-creation.js","sourceRoot":"","sources":["../../../src/customer/steps/validate-customer-account-creation.ts"],"names":[],"mappings":";;;AACA,qDAMkC;AAClC,qEAA8D;AAGjD,QAAA,qCAAqC,GAChD,oCAAoC,CAAA;AAEtC,MAAM,kBAAkB,GAAG,WAAW,CAAA;AAEtC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACU,QAAA,+BAA+B,GAAG,IAAA,0BAAU,EACvD,6CAAqC,EACrC,KAAK,EAAE,KAAyC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACjE,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,eAAO,CAAC,QAAQ,CAAC,CAAA;IAE3D,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,CAAA;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,wCAAwC,CACzC,CAAA;IACH,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAqB,eAAO,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,oBAAoB,CACzD,KAAK,CAAC,cAAc,EACpB,EAAE,SAAS,EAAE,CAAC,qBAAqB,CAAC,EAAE,CACvC,CAAA;QAED,MAAM,cAAc,GAAG,CAAC,YAAY,CAAC,mBAAmB,IAAI,EAAE,CAAC;aAC5D,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,IAAA,uBAAe,EAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAC5D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAA;YAE/D,OAAO;gBACL,gBAAgB,CAAC,QAAQ,KAAK,kBAAkB;oBAChD,IAAA,eAAO,EAAC,QAAQ,CAAC;oBACf,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,SAAS;gBACb,IAAA,gBAAQ,EAAC,iBAAiB,CAAC;oBACzB,CAAC,CAAC,IAAA,uBAAe,EAAC,iBAAiB,CAAC;oBACpC,CAAC,CAAC,SAAS;aACd,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,aAAa,EAA2B,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;QAEtE,IACE,cAAc,CAAC,MAAM;YACrB,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAA,uBAAe,EAAC,KAAK,CAAC,CAAC,EAChD,CAAC;YACD,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,yEAAyE,CAC1E,CAAA;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAExE,IAAI,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAC/C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CACnC,CAAA;QAED,IAAI,kBAAkB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,eAAe,EACjC,iDAAiD,CAClD,CAAA;QACH,CAAC;QAED,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,mBAAW,CACnB,mBAAW,CAAC,KAAK,CAAC,eAAe,EACjC,+CAA+C,CAChD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC,CACF,CAAA"}

package/dist/customer/workflows/create-customer-account.d.ts

@@ -1,4 +1,5 @@
 import type { CreateCustomerDTO, CustomerDTO } from "@medusajs/framework/types";
+import { WorkflowData } from "@medusajs/framework/workflows-sdk";
 /**
  * The details of the customer account to create.
  */
@@ -39,6 +40,10 @@ export declare const createCustomerAccountWorkflowId = "create-customer-account"
  * @summary
  *
  * Create or register a customer account.
+ *
+ * @property hooks.validate - This hook is executed after the built-in validation and before the customer is created. You can consume this hook to perform any custom validation. If validation fails, you can throw an error to stop the workflow execution.
  */
-export declare const createCustomerAccountWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<CreateCustomerAccountWorkflowInput, CustomerDTO, []>;
+export declare const createCustomerAccountWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<CreateCustomerAccountWorkflowInput, CustomerDTO, [import("@medusajs/framework/workflows-sdk").Hook<"validate", {
+    input: WorkflowData<CreateCustomerAccountWorkflowInput>;
+}, unknown>]>;
 //# sourceMappingURL=create-customer-account.d.ts.map

package/dist/customer/workflows/create-customer-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-customer-account.d.ts","sourceRoot":"","sources":["../../../src/customer/workflows/create-customer-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAW/E;;GAEG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,YAAY,EAAE,iBAAiB,CAAA;CAChC,CAAA;AAED,eAAO,MAAM,+BAA+B,4BAA4B,CAAA;AACxE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,6BAA6B,iHAiCzC,CAAA"}
+{"version":3,"file":"create-customer-account.d.ts","sourceRoot":"","sources":["../../../src/customer/workflows/create-customer-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAC/E,OAAO,EAIL,YAAY,EAEb,MAAM,mCAAmC,CAAA;AAK1C;;GAEG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,YAAY,EAAE,iBAAiB,CAAA;CAChC,CAAA;AAED,eAAO,MAAM,+BAA+B,4BAA4B,CAAA;AACxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,6BAA6B;;aAqCzC,CAAA"}

package/dist/customer/workflows/create-customer-account.js

@@ -32,9 +32,14 @@ exports.createCustomerAccountWorkflowId = "create-customer-account";
  * @summary
  *
  * Create or register a customer account.
+ *
+ * @property hooks.validate - This hook is executed after the built-in validation and before the customer is created. You can consume this hook to perform any custom validation. If validation fails, you can throw an error to stop the workflow execution.
  */
 exports.createCustomerAccountWorkflow = (0, workflows_sdk_1.createWorkflow)(exports.createCustomerAccountWorkflowId, (input) => {
     (0, validate_customer_account_creation_1.validateCustomerAccountCreation)(input);
+    const validate = (0, workflows_sdk_1.createHook)("validate", {
+        input,
+    });
     const customerData = (0, workflows_sdk_1.transform)({ input }, (data) => {
         return {
             ...data.input.customerData,
@@ -52,6 +57,8 @@ exports.createCustomerAccountWorkflow = (0, workflows_sdk_1.createWorkflow)(expo
         actorType: "customer",
         value: customer.id,
     });
-    return new workflows_sdk_1.WorkflowResponse(customer);
+    return new workflows_sdk_1.WorkflowResponse(customer, {
+        hooks: [validate],
+    });
 });
 //# sourceMappingURL=create-customer-account.js.map

package/dist/customer/workflows/create-customer-account.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-customer-account.js","sourceRoot":"","sources":["../../../src/customer/workflows/create-customer-account.ts"],"names":[],"mappings":";;;AACA,qEAK0C;AAC1C,qCAAmD;AACnD,oGAA6F;AAC7F,yDAA4D;AAgB/C,QAAA,+BAA+B,GAAG,yBAAyB,CAAA;AACxE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACU,QAAA,6BAA6B,GAAG,IAAA,8BAAc,EACzD,uCAA+B,EAC/B,CACE,KAAuD,EACxB,EAAE;IACjC,IAAA,oEAA+B,EAAC,KAAK,CAAC,CAAA;IAEtC,MAAM,YAAY,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QACjD,OAAO;YACL,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY;YAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;SACzC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,0CAAuB,CAAC,SAAS,CAAC;QAClD,KAAK,EAAE;YACL,aAAa,EAAE,CAAC,YAAY,CAAC;SAC9B;KACF,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,IAAA,yBAAS,EACxB,SAAS,EACT,CAAC,SAAwB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAC3C,CAAA;IAED,IAAA,6BAAsB,EAAC;QACrB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,QAAQ,CAAC,EAAE;KACnB,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,QAAQ,CAAC,CAAA;AACvC,CAAC,CACF,CAAA"}
+{"version":3,"file":"create-customer-account.js","sourceRoot":"","sources":["../../../src/customer/workflows/create-customer-account.ts"],"names":[],"mappings":";;;AACA,qEAM0C;AAC1C,qCAAmD;AACnD,oGAA6F;AAC7F,yDAA4D;AAgB/C,QAAA,+BAA+B,GAAG,yBAAyB,CAAA;AACxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACU,QAAA,6BAA6B,GAAG,IAAA,8BAAc,EACzD,uCAA+B,EAC/B,CAAC,KAAuD,EAAE,EAAE;IAC1D,IAAA,oEAA+B,EAAC,KAAK,CAAC,CAAA;IAEtC,MAAM,QAAQ,GAAG,IAAA,0BAAU,EAAC,UAAU,EAAE;QACtC,KAAK;KACN,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QACjD,OAAO;YACL,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY;YAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;SACzC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,0CAAuB,CAAC,SAAS,CAAC;QAClD,KAAK,EAAE;YACL,aAAa,EAAE,CAAC,YAAY,CAAC;SAC9B;KACF,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,IAAA,yBAAS,EACxB,SAAS,EACT,CAAC,SAAwB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAC3C,CAAA;IAED,IAAA,6BAAsB,EAAC;QACrB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,QAAQ,CAAC,EAAE;KACnB,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,QAAQ,CAAC;KAClB,CAAC,CAAA;AACJ,CAAC,CACF,CAAA"}

package/dist/invite/steps/get-invite-roles.d.ts

@@ -1,24 +1,24 @@
+import { CreateActorRoleDTO } from "@medusajs/framework/types";
 /**
  * @ignore
- * @featureFlag rbac
  */
 export interface GetInviteRolesStepInput {
     invite_id: string;
 }
 /**
  * @ignore
- * @featureFlag rbac
  */
 export declare const getInviteRolesStepId = "get-invite-roles-step";
 /**
- * This step retrieves the roles associated with an invite.
+ * This step retrieves the roles associated with an invite, each carrying the
+ * scope of its assignment, so the roles can be re-assigned as-is to the user
+ * created when the invite is accepted.
  *
  * @example
  * const data = getInviteRolesStep({
  *   invite_id: "invite_123"
  * })
  * @ignore
- * @featureFlag rbac
  */
-export declare const getInviteRolesStep: import("@medusajs/framework/workflows-sdk").StepFunction<GetInviteRolesStepInput, any[]>;
+export declare const getInviteRolesStep: import("@medusajs/framework/workflows-sdk").StepFunction<GetInviteRolesStepInput, CreateActorRoleDTO[]>;
 //# sourceMappingURL=get-invite-roles.d.ts.map

package/dist/invite/steps/get-invite-roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-invite-roles.d.ts","sourceRoot":"","sources":["../../../src/invite/steps/get-invite-roles.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAA;AAC3D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,0FAwB9B,CAAA"}
+{"version":3,"file":"get-invite-roles.d.ts","sourceRoot":"","sources":["../../../src/invite/steps/get-invite-roles.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAEnB,MAAM,2BAA2B,CAAA;AAIlC;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAA;AAC3D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,yGAyB9B,CAAA"}

package/dist/invite/steps/get-invite-roles.js

@@ -1,33 +1,41 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getInviteRolesStep = exports.getInviteRolesStepId = void 0;
+const modules_sdk_1 = require("@medusajs/framework/modules-sdk");
 const utils_1 = require("@medusajs/framework/utils");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 /**
  * @ignore
- * @featureFlag rbac
  */
 exports.getInviteRolesStepId = "get-invite-roles-step";
 /**
- * This step retrieves the roles associated with an invite.
+ * This step retrieves the roles associated with an invite, each carrying the
+ * scope of its assignment, so the roles can be re-assigned as-is to the user
+ * created when the invite is accepted.
  *
  * @example
  * const data = getInviteRolesStep({
  *   invite_id: "invite_123"
  * })
  * @ignore
- * @featureFlag rbac
  */
 exports.getInviteRolesStep = (0, workflows_sdk_1.createStep)(exports.getInviteRolesStepId, async (input, { container }) => {
-    const remoteLink = container.resolve(utils_1.ContainerRegistrationKeys.LINK);
-    const linkService = remoteLink.getLinkModule(utils_1.Modules.USER, "invite_id", utils_1.Modules.RBAC, "rbac_role_id");
-    if (!linkService) {
+    if (!modules_sdk_1.MedusaModule.isInstalled(utils_1.Modules.RBAC)) {
         return new workflows_sdk_1.StepResponse([]);
     }
-    const inviteRoles = await linkService.list({
-        invite_id: input.invite_id,
+    const service = container.resolve(utils_1.Modules.RBAC);
+    const assignments = await service.listRbacRoleAssignments({
+        reference: "invite",
+        reference_id: input.invite_id,
     });
-    const roleIds = inviteRoles.map((link) => link.rbac_role_id);
-    return new workflows_sdk_1.StepResponse(roleIds);
+    const roles = assignments.map((assignment) => {
+        return assignment.scope && assignment.scope_id
+            ? {
+                role_id: assignment.role_id,
+                scopes: [{ type: assignment.scope, id: assignment.scope_id }],
+            }
+            : { role_id: assignment.role_id };
+    });
+    return new workflows_sdk_1.StepResponse(roles);
 });
 //# sourceMappingURL=get-invite-roles.js.map

package/dist/invite/steps/get-invite-roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-invite-roles.js","sourceRoot":"","sources":["../../../src/invite/steps/get-invite-roles.ts"],"names":[],"mappings":";;;AAAA,qDAA8E;AAC9E,qEAA4E;AAU5E;;;GAGG;AACU,QAAA,oBAAoB,GAAG,uBAAuB,CAAA;AAC3D;;;;;;;;;GASG;AACU,QAAA,kBAAkB,GAAG,IAAA,0BAAU,EAC1C,4BAAoB,EACpB,KAAK,EAAE,KAA8B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,iCAAyB,CAAC,IAAI,CAAC,CAAA;IAEpE,MAAM,WAAW,GAAG,UAAU,CAAC,aAAa,CAC1C,eAAO,CAAC,IAAI,EACZ,WAAW,EACX,eAAO,CAAC,IAAI,EACZ,cAAc,CACf,CAAA;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,4BAAY,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAEjE,OAAO,IAAI,4BAAY,CAAC,OAAO,CAAC,CAAA;AAClC,CAAC,CACF,CAAA"}
+{"version":3,"file":"get-invite-roles.js","sourceRoot":"","sources":["../../../src/invite/steps/get-invite-roles.ts"],"names":[],"mappings":";;;AAAA,iEAA8D;AAK9D,qDAAmD;AACnD,qEAA4E;AAS5E;;GAEG;AACU,QAAA,oBAAoB,GAAG,uBAAuB,CAAA;AAC3D;;;;;;;;;;GAUG;AACU,QAAA,kBAAkB,GAAG,IAAA,0BAAU,EAC1C,4BAAoB,EACpB,KAAK,EAAE,KAA8B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtD,IAAI,CAAC,0BAAY,CAAC,WAAW,CAAC,eAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,4BAAY,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAqB,eAAO,CAAC,IAAI,CAAC,CAAA;IAEnE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC;QACxD,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,KAAK,CAAC,SAAS;KAC9B,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAsB,EAAE;QAC/D,OAAO,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ;YAC5C,CAAC,CAAC;gBACE,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;aAC9D;YACH,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,OAAO,IAAI,4BAAY,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC,CACF,CAAA"}

package/dist/invite/steps/index.d.ts

@@ -2,6 +2,5 @@ export * from "./create-invites";
 export * from "./delete-invites";
 export * from "./get-invite-roles";
 export * from "./refresh-invite-tokens";
-export * from "./validate-roles-exist";
 export * from "./validate-token";
 //# sourceMappingURL=index.d.ts.map

package/dist/invite/steps/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/invite/steps/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA;AACtC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/invite/steps/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,kBAAkB,CAAA"}

package/dist/invite/steps/index.js

@@ -18,6 +18,5 @@ __exportStar(require("./create-invites"), exports);
 __exportStar(require("./delete-invites"), exports);
 __exportStar(require("./get-invite-roles"), exports);
 __exportStar(require("./refresh-invite-tokens"), exports);
-__exportStar(require("./validate-roles-exist"), exports);
 __exportStar(require("./validate-token"), exports);
 //# sourceMappingURL=index.js.map

package/dist/invite/steps/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/invite/steps/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,mDAAgC;AAChC,qDAAkC;AAClC,0DAAuC;AACvC,yDAAsC;AACtC,mDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/invite/steps/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,mDAAgC;AAChC,qDAAkC;AAClC,0DAAuC;AACvC,mDAAgC"}

package/dist/invite/workflows/accept-invite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accept-invite.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/accept-invite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AAexE,eAAO,MAAM,sBAAsB,2BAA2B,CAAA;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,oBAAoB,wHAkDhC,CAAA"}
+{"version":3,"file":"accept-invite.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/accept-invite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AAmBxE,eAAO,MAAM,sBAAsB,2BAA2B,CAAA;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,oBAAoB,wHAgEhC,CAAA"}

package/dist/invite/workflows/accept-invite.js

@@ -5,8 +5,9 @@ const utils_1 = require("@medusajs/framework/utils");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const auth_1 = require("../../auth");
 const emit_event_1 = require("../../common/steps/emit-event");
+const steps_1 = require("../../rbac/steps");
 const user_1 = require("../../user");
-const steps_1 = require("../steps");
+const steps_2 = require("../steps");
 const validate_token_1 = require("../steps/validate-token");
 exports.acceptInviteWorkflowId = "accept-invite-workflow";
 /**
@@ -41,7 +42,7 @@ exports.acceptInviteWorkflowId = "accept-invite-workflow";
 exports.acceptInviteWorkflow = (0, workflows_sdk_1.createWorkflow)(exports.acceptInviteWorkflowId, (input) => {
     const invite = (0, validate_token_1.validateTokenStep)(input.invite_token);
     // Get roles associated with the invite
-    const inviteRoles = (0, steps_1.getInviteRolesStep)({ invite_id: invite.id });
+    const inviteRoles = (0, steps_2.getInviteRolesStep)({ invite_id: invite.id });
     const createUserInput = (0, workflows_sdk_1.transform)({ input, invite, inviteRoles }, ({ input, invite, inviteRoles }) => {
         return [
             {
@@ -64,7 +65,15 @@ exports.acceptInviteWorkflow = (0, workflows_sdk_1.createWorkflow)(exports.accep
             value: createdUser.id,
         };
     });
-    (0, workflows_sdk_1.parallelize)((0, auth_1.setAuthAppMetadataStep)(authUserInput), (0, steps_1.deleteInvitesStep)([invite.id]), (0, emit_event_1.emitEventStep)({
+    // The created user's role assignments are created by createUsersWorkflow
+    // from the invite's roles. Transfer completes by removing the invite's own
+    // assignments once the user has been created.
+    const roleAssignments = (0, steps_1.getRoleAssignmentsStep)({
+        reference: "invite",
+        reference_id: [invite.id],
+    });
+    const roleAssignmentIdsToDelete = (0, workflows_sdk_1.transform)({ roleAssignments }, ({ roleAssignments }) => roleAssignments.map((assignment) => assignment.id));
+    (0, workflows_sdk_1.parallelize)((0, auth_1.setAuthAppMetadataStep)(authUserInput), (0, steps_2.deleteInvitesStep)([invite.id]), (0, steps_1.deleteRoleAssignmentsStep)({ id: roleAssignmentIdsToDelete }), (0, emit_event_1.emitEventStep)({
         eventName: utils_1.InviteWorkflowEvents.ACCEPTED,
         data: { id: invite.id },
     }));

package/dist/invite/workflows/accept-invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"accept-invite.js","sourceRoot":"","sources":["../../../src/invite/workflows/accept-invite.ts"],"names":[],"mappings":";;;AACA,qDAAgE;AAChE,qEAM0C;AAC1C,qCAAmD;AACnD,8DAA6D;AAC7D,qCAAgD;AAChD,oCAAgE;AAChE,4DAA2D;AAE9C,QAAA,sBAAsB,GAAG,wBAAwB,CAAA;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACU,QAAA,oBAAoB,GAAG,IAAA,8BAAc,EAChD,8BAAsB,EACtB,CACE,KAAgE,EACnC,EAAE;IAC/B,MAAM,MAAM,GAAG,IAAA,kCAAiB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAEpD,uCAAuC;IACvC,MAAM,WAAW,GAAG,IAAA,0BAAkB,EAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAEhE,MAAM,eAAe,GAAG,IAAA,yBAAS,EAC/B,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAC9B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjC,OAAO;YACL;gBACE,GAAG,KAAK,CAAC,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;gBACvC,KAAK,EAAE,WAAW;aACnB;SACF,CAAA;IACH,CAAC,CACF,CAAA;IAED,MAAM,KAAK,GAAG,0BAAmB,CAAC,SAAS,CAAC;QAC1C,KAAK,EAAE;YACL,KAAK,EAAE,eAAe;SACvB;KACF,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACrE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAE5B,OAAO;YACL,cAAc,EAAE,KAAK,CAAC,gBAAgB;YACtC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,WAAW,CAAC,EAAE;SACtB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,2BAAW,EACT,IAAA,6BAAsB,EAAC,aAAa,CAAC,EACrC,IAAA,yBAAiB,EAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAC9B,IAAA,0BAAa,EAAC;QACZ,SAAS,EAAE,4BAAoB,CAAC,QAAQ;QACxC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;KACxB,CAAC,CACH,CAAA;IAED,OAAO,IAAI,gCAAgB,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC,CACF,CAAA"}
+{"version":3,"file":"accept-invite.js","sourceRoot":"","sources":["../../../src/invite/workflows/accept-invite.ts"],"names":[],"mappings":";;;AACA,qDAAgE;AAChE,qEAM0C;AAC1C,qCAAmD;AACnD,8DAA6D;AAC7D,4CAGyB;AACzB,qCAAgD;AAChD,oCAAgE;AAChE,4DAA2D;AAE9C,QAAA,sBAAsB,GAAG,wBAAwB,CAAA;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACU,QAAA,oBAAoB,GAAG,IAAA,8BAAc,EAChD,8BAAsB,EACtB,CACE,KAAgE,EACnC,EAAE;IAC/B,MAAM,MAAM,GAAG,IAAA,kCAAiB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAEpD,uCAAuC;IACvC,MAAM,WAAW,GAAG,IAAA,0BAAkB,EAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAEhE,MAAM,eAAe,GAAG,IAAA,yBAAS,EAC/B,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAC9B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QACjC,OAAO;YACL;gBACE,GAAG,KAAK,CAAC,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;gBACvC,KAAK,EAAE,WAAW;aACnB;SACF,CAAA;IACH,CAAC,CACF,CAAA;IAED,MAAM,KAAK,GAAG,0BAAmB,CAAC,SAAS,CAAC;QAC1C,KAAK,EAAE;YACL,KAAK,EAAE,eAAe;SACvB;KACF,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACrE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAE5B,OAAO;YACL,cAAc,EAAE,KAAK,CAAC,gBAAgB;YACtC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,WAAW,CAAC,EAAE;SACtB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,eAAe,GAAG,IAAA,8BAAsB,EAAC;QAC7C,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B,CAAC,CAAA;IACF,MAAM,yBAAyB,GAAG,IAAA,yBAAS,EACzC,EAAE,eAAe,EAAE,EACnB,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CACtB,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CACrD,CAAA;IAED,IAAA,2BAAW,EACT,IAAA,6BAAsB,EAAC,aAAa,CAAC,EACrC,IAAA,yBAAiB,EAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAC9B,IAAA,iCAAyB,EAAC,EAAE,EAAE,EAAE,yBAAyB,EAAE,CAAC,EAC5D,IAAA,0BAAa,EAAC;QACZ,SAAS,EAAE,4BAAoB,CAAC,QAAQ;QACxC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;KACxB,CAAC,CACH,CAAA;IAED,OAAO,IAAI,gCAAgB,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC,CACF,CAAA"}

package/dist/invite/workflows/create-invites.d.ts

@@ -5,6 +5,8 @@ export declare const createInvitesWorkflowId = "create-invite-step";
  * [Create Invite Admin API Route](https://docs.medusajs.com/api/admin/invites/create-invite).
  *
  * You can provide roles to be assigned to each user when the invite is accepted.
+ * Each role can be constrained to one or more scopes, creating one role
+ * assignment per scope.
  *
  * You can use this workflow within your customizations or your own custom workflows, allowing you to
  * create invites within your custom flows.
@@ -16,7 +18,13 @@ export declare const createInvitesWorkflowId = "create-invite-step";
  *     invites: [
  *       {
  *         email: "example@gmail.com",
- *         roles: ["role_super_admin"]
+ *         roles: [
+ *           { role_id: "role_super_admin" },
+ *           {
+ *             role_id: "role_editor",
+ *             scopes: [{ type: "organization", id: "org_123" }]
+ *           }
+ *         ]
  *       }
  *     ]
  *   }

package/dist/invite/workflows/create-invites.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-invites.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/create-invites.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAW1E,eAAO,MAAM,uBAAuB,uBAAuB,CAAA;AAC3D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,qBAAqB,2HAwDjC,CAAA"}
+{"version":3,"file":"create-invites.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/create-invites.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAoB1E,eAAO,MAAM,uBAAuB,uBAAuB,CAAA;AAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,qBAAqB,2HAiEjC,CAAA"}

package/dist/invite/workflows/create-invites.js

@@ -3,15 +3,18 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createInvitesWorkflow = exports.createInvitesWorkflowId = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
-const create_remote_links_1 = require("../../common/steps/create-remote-links");
 const emit_event_1 = require("../../common/steps/emit-event");
 const steps_1 = require("../steps");
+const steps_2 = require("../../rbac/steps");
+const build_role_assignments_1 = require("../../rbac/utils/build-role-assignments");
 exports.createInvitesWorkflowId = "create-invite-step";
 /**
  * This workflow creates one or more user invites. It's used by the
  * [Create Invite Admin API Route](https://docs.medusajs.com/api/admin/invites/create-invite).
  *
  * You can provide roles to be assigned to each user when the invite is accepted.
+ * Each role can be constrained to one or more scopes, creating one role
+ * assignment per scope.
  *
  * You can use this workflow within your customizations or your own custom workflows, allowing you to
  * create invites within your custom flows.
@@ -23,7 +26,13 @@ exports.createInvitesWorkflowId = "create-invite-step";
  *     invites: [
  *       {
  *         email: "example@gmail.com",
- *         roles: ["role_super_admin"]
+ *         roles: [
+ *           { role_id: "role_super_admin" },
+ *           {
+ *             role_id: "role_editor",
+ *             scopes: [{ type: "organization", id: "org_123" }]
+ *           }
+ *         ]
  *       }
  *     ]
  *   }
@@ -37,28 +46,29 @@ exports.createInvitesWorkflow = (0, workflows_sdk_1.createWorkflow)(exports.crea
     const allRoleIds = (0, workflows_sdk_1.transform)({ input }, ({ input }) => {
         const roleIds = new Set();
         input.invites.forEach((invite) => {
-            for (const roleId of invite.roles || []) {
-                roleIds.add(roleId);
+            for (const role of invite.roles || []) {
+                roleIds.add(role.role_id);
             }
         });
         return Array.from(roleIds);
     });
-    (0, steps_1.validateRolesExistStep)(allRoleIds);
-    const createdInvites = (0, steps_1.createInviteStep)(input.invites);
-    const inviteRoleLinks = (0, workflows_sdk_1.transform)({ input, createdInvites }, ({ input, createdInvites }) => {
-        const links = [];
-        input.invites.forEach((invite, index) => {
-            const inviteId = createdInvites[index].id;
-            for (const roleId of invite.roles || []) {
-                links.push({
-                    user: { invite_id: inviteId },
-                    rbac: { rbac_role_id: roleId },
-                });
-            }
+    (0, steps_2.validateRolesExistStep)(allRoleIds);
+    const roleAssignments = (0, workflows_sdk_1.transform)({ input }, ({ input }) => {
+        return input.invites.flatMap((invite) => (0, build_role_assignments_1.buildRoleScopePairs)(invite.roles));
+    });
+    (0, workflows_sdk_1.when)({ roleAssignments, input }, ({ roleAssignments, input }) => !!input.rbac_context?.actor_id && !!roleAssignments.length).then(() => {
+        (0, steps_2.validateActorRolePermissionsStep)({
+            actor_id: input.rbac_context.actor_id,
+            actor: input.rbac_context.actor,
+            granting_scope: input.rbac_context.scope,
+            assignments: roleAssignments,
         });
-        return links;
     });
-    (0, create_remote_links_1.createRemoteLinkStep)(inviteRoleLinks);
+    const createdInvites = (0, steps_1.createInviteStep)(input.invites);
+    const inviteRoleAssignments = (0, workflows_sdk_1.transform)({ input, createdInvites }, ({ input, createdInvites }) => {
+        return input.invites.flatMap((invite, index) => (0, build_role_assignments_1.buildRoleAssignments)(invite.roles, "invite", createdInvites[index].id));
+    });
+    (0, steps_2.createRoleAssignmentsStep)(inviteRoleAssignments);
     const invitesIdEvents = (0, workflows_sdk_1.transform)({ createdInvites }, ({ createdInvites }) => {
         return createdInvites.map((v) => {
             return { id: v.id };

package/dist/invite/workflows/create-invites.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-invites.js","sourceRoot":"","sources":["../../../src/invite/workflows/create-invites.ts"],"names":[],"mappings":";;;AACA,qDAAgE;AAChE,qEAK0C;AAC1C,gFAA6E;AAC7E,8DAA6D;AAC7D,oCAAmE;AACtD,QAAA,uBAAuB,GAAG,oBAAoB,CAAA;AAC3D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACU,QAAA,qBAAqB,GAAG,IAAA,8BAAc,EACjD,+BAAuB,EACvB,CACE,KAAiE,EAClC,EAAE;IACjC,MAAM,UAAU,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACrB,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAA,8BAAsB,EAAC,UAAU,CAAC,CAAA;IAElC,MAAM,cAAc,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEtD,MAAM,eAAe,GAAG,IAAA,yBAAS,EAC/B,EAAE,KAAK,EAAE,cAAc,EAAE,EACzB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAEL,EAAE,CAAA;QACR,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAA;YACzC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;oBAC7B,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;iBAC/B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACd,CAAC,CACF,CAAA;IAED,IAAA,0CAAoB,EAAC,eAAe,CAAC,CAAA;IAErC,MAAM,eAAe,GAAG,IAAA,yBAAS,EAC/B,EAAE,cAAc,EAAE,EAClB,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;QACrB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,IAAA,0BAAa,EAAC;QACZ,SAAS,EAAE,4BAAoB,CAAC,OAAO;QACvC,IAAI,EAAE,eAAe;KACtB,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,cAAc,CAAC,CAAA;AAC7C,CAAC,CACF,CAAA"}
+{"version":3,"file":"create-invites.js","sourceRoot":"","sources":["../../../src/invite/workflows/create-invites.ts"],"names":[],"mappings":";;;AACA,qDAAgE;AAChE,qEAM0C;AAC1C,8DAA6D;AAC7D,oCAA2C;AAC3C,4CAIyB;AACzB,oFAGgD;AACnC,QAAA,uBAAuB,GAAG,oBAAoB,CAAA;AAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACU,QAAA,qBAAqB,GAAG,IAAA,8BAAc,EACjD,+BAAuB,EACvB,CACE,KAAiE,EAClC,EAAE;IACjC,MAAM,UAAU,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,IAAA,8BAAsB,EAAC,UAAU,CAAC,CAAA;IAElC,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACzD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACtC,IAAA,4CAAmB,EAAC,MAAM,CAAC,KAAK,CAAC,CAClC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,oBAAI,EACF,EAAE,eAAe,EAAE,KAAK,EAAE,EAC1B,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,CAC7B,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,CAC7D,CAAC,IAAI,CAAC,GAAG,EAAE;QACV,IAAA,wCAAgC,EAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,YAAa,CAAC,QAAQ;YACtC,KAAK,EAAE,KAAK,CAAC,YAAa,CAAC,KAAK;YAChC,cAAc,EAAE,KAAK,CAAC,YAAa,CAAC,KAAK;YACzC,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEtD,MAAM,qBAAqB,GAAG,IAAA,yBAAS,EACrC,EAAE,KAAK,EAAE,cAAc,EAAE,EACzB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC7C,IAAA,6CAAoB,EAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CACvE,CAAA;IACH,CAAC,CACF,CAAA;IAED,IAAA,iCAAyB,EAAC,qBAAqB,CAAC,CAAA;IAEhD,MAAM,eAAe,GAAG,IAAA,yBAAS,EAC/B,EAAE,cAAc,EAAE,EAClB,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;QACrB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,IAAA,0BAAa,EAAC;QACZ,SAAS,EAAE,4BAAoB,CAAC,OAAO;QACvC,IAAI,EAAE,eAAe;KACtB,CAAC,CAAA;IAEF,OAAO,IAAI,gCAAgB,CAAC,cAAc,CAAC,CAAA;AAC7C,CAAC,CACF,CAAA"}

package/dist/invite/workflows/delete-invites.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-invites.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/delete-invites.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAU/D,eAAO,MAAM,uBAAuB,4BAA4B,CAAA;AAChE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,uHAkBjC,CAAA"}
+{"version":3,"file":"delete-invites.d.ts","sourceRoot":"","sources":["../../../src/invite/workflows/delete-invites.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAe/D,eAAO,MAAM,uBAAuB,4BAA4B,CAAA;AAChE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,uHAgCjC,CAAA"}