@open-mercato/core 0.6.7-develop.6744.1.0483b18565 → 0.6.7-develop.6749.1.6b54c56dfe

package/dist/modules/data_sync/lib/sync-engine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/lib/sync-engine.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport { refreshCoverageSnapshot } from '../../query_index/lib/coverage'\nimport { emitDataSyncEvent } from '../events'\nimport type { DataSyncAdapter, DataMapping, ExportBatch, ImportBatch } from './adapter'\nimport { getDataSyncAdapter } from './adapter-registry'\nimport type { SyncRunService } from './sync-run-service'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-engine' })\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n  userId?: string | null\n}\n\ntype EngineDeps = {\n  em: EntityManager\n  syncRunService: SyncRunService\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService?: IntegrationStateService\n  progressService: ProgressService\n}\n\nfunction resolveProviderKey(integrationId: string): string {\n  return getIntegration(integrationId)?.providerKey ?? integrationId\n}\n\nfunction applyImportCounters(batch: ImportBatch): Pick<Required<SyncCounterDelta>, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount'> {\n  let createdCount = 0\n  let updatedCount = 0\n  let skippedCount = 0\n  let failedCount = 0\n\n  for (const item of batch.items) {\n    if (item.action === 'create') createdCount += 1\n    else if (item.action === 'update') updatedCount += 1\n    else if (item.action === 'failed') failedCount += 1\n    else skippedCount += 1\n  }\n\n  return { createdCount, updatedCount, skippedCount, failedCount }\n}\n\ntype SyncCounterDelta = {\n  createdCount?: number\n  updatedCount?: number\n  skippedCount?: number\n  failedCount?: number\n  processedCount: number\n}\n\nfunction applyExportCounters(batch: ExportBatch): SyncCounterDelta {\n  let failedCount = 0\n  let skippedCount = 0\n  let updatedCount = 0\n\n  for (const result of batch.results) {\n    if (result.status === 'error') failedCount += 1\n    else if (result.status === 'skipped') skippedCount += 1\n    else updatedCount += 1\n  }\n\n  return {\n    failedCount,\n    skippedCount,\n    updatedCount,\n    processedCount: batch.results.length,\n  }\n}\n\nexport function createSyncEngine(deps: EngineDeps) {\n  const { syncRunService, integrationCredentialsService, integrationLogService, integrationStateService, progressService } = deps\n\n  async function resolveMapping(adapter: DataSyncAdapter, entityType: string, scope: SyncScope): Promise<DataMapping> {\n    return adapter.getMapping({\n      entityType,\n      scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n    })\n  }\n\n  async function updateProgress(progressJobId: string | null | undefined, processedCount: number, totalCount: number | null, scope: SyncScope): Promise<void> {\n    if (!progressJobId) return\n\n    await progressService.updateProgress(\n      progressJobId,\n      {\n        processedCount,\n        totalCount: totalCount ?? undefined,\n      },\n      {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n    )\n  }\n\n  async function refreshCoverageSnapshots(entityTypes: string[] | undefined, scope: SyncScope): Promise<void> {\n    if (!entityTypes || entityTypes.length === 0) return\n\n    await Promise.allSettled(\n      Array.from(new Set(entityTypes.filter((value) => typeof value === 'string' && value.trim().length > 0)))\n        .map((entityType) => refreshCoverageSnapshot(deps.em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        })),\n    )\n  }\n\n  async function logImportItemFailures(\n    runId: string,\n    integrationId: string,\n    items: ImportBatch['items'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedItems = items.filter((item) => item.action === 'failed')\n    for (const item of failedItems) {\n      const errorMessage = typeof item.data.errorMessage === 'string' && item.data.errorMessage.trim().length > 0\n        ? item.data.errorMessage.trim()\n        : 'Import item failed'\n      const sourceProductUuid = typeof item.data.sourceProductUuid === 'string' && item.data.sourceProductUuid.trim().length > 0\n        ? item.data.sourceProductUuid.trim()\n        : null\n      const sourceIdentifier = typeof item.data.sourceIdentifier === 'string' && item.data.sourceIdentifier.trim().length > 0\n        ? item.data.sourceIdentifier.trim()\n        : null\n      const message = [\n        `Failed to import item ${item.externalId}`,\n        sourceProductUuid ? `(uuid: ${sourceProductUuid})` : null,\n        sourceIdentifier ? `(identifier: ${sourceIdentifier})` : null,\n        `: ${errorMessage}`,\n      ].filter((part) => part !== null).join(' ')\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: item.data,\n        },\n        scope,\n      )\n    }\n  }\n\n  async function logExportItemFailures(\n    runId: string,\n    integrationId: string,\n    results: ExportBatch['results'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedResults = results.filter((result) => result.status === 'error' && result.error)\n    for (const result of failedResults) {\n      const label = result.externalId ? `${result.externalId} (id: ${result.localId})` : result.localId\n      const errorMessage = result.error!.split('\\n')[0]\n      const message = `Failed to export item ${label}: ${errorMessage}`\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: { kind: 'export-item-failure', summary: result.error },\n        },\n        scope,\n      )\n    }\n  }\n\n  async function writeOperationalLog(params: {\n    integrationId: string\n    runId: string\n    level: 'info' | 'warn' | 'error'\n    message: string\n    scope: SyncScope\n    enabled: boolean\n    payload?: Record<string, unknown>\n  }): Promise<void> {\n    if (!params.enabled) return\n\n    await integrationLogService.write(\n      {\n        integrationId: params.integrationId,\n        runId: params.runId,\n        level: params.level,\n        message: params.message,\n        payload: params.payload,\n      },\n      params.scope,\n    )\n  }\n\n  async function updateOperationalState(params: {\n    integrationId: string\n    status: 'healthy' | 'degraded' | 'unhealthy'\n    scope: SyncScope\n    enabled: boolean\n  }): Promise<void> {\n    if (!params.enabled || !integrationStateService) return\n\n    await integrationStateService.upsert(\n      params.integrationId,\n      {\n        lastHealthStatus: params.status,\n        lastHealthCheckedAt: new Date(),\n      },\n      params.scope,\n    )\n  }\n\n  async function finalizeRun(\n    runId: string,\n    status: 'completed' | 'failed' | 'cancelled',\n    scope: SyncScope,\n    error?: string,\n    operationalTelemetry = false,\n  ): Promise<void> {\n    const existingRun = await syncRunService.getRun(runId, scope)\n    const alreadyFinalizedWithSameStatus = existingRun?.status === status\n      && (status === 'completed' || status === 'failed' || status === 'cancelled')\n\n    const run = await syncRunService.markStatus(runId, status, scope, error)\n    if (!run) return\n\n    if (alreadyFinalizedWithSameStatus) {\n      return\n    }\n\n    if (run.progressJobId) {\n      if (status === 'completed') {\n        await progressService.completeJob(\n          run.progressJobId,\n          {\n            resultSummary: {\n              createdCount: run.createdCount,\n              updatedCount: run.updatedCount,\n              skippedCount: run.skippedCount,\n              failedCount: run.failedCount,\n              batchesCompleted: run.batchesCompleted,\n            },\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'failed') {\n        await progressService.failJob(\n          run.progressJobId,\n          {\n            errorMessage: error ?? 'Sync run failed',\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'cancelled') {\n        await progressService.markCancelled(\n          run.progressJobId,\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      }\n    }\n\n    if (status === 'completed') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'healthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run completed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'completed',\n          summary: `Sync completed with ${run.createdCount} created, ${run.updatedCount} updated, ${run.failedCount} failed.`,\n          createdCount: run.createdCount,\n          updatedCount: run.updatedCount,\n          skippedCount: run.skippedCount,\n          failedCount: run.failedCount,\n          batchesCompleted: run.batchesCompleted,\n        },\n      })\n    } else if (status === 'cancelled') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'warn',\n        message: 'Sync run cancelled',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'cancelled',\n          summary: 'The sync run was cancelled before completion.',\n        },\n      })\n    } else {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'unhealthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'error',\n        message: error ?? 'Sync run failed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'failed',\n          summary: error ?? 'The sync run failed.',\n        },\n      })\n    }\n\n    if (status === 'completed') {\n      await emitDataSyncEvent('data_sync.run.completed', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    if (status === 'cancelled') {\n      await emitDataSyncEvent('data_sync.run.cancelled', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    await emitDataSyncEvent('data_sync.run.failed', {\n      runId,\n      integrationId: run.integrationId,\n      entityType: run.entityType,\n      direction: run.direction,\n      error: error ?? null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n  }\n\n  return {\n    async runImport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale import job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamImport) {\n        throw new Error(`No import adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Import run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = 0\n      let totalCount: number | null = null\n\n      try {\n        for await (const batch of adapter.streamImport({\n          entityType: run.entityType,\n          cursor: run.cursor ?? undefined,\n          batchSize,\n          credentials,\n          mapping,\n          scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n          runId: run.id,\n        })) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyImportCounters(batch)\n          const processedBatchCount = batch.processedCount ?? batch.items.length\n          processedCount += processedBatchCount\n          totalCount = batch.totalEstimate ?? totalCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              ...delta,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n          )\n\n          await updateProgress(run.progressJobId, processedCount, totalCount, scope)\n          await refreshCoverageSnapshots(batch.refreshCoverageEntityTypes, scope)\n          await logImportItemFailures(run.id, run.integrationId, batch.items, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: batch.message?.trim().length\n              ? batch.message.trim()\n              : `Processed import batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount}${totalCount ? ` of ${totalCount}` : ''} rows so far.`,\n              processedCount,\n              batchSize: batch.items.length,\n              processedBatchCount,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Sync import failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n\n    async runExport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale export job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamExport) {\n        throw new Error(`No export adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Export run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = 0\n\n      try {\n        for await (const batch of adapter.streamExport({\n          entityType: run.entityType,\n          cursor: run.cursor ?? undefined,\n          batchSize,\n          credentials,\n          mapping,\n          scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n          runId: run.id,\n        })) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyExportCounters(batch)\n          processedCount += delta.processedCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              createdCount: 0,\n              updatedCount: delta.updatedCount,\n              skippedCount: delta.skippedCount,\n              failedCount: delta.failedCount,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n          )\n          await updateProgress(run.progressJobId, processedCount, null, scope)\n          await logExportItemFailures(run.id, run.integrationId, batch.results, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: `Processed export batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount} export items so far.`,\n              processedCount,\n              batchSize: batch.results.length,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Sync export failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n  }\n}\n\nexport type SyncEngine = ReturnType<typeof createSyncEngine>\n"],
-  "mappings": "AACA,SAAS,sBAAsB;AAK/B,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AAEnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAiB3E,SAAS,mBAAmB,eAA+B;AACzD,SAAO,eAAe,aAAa,GAAG,eAAe;AACvD;AAEA,SAAS,oBAAoB,OAAwH;AACnJ,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM,OAAO;AAC9B,QAAI,KAAK,WAAW,SAAU,iBAAgB;AAAA,aACrC,KAAK,WAAW,SAAU,iBAAgB;AAAA,aAC1C,KAAK,WAAW,SAAU,gBAAe;AAAA,QAC7C,iBAAgB;AAAA,EACvB;AAEA,SAAO,EAAE,cAAc,cAAc,cAAc,YAAY;AACjE;AAUA,SAAS,oBAAoB,OAAsC;AACjE,MAAI,cAAc;AAClB,MAAI,eAAe;AACnB,MAAI,eAAe;AAEnB,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,QAAS,gBAAe;AAAA,aACrC,OAAO,WAAW,UAAW,iBAAgB;AAAA,QACjD,iBAAgB;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,QAAQ;AAAA,EAChC;AACF;AAEO,SAAS,iBAAiB,MAAkB;AACjD,QAAM,EAAE,gBAAgB,+BAA+B,uBAAuB,yBAAyB,gBAAgB,IAAI;AAE3H,iBAAe,eAAe,SAA0B,YAAoB,OAAwC;AAClH,WAAO,QAAQ,WAAW;AAAA,MACxB;AAAA,MACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,iBAAe,eAAe,eAA0C,gBAAwB,YAA2B,OAAiC;AAC1J,QAAI,CAAC,cAAe;AAEpB,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,yBAAyB,aAAmC,OAAiC;AAC1G,QAAI,CAAC,eAAe,YAAY,WAAW,EAAG;AAE9C,UAAM,QAAQ;AAAA,MACZ,MAAM,KAAK,IAAI,IAAI,YAAY,OAAO,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACpG,IAAI,CAAC,eAAe,wBAAwB,KAAK,IAAI;AAAA,QACpD;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,CAAC;AAAA,IACN;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,OACA,OACe;AACf,UAAM,cAAc,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ;AACnE,eAAW,QAAQ,aAAa;AAC9B,YAAM,eAAe,OAAO,KAAK,KAAK,iBAAiB,YAAY,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,IACtG,KAAK,KAAK,aAAa,KAAK,IAC5B;AACJ,YAAM,oBAAoB,OAAO,KAAK,KAAK,sBAAsB,YAAY,KAAK,KAAK,kBAAkB,KAAK,EAAE,SAAS,IACrH,KAAK,KAAK,kBAAkB,KAAK,IACjC;AACJ,YAAM,mBAAmB,OAAO,KAAK,KAAK,qBAAqB,YAAY,KAAK,KAAK,iBAAiB,KAAK,EAAE,SAAS,IAClH,KAAK,KAAK,iBAAiB,KAAK,IAChC;AACJ,YAAM,UAAU;AAAA,QACd,yBAAyB,KAAK,UAAU;AAAA,QACxC,oBAAoB,UAAU,iBAAiB,MAAM;AAAA,QACrD,mBAAmB,gBAAgB,gBAAgB,MAAM;AAAA,QACzD,KAAK,YAAY;AAAA,MACnB,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,EAAE,KAAK,GAAG;AAE1C,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,SACA,OACe;AACf,UAAM,gBAAgB,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,WAAW,OAAO,KAAK;AAC1F,eAAW,UAAU,eAAe;AAClC,YAAM,QAAQ,OAAO,aAAa,GAAG,OAAO,UAAU,SAAS,OAAO,OAAO,MAAM,OAAO;AAC1F,YAAM,eAAe,OAAO,MAAO,MAAM,IAAI,EAAE,CAAC;AAChD,YAAM,UAAU,yBAAyB,KAAK,KAAK,YAAY;AAE/D,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,EAAE,MAAM,uBAAuB,SAAS,OAAO,MAAM;AAAA,QAChE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,oBAAoB,QAQjB;AAChB,QAAI,CAAC,OAAO,QAAS;AAErB,UAAM,sBAAsB;AAAA,MAC1B;AAAA,QACE,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,uBAAuB,QAKpB;AAChB,QAAI,CAAC,OAAO,WAAW,CAAC,wBAAyB;AAEjD,UAAM,wBAAwB;AAAA,MAC5B,OAAO;AAAA,MACP;AAAA,QACE,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,oBAAI,KAAK;AAAA,MAChC;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,YACb,OACA,QACA,OACA,OACA,uBAAuB,OACR;AACf,UAAM,cAAc,MAAM,eAAe,OAAO,OAAO,KAAK;AAC5D,UAAM,iCAAiC,aAAa,WAAW,WACzD,WAAW,eAAe,WAAW,YAAY,WAAW;AAElE,UAAM,MAAM,MAAM,eAAe,WAAW,OAAO,QAAQ,OAAO,KAAK;AACvE,QAAI,CAAC,IAAK;AAEV,QAAI,gCAAgC;AAClC;AAAA,IACF;AAEA,QAAI,IAAI,eAAe;AACrB,UAAI,WAAW,aAAa;AAC1B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,eAAe;AAAA,cACb,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,cACjB,kBAAkB,IAAI;AAAA,YACxB;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,UAAU;AAC9B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,cAAc,SAAS;AAAA,UACzB;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,aAAa;AACjC,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,uBAAuB,IAAI,YAAY,aAAa,IAAI,YAAY,aAAa,IAAI,WAAW;AAAA,UACzG,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,aAAa,IAAI;AAAA,UACjB,kBAAkB,IAAI;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH,WAAW,WAAW,aAAa;AACjC,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS,SAAS;AAAA,QAClB;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,SAAS;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,wBAAwB;AAAA,MAC9C;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,OAAO,SAAS;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAE9D,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAEA,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB;AACrB,UAAI,aAA4B;AAEhC,UAAI;AACF,yBAAiB,SAAS,QAAQ,aAAa;AAAA,UAC7C,YAAY,IAAI;AAAA,UAChB,QAAQ,IAAI,UAAU;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UACxE,OAAO,IAAI;AAAA,QACb,CAAC,GAAG;AACF,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,gBAAM,sBAAsB,MAAM,kBAAkB,MAAM,MAAM;AAChE,4BAAkB;AAClB,uBAAa,MAAM,iBAAiB;AAEpC,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,GAAG;AAAA,cACH,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,UACF;AAEA,gBAAM,eAAe,IAAI,eAAe,gBAAgB,YAAY,KAAK;AACzE,gBAAM,yBAAyB,MAAM,4BAA4B,KAAK;AACtE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,OAAO,KAAK;AAEzE,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,MAAM,SAAS,KAAK,EAAE,SAC3B,MAAM,QAAQ,KAAK,IACnB,0BAA0B,MAAM,UAAU;AAAA,YAC9C;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc,GAAG,aAAa,OAAO,UAAU,KAAK,EAAE;AAAA,cAC5E;AAAA,cACA,WAAW,MAAM,MAAM;AAAA,cACvB;AAAA,cACA,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,IAEA,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAE9D,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAEA,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB;AAErB,UAAI;AACF,yBAAiB,SAAS,QAAQ,aAAa;AAAA,UAC7C,YAAY,IAAI;AAAA,UAChB,QAAQ,IAAI,UAAU;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UACxE,OAAO,IAAI;AAAA,QACb,CAAC,GAAG;AACF,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,4BAAkB,MAAM;AAExB,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd,cAAc,MAAM;AAAA,cACpB,cAAc,MAAM;AAAA,cACpB,aAAa,MAAM;AAAA,cACnB,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,UACF;AACA,gBAAM,eAAe,IAAI,eAAe,gBAAgB,MAAM,KAAK;AACnE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,SAAS,KAAK;AAE3E,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,0BAA0B,MAAM,UAAU;AAAA,YACnD;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc;AAAA,cACpC;AAAA,cACA,WAAW,MAAM,QAAQ;AAAA,cACzB,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport { refreshCoverageSnapshot } from '../../query_index/lib/coverage'\nimport { emitDataSyncEvent } from '../events'\nimport type { DataSyncAdapter, DataMapping, ExportBatch, ImportBatch } from './adapter'\nimport { getDataSyncAdapter } from './adapter-registry'\nimport type { SyncRunService } from './sync-run-service'\nimport { SyncRunOwnershipConflictError } from './sync-run-service'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-engine' })\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n  userId?: string | null\n}\n\ntype EngineDeps = {\n  em: EntityManager\n  syncRunService: SyncRunService\n  integrationCredentialsService: CredentialsService\n  integrationLogService: IntegrationLogService\n  integrationStateService?: IntegrationStateService\n  progressService: ProgressService\n}\n\nfunction resolveProviderKey(integrationId: string): string {\n  return getIntegration(integrationId)?.providerKey ?? integrationId\n}\n\nfunction applyImportCounters(batch: ImportBatch): Pick<Required<SyncCounterDelta>, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount'> {\n  let createdCount = 0\n  let updatedCount = 0\n  let skippedCount = 0\n  let failedCount = 0\n\n  for (const item of batch.items) {\n    if (item.action === 'create') createdCount += 1\n    else if (item.action === 'update') updatedCount += 1\n    else if (item.action === 'failed') failedCount += 1\n    else skippedCount += 1\n  }\n\n  return { createdCount, updatedCount, skippedCount, failedCount }\n}\n\ntype SyncCounterDelta = {\n  createdCount?: number\n  updatedCount?: number\n  skippedCount?: number\n  failedCount?: number\n  processedCount: number\n}\n\nfunction applyExportCounters(batch: ExportBatch): SyncCounterDelta {\n  let failedCount = 0\n  let skippedCount = 0\n  let updatedCount = 0\n\n  for (const result of batch.results) {\n    if (result.status === 'error') failedCount += 1\n    else if (result.status === 'skipped') skippedCount += 1\n    else updatedCount += 1\n  }\n\n  return {\n    failedCount,\n    skippedCount,\n    updatedCount,\n    processedCount: batch.results.length,\n  }\n}\n\nexport function createSyncEngine(deps: EngineDeps) {\n  const { syncRunService, integrationCredentialsService, integrationLogService, integrationStateService, progressService } = deps\n\n  async function resolveMapping(adapter: DataSyncAdapter, entityType: string, scope: SyncScope): Promise<DataMapping> {\n    return adapter.getMapping({\n      entityType,\n      scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n    })\n  }\n\n  async function updateProgress(progressJobId: string | null | undefined, processedCount: number, totalCount: number | null, scope: SyncScope): Promise<void> {\n    if (!progressJobId) return\n\n    await progressService.updateProgress(\n      progressJobId,\n      {\n        processedCount,\n        totalCount: totalCount ?? undefined,\n      },\n      {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n    )\n  }\n\n  async function refreshCoverageSnapshots(entityTypes: string[] | undefined, scope: SyncScope): Promise<void> {\n    if (!entityTypes || entityTypes.length === 0) return\n\n    await Promise.allSettled(\n      Array.from(new Set(entityTypes.filter((value) => typeof value === 'string' && value.trim().length > 0)))\n        .map((entityType) => refreshCoverageSnapshot(deps.em, {\n          entityType,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        })),\n    )\n  }\n\n  async function logImportItemFailures(\n    runId: string,\n    integrationId: string,\n    items: ImportBatch['items'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedItems = items.filter((item) => item.action === 'failed')\n    for (const item of failedItems) {\n      const errorMessage = typeof item.data.errorMessage === 'string' && item.data.errorMessage.trim().length > 0\n        ? item.data.errorMessage.trim()\n        : 'Import item failed'\n      const sourceProductUuid = typeof item.data.sourceProductUuid === 'string' && item.data.sourceProductUuid.trim().length > 0\n        ? item.data.sourceProductUuid.trim()\n        : null\n      const sourceIdentifier = typeof item.data.sourceIdentifier === 'string' && item.data.sourceIdentifier.trim().length > 0\n        ? item.data.sourceIdentifier.trim()\n        : null\n      const message = [\n        `Failed to import item ${item.externalId}`,\n        sourceProductUuid ? `(uuid: ${sourceProductUuid})` : null,\n        sourceIdentifier ? `(identifier: ${sourceIdentifier})` : null,\n        `: ${errorMessage}`,\n      ].filter((part) => part !== null).join(' ')\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: item.data,\n        },\n        scope,\n      )\n    }\n  }\n\n  async function logExportItemFailures(\n    runId: string,\n    integrationId: string,\n    results: ExportBatch['results'],\n    scope: SyncScope,\n  ): Promise<void> {\n    const failedResults = results.filter((result) => result.status === 'error' && result.error)\n    for (const result of failedResults) {\n      const label = result.externalId ? `${result.externalId} (id: ${result.localId})` : result.localId\n      const errorMessage = result.error!.split('\\n')[0]\n      const message = `Failed to export item ${label}: ${errorMessage}`\n\n      await integrationLogService.write(\n        {\n          integrationId,\n          runId,\n          level: 'error',\n          message,\n          payload: { kind: 'export-item-failure', summary: result.error },\n        },\n        scope,\n      )\n    }\n  }\n\n  async function writeOperationalLog(params: {\n    integrationId: string\n    runId: string\n    level: 'info' | 'warn' | 'error'\n    message: string\n    scope: SyncScope\n    enabled: boolean\n    payload?: Record<string, unknown>\n  }): Promise<void> {\n    if (!params.enabled) return\n\n    await integrationLogService.write(\n      {\n        integrationId: params.integrationId,\n        runId: params.runId,\n        level: params.level,\n        message: params.message,\n        payload: params.payload,\n      },\n      params.scope,\n    )\n  }\n\n  async function updateOperationalState(params: {\n    integrationId: string\n    status: 'healthy' | 'degraded' | 'unhealthy'\n    scope: SyncScope\n    enabled: boolean\n  }): Promise<void> {\n    if (!params.enabled || !integrationStateService) return\n\n    await integrationStateService.upsert(\n      params.integrationId,\n      {\n        lastHealthStatus: params.status,\n        lastHealthCheckedAt: new Date(),\n      },\n      params.scope,\n    )\n  }\n\n  async function finalizeRun(\n    runId: string,\n    status: 'completed' | 'failed' | 'cancelled',\n    scope: SyncScope,\n    error?: string,\n    operationalTelemetry = false,\n  ): Promise<void> {\n    const existingRun = await syncRunService.getRun(runId, scope)\n    const alreadyFinalizedWithSameStatus = existingRun?.status === status\n      && (status === 'completed' || status === 'failed' || status === 'cancelled')\n\n    const run = await syncRunService.markStatus(runId, status, scope, error)\n    if (!run) return\n\n    if (alreadyFinalizedWithSameStatus) {\n      return\n    }\n\n    if (run.status !== status) {\n      // `markStatus` refuses a terminal -> different-terminal transition and\n      // returns the row unchanged, so the run is already finished under another\n      // delivery of this job. Everything below \u2014 the progress job, the\n      // operational log and the lifecycle event \u2014 would describe the wrong\n      // outcome, and `data_sync.run.failed` is dispatched to tenant webhooks.\n      // A displaced worker stays silent instead.\n      logger.warn('Skipping finalization of a sync run another worker already finalized', {\n        runId,\n        requestedStatus: status,\n        actualStatus: run.status,\n      })\n      return\n    }\n\n    if (run.progressJobId) {\n      if (status === 'completed') {\n        await progressService.completeJob(\n          run.progressJobId,\n          {\n            resultSummary: {\n              createdCount: run.createdCount,\n              updatedCount: run.updatedCount,\n              skippedCount: run.skippedCount,\n              failedCount: run.failedCount,\n              batchesCompleted: run.batchesCompleted,\n            },\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'failed') {\n        await progressService.failJob(\n          run.progressJobId,\n          {\n            errorMessage: error ?? 'Sync run failed',\n          },\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      } else if (status === 'cancelled') {\n        await progressService.markCancelled(\n          run.progressJobId,\n          {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          },\n        )\n      }\n    }\n\n    if (status === 'completed') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'healthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run completed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'completed',\n          summary: `Sync completed with ${run.createdCount} created, ${run.updatedCount} updated, ${run.failedCount} failed.`,\n          createdCount: run.createdCount,\n          updatedCount: run.updatedCount,\n          skippedCount: run.skippedCount,\n          failedCount: run.failedCount,\n          batchesCompleted: run.batchesCompleted,\n        },\n      })\n    } else if (status === 'cancelled') {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'warn',\n        message: 'Sync run cancelled',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'cancelled',\n          summary: 'The sync run was cancelled before completion.',\n        },\n      })\n    } else {\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'unhealthy',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'error',\n        message: error ?? 'Sync run failed',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'failed',\n          summary: error ?? 'The sync run failed.',\n        },\n      })\n    }\n\n    if (status === 'completed') {\n      await emitDataSyncEvent('data_sync.run.completed', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    if (status === 'cancelled') {\n      await emitDataSyncEvent('data_sync.run.cancelled', {\n        runId,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      return\n    }\n\n    await emitDataSyncEvent('data_sync.run.failed', {\n      runId,\n      integrationId: run.integrationId,\n      entityType: run.entityType,\n      direction: run.direction,\n      error: error ?? null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n  }\n\n  return {\n    async runImport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale import job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamImport) {\n        throw new Error(`No import adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Import run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = 0\n      let totalCount: number | null = null\n      let committedBatches = activeRun.batchesCompleted ?? 0\n\n      try {\n        for await (const batch of adapter.streamImport({\n          entityType: run.entityType,\n          cursor: run.cursor ?? undefined,\n          batchSize,\n          credentials,\n          mapping,\n          scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n          runId: run.id,\n        })) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyImportCounters(batch)\n          const processedBatchCount = batch.processedCount ?? batch.items.length\n          processedCount += processedBatchCount\n          totalCount = batch.totalEstimate ?? totalCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              ...delta,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n            committedBatches,\n          )\n          committedBatches += 1\n\n          await updateProgress(run.progressJobId, processedCount, totalCount, scope)\n          await refreshCoverageSnapshots(batch.refreshCoverageEntityTypes, scope)\n          await logImportItemFailures(run.id, run.integrationId, batch.items, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: batch.message?.trim().length\n              ? batch.message.trim()\n              : `Processed import batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount}${totalCount ? ` of ${totalCount}` : ''} rows so far.`,\n              processedCount,\n              batchSize: batch.items.length,\n              processedBatchCount,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding import run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync import failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n\n    async runExport(runId: string, batchSize: number, scope: SyncScope): Promise<void> {\n      const run = await syncRunService.getRun(runId, scope)\n      if (!run) {\n        logger.warn('Skipping stale export job for missing run', { runId })\n        return\n      }\n      if (run.status === 'cancelled') {\n        if (run.progressJobId) {\n          await progressService.markCancelled(run.progressJobId, {\n            tenantId: scope.tenantId,\n            organizationId: scope.organizationId,\n            userId: scope.userId,\n          })\n        }\n        return\n      }\n\n      const providerKey = resolveProviderKey(run.integrationId)\n      const adapter = getDataSyncAdapter(providerKey)\n      if (!adapter?.streamExport) {\n        throw new Error(`No export adapter registered for provider ${providerKey}`)\n      }\n      const operationalTelemetry = adapter.operationalTelemetry === true\n\n      const credentials = await integrationCredentialsService.resolve(run.integrationId, scope)\n      if (!credentials) {\n        throw new Error(`Integration ${run.integrationId} is missing credentials`)\n      }\n\n      // A run already `running` means a stalled job was redelivered, so this is\n      // a resume rather than a first start. Consumers see one `started` event per\n      // delivery either way; the flag is what lets them tell the two apart.\n      const resumed = run.status === 'running'\n      const activeRun = await syncRunService.markStatus(run.id, 'running', scope)\n      if (!activeRun || activeRun.status !== 'running') {\n        return\n      }\n      await emitDataSyncEvent('data_sync.run.started', {\n        runId: run.id,\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        resumed,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      })\n      await updateOperationalState({\n        integrationId: run.integrationId,\n        status: 'degraded',\n        scope,\n        enabled: operationalTelemetry,\n      })\n      await writeOperationalLog({\n        integrationId: run.integrationId,\n        runId: run.id,\n        level: 'info',\n        message: 'Sync run started',\n        scope,\n        enabled: operationalTelemetry,\n        payload: {\n          operationalStatus: 'running',\n          summary: `Export run started for ${run.entityType}.`,\n          entityType: run.entityType,\n          direction: run.direction,\n        },\n      })\n\n      if (run.progressJobId) {\n        await progressService.startJob(run.progressJobId, {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n          userId: scope.userId,\n        })\n      }\n\n      const mapping = await resolveMapping(adapter, run.entityType, scope)\n      let processedCount = 0\n      let committedBatches = activeRun.batchesCompleted ?? 0\n\n      try {\n        for await (const batch of adapter.streamExport({\n          entityType: run.entityType,\n          cursor: run.cursor ?? undefined,\n          batchSize,\n          credentials,\n          mapping,\n          scope: { organizationId: scope.organizationId, tenantId: scope.tenantId },\n          runId: run.id,\n        })) {\n          if (run.progressJobId && await progressService.isCancellationRequested(run.progressJobId, scope.tenantId, scope.organizationId)) {\n            await finalizeRun(run.id, 'cancelled', scope, undefined, operationalTelemetry)\n            return\n          }\n\n          const delta = applyExportCounters(batch)\n          processedCount += delta.processedCount\n\n          await syncRunService.commitBatchProgress(\n            run.id,\n            {\n              createdCount: 0,\n              updatedCount: delta.updatedCount,\n              skippedCount: delta.skippedCount,\n              failedCount: delta.failedCount,\n              batchesCompleted: 1,\n            },\n            batch.cursor,\n            scope,\n            committedBatches,\n          )\n          committedBatches += 1\n          await updateProgress(run.progressJobId, processedCount, null, scope)\n          await logExportItemFailures(run.id, run.integrationId, batch.results, scope)\n\n          await writeOperationalLog({\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'info',\n            message: `Processed export batch ${batch.batchIndex}`,\n            scope,\n            enabled: operationalTelemetry,\n            payload: {\n              operationalStatus: 'running',\n              summary: `Processed ${processedCount} export items so far.`,\n              processedCount,\n              batchSize: batch.results.length,\n              cursor: batch.cursor,\n            },\n          })\n        }\n      } catch (error) {\n        if (error instanceof SyncRunOwnershipConflictError) {\n          logger.warn('Yielding export run to a concurrent worker that already advanced it', {\n            runId: run.id,\n            expectedBatchesCompleted: error.expectedBatchesCompleted,\n          })\n          return\n        }\n        const message = error instanceof Error ? error.message : 'Sync export failed'\n        await integrationLogService.write(\n          {\n            integrationId: run.integrationId,\n            runId: run.id,\n            level: 'error',\n            message,\n          },\n          scope,\n        )\n        await finalizeRun(run.id, 'failed', scope, message, operationalTelemetry)\n        return\n      }\n\n      await finalizeRun(run.id, 'completed', scope, undefined, operationalTelemetry)\n    },\n  }\n}\n\nexport type SyncEngine = ReturnType<typeof createSyncEngine>\n"],
+  "mappings": "AACA,SAAS,sBAAsB;AAK/B,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AAEnC,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAiB3E,SAAS,mBAAmB,eAA+B;AACzD,SAAO,eAAe,aAAa,GAAG,eAAe;AACvD;AAEA,SAAS,oBAAoB,OAAwH;AACnJ,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,MAAI,cAAc;AAElB,aAAW,QAAQ,MAAM,OAAO;AAC9B,QAAI,KAAK,WAAW,SAAU,iBAAgB;AAAA,aACrC,KAAK,WAAW,SAAU,iBAAgB;AAAA,aAC1C,KAAK,WAAW,SAAU,gBAAe;AAAA,QAC7C,iBAAgB;AAAA,EACvB;AAEA,SAAO,EAAE,cAAc,cAAc,cAAc,YAAY;AACjE;AAUA,SAAS,oBAAoB,OAAsC;AACjE,MAAI,cAAc;AAClB,MAAI,eAAe;AACnB,MAAI,eAAe;AAEnB,aAAW,UAAU,MAAM,SAAS;AAClC,QAAI,OAAO,WAAW,QAAS,gBAAe;AAAA,aACrC,OAAO,WAAW,UAAW,iBAAgB;AAAA,QACjD,iBAAgB;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,QAAQ;AAAA,EAChC;AACF;AAEO,SAAS,iBAAiB,MAAkB;AACjD,QAAM,EAAE,gBAAgB,+BAA+B,uBAAuB,yBAAyB,gBAAgB,IAAI;AAE3H,iBAAe,eAAe,SAA0B,YAAoB,OAAwC;AAClH,WAAO,QAAQ,WAAW;AAAA,MACxB;AAAA,MACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,iBAAe,eAAe,eAA0C,gBAAwB,YAA2B,OAAiC;AAC1J,QAAI,CAAC,cAAe;AAEpB,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA;AAAA,QACE;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA;AAAA,QACE,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,yBAAyB,aAAmC,OAAiC;AAC1G,QAAI,CAAC,eAAe,YAAY,WAAW,EAAG;AAE9C,UAAM,QAAQ;AAAA,MACZ,MAAM,KAAK,IAAI,IAAI,YAAY,OAAO,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACpG,IAAI,CAAC,eAAe,wBAAwB,KAAK,IAAI;AAAA,QACpD;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,CAAC;AAAA,IACN;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,OACA,OACe;AACf,UAAM,cAAc,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ;AACnE,eAAW,QAAQ,aAAa;AAC9B,YAAM,eAAe,OAAO,KAAK,KAAK,iBAAiB,YAAY,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,IACtG,KAAK,KAAK,aAAa,KAAK,IAC5B;AACJ,YAAM,oBAAoB,OAAO,KAAK,KAAK,sBAAsB,YAAY,KAAK,KAAK,kBAAkB,KAAK,EAAE,SAAS,IACrH,KAAK,KAAK,kBAAkB,KAAK,IACjC;AACJ,YAAM,mBAAmB,OAAO,KAAK,KAAK,qBAAqB,YAAY,KAAK,KAAK,iBAAiB,KAAK,EAAE,SAAS,IAClH,KAAK,KAAK,iBAAiB,KAAK,IAChC;AACJ,YAAM,UAAU;AAAA,QACd,yBAAyB,KAAK,UAAU;AAAA,QACxC,oBAAoB,UAAU,iBAAiB,MAAM;AAAA,QACrD,mBAAmB,gBAAgB,gBAAgB,MAAM;AAAA,QACzD,KAAK,YAAY;AAAA,MACnB,EAAE,OAAO,CAAC,SAAS,SAAS,IAAI,EAAE,KAAK,GAAG;AAE1C,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,sBACb,OACA,eACA,SACA,OACe;AACf,UAAM,gBAAgB,QAAQ,OAAO,CAAC,WAAW,OAAO,WAAW,WAAW,OAAO,KAAK;AAC1F,eAAW,UAAU,eAAe;AAClC,YAAM,QAAQ,OAAO,aAAa,GAAG,OAAO,UAAU,SAAS,OAAO,OAAO,MAAM,OAAO;AAC1F,YAAM,eAAe,OAAO,MAAO,MAAM,IAAI,EAAE,CAAC;AAChD,YAAM,UAAU,yBAAyB,KAAK,KAAK,YAAY;AAE/D,YAAM,sBAAsB;AAAA,QAC1B;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO;AAAA,UACP;AAAA,UACA,SAAS,EAAE,MAAM,uBAAuB,SAAS,OAAO,MAAM;AAAA,QAChE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,oBAAoB,QAQjB;AAChB,QAAI,CAAC,OAAO,QAAS;AAErB,UAAM,sBAAsB;AAAA,MAC1B;AAAA,QACE,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,uBAAuB,QAKpB;AAChB,QAAI,CAAC,OAAO,WAAW,CAAC,wBAAyB;AAEjD,UAAM,wBAAwB;AAAA,MAC5B,OAAO;AAAA,MACP;AAAA,QACE,kBAAkB,OAAO;AAAA,QACzB,qBAAqB,oBAAI,KAAK;AAAA,MAChC;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,YACb,OACA,QACA,OACA,OACA,uBAAuB,OACR;AACf,UAAM,cAAc,MAAM,eAAe,OAAO,OAAO,KAAK;AAC5D,UAAM,iCAAiC,aAAa,WAAW,WACzD,WAAW,eAAe,WAAW,YAAY,WAAW;AAElE,UAAM,MAAM,MAAM,eAAe,WAAW,OAAO,QAAQ,OAAO,KAAK;AACvE,QAAI,CAAC,IAAK;AAEV,QAAI,gCAAgC;AAClC;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,QAAQ;AAOzB,aAAO,KAAK,wEAAwE;AAAA,QAClF;AAAA,QACA,iBAAiB;AAAA,QACjB,cAAc,IAAI;AAAA,MACpB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,IAAI,eAAe;AACrB,UAAI,WAAW,aAAa;AAC1B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,eAAe;AAAA,cACb,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,cACjB,kBAAkB,IAAI;AAAA,YACxB;AAAA,UACF;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,UAAU;AAC9B,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,cAAc,SAAS;AAAA,UACzB;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF,WAAW,WAAW,aAAa;AACjC,cAAM,gBAAgB;AAAA,UACpB,IAAI;AAAA,UACJ;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,uBAAuB,IAAI,YAAY,aAAa,IAAI,YAAY,aAAa,IAAI,WAAW;AAAA,UACzG,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,cAAc,IAAI;AAAA,UAClB,aAAa,IAAI;AAAA,UACjB,kBAAkB,IAAI;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH,WAAW,WAAW,aAAa;AACjC,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS,SAAS;AAAA,QAClB;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,SAAS;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,QAAI,WAAW,aAAa;AAC1B,YAAM,kBAAkB,2BAA2B;AAAA,QACjD;AAAA,QACA,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,kBAAkB,wBAAwB;AAAA,MAC9C;AAAA,MACA,eAAe,IAAI;AAAA,MACnB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,OAAO,SAAS;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAE9D,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB;AACrB,UAAI,aAA4B;AAChC,UAAI,mBAAmB,UAAU,oBAAoB;AAErD,UAAI;AACF,yBAAiB,SAAS,QAAQ,aAAa;AAAA,UAC7C,YAAY,IAAI;AAAA,UAChB,QAAQ,IAAI,UAAU;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UACxE,OAAO,IAAI;AAAA,QACb,CAAC,GAAG;AACF,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,gBAAM,sBAAsB,MAAM,kBAAkB,MAAM,MAAM;AAChE,4BAAkB;AAClB,uBAAa,MAAM,iBAAiB;AAEpC,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,GAAG;AAAA,cACH,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,YACA;AAAA,UACF;AACA,8BAAoB;AAEpB,gBAAM,eAAe,IAAI,eAAe,gBAAgB,YAAY,KAAK;AACzE,gBAAM,yBAAyB,MAAM,4BAA4B,KAAK;AACtE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,OAAO,KAAK;AAEzE,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,MAAM,SAAS,KAAK,EAAE,SAC3B,MAAM,QAAQ,KAAK,IACnB,0BAA0B,MAAM,UAAU;AAAA,YAC9C;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc,GAAG,aAAa,OAAO,UAAU,KAAK,EAAE;AAAA,cAC5E;AAAA,cACA,WAAW,MAAM,MAAM;AAAA,cACvB;AAAA,cACA,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,IAEA,MAAM,UAAU,OAAe,WAAmB,OAAiC;AACjF,YAAM,MAAM,MAAM,eAAe,OAAO,OAAO,KAAK;AACpD,UAAI,CAAC,KAAK;AACR,eAAO,KAAK,6CAA6C,EAAE,MAAM,CAAC;AAClE;AAAA,MACF;AACA,UAAI,IAAI,WAAW,aAAa;AAC9B,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB,cAAc,IAAI,eAAe;AAAA,YACrD,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAEA,YAAM,cAAc,mBAAmB,IAAI,aAAa;AACxD,YAAM,UAAU,mBAAmB,WAAW;AAC9C,UAAI,CAAC,SAAS,cAAc;AAC1B,cAAM,IAAI,MAAM,6CAA6C,WAAW,EAAE;AAAA,MAC5E;AACA,YAAM,uBAAuB,QAAQ,yBAAyB;AAE9D,YAAM,cAAc,MAAM,8BAA8B,QAAQ,IAAI,eAAe,KAAK;AACxF,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,eAAe,IAAI,aAAa,yBAAyB;AAAA,MAC3E;AAKA,YAAM,UAAU,IAAI,WAAW;AAC/B,YAAM,YAAY,MAAM,eAAe,WAAW,IAAI,IAAI,WAAW,KAAK;AAC1E,UAAI,CAAC,aAAa,UAAU,WAAW,WAAW;AAChD;AAAA,MACF;AACA,YAAM,kBAAkB,yBAAyB;AAAA,QAC/C,OAAO,IAAI;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC;AACD,YAAM,uBAAuB;AAAA,QAC3B,eAAe,IAAI;AAAA,QACnB,QAAQ;AAAA,QACR;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AACD,YAAM,oBAAoB;AAAA,QACxB,eAAe,IAAI;AAAA,QACnB,OAAO,IAAI;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,QACT;AAAA,QACA,SAAS;AAAA,QACT,SAAS;AAAA,UACP,mBAAmB;AAAA,UACnB,SAAS,0BAA0B,IAAI,UAAU;AAAA,UACjD,YAAY,IAAI;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB;AAAA,MACF,CAAC;AAED,UAAI,IAAI,eAAe;AACrB,cAAM,gBAAgB,SAAS,IAAI,eAAe;AAAA,UAChD,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,YAAM,UAAU,MAAM,eAAe,SAAS,IAAI,YAAY,KAAK;AACnE,UAAI,iBAAiB;AACrB,UAAI,mBAAmB,UAAU,oBAAoB;AAErD,UAAI;AACF,yBAAiB,SAAS,QAAQ,aAAa;AAAA,UAC7C,YAAY,IAAI;AAAA,UAChB,QAAQ,IAAI,UAAU;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UACxE,OAAO,IAAI;AAAA,QACb,CAAC,GAAG;AACF,cAAI,IAAI,iBAAiB,MAAM,gBAAgB,wBAAwB,IAAI,eAAe,MAAM,UAAU,MAAM,cAAc,GAAG;AAC/H,kBAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAC7E;AAAA,UACF;AAEA,gBAAM,QAAQ,oBAAoB,KAAK;AACvC,4BAAkB,MAAM;AAExB,gBAAM,eAAe;AAAA,YACnB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd,cAAc,MAAM;AAAA,cACpB,cAAc,MAAM;AAAA,cACpB,aAAa,MAAM;AAAA,cACnB,kBAAkB;AAAA,YACpB;AAAA,YACA,MAAM;AAAA,YACN;AAAA,YACA;AAAA,UACF;AACA,8BAAoB;AACpB,gBAAM,eAAe,IAAI,eAAe,gBAAgB,MAAM,KAAK;AACnE,gBAAM,sBAAsB,IAAI,IAAI,IAAI,eAAe,MAAM,SAAS,KAAK;AAE3E,gBAAM,oBAAoB;AAAA,YACxB,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP,SAAS,0BAA0B,MAAM,UAAU;AAAA,YACnD;AAAA,YACA,SAAS;AAAA,YACT,SAAS;AAAA,cACP,mBAAmB;AAAA,cACnB,SAAS,aAAa,cAAc;AAAA,cACpC;AAAA,cACA,WAAW,MAAM,QAAQ;AAAA,cACzB,QAAQ,MAAM;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,YAAI,iBAAiB,+BAA+B;AAClD,iBAAO,KAAK,uEAAuE;AAAA,YACjF,OAAO,IAAI;AAAA,YACX,0BAA0B,MAAM;AAAA,UAClC,CAAC;AACD;AAAA,QACF;AACA,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,cAAM,sBAAsB;AAAA,UAC1B;AAAA,YACE,eAAe,IAAI;AAAA,YACnB,OAAO,IAAI;AAAA,YACX,OAAO;AAAA,YACP;AAAA,UACF;AAAA,UACA;AAAA,QACF;AACA,cAAM,YAAY,IAAI,IAAI,UAAU,OAAO,SAAS,oBAAoB;AACxE;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,IAAI,aAAa,OAAO,QAAW,oBAAoB;AAAA,IAC/E;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/data_sync/lib/sync-run-service.js

@@ -17,6 +17,14 @@ function buildRunSearchFilter(search) {
   }
   return conditions;
 }
+class SyncRunOwnershipConflictError extends Error {
+  constructor(runId, expectedBatchesCompleted) {
+    super(`[internal] Sync run ${runId} advanced past batch ${expectedBatchesCompleted} under a concurrent worker`);
+    this.runId = runId;
+    this.expectedBatchesCompleted = expectedBatchesCompleted;
+    this.name = "SyncRunOwnershipConflictError";
+  }
+}
 function createSyncRunService(em) {
   async function resolveCursorRow(run, scope) {
     return findOneWithDecryption(
@@ -116,7 +124,11 @@ function createSyncRunService(em) {
             organizationId: scope.organizationId,
             tenantId: scope.tenantId,
             deletedAt: null,
-            status: "pending"
+            // A BullMQ stalled-job redelivery finds the run in `running` after
+            // the previous worker was hard-killed. Treat that transition as an
+            // idempotent claim while still excluding terminal states so a
+            // cancelled or completed run cannot be revived.
+            status: { $in: ["pending", "running"] }
           },
           {
             status,
@@ -142,6 +154,12 @@ function createSyncRunService(em) {
       await em.flush();
       return row;
     },
+    /**
+     * @deprecated Use {@link commitBatchProgress}, which writes counters and
+     * cursor in one transaction behind the ownership fence. This method updates
+     * counters unfenced, so two deliveries of the same job can lose each other's
+     * increments. Kept for external callers only.
+     */
     async updateCounts(runId, delta, scope) {
       const row = await this.getRun(runId, scope);
       if (!row) return null;
@@ -153,6 +171,11 @@ function createSyncRunService(em) {
       await em.flush();
       return row;
     },
+    /**
+     * @deprecated Use {@link commitBatchProgress}. This method advances the
+     * cursor without the ownership fence, so a stale delivery can move the
+     * cursor of a run another worker owns. Kept for external callers only.
+     */
     async updateCursor(runId, cursor, scope) {
       const run = await this.getRun(runId, scope);
       if (!run) return;
@@ -161,11 +184,55 @@ function createSyncRunService(em) {
         () => applyCursorMutation(run, cursorRow, cursor, scope)
       ], { transaction: true });
     },
-    async commitBatchProgress(runId, delta, cursor, scope) {
+    /**
+     * Commits one batch's counters and cursor in a single transaction.
+     *
+     * Passing `expectedBatchesCompleted` fences the write: the run must still be
+     * `running` and still sit on that batch count, or another delivery of the
+     * same BullMQ job owns the run and this commit throws
+     * `SyncRunOwnershipConflictError` and rolls back. Omitting it keeps the
+     * legacy unguarded write for callers outside the engine.
+     *
+     * The fence token is `batchesCompleted` rather than `cursor` because it
+     * advances by construction on every commit. A cursor is a free-form adapter
+     * string that an adapter may legitimately repeat between batches — the
+     * Akeneo products adapter does, between its final page and the
+     * reconciliation batch that follows it — and a repeated token fences
+     * nothing.
+     *
+     * The guard's `UPDATE` also holds the row lock for the rest of the
+     * transaction, so a competing commit blocks here and then re-reads the
+     * advanced count instead of interleaving with this one. That is what lets
+     * the counters below stay a plain read-modify-write against the snapshot
+     * read above: a commit that wins the fence has proven that nothing else
+     * landed since it read.
+     */
+    async commitBatchProgress(runId, delta, cursor, scope, expectedBatchesCompleted) {
       const run = await this.getRun(runId, scope);
       if (!run) return null;
       const cursorRow = await resolveCursorRow(run, scope);
+      const claimRunOwnership = async () => {
+        if ((delta.batchesCompleted ?? 0) < 1) {
+          throw new Error(`[internal] A fenced commit for sync run ${runId} must advance batchesCompleted`);
+        }
+        const owned = await em.nativeUpdate(
+          SyncRun,
+          {
+            id: runId,
+            organizationId: scope.organizationId,
+            tenantId: scope.tenantId,
+            deletedAt: null,
+            status: "running",
+            batchesCompleted: expectedBatchesCompleted
+          },
+          { updatedAt: /* @__PURE__ */ new Date() }
+        );
+        if (owned === 0) {
+          throw new SyncRunOwnershipConflictError(runId, expectedBatchesCompleted ?? 0);
+        }
+      };
       await withAtomicFlush(em, [
+        ...expectedBatchesCompleted === void 0 ? [] : [claimRunOwnership],
         () => {
           run.createdCount += delta.createdCount ?? 0;
           run.updatedCount += delta.updatedCount ?? 0;
@@ -214,6 +281,7 @@ function createSyncRunService(em) {
   };
 }
 export {
+  SyncRunOwnershipConflictError,
   createSyncRunService
 };
 //# sourceMappingURL=sync-run-service.js.map

package/dist/modules/data_sync/lib/sync-run-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/lib/sync-run-service.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { SyncCursor, SyncRun } from '../data/entities'\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction buildRunSearchFilter(search: string): FilterQuery<SyncRun>[] | null {\n  const trimmed = search.trim()\n  if (!trimmed) return null\n  const pattern = `%${escapeLikePattern(trimmed)}%`\n  const conditions: FilterQuery<SyncRun>[] = [\n    { integrationId: { $ilike: pattern } },\n    { entityType: { $ilike: pattern } },\n    { status: { $ilike: pattern } },\n  ]\n  if (UUID_PATTERN.test(trimmed)) {\n    conditions.push({ id: trimmed })\n  }\n  return conditions\n}\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n}\n\nexport function createSyncRunService(em: EntityManager) {\n  async function resolveCursorRow(run: SyncRun, scope: SyncScope): Promise<SyncCursor | null> {\n    return findOneWithDecryption(\n      em,\n      SyncCursor,\n      {\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      undefined,\n      scope,\n    )\n  }\n\n  function applyCursorMutation(run: SyncRun, cursorRow: SyncCursor | null, cursor: string, scope: SyncScope): void {\n    run.cursor = cursor\n    if (cursorRow) {\n      cursorRow.cursor = cursor\n    } else {\n      em.create(SyncCursor, {\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        cursor,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n    }\n  }\n\n  return {\n    async createRun(input: {\n      integrationId: string\n      entityType: string\n      direction: 'import' | 'export'\n      cursor?: string | null\n      triggeredBy?: string | null\n      progressJobId?: string | null\n      jobId?: string | null\n    }, scope: SyncScope): Promise<SyncRun> {\n      const row = em.create(SyncRun, {\n        integrationId: input.integrationId,\n        entityType: input.entityType,\n        direction: input.direction,\n        status: 'pending',\n        cursor: input.cursor,\n        initialCursor: input.cursor,\n        triggeredBy: input.triggeredBy,\n        progressJobId: input.progressJobId,\n        jobId: input.jobId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n\n      await em.persist(row).flush()\n      return row\n    },\n\n    async getRun(runId: string, scope: SyncScope): Promise<SyncRun | null> {\n      return findOneWithDecryption(\n        em,\n        SyncRun,\n        {\n          id: runId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listRuns(query: {\n      integrationId?: string\n      entityType?: string\n      direction?: 'import' | 'export'\n      status?: string\n      search?: string\n      page: number\n      pageSize: number\n    }, scope: SyncScope): Promise<{ items: SyncRun[]; total: number }> {\n      const where: FilterQuery<SyncRun> = {\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      }\n\n      if (query.integrationId) where.integrationId = query.integrationId\n      if (query.entityType) where.entityType = query.entityType\n      if (query.direction) where.direction = query.direction\n      if (query.status) where.status = query.status as SyncRun['status']\n      if (query.search) {\n        const searchConditions = buildRunSearchFilter(query.search)\n        if (searchConditions) where.$or = searchConditions\n      }\n\n      const [items, total] = await findAndCountWithDecryption(\n        em,\n        SyncRun,\n        where,\n        {\n          orderBy: { createdAt: 'DESC' },\n          limit: query.pageSize,\n          offset: (query.page - 1) * query.pageSize,\n        },\n        scope,\n      )\n\n      return { items, total }\n    },\n\n    async markStatus(runId: string, status: SyncRun['status'], scope: SyncScope, error?: string): Promise<SyncRun | null> {\n      if (status === 'running') {\n        const updated = await em.nativeUpdate(\n          SyncRun,\n          {\n            id: runId,\n            organizationId: scope.organizationId,\n            tenantId: scope.tenantId,\n            deletedAt: null,\n            status: 'pending',\n          },\n          {\n            status,\n            ...(error !== undefined ? { lastError: error } : {}),\n            updatedAt: new Date(),\n          },\n        )\n        if (updated === 0) return null\n        const row = await this.getRun(runId, scope)\n        if (row && typeof em.refresh === 'function') {\n          await em.refresh(row)\n        }\n        return row\n      }\n\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n      const isTerminal = row.status === 'completed' || row.status === 'failed' || row.status === 'cancelled'\n      if (isTerminal && row.status !== status) {\n        return row\n      }\n      row.status = status\n      if (error !== undefined) row.lastError = error\n      await em.flush()\n      return row\n    },\n\n    async updateCounts(\n      runId: string,\n      delta: Partial<Pick<SyncRun, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount' | 'batchesCompleted'>>,\n      scope: SyncScope,\n    ): Promise<SyncRun | null> {\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n\n      row.createdCount += delta.createdCount ?? 0\n      row.updatedCount += delta.updatedCount ?? 0\n      row.skippedCount += delta.skippedCount ?? 0\n      row.failedCount += delta.failedCount ?? 0\n      row.batchesCompleted += delta.batchesCompleted ?? 0\n      await em.flush()\n      return row\n    },\n\n    async updateCursor(runId: string, cursor: string, scope: SyncScope): Promise<void> {\n      const run = await this.getRun(runId, scope)\n      if (!run) return\n      const cursorRow = await resolveCursorRow(run, scope)\n      await withAtomicFlush(em, [\n        () => applyCursorMutation(run, cursorRow, cursor, scope),\n      ], { transaction: true })\n    },\n\n    async commitBatchProgress(\n      runId: string,\n      delta: Partial<Pick<SyncRun, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount' | 'batchesCompleted'>>,\n      cursor: string,\n      scope: SyncScope,\n    ): Promise<SyncRun | null> {\n      const run = await this.getRun(runId, scope)\n      if (!run) return null\n      const cursorRow = await resolveCursorRow(run, scope)\n      await withAtomicFlush(em, [\n        () => {\n          run.createdCount += delta.createdCount ?? 0\n          run.updatedCount += delta.updatedCount ?? 0\n          run.skippedCount += delta.skippedCount ?? 0\n          run.failedCount += delta.failedCount ?? 0\n          run.batchesCompleted += delta.batchesCompleted ?? 0\n          applyCursorMutation(run, cursorRow, cursor, scope)\n        },\n      ], { transaction: true })\n      return run\n    },\n\n    async resolveCursor(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<string | null> {\n      const row = await findOneWithDecryption(\n        em,\n        SyncCursor,\n        {\n        integrationId,\n        entityType,\n        direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        },\n        undefined,\n        scope,\n      )\n      return row?.cursor ?? null\n    },\n\n    async findRunningOverlap(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<SyncRun | null> {\n      const [run] = await findWithDecryption(\n        em,\n        SyncRun,\n        {\n          integrationId,\n          entityType,\n          direction,\n          status: { $in: ['pending', 'running'] },\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        { limit: 1 },\n        scope,\n      )\n      return run ?? null\n    },\n  }\n}\n\nexport type SyncRunService = ReturnType<typeof createSyncRunService>\n"],
-  "mappings": "AACA,SAAS,4BAA4B,uBAAuB,0BAA0B;AACtF,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,YAAY,eAAe;AAEpC,MAAM,eAAe;AAErB,SAAS,qBAAqB,QAA+C;AAC3E,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,IAAI,kBAAkB,OAAO,CAAC;AAC9C,QAAM,aAAqC;AAAA,IACzC,EAAE,eAAe,EAAE,QAAQ,QAAQ,EAAE;AAAA,IACrC,EAAE,YAAY,EAAE,QAAQ,QAAQ,EAAE;AAAA,IAClC,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE;AAAA,EAChC;AACA,MAAI,aAAa,KAAK,OAAO,GAAG;AAC9B,eAAW,KAAK,EAAE,IAAI,QAAQ,CAAC;AAAA,EACjC;AACA,SAAO;AACT;AAOO,SAAS,qBAAqB,IAAmB;AACtD,iBAAe,iBAAiB,KAAc,OAA8C;AAC1F,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,QACE,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBAAoB,KAAc,WAA8B,QAAgB,OAAwB;AAC/G,QAAI,SAAS;AACb,QAAI,WAAW;AACb,gBAAU,SAAS;AAAA,IACrB,OAAO;AACL,SAAG,OAAO,YAAY;AAAA,QACpB,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAQb,OAAoC;AACrC,YAAM,MAAM,GAAG,OAAO,SAAS;AAAA,QAC7B,eAAe,MAAM;AAAA,QACrB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ,MAAM;AAAA,QACd,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AAED,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,OAA2C;AACrE,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,SAAS,OAQZ,OAAgE;AACjE,YAAM,QAA8B;AAAA,QAClC,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAEA,UAAI,MAAM,cAAe,OAAM,gBAAgB,MAAM;AACrD,UAAI,MAAM,WAAY,OAAM,aAAa,MAAM;AAC/C,UAAI,MAAM,UAAW,OAAM,YAAY,MAAM;AAC7C,UAAI,MAAM,OAAQ,OAAM,SAAS,MAAM;AACvC,UAAI,MAAM,QAAQ;AAChB,cAAM,mBAAmB,qBAAqB,MAAM,MAAM;AAC1D,YAAI,iBAAkB,OAAM,MAAM;AAAA,MACpC;AAEA,YAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,QAC3B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO,MAAM;AAAA,UACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MACF;AAEA,aAAO,EAAE,OAAO,MAAM;AAAA,IACxB;AAAA,IAEA,MAAM,WAAW,OAAe,QAA2B,OAAkB,OAAyC;AACpH,UAAI,WAAW,WAAW;AACxB,cAAM,UAAU,MAAM,GAAG;AAAA,UACvB;AAAA,UACA;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,MAAM;AAAA,YACtB,UAAU,MAAM;AAAA,YAChB,WAAW;AAAA,YACX,QAAQ;AAAA,UACV;AAAA,UACA;AAAA,YACE;AAAA,YACA,GAAI,UAAU,SAAY,EAAE,WAAW,MAAM,IAAI,CAAC;AAAA,YAClD,WAAW,oBAAI,KAAK;AAAA,UACtB;AAAA,QACF;AACA,YAAI,YAAY,EAAG,QAAO;AAC1B,cAAMA,OAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,YAAIA,QAAO,OAAO,GAAG,YAAY,YAAY;AAC3C,gBAAM,GAAG,QAAQA,IAAG;AAAA,QACtB;AACA,eAAOA;AAAA,MACT;AAEA,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,aAAa,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW;AAC3F,UAAI,cAAc,IAAI,WAAW,QAAQ;AACvC,eAAO;AAAA,MACT;AACA,UAAI,SAAS;AACb,UAAI,UAAU,OAAW,KAAI,YAAY;AACzC,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aACJ,OACA,OACA,OACyB;AACzB,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AAEjB,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,eAAe,MAAM,eAAe;AACxC,UAAI,oBAAoB,MAAM,oBAAoB;AAClD,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,OAAe,QAAgB,OAAiC;AACjF,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK;AACV,YAAM,YAAY,MAAM,iBAAiB,KAAK,KAAK;AACnD,YAAM,gBAAgB,IAAI;AAAA,QACxB,MAAM,oBAAoB,KAAK,WAAW,QAAQ,KAAK;AAAA,MACzD,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,IAC1B;AAAA,IAEA,MAAM,oBACJ,OACA,OACA,QACA,OACyB;AACzB,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,YAAY,MAAM,iBAAiB,KAAK,KAAK;AACnD,YAAM,gBAAgB,IAAI;AAAA,QACxB,MAAM;AACJ,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,eAAe,MAAM,eAAe;AACxC,cAAI,oBAAoB,MAAM,oBAAoB;AAClD,8BAAoB,KAAK,WAAW,QAAQ,KAAK;AAAA,QACnD;AAAA,MACF,GAAG,EAAE,aAAa,KAAK,CAAC;AACxB,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,eAAuB,YAAoB,WAAgC,OAA0C;AACvI,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,KAAK,UAAU;AAAA,IACxB;AAAA,IAEA,MAAM,mBAAmB,eAAuB,YAAoB,WAAgC,OAA2C;AAC7I,YAAM,CAAC,GAAG,IAAI,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,UACtC,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,OAAO,EAAE;AAAA,QACX;AAAA,MACF;AACA,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { SyncCursor, SyncRun } from '../data/entities'\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction buildRunSearchFilter(search: string): FilterQuery<SyncRun>[] | null {\n  const trimmed = search.trim()\n  if (!trimmed) return null\n  const pattern = `%${escapeLikePattern(trimmed)}%`\n  const conditions: FilterQuery<SyncRun>[] = [\n    { integrationId: { $ilike: pattern } },\n    { entityType: { $ilike: pattern } },\n    { status: { $ilike: pattern } },\n  ]\n  if (UUID_PATTERN.test(trimmed)) {\n    conditions.push({ id: trimmed })\n  }\n  return conditions\n}\n\ntype SyncScope = {\n  organizationId: string\n  tenantId: string\n}\n\n/**\n * Raised when a batch commit loses the ownership compare-and-swap, meaning\n * another delivery of the same job advanced the run while this worker was\n * streaming.\n *\n * BullMQ guarantees at-least-once delivery: a job whose lock is not renewed is\n * redelivered under the SAME job id, whether the previous worker died or is only\n * blocked. No identity token can tell those apart, so ownership is enforced here\n * \u2014 on the write that matters \u2014 instead of at claim time. The loser aborts and\n * leaves the run to the worker that is still making progress.\n */\nexport class SyncRunOwnershipConflictError extends Error {\n  constructor(\n    readonly runId: string,\n    readonly expectedBatchesCompleted: number,\n  ) {\n    super(`[internal] Sync run ${runId} advanced past batch ${expectedBatchesCompleted} under a concurrent worker`)\n    this.name = 'SyncRunOwnershipConflictError'\n  }\n}\n\nexport function createSyncRunService(em: EntityManager) {\n  async function resolveCursorRow(run: SyncRun, scope: SyncScope): Promise<SyncCursor | null> {\n    return findOneWithDecryption(\n      em,\n      SyncCursor,\n      {\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      },\n      undefined,\n      scope,\n    )\n  }\n\n  function applyCursorMutation(run: SyncRun, cursorRow: SyncCursor | null, cursor: string, scope: SyncScope): void {\n    run.cursor = cursor\n    if (cursorRow) {\n      cursorRow.cursor = cursor\n    } else {\n      em.create(SyncCursor, {\n        integrationId: run.integrationId,\n        entityType: run.entityType,\n        direction: run.direction,\n        cursor,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n    }\n  }\n\n  return {\n    async createRun(input: {\n      integrationId: string\n      entityType: string\n      direction: 'import' | 'export'\n      cursor?: string | null\n      triggeredBy?: string | null\n      progressJobId?: string | null\n      jobId?: string | null\n    }, scope: SyncScope): Promise<SyncRun> {\n      const row = em.create(SyncRun, {\n        integrationId: input.integrationId,\n        entityType: input.entityType,\n        direction: input.direction,\n        status: 'pending',\n        cursor: input.cursor,\n        initialCursor: input.cursor,\n        triggeredBy: input.triggeredBy,\n        progressJobId: input.progressJobId,\n        jobId: input.jobId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n\n      await em.persist(row).flush()\n      return row\n    },\n\n    async getRun(runId: string, scope: SyncScope): Promise<SyncRun | null> {\n      return findOneWithDecryption(\n        em,\n        SyncRun,\n        {\n          id: runId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listRuns(query: {\n      integrationId?: string\n      entityType?: string\n      direction?: 'import' | 'export'\n      status?: string\n      search?: string\n      page: number\n      pageSize: number\n    }, scope: SyncScope): Promise<{ items: SyncRun[]; total: number }> {\n      const where: FilterQuery<SyncRun> = {\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      }\n\n      if (query.integrationId) where.integrationId = query.integrationId\n      if (query.entityType) where.entityType = query.entityType\n      if (query.direction) where.direction = query.direction\n      if (query.status) where.status = query.status as SyncRun['status']\n      if (query.search) {\n        const searchConditions = buildRunSearchFilter(query.search)\n        if (searchConditions) where.$or = searchConditions\n      }\n\n      const [items, total] = await findAndCountWithDecryption(\n        em,\n        SyncRun,\n        where,\n        {\n          orderBy: { createdAt: 'DESC' },\n          limit: query.pageSize,\n          offset: (query.page - 1) * query.pageSize,\n        },\n        scope,\n      )\n\n      return { items, total }\n    },\n\n    async markStatus(runId: string, status: SyncRun['status'], scope: SyncScope, error?: string): Promise<SyncRun | null> {\n      if (status === 'running') {\n        const updated = await em.nativeUpdate(\n          SyncRun,\n          {\n            id: runId,\n            organizationId: scope.organizationId,\n            tenantId: scope.tenantId,\n            deletedAt: null,\n            // A BullMQ stalled-job redelivery finds the run in `running` after\n            // the previous worker was hard-killed. Treat that transition as an\n            // idempotent claim while still excluding terminal states so a\n            // cancelled or completed run cannot be revived.\n            status: { $in: ['pending', 'running'] },\n          },\n          {\n            status,\n            ...(error !== undefined ? { lastError: error } : {}),\n            updatedAt: new Date(),\n          },\n        )\n        if (updated === 0) return null\n        const row = await this.getRun(runId, scope)\n        if (row && typeof em.refresh === 'function') {\n          await em.refresh(row)\n        }\n        return row\n      }\n\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n      const isTerminal = row.status === 'completed' || row.status === 'failed' || row.status === 'cancelled'\n      if (isTerminal && row.status !== status) {\n        return row\n      }\n      row.status = status\n      if (error !== undefined) row.lastError = error\n      await em.flush()\n      return row\n    },\n\n    /**\n     * @deprecated Use {@link commitBatchProgress}, which writes counters and\n     * cursor in one transaction behind the ownership fence. This method updates\n     * counters unfenced, so two deliveries of the same job can lose each other's\n     * increments. Kept for external callers only.\n     */\n    async updateCounts(\n      runId: string,\n      delta: Partial<Pick<SyncRun, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount' | 'batchesCompleted'>>,\n      scope: SyncScope,\n    ): Promise<SyncRun | null> {\n      const row = await this.getRun(runId, scope)\n      if (!row) return null\n\n      row.createdCount += delta.createdCount ?? 0\n      row.updatedCount += delta.updatedCount ?? 0\n      row.skippedCount += delta.skippedCount ?? 0\n      row.failedCount += delta.failedCount ?? 0\n      row.batchesCompleted += delta.batchesCompleted ?? 0\n      await em.flush()\n      return row\n    },\n\n    /**\n     * @deprecated Use {@link commitBatchProgress}. This method advances the\n     * cursor without the ownership fence, so a stale delivery can move the\n     * cursor of a run another worker owns. Kept for external callers only.\n     */\n    async updateCursor(runId: string, cursor: string, scope: SyncScope): Promise<void> {\n      const run = await this.getRun(runId, scope)\n      if (!run) return\n      const cursorRow = await resolveCursorRow(run, scope)\n      await withAtomicFlush(em, [\n        () => applyCursorMutation(run, cursorRow, cursor, scope),\n      ], { transaction: true })\n    },\n\n    /**\n     * Commits one batch's counters and cursor in a single transaction.\n     *\n     * Passing `expectedBatchesCompleted` fences the write: the run must still be\n     * `running` and still sit on that batch count, or another delivery of the\n     * same BullMQ job owns the run and this commit throws\n     * `SyncRunOwnershipConflictError` and rolls back. Omitting it keeps the\n     * legacy unguarded write for callers outside the engine.\n     *\n     * The fence token is `batchesCompleted` rather than `cursor` because it\n     * advances by construction on every commit. A cursor is a free-form adapter\n     * string that an adapter may legitimately repeat between batches \u2014 the\n     * Akeneo products adapter does, between its final page and the\n     * reconciliation batch that follows it \u2014 and a repeated token fences\n     * nothing.\n     *\n     * The guard's `UPDATE` also holds the row lock for the rest of the\n     * transaction, so a competing commit blocks here and then re-reads the\n     * advanced count instead of interleaving with this one. That is what lets\n     * the counters below stay a plain read-modify-write against the snapshot\n     * read above: a commit that wins the fence has proven that nothing else\n     * landed since it read.\n     */\n    async commitBatchProgress(\n      runId: string,\n      delta: Partial<Pick<SyncRun, 'createdCount' | 'updatedCount' | 'skippedCount' | 'failedCount' | 'batchesCompleted'>>,\n      cursor: string,\n      scope: SyncScope,\n      expectedBatchesCompleted?: number,\n    ): Promise<SyncRun | null> {\n      const run = await this.getRun(runId, scope)\n      if (!run) return null\n      const cursorRow = await resolveCursorRow(run, scope)\n      const claimRunOwnership = async () => {\n        if ((delta.batchesCompleted ?? 0) < 1) {\n          throw new Error(`[internal] A fenced commit for sync run ${runId} must advance batchesCompleted`)\n        }\n        const owned = await em.nativeUpdate(\n          SyncRun,\n          {\n            id: runId,\n            organizationId: scope.organizationId,\n            tenantId: scope.tenantId,\n            deletedAt: null,\n            status: 'running',\n            batchesCompleted: expectedBatchesCompleted,\n          },\n          { updatedAt: new Date() },\n        )\n        if (owned === 0) {\n          throw new SyncRunOwnershipConflictError(runId, expectedBatchesCompleted ?? 0)\n        }\n      }\n      await withAtomicFlush(em, [\n        ...(expectedBatchesCompleted === undefined ? [] : [claimRunOwnership]),\n        () => {\n          run.createdCount += delta.createdCount ?? 0\n          run.updatedCount += delta.updatedCount ?? 0\n          run.skippedCount += delta.skippedCount ?? 0\n          run.failedCount += delta.failedCount ?? 0\n          run.batchesCompleted += delta.batchesCompleted ?? 0\n          applyCursorMutation(run, cursorRow, cursor, scope)\n        },\n      ], { transaction: true })\n      return run\n    },\n\n    async resolveCursor(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<string | null> {\n      const row = await findOneWithDecryption(\n        em,\n        SyncCursor,\n        {\n        integrationId,\n        entityType,\n        direction,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        },\n        undefined,\n        scope,\n      )\n      return row?.cursor ?? null\n    },\n\n    async findRunningOverlap(integrationId: string, entityType: string, direction: 'import' | 'export', scope: SyncScope): Promise<SyncRun | null> {\n      const [run] = await findWithDecryption(\n        em,\n        SyncRun,\n        {\n          integrationId,\n          entityType,\n          direction,\n          status: { $in: ['pending', 'running'] },\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        { limit: 1 },\n        scope,\n      )\n      return run ?? null\n    },\n  }\n}\n\nexport type SyncRunService = ReturnType<typeof createSyncRunService>\n"],
+  "mappings": "AACA,SAAS,4BAA4B,uBAAuB,0BAA0B;AACtF,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,YAAY,eAAe;AAEpC,MAAM,eAAe;AAErB,SAAS,qBAAqB,QAA+C;AAC3E,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,IAAI,kBAAkB,OAAO,CAAC;AAC9C,QAAM,aAAqC;AAAA,IACzC,EAAE,eAAe,EAAE,QAAQ,QAAQ,EAAE;AAAA,IACrC,EAAE,YAAY,EAAE,QAAQ,QAAQ,EAAE;AAAA,IAClC,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE;AAAA,EAChC;AACA,MAAI,aAAa,KAAK,OAAO,GAAG;AAC9B,eAAW,KAAK,EAAE,IAAI,QAAQ,CAAC;AAAA,EACjC;AACA,SAAO;AACT;AAkBO,MAAM,sCAAsC,MAAM;AAAA,EACvD,YACW,OACA,0BACT;AACA,UAAM,uBAAuB,KAAK,wBAAwB,wBAAwB,4BAA4B;AAHrG;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,qBAAqB,IAAmB;AACtD,iBAAe,iBAAiB,KAAc,OAA8C;AAC1F,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,QACE,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBAAoB,KAAc,WAA8B,QAAgB,OAAwB;AAC/G,QAAI,SAAS;AACb,QAAI,WAAW;AACb,gBAAU,SAAS;AAAA,IACrB,OAAO;AACL,SAAG,OAAO,YAAY;AAAA,QACpB,eAAe,IAAI;AAAA,QACnB,YAAY,IAAI;AAAA,QAChB,WAAW,IAAI;AAAA,QACf;AAAA,QACA,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,UAAU,OAQb,OAAoC;AACrC,YAAM,MAAM,GAAG,OAAO,SAAS;AAAA,QAC7B,eAAe,MAAM;AAAA,QACrB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ,MAAM;AAAA,QACd,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AAED,YAAM,GAAG,QAAQ,GAAG,EAAE,MAAM;AAC5B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,OAA2C;AACrE,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI;AAAA,UACJ,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,SAAS,OAQZ,OAAgE;AACjE,YAAM,QAA8B;AAAA,QAClC,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAEA,UAAI,MAAM,cAAe,OAAM,gBAAgB,MAAM;AACrD,UAAI,MAAM,WAAY,OAAM,aAAa,MAAM;AAC/C,UAAI,MAAM,UAAW,OAAM,YAAY,MAAM;AAC7C,UAAI,MAAM,OAAQ,OAAM,SAAS,MAAM;AACvC,UAAI,MAAM,QAAQ;AAChB,cAAM,mBAAmB,qBAAqB,MAAM,MAAM;AAC1D,YAAI,iBAAkB,OAAM,MAAM;AAAA,MACpC;AAEA,YAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,QAC3B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO,MAAM;AAAA,UACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MACF;AAEA,aAAO,EAAE,OAAO,MAAM;AAAA,IACxB;AAAA,IAEA,MAAM,WAAW,OAAe,QAA2B,OAAkB,OAAyC;AACpH,UAAI,WAAW,WAAW;AACxB,cAAM,UAAU,MAAM,GAAG;AAAA,UACvB;AAAA,UACA;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,MAAM;AAAA,YACtB,UAAU,MAAM;AAAA,YAChB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,YAKX,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,UACxC;AAAA,UACA;AAAA,YACE;AAAA,YACA,GAAI,UAAU,SAAY,EAAE,WAAW,MAAM,IAAI,CAAC;AAAA,YAClD,WAAW,oBAAI,KAAK;AAAA,UACtB;AAAA,QACF;AACA,YAAI,YAAY,EAAG,QAAO;AAC1B,cAAMA,OAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,YAAIA,QAAO,OAAO,GAAG,YAAY,YAAY;AAC3C,gBAAM,GAAG,QAAQA,IAAG;AAAA,QACtB;AACA,eAAOA;AAAA,MACT;AAEA,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,aAAa,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW;AAC3F,UAAI,cAAc,IAAI,WAAW,QAAQ;AACvC,eAAO;AAAA,MACT;AACA,UAAI,SAAS;AACb,UAAI,UAAU,OAAW,KAAI,YAAY;AACzC,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,MAAM,aACJ,OACA,OACA,OACyB;AACzB,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AAEjB,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,gBAAgB,MAAM,gBAAgB;AAC1C,UAAI,eAAe,MAAM,eAAe;AACxC,UAAI,oBAAoB,MAAM,oBAAoB;AAClD,YAAM,GAAG,MAAM;AACf,aAAO;AAAA,IACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,aAAa,OAAe,QAAgB,OAAiC;AACjF,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK;AACV,YAAM,YAAY,MAAM,iBAAiB,KAAK,KAAK;AACnD,YAAM,gBAAgB,IAAI;AAAA,QACxB,MAAM,oBAAoB,KAAK,WAAW,QAAQ,KAAK;AAAA,MACzD,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,IAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyBA,MAAM,oBACJ,OACA,OACA,QACA,OACA,0BACyB;AACzB,YAAM,MAAM,MAAM,KAAK,OAAO,OAAO,KAAK;AAC1C,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,YAAY,MAAM,iBAAiB,KAAK,KAAK;AACnD,YAAM,oBAAoB,YAAY;AACpC,aAAK,MAAM,oBAAoB,KAAK,GAAG;AACrC,gBAAM,IAAI,MAAM,2CAA2C,KAAK,gCAAgC;AAAA,QAClG;AACA,cAAM,QAAQ,MAAM,GAAG;AAAA,UACrB;AAAA,UACA;AAAA,YACE,IAAI;AAAA,YACJ,gBAAgB,MAAM;AAAA,YACtB,UAAU,MAAM;AAAA,YAChB,WAAW;AAAA,YACX,QAAQ;AAAA,YACR,kBAAkB;AAAA,UACpB;AAAA,UACA,EAAE,WAAW,oBAAI,KAAK,EAAE;AAAA,QAC1B;AACA,YAAI,UAAU,GAAG;AACf,gBAAM,IAAI,8BAA8B,OAAO,4BAA4B,CAAC;AAAA,QAC9E;AAAA,MACF;AACA,YAAM,gBAAgB,IAAI;AAAA,QACxB,GAAI,6BAA6B,SAAY,CAAC,IAAI,CAAC,iBAAiB;AAAA,QACpE,MAAM;AACJ,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,gBAAgB,MAAM,gBAAgB;AAC1C,cAAI,eAAe,MAAM,eAAe;AACxC,cAAI,oBAAoB,MAAM,oBAAoB;AAClD,8BAAoB,KAAK,WAAW,QAAQ,KAAK;AAAA,QACnD;AAAA,MACF,GAAG,EAAE,aAAa,KAAK,CAAC;AACxB,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,eAAuB,YAAoB,WAAgC,OAA0C;AACvI,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,KAAK,UAAU;AAAA,IACxB;AAAA,IAEA,MAAM,mBAAmB,eAAuB,YAAoB,WAAgC,OAA2C;AAC7I,YAAM,CAAC,GAAG,IAAI,MAAM;AAAA,QAClB;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,EAAE,KAAK,CAAC,WAAW,SAAS,EAAE;AAAA,UACtC,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA,EAAE,OAAO,EAAE;AAAA,QACX;AAAA,MACF;AACA,aAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": ["row"]
 }

package/dist/modules/data_sync/workers/sync-export.js

@@ -1,9 +1,16 @@
+import {
+  DATA_SYNC_EXPORT_QUEUE,
+  DATA_SYNC_LOCK_DURATION_MS,
+  DATA_SYNC_MAX_STALLED_COUNT
+} from "../lib/queue-policy.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("data_sync").child({ component: "sync-export" });
 const metadata = {
-  queue: "data-sync-export",
+  queue: DATA_SYNC_EXPORT_QUEUE,
   id: "data-sync:export",
-  concurrency: 5
+  concurrency: 5,
+  lockDuration: DATA_SYNC_LOCK_DURATION_MS,
+  maxStalledCount: DATA_SYNC_MAX_STALLED_COUNT
 };
 async function handle(job, ctx) {
   try {

package/dist/modules/data_sync/workers/sync-export.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/workers/sync-export.ts"],
-  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport type { SyncEngine } from '../lib/sync-engine'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-export' })\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'data-sync-export',\n  id: 'data-sync:export',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n    await engine.runExport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Data sync export worker failed'\n    const errorStack = error instanceof Error ? error.stack : undefined\n\n    try {\n      const syncRunService = ctx.resolve<SyncRunService>('dataSyncRunService')\n      const progressService = ctx.resolve<ProgressService>('progressService')\n      const run = await syncRunService.getRun(job.payload.runId, job.payload.scope)\n\n      if (run && run.status !== 'completed' && run.status !== 'failed' && run.status !== 'cancelled') {\n        await syncRunService.markStatus(run.id, 'failed', job.payload.scope, message)\n        if (run.progressJobId) {\n          await progressService.failJob(\n            run.progressJobId,\n            {\n              errorMessage: message,\n              errorStack,\n            },\n            job.payload.scope,\n          )\n        }\n      }\n    } catch (finalizeError) {\n      logger.error('Failed to finalize crashed export worker job', { err: finalizeError })\n    }\n\n    throw error\n  }\n}\n"],
-  "mappings": "AAIA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAYpE,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,MAAI;AACF,UAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,UAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,UAAM,aAAa,iBAAiB,QAAQ,MAAM,QAAQ;AAE1D,QAAI;AACF,YAAM,iBAAiB,IAAI,QAAwB,oBAAoB;AACvE,YAAM,kBAAkB,IAAI,QAAyB,iBAAiB;AACtE,YAAM,MAAM,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAE5E,UAAI,OAAO,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW,aAAa;AAC9F,cAAM,eAAe,WAAW,IAAI,IAAI,UAAU,IAAI,QAAQ,OAAO,OAAO;AAC5E,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB;AAAA,YACpB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd;AAAA,YACF;AAAA,YACA,IAAI,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,eAAe;AACtB,aAAO,MAAM,gDAAgD,EAAE,KAAK,cAAc,CAAC;AAAA,IACrF;AAEA,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport type { SyncEngine } from '../lib/sync-engine'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport {\n  DATA_SYNC_EXPORT_QUEUE,\n  DATA_SYNC_LOCK_DURATION_MS,\n  DATA_SYNC_MAX_STALLED_COUNT,\n} from '../lib/queue-policy'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-export' })\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: DATA_SYNC_EXPORT_QUEUE,\n  id: 'data-sync:export',\n  concurrency: 5,\n  lockDuration: DATA_SYNC_LOCK_DURATION_MS,\n  maxStalledCount: DATA_SYNC_MAX_STALLED_COUNT,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n    await engine.runExport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Data sync export worker failed'\n    const errorStack = error instanceof Error ? error.stack : undefined\n\n    try {\n      const syncRunService = ctx.resolve<SyncRunService>('dataSyncRunService')\n      const progressService = ctx.resolve<ProgressService>('progressService')\n      const run = await syncRunService.getRun(job.payload.runId, job.payload.scope)\n\n      if (run && run.status !== 'completed' && run.status !== 'failed' && run.status !== 'cancelled') {\n        await syncRunService.markStatus(run.id, 'failed', job.payload.scope, message)\n        if (run.progressJobId) {\n          await progressService.failJob(\n            run.progressJobId,\n            {\n              errorMessage: message,\n              errorStack,\n            },\n            job.payload.scope,\n          )\n        }\n      }\n    } catch (finalizeError) {\n      logger.error('Failed to finalize crashed export worker job', { err: finalizeError })\n    }\n\n    throw error\n  }\n}\n"],
+  "mappings": "AAIA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAYpE,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AAAA,EACb,cAAc;AAAA,EACd,iBAAiB;AACnB;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,MAAI;AACF,UAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,UAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,UAAM,aAAa,iBAAiB,QAAQ,MAAM,QAAQ;AAE1D,QAAI;AACF,YAAM,iBAAiB,IAAI,QAAwB,oBAAoB;AACvE,YAAM,kBAAkB,IAAI,QAAyB,iBAAiB;AACtE,YAAM,MAAM,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAE5E,UAAI,OAAO,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW,aAAa;AAC9F,cAAM,eAAe,WAAW,IAAI,IAAI,UAAU,IAAI,QAAQ,OAAO,OAAO;AAC5E,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB;AAAA,YACpB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd;AAAA,YACF;AAAA,YACA,IAAI,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,eAAe;AACtB,aAAO,MAAM,gDAAgD,EAAE,KAAK,cAAc,CAAC;AAAA,IACrF;AAEA,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/data_sync/workers/sync-import.js

@@ -1,9 +1,16 @@
+import {
+  DATA_SYNC_IMPORT_QUEUE,
+  DATA_SYNC_LOCK_DURATION_MS,
+  DATA_SYNC_MAX_STALLED_COUNT
+} from "../lib/queue-policy.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("data_sync").child({ component: "sync-import" });
 const metadata = {
-  queue: "data-sync-import",
+  queue: DATA_SYNC_IMPORT_QUEUE,
   id: "data-sync:import",
-  concurrency: 5
+  concurrency: 5,
+  lockDuration: DATA_SYNC_LOCK_DURATION_MS,
+  maxStalledCount: DATA_SYNC_MAX_STALLED_COUNT
 };
 async function handle(job, ctx) {
   try {

package/dist/modules/data_sync/workers/sync-import.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/workers/sync-import.ts"],
-  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport type { SyncEngine } from '../lib/sync-engine'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-import' })\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: 'data-sync-import',\n  id: 'data-sync:import',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n    await engine.runImport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Data sync import worker failed'\n    const errorStack = error instanceof Error ? error.stack : undefined\n\n    try {\n      const syncRunService = ctx.resolve<SyncRunService>('dataSyncRunService')\n      const progressService = ctx.resolve<ProgressService>('progressService')\n      const run = await syncRunService.getRun(job.payload.runId, job.payload.scope)\n\n      if (run && run.status !== 'completed' && run.status !== 'failed' && run.status !== 'cancelled') {\n        await syncRunService.markStatus(run.id, 'failed', job.payload.scope, message)\n        if (run.progressJobId) {\n          await progressService.failJob(\n            run.progressJobId,\n            {\n              errorMessage: message,\n              errorStack,\n            },\n            job.payload.scope,\n          )\n        }\n      }\n    } catch (finalizeError) {\n      logger.error('Failed to finalize crashed import worker job', { err: finalizeError })\n    }\n\n    throw error\n  }\n}\n"],
-  "mappings": "AAIA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAYpE,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,MAAI;AACF,UAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,UAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,UAAM,aAAa,iBAAiB,QAAQ,MAAM,QAAQ;AAE1D,QAAI;AACF,YAAM,iBAAiB,IAAI,QAAwB,oBAAoB;AACvE,YAAM,kBAAkB,IAAI,QAAyB,iBAAiB;AACtE,YAAM,MAAM,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAE5E,UAAI,OAAO,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW,aAAa;AAC9F,cAAM,eAAe,WAAW,IAAI,IAAI,UAAU,IAAI,QAAQ,OAAO,OAAO;AAC5E,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB;AAAA,YACpB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd;AAAA,YACF;AAAA,YACA,IAAI,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,eAAe;AACtB,aAAO,MAAM,gDAAgD,EAAE,KAAK,cAAc,CAAC;AAAA,IACrF;AAEA,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { ProgressService } from '../../progress/lib/progressService'\nimport type { SyncEngine } from '../lib/sync-engine'\nimport type { SyncRunService } from '../lib/sync-run-service'\nimport {\n  DATA_SYNC_IMPORT_QUEUE,\n  DATA_SYNC_LOCK_DURATION_MS,\n  DATA_SYNC_MAX_STALLED_COUNT,\n} from '../lib/queue-policy'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('data_sync').child({ component: 'sync-import' })\n\ntype SyncJobPayload = {\n  runId: string\n  batchSize: number\n  scope: {\n    organizationId: string\n    tenantId: string\n    userId?: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: DATA_SYNC_IMPORT_QUEUE,\n  id: 'data-sync:import',\n  concurrency: 5,\n  lockDuration: DATA_SYNC_LOCK_DURATION_MS,\n  maxStalledCount: DATA_SYNC_MAX_STALLED_COUNT,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<SyncJobPayload>, ctx: HandlerContext): Promise<void> {\n  try {\n    const engine = ctx.resolve<SyncEngine>('dataSyncEngine')\n    await engine.runImport(job.payload.runId, job.payload.batchSize, job.payload.scope)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Data sync import worker failed'\n    const errorStack = error instanceof Error ? error.stack : undefined\n\n    try {\n      const syncRunService = ctx.resolve<SyncRunService>('dataSyncRunService')\n      const progressService = ctx.resolve<ProgressService>('progressService')\n      const run = await syncRunService.getRun(job.payload.runId, job.payload.scope)\n\n      if (run && run.status !== 'completed' && run.status !== 'failed' && run.status !== 'cancelled') {\n        await syncRunService.markStatus(run.id, 'failed', job.payload.scope, message)\n        if (run.progressJobId) {\n          await progressService.failJob(\n            run.progressJobId,\n            {\n              errorMessage: message,\n              errorStack,\n            },\n            job.payload.scope,\n          )\n        }\n      }\n    } catch (finalizeError) {\n      logger.error('Failed to finalize crashed import worker job', { err: finalizeError })\n    }\n\n    throw error\n  }\n}\n"],
+  "mappings": "AAIA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAYpE,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AAAA,EACb,cAAc;AAAA,EACd,iBAAiB;AACnB;AAMA,eAAO,OAA8B,KAAgC,KAAoC;AACvG,MAAI;AACF,UAAM,SAAS,IAAI,QAAoB,gBAAgB;AACvD,UAAM,OAAO,UAAU,IAAI,QAAQ,OAAO,IAAI,QAAQ,WAAW,IAAI,QAAQ,KAAK;AAAA,EACpF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,UAAM,aAAa,iBAAiB,QAAQ,MAAM,QAAQ;AAE1D,QAAI;AACF,YAAM,iBAAiB,IAAI,QAAwB,oBAAoB;AACvE,YAAM,kBAAkB,IAAI,QAAyB,iBAAiB;AACtE,YAAM,MAAM,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,IAAI,QAAQ,KAAK;AAE5E,UAAI,OAAO,IAAI,WAAW,eAAe,IAAI,WAAW,YAAY,IAAI,WAAW,aAAa;AAC9F,cAAM,eAAe,WAAW,IAAI,IAAI,UAAU,IAAI,QAAQ,OAAO,OAAO;AAC5E,YAAI,IAAI,eAAe;AACrB,gBAAM,gBAAgB;AAAA,YACpB,IAAI;AAAA,YACJ;AAAA,cACE,cAAc;AAAA,cACd;AAAA,YACF;AAAA,YACA,IAAI,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,eAAe;AACtB,aAAO,MAAM,gDAAgD,EAAE,KAAK,cAAc,CAAC;AAAA,IACrF;AAEA,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/notifications/api/route.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { Notification } from "../data/entities.js";
 import { listNotificationsSchema, createNotificationSchema } from "../data/validators.js";
 import { toNotificationDto } from "../lib/notificationMapper.js";
+import { buildNotificationReadScopeWhere } from "../lib/notificationScope.js";
 import {
   NOTIFICATION_RESOURCE_KIND,
   notificationCrudErrorResponse,
@@ -26,7 +27,8 @@ async function GET(req) {
   const input = listNotificationsSchema.parse(queryParams);
   const filters = {
     recipientUserId: scope.userId,
-    tenantId: scope.tenantId
+    tenantId: scope.tenantId,
+    ...buildNotificationReadScopeWhere(scope)
   };
   if (input.status) {
     filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status;

package/dist/modules/notifications/api/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/api/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n} from '../lib/routeHelpers'\nimport {\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveNotificationContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: scope.userId,\n    tenantId: scope.tenantId,\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  return Response.json({\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nexport const openApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,2BAA2B,GAAG;AAC3D,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AAEvD,QAAM,UAAmC;AAAA,IACvC,iBAAiB,MAAM;AAAA,IACvB,UAAU,MAAM;AAAA,EAClB;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,SAAO,SAAS,KAAK;AAAA,IACnB;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AAEA,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAAU,8BAA8B;AAAA,EACnD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/core'\nimport { Notification } from '../data/entities'\nimport { listNotificationsSchema, createNotificationSchema } from '../data/validators'\nimport { toNotificationDto } from '../lib/notificationMapper'\nimport { buildNotificationReadScopeWhere } from '../lib/notificationScope'\nimport {\n  NOTIFICATION_RESOURCE_KIND,\n  notificationCrudErrorResponse,\n  notificationValidationErrorResponse,\n  resolveNotificationContext,\n  runGuardedNotificationWrite,\n} from '../lib/routeHelpers'\nimport {\n  buildNotificationsCrudOpenApi,\n  createPagedListResponseSchema,\n  notificationItemSchema,\n} from './openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  POST: { requireAuth: true, requireFeatures: ['notifications.create'] },\n}\n\nexport async function GET(req: Request) {\n  const { ctx, scope } = await resolveNotificationContext(req)\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const url = new URL(req.url)\n  const queryParams = Object.fromEntries(url.searchParams.entries())\n  const input = listNotificationsSchema.parse(queryParams)\n\n  const filters: Record<string, unknown> = {\n    recipientUserId: scope.userId,\n    tenantId: scope.tenantId,\n    ...buildNotificationReadScopeWhere(scope),\n  }\n\n  if (input.status) {\n    filters.status = Array.isArray(input.status) ? { $in: input.status } : input.status\n  } else {\n    filters.status = { $ne: 'dismissed' }\n  }\n  if (input.type) {\n    filters.type = input.type\n  }\n  if (input.severity) {\n    filters.severity = input.severity\n  }\n  if (input.sourceEntityType) {\n    filters.sourceEntityType = input.sourceEntityType\n  }\n  if (input.sourceEntityId) {\n    filters.sourceEntityId = input.sourceEntityId\n  }\n  if (input.since) {\n    filters.createdAt = { $gt: new Date(input.since) }\n  }\n\n  const [notifications, total] = await Promise.all([\n    em.find(Notification, filters, {\n      orderBy: { createdAt: 'desc' },\n      limit: input.pageSize,\n      offset: (input.page - 1) * input.pageSize,\n    }),\n    em.count(Notification, filters),\n  ])\n\n  const items = notifications.map(toNotificationDto)\n\n  return Response.json({\n    items,\n    total,\n    page: input.page,\n    pageSize: input.pageSize,\n    totalPages: Math.ceil(total / input.pageSize),\n  })\n}\n\nexport async function POST(req: Request) {\n  const { service, scope, ctx } = await resolveNotificationContext(req)\n\n  const body = await req.json().catch(() => ({}))\n  const parsed = createNotificationSchema.safeParse(body)\n  if (!parsed.success) {\n    return notificationValidationErrorResponse(parsed.error)\n  }\n\n  try {\n    const guarded = await runGuardedNotificationWrite(\n      ctx.container,\n      scope,\n      req,\n      {\n        resourceKind: NOTIFICATION_RESOURCE_KIND,\n        operation: 'create',\n        payload: parsed.data as Record<string, unknown>,\n      },\n      () => service.create(parsed.data, scope),\n    )\n    if (!guarded.ok) return guarded.response\n\n    return Response.json({ id: guarded.result.id }, { status: 201 })\n  } catch (error) {\n    const errorResponse = notificationCrudErrorResponse(error)\n    if (errorResponse) return errorResponse\n    throw error\n  }\n}\n\nexport const openApi = buildNotificationsCrudOpenApi({\n  resourceName: 'Notification',\n  querySchema: listNotificationsSchema,\n  listResponseSchema: createPagedListResponseSchema(notificationItemSchema),\n  create: {\n    schema: createNotificationSchema,\n    responseSchema: z.object({ id: z.string().uuid() }),\n    description: 'Creates a notification for a user.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB,gCAAgC;AAClE,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,2BAA2B,GAAG;AAC3D,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,cAAc,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AACjE,QAAM,QAAQ,wBAAwB,MAAM,WAAW;AAEvD,QAAM,UAAmC;AAAA,IACvC,iBAAiB,MAAM;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,GAAG,gCAAgC,KAAK;AAAA,EAC1C;AAEA,MAAI,MAAM,QAAQ;AAChB,YAAQ,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM;AAAA,EAC/E,OAAO;AACL,YAAQ,SAAS,EAAE,KAAK,YAAY;AAAA,EACtC;AACA,MAAI,MAAM,MAAM;AACd,YAAQ,OAAO,MAAM;AAAA,EACvB;AACA,MAAI,MAAM,UAAU;AAClB,YAAQ,WAAW,MAAM;AAAA,EAC3B;AACA,MAAI,MAAM,kBAAkB;AAC1B,YAAQ,mBAAmB,MAAM;AAAA,EACnC;AACA,MAAI,MAAM,gBAAgB;AACxB,YAAQ,iBAAiB,MAAM;AAAA,EACjC;AACA,MAAI,MAAM,OAAO;AACf,YAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,MAAM,KAAK,EAAE;AAAA,EACnD;AAEA,QAAM,CAAC,eAAe,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,GAAG,KAAK,cAAc,SAAS;AAAA,MAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,MAC7B,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAAA,IACD,GAAG,MAAM,cAAc,OAAO;AAAA,EAChC,CAAC;AAED,QAAM,QAAQ,cAAc,IAAI,iBAAiB;AAEjD,SAAO,SAAS,KAAK;AAAA,IACnB;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,EAC9C,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,QAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,oCAAoC,OAAO,KAAK;AAAA,EACzD;AAEA,MAAI;AACF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,WAAW;AAAA,QACX,SAAS,OAAO;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,WAAO,SAAS,KAAK,EAAE,IAAI,QAAQ,OAAO,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjE,SAAS,OAAO;AACd,UAAM,gBAAgB,8BAA8B,KAAK;AACzD,QAAI,cAAe,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAAU,8BAA8B;AAAA,EACnD,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAAA,EACxE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAClD,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/notifications/api/unread-count/route.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { runWithCacheTenant } from "@open-mercato/cache";
 import {
   buildCollectionTags,
@@ -7,20 +8,33 @@ import {
 import { Notification } from "../../data/entities.js";
 import { unreadCountResponseSchema } from "../openapi.js";
 import { resolveNotificationContext } from "../../lib/routeHelpers.js";
+import {
+  buildNotificationReadScopeWhere,
+  getNotificationReadScopeTagOrganizationIds
+} from "../../lib/notificationScope.js";
 const metadata = {
   GET: { requireAuth: true }
 };
 const UNREAD_COUNT_RESOURCE = "notifications.notification";
 const UNREAD_COUNT_TTL_MS = 1e4;
-function buildUnreadCountCacheKey(userId) {
-  return `notifications:unread-count:u=${userId}`;
+function buildUnreadCountCacheKey(params) {
+  const normalizedIds = Array.from(new Set(
+    params.organizationIds.filter((value) => value.trim().length > 0)
+  )).sort((left, right) => left.localeCompare(right));
+  const scopeKey = normalizedIds.length === 0 ? "no-access" : `${params.organizationId ?? "none"}:scope=${createHash("sha256").update(normalizedIds.join("\0")).digest("hex").slice(0, 16)}`;
+  return `notifications:unread-count:u=${params.userId}:org=${scopeKey}`;
 }
 async function GET(req) {
   const { scope, ctx } = await resolveNotificationContext(req);
   const em = ctx.container.resolve("em");
   const userId = scope.userId;
-  const cache = userId && isCrudCacheEnabled() ? resolveCrudCache(ctx.container) : null;
-  const cacheKey = cache && userId ? buildUnreadCountCacheKey(userId) : null;
+  const cacheableOrganizationIds = Array.isArray(scope.organizationIds) ? scope.organizationIds : null;
+  const cache = userId && cacheableOrganizationIds && isCrudCacheEnabled() ? resolveCrudCache(ctx.container) : null;
+  const cacheKey = cache && userId && cacheableOrganizationIds ? buildUnreadCountCacheKey({
+    userId,
+    organizationId: scope.organizationId,
+    organizationIds: cacheableOrganizationIds
+  }) : null;
   if (cache && cacheKey) {
     try {
       const cached = await runWithCacheTenant(scope.tenantId, () => cache.get(cacheKey));
@@ -33,7 +47,8 @@ async function GET(req) {
   const count = await em.count(Notification, {
     recipientUserId: userId,
     tenantId: scope.tenantId,
-    status: "unread"
+    status: "unread",
+    ...buildNotificationReadScopeWhere(scope)
   });
   if (cache && cacheKey) {
     try {
@@ -41,7 +56,11 @@ async function GET(req) {
         scope.tenantId,
         () => cache.set(cacheKey, count, {
           ttl: UNREAD_COUNT_TTL_MS,
-          tags: buildCollectionTags(UNREAD_COUNT_RESOURCE, scope.tenantId, [null])
+          tags: buildCollectionTags(
+            UNREAD_COUNT_RESOURCE,
+            scope.tenantId,
+            getNotificationReadScopeTagOrganizationIds(scope)
+          )
         })
       );
     } catch {