@mercurjs/core 2.3.6-canary.0 → 2.3.6-canary.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (252) hide show
  1. package/.medusa/server/src/api/admin/campaigns/middlewares.js +3 -9
  2. package/.medusa/server/src/api/admin/collections/middlewares.js +8 -33
  3. package/.medusa/server/src/api/admin/commission-rates/middlewares.js +9 -39
  4. package/.medusa/server/src/api/admin/core-route-permissions.d.ts +18 -0
  5. package/.medusa/server/src/api/admin/core-route-permissions.js +82 -0
  6. package/.medusa/server/src/api/admin/customer-groups/middlewares.js +3 -9
  7. package/.medusa/server/src/api/admin/inventory-items/middlewares.js +3 -9
  8. package/.medusa/server/src/api/admin/members/middlewares.js +3 -9
  9. package/.medusa/server/src/api/admin/middlewares.js +8 -2
  10. package/.medusa/server/src/api/admin/offers/middlewares.js +10 -21
  11. package/.medusa/server/src/api/admin/order-groups/middlewares.js +10 -15
  12. package/.medusa/server/src/api/admin/orders/middlewares.js +3 -9
  13. package/.medusa/server/src/api/admin/payouts/middlewares.js +4 -15
  14. package/.medusa/server/src/api/admin/price-lists/middlewares.js +3 -9
  15. package/.medusa/server/src/api/admin/product-attributes/middlewares.js +11 -51
  16. package/.medusa/server/src/api/admin/product-categories/middlewares.js +14 -45
  17. package/.medusa/server/src/api/admin/product-changes/middlewares.js +8 -15
  18. package/.medusa/server/src/api/admin/products/[id]/route.js +8 -3
  19. package/.medusa/server/src/api/admin/products/middlewares.js +21 -99
  20. package/.medusa/server/src/api/admin/products/validators.d.ts +3 -3
  21. package/.medusa/server/src/api/admin/products/validators.js +4 -3
  22. package/.medusa/server/src/api/admin/promotions/middlewares.js +7 -21
  23. package/.medusa/server/src/api/admin/reservations/middlewares.js +3 -9
  24. package/.medusa/server/src/api/admin/reviews/middlewares.js +8 -33
  25. package/.medusa/server/src/api/admin/sellers/middlewares.js +32 -117
  26. package/.medusa/server/src/api/admin/sellers/query-config.js +3 -3
  27. package/.medusa/server/src/api/admin/shipping-options/middlewares.js +3 -9
  28. package/.medusa/server/src/api/admin/shipping-profiles/middlewares.js +3 -9
  29. package/.medusa/server/src/api/admin/stock-locations/middlewares.js +3 -9
  30. package/.medusa/server/src/api/admin/users/me/route.d.ts +4 -0
  31. package/.medusa/server/src/api/admin/users/me/route.js +42 -0
  32. package/.medusa/server/src/api/admin/users/middlewares.d.ts +2 -0
  33. package/.medusa/server/src/api/admin/users/middlewares.js +17 -0
  34. package/.medusa/server/src/api/utils/ensure-seller-middleware.js +1 -15
  35. package/.medusa/server/src/api/utils/index.d.ts +1 -2
  36. package/.medusa/server/src/api/utils/index.js +2 -3
  37. package/.medusa/server/src/api/utils/permissions-middleware.d.ts +32 -0
  38. package/.medusa/server/src/api/utils/permissions-middleware.js +133 -0
  39. package/.medusa/server/src/api/utils/scan-unauthenticated-routes.d.ts +6 -0
  40. package/.medusa/server/src/api/utils/scan-unauthenticated-routes.js +29 -6
  41. package/.medusa/server/src/api/utils/split-order-payment-status.d.ts +3 -1
  42. package/.medusa/server/src/api/utils/split-order-payment-status.js +25 -21
  43. package/.medusa/server/src/api/utils/unless-base-url.d.ts +4 -2
  44. package/.medusa/server/src/api/utils/unless-base-url.js +12 -4
  45. package/.medusa/server/src/api/vendor/campaigns/middlewares.js +9 -39
  46. package/.medusa/server/src/api/vendor/claims/middlewares.js +37 -129
  47. package/.medusa/server/src/api/vendor/collections/middlewares.js +5 -21
  48. package/.medusa/server/src/api/vendor/currencies/middlewares.js +4 -15
  49. package/.medusa/server/src/api/vendor/customer-groups/middlewares.js +9 -39
  50. package/.medusa/server/src/api/vendor/customers/middlewares.js +5 -21
  51. package/.medusa/server/src/api/vendor/exchanges/middlewares.js +31 -105
  52. package/.medusa/server/src/api/vendor/fulfillment-providers/middlewares.js +3 -9
  53. package/.medusa/server/src/api/vendor/fulfillment-sets/middlewares.js +8 -33
  54. package/.medusa/server/src/api/vendor/inventory-items/middlewares.js +14 -69
  55. package/.medusa/server/src/api/vendor/members/invites/accept/route.js +2 -1
  56. package/.medusa/server/src/api/vendor/members/me/route.js +6 -3
  57. package/.medusa/server/src/api/vendor/members/middlewares.js +3 -17
  58. package/.medusa/server/src/api/vendor/members/validators.d.ts +4 -2
  59. package/.medusa/server/src/api/vendor/members/validators.js +3 -2
  60. package/.medusa/server/src/api/vendor/middlewares.js +8 -3
  61. package/.medusa/server/src/api/vendor/offers/middlewares.js +10 -45
  62. package/.medusa/server/src/api/vendor/order-edits/middlewares.js +23 -69
  63. package/.medusa/server/src/api/vendor/orders/middlewares.js +18 -63
  64. package/.medusa/server/src/api/vendor/payments/helpers.js +22 -16
  65. package/.medusa/server/src/api/vendor/payments/middlewares.js +7 -33
  66. package/.medusa/server/src/api/vendor/payout-accounts/middlewares.js +6 -27
  67. package/.medusa/server/src/api/vendor/payouts/middlewares.js +4 -15
  68. package/.medusa/server/src/api/vendor/price-lists/middlewares.js +11 -51
  69. package/.medusa/server/src/api/vendor/price-preferences/middlewares.js +4 -15
  70. package/.medusa/server/src/api/vendor/product-attributes/middlewares.js +4 -15
  71. package/.medusa/server/src/api/vendor/product-categories/middlewares.js +5 -21
  72. package/.medusa/server/src/api/vendor/product-tags/middlewares.js +4 -15
  73. package/.medusa/server/src/api/vendor/product-types/middlewares.js +4 -15
  74. package/.medusa/server/src/api/vendor/product-variants/middlewares.js +3 -9
  75. package/.medusa/server/src/api/vendor/products/middlewares.js +24 -75
  76. package/.medusa/server/src/api/vendor/products/validators.d.ts +2 -2
  77. package/.medusa/server/src/api/vendor/products/validators.js +4 -3
  78. package/.medusa/server/src/api/vendor/promotions/middlewares.js +14 -69
  79. package/.medusa/server/src/api/vendor/refund-reasons/middlewares.js +4 -15
  80. package/.medusa/server/src/api/vendor/regions/middlewares.js +4 -15
  81. package/.medusa/server/src/api/vendor/reservations/middlewares.js +9 -33
  82. package/.medusa/server/src/api/vendor/return-reasons/middlewares.js +4 -15
  83. package/.medusa/server/src/api/vendor/returns/middlewares.js +26 -135
  84. package/.medusa/server/src/api/vendor/reviews/middlewares.js +5 -21
  85. package/.medusa/server/src/api/vendor/sales-channels/middlewares.js +5 -21
  86. package/.medusa/server/src/api/vendor/sellers/me/route.js +1 -1
  87. package/.medusa/server/src/api/vendor/sellers/middlewares.js +15 -92
  88. package/.medusa/server/src/api/vendor/sellers/query-config.d.ts +0 -4
  89. package/.medusa/server/src/api/vendor/sellers/query-config.js +8 -11
  90. package/.medusa/server/src/api/vendor/shipping-option-types/middlewares.js +4 -15
  91. package/.medusa/server/src/api/vendor/shipping-options/middlewares.js +9 -39
  92. package/.medusa/server/src/api/vendor/shipping-profiles/middlewares.js +4 -15
  93. package/.medusa/server/src/api/vendor/stock-locations/middlewares.js +11 -51
  94. package/.medusa/server/src/api/vendor/stock-locations/validators.d.ts +2 -2
  95. package/.medusa/server/src/api/vendor/uploads/middlewares.js +9 -9
  96. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.d.ts +5 -0
  97. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.js +14 -0
  98. package/.medusa/server/src/modules/payout/models/payout-account.js +2 -2
  99. package/.medusa/server/src/modules/seller/repositories/order-group.js +9 -1
  100. package/.medusa/server/src/patches/index.d.ts +11 -1
  101. package/.medusa/server/src/patches/index.js +63 -17
  102. package/.medusa/server/src/patches/loader.d.ts +10 -0
  103. package/.medusa/server/src/patches/loader.js +46 -4
  104. package/.medusa/server/src/patches/manifest.js +21 -2
  105. package/.medusa/server/src/patches/patches/@medusajs+core-flows@2.20.1-delivery-hook.patch +39 -0
  106. package/.medusa/server/src/patches/patches/@medusajs+core-flows@2.21.0-payment-hooks.patch +89 -0
  107. package/.medusa/server/src/patches/register.d.ts +1 -0
  108. package/.medusa/server/src/patches/register.js +10 -0
  109. package/.medusa/server/src/permissions/definitions/api-keys.d.ts +1 -0
  110. package/.medusa/server/src/permissions/definitions/api-keys.js +8 -0
  111. package/.medusa/server/src/permissions/definitions/commissions.d.ts +1 -0
  112. package/.medusa/server/src/permissions/definitions/commissions.js +9 -0
  113. package/.medusa/server/src/permissions/definitions/customers.d.ts +1 -0
  114. package/.medusa/server/src/permissions/definitions/customers.js +9 -0
  115. package/.medusa/server/src/permissions/definitions/fulfillment.d.ts +1 -0
  116. package/.medusa/server/src/permissions/definitions/fulfillment.js +10 -0
  117. package/.medusa/server/src/permissions/definitions/inventory.d.ts +1 -0
  118. package/.medusa/server/src/permissions/definitions/inventory.js +10 -0
  119. package/.medusa/server/src/permissions/definitions/members.d.ts +1 -0
  120. package/.medusa/server/src/permissions/definitions/members.js +9 -0
  121. package/.medusa/server/src/permissions/definitions/notifications.d.ts +1 -0
  122. package/.medusa/server/src/permissions/definitions/notifications.js +8 -0
  123. package/.medusa/server/src/permissions/definitions/offers.d.ts +1 -0
  124. package/.medusa/server/src/permissions/definitions/offers.js +8 -0
  125. package/.medusa/server/src/permissions/definitions/orders.d.ts +1 -0
  126. package/.medusa/server/src/permissions/definitions/orders.js +12 -0
  127. package/.medusa/server/src/permissions/definitions/payments.d.ts +1 -0
  128. package/.medusa/server/src/permissions/definitions/payments.js +8 -0
  129. package/.medusa/server/src/permissions/definitions/payouts.d.ts +1 -0
  130. package/.medusa/server/src/permissions/definitions/payouts.js +9 -0
  131. package/.medusa/server/src/permissions/definitions/price-lists.d.ts +1 -0
  132. package/.medusa/server/src/permissions/definitions/price-lists.js +9 -0
  133. package/.medusa/server/src/permissions/definitions/product-attributes.d.ts +1 -0
  134. package/.medusa/server/src/permissions/definitions/product-attributes.js +8 -0
  135. package/.medusa/server/src/permissions/definitions/products.d.ts +1 -0
  136. package/.medusa/server/src/permissions/definitions/products.js +14 -0
  137. package/.medusa/server/src/permissions/definitions/promotions.d.ts +1 -0
  138. package/.medusa/server/src/permissions/definitions/promotions.js +9 -0
  139. package/.medusa/server/src/permissions/definitions/refund-reasons.d.ts +1 -0
  140. package/.medusa/server/src/permissions/definitions/refund-reasons.js +8 -0
  141. package/.medusa/server/src/permissions/definitions/regions.d.ts +1 -0
  142. package/.medusa/server/src/permissions/definitions/regions.js +9 -0
  143. package/.medusa/server/src/permissions/definitions/return-reasons.d.ts +1 -0
  144. package/.medusa/server/src/permissions/definitions/return-reasons.js +8 -0
  145. package/.medusa/server/src/permissions/definitions/reviews.d.ts +1 -0
  146. package/.medusa/server/src/permissions/definitions/reviews.js +8 -0
  147. package/.medusa/server/src/permissions/definitions/roles.d.ts +1 -0
  148. package/.medusa/server/src/permissions/definitions/roles.js +9 -0
  149. package/.medusa/server/src/permissions/definitions/sales-channels.d.ts +1 -0
  150. package/.medusa/server/src/permissions/definitions/sales-channels.js +8 -0
  151. package/.medusa/server/src/permissions/definitions/sellers.d.ts +1 -0
  152. package/.medusa/server/src/permissions/definitions/sellers.js +10 -0
  153. package/.medusa/server/src/permissions/definitions/store.d.ts +1 -0
  154. package/.medusa/server/src/permissions/definitions/store.js +8 -0
  155. package/.medusa/server/src/permissions/definitions/translations.d.ts +1 -0
  156. package/.medusa/server/src/permissions/definitions/translations.js +8 -0
  157. package/.medusa/server/src/permissions/definitions/users.d.ts +1 -0
  158. package/.medusa/server/src/permissions/definitions/users.js +8 -0
  159. package/.medusa/server/src/permissions/definitions/workflow-executions.d.ts +1 -0
  160. package/.medusa/server/src/permissions/definitions/workflow-executions.js +8 -0
  161. package/.medusa/server/src/permissions/index.d.ts +27 -0
  162. package/.medusa/server/src/permissions/index.js +44 -0
  163. package/.medusa/server/src/permissions/registry.d.ts +18 -0
  164. package/.medusa/server/src/permissions/registry.js +86 -0
  165. package/.medusa/server/src/subscribers/split-order-canceled.d.ts +5 -0
  166. package/.medusa/server/src/subscribers/split-order-canceled.js +24 -0
  167. package/.medusa/server/src/subscribers/split-order-payment-captured.d.ts +5 -0
  168. package/.medusa/server/src/subscribers/split-order-payment-captured.js +24 -0
  169. package/.medusa/server/src/utils/sanitize-rich-text.d.ts +2 -0
  170. package/.medusa/server/src/utils/sanitize-rich-text.js +50 -0
  171. package/.medusa/server/src/with-mercur.d.ts +5 -3
  172. package/.medusa/server/src/with-mercur.js +4 -23
  173. package/.medusa/server/src/workflows/cart/workflows/complete-cart-with-split-orders.js +18 -31
  174. package/.medusa/server/src/workflows/commission/workflows/refresh-order-commission-lines.d.ts +8 -1
  175. package/.medusa/server/src/workflows/commission/workflows/refresh-order-commission-lines.js +6 -2
  176. package/.medusa/server/src/workflows/index.d.ts +1 -0
  177. package/.medusa/server/src/workflows/index.js +2 -1
  178. package/.medusa/server/src/workflows/offer/workflows/create-offers.js +34 -4
  179. package/.medusa/server/src/workflows/order/workflows/confirm-return-receive.d.ts +15 -2
  180. package/.medusa/server/src/workflows/order/workflows/confirm-return-receive.js +14 -3
  181. package/.medusa/server/src/workflows/order/workflows/fulfillment-hooks.d.ts +9 -0
  182. package/.medusa/server/src/workflows/order/workflows/fulfillment-hooks.js +9 -0
  183. package/.medusa/server/src/workflows/order/workflows/index.d.ts +1 -0
  184. package/.medusa/server/src/workflows/order/workflows/index.js +2 -1
  185. package/.medusa/server/src/workflows/order-group/workflows/get-order-group-detail.js +8 -8
  186. package/.medusa/server/src/workflows/order-group/workflows/get-order-groups-list.js +8 -8
  187. package/.medusa/server/src/workflows/payment/index.d.ts +2 -0
  188. package/.medusa/server/src/workflows/payment/index.js +3 -1
  189. package/.medusa/server/src/workflows/payment/steps/create-order-payments.d.ts +44 -0
  190. package/.medusa/server/src/workflows/payment/steps/create-order-payments.js +48 -0
  191. package/.medusa/server/src/workflows/payment/steps/index.d.ts +2 -0
  192. package/.medusa/server/src/workflows/payment/steps/index.js +19 -0
  193. package/.medusa/server/src/workflows/payment/steps/record-payment-captures.d.ts +29 -0
  194. package/.medusa/server/src/workflows/payment/steps/record-payment-captures.js +28 -0
  195. package/.medusa/server/src/workflows/payment/utils/index.d.ts +2 -0
  196. package/.medusa/server/src/workflows/payment/utils/index.js +19 -0
  197. package/.medusa/server/src/workflows/payment/utils/split-order-payment-group.d.ts +141 -0
  198. package/.medusa/server/src/workflows/payment/utils/split-order-payment-group.js +234 -0
  199. package/.medusa/server/src/workflows/payment/utils/split-order-payment.d.ts +15 -0
  200. package/.medusa/server/src/workflows/payment/utils/split-order-payment.js +65 -0
  201. package/.medusa/server/src/workflows/payment/workflows/index.d.ts +2 -0
  202. package/.medusa/server/src/workflows/payment/workflows/index.js +3 -1
  203. package/.medusa/server/src/workflows/payment/workflows/payment-hooks.d.ts +25 -0
  204. package/.medusa/server/src/workflows/payment/workflows/payment-hooks.js +10 -0
  205. package/.medusa/server/src/workflows/payment/workflows/split-order-payments.d.ts +66 -0
  206. package/.medusa/server/src/workflows/payment/workflows/split-order-payments.js +164 -0
  207. package/.medusa/server/src/workflows/payout/workflows/create-payout.d.ts +4 -1
  208. package/.medusa/server/src/workflows/payout/workflows/create-payout.js +6 -2
  209. package/.medusa/server/src/workflows/product-edit/workflows/apply-product-change-actions.js +18 -2
  210. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.d.ts +1 -0
  211. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.js +2 -2
  212. package/.medusa/server/src/workflows/seller/steps/index.d.ts +0 -1
  213. package/.medusa/server/src/workflows/seller/steps/index.js +1 -2
  214. package/.medusa/server/src/workflows/seller/workflows/accept-member-invite.d.ts +17 -2
  215. package/.medusa/server/src/workflows/seller/workflows/accept-member-invite.js +14 -3
  216. package/.medusa/server/src/workflows/seller/workflows/create-seller-account.d.ts +16 -1
  217. package/.medusa/server/src/workflows/seller/workflows/create-seller-account.js +6 -3
  218. package/.medusa/server/src/workflows/seller/workflows/index.d.ts +0 -1
  219. package/.medusa/server/src/workflows/seller/workflows/index.js +1 -2
  220. package/package.json +13 -11
  221. package/.medusa/server/src/api/utils/policy-resources.d.ts +0 -59
  222. package/.medusa/server/src/api/utils/policy-resources.js +0 -64
  223. package/.medusa/server/src/api/utils/rbac-role-fields.d.ts +0 -1
  224. package/.medusa/server/src/api/utils/rbac-role-fields.js +0 -10
  225. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.d.ts +0 -19
  226. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.js +0 -55
  227. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts +0 -16
  228. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js +0 -58
  229. package/.medusa/server/src/links/seller-member-rbac-role.d.ts +0 -2
  230. package/.medusa/server/src/links/seller-member-rbac-role.js +0 -41
  231. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.d.ts +0 -11
  232. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.js +0 -128
  233. package/.medusa/server/src/policies/commission.d.ts +0 -1
  234. package/.medusa/server/src/policies/commission.js +0 -12
  235. package/.medusa/server/src/policies/offer.d.ts +0 -1
  236. package/.medusa/server/src/policies/offer.js +0 -7
  237. package/.medusa/server/src/policies/payout.d.ts +0 -1
  238. package/.medusa/server/src/policies/payout.js +0 -7
  239. package/.medusa/server/src/policies/product-attribute.d.ts +0 -1
  240. package/.medusa/server/src/policies/product-attribute.js +0 -7
  241. package/.medusa/server/src/policies/product-edit.d.ts +0 -1
  242. package/.medusa/server/src/policies/product-edit.js +0 -7
  243. package/.medusa/server/src/policies/review.d.ts +0 -1
  244. package/.medusa/server/src/policies/review.js +0 -7
  245. package/.medusa/server/src/policies/seller.d.ts +0 -1
  246. package/.medusa/server/src/policies/seller.js +0 -13
  247. package/.medusa/server/src/utils/generate-resource-policies.d.ts +0 -7
  248. package/.medusa/server/src/utils/generate-resource-policies.js +0 -30
  249. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.d.ts +0 -2
  250. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.js +0 -16
  251. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.d.ts +0 -2
  252. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.js +0 -11
@@ -1,59 +0,0 @@
1
- /**
2
- * Resource names used in route `policies` declarations. Mercur-owned resources
3
- * are declared in `src/policies/*`; the rest come from Medusa's own catalog.
4
- *
5
- * Keep the values in sync with those catalogs — an unknown resource name is
6
- * not a type error, it silently never matches a granted policy.
7
- */
8
- export declare const PolicyResource: {
9
- readonly seller: "seller";
10
- readonly seller_member: "seller_member";
11
- readonly member_invite: "member_invite";
12
- readonly order_group: "order_group";
13
- readonly offer: "offer";
14
- readonly commission_rule: "commission_rule";
15
- readonly commission_rate: "commission_rate";
16
- readonly commission_line: "commission_line";
17
- readonly payout: "payout";
18
- readonly payout_account: "payout_account";
19
- readonly product_attribute: "product_attribute";
20
- readonly product_attribute_value: "product_attribute_value";
21
- readonly product_change: "product_change";
22
- readonly review: "review";
23
- readonly product: "product";
24
- readonly product_variant: "product_variant";
25
- readonly product_option: "product_option";
26
- readonly product_tag: "product_tag";
27
- readonly product_type: "product_type";
28
- readonly product_category: "product_category";
29
- readonly product_collection: "product_collection";
30
- readonly order: "order";
31
- readonly order_change: "order_change";
32
- readonly order_claim: "order_claim";
33
- readonly order_exchange: "order_exchange";
34
- readonly return: "return";
35
- readonly return_reason: "return_reason";
36
- readonly refund_reason: "refund_reason";
37
- readonly customer: "customer";
38
- readonly customer_group: "customer_group";
39
- readonly inventory_item: "inventory_item";
40
- readonly reservation_item: "reservation_item";
41
- readonly stock_location: "stock_location";
42
- readonly price_list: "price_list";
43
- readonly price_preference: "price_preference";
44
- readonly currency: "currency";
45
- readonly promotion: "promotion";
46
- readonly campaign: "campaign";
47
- readonly region: "region";
48
- readonly sales_channel: "sales_channel";
49
- readonly store: "store";
50
- readonly payment: "payment";
51
- readonly shipping_option: "shipping_option";
52
- readonly shipping_option_type: "shipping_option_type";
53
- readonly shipping_profile: "shipping_profile";
54
- readonly fulfillment: "fulfillment";
55
- readonly fulfillment_provider: "fulfillment_provider";
56
- readonly fulfillment_set: "fulfillment_set";
57
- readonly file: "file";
58
- };
59
- export type PolicyResourceName = (typeof PolicyResource)[keyof typeof PolicyResource];
@@ -1,64 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.PolicyResource = void 0;
4
- /**
5
- * Resource names used in route `policies` declarations. Mercur-owned resources
6
- * are declared in `src/policies/*`; the rest come from Medusa's own catalog.
7
- *
8
- * Keep the values in sync with those catalogs — an unknown resource name is
9
- * not a type error, it silently never matches a granted policy.
10
- */
11
- exports.PolicyResource = {
12
- // Mercur
13
- seller: "seller",
14
- seller_member: "seller_member",
15
- member_invite: "member_invite",
16
- order_group: "order_group",
17
- offer: "offer",
18
- commission_rule: "commission_rule",
19
- commission_rate: "commission_rate",
20
- commission_line: "commission_line",
21
- payout: "payout",
22
- payout_account: "payout_account",
23
- product_attribute: "product_attribute",
24
- product_attribute_value: "product_attribute_value",
25
- product_change: "product_change",
26
- review: "review",
27
- // Medusa
28
- product: "product",
29
- product_variant: "product_variant",
30
- product_option: "product_option",
31
- product_tag: "product_tag",
32
- product_type: "product_type",
33
- product_category: "product_category",
34
- product_collection: "product_collection",
35
- order: "order",
36
- order_change: "order_change",
37
- order_claim: "order_claim",
38
- order_exchange: "order_exchange",
39
- return: "return",
40
- return_reason: "return_reason",
41
- refund_reason: "refund_reason",
42
- customer: "customer",
43
- customer_group: "customer_group",
44
- inventory_item: "inventory_item",
45
- reservation_item: "reservation_item",
46
- stock_location: "stock_location",
47
- price_list: "price_list",
48
- price_preference: "price_preference",
49
- currency: "currency",
50
- promotion: "promotion",
51
- campaign: "campaign",
52
- region: "region",
53
- sales_channel: "sales_channel",
54
- store: "store",
55
- payment: "payment",
56
- shipping_option: "shipping_option",
57
- shipping_option_type: "shipping_option_type",
58
- shipping_profile: "shipping_profile",
59
- fulfillment: "fulfillment",
60
- fulfillment_provider: "fulfillment_provider",
61
- fulfillment_set: "fulfillment_set",
62
- file: "file",
63
- };
64
- //# sourceMappingURL=data:application/json;base64,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
@@ -1 +0,0 @@
1
- export declare const withRbacRoleFields: (fields: string[]) => string[];
@@ -1,10 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.withRbacRoleFields = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- // The seller_member <-> rbac_role link is only registered while the rbac flag is
6
- // on, so requesting `rbac_role.*` without it fails. Call this at request time,
7
- // not at module load: feature flags aren't resolved when route files are imported.
8
- const withRbacRoleFields = (fields) => utils_1.FeatureFlag.isFeatureEnabled("rbac") ? [...fields, "rbac_role.*"] : fields;
9
- exports.withRbacRoleFields = withRbacRoleFields;
10
- //# sourceMappingURL=data:application/json;base64,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
@@ -1,19 +0,0 @@
1
- import { MedusaNextFunction, MedusaResponse } from "@medusajs/framework";
2
- import { AuthenticatedMedusaRequest } from "@medusajs/framework/http";
3
- /**
4
- * Seeded by the RBAC module's initial-data loader; holds the `*:*` policy.
5
- */
6
- export declare const SUPER_ADMIN_ROLE_ID = "role_super_admin";
7
- /**
8
- * Resolves the acting admin user's RBAC roles per request.
9
- *
10
- * Medusa bakes roles into the JWT at login, which means a role change only
11
- * takes effect once the token is re-issued. Reading them here instead keeps
12
- * enforcement current, and mirrors what `ensureSellerMiddleware` already does
13
- * on the vendor side.
14
- *
15
- * A user with no roles falls back to super admin rather than being denied.
16
- * Route policy checks reject an actor with an empty role list outright, so
17
- * without this fallback every admin predating RBAC would lose access.
18
- */
19
- export declare function resolveAdminRolesMiddleware(req: AuthenticatedMedusaRequest, _res: MedusaResponse, next: MedusaNextFunction): Promise<void>;
@@ -1,55 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.SUPER_ADMIN_ROLE_ID = void 0;
4
- exports.resolveAdminRolesMiddleware = resolveAdminRolesMiddleware;
5
- const utils_1 = require("@medusajs/framework/utils");
6
- /**
7
- * Seeded by the RBAC module's initial-data loader; holds the `*:*` policy.
8
- */
9
- exports.SUPER_ADMIN_ROLE_ID = "role_super_admin";
10
- /**
11
- * Resolves the acting admin user's RBAC roles per request.
12
- *
13
- * Medusa bakes roles into the JWT at login, which means a role change only
14
- * takes effect once the token is re-issued. Reading them here instead keeps
15
- * enforcement current, and mirrors what `ensureSellerMiddleware` already does
16
- * on the vendor side.
17
- *
18
- * A user with no roles falls back to super admin rather than being denied.
19
- * Route policy checks reject an actor with an empty role list outright, so
20
- * without this fallback every admin predating RBAC would lose access.
21
- */
22
- async function resolveAdminRolesMiddleware(req, _res, next) {
23
- const actorId = req.auth_context?.actor_id;
24
- // Route policies are only enforced while the flag is on, so skip the lookup
25
- // entirely otherwise — this runs on every admin request.
26
- if (!actorId || !utils_1.FeatureFlag.isFeatureEnabled("rbac")) {
27
- return next();
28
- }
29
- const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
30
- let roles = [];
31
- try {
32
- const { data } = await query.graph({
33
- entity: "user",
34
- fields: ["rbac_roles.id"],
35
- filters: { id: actorId },
36
- }, { cache: { enable: true } });
37
- roles = (data?.[0]?.rbac_roles ?? [])
38
- .map((role) => role.id)
39
- .filter(Boolean);
40
- }
41
- catch {
42
- // The user <-> role link only exists while the rbac flag is on. Treat a
43
- // failed lookup the same as "no roles assigned".
44
- }
45
- // The link is the source of truth, but fall back to whatever the token
46
- // carries so callers that assign roles outside the link keep working.
47
- const tokenRoles = req.auth_context.app_metadata?.roles ?? [];
48
- const resolved = roles.length ? roles : tokenRoles;
49
- req.auth_context.app_metadata = {
50
- ...req.auth_context.app_metadata,
51
- roles: resolved.length ? resolved : [exports.SUPER_ADMIN_ROLE_ID],
52
- };
53
- return next();
54
- }
55
- //# sourceMappingURL=data:application/json;base64,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
@@ -1,16 +0,0 @@
1
- import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework";
2
- /**
3
- * The acting member's effective permissions for the current seller, as a flat
4
- * list of `resource:operation` strings with wildcards expanded.
5
- *
6
- * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
7
- * populates from the member's `seller_member.role_id`. Reading them there rather
8
- * than from the member keeps this scoped to the seller the request is acting on —
9
- * one member can belong to several sellers with a different role in each.
10
- *
11
- * When the rbac flag is off `resolvePermissions` returns the whole universe, so
12
- * the panel sees an unrestricted policy rather than an empty one.
13
- */
14
- export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
15
- permissions: string[];
16
- }>) => Promise<void>;
@@ -1,58 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.GET = void 0;
4
- const framework_1 = require("@medusajs/framework");
5
- const utils_1 = require("@medusajs/framework/utils");
6
- /**
7
- * The acting member's effective permissions for the current seller, as a flat
8
- * list of `resource:operation` strings with wildcards expanded.
9
- *
10
- * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
11
- * populates from the member's `seller_member.role_id`. Reading them there rather
12
- * than from the member keeps this scoped to the seller the request is acting on —
13
- * one member can belong to several sellers with a different role in each.
14
- *
15
- * When the rbac flag is off `resolvePermissions` returns the whole universe, so
16
- * the panel sees an unrestricted policy rather than an empty one.
17
- */
18
- const GET = async (req, res) => {
19
- const roleIds = req.auth_context?.app_metadata?.roles ?? [];
20
- const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
21
- const universe = [];
22
- const seen = new Set();
23
- const consider = (resource, operation) => {
24
- if (!resource ||
25
- !operation ||
26
- resource === utils_1.WILDCARD ||
27
- operation === utils_1.WILDCARD) {
28
- return;
29
- }
30
- const key = `${resource}:${operation}`;
31
- if (seen.has(key)) {
32
- return;
33
- }
34
- seen.add(key);
35
- universe.push({ resource, operation });
36
- };
37
- for (const definition of Object.values(utils_1.Policy)) {
38
- consider(definition?.resource, definition?.operation);
39
- }
40
- // Covers policies persisted at runtime that the code registry doesn't know.
41
- if (utils_1.FeatureFlag.isFeatureEnabled("rbac")) {
42
- const { data: persistedPolicies } = await query.graph({
43
- entity: "rbac_policy",
44
- fields: ["resource", "operation"],
45
- });
46
- for (const policy of persistedPolicies ?? []) {
47
- consider(policy?.resource, policy?.operation);
48
- }
49
- }
50
- const granted = await (0, framework_1.resolvePermissions)({
51
- roles: roleIds,
52
- universe,
53
- container: req.scope,
54
- });
55
- res.status(200).json({ permissions: Array.from(granted).sort() });
56
- };
57
- exports.GET = GET;
58
- //# sourceMappingURL=data:application/json;base64,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
@@ -1,2 +0,0 @@
1
- declare const _default: import("@medusajs/framework/utils").DefineLinkExport;
2
- export default _default;
@@ -1,41 +0,0 @@
1
- "use strict";
2
- var __importDefault = (this && this.__importDefault) || function (mod) {
3
- return (mod && mod.__esModule) ? mod : { "default": mod };
4
- };
5
- Object.defineProperty(exports, "__esModule", { value: true });
6
- const utils_1 = require("@medusajs/framework/utils");
7
- const config_1 = require("@medusajs/framework/config");
8
- const seller_1 = __importDefault(require("../modules/seller"));
9
- // `medusaIntegrationTestRunner` registers feature flags without the project
10
- // config and loads link files before Medusa's own flag loader runs, so the
11
- // global router still reports rbac as off at that point. The loaded config is
12
- // the reliable source.
13
- const isRbacEnabled = () => {
14
- if (utils_1.FeatureFlag.isFeatureEnabled("rbac")) {
15
- return true;
16
- }
17
- try {
18
- return !!config_1.configManager.config.featureFlags?.rbac;
19
- }
20
- catch {
21
- return false;
22
- }
23
- };
24
- // Must run before defineLink, which checks whether the file is disabled.
25
- (0, utils_1.defineFileConfig)({
26
- isDisabled: () => !isRbacEnabled(),
27
- });
28
- // Described inline instead of importing `@medusajs/medusa/rbac`: link files are
29
- // evaluated at boot, and that import would load the RBAC module even with the
30
- // flag off.
31
- exports.default = (0, utils_1.defineLink)({
32
- linkable: seller_1.default.linkable.sellerMember,
33
- field: "role_id",
34
- }, {
35
- linkable: "rbac_role_id",
36
- primaryKey: "id",
37
- serviceName: utils_1.Modules.RBAC,
38
- field: "rbacRole",
39
- entity: "RbacRole",
40
- }, { readOnly: true });
41
- //# sourceMappingURL=data:application/json;base64,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
@@ -1,11 +0,0 @@
1
- import { IRbacModuleService, RbacRoleDTO } from "@medusajs/types";
2
- import { SellerRole } from "@mercurjs/types";
3
- type SellerRoleDefinition = {
4
- id: SellerRole;
5
- name: string;
6
- description: string;
7
- policyKeys: "*" | string[];
8
- };
9
- export declare const SELLER_ROLES: SellerRoleDefinition[];
10
- export declare function ensureSellerDefaultRoles(rbacService: IRbacModuleService): Promise<RbacRoleDTO[]>;
11
- export {};
@@ -1,128 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.SELLER_ROLES = void 0;
4
- exports.ensureSellerDefaultRoles = ensureSellerDefaultRoles;
5
- const types_1 = require("@mercurjs/types");
6
- const CRUD_OPERATIONS = ["read", "create", "update", "delete"];
7
- const crud = (resource) => CRUD_OPERATIONS.map((operation) => `${resource}:${operation}`);
8
- const readOnly = (...resources) => resources.map((resource) => `${resource}:read`);
9
- exports.SELLER_ROLES = [
10
- {
11
- id: types_1.SellerRole.SELLER_ADMINISTRATION,
12
- name: "Seller Administration",
13
- description: "Full access to all seller account features and settings",
14
- policyKeys: "*",
15
- },
16
- {
17
- id: types_1.SellerRole.INVENTORY_MANAGEMENT,
18
- name: "Inventory Management",
19
- description: "Manage offers and catalog",
20
- policyKeys: [
21
- ...crud("product"),
22
- ...crud("product_variant"),
23
- ...crud("product_option"),
24
- ...crud("product_tag"),
25
- ...crud("product_type"),
26
- ...crud("product_category"),
27
- ...crud("product_collection"),
28
- ...crud("product_attribute"),
29
- ...crud("product_attribute_value"),
30
- ...crud("product_change"),
31
- ...crud("offer"),
32
- ...crud("inventory_item"),
33
- ...crud("reservation_item"),
34
- ...crud("stock_location"),
35
- ...crud("price_list"),
36
- ...crud("price_preference"),
37
- ...crud("shipping_option"),
38
- ...crud("fulfillment_set"),
39
- ...readOnly("seller_member", "seller", "shipping_profile", "currency", "region", "sales_channel", "shipping_option_type", "fulfillment_provider", "file"),
40
- "file:create",
41
- ],
42
- },
43
- {
44
- id: types_1.SellerRole.ORDER_MANAGEMENT,
45
- name: "Order Management",
46
- description: "View and process orders",
47
- policyKeys: [
48
- ...crud("order"),
49
- ...crud("order_change"),
50
- ...crud("order_claim"),
51
- ...crud("order_exchange"),
52
- ...crud("return"),
53
- ...crud("return_reason"),
54
- ...crud("refund_reason"),
55
- ...crud("fulfillment"),
56
- ...readOnly("seller_member", "order_group", "customer", "customer_group", "product", "product_variant", "offer", "inventory_item", "stock_location", "shipping_option", "shipping_profile", "payment", "seller", "region", "currency", "product_category", "product_collection", "product_tag", "product_type"),
57
- "file:create",
58
- ],
59
- },
60
- {
61
- id: types_1.SellerRole.ACCOUNTING,
62
- name: "Accounting",
63
- description: "View billing and manage payment information",
64
- policyKeys: [
65
- ...crud("payout_account"),
66
- ...readOnly("seller_member", "payout", "commission_line", "commission_rate", "commission_rule", "payment", "order", "order_group", "return", "seller", "currency", "region"),
67
- ],
68
- },
69
- {
70
- id: types_1.SellerRole.SUPPORT,
71
- name: "Support",
72
- description: "Handle customer messages and view orders",
73
- policyKeys: [
74
- ...crud("review"),
75
- ...readOnly("seller_member", "order", "order_group", "order_claim", "order_exchange", "return", "return_reason", "customer", "customer_group", "product", "product_variant", "offer", "seller", "shipping_option", "payment", "region", "currency"),
76
- ],
77
- },
78
- ];
79
- async function ensureSellerDefaultRoles(rbacService) {
80
- const roleIds = exports.SELLER_ROLES.map((role) => role.id);
81
- const existingRoles = await rbacService.listRbacRoles({ id: roleIds });
82
- const roleById = new Map(existingRoles.map((role) => [role.id, role]));
83
- const missingRoles = exports.SELLER_ROLES.filter((role) => !roleById.has(role.id));
84
- if (missingRoles.length) {
85
- const createdRoles = await rbacService.createRbacRoles(missingRoles.map((role) => ({
86
- id: role.id,
87
- name: role.name,
88
- description: role.description,
89
- })));
90
- createdRoles.forEach((role) => {
91
- roleById.set(role.id, role);
92
- });
93
- }
94
- const policies = await rbacService.listRbacPolicies({});
95
- const existingRolePolicies = await rbacService.listRbacRolePolicies({
96
- role_id: roleIds,
97
- });
98
- const policyByKey = new Map(policies.map((policy) => [policy.key, policy]));
99
- const existingBindings = new Set(existingRolePolicies.map((rolePolicy) => `${rolePolicy.role_id}:${rolePolicy.policy_id}`));
100
- const rolePoliciesToCreate = [];
101
- for (const roleDefinition of exports.SELLER_ROLES) {
102
- const role = roleById.get(roleDefinition.id);
103
- if (!role) {
104
- continue;
105
- }
106
- const targetPolicies = roleDefinition.policyKeys === "*"
107
- ? policies
108
- : roleDefinition.policyKeys
109
- .map((key) => policyByKey.get(key))
110
- .filter((policy) => !!policy);
111
- for (const policy of targetPolicies) {
112
- const bindingKey = `${role.id}:${policy.id}`;
113
- if (existingBindings.has(bindingKey)) {
114
- continue;
115
- }
116
- existingBindings.add(bindingKey);
117
- rolePoliciesToCreate.push({
118
- role_id: role.id,
119
- policy_id: policy.id,
120
- });
121
- }
122
- }
123
- if (rolePoliciesToCreate.length) {
124
- await rbacService.createRbacRolePolicies(rolePoliciesToCreate);
125
- }
126
- return exports.SELLER_ROLES.map((role) => roleById.get(role.id)).filter((role) => !!role);
127
- }
128
- //# sourceMappingURL=data:application/json;base64,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
@@ -1 +0,0 @@
1
- export declare const commissionPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,12 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.commissionPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- const commissionResources = [
7
- "commission_rule",
8
- "commission_rate",
9
- "commission_line",
10
- ];
11
- exports.commissionPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(commissionResources));
12
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29tbWlzc2lvbi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9wb2xpY2llcy9jb21taXNzaW9uLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHFEQUEwRDtBQUUxRCxvRkFBOEU7QUFFOUUsTUFBTSxtQkFBbUIsR0FBRztJQUMxQixpQkFBaUI7SUFDakIsaUJBQWlCO0lBQ2pCLGlCQUFpQjtDQUNsQixDQUFBO0FBRVksUUFBQSxrQkFBa0IsR0FBRyxJQUFBLHNCQUFjLEVBQzlDLElBQUEscURBQXdCLEVBQUMsbUJBQW1CLENBQUMsQ0FDOUMsQ0FBQSJ9
@@ -1 +0,0 @@
1
- export declare const offerPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,7 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.offerPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- exports.offerPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["offer"]));
7
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoib2ZmZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvcG9saWNpZXMvb2ZmZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEscURBQTBEO0FBRTFELG9GQUE4RTtBQUVqRSxRQUFBLGFBQWEsR0FBRyxJQUFBLHNCQUFjLEVBQ3pDLElBQUEscURBQXdCLEVBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUNwQyxDQUFBIn0=
@@ -1 +0,0 @@
1
- export declare const payoutPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,7 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.payoutPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- exports.payoutPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["payout", "payout_account"]));
7
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGF5b3V0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3BheW91dC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsY0FBYyxHQUFHLElBQUEsc0JBQWMsRUFDMUMsSUFBQSxxREFBd0IsRUFBQyxDQUFDLFFBQVEsRUFBRSxnQkFBZ0IsQ0FBQyxDQUFDLENBQ3ZELENBQUEifQ==
@@ -1 +0,0 @@
1
- export declare const productAttributePolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,7 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.productAttributePolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- exports.productAttributePolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["product_attribute", "product_attribute_value"]));
7
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJvZHVjdC1hdHRyaWJ1dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvcG9saWNpZXMvcHJvZHVjdC1hdHRyaWJ1dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEscURBQTBEO0FBRTFELG9GQUE4RTtBQUVqRSxRQUFBLHdCQUF3QixHQUFHLElBQUEsc0JBQWMsRUFDcEQsSUFBQSxxREFBd0IsRUFBQyxDQUFDLG1CQUFtQixFQUFFLHlCQUF5QixDQUFDLENBQUMsQ0FDM0UsQ0FBQSJ9
@@ -1 +0,0 @@
1
- export declare const productEditPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,7 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.productEditPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- exports.productEditPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["product_change"]));
7
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJvZHVjdC1lZGl0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3Byb2R1Y3QtZWRpdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsbUJBQW1CLEdBQUcsSUFBQSxzQkFBYyxFQUMvQyxJQUFBLHFEQUF3QixFQUFDLENBQUMsZ0JBQWdCLENBQUMsQ0FBQyxDQUM3QyxDQUFBIn0=
@@ -1 +0,0 @@
1
- export declare const reviewPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,7 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.reviewPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- exports.reviewPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(["review"]));
7
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV2aWV3LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3Jldmlldy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRWpFLFFBQUEsY0FBYyxHQUFHLElBQUEsc0JBQWMsRUFDMUMsSUFBQSxxREFBd0IsRUFBQyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQ3JDLENBQUEifQ==
@@ -1 +0,0 @@
1
- export declare const sellerPolicies: import("@medusajs/framework/utils").definePoliciesExport;
@@ -1,13 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.sellerPolicies = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const generate_resource_policies_1 = require("../utils/generate-resource-policies");
6
- const sellerResources = [
7
- "seller",
8
- "seller_member",
9
- "member_invite",
10
- "order_group",
11
- ];
12
- exports.sellerPolicies = (0, utils_1.definePolicies)((0, generate_resource_policies_1.generateResourcePolicies)(sellerResources));
13
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VsbGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3BvbGljaWVzL3NlbGxlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxxREFBMEQ7QUFFMUQsb0ZBQThFO0FBRTlFLE1BQU0sZUFBZSxHQUFHO0lBQ3RCLFFBQVE7SUFDUixlQUFlO0lBQ2YsZUFBZTtJQUNmLGFBQWE7Q0FDZCxDQUFBO0FBRVksUUFBQSxjQUFjLEdBQUcsSUFBQSxzQkFBYyxFQUMxQyxJQUFBLHFEQUF3QixFQUFDLGVBQWUsQ0FBQyxDQUMxQyxDQUFBIn0=
@@ -1,7 +0,0 @@
1
- import { PolicyDefinition } from "@medusajs/framework/utils";
2
- export declare const DEFAULT_POLICY_OPERATIONS: readonly ["read", "create", "update", "delete"];
3
- /**
4
- * Expands resources into one policy per operation, matching the naming Medusa
5
- * uses for its own catalog (`ReadProduct`, `product:read`).
6
- */
7
- export declare function generateResourcePolicies(resources: string[], operations?: readonly string[]): PolicyDefinition[];