@open-mercato/core 0.4.2-canary-eb5f87d5f9 → 0.4.2-canary-802e036384

package/src/modules/business_rules/api/__tests__/sets.route.test.ts

@@ -58,7 +58,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 401 when not authenticated', async () => {
       mockGetAuthFromRequest.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets')
+      const request = new Request('http://localhost:5050/api/business_rules/sets')
       const response = await GET(request)
 
       expect(response.status).toBe(401)
@@ -85,7 +85,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
 
       mockEm.findAndCount.mockResolvedValue([mockSets, 1])
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?page=1&pageSize=50')
+      const request = new Request('http://localhost:5050/api/business_rules/sets?page=1&pageSize=50')
       const response = await GET(request)
 
       expect(response.status).toBe(200)
@@ -99,7 +99,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should filter by enabled status', async () => {
       mockEm.findAndCount.mockResolvedValue([[], 0])
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?enabled=true')
+      const request = new Request('http://localhost:5050/api/business_rules/sets?enabled=true')
       await GET(request)
 
       expect(mockEm.findAndCount).toHaveBeenCalledWith(
@@ -112,7 +112,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should search by set name', async () => {
       mockEm.findAndCount.mockResolvedValue([[], 0])
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?search=manufacturing')
+      const request = new Request('http://localhost:5050/api/business_rules/sets?search=manufacturing')
       await GET(request)
 
       expect(mockEm.findAndCount).toHaveBeenCalledWith(
@@ -125,7 +125,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should filter by setId', async () => {
       mockEm.findAndCount.mockResolvedValue([[], 0])
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?setId=SET-001')
+      const request = new Request('http://localhost:5050/api/business_rules/sets?setId=SET-001')
       await GET(request)
 
       expect(mockEm.findAndCount).toHaveBeenCalledWith(
@@ -140,7 +140,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 401 when not authenticated', async () => {
       mockGetAuthFromRequest.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'POST',
         body: JSON.stringify({ setId: 'SET-NEW', setName: 'New Set' }),
       })
@@ -162,7 +162,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
       mockEm.create.mockReturnValue({ id: '223e4567-e89b-12d3-a456-426614174002', ...newSet })
       mockEm.persistAndFlush.mockResolvedValue(undefined)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'POST',
         body: JSON.stringify(newSet),
       })
@@ -184,7 +184,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
       mockEm.create.mockReturnValue({ id: '223e4567-e89b-12d3-a456-426614174002', ...newSet })
       mockEm.persistAndFlush.mockResolvedValue(undefined)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'POST',
         body: JSON.stringify(newSet),
       })
@@ -206,7 +206,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
         setName: 'Test',
       }
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'POST',
         body: JSON.stringify(invalidSet),
       })
@@ -222,7 +222,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 401 when not authenticated', async () => {
       mockGetAuthFromRequest.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'PUT',
         body: JSON.stringify({ id: 'set-1', setName: 'Updated' }),
       })
@@ -247,7 +247,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
       mockEm.assign.mockImplementation((target: any, data: any) => Object.assign(target, data))
       mockEm.persistAndFlush.mockResolvedValue(undefined)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'PUT',
         body: JSON.stringify({
           id: '123e4567-e89b-12d3-a456-426614174001',
@@ -267,7 +267,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 404 if set not found', async () => {
       mockEm.findOne.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'PUT',
         body: JSON.stringify({
           id: '999e4567-e89b-12d3-a456-999999999999',
@@ -282,7 +282,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     })
 
     test('should return 400 if id is missing', async () => {
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'PUT',
         body: JSON.stringify({
           setName: 'Updated',
@@ -300,7 +300,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 401 when not authenticated', async () => {
       mockGetAuthFromRequest.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?id=set-1', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets?id=set-1', {
         method: 'DELETE',
       })
       const response = await DELETE(request)
@@ -322,7 +322,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
       mockEm.findOne.mockResolvedValue(existingSet)
       mockEm.persistAndFlush.mockResolvedValue(undefined)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?id=123e4567-e89b-12d3-a456-426614174001', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets?id=123e4567-e89b-12d3-a456-426614174001', {
         method: 'DELETE',
       })
       const response = await DELETE(request)
@@ -337,7 +337,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     test('should return 404 if set not found', async () => {
       mockEm.findOne.mockResolvedValue(null)
 
-      const request = new Request('http://localhost:3000/api/business_rules/sets?id=999e4567-e89b-12d3-a456-999999999999', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets?id=999e4567-e89b-12d3-a456-999999999999', {
         method: 'DELETE',
       })
       const response = await DELETE(request)
@@ -348,7 +348,7 @@ describe('Business Rules API - /api/business_rules/sets', () => {
     })
 
     test('should return 400 if id is missing', async () => {
-      const request = new Request('http://localhost:3000/api/business_rules/sets', {
+      const request = new Request('http://localhost:5050/api/business_rules/sets', {
         method: 'DELETE',
       })
       const response = await DELETE(request)

package/src/modules/entities/backend/entities/user/[entityId]/records/page.tsx

@@ -247,7 +247,7 @@ export default function RecordsPage({ params }: { params: { entityId?: string }
           <div className="space-y-2">
             <div>
               <div className="font-medium mb-1">1) Configure environment variables</div>
-              <pre className="bg-muted p-3 rounded text-xs overflow-auto"><code>{`export BASE_URL="http://localhost:3000/api"
+              <pre className="bg-muted p-3 rounded text-xs overflow-auto"><code>{`export BASE_URL="http://localhost:5050/api"
 export API_KEY="<paste API key secret here>"           # scoped with entities.features
 export ENTITY_ID="${entityId}"
 export RECORD_ID="<record uuid>"`}</code></pre>

package/src/modules/workflows/lib/__tests__/call-api.test.ts

@@ -175,7 +175,7 @@ describe('executeCallApi', () => {
 
   it('should build full URL from relative path', async () => {
     // Arrange
-    process.env.APP_URL = 'http://localhost:3000'
+    process.env.APP_URL = 'http://localhost:5050'
 
     mockFetch.mockResolvedValue({
       ok: true,
@@ -195,7 +195,7 @@ describe('executeCallApi', () => {
 
     // Assert
     const [url] = mockFetch.mock.calls[0] as any
-    expect(url).toBe('http://localhost:3000/api/sales/orders')
+    expect(url).toBe('http://localhost:5050/api/sales/orders')
   })
 
   it('should throw error for 401 Unauthorized (non-retriable)', async () => {

package/src/modules/workflows/lib/activity-executor.ts

@@ -708,7 +708,7 @@ export async function executeCallApi(
  * - Absolute URLs → validate domain matches APP_URL (SSRF prevention)
  */
 function buildApiUrl(endpoint: string): string {
-  const appUrl = process.env.APP_URL || 'http://localhost:3000'
+  const appUrl = process.env.APP_URL || 'http://localhost:5050'
 
   // Relative path - prepend APP_URL
   if (endpoint.startsWith('/')) {