@pattern-stack/codegen 0.4.0 → 0.4.2

package/runtime/subsystems/sync/execute-sync.use-case.ts

@@ -0,0 +1,334 @@
+/**
+ * ExecuteSyncUseCase — the generic sync orchestrator (SYNC-5).
+ *
+ * One class. Reused across every `(provider, detection-mode, canonical-entity)`
+ * tuple. Parameterized over `T` so canonical records stay typed end-to-end.
+ *
+ * Flow per run:
+ *
+ *   1. `recorder.startRun(...)` — opens a `sync_runs` row in 'running'.
+ *   2. for each change yielded by `source.listChanges(subscription)`:
+ *        a. if loopback store says "echo of own write" → skip, record
+ *           as `status: 'skipped'`, `operation: 'noop'`, changedFields `{}`.
+ *        b. differ.diff(existing, incoming) → 'noop' short-circuits to
+ *           a noop audit row (no sink write).
+ *        c. sink.upsertByExternalId / softDeleteByExternalId → records
+ *           the local id on the audit row.
+ *        d. per-item try/catch — a failed item increments the failed
+ *           counter and records `status: 'failed'` with `error`, but
+ *           does NOT abort the run.
+ *        e. advance `latestCursor = change.cursor` as the iterator moves.
+ *   3. `cursors.put(subscription.id, latestCursor)` when the loop completes
+ *      AND at least one cursor advance happened. On exceptions from the
+ *      source iterator (auth expiry, network error), we persist the
+ *      last-good cursor so the next run resumes from the last known
+ *      successful position.
+ *   4. `finally { recorder.completeRun(...) }` — always terminates the run.
+ *
+ * ## Generics
+ *
+ * - `T` = canonical record shape from the adapter side. Same `T` flows
+ *   through `IChangeSource<T>`, `IFieldDiffer<T>`, `ISyncSink<T>`.
+ *
+ * ## No CRM bleed
+ *
+ * Per the SYNC-5 issue's extraction notes (HS-9 finding), this orchestrator
+ * is strictly provider-agnostic:
+ *   - `entityType` is `string` throughout; no `'opportunity' | 'account' | ...`
+ *     narrowing leaks into the use case
+ *   - `loopback.isEchoOfOwnWrite` is typed against the same `T`, not a CRM
+ *     union
+ *   - dealbrain's `SyncRunRecorderService` class injection replaced with the
+ *     `ISyncRunRecorder` protocol (backend lands in SYNC-4)
+ */
+import { Inject, Injectable, Logger, Optional } from '@nestjs/common';
+import type { IChangeSource, Change } from './sync-change-source.protocol';
+import type { ICursorStore } from './sync-cursor-store.protocol';
+import type { IFieldDiffer, FieldDiff } from './sync-field-diff.protocol';
+import type { ISyncSink } from './sync-sink.protocol';
+import type { ISyncRunRecorder } from './sync-run-recorder.protocol';
+import type { ILoopbackFingerprintStore } from './sync-loopback.protocol';
+import { assertTenantId } from './sync-errors';
+import {
+  SYNC_CHANGE_SOURCE,
+  SYNC_CURSOR_STORE,
+  SYNC_FIELD_DIFFER,
+  SYNC_LOOPBACK_FINGERPRINT_STORE,
+  SYNC_MULTI_TENANT,
+  SYNC_RUN_RECORDER,
+  SYNC_SINK,
+} from './sync.tokens';
+
+// ============================================================================
+// Inputs + result
+// ============================================================================
+
+export interface ExecuteSyncInput<T> {
+  /** The subscription whose cursor/identity frames this run. */
+  readonly subscription: {
+    readonly id: string;
+    readonly domain: string; // entityType — used on audit rows
+    readonly externalRef?: string | null;
+  };
+  /** Per-run user context; threaded through sink writes. */
+  readonly userId: string;
+  /** Provider label persisted on saved rows, e.g. `'salesforce-crm'`. */
+  readonly provider: string;
+  /** Run direction — almost always `'inbound'`. Reserved for writeback. */
+  readonly direction: 'inbound' | 'outbound';
+  /** Detection mode — maps 1:1 to `sync_runs.action`. */
+  readonly action: 'poll' | 'cdc' | 'webhook' | 'manual' | 'writeback';
+  /** Multi-tenant deployments pass the tenant id through. */
+  readonly tenantId?: string | null;
+  /**
+   * Optional override — inject a specific change source for this run when
+   * the DI-bound source is not the one to use (e.g. manual backfill with
+   * a custom cursor). Defaults to the DI-resolved `SYNC_CHANGE_SOURCE`.
+   */
+  readonly sourceOverride?: IChangeSource<T>;
+}
+
+export interface ExecuteSyncResult {
+  readonly runId: string;
+  readonly status: 'success' | 'no_changes' | 'failed';
+  readonly recordsFound: number;
+  readonly recordsProcessed: number;
+  readonly recordsFailed: number;
+  readonly cursorBefore: unknown | null;
+  readonly cursorAfter: unknown | null;
+  readonly durationMs: number;
+  readonly error?: string | null;
+}
+
+// ============================================================================
+// ExecuteSyncUseCase
+// ============================================================================
+
+@Injectable()
+export class ExecuteSyncUseCase<T extends Record<string, unknown>> {
+  private readonly logger = new Logger(ExecuteSyncUseCase.name);
+
+  constructor(
+    @Inject(SYNC_CHANGE_SOURCE) private readonly source: IChangeSource<T>,
+    @Inject(SYNC_CURSOR_STORE) private readonly cursors: ICursorStore,
+    @Inject(SYNC_FIELD_DIFFER) private readonly differ: IFieldDiffer<T>,
+    @Inject(SYNC_SINK) private readonly sink: ISyncSink<T>,
+    @Inject(SYNC_RUN_RECORDER) private readonly recorder: ISyncRunRecorder,
+    @Optional()
+    @Inject(SYNC_LOOPBACK_FINGERPRINT_STORE)
+    private readonly loopback?: ILoopbackFingerprintStore<T>,
+    @Optional()
+    @Inject(SYNC_MULTI_TENANT)
+    private readonly multiTenant: boolean = false,
+  ) {}
+
+  async execute(input: ExecuteSyncInput<T>): Promise<ExecuteSyncResult> {
+    // Defense-in-depth tenancy guard — fire BEFORE startRun so a rejected
+    // input never leaves a dangling `status=running` row. Backends also
+    // enforce (SYNC-4), but failing fast at the orchestrator boundary is
+    // cheaper for observability, metrics, and manual cleanup.
+    assertTenantId(input.tenantId, {
+      multiTenant: this.multiTenant,
+      operation: 'execute',
+    });
+
+    const source = input.sourceOverride ?? this.source;
+    const startedAt = Date.now();
+    const cursorBefore = await this.cursors.get(input.subscription.id, input.tenantId);
+
+    const { id: runId } = await this.recorder.startRun({
+      subscriptionId: input.subscription.id,
+      direction: input.direction,
+      action: input.action,
+      cursorBefore,
+      tenantId: input.tenantId,
+    });
+
+    let recordsFound = 0;
+    let recordsProcessed = 0;
+    let recordsFailed = 0;
+    let latestCursor: unknown | null = cursorBefore;
+    let cursorAdvanced = false;
+    let runError: string | null = null;
+    let status: 'success' | 'no_changes' | 'failed' = 'no_changes';
+
+    try {
+      for await (const change of source.listChanges(input.subscription)) {
+        recordsFound++;
+        latestCursor = change.cursor;
+        cursorAdvanced = true;
+
+        try {
+          await this.processChange(runId, input, change);
+          recordsProcessed++;
+        } catch (err) {
+          recordsFailed++;
+          const message = err instanceof Error ? err.message : String(err);
+          this.logger.warn(
+            `sync item failed: subscription=${input.subscription.id} externalId=${change.externalId}: ${message}`,
+          );
+          await this.recorder.recordItem({
+            syncRunId: runId,
+            entityType: input.subscription.domain,
+            externalId: change.externalId,
+            operation: change.operation === 'deleted' ? 'deleted' : 'updated',
+            status: 'failed',
+            changedFields: {},
+            error: message,
+            tenantId: input.tenantId,
+          });
+        }
+      }
+
+      if (recordsFailed > 0 && recordsProcessed === 0 && recordsFound > 0) {
+        // Every record we saw failed — call the run a failure, not a
+        // success. Partial success (some processed, some failed) still
+        // counts as 'success' so the cursor advances.
+        status = 'failed';
+        runError = `all ${recordsFailed} records failed`;
+      } else if (recordsFound === 0) {
+        status = 'no_changes';
+      } else {
+        status = 'success';
+      }
+    } catch (err) {
+      // Source iterator itself threw — cursor DOES NOT advance past the
+      // last-successful cursor. `latestCursor` still holds the last
+      // `change.cursor` we observed, which is the furthest we know to
+      // have delivered. Persist it (below) so next run resumes there.
+      status = 'failed';
+      runError = err instanceof Error ? err.message : String(err);
+      this.logger.error(
+        `sync source failed: subscription=${input.subscription.id}: ${runError}`,
+      );
+    }
+
+    // Persist cursor advance only when something actually moved. Never
+    // overwrite a valid cursor with `null` on a no-change run.
+    if (cursorAdvanced && latestCursor !== null && latestCursor !== undefined) {
+      try {
+        await this.cursors.put(input.subscription.id, latestCursor, input.tenantId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.logger.error(
+          `cursor put failed: subscription=${input.subscription.id}: ${message}`,
+        );
+        if (status !== 'failed') {
+          status = 'failed';
+          runError = `cursor put failed: ${message}`;
+        }
+      }
+    }
+
+    const durationMs = Date.now() - startedAt;
+
+    await this.recorder.completeRun(runId, {
+      status,
+      recordsFound,
+      recordsProcessed,
+      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,
+      durationMs,
+      error: runError,
+    });
+
+    return {
+      runId,
+      status,
+      recordsFound,
+      recordsProcessed,
+      recordsFailed,
+      cursorBefore,
+      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,
+      durationMs,
+      error: runError,
+    };
+  }
+
+  private async processChange(
+    runId: string,
+    input: ExecuteSyncInput<T>,
+    change: Change<T>,
+  ): Promise<void> {
+    // Loopback filter — skip echoes of our own outbound writes.
+    if (this.loopback) {
+      const isEcho = await this.loopback.isEchoOfOwnWrite(
+        input.subscription.domain,
+        change.externalId,
+        change.record,
+      );
+      if (isEcho) {
+        await this.recorder.recordItem({
+          syncRunId: runId,
+          entityType: input.subscription.domain,
+          externalId: change.externalId,
+          operation: 'noop',
+          status: 'skipped',
+          changedFields: {},
+          tenantId: input.tenantId,
+        });
+        return;
+      }
+    }
+
+    // Deletion branch — no diff, no upsert; soft-delete via sink.
+    if (change.operation === 'deleted') {
+      const result = await this.sink.softDeleteByExternalId(
+        input.userId,
+        change.externalId,
+      );
+      await this.recorder.recordItem({
+        syncRunId: runId,
+        entityType: input.subscription.domain,
+        externalId: change.externalId,
+        localId: result?.id ?? null,
+        operation: result ? 'deleted' : 'noop',
+        status: 'success',
+        changedFields: {},
+        tenantId: input.tenantId,
+      });
+      return;
+    }
+
+    // Create/update path — diff against local state, short-circuit on noop.
+    const existing = await this.sink.findByExternalId(
+      input.userId,
+      change.externalId,
+    );
+    const diff = this.differ.diff(
+      existing,
+      change.record,
+      change.providerChangedFields,
+    );
+
+    if (diff === 'noop') {
+      await this.recorder.recordItem({
+        syncRunId: runId,
+        entityType: input.subscription.domain,
+        externalId: change.externalId,
+        localId: null,
+        operation: 'noop',
+        status: 'success',
+        changedFields: {},
+        tenantId: input.tenantId,
+      });
+      return;
+    }
+
+    const { id: localId } = await this.sink.upsertByExternalId(
+      input.userId,
+      change.record,
+      input.provider,
+    );
+
+    await this.recorder.recordItem({
+      syncRunId: runId,
+      entityType: input.subscription.domain,
+      externalId: change.externalId,
+      localId,
+      operation: existing === null ? 'created' : 'updated',
+      status: 'success',
+      changedFields: diff as FieldDiff,
+      tenantId: input.tenantId,
+    });
+  }
+}

package/runtime/subsystems/sync/index.ts

@@ -0,0 +1,98 @@
+/**
+ * Sync subsystem — public API
+ *
+ * Slices landed so far:
+ *   - SYNC-2 — protocols + DI tokens (#134)
+ *   - SYNC-1 — Drizzle audit-table schemas (#148)
+ *   - SYNC-3 — MemoryCursorStore (#149)
+ *   - SYNC-5 — ExecuteSyncUseCase + DeepEqualDiffer + recorder/loopback protocols (#150)
+ *   - SYNC-4 — Drizzle backends (#151)
+ *   - SYNC-6 — SyncModule + MemoryRunRecorder + multi-tenancy opt-in (this slice)
+ *
+ * Scaffold templates (SYNC-7) and docs/skills (SYNC-8) land in their own
+ * PRs. See epic #60.
+ */
+
+// Protocols
+export type {
+  Change,
+  ChangeSource,
+  IChangeSource,
+  SyncSubscriptionView,
+} from './sync-change-source.protocol';
+export type { ICursorStore } from './sync-cursor-store.protocol';
+export type {
+  DiffResult,
+  FieldDiff,
+  FieldDiffValue,
+  IFieldDiffer,
+} from './sync-field-diff.protocol';
+export {
+  FieldDiffSchema,
+  FieldDiffValueSchema,
+} from './sync-field-diff.protocol';
+export type { ISyncSink } from './sync-sink.protocol';
+export type {
+  CompleteRunInput,
+  ISyncRunRecorder,
+  RecordItemInput,
+  StartRunInput,
+} from './sync-run-recorder.protocol';
+export type { ILoopbackFingerprintStore } from './sync-loopback.protocol';
+
+// Tokens
+export {
+  SYNC_CHANGE_SOURCE,
+  SYNC_CURSOR_STORE,
+  SYNC_FIELD_DIFFER,
+  SYNC_LOOPBACK_FINGERPRINT_STORE,
+  SYNC_MODULE_OPTIONS,
+  SYNC_MULTI_TENANT,
+  SYNC_RUN_RECORDER,
+  SYNC_SINK,
+} from './sync.tokens';
+
+// Errors + shared guards
+export { MissingTenantIdError, assertTenantId } from './sync-errors';
+
+// Audit schemas (SYNC-1) — Drizzle pgTable declarations + row types + enums
+export {
+  syncSubscriptions,
+  syncRuns,
+  syncRunItems,
+  syncRunDirectionEnum,
+  syncRunActionEnum,
+  syncRunStatusEnum,
+  syncRunItemOperationEnum,
+  syncRunItemStatusEnum,
+} from './sync-audit.schema';
+export type {
+  SyncSubscriptionRow,
+  SyncRunRow,
+  SyncRunItemRow,
+} from './sync-audit.schema';
+
+// Memory backends (SYNC-3, SYNC-6) — test doubles
+export { MemoryCursorStore } from './sync-cursor-store.memory-backend';
+export {
+  MemoryRunRecorder,
+  type MemoryRunRecord,
+} from './sync-run-recorder.memory-backend';
+
+// Runtime (SYNC-5) — orchestrator + default differ
+export {
+  DeepEqualDiffer,
+  type DeepEqualDifferOptions,
+} from './deep-equal.differ';
+export {
+  ExecuteSyncUseCase,
+  type ExecuteSyncInput,
+  type ExecuteSyncResult,
+} from './execute-sync.use-case';
+
+// Drizzle backends (SYNC-4)
+export { PostgresCursorStore } from './sync-cursor-store.drizzle-backend';
+export { DrizzleSyncRunRecorder } from './sync-run-recorder.drizzle-backend';
+
+// Module (SYNC-6)
+export { SyncModule, type SyncModuleOptions } from './sync.module';