@mercurjs/core 2.3.2-canary.1 → 2.3.2-canary.3

package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts

@@ -0,0 +1,16 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework";
+/**
+ * The acting member's effective permissions for the current seller, as a flat
+ * list of `resource:operation` strings with wildcards expanded.
+ *
+ * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
+ * populates from the member's `seller_member.role_id`. Reading them there rather
+ * than from the member keeps this scoped to the seller the request is acting on —
+ * one member can belong to several sellers with a different role in each.
+ *
+ * When the rbac flag is off `resolvePermissions` returns the whole universe, so
+ * the panel sees an unrestricted policy rather than an empty one.
+ */
+export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    permissions: string[];
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const framework_1 = require("@medusajs/framework");
+const utils_1 = require("@medusajs/framework/utils");
+/**
+ * The acting member's effective permissions for the current seller, as a flat
+ * list of `resource:operation` strings with wildcards expanded.
+ *
+ * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
+ * populates from the member's `seller_member.role_id`. Reading them there rather
+ * than from the member keeps this scoped to the seller the request is acting on —
+ * one member can belong to several sellers with a different role in each.
+ *
+ * When the rbac flag is off `resolvePermissions` returns the whole universe, so
+ * the panel sees an unrestricted policy rather than an empty one.
+ */
+const GET = async (req, res) => {
+    const roleIds = req.auth_context?.app_metadata?.roles ?? [];
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const universe = [];
+    const seen = new Set();
+    const consider = (resource, operation) => {
+        if (!resource ||
+            !operation ||
+            resource === utils_1.WILDCARD ||
+            operation === utils_1.WILDCARD) {
+            return;
+        }
+        const key = `${resource}:${operation}`;
+        if (seen.has(key)) {
+            return;
+        }
+        seen.add(key);
+        universe.push({ resource, operation });
+    };
+    for (const definition of Object.values(utils_1.Policy)) {
+        consider(definition?.resource, definition?.operation);
+    }
+    // Covers policies persisted at runtime that the code registry doesn't know.
+    const { data: persistedPolicies } = await query.graph({
+        entity: "rbac_policy",
+        fields: ["resource", "operation"],
+    });
+    for (const policy of persistedPolicies ?? []) {
+        consider(policy?.resource, policy?.operation);
+    }
+    const granted = await (0, framework_1.resolvePermissions)({
+        roles: roleIds,
+        universe,
+        container: req.scope,
+    });
+    res.status(200).json({ permissions: Array.from(granted).sort() });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/refund-reasons/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorRefundReasonsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
@@ -11,6 +13,12 @@ exports.vendorRefundReasonsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetRefundReasonsParams, query_config_1.vendorRefundReasonQueryConfig.list),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.refund_reason,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -18,6 +26,12 @@ exports.vendorRefundReasonsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetRefundReasonParams, query_config_1.vendorRefundReasonQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.refund_reason,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9yZWZ1bmQtcmVhc29ucy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFDQSxtREFBK0Q7QUFFL0QsaURBQThEO0FBQzlELDZDQUdxQjtBQUVSLFFBQUEsOEJBQThCLEdBQXNCO0lBQy9EO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHdCQUF3QjtRQUNqQyxXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2Qix5Q0FBNEIsRUFDNUIsNENBQTZCLENBQUMsSUFBSSxDQUNuQztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSw0QkFBNEI7UUFDckMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsd0NBQTJCLEVBQzNCLDRDQUE2QixDQUFDLFFBQVEsQ0FDdkM7U0FDRjtLQUNGO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/refund-reasons/validators.d.ts

@@ -31,10 +31,10 @@ export declare const VendorGetRefundReasonsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -44,10 +44,10 @@ export declare const VendorGetRefundReasonsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -71,10 +71,10 @@ export declare const VendorGetRefundReasonsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -84,10 +84,10 @@ export declare const VendorGetRefundReasonsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -102,19 +102,19 @@ export declare const VendorGetRefundReasonsParams: z.ZodObject<{
     id?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
 }>;

package/.medusa/server/src/api/vendor/regions/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorRegionsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
@@ -11,6 +13,12 @@ exports.vendorRegionsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetRegionsParams, query_config_1.vendorRegionQueryConfig.list),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.region,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -18,6 +26,12 @@ exports.vendorRegionsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetRegionParams, query_config_1.vendorRegionQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.region,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9yZWdpb25zL21pZGRsZXdhcmVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLG1FQUE2RDtBQUM3RCxxREFBMkQ7QUFFM0QsbURBQStEO0FBRS9ELGlEQUF3RDtBQUN4RCw2Q0FBNEU7QUFFL0QsUUFBQSx3QkFBd0IsR0FBc0I7SUFDekQ7UUFDRSxNQUFNLEVBQUUsQ0FBQyxLQUFLLENBQUM7UUFDZixPQUFPLEVBQUUsaUJBQWlCO1FBQzFCLFdBQVcsRUFBRTtZQUNYLElBQUEscUNBQXlCLEVBQ3ZCLG1DQUFzQixFQUN0QixzQ0FBdUIsQ0FBQyxJQUFJLENBQzdCO1NBQ0Y7UUFDRCxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxNQUFNO2dCQUMvQixTQUFTLEVBQUUsdUJBQWUsQ0FBQyxJQUFJO2FBQ2hDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHFCQUFxQjtRQUM5QixXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2QixrQ0FBcUIsRUFDckIsc0NBQXVCLENBQUMsUUFBUSxDQUNqQztTQUNGO1FBQ0QsUUFBUSxFQUFFO1lBQ1I7Z0JBQ0UsUUFBUSxFQUFFLGlDQUFjLENBQUMsTUFBTTtnQkFDL0IsU0FBUyxFQUFFLHVCQUFlLENBQUMsSUFBSTthQUNoQztTQUNGO0tBQ0Y7Q0FDRixDQUFBIn0=

package/.medusa/server/src/api/vendor/regions/validators.d.ts

@@ -33,10 +33,10 @@ export declare const VendorGetRegionsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -46,10 +46,10 @@ export declare const VendorGetRegionsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -73,10 +73,10 @@ export declare const VendorGetRegionsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -86,10 +86,10 @@ export declare const VendorGetRegionsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -102,25 +102,25 @@ export declare const VendorGetRegionsParams: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
+    currency_code?: string | string[] | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
-    currency_code?: string | string[] | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
+    name?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
+    currency_code?: string | string[] | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    name?: string | string[] | undefined;
-    currency_code?: string | string[] | undefined;
 }>;

package/.medusa/server/src/api/vendor/reservations/middlewares.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorReservationsMiddlewares = void 0;
-const framework_1 = require("@medusajs/framework");
+const policy_resources_1 = require("../../utils/policy-resources");
 const utils_1 = require("@medusajs/framework/utils");
+const framework_1 = require("@medusajs/framework");
+const utils_2 = require("@medusajs/framework/utils");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
 /**
@@ -13,7 +15,7 @@ const validators_1 = require("./validators");
  * another store's inventory.
  */
 const getSellerInventoryItemIds = async (req, restrictTo) => {
-    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const query = req.scope.resolve(utils_2.ContainerRegistrationKeys.QUERY);
     const filters = {
         seller_id: req.seller_context.seller_id,
     };
@@ -42,7 +44,7 @@ const maybeApplyInventoryItemSkuFilter = async (req, _res, next) => {
         return next();
     }
     delete req.filterableFields.sku;
-    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const query = req.scope.resolve(utils_2.ContainerRegistrationKeys.QUERY);
     const { data: inventoryItems } = await query.graph({
         entity: "inventory_item",
         fields: ["id"],
@@ -83,7 +85,7 @@ const applySellerReservationsFilter = async (req, _res, next) => {
 };
 const assertReservationOwnership = async (req, _res, next) => {
     try {
-        const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+        const query = req.scope.resolve(utils_2.ContainerRegistrationKeys.QUERY);
         const { data } = await query.graph({
             entity: "reservation",
             fields: ["id", "inventory_item_id"],
@@ -94,7 +96,7 @@ const assertReservationOwnership = async (req, _res, next) => {
             ? await getSellerInventoryItemIds(req, [reservation.inventory_item_id])
             : [];
         if (!reservation || !owned.length) {
-            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Reservation with id: ${req.params.id} was not found`);
+            throw new utils_2.MedusaError(utils_2.MedusaError.Types.NOT_FOUND, `Reservation with id: ${req.params.id} was not found`);
         }
         return next();
     }
@@ -108,7 +110,7 @@ const assertCreateReservationOwnership = async (req, _res, next) => {
             ?.inventory_item_id;
         const owned = itemId ? await getSellerInventoryItemIds(req, [itemId]) : [];
         if (!owned.length) {
-            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "You are not allowed to create a reservation for this inventory item");
+            throw new utils_2.MedusaError(utils_2.MedusaError.Types.NOT_ALLOWED, "You are not allowed to create a reservation for this inventory item");
         }
         return next();
     }
@@ -125,6 +127,12 @@ exports.vendorReservationsMiddlewares = [
             maybeApplyInventoryItemSkuFilter,
             applySellerReservationsFilter,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.reservation_item,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -133,6 +141,12 @@ exports.vendorReservationsMiddlewares = [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetReservationParams, query_config_1.vendorReservationQueryConfig.retrieve),
             assertReservationOwnership,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.reservation_item,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -142,6 +156,12 @@ exports.vendorReservationsMiddlewares = [
             assertCreateReservationOwnership,
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetReservationParams, query_config_1.vendorReservationQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.reservation_item,
+                operation: utils_1.PolicyOperation.create,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -151,11 +171,23 @@ exports.vendorReservationsMiddlewares = [
             assertReservationOwnership,
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetReservationParams, query_config_1.vendorReservationQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.reservation_item,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["DELETE"],
         matcher: "/vendor/reservations/:id",
         middlewares: [assertReservationOwnership],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.reservation_item,
+                operation: utils_1.PolicyOperation.delete,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9yZXNlcnZhdGlvbnMvbWlkZGxld2FyZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBTUEsbURBRzRCO0FBQzVCLHFEQUdrQztBQUVsQyxpREFBNkQ7QUFDN0QsNkNBS3FCO0FBRXJCOzs7Ozs7R0FNRztBQUNILE1BQU0seUJBQXlCLEdBQUcsS0FBSyxFQUNyQyxHQUErQixFQUMvQixVQUFxQixFQUNGLEVBQUU7SUFDckIsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxPQUFPLEdBQTRCO1FBQ3ZDLFNBQVMsRUFBRSxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVM7S0FDekMsQ0FBQTtJQUNELElBQUksVUFBVSxFQUFFLE1BQU0sRUFBRSxDQUFDO1FBQ3ZCLE9BQU8sQ0FBQyxpQkFBaUIsR0FBRyxVQUFVLENBQUE7SUFDeEMsQ0FBQztJQUVELE1BQU0sRUFBRSxJQUFJLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDakMsTUFBTSxFQUFFLHVCQUF1QjtRQUMvQixNQUFNLEVBQUUsQ0FBQyxtQkFBbUIsQ0FBQztRQUM3QixPQUFPO1FBQ1AsVUFBVSxFQUFFO1lBQ1YsSUFBSSxFQUFFLFVBQVUsRUFBRSxNQUFNLENBQUMsQ0FBQyxDQUFDLFVBQVUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLE1BQU07WUFDckQsSUFBSSxFQUFFLENBQUM7U0FDUjtLQUNGLENBQUMsQ0FBQTtJQUVGLE9BQVEsSUFBNkMsQ0FBQyxHQUFHLENBQ3ZELENBQUMsR0FBRyxFQUFFLEVBQUUsQ0FBQyxHQUFHLENBQUMsaUJBQWlCLENBQy9CLENBQUE7QUFDSCxDQUFDLENBQUE7QUFFRCw2RUFBNkU7QUFDN0UsMkVBQTJFO0FBQzNFLHdFQUF3RTtBQUN4RSxzRUFBc0U7QUFDdEUsb0VBQW9FO0FBQ3BFLE1BQU0sZ0NBQWdDLEdBQUcsS0FBSyxFQUM1QyxHQUErQixFQUMvQixJQUFvQixFQUNwQixJQUF3QixFQUN4QixFQUFFO0lBQ0YsTUFBTSxHQUFHLEdBQUcsR0FBRyxDQUFDLGdCQUFnQixFQUFFLEdBQXlCLENBQUE7SUFDM0QsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDO1FBQ1QsT0FBTyxJQUFJLEVBQUUsQ0FBQTtJQUNmLENBQUM7SUFFRCxPQUFPLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxHQUFHLENBQUE7SUFFL0IsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxFQUFFLElBQUksRUFBRSxjQUFjLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDakQsTUFBTSxFQUFFLGdCQUFnQjtRQUN4QixNQUFNLEVBQUUsQ0FBQyxJQUFJLENBQUM7UUFDZCxPQUFPLEVBQUUsRUFBRSxHQUFHLEVBQUU7S0FDakIsQ0FBQyxDQUFBO0lBRUYsTUFBTSxVQUFVLEdBQUcsY0FBYyxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsSUFBSSxDQUFDLEVBQVksQ0FBQyxDQUFBO0lBQ2xFLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxpQkFBaUIsQ0FBQTtJQUV2RCxJQUFJLFFBQVEsRUFBRSxDQUFDO1FBQ2IsTUFBTSxXQUFXLEdBQUcsS0FBSyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxDQUFBO1FBQ25FLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxpQkFBaUIsR0FBRyxXQUFXLENBQUMsTUFBTSxDQUFDLENBQUMsRUFBRSxFQUFFLEVBQUUsQ0FDakUsVUFBVSxDQUFDLFFBQVEsQ0FBQyxFQUFZLENBQUMsQ0FDbEMsQ0FBQTtJQUNILENBQUM7U0FBTSxDQUFDO1FBQ04sR0FBRyxDQUFDLGdCQUFnQixDQUFDLGlCQUFpQixHQUFHLFVBQVUsQ0FBQTtJQUNyRCxDQUFDO0lBRUQsT0FBTyxJQUFJLEVBQUUsQ0FBQTtBQUNmLENBQUMsQ0FBQTtBQUVELE1BQU0sNkJBQTZCLEdBQUcsS0FBSyxFQUN6QyxHQUErQixFQUMvQixJQUFvQixFQUNwQixJQUF3QixFQUN4QixFQUFFO0lBQ0YsSUFBSSxDQUFDO1FBQ0gsTUFBTSxTQUFTLEdBQUcsR0FBRyxDQUFDLGdCQUFnQixDQUFDLGlCQUcxQixDQUFBO1FBRWIsSUFBSSxVQUFvQixDQUFBO1FBQ3hCLElBQUksU0FBUyxLQUFLLFNBQVMsSUFBSSxTQUFTLEtBQUssSUFBSSxFQUFFLENBQUM7WUFDbEQsTUFBTSxZQUFZLEdBQUcsS0FBSyxDQUFDLE9BQU8sQ0FBQyxTQUFTLENBQUMsQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxDQUFBO1lBQ3ZFLDBEQUEwRDtZQUMxRCxVQUFVLEdBQUcsTUFBTSx5QkFBeUIsQ0FBQyxHQUFHLEVBQUUsWUFBWSxDQUFDLENBQUE7UUFDakUsQ0FBQzthQUFNLENBQUM7WUFDTixVQUFVLEdBQUcsTUFBTSx5QkFBeUIsQ0FBQyxHQUFHLENBQUMsQ0FBQTtRQUNuRCxDQUFDO1FBRUQseUVBQXlFO1FBQ3pFLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxpQkFBaUIsR0FBRyxVQUFVLENBQUMsTUFBTTtZQUN4RCxDQUFDLENBQUMsVUFBVTtZQUNaLENBQUMsQ0FBQyxDQUFDLFVBQVUsQ0FBQyxDQUFBO1FBRWhCLE9BQU8sSUFBSSxFQUFFLENBQUE7SUFDZixDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLE9BQU8sSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFBO0lBQ3BCLENBQUM7QUFDSCxDQUFDLENBQUE7QUFFRCxNQUFNLDBCQUEwQixHQUFHLEtBQUssRUFDdEMsR0FBK0IsRUFDL0IsSUFBb0IsRUFDcEIsSUFBd0IsRUFDeEIsRUFBRTtJQUNGLElBQUksQ0FBQztRQUNILE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO1FBQ2hFLE1BQU0sRUFBRSxJQUFJLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7WUFDakMsTUFBTSxFQUFFLGFBQWE7WUFDckIsTUFBTSxFQUFFLENBQUMsSUFBSSxFQUFFLG1CQUFtQixDQUFDO1lBQ25DLE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRTtTQUMvQixDQUFDLENBQUE7UUFFRixNQUFNLFdBQVcsR0FBRyxJQUFJLENBQUMsQ0FBQyxDQUViLENBQUE7UUFFYixNQUFNLEtBQUssR0FBRyxXQUFXO1lBQ3ZCLENBQUMsQ0FBQyxNQUFNLHlCQUF5QixDQUFDLEdBQUcsRUFBRSxDQUFDLFdBQVcsQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDO1lBQ3ZFLENBQUMsQ0FBQyxFQUFFLENBQUE7UUFFTixJQUFJLENBQUMsV0FBVyxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sRUFBRSxDQUFDO1lBQ2xDLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQzNCLHdCQUF3QixHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsZ0JBQWdCLENBQ3RELENBQUE7UUFDSCxDQUFDO1FBRUQsT0FBTyxJQUFJLEVBQUUsQ0FBQTtJQUNmLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDcEIsQ0FBQztBQUNILENBQUMsQ0FBQTtBQUVELE1BQU0sZ0NBQWdDLEdBQUcsS0FBSyxFQUM1QyxHQUErQixFQUMvQixJQUFvQixFQUNwQixJQUF3QixFQUN4QixFQUFFO0lBQ0YsSUFBSSxDQUFDO1FBQ0gsTUFBTSxNQUFNLEdBQUksR0FBRyxDQUFDLGFBQWdEO1lBQ2xFLEVBQUUsaUJBQWlCLENBQUE7UUFDckIsTUFBTSxLQUFLLEdBQUcsTUFBTSxDQUFDLENBQUMsQ0FBQyxNQUFNLHlCQUF5QixDQUFDLEdBQUcsRUFBRSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQTtRQUUxRSxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sRUFBRSxDQUFDO1lBQ2xCLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxXQUFXLEVBQzdCLHFFQUFxRSxDQUN0RSxDQUFBO1FBQ0gsQ0FBQztRQUVELE9BQU8sSUFBSSxFQUFFLENBQUE7SUFDZixDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLE9BQU8sSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFBO0lBQ3BCLENBQUM7QUFDSCxDQUFDLENBQUE7QUFFWSxRQUFBLDZCQUE2QixHQUFzQjtJQUM5RDtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSxzQkFBc0I7UUFDL0IsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsd0NBQTJCLEVBQzNCLDJDQUE0QixDQUFDLElBQUksQ0FDbEM7WUFDRCxnQ0FBZ0M7WUFDaEMsNkJBQTZCO1NBQzlCO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSwwQkFBMEI7UUFDbkMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsdUNBQTBCLEVBQzFCLDJDQUE0QixDQUFDLFFBQVEsQ0FDdEM7WUFDRCwwQkFBMEI7U0FDM0I7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSxzQkFBc0I7UUFDL0IsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyxvQ0FBdUIsQ0FBQztZQUNqRCxnQ0FBZ0M7WUFDaEMsSUFBQSxxQ0FBeUIsRUFDdkIsdUNBQTBCLEVBQzFCLDJDQUE0QixDQUFDLFFBQVEsQ0FDdEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLDBCQUEwQjtRQUNuQyxXQUFXLEVBQUU7WUFDWCxJQUFBLG9DQUF3QixFQUFDLG9DQUF1QixDQUFDO1lBQ2pELDBCQUEwQjtZQUMxQixJQUFBLHFDQUF5QixFQUN2Qix1Q0FBMEIsRUFDMUIsMkNBQTRCLENBQUMsUUFBUSxDQUN0QztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLFFBQVEsQ0FBQztRQUNsQixPQUFPLEVBQUUsMEJBQTBCO1FBQ25DLFdBQVcsRUFBRSxDQUFDLDBCQUEwQixDQUFDO0tBQzFDO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/reservations/validators.d.ts

@@ -35,10 +35,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -48,10 +48,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -75,10 +75,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -88,10 +88,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -115,10 +115,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -128,10 +128,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -155,10 +155,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -168,10 +168,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -195,10 +195,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -208,10 +208,10 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -223,14 +223,14 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
     }>]>>;
 }, "strip", z.ZodTypeAny, {
     order?: string | undefined;
+    sku?: string | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    sku?: string | undefined;
     created_by?: string | string[] | undefined;
     deleted_at?: any;
     location_id?: string | string[] | undefined;
@@ -240,14 +240,14 @@ export declare const VendorGetReservationsParams: z.ZodObject<{
     line_item_id?: string | string[] | undefined;
 }, {
     order?: string | undefined;
+    sku?: string | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
-    sku?: string | undefined;
     created_by?: string | string[] | undefined;
     deleted_at?: any;
     location_id?: string | string[] | undefined;

package/.medusa/server/src/api/vendor/return-reasons/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorReturnReasonsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
@@ -11,6 +13,12 @@ exports.vendorReturnReasonsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetReturnReasonsParams, query_config_1.vendorReturnReasonQueryConfig.list),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.return_reason,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -18,6 +26,12 @@ exports.vendorReturnReasonsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetReturnReasonParams, query_config_1.vendorReturnReasonQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.return_reason,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9yZXR1cm4tcmVhc29ucy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFDQSxtREFBK0Q7QUFFL0QsaURBQThEO0FBQzlELDZDQUdxQjtBQUVSLFFBQUEsOEJBQThCLEdBQXNCO0lBQy9EO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHdCQUF3QjtRQUNqQyxXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2Qix5Q0FBNEIsRUFDNUIsNENBQTZCLENBQUMsSUFBSSxDQUNuQztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSw0QkFBNEI7UUFDckMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsd0NBQTJCLEVBQzNCLDRDQUE2QixDQUFDLFFBQVEsQ0FDdkM7U0FDRjtLQUNGO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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