@open-mercato/core 0.4.6-develop-a88276bc52 → 0.4.6-develop-806a2ed6b9

package/dist/modules/integrations/api/[id]/health/route.js

@@ -0,0 +1,46 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getIntegration } from "@open-mercato/shared/modules/integrations/types";
+const idParamsSchema = z.object({ id: z.string().min(1) });
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["integrations.manage"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "Run health check for an integration"
+};
+async function POST(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const container = await createRequestContainer();
+  const healthService = container.resolve("integrationHealthService");
+  const result = await healthService.runHealthCheck(
+    integration.id,
+    { organizationId: auth.orgId, tenantId: auth.tenantId }
+  );
+  return NextResponse.json({
+    status: result.status,
+    message: result.message ?? null,
+    details: result.details ?? null,
+    checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+}
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/[id]/health/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/integrations/api/%5Bid%5D/health/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { IntegrationHealthService } from '../../../lib/health-service'\n\nconst idParamsSchema = z.object({ id: z.string().min(1) })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['integrations.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'Run health check for an integration',\n}\n\nexport async function POST(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const healthService = container.resolve('integrationHealthService') as IntegrationHealthService\n\n  const result = await healthService.runHealthCheck(\n    integration.id,\n    { organizationId: auth.orgId as string, tenantId: auth.tenantId },\n  )\n\n  return NextResponse.json({\n    status: result.status,\n    message: result.message ?? null,\n    details: result.details ?? null,\n    checkedAt: new Date().toISOString(),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAG/B,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAElD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc,KAA8D;AACrG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,gBAAgB,UAAU,QAAQ,0BAA0B;AAElE,QAAM,SAAS,MAAM,cAAc;AAAA,IACjC,YAAY;AAAA,IACZ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAAA,EAClE;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO,WAAW;AAAA,IAC3B,SAAS,OAAO,WAAW;AAAA,IAC3B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/integrations/api/[id]/route.js

@@ -0,0 +1,65 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getBundle, getBundleIntegrations, getIntegration } from "@open-mercato/shared/modules/integrations/types";
+const idParamsSchema = z.object({ id: z.string().min(1) });
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["integrations.view"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "Get integration detail"
+};
+async function GET(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const stateService = container.resolve("integrationStateService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const [credentials, state] = await Promise.all([
+    credentialsService.resolve(integration.id, scope),
+    stateService.get(integration.id, scope)
+  ]);
+  const bundle = integration.bundleId ? getBundle(integration.bundleId) : void 0;
+  const bundleIntegrations = integration.bundleId ? await Promise.all(
+    getBundleIntegrations(integration.bundleId).map(async (item) => {
+      const itemState = await stateService.get(item.id, scope);
+      return {
+        ...item,
+        isEnabled: itemState?.isEnabled ?? true
+      };
+    })
+  ) : [];
+  return NextResponse.json({
+    integration,
+    bundle,
+    bundleIntegrations,
+    state: {
+      isEnabled: state?.isEnabled ?? true,
+      apiVersion: state?.apiVersion ?? null,
+      reauthRequired: state?.reauthRequired ?? false,
+      lastHealthStatus: state?.lastHealthStatus ?? null,
+      lastHealthCheckedAt: state?.lastHealthCheckedAt?.toISOString() ?? null
+    },
+    hasCredentials: Boolean(credentials)
+  });
+}
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/integrations/api/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getBundle, getBundleIntegrations, getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../lib/credentials-service'\nimport type { IntegrationStateService } from '../../lib/state-service'\n\nconst idParamsSchema = z.object({ id: z.string().min(1) })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['integrations.view'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'Get integration detail',\n}\n\nexport async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const stateService = container.resolve('integrationStateService') as IntegrationStateService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const [credentials, state] = await Promise.all([\n    credentialsService.resolve(integration.id, scope),\n    stateService.get(integration.id, scope),\n  ])\n\n  const bundle = integration.bundleId ? getBundle(integration.bundleId) : undefined\n  const bundleIntegrations = integration.bundleId\n    ? await Promise.all(\n      getBundleIntegrations(integration.bundleId).map(async (item) => {\n        const itemState = await stateService.get(item.id, scope)\n        return {\n          ...item,\n          isEnabled: itemState?.isEnabled ?? true,\n        }\n      }),\n    )\n    : []\n\n  return NextResponse.json({\n    integration,\n    bundle,\n    bundleIntegrations,\n    state: {\n      isEnabled: state?.isEnabled ?? true,\n      apiVersion: state?.apiVersion ?? null,\n      reauthRequired: state?.reauthRequired ?? false,\n      lastHealthStatus: state?.lastHealthStatus ?? null,\n      lastHealthCheckedAt: state?.lastHealthCheckedAt?.toISOString() ?? null,\n    },\n    hasCredentials: Boolean(credentials),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,WAAW,uBAAuB,sBAAsB;AAIjE,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACnE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,eAAe,UAAU,QAAQ,yBAAyB;AAChE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,CAAC,aAAa,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC7C,mBAAmB,QAAQ,YAAY,IAAI,KAAK;AAAA,IAChD,aAAa,IAAI,YAAY,IAAI,KAAK;AAAA,EACxC,CAAC;AAED,QAAM,SAAS,YAAY,WAAW,UAAU,YAAY,QAAQ,IAAI;AACxE,QAAM,qBAAqB,YAAY,WACnC,MAAM,QAAQ;AAAA,IACd,sBAAsB,YAAY,QAAQ,EAAE,IAAI,OAAO,SAAS;AAC9D,YAAM,YAAY,MAAM,aAAa,IAAI,KAAK,IAAI,KAAK;AACvD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,WAAW,WAAW,aAAa;AAAA,MACrC;AAAA,IACF,CAAC;AAAA,EACH,IACE,CAAC;AAEL,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,WAAW,OAAO,aAAa;AAAA,MAC/B,YAAY,OAAO,cAAc;AAAA,MACjC,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,kBAAkB,OAAO,oBAAoB;AAAA,MAC7C,qBAAqB,OAAO,qBAAqB,YAAY,KAAK;AAAA,IACpE;AAAA,IACA,gBAAgB,QAAQ,WAAW;AAAA,EACrC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/integrations/api/[id]/state/route.js

@@ -0,0 +1,109 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getIntegration } from "@open-mercato/shared/modules/integrations/types";
+import { emitIntegrationsEvent } from "../../../events.js";
+import { updateStateSchema } from "../../../data/validators.js";
+import {
+  resolveUserFeatures,
+  runIntegrationMutationGuardAfterSuccess,
+  runIntegrationMutationGuards
+} from "../../guards.js";
+const idParamsSchema = z.object({ id: z.string().min(1) });
+const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ["integrations.manage"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "Update integration state"
+};
+async function PUT(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsedBody = updateStateSchema.safeParse(payload);
+  if (!parsedBody.success) {
+    return NextResponse.json({ error: "Invalid state payload", details: parsedBody.error.flatten() }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const guardResult = await runIntegrationMutationGuards(
+    container,
+    {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub ?? "",
+      resourceKind: "integrations.integration",
+      resourceId: integration.id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsedBody.data
+    },
+    resolveUserFeatures(auth)
+  );
+  if (!guardResult.ok) {
+    return NextResponse.json(guardResult.errorBody ?? { error: "Operation blocked by guard" }, { status: guardResult.errorStatus ?? 422 });
+  }
+  let payloadData = parsedBody.data;
+  if (guardResult.modifiedPayload) {
+    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload };
+    const reparsed = updateStateSchema.safeParse(mergedPayload);
+    if (!reparsed.success) {
+      return NextResponse.json({ error: "Invalid state payload after guard transform", details: reparsed.error.flatten() }, { status: 422 });
+    }
+    payloadData = reparsed.data;
+  }
+  const stateService = container.resolve("integrationStateService");
+  const state = await stateService.upsert(
+    integration.id,
+    {
+      isEnabled: payloadData.isEnabled,
+      reauthRequired: payloadData.reauthRequired
+    },
+    {
+      organizationId: auth.orgId,
+      tenantId: auth.tenantId
+    }
+  );
+  await emitIntegrationsEvent("integrations.state.updated", {
+    integrationId: integration.id,
+    isEnabled: state.isEnabled,
+    reauthRequired: state.reauthRequired,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub
+  });
+  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub ?? "",
+    resourceKind: "integrations.integration",
+    resourceId: integration.id,
+    operation: "update",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  });
+  return NextResponse.json({
+    isEnabled: state.isEnabled,
+    reauthRequired: state.reauthRequired,
+    apiVersion: state.apiVersion ?? null
+  });
+}
+export {
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/[id]/state/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/integrations/api/%5Bid%5D/state/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport { emitIntegrationsEvent } from '../../../events'\nimport { updateStateSchema } from '../../../data/validators'\nimport type { IntegrationStateService } from '../../../lib/state-service'\nimport {\n  resolveUserFeatures,\n  runIntegrationMutationGuardAfterSuccess,\n  runIntegrationMutationGuards,\n} from '../../guards'\n\nconst idParamsSchema = z.object({ id: z.string().min(1) })\n\nexport const metadata = {\n  PUT: { requireAuth: true, requireFeatures: ['integrations.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'Update integration state',\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsedBody = updateStateSchema.safeParse(payload)\n  if (!parsedBody.success) {\n    return NextResponse.json({ error: 'Invalid state payload', details: parsedBody.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runIntegrationMutationGuards(\n    container,\n    {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub ?? '',\n    resourceKind: 'integrations.integration',\n    resourceId: integration.id,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsedBody.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(guardResult.errorBody ?? { error: 'Operation blocked by guard' }, { status: guardResult.errorStatus ?? 422 })\n  }\n\n  let payloadData = parsedBody.data\n  if (guardResult.modifiedPayload) {\n    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload }\n    const reparsed = updateStateSchema.safeParse(mergedPayload)\n    if (!reparsed.success) {\n      return NextResponse.json({ error: 'Invalid state payload after guard transform', details: reparsed.error.flatten() }, { status: 422 })\n    }\n    payloadData = reparsed.data\n  }\n\n  const stateService = container.resolve('integrationStateService') as IntegrationStateService\n\n  const state = await stateService.upsert(\n    integration.id,\n    {\n      isEnabled: payloadData.isEnabled,\n      reauthRequired: payloadData.reauthRequired,\n    },\n    {\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n  )\n\n  await emitIntegrationsEvent('integrations.state.updated', {\n    integrationId: integration.id,\n    isEnabled: state.isEnabled,\n    reauthRequired: state.reauthRequired,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub,\n  })\n\n  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: 'integrations.integration',\n      resourceId: integration.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n\n  return NextResponse.json({\n    isEnabled: state.isEnabled,\n    reauthRequired: state.reauthRequired,\n    apiVersion: state.apiVersion ?? null,\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACrE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,aAAa,kBAAkB,UAAU,OAAO;AACtD,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,SAAS,WAAW,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACA,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,YAAY;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,WAAW;AAAA,IAC5B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa,KAAK,YAAY,aAAa,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,YAAY,eAAe,IAAI,CAAC;AAAA,EACvI;AAEA,MAAI,cAAc,WAAW;AAC7B,MAAI,YAAY,iBAAiB;AAC/B,UAAM,gBAAgB,EAAE,GAAG,WAAW,MAAM,GAAG,YAAY,gBAAgB;AAC3E,UAAM,WAAW,kBAAkB,UAAU,aAAa;AAC1D,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,EAAE,OAAO,+CAA+C,SAAS,SAAS,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvI;AACA,kBAAc,SAAS;AAAA,EACzB;AAEA,QAAM,eAAe,UAAU,QAAQ,yBAAyB;AAEhE,QAAM,QAAQ,MAAM,aAAa;AAAA,IAC/B,YAAY;AAAA,IACZ;AAAA,MACE,WAAW,YAAY;AAAA,MACvB,gBAAgB,YAAY;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,sBAAsB,8BAA8B;AAAA,IACxD,eAAe,YAAY;AAAA,IAC3B,WAAW,MAAM;AAAA,IACjB,gBAAgB,MAAM;AAAA,IACtB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,EACf,CAAC;AAED,QAAM,wCAAwC,YAAY,uBAAuB;AAAA,IAC7E,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK,OAAO;AAAA,IACpB,cAAc;AAAA,IACd,YAAY,YAAY;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AAEH,SAAO,aAAa,KAAK;AAAA,IACvB,WAAW,MAAM;AAAA,IACjB,gBAAgB,MAAM;AAAA,IACtB,YAAY,MAAM,cAAc;AAAA,EAClC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/integrations/api/[id]/version/route.js

@@ -0,0 +1,117 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getIntegration } from "@open-mercato/shared/modules/integrations/types";
+import { emitIntegrationsEvent } from "../../../events.js";
+import { updateVersionSchema } from "../../../data/validators.js";
+import { resolveDefaultApiVersion } from "../../../lib/registry-service.js";
+import {
+  resolveUserFeatures,
+  runIntegrationMutationGuardAfterSuccess,
+  runIntegrationMutationGuards
+} from "../../guards.js";
+const idParamsSchema = z.object({ id: z.string().min(1) });
+const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ["integrations.manage"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "Change integration API version"
+};
+async function PUT(req, ctx) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const rawParams = ctx.params && typeof ctx.params.then === "function" ? await ctx.params : ctx.params;
+  const parsedParams = idParamsSchema.safeParse(rawParams);
+  if (!parsedParams.success) {
+    return NextResponse.json({ error: "Invalid integration id" }, { status: 400 });
+  }
+  const integration = getIntegration(parsedParams.data.id);
+  if (!integration) {
+    return NextResponse.json({ error: "Integration not found" }, { status: 404 });
+  }
+  const payload = await req.json().catch(() => null);
+  const parsedBody = updateVersionSchema.safeParse(payload);
+  if (!parsedBody.success) {
+    return NextResponse.json({ error: "Invalid payload", details: parsedBody.error.flatten() }, { status: 422 });
+  }
+  const requestedVersion = parsedBody.data.apiVersion;
+  const availableVersions = integration.apiVersions ?? [];
+  if (availableVersions.length === 0) {
+    return NextResponse.json({ error: "This integration is not versioned" }, { status: 422 });
+  }
+  const exists = availableVersions.some((version) => version.id === requestedVersion);
+  if (!exists) {
+    return NextResponse.json({ error: "Unknown integration version" }, { status: 422 });
+  }
+  const defaultVersion = resolveDefaultApiVersion(availableVersions);
+  if (!defaultVersion) {
+    return NextResponse.json({ error: "Integration version configuration is invalid" }, { status: 422 });
+  }
+  const container = await createRequestContainer();
+  const guardResult = await runIntegrationMutationGuards(
+    container,
+    {
+      tenantId: auth.tenantId,
+      organizationId: auth.orgId,
+      userId: auth.sub ?? "",
+      resourceKind: "integrations.integration",
+      resourceId: integration.id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: parsedBody.data
+    },
+    resolveUserFeatures(auth)
+  );
+  if (!guardResult.ok) {
+    return NextResponse.json(guardResult.errorBody ?? { error: "Operation blocked by guard" }, { status: guardResult.errorStatus ?? 422 });
+  }
+  let payloadData = parsedBody.data;
+  if (guardResult.modifiedPayload) {
+    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload };
+    const reparsed = updateVersionSchema.safeParse(mergedPayload);
+    if (!reparsed.success) {
+      return NextResponse.json({ error: "Invalid payload after guard transform", details: reparsed.error.flatten() }, { status: 422 });
+    }
+    payloadData = reparsed.data;
+  }
+  if (!availableVersions.some((version) => version.id === payloadData.apiVersion)) {
+    return NextResponse.json({ error: "Unknown integration version" }, { status: 422 });
+  }
+  const stateService = container.resolve("integrationStateService");
+  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const before = await stateService.resolveApiVersion(integration.id, scope);
+  await stateService.upsert(integration.id, { apiVersion: payloadData.apiVersion }, scope);
+  await emitIntegrationsEvent("integrations.version.changed", {
+    integrationId: integration.id,
+    previousVersion: before ?? defaultVersion,
+    apiVersion: payloadData.apiVersion,
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub
+  });
+  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
+    tenantId: auth.tenantId,
+    organizationId: auth.orgId,
+    userId: auth.sub ?? "",
+    resourceKind: "integrations.integration",
+    resourceId: integration.id,
+    operation: "update",
+    requestMethod: req.method,
+    requestHeaders: req.headers
+  });
+  return NextResponse.json({
+    apiVersion: payloadData.apiVersion,
+    previousVersion: before ?? defaultVersion
+  });
+}
+export {
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/[id]/version/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/integrations/api/%5Bid%5D/version/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport { emitIntegrationsEvent } from '../../../events'\nimport { updateVersionSchema } from '../../../data/validators'\nimport type { IntegrationStateService } from '../../../lib/state-service'\nimport { resolveDefaultApiVersion } from '../../../lib/registry-service'\nimport {\n  resolveUserFeatures,\n  runIntegrationMutationGuardAfterSuccess,\n  runIntegrationMutationGuards,\n} from '../../guards'\n\nconst idParamsSchema = z.object({ id: z.string().min(1) })\n\nexport const metadata = {\n  PUT: { requireAuth: true, requireFeatures: ['integrations.manage'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'Change integration API version',\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = idParamsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid integration id' }, { status: 400 })\n  }\n\n  const integration = getIntegration(parsedParams.data.id)\n  if (!integration) {\n    return NextResponse.json({ error: 'Integration not found' }, { status: 404 })\n  }\n\n  const payload = await req.json().catch(() => null)\n  const parsedBody = updateVersionSchema.safeParse(payload)\n  if (!parsedBody.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsedBody.error.flatten() }, { status: 422 })\n  }\n\n  const requestedVersion = parsedBody.data.apiVersion\n  const availableVersions = integration.apiVersions ?? []\n  if (availableVersions.length === 0) {\n    return NextResponse.json({ error: 'This integration is not versioned' }, { status: 422 })\n  }\n\n  const exists = availableVersions.some((version) => version.id === requestedVersion)\n  if (!exists) {\n    return NextResponse.json({ error: 'Unknown integration version' }, { status: 422 })\n  }\n\n  const defaultVersion = resolveDefaultApiVersion(availableVersions)\n  if (!defaultVersion) {\n    return NextResponse.json({ error: 'Integration version configuration is invalid' }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const guardResult = await runIntegrationMutationGuards(\n    container,\n    {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n      userId: auth.sub ?? '',\n      resourceKind: 'integrations.integration',\n      resourceId: integration.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsedBody.data as Record<string, unknown>,\n    },\n    resolveUserFeatures(auth),\n  )\n  if (!guardResult.ok) {\n    return NextResponse.json(guardResult.errorBody ?? { error: 'Operation blocked by guard' }, { status: guardResult.errorStatus ?? 422 })\n  }\n\n  let payloadData = parsedBody.data\n  if (guardResult.modifiedPayload) {\n    const mergedPayload = { ...parsedBody.data, ...guardResult.modifiedPayload }\n    const reparsed = updateVersionSchema.safeParse(mergedPayload)\n    if (!reparsed.success) {\n      return NextResponse.json({ error: 'Invalid payload after guard transform', details: reparsed.error.flatten() }, { status: 422 })\n    }\n    payloadData = reparsed.data\n  }\n  if (!availableVersions.some((version) => version.id === payloadData.apiVersion)) {\n    return NextResponse.json({ error: 'Unknown integration version' }, { status: 422 })\n  }\n\n  const stateService = container.resolve('integrationStateService') as IntegrationStateService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const before = await stateService.resolveApiVersion(integration.id, scope)\n  await stateService.upsert(integration.id, { apiVersion: payloadData.apiVersion }, scope)\n\n  await emitIntegrationsEvent('integrations.version.changed', {\n    integrationId: integration.id,\n    previousVersion: before ?? defaultVersion,\n    apiVersion: payloadData.apiVersion,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub,\n  })\n\n  await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    userId: auth.sub ?? '',\n    resourceKind: 'integrations.integration',\n    resourceId: integration.id,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n  })\n\n  return NextResponse.json({\n    apiVersion: payloadData.apiVersion,\n    previousVersion: before ?? defaultVersion,\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AAEpC,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACrE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,eAAe,UAAU,SAAS;AACvD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/E;AAEA,QAAM,cAAc,eAAe,aAAa,KAAK,EAAE;AACvD,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9E;AAEA,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,QAAM,aAAa,oBAAoB,UAAU,OAAO;AACxD,MAAI,CAAC,WAAW,SAAS;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,WAAW,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7G;AAEA,QAAM,mBAAmB,WAAW,KAAK;AACzC,QAAM,oBAAoB,YAAY,eAAe,CAAC;AACtD,MAAI,kBAAkB,WAAW,GAAG;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,oCAAoC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AAEA,QAAM,SAAS,kBAAkB,KAAK,CAAC,YAAY,QAAQ,OAAO,gBAAgB;AAClF,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,QAAM,iBAAiB,yBAAyB,iBAAiB;AACjE,MAAI,CAAC,gBAAgB;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,+CAA+C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,MACE,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY,YAAY;AAAA,MACxB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,WAAW;AAAA,IAC9B;AAAA,IACA,oBAAoB,IAAI;AAAA,EAC1B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,aAAa,KAAK,YAAY,aAAa,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,YAAY,eAAe,IAAI,CAAC;AAAA,EACvI;AAEA,MAAI,cAAc,WAAW;AAC7B,MAAI,YAAY,iBAAiB;AAC/B,UAAM,gBAAgB,EAAE,GAAG,WAAW,MAAM,GAAG,YAAY,gBAAgB;AAC3E,UAAM,WAAW,oBAAoB,UAAU,aAAa;AAC5D,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,SAAS,SAAS,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjI;AACA,kBAAc,SAAS;AAAA,EACzB;AACA,MAAI,CAAC,kBAAkB,KAAK,CAAC,YAAY,QAAQ,OAAO,YAAY,UAAU,GAAG;AAC/E,WAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AAEA,QAAM,eAAe,UAAU,QAAQ,yBAAyB;AAChE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,SAAS,MAAM,aAAa,kBAAkB,YAAY,IAAI,KAAK;AACzE,QAAM,aAAa,OAAO,YAAY,IAAI,EAAE,YAAY,YAAY,WAAW,GAAG,KAAK;AAEvF,QAAM,sBAAsB,gCAAgC;AAAA,IAC1D,eAAe,YAAY;AAAA,IAC3B,iBAAiB,UAAU;AAAA,IAC3B,YAAY,YAAY;AAAA,IACxB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,EACf,CAAC;AAED,QAAM,wCAAwC,YAAY,uBAAuB;AAAA,IAC/E,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK,OAAO;AAAA,IACpB,cAAc;AAAA,IACd,YAAY,YAAY;AAAA,IACxB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,EACtB,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,YAAY,YAAY;AAAA,IACxB,iBAAiB,UAAU;AAAA,EAC7B,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/integrations/api/guards.js

@@ -0,0 +1,31 @@
+import {
+  bridgeLegacyGuard,
+  runMutationGuards
+} from "@open-mercato/shared/lib/crud/mutation-guard-registry";
+function resolveUserFeatures(auth) {
+  const features = auth?.features;
+  if (!Array.isArray(features)) return [];
+  return features.filter((value) => typeof value === "string");
+}
+async function runIntegrationMutationGuards(container, input, userFeatures) {
+  const legacyGuard = bridgeLegacyGuard(container);
+  if (!legacyGuard) {
+    return { ok: true, afterSuccessCallbacks: [] };
+  }
+  return runMutationGuards([legacyGuard], input, { userFeatures });
+}
+async function runIntegrationMutationGuardAfterSuccess(callbacks, input) {
+  for (const callback of callbacks) {
+    if (!callback.guard.afterSuccess) continue;
+    await callback.guard.afterSuccess({
+      ...input,
+      metadata: callback.metadata ?? null
+    });
+  }
+}
+export {
+  resolveUserFeatures,
+  runIntegrationMutationGuardAfterSuccess,
+  runIntegrationMutationGuards
+};
+//# sourceMappingURL=guards.js.map

package/dist/modules/integrations/api/guards.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/integrations/api/guards.ts"],
+  "sourcesContent": ["import type { AwilixContainer } from 'awilix'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\n\ntype GuardAfterCallback = {\n  guard: MutationGuard\n  metadata: Record<string, unknown> | null\n}\n\nexport function resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nexport async function runIntegrationMutationGuards(\n  container: AwilixContainer,\n  input: MutationGuardInput,\n  userFeatures: string[],\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: GuardAfterCallback[]\n}> {\n  const legacyGuard = bridgeLegacyGuard(container)\n  if (!legacyGuard) {\n    return { ok: true, afterSuccessCallbacks: [] }\n  }\n\n  return runMutationGuards([legacyGuard], input, { userFeatures })\n}\n\nexport async function runIntegrationMutationGuardAfterSuccess(\n  callbacks: GuardAfterCallback[],\n  input: {\n    tenantId: string\n    organizationId: string | null\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create' | 'update' | 'delete'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    await callback.guard.afterSuccess({\n      ...input,\n      metadata: callback.metadata ?? null,\n    })\n  }\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAOA,SAAS,oBAAoB,MAAyB;AAC3D,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAsB,6BACpB,WACA,OACA,cAOC;AACD,QAAM,cAAc,kBAAkB,SAAS;AAC/C,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,IAAI,MAAM,uBAAuB,CAAC,EAAE;AAAA,EAC/C;AAEA,SAAO,kBAAkB,CAAC,WAAW,GAAG,OAAO,EAAE,aAAa,CAAC;AACjE;AAEA,eAAsB,wCACpB,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAM,SAAS,MAAM,aAAa;AAAA,MAChC,GAAG;AAAA,MACH,UAAU,SAAS,YAAY;AAAA,IACjC,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/integrations/api/logs/route.js

@@ -0,0 +1,60 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { listIntegrationLogsQuerySchema } from "../../data/validators.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["integrations.view"] }
+};
+const openApi = {
+  tags: ["Integrations"],
+  summary: "List integration logs"
+};
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const url = new URL(req.url);
+  const parsed = listIntegrationLogsQuerySchema.safeParse({
+    integrationId: url.searchParams.get("integrationId") ?? void 0,
+    level: url.searchParams.get("level") ?? void 0,
+    runId: url.searchParams.get("runId") ?? void 0,
+    entityType: url.searchParams.get("entityType") ?? void 0,
+    entityId: url.searchParams.get("entityId") ?? void 0,
+    page: url.searchParams.get("page") ?? void 0,
+    pageSize: url.searchParams.get("pageSize") ?? void 0
+  });
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid query", details: parsed.error.flatten() }, { status: 400 });
+  }
+  const container = await createRequestContainer();
+  const logService = container.resolve("integrationLogService");
+  const { items, total } = await logService.query(parsed.data, {
+    organizationId: auth.orgId,
+    tenantId: auth.tenantId
+  });
+  return NextResponse.json({
+    items: items.map((item) => ({
+      id: item.id,
+      integrationId: item.integrationId,
+      runId: item.runId ?? null,
+      scopeEntityType: item.scopeEntityType ?? null,
+      scopeEntityId: item.scopeEntityId ?? null,
+      level: item.level,
+      message: item.message,
+      code: item.code ?? null,
+      payload: item.payload ?? null,
+      createdAt: item.createdAt.toISOString()
+    })),
+    total,
+    page: parsed.data.page,
+    pageSize: parsed.data.pageSize,
+    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize))
+  });
+}
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/integrations/api/logs/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/integrations/api/logs/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { listIntegrationLogsQuerySchema } from '../../data/validators'\nimport type { IntegrationLogService } from '../../lib/log-service'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['integrations.view'] },\n}\n\nexport const openApi = {\n  tags: ['Integrations'],\n  summary: 'List integration logs',\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listIntegrationLogsQuerySchema.safeParse({\n    integrationId: url.searchParams.get('integrationId') ?? undefined,\n    level: url.searchParams.get('level') ?? undefined,\n    runId: url.searchParams.get('runId') ?? undefined,\n    entityType: url.searchParams.get('entityType') ?? undefined,\n    entityId: url.searchParams.get('entityId') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const logService = container.resolve('integrationLogService') as IntegrationLogService\n\n  const { items, total } = await logService.query(parsed.data, {\n    organizationId: auth.orgId as string,\n    tenantId: auth.tenantId,\n  })\n\n  return NextResponse.json({\n    items: items.map((item) => ({\n      id: item.id,\n      integrationId: item.integrationId,\n      runId: item.runId ?? null,\n      scopeEntityType: item.scopeEntityType ?? null,\n      scopeEntityId: item.scopeEntityId ?? null,\n      level: item.level,\n      message: item.message,\n      code: item.code ?? null,\n      payload: item.payload ?? null,\n      createdAt: item.createdAt.toISOString(),\n    })),\n    total,\n    page: parsed.data.page,\n    pageSize: parsed.data.pageSize,\n    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize)),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAGxC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACnE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,cAAc;AAAA,EACrB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,+BAA+B,UAAU;AAAA,IACtD,eAAe,IAAI,aAAa,IAAI,eAAe,KAAK;AAAA,IACxD,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK;AAAA,IACxC,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK;AAAA,IACxC,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAC9C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,aAAa,UAAU,QAAQ,uBAAuB;AAE5D,QAAM,EAAE,OAAO,MAAM,IAAI,MAAM,WAAW,MAAM,OAAO,MAAM;AAAA,IAC3D,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,MAC1B,IAAI,KAAK;AAAA,MACT,eAAe,KAAK;AAAA,MACpB,OAAO,KAAK,SAAS;AAAA,MACrB,iBAAiB,KAAK,mBAAmB;AAAA,MACzC,eAAe,KAAK,iBAAiB;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,QAAQ;AAAA,MACnB,SAAS,KAAK,WAAW;AAAA,MACzB,WAAW,KAAK,UAAU,YAAY;AAAA,IACxC,EAAE;AAAA,IACF;AAAA,IACA,MAAM,OAAO,KAAK;AAAA,IAClB,UAAU,OAAO,KAAK;AAAA,IACtB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,OAAO,KAAK,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/integrations/api/openapi.js

@@ -0,0 +1,25 @@
+import { z } from "zod";
+import { createCrudOpenApiFactory, createPagedListResponseSchema as createSharedPagedListResponseSchema } from "@open-mercato/shared/lib/openapi/crud";
+function createPagedListResponseSchema(itemSchema) {
+  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true });
+}
+const integrationInfoSchema = z.object({
+  id: z.string(),
+  title: z.string(),
+  category: z.string().nullable(),
+  hub: z.string().nullable(),
+  providerKey: z.string().nullable(),
+  bundleId: z.string().nullable(),
+  hasCredentials: z.boolean(),
+  isEnabled: z.boolean(),
+  apiVersion: z.string().nullable()
+});
+const buildIntegrationsCrudOpenApi = createCrudOpenApiFactory({
+  defaultTag: "Integrations"
+});
+export {
+  buildIntegrationsCrudOpenApi,
+  createPagedListResponseSchema,
+  integrationInfoSchema
+};
+//# sourceMappingURL=openapi.js.map

package/dist/modules/integrations/api/openapi.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/integrations/api/openapi.ts"],
+  "sourcesContent": ["import { z, type ZodTypeAny } from 'zod'\nimport { createCrudOpenApiFactory, createPagedListResponseSchema as createSharedPagedListResponseSchema } from '@open-mercato/shared/lib/openapi/crud'\n\nexport function createPagedListResponseSchema(itemSchema: ZodTypeAny) {\n  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true })\n}\n\nexport const integrationInfoSchema = z.object({\n  id: z.string(),\n  title: z.string(),\n  category: z.string().nullable(),\n  hub: z.string().nullable(),\n  providerKey: z.string().nullable(),\n  bundleId: z.string().nullable(),\n  hasCredentials: z.boolean(),\n  isEnabled: z.boolean(),\n  apiVersion: z.string().nullable(),\n})\n\nexport const buildIntegrationsCrudOpenApi = createCrudOpenApiFactory({\n  defaultTag: 'Integrations',\n})\n"],
+  "mappings": "AAAA,SAAS,SAA0B;AACnC,SAAS,0BAA0B,iCAAiC,2CAA2C;AAExG,SAAS,8BAA8B,YAAwB;AACpE,SAAO,oCAAoC,YAAY,EAAE,wBAAwB,KAAK,CAAC;AACzF;AAEO,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO;AAAA,EAChB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,gBAAgB,EAAE,QAAQ;AAAA,EAC1B,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,MAAM,+BAA+B,yBAAyB;AAAA,EACnE,YAAY;AACd,CAAC;",
+  "names": []
+}

package/dist/modules/integrations/api/route.js

@@ -0,0 +1,68 @@
+import { NextResponse } from "next/server";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAllBundles, getAllIntegrations } from "@open-mercato/shared/modules/integrations/types";
+import { buildIntegrationsCrudOpenApi, createPagedListResponseSchema, integrationInfoSchema } from "./openapi.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["integrations.view"] }
+};
+const openApi = buildIntegrationsCrudOpenApi({
+  resourceName: "Integration",
+  pluralName: "Integrations",
+  listResponseSchema: createPagedListResponseSchema(integrationInfoSchema),
+  querySchema: void 0
+});
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.tenantId || !auth.orgId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const credentialsService = container.resolve("integrationCredentialsService");
+  const stateService = container.resolve("integrationStateService");
+  const rows = await Promise.all(
+    getAllIntegrations().map(async (integration) => {
+      const [resolvedCredentials, state] = await Promise.all([
+        credentialsService.resolve(integration.id, { organizationId: auth.orgId, tenantId: auth.tenantId }),
+        stateService.get(integration.id, { organizationId: auth.orgId, tenantId: auth.tenantId })
+      ]);
+      return {
+        id: integration.id,
+        title: integration.title,
+        category: integration.category ?? null,
+        hub: integration.hub ?? null,
+        providerKey: integration.providerKey ?? null,
+        bundleId: integration.bundleId ?? null,
+        hasCredentials: Boolean(resolvedCredentials),
+        isEnabled: state?.isEnabled ?? true,
+        apiVersion: state?.apiVersion ?? null
+      };
+    })
+  );
+  const bundles = getAllBundles().map((bundle) => {
+    const bundleIntegrations = rows.filter((row) => row.bundleId === bundle.id);
+    const enabledCount = bundleIntegrations.reduce((count, integration) => count + (integration.isEnabled ? 1 : 0), 0);
+    return {
+      id: bundle.id,
+      title: bundle.title,
+      description: bundle.description,
+      icon: bundle.icon ?? null,
+      integrationCount: bundleIntegrations.length,
+      enabledCount
+    };
+  });
+  return NextResponse.json({
+    items: rows,
+    bundles,
+    total: rows.length,
+    page: 1,
+    pageSize: 100,
+    totalPages: 1
+  });
+}
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map