FM / pull

/home/techb158/cosmic-risk.abdallabala.com/src/app/api/integrations/[integrationId]/pull/

/home/techb158/cosmic-risk.abdallabala.com/src/app/api/integrations/[integrationId]/pull

Name	Size	Mode	Actions
route.js	1492	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/src/app/api/integrations/[integrationId]/pull/route.js (1492B)

const { prisma } = require("../../../../../lib/prisma");
const { getActorFromRequest } = require("../../../../../lib/request-context");
const { hasPermission } = require("../../../../../domain/permissions");
const { jsonResponse, errorResponse } = require("../../../../../lib/http");
const { pullFromProvider } = require("../../../../../services/import-service");

async function requireIntegrationAccess(request, integrationId, permission) {
  const actor = await getActorFromRequest(request);
  const integration = await prisma.integration.findUnique({
    where: { id: integrationId },
    include: { workspace: true }
  });
  if (!integration) {
    const error = new Error(`Integration not found: ${integrationId}`);
    error.status = 404;
    throw error;
  }
  const membership = actor.memberships.find(m => m.organizationId === integration.workspace.organizationId && m.status === "ACTIVE");
  if (!membership || !hasPermission(membership.role.permissions, permission)) {
    const error = new Error(`Permission denied: ${permission}`);
    error.status = 403;
    throw error;
  }
  return { actor, integration };
}

export async function POST(request, { params }) {
  try {
    const { integrationId } = await params;
    const { actor } = await requireIntegrationAccess(request, integrationId, "integration:sync");
    const result = await pullFromProvider(integrationId, actor, request);
    return jsonResponse(result);
  } catch (error) {
    return errorResponse(error);
  }
}

cmd: