@mercurjs/core 2.3.2-canary.1 → 2.3.2-canary.2

package/.medusa/server/src/api/vendor/stock-locations/validators.d.ts

@@ -32,10 +32,10 @@ export declare const VendorGetStockLocationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -45,10 +45,10 @@ export declare const VendorGetStockLocationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -72,10 +72,10 @@ export declare const VendorGetStockLocationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -85,10 +85,10 @@ export declare const VendorGetStockLocationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -101,25 +101,25 @@ export declare const VendorGetStockLocationsParams: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
 }>;
 export declare const VendorUpsertStockLocationAddress: z.ZodObject<{
     address_1: z.ZodString;
@@ -278,9 +278,9 @@ export declare const VendorCreateStockLocationFulfillmentSet: z.ZodObject<{
     name: z.ZodString;
     type: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    type: string;
     name: string;
-}, {
     type: string;
+}, {
     name: string;
+    type: string;
 }>;

package/.medusa/server/src/api/vendor/stores/validators.d.ts

@@ -21,19 +21,19 @@ export declare const VendorGetStoresParams: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
 }>;

package/.medusa/server/src/api/vendor/uploads/middlewares.js

@@ -4,6 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorUploadsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const multer_1 = __importDefault(require("multer"));
 const upload = (0, multer_1.default)({ storage: multer_1.default.memoryStorage() });
 exports.vendorUploadsMiddlewares = [
@@ -11,6 +13,12 @@ exports.vendorUploadsMiddlewares = [
         method: ["POST"],
         matcher: "/vendor/uploads",
         middlewares: [upload.array("files")],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.file,
+                operation: utils_1.PolicyOperation.create,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci91cGxvYWRzL21pZGRsZXdhcmVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7OztBQUFBLG9EQUEyQjtBQUkzQixNQUFNLE1BQU0sR0FBRyxJQUFBLGdCQUFNLEVBQUMsRUFBRSxPQUFPLEVBQUUsZ0JBQU0sQ0FBQyxhQUFhLEVBQUUsRUFBRSxDQUFDLENBQUE7QUFFN0MsUUFBQSx3QkFBd0IsR0FBc0I7SUFDekQ7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLGlCQUFpQjtRQUMxQixXQUFXLEVBQUUsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0tBQ3JDO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.js

@@ -3,6 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SELLER_ROLES = void 0;
 exports.ensureSellerDefaultRoles = ensureSellerDefaultRoles;
 const types_1 = require("@mercurjs/types");
+const CRUD_OPERATIONS = ["read", "create", "update", "delete"];
+const crud = (resource) => CRUD_OPERATIONS.map((operation) => `${resource}:${operation}`);
+const readOnly = (...resources) => resources.map((resource) => `${resource}:read`);
 exports.SELLER_ROLES = [
     {
         id: types_1.SellerRole.SELLER_ADMINISTRATION,
@@ -14,25 +17,64 @@ exports.SELLER_ROLES = [
         id: types_1.SellerRole.INVENTORY_MANAGEMENT,
         name: "Inventory Management",
         description: "Manage offers and catalog",
-        policyKeys: [],
+        policyKeys: [
+            ...crud("product"),
+            ...crud("product_variant"),
+            ...crud("product_option"),
+            ...crud("product_tag"),
+            ...crud("product_type"),
+            ...crud("product_category"),
+            ...crud("product_collection"),
+            ...crud("product_attribute"),
+            ...crud("product_attribute_value"),
+            ...crud("product_change"),
+            ...crud("offer"),
+            ...crud("inventory_item"),
+            ...crud("reservation_item"),
+            ...crud("stock_location"),
+            ...crud("price_list"),
+            ...crud("price_preference"),
+            ...crud("shipping_option"),
+            ...crud("shipping_profile"),
+            ...crud("fulfillment_set"),
+            ...readOnly("seller_member", "seller", "currency", "region", "sales_channel", "shipping_option_type", "fulfillment_provider", "file"),
+            "file:create",
+        ],
     },
     {
         id: types_1.SellerRole.ORDER_MANAGEMENT,
         name: "Order Management",
         description: "View and process orders",
-        policyKeys: [],
+        policyKeys: [
+            ...crud("order"),
+            ...crud("order_change"),
+            ...crud("order_claim"),
+            ...crud("order_exchange"),
+            ...crud("return"),
+            ...crud("return_reason"),
+            ...crud("refund_reason"),
+            ...crud("fulfillment"),
+            ...readOnly("seller_member", "order_group", "customer", "customer_group", "product", "product_variant", "offer", "inventory_item", "stock_location", "shipping_option", "shipping_profile", "payment", "seller", "region", "currency", "product_category", "product_collection", "product_tag", "product_type"),
+            "file:create",
+        ],
     },
     {
         id: types_1.SellerRole.ACCOUNTING,
         name: "Accounting",
         description: "View billing and manage payment information",
-        policyKeys: [],
+        policyKeys: [
+            ...crud("payout_account"),
+            ...readOnly("seller_member", "payout", "commission_line", "commission_rate", "commission_rule", "payment", "order", "order_group", "return", "seller", "currency", "region"),
+        ],
     },
     {
         id: types_1.SellerRole.SUPPORT,
         name: "Support",
         description: "Handle customer messages and view orders",
-        policyKeys: [],
+        policyKeys: [
+            ...crud("review"),
+            ...readOnly("seller_member", "order", "order_group", "order_claim", "order_exchange", "return", "return_reason", "customer", "customer_group", "product", "product_variant", "offer", "seller", "shipping_option", "payment", "region", "currency"),
+        ],
     },
 ];
 async function ensureSellerDefaultRoles(rbacService) {
@@ -84,4 +126,4 @@ async function ensureSellerDefaultRoles(rbacService) {
     }
     return exports.SELLER_ROLES.map((role) => roleById.get(role.id)).filter((role) => !!role);
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/policies/commission.d.ts

@@ -0,0 +1 @@
+export declare const commissionPolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/commission.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commissionPolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+const commissionResources = [
+    "commission_rule",
+    "commission_rate",
+    "commission_line",
+];
+exports.commissionPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(commissionResources));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29tbWlzc2lvbi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9wb2xpY2llcy9jb21taXNzaW9uLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHFEQUEwRDtBQUUxRCxvRkFBOEU7QUFFOUUsTUFBTSxtQkFBbUIsR0FBRztJQUMxQixpQkFBaUI7SUFDakIsaUJBQWlCO0lBQ2pCLGlCQUFpQjtDQUNsQixDQUFBO0FBRVksUUFBQSxrQkFBa0IsR0FBRyxJQUFBLHNCQUFjLEVBQzlDLElBQUEscURBQXdCLEVBQUMsbUJBQW1CLENBQUMsQ0FDOUMsQ0FBQSJ9

package/.medusa/server/src/policies/offer.d.ts

@@ -0,0 +1 @@
+export declare const offerPolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/offer.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.offerPolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+exports.offerPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["offer"]));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib2ZmZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvcG9saWNpZXMvb2ZmZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEscURBQTBEO0FBRTFELG9GQUE4RTtBQUVqRSxRQUFBLGFBQWEsR0FBRyxJQUFBLHNCQUFjLEVBQ3pDLElBQUEscURBQXdCLEVBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUNwQyxDQUFBIn0=

package/.medusa/server/src/policies/payout.d.ts

@@ -0,0 +1 @@
+export declare const payoutPolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/payout.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.payoutPolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+exports.payoutPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["payout", "payout_account"]));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGF5b3V0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3BheW91dC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsY0FBYyxHQUFHLElBQUEsc0JBQWMsRUFDMUMsSUFBQSxxREFBd0IsRUFBQyxDQUFDLFFBQVEsRUFBRSxnQkFBZ0IsQ0FBQyxDQUFDLENBQ3ZELENBQUEifQ==

package/.medusa/server/src/policies/product-attribute.d.ts

@@ -0,0 +1 @@
+export declare const productAttributePolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/product-attribute.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.productAttributePolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+exports.productAttributePolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["product_attribute", "product_attribute_value"]));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJvZHVjdC1hdHRyaWJ1dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvcG9saWNpZXMvcHJvZHVjdC1hdHRyaWJ1dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEscURBQTBEO0FBRTFELG9GQUE4RTtBQUVqRSxRQUFBLHdCQUF3QixHQUFHLElBQUEsc0JBQWMsRUFDcEQsSUFBQSxxREFBd0IsRUFBQyxDQUFDLG1CQUFtQixFQUFFLHlCQUF5QixDQUFDLENBQUMsQ0FDM0UsQ0FBQSJ9

package/.medusa/server/src/policies/product-edit.d.ts

@@ -0,0 +1 @@
+export declare const productEditPolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/product-edit.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.productEditPolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+exports.productEditPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["product_change"]));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJvZHVjdC1lZGl0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3Byb2R1Y3QtZWRpdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsbUJBQW1CLEdBQUcsSUFBQSxzQkFBYyxFQUMvQyxJQUFBLHFEQUF3QixFQUFDLENBQUMsZ0JBQWdCLENBQUMsQ0FBQyxDQUM3QyxDQUFBIn0=

package/.medusa/server/src/policies/review.d.ts

@@ -0,0 +1 @@
+export declare const reviewPolicies: import("@medusajs/framework/utils").definePoliciesExport;

package/.medusa/server/src/policies/review.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reviewPolicies = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+exports.reviewPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["review"]));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV2aWV3LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3Jldmlldy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsY0FBYyxHQUFHLElBQUEsc0JBQWMsRUFDMUMsSUFBQSxxREFBd0IsRUFBQyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQ3JDLENBQUEifQ==

package/.medusa/server/src/policies/seller.js

@@ -2,21 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sellerPolicies = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-// todo: update resoure operations
-const resourceOperations = [
-    ["seller", ["read", "create", "update", "delete"]],
-    ["seller_member", ["read", "create", "update", "delete"]],
+const generate_resource_policies_1 = require("../utils/generate-resource-policies");
+const sellerResources = [
+    "seller",
+    "seller_member",
+    "member_invite",
+    "order_group",
 ];
-const policies = [];
-for (const [resource, operations] of resourceOperations) {
-    for (const operation of operations) {
-        policies.push({
-            name: (0, utils_1.toPascalCase)(operation) + (0, utils_1.toPascalCase)(resource),
-            resource,
-            operation,
-            description: `${(0, utils_1.toPascalCase)(operation)} ${resource.replace(/_/g, " ")}`,
-        });
-    }
-}
-exports.sellerPolicies = (0, utils_1.definePolicies)(policies);
-//# sourceMappingURL=data:application/json;base64,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
+exports.sellerPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(sellerResources));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VsbGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3NlbGxlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRTlFLE1BQU0sZUFBZSxHQUFHO0lBQ3RCLFFBQVE7SUFDUixlQUFlO0lBQ2YsZUFBZTtJQUNmLGFBQWE7Q0FDZCxDQUFBO0FBRVksUUFBQSxjQUFjLEdBQUcsSUFBQSxzQkFBYyxFQUMxQyxJQUFBLHFEQUF3QixFQUFDLGVBQWUsQ0FBQyxDQUMxQyxDQUFBIn0=

package/.medusa/server/src/utils/generate-resource-policies.d.ts

@@ -0,0 +1,7 @@
+import { PolicyDefinition } from "@medusajs/framework/utils";
+export declare const DEFAULT_POLICY_OPERATIONS: readonly ["read", "create", "update", "delete"];
+/**
+ * Expands resources into one policy per operation, matching the naming Medusa
+ * uses for its own catalog (`ReadProduct`, `product:read`).
+ */
+export declare function generateResourcePolicies(resources: string[], operations?: readonly string[]): PolicyDefinition[];

package/.medusa/server/src/utils/generate-resource-policies.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_POLICY_OPERATIONS = void 0;
+exports.generateResourcePolicies = generateResourcePolicies;
+const utils_1 = require("@medusajs/framework/utils");
+exports.DEFAULT_POLICY_OPERATIONS = [
+    "read",
+    "create",
+    "update",
+    "delete",
+];
+/**
+ * Expands resources into one policy per operation, matching the naming Medusa
+ * uses for its own catalog (`ReadProduct`, `product:read`).
+ */
+function generateResourcePolicies(resources, operations = exports.DEFAULT_POLICY_OPERATIONS) {
+    const policies = [];
+    for (const resource of resources) {
+        for (const operation of operations) {
+            policies.push({
+                name: (0, utils_1.toPascalCase)(operation) + (0, utils_1.toPascalCase)(resource),
+                resource,
+                operation,
+                description: `${(0, utils_1.toPascalCase)(operation)} ${resource.replace(/_/g, " ")}`,
+            });
+        }
+    }
+    return policies;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/with-mercur.js

@@ -17,7 +17,11 @@ function withMercur(config = {}) {
     };
     const featureFlags = {
         ...config.featureFlags,
-        rbac: true,
+        // Off unless explicitly enabled. Route policy checks are fail-closed, so
+        // enforcement is opt-in: with the flag off Medusa never wraps a handler in
+        // a permission check, the declared route policies cost nothing, and the
+        // middlewares that resolve an actor's roles return early.
+        rbac: config.featureFlags?.rbac ?? false,
     };
     const modules = [
         ...(config.modules ?? []),
@@ -43,4 +47,4 @@ function withMercur(config = {}) {
         plugins,
     });
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoid2l0aC1tZXJjdXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvd2l0aC1tZXJjdXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFjQSxnQ0FtREM7QUFoRUQscURBQXdEO0FBQ3hELG1GQUE2RTtBQVk3RSxTQUFnQixVQUFVLENBQUMsU0FBNEIsRUFBRTtJQUN2RCxJQUFBLHFEQUF3QixHQUFFLENBQUE7SUFFMUIsTUFBTSxhQUFhLEdBQUc7UUFDcEIsR0FBRyxNQUFNLENBQUMsYUFBYTtRQUN2QixJQUFJLEVBQUU7WUFDSixHQUFHLE1BQU0sQ0FBQyxhQUFhLEVBQUUsSUFBSTtTQUN2QjtLQUNULENBQUE7SUFFRCxNQUFNLEtBQUssR0FBRztRQUNaLEdBQUcsTUFBTSxDQUFDLEtBQUs7UUFDZixPQUFPLEVBQUUsTUFBTSxDQUFDLEtBQUssRUFBRSxPQUFPLElBQUksSUFBSTtLQUN2QyxDQUFBO0lBRUQsTUFBTSxZQUFZLEdBQUc7UUFDbkIsR0FBRyxNQUFNLENBQUMsWUFBWTtRQUN0QixJQUFJLEVBQUUsSUFBSTtLQUNYLENBQUE7SUFFRCxNQUFNLE9BQU8sR0FBRztRQUNkLEdBQUcsQ0FBQyxNQUFNLENBQUMsT0FBTyxJQUFJLEVBQUUsQ0FBQztRQUN6QixHQUFHLENBQUMsQ0FBQyxNQUFNLENBQUMsT0FBTyxJQUFJLEVBQUUsQ0FBQyxDQUFDLElBQUksQ0FDN0IsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUNKLE9BQU8sQ0FBQyxLQUFLLFFBQVE7WUFDckIsU0FBUyxJQUFJLENBQUM7WUFDZCxDQUFDLENBQUMsT0FBTyxLQUFLLHVCQUF1QixDQUN4QztZQUNDLENBQUMsQ0FBQyxFQUFFO1lBQ0osQ0FBQyxDQUFDLENBQUMsRUFBRSxPQUFPLEVBQUUsdUJBQWdDLEVBQUUsQ0FBQyxDQUFDO0tBQ3JELENBQUE7SUFFRCxNQUFNLE9BQU8sR0FBRztRQUNkLEdBQUcsQ0FBQyxNQUFNLENBQUMsT0FBTyxJQUFJLEVBQUUsQ0FBQztRQUN6QixHQUFHLENBQUMsQ0FBQyxNQUFNLENBQUMsT0FBTyxFQUFFLElBQUksQ0FDdkIsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUNKLENBQUMsT0FBTyxDQUFDLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsS0FBSyxnQkFBZ0IsQ0FDL0Q7WUFDQyxDQUFDLENBQUMsQ0FBQyxFQUFFLE9BQU8sRUFBRSxnQkFBZ0IsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLENBQUM7WUFDOUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztLQUNSLENBQUE7SUFFRCxhQUFhO0lBQ2IsT0FBTyxJQUFBLG9CQUFZLEVBQUM7UUFDbEIsR0FBRyxNQUFNO1FBQ1QsYUFBYTtRQUNiLEtBQUs7UUFDTCxZQUFZO1FBQ1osT0FBTztRQUNQLE9BQU87S0FDdUIsQ0FBQyxDQUFBO0FBQ25DLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mercurjs/core",
-  "version": "2.3.2-canary.1",
+  "version": "2.3.2-canary.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/mercurjs/mercur",
@@ -60,7 +60,7 @@
     "@medusajs/medusa": "2.18.0",
     "@medusajs/test-utils": "2.18.0",
     "@medusajs/ui": "4.1.19",
-    "@mercurjs/types": "2.3.2-canary.1",
+    "@mercurjs/types": "2.3.2-canary.2",
     "@swc/core": "^1.7.28",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
@@ -79,7 +79,7 @@
     "multer": "^2.0.2",
     "http-proxy-middleware": "^3.0.3",
     "jsonwebtoken": "^9.0.2",
-    "@mercurjs/cli": "2.3.2-canary.1"
+    "@mercurjs/cli": "2.3.2-canary.2"
   },
   "peerDependencies": {
     "@medusajs/admin-sdk": ">=2.18.0",