@mercurjs/core 2.3.6-canary.1 → 2.3.6-canary.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (198) hide show
  1. package/.medusa/server/src/api/admin/campaigns/middlewares.js +3 -9
  2. package/.medusa/server/src/api/admin/collections/middlewares.js +8 -33
  3. package/.medusa/server/src/api/admin/commission-rates/middlewares.js +9 -39
  4. package/.medusa/server/src/api/admin/core-route-permissions.d.ts +18 -0
  5. package/.medusa/server/src/api/admin/core-route-permissions.js +79 -0
  6. package/.medusa/server/src/api/admin/customer-groups/middlewares.js +3 -9
  7. package/.medusa/server/src/api/admin/inventory-items/middlewares.js +3 -9
  8. package/.medusa/server/src/api/admin/members/middlewares.js +3 -9
  9. package/.medusa/server/src/api/admin/middlewares.js +6 -2
  10. package/.medusa/server/src/api/admin/offers/middlewares.js +10 -21
  11. package/.medusa/server/src/api/admin/order-groups/middlewares.js +4 -15
  12. package/.medusa/server/src/api/admin/orders/middlewares.js +3 -9
  13. package/.medusa/server/src/api/admin/payouts/middlewares.js +4 -15
  14. package/.medusa/server/src/api/admin/price-lists/middlewares.js +3 -9
  15. package/.medusa/server/src/api/admin/product-attributes/middlewares.js +11 -51
  16. package/.medusa/server/src/api/admin/product-categories/middlewares.js +14 -45
  17. package/.medusa/server/src/api/admin/product-changes/middlewares.js +8 -15
  18. package/.medusa/server/src/api/admin/products/[id]/route.js +8 -3
  19. package/.medusa/server/src/api/admin/products/middlewares.js +21 -99
  20. package/.medusa/server/src/api/admin/products/validators.d.ts +3 -3
  21. package/.medusa/server/src/api/admin/products/validators.js +4 -3
  22. package/.medusa/server/src/api/admin/promotions/middlewares.js +7 -21
  23. package/.medusa/server/src/api/admin/reservations/middlewares.js +3 -9
  24. package/.medusa/server/src/api/admin/reviews/middlewares.js +8 -33
  25. package/.medusa/server/src/api/admin/sellers/middlewares.js +32 -117
  26. package/.medusa/server/src/api/admin/sellers/query-config.js +2 -3
  27. package/.medusa/server/src/api/admin/shipping-options/middlewares.js +3 -9
  28. package/.medusa/server/src/api/admin/shipping-profiles/middlewares.js +3 -9
  29. package/.medusa/server/src/api/admin/stock-locations/middlewares.js +3 -9
  30. package/.medusa/server/src/api/admin/users/me/route.d.ts +3 -0
  31. package/.medusa/server/src/api/admin/users/me/route.js +24 -0
  32. package/.medusa/server/src/api/utils/ensure-seller-middleware.js +1 -15
  33. package/.medusa/server/src/api/utils/index.d.ts +1 -2
  34. package/.medusa/server/src/api/utils/index.js +2 -3
  35. package/.medusa/server/src/api/utils/permissions-middleware.d.ts +25 -0
  36. package/.medusa/server/src/api/utils/permissions-middleware.js +103 -0
  37. package/.medusa/server/src/api/vendor/campaigns/middlewares.js +9 -39
  38. package/.medusa/server/src/api/vendor/claims/middlewares.js +37 -129
  39. package/.medusa/server/src/api/vendor/collections/middlewares.js +5 -21
  40. package/.medusa/server/src/api/vendor/currencies/middlewares.js +4 -15
  41. package/.medusa/server/src/api/vendor/customer-groups/middlewares.js +9 -39
  42. package/.medusa/server/src/api/vendor/customers/middlewares.js +5 -21
  43. package/.medusa/server/src/api/vendor/exchanges/middlewares.js +31 -105
  44. package/.medusa/server/src/api/vendor/fulfillment-providers/middlewares.js +3 -9
  45. package/.medusa/server/src/api/vendor/fulfillment-sets/middlewares.js +8 -33
  46. package/.medusa/server/src/api/vendor/inventory-items/middlewares.js +14 -69
  47. package/.medusa/server/src/api/vendor/members/me/route.js +6 -3
  48. package/.medusa/server/src/api/vendor/members/middlewares.js +2 -17
  49. package/.medusa/server/src/api/vendor/middlewares.js +2 -1
  50. package/.medusa/server/src/api/vendor/offers/middlewares.js +10 -45
  51. package/.medusa/server/src/api/vendor/order-edits/middlewares.js +23 -69
  52. package/.medusa/server/src/api/vendor/orders/middlewares.js +18 -63
  53. package/.medusa/server/src/api/vendor/payments/middlewares.js +7 -33
  54. package/.medusa/server/src/api/vendor/payout-accounts/middlewares.js +6 -27
  55. package/.medusa/server/src/api/vendor/payouts/middlewares.js +4 -15
  56. package/.medusa/server/src/api/vendor/price-lists/middlewares.js +11 -51
  57. package/.medusa/server/src/api/vendor/price-preferences/middlewares.js +4 -15
  58. package/.medusa/server/src/api/vendor/product-attributes/middlewares.js +4 -15
  59. package/.medusa/server/src/api/vendor/product-categories/middlewares.js +5 -21
  60. package/.medusa/server/src/api/vendor/product-tags/middlewares.js +4 -15
  61. package/.medusa/server/src/api/vendor/product-types/middlewares.js +4 -15
  62. package/.medusa/server/src/api/vendor/product-variants/middlewares.js +3 -9
  63. package/.medusa/server/src/api/vendor/products/middlewares.js +24 -75
  64. package/.medusa/server/src/api/vendor/products/validators.d.ts +2 -2
  65. package/.medusa/server/src/api/vendor/products/validators.js +4 -3
  66. package/.medusa/server/src/api/vendor/promotions/middlewares.js +14 -69
  67. package/.medusa/server/src/api/vendor/refund-reasons/middlewares.js +4 -15
  68. package/.medusa/server/src/api/vendor/regions/middlewares.js +4 -15
  69. package/.medusa/server/src/api/vendor/reservations/middlewares.js +9 -33
  70. package/.medusa/server/src/api/vendor/return-reasons/middlewares.js +4 -15
  71. package/.medusa/server/src/api/vendor/returns/middlewares.js +26 -135
  72. package/.medusa/server/src/api/vendor/reviews/middlewares.js +5 -21
  73. package/.medusa/server/src/api/vendor/sales-channels/middlewares.js +5 -21
  74. package/.medusa/server/src/api/vendor/sellers/me/route.js +1 -1
  75. package/.medusa/server/src/api/vendor/sellers/middlewares.js +16 -92
  76. package/.medusa/server/src/api/vendor/sellers/query-config.d.ts +0 -4
  77. package/.medusa/server/src/api/vendor/sellers/query-config.js +5 -11
  78. package/.medusa/server/src/api/vendor/shipping-option-types/middlewares.js +4 -15
  79. package/.medusa/server/src/api/vendor/shipping-options/middlewares.js +9 -39
  80. package/.medusa/server/src/api/vendor/shipping-profiles/middlewares.js +4 -15
  81. package/.medusa/server/src/api/vendor/stock-locations/middlewares.js +11 -51
  82. package/.medusa/server/src/api/vendor/stock-locations/validators.d.ts +2 -2
  83. package/.medusa/server/src/api/vendor/uploads/middlewares.js +5 -9
  84. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.d.ts +5 -0
  85. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.js +14 -0
  86. package/.medusa/server/src/modules/payout/models/payout-account.js +2 -2
  87. package/.medusa/server/src/patches/index.d.ts +9 -0
  88. package/.medusa/server/src/patches/index.js +47 -11
  89. package/.medusa/server/src/patches/loader.d.ts +10 -0
  90. package/.medusa/server/src/patches/loader.js +46 -4
  91. package/.medusa/server/src/patches/register.d.ts +1 -0
  92. package/.medusa/server/src/patches/register.js +10 -0
  93. package/.medusa/server/src/permissions/definitions/api-keys.d.ts +1 -0
  94. package/.medusa/server/src/permissions/definitions/api-keys.js +8 -0
  95. package/.medusa/server/src/permissions/definitions/commissions.d.ts +1 -0
  96. package/.medusa/server/src/permissions/definitions/commissions.js +9 -0
  97. package/.medusa/server/src/permissions/definitions/customers.d.ts +1 -0
  98. package/.medusa/server/src/permissions/definitions/customers.js +9 -0
  99. package/.medusa/server/src/permissions/definitions/fulfillment.d.ts +1 -0
  100. package/.medusa/server/src/permissions/definitions/fulfillment.js +10 -0
  101. package/.medusa/server/src/permissions/definitions/inventory.d.ts +1 -0
  102. package/.medusa/server/src/permissions/definitions/inventory.js +10 -0
  103. package/.medusa/server/src/permissions/definitions/members.d.ts +1 -0
  104. package/.medusa/server/src/permissions/definitions/members.js +9 -0
  105. package/.medusa/server/src/permissions/definitions/notifications.d.ts +1 -0
  106. package/.medusa/server/src/permissions/definitions/notifications.js +8 -0
  107. package/.medusa/server/src/permissions/definitions/offers.d.ts +1 -0
  108. package/.medusa/server/src/permissions/definitions/offers.js +8 -0
  109. package/.medusa/server/src/permissions/definitions/orders.d.ts +1 -0
  110. package/.medusa/server/src/permissions/definitions/orders.js +12 -0
  111. package/.medusa/server/src/permissions/definitions/payments.d.ts +1 -0
  112. package/.medusa/server/src/permissions/definitions/payments.js +8 -0
  113. package/.medusa/server/src/permissions/definitions/payouts.d.ts +1 -0
  114. package/.medusa/server/src/permissions/definitions/payouts.js +9 -0
  115. package/.medusa/server/src/permissions/definitions/price-lists.d.ts +1 -0
  116. package/.medusa/server/src/permissions/definitions/price-lists.js +9 -0
  117. package/.medusa/server/src/permissions/definitions/product-attributes.d.ts +1 -0
  118. package/.medusa/server/src/permissions/definitions/product-attributes.js +8 -0
  119. package/.medusa/server/src/permissions/definitions/products.d.ts +1 -0
  120. package/.medusa/server/src/permissions/definitions/products.js +14 -0
  121. package/.medusa/server/src/permissions/definitions/promotions.d.ts +1 -0
  122. package/.medusa/server/src/permissions/definitions/promotions.js +9 -0
  123. package/.medusa/server/src/permissions/definitions/refund-reasons.d.ts +1 -0
  124. package/.medusa/server/src/permissions/definitions/refund-reasons.js +8 -0
  125. package/.medusa/server/src/permissions/definitions/regions.d.ts +1 -0
  126. package/.medusa/server/src/permissions/definitions/regions.js +9 -0
  127. package/.medusa/server/src/permissions/definitions/return-reasons.d.ts +1 -0
  128. package/.medusa/server/src/permissions/definitions/return-reasons.js +8 -0
  129. package/.medusa/server/src/permissions/definitions/reviews.d.ts +1 -0
  130. package/.medusa/server/src/permissions/definitions/reviews.js +8 -0
  131. package/.medusa/server/src/permissions/definitions/roles.d.ts +1 -0
  132. package/.medusa/server/src/permissions/definitions/roles.js +9 -0
  133. package/.medusa/server/src/permissions/definitions/sales-channels.d.ts +1 -0
  134. package/.medusa/server/src/permissions/definitions/sales-channels.js +8 -0
  135. package/.medusa/server/src/permissions/definitions/sellers.d.ts +1 -0
  136. package/.medusa/server/src/permissions/definitions/sellers.js +10 -0
  137. package/.medusa/server/src/permissions/definitions/store.d.ts +1 -0
  138. package/.medusa/server/src/permissions/definitions/store.js +8 -0
  139. package/.medusa/server/src/permissions/definitions/translations.d.ts +1 -0
  140. package/.medusa/server/src/permissions/definitions/translations.js +8 -0
  141. package/.medusa/server/src/permissions/definitions/users.d.ts +1 -0
  142. package/.medusa/server/src/permissions/definitions/users.js +8 -0
  143. package/.medusa/server/src/permissions/definitions/workflow-executions.d.ts +1 -0
  144. package/.medusa/server/src/permissions/definitions/workflow-executions.js +8 -0
  145. package/.medusa/server/src/permissions/index.d.ts +27 -0
  146. package/.medusa/server/src/permissions/index.js +44 -0
  147. package/.medusa/server/src/permissions/registry.d.ts +18 -0
  148. package/.medusa/server/src/permissions/registry.js +86 -0
  149. package/.medusa/server/src/utils/sanitize-rich-text.d.ts +2 -0
  150. package/.medusa/server/src/utils/sanitize-rich-text.js +50 -0
  151. package/.medusa/server/src/with-mercur.d.ts +5 -3
  152. package/.medusa/server/src/with-mercur.js +4 -23
  153. package/.medusa/server/src/workflows/index.d.ts +1 -0
  154. package/.medusa/server/src/workflows/index.js +2 -1
  155. package/.medusa/server/src/workflows/payout/workflows/create-payout.d.ts +4 -1
  156. package/.medusa/server/src/workflows/payout/workflows/create-payout.js +6 -2
  157. package/.medusa/server/src/workflows/product-edit/workflows/apply-product-change-actions.js +18 -2
  158. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.d.ts +1 -0
  159. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.js +2 -2
  160. package/.medusa/server/src/workflows/seller/steps/index.d.ts +0 -1
  161. package/.medusa/server/src/workflows/seller/steps/index.js +1 -2
  162. package/.medusa/server/src/workflows/seller/workflows/accept-member-invite.js +1 -2
  163. package/.medusa/server/src/workflows/seller/workflows/create-seller-account.js +1 -2
  164. package/.medusa/server/src/workflows/seller/workflows/index.d.ts +0 -1
  165. package/.medusa/server/src/workflows/seller/workflows/index.js +1 -2
  166. package/package.json +6 -4
  167. package/.medusa/server/src/api/utils/policy-resources.d.ts +0 -59
  168. package/.medusa/server/src/api/utils/policy-resources.js +0 -64
  169. package/.medusa/server/src/api/utils/rbac-role-fields.d.ts +0 -1
  170. package/.medusa/server/src/api/utils/rbac-role-fields.js +0 -10
  171. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.d.ts +0 -19
  172. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.js +0 -55
  173. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts +0 -16
  174. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js +0 -58
  175. package/.medusa/server/src/links/seller-member-rbac-role.d.ts +0 -2
  176. package/.medusa/server/src/links/seller-member-rbac-role.js +0 -41
  177. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.d.ts +0 -11
  178. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.js +0 -128
  179. package/.medusa/server/src/policies/commission.d.ts +0 -1
  180. package/.medusa/server/src/policies/commission.js +0 -12
  181. package/.medusa/server/src/policies/offer.d.ts +0 -1
  182. package/.medusa/server/src/policies/offer.js +0 -7
  183. package/.medusa/server/src/policies/payout.d.ts +0 -1
  184. package/.medusa/server/src/policies/payout.js +0 -7
  185. package/.medusa/server/src/policies/product-attribute.d.ts +0 -1
  186. package/.medusa/server/src/policies/product-attribute.js +0 -7
  187. package/.medusa/server/src/policies/product-edit.d.ts +0 -1
  188. package/.medusa/server/src/policies/product-edit.js +0 -7
  189. package/.medusa/server/src/policies/review.d.ts +0 -1
  190. package/.medusa/server/src/policies/review.js +0 -7
  191. package/.medusa/server/src/policies/seller.d.ts +0 -1
  192. package/.medusa/server/src/policies/seller.js +0 -13
  193. package/.medusa/server/src/utils/generate-resource-policies.d.ts +0 -7
  194. package/.medusa/server/src/utils/generate-resource-policies.js +0 -30
  195. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.d.ts +0 -2
  196. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.js +0 -16
  197. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.d.ts +0 -2
  198. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.js +0 -11
@@ -0,0 +1,9 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.regionsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.regionsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "regions", group: "regions", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
7
+ { key: "tax_regions", group: "regions", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
8
+ ]);
9
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1 @@
1
+ export declare const returnReasonsPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.returnReasonsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.returnReasonsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "return_reasons", group: "return-reasons", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV0dXJuLXJlYXNvbnMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZGVmaW5pdGlvbnMvcmV0dXJuLXJlYXNvbnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMENBQXFEO0FBRXhDLFFBQUEsd0JBQXdCLEdBQUcsSUFBQSxrQ0FBdUIsRUFBQztJQUM5RCxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRSxLQUFLLEVBQUUsZ0JBQWdCLEVBQUUsT0FBTyxFQUFFLENBQUMsT0FBTyxFQUFFLFFBQVEsQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sRUFBRSxNQUFNLEVBQUUsUUFBUSxDQUFDLEVBQUU7Q0FDckgsQ0FBQyxDQUFBIn0=
@@ -0,0 +1 @@
1
+ export declare const reviewsPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.reviewsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.reviewsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "reviews", group: "reviews", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV2aWV3cy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9wZXJtaXNzaW9ucy9kZWZpbml0aW9ucy9yZXZpZXdzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLDBDQUFxRDtBQUV4QyxRQUFBLGtCQUFrQixHQUFHLElBQUEsa0NBQXVCLEVBQUM7SUFDeEQsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLEtBQUssRUFBRSxTQUFTLEVBQUUsT0FBTyxFQUFFLENBQUMsT0FBTyxFQUFFLFFBQVEsQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sRUFBRSxNQUFNLEVBQUUsUUFBUSxDQUFDLEVBQUU7Q0FDdkcsQ0FBQyxDQUFBIn0=
@@ -0,0 +1 @@
1
+ export declare const rolesPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,9 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.rolesPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.rolesPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "roles", group: "roles", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
7
+ { key: "roles.owner", group: "roles", surface: ["admin", "vendor"], rights: ["edit"], requires: [{ key: "roles", right: "view" }] },
8
+ ]);
9
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1 @@
1
+ export declare const salesChannelsPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.salesChannelsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.salesChannelsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "sales_channels", group: "sales-channels", surface: ["admin", "vendor"], rights: ["view", "edit", "manage"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2FsZXMtY2hhbm5lbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZGVmaW5pdGlvbnMvc2FsZXMtY2hhbm5lbHMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMENBQXFEO0FBRXhDLFFBQUEsd0JBQXdCLEdBQUcsSUFBQSxrQ0FBdUIsRUFBQztJQUM5RCxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRSxLQUFLLEVBQUUsZ0JBQWdCLEVBQUUsT0FBTyxFQUFFLENBQUMsT0FBTyxFQUFFLFFBQVEsQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sRUFBRSxNQUFNLEVBQUUsUUFBUSxDQUFDLEVBQUU7Q0FDckgsQ0FBQyxDQUFBIn0=
@@ -0,0 +1 @@
1
+ export declare const sellersPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,10 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.sellersPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.sellersPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "sellers", group: "sellers", surface: ["admin"], rights: ["view", "edit", "manage"] },
7
+ { key: "sellers.approval", group: "sellers", surface: ["admin"], rights: ["edit"], requires: [{ key: "sellers", right: "view" }] },
8
+ { key: "sellers.premium", group: "sellers", surface: ["admin"], rights: ["edit"], requires: [{ key: "sellers", right: "view" }] },
9
+ ]);
10
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VsbGVycy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9wZXJtaXNzaW9ucy9kZWZpbml0aW9ucy9zZWxsZXJzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLDBDQUFxRDtBQUV4QyxRQUFBLGtCQUFrQixHQUFHLElBQUEsa0NBQXVCLEVBQUM7SUFDeEQsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLEtBQUssRUFBRSxTQUFTLEVBQUUsT0FBTyxFQUFFLENBQUMsT0FBTyxDQUFDLEVBQUUsTUFBTSxFQUFFLENBQUMsTUFBTSxFQUFFLE1BQU0sRUFBRSxRQUFRLENBQUMsRUFBRTtJQUM1RixFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRSxLQUFLLEVBQUUsU0FBUyxFQUFFLE9BQU8sRUFBRSxDQUFDLE9BQU8sQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQyxFQUFFLFFBQVEsRUFBRSxDQUFDLEVBQUUsR0FBRyxFQUFFLFNBQVMsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLENBQUMsRUFBRTtJQUNsSSxFQUFFLEdBQUcsRUFBRSxpQkFBaUIsRUFBRSxLQUFLLEVBQUUsU0FBUyxFQUFFLE9BQU8sRUFBRSxDQUFDLE9BQU8sQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQyxFQUFFLFFBQVEsRUFBRSxDQUFDLEVBQUUsR0FBRyxFQUFFLFNBQVMsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLENBQUMsRUFBRTtDQUNsSSxDQUFDLENBQUEifQ==
@@ -0,0 +1 @@
1
+ export declare const storePermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.storePermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.storePermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "store", group: "store", surface: ["admin", "vendor"], rights: ["view", "edit"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3RvcmUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZGVmaW5pdGlvbnMvc3RvcmUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMENBQXFEO0FBRXhDLFFBQUEsZ0JBQWdCLEdBQUcsSUFBQSxrQ0FBdUIsRUFBQztJQUN0RCxFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLEVBQUUsTUFBTSxFQUFFLENBQUMsTUFBTSxFQUFFLE1BQU0sQ0FBQyxFQUFFO0NBQ3pGLENBQUMsQ0FBQSJ9
@@ -0,0 +1 @@
1
+ export declare const translationsPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.translationsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.translationsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "translations", group: "translations", surface: ["admin"], rights: ["view", "edit"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHJhbnNsYXRpb25zLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL3Blcm1pc3Npb25zL2RlZmluaXRpb25zL3RyYW5zbGF0aW9ucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSwwQ0FBcUQ7QUFFeEMsUUFBQSx1QkFBdUIsR0FBRyxJQUFBLGtDQUF1QixFQUFDO0lBQzdELEVBQUUsR0FBRyxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsY0FBYyxFQUFFLE9BQU8sRUFBRSxDQUFDLE9BQU8sQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sRUFBRSxNQUFNLENBQUMsRUFBRTtDQUM3RixDQUFDLENBQUEifQ==
@@ -0,0 +1 @@
1
+ export declare const usersPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.usersPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.usersPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "users", group: "users", surface: ["admin"], rights: ["view", "edit", "manage"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXNlcnMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZGVmaW5pdGlvbnMvdXNlcnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsMENBQXFEO0FBRXhDLFFBQUEsZ0JBQWdCLEdBQUcsSUFBQSxrQ0FBdUIsRUFBQztJQUN0RCxFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsQ0FBQyxPQUFPLENBQUMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLEVBQUUsTUFBTSxFQUFFLFFBQVEsQ0FBQyxFQUFFO0NBQ3pGLENBQUMsQ0FBQSJ9
@@ -0,0 +1 @@
1
+ export declare const workflowExecutionsPermissions: import("@mercurjs/types").PermissionDefinition[];
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.workflowExecutionsPermissions = void 0;
4
+ const registry_1 = require("../registry");
5
+ exports.workflowExecutionsPermissions = (0, registry_1.defineMercurPermissions)([
6
+ { key: "workflow_executions", group: "workflow-executions", surface: ["admin"], rights: ["view"] },
7
+ ]);
8
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoid29ya2Zsb3ctZXhlY3V0aW9ucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9wZXJtaXNzaW9ucy9kZWZpbml0aW9ucy93b3JrZmxvdy1leGVjdXRpb25zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLDBDQUFxRDtBQUV4QyxRQUFBLDZCQUE2QixHQUFHLElBQUEsa0NBQXVCLEVBQUM7SUFDbkUsRUFBRSxHQUFHLEVBQUUscUJBQXFCLEVBQUUsS0FBSyxFQUFFLHFCQUFxQixFQUFFLE9BQU8sRUFBRSxDQUFDLE9BQU8sQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQyxFQUFFO0NBQ25HLENBQUMsQ0FBQSJ9
@@ -0,0 +1,27 @@
1
+ import "./definitions/sellers";
2
+ import "./definitions/members";
3
+ import "./definitions/roles";
4
+ import "./definitions/orders";
5
+ import "./definitions/payments";
6
+ import "./definitions/customers";
7
+ import "./definitions/products";
8
+ import "./definitions/product-attributes";
9
+ import "./definitions/offers";
10
+ import "./definitions/inventory";
11
+ import "./definitions/price-lists";
12
+ import "./definitions/promotions";
13
+ import "./definitions/commissions";
14
+ import "./definitions/payouts";
15
+ import "./definitions/fulfillment";
16
+ import "./definitions/regions";
17
+ import "./definitions/store";
18
+ import "./definitions/sales-channels";
19
+ import "./definitions/return-reasons";
20
+ import "./definitions/refund-reasons";
21
+ import "./definitions/users";
22
+ import "./definitions/api-keys";
23
+ import "./definitions/translations";
24
+ import "./definitions/notifications";
25
+ import "./definitions/workflow-executions";
26
+ import "./definitions/reviews";
27
+ export * from "./registry";
@@ -0,0 +1,44 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ require("./definitions/sellers");
18
+ require("./definitions/members");
19
+ require("./definitions/roles");
20
+ require("./definitions/orders");
21
+ require("./definitions/payments");
22
+ require("./definitions/customers");
23
+ require("./definitions/products");
24
+ require("./definitions/product-attributes");
25
+ require("./definitions/offers");
26
+ require("./definitions/inventory");
27
+ require("./definitions/price-lists");
28
+ require("./definitions/promotions");
29
+ require("./definitions/commissions");
30
+ require("./definitions/payouts");
31
+ require("./definitions/fulfillment");
32
+ require("./definitions/regions");
33
+ require("./definitions/store");
34
+ require("./definitions/sales-channels");
35
+ require("./definitions/return-reasons");
36
+ require("./definitions/refund-reasons");
37
+ require("./definitions/users");
38
+ require("./definitions/api-keys");
39
+ require("./definitions/translations");
40
+ require("./definitions/notifications");
41
+ require("./definitions/workflow-executions");
42
+ require("./definitions/reviews");
43
+ __exportStar(require("./registry"), exports);
44
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,18 @@
1
+ import { PermissionDefinition, PermissionMap, PermissionRight } from "@mercurjs/types";
2
+ type PermissionRegistry = Map<string, PermissionDefinition>;
3
+ declare global {
4
+ var __mercurPermissions: PermissionRegistry | undefined;
5
+ }
6
+ export declare function defineMercurPermissions(definitions: PermissionDefinition | PermissionDefinition[]): PermissionDefinition[];
7
+ export declare function getPermissionCatalog(): PermissionDefinition[];
8
+ export declare function getPermission(key: string): PermissionDefinition | undefined;
9
+ export declare function highestRight(definition: PermissionDefinition): PermissionRight;
10
+ export declare function satisfiesRight(granted: PermissionRight | undefined, required: PermissionRight): boolean;
11
+ export declare function grantAll(catalog: PermissionDefinition[]): PermissionMap;
12
+ /**
13
+ * Throws on requirements pointing at unknown keys or rights, and on dependency
14
+ * cycles. Run once at boot so a broken catalog fails loudly instead of
15
+ * silently denying access.
16
+ */
17
+ export declare function validatePermissionCatalog(catalog?: PermissionDefinition[]): void;
18
+ export {};
@@ -0,0 +1,86 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.defineMercurPermissions = defineMercurPermissions;
4
+ exports.getPermissionCatalog = getPermissionCatalog;
5
+ exports.getPermission = getPermission;
6
+ exports.highestRight = highestRight;
7
+ exports.satisfiesRight = satisfiesRight;
8
+ exports.grantAll = grantAll;
9
+ exports.validatePermissionCatalog = validatePermissionCatalog;
10
+ const types_1 = require("@mercurjs/types");
11
+ // Kept on globalThis so plugins that bundle their own copy of core still
12
+ // register into the same catalog.
13
+ const registry = (globalThis.__mercurPermissions ??=
14
+ new Map());
15
+ function defineMercurPermissions(definitions) {
16
+ const list = Array.isArray(definitions) ? definitions : [definitions];
17
+ for (const definition of list) {
18
+ if (!definition.key || !definition.group || !definition.rights?.length) {
19
+ throw new Error(`Permission definition must include key, group and at least one right. Received: ${JSON.stringify(definition)}`);
20
+ }
21
+ // Last definition wins: module reloads in `medusa develop` re-run these
22
+ // files, and projects may intentionally redefine a core permission.
23
+ registry.set(definition.key, definition);
24
+ }
25
+ return list;
26
+ }
27
+ function getPermissionCatalog() {
28
+ return [...registry.values()];
29
+ }
30
+ function getPermission(key) {
31
+ return registry.get(key);
32
+ }
33
+ function highestRight(definition) {
34
+ return definition.rights.reduce((highest, right) => types_1.PERMISSION_RIGHT_RANK[right] > types_1.PERMISSION_RIGHT_RANK[highest]
35
+ ? right
36
+ : highest);
37
+ }
38
+ function satisfiesRight(granted, required) {
39
+ return (!!granted && types_1.PERMISSION_RIGHT_RANK[granted] >= types_1.PERMISSION_RIGHT_RANK[required]);
40
+ }
41
+ function grantAll(catalog) {
42
+ const map = {};
43
+ for (const definition of catalog) {
44
+ map[definition.key] = highestRight(definition);
45
+ }
46
+ return map;
47
+ }
48
+ /**
49
+ * Throws on requirements pointing at unknown keys or rights, and on dependency
50
+ * cycles. Run once at boot so a broken catalog fails loudly instead of
51
+ * silently denying access.
52
+ */
53
+ function validatePermissionCatalog(catalog = getPermissionCatalog()) {
54
+ const byKey = new Map(catalog.map((definition) => [definition.key, definition]));
55
+ for (const definition of catalog) {
56
+ for (const requirement of definition.requires ?? []) {
57
+ const target = byKey.get(requirement.key);
58
+ if (!target) {
59
+ throw new Error(`Permission "${definition.key}" requires unknown permission "${requirement.key}"`);
60
+ }
61
+ if (!target.rights.includes(requirement.right)) {
62
+ throw new Error(`Permission "${definition.key}" requires "${requirement.key}:${requirement.right}", which is not a right of "${requirement.key}"`);
63
+ }
64
+ }
65
+ }
66
+ const visiting = new Set();
67
+ const done = new Set();
68
+ const visit = (key, path) => {
69
+ if (done.has(key)) {
70
+ return;
71
+ }
72
+ if (visiting.has(key)) {
73
+ throw new Error(`Permission dependency cycle: ${[...path, key].join(" -> ")}`);
74
+ }
75
+ visiting.add(key);
76
+ for (const requirement of byKey.get(key)?.requires ?? []) {
77
+ visit(requirement.key, [...path, key]);
78
+ }
79
+ visiting.delete(key);
80
+ done.add(key);
81
+ };
82
+ for (const definition of catalog) {
83
+ visit(definition.key, []);
84
+ }
85
+ }
86
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,2 @@
1
+ export declare const sanitizeRichText: (value: string) => string;
2
+ export declare const sanitizeNullableRichText: <T extends string | null | undefined>(value: T) => T;
@@ -0,0 +1,50 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ exports.sanitizeNullableRichText = exports.sanitizeRichText = void 0;
7
+ const sanitize_html_1 = __importDefault(require("sanitize-html"));
8
+ const RICH_TEXT_OPTIONS = {
9
+ allowedTags: [
10
+ "p",
11
+ "br",
12
+ "strong",
13
+ "em",
14
+ "u",
15
+ "s",
16
+ "h2",
17
+ "h3",
18
+ "ul",
19
+ "ol",
20
+ "li",
21
+ "blockquote",
22
+ "a",
23
+ "img",
24
+ ],
25
+ allowedAttributes: {
26
+ a: ["href", "target", "rel"],
27
+ img: ["src", "alt"],
28
+ },
29
+ allowedSchemes: ["http", "https", "mailto"],
30
+ allowedSchemesByTag: {
31
+ img: ["http", "https"],
32
+ },
33
+ allowProtocolRelative: false,
34
+ exclusiveFilter: (frame) => frame.tag === "img" && !frame.attribs.src,
35
+ transformTags: {
36
+ a: sanitize_html_1.default.simpleTransform("a", {
37
+ rel: "noopener noreferrer nofollow",
38
+ target: "_blank",
39
+ }),
40
+ },
41
+ };
42
+ const MARKUP_REGEX = /<[a-z!/?]/i;
43
+ // Plain-text descriptions are stored untouched: sanitize-html would entity-encode them.
44
+ const sanitizeRichText = (value) => MARKUP_REGEX.test(value)
45
+ ? (0, sanitize_html_1.default)(value, RICH_TEXT_OPTIONS).trim()
46
+ : value;
47
+ exports.sanitizeRichText = sanitizeRichText;
48
+ const sanitizeNullableRichText = (value) => (typeof value === "string" ? (0, exports.sanitizeRichText)(value) : value);
49
+ exports.sanitizeNullableRichText = sanitizeNullableRichText;
50
+ //# sourceMappingURL=data:application/json;base64,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
@@ -1,3 +1,4 @@
1
+ import "./patches/register";
1
2
  import type { InputConfigWithArrayModules } from "@medusajs/framework/types";
2
3
  type HttpConfig = NonNullable<NonNullable<InputConfigWithArrayModules["projectConfig"]>["http"]>;
3
4
  export type MercurInputConfig = Omit<InputConfigWithArrayModules, "projectConfig"> & {
@@ -7,9 +8,10 @@ export type MercurInputConfig = Omit<InputConfigWithArrayModules, "projectConfig
7
8
  };
8
9
  mercur?: {
9
10
  /**
10
- * Patch file names to skip, e.g. "@medusajs+core-flows@2.18.0.patch".
11
- * Each one restores an upstream bug, so only reach for this when a patch
12
- * conflicts with your own override.
11
+ * @deprecated Patches are applied when `@mercurjs/core` is imported,
12
+ * before this config is read. Set `MERCUR_DISABLED_PATCHES` (comma
13
+ * separated) in the process environment instead; listing a patch only
14
+ * here fails the boot.
13
15
  */
14
16
  disabledPatches?: string[];
15
17
  };
@@ -1,18 +1,12 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.withMercur = withMercur;
4
+ require("./patches/register");
4
5
  const utils_1 = require("@medusajs/framework/utils");
5
6
  const patches_1 = require("./patches");
6
7
  const disable_medusa_middlewares_1 = require("./utils/disable-medusa-middlewares");
7
8
  function withMercur(config = {}) {
8
- // Before `disableMedusaMiddlewares`, which requires Medusa middleware modules
9
- // that pull in `@medusajs/core-flows` transitively. Patches are compiled on
10
- // first require, so anything that loads the targeted modules must run after
11
- // this. Medusa itself imports core-flows lazily, well after `medusa-config`
12
- // is evaluated, which is what leaves this window open at all.
13
- (0, patches_1.applyMercurPatches)({
14
- disabled: config.projectConfig?.mercur?.disabledPatches,
15
- });
9
+ (0, patches_1.assertPatchesDisabled)(config.projectConfig?.mercur?.disabledPatches);
16
10
  (0, disable_medusa_middlewares_1.disableMedusaMiddlewares)();
17
11
  const projectConfig = {
18
12
  ...config.projectConfig,
@@ -26,21 +20,8 @@ function withMercur(config = {}) {
26
20
  };
27
21
  const featureFlags = {
28
22
  ...config.featureFlags,
29
- // Off unless explicitly enabled. Route policy checks are fail-closed, so
30
- // enforcement is opt-in: with the flag off Medusa never wraps a handler in
31
- // a permission check, the declared route policies cost nothing, and the
32
- // middlewares that resolve an actor's roles return early.
33
- rbac: config.featureFlags?.rbac ?? false,
34
23
  };
35
- const modules = [
36
- ...(config.modules ?? []),
37
- ...(!featureFlags.rbac ||
38
- (config.modules ?? []).some((m) => typeof m === "object" &&
39
- "resolve" in m &&
40
- m.resolve === "@medusajs/medusa/rbac")
41
- ? []
42
- : [{ resolve: "@medusajs/medusa/rbac" }]),
43
- ];
24
+ const modules = [...(config.modules ?? [])];
44
25
  const plugins = [
45
26
  ...(config.plugins ?? []),
46
27
  ...(!config.plugins?.some((p) => (typeof p === "string" ? p : p.resolve) === "@mercurjs/core")
@@ -57,4 +38,4 @@ function withMercur(config = {}) {
57
38
  plugins,
58
39
  });
59
40
  }
60
- //# sourceMappingURL=data:application/json;base64,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
41
+ //# sourceMappingURL=data:application/json;base64,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
@@ -1,3 +1,4 @@
1
+ import "../patches/register";
1
2
  export * from "./campaign";
2
3
  export * from "./customer-group";
3
4
  export * from "./commission";
@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
14
  for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
15
  };
16
16
  Object.defineProperty(exports, "__esModule", { value: true });
17
+ require("../patches/register");
17
18
  __exportStar(require("./campaign"), exports);
18
19
  __exportStar(require("./customer-group"), exports);
19
20
  __exportStar(require("./commission"), exports);
@@ -38,4 +39,4 @@ __exportStar(require("./media"), exports);
38
39
  __exportStar(require("./order"), exports);
39
40
  __exportStar(require("./review"), exports);
40
41
  __exportStar(require("./payment"), exports);
41
- //# sourceMappingURL=data:application/json;base64,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
42
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvd29ya2Zsb3dzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSwrQkFBNEI7QUFFNUIsNkNBQTBCO0FBQzFCLG1EQUFnQztBQUNoQywrQ0FBNEI7QUFDNUIsMkNBQXdCO0FBQ3hCLG1EQUFnQztBQUNoQyxnREFBNkI7QUFDN0IsK0NBQTRCO0FBQzVCLDhDQUEyQjtBQUMzQixtREFBZ0M7QUFDaEMsMkNBQXdCO0FBQ3hCLDJDQUF3QjtBQUN4QixvREFBaUM7QUFDakMsbURBQWdDO0FBQ2hDLHlDQUFzQjtBQUN0QiwyQ0FBd0I7QUFDeEIsa0RBQStCO0FBQy9CLDRDQUF5QjtBQUN6QixzREFBbUM7QUFDbkMsaURBQThCO0FBQzlCLDBDQUF1QjtBQUN2QiwwQ0FBdUI7QUFDdkIsMENBQXVCO0FBQ3ZCLDJDQUF3QjtBQUN4Qiw0Q0FBeUIifQ==
@@ -2,5 +2,8 @@ type CreatePayoutWorkflowInput = {
2
2
  order_id: string;
3
3
  };
4
4
  export declare const createPayoutWorkflowId = "create-payout";
5
- export declare const createPayoutWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<CreatePayoutWorkflowInput, import("@mercurjs/types").PayoutDTO, []>;
5
+ export declare const createPayoutWorkflow: import("@medusajs/framework/workflows-sdk").ReturnWorkflow<CreatePayoutWorkflowInput, import("@mercurjs/types").PayoutDTO, [import("@medusajs/framework/workflows-sdk").Hook<"payoutCreated", {
6
+ order_id: string;
7
+ payout_id: string;
8
+ }, unknown>]>;
6
9
  export {};
@@ -78,6 +78,10 @@ exports.createPayoutWorkflow = (0, workflows_sdk_1.createWorkflow)(exports.creat
78
78
  },
79
79
  },
80
80
  ]);
81
- return new workflows_sdk_1.WorkflowResponse(payout);
81
+ const payoutCreated = (0, workflows_sdk_1.createHook)("payoutCreated", {
82
+ order_id: input.order_id,
83
+ payout_id: payout.id,
84
+ });
85
+ return new workflows_sdk_1.WorkflowResponse(payout, { hooks: [payoutCreated] });
82
86
  });
83
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY3JlYXRlLXBheW91dC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uLy4uL3NyYy93b3JrZmxvd3MvcGF5b3V0L3dvcmtmbG93cy9jcmVhdGUtcGF5b3V0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLDREQUFxRjtBQUNyRixxRUFBNkc7QUFDN0cscURBQStEO0FBQy9ELDJDQUErQztBQUUvQyxvQ0FBMkM7QUFNOUIsUUFBQSxzQkFBc0IsR0FBRyxlQUFlLENBQUE7QUFFeEMsUUFBQSxvQkFBb0IsR0FBRyxJQUFBLDhCQUFjLEVBQ2hELDhCQUFzQixFQUN0QixVQUFVLEtBQThDO0lBQ3RELE1BQU0sRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLEdBQUcsSUFBQSw4QkFBaUIsRUFBQztRQUN6QyxNQUFNLEVBQUUsT0FBTztRQUNmLE1BQU0sRUFBRTtZQUNOLElBQUk7WUFDSixlQUFlO1lBQ2YsT0FBTztZQUNQLFVBQVU7WUFDVix5QkFBeUI7WUFDekIsU0FBUztZQUNULG9CQUFvQjtTQUNyQjtRQUNELE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxLQUFLLENBQUMsUUFBUSxFQUFFO1FBQy9CLE9BQU8sRUFBRSxFQUFFLGtCQUFrQixFQUFFLElBQUksRUFBRTtLQUN0QyxDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsSUFBSSxFQUFFLGFBQWEsRUFBRSxDQUFDLENBQUE7SUFFbEMsTUFBTSxLQUFLLEdBQUcsSUFBQSx5QkFBUyxFQUFDLEVBQUUsTUFBTSxFQUFFLEVBQUUsQ0FBQyxFQUFFLE1BQU0sRUFBRSxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQTtJQUU5RCxNQUFNLGlCQUFpQixHQUFHLElBQUEseUJBQVMsRUFBQyxFQUFFLEtBQUssRUFBRSxFQUFFLENBQUMsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUM3RCxHQUFHLEVBQUU7WUFDSCxFQUFFLE9BQU8sRUFBRSxDQUFDLEtBQUssQ0FBQyxLQUFLLElBQUksRUFBRSxDQUFDLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBUyxFQUFFLEVBQUUsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLEVBQUU7WUFDNUQ7Z0JBQ0Usa0JBQWtCLEVBQUUsQ0FBRSxLQUFhLENBQUMsZ0JBQWdCLElBQUksRUFBRSxDQUFDLENBQUMsR0FBRyxDQUM3RCxDQUFDLE1BQVcsRUFBRSxFQUFFLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FDM0I7YUFDRjtTQUNGO0tBQ0YsQ0FBQyxDQUFDLENBQUE7SUFFSCx5RUFBeUU7SUFDekUsdUVBQXVFO0lBQ3ZFLG1DQUFtQztJQUNuQyxNQUFNLEVBQUUsSUFBSSxFQUFFLGVBQWUsRUFBRSxHQUFHLElBQUEsOEJBQWlCLEVBQUM7UUFDbEQsTUFBTSxFQUFFLGlCQUFpQjtRQUN6QixNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUM7UUFDbEIsT0FBTyxFQUFFLGlCQUFpQjtLQUMzQixDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsSUFBSSxFQUFFLHdCQUF3QixFQUFFLENBQUMsQ0FBQTtJQUU3QyxNQUFNLFdBQVcsR0FBRyxJQUFBLHlCQUFTLEVBQzNCLEVBQUUsS0FBSyxFQUFFLGVBQWUsRUFBRSxFQUMxQixDQUFDLEVBQUUsS0FBSyxFQUFFLGVBQWUsRUFBRSxFQUFFLEVBQUU7UUFDN0IsTUFBTSxlQUFlLEdBQUksS0FBYSxDQUFDLE1BQU0sRUFBRSxjQUFjLEVBQUUsRUFBRSxDQUFBO1FBQ2pFLE1BQU0sUUFBUSxHQUFJLEtBQWEsQ0FBQyxNQUFNLEVBQUUsRUFBRSxDQUFBO1FBRTFDLElBQUksQ0FBQyxlQUFlLEVBQUUsQ0FBQztZQUNyQixNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUMzQix1Q0FBdUMsQ0FDeEMsQ0FBQTtRQUNILENBQUM7UUFFRCxNQUFNLGVBQWUsR0FBRyxDQUFDLGVBQWUsSUFBSSxFQUFFLENBQUMsQ0FBQyxNQUFNLENBQ3BELENBQUMsR0FBVyxFQUFFLElBQVMsRUFBRSxFQUFFLENBQ3pCLGNBQU0sQ0FBQyxHQUFHLENBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxNQUFNLElBQUksQ0FBQyxDQUFzQixFQUN6RCxDQUFDLENBQ0YsQ0FBQTtRQUVELE1BQU0sTUFBTSxHQUFHLGNBQU0sQ0FBQyxHQUFHLENBQ3ZCLEtBQUssQ0FBQyxLQUFLLEVBQ1gsZUFBZSxDQUNLLENBQUE7UUFFdEIsT0FBTztZQUNMLFVBQVUsRUFBRSxlQUFlO1lBQzNCLFNBQVMsRUFBRSxRQUFRO1lBQ25CLE1BQU07WUFDTixhQUFhLEVBQUUsS0FBSyxDQUFDLGFBQWE7WUFDbEMsSUFBSSxFQUFFO2dCQUNKLFFBQVEsRUFBRSxLQUFLLENBQUMsRUFBRTtnQkFDbEIsU0FBUyxFQUFFLFFBQVE7YUFDcEI7WUFDRCxPQUFPLEVBQUU7Z0JBQ1AsZUFBZSxFQUFFLEtBQUssQ0FBQyxFQUFFO2FBQzFCO1NBQ0YsQ0FBQTtJQUNILENBQUMsQ0FDRixDQUFBO0lBRUQsTUFBTSxNQUFNLEdBQUcsSUFBQSx3QkFBZ0IsRUFBQztRQUM5QixVQUFVLEVBQUUsV0FBVyxDQUFDLFVBQVU7UUFDbEMsTUFBTSxFQUFFLFdBQVcsQ0FBQyxNQUFNO1FBQzFCLGFBQWEsRUFBRSxXQUFXLENBQUMsYUFBYTtRQUN4QyxJQUFJLEVBQUUsV0FBVyxDQUFDLElBQUk7UUFDdEIsT0FBTyxFQUFFLFdBQVcsQ0FBQyxPQUFPO0tBQzdCLENBQUMsQ0FBQTtJQUVGLElBQUEsaUNBQW9CLEVBQUM7UUFDbkI7WUFDRSxDQUFDLHFCQUFhLENBQUMsTUFBTSxDQUFDLEVBQUU7Z0JBQ3RCLFNBQVMsRUFBRSxNQUFNLENBQUMsRUFBRTthQUNyQjtZQUNELENBQUMscUJBQWEsQ0FBQyxNQUFNLENBQUMsRUFBRTtnQkFDdEIsU0FBUyxFQUFFLFdBQVcsQ0FBQyxTQUFTO2FBQ2pDO1NBQ0Y7S0FDRixDQUFDLENBQUE7SUFFRixPQUFPLElBQUksZ0NBQWdCLENBQUMsTUFBTSxDQUFDLENBQUE7QUFDckMsQ0FBQyxDQUNGLENBQUEifQ==
87
+ //# sourceMappingURL=data:application/json;base64,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