@memberjunction/integration-engine 6.1.0-edge.1 → 6.1.0-edge.3

package/dist/RunOwnershipService.d.ts

@@ -0,0 +1,177 @@
+import type { DatabaseProviderBase, UserInfo } from '@memberjunction/core';
+import type { MJCompanyIntegrationRunEntity } from '@memberjunction/core-entities';
+/**
+ * Thrown at a batch boundary when this process discovers it no longer owns the
+ * run row (lease reclaimed by a stale-sweep or another worker bumped the fence).
+ * The sync loop MUST let this propagate — per-record error handling must never
+ * swallow it, because continuing to write after ownership loss is exactly the
+ * split-brain hazard the fence exists to prevent.
+ */
+/**
+ * The states a run can be released INTO — the terminal subset of the entity's Status value list.
+ * Derived with `Extract` rather than hand-written so it stays pinned to the CHECK-constraint union
+ * CodeGen generates: if one of these values were ever removed from the column, this type narrows and
+ * every call site fails to compile, instead of silently passing a status the constraint rejects at
+ * runtime. 'In Progress' / 'Pending' / 'Queued' are deliberately excluded — they are not terminal.
+ */
+export type TerminalRunStatus = Extract<MJCompanyIntegrationRunEntity['Status'], 'Success' | 'Failed' | 'Cancelled'>;
+export declare class RunOwnershipLostError extends Error {
+    readonly RunID: string;
+    constructor(runID: string, detail: string);
+}
+/** Result of a lease renewal attempt. */
+export interface RenewResult {
+    /** True when the DB confirmed our token+fence still own the row and extended the lease. */
+    Renewed: boolean;
+    /** True when a cooperative cancel has been requested on the run row (only meaningful when Renewed). */
+    CancelRequested: boolean;
+}
+/** Result of a batch-boundary ownership check. */
+export interface BoundaryCheckResult {
+    /** True when the row's OwnerToken + FenceToken still match ours. */
+    Owned: boolean;
+    /** True when CancelRequestedAt is set on the row. */
+    CancelRequested: boolean;
+}
+/** Options for the background heartbeat started via {@link RunOwnershipService.StartHeartbeat}. */
+export interface HeartbeatOptions {
+    /**
+     * Called (once) when a renewal discovers ownership has been lost. The engine
+     * uses this to abort the in-flight sync locally; writes are additionally
+     * fenced at every batch boundary, so this is fast-fail, not the safety net.
+     */
+    onLost?: () => void;
+    /** Called (once per request) when a renewal observes CancelRequestedAt set. */
+    onCancelRequested?: () => void;
+    /** Supplies the latest progress JSON to piggyback on each renewal write. */
+    progressSupplier?: () => string | null;
+}
+/**
+ * Per-run ownership manager for durable CompanyIntegrationRun execution
+ * (GH tasks.md PR 1). One instance is created per sync run and owns:
+ *
+ * - **Claim**: a single atomic UPDATE...WHERE (unowned OR lease expired) via
+ *   spClaimCompanyIntegrationRun — never select-then-update. Claiming bumps
+ *   FenceToken, invalidating any prior holder's writes.
+ * - **Renew**: timer-driven lease extension (interval ≈ lease/3) via
+ *   spRenewCompanyIntegrationRunLease, token+fence-checked. The renewal result
+ *   doubles as the cross-process cancel signal (returns CancelRequestedAt).
+ * - **Boundary fence**: {@link CheckBoundary} — a cheap SELECT the sync loop
+ *   calls before every batch's writes. Ownership lost ⇒ the loop throws
+ *   {@link RunOwnershipLostError} and writes nothing further.
+ * - **Release**: terminal status write + owner clear, token-checked so a stale
+ *   holder's release no-ops.
+ *
+ * All sproc calls use the dialect-portable positional-parameter convention
+ * (same pattern as ScheduledJobEngine's lock sprocs): SQL Server binds the
+ * sproc's named params to positional `@pN` placeholders via EXEC; PostgreSQL
+ * calls the plpgsql port via `SELECT * FROM fn($1,...)`. The SAME value array
+ * serves both.
+ */
+export declare class RunOwnershipService {
+    /** Default lease when the caller supplies no MaxRuntimeMinutes. */
+    static readonly DEFAULT_LEASE_MINUTES = 10;
+    private readonly provider;
+    private readonly contextUser;
+    private readonly runID;
+    private readonly ownerToken;
+    private readonly leaseMinutes;
+    private fenceToken;
+    private lastKnownLeaseExpiresAt;
+    private heartbeatTimer;
+    private lostNotified;
+    private cancelNotified;
+    private renewInFlight;
+    /**
+     * @param provider the run's OWN provider connection (per-run, never a shared
+     *        engine-level provider — see the per-run-connection requirement).
+     * @param runID CompanyIntegrationRun.ID this service governs.
+     * @param leaseMinutes lease length; callers pass
+     *        max(DEFAULT_LEASE_MINUTES, options.MaxRuntimeMinutes ?? 0) so a
+     *        long-batch override only ever EXTENDS protection.
+     */
+    constructor(provider: DatabaseProviderBase, runID: string, leaseMinutes?: number, contextUser?: UserInfo);
+    /** The CompanyIntegrationRun ID this service governs. */
+    get RunID(): string;
+    /** The opaque owner token minted for this execution. */
+    get OwnerToken(): string;
+    /** The fence token returned by the successful claim (null before claim). */
+    get FenceToken(): number | null;
+    /** Last lease expiry the DB confirmed for us (null before claim). */
+    get LeaseExpiresAt(): Date | null;
+    /** Lease length in minutes this service renews with. */
+    get LeaseMinutes(): number;
+    /**
+     * Atomically claim the run row. Returns true iff WE now own it (the sproc's
+     * single UPDATE succeeded because the row was unowned or its lease had
+     * expired). On success the DB-assigned FenceToken (bumped by the claim) and
+     * lease expiry are cached for renewals and boundary checks.
+     */
+    Claim(): Promise<boolean>;
+    /**
+     * Renew the lease (token+fence-checked). Zero rows back ⇒ ownership lost.
+     * Optionally piggybacks a progress snapshot onto the same write, and always
+     * surfaces the row's CancelRequestedAt so the heartbeat doubles as the
+     * cross-process cancel poll.
+     */
+    Renew(progressJSON?: string | null): Promise<RenewResult>;
+    /**
+     * Batch-boundary fence: a cheap SELECT of the ownership columns. The sync
+     * loop calls this BEFORE each batch's writes; if we no longer own the row,
+     * the caller must throw {@link RunOwnershipLostError} and stop writing.
+     * Deliberately a plain read (no lease extension) — renewal belongs to the
+     * heartbeat timer, and a boundary check must stay cheap enough to run
+     * every batch.
+     */
+    CheckBoundary(): Promise<BoundaryCheckResult>;
+    /**
+     * Terminal release: set the final status, clear OwnerToken/LeaseExpiresAt,
+     * stamp EndedAt if unset. Token- AND fence-checked — a stale holder (lease
+     * reclaimed) releasing late is a harmless no-op (returns false).
+     *
+     * The fence is sent for the same reason Renew() sends it: the owner token proves
+     * only that *some* context using this token owns the row, not that THIS context
+     * still does. Each instance mints its own token and claims once, so the two are
+     * equivalent today — but Claim() is re-callable and overwrites the fence, so
+     * passing it keeps the guarantee in the procedure rather than in call-site
+     * discipline.
+     */
+    Release(finalStatus: TerminalRunStatus): Promise<boolean>;
+    /**
+     * Start the background renewal timer at interval ≈ lease/3 (so a renewal
+     * must fail ~3 consecutive times before the lease can lapse). The timer
+     * body is best-effort and never throws; renewal failures surface through
+     * opts.onLost exactly once. Idempotent — restarting replaces the timer.
+     */
+    StartHeartbeat(opts?: HeartbeatOptions): void;
+    /** Stop the renewal timer (idempotent). */
+    StopHeartbeat(): void;
+    /**
+     * Sync the entity's in-memory ownership columns to the service's last-known
+     * authoritative values before ANY full-row `run.Save()`. The generated
+     * spUpdate writes every column from the entity's in-memory state, so a
+     * terminal Save without this sync would clobber the DB's live
+     * FenceToken/OwnerToken/LeaseExpiresAt with the stale values the entity was
+     * loaded with (typically pre-claim). Call this immediately before each
+     * Save on the run row; Release() then clears ownership atomically.
+     */
+    SyncEntityOwnershipFields(run: MJCompanyIntegrationRunEntity): void;
+    private lastProgressWriteMs;
+    /**
+     * Persist a progress snapshot to the run row's ProgressJSON (PR 1 item 4 —
+     * progress lives in the database; readers query the row). Ownership-guarded
+     * (WHERE OwnerToken AND FenceToken) so a reclaimed run can never overwrite the
+     * new owner's progress. Throttled internally (default once per 5s) so progress
+     * never becomes its own hot path; best-effort — a progress write failure must
+     * never fault the sync.
+     */
+    WriteProgress(progressJSON: string, minIntervalMs?: number): Promise<void>;
+    /** One heartbeat tick: renew, then fan out lost/cancel notifications once each. */
+    private heartbeatOnce;
+    /**
+     * Dialect-portable sproc call, preserving the MJ positional-parameter-array
+     * convention (same helper shape as ScheduledJobEngine.buildLockSprocCall).
+     */
+    private buildSprocCall;
+}
+//# sourceMappingURL=RunOwnershipService.d.ts.map

package/dist/RunOwnershipService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunOwnershipService.d.ts","sourceRoot":"","sources":["../src/RunOwnershipService.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;GAMG;AACH;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC;AAErH,qBAAa,qBAAsB,SAAQ,KAAK;IAC5C,SAAgB,KAAK,EAAE,MAAM,CAAC;gBAClB,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,yCAAyC;AACzC,MAAM,WAAW,WAAW;IACxB,2FAA2F;IAC3F,OAAO,EAAE,OAAO,CAAC;IACjB,uGAAuG;IACvG,eAAe,EAAE,OAAO,CAAC;CAC5B;AAED,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAChC,oEAAoE;IACpE,KAAK,EAAE,OAAO,CAAC;IACf,qDAAqD;IACrD,eAAe,EAAE,OAAO,CAAC;CAC5B;AAED,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC/B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC1C;AASD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,mBAAmB;IAC5B,mEAAmE;IACnE,gBAAuB,qBAAqB,MAAM;IAElD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,uBAAuB,CAAqB;IACpD,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAS;IAE9B;;;;;;;OAOG;gBACS,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ;IAUxG,yDAAyD;IACzD,IAAW,KAAK,IAAI,MAAM,CAEzB;IAED,wDAAwD;IACxD,IAAW,UAAU,IAAI,MAAM,CAE9B;IAED,4EAA4E;IAC5E,IAAW,UAAU,IAAI,MAAM,GAAG,IAAI,CAErC;IAED,qEAAqE;IACrE,IAAW,cAAc,IAAI,IAAI,GAAG,IAAI,CAEvC;IAED,wDAAwD;IACxD,IAAW,YAAY,IAAI,MAAM,CAEhC;IAED;;;;;OAKG;IACU,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAgBtC;;;;;OAKG;IACU,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAmBtE;;;;;;;OAOG;IACU,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAwB1D;;;;;;;;;;;OAWG;IACU,OAAO,CAAC,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtE;;;;;OAKG;IACI,cAAc,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI;IAUpD,2CAA2C;IACpC,aAAa,IAAI,IAAI;IAO5B;;;;;;;;OAQG;IACI,yBAAyB,CAAC,GAAG,EAAE,6BAA6B,GAAG,IAAI;IAS1E,OAAO,CAAC,mBAAmB,CAAK;IAEhC;;;;;;;OAOG;IACU,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BtF,mFAAmF;YACrE,aAAa;IAsC3B;;;OAGG;IACH,OAAO,CAAC,cAAc;CAMzB"}

package/dist/RunOwnershipService.js

@@ -0,0 +1,279 @@
+import { randomUUID } from 'node:crypto';
+import { LogErrorEx, LogStatusEx } from '@memberjunction/core';
+export class RunOwnershipLostError extends Error {
+    constructor(runID, detail) {
+        super(`Ownership of CompanyIntegrationRun ${runID} lost: ${detail}`);
+        this.name = 'RunOwnershipLostError';
+        this.RunID = runID;
+    }
+}
+/**
+ * Per-run ownership manager for durable CompanyIntegrationRun execution
+ * (GH tasks.md PR 1). One instance is created per sync run and owns:
+ *
+ * - **Claim**: a single atomic UPDATE...WHERE (unowned OR lease expired) via
+ *   spClaimCompanyIntegrationRun — never select-then-update. Claiming bumps
+ *   FenceToken, invalidating any prior holder's writes.
+ * - **Renew**: timer-driven lease extension (interval ≈ lease/3) via
+ *   spRenewCompanyIntegrationRunLease, token+fence-checked. The renewal result
+ *   doubles as the cross-process cancel signal (returns CancelRequestedAt).
+ * - **Boundary fence**: {@link CheckBoundary} — a cheap SELECT the sync loop
+ *   calls before every batch's writes. Ownership lost ⇒ the loop throws
+ *   {@link RunOwnershipLostError} and writes nothing further.
+ * - **Release**: terminal status write + owner clear, token-checked so a stale
+ *   holder's release no-ops.
+ *
+ * All sproc calls use the dialect-portable positional-parameter convention
+ * (same pattern as ScheduledJobEngine's lock sprocs): SQL Server binds the
+ * sproc's named params to positional `@pN` placeholders via EXEC; PostgreSQL
+ * calls the plpgsql port via `SELECT * FROM fn($1,...)`. The SAME value array
+ * serves both.
+ */
+export class RunOwnershipService {
+    /** Default lease when the caller supplies no MaxRuntimeMinutes. */
+    static { this.DEFAULT_LEASE_MINUTES = 10; }
+    /**
+     * @param provider the run's OWN provider connection (per-run, never a shared
+     *        engine-level provider — see the per-run-connection requirement).
+     * @param runID CompanyIntegrationRun.ID this service governs.
+     * @param leaseMinutes lease length; callers pass
+     *        max(DEFAULT_LEASE_MINUTES, options.MaxRuntimeMinutes ?? 0) so a
+     *        long-batch override only ever EXTENDS protection.
+     */
+    constructor(provider, runID, leaseMinutes, contextUser) {
+        this.fenceToken = null;
+        this.lastKnownLeaseExpiresAt = null;
+        this.heartbeatTimer = null;
+        this.lostNotified = false;
+        this.cancelNotified = false;
+        this.renewInFlight = false;
+        this.lastProgressWriteMs = 0;
+        this.provider = provider;
+        this.runID = runID;
+        this.contextUser = contextUser;
+        // Cryptographic UUID — token identity IS execution identity; a collision
+        // between concurrent workers would defeat the fence.
+        this.ownerToken = randomUUID();
+        this.leaseMinutes = Math.max(RunOwnershipService.DEFAULT_LEASE_MINUTES, leaseMinutes ?? 0);
+    }
+    /** The CompanyIntegrationRun ID this service governs. */
+    get RunID() {
+        return this.runID;
+    }
+    /** The opaque owner token minted for this execution. */
+    get OwnerToken() {
+        return this.ownerToken;
+    }
+    /** The fence token returned by the successful claim (null before claim). */
+    get FenceToken() {
+        return this.fenceToken;
+    }
+    /** Last lease expiry the DB confirmed for us (null before claim). */
+    get LeaseExpiresAt() {
+        return this.lastKnownLeaseExpiresAt;
+    }
+    /** Lease length in minutes this service renews with. */
+    get LeaseMinutes() {
+        return this.leaseMinutes;
+    }
+    /**
+     * Atomically claim the run row. Returns true iff WE now own it (the sproc's
+     * single UPDATE succeeded because the row was unowned or its lease had
+     * expired). On success the DB-assigned FenceToken (bumped by the claim) and
+     * lease expiry are cached for renewals and boundary checks.
+     */
+    async Claim() {
+        const rows = await this.provider.ExecuteSQL(this.buildSprocCall('spClaimCompanyIntegrationRun', ['RunID', 'OwnerToken', 'LeaseMinutes']), [this.runID, this.ownerToken, this.leaseMinutes], { isMutation: true, description: 'spClaimCompanyIntegrationRun' }, this.contextUser);
+        const row = rows?.[0];
+        if (!row) {
+            return false; // someone else holds a live lease
+        }
+        this.fenceToken = Number(row.FenceToken);
+        this.lastKnownLeaseExpiresAt = new Date(row.LeaseExpiresAt);
+        return true;
+    }
+    /**
+     * Renew the lease (token+fence-checked). Zero rows back ⇒ ownership lost.
+     * Optionally piggybacks a progress snapshot onto the same write, and always
+     * surfaces the row's CancelRequestedAt so the heartbeat doubles as the
+     * cross-process cancel poll.
+     */
+    async Renew(progressJSON) {
+        if (this.fenceToken == null) {
+            return { Renewed: false, CancelRequested: false };
+        }
+        const rows = await this.provider.ExecuteSQL(this.buildSprocCall('spRenewCompanyIntegrationRunLease', ['RunID', 'OwnerToken', 'FenceToken', 'LeaseMinutes', 'ProgressJSON']), [this.runID, this.ownerToken, this.fenceToken, this.leaseMinutes, progressJSON ?? null], { isMutation: true, description: 'spRenewCompanyIntegrationRunLease' }, this.contextUser);
+        const row = rows?.[0];
+        if (!row) {
+            return { Renewed: false, CancelRequested: false };
+        }
+        this.lastKnownLeaseExpiresAt = new Date(row.LeaseExpiresAt);
+        return { Renewed: true, CancelRequested: row.CancelRequestedAt != null };
+    }
+    /**
+     * Batch-boundary fence: a cheap SELECT of the ownership columns. The sync
+     * loop calls this BEFORE each batch's writes; if we no longer own the row,
+     * the caller must throw {@link RunOwnershipLostError} and stop writing.
+     * Deliberately a plain read (no lease extension) — renewal belongs to the
+     * heartbeat timer, and a boundary check must stay cheap enough to run
+     * every batch.
+     */
+    async CheckBoundary() {
+        const d = this.provider.Dialect;
+        const schema = d.QuoteIdentifier(this.provider.MJCoreSchemaName);
+        const table = d.QuoteIdentifier('CompanyIntegrationRun');
+        const placeholder = this.provider.BuildParameterPlaceholder(0);
+        const rows = await this.provider.ExecuteSQL(`SELECT ${d.QuoteIdentifier('OwnerToken')} AS OwnerToken, ` +
+            `${d.QuoteIdentifier('FenceToken')} AS FenceToken, ` +
+            `${d.QuoteIdentifier('CancelRequestedAt')} AS CancelRequestedAt ` +
+            `FROM ${schema}.${table} WHERE ${d.QuoteIdentifier('ID')} = ${placeholder}`, [this.runID], { isMutation: false, description: 'CompanyIntegrationRun ownership boundary check' }, this.contextUser);
+        const row = rows?.[0];
+        if (!row) {
+            return { Owned: false, CancelRequested: false }; // row gone ⇒ definitely not ours
+        }
+        const owned = row.OwnerToken != null
+            && row.OwnerToken.toLowerCase() === this.ownerToken.toLowerCase()
+            && Number(row.FenceToken) === this.fenceToken;
+        return { Owned: owned, CancelRequested: row.CancelRequestedAt != null };
+    }
+    /**
+     * Terminal release: set the final status, clear OwnerToken/LeaseExpiresAt,
+     * stamp EndedAt if unset. Token- AND fence-checked — a stale holder (lease
+     * reclaimed) releasing late is a harmless no-op (returns false).
+     *
+     * The fence is sent for the same reason Renew() sends it: the owner token proves
+     * only that *some* context using this token owns the row, not that THIS context
+     * still does. Each instance mints its own token and claims once, so the two are
+     * equivalent today — but Claim() is re-callable and overwrites the fence, so
+     * passing it keeps the guarantee in the procedure rather than in call-site
+     * discipline.
+     */
+    async Release(finalStatus) {
+        this.StopHeartbeat();
+        const rows = await this.provider.ExecuteSQL(this.buildSprocCall('spReleaseCompanyIntegrationRun', ['RunID', 'OwnerToken', 'FinalStatus', 'FenceToken']), [this.runID, this.ownerToken, finalStatus, this.fenceToken], { isMutation: true, description: 'spReleaseCompanyIntegrationRun' }, this.contextUser);
+        return (rows?.length ?? 0) > 0;
+    }
+    /**
+     * Start the background renewal timer at interval ≈ lease/3 (so a renewal
+     * must fail ~3 consecutive times before the lease can lapse). The timer
+     * body is best-effort and never throws; renewal failures surface through
+     * opts.onLost exactly once. Idempotent — restarting replaces the timer.
+     */
+    StartHeartbeat(opts) {
+        this.StopHeartbeat();
+        const intervalMs = Math.max(5_000, Math.floor((this.leaseMinutes * 60_000) / 3));
+        this.heartbeatTimer = setInterval(() => {
+            void this.heartbeatOnce(opts);
+        }, intervalMs);
+        // Never keep the process alive just to renew a lease.
+        this.heartbeatTimer.unref?.();
+    }
+    /** Stop the renewal timer (idempotent). */
+    StopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = null;
+        }
+    }
+    /**
+     * Sync the entity's in-memory ownership columns to the service's last-known
+     * authoritative values before ANY full-row `run.Save()`. The generated
+     * spUpdate writes every column from the entity's in-memory state, so a
+     * terminal Save without this sync would clobber the DB's live
+     * FenceToken/OwnerToken/LeaseExpiresAt with the stale values the entity was
+     * loaded with (typically pre-claim). Call this immediately before each
+     * Save on the run row; Release() then clears ownership atomically.
+     */
+    SyncEntityOwnershipFields(run) {
+        run.OwnerToken = this.ownerToken;
+        run.LeaseExpiresAt = this.lastKnownLeaseExpiresAt;
+        run.HeartbeatAt = new Date();
+        if (this.fenceToken != null) {
+            run.FenceToken = this.fenceToken;
+        }
+    }
+    /**
+     * Persist a progress snapshot to the run row's ProgressJSON (PR 1 item 4 —
+     * progress lives in the database; readers query the row). Ownership-guarded
+     * (WHERE OwnerToken AND FenceToken) so a reclaimed run can never overwrite the
+     * new owner's progress. Throttled internally (default once per 5s) so progress
+     * never becomes its own hot path; best-effort — a progress write failure must
+     * never fault the sync.
+     */
+    async WriteProgress(progressJSON, minIntervalMs = 5_000) {
+        if (this.fenceToken == null)
+            return;
+        const now = Date.now();
+        if (now - this.lastProgressWriteMs < minIntervalMs)
+            return;
+        this.lastProgressWriteMs = now;
+        try {
+            const d = this.provider.Dialect;
+            const schema = d.QuoteIdentifier(this.provider.MJCoreSchemaName);
+            const table = d.QuoteIdentifier('CompanyIntegrationRun');
+            const ph = (i) => this.provider.BuildParameterPlaceholder(i);
+            await this.provider.ExecuteSQL(`UPDATE ${schema}.${table} SET ${d.QuoteIdentifier('ProgressJSON')} = ${ph(0)}, ` +
+                `${d.QuoteIdentifier('HeartbeatAt')} = ${d.CurrentTimestampUTC()} ` +
+                `WHERE ${d.QuoteIdentifier('ID')} = ${ph(1)} AND ${d.QuoteIdentifier('OwnerToken')} = ${ph(2)} ` +
+                `AND ${d.QuoteIdentifier('FenceToken')} = ${ph(3)}`, [progressJSON, this.runID, this.ownerToken, this.fenceToken], { isMutation: true, description: 'CompanyIntegrationRun progress write (ownership-guarded)' }, this.contextUser);
+        }
+        catch (error) {
+            LogErrorEx({
+                message: `[RunOwnership] Progress write failed for run ${this.runID.substring(0, 8)} (non-fatal)`,
+                category: 'IntegrationEngine',
+                error: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /** One heartbeat tick: renew, then fan out lost/cancel notifications once each. */
+    async heartbeatOnce(opts) {
+        if (this.renewInFlight) {
+            return; // never stack renewals behind a slow DB
+        }
+        this.renewInFlight = true;
+        try {
+            const progress = opts?.progressSupplier ? opts.progressSupplier() : null;
+            const result = await this.Renew(progress);
+            if (!result.Renewed) {
+                if (!this.lostNotified) {
+                    this.lostNotified = true;
+                    LogStatusEx({
+                        message: `[RunOwnership] Lease for run ${this.runID.substring(0, 8)} NOT renewed ` +
+                            `(token/fence mismatch — reclaimed by another holder). Aborting locally.`,
+                        category: 'IntegrationEngine',
+                    });
+                    opts?.onLost?.();
+                }
+                this.StopHeartbeat(); // no point renewing a lost lease
+                return;
+            }
+            if (result.CancelRequested && !this.cancelNotified) {
+                this.cancelNotified = true;
+                opts?.onCancelRequested?.();
+            }
+        }
+        catch (error) {
+            // Best-effort: a transient renewal failure must never fault the sync.
+            // The lease covers ~3 intervals, so one failed tick is survivable.
+            LogErrorEx({
+                message: `[RunOwnership] Lease renewal failed for run ${this.runID.substring(0, 8)} (non-fatal)`,
+                category: 'IntegrationEngine',
+                error: error instanceof Error ? error : undefined,
+            });
+        }
+        finally {
+            this.renewInFlight = false;
+        }
+    }
+    /**
+     * Dialect-portable sproc call, preserving the MJ positional-parameter-array
+     * convention (same helper shape as ScheduledJobEngine.buildLockSprocCall).
+     */
+    buildSprocCall(sprocName, paramNames) {
+        const placeholders = this.provider.PlatformKey === 'postgresql'
+            ? paramNames.map((_name, i) => `$${i + 1}`)
+            : paramNames.map((name, i) => `@${name}=@p${i}`);
+        return this.provider.Dialect.ProcedureCallSyntax(this.provider.MJCoreSchemaName, sprocName, placeholders);
+    }
+}
+//# sourceMappingURL=RunOwnershipService.js.map

package/dist/RunOwnershipService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunOwnershipService.js","sourceRoot":"","sources":["../src/RunOwnershipService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAmB/D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE5C,YAAY,KAAa,EAAE,MAAc;QACrC,KAAK,CAAC,sCAAsC,KAAK,UAAU,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAuCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,mBAAmB;IAC5B,mEAAmE;aAC5C,0BAAqB,GAAG,EAAE,AAAL,CAAM;IAelD;;;;;;;OAOG;IACH,YAAY,QAA8B,EAAE,KAAa,EAAE,YAAqB,EAAE,WAAsB;QAfhG,eAAU,GAAkB,IAAI,CAAC;QACjC,4BAAuB,GAAgB,IAAI,CAAC;QAC5C,mBAAc,GAA0C,IAAI,CAAC;QAC7D,iBAAY,GAAG,KAAK,CAAC;QACrB,mBAAc,GAAG,KAAK,CAAC;QACvB,kBAAa,GAAG,KAAK,CAAC;QA6LtB,wBAAmB,GAAG,CAAC,CAAC;QAlL5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,yEAAyE;QACzE,qDAAqD;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,qBAAqB,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,yDAAyD;IACzD,IAAW,KAAK;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,wDAAwD;IACxD,IAAW,UAAU;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,IAAW,UAAU;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,qEAAqE;IACrE,IAAW,cAAc;QACrB,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACxC,CAAC;IAED,wDAAwD;IACxD,IAAW,YAAY;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,KAAK;QACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CACvC,IAAI,CAAC,cAAc,CAAC,8BAA8B,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,EAC5F,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,EAChD,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE,EACjE,IAAI,CAAC,WAAW,CACnB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,kCAAkC;QACpD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,uBAAuB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,KAAK,CAAC,YAA4B;QAC3C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CACvC,IAAI,CAAC,cAAc,CAAC,mCAAmC,EACnD,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,EAC1E,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,IAAI,IAAI,CAAC,EACvF,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,mCAAmC,EAAE,EACtE,IAAI,CAAC,WAAW,CACnB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,uBAAuB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,aAAa;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CACvC,UAAU,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,kBAAkB;YAC3D,GAAG,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,kBAAkB;YACpD,GAAG,CAAC,CAAC,eAAe,CAAC,mBAAmB,CAAC,wBAAwB;YACjE,QAAQ,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,EAC3E,CAAC,IAAI,CAAC,KAAK,CAAC,EACZ,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,gDAAgD,EAAE,EACpF,IAAI,CAAC,WAAW,CACnB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,iCAAiC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI;eAC7B,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;eAC9D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,OAAO,CAAC,WAA8B;QAC/C,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CACvC,IAAI,CAAC,cAAc,CAAC,gCAAgC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,EAC3G,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,EAC3D,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,gCAAgC,EAAE,EACnE,IAAI,CAAC,WAAW,CACnB,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACI,cAAc,CAAC,IAAuB;QACzC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,sDAAsD;QACtD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;IAClC,CAAC;IAED,2CAA2C;IACpC,aAAa;QAChB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC/B,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,yBAAyB,CAAC,GAAkC;QAC/D,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACjC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC;QAClD,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACrC,CAAC;IACL,CAAC;IAID;;;;;;;OAOG;IACI,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,aAAa,GAAG,KAAK;QAClE,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI;YAAE,OAAO;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,mBAAmB,GAAG,aAAa;YAAE,OAAO;QAC3D,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAC1B,UAAU,MAAM,IAAI,KAAK,QAAQ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;gBACjF,GAAG,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,GAAG;gBACnE,SAAS,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG;gBAChG,OAAO,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EACnD,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAC5D,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,0DAA0D,EAAE,EAC7F,IAAI,CAAC,WAAW,CACnB,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC;gBACP,OAAO,EAAE,gDAAgD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc;gBACjG,QAAQ,EAAE,mBAAmB;gBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACpD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,aAAa,CAAC,IAAuB;QAC/C,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,CAAC,wCAAwC;QACpD,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBACzB,WAAW,CAAC;wBACR,OAAO,EAAE,gCAAgC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe;4BAC9E,yEAAyE;wBAC7E,QAAQ,EAAE,mBAAmB;qBAChC,CAAC,CAAC;oBACH,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,iCAAiC;gBACvD,OAAO;YACX,CAAC;YACD,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC;YAChC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,sEAAsE;YACtE,mEAAmE;YACnE,UAAU,CAAC;gBACP,OAAO,EAAE,+CAA+C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc;gBAChG,QAAQ,EAAE,mBAAmB;gBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACpD,CAAC,CAAC;QACP,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC/B,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,SAAiB,EAAE,UAAoB;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,YAAY;YAC3D,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9G,CAAC"}

package/dist/auth-helpers/OAuth2TokenManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2TokenManager.d.ts","sourceRoot":"","sources":["../../src/auth-helpers/OAuth2TokenManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,UAAU,GAAG,oBAAoB,CAAC;AAElF,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IAC/B,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IACxB,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAgBD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC3B,+DAA+D;IACxD,eAAe,SAAU;IAEhC,OAAO,CAAC,MAAM,CAA4B;IAC1C,0EAA0E;IAC1E,OAAO,CAAC,gBAAgB,CAAqB;IAE7C;;;;;OAKG;IACU,cAAc,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAclG,iFAAiF;IAC1E,KAAK,IAAI,IAAI;IAKpB,mEAAmE;YACrD,YAAY;IA4C1B,qFAAqF;IACrF,OAAO,CAAC,cAAc;CAmCzB"}
+{"version":3,"file":"OAuth2TokenManager.d.ts","sourceRoot":"","sources":["../../src/auth-helpers/OAuth2TokenManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,qDAAqD;AACrD,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,UAAU,GAAG,oBAAoB,CAAC;AAElF,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IAC/B,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IACxB,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAgBD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC3B,+DAA+D;IACxD,eAAe,SAAU;IAEhC,OAAO,CAAC,MAAM,CAA4B;IAC1C,0EAA0E;IAC1E,OAAO,CAAC,gBAAgB,CAAqB;IAE7C;;;;;OAKG;IACU,cAAc,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAclG,iFAAiF;IAC1E,KAAK,IAAI,IAAI;IAKpB,mEAAmE;YACrD,YAAY;IAiD1B,qFAAqF;IACrF,OAAO,CAAC,cAAc;CAmCzB"}

package/dist/auth-helpers/OAuth2TokenManager.js

@@ -23,6 +23,7 @@
  * — there is no signing/HMAC here. It exists so connectors share ONE correct token
  * round-trip rather than each re-implementing `grant_type` form bodies.
  */
+import { DescribeTokenEndpointFailure } from '@memberjunction/global';
 const DEFAULT_TIMEOUT_MS = 30_000;
 const DEFAULT_EXPIRES_IN_S = 3_600;
 /**
@@ -92,8 +93,13 @@ export class OAuth2TokenManager {
             }
         }
         if (!response.ok || !parsed.access_token) {
-            const detail = parsed.error_description ?? parsed.error ?? text.slice(0, 300);
-            throw new Error(`OAuth2 ${grant} token request to ${req.TokenURL} failed: HTTP ${response.status}${detail ? ` — ${detail}` : ''}`);
+            // SECURITY: never fall back to the raw response body. This branch is also
+            // reached on an HTTP 200 whose token sits somewhere `parsed` did not look
+            // (a vendor envelope, a nested `data` object) — in which case the body IS
+            // the token. `DescribeTokenEndpointFailure` surfaces only the RFC 6749 §5.2
+            // error fields, which by spec describe the failure and carry no credentials.
+            throw new Error(`OAuth2 ${grant} token request to ${req.TokenURL} failed: ` +
+                `HTTP ${response.status}${DescribeTokenEndpointFailure(text)}`);
         }
         const expiresInS = typeof parsed.expires_in === 'number' ? parsed.expires_in : DEFAULT_EXPIRES_IN_S;
         return {

package/dist/auth-helpers/OAuth2TokenManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2TokenManager.js","sourceRoot":"","sources":["../../src/auth-helpers/OAuth2TokenManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoEH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAA/B;QACI,+DAA+D;QACxD,oBAAe,GAAG,MAAM,CAAC;QAExB,WAAM,GAAuB,IAAI,CAAC;IA+G9C,CAAC;IA3GG;;;;;OAKG;IACI,KAAK,CAAC,cAAc,CAAC,GAAuB,EAAE,KAAsB;QACvE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,MAAM,YAAY,GAAuB;YACrC,GAAG,GAAG;YACN,YAAY,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,YAAY;SAC1D,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,CAAC;QACxE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,iFAAiF;IAC1E,KAAK;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,YAAY,CAAC,GAAuB,EAAE,KAAsB;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,mCAAmC;YACnD,QAAQ,EAAE,kBAAkB;SAC/B,CAAC;QACF,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC;SACnE,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,GAAwB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,EAAE,CAAC;YAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9E,MAAM,IAAI,KAAK,CACX,UAAU,KAAK,qBAAqB,GAAG,CAAC,QAAQ,iBAAiB,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpH,CAAC;QACN,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACpG,OAAO;YACH,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,YAAY;YACtD,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;YACxC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK;YAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC;IACN,CAAC;IAED,qFAAqF;IAC7E,cAAc,CAAC,GAAuB,EAAE,KAAsB;QAClE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,yFAAyF;QACzF,6EAA6E;QAC7E,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC7C,IAAI,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACjC,+EAA+E;YAC/E,wFAAwF;YACxF,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}
+{"version":3,"file":"OAuth2TokenManager.js","sourceRoot":"","sources":["../../src/auth-helpers/OAuth2TokenManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAoEtE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAA/B;QACI,+DAA+D;QACxD,oBAAe,GAAG,MAAM,CAAC;QAExB,WAAM,GAAuB,IAAI,CAAC;IAoH9C,CAAC;IAhHG;;;;;OAKG;IACI,KAAK,CAAC,cAAc,CAAC,GAAuB,EAAE,KAAsB;QACvE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,MAAM,YAAY,GAAuB;YACrC,GAAG,GAAG;YACN,YAAY,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,YAAY;SAC1D,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,CAAC;QACxE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,iFAAiF;IAC1E,KAAK;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,YAAY,CAAC,GAAuB,EAAE,KAAsB;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA2B;YACpC,cAAc,EAAE,mCAAmC;YACnD,QAAQ,EAAE,kBAAkB;SAC/B,CAAC;QACF,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,KAAK,EAAE,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC;SACnE,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,GAAwB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,EAAE,CAAC;YAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,4EAA4E;YAC5E,6EAA6E;YAC7E,MAAM,IAAI,KAAK,CACX,UAAU,KAAK,qBAAqB,GAAG,CAAC,QAAQ,WAAW;gBAC3D,QAAQ,QAAQ,CAAC,MAAM,GAAG,4BAA4B,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACN,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACpG,OAAO;YACH,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,YAAY;YACtD,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ;YACxC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK;YAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC;IACN,CAAC;IAED,qFAAqF;IAC7E,cAAc,CAAC,GAAuB,EAAE,KAAsB;QAClE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,yFAAyF;QACzF,6EAA6E;QAC7E,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC7C,IAAI,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACjC,+EAA+E;YAC/E,wFAAwF;YACxF,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export type { IIntegrationSourceType, ICompanyIntegrationEntityMap, ICompanyInte
 export type { SyncDirection, SyncTriggerType, WatermarkType, ConflictResolution, DeleteBehavior, RecordChangeType, IntegrationRunStatus, ExternalRecord, MappedRecord, SyncResult, SyncRecordError, DefaultFieldMapping, SyncErrorCode, ErrorSeverity, SyncProgress, SyncProgressSnapshot, OnProgressCallback, SyncNotificationEvent, SyncNotificationSeverity, SyncNotification, OnNotificationCallback, IntegrationSyncOptions, EntityMapSyncResult, SourceSchemaInfo, SourceObjectInfo, SourceFieldInfo, SourceRelationshipInfo, IntrospectSchemaOptions, CRUDContext, CreateRecordContext, UpdateRecordContext, UpsertRecordContext, DeleteRecordContext, GetRecordContext, CRUDResult, SearchContext, SearchResult, ListContext, ListResult, SchemaPromotionResult, PostSyncSchemaPromotionCallback, CustomKeyStat, } from './types.js';
 export { IsRetryableError, ClassifyError } from './types.js';
 export type { TransformType, TransformOnError, TransformStep, TransformConfig, DirectConfig, RegexConfig, SplitConfig, CombineConfig, LookupConfig, FormatConfig, CoerceConfig, SubstringConfig, CustomConfig, } from './transforms.js';
-export { BaseIntegrationConnector, WithTimeout, DEFAULT_OPERATION_TIMEOUTS } from './BaseIntegrationConnector.js';
+export { BaseIntegrationConnector, WithTimeout, OperationTimeoutError, DEFAULT_OPERATION_TIMEOUTS } from './BaseIntegrationConnector.js';
 export type { ConnectionTestResult, ExternalObjectSchema, ExternalFieldSchema, FetchContext, FetchBatchResult, OperationTimeouts, DefaultIntegrationConfig, DefaultObjectConfig, RateLimitPolicy, } from './BaseIntegrationConnector.js';
 export { BaseRESTIntegrationConnector } from './BaseRESTIntegrationConnector.js';
 export type { RESTAuthContext, RESTResponse, PaginationState, PaginationType } from './BaseRESTIntegrationConnector.js';
@@ -18,6 +18,8 @@ export type { IntegrationObjectInfo, IntegrationFieldInfo, ActionGeneratorConfig
 export { IntegrationActionGenerator } from './IntegrationActionGenerator.js';
 export type { IntegrationActionVerb, GenerateIntegrationActionResult } from './IntegrationActionGenerator.js';
 export { IntegrationEngine } from './IntegrationEngine.js';
+export { RunOwnershipService, RunOwnershipLostError } from './RunOwnershipService.js';
+export type { RenewResult, BoundaryCheckResult, HeartbeatOptions, TerminalRunStatus } from './RunOwnershipService.js';
 export { IntegrationSchemaSync } from './IntegrationSchemaSync.js';
 export type { PersistSchemaOptions, PersistSchemaResult } from './IntegrationSchemaSync.js';
 export { computeContentHash, CONTENT_HASH_COLUMN } from './ContentHash.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AAG7J,YAAY,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,+BAA+B,EAC/B,aAAa,GACd,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG7D,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAClH,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGxH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAGhJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAI9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAG5F,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAClJ,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClL,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACtF,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACjJ,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC5L,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC/G,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,YAAY,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AACnI,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACtF,YAAY,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnH,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AAG7J,YAAY,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,+BAA+B,EAC/B,aAAa,GACd,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG7D,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACzI,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGxH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAGhJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAI9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAItF,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAG5F,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAClJ,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClL,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACtF,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACjJ,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC5L,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC/G,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,YAAY,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AACnI,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACtF,YAAY,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnH,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
 // Error classification helpers
 export { IsRetryableError, ClassifyError } from './types.js';
 // Connector
-export { BaseIntegrationConnector, WithTimeout, DEFAULT_OPERATION_TIMEOUTS } from './BaseIntegrationConnector.js';
+export { BaseIntegrationConnector, WithTimeout, OperationTimeoutError, DEFAULT_OPERATION_TIMEOUTS } from './BaseIntegrationConnector.js';
 // REST Connector Base
 export { BaseRESTIntegrationConnector } from './BaseRESTIntegrationConnector.js';
 // Factory
@@ -21,6 +21,7 @@ export { IntegrationActionGenerator } from './IntegrationActionGenerator.js';
 // Integration Engine (server-side, wraps IntegrationEngineBase via composition)
 // NOTE: For IntegrationEngineBase (client-safe metadata), import from @memberjunction/integration-engine-base
 export { IntegrationEngine } from './IntegrationEngine.js';
+export { RunOwnershipService, RunOwnershipLostError } from './RunOwnershipService.js';
 // Schema persistence — upserts dynamically discovered objects/fields to IntegrationObject/Field tables
 export { IntegrationSchemaSync } from './IntegrationSchemaSync.js';
 // ── Restored module exports dropped by the origin/next index.ts merge (union) ──

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiDA,+BAA+B;AAC/B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmB7D,YAAY;AACZ,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAalH,sBAAsB;AACtB,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAGjF,UAAU;AACV,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,UAAU;AACV,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,WAAW;AACX,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,QAAQ;AACR,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGnE,4BAA4B;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,qHAAqH;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAG7E,gFAAgF;AAChF,8GAA8G;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,uGAAuG;AACvG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,kFAAkF;AAClF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAElJ,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClL,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGtF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE/G,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AAEjG,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAItF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE,qEAAqE;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiDA,+BAA+B;AAC/B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmB7D,YAAY;AACZ,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAazI,sBAAsB;AACtB,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAGjF,UAAU;AACV,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,UAAU;AACV,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,WAAW;AACX,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,QAAQ;AACR,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGnE,4BAA4B;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,qHAAqH;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAG7E,gFAAgF;AAChF,8GAA8G;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAMtF,uGAAuG;AACvG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,kFAAkF;AAClF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAElJ,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClL,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGtF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE/G,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AAEjG,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAItF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE,qEAAqE;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/types.d.ts

@@ -276,6 +276,14 @@ export interface IntegrationSyncOptions {
      * Pull = external → MJ only. Push = MJ → external only. Bidirectional = both.
      */
     SyncDirection?: 'Pull' | 'Push' | 'Bidirectional';
+    /**
+     * Expected maximum runtime for this sync, in minutes. Sizes the run's OWNERSHIP LEASE
+     * (durable-run claim/renew): the lease is max(engine default, this value), so a run with a
+     * known long single batch is not falsely reclaimed as dead by the stale sweep while a batch
+     * is still in flight. The lease is renewed on a timer regardless; this only raises the
+     * worst-case window a crashed run stays unclaimed. Omit for the engine default.
+     */
+    MaxRuntimeMinutes?: number;
 }
 /** Top-level container returned by a connector's IntrospectSchema(). */
 export interface SourceSchemaInfo {