@tallyui/connector-vendure 1.0.0 → 3.0.0-next.0

package/dist/index.js

@@ -1,6 +1,141 @@
+// src/index.ts
+import { combinePullAdapters, createReconcileFeed } from "@tallyui/core";
+
+// src/auth.ts
+import { SignInError } from "@tallyui/core";
+
+// src/capabilities.ts
+import { ConnectorUnauthorizedError as ConnectorUnauthorizedError2, parseInfoCapabilities } from "@tallyui/core";
+
+// src/session-probe.ts
+import { ConnectorUnauthorizedError } from "@tallyui/core";
+async function signedOut(context) {
+  try {
+    const res = await fetch(`${context.baseUrl}/admin-api`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...context.headers },
+      body: JSON.stringify({ query: "query { activeAdministrator { id } }" }),
+      signal: context.signal
+    });
+    if (!res.ok) return void 0;
+    const body = await res.json();
+    if (body.errors?.length) return void 0;
+    if (body.data?.activeAdministrator === null) return true;
+    return body.data?.activeAdministrator?.id != null ? false : void 0;
+  } catch (error) {
+    if (context.signal?.aborted) throw error;
+    return void 0;
+  }
+}
+async function forbiddenError(context, forbidden) {
+  const out = await signedOut(context);
+  if (out === true) return new ConnectorUnauthorizedError(`Vendure GraphQL error: ${forbidden[0].message}`);
+  const what = forbidden.map(({ message, path }) => path?.length ? `${path.join(".")}: ${message}` : message).join("; ");
+  if (out === false) return new Error(`Vendure GraphQL error: FORBIDDEN: the store refused this request although the session is signed in (a permission is missing): ${what}`);
+  return new Error(`Vendure GraphQL error: FORBIDDEN: ${what} (the session check failed, so this may be transient)`);
+}
+
+// src/capabilities.ts
+var CAPABILITIES_PATH = "/tally/v1/info";
+async function readVendureCapabilities(baseUrl, headers, init = {}) {
+  const doFetch = init.fetch ?? fetch;
+  let res;
+  try {
+    res = await doFetch(`${baseUrl}${CAPABILITIES_PATH}`, { method: "GET", headers, signal: init.signal });
+  } catch {
+    return void 0;
+  }
+  if (res.status === 401 || res.status === 403) {
+    const out = await signedOut({ connectorId: "vendure", baseUrl, headers, signal: init.signal });
+    if (out === true) throw new ConnectorUnauthorizedError2(`Vendure refused ${CAPABILITIES_PATH}: the session is signed out`, res.status);
+    if (out === false) throw new Error(`Vendure refused ${CAPABILITIES_PATH} although the session is signed in: the CreateOrder permission is missing (HTTP ${res.status})`);
+    return void 0;
+  }
+  if (res.status === 404) return { orderCreate: 1 };
+  if (!res.ok) return void 0;
+  let body;
+  try {
+    body = await res.json();
+  } catch {
+    return { orderCreate: 1 };
+  }
+  return parseInfoCapabilities(body, (reason) => console.warn(`@tallyui/connector-vendure: ${reason}`));
+}
+
+// src/auth.ts
+var LOGIN = `mutation Login($email: String!, $password: String!) {
+  login(username: $email, password: $password) {
+    __typename
+    ... on CurrentUser { id }
+    ... on ErrorResult { errorCode message }
+  }
+}`;
+var vendureSignIn = async (baseUrl, { email, password }, init = {}) => {
+  const doFetch = init.fetch ?? fetch;
+  let res;
+  try {
+    res = await doFetch(`${baseUrl}/admin-api`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      signal: init.signal,
+      body: JSON.stringify({ query: LOGIN, variables: { email, password } })
+    });
+  } catch (error) {
+    if (error?.name === "AbortError" || init.signal?.aborted) throw error;
+    throw new SignInError("failed", `Could not reach Vendure at ${baseUrl}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  let body;
+  try {
+    body = await res.json();
+  } catch {
+    throw new SignInError("server_error", `Vendure sent an unreadable response (HTTP ${res.status})`, res.status);
+  }
+  if (!res.ok) throw new SignInError("server_error", body?.errors?.[0]?.message ?? `Vendure sign-in failed (HTTP ${res.status})`, res.status);
+  const login = body?.data?.login;
+  if (body?.errors?.length || !login) {
+    throw new SignInError("server_error", body?.errors?.[0]?.message ?? `Vendure sign-in failed (HTTP ${res.status})`, res.status);
+  }
+  if (login.errorCode === "INVALID_CREDENTIALS_ERROR") throw new SignInError("invalid_credentials", login.message ?? "Invalid email or password");
+  if (login.errorCode === "NATIVE_AUTH_STRATEGY_ERROR") throw new SignInError("unsupported", login.message ?? "Native email and password sign-in is disabled on this Vendure server");
+  if (login.__typename !== "CurrentUser") throw new SignInError("server_error", login.message ?? `Vendure sign-in failed (${login.__typename})`, res.status);
+  const token = res.headers.get("vendure-auth-token");
+  if (!token) {
+    throw new SignInError("unsupported", "Vendure signed in but sent no 'vendure-auth-token' header. Add 'bearer' to the server's authOptions.tokenMethod. This connector reads the default header name, so a server that renames authOptions.authTokenHeaderKey also gives this error.");
+  }
+  const capabilities = await readVendureCapabilities(baseUrl, { Authorization: `Bearer ${token}` }, { fetch: doFetch, signal: init.signal }).catch(() => void 0);
+  return { token, expiresAt: void 0, capabilities };
+};
+var warnedAuthToken = false;
+var vendureAuth = {
+  type: "Vendure Admin API",
+  fields: [
+    { key: "url", label: "Backend URL", type: "url", placeholder: "https://my-vendure-server.com", required: true },
+    { key: "email", label: "Email", type: "text", required: true },
+    { key: "password", label: "Password", type: "password", required: true },
+    { key: "channel_token", label: "Channel token (optional)", type: "text" }
+  ],
+  // An API key (Vendure 3.6+) wins over a signed-in session token; channel_token selects a non-default channel.
+  // auth_token is the deprecated name for token, kept so existing apps keep working.
+  getHeaders: (credentials) => {
+    if (credentials.token === void 0 && credentials.auth_token !== void 0 && !warnedAuthToken) {
+      warnedAuthToken = true;
+      console.warn("@tallyui/connector-vendure: the 'auth_token' credential is deprecated; store the credential as 'token' instead.");
+    }
+    const token = credentials.token ?? credentials.auth_token;
+    return {
+      ...credentials.api_key ? { "vendure-api-key": credentials.api_key } : token ? { Authorization: `Bearer ${token}` } : {},
+      ...credentials.channel_token ? { "vendure-token": credentials.channel_token } : {}
+    };
+  },
+  signIn: vendureSignIn
+};
+
 // src/schemas/products.ts
 var vendureProductSchema = {
-  version: 0,
+  // 1: declares variant trackInventory/outOfStockThreshold/useGlobalOutOfStockThreshold/enabled
+  // (backlog 28). 2: declares variant taxCategory { id } (#288). A bump drops and resyncs
+  // (ConnectorSchemas, ADR-060 amendment 9).
+  version: 2,
   primaryKey: "id",
   type: "object",
   properties: {
@@ -68,7 +203,21 @@ var vendureProductSchema = {
           currencyCode: { type: "string" },
           stockLevel: { type: "string" },
           stockOnHand: { type: "number" },
+          stockLevels: {
+            type: "array",
+            items: {
+              type: "object",
+              properties: {
+                stockLocationId: { type: "string" },
+                stockOnHand: { type: "number" },
+                stockAllocated: { type: "number" }
+              }
+            }
+          },
           trackInventory: { type: "string" },
+          outOfStockThreshold: { type: "number" },
+          useGlobalOutOfStockThreshold: { type: "boolean" },
+          enabled: { type: "boolean" },
           featuredAsset: {
             type: ["object", "null"],
             properties: {
@@ -87,7 +236,8 @@ var vendureProductSchema = {
               }
             }
           },
-          customFields: { type: "object" }
+          customFields: { type: "object" },
+          taxCategory: { type: ["object", "null"], properties: { id: { type: "string" } } }
         }
       }
     },
@@ -98,55 +248,109 @@ var vendureProductSchema = {
 };
 
 // src/traits/product.ts
-var vendureProductTraits = {
-  getId: (doc) => String(doc.id),
-  getName: (doc) => doc.name ?? "",
-  getSku: (doc) => doc.variants?.[0]?.sku || void 0,
-  getPrice: (doc) => {
-    const amount = doc.variants?.[0]?.priceWithTax;
-    if (amount == null) return void 0;
-    return (amount / 100).toFixed(2);
-  },
-  getRegularPrice: (doc) => {
-    const amount = doc.variants?.[0]?.priceWithTax;
-    if (amount == null) return void 0;
-    return (amount / 100).toFixed(2);
-  },
-  getSalePrice: () => {
-    return void 0;
-  },
-  isOnSale: () => {
-    return false;
-  },
-  getImageUrl: (doc) => doc.featuredAsset?.preview || doc.assets?.[0]?.preview || void 0,
-  getImageUrls: (doc) => (doc.assets ?? []).map((a) => a.preview).filter(Boolean),
-  getDescription: (doc) => doc.description || void 0,
-  getStockStatus: (doc) => {
-    const variant = doc.variants?.[0];
-    if (!variant) return "unknown";
-    const level = variant.stockLevel;
-    if (level === "IN_STOCK" || level === "LOW_STOCK") return "instock";
-    if (level === "OUT_OF_STOCK") return "outofstock";
-    if (variant.stockOnHand != null) {
-      return variant.stockOnHand > 0 ? "instock" : "outofstock";
-    }
-    return "unknown";
-  },
-  getStockQuantity: (doc) => {
-    return doc.variants?.[0]?.stockOnHand ?? null;
-  },
-  hasVariants: (doc) => (doc.variants?.length ?? 0) > 1,
-  getType: (doc) => {
-    if ((doc.variants?.length ?? 0) > 1) return "variable";
-    return "simple";
-  },
-  getBarcode: (doc) => {
-    return doc.variants?.[0]?.customFields?.barcode || void 0;
-  },
-  getCategoryNames: (doc) => (doc.collections ?? []).map((c) => c.name).filter(Boolean)
-};
+function productStock(variants2) {
+  if (!variants2.length) return { status: "unknown" };
+  const status = variants2.some((stock) => stock.status === "in_stock") ? "in_stock" : variants2.some((stock) => stock.status === "backorder") ? "backorder" : variants2.every((stock) => stock.status === "out_of_stock") ? "out_of_stock" : "unknown";
+  const quantity = variants2.every((stock) => stock.quantity != null) ? variants2.reduce((sum, stock) => sum + stock.quantity, 0) : void 0;
+  return quantity === void 0 ? { status } : { status, quantity };
+}
+function variantStock(variant, stockLocationId, globalTrackInventory, globalOutOfStockThreshold) {
+  if (!variant) return { status: "unknown" };
+  const tracked = variant.trackInventory === "TRUE" || variant.trackInventory !== "FALSE" && globalTrackInventory;
+  if (!tracked) return { status: "in_stock" };
+  const threshold = variant.useGlobalOutOfStockThreshold !== false ? globalOutOfStockThreshold : variant.outOfStockThreshold ?? 0;
+  let onHandLessAllocated;
+  if (variant.stockLevels != null) {
+    onHandLessAllocated = variant.stockLevels.filter((level) => stockLocationId == null || String(level.stockLocationId) === stockLocationId).reduce((sum, level) => sum + level.stockOnHand - level.stockAllocated, 0);
+  } else if (variant.stockOnHand != null) {
+    onHandLessAllocated = variant.stockOnHand;
+  }
+  if (onHandLessAllocated != null) {
+    const saleable = onHandLessAllocated - threshold;
+    const status = saleable <= 0 ? "out_of_stock" : onHandLessAllocated > 0 ? "in_stock" : "backorder";
+    return { status, quantity: Math.max(saleable, 0) };
+  }
+  if (variant.stockLevel === "IN_STOCK" || variant.stockLevel === "LOW_STOCK") return { status: "in_stock" };
+  if (variant.stockLevel === "OUT_OF_STOCK") return { status: "out_of_stock" };
+  return { status: "unknown" };
+}
+function liveVariants(doc) {
+  return (doc.variants ?? []).filter((variant) => variant.enabled !== false);
+}
+function createVendureProductTraits(barcodeField, stockLocationId, pricesIncludeTax = false, globalTrackInventory = true, globalOutOfStockThreshold = 0) {
+  const priceField = pricesIncludeTax ? "priceWithTax" : "price";
+  const traits = {
+    getId: (doc) => String(doc.id),
+    getName: (doc) => doc.name ?? "",
+    getSku: (doc) => doc.variants?.[0]?.sku || void 0,
+    getPrices: (doc, context) => {
+      const variant = liveVariants(doc)[0];
+      const amount = variant?.[priceField];
+      if (amount == null) return [];
+      const currency = String(variant.currencyCode ?? context?.currency ?? "XXX").toUpperCase();
+      return [{ amount, currency, kind: "base" }];
+    },
+    getVariants: (doc, context) => liveVariants(doc).map((variant) => ({
+      id: String(variant.id),
+      title: variant.name || void 0,
+      sku: variant.sku || void 0,
+      barcode: barcodeField ? variant.customFields?.[barcodeField] || void 0 : void 0,
+      prices: traits.getPrices({ variants: [variant] }, context),
+      stock: traits.getStock({ variants: [variant] })
+    })),
+    // The variant's tax category id: store-settings.ts keys taxRatesPpm by the same id. No variant id: the default
+    // (first live) variant, as getPrices.
+    getTaxClass: (doc, variantId) => {
+      const variant = variantId === void 0 ? liveVariants(doc)[0] : (doc.variants ?? []).find((v) => String(v.id) === variantId);
+      return variant?.taxCategory?.id == null ? void 0 : String(variant.taxCategory.id);
+    },
+    getStock: (doc) => productStock(liveVariants(doc).map((variant) => variantStock(variant, stockLocationId, globalTrackInventory, globalOutOfStockThreshold))),
+    getPrice: (doc) => {
+      const amount = liveVariants(doc)[0]?.[priceField];
+      if (amount == null) return void 0;
+      return (amount / 100).toFixed(2);
+    },
+    getRegularPrice: (doc) => {
+      const amount = liveVariants(doc)[0]?.[priceField];
+      if (amount == null) return void 0;
+      return (amount / 100).toFixed(2);
+    },
+    getSalePrice: () => {
+      return void 0;
+    },
+    isOnSale: () => {
+      return false;
+    },
+    getImageUrl: (doc) => doc.featuredAsset?.preview || doc.assets?.[0]?.preview || void 0,
+    getImageUrls: (doc) => (doc.assets ?? []).map((a) => a.preview).filter(Boolean),
+    getDescription: (doc) => doc.description || void 0,
+    // Aggregated across every variant, like getStock (backlog 28), not variant 0.
+    getStockStatus: (doc) => {
+      const status = traits.getStock(doc).status;
+      if (status === "in_stock" || status === "backorder") return "instock";
+      if (status === "out_of_stock") return "outofstock";
+      return "unknown";
+    },
+    getStockQuantity: (doc) => traits.getStock(doc).quantity ?? null,
+    hasVariants: (doc) => (doc.variants?.length ?? 0) > 1,
+    // A product with no variants at all keeps the product-level-only answer.
+    isSellable: (doc) => doc.enabled !== false && ((doc.variants?.length ?? 0) === 0 || liveVariants(doc).length > 0),
+    getVariantCount: (doc) => doc.variants ? liveVariants(doc).length : 1,
+    getType: (doc) => {
+      if ((doc.variants?.length ?? 0) > 1) return "variable";
+      return "simple";
+    },
+    getBarcode: (doc) => {
+      return barcodeField ? liveVariants(doc)[0]?.customFields?.[barcodeField] || void 0 : void 0;
+    },
+    getCategoryNames: (doc) => (doc.collections ?? []).map((c) => c.name).filter(Boolean)
+  };
+  return traits;
+}
+var vendureProductTraits = createVendureProductTraits();
 
 // src/sync/products.ts
+import { ConnectorUnauthorizedError as ConnectorUnauthorizedError3 } from "@tallyui/core";
 var PRODUCT_LIST_QUERY = `
   query GetProducts($options: ProductListOptions) {
     products(options: $options) {
@@ -158,7 +362,7 @@ var PRODUCT_LIST_QUERY = `
     }
   }
 `;
-var PRODUCT_DETAIL_QUERY = `
+var PRODUCT_DETAIL_QUERY = (barcodeField) => `
   query GetProduct($id: ID!) {
     product(id: $id) {
       id
@@ -179,17 +383,16 @@ var PRODUCT_DETAIL_QUERY = `
         price
         priceWithTax
         currencyCode
-        stockLevel
-        stockOnHand
+        stockLevels { stockLocationId stockOnHand stockAllocated }
         trackInventory
         featuredAsset { id preview }
         options { id name code }
-        customFields
+        ${barcodeField ? `customFields { ${barcodeField} }` : ""}
       }
     }
   }
 `;
-var vendureProductSync = {
+var createVendureProductSync = (barcodeField) => ({
   fetchAllIds: async (context) => {
     const entries = [];
     const take = 100;
@@ -215,7 +418,7 @@ var vendureProductSync = {
   fetchByIds: async (ids, context) => {
     const products = [];
     for (const id of ids) {
-      const res = await gql(context, PRODUCT_DETAIL_QUERY, { id });
+      const res = await gql(context, PRODUCT_DETAIL_QUERY(barcodeField), { id });
       if (res.data?.product) {
         products.push(res.data.product);
       }
@@ -241,7 +444,7 @@ var vendureProductSync = {
       if (!data) break;
       totalItems = data.totalItems;
       for (const item of data.items ?? []) {
-        const detail = await gql(context, PRODUCT_DETAIL_QUERY, { id: item.id });
+        const detail = await gql(context, PRODUCT_DETAIL_QUERY(barcodeField), { id: item.id });
         if (detail.data?.product) {
           products.push(detail.data.product);
         }
@@ -250,23 +453,29 @@ var vendureProductSync = {
     }
     return products;
   }
-};
-async function gql(context, query, variables) {
+});
+var vendureProductSync = createVendureProductSync();
+async function gql(context, query2, variables) {
   const res = await fetch(`${context.baseUrl}/admin-api`, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
       ...context.headers
     },
-    body: JSON.stringify({ query, variables }),
+    body: JSON.stringify({ query: query2, variables }),
     signal: context.signal
   });
+  if (res.status === 401 || res.status === 403) throw new ConnectorUnauthorizedError3(`Vendure API error: ${res.status}`, res.status);
   if (!res.ok) throw new Error(`Vendure API error: ${res.status}`);
-  return res.json();
+  const body = await res.json();
+  const forbidden = body.errors?.filter((error) => error.extensions?.code === "FORBIDDEN") ?? [];
+  if (forbidden.length) throw await forbiddenError(context, forbidden);
+  return body;
 }
 
 // src/replication/products.ts
-var PRODUCT_LIST_QUERY2 = `
+import { compareIds, ConnectorUnauthorizedError as ConnectorUnauthorizedError4 } from "@tallyui/core";
+var PRODUCT_LIST_QUERY2 = (barcodeField) => `
   query GetProducts($options: ProductListOptions) {
     products(options: $options) {
       items {
@@ -288,136 +497,443 @@ var PRODUCT_LIST_QUERY2 = `
           price
           priceWithTax
           currencyCode
-          stockLevel
-          stockOnHand
+          stockLevels { stockLocationId stockOnHand stockAllocated }
           trackInventory
+          outOfStockThreshold
+          useGlobalOutOfStockThreshold
+          enabled
           featuredAsset { id preview }
           options { id name code }
-          customFields
+          taxCategory { id }
+          ${barcodeField ? `customFields { ${barcodeField} }` : ""}
         }
       }
       totalItems
     }
   }
 `;
-var UPDATE_PRODUCT_MUTATION = `
-  mutation UpdateProduct($input: UpdateProductInput!) {
-    updateProduct(input: $input) {
-      id
-      updatedAt
+var PRODUCT_MARK_QUERY = `
+  query GetProductsMark($options: ProductListOptions) {
+    products(options: $options) {
+      items { id updatedAt }
+      totalItems
     }
   }
 `;
-async function gql2(context, query, variables) {
+async function gql2(context, query2, variables) {
   const res = await fetch(`${context.baseUrl}/admin-api`, {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
       ...context.headers
     },
-    body: JSON.stringify({ query, variables }),
+    body: JSON.stringify({ query: query2, variables }),
     signal: context.signal
   });
-  if (!res.ok) throw new Error(`Vendure API error: ${res.status}`);
-  return res.json();
+  if (!res.ok) {
+    const body2 = await res.json().catch(() => void 0);
+    const message = body2?.errors?.[0]?.message;
+    if (res.status === 401 || res.status === 403) throw new ConnectorUnauthorizedError4(`Vendure API error: ${res.status}${message ? `: ${message}` : ""}`, res.status);
+    throw new Error(`Vendure API error: ${res.status}${message ? `: ${message}` : ""}`);
+  }
+  const body = await res.json();
+  const forbidden = body.errors?.filter((error) => error.extensions?.code === "FORBIDDEN") ?? [];
+  if (forbidden.length) throw await forbiddenError(context, forbidden);
+  if (body.errors?.length) throw new Error(`Vendure GraphQL error: ${body.errors[0].message}`);
+  return body;
 }
-var vendureProductReplication = {
+var TIMEZONE_MESSAGE = "Vendure updatedAt filters miss changes: run Vendure with TZ=UTC or set updatedAtSkewMs to at least the magnitude of the server UTC offset in milliseconds.";
+var VendureTimezoneConfigError = class extends Error {
+  name = "VendureTimezoneConfigError";
+  code = "store_misconfigured";
+  /** Only the store owner can fix it on the server, so the pull waits the store delay (`errorKind`). */
+  fixedBy = "store";
+  /**
+   * The store-side remedy, for `SyncStatus`'s detail. The message's other remedy,
+   * `updatedAtSkewMs`, is a connector option on the till, so it stays in the message only.
+   */
+  fix = "run the Vendure server with its time zone set to UTC";
+  constructor() {
+    super(TIMEZONE_MESSAGE);
+  }
+};
+async function probeUpdatedAtSkew(passHighWater, updatedAtSkewMs, fetchTotal, remark) {
+  for (const overlap of [1, 0]) {
+    if (overlap === 0 && updatedAtSkewMs > 0) continue;
+    const after = (mark) => new Date(Date.parse(mark) + (overlap === 0 ? 1 : -1) - updatedAtSkewMs).toISOString();
+    let total = await fetchTotal(after(passHighWater));
+    if (overlap === 1 && total === 0 && remark) {
+      const remarked = await remark();
+      if (remarked) {
+        passHighWater = remarked;
+        total = await fetchTotal(after(passHighWater));
+      }
+    }
+    if (overlap === 1 && total === 0) {
+      if (remark) throw new VendureTimezoneConfigError();
+      throw new Error(TIMEZONE_MESSAGE);
+    }
+    if (overlap === 0 && total > 0) {
+      console.warn("Vendure updatedAt filters over-fetch because the server is not in UTC.");
+    }
+  }
+  return passHighWater;
+}
+function toProductDocument(p) {
+  const doc = { _deleted: false };
+  for (const field of Object.keys(vendureProductSchema.properties)) {
+    if (p[field] !== void 0) doc[field] = p[field];
+  }
+  if (Array.isArray(doc.variants)) {
+    doc.variants = [...doc.variants].sort((a, b) => compareIds(a.id, b.id));
+  }
+  return doc;
+}
+var createVendureProductReplication = (barcodeField, updatedAtSkewMs = 0) => ({
   pull: {
     async handler(lastCheckpoint, batchSize, context) {
+      if (batchSize > 1e3) throw new Error("Vendure Admin API take must not exceed 1000");
+      if (lastCheckpoint?.skip && lastCheckpoint.passHighWater === void 0 && lastCheckpoint.passTotal === void 0) {
+        lastCheckpoint = { skip: 0, updatedAt: lastCheckpoint.updatedAt ?? "" };
+      }
+      let passHighWater = lastCheckpoint?.passHighWater ?? lastCheckpoint?.updatedAt ?? "";
+      if (!lastCheckpoint?.skip) {
+        const fetchMark = async () => {
+          const head = await gql2(context, PRODUCT_MARK_QUERY, { options: { take: 1, sort: { updatedAt: "DESC" } } });
+          return head.data?.products?.items?.[0]?.updatedAt;
+        };
+        const mark = await fetchMark();
+        passHighWater = mark ?? lastCheckpoint?.updatedAt ?? "";
+        if (mark === void 0 || lastCheckpoint?.updatedAt && passHighWater === lastCheckpoint.updatedAt) {
+          return { documents: [], checkpoint: lastCheckpoint ?? { skip: 0, updatedAt: "" } };
+        }
+        passHighWater = await probeUpdatedAtSkew(passHighWater, updatedAtSkewMs, async (after) => {
+          const probe = await gql2(context, PRODUCT_MARK_QUERY, {
+            options: { take: 1, sort: { updatedAt: "DESC" }, filter: { updatedAt: { after } } }
+          });
+          return probe.data.products.totalItems;
+        }, fetchMark);
+      }
       const options = {
         take: batchSize,
-        skip: lastCheckpoint?.skip ?? 0
+        skip: lastCheckpoint?.skip ?? 0,
+        sort: { id: "ASC" }
       };
       if (lastCheckpoint?.updatedAt) {
         options.filter = {
-          updatedAt: { after: lastCheckpoint.updatedAt }
+          // Vendure after is strict; overlap by 1 ms to include timestamp ties.
+          updatedAt: { after: new Date(Date.parse(lastCheckpoint.updatedAt) - 1 - updatedAtSkewMs).toISOString() }
         };
       }
-      const res = await gql2(context, PRODUCT_LIST_QUERY2, { options });
-      if (res.errors?.length) {
-        throw new Error(`Vendure GraphQL error: ${res.errors[0].message}`);
+      const res = await gql2(context, PRODUCT_LIST_QUERY2(barcodeField), { options });
+      let data = res.data?.products;
+      let passTotal = options.skip === 0 ? data.totalItems : lastCheckpoint?.passTotal ?? data.totalItems;
+      if (options.skip > 0 && data.totalItems < passTotal) {
+        options.skip = 0;
+        const restarted = await gql2(context, PRODUCT_LIST_QUERY2(barcodeField), { options });
+        data = restarted.data?.products;
+        passTotal = data.totalItems;
       }
-      const data = res.data?.products;
       const products = data?.items ?? [];
-      const documents = products.map((p) => ({ ...p, _deleted: false }));
-      const nextSkip = products.length < batchSize ? 0 : (lastCheckpoint?.skip ?? 0) + products.length;
-      const checkpoint = products.length > 0 ? {
-        skip: nextSkip,
-        updatedAt: products[products.length - 1].updatedAt
-      } : lastCheckpoint ?? { skip: 0, updatedAt: "" };
+      if (!products.length && options.skip > 0) {
+        return createVendureProductReplication(barcodeField, updatedAtSkewMs).pull.handler(
+          { skip: 0, updatedAt: lastCheckpoint?.updatedAt ?? "" },
+          batchSize,
+          context
+        );
+      }
+      const documents = products.map(toProductDocument);
+      const checkpoint = options.skip + products.length >= data.totalItems ? { skip: 0, updatedAt: passHighWater, passHighWater: void 0, passTotal: void 0 } : {
+        skip: options.skip + products.length,
+        updatedAt: lastCheckpoint?.updatedAt ?? "",
+        passHighWater,
+        passTotal
+      };
       return { documents, checkpoint };
     }
-  },
-  push: {
-    async handler(changeRows, context) {
-      const conflicts = [];
-      for (const row of changeRows) {
-        const doc = row.newDocumentState;
-        try {
-          const res = await gql2(context, UPDATE_PRODUCT_MUTATION, {
-            input: doc
+  }
+});
+var vendureProductReplication = createVendureProductReplication();
+
+// src/replication/variant-feed.ts
+var MAX_TAKE = 1e3;
+var variants = (context, fields, options) => gql2(context, `
+  query GetVariants($options: ProductVariantListOptions) {
+    productVariants(options: $options) { items { ${fields} } totalItems }
+  }
+`, { options }).then((res) => res.data.productVariants);
+var newest = (context) => variants(context, "id updatedAt", { take: 1, sort: { updatedAt: "DESC" } });
+var createVendureVariantFeedReplication = (barcodeField, updatedAtSkewMs = 0, variantPageSize = MAX_TAKE) => ({
+  pull: {
+    // The next call's unchanged-high-water check then ends at one read, unless
+    // a variant changed since. The skew probe runs when a pass starts from it.
+    async seedCheckpoint(context) {
+      const head = await newest(context);
+      return { skip: 0, updatedAt: head.items[0]?.updatedAt ?? "", passHighWater: void 0, passTotal: void 0 };
+    },
+    async handler(lastCheckpoint, batchSize, context) {
+      if (batchSize > MAX_TAKE || variantPageSize > MAX_TAKE) throw new Error("Vendure Admin API take must not exceed 1000");
+      let passHighWater = lastCheckpoint?.passHighWater ?? lastCheckpoint?.updatedAt ?? "";
+      let skip = lastCheckpoint?.skip ?? 0;
+      let passTotal = lastCheckpoint?.passTotal;
+      if (!skip) {
+        const head = await newest(context);
+        passHighWater = head.items[0]?.updatedAt ?? lastCheckpoint?.updatedAt ?? "";
+        if (!head.items.length || lastCheckpoint?.updatedAt && passHighWater === lastCheckpoint.updatedAt) {
+          return { documents: [], checkpoint: lastCheckpoint ?? { skip: 0, updatedAt: "" } };
+        }
+        await probeUpdatedAtSkew(passHighWater, updatedAtSkewMs, async (after) => {
+          const probe = await variants(context, "id updatedAt", { take: 1, sort: { updatedAt: "DESC" }, filter: { updatedAt: { after } } });
+          return probe.totalItems;
+        });
+      }
+      const filter = lastCheckpoint?.updatedAt ? { updatedAt: { after: new Date(Date.parse(lastCheckpoint.updatedAt) - 1 - updatedAtSkewMs).toISOString() } } : void 0;
+      const page = (from) => variants(context, "id productId", { take: variantPageSize, skip: from, sort: { id: "ASC" }, filter });
+      const seen = /* @__PURE__ */ new Set();
+      const documents = [];
+      let complete = false;
+      while (!complete && documents.length < batchSize) {
+        let data = await page(skip);
+        if (skip > 0 && (!data.items.length || data.totalItems < (passTotal ?? data.totalItems))) {
+          skip = 0;
+          data = await page(0);
+        }
+        if (skip === 0) passTotal = data.totalItems;
+        const parentIds = [...new Set(data.items.map((v) => String(v.productId)))].filter((id) => !seen.has(id));
+        parentIds.forEach((id) => seen.add(id));
+        if (parentIds.length) {
+          const res = await gql2(context, PRODUCT_LIST_QUERY2(barcodeField), {
+            options: { take: parentIds.length, filter: { id: { in: parentIds } } }
           });
-          if (res.errors?.length) {
-            if (row.assumedMasterState) {
-              conflicts.push({ ...row.assumedMasterState, _deleted: false });
-            }
-          }
-        } catch {
-          if (row.assumedMasterState) {
-            conflicts.push({ ...row.assumedMasterState, _deleted: false });
-          }
+          documents.push(...(res.data?.products?.items ?? []).map(toProductDocument));
         }
+        skip += data.items.length;
+        complete = skip >= data.totalItems || !data.items.length;
       }
-      return conflicts;
+      const checkpoint = complete ? { skip: 0, updatedAt: passHighWater, passHighWater: void 0, passTotal: void 0 } : { skip, updatedAt: lastCheckpoint?.updatedAt ?? "", passHighWater, passTotal };
+      const moved = ["skip", "updatedAt", "passHighWater", "passTotal"].some((key) => checkpoint[key] !== lastCheckpoint?.[key]);
+      if (!documents.length && moved) {
+        const res = await gql2(context, PRODUCT_LIST_QUERY2(barcodeField), { options: { take: 1 } });
+        documents.push(...(res.data?.products?.items ?? []).map(toProductDocument));
+      }
+      return { documents, checkpoint };
     }
   }
-};
+});
 
-// src/index.ts
-var vendureConnector = {
-  id: "vendure",
-  name: "Vendure",
-  description: "Connect to Vendure backends via the Admin GraphQL API",
-  icon: void 0,
-  auth: {
-    type: "Vendure Admin API",
-    fields: [
-      {
-        key: "url",
-        label: "Backend URL",
-        type: "url",
-        placeholder: "https://my-vendure-server.com",
-        required: true
-      },
-      {
-        key: "auth_token",
-        label: "Auth Token",
-        type: "password",
-        placeholder: "vendure-auth-token from login",
-        required: true
-      }
-    ],
-    getHeaders: (credentials) => ({
-      Authorization: `Bearer ${credentials.auth_token}`
-    })
-  },
-  schemas: {
-    products: vendureProductSchema
-  },
-  traits: {
-    product: vendureProductTraits
-  },
-  sync: {
-    products: vendureProductSync
+// src/reconcile/stock.ts
+var PAGE_SIZE = 1e3;
+var VARIANT_STOCK_QUERY = `
+  query VariantStock($options: ProductVariantListOptions) {
+    productVariants(options: $options) {
+      items { id stockLevels { stockLocationId stockOnHand stockAllocated } }
+      totalItems
+    }
+  }
+`;
+var levelsKey = (levels = []) => levels.map((l) => JSON.stringify([l.stockLocationId, l.stockOnHand, l.stockAllocated])).sort().join();
+var vendureStockReconcile = {
+  async *fetchPages(context) {
+    for (let skip = 0, total = 1; skip < total; skip += PAGE_SIZE) {
+      const body = await gql2(context, VARIANT_STOCK_QUERY, { options: { take: PAGE_SIZE, skip, sort: { id: "ASC" } } });
+      const { items, totalItems } = body.data.productVariants;
+      total = totalItems;
+      yield new Map(items.map((v) => [v.id, v.stockLevels]));
+    }
   },
-  replication: {
-    products: vendureProductReplication
+  overlay(doc, stock) {
+    const variants2 = doc.variants ?? [];
+    let changed = false;
+    const next = variants2.map((v) => {
+      const levels = stock.get(v.id);
+      if (!levels || levelsKey(levels) === levelsKey(v.stockLevels)) return v;
+      changed = true;
+      return { ...v, stockLevels: levels };
+    });
+    return changed ? { variants: next } : void 0;
   }
 };
+
+// src/reconcile/ids.ts
+var PAGE_SIZE2 = 1e3;
+var ID_LIST_QUERY = `
+  query GetProductIds($options: ProductListOptions) {
+    products(options: $options) { items { id variants { id } } totalItems }
+  }
+`;
+async function* fetchPages(context) {
+  for (let skip = 0, total = 1; skip < total; skip += PAGE_SIZE2) {
+    const res = await gql2(context, ID_LIST_QUERY, { options: { take: PAGE_SIZE2, skip, sort: { id: "ASC" } } });
+    const { items, totalItems } = res.data.products;
+    total = totalItems;
+    yield items.map((p) => ({ id: String(p.id), variantIds: (p.variants ?? []).map((v) => String(v.id)) }));
+  }
+}
+function variantIds(doc) {
+  return (doc.variants ?? []).map((v) => String(v.id));
+}
+function createFetchByIds(barcodeField) {
+  return async function fetchByIds(ids, context) {
+    if (!ids.length) return [];
+    const res = await gql2(context, PRODUCT_LIST_QUERY2(barcodeField), { options: { take: ids.length, filter: { id: { in: ids } } } });
+    return (res.data?.products?.items ?? []).map(toProductDocument);
+  };
+}
+
+// src/reconcile/prices.ts
+var PAGE_SIZE3 = 1e3;
+var VENDURE_PRICE_RECONCILE_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var PRICE_LIST_QUERY = `
+  query GetVariantPrices($options: ProductVariantListOptions) {
+    productVariants(options: $options) { items { id productId price priceWithTax currencyCode } totalItems }
+  }
+`;
+var fingerprintOf = (entries) => [...entries].sort().join("|");
+async function* fetchPages2(context) {
+  const byProduct = /* @__PURE__ */ new Map();
+  for (let skip = 0, total = 1; skip < total; skip += PAGE_SIZE3) {
+    const res = await gql2(context, PRICE_LIST_QUERY, { options: { take: PAGE_SIZE3, skip, sort: { id: "ASC" } } });
+    const { items, totalItems } = res.data.productVariants;
+    total = totalItems;
+    const touched = /* @__PURE__ */ new Set();
+    for (const variant of items) {
+      const productId = String(variant.productId);
+      touched.add(productId);
+      const entries = byProduct.get(productId) ?? [];
+      byProduct.set(productId, entries);
+      entries.push(`${variant.id}:${variant.currencyCode}:${variant.price}:${variant.priceWithTax}`);
+    }
+    yield new Map([...touched].map((id) => [id, fingerprintOf(byProduct.get(id) ?? [])]));
+  }
+}
+function fingerprint(doc) {
+  const entries = (doc.variants ?? []).map(
+    (v) => `${v.id}:${v.currencyCode}:${v.price}:${v.priceWithTax}`
+  );
+  return fingerprintOf(entries);
+}
+
+// src/store-settings.ts
+import { StoreSettingsError } from "@tallyui/core";
+var CHANNEL_AND_CATEGORIES_QUERY = `
+  query StoreSettingsChannel {
+    activeChannel { defaultCurrencyCode pricesIncludeTax defaultTaxZone { id } }
+    taxCategories { items { id isDefault } }
+  }
+`;
+var TAX_RATES_QUERY = `
+  query StoreSettingsTaxRates($zoneId: String!) {
+    taxRates(options: { take: 1000, filter: { zoneId: { eq: $zoneId } } }) {
+      items { enabled value category { id } customerGroup { id } }
+    }
+  }
+`;
+async function query(context, source, variables) {
+  try {
+    return await gql2(context, source, variables);
+  } catch (error) {
+    throw new StoreSettingsError("failed", error instanceof Error ? error.message : String(error));
+  }
+}
+var vendureStoreSettings = async (context, _choice) => {
+  const head = await query(context, CHANNEL_AND_CATEGORIES_QUERY);
+  const channel = head.data?.activeChannel;
+  if (!channel) throw new StoreSettingsError("failed", "Vendure returned no active channel");
+  const categories = head.data?.taxCategories?.items ?? [];
+  let rateItems = [];
+  if (channel.defaultTaxZone) {
+    const ratesBody = await query(context, TAX_RATES_QUERY, { zoneId: channel.defaultTaxZone.id });
+    rateItems = ratesBody.data?.taxRates?.items ?? [];
+  }
+  const byCategory = /* @__PURE__ */ new Map();
+  for (const rate of rateItems) {
+    if (!rate.enabled || rate.customerGroup || !rate.category) continue;
+    byCategory.set(rate.category.id, Math.round(rate.value * 1e4));
+  }
+  const defaultCategory = categories.find((c) => c.isDefault) ?? categories[0];
+  const taxRatesPpm = {
+    default: defaultCategory ? byCategory.get(defaultCategory.id) ?? 0 : 0
+  };
+  for (const [categoryId, ppm] of byCategory) taxRatesPpm[categoryId] = ppm;
+  for (const category of categories) taxRatesPpm[category.id] ??= 0;
+  return {
+    currency: channel.defaultCurrencyCode,
+    pricesIncludeTax: channel.pricesIncludeTax,
+    taxRatesPpm
+  };
+};
+
+// src/global-settings.ts
+var GLOBAL_SETTINGS_QUERY = `
+  query GlobalStockSettings {
+    globalSettings { trackInventory outOfStockThreshold }
+  }
+`;
+async function vendureGlobalStockSettings(context) {
+  const res = await gql2(context, GLOBAL_SETTINGS_QUERY);
+  return res.data.globalSettings;
+}
+
+// src/index.ts
+import { ConnectorUnauthorizedError as ConnectorUnauthorizedError5 } from "@tallyui/core";
+var VENDURE_IDS_PER_REQUEST = 1e3;
+var createVendureConnector = (options = {}) => {
+  const idFeed = createReconcileFeed({ fetchByIds: createFetchByIds(options.barcodeField) });
+  return {
+    id: "vendure",
+    name: "Vendure",
+    description: "Connect to Vendure backends via the Admin GraphQL API",
+    icon: void 0,
+    auth: vendureAuth,
+    schemas: {
+      products: vendureProductSchema
+    },
+    traits: {
+      product: createVendureProductTraits(
+        options.barcodeField,
+        options.stockLocationId,
+        options.pricesIncludeTax,
+        options.globalTrackInventory,
+        options.globalOutOfStockThreshold
+      )
+    },
+    sync: {
+      products: createVendureProductSync(options.barcodeField)
+    },
+    replication: {
+      // One replication per collection: the product, variant and id-reconcile feeds
+      // share it (ADR-060). reconcile is last so its fetch wins duplicates.
+      products: combinePullAdapters({
+        products: createVendureProductReplication(options.barcodeField, options.updatedAtSkewMs),
+        variants: createVendureVariantFeedReplication(options.barcodeField, options.updatedAtSkewMs),
+        reconcile: idFeed.adapter
+      }, { legacyKey: "products" })
+    },
+    reconcile: {
+      stock: vendureStockReconcile,
+      ids: { fetchPages, variantIds, enqueue: idFeed.enqueue, refetchBatchSize: VENDURE_IDS_PER_REQUEST },
+      prices: { fetchPages: fetchPages2, fingerprint, enqueue: idFeed.enqueue, refetchBatchSize: VENDURE_IDS_PER_REQUEST }
+    },
+    storeSettings: vendureStoreSettings,
+    // Re-reads a restored session's capabilities; with an API key and no sign-in, the only reader.
+    capabilities: (context) => readVendureCapabilities(context.baseUrl, context.headers, { signal: context.signal })
+  };
+};
+var vendureConnector = createVendureConnector();
 export {
+  ConnectorUnauthorizedError5 as ConnectorUnauthorizedError,
+  VendureTimezoneConfigError,
+  createVendureConnector,
+  createVendureProductReplication,
+  createVendureVariantFeedReplication,
+  vendureAuth,
   vendureConnector,
+  vendureGlobalStockSettings,
   vendureProductReplication,
   vendureProductSchema,
   vendureProductSync,
-  vendureProductTraits
+  vendureProductTraits,
+  vendureSignIn,
+  vendureStockReconcile,
+  vendureStoreSettings
 };