@open-mercato/core 0.4.6-develop-a88276bc52 → 0.4.6-develop-806a2ed6b9

package/dist/modules/data_sync/api/mappings/[id]/route.js

@@ -0,0 +1,137 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { SyncMapping } from "../../../data/entities.js";
+const idParamsSchema = z.object({ id: z.string().uuid() });
+const updateMappingSchema = z.object({
+  mapping: z.record(z.string(), z.unknown())
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["data_sync.view"] },
+  PUT: { requireAuth: true, requireFeatures: ["data_sync.configure"] },
+  DELETE: { requireAuth: true, requireFeatures: ["data_sync.configure"] }
+};
+const openApi = {
+  tags: ["DataSync"],
+  summary: "Get, update, or delete a field mapping"
+};
+async function resolveParams(ctx) {
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  return idParamsSchema.safeParse(rawParams);
+}
+async function GET(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const parsedParams = await resolveParams(ctx);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid mapping id" }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const mapping = await findOneWithDecryption(
+    em,
+    SyncMapping,
+    {
+      id: parsedParams.data.id,
+      organizationId: auth.orgId,
+      tenantId: auth.tenantId
+    },
+    void 0,
+    scope
+  );
+  if (!mapping) {
+    return NextResponse.json({ error: "Mapping not found" }, { status: 404 });
+  }
+  return NextResponse.json({
+    id: mapping.id,
+    integrationId: mapping.integrationId,
+    entityType: mapping.entityType,
+    mapping: mapping.mapping,
+    createdAt: mapping.createdAt.toISOString(),
+    updatedAt: mapping.updatedAt.toISOString()
+  });
+}
+async function PUT(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const parsedParams = await resolveParams(ctx);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid mapping id" }, { status: 400 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsedBody = updateMappingSchema.safeParse(payload);
+  if (!parsedBody.success) {
+    return NextResponse.json({ error: "Invalid payload", details: parsedBody.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const mapping = await findOneWithDecryption(
+    em,
+    SyncMapping,
+    {
+      id: parsedParams.data.id,
+      organizationId: auth.orgId,
+      tenantId: auth.tenantId
+    },
+    void 0,
+    scope
+  );
+  if (!mapping) {
+    return NextResponse.json({ error: "Mapping not found" }, { status: 404 });
+  }
+  mapping.mapping = parsedBody.data.mapping;
+  await em.flush();
+  return NextResponse.json({
+    id: mapping.id,
+    integrationId: mapping.integrationId,
+    entityType: mapping.entityType,
+    mapping: mapping.mapping,
+    updatedAt: mapping.updatedAt.toISOString()
+  });
+}
+async function DELETE(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const parsedParams = await resolveParams(ctx);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid mapping id" }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const mapping = await findOneWithDecryption(
+    em,
+    SyncMapping,
+    {
+      id: parsedParams.data.id,
+      organizationId: auth.orgId,
+      tenantId: auth.tenantId
+    },
+    void 0,
+    scope
+  );
+  if (!mapping) {
+    return NextResponse.json({ error: "Mapping not found" }, { status: 404 });
+  }
+  em.remove(mapping);
+  await em.flush();
+  return NextResponse.json({ deleted: true });
+}
+export {
+  DELETE,
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/data_sync/api/mappings/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/data_sync/api/mappings/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { SyncMapping } from '../../../data/entities'\n\nconst idParamsSchema = z.object({ id: z.string().uuid() })\n\nconst updateMappingSchema = z.object({\n  mapping: z.record(z.string(), z.unknown()),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  DELETE: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Get, update, or delete a field mapping',\n}\n\nasync function resolveParams(ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n  return idParamsSchema.safeParse(rawParams)\n}\n\nexport async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parsedParams = await resolveParams(ctx)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid mapping id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const mapping = await findOneWithDecryption(\n    em,\n    SyncMapping,\n    {\n      id: parsedParams.data.id,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n    undefined,\n    scope,\n  )\n\n  if (!mapping) {\n    return NextResponse.json({ error: 'Mapping not found' }, { status: 404 })\n  }\n\n  return NextResponse.json({\n    id: mapping.id,\n    integrationId: mapping.integrationId,\n    entityType: mapping.entityType,\n    mapping: mapping.mapping,\n    createdAt: mapping.createdAt.toISOString(),\n    updatedAt: mapping.updatedAt.toISOString(),\n  })\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parsedParams = await resolveParams(ctx)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid mapping id' }, { status: 400 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsedBody = updateMappingSchema.safeParse(payload)\n  if (!parsedBody.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsedBody.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const mapping = await findOneWithDecryption(\n    em,\n    SyncMapping,\n    {\n      id: parsedParams.data.id,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n    undefined,\n    scope,\n  )\n\n  if (!mapping) {\n    return NextResponse.json({ error: 'Mapping not found' }, { status: 404 })\n  }\n\n  mapping.mapping = parsedBody.data.mapping\n  await em.flush()\n\n  return NextResponse.json({\n    id: mapping.id,\n    integrationId: mapping.integrationId,\n    entityType: mapping.entityType,\n    mapping: mapping.mapping,\n    updatedAt: mapping.updatedAt.toISOString(),\n  })\n}\n\nexport async function DELETE(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parsedParams = await resolveParams(ctx)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid mapping id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const mapping = await findOneWithDecryption(\n    em,\n    SyncMapping,\n    {\n      id: parsedParams.data.id,\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n    undefined,\n    scope,\n  )\n\n  if (!mapping) {\n    return NextResponse.json({ error: 'Mapping not found' }, { status: 404 })\n  }\n\n  em.remove(mapping)\n  await em.flush()\n\n  return NextResponse.json({ deleted: true })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAE5B,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEzD,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC3C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACxE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAe,cAAc,KAA8D;AACzF,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AACT,SAAO,eAAe,UAAU,SAAS;AAC3C;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,eAAe,MAAM,cAAc,GAAG;AAC5C,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,aAAa,KAAK;AAAA,MACtB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,eAAe,QAAQ;AAAA,IACvB,YAAY,QAAQ;AAAA,IACpB,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ,UAAU,YAAY;AAAA,IACzC,WAAW,QAAQ,UAAU,YAAY;AAAA,EAC3C,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,eAAe,MAAM,cAAc,GAAG;AAC5C,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,aAAa,oBAAoB,UAAU,OAAO;AACxD,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,WAAW,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7G;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,aAAa,KAAK;AAAA,MACtB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,UAAQ,UAAU,WAAW,KAAK;AAClC,QAAM,GAAG,MAAM;AAEf,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,eAAe,QAAQ;AAAA,IACvB,YAAY,QAAQ;AAAA,IACpB,SAAS,QAAQ;AAAA,IACjB,WAAW,QAAQ,UAAU,YAAY;AAAA,EAC3C,CAAC;AACH;AAEA,eAAsB,OAAO,KAAc,KAA8D;AACvG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,eAAe,MAAM,cAAc,GAAG;AAC5C,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,aAAa,KAAK;AAAA,MACtB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,KAAG,OAAO,OAAO;AACjB,QAAM,GAAG,MAAM;AAEf,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;",
+  "names": []
+}

package/dist/modules/data_sync/api/mappings/route.js

@@ -0,0 +1,132 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findAndCountWithDecryption, findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { SyncMapping } from "../../data/entities.js";
+const listMappingsQuerySchema = z.object({
+  integrationId: z.string().min(1).optional(),
+  entityType: z.string().min(1).optional(),
+  page: z.coerce.number().int().min(1).default(1),
+  pageSize: z.coerce.number().int().min(1).max(100).default(20)
+});
+const createMappingSchema = z.object({
+  integrationId: z.string().min(1),
+  entityType: z.string().min(1),
+  mapping: z.record(z.string(), z.unknown())
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["data_sync.view"] },
+  POST: { requireAuth: true, requireFeatures: ["data_sync.configure"] }
+};
+const openApi = {
+  tags: ["DataSync"],
+  summary: "List or create field mappings"
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const url = new URL(req.url);
+  const parsed = listMappingsQuerySchema.safeParse({
+    integrationId: url.searchParams.get("integrationId") ?? void 0,
+    entityType: url.searchParams.get("entityType") ?? void 0,
+    page: url.searchParams.get("page") ?? void 0,
+    pageSize: url.searchParams.get("pageSize") ?? void 0
+  });
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid query", details: parsed.error.flatten() }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const where = {
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId
+  };
+  if (parsed.data.integrationId) where.integrationId = parsed.data.integrationId;
+  if (parsed.data.entityType) where.entityType = parsed.data.entityType;
+  const [items, total] = await findAndCountWithDecryption(
+    em,
+    SyncMapping,
+    where,
+    {
+      orderBy: { createdAt: "DESC" },
+      limit: parsed.data.pageSize,
+      offset: (parsed.data.page - 1) * parsed.data.pageSize
+    },
+    scope
+  );
+  return NextResponse.json({
+    items: items.map((item) => ({
+      id: item.id,
+      integrationId: item.integrationId,
+      entityType: item.entityType,
+      mapping: item.mapping,
+      createdAt: item.createdAt.toISOString(),
+      updatedAt: item.updatedAt.toISOString()
+    })),
+    total,
+    page: parsed.data.page,
+    pageSize: parsed.data.pageSize,
+    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize))
+  });
+}
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsed = createMappingSchema.safeParse(payload);
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid payload", details: parsed.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const em = container.resolve("em");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const existing = await findOneWithDecryption(
+    em,
+    SyncMapping,
+    {
+      integrationId: parsed.data.integrationId,
+      entityType: parsed.data.entityType,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId
+    },
+    void 0,
+    scope
+  );
+  if (existing) {
+    existing.mapping = parsed.data.mapping;
+    await em.flush();
+    return NextResponse.json({
+      id: existing.id,
+      integrationId: existing.integrationId,
+      entityType: existing.entityType,
+      mapping: existing.mapping
+    });
+  }
+  const created = em.create(SyncMapping, {
+    integrationId: parsed.data.integrationId,
+    entityType: parsed.data.entityType,
+    mapping: parsed.data.mapping,
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId
+  });
+  await em.persistAndFlush(created);
+  return NextResponse.json({
+    id: created.id,
+    integrationId: created.integrationId,
+    entityType: created.entityType,
+    mapping: created.mapping
+  }, { status: 201 });
+}
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/data_sync/api/mappings/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/data_sync/api/mappings/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { SyncMapping } from '../../data/entities'\n\nconst listMappingsQuerySchema = z.object({\n  integrationId: z.string().min(1).optional(),\n  entityType: z.string().min(1).optional(),\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(20),\n})\n\nconst createMappingSchema = z.object({\n  integrationId: z.string().min(1),\n  entityType: z.string().min(1),\n  mapping: z.record(z.string(), z.unknown()),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.view'] },\n  POST: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'List or create field mappings',\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listMappingsQuerySchema.safeParse({\n    integrationId: url.searchParams.get('integrationId') ?? undefined,\n    entityType: url.searchParams.get('entityType') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const where: FilterQuery<SyncMapping> = {\n    organizationId: scope.organizationId,\n    tenantId: scope.tenantId,\n  }\n  if (parsed.data.integrationId) where.integrationId = parsed.data.integrationId\n  if (parsed.data.entityType) where.entityType = parsed.data.entityType\n\n  const [items, total] = await findAndCountWithDecryption(\n    em,\n    SyncMapping,\n    where,\n    {\n      orderBy: { createdAt: 'DESC' },\n      limit: parsed.data.pageSize,\n      offset: (parsed.data.page - 1) * parsed.data.pageSize,\n    },\n    scope,\n  )\n\n  return NextResponse.json({\n    items: items.map((item) => ({\n      id: item.id,\n      integrationId: item.integrationId,\n      entityType: item.entityType,\n      mapping: item.mapping,\n      createdAt: item.createdAt.toISOString(),\n      updatedAt: item.updatedAt.toISOString(),\n    })),\n    total,\n    page: parsed.data.page,\n    pageSize: parsed.data.pageSize,\n    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize)),\n  })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsed = createMappingSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const existing = await findOneWithDecryption(\n    em,\n    SyncMapping,\n    {\n      integrationId: parsed.data.integrationId,\n      entityType: parsed.data.entityType,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n    },\n    undefined,\n    scope,\n  )\n\n  if (existing) {\n    existing.mapping = parsed.data.mapping\n    await em.flush()\n    return NextResponse.json({\n      id: existing.id,\n      integrationId: existing.integrationId,\n      entityType: existing.entityType,\n      mapping: existing.mapping,\n    })\n  }\n\n  const created = em.create(SyncMapping, {\n    integrationId: parsed.data.integrationId,\n    entityType: parsed.data.entityType,\n    mapping: parsed.data.mapping,\n    organizationId: scope.organizationId,\n    tenantId: scope.tenantId,\n  })\n  await em.persistAndFlush(created)\n\n  return NextResponse.json({\n    id: created.id,\n    integrationId: created.integrationId,\n    entityType: created.entityType,\n    mapping: created.mapping,\n  }, { status: 201 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,4BAA4B,6BAA6B;AAClE,SAAS,mBAAmB;AAE5B,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACvC,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAC9D,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC/B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAC3C,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU;AAAA,IAC/C,eAAe,IAAI,aAAa,IAAI,eAAe,KAAK;AAAA,IACxD,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,QAAkC;AAAA,IACtC,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,EAClB;AACA,MAAI,OAAO,KAAK,cAAe,OAAM,gBAAgB,OAAO,KAAK;AACjE,MAAI,OAAO,KAAK,WAAY,OAAM,aAAa,OAAO,KAAK;AAE3D,QAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,OAAO,KAAK;AAAA,MACnB,SAAS,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK;AAAA,IAC/C;AAAA,IACA;AAAA,EACF;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,MAC1B,IAAI,KAAK;AAAA,MACT,eAAe,KAAK;AAAA,MACpB,YAAY,KAAK;AAAA,MACjB,SAAS,KAAK;AAAA,MACd,WAAW,KAAK,UAAU,YAAY;AAAA,MACtC,WAAW,KAAK,UAAU,YAAY;AAAA,IACxC,EAAE;AAAA,IACF;AAAA,IACA,MAAM,OAAO,KAAK;AAAA,IAClB,UAAU,OAAO,KAAK;AAAA,IACtB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,OAAO,KAAK,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,SAAS,oBAAoB,UAAU,OAAO;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,eAAe,OAAO,KAAK;AAAA,MAC3B,YAAY,OAAO,KAAK;AAAA,MACxB,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,UAAU;AACZ,aAAS,UAAU,OAAO,KAAK;AAC/B,UAAM,GAAG,MAAM;AACf,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI,SAAS;AAAA,MACb,eAAe,SAAS;AAAA,MACxB,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS;AAAA,IACpB,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,GAAG,OAAO,aAAa;AAAA,IACrC,eAAe,OAAO,KAAK;AAAA,IAC3B,YAAY,OAAO,KAAK;AAAA,IACxB,SAAS,OAAO,KAAK;AAAA,IACrB,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,QAAM,GAAG,gBAAgB,OAAO;AAEhC,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,eAAe,QAAQ;AAAA,IACvB,YAAY,QAAQ;AAAA,IACpB,SAAS,QAAQ;AAAA,EACnB,GAAG,EAAE,QAAQ,IAAI,CAAC;AACpB;",
+  "names": []
+}

package/dist/modules/data_sync/api/run.js

@@ -0,0 +1,87 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { runSyncSchema } from "../data/validators.js";
+import { getSyncQueue } from "../lib/queue.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["data_sync.run"] }
+};
+const openApi = {
+  tags: ["DataSync"],
+  summary: "Start a data sync run"
+};
+async function POST(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsed = runSyncSchema.safeParse(payload);
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid payload", details: parsed.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const syncRunService = container.resolve("dataSyncRunService");
+  const progressService = container.resolve("progressService");
+  const scope = {
+    organizationId: auth.orgId,
+    tenantId: auth.tenantId
+  };
+  const overlap = await syncRunService.findRunningOverlap(
+    parsed.data.integrationId,
+    parsed.data.entityType,
+    parsed.data.direction,
+    scope
+  );
+  if (overlap) {
+    return NextResponse.json({ error: "A sync run is already in progress for this integration and entity direction" }, { status: 409 });
+  }
+  const cursor = parsed.data.fullSync ? null : await syncRunService.resolveCursor(parsed.data.integrationId, parsed.data.entityType, parsed.data.direction, scope);
+  const progressJob = await progressService.createJob(
+    {
+      jobType: `data_sync:${parsed.data.direction}`,
+      name: `Data sync ${parsed.data.integrationId}`,
+      description: `${parsed.data.entityType} ${parsed.data.direction}`,
+      cancellable: true,
+      meta: {
+        integrationId: parsed.data.integrationId,
+        entityType: parsed.data.entityType,
+        direction: parsed.data.direction
+      }
+    },
+    {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub
+    }
+  );
+  const run = await syncRunService.createRun(
+    {
+      integrationId: parsed.data.integrationId,
+      entityType: parsed.data.entityType,
+      direction: parsed.data.direction,
+      cursor,
+      triggeredBy: parsed.data.triggeredBy ?? auth.sub,
+      progressJobId: progressJob.id
+    },
+    scope
+  );
+  const queueName = parsed.data.direction === "import" ? "data-sync-import" : "data-sync-export";
+  const queue = getSyncQueue(queueName);
+  await queue.enqueue({
+    runId: run.id,
+    batchSize: parsed.data.batchSize,
+    scope: {
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId,
+      userId: auth.sub
+    }
+  });
+  return NextResponse.json({ id: run.id, progressJobId: progressJob.id }, { status: 201 });
+}
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=run.js.map

package/dist/modules/data_sync/api/run.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/api/run.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport { runSyncSchema } from '../data/validators'\nimport { getSyncQueue } from '../lib/queue'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['data_sync.run'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Start a data sync run',\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsed = runSyncSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const syncRunService = container.resolve('dataSyncRunService') as SyncRunService\n  const progressService = container.resolve('progressService') as ProgressService\n\n  const scope = {\n    organizationId: auth.orgId as string,\n    tenantId: auth.tenantId,\n  }\n\n  const overlap = await syncRunService.findRunningOverlap(\n    parsed.data.integrationId,\n    parsed.data.entityType,\n    parsed.data.direction,\n    scope,\n  )\n  if (overlap) {\n    return NextResponse.json({ error: 'A sync run is already in progress for this integration and entity direction' }, { status: 409 })\n  }\n\n  const cursor = parsed.data.fullSync\n    ? null\n    : await syncRunService.resolveCursor(parsed.data.integrationId, parsed.data.entityType, parsed.data.direction, scope)\n\n  const progressJob = await progressService.createJob(\n    {\n      jobType: `data_sync:${parsed.data.direction}`,\n      name: `Data sync ${parsed.data.integrationId}`,\n      description: `${parsed.data.entityType} ${parsed.data.direction}`,\n      cancellable: true,\n      meta: {\n        integrationId: parsed.data.integrationId,\n        entityType: parsed.data.entityType,\n        direction: parsed.data.direction,\n      },\n    },\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n    },\n  )\n\n  const run = await syncRunService.createRun(\n    {\n      integrationId: parsed.data.integrationId,\n      entityType: parsed.data.entityType,\n      direction: parsed.data.direction,\n      cursor,\n      triggeredBy: parsed.data.triggeredBy ?? auth.sub,\n      progressJobId: progressJob.id,\n    },\n    scope,\n  )\n\n  const queueName = parsed.data.direction === 'import' ? 'data-sync-import' : 'data-sync-export'\n  const queue = getSyncQueue(queueName)\n  await queue.enqueue({\n    runId: run.id,\n    batchSize: parsed.data.batchSize,\n    scope: {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      userId: auth.sub,\n    },\n  })\n\n  return NextResponse.json({ id: run.id, progressJobId: progressJob.id }, { status: 201 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAGvC,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAEtB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAChE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,SAAS,cAAc,UAAU,OAAO;AAC9C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAiB,UAAU,QAAQ,oBAAoB;AAC7D,QAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAE3D,QAAM,QAAQ;AAAA,IACZ,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,eAAe;AAAA,IACnC,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ;AAAA,EACF;AACA,MAAI,SAAS;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,8EAA8E,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpI;AAEA,QAAM,SAAS,OAAO,KAAK,WACvB,OACA,MAAM,eAAe,cAAc,OAAO,KAAK,eAAe,OAAO,KAAK,YAAY,OAAO,KAAK,WAAW,KAAK;AAEtH,QAAM,cAAc,MAAM,gBAAgB;AAAA,IACxC;AAAA,MACE,SAAS,aAAa,OAAO,KAAK,SAAS;AAAA,MAC3C,MAAM,aAAa,OAAO,KAAK,aAAa;AAAA,MAC5C,aAAa,GAAG,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,SAAS;AAAA,MAC/D,aAAa;AAAA,MACb,MAAM;AAAA,QACJ,eAAe,OAAO,KAAK;AAAA,QAC3B,YAAY,OAAO,KAAK;AAAA,QACxB,WAAW,OAAO,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,eAAe;AAAA,IAC/B;AAAA,MACE,eAAe,OAAO,KAAK;AAAA,MAC3B,YAAY,OAAO,KAAK;AAAA,MACxB,WAAW,OAAO,KAAK;AAAA,MACvB;AAAA,MACA,aAAa,OAAO,KAAK,eAAe,KAAK;AAAA,MAC7C,eAAe,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW,qBAAqB;AAC5E,QAAM,QAAQ,aAAa,SAAS;AACpC,QAAM,MAAM,QAAQ;AAAA,IAClB,OAAO,IAAI;AAAA,IACX,WAAW,OAAO,KAAK;AAAA,IACvB,OAAO;AAAA,MACL,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AAED,SAAO,aAAa,KAAK,EAAE,IAAI,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzF;",
+  "names": []
+}

package/dist/modules/data_sync/api/runs/[id]/cancel.js

@@ -0,0 +1,49 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+const paramsSchema = z.object({ id: z.string().uuid() });
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["data_sync.run"] }
+};
+const openApi = {
+  tags: ["DataSync"],
+  summary: "Cancel a running sync"
+};
+async function POST(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsed = paramsSchema.safeParse(rawParams);
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid run id" }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const syncRunService = container.resolve("dataSyncRunService");
+  const progressService = container.resolve("progressService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const run = await syncRunService.getRun(parsed.data.id, scope);
+  if (!run) {
+    return NextResponse.json({ error: "Run not found" }, { status: 404 });
+  }
+  if (run.status !== "running" && run.status !== "pending") {
+    return NextResponse.json({ error: "Only pending or running runs can be cancelled" }, { status: 409 });
+  }
+  if (run.progressJobId) {
+    await progressService.cancelJob(run.progressJobId, {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub
+    });
+  }
+  await syncRunService.markStatus(run.id, "cancelled", scope);
+  return NextResponse.json({ ok: true });
+}
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=cancel.js.map

package/dist/modules/data_sync/api/runs/[id]/cancel.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/data_sync/api/runs/%5Bid%5D/cancel.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport type { SyncRunService } from '../../../lib/sync-run-service'\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['data_sync.run'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Cancel a running sync',\n}\n\nexport async function POST(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsed = paramsSchema.safeParse(rawParams)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid run id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const syncRunService = container.resolve('dataSyncRunService') as SyncRunService\n  const progressService = container.resolve('progressService') as ProgressService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const run = await syncRunService.getRun(parsed.data.id, scope)\n  if (!run) {\n    return NextResponse.json({ error: 'Run not found' }, { status: 404 })\n  }\n  if (run.status !== 'running' && run.status !== 'pending') {\n    return NextResponse.json({ error: 'Only pending or running runs can be cancelled' }, { status: 409 })\n  }\n\n  if (run.progressJobId) {\n    await progressService.cancelJob(run.progressJobId, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n    })\n  }\n\n  await syncRunService.markStatus(run.id, 'cancelled', scope)\n  return NextResponse.json({ ok: true })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAIvC,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEhD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAChE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc,KAA8D;AACrG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,SAAS,aAAa,UAAU,SAAS;AAC/C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAiB,UAAU,QAAQ,oBAAoB;AAC7D,QAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAC3D,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK,IAAI,KAAK;AAC7D,MAAI,CAAC,KAAK;AACR,WAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACA,MAAI,IAAI,WAAW,aAAa,IAAI,WAAW,WAAW;AACxD,WAAO,aAAa,KAAK,EAAE,OAAO,gDAAgD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtG;AAEA,MAAI,IAAI,eAAe;AACrB,UAAM,gBAAgB,UAAU,IAAI,eAAe;AAAA,MACjD,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAEA,QAAM,eAAe,WAAW,IAAI,IAAI,aAAa,KAAK;AAC1D,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;",
+  "names": []
+}

package/dist/modules/data_sync/api/runs/[id]/retry.js

@@ -0,0 +1,93 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { retrySyncSchema } from "../../../data/validators.js";
+import { getSyncQueue } from "../../../lib/queue.js";
+const paramsSchema = z.object({ id: z.string().uuid() });
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["data_sync.run"] }
+};
+const openApi = {
+  tags: ["DataSync"],
+  summary: "Retry a failed sync run"
+};
+async function POST(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = paramsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid run id" }, { status: 400 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsedBody = retrySyncSchema.safeParse(payload ?? {});
+  if (!parsedBody.success) {
+    return NextResponse.json({ error: "Invalid payload", details: parsedBody.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const syncRunService = container.resolve("dataSyncRunService");
+  const progressService = container.resolve("progressService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const previous = await syncRunService.getRun(parsedParams.data.id, scope);
+  if (!previous) {
+    return NextResponse.json({ error: "Run not found" }, { status: 404 });
+  }
+  if (previous.status !== "failed" && previous.status !== "cancelled") {
+    return NextResponse.json({ error: "Only failed or cancelled runs can be retried" }, { status: 409 });
+  }
+  const overlap = await syncRunService.findRunningOverlap(
+    previous.integrationId,
+    previous.entityType,
+    previous.direction,
+    scope
+  );
+  if (overlap) {
+    return NextResponse.json({ error: "A sync run is already in progress for this integration and entity direction" }, { status: 409 });
+  }
+  const cursor = parsedBody.data.fromBeginning ? null : previous.cursor ?? await syncRunService.resolveCursor(previous.integrationId, previous.entityType, previous.direction, scope);
+  const progressJob = await progressService.createJob(
+    {
+      jobType: `data_sync:${previous.direction}`,
+      name: `Retry data sync ${previous.integrationId}`,
+      description: `${previous.entityType} ${previous.direction}`,
+      cancellable: true
+    },
+    {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub
+    }
+  );
+  const run = await syncRunService.createRun(
+    {
+      integrationId: previous.integrationId,
+      entityType: previous.entityType,
+      direction: previous.direction,
+      cursor,
+      triggeredBy: auth.sub,
+      progressJobId: progressJob.id
+    },
+    scope
+  );
+  const queueName = run.direction === "import" ? "data-sync-import" : "data-sync-export";
+  const queue = getSyncQueue(queueName);
+  await queue.enqueue({
+    runId: run.id,
+    batchSize: 100,
+    scope: {
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId,
+      userId: auth.sub
+    }
+  });
+  return NextResponse.json({ id: run.id, progressJobId: progressJob.id }, { status: 201 });
+}
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=retry.js.map

package/dist/modules/data_sync/api/runs/[id]/retry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/data_sync/api/runs/%5Bid%5D/retry.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { ProgressService } from '../../../../progress/lib/progressService'\nimport type { SyncRunService } from '../../../lib/sync-run-service'\nimport { retrySyncSchema } from '../../../data/validators'\nimport { getSyncQueue } from '../../../lib/queue'\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['data_sync.run'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Retry a failed sync run',\n}\n\nexport async function POST(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid run id' }, { status: 400 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsedBody = retrySyncSchema.safeParse(payload ?? {})\n  if (!parsedBody.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsedBody.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const syncRunService = container.resolve('dataSyncRunService') as SyncRunService\n  const progressService = container.resolve('progressService') as ProgressService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const previous = await syncRunService.getRun(parsedParams.data.id, scope)\n  if (!previous) {\n    return NextResponse.json({ error: 'Run not found' }, { status: 404 })\n  }\n  if (previous.status !== 'failed' && previous.status !== 'cancelled') {\n    return NextResponse.json({ error: 'Only failed or cancelled runs can be retried' }, { status: 409 })\n  }\n\n  const overlap = await syncRunService.findRunningOverlap(\n    previous.integrationId,\n    previous.entityType,\n    previous.direction,\n    scope,\n  )\n  if (overlap) {\n    return NextResponse.json({ error: 'A sync run is already in progress for this integration and entity direction' }, { status: 409 })\n  }\n\n  const cursor = parsedBody.data.fromBeginning\n    ? null\n    : previous.cursor ?? await syncRunService.resolveCursor(previous.integrationId, previous.entityType, previous.direction, scope)\n\n  const progressJob = await progressService.createJob(\n    {\n      jobType: `data_sync:${previous.direction}`,\n      name: `Retry data sync ${previous.integrationId}`,\n      description: `${previous.entityType} ${previous.direction}`,\n      cancellable: true,\n    },\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub,\n    },\n  )\n\n  const run = await syncRunService.createRun(\n    {\n      integrationId: previous.integrationId,\n      entityType: previous.entityType,\n      direction: previous.direction,\n      cursor,\n      triggeredBy: auth.sub,\n      progressJobId: progressJob.id,\n    },\n    scope,\n  )\n\n  const queueName = run.direction === 'import' ? 'data-sync-import' : 'data-sync-export'\n  const queue = getSyncQueue(queueName)\n  await queue.enqueue({\n    runId: run.id,\n    batchSize: 100,\n    scope: {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      userId: auth.sub,\n    },\n  })\n\n  return NextResponse.json({ id: run.id, progressJobId: progressJob.id }, { status: 201 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAGvC,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEhD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAChE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc,KAA8D;AACrG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,aAAa,gBAAgB,UAAU,WAAW,CAAC,CAAC;AAC1D,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,WAAW,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7G;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,iBAAiB,UAAU,QAAQ,oBAAoB;AAC7D,QAAM,kBAAkB,UAAU,QAAQ,iBAAiB;AAC3D,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,WAAW,MAAM,eAAe,OAAO,aAAa,KAAK,IAAI,KAAK;AACxE,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACA,MAAI,SAAS,WAAW,YAAY,SAAS,WAAW,aAAa;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,+CAA+C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,UAAU,MAAM,eAAe;AAAA,IACnC,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT;AAAA,EACF;AACA,MAAI,SAAS;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,8EAA8E,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpI;AAEA,QAAM,SAAS,WAAW,KAAK,gBAC3B,OACA,SAAS,UAAU,MAAM,eAAe,cAAc,SAAS,eAAe,SAAS,YAAY,SAAS,WAAW,KAAK;AAEhI,QAAM,cAAc,MAAM,gBAAgB;AAAA,IACxC;AAAA,MACE,SAAS,aAAa,SAAS,SAAS;AAAA,MACxC,MAAM,mBAAmB,SAAS,aAAa;AAAA,MAC/C,aAAa,GAAG,SAAS,UAAU,IAAI,SAAS,SAAS;AAAA,MACzD,aAAa;AAAA,IACf;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,eAAe;AAAA,IAC/B;AAAA,MACE,eAAe,SAAS;AAAA,MACxB,YAAY,SAAS;AAAA,MACrB,WAAW,SAAS;AAAA,MACpB;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,eAAe,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,cAAc,WAAW,qBAAqB;AACpE,QAAM,QAAQ,aAAa,SAAS;AACpC,QAAM,MAAM,QAAQ;AAAA,IAClB,OAAO,IAAI;AAAA,IACX,WAAW;AAAA,IACX,OAAO;AAAA,MACL,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,QAAQ,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AAED,SAAO,aAAa,KAAK,EAAE,IAAI,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AACzF;",
+  "names": []
+}