@hartl-services/medusa-payload-sync 0.1.0 → 0.2.0

package/.medusa/server/src/workflows/payload-sync/reconcile-full-catalog.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reconcilePayloadCatalogWorkflow = void 0;
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const payload_sync_guard_1 = require("../../lib/payload-sync-guard");
+const plugin_actions_1 = require("../../plugin-actions");
+const reconcile_payload_catalog_1 = require("../../scripts/reconcile-payload-catalog");
+const reconcilePayloadCatalogStep = (0, workflows_sdk_1.createStep)({
+    name: "payload-sync-reconcile-catalog-step",
+    // No step retry: it would rerun the whole catalog. The nested product and
+    // page workflows retry on their own.
+    maxRetries: 0,
+    noCompensation: true,
+}, async (input, { container }) => {
+    // The script returns quietly while not configured; the action fails, so
+    // the Admin sees why nothing was synchronized.
+    await (0, payload_sync_guard_1.requirePayloadSyncConfigured)(container);
+    // Per-product failures are collected and then thrown by the shared
+    // function, so a partial failure ends the action as "failed".
+    return new workflows_sdk_1.StepResponse(await (0, reconcile_payload_catalog_1.reconcilePayloadCatalog)({ container, runId: input.run_id }));
+});
+/**
+ * Whole-catalog reconciliation as a workflow, run by the base plugin for the
+ * Admin action `sync_now`. Same code path as the reconcile-payload-catalog
+ * script.
+ */
+exports.reconcilePayloadCatalogWorkflow = (0, workflows_sdk_1.createWorkflow)(plugin_actions_1.PAYLOAD_SYNC_RECONCILE_CATALOG_WORKFLOW_ID, function (input) {
+    return new workflows_sdk_1.WorkflowResponse(reconcilePayloadCatalogStep(input));
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/payload-sync/sync-product.js

@@ -4,8 +4,8 @@ exports.syncProductToPayloadWorkflow = void 0;
 const core_flows_1 = require("@medusajs/medusa/core-flows");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const utils_1 = require("@medusajs/framework/utils");
-const errors_1 = require("../../modules/payload-sync/domain/errors");
 const authoritative_reconciliation_1 = require("./authoritative-reconciliation");
+const external_step_failure_1 = require("./external-step-failure");
 const syncProductMirrorStep = (0, workflows_sdk_1.createStep)({
     name: "payload-sync-sync-product-mirror",
     maxRetries: 1,
@@ -20,7 +20,7 @@ const syncProductMirrorStep = (0, workflows_sdk_1.createStep)({
         }));
     }
     catch (error) {
-        const safeLog = (0, errors_1.formatPayloadSyncLog)(error, {
+        (0, external_step_failure_1.handlePayloadSyncExternalStepFailure)(error, logger, {
             operation: "sync-product",
             entityType: "product",
             medusaId: input.snapshot.id,
@@ -30,11 +30,6 @@ const syncProductMirrorStep = (0, workflows_sdk_1.createStep)({
             attempt,
             idempotencyKey,
         });
-        logger.error(safeLog);
-        if (isPermanentPayloadSyncError(error)) {
-            return workflows_sdk_1.StepResponse.permanentFailure(safeLog);
-        }
-        throw error;
     }
 });
 exports.syncProductToPayloadWorkflow = (0, workflows_sdk_1.createWorkflow)("payload-sync-sync-product", function (input) {
@@ -72,7 +67,4 @@ exports.syncProductToPayloadWorkflow = (0, workflows_sdk_1.createWorkflow)("payl
     });
     return new workflows_sdk_1.WorkflowResponse(result);
 });
-function isPermanentPayloadSyncError(error) {
-    return error instanceof errors_1.PayloadSyncError && !error.retryable;
-}
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/payload-sync/sync-variant.js

@@ -5,6 +5,7 @@ const core_flows_1 = require("@medusajs/medusa/core-flows");
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const utils_1 = require("@medusajs/framework/utils");
 const errors_1 = require("../../modules/payload-sync/domain/errors");
+const payload_connection_1 = require("../../lib/payload-connection");
 const payload_sync_1 = require("../../modules/payload-sync");
 const authoritative_reconciliation_1 = require("./authoritative-reconciliation");
 const sync_product_1 = require("./sync-product");
@@ -16,7 +17,8 @@ const findParentMirrorStep = (0, workflows_sdk_1.createStep)({
     const service = container.resolve(payload_sync_1.PAYLOAD_SYNC_MODULE);
     const logger = container.resolve(utils_1.ContainerRegistrationKeys.LOGGER);
     try {
-        return new workflows_sdk_1.StepResponse(await service.findProductMirror(input.productMedusaId));
+        const connection = await (0, payload_connection_1.resolvePayloadConnection)(container);
+        return new workflows_sdk_1.StepResponse(await service.findProductMirror(connection, input.productMedusaId));
     }
     catch (error) {
         const safeLog = (0, errors_1.formatPayloadSyncLog)(error, {
@@ -126,4 +128,4 @@ exports.syncVariantToPayloadWorkflow = (0, workflows_sdk_1.createWorkflow)("payl
 function isPermanentPayloadSyncError(error) {
     return error instanceof errors_1.PayloadSyncError && !error.retryable;
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3luYy12YXJpYW50LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL3dvcmtmbG93cy9wYXlsb2FkLXN5bmMvc3luYy12YXJpYW50LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLDREQUFnRTtBQUNoRSxxRUFPMkM7QUFDM0MscURBQXNFO0FBT3RFLHFFQUdrRDtBQUNsRCw2REFBaUU7QUFFakUsaUZBQStFO0FBQy9FLGlEQUE4RDtBQW1DOUQsTUFBTSxvQkFBb0IsR0FBRyxJQUFBLDBCQUFVLEVBQ3JDO0lBQ0UsSUFBSSxFQUFFLGlDQUFpQztJQUN2QyxVQUFVLEVBQUUsQ0FBQztJQUNiLGFBQWEsRUFBRSxDQUFDO0NBQ2pCLEVBQ0QsS0FBSyxFQUNILEtBQWdDLEVBQ2hDLEVBQUUsU0FBUyxFQUFFLFVBQVUsRUFBRSxPQUFPLEVBQUUsY0FBYyxFQUFFLEVBQ2xELEVBQUU7SUFDRixNQUFNLE9BQU8sR0FDWCxTQUFTLENBQUMsT0FBTyxDQUEyQixrQ0FBbUIsQ0FBQyxDQUFDO0lBQ25FLE1BQU0sTUFBTSxHQUFHLFNBQVMsQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsTUFBTSxDQUFDLENBQUM7SUFFbkUsSUFBSSxDQUFDO1FBQ0gsT0FBTyxJQUFJLDRCQUFZLENBQ3JCLE1BQU0sT0FBTyxDQUFDLGlCQUFpQixDQUFDLEtBQUssQ0FBQyxlQUFlLENBQUMsQ0FDdkQsQ0FBQztJQUNKLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsTUFBTSxPQUFPLEdBQUcsSUFBQSw2QkFBb0IsRUFBQyxLQUFLLEVBQUU7WUFDMUMsU0FBUyxFQUFFLHFCQUFxQjtZQUNoQyxVQUFVLEVBQUUsU0FBUztZQUNyQixRQUFRLEVBQUUsS0FBSyxDQUFDLGVBQWU7WUFDL0IsU0FBUyxFQUFFLEtBQUssQ0FBQyxTQUFTO1lBQzFCLFlBQVksRUFBRSwyQkFBMkI7WUFDekMsVUFBVTtZQUNWLE9BQU87WUFDUCxjQUFjO1NBQ2YsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUV0QixJQUFJLDJCQUEyQixDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDdkMsT0FBTyw0QkFBWSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ2hELENBQUM7UUFFRCxNQUFNLEtBQUssQ0FBQztJQUNkLENBQUM7QUFDSCxDQUFDLENBQ0YsQ0FBQztBQUVGLE1BQU0scUJBQXFCLEdBQUcsSUFBQSwwQkFBVSxFQUN0QztJQUNFLElBQUksRUFBRSxrQ0FBa0M7SUFDeEMsVUFBVSxFQUFFLENBQUM7SUFDYixhQUFhLEVBQUUsQ0FBQztJQUNoQixjQUFjLEVBQUUsSUFBSTtDQUNyQixFQUNELEtBQUssRUFDSCxLQUFpQyxFQUNqQyxFQUFFLFNBQVMsRUFBRSxVQUFVLEVBQUUsT0FBTyxFQUFFLGNBQWMsRUFBRSxFQUNsRCxFQUFFO0lBQ0YsTUFBTSxNQUFNLEdBQUcsU0FBUyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUVuRSxJQUFJLENBQUM7UUFDSCxPQUFPLElBQUksNEJBQVksQ0FDckIsTUFBTSxJQUFBLDREQUE2QixFQUFDLFNBQVMsRUFBRTtZQUM3QyxRQUFRLEVBQUUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsRUFBRTtZQUNuQyxnQkFBZ0IsRUFBRSxLQUFLLENBQUMsUUFBUTtTQUNqQyxDQUFDLENBQ0gsQ0FBQztJQUNKLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsTUFBTSxPQUFPLEdBQUcsSUFBQSw2QkFBb0IsRUFBQyxLQUFLLEVBQUU7WUFDMUMsU0FBUyxFQUFFLGNBQWM7WUFDekIsVUFBVSxFQUFFLFNBQVM7WUFDckIsUUFBUSxFQUFFLEtBQUssQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDLEVBQUU7WUFDbkMsU0FBUyxFQUFFLEtBQUssQ0FBQyxTQUFTO1lBQzFCLFlBQVksRUFBRSwyQkFBMkI7WUFDekMsVUFBVTtZQUNWLE9BQU87WUFDUCxjQUFjO1NBQ2YsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUV0QixJQUFJLDJCQUEyQixDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDdkMsT0FBTyw0QkFBWSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ2hELENBQUM7UUFFRCxNQUFNLEtBQUssQ0FBQztJQUNkLENBQUM7QUFDSCxDQUFDLENBQ0YsQ0FBQztBQUVXLFFBQUEsNEJBQTRCLEdBQUcsSUFBQSw4QkFBYyxFQUl4RCwyQkFBMkIsRUFBRSxVQUFVLEtBQUs7SUFDNUMsTUFBTSxFQUFFLElBQUksRUFBRSxRQUFRLEVBQUUsR0FBRyxJQUFBLDhCQUFpQixFQUFDO1FBQzNDLE1BQU0sRUFBRSxpQkFBaUI7UUFDekIsTUFBTSxFQUFFO1lBQ04sSUFBSTtZQUNKLE9BQU87WUFDUCxZQUFZO1lBQ1osZUFBZTtZQUNmLGdCQUFnQjtZQUNoQixnQkFBZ0I7U0FDakI7UUFDRCxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsS0FBSyxDQUFDLEVBQUUsRUFBRTtLQUMxQixDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsSUFBSSxFQUFFLG9DQUFvQyxFQUFFLENBQUMsQ0FBQztJQUUxRCxNQUFNLFFBQVEsR0FBRyxJQUFBLHlCQUFTLEVBT3hCLEVBQUUsU0FBUyxFQUFFLEtBQUssQ0FBQyxFQUFFLEVBQUUsUUFBUSxFQUFFLEVBQ2pDLENBQUMsRUFBRSxTQUFTLEVBQUUsUUFBUSxFQUFFLEVBQXlCLEVBQUU7UUFDakQsTUFBTSxPQUFPLEdBQUcsUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBRTVCLElBQUksT0FBTyxLQUFLLFNBQVMsRUFBRSxDQUFDO1lBQzFCLE9BQU8sNEJBQVksQ0FBQyxnQkFBZ0IsQ0FDbEMsa0RBQWtELFNBQVMsR0FBRyxDQUMvRCxDQUFDO1FBQ0osQ0FBQztRQUVELElBQUksT0FBTyxDQUFDLE9BQU8sS0FBSyxJQUFJLEVBQUUsQ0FBQztZQUM3QixPQUFPLDRCQUFZLENBQUMsZ0JBQWdCLENBQ2xDLGtEQUFrRCxTQUFTLEdBQUcsQ0FDL0QsQ0FBQztRQUNKLENBQUM7UUFFRCxPQUFPO1lBQ0wsT0FBTyxFQUFFO2dCQUNQLEVBQUUsRUFBRSxPQUFPLENBQUMsRUFBRTtnQkFDZCxLQUFLLEVBQUUsT0FBTyxDQUFDLEtBQUs7YUFDckI7WUFDRCxPQUFPLEVBQUUsT0FBTyxDQUFDLE9BQU87U0FDekIsQ0FBQztJQUNKLENBQUMsQ0FDRixDQUFDO0lBRUYsTUFBTSxjQUFjLEdBQUcsb0JBQW9CLENBQUM7UUFDMUMsZUFBZSxFQUFFLFFBQVEsQ0FBQyxPQUFPLENBQUMsRUFBRTtRQUNwQyxlQUFlLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxFQUFFO1FBQ3BDLFNBQVMsRUFBRSxLQUFLLENBQUMsU0FBUztLQUMzQixDQUFDLENBQUM7SUFDSCxNQUFNLFlBQVksR0FBRyxJQUFBLG9CQUFJLEVBQ3ZCLDRDQUE0QyxFQUM1QyxFQUFFLGNBQWMsRUFBRSxFQUNsQixDQUFDLEVBQUUsY0FBYyxFQUFFLEVBQUUsRUFBRSxDQUFDLGNBQWMsS0FBSyxJQUFJLENBQ2hELENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUNWLDJDQUE0QixDQUFDLFNBQVMsQ0FBQztRQUNyQyxLQUFLLEVBQUU7WUFDTCxFQUFFLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxFQUFFO1lBQ3ZCLFNBQVMsRUFBRSxLQUFLLENBQUMsU0FBUztTQUMzQjtLQUNGLENBQUMsQ0FDSCxDQUFDO0lBQ0YsTUFBTSxhQUFhLEdBQUcsSUFBQSx5QkFBUyxFQUM3QixFQUFFLGNBQWMsRUFBRSxZQUFZLEVBQUUsRUFDaEMsQ0FBQyxFQUFFLGNBQWMsRUFBRSxZQUFZLEVBQUUsRUFBa0IsRUFBRTtRQUNuRCxJQUFJLGNBQWMsS0FBSyxJQUFJLEVBQUUsQ0FBQztZQUM1QixPQUFPLGNBQWMsQ0FBQztRQUN4QixDQUFDO1FBRUQsSUFBSSxZQUFZLEtBQUssU0FBUyxFQUFFLENBQUM7WUFDL0IsT0FBTyw0QkFBWSxDQUFDLGdCQUFnQixDQUNsQyxnREFBZ0QsQ0FDakQsQ0FBQztRQUNKLENBQUM7UUFFRCxPQUFPLFlBQVksQ0FBQyxPQUFPLENBQUM7SUFDOUIsQ0FBQyxDQUNGLENBQUM7SUFFRixNQUFNLE1BQU0sR0FBRyxxQkFBcUIsQ0FBQztRQUNuQyxRQUFRO1FBQ1IsYUFBYTtRQUNiLFNBQVMsRUFBRSxLQUFLLENBQUMsU0FBUztLQUMzQixDQUFDLENBQUM7SUFFSCxPQUFPLElBQUksZ0NBQWdCLENBQUMsTUFBTSxDQUFDLENBQUM7QUFDdEMsQ0FBQyxDQUFDLENBQUM7QUFFSCxTQUFTLDJCQUEyQixDQUFDLEtBQWM7SUFDakQsT0FBTyxLQUFLLFlBQVkseUJBQWdCLElBQUksQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDO0FBQy9ELENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/README.md

@@ -22,40 +22,179 @@ remain pinned to `2.19.0`.
 ## Installation in a shop
 
 ```sh
-pnpm add @hartl-services/medusa-payload-sync
+pnpm add @hartl-services/medusa-payload-sync @hartl-services/medusa-base
 ```
 
+`@hartl-services/medusa-base` (>= 0.4.0) is a required peer: it stores the
+plugin switch (see [Feature toggles](#feature-toggles)), the connection
+settings (see [Settings in the Admin](#settings-in-the-admin)) and runs the
+[`sync_now` action](#admin-action-jetzt-synchronisieren). Register it as a
+plugin as well, before Payload Sync.
+
 ```ts
 // medusa-config.ts
 const plugins = [
+  { resolve: "@hartl-services/medusa-base", options: {} },
   {
     resolve: "@hartl-services/medusa-payload-sync",
-    options: {
-      payloadUrl: process.env.PAYLOAD_URL,
-      payloadApiKey: process.env.PAYLOAD_SERVICE_API_KEY,
-      // optional, defaults to "users"
-      payloadAuthCollection: process.env.PAYLOAD_AUTH_COLLECTION,
-    },
+    // No connection options: URL, API key and auth collection are Admin
+    // settings. Only the config-only options below may be passed here.
+    options: {},
   },
   // ...other plugins
 ];
 ```
 
-Required options and environment variables:
-
-- `payloadUrl` — Payload origin, `http`/`https` (`PAYLOAD_URL`).
-- `payloadApiKey` — API key of the dedicated Payload service user
-  (`PAYLOAD_SERVICE_API_KEY`).
-
-Everything else (`payloadAuthCollection`, `collections.product`,
-`collections.variant`, `requestTimeoutMs`, `backfillBatchSize`,
-`backfillBatchDelayMs`) is optional; see
-[Options and exact defaults](#options-and-exact-defaults) below. Keep
-`payloadApiKey` out of any public/browser environment-variable prefix and
-never forward it to a Storefront or Admin client. Also complete
+No option is required. The Payload URL, API key and auth collection are
+runtime settings maintained only in the Admin (see
+[Settings in the Admin](#settings-in-the-admin)); there is no
+`medusa-config.ts` or environment fallback. The former options `payloadUrl`,
+`payloadApiKey` and `payloadAuthCollection` are rejected at boot with an
+error that points to the Admin settings. The config-only options
+(`collections.product`, `collections.variant`, `requestTimeoutMs`,
+`backfillBatchSize`, `backfillBatchDelayMs`) are described in
+[Options and exact defaults](#options-and-exact-defaults) below. Also complete
 [Configure Payload authentication](#configure-payload-authentication) below,
 which the plugin itself does not automate.
 
+## Settings in the Admin
+
+The plugin declares three settings to `@hartl-services/medusa-base`. An Admin
+maintains them under Settings → "Hartl Services Plugins" → Payload-CMS-Sync
+("Öffnen"):
+
+| Key                       | Label           | Type   | Required | Default |
+| ------------------------- | --------------- | ------ | -------- | ------- |
+| `payload_url`             | Payload-URL     | url    | yes      | none    |
+| `payload_api_key`         | API-Key         | secret | yes      | none    |
+| `payload_auth_collection` | Auth-Collection | string | no       | `users` |
+
+Precedence per key: value stored in the Admin > default. The page shows each
+value's source; the API key is stored encrypted by the base plugin and never
+displayed ("gesetzt" only). "Löschen" removes a stored value: the URL or API
+key is then missing (the plugin is "nicht konfiguriert"), the auth collection
+returns to `users`. Saving a changed URL or auth collection also clears the
+stored API key (the settings declare `invalidates: ["payload_api_key"]`), so
+the key is never sent to a host it was not entered for; the plugin is "nicht
+konfiguriert" until the key is entered again. Rotating the backend's `COOKIE_SECRET` makes a stored API key unreadable; it
+then counts as not set until it is saved again (see the base plugin's README).
+
+Every sync resolves the settings anew, so a change applies to the next event
+without a restart. The settings are read at app level, never by the module
+service (a module does not reach into other modules):
+
+- `resolvePayloadConnection(container)` (`src/lib/payload-connection.ts`)
+  reads them through the base plugin with the caller's application container
+  (workflow step, subscriber, script), validates them and returns the
+  connection; while incomplete it throws the permanent
+  `PayloadSyncNotConfiguredError`.
+- `describePayloadSyncConfiguration(container)` answers the same check
+  without throwing (subscriber guard, reconciliation script, `sync_now`).
+- Every Payload-facing method of the module service takes that connection
+  as its first parameter, for example
+  `service.syncProductSnapshot(connection, snapshot)` or
+  `service.findProductMirror(connection, medusaId)`. The service builds its
+  REST client from it lazily and reuses it while URL, key and auth collection
+  stay the same. An injected `payloadSyncRestClient` (test seam) is used
+  as-is and the connection is ignored.
+Resolved values are validated like the former options (`http`/`https` URL
+with one trailing slash removed, non-empty key, lowercase auth-collection
+slug); an invalid value counts as missing. The collections, timeout and
+backfill options stay config-only.
+
+### Not configured
+
+While URL or API key is missing or invalid, the plugin is "nicht
+konfiguriert". That is also the state of every fresh installation until the
+settings are saved:
+
+- the backend boots normally and does not contact Payload at startup;
+- the settings page and the plugin hub show "nicht konfiguriert" with the
+  missing keys;
+- the subscribers check the plugin switch first, then the settings, and
+  return without mirroring; product and variant changes made meanwhile are
+  not caught up automatically (run the reconciliation afterwards);
+- the reconciliation script returns an empty summary without touching
+  Payload; the `sync_now` action ends `failed` with the not-configured
+  message;
+- one warning per process names the missing or invalid keys (never values),
+  for example `Payload-CMS-Sync ist nicht konfiguriert (fehlend:
+  payload_url).`; after a successful resolution the warning is re-armed for
+  the next outage.
+
+### Migrating an existing shop
+
+Earlier versions read the connection from `medusa-config.ts`
+(`PAYLOAD_URL`, `PAYLOAD_SERVICE_API_KEY`, `PAYLOAD_AUTH_COLLECTION`). The
+settings only exist from this version on, so upgrade in this order:
+
+1. Remove the three options from the plugin entry (the boot fails while they
+   are still passed) and drop the environment variables.
+2. Deploy. The plugin reports "nicht konfiguriert"; product and variant
+   events in the meantime are not mirrored.
+3. Enter URL, API key and auth collection in the Admin (Settings → "Hartl
+   Services Plugins" → Payload-CMS-Sync).
+4. Run "Jetzt synchronisieren" to catch up on the changes missed meanwhile.
+
+Unlike `@hartl-services/medusa-documents`, which deliberately keeps its
+`merchant` option as a config fallback for the shop master data, this plugin
+has no config or environment fallback for its connection settings.
+
+### Admin action "Jetzt synchronisieren"
+
+The descriptor declares the action `sync_now` ("Jetzt synchronisieren", mode
+`background`, with a confirmation prompt). It runs the workflow
+`payload-sync-reconcile-catalog`, which calls the same full
+[reconciliation](#initial-and-repeat-reconciliation) as the script. The base
+answers `202` right after starting it and emits `plugin-action.finished.v1`
+with `completed` or `failed` when it ends; any failed product or a failed
+orphan scan makes the run `failed`. The base records every run and refuses a
+second start while one is running (`409`).
+
+A failed run's message names the counts and the classified cause, redacted,
+e.g. `Payload-Abgleich fehlgeschlagen: 4 von 4 Produkt(en) nicht gespiegelt
+(Payload nicht erreichbar, Netzwerkfehler [PAYLOAD_NETWORK_ERROR]); verwaiste
+Spiegel nicht geprüft (…)`. A retryable error (network, timeout, HTTP
+408/429/5xx) makes Medusa schedule the step's retry (`retryInterval`) instead
+of retrying inline; the reconciliation does not wait for it and counts that
+product or orphan page as failed right away. Rerun once Payload is back.
+
+The workflow reports its progress to that run through the base's
+`reportPluginActionProgress` after every page, and the Admin shows it while
+the run is active:
+
+- product pages: `current` = products scanned, `total` = products in Medusa,
+  label e.g. `Produkte: Seite 3, 140 gespiegelt`;
+- orphan scans: `Verwaiste Produkt-Spiegel: Seite 1`,
+  `Verwaiste Varianten-Spiegel: Seite 1`;
+- at the end: `Fertig: 140 Produkte und 312 Varianten gespiegelt, 2 verwaiste
+  Spiegel auf Entwurf gesetzt` (plus `, N fehlgeschlagen` for failed
+  products).
+
+The reconciliation script reports nothing (it has no run). While the plugin
+is "nicht konfiguriert" the action ends `failed` with the not-configured
+message (for example `Payload-CMS-Sync ist nicht konfiguriert (fehlend:
+payload_url).`) and no progress.
+
+## Feature toggles
+
+The plugin declares a plugin switch without features to
+`@hartl-services/medusa-base` under the plugin key `payload_sync`. An Admin
+switches it under Settings → "Hartl Services Plugins"; its effective value is
+readable from `GET /store/plugin-features/payload_sync`. The plugin has no
+HTTP routes.
+
+| Key             | Label            | Default | Gates                                                                                                                                  | Keeps running when off                                                                                          |
+| --------------- | ---------------- | ------- | -------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
+| (plugin switch) | Payload-CMS-Sync | on      | subscribers `payload-sync-product-upserted`, `payload-sync-product-deleted`, `payload-sync-variant-upserted`, `payload-sync-variant-deleted` | the module, existing Payload mirror documents (unchanged), the manual reconciliation script and the `sync_now` action |
+
+While the switch is off, product and variant events are consumed without
+effect: nothing is mirrored and nothing is caught up when the switch is
+turned on again. Run the [reconciliation](#initial-and-repeat-reconciliation)
+afterwards to bring Payload back in line; neither the script nor the
+`sync_now` action reads the switch. A toggle or settings read failure fails
+the subscriber, so the Event Bus retries it.
+
 ## Configure Medusa
 
 This repository's demo/test host, `apps/backend`, configures Payload
@@ -64,16 +203,13 @@ following the same direct `medusa-config.ts` entry shown above; it does not
 ship a Payload runtime package.
 
 Feature selection and non-secret defaults belong directly in the plugin's
-options in `apps/backend/medusa-config.ts`. It is enabled by being listed
-there, not by a separate runtime feature flag. `medusa-config.ts` selects the
-default Payload auth collection `users`, overridable via
-`PAYLOAD_AUTH_COLLECTION`.
+options in `apps/backend/medusa-config.ts`. It is installed by being listed
+there; the Admin plugin switch (see [Feature toggles](#feature-toggles)) only
+pauses the mirroring.
 
-Dokploy must provide the server-only runtime values `PAYLOAD_URL` and
-`PAYLOAD_SERVICE_API_KEY`; `PAYLOAD_AUTH_COLLECTION` can override the
-default. `apps/backend/medusa-config.ts` validates and passes those values to
-the local plugin. Never use a public/browser environment-variable prefix for
-the API key or forward it to a Storefront or Admin client.
+The demo shop passes no Payload connection: it boots with the plugin "nicht
+konfiguriert" until URL and API key are saved in the Admin. Never forward
+the API key to a Storefront or Admin client.
 
 The backend configuration owns these server-only options directly; Payload
 Sync exports no consumer-facing option or HTTP contract.
@@ -82,19 +218,18 @@ Sync exports no consumer-facing option or HTTP contract.
 
 | Option                  | Required | Implemented default       | Purpose                                                                                        |
 | ----------------------- | -------- | ------------------------- | ---------------------------------------------------------------------------------------------- |
-| `payloadUrl`            | yes      | none                      | Payload origin using `http` or `https`; one trailing slash is removed. The client adds `/api`. |
-| `payloadApiKey`         | yes      | none                      | API key of the dedicated Payload service user.                                                 |
-| `payloadAuthCollection` | no       | `users`                   | Payload auth collection slug used in the API-key Authorization header.                         |
 | `collections.product`   | no       | `medusa-products`         | Product mirror collection slug.                                                                |
 | `collections.variant`   | no       | `medusa-product-variants` | Variant mirror collection slug.                                                                |
 | `requestTimeoutMs`      | no       | `10000`                   | Timeout for one Payload REST request; accepted range `100`–`120000`.                           |
 | `backfillBatchSize`     | no       | `50`                      | Medusa/Payload page size for reconciliation; accepted range `1`–`500`.                         |
 | `backfillBatchDelayMs`  | no       | `250`                     | Delay between non-final Medusa product pages; accepted range `0`–`60000`.                      |
 
-Collection and auth slugs must be lowercase Payload-style slugs.
-`apps/backend/medusa-config.ts` currently forwards only the resolved URL,
-API key, and auth collection; changes to non-secret shop defaults must be
-modeled directly in the plugin's options there.
+Collection slugs must be lowercase Payload-style slugs. Invalid options and
+the removed connection options fail the boot. The connection settings are
+validated when they are used (an invalid one makes the plugin "nicht
+konfiguriert"). `apps/backend/medusa-config.ts` passes no options; changes to
+non-secret shop defaults must be modeled directly in the plugin's options
+there.
 
 The REST client rejects any successful JSON response larger than 8 MiB with
 `PAYLOAD_RESPONSE_TOO_LARGE` and cancels the response stream. This fixed bound
@@ -134,11 +269,11 @@ After restarting Payload with `useAPIKey: true`:
 Keep the resulting values server-side:
 
 - its document ID as `PAYLOAD_SYNC_SERVICE_USER_ID` in the Payload process;
-- its API key as `PAYLOAD_SERVICE_API_KEY` in the Medusa process.
+- its API key in the Admin setting "API-Key" (`payload_api_key`).
 
-Set `payloadAuthCollection` to the auth collection's actual slug. The plugin
-sends the standard header
-`Authorization: <payloadAuthCollection> API-Key <payloadApiKey>` on every
+Set the Admin setting "Auth-Collection" (`payload_auth_collection`) to the
+auth collection's actual slug. The plugin sends the standard header
+`Authorization: <auth collection> API-Key <API key>` on every
 Payload request. It never logs this header or the key. Do not put either secret
 in a public environment variable, client bundle, URL, or checked-in `.env`
 file.
@@ -384,29 +519,29 @@ not satisfy this plugin's process-death recovery contract. Reconciliation must
 use the same compatible provider and lock domain as event workers. Otherwise
 the ordering guarantee is only process-local or does not apply.
 
-## Reduced startup capability check
+## Capability check
+
+The plugin does not contact Payload at startup: the connection is a runtime
+setting, so there is nothing to check at boot. A wrong URL, key or missing
+permission surfaces on the first sync (structured, redacted error log) or as
+a failed `sync_now` run.
 
-At normal startup, the plugin calls Payload's standard authenticated
-`/api/access` endpoint. It validates:
+`runPayloadPreflight` (used by the Payload REST contract suite against a real
+Payload) calls Payload's standard authenticated `/api/access` endpoint and
+validates:
 
 - reachable authentication;
 - both configured collection slugs;
 - collection-level `read`, `create`, and `update` capabilities;
 - required field capabilities only when Payload exposes those field shapes.
 
-This is intentionally a reduced preflight. With no custom Payload code, the
+This is intentionally a reduced check. With no custom Payload code, the
 standard endpoint cannot prove every field type, `unique`/index rule,
 relationship `relationTo`, drafts/version setting, delete ACL, or omitted field
 shape. The copyable schema above is the authoritative configuration contract;
 runtime writes and the real Payload contract test are the authoritative
 protocol gate.
 
-Recognizable auth, schema, permission, and other non-retryable contract errors
-fail startup with the affected collection or capability. Temporary network
-failures, timeouts, HTTP 408, 429, and 5xx responses produce a structured,
-redacted warning and allow startup in degraded mode; later workflows retry.
-Remote preflight I/O is skipped in Medusa's data-loader-only/migration context.
-
 ## Initial and repeat reconciliation
 
 Reconciliation is the initial backfill and the repair tool after missed or
@@ -421,8 +556,11 @@ pnpm exec medusa exec \
   node_modules/@hartl-services/medusa-payload-sync/.medusa/server/src/scripts/reconcile-payload-catalog.js
 ```
 
-The command uses the shop's configured database and server-only Payload
-credentials.
+The command uses the shop's configured database and resolves the Payload
+connection exactly like the subscribers (Admin settings > default). While the plugin is "nicht konfiguriert" it logs that
+once and exits without touching Payload (the Admin action fails instead). The Admin action
+[`sync_now`](#admin-action-jetzt-synchronisieren) runs the same function as
+the workflow `payload-sync-reconcile-catalog`.
 
 Every run:
 
@@ -450,7 +588,8 @@ metrics-only limitation.
 The runner is restartable and idempotent: safe repeat runs converge on the
 current Medusa state without duplicate mirror documents. Pagination is not a
 database snapshot, so rerun after concurrent catalog changes. V1 deliberately
-has no automatic schedule; operators decide when to rerun it.
+has no automatic schedule; operators decide when to rerun it (script or
+`sync_now`).
 
 ## Retries, logs, and incident recovery
 
@@ -488,7 +627,8 @@ missed delete events without deleting Payload history.
 - Medusa categories, collections, prices, inventory, Sales Channels, or other
   commerce facts
 - Medusa Module Links or `defineLink`
-- Medusa Admin UI, an Admin reconciliation route, or an automatic schedule
+- a plugin-owned Admin UI or HTTP route (settings and the `sync_now` action
+  are served by `@hartl-services/medusa-base`), or an automatic schedule
 - Payload hard delete or a configurable delete mode
 - a plugin-owned dead-letter database/table
 
@@ -498,8 +638,9 @@ needed for their editorial model; those remain outside this plugin's contract.
 ## Plugin development contract
 
 Payload Sync is server-to-server integration code and intentionally exposes no
-Store or Admin HTTP routes. It has no public DTO, schema, path, Storefront
-client, or runtime Payload-credential contract.
+Store or Admin HTTP routes of its own; its settings and action go through the
+base plugin's `/admin/plugin-features` routes. It has no public DTO, schema,
+path, Storefront client, or runtime Payload-credential contract.
 
 If this component gains a Medusa HTTP route, define its request/query/response
 DTOs with `@medusajs/framework/zod`, derive public types from those schemas,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hartl-services/medusa-payload-sync",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Mirrors Medusa product and variant facts into Payload CMS.",
   "license": "MIT",
   "files": [
@@ -27,7 +27,8 @@
   },
   "peerDependencies": {
     "@medusajs/framework": "^2.19.0",
-    "@medusajs/medusa": "^2.19.0"
+    "@medusajs/medusa": "^2.19.0",
+    "@hartl-services/medusa-base": "^0.4.0"
   },
   "devDependencies": {
     "@medusajs/cli": "2.19.0",
@@ -38,7 +39,8 @@
     "@types/jest": "^29.5.14",
     "@types/node": "^20.12.11",
     "jest": "^29.7.0",
-    "typescript": "^5.6.2"
+    "typescript": "^5.6.2",
+    "@hartl-services/medusa-base": "0.4.0"
   },
   "engines": {
     "node": ">=20"
@@ -47,6 +49,7 @@
     "build": "medusa plugin:build",
     "typecheck": "tsc --noEmit",
     "test:unit": "jest --config jest.config.js",
-    "test:contract": "jest --config jest.contract.config.js --runInBand"
+    "test:contract": "jest --config jest.contract.config.js --runInBand",
+    "pretest:unit": "pnpm --filter @hartl-services/medusa-food-supplements-contracts build && pnpm --filter @hartl-services/medusa-base build"
   }
 }