@open-mercato/core 0.6.7-develop.6785.1.1dd7cfac55 → 0.6.7-develop.6795.1.8a3f27921c

package/dist/modules/data_sync/api/schedules/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/data_sync/api/schedules/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { updateSyncScheduleSchema } from '../../../data/validators'\nimport type { SyncScheduleService } from '../../../lib/sync-schedule-service'\nimport { serializeSchedule } from '../serialize'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  PUT: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  DELETE: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Manage a sync schedule',\n}\n\nexport async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const schedule = await scheduleService.getById(parsedParams.data.id, {\n    organizationId: auth.orgId as string,\n    tenantId: auth.tenantId,\n  })\n\n  if (!schedule) {\n    return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n  }\n\n  return NextResponse.json(serializeSchedule(schedule))\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const payload = await readJsonSafe(req)\n  const parsed = updateSyncScheduleSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n  const current = await scheduleService.getById(parsedParams.data.id, scope)\n\n  if (!current) {\n    return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: current.id,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsed.data,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const schedule = await scheduleService.saveSchedule({\n      id: current.id,\n      integrationId: parsed.data.integrationId ?? current.integrationId,\n      entityType: parsed.data.entityType ?? current.entityType,\n      direction: parsed.data.direction ?? current.direction,\n      scheduleType: parsed.data.scheduleType ?? current.scheduleType,\n      scheduleValue: parsed.data.scheduleValue ?? current.scheduleValue,\n      timezone: parsed.data.timezone ?? current.timezone,\n      fullSync: parsed.data.fullSync ?? current.fullSync,\n      isEnabled: parsed.data.isEnabled ?? current.isEnabled,\n      expectedUpdatedAt: readOptimisticLockExpected(req),\n    }, scope, container)\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: schedule.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json(serializeSchedule(schedule))\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to update sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: parsedParams.data.id,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: null,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const deleted = await scheduleService.deleteSchedule(\n      parsedParams.data.id,\n      scope,\n      container,\n      readOptimisticLockExpected(req),\n    )\n\n    if (!deleted) {\n      return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n    }\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: parsedParams.data.id,\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json({ deleted: true })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to delete sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB;AAChC,SAAS,gCAAgC;AAEzC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACxE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,WAAW,MAAM,gBAAgB,QAAQ,aAAa,KAAK,IAAI;AAAA,IACnE,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB,CAAC;AAED,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,SAAO,aAAa,KAAK,kBAAkB,QAAQ,CAAC;AACtD;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,UAAU,MAAM,aAAa,GAAG;AACtC,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAC9E,QAAM,UAAU,MAAM,gBAAgB,QAAQ,aAAa,KAAK,IAAI,KAAK;AAEzE,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,OAAO;AAAA,EAC1B,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,gBAAgB,aAAa;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,eAAe,OAAO,KAAK,iBAAiB,QAAQ;AAAA,MACpD,YAAY,OAAO,KAAK,cAAc,QAAQ;AAAA,MAC9C,WAAW,OAAO,KAAK,aAAa,QAAQ;AAAA,MAC5C,cAAc,OAAO,KAAK,gBAAgB,QAAQ;AAAA,MAClD,eAAe,OAAO,KAAK,iBAAiB,QAAQ;AAAA,MACpD,UAAU,OAAO,KAAK,YAAY,QAAQ;AAAA,MAC1C,UAAU,OAAO,KAAK,YAAY,QAAQ;AAAA,MAC1C,WAAW,OAAO,KAAK,aAAa,QAAQ;AAAA,MAC5C,mBAAmB,2BAA2B,GAAG;AAAA,IACnD,GAAG,OAAO,SAAS;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,kBAAkB,QAAQ,CAAC;AAAA,EACtD,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEA,eAAsB,OAAO,KAAc,KAA8D;AACvG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,aAAa,KAAK;AAAA,IAC9B,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB;AAAA,EACnB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,gBAAgB;AAAA,MACpC,aAAa,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,MACA,2BAA2B,GAAG;AAAA,IAChC;AAEA,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,aAAa,KAAK;AAAA,QAC9B,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { updateSyncScheduleSchema } from '../../../data/validators'\nimport type { SyncScheduleService } from '../../../lib/sync-schedule-service'\nimport { serializeSchedule } from '../serialize'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\n\nconst paramsSchema = z.object({\n  id: z.string().uuid(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  PUT: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  DELETE: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Manage a sync schedule',\n}\n\nexport async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const schedule = await scheduleService.getById(parsedParams.data.id, {\n    organizationId,\n    tenantId: auth.tenantId,\n  })\n\n  if (!schedule) {\n    return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n  }\n\n  return NextResponse.json(serializeSchedule(schedule))\n}\n\nexport async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const payload = await readJsonSafe(req)\n  const parsed = updateSyncScheduleSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId, tenantId: auth.tenantId }\n  const current = await scheduleService.getById(parsedParams.data.id, scope)\n\n  if (!current) {\n    return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n  }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: current.id,\n    operation: 'update',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsed.data,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const schedule = await scheduleService.saveSchedule({\n      id: current.id,\n      integrationId: parsed.data.integrationId ?? current.integrationId,\n      entityType: parsed.data.entityType ?? current.entityType,\n      direction: parsed.data.direction ?? current.direction,\n      scheduleType: parsed.data.scheduleType ?? current.scheduleType,\n      scheduleValue: parsed.data.scheduleValue ?? current.scheduleValue,\n      timezone: parsed.data.timezone ?? current.timezone,\n      fullSync: parsed.data.fullSync ?? current.fullSync,\n      isEnabled: parsed.data.isEnabled ?? current.isEnabled,\n      expectedUpdatedAt: readOptimisticLockExpected(req),\n    }, scope, container)\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: schedule.id,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n    return NextResponse.json(serializeSchedule(schedule))\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to update sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')\n    ? await (ctx.params as Promise<{ id?: string }>)\n    : (ctx.params as { id?: string } | undefined)\n\n  const parsedParams = paramsSchema.safeParse(rawParams)\n  if (!parsedParams.success) {\n    return NextResponse.json({ error: 'Invalid schedule id' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId, tenantId: auth.tenantId }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: parsedParams.data.id,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: null,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const deleted = await scheduleService.deleteSchedule(\n      parsedParams.data.id,\n      scope,\n      container,\n      readOptimisticLockExpected(req),\n    )\n\n    if (!deleted) {\n      return NextResponse.json({ error: 'Schedule not found' }, { status: 404 })\n    }\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: parsedParams.data.id,\n        operation: 'delete',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json({ deleted: true })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to delete sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,mCAAmC,mCAAmC;AAC/E,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB;AAChC,SAAS,gCAAgC;AAEzC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACxE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,WAAW,MAAM,gBAAgB,QAAQ,aAAa,KAAK,IAAI;AAAA,IACnE;AAAA,IACA,UAAU,KAAK;AAAA,EACjB,CAAC;AAED,MAAI,CAAC,UAAU;AACb,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,SAAO,aAAa,KAAK,kBAAkB,QAAQ,CAAC;AACtD;AAEA,eAAsB,IAAI,KAAc,KAA8D;AACpG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,UAAU,MAAM,aAAa,GAAG;AACtC,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,UAAU,KAAK,SAAS;AACxD,QAAM,UAAU,MAAM,gBAAgB,QAAQ,aAAa,KAAK,IAAI,KAAK;AAEzE,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,OAAO;AAAA,EAC1B,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,gBAAgB,aAAa;AAAA,MAClD,IAAI,QAAQ;AAAA,MACZ,eAAe,OAAO,KAAK,iBAAiB,QAAQ;AAAA,MACpD,YAAY,OAAO,KAAK,cAAc,QAAQ;AAAA,MAC9C,WAAW,OAAO,KAAK,aAAa,QAAQ;AAAA,MAC5C,cAAc,OAAO,KAAK,gBAAgB,QAAQ;AAAA,MAClD,eAAe,OAAO,KAAK,iBAAiB,QAAQ;AAAA,MACpD,UAAU,OAAO,KAAK,YAAY,QAAQ;AAAA,MAC1C,UAAU,OAAO,KAAK,YAAY,QAAQ;AAAA,MAC1C,WAAW,OAAO,KAAK,aAAa,QAAQ;AAAA,MAC5C,mBAAmB,2BAA2B,GAAG;AAAA,IACnD,GAAG,OAAO,SAAS;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AACA,WAAO,aAAa,KAAK,kBAAkB,QAAQ,CAAC;AAAA,EACtD,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEA,eAAsB,OAAO,KAAc,KAA8D;AACvG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,YAAa,IAAI,UAAU,OAAQ,IAAI,OAA4B,SAAS,aAC9E,MAAO,IAAI,SACV,IAAI;AAET,QAAM,eAAe,aAAa,UAAU,SAAS;AACrD,MAAI,CAAC,aAAa,SAAS;AACzB,WAAO,aAAa,KAAK,EAAE,OAAO,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,UAAU,KAAK,SAAS;AAExD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,aAAa,KAAK;AAAA,IAC9B,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB;AAAA,EACnB,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,gBAAgB;AAAA,MACpC,aAAa,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,MACA,2BAA2B,GAAG;AAAA,IAChC;AAEA,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,aAAa,KAAK;AAAA,QAC9B,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;",
   "names": []
 }

package/dist/modules/data_sync/api/schedules/route.js

@@ -1,5 +1,6 @@
 import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from "@open-mercato/shared/lib/auth/organizationScope";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
 import { createSyncScheduleSchema, listSyncSchedulesQuerySchema } from "../../data/validators.js";
@@ -20,9 +21,13 @@ const openApi = {
 };
 async function GET(req) {
   const auth = await getAuthFromRequest(req);
-  if (!auth?.tenantId || !auth.orgId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }
+  const organizationId = resolveActiveOrganizationId(auth);
+  if (!organizationId) {
+    return organizationScopeRequiredResponse();
+  }
   const url = new URL(req.url);
   const parsed = listSyncSchedulesQuerySchema.safeParse({
     integrationId: url.searchParams.get("integrationId") ?? void 0,
@@ -36,7 +41,7 @@ async function GET(req) {
   }
   const container = await createRequestContainer();
   const scheduleService = container.resolve("dataSyncScheduleService");
-  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const scope = { organizationId, tenantId: auth.tenantId };
   const { items, total } = await scheduleService.listSchedules(parsed.data, scope);
   return NextResponse.json({
     items: items.map(serializeSchedule),
@@ -48,9 +53,13 @@ async function GET(req) {
 }
 async function POST(req) {
   const auth = await getAuthFromRequest(req);
-  if (!auth?.tenantId || !auth.orgId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }
+  const organizationId = resolveActiveOrganizationId(auth);
+  if (!organizationId) {
+    return organizationScopeRequiredResponse();
+  }
   const payload = await readJsonSafe(req);
   const parsed = createSyncScheduleSchema.safeParse(payload);
   if (!parsed.success) {
@@ -58,7 +67,7 @@ async function POST(req) {
   }
   const container = await createRequestContainer();
   const scheduleService = container.resolve("dataSyncScheduleService");
-  const scope = { organizationId: auth.orgId, tenantId: auth.tenantId };
+  const scope = { organizationId, tenantId: auth.tenantId };
   const guardResult = await validateCrudMutationGuard(container, {
     tenantId: auth.tenantId,
     organizationId: scope.organizationId,

package/dist/modules/data_sync/api/schedules/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/data_sync/api/schedules/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { createSyncScheduleSchema, listSyncSchedulesQuerySchema } from '../../data/validators'\nimport type { SyncScheduleService } from '../../lib/sync-schedule-service'\nimport { serializeSchedule } from './serialize'\nimport { readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  POST: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'List or create sync schedules',\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const url = new URL(req.url)\n  const parsed = listSyncSchedulesQuerySchema.safeParse({\n    integrationId: url.searchParams.get('integrationId') ?? undefined,\n    entityType: url.searchParams.get('entityType') ?? undefined,\n    direction: url.searchParams.get('direction') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n  const { items, total } = await scheduleService.listSchedules(parsed.data, scope)\n\n  return NextResponse.json({\n    items: items.map(serializeSchedule),\n    total,\n    page: parsed.data.page,\n    pageSize: parsed.data.pageSize,\n    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize)),\n  })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const payload = await readJsonSafe(req)\n  const parsed = createSyncScheduleSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: scope.organizationId,\n    operation: 'create',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsed.data,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const schedule = await scheduleService.saveSchedule({\n      ...parsed.data,\n      expectedUpdatedAt: readOptimisticLockExpected(req),\n    }, scope, container)\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: schedule.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json(serializeSchedule(schedule), { status: 201 })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to save sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B,oCAAoC;AAEvE,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,6BAA6B,UAAU;AAAA,IACpD,eAAe,IAAI,aAAa,IAAI,eAAe,KAAK;AAAA,IACxD,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAC9E,QAAM,EAAE,OAAO,MAAM,IAAI,MAAM,gBAAgB,cAAc,OAAO,MAAM,KAAK;AAE/E,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,iBAAiB;AAAA,IAClC;AAAA,IACA,MAAM,OAAO,KAAK;AAAA,IAClB,UAAU,OAAO,KAAK;AAAA,IACtB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,OAAO,KAAK,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,UAAU,MAAM,aAAa,GAAG;AACtC,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,KAAK,OAAiB,UAAU,KAAK,SAAS;AAE9E,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,OAAO;AAAA,EAC1B,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,gBAAgB,aAAa;AAAA,MAClD,GAAG,OAAO;AAAA,MACV,mBAAmB,2BAA2B,GAAG;AAAA,IACnD,GAAG,OAAO,SAAS;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,kBAAkB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { createSyncScheduleSchema, listSyncSchedulesQuerySchema } from '../../data/validators'\nimport type { SyncScheduleService } from '../../lib/sync-schedule-service'\nimport { serializeSchedule } from './serialize'\nimport { readOptimisticLockExpected } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n  POST: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'List or create sync schedules',\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const url = new URL(req.url)\n  const parsed = listSyncSchedulesQuerySchema.safeParse({\n    integrationId: url.searchParams.get('integrationId') ?? undefined,\n    entityType: url.searchParams.get('entityType') ?? undefined,\n    direction: url.searchParams.get('direction') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId, tenantId: auth.tenantId }\n  const { items, total } = await scheduleService.listSchedules(parsed.data, scope)\n\n  return NextResponse.json({\n    items: items.map(serializeSchedule),\n    total,\n    page: parsed.data.page,\n    pageSize: parsed.data.pageSize,\n    totalPages: Math.max(1, Math.ceil(total / parsed.data.pageSize)),\n  })\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const payload = await readJsonSafe(req)\n  const parsed = createSyncScheduleSchema.safeParse(payload)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const container = await createRequestContainer()\n  const scheduleService = container.resolve('dataSyncScheduleService') as SyncScheduleService\n  const scope = { organizationId, tenantId: auth.tenantId }\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId,\n    organizationId: scope.organizationId,\n    userId: auth.sub,\n    resourceKind: 'data_sync.schedule',\n    resourceId: scope.organizationId,\n    operation: 'create',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: parsed.data,\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  try {\n    const schedule = await scheduleService.saveSchedule({\n      ...parsed.data,\n      expectedUpdatedAt: readOptimisticLockExpected(req),\n    }, scope, container)\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(container, {\n        tenantId: auth.tenantId,\n        organizationId: scope.organizationId,\n        userId: auth.sub,\n        resourceKind: 'data_sync.schedule',\n        resourceId: schedule.id,\n        operation: 'create',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    return NextResponse.json(serializeSchedule(schedule), { status: 201 })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Failed to save sync schedule'\n    return NextResponse.json({ error: message }, { status: 422 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,mCAAmC,mCAAmC;AAC/E,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B,oCAAoC;AAEvE,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,6BAA6B,UAAU;AAAA,IACpD,eAAe,IAAI,aAAa,IAAI,eAAe,KAAK;AAAA,IACxD,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK;AAAA,IAClD,WAAW,IAAI,aAAa,IAAI,WAAW,KAAK;AAAA,IAChD,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,UAAU,KAAK,SAAS;AACxD,QAAM,EAAE,OAAO,MAAM,IAAI,MAAM,gBAAgB,cAAc,OAAO,MAAM,KAAK;AAE/E,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,MAAM,IAAI,iBAAiB;AAAA,IAClC;AAAA,IACA,MAAM,OAAO,KAAK;AAAA,IAClB,UAAU,OAAO,KAAK;AAAA,IACtB,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,OAAO,KAAK,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,UAAU,MAAM,aAAa,GAAG;AACtC,QAAM,SAAS,yBAAyB,UAAU,OAAO;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,kBAAkB,UAAU,QAAQ,yBAAyB;AACnE,QAAM,QAAQ,EAAE,gBAAgB,UAAU,KAAK,SAAS;AAExD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK;AAAA,IACf,gBAAgB,MAAM;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,OAAO;AAAA,EAC1B,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,gBAAgB,aAAa;AAAA,MAClD,GAAG,OAAO;AAAA,MACV,mBAAmB,2BAA2B,GAAG;AAAA,IACnD,GAAG,OAAO,SAAS;AAEnB,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,WAAW;AAAA,QAChD,UAAU,KAAK;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,WAAO,aAAa,KAAK,kBAAkB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;",
   "names": []
 }

package/dist/modules/data_sync/api/validate.js

@@ -1,5 +1,6 @@
 import { NextResponse } from "next/server";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from "@open-mercato/shared/lib/auth/organizationScope";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getIntegration } from "@open-mercato/shared/modules/integrations/types";
 import { validateConnectionSchema } from "../data/validators.js";
@@ -13,9 +14,13 @@ const openApi = {
 };
 async function POST(req) {
   const auth = await getAuthFromRequest(req);
-  if (!auth?.tenantId || !auth.orgId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
   }
+  const organizationId = resolveActiveOrganizationId(auth);
+  if (!organizationId) {
+    return organizationScopeRequiredResponse();
+  }
   const parsed = validateConnectionSchema.safeParse(await req.json());
   if (!parsed.success) {
     return NextResponse.json({ error: "Invalid payload", details: parsed.error.flatten() }, { status: 422 });
@@ -31,7 +36,7 @@ async function POST(req) {
   const container = await createRequestContainer();
   const credentialsService = container.resolve("integrationCredentialsService");
   const credentials = await credentialsService.resolve(integration.id, {
-    organizationId: auth.orgId,
+    organizationId,
     tenantId: auth.tenantId
   });
   if (!credentials) {
@@ -40,7 +45,7 @@ async function POST(req) {
   const mapping = await adapter.getMapping({
     entityType: parsed.data.entityType,
     scope: {
-      organizationId: auth.orgId,
+      organizationId,
       tenantId: auth.tenantId
     }
   });
@@ -52,7 +57,7 @@ async function POST(req) {
     credentials,
     mapping,
     scope: {
-      organizationId: auth.orgId,
+      organizationId,
       tenantId: auth.tenantId
     }
   });

package/dist/modules/data_sync/api/validate.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/data_sync/api/validate.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport { validateConnectionSchema } from '../data/validators'\nimport { getDataSyncAdapter } from '../lib/adapter-registry'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Validate sync connection',\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId || !auth.orgId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const parsed = validateConnectionSchema.safeParse(await req.json())\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const integration = getIntegration(parsed.data.integrationId)\n  if (!integration?.providerKey) {\n    return NextResponse.json({ ok: false, message: 'Integration or providerKey not found' }, { status: 404 })\n  }\n\n  const adapter = getDataSyncAdapter(integration.providerKey)\n  if (!adapter) {\n    return NextResponse.json({ ok: false, message: 'No registered sync adapter for provider' }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const credentials = await credentialsService.resolve(integration.id, {\n    organizationId: auth.orgId as string,\n    tenantId: auth.tenantId,\n  })\n\n  if (!credentials) {\n    return NextResponse.json({ ok: false, message: 'Missing credentials' }, { status: 422 })\n  }\n\n  const mapping = await adapter.getMapping({\n    entityType: parsed.data.entityType,\n    scope: {\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n  })\n\n  if (!adapter.validateConnection) {\n    return NextResponse.json({ ok: true, message: 'Adapter does not implement active connection validation' })\n  }\n\n  const result = await adapter.validateConnection({\n    entityType: parsed.data.entityType,\n    credentials,\n    mapping,\n    scope: {\n      organizationId: auth.orgId as string,\n      tenantId: auth.tenantId,\n    },\n  })\n\n  return NextResponse.json(result, { status: result.ok ? 200 : 422 })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAE/B,SAAS,gCAAgC;AACzC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,YAAY,CAAC,KAAK,OAAO;AAClC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,yBAAyB,UAAU,MAAM,IAAI,KAAK,CAAC;AAClE,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,cAAc,eAAe,OAAO,KAAK,aAAa;AAC5D,MAAI,CAAC,aAAa,aAAa;AAC7B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,uCAAuC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1G;AAEA,QAAM,UAAU,mBAAmB,YAAY,WAAW;AAC1D,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,0CAA0C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7G;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,cAAc,MAAM,mBAAmB,QAAQ,YAAY,IAAI;AAAA,IACnE,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,EACjB,CAAC;AAED,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,QAAM,UAAU,MAAM,QAAQ,WAAW;AAAA,IACvC,YAAY,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA,MACL,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,EACF,CAAC;AAED,MAAI,CAAC,QAAQ,oBAAoB;AAC/B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,0DAA0D,CAAC;AAAA,EAC3G;AAEA,QAAM,SAAS,MAAM,QAAQ,mBAAmB;AAAA,IAC9C,YAAY,OAAO,KAAK;AAAA,IACxB;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AAAA,EACF,CAAC;AAED,SAAO,aAAa,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AACpE;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getIntegration } from '@open-mercato/shared/modules/integrations/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport { validateConnectionSchema } from '../data/validators'\nimport { getDataSyncAdapter } from '../lib/adapter-registry'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['data_sync.configure'] },\n}\n\nexport const openApi = {\n  tags: ['DataSync'],\n  summary: 'Validate sync connection',\n}\n\nexport async function POST(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = resolveActiveOrganizationId(auth)\n  if (!organizationId) {\n    return organizationScopeRequiredResponse()\n  }\n\n  const parsed = validateConnectionSchema.safeParse(await req.json())\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 422 })\n  }\n\n  const integration = getIntegration(parsed.data.integrationId)\n  if (!integration?.providerKey) {\n    return NextResponse.json({ ok: false, message: 'Integration or providerKey not found' }, { status: 404 })\n  }\n\n  const adapter = getDataSyncAdapter(integration.providerKey)\n  if (!adapter) {\n    return NextResponse.json({ ok: false, message: 'No registered sync adapter for provider' }, { status: 404 })\n  }\n\n  const container = await createRequestContainer()\n  const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService\n  const credentials = await credentialsService.resolve(integration.id, {\n    organizationId,\n    tenantId: auth.tenantId,\n  })\n\n  if (!credentials) {\n    return NextResponse.json({ ok: false, message: 'Missing credentials' }, { status: 422 })\n  }\n\n  const mapping = await adapter.getMapping({\n    entityType: parsed.data.entityType,\n    scope: {\n      organizationId,\n      tenantId: auth.tenantId,\n    },\n  })\n\n  if (!adapter.validateConnection) {\n    return NextResponse.json({ ok: true, message: 'Adapter does not implement active connection validation' })\n  }\n\n  const result = await adapter.validateConnection({\n    entityType: parsed.data.entityType,\n    credentials,\n    mapping,\n    scope: {\n      organizationId,\n      tenantId: auth.tenantId,\n    },\n  })\n\n  return NextResponse.json(result, { status: result.ok ? 200 : 422 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AACnC,SAAS,mCAAmC,mCAAmC;AAC/E,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAE/B,SAAS,gCAAgC;AACzC,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,UAAU;AAAA,EACjB,SAAS;AACX;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,UAAU;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAiB,4BAA4B,IAAI;AACvD,MAAI,CAAC,gBAAgB;AACnB,WAAO,kCAAkC;AAAA,EAC3C;AAEA,QAAM,SAAS,yBAAyB,UAAU,MAAM,IAAI,KAAK,CAAC;AAClE,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,cAAc,eAAe,OAAO,KAAK,aAAa;AAC5D,MAAI,CAAC,aAAa,aAAa;AAC7B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,uCAAuC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1G;AAEA,QAAM,UAAU,mBAAmB,YAAY,WAAW;AAC1D,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,0CAA0C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7G;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,qBAAqB,UAAU,QAAQ,+BAA+B;AAC5E,QAAM,cAAc,MAAM,mBAAmB,QAAQ,YAAY,IAAI;AAAA,IACnE;AAAA,IACA,UAAU,KAAK;AAAA,EACjB,CAAC;AAED,MAAI,CAAC,aAAa;AAChB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,SAAS,sBAAsB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzF;AAEA,QAAM,UAAU,MAAM,QAAQ,WAAW;AAAA,IACvC,YAAY,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA,MACL;AAAA,MACA,UAAU,KAAK;AAAA,IACjB;AAAA,EACF,CAAC;AAED,MAAI,CAAC,QAAQ,oBAAoB;AAC/B,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,0DAA0D,CAAC;AAAA,EAC3G;AAEA,QAAM,SAAS,MAAM,QAAQ,mBAAmB;AAAA,IAC9C,YAAY,OAAO,KAAK;AAAA,IACxB;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,UAAU,KAAK;AAAA,IACjB;AAAA,EACF,CAAC;AAED,SAAO,aAAa,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AACpE;",
   "names": []
 }

package/dist/modules/design_system/acl.js

@@ -0,0 +1,9 @@
+const features = [
+  { id: "design_system.view", title: "View the design system gallery", module: "design_system" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/design_system/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/design_system/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'design_system.view', title: 'View the design system gallery', module: 'design_system' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,sBAAsB,OAAO,kCAAkC,QAAQ,gBAAgB;AAC/F;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/design_system/backend/design-system/page.js

@@ -0,0 +1,11 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { GalleryShell } from "../../gallery/components/GalleryShell.js";
+function DesignSystemGalleryPage() {
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(GalleryShell, {}) }) });
+}
+export {
+  DesignSystemGalleryPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/design_system/backend/design-system/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/design_system/backend/design-system/page.tsx"],
+  "sourcesContent": ["\"use client\"\n\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { GalleryShell } from '../../gallery/components/GalleryShell'\n\nexport default function DesignSystemGalleryPage() {\n  return (\n    <Page>\n      <PageBody>\n        <GalleryShell />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AASQ;AAPR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,oBAAoB;AAEd,SAAR,0BAA2C;AAChD,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,gBAAa,GAChB,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/design_system/backend/design-system/page.meta.js

@@ -0,0 +1,15 @@
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["design_system.view"],
+  pageTitle: "Design system",
+  pageTitleKey: "design_system.nav.title",
+  pageGroup: "Developer",
+  pageGroupKey: "design_system.nav.group",
+  pageOrder: 900,
+  icon: "shapes",
+  breadcrumb: [{ label: "Design system", labelKey: "design_system.nav.title" }]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/design_system/backend/design-system/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/design_system/backend/design-system/page.meta.ts"],
+  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  requireFeatures: ['design_system.view'],\n  pageTitle: 'Design system',\n  pageTitleKey: 'design_system.nav.title',\n  pageGroup: 'Developer',\n  pageGroupKey: 'design_system.nav.group',\n  pageOrder: 900,\n  icon: 'shapes',\n  breadcrumb: [{ label: 'Design system', labelKey: 'design_system.nav.title' }],\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,oBAAoB;AAAA,EACtC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,MAAM;AAAA,EACN,YAAY,CAAC,EAAE,OAAO,iBAAiB,UAAU,0BAA0B,CAAC;AAC9E;",
+  "names": []
+}

package/dist/modules/design_system/gallery/components/CodeSnippet.js

@@ -0,0 +1,52 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { Copy } from "lucide-react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { IconButton } from "@open-mercato/ui/primitives/icon-button";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+function CodeSnippet({ code }) {
+  const t = useT();
+  const copyLabel = t("design_system.gallery.copy", "Copy code");
+  const onCopy = React.useCallback(async () => {
+    try {
+      if (navigator.clipboard) {
+        await navigator.clipboard.writeText(code);
+      } else {
+        const holder = document.createElement("textarea");
+        holder.value = code;
+        holder.setAttribute("readonly", "");
+        holder.style.position = "fixed";
+        holder.style.opacity = "0";
+        document.body.appendChild(holder);
+        holder.select();
+        const copied = document.execCommand("copy");
+        holder.remove();
+        if (!copied) throw new Error("[internal] execCommand copy failed");
+      }
+      flash(t("design_system.gallery.copied", "Snippet copied to clipboard"), "success");
+    } catch {
+      flash(t("design_system.gallery.copyFailed", "Could not copy the snippet"), "error");
+    }
+  }, [code, t]);
+  return /* @__PURE__ */ jsxs("div", { className: "relative rounded-md border border-border bg-muted/50", children: [
+    /* @__PURE__ */ jsx("pre", { className: "overflow-x-auto p-3 pr-12 text-xs leading-relaxed", children: /* @__PURE__ */ jsx("code", { children: code }) }),
+    /* @__PURE__ */ jsx(
+      IconButton,
+      {
+        type: "button",
+        variant: "ghost",
+        size: "sm",
+        className: "absolute right-1.5 top-1.5",
+        "aria-label": copyLabel,
+        title: copyLabel,
+        onClick: onCopy,
+        children: /* @__PURE__ */ jsx(Copy, {})
+      }
+    )
+  ] });
+}
+export {
+  CodeSnippet
+};
+//# sourceMappingURL=CodeSnippet.js.map

package/dist/modules/design_system/gallery/components/CodeSnippet.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/design_system/gallery/components/CodeSnippet.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { Copy } from 'lucide-react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { IconButton } from '@open-mercato/ui/primitives/icon-button'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\n\nexport function CodeSnippet({ code }: { code: string }) {\n  const t = useT()\n  const copyLabel = t('design_system.gallery.copy', 'Copy code')\n\n  const onCopy = React.useCallback(async () => {\n    try {\n      if (navigator.clipboard) {\n        await navigator.clipboard.writeText(code)\n      } else {\n        // Non-secure contexts (plain-HTTP self-hosted installs) have no\n        // navigator.clipboard \u2014 fall back to the legacy selection API.\n        const holder = document.createElement('textarea')\n        holder.value = code\n        holder.setAttribute('readonly', '')\n        holder.style.position = 'fixed'\n        holder.style.opacity = '0'\n        document.body.appendChild(holder)\n        holder.select()\n        const copied = document.execCommand('copy')\n        holder.remove()\n        if (!copied) throw new Error('[internal] execCommand copy failed')\n      }\n      flash(t('design_system.gallery.copied', 'Snippet copied to clipboard'), 'success')\n    } catch {\n      flash(t('design_system.gallery.copyFailed', 'Could not copy the snippet'), 'error')\n    }\n  }, [code, t])\n\n  return (\n    <div className=\"relative rounded-md border border-border bg-muted/50\">\n      <pre className=\"overflow-x-auto p-3 pr-12 text-xs leading-relaxed\">\n        <code>{code}</code>\n      </pre>\n      <IconButton\n        type=\"button\"\n        variant=\"ghost\"\n        size=\"sm\"\n        className=\"absolute right-1.5 top-1.5\"\n        aria-label={copyLabel}\n        title={copyLabel}\n        onClick={onCopy}\n      >\n        <Copy />\n      </IconButton>\n    </div>\n  )\n}\n"],
+  "mappings": ";AAqCI,SAEI,KAFJ;AAnCJ,YAAY,WAAW;AACvB,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AAEf,SAAS,YAAY,EAAE,KAAK,GAAqB;AACtD,QAAM,IAAI,KAAK;AACf,QAAM,YAAY,EAAE,8BAA8B,WAAW;AAE7D,QAAM,SAAS,MAAM,YAAY,YAAY;AAC3C,QAAI;AACF,UAAI,UAAU,WAAW;AACvB,cAAM,UAAU,UAAU,UAAU,IAAI;AAAA,MAC1C,OAAO;AAGL,cAAM,SAAS,SAAS,cAAc,UAAU;AAChD,eAAO,QAAQ;AACf,eAAO,aAAa,YAAY,EAAE;AAClC,eAAO,MAAM,WAAW;AACxB,eAAO,MAAM,UAAU;AACvB,iBAAS,KAAK,YAAY,MAAM;AAChC,eAAO,OAAO;AACd,cAAM,SAAS,SAAS,YAAY,MAAM;AAC1C,eAAO,OAAO;AACd,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,oCAAoC;AAAA,MACnE;AACA,YAAM,EAAE,gCAAgC,6BAA6B,GAAG,SAAS;AAAA,IACnF,QAAQ;AACN,YAAM,EAAE,oCAAoC,4BAA4B,GAAG,OAAO;AAAA,IACpF;AAAA,EACF,GAAG,CAAC,MAAM,CAAC,CAAC;AAEZ,SACE,qBAAC,SAAI,WAAU,wDACb;AAAA,wBAAC,SAAI,WAAU,qDACb,8BAAC,UAAM,gBAAK,GACd;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAQ;AAAA,QACR,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY;AAAA,QACZ,OAAO;AAAA,QACP,SAAS;AAAA,QAET,8BAAC,QAAK;AAAA;AAAA,IACR;AAAA,KACF;AAEJ;",
+  "names": []
+}

package/dist/modules/design_system/gallery/components/EntryCard.js

@@ -0,0 +1,63 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Check, ExternalLink, X } from "lucide-react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { LinkButton } from "@open-mercato/ui/primitives/link-button";
+import { DS_DOCS_URL, figmaNodeUrl } from "../registry.js";
+import { VariantPreview } from "./VariantPreview.js";
+import { CodeSnippet } from "./CodeSnippet.js";
+function EntryCard({ entry }) {
+  const t = useT();
+  return /* @__PURE__ */ jsxs(
+    "section",
+    {
+      id: `gallery-entry-${entry.id}`,
+      "aria-labelledby": `gallery-entry-${entry.id}-title`,
+      className: "scroll-mt-4 space-y-4 rounded-lg border border-border bg-card p-4",
+      children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-start sm:justify-between", children: [
+          /* @__PURE__ */ jsxs("div", { className: "min-w-0 space-y-1", children: [
+            /* @__PURE__ */ jsx("h3", { id: `gallery-entry-${entry.id}-title`, className: "text-base font-semibold leading-tight", children: entry.title }),
+            entry.descriptionKey ? /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t(entry.descriptionKey, entry.title) }) : null,
+            /* @__PURE__ */ jsx("code", { className: "block truncate text-xs text-muted-foreground", children: entry.importPath })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { className: "flex shrink-0 items-center gap-3", children: [
+            entry.figmaNodeId ? /* @__PURE__ */ jsx(LinkButton, { asChild: true, size: "sm", children: /* @__PURE__ */ jsxs("a", { href: figmaNodeUrl(entry.figmaNodeId), target: "_blank", rel: "noreferrer", children: [
+              t("design_system.gallery.openInFigma", "Open in Figma"),
+              /* @__PURE__ */ jsx(ExternalLink, {})
+            ] }) }) : null,
+            entry.docsAnchor ? /* @__PURE__ */ jsx(LinkButton, { asChild: true, size: "sm", variant: "gray", children: /* @__PURE__ */ jsxs("a", { href: `${DS_DOCS_URL}${entry.docsAnchor}`, target: "_blank", rel: "noreferrer", children: [
+              t("design_system.gallery.viewDocs", "View docs"),
+              /* @__PURE__ */ jsx(ExternalLink, {})
+            ] }) }) : null
+          ] })
+        ] }),
+        entry.usage && (entry.usage.do?.length || entry.usage.dont?.length) ? /* @__PURE__ */ jsxs("div", { className: "grid gap-4 rounded-md border border-border bg-muted/30 p-4 sm:grid-cols-2", children: [
+          entry.usage.do?.length ? /* @__PURE__ */ jsxs("div", { className: "space-y-1.5", children: [
+            /* @__PURE__ */ jsx("div", { className: "text-xs font-medium uppercase tracking-wider text-muted-foreground", children: t("design_system.gallery.usageDo", "Do") }),
+            /* @__PURE__ */ jsx("ul", { className: "space-y-1.5", children: entry.usage.do.map((rule) => /* @__PURE__ */ jsxs("li", { className: "flex items-start gap-2 text-sm text-foreground", children: [
+              /* @__PURE__ */ jsx(Check, { "aria-hidden": true, className: "mt-0.5 size-3.5 shrink-0 text-status-success-icon" }),
+              /* @__PURE__ */ jsx("span", { children: rule })
+            ] }, rule)) })
+          ] }) : null,
+          entry.usage.dont?.length ? /* @__PURE__ */ jsxs("div", { className: "space-y-1.5", children: [
+            /* @__PURE__ */ jsx("div", { className: "text-xs font-medium uppercase tracking-wider text-muted-foreground", children: t("design_system.gallery.usageDont", "Don't") }),
+            /* @__PURE__ */ jsx("ul", { className: "space-y-1.5", children: entry.usage.dont.map((rule) => /* @__PURE__ */ jsxs("li", { className: "flex items-start gap-2 text-sm text-foreground", children: [
+              /* @__PURE__ */ jsx(X, { "aria-hidden": true, className: "mt-0.5 size-3.5 shrink-0 text-status-error-icon" }),
+              /* @__PURE__ */ jsx("span", { children: rule })
+            ] }, rule)) })
+          ] }) : null
+        ] }) : null,
+        /* @__PURE__ */ jsx("div", { className: "space-y-4", children: entry.variants.map((variant) => /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx("div", { className: "text-sm font-medium text-foreground", children: variant.title }),
+          /* @__PURE__ */ jsx(VariantPreview, { children: variant.render() }),
+          /* @__PURE__ */ jsx(CodeSnippet, { code: variant.code })
+        ] }, variant.id)) })
+      ]
+    }
+  );
+}
+export {
+  EntryCard
+};
+//# sourceMappingURL=EntryCard.js.map

package/dist/modules/design_system/gallery/components/EntryCard.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/design_system/gallery/components/EntryCard.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { Check, ExternalLink, X } from 'lucide-react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { LinkButton } from '@open-mercato/ui/primitives/link-button'\nimport type { GalleryEntry } from '../types'\nimport { DS_DOCS_URL, figmaNodeUrl } from '../registry'\nimport { VariantPreview } from './VariantPreview'\nimport { CodeSnippet } from './CodeSnippet'\n\nexport function EntryCard({ entry }: { entry: GalleryEntry }) {\n  const t = useT()\n\n  return (\n    <section\n      id={`gallery-entry-${entry.id}`}\n      aria-labelledby={`gallery-entry-${entry.id}-title`}\n      className=\"scroll-mt-4 space-y-4 rounded-lg border border-border bg-card p-4\"\n    >\n      <div className=\"flex flex-col gap-2 sm:flex-row sm:items-start sm:justify-between\">\n        <div className=\"min-w-0 space-y-1\">\n          <h3 id={`gallery-entry-${entry.id}-title`} className=\"text-base font-semibold leading-tight\">\n            {entry.title}\n          </h3>\n          {entry.descriptionKey ? (\n            <p className=\"text-sm text-muted-foreground\">{t(entry.descriptionKey, entry.title)}</p>\n          ) : null}\n          <code className=\"block truncate text-xs text-muted-foreground\">{entry.importPath}</code>\n        </div>\n        <div className=\"flex shrink-0 items-center gap-3\">\n          {entry.figmaNodeId ? (\n            <LinkButton asChild size=\"sm\">\n              <a href={figmaNodeUrl(entry.figmaNodeId)} target=\"_blank\" rel=\"noreferrer\">\n                {t('design_system.gallery.openInFigma', 'Open in Figma')}\n                <ExternalLink />\n              </a>\n            </LinkButton>\n          ) : null}\n          {entry.docsAnchor ? (\n            <LinkButton asChild size=\"sm\" variant=\"gray\">\n              <a href={`${DS_DOCS_URL}${entry.docsAnchor}`} target=\"_blank\" rel=\"noreferrer\">\n                {t('design_system.gallery.viewDocs', 'View docs')}\n                <ExternalLink />\n              </a>\n            </LinkButton>\n          ) : null}\n        </div>\n      </div>\n      {entry.usage && (entry.usage.do?.length || entry.usage.dont?.length) ? (\n        <div className=\"grid gap-4 rounded-md border border-border bg-muted/30 p-4 sm:grid-cols-2\">\n          {entry.usage.do?.length ? (\n            <div className=\"space-y-1.5\">\n              <div className=\"text-xs font-medium uppercase tracking-wider text-muted-foreground\">\n                {t('design_system.gallery.usageDo', 'Do')}\n              </div>\n              <ul className=\"space-y-1.5\">\n                {entry.usage.do.map((rule) => (\n                  <li key={rule} className=\"flex items-start gap-2 text-sm text-foreground\">\n                    <Check aria-hidden className=\"mt-0.5 size-3.5 shrink-0 text-status-success-icon\" />\n                    <span>{rule}</span>\n                  </li>\n                ))}\n              </ul>\n            </div>\n          ) : null}\n          {entry.usage.dont?.length ? (\n            <div className=\"space-y-1.5\">\n              <div className=\"text-xs font-medium uppercase tracking-wider text-muted-foreground\">\n                {t('design_system.gallery.usageDont', \"Don't\")}\n              </div>\n              <ul className=\"space-y-1.5\">\n                {entry.usage.dont.map((rule) => (\n                  <li key={rule} className=\"flex items-start gap-2 text-sm text-foreground\">\n                    <X aria-hidden className=\"mt-0.5 size-3.5 shrink-0 text-status-error-icon\" />\n                    <span>{rule}</span>\n                  </li>\n                ))}\n              </ul>\n            </div>\n          ) : null}\n        </div>\n      ) : null}\n      <div className=\"space-y-4\">\n        {entry.variants.map((variant) => (\n          <div key={variant.id} className=\"space-y-2\">\n            <div className=\"text-sm font-medium text-foreground\">{variant.title}</div>\n            <VariantPreview>{variant.render()}</VariantPreview>\n            <CodeSnippet code={variant.code} />\n          </div>\n        ))}\n      </div>\n    </section>\n  )\n}\n"],
+  "mappings": ";AAqBQ,SACE,KADF;AAlBR,SAAS,OAAO,cAAc,SAAS;AACvC,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAE3B,SAAS,aAAa,oBAAoB;AAC1C,SAAS,sBAAsB;AAC/B,SAAS,mBAAmB;AAErB,SAAS,UAAU,EAAE,MAAM,GAA4B;AAC5D,QAAM,IAAI,KAAK;AAEf,SACE;AAAA,IAAC;AAAA;AAAA,MACC,IAAI,iBAAiB,MAAM,EAAE;AAAA,MAC7B,mBAAiB,iBAAiB,MAAM,EAAE;AAAA,MAC1C,WAAU;AAAA,MAEV;AAAA,6BAAC,SAAI,WAAU,qEACb;AAAA,+BAAC,SAAI,WAAU,qBACb;AAAA,gCAAC,QAAG,IAAI,iBAAiB,MAAM,EAAE,UAAU,WAAU,yCAClD,gBAAM,OACT;AAAA,YACC,MAAM,iBACL,oBAAC,OAAE,WAAU,iCAAiC,YAAE,MAAM,gBAAgB,MAAM,KAAK,GAAE,IACjF;AAAA,YACJ,oBAAC,UAAK,WAAU,gDAAgD,gBAAM,YAAW;AAAA,aACnF;AAAA,UACA,qBAAC,SAAI,WAAU,oCACZ;AAAA,kBAAM,cACL,oBAAC,cAAW,SAAO,MAAC,MAAK,MACvB,+BAAC,OAAE,MAAM,aAAa,MAAM,WAAW,GAAG,QAAO,UAAS,KAAI,cAC3D;AAAA,gBAAE,qCAAqC,eAAe;AAAA,cACvD,oBAAC,gBAAa;AAAA,eAChB,GACF,IACE;AAAA,YACH,MAAM,aACL,oBAAC,cAAW,SAAO,MAAC,MAAK,MAAK,SAAQ,QACpC,+BAAC,OAAE,MAAM,GAAG,WAAW,GAAG,MAAM,UAAU,IAAI,QAAO,UAAS,KAAI,cAC/D;AAAA,gBAAE,kCAAkC,WAAW;AAAA,cAChD,oBAAC,gBAAa;AAAA,eAChB,GACF,IACE;AAAA,aACN;AAAA,WACF;AAAA,QACC,MAAM,UAAU,MAAM,MAAM,IAAI,UAAU,MAAM,MAAM,MAAM,UAC3D,qBAAC,SAAI,WAAU,6EACZ;AAAA,gBAAM,MAAM,IAAI,SACf,qBAAC,SAAI,WAAU,eACb;AAAA,gCAAC,SAAI,WAAU,sEACZ,YAAE,iCAAiC,IAAI,GAC1C;AAAA,YACA,oBAAC,QAAG,WAAU,eACX,gBAAM,MAAM,GAAG,IAAI,CAAC,SACnB,qBAAC,QAAc,WAAU,kDACvB;AAAA,kCAAC,SAAM,eAAW,MAAC,WAAU,qDAAoD;AAAA,cACjF,oBAAC,UAAM,gBAAK;AAAA,iBAFL,IAGT,CACD,GACH;AAAA,aACF,IACE;AAAA,UACH,MAAM,MAAM,MAAM,SACjB,qBAAC,SAAI,WAAU,eACb;AAAA,gCAAC,SAAI,WAAU,sEACZ,YAAE,mCAAmC,OAAO,GAC/C;AAAA,YACA,oBAAC,QAAG,WAAU,eACX,gBAAM,MAAM,KAAK,IAAI,CAAC,SACrB,qBAAC,QAAc,WAAU,kDACvB;AAAA,kCAAC,KAAE,eAAW,MAAC,WAAU,mDAAkD;AAAA,cAC3E,oBAAC,UAAM,gBAAK;AAAA,iBAFL,IAGT,CACD,GACH;AAAA,aACF,IACE;AAAA,WACN,IACE;AAAA,QACJ,oBAAC,SAAI,WAAU,aACZ,gBAAM,SAAS,IAAI,CAAC,YACnB,qBAAC,SAAqB,WAAU,aAC9B;AAAA,8BAAC,SAAI,WAAU,uCAAuC,kBAAQ,OAAM;AAAA,UACpE,oBAAC,kBAAgB,kBAAQ,OAAO,GAAE;AAAA,UAClC,oBAAC,eAAY,MAAM,QAAQ,MAAM;AAAA,aAHzB,QAAQ,EAIlB,CACD,GACH;AAAA;AAAA;AAAA,EACF;AAEJ;",
+  "names": []
+}