@open-mercato/core 0.4.6-develop-a88276bc52 → 0.4.6-develop-806a2ed6b9

package/dist/modules/data_sync/lib/sync-run-service.js

@@ -0,0 +1,148 @@
+import { findAndCountWithDecryption, findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { SyncCursor, SyncRun } from "../data/entities.js";
+function createSyncRunService(em) {
+  return {
+    async createRun(input, scope) {
+      const row = em.create(SyncRun, {
+        integrationId: input.integrationId,
+        entityType: input.entityType,
+        direction: input.direction,
+        status: "pending",
+        cursor: input.cursor,
+        initialCursor: input.cursor,
+        triggeredBy: input.triggeredBy,
+        progressJobId: input.progressJobId,
+        jobId: input.jobId,
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId
+      });
+      await em.persistAndFlush(row);
+      return row;
+    },
+    async getRun(runId, scope) {
+      return findOneWithDecryption(
+        em,
+        SyncRun,
+        {
+          id: runId,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId,
+          deletedAt: null
+        },
+        void 0,
+        scope
+      );
+    },
+    async listRuns(query, scope) {
+      const where = {
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId,
+        deletedAt: null
+      };
+      if (query.integrationId) where.integrationId = query.integrationId;
+      if (query.entityType) where.entityType = query.entityType;
+      if (query.direction) where.direction = query.direction;
+      if (query.status) where.status = query.status;
+      const [items, total] = await findAndCountWithDecryption(
+        em,
+        SyncRun,
+        where,
+        {
+          orderBy: { createdAt: "DESC" },
+          limit: query.pageSize,
+          offset: (query.page - 1) * query.pageSize
+        },
+        scope
+      );
+      return { items, total };
+    },
+    async markStatus(runId, status, scope, error) {
+      const row = await this.getRun(runId, scope);
+      if (!row) return null;
+      row.status = status;
+      if (error !== void 0) row.lastError = error;
+      await em.flush();
+      return row;
+    },
+    async updateCounts(runId, delta, scope) {
+      const row = await this.getRun(runId, scope);
+      if (!row) return null;
+      row.createdCount += delta.createdCount ?? 0;
+      row.updatedCount += delta.updatedCount ?? 0;
+      row.skippedCount += delta.skippedCount ?? 0;
+      row.failedCount += delta.failedCount ?? 0;
+      row.batchesCompleted += delta.batchesCompleted ?? 0;
+      await em.flush();
+      return row;
+    },
+    async updateCursor(runId, cursor, scope) {
+      const run = await this.getRun(runId, scope);
+      if (!run) return;
+      run.cursor = cursor;
+      const cursorRow = await findOneWithDecryption(
+        em,
+        SyncCursor,
+        {
+          integrationId: run.integrationId,
+          entityType: run.entityType,
+          direction: run.direction,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId
+        },
+        void 0,
+        scope
+      );
+      if (cursorRow) {
+        cursorRow.cursor = cursor;
+      } else {
+        em.create(SyncCursor, {
+          integrationId: run.integrationId,
+          entityType: run.entityType,
+          direction: run.direction,
+          cursor,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId
+        });
+      }
+      await em.flush();
+    },
+    async resolveCursor(integrationId, entityType, direction, scope) {
+      const row = await findOneWithDecryption(
+        em,
+        SyncCursor,
+        {
+          integrationId,
+          entityType,
+          direction,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId
+        },
+        void 0,
+        scope
+      );
+      return row?.cursor ?? null;
+    },
+    async findRunningOverlap(integrationId, entityType, direction, scope) {
+      const [run] = await findWithDecryption(
+        em,
+        SyncRun,
+        {
+          integrationId,
+          entityType,
+          direction,
+          status: "running",
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId,
+          deletedAt: null
+        },
+        { limit: 1 },
+        scope
+      );
+      return run ?? null;
+    }
+  };
+}
+export {
+  createSyncRunService
+};
+//# sourceMappingURL=sync-run-service.js.map

package/dist/modules/data_sync/lib/sync-run-service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/lib/sync-run-service.ts"],
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { SyncCursor, SyncRun } from '../data/entities'\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n}\n\nexport function createSyncRunService(em: EntityManager) {\n  return {\n    async createRun(input: {\n      integrationId: string\n      entityType: string\n      direction: 'import' | 'export'\n      cursor?: string | null\n      triggeredBy?: string | null\n      progressJobId?: string | null\n      jobId?: string | null\n    }, scope: SyncScope): Promise<SyncRun> {\n      const row = em.create(SyncRun, {\n        integrationId: input.integrationId,\n        entityType: input.entityType,\n        direction: input.direction,\n        status: 'pending',\n        cursor: input.cursor,\n        initialCursor: input.cursor,\n        triggeredBy: input.triggeredBy,\n        progressJobId: input.progressJobId,\n        jobId: input.jobId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n\n      await em.persistAndFlush(row)\n      return row\n    },\n\n    async getRun(runId: string, scope: SyncScope): Promise<SyncRun | null> {\n      return findOneWithDecryption(\n        em,\n        SyncRun,\n        {\n          id: runId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listRuns(query: {\n      integrationId?: string\n      entityType?: string\n      direction?: 'import' | 'export'\n      status?: string\n      page: number\n      pageSize: number\n    }, scope: SyncScope): Promise<{ items: SyncRun[]; total: number }> {\n      const where: FilterQuery<SyncRun> = {\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      }\n\n      if (query.integrationId) where.integrationId = query.integrationId\n      if (query.entityType) where.entityType = query.entityType\n      if (query.direction) where.direction = query.direction\n      if (query.status) where.status = query.status as SyncRun['status']\n\n      const [items, total] = await findAndCountWithDecryption(\n        em,\n        SyncRun,\n        where,\n        {\n          orderBy: { createdAt: 'DESC' },\n          limit: query.pageSize,\n          offset: (query.page - 1) * query.pageSize,\n        },\n        scope,\n      )\n\n      return { items, total }\n    },\n\n    async markStatus(runId: string, status: SyncRun['status'], scope: SyncScope, error?: string): Promise<SyncRun | null> {\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n      row.status = status\n      if (error !== undefined) row.lastError = error\n      await em.flush()\n      return row\n    },\n\n    async updateCounts(\n      runId: string,\n      delta: Partial<Pick<SyncRun, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount' | 'batchesCompleted'>>,\n      scope: SyncScope,\n    ): Promise<SyncRun | null> {\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n\n      row.createdCount += delta.createdCount ?? 0\n      row.updatedCount += delta.updatedCount ?? 0\n      row.skippedCount += delta.skippedCount ?? 0\n      row.failedCount += delta.failedCount ?? 0\n      row.batchesCompleted += delta.batchesCompleted ?? 0\n      await em.flush()\n      return row\n    },\n\n    async updateCursor(runId: string, cursor: string, scope: SyncScope): Promise<void> {\n      const run = await this.getRun(runId, scope)\n      if (!run) return\n      run.cursor = cursor\n\n      const cursorRow = await findOneWithDecryption(\n        em,\n        SyncCursor,\n        {\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        },\n        undefined,\n        scope,\n      )\n\n      if (cursorRow) {\n        cursorRow.cursor = cursor\n      } else {\n        em.create(SyncCursor, {\n          integrationId: run.integrationId,\n          entityType: run.entityType,\n          direction: run.direction,\n          cursor,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n        })\n      }\n\n      await em.flush()\n    },\n\n    async resolveCursor(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<string | null> {\n      const row = await findOneWithDecryption(\n        em,\n        SyncCursor,\n        {\n        integrationId,\n        entityType,\n        direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        },\n        undefined,\n        scope,\n      )\n      return row?.cursor ?? null\n    },\n\n    async findRunningOverlap(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<SyncRun | null> {\n      const [run] = await findWithDecryption(\n        em,\n        SyncRun,\n        {\n          integrationId,\n          entityType,\n          direction,\n          status: 'running',\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        { limit: 1 },\n        scope,\n      )\n      return run ?? null\n    },\n  }\n}\n\nexport type SyncRunService = ReturnType<typeof createSyncRunService>\n"],
+  "mappings": "AACA,SAAS,4BAA4B,uBAAuB,0BAA0B;AACtF,SAAS,YAAY,eAAe;AAO7B,SAAS,qBAAqB,IAAmB;AACtD,SAAO;AAAA,IACL,MAAM,UAAU,OAQb,OAAoC;AACrC,YAAM,MAAM,GAAG,OAAO,SAAS;AAAA,QAC7B,eAAe,MAAM;AAAA,QACrB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ,MAAM;AAAA,QACd,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AAED,YAAM,GAAG,gBAAgB,GAAG;AAC5B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,OAA2C;AACrE,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,SAAS,OAOZ,OAAgE;AACjE,YAAM,QAA8B;AAAA,QAClC,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAEA,UAAI,MAAM,cAAe,OAAM,gBAAgB,MAAM;AACrD,UAAI,MAAM,WAAY,OAAM,aAAa,MAAM;AAC/C,UAAI,MAAM,UAAW,OAAM,YAAY,MAAM;AAC7C,UAAI,MAAM,OAAQ,OAAM,SAAS,MAAM;AAEvC,YAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,QAC3B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO,MAAM;AAAA,UACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MACF;AAEA,aAAO,EAAE,OAAO,MAAM;AAAA,IACxB;AAAA,IAEA,MAAM,WAAW,OAAe,QAA2B,OAAkB,OAAyC;AACpH,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AACjB,UAAI,SAAS;AACb,UAAI,UAAU,OAAW,KAAI,YAAY;AACzC,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aACJ,OACA,OACA,OACyB;AACzB,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AAEjB,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,eAAe,MAAM,eAAe;AACxC,UAAI,oBAAoB,MAAM,oBAAoB;AAClD,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,OAAe,QAAgB,OAAiC;AACjF,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK;AACV,UAAI,SAAS;AAEb,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,UACA,eAAe,IAAI;AAAA,UACnB,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,UACf,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,UAAI,WAAW;AACb,kBAAU,SAAS;AAAA,MACrB,OAAO;AACL,WAAG,OAAO,YAAY;AAAA,UACpB,eAAe,IAAI;AAAA,UACnB,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,UACf;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAClB,CAAC;AAAA,MACH;AAEA,YAAM,GAAG,MAAM;AAAA,IACjB;AAAA,IAEA,MAAM,cAAc,eAAuB,YAAoB,WAAgC,OAA0C;AACvI,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,KAAK,UAAU;AAAA,IACxB;AAAA,IAEA,MAAM,mBAAmB,eAAuB,YAAoB,WAAgC,OAA2C;AAC7I,YAAM,CAAC,GAAG,IAAI,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,UACR,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,OAAO,EAAE;AAAA,QACX;AAAA,MACF;AACA,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/data_sync/migrations/Migration20260304113737.js

@@ -0,0 +1,17 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260304113737 extends Migration {
+  async up() {
+    this.addSql(`create table "sync_cursors" ("id" uuid not null default gen_random_uuid(), "integration_id" text not null, "entity_type" text not null, "direction" text not null, "cursor" text null, "organization_id" uuid not null, "tenant_id" uuid not null, "updated_at" timestamptz not null, constraint "sync_cursors_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "sync_cursors_integration_id_entity_type_direction__b4d87_index" on "sync_cursors" ("integration_id", "entity_type", "direction", "organization_id", "tenant_id");`);
+    this.addSql(`create table "sync_mappings" ("id" uuid not null default gen_random_uuid(), "integration_id" text not null, "entity_type" text not null, "mapping" jsonb not null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, constraint "sync_mappings_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "sync_mappings_integration_id_entity_type_organizat_edee9_index" on "sync_mappings" ("integration_id", "entity_type", "organization_id", "tenant_id");`);
+    this.addSql(`create table "sync_runs" ("id" uuid not null default gen_random_uuid(), "integration_id" text not null, "entity_type" text not null, "direction" text not null, "status" text not null, "cursor" text null, "initial_cursor" text null, "created_count" int not null default 0, "updated_count" int not null default 0, "skipped_count" int not null default 0, "failed_count" int not null default 0, "batches_completed" int not null default 0, "last_error" text null, "progress_job_id" uuid null, "job_id" text null, "triggered_by" text null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, constraint "sync_runs_pkey" primary key ("id"));`);
+    this.addSql(`create index "sync_runs_integration_id_entity_type_status_organi_8b13b_index" on "sync_runs" ("integration_id", "entity_type", "status", "organization_id", "tenant_id");`);
+    this.addSql(`create table "sync_schedules" ("id" uuid not null default gen_random_uuid(), "integration_id" text not null, "entity_type" text not null, "direction" text not null, "schedule_type" text not null, "schedule_value" text not null, "timezone" text not null default 'UTC', "full_sync" boolean not null default false, "is_enabled" boolean not null default true, "scheduled_job_id" uuid null, "last_run_at" timestamptz null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, constraint "sync_schedules_pkey" primary key ("id"));`);
+    this.addSql(`create index "sync_schedules_integration_id_entity_type_directio_addb9_index" on "sync_schedules" ("integration_id", "entity_type", "direction", "organization_id", "tenant_id");`);
+  }
+}
+export {
+  Migration20260304113737
+};
+//# sourceMappingURL=Migration20260304113737.js.map

package/dist/modules/data_sync/migrations/Migration20260304113737.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/migrations/Migration20260304113737.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260304113737 extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table \"sync_cursors\" (\"id\" uuid not null default gen_random_uuid(), \"integration_id\" text not null, \"entity_type\" text not null, \"direction\" text not null, \"cursor\" text null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"updated_at\" timestamptz not null, constraint \"sync_cursors_pkey\" primary key (\"id\"));`);\n    this.addSql(`create unique index \"sync_cursors_integration_id_entity_type_direction__b4d87_index\" on \"sync_cursors\" (\"integration_id\", \"entity_type\", \"direction\", \"organization_id\", \"tenant_id\");`);\n\n    this.addSql(`create table \"sync_mappings\" (\"id\" uuid not null default gen_random_uuid(), \"integration_id\" text not null, \"entity_type\" text not null, \"mapping\" jsonb not null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, constraint \"sync_mappings_pkey\" primary key (\"id\"));`);\n    this.addSql(`create unique index \"sync_mappings_integration_id_entity_type_organizat_edee9_index\" on \"sync_mappings\" (\"integration_id\", \"entity_type\", \"organization_id\", \"tenant_id\");`);\n\n    this.addSql(`create table \"sync_runs\" (\"id\" uuid not null default gen_random_uuid(), \"integration_id\" text not null, \"entity_type\" text not null, \"direction\" text not null, \"status\" text not null, \"cursor\" text null, \"initial_cursor\" text null, \"created_count\" int not null default 0, \"updated_count\" int not null default 0, \"skipped_count\" int not null default 0, \"failed_count\" int not null default 0, \"batches_completed\" int not null default 0, \"last_error\" text null, \"progress_job_id\" uuid null, \"job_id\" text null, \"triggered_by\" text null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"deleted_at\" timestamptz null, constraint \"sync_runs_pkey\" primary key (\"id\"));`);\n    this.addSql(`create index \"sync_runs_integration_id_entity_type_status_organi_8b13b_index\" on \"sync_runs\" (\"integration_id\", \"entity_type\", \"status\", \"organization_id\", \"tenant_id\");`);\n\n    this.addSql(`create table \"sync_schedules\" (\"id\" uuid not null default gen_random_uuid(), \"integration_id\" text not null, \"entity_type\" text not null, \"direction\" text not null, \"schedule_type\" text not null, \"schedule_value\" text not null, \"timezone\" text not null default 'UTC', \"full_sync\" boolean not null default false, \"is_enabled\" boolean not null default true, \"scheduled_job_id\" uuid null, \"last_run_at\" timestamptz null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"deleted_at\" timestamptz null, constraint \"sync_schedules_pkey\" primary key (\"id\"));`);\n    this.addSql(`create index \"sync_schedules_integration_id_entity_type_directio_addb9_index\" on \"sync_schedules\" (\"integration_id\", \"entity_type\", \"direction\", \"organization_id\", \"tenant_id\");`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,gCAAgC,UAAU;AAAA,EAErD,MAAe,KAAoB;AACjC,SAAK,OAAO,2UAA2U;AACvV,SAAK,OAAO,wLAAwL;AAEpM,SAAK,OAAO,2VAA2V;AACvW,SAAK,OAAO,4KAA4K;AAExL,SAAK,OAAO,yuBAAyuB;AACrvB,SAAK,OAAO,2KAA2K;AAEvL,SAAK,OAAO,0nBAA0nB;AACtoB,SAAK,OAAO,mLAAmL;AAAA,EACjM;AAEF;",
+  "names": []
+}

package/dist/modules/data_sync/setup.js

@@ -0,0 +1,13 @@
+const setup = {
+  defaultRoleFeatures: {
+    superadmin: ["data_sync.view", "data_sync.run", "data_sync.configure"],
+    admin: ["data_sync.view", "data_sync.run", "data_sync.configure"],
+    employee: ["data_sync.view"]
+  }
+};
+var setup_default = setup;
+export {
+  setup_default as default,
+  setup
+};
+//# sourceMappingURL=setup.js.map

package/dist/modules/data_sync/setup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/data_sync/setup.ts"],
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: ['data_sync.view', 'data_sync.run', 'data_sync.configure'],\n    admin: ['data_sync.view', 'data_sync.run', 'data_sync.configure'],\n    employee: ['data_sync.view'],\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY,CAAC,kBAAkB,iBAAiB,qBAAqB;AAAA,IACrE,OAAO,CAAC,kBAAkB,iBAAiB,qBAAqB;AAAA,IAChE,UAAU,CAAC,gBAAgB;AAAA,EAC7B;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/data_sync/workers/sync-export.js

@@ -0,0 +1,14 @@
+const metadata = {
+  queue: "data-sync-export",
+  id: "data-sync:export",
+  concurrency: 5
+};
+async function handle(job, ctx) {
+  const engine = ctx.resolve("dataSyncEngine");
+  await engine.runExport(job.payload.runId, job.payload.batchSize, job.payload.scope);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=sync-export.js.map

package/dist/modules/data_sync/workers/sync-export.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/workers/sync-export.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { SyncEngine } from '../lib/sync-engine'\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'data-sync-export',\n  id: 'data-sync:export',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n  await engine.runExport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n}\n"],
+  "mappings": "AAaO,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,QAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,QAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AACpF;",
+  "names": []
+}

package/dist/modules/data_sync/workers/sync-import.js

@@ -0,0 +1,14 @@
+const metadata = {
+  queue: "data-sync-import",
+  id: "data-sync:import",
+  concurrency: 5
+};
+async function handle(job, ctx) {
+  const engine = ctx.resolve("dataSyncEngine");
+  await engine.runImport(job.payload.runId, job.payload.batchSize, job.payload.scope);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=sync-import.js.map

package/dist/modules/data_sync/workers/sync-import.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/workers/sync-import.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { SyncEngine } from '../lib/sync-engine'\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'data-sync-import',\n  id: 'data-sync:import',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n  await engine.runImport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n}\n"],
+  "mappings": "AAaO,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,QAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,QAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AACpF;",
+  "names": []
+}

package/dist/modules/data_sync/workers/sync-scheduled.js

@@ -0,0 +1,63 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { SyncSchedule } from "../data/entities.js";
+import { getSyncQueue } from "../lib/queue.js";
+const metadata = {
+  queue: "data-sync-scheduled",
+  id: "data-sync:scheduled",
+  concurrency: 3
+};
+async function handle(job, ctx) {
+  const em = ctx.resolve("em");
+  const syncRunService = ctx.resolve("dataSyncRunService");
+  const schedule = await findOneWithDecryption(
+    em,
+    SyncSchedule,
+    {
+      id: job.payload.scheduleId,
+      organizationId: job.payload.scope.organizationId,
+      tenantId: job.payload.scope.tenantId,
+      deletedAt: null
+    },
+    void 0,
+    job.payload.scope
+  );
+  if (!schedule || !schedule.isEnabled) {
+    return;
+  }
+  const overlap = await syncRunService.findRunningOverlap(
+    schedule.integrationId,
+    schedule.entityType,
+    schedule.direction,
+    job.payload.scope
+  );
+  if (overlap) {
+    return;
+  }
+  const cursor = schedule.fullSync ? null : await syncRunService.resolveCursor(
+    schedule.integrationId,
+    schedule.entityType,
+    schedule.direction,
+    job.payload.scope
+  );
+  const run = await syncRunService.createRun({
+    integrationId: schedule.integrationId,
+    entityType: schedule.entityType,
+    direction: schedule.direction,
+    cursor,
+    triggeredBy: "scheduler"
+  }, job.payload.scope);
+  schedule.lastRunAt = /* @__PURE__ */ new Date();
+  await em.flush();
+  const queueName = schedule.direction === "import" ? "data-sync-import" : "data-sync-export";
+  const queue = getSyncQueue(queueName);
+  await queue.enqueue({
+    runId: run.id,
+    batchSize: 100,
+    scope: job.payload.scope
+  });
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=sync-scheduled.js.map

package/dist/modules/data_sync/workers/sync-scheduled.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/data_sync/workers/sync-scheduled.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport { SyncSchedule } from '../data/entities'\nimport { getSyncQueue } from '../lib/queue'\n\ntype ScheduledSyncPayload = {\n  scheduleId: string\n  scope: {\n    organizationId: string\n    tenantId: string\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'data-sync-scheduled',\n  id: 'data-sync:scheduled',\n  concurrency: 3,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<ScheduledSyncPayload>, ctx: HandlerContext): Promise<void> {\n  const em = ctx.resolve<EntityManager>('em')\n  const syncRunService = ctx.resolve<SyncRunService>('dataSyncRunService')\n\n  const schedule = await findOneWithDecryption(\n    em,\n    SyncSchedule,\n    {\n      id: job.payload.scheduleId,\n      organizationId: job.payload.scope.organizationId,\n      tenantId: job.payload.scope.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    job.payload.scope,\n  )\n\n  if (!schedule || !schedule.isEnabled) {\n    return\n  }\n\n  const overlap = await syncRunService.findRunningOverlap(\n    schedule.integrationId,\n    schedule.entityType,\n    schedule.direction,\n    job.payload.scope,\n  )\n  if (overlap) {\n    return\n  }\n\n  const cursor = schedule.fullSync\n    ? null\n    : await syncRunService.resolveCursor(\n        schedule.integrationId,\n        schedule.entityType,\n        schedule.direction,\n        job.payload.scope,\n      )\n\n  const run = await syncRunService.createRun({\n    integrationId: schedule.integrationId,\n    entityType: schedule.entityType,\n    direction: schedule.direction,\n    cursor,\n    triggeredBy: 'scheduler',\n  }, job.payload.scope)\n\n  schedule.lastRunAt = new Date()\n  await em.flush()\n\n  const queueName = schedule.direction === 'import' ? 'data-sync-import' : 'data-sync-export'\n  const queue = getSyncQueue(queueName)\n  await queue.enqueue({\n    runId: run.id,\n    batchSize: 100,\n    scope: job.payload.scope,\n  })\n}\n"],
+  "mappings": "AAEA,SAAS,6BAA6B;AAEtC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAUtB,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAsC,KAAoC;AAC7G,QAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,QAAM,iBAAiB,IAAI,QAAwB,oBAAoB;AAEvE,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,IAAI,QAAQ;AAAA,MAChB,gBAAgB,IAAI,QAAQ,MAAM;AAAA,MAClC,UAAU,IAAI,QAAQ,MAAM;AAAA,MAC5B,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,IAAI,QAAQ;AAAA,EACd;AAEA,MAAI,CAAC,YAAY,CAAC,SAAS,WAAW;AACpC;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,eAAe;AAAA,IACnC,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,IAAI,QAAQ;AAAA,EACd;AACA,MAAI,SAAS;AACX;AAAA,EACF;AAEA,QAAM,SAAS,SAAS,WACpB,OACA,MAAM,eAAe;AAAA,IACnB,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,IACT,IAAI,QAAQ;AAAA,EACd;AAEJ,QAAM,MAAM,MAAM,eAAe,UAAU;AAAA,IACzC,eAAe,SAAS;AAAA,IACxB,YAAY,SAAS;AAAA,IACrB,WAAW,SAAS;AAAA,IACpB;AAAA,IACA,aAAa;AAAA,EACf,GAAG,IAAI,QAAQ,KAAK;AAEpB,WAAS,YAAY,oBAAI,KAAK;AAC9B,QAAM,GAAG,MAAM;AAEf,QAAM,YAAY,SAAS,cAAc,WAAW,qBAAqB;AACzE,QAAM,QAAQ,aAAa,SAAS;AACpC,QAAM,MAAM,QAAQ;AAAA,IAClB,OAAO,IAAI;AAAA,IACX,WAAW;AAAA,IACX,OAAO,IAAI,QAAQ;AAAA,EACrB,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/entities/lib/encryptionDefaults.js

@@ -144,6 +144,10 @@ const DEFAULT_ENCRYPTION_MAPS = [
       { field: "context_json" }
     ]
   },
+  {
+    entityId: "integrations:integration_credentials",
+    fields: [{ field: "credentials" }]
+  },
   {
     entityId: "staff:staff_leave_request",
     fields: [

package/dist/modules/entities/lib/encryptionDefaults.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/entities/lib/encryptionDefaults.ts"],
-  "sourcesContent": ["export const DEFAULT_ENCRYPTION_MAPS: Array<{ entityId: string; fields: Array<{ field: string; hashField?: string | null }> }> = [\n  {\n    entityId: 'auth:user',\n    fields: [{ field: 'email', hashField: 'email_hash' }],\n  },\n  {\n    entityId: 'customers:customer_address',\n    fields: [\n      { field: 'name' },\n      { field: 'company_name' },\n      { field: 'address_line1' },\n      { field: 'address_line2' },\n      { field: 'city' },\n      { field: 'region' },\n      { field: 'postal_code' },\n      { field: 'country' },\n      { field: 'building_number' },\n      { field: 'flat_number' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_entity',\n    fields: [\n      { field: 'display_name' },\n      { field: 'primary_email' },\n      { field: 'primary_phone' },\n      { field: 'next_interaction_name' },\n      { field: 'description' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_deal',\n    fields: [\n      { field: 'title' },\n      { field: 'description' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_activity',\n    fields: [\n      { field: 'subject' },\n      { field: 'body' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_comment',\n    fields: [{ field: 'body' }],\n  },\n  {\n    entityId: 'customers:customer_person_profile',\n    fields: [\n      { field: 'first_name' },\n      { field: 'last_name' },\n      { field: 'preferred_name' },\n      { field: 'job_title' },\n      { field: 'department' },\n      { field: 'seniority' },\n      { field: 'timezone' },\n      { field: 'linked_in_url' },\n      { field: 'twitter_url' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_company_profile',\n    fields: [\n      { field: 'legal_name' },\n      { field: 'brand_name' },\n      { field: 'domain' },\n      { field: 'website_url' },\n      { field: 'industry' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_order',\n    fields: [\n      { field: 'customer_snapshot' },\n      { field: 'billing_address_snapshot' },\n      { field: 'shipping_address_snapshot' },\n      { field: 'shipping_method_snapshot' },\n      { field: 'delivery_window_snapshot' },\n      { field: 'payment_method_snapshot' },\n      { field: 'totals_snapshot' },\n      { field: 'catalog_snapshot' },\n      { field: 'promotion_snapshot' },\n      { field: 'comments' },\n      { field: 'internal_notes' },\n      { field: 'metadata' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_quote',\n    fields: [\n      { field: 'customer_snapshot' },\n      { field: 'billing_address_snapshot' },\n      { field: 'shipping_address_snapshot' },\n      { field: 'shipping_method_snapshot' },\n      { field: 'delivery_window_snapshot' },\n      { field: 'payment_method_snapshot' },\n      { field: 'totals_snapshot' },\n      { field: 'catalog_snapshot' },\n      { field: 'promotion_snapshot' },\n      { field: 'comments' },\n      { field: 'internal_notes' },\n      { field: 'metadata' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_document_address',\n    fields: [\n      { field: 'name' },\n      { field: 'purpose' },\n      { field: 'company_name' },\n      { field: 'address_line1' },\n      { field: 'address_line2' },\n      { field: 'city' },\n      { field: 'region' },\n      { field: 'postal_code' },\n      { field: 'country' },\n      { field: 'building_number' },\n      { field: 'flat_number' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_note',\n    fields: [{ field: 'body' }],\n  },\n  {\n    entityId: 'audit_logs:action_log',\n    fields: [\n      { field: 'command_id' },\n      { field: 'action_label' },\n      { field: 'command_payload' },\n      { field: 'snapshot_before' },\n      { field: 'snapshot_after' },\n      { field: 'changes_json' },\n      { field: 'context_json' },\n    ],\n  },\n  {\n    entityId: 'audit_logs:access_log',\n    fields: [\n      { field: 'resource_id' },\n      { field: 'fields_json' },\n      { field: 'context_json' },\n    ],\n  },\n  {\n    entityId: 'staff:staff_leave_request',\n    fields: [\n      { field: 'note' },\n      { field: 'decision_comment' },\n      { field: 'unavailability_reason_value' },\n    ],\n  },\n  {\n    entityId: 'vector:vector_search',\n    fields: [\n      { field: 'links' },\n      { field: 'payload' },\n      { field: 'result_title' },\n      { field: 'result_subtitle' },\n      { field: 'result_icon' },\n      { field: 'result_badge' },\n      { field: 'result_snapshot' },\n      { field: 'primary_link_href' },\n      { field: 'primary_link_label' },\n    ],\n  }\n]\n"],
-  "mappings": "AAAO,MAAM,0BAAoH;AAAA,EAC/H;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,SAAS,WAAW,aAAa,CAAC;AAAA,EACtD;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,wBAAwB;AAAA,MACjC,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,QAAQ;AAAA,MACjB,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,OAAO;AAAA,IAClB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,OAAO,CAAC;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,4BAA4B;AAAA,MACrC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,0BAA0B;AAAA,MACnC,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,qBAAqB;AAAA,MAC9B,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,4BAA4B;AAAA,MACrC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,0BAA0B;AAAA,MACnC,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,qBAAqB;AAAA,MAC9B,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,OAAO,CAAC;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,8BAA8B;AAAA,IACzC;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,QAAQ;AAAA,MACjB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,qBAAqB;AAAA,IAChC;AAAA,EACF;AACF;",
+  "sourcesContent": ["export const DEFAULT_ENCRYPTION_MAPS: Array<{ entityId: string; fields: Array<{ field: string; hashField?: string | null }> }> = [\n  {\n    entityId: 'auth:user',\n    fields: [{ field: 'email', hashField: 'email_hash' }],\n  },\n  {\n    entityId: 'customers:customer_address',\n    fields: [\n      { field: 'name' },\n      { field: 'company_name' },\n      { field: 'address_line1' },\n      { field: 'address_line2' },\n      { field: 'city' },\n      { field: 'region' },\n      { field: 'postal_code' },\n      { field: 'country' },\n      { field: 'building_number' },\n      { field: 'flat_number' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_entity',\n    fields: [\n      { field: 'display_name' },\n      { field: 'primary_email' },\n      { field: 'primary_phone' },\n      { field: 'next_interaction_name' },\n      { field: 'description' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_deal',\n    fields: [\n      { field: 'title' },\n      { field: 'description' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_activity',\n    fields: [\n      { field: 'subject' },\n      { field: 'body' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_comment',\n    fields: [{ field: 'body' }],\n  },\n  {\n    entityId: 'customers:customer_person_profile',\n    fields: [\n      { field: 'first_name' },\n      { field: 'last_name' },\n      { field: 'preferred_name' },\n      { field: 'job_title' },\n      { field: 'department' },\n      { field: 'seniority' },\n      { field: 'timezone' },\n      { field: 'linked_in_url' },\n      { field: 'twitter_url' },\n    ],\n  },\n  {\n    entityId: 'customers:customer_company_profile',\n    fields: [\n      { field: 'legal_name' },\n      { field: 'brand_name' },\n      { field: 'domain' },\n      { field: 'website_url' },\n      { field: 'industry' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_order',\n    fields: [\n      { field: 'customer_snapshot' },\n      { field: 'billing_address_snapshot' },\n      { field: 'shipping_address_snapshot' },\n      { field: 'shipping_method_snapshot' },\n      { field: 'delivery_window_snapshot' },\n      { field: 'payment_method_snapshot' },\n      { field: 'totals_snapshot' },\n      { field: 'catalog_snapshot' },\n      { field: 'promotion_snapshot' },\n      { field: 'comments' },\n      { field: 'internal_notes' },\n      { field: 'metadata' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_quote',\n    fields: [\n      { field: 'customer_snapshot' },\n      { field: 'billing_address_snapshot' },\n      { field: 'shipping_address_snapshot' },\n      { field: 'shipping_method_snapshot' },\n      { field: 'delivery_window_snapshot' },\n      { field: 'payment_method_snapshot' },\n      { field: 'totals_snapshot' },\n      { field: 'catalog_snapshot' },\n      { field: 'promotion_snapshot' },\n      { field: 'comments' },\n      { field: 'internal_notes' },\n      { field: 'metadata' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_document_address',\n    fields: [\n      { field: 'name' },\n      { field: 'purpose' },\n      { field: 'company_name' },\n      { field: 'address_line1' },\n      { field: 'address_line2' },\n      { field: 'city' },\n      { field: 'region' },\n      { field: 'postal_code' },\n      { field: 'country' },\n      { field: 'building_number' },\n      { field: 'flat_number' },\n    ],\n  },\n  {\n    entityId: 'sales:sales_note',\n    fields: [{ field: 'body' }],\n  },\n  {\n    entityId: 'audit_logs:action_log',\n    fields: [\n      { field: 'command_id' },\n      { field: 'action_label' },\n      { field: 'command_payload' },\n      { field: 'snapshot_before' },\n      { field: 'snapshot_after' },\n      { field: 'changes_json' },\n      { field: 'context_json' },\n    ],\n  },\n  {\n    entityId: 'audit_logs:access_log',\n    fields: [\n      { field: 'resource_id' },\n      { field: 'fields_json' },\n      { field: 'context_json' },\n    ],\n  },\n  {\n    entityId: 'integrations:integration_credentials',\n    fields: [{ field: 'credentials' }],\n  },\n  {\n    entityId: 'staff:staff_leave_request',\n    fields: [\n      { field: 'note' },\n      { field: 'decision_comment' },\n      { field: 'unavailability_reason_value' },\n    ],\n  },\n  {\n    entityId: 'vector:vector_search',\n    fields: [\n      { field: 'links' },\n      { field: 'payload' },\n      { field: 'result_title' },\n      { field: 'result_subtitle' },\n      { field: 'result_icon' },\n      { field: 'result_badge' },\n      { field: 'result_snapshot' },\n      { field: 'primary_link_href' },\n      { field: 'primary_link_label' },\n    ],\n  }\n]\n"],
+  "mappings": "AAAO,MAAM,0BAAoH;AAAA,EAC/H;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,SAAS,WAAW,aAAa,CAAC;AAAA,EACtD;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,wBAAwB;AAAA,MACjC,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,QAAQ;AAAA,MACjB,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,OAAO;AAAA,IAClB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,OAAO,CAAC;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,YAAY;AAAA,MACrB,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,4BAA4B;AAAA,MACrC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,0BAA0B;AAAA,MACnC,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,qBAAqB;AAAA,MAC9B,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,4BAA4B;AAAA,MACrC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,2BAA2B;AAAA,MACpC,EAAE,OAAO,0BAA0B;AAAA,MACnC,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,qBAAqB;AAAA,MAC9B,EAAE,OAAO,WAAW;AAAA,MACpB,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,WAAW;AAAA,IACtB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,SAAS;AAAA,MAClB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,IACzB;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,OAAO,CAAC;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,aAAa;AAAA,MACtB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,iBAAiB;AAAA,MAC1B,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,eAAe;AAAA,IAC1B;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,cAAc,CAAC;AAAA,EACnC;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,OAAO;AAAA,MAChB,EAAE,OAAO,mBAAmB;AAAA,MAC5B,EAAE,OAAO,8BAA8B;AAAA,IACzC;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,OAAO,QAAQ;AAAA,MACjB,EAAE,OAAO,UAAU;AAAA,MACnB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,cAAc;AAAA,MACvB,EAAE,OAAO,eAAe;AAAA,MACxB,EAAE,OAAO,kBAAkB;AAAA,MAC3B,EAAE,OAAO,oBAAoB;AAAA,MAC7B,EAAE,OAAO,qBAAqB;AAAA,IAChC;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/integrations/acl.js

@@ -1,8 +1,11 @@
 const features = [
   { id: "integrations.view", title: "View integrations and external ID mappings", module: "integrations" },
-  { id: "integrations.manage", title: "Manage integration configurations", module: "integrations" }
+  { id: "integrations.manage", title: "Manage integration configurations", module: "integrations" },
+  { id: "integrations.credentials.manage", title: "Manage integration credentials", module: "integrations" }
 ];
+var acl_default = features;
 export {
+  acl_default as default,
   features
 };
 //# sourceMappingURL=acl.js.map

package/dist/modules/integrations/acl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/integrations/acl.ts"],
-  "sourcesContent": ["export const features = [\n  { id: 'integrations.view', title: 'View integrations and external ID mappings', module: 'integrations' },\n  { id: 'integrations.manage', title: 'Manage integration configurations', module: 'integrations' },\n]\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,qBAAqB,OAAO,8CAA8C,QAAQ,eAAe;AAAA,EACvG,EAAE,IAAI,uBAAuB,OAAO,qCAAqC,QAAQ,eAAe;AAClG;",
+  "sourcesContent": ["export const features = [\n  { id: 'integrations.view', title: 'View integrations and external ID mappings', module: 'integrations' },\n  { id: 'integrations.manage', title: 'Manage integration configurations', module: 'integrations' },\n  { id: 'integrations.credentials.manage', title: 'Manage integration credentials', module: 'integrations' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,qBAAqB,OAAO,8CAA8C,QAAQ,eAAe;AAAA,EACvG,EAAE,IAAI,uBAAuB,OAAO,qCAAqC,QAAQ,eAAe;AAAA,EAChG,EAAE,IAAI,mCAAmC,OAAO,kCAAkC,QAAQ,eAAe;AAC3G;AAEA,IAAO,cAAQ;",
   "names": []
 }

package/dist/modules/integrations/api/[id]/credentials/route.js

@@ -0,0 +1,127 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getIntegration } from "@open-mercato/shared/modules/integrations/types";
+import { emitIntegrationsEvent } from "../../../events.js";
+import { saveCredentialsSchema } from "../../../data/validators.js";
+import {
+  resolveUserFeatures,
+  runIntegrationMutationGuardAfterSuccess,
+  runIntegrationMutationGuards
+} from "../../guards.js";
+const idParamsSchema = z.object({ id: z.string().min(1) });
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["integrations.credentials.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["integrations.credentials.manage"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "Get or save integration credentials"
+};
+function resolveParams(ctx) {
+  if (!ctx.params) return void 0;
+  if (typeof ctx.params.then === "function") {
+    return ctx.params;
+  }
+  return ctx.params;
+}
+async function GET(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = await resolveParams(ctx);
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const values = await credentialsService.resolve(integration.id, scope);
+  return NextResponse.json({
+    integrationId: integration.id,
+    schema: credentialsService.getSchema(integration.id),
+    credentials: values ?? {}
+  });
+}
+async function PUT(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = await resolveParams(ctx);
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsedBody = saveCredentialsSchema.safeParse(payload);
+  if (!parsedBody.success) {
+    return NextResponse.json({ error: "Invalid credentials payload", details: parsedBody.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const guardResult = await runIntegrationMutationGuards(
+    container,
+    {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub ?? "",
+      resourceKind: "integrations.integration",
+      resourceId: integration.id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsedBody.data
+    },
+    resolveUserFeatures(auth)
+  );
+  if (!guardResult.ok) {
+    return NextResponse.json(guardResult.errorBody ?? { error: "Operation blocked by guard" }, { status: guardResult.errorStatus ?? 422 });
+  }
+  let payloadData = parsedBody.data;
+  if (guardResult.modifiedPayload) {
+    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload };
+    const reparsed = saveCredentialsSchema.safeParse(mergedPayload);
+    if (!reparsed.success) {
+      return NextResponse.json({ error: "Invalid credentials payload after guard transform", details: reparsed.error.flatten() }, { status: 422 });
+    }
+    payloadData = reparsed.data;
+  }
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  await credentialsService.save(integration.id, payloadData.credentials, scope);
+  await emitIntegrationsEvent("integrations.credentials.updated", {
+    integrationId: integration.id,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub
+  });
+  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub ?? "",
+    resourceKind: "integrations.integration",
+    resourceId: integration.id,
+    operation: "update",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  });
+  return NextResponse.json({ ok: true });
+}
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/[id]/credentials/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/integrations/api/%5Bid%5D/credentials/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport { emitIntegrationsEvent } from '../../../events'\nimport { saveCredentialsSchema } from '../../../data/validators'\nimport type { CredentialsService } from '../../../lib/credentials-service'\nimport {\n  resolveUserFeatures,\n  runIntegrationMutationGuardAfterSuccess,\n  runIntegrationMutationGuards,\n} from '../../guards'\n\nconst idParamsSchema = z.object({ id: z.string().min(1) })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['integrations.credentials.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['integrations.credentials.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'Get or save integration credentials',\n}\n\nfunction resolveParams(ctx: { params?: Promise<{ id?: string }> | { id?: string } }): Promise<{ id?: string } | undefined> | { id?: string } | undefined {\n  if (!ctx.params) return undefined\n  if (typeof (ctx.params as Promise<unknown>).then === 'function') {\n    return ctx.params as Promise<{ id?: string }>\n  }\n  return ctx.params as { id?: string }\n}\n\nexport async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = await resolveParams(ctx)\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const values = await credentialsService.resolve(integration.id, scope)\n\n  return NextResponse.json({\n    integrationId: integration.id,\n    schema: credentialsService.getSchema(integration.id),\n    credentials: values ?? {},\n  })\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = await resolveParams(ctx)\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsedBody = saveCredentialsSchema.safeParse(payload)\n  if (!parsedBody.success) {\n    return NextResponse.json({ error: 'Invalid credentials payload', details: parsedBody.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runIntegrationMutationGuards(\n    container,\n    {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub ?? '',\n    resourceKind: 'integrations.integration',\n    resourceId: integration.id,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsedBody.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(guardResult.errorBody ?? { error: 'Operation blocked by guard' }, { status: guardResult.errorStatus ?? 422 })\n  }\n\n  let payloadData = parsedBody.data\n  if (guardResult.modifiedPayload) {\n    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload }\n    const reparsed = saveCredentialsSchema.safeParse(mergedPayload)\n    if (!reparsed.success) {\n      return NextResponse.json({ error: 'Invalid credentials payload after guard transform', details: reparsed.error.flatten() }, { status: 422 })\n    }\n    payloadData = reparsed.data\n  }\n\n  const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  await credentialsService.save(integration.id, payloadData.credentials, scope)\n\n  await emitIntegrationsEvent('integrations.credentials.updated', {\n    integrationId: integration.id,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub,\n  })\n\n  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: 'integrations.integration',\n      resourceId: integration.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n\n  return NextResponse.json({ ok: true })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,6BAA6B;AAEtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AAAA,EAC/E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iCAAiC,EAAE;AACjF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,SAAS,cAAc,KAAkI;AACvJ,MAAI,CAAC,IAAI,OAAQ,QAAO;AACxB,MAAI,OAAQ,IAAI,OAA4B,SAAS,YAAY;AAC/D,WAAO,IAAI;AAAA,EACb;AACA,SAAO,IAAI;AACb;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,cAAc,GAAG;AACzC,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,SAAS,MAAM,mBAAmB,QAAQ,YAAY,IAAI,KAAK;AAErE,SAAO,aAAa,KAAK;AAAA,IACvB,eAAe,YAAY;AAAA,IAC3B,QAAQ,mBAAmB,UAAU,YAAY,EAAE;AAAA,IACnD,aAAa,UAAU,CAAC;AAAA,EAC1B,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,cAAc,GAAG;AACzC,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,aAAa,sBAAsB,UAAU,OAAO;AAC1D,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,SAAS,WAAW,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzH;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACA,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,YAAY;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,WAAW;AAAA,IAC5B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa,KAAK,YAAY,aAAa,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,YAAY,eAAe,IAAI,CAAC;AAAA,EACvI;AAEA,MAAI,cAAc,WAAW;AAC7B,MAAI,YAAY,iBAAiB;AAC/B,UAAM,gBAAgB,EAAE,GAAG,WAAW,MAAM,GAAG,YAAY,gBAAgB;AAC3E,UAAM,WAAW,sBAAsB,UAAU,aAAa;AAC9D,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,EAAE,OAAO,qDAAqD,SAAS,SAAS,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7I;AACA,kBAAc,SAAS;AAAA,EACzB;AAEA,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,mBAAmB,KAAK,YAAY,IAAI,YAAY,aAAa,KAAK;AAE5E,QAAM,sBAAsB,oCAAoC;AAAA,IAC9D,eAAe,YAAY;AAAA,IAC3B,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,EACf,CAAC;AAED,QAAM,wCAAwC,YAAY,uBAAuB;AAAA,IAC7E,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK,OAAO;AAAA,IACpB,cAAc;AAAA,IACd,YAAY,YAAY;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AAEH,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;",
+  "names": []
+}