running finally..

2025-12-06 02:56:44 -05:00 · 2025-12-04 15:20:42 -05:00 · 2025-12-04 15:06:29 -05:00 · 2025-12-04 14:43:07 -05:00 · 2025-12-03 21:50:00 -05:00 · 2025-12-03 19:13:43 -05:00
74 changed files with 3049 additions and 526 deletions
--- a/README.md
+++ b/README.md
@@ -0,0 +1,67 @@
+# Ballistic Builder ( The Armory?) Backend  
+### Internal Engine for the Shadow System Armory?
+
+The Ballistic Backend is the operational backbone behind the Shadown System Armory and its admin tools. It ingests merchant feeds, normalizes product data, manages categories, synchronizes prices, and powers the compatibility, pricing, and product logic behind the consumer-facing Builder.
+
+It’s built for reliability, longevity, and clean extensibility — the kind of foundation you want when scaling from a small beta to a fully public platform.
+
+---
+
+## What This Backend Does
+
+### **Merchant Feed Ingestion**
+- Pulls AvantLink feeds (CSV or TSV)
+- Automatically detects delimiters
+- Normalizes raw merchant fields
+- Creates or updates product records
+- Upserts price and stock offers
+- Tracks first-seen / last-seen timestamps
+- Safely handles malformed or incomplete rows  
+- Ensures repeat imports never duplicate offers
+
+### **Category Mapping Engine**
+- Identifies every unique raw category coming from each merchant feed  
+- Exposes *unmapped* categories in the admin UI  
+- Allows you to assign:  
+  - Part Role  
+  - Product Configuration (Stripped, Complete, Kit, etc.)
+- Applies mappings automatically on future imports  
+- Respects manual overrides such as `platform_locked`
+
+### **Builder Support**
+The frontend Builder depends on this backend for:
+
+- Loading parts grouped by role  
+- Offering compatible options  
+- Calculating build cost  
+- Comparing offers across merchants  
+- Providing product metadata, imagery, and offer data  
+
+**Future expansions include:** price history, compatibility engine, build exports, public build pages, multi-merchant aggregation, and automated anomaly detection.
+
+---
+
+## Tech Stack
+
+- **Spring Boot 3.x**  
+- **Java 17**  
+- **PostgreSQL**  
+- **Hibernate (JPA)**  
+- **HikariCP**  
+- **Apache Commons CSV**  
+- **Maven**  
+- **REST API**
+
+---
+
+## Local Development
+
+### Requirements
+- Java 17 or newer  
+- PostgreSQL running locally  
+- Port 8080 open (default backend port)
+
+### Run Development Server
+
+```bash
+./mvnw spring-boot:run
--- a/action1.yaml
+++ b/action1.yaml
@@ -0,0 +1,39 @@
+# File: .gitea/workflows/build-and-upload.yml
+name: Build and Upload Artifact
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      # Step 1: Check out repository code
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # Step 2: Set up Node.js (example for a JS project; adjust for your stack)
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      # Step 3: Install dependencies
+      - name: Install dependencies
+        run: npm ci
+
+      # Step 4: Build project
+      - name: Build project
+        run: npm run build
+
+      # Step 5: Upload build output as artifact
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-output
+          path: dist/   # Change to your build output directory
+          retention-days: 7  # Optional: how long to keep artifact
--- a/docker/bb-spring/Dockerfile
+++ b/docker/bb-spring/Dockerfile
@@ -0,0 +1,17 @@
+# Stage 1: Build the application
+FROM openjdk:17-jdk-slim as build
+WORKDIR /app
+COPY gradlew .
+COPY settings.gradle .
+COPY build.gradle .
+COPY src ./src
+# Adjust the build command for Maven: ./mvnw package -DskipTests
+RUN ./gradlew bootJar
+
+# Stage 2: Create the final lightweight image
+FROM openjdk:17-jre-slim
+WORKDIR /app
+# Get the built JAR from the build stage
+COPY --from=build /app/build/libs/*.jar app.jar
+EXPOSE 8080
+ENTRYPOINT ["java", "-jar", "app.jar"]
--- a/docker/docker-compose.yaml
+++ b/docker/docker-compose.yaml
@@ -0,0 +1,63 @@
+version: '3.8'
+
+services:
+  # --- 1. Spring API Service (Backend) ---
+  spring-api:
+    build:
+      context: ./backend # Path to your Spring project's root folder
+      dockerfile: Dockerfile # Assumes you have a Dockerfile in ./backend
+    container_name: spring-api
+    ports:
+      - "8080:8080" # Map host port 8080 to container port 8080
+    environment:
+      # These environment variables link the API to the database service defined below
+      - SPRING_DATASOURCE_URL=jdbc:postgresql://db:5432/mydatabase
+      - SPRING_DATASOURCE_USERNAME=myuser
+      - SPRING_DATASOURCE_PASSWORD=mypassword
+    depends_on:
+      - db
+    networks:
+      - app-network
+
+  # --- 2. Next.js App Service (Frontend) ---
+  nextjs-app:
+    build:
+      context: ./frontend # Path to your Next.js project's root folder
+      dockerfile: Dockerfile # Assumes you have a Dockerfile in ./frontend
+    container_name: nextjs-app
+    ports:
+      - "3000:3000" # Map host port 3000 to container port 3000
+    environment:
+      # This variable is crucial: Next.js needs the URL for the Spring API
+      # Use the Docker internal service name 'spring-api' and its port 8080
+      - NEXT_PUBLIC_API_URL=http://spring-api:8080
+      # For local testing, you might need the host IP for Next.js to call back
+      # - NEXT_PUBLIC_API_URL_LOCAL=http://localhost:8080
+    depends_on:
+      - spring-api
+    networks:
+      - app-network
+
+  # --- 3. PostgreSQL Database Service (Example Dependency) ---
+  db:
+    image: postgres:15-alpine # Lightweight and stable PostgreSQL image
+    container_name: postgres-db
+    environment:
+      - POSTGRES_DB=mydatabase
+      - POSTGRES_USER=myuser
+      - POSTGRES_PASSWORD=mypassword
+    volumes:
+      - postgres_data:/var/lib/postgresql/data # Persist the database data
+    ports:
+      - "5432:5432" # Optional: Map DB port for external access (e.g., DBeaver)
+    networks:
+      - app-network
+
+# --- Docker Volume for Persistent Data ---
+volumes:
+  postgres_data:
+
+# --- Docker Network for Inter-Container Communication ---
+networks:
+  app-network:
+    driver: bridge
--- a/docker/ss_builder/Dockerfile
+++ b/docker/ss_builder/Dockerfile
@@ -0,0 +1,22 @@
+# Stage 1: Build the static assets
+FROM node:20-alpine as builder
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm install
+COPY . .
+# Run the Next.js build command
+RUN npm run build
+
+# Stage 2: Run the production application (Next.js server)
+FROM node:20-alpine
+WORKDIR /app
+# Copy only the necessary files for running the app
+COPY --from=builder /app/.next ./.next
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/public ./public
+# Set environment variables
+ENV NODE_ENV production
+EXPOSE 3000
+# Run the Next.js production server
+CMD ["npm", "start"]
--- a/importLogic.md
+++ b/importLogic.md
@@ -0,0 +1,213 @@
+# Ballistic Import Pipeline  
+A high-level overview of how merchant data flows through the Spring ETL system.
+
+---
+
+## Purpose
+
+This document explains how the Ballistic backend:
+
+1. Fetches merchant product feeds (CSV/TSV)
+2. Normalizes raw data into structured entities  
+3. Updates products and offers in an idempotent way  
+4. Supports two sync modes:
+   - Full Import
+   - Offer-Only Sync
+
+---
+
+# 1. High-Level Flow
+
+## ASCII Diagram
+
+```
+                         ┌──────────────────────────┐
+                         │   /admin/imports/{id}     │
+                         │  (Full Import Trigger)    │
+                         └─────────────┬────────────┘
+                                       │
+                                       ▼
+                        ┌──────────────────────────────┐
+                        │ importMerchantFeed(merchantId)│
+                        └─────────────┬────────────────┘
+                                      │
+                                      ▼
+           ┌────────────────────────────────────────────────────────┐
+           │ readFeedRowsForMerchant()                               │
+           │  - auto-detect delimiter                               │
+           │  - parse CSV/TSV → MerchantFeedRow objects             │
+           └─────────────────┬──────────────────────────────────────┘
+                             │ List<MerchantFeedRow>
+                             ▼
+          ┌──────────────────────────────────────┐
+          │ For each MerchantFeedRow row:        │
+          │  resolveBrand()                      │
+          │  upsertProduct()                     │
+          │    - find existing via brand+mpn/upc │
+          │    - update fields (mapped partRole) │
+          │  upsertOfferFromRow()                │
+          └──────────────────────────────────────┘
+```
+
+---
+
+# 2. Full Import Explained
+
+Triggered by:
+
+```
+POST /admin/imports/{merchantId}
+```
+
+### Step 1 — Load merchant  
+Using `merchantRepository.findById()`.
+
+### Step 2 — Parse feed rows  
+`readFeedRowsForMerchant()`:
+- Auto-detects delimiter (`\t`, `,`, `;`)
+- Validates required headers
+- Parses each row into `MerchantFeedRow`
+
+### Step 3 — Process each row
+
+For each parsed row:
+
+#### a. resolveBrand()
+- Finds or creates brand
+- Defaults to “Aero Precision” if missing
+
+#### b. upsertProduct()
+Dedupes by:
+
+1. Brand + MPN  
+2. Brand + UPC (currently SKU placeholder)  
+
+If no match → create new product.
+
+Then applies:
+- Name + slug
+- Descriptions
+- Images
+- MPN/identifiers
+- Platform inference
+- Category mapping
+- Part role inference
+
+#### c. upsertOfferFromRow()
+Creates or updates a ProductOffer:
+- Prices
+- Stock
+- Buy URL
+- lastSeenAt
+- firstSeenAt when newly created
+
+Idempotent — does not duplicate offers.
+
+---
+
+# 3. Offer-Only Sync
+
+Triggered by:
+
+```
+POST /admin/imports/{merchantId}/offers-only
+```
+
+Does NOT:
+- Create products  
+- Update product fields  
+
+It only updates:
+- price
+- originalPrice
+- inStock
+- buyUrl
+- lastSeenAt
+
+If the offer does not exist, it is skipped.
+
+---
+
+# 4. Auto-Detecting CSV/TSV Parser
+
+The parser:
+
+- Attempts multiple delimiters
+- Validates headers
+- Handles malformed or short rows
+- Never throws on missing columns
+- Returns clean MerchantFeedRow objects
+
+Designed for messy merchant feeds.
+
+---
+
+# 5. Entities Updated During Import
+
+### Product
+- name  
+- slug  
+- short/long description  
+- main image  
+- mpn  
+- upc (future)  
+- platform  
+- rawCategoryKey  
+- partRole  
+
+### ProductOffer
+- merchant
+- product
+- avantlinkProductId (SKU placeholder)
+- price
+- originalPrice
+- inStock
+- buyUrl
+- lastSeenAt
+- firstSeenAt
+
+### Merchant
+- lastFullImportAt
+- lastOfferSyncAt
+
+---
+
+# 6. Extension Points
+
+You can extend the import pipeline in these areas:
+
+- Add per-merchant column mapping  
+- Add true UPC parsing  
+- Support multi-platform parts  
+- Improve partRole inference  
+- Implement global deduplication across merchants  
+
+---
+
+# 7. Quick Reference: Main Methods
+
+| Method | Purpose |
+|--------|---------|
+| importMerchantFeed | Full product + offer import |
+| readFeedRowsForMerchant | Detect delimiter + parse feed |
+| resolveBrand | Normalize brand names |
+| upsertProduct | Idempotent product write |
+| updateProductFromRow | Apply product fields |
+| upsertOfferFromRow | Idempotent offer write |
+| syncOffersOnly | Offer-only sync |
+| upsertOfferOnlyFromRow | Update existing offers |
+| detectCsvFormat | Auto-detect delimiter |
+| fetchFeedRows | Simpler parser for offers |
+
+---
+
+# 8. Summary
+
+The Ballistic importer is:
+
+- Robust against bad data  
+- Idempotent and safe  
+- Flexible for multiple merchants  
+- Extensible for long-term scaling  
+
+This pipeline powers the product catalog and offer data for the Ballistic ecosystem.
--- a/pom.xml
+++ b/pom.xml
@@ -1,22 +1,28 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
+
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>3.4.3</version>
-        <relativePath/> <!-- lookup parent from repository -->
+        <relativePath/>
    </parent>
+
    <groupId>group.goforward</groupId>
    <artifactId>ballistic</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>ballistic</name>
    <description>Ballistic Builder API</description>
+
    <url/>
+
    <licenses>
        <license/>
    </licenses>
+
    <developers>
        <developer>
            <name>Don Strawsburg</name>
@@ -29,68 +35,101 @@
            <organization>Forward Group, LLC</organization>
        </developer>
    </developers>
+
    <scm>
-        <connection/>
-        <developerConnection/>
+        <connection></connection>
+        <developerConnection>scm:git:https://gitea.gofwd.group/Forward_Group/ballistic-builder-spring.git</developerConnection>
        <tag/>
        <url/>
    </scm>
+
    <properties>
        <java.version>17</java.version>
        <maven.compiler.source>${java.version}</maven.compiler.source>
        <maven.compiler.target>${java.version}</maven.compiler.target>
    </properties>
+
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-data-jpa</artifactId>
        </dependency>
+
+        <!--
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-data-rest</artifactId>
        </dependency>
+        -->
+
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
+
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-devtools</artifactId>
            <scope>runtime</scope>
            <optional>true</optional>
        </dependency>
+
        <dependency>
            <groupId>org.springdoc</groupId>
            <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
            <version>2.8.5</version>
        </dependency>
-        <!--<dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-docker-compose</artifactId>
-            <scope>runtime</scope>
-            <optional>true</optional>
-        </dependency>-->
-        <!-- Jakarta / validation API is pulled by starters; explicit jakarta persistence if needed -->
+
+        <!-- Jakarta persistence API (optional, JPA starter already brings it transitively) -->
        <dependency>
            <groupId>jakarta.persistence</groupId>
            <artifactId>jakarta.persistence-api</artifactId>
            <version>3.1.0</version>
        </dependency>
+
        <dependency>
            <groupId>org.postgresql</groupId>
            <artifactId>postgresql</artifactId>
+            <version>42.7.7</version>
            <scope>runtime</scope>
        </dependency>
+
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
+
        <dependency>
            <groupId>org.apache.commons</groupId>
            <artifactId>commons-csv</artifactId>
            <version>1.11.0</version>
        </dependency>
+
+        <!-- Spring Security -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-security</artifactId>
+        </dependency>
+
+        <!-- JSON Web Tokens (JJWT) -->
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-api</artifactId>
+            <version>0.11.5</version>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-impl</artifactId>
+            <version>0.11.5</version>
+            <scope>runtime</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-jackson</artifactId>
+            <version>0.11.5</version>
+            <scope>runtime</scope>
+        </dependency>
    </dependencies>

    <build>
@@ -104,6 +143,7 @@
                    <target>${maven.compiler.target}</target>
                </configuration>
            </plugin>
+
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
--- a/src/main/java/group/goforward/ballistic/ApiResponse.java
+++ b/src/main/java/group/goforward/ballistic/ApiResponse.java
@@ -2,6 +2,9 @@ package group.goforward.ballistic;

 import java.time.LocalDateTime;

+/**
+ * @param <T>
+ */
 public class ApiResponse<T> {

    private static final String API_SUCCESS = "success";
--- a/src/main/java/group/goforward/ballistic/BallisticApplication.java
+++ b/src/main/java/group/goforward/ballistic/BallisticApplication.java
@@ -3,13 +3,11 @@ package group.goforward.ballistic;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.domain.EntityScan;
-import org.springframework.context.annotation.ComponentScan;
+import org.springframework.cache.annotation.EnableCaching;
 import org.springframework.data.jpa.repository.config.EnableJpaRepositories;

@SpringBootApplication
-@ComponentScan("group.goforward.ballistic.controllers")
-@ComponentScan("group.goforward.ballistic.repos")
-@ComponentScan("group.goforward.ballistic.services")
+@EnableCaching
@EntityScan(basePackages = "group.goforward.ballistic.model")
@EnableJpaRepositories(basePackages = "group.goforward.ballistic.repos")
 public class BallisticApplication {
--- a/src/main/java/group/goforward/ballistic/configuration/CacheConfig.java
+++ b/src/main/java/group/goforward/ballistic/configuration/CacheConfig.java
@@ -0,0 +1,16 @@
+package group.goforward.ballistic.configuration;
+
+import org.springframework.cache.CacheManager;
+import org.springframework.cache.concurrent.ConcurrentMapCacheManager;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+@Configuration
+public class CacheConfig {
+
+    @Bean
+    public CacheManager cacheManager() {
+        // Simple in-memory cache for dev/local
+        return new ConcurrentMapCacheManager("gunbuilderProducts");
+    }
+}
--- a/src/main/java/group/goforward/ballistic/configuration/PasswordConfig.java
+++ b/src/main/java/group/goforward/ballistic/configuration/PasswordConfig.java
@@ -0,0 +1,16 @@
+package group.goforward.ballistic.configuration;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+
+// @Configuration
+// public class PasswordConfig {
+
+//     @Bean
+//     public PasswordEncoder passwordEncoder() {
+//         // BCrypt default password
+//         return new BCryptPasswordEncoder();
+//     }
+// }
--- a/src/main/java/group/goforward/ballistic/configuration/SecurityConfig.java
+++ b/src/main/java/group/goforward/ballistic/configuration/SecurityConfig.java
@@ -0,0 +1,59 @@
+package group.goforward.ballistic.configuration;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+@EnableWebSecurity
+public class SecurityConfig {
+
+    @Bean
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+        http
+            .csrf(AbstractHttpConfigurer::disable)
+            .sessionManagement(sm ->
+                sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
+            )
+            .authorizeHttpRequests(auth -> auth
+                
+                // Auth endpoints always open
+                .requestMatchers("/api/auth/**").permitAll()
+                
+                // Swagger / docs
+                .requestMatchers("/swagger-ui/**", "/v3/api-docs/**").permitAll()
+                
+                // Health
+                .requestMatchers("/actuator/health", "/actuator/info").permitAll()
+                
+                // Public product endpoints
+                .requestMatchers("/api/products/gunbuilder/**").permitAll()
+
+                // Everything else (for now) also open – we can tighten later
+                .anyRequest().permitAll()
+            );
+
+        return http.build();
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoder() {
+        // BCrypt is a solid default for user passwords
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    public AuthenticationManager authenticationManager(
+            AuthenticationConfiguration configuration
+    ) throws Exception {
+        return configuration.getAuthenticationManager();
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/AdminMerchantController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/AdminMerchantController.java
@@ -1,24 +0,0 @@
-package group.goforward.ballistic.controllers;
-
-import group.goforward.ballistic.model.Merchant;
-import group.goforward.ballistic.repos.MerchantRepository;
-import java.util.List;
-import org.springframework.web.bind.annotation.*;
-
-@RestController
-@RequestMapping("/admin/merchants")
-@CrossOrigin // adjust later if you want
-public class AdminMerchantController {
-
-    private final MerchantRepository merchantRepository;
-
-    public AdminMerchantController(MerchantRepository merchantRepository) {
-        this.merchantRepository = merchantRepository;
-    }
-
-    @GetMapping
-    public List<Merchant> getMerchants() {
-        // If you want a DTO here, you can wrap it, but this is fine for internal admin
-        return merchantRepository.findAll();
-    }
-}
--- a/src/main/java/group/goforward/ballistic/controllers/AuthController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/AuthController.java
@@ -0,0 +1,102 @@
+package group.goforward.ballistic.controllers;
+
+import group.goforward.ballistic.model.User;
+import group.goforward.ballistic.repos.UserRepository;
+import group.goforward.ballistic.security.JwtService;
+import group.goforward.ballistic.web.dto.auth.AuthResponse;
+import group.goforward.ballistic.web.dto.auth.LoginRequest;
+import group.goforward.ballistic.web.dto.auth.RegisterRequest;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.web.bind.annotation.*;
+
+import java.time.OffsetDateTime;
+import java.util.UUID;
+
+@RestController
+@RequestMapping("/api/auth")
+@CrossOrigin
+public class AuthController {
+
+    private final UserRepository users;
+    private final PasswordEncoder passwordEncoder;
+    private final JwtService jwtService;
+
+    public AuthController(
+            UserRepository users,
+            PasswordEncoder passwordEncoder,
+            JwtService jwtService
+    ) {
+        this.users = users;
+        this.passwordEncoder = passwordEncoder;
+        this.jwtService = jwtService;
+    }
+
+    @PostMapping("/register")
+    public ResponseEntity<?> register(@RequestBody RegisterRequest request) {
+        String email = request.getEmail().trim().toLowerCase();
+
+        if (users.existsByEmailIgnoreCaseAndDeletedAtIsNull(email)) {
+            return ResponseEntity
+                    .status(HttpStatus.CONFLICT)
+                    .body("Email is already registered");
+        }
+
+        User user = new User();
+        // Let DB generate id
+        user.setUuid(UUID.randomUUID()); 
+        user.setEmail(email);
+        user.setPasswordHash(passwordEncoder.encode(request.getPassword()));
+        user.setDisplayName(request.getDisplayName());
+        user.setRole("USER");
+        user.setIsActive(true);
+        user.setCreatedAt(OffsetDateTime.now());
+        user.setUpdatedAt(OffsetDateTime.now());
+
+        users.save(user);
+
+        String token = jwtService.generateToken(user);
+
+        AuthResponse response = new AuthResponse(
+                token,
+                user.getEmail(),
+                user.getDisplayName(),
+                user.getRole()
+        );
+
+        return ResponseEntity.status(HttpStatus.CREATED).body(response);
+    }
+
+    @PostMapping("/login")
+    public ResponseEntity<?> login(@RequestBody LoginRequest request) {
+        String email = request.getEmail().trim().toLowerCase();
+
+        User user = users.findByEmailIgnoreCaseAndDeletedAtIsNull(email)
+                .orElse(null);
+
+        if (user == null || !user.getIsActive()) {
+            return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body("Invalid credentials");
+        }
+
+        if (!passwordEncoder.matches(request.getPassword(), user.getPasswordHash())) {
+            return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body("Invalid credentials");
+        }
+
+        user.setLastLoginAt(OffsetDateTime.now());
+        user.incrementLoginCount();
+        user.setUpdatedAt(OffsetDateTime.now());
+        users.save(user);
+
+        String token = jwtService.generateToken(user);
+
+        AuthResponse response = new AuthResponse(
+                token,
+                user.getEmail(),
+                user.getDisplayName(),
+                user.getRole()
+        );
+
+        return ResponseEntity.ok(response);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/CategoryController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/CategoryController.java
@@ -0,0 +1,34 @@
+package group.goforward.ballistic.controllers;
+
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import group.goforward.ballistic.web.dto.admin.PartCategoryDto;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/categories")
+@CrossOrigin // you can tighten origins later
+public class CategoryController {
+
+    private final PartCategoryRepository partCategories;
+
+    public CategoryController(PartCategoryRepository partCategories) {
+        this.partCategories = partCategories;
+    }
+
+    @GetMapping
+    public List<PartCategoryDto> list() {
+        return partCategories.findAllByOrderByGroupNameAscSortOrderAscNameAsc()
+                .stream()
+                .map(pc -> new PartCategoryDto(
+                        pc.getId(),
+                        pc.getSlug(),
+                        pc.getName(),
+                        pc.getDescription(),
+                        pc.getGroupName(),
+                        pc.getSortOrder()
+                ))
+                .toList();
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/Dockerfile
+++ b/src/main/java/group/goforward/ballistic/controllers/Dockerfile
@@ -0,0 +1,17 @@
+# Stage 1: Build the application
+FROM openjdk:17-jdk-slim as build
+WORKDIR /app
+COPY gradlew .
+COPY settings.gradle .
+COPY build.gradle .
+COPY src ./src
+# Adjust the build command for Maven: ./mvnw package -DskipTests
+RUN ./gradlew bootJar
+
+# Stage 2: Create the final lightweight image
+FROM openjdk:17-jre-slim
+WORKDIR /app
+# Get the built JAR from the build stage
+COPY --from=build /app/build/libs/*.jar app.jar
+EXPOSE 8080
+ENTRYPOINT ["java", "-jar", "app.jar"]
--- a/src/main/java/group/goforward/ballistic/controllers/ImportController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/ImportController.java
@@ -6,17 +6,34 @@ import org.springframework.web.bind.annotation.*;

@RestController
@RequestMapping("/admin/imports")
+@CrossOrigin(origins = "http://localhost:3000")
 public class ImportController {

-    private final MerchantFeedImportService importService;
+    private final MerchantFeedImportService merchantFeedImportService;

-    public ImportController(MerchantFeedImportService importService) {
-        this.importService = importService;
+    public ImportController(MerchantFeedImportService merchantFeedImportService) {
+        this.merchantFeedImportService = merchantFeedImportService;
    }

+    /**
+     * Full product + offer import for a merchant.
+     *
+     * POST /admin/imports/{merchantId}
+     */
    @PostMapping("/{merchantId}")
    public ResponseEntity<Void> importMerchant(@PathVariable Integer merchantId) {
-        importService.importMerchantFeed(merchantId);
-        return ResponseEntity.accepted().build();
+        merchantFeedImportService.importMerchantFeed(merchantId);
+        return ResponseEntity.noContent().build();
+    }
+
+    /**
+     * Offers-only sync (price/stock) for a merchant.
+     *
+     * POST /admin/imports/{merchantId}/offers-only
+     */
+    @PostMapping("/{merchantId}/offers-only")
+    public ResponseEntity<Void> syncOffersOnly(@PathVariable Integer merchantId) {
+        merchantFeedImportService.syncOffersOnly(merchantId);
+        return ResponseEntity.noContent().build();
    }
 }
--- a/src/main/java/group/goforward/ballistic/controllers/MerchantAdminController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/MerchantAdminController.java
@@ -0,0 +1,63 @@
+// MerchantAdminController.java
+package group.goforward.ballistic.controllers;
+
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+import group.goforward.ballistic.model.Merchant;
+import group.goforward.ballistic.repos.MerchantRepository;
+import group.goforward.ballistic.web.dto.MerchantAdminDto;
+import org.springframework.web.bind.annotation.*;
+
+import java.time.OffsetDateTime;
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/merchants")
+@CrossOrigin(origins = "http://localhost:3000") // TEMP for Cross-Origin Bug
+public class MerchantAdminController {
+
+    private final MerchantRepository merchantRepository;
+
+    public MerchantAdminController(MerchantRepository merchantRepository) {
+        this.merchantRepository = merchantRepository;
+    }
+
+    @GetMapping
+    public List<MerchantAdminDto> listMerchants() {
+        return merchantRepository.findAll().stream().map(this::toDto).toList();
+    }
+
+    @PutMapping("/{id}")
+    public MerchantAdminDto updateMerchant(
+            @PathVariable Integer id,
+            @RequestBody MerchantAdminDto payload
+    ) {
+        Merchant merchant = merchantRepository.findById(id)
+                .orElseThrow(() -> new RuntimeException("Merchant not found"));
+
+        merchant.setFeedUrl(payload.getFeedUrl());
+        merchant.setOfferFeedUrl(payload.getOfferFeedUrl());
+        merchant.setIsActive(payload.getIsActive() != null ? payload.getIsActive() : true);
+        // don’t touch last* here; those are set by import jobs
+
+        merchant = merchantRepository.save(merchant);
+        return toDto(merchant);
+    }
+
+    private MerchantAdminDto toDto(Merchant m) {
+        MerchantAdminDto dto = new MerchantAdminDto();
+        dto.setId(m.getId());
+        dto.setName(m.getName());
+        dto.setFeedUrl(m.getFeedUrl());
+        dto.setOfferFeedUrl(m.getOfferFeedUrl());
+        dto.setIsActive(m.getIsActive());
+        dto.setLastFullImportAt(m.getLastFullImportAt());
+        dto.setLastOfferSyncAt(m.getLastOfferSyncAt());
+        return dto;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/ProductController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/ProductController.java
@@ -7,6 +7,7 @@ import group.goforward.ballistic.web.dto.ProductOfferDto;
 import group.goforward.ballistic.repos.ProductRepository;
 import group.goforward.ballistic.web.dto.ProductSummaryDto;
 import group.goforward.ballistic.web.mapper.ProductMapper;
+import org.springframework.cache.annotation.Cacheable;
 import org.springframework.web.bind.annotation.*;

 import java.math.BigDecimal;
@@ -30,35 +31,54 @@ public class ProductController {
    }

    @GetMapping("/gunbuilder")
+    @Cacheable(
+            value = "gunbuilderProducts",
+            key = "#platform + '::' + (#partRoles == null ? 'ALL' : #partRoles.toString())"
+    )
    public List<ProductSummaryDto> getGunbuilderProducts(
            @RequestParam(defaultValue = "AR-15") String platform,
            @RequestParam(required = false, name = "partRoles") List<String> partRoles
    ) {
-        // 1) Load products
+        long started = System.currentTimeMillis();
+        System.out.println("getGunbuilderProducts: start, platform=" + platform +
+                ", partRoles=" + (partRoles == null ? "null" : partRoles));
+
+        // 1) Load products (with brand pre-fetched)
+        long tProductsStart = System.currentTimeMillis();
        List<Product> products;
        if (partRoles == null || partRoles.isEmpty()) {
-            products = productRepository.findByPlatform(platform);
+            products = productRepository.findByPlatformWithBrand(platform);
        } else {
-            products = productRepository.findByPlatformAndPartRoleIn(platform, partRoles);
+            products = productRepository.findByPlatformAndPartRoleInWithBrand(platform, partRoles);
        }
+        long tProductsEnd = System.currentTimeMillis();
+        System.out.println("getGunbuilderProducts: loaded products: " +
+                products.size() + " in " + (tProductsEnd - tProductsStart) + " ms");

        if (products.isEmpty()) {
+            long took = System.currentTimeMillis() - started;
+            System.out.println("getGunbuilderProducts: 0 products in " + took + " ms");
            return List.of();
        }

-        // 2) Load offers for these product IDs (Integer IDs)
+        // 2) Load offers for these product IDs
+        long tOffersStart = System.currentTimeMillis();
        List<Integer> productIds = products.stream()
                .map(Product::getId)
                .toList();

        List<ProductOffer> allOffers =
                productOfferRepository.findByProductIdIn(productIds);
+        long tOffersEnd = System.currentTimeMillis();
+        System.out.println("getGunbuilderProducts: loaded offers: " +
+                allOffers.size() + " in " + (tOffersEnd - tOffersStart) + " ms");

        Map<Integer, List<ProductOffer>> offersByProductId = allOffers.stream()
                .collect(Collectors.groupingBy(o -> o.getProduct().getId()));

        // 3) Map to DTOs with price and buyUrl
-        return products.stream()
+        long tMapStart = System.currentTimeMillis();
+        List<ProductSummaryDto> result = products.stream()
                .map(p -> {
                    List<ProductOffer> offersForProduct =
                            offersByProductId.getOrDefault(p.getId(), Collections.emptyList());
@@ -71,6 +91,17 @@ public class ProductController {
                    return ProductMapper.toSummary(p, price, buyUrl);
                })
                .toList();
+        long tMapEnd = System.currentTimeMillis();
+        long took = System.currentTimeMillis() - started;
+
+        System.out.println("getGunbuilderProducts: mapping to DTOs took " +
+                (tMapEnd - tMapStart) + " ms");
+        System.out.println("getGunbuilderProducts: TOTAL " + took + " ms (" +
+                "products=" + (tProductsEnd - tProductsStart) + " ms, " +
+                "offers=" + (tOffersEnd - tOffersStart) + " ms, " +
+                "map=" + (tMapEnd - tMapStart) + " ms)");
+
+        return result;
    }

    @GetMapping("/{id}/offers")
--- a/src/main/java/group/goforward/ballistic/controllers/PsaController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/PsaController.java
@@ -1,7 +1,7 @@
 package group.goforward.ballistic.controllers;

 import group.goforward.ballistic.model.Psa;
-import group.goforward.ballistic.services.PsaService;
+import group.goforward.ballistic.services.impl.PsaServiceImpl;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
@@ -14,10 +14,10 @@ import java.util.UUID;
@RequestMapping("/api/psa")
 public class PsaController {

-    private final PsaService psaService;
+    private final PsaServiceImpl psaService;

    @Autowired
-    public PsaController(PsaService psaService) {
+    public PsaController(PsaServiceImpl psaService) {
        this.psaService = psaService;
    }

--- a/src/main/java/group/goforward/ballistic/controllers/UserController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/UserController.java
@@ -0,0 +1,50 @@
+package group.goforward.ballistic.controllers;
+
+import group.goforward.ballistic.model.User;
+import group.goforward.ballistic.repos.UserRepository;
+import group.goforward.ballistic.services.UsersService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+
+@RestController
+@RequestMapping()
+public class UserController {
+    @Autowired
+    private UserRepository repo;
+    @Autowired
+    private UsersService usersService;
+
+    @GetMapping("/api/getAllUsers")
+    public ResponseEntity<List<User>> getAllUsers() {
+        List<User> data = repo.findAll();
+        return ResponseEntity.ok(data);
+    }
+
+
+    @GetMapping("/api/getAllUsersById/{id}")
+    public ResponseEntity<User> getAllStatesById(@PathVariable Integer id) {
+        return repo.findById(id)
+                .map(ResponseEntity::ok)
+                .orElse(ResponseEntity.notFound().build());
+    }
+    @PostMapping("/api/addUser")
+    public ResponseEntity<User> createUser(@RequestBody User item) {
+        User created = usersService.save(item);
+        return ResponseEntity.status(HttpStatus.CREATED).body(created);
+    }
+
+    @DeleteMapping("/api/deleteUser/{id}")
+    public ResponseEntity<Void> deleteItem(@PathVariable Integer id) {
+        return usersService.findById(id)
+                .map(item -> {
+                    usersService.deleteById(id);
+                    return ResponseEntity.noContent().<Void>build();
+                })
+                .orElse(ResponseEntity.notFound().build());
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/admin/AdminCategoryController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/admin/AdminCategoryController.java
@@ -0,0 +1,40 @@
+package group.goforward.ballistic.controllers.admin;
+
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import group.goforward.ballistic.web.dto.admin.PartCategoryDto;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/categories")
+@CrossOrigin
+public class AdminCategoryController {
+
+    private final PartCategoryRepository partCategories;
+
+    public AdminCategoryController(PartCategoryRepository partCategories) {
+        this.partCategories = partCategories;
+    }
+
+    @GetMapping
+    public List<PartCategoryDto> listCategories() {
+        return partCategories
+                .findAllByOrderByGroupNameAscSortOrderAscNameAsc()
+                .stream()
+                .map(this::toDto)
+                .toList();
+    }
+
+    private PartCategoryDto toDto(PartCategory entity) {
+        return new PartCategoryDto(
+                entity.getId(),
+                entity.getSlug(),
+                entity.getName(),
+                entity.getDescription(),
+                entity.getGroupName(),
+                entity.getSortOrder()
+        );
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/admin/AdminCategoryMappingController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/admin/AdminCategoryMappingController.java
@@ -0,0 +1,117 @@
+package group.goforward.ballistic.controllers.admin;
+
+import group.goforward.ballistic.model.CategoryMapping;
+import group.goforward.ballistic.model.Merchant;
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.repos.CategoryMappingRepository;
+import group.goforward.ballistic.repos.MerchantRepository;
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import group.goforward.ballistic.web.dto.admin.MerchantCategoryMappingDto;
+import group.goforward.ballistic.web.dto.admin.SimpleMerchantDto;
+import group.goforward.ballistic.web.dto.admin.UpdateMerchantCategoryMappingRequest;
+import org.springframework.http.HttpStatus;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/category-mappings")
+@CrossOrigin // you can tighten origins later
+public class AdminCategoryMappingController {
+
+    private final CategoryMappingRepository categoryMappingRepository;
+    private final MerchantRepository merchantRepository;
+    private final PartCategoryRepository partCategoryRepository;
+
+    public AdminCategoryMappingController(
+            CategoryMappingRepository categoryMappingRepository,
+            MerchantRepository merchantRepository,
+            PartCategoryRepository partCategoryRepository
+    ) {
+        this.categoryMappingRepository = categoryMappingRepository;
+        this.merchantRepository = merchantRepository;
+        this.partCategoryRepository = partCategoryRepository;
+    }
+
+    /**
+     * Merchants that have at least one category_mappings row.
+     * Used for the "All Merchants" dropdown in the UI.
+     */
+    @GetMapping("/merchants")
+    public List<SimpleMerchantDto> listMerchantsWithMappings() {
+        List<Merchant> merchants = categoryMappingRepository.findDistinctMerchantsWithMappings();
+        return merchants.stream()
+                .map(m -> new SimpleMerchantDto(m.getId(), m.getName()))
+                .toList();
+    }
+
+    /**
+     * List mappings for a specific merchant, or all mappings if no merchantId is provided.
+     * GET /api/admin/category-mappings?merchantId=1
+     */
+    @GetMapping
+    public List<MerchantCategoryMappingDto> listByMerchant(
+            @RequestParam(name = "merchantId", required = false) Integer merchantId
+    ) {
+        List<CategoryMapping> mappings;
+
+        if (merchantId != null) {
+            mappings = categoryMappingRepository.findByMerchantIdOrderByRawCategoryPathAsc(merchantId);
+        } else {
+            // fall back to all mappings; you can add a more specific repository method later if desired
+            mappings = categoryMappingRepository.findAll();
+        }
+
+        return mappings.stream()
+                .map(cm -> new MerchantCategoryMappingDto(
+                        cm.getId(),
+                        cm.getMerchant().getId(),
+                        cm.getMerchant().getName(),
+                        cm.getRawCategoryPath(),
+                        cm.getPartCategory() != null ? cm.getPartCategory().getId() : null,
+                        cm.getPartCategory() != null ? cm.getPartCategory().getName() : null
+                ))
+                .toList();
+    }
+
+    /**
+     * Update a single mapping's part_category.
+     * POST /api/admin/category-mappings/{id}
+     * Body: { "partCategoryId": 24 }
+     */
+    @PostMapping("/{id}")
+    public MerchantCategoryMappingDto updateMapping(
+            @PathVariable Integer id,
+            @RequestBody UpdateMerchantCategoryMappingRequest request
+    ) {
+        CategoryMapping mapping = categoryMappingRepository.findById(id)
+                .orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Mapping not found"));
+
+        PartCategory partCategory = null;
+        if (request.partCategoryId() != null) {
+            partCategory = partCategoryRepository.findById(request.partCategoryId())
+                    .orElseThrow(() -> new ResponseStatusException(HttpStatus.BAD_REQUEST, "Part category not found"));
+        }
+
+        mapping.setPartCategory(partCategory);
+        mapping = categoryMappingRepository.save(mapping);
+
+        return new MerchantCategoryMappingDto(
+                mapping.getId(),
+                mapping.getMerchant().getId(),
+                mapping.getMerchant().getName(),
+                mapping.getRawCategoryPath(),
+                mapping.getPartCategory() != null ? mapping.getPartCategory().getId() : null,
+                mapping.getPartCategory() != null ? mapping.getPartCategory().getName() : null
+        );
+    }
+    @PutMapping("/{id}")
+    public MerchantCategoryMappingDto updateMappingPut(
+            @PathVariable Integer id,
+            @RequestBody UpdateMerchantCategoryMappingRequest request
+    ) {
+        // just delegate so POST & PUT behave the same
+        return updateMapping(id, request);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/admin/AdminPartRoleMappingController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/admin/AdminPartRoleMappingController.java
@@ -0,0 +1,123 @@
+package group.goforward.ballistic.controllers.admin;
+
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.model.PartRoleMapping;
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import group.goforward.ballistic.repos.PartRoleMappingRepository;
+import group.goforward.ballistic.web.dto.admin.AdminPartRoleMappingDto;
+import group.goforward.ballistic.web.dto.admin.CreatePartRoleMappingRequest;
+import group.goforward.ballistic.web.dto.admin.UpdatePartRoleMappingRequest;
+import org.springframework.http.HttpStatus;
+import org.springframework.web.bind.annotation.*;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/part-role-mappings")
+@CrossOrigin
+public class AdminPartRoleMappingController {
+
+    private final PartRoleMappingRepository partRoleMappingRepository;
+    private final PartCategoryRepository partCategoryRepository;
+
+    public AdminPartRoleMappingController(
+            PartRoleMappingRepository partRoleMappingRepository,
+            PartCategoryRepository partCategoryRepository
+    ) {
+        this.partRoleMappingRepository = partRoleMappingRepository;
+        this.partCategoryRepository = partCategoryRepository;
+    }
+
+    // GET /api/admin/part-role-mappings?platform=AR-15
+    @GetMapping
+    public List<AdminPartRoleMappingDto> list(
+            @RequestParam(name = "platform", required = false) String platform
+    ) {
+        List<PartRoleMapping> mappings;
+
+        if (platform != null && !platform.isBlank()) {
+            mappings = partRoleMappingRepository.findByPlatformOrderByPartRoleAsc(platform);
+        } else {
+            mappings = partRoleMappingRepository.findAll();
+        }
+
+        return mappings.stream()
+                .map(this::toDto)
+                .toList();
+    }
+
+    // POST /api/admin/part-role-mappings
+    @PostMapping
+    public AdminPartRoleMappingDto create(
+            @RequestBody CreatePartRoleMappingRequest request
+    ) {
+        PartCategory category = partCategoryRepository.findBySlug(request.categorySlug())
+                .orElseThrow(() -> new ResponseStatusException(
+                        HttpStatus.BAD_REQUEST,
+                        "PartCategory not found for slug: " + request.categorySlug()
+                ));
+
+        PartRoleMapping mapping = new PartRoleMapping();
+        mapping.setPlatform(request.platform());
+        mapping.setPartRole(request.partRole());
+        mapping.setPartCategory(category);
+        mapping.setNotes(request.notes());
+
+        mapping = partRoleMappingRepository.save(mapping);
+        return toDto(mapping);
+    }
+
+    // PUT /api/admin/part-role-mappings/{id}
+    @PutMapping("/{id}")
+    public AdminPartRoleMappingDto update(
+            @PathVariable Integer id,
+            @RequestBody UpdatePartRoleMappingRequest request
+    ) {
+        PartRoleMapping mapping = partRoleMappingRepository.findById(id)
+                .orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND, "Mapping not found"));
+
+        if (request.platform() != null) {
+            mapping.setPlatform(request.platform());
+        }
+        if (request.partRole() != null) {
+            mapping.setPartRole(request.partRole());
+        }
+        if (request.categorySlug() != null) {
+            PartCategory category = partCategoryRepository.findBySlug(request.categorySlug())
+                    .orElseThrow(() -> new ResponseStatusException(
+                            HttpStatus.BAD_REQUEST,
+                            "PartCategory not found for slug: " + request.categorySlug()
+                    ));
+            mapping.setPartCategory(category);
+        }
+        if (request.notes() != null) {
+            mapping.setNotes(request.notes());
+        }
+
+        mapping = partRoleMappingRepository.save(mapping);
+        return toDto(mapping);
+    }
+
+    // DELETE /api/admin/part-role-mappings/{id}
+    @DeleteMapping("/{id}")
+    @ResponseStatus(HttpStatus.NO_CONTENT)
+    public void delete(@PathVariable Integer id) {
+        if (!partRoleMappingRepository.existsById(id)) {
+            throw new ResponseStatusException(HttpStatus.NOT_FOUND, "Mapping not found");
+        }
+        partRoleMappingRepository.deleteById(id);
+    }
+
+    private AdminPartRoleMappingDto toDto(PartRoleMapping mapping) {
+        PartCategory cat = mapping.getPartCategory();
+        return new AdminPartRoleMappingDto(
+                mapping.getId(),
+                mapping.getPlatform(),
+                mapping.getPartRole(),
+                cat != null ? cat.getSlug() : null,
+                cat != null ? cat.getGroupName() : null,
+                mapping.getNotes()
+        );
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/admin/PartCategoryAdminController.java
+++ b/src/main/java/group/goforward/ballistic/controllers/admin/PartCategoryAdminController.java
@@ -0,0 +1,35 @@
+package group.goforward.ballistic.controllers.admin;
+
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import group.goforward.ballistic.web.dto.admin.PartCategoryDto;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/part-categories")
+@CrossOrigin // keep it loose for now, you can tighten origins later
+public class PartCategoryAdminController {
+
+    private final PartCategoryRepository partCategories;
+
+    public PartCategoryAdminController(PartCategoryRepository partCategories) {
+        this.partCategories = partCategories;
+    }
+
+    @GetMapping
+    public List<PartCategoryDto> list() {
+        return partCategories.findAllByOrderByGroupNameAscSortOrderAscNameAsc()
+                .stream()
+                .map(pc -> new PartCategoryDto(
+                        pc.getId(),
+                        pc.getSlug(),
+                        pc.getName(),
+                        pc.getDescription(),
+                        pc.getGroupName(),
+                        pc.getSortOrder()
+                ))
+                .toList();
+    }
+}
--- a/src/main/java/group/goforward/ballistic/controllers/package-info.java
+++ b/src/main/java/group/goforward/ballistic/controllers/package-info.java
@@ -1 +1,13 @@
+/**
+ * Provides the classes necessary for the Spring Controllers for the ballistic -Builder application.
+ * This package includes Controllers for Spring-Boot application
+ *
+ *
+ * <p>The main entry point for managing the inventory is the
+ * {@link group.goforward.ballistic.BallisticApplication} class.</p>
+ *
+ * @since 1.0
+ * @author Don Strawsburg
+ * @version 1.1
+ */
 package group.goforward.ballistic.controllers;
--- a/src/main/java/group/goforward/ballistic/imports/dto/package-info.java
+++ b/src/main/java/group/goforward/ballistic/imports/dto/package-info.java
@@ -1 +1,13 @@
+/**
+ * Provides the classes necessary for the Spring Data Transfer Objects for the ballistic -Builder application.
+ * This package includes DTO for Spring-Boot application
+ *
+ *
+ * <p>The main entry point for managing the inventory is the
+ * {@link group.goforward.ballistic.BallisticApplication} class.</p>
+ *
+ * @since 1.0
+ * @author Sean Strawsburg
+ * @version 1.1
+ */
 package group.goforward.ballistic.imports.dto;
--- a/src/main/java/group/goforward/ballistic/model/AffiliateCategoryMap.java
+++ b/src/main/java/group/goforward/ballistic/model/AffiliateCategoryMap.java
@@ -5,23 +5,32 @@ import jakarta.persistence.*;
@Entity
@Table(name = "affiliate_category_map")
 public class AffiliateCategoryMap {
+
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
-    @Column(name = "id", nullable = false)
    private Integer id;

-    @Column(name = "feedname", nullable = false, length = 100)
-    private String feedname;
+    // e.g. "PART_ROLE", "RAW_CATEGORY", etc.
+    @Column(name = "source_type", nullable = false)
+    private String sourceType;

-    @Column(name = "affiliatecategory", nullable = false)
-    private String affiliatecategory;
+    // the value we’re mapping from (e.g. "suppressor", "TRIGGER")
+    @Column(name = "source_value", nullable = false)
+    private String sourceValue;

-    @Column(name = "buildercategoryid", nullable = false)
-    private Integer buildercategoryid;
+    // optional platform ("AR-15", "PRECISION", etc.)
+    @Column(name = "platform")
+    private String platform;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "part_category_id", nullable = false)
+    private PartCategory partCategory;

    @Column(name = "notes")
    private String notes;

+    // --- getters / setters ---
+
    public Integer getId() {
        return id;
    }
@@ -30,28 +39,36 @@ public class AffiliateCategoryMap {
        this.id = id;
    }

-    public String getFeedname() {
-        return feedname;
+    public String getSourceType() {
+        return sourceType;
    }

-    public void setFeedname(String feedname) {
-        this.feedname = feedname;
+    public void setSourceType(String sourceType) {
+        this.sourceType = sourceType;
    }

-    public String getAffiliatecategory() {
-        return affiliatecategory;
+    public String getSourceValue() {
+        return sourceValue;
    }

-    public void setAffiliatecategory(String affiliatecategory) {
-        this.affiliatecategory = affiliatecategory;
+    public void setSourceValue(String sourceValue) {
+        this.sourceValue = sourceValue;
    }

-    public Integer getBuildercategoryid() {
-        return buildercategoryid;
+    public String getPlatform() {
+        return platform;
    }

-    public void setBuildercategoryid(Integer buildercategoryid) {
-        this.buildercategoryid = buildercategoryid;
+    public void setPlatform(String platform) {
+        this.platform = platform;
+    }
+
+    public PartCategory getPartCategory() {
+        return partCategory;
+    }
+
+    public void setPartCategory(PartCategory partCategory) {
+        this.partCategory = partCategory;
    }

    public String getNotes() {
@@ -61,5 +78,4 @@ public class AffiliateCategoryMap {
    public void setNotes(String notes) {
        this.notes = notes;
    }
-
 }
--- a/src/main/java/group/goforward/ballistic/model/CategoryMapping.java
+++ b/src/main/java/group/goforward/ballistic/model/CategoryMapping.java
@@ -0,0 +1,98 @@
+// src/main/java/group/goforward/ballistic/model/CategoryMapping.java
+package group.goforward.ballistic.model;
+
+import jakarta.persistence.*;
+import java.time.OffsetDateTime;
+
+@Entity
+@Table(name = "category_mappings")
+public class CategoryMapping {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @Column(name = "id", nullable = false)
+    private Integer id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "merchant_id", nullable = false)
+    private Merchant merchant;
+
+    @Column(name = "raw_category_path", nullable = false)
+    private String rawCategoryPath;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "part_category_id")
+    private PartCategory partCategory;
+
+    @Column(name = "created_at", nullable = false)
+    private OffsetDateTime createdAt = OffsetDateTime.now();
+
+    @Column(name = "updated_at", nullable = false)
+    private OffsetDateTime updatedAt = OffsetDateTime.now();
+
+    @PrePersist
+    public void onCreate() {
+        OffsetDateTime now = OffsetDateTime.now();
+        if (createdAt == null) {
+            createdAt = now;
+        }
+        if (updatedAt == null) {
+            updatedAt = now;
+        }
+    }
+
+    @PreUpdate
+    public void onUpdate() {
+        this.updatedAt = OffsetDateTime.now();
+    }
+
+    // --- getters & setters ---
+
+    public Integer getId() {
+        return id;
+    }
+
+    public void setId(Integer id) {
+        this.id = id;
+    }
+
+    public Merchant getMerchant() {
+        return merchant;
+    }
+
+    public void setMerchant(Merchant merchant) {
+        this.merchant = merchant;
+    }
+
+    public String getRawCategoryPath() {
+        return rawCategoryPath;
+    }
+
+    public void setRawCategoryPath(String rawCategoryPath) {
+        this.rawCategoryPath = rawCategoryPath;
+    }
+
+    public PartCategory getPartCategory() {
+        return partCategory;
+    }
+
+    public void setPartCategory(PartCategory partCategory) {
+        this.partCategory = partCategory;
+    }
+
+    public OffsetDateTime getCreatedAt() {
+        return createdAt;
+    }
+
+    public void setCreatedAt(OffsetDateTime createdAt) {
+        this.createdAt = createdAt;
+    }
+
+    public OffsetDateTime getUpdatedAt() {
+        return updatedAt;
+    }
+
+    public void setUpdatedAt(OffsetDateTime updatedAt) {
+        this.updatedAt = updatedAt;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/model/Merchant.java
+++ b/src/main/java/group/goforward/ballistic/model/Merchant.java
@@ -8,6 +8,7 @@ import java.time.OffsetDateTime;
@Entity
@Table(name = "merchants")
 public class Merchant {
+
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    @Column(name = "id", nullable = false)
@@ -22,9 +23,18 @@ public class Merchant {
    @Column(name = "feed_url", nullable = false, length = Integer.MAX_VALUE)
    private String feedUrl;

+    @Column(name = "offer_feed_url")
+    private String offerFeedUrl;
+
+    @Column(name = "last_full_import_at")
+    private OffsetDateTime lastFullImportAt;
+
+    @Column(name = "last_offer_sync_at")
+    private OffsetDateTime lastOfferSyncAt;
+
    @ColumnDefault("true")
    @Column(name = "is_active", nullable = false)
-    private Boolean isActive = false;
+    private Boolean isActive = true;

    @ColumnDefault("now()")
    @Column(name = "created_at", nullable = false)
@@ -34,6 +44,10 @@ public class Merchant {
    @Column(name = "updated_at", nullable = false)
    private OffsetDateTime updatedAt;

+    // -----------------------
+    // GETTERS & SETTERS
+    // -----------------------
+
    public Integer getId() {
        return id;
    }
@@ -66,12 +80,36 @@ public class Merchant {
        this.feedUrl = feedUrl;
    }

+    public String getOfferFeedUrl() {
+        return offerFeedUrl;
+    }
+
+    public void setOfferFeedUrl(String offerFeedUrl) {
+        this.offerFeedUrl = offerFeedUrl;
+    }
+
+    public OffsetDateTime getLastFullImportAt() {
+        return lastFullImportAt;
+    }
+
+    public void setLastFullImportAt(OffsetDateTime lastFullImportAt) {
+        this.lastFullImportAt = lastFullImportAt;
+    }
+
+    public OffsetDateTime getLastOfferSyncAt() {
+        return lastOfferSyncAt;
+    }
+
+    public void setLastOfferSyncAt(OffsetDateTime lastOfferSyncAt) {
+        this.lastOfferSyncAt = lastOfferSyncAt;
+    }
+
    public Boolean getIsActive() {
        return isActive;
    }

-    public void setIsActive(Boolean isActive) {
-        this.isActive = isActive;
+    public void setIsActive(Boolean active) {
+        this.isActive = active;
    }

    public OffsetDateTime getCreatedAt() {
@@ -89,5 +127,4 @@ public class Merchant {
    public void setUpdatedAt(OffsetDateTime updatedAt) {
        this.updatedAt = updatedAt;
    }
-
 }
--- a/src/main/java/group/goforward/ballistic/model/PartCategory.java
+++ b/src/main/java/group/goforward/ballistic/model/PartCategory.java
@@ -1,24 +1,49 @@
 package group.goforward.ballistic.model;

 import jakarta.persistence.*;
+import org.hibernate.annotations.ColumnDefault;
+
+import java.time.OffsetDateTime;
+import java.util.UUID;

@Entity
@Table(name = "part_categories")
 public class PartCategory {
+
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    @Column(name = "id", nullable = false)
    private Integer id;

-    @Column(name = "slug", nullable = false, length = Integer.MAX_VALUE)
+    @Column(name = "slug", nullable = false, unique = true)
    private String slug;

-    @Column(name = "name", nullable = false, length = Integer.MAX_VALUE)
+    @Column(name = "name", nullable = false)
    private String name;

-    @Column(name = "description", length = Integer.MAX_VALUE)
+    @Column(name = "description")
    private String description;

+    @ColumnDefault("gen_random_uuid()")
+    @Column(name = "uuid", nullable = false)
+    private UUID uuid;
+
+    @Column(name = "group_name")
+    private String groupName;
+
+    @Column(name = "sort_order")
+    private Integer sortOrder;
+
+    @ColumnDefault("now()")
+    @Column(name = "created_at", nullable = false)
+    private OffsetDateTime createdAt;
+
+    @ColumnDefault("now()")
+    @Column(name = "updated_at", nullable = false)
+    private OffsetDateTime updatedAt;
+
+    // --- Getters & Setters ---
+
    public Integer getId() {
        return id;
    }
@@ -51,4 +76,43 @@ public class PartCategory {
        this.description = description;
    }

+    public UUID getUuid() {
+        return uuid;
+    }
+
+    public void setUuid(UUID uuid) {
+        this.uuid = uuid;
+    }
+
+    public String getGroupName() {
+        return groupName;
+    }
+
+    public void setGroupName(String groupName) {
+        this.groupName = groupName;
+    }
+
+    public Integer getSortOrder() {
+        return sortOrder;
+    }
+
+    public void setSortOrder(Integer sortOrder) {
+        this.sortOrder = sortOrder;
+    }
+
+    public OffsetDateTime getCreatedAt() {
+        return createdAt;
+    }
+
+    public void setCreatedAt(OffsetDateTime createdAt) {
+        this.createdAt = createdAt;
+    }
+
+    public OffsetDateTime getUpdatedAt() {
+        return updatedAt;
+    }
+
+    public void setUpdatedAt(OffsetDateTime updatedAt) {
+        this.updatedAt = updatedAt;
+    }
 }
--- a/src/main/java/group/goforward/ballistic/model/PartRoleCategoryMapping.java
+++ b/src/main/java/group/goforward/ballistic/model/PartRoleCategoryMapping.java
@@ -0,0 +1,56 @@
+package group.goforward.ballistic.model;
+
+import jakarta.persistence.*;
+import java.time.OffsetDateTime;
+
+@Entity
+@Table(name = "part_role_category_mappings",
+       uniqueConstraints = @UniqueConstraint(columnNames = {"platform", "part_role"}))
+public class PartRoleCategoryMapping {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Integer id;
+
+    @Column(name = "platform", nullable = false)
+    private String platform;
+
+    @Column(name = "part_role", nullable = false)
+    private String partRole;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "category_slug", referencedColumnName = "slug", nullable = false)
+    private PartCategory category;
+
+    @Column(name = "notes")
+    private String notes;
+
+    @Column(name = "created_at", nullable = false)
+    private OffsetDateTime createdAt;
+
+    @Column(name = "updated_at", nullable = false)
+    private OffsetDateTime updatedAt;
+
+    // getters/setters…
+
+    public Integer getId() { return id; }
+    public void setId(Integer id) { this.id = id; }
+
+    public String getPlatform() { return platform; }
+    public void setPlatform(String platform) { this.platform = platform; }
+
+    public String getPartRole() { return partRole; }
+    public void setPartRole(String partRole) { this.partRole = partRole; }
+
+    public PartCategory getCategory() { return category; }
+    public void setCategory(PartCategory category) { this.category = category; }
+
+    public String getNotes() { return notes; }
+    public void setNotes(String notes) { this.notes = notes; }
+
+    public OffsetDateTime getCreatedAt() { return createdAt; }
+    public void setCreatedAt(OffsetDateTime createdAt) { this.createdAt = createdAt; }
+
+    public OffsetDateTime getUpdatedAt() { return updatedAt; }
+    public void setUpdatedAt(OffsetDateTime updatedAt) { this.updatedAt = updatedAt; }
+}
--- a/src/main/java/group/goforward/ballistic/model/PartRoleMapping.java
+++ b/src/main/java/group/goforward/ballistic/model/PartRoleMapping.java
@@ -0,0 +1,65 @@
+package group.goforward.ballistic.model;
+
+import jakarta.persistence.*;
+
+@Entity
+@Table(name = "part_role_mappings")
+public class PartRoleMapping {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Integer id;
+
+    @Column(nullable = false)
+    private String platform;   // e.g. "AR-15"
+
+    @Column(name = "part_role", nullable = false)
+    private String partRole;   // e.g. "UPPER", "BARREL", etc.
+
+    @ManyToOne(optional = false)
+    @JoinColumn(name = "part_category_id")
+    private PartCategory partCategory;
+
+    @Column(columnDefinition = "text")
+    private String notes;
+
+    public Integer getId() {
+        return id;
+    }
+
+    public void setId(Integer id) {
+        this.id = id;
+    }
+
+    public String getPlatform() {
+        return platform;
+    }
+
+    public void setPlatform(String platform) {
+        this.platform = platform;
+    }
+
+    public String getPartRole() {
+        return partRole;
+    }
+
+    public void setPartRole(String partRole) {
+        this.partRole = partRole;
+    }
+
+    public PartCategory getPartCategory() {
+        return partCategory;
+    }
+
+    public void setPartCategory(PartCategory partCategory) {
+        this.partCategory = partCategory;
+    }
+
+    public String getNotes() {
+        return notes;
+    }
+
+    public void setNotes(String notes) {
+        this.notes = notes;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/model/Product.java
+++ b/src/main/java/group/goforward/ballistic/model/Product.java
@@ -3,7 +3,13 @@ package group.goforward.ballistic.model;
 import jakarta.persistence.*;
 import java.time.Instant;
 import java.util.UUID;
+import java.math.BigDecimal;
+import java.util.Comparator;
+import java.util.Objects;
+import java.util.Set;
+import java.util.HashSet;

+import group.goforward.ballistic.model.ProductOffer;
 import group.goforward.ballistic.model.ProductConfiguration;

@Entity
@@ -68,7 +74,16 @@ public class Product {
    @Column(name = "platform_locked", nullable = false)
    private Boolean platformLocked = false;

+    @OneToMany(mappedBy = "product", fetch = FetchType.LAZY)
+    private Set<ProductOffer> offers = new HashSet<>();

+    public Set<ProductOffer> getOffers() {
+        return offers;
+    }
+
+    public void setOffers(Set<ProductOffer> offers) {
+        this.offers = offers;
+    }

    // --- lifecycle hooks ---

@@ -236,4 +251,41 @@ public class Product {
    public void setConfiguration(ProductConfiguration configuration) {
        this.configuration = configuration;
    }
+    // Convenience: best offer price for Gunbuilder
+public BigDecimal getBestOfferPrice() {
+    if (offers == null || offers.isEmpty()) {
+        return BigDecimal.ZERO;
+    }
+
+    return offers.stream()
+            // pick sale_price if present, otherwise retail_price
+            .map(offer -> {
+                if (offer.getSalePrice() != null) {
+                    return offer.getSalePrice();
+                }
+                return offer.getRetailPrice();
+            })
+            .filter(Objects::nonNull)
+            .min(BigDecimal::compareTo)
+            .orElse(BigDecimal.ZERO);
+}
+
+    // Convenience: URL for the best-priced offer
+    public String getBestOfferBuyUrl() {
+        if (offers == null || offers.isEmpty()) {
+            return null;
+        }
+
+        return offers.stream()
+                .sorted(Comparator.comparing(offer -> {
+                    if (offer.getSalePrice() != null) {
+                        return offer.getSalePrice();
+                    }
+                    return offer.getRetailPrice();
+                }, Comparator.nullsLast(BigDecimal::compareTo)))
+                .map(ProductOffer::getAffiliateUrl)
+                .filter(Objects::nonNull)
+                .findFirst()
+                .orElse(null);
+    }
 }
--- a/src/main/java/group/goforward/ballistic/model/ProductOffer.java
+++ b/src/main/java/group/goforward/ballistic/model/ProductOffer.java
@@ -7,11 +7,11 @@ import org.hibernate.annotations.OnDeleteAction;

 import java.math.BigDecimal;
 import java.time.OffsetDateTime;
-import java.util.UUID;

@Entity
@Table(name = "product_offers")
 public class ProductOffer {
+
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    @Column(name = "id", nullable = false)
@@ -26,16 +26,16 @@ public class ProductOffer {
    @JoinColumn(name = "merchant_id", nullable = false)
    private Merchant merchant;

-    @Column(name = "avantlink_product_id", nullable = false, length = Integer.MAX_VALUE)
+    @Column(name = "avantlink_product_id", nullable = false)
    private String avantlinkProductId;

-    @Column(name = "sku", length = Integer.MAX_VALUE)
+    @Column(name = "sku")
    private String sku;

-    @Column(name = "upc", length = Integer.MAX_VALUE)
+    @Column(name = "upc")
    private String upc;

-    @Column(name = "buy_url", nullable = false, length = Integer.MAX_VALUE)
+    @Column(name = "buy_url", nullable = false)
    private String buyUrl;

    @Column(name = "price", nullable = false, precision = 10, scale = 2)
@@ -45,7 +45,7 @@ public class ProductOffer {
    private BigDecimal originalPrice;

    @ColumnDefault("'USD'")
-    @Column(name = "currency", nullable = false, length = Integer.MAX_VALUE)
+    @Column(name = "currency", nullable = false)
    private String currency;

    @ColumnDefault("true")
@@ -60,6 +60,10 @@ public class ProductOffer {
    @Column(name = "first_seen_at", nullable = false)
    private OffsetDateTime firstSeenAt;

+    // -----------------------------------------------------
+    // Getters & setters
+    // -----------------------------------------------------
+
    public Integer getId() {
        return id;
    }
@@ -164,14 +168,26 @@ public class ProductOffer {
        this.firstSeenAt = firstSeenAt;
    }

-    public BigDecimal getEffectivePrice() {
-        // Prefer a true sale price when it's lower than the original
-        if (price != null && originalPrice != null && price.compareTo(originalPrice) < 0) {
+    // -----------------------------------------------------
+    // Helper Methods (used by Product entity)
+    // -----------------------------------------------------
+
+    public BigDecimal getSalePrice() {
        return price;
    }

-        // Otherwise, use whatever is available
-        return price != null ? price : originalPrice;
+    public BigDecimal getRetailPrice() {
+        return originalPrice != null ? originalPrice : price;
    }

+    public String getAffiliateUrl() {
+        return buyUrl;
+    }
+
+    public BigDecimal getEffectivePrice() {
+        if (price != null && originalPrice != null && price.compareTo(originalPrice) < 0) {
+            return price;
+        }
+        return price != null ? price : originalPrice;
+    }
 }
--- a/src/main/java/group/goforward/ballistic/model/User.java
+++ b/src/main/java/group/goforward/ballistic/model/User.java
@@ -1,236 +1,91 @@
 package group.goforward.ballistic.model;

-import jakarta.persistence.Column;
-import jakarta.persistence.Entity;
-import jakarta.persistence.Id;
-import jakarta.persistence.Table;
+import jakarta.persistence.*;
+import jakarta.validation.constraints.NotNull;
 import org.hibernate.annotations.ColumnDefault;

-import java.time.Instant;
-import java.time.LocalDate;
+import java.time.OffsetDateTime;
 import java.util.UUID;

@Entity
@Table(name = "users")
 public class User {
+
    @Id
-    @Column(name = "id", nullable = false, length = 21)
-    private String id;
-
-    @Column(name = "name", length = Integer.MAX_VALUE)
-    private String name;
-
-    @Column(name = "username", length = 50)
-    private String username;
-
-    @Column(name = "email", nullable = false)
-    private String email;
-
-    @Column(name = "first_name", length = 50)
-    private String firstName;
-
-    @Column(name = "last_name", length = 50)
-    private String lastName;
-
-    @Column(name = "full_name", length = 50)
-    private String fullName;
-
-    @Column(name = "profile_picture")
-    private String profilePicture;
-
-    @Column(name = "image", length = Integer.MAX_VALUE)
-    private String image;
-
-    @Column(name = "date_of_birth")
-    private LocalDate dateOfBirth;
-
-    @Column(name = "phone_number", length = 20)
-    private String phoneNumber;
-
-    @ColumnDefault("CURRENT_TIMESTAMP")
-    @Column(name = "created_at")
-    private Instant createdAt;
-
-    @ColumnDefault("CURRENT_TIMESTAMP")
-    @Column(name = "updated_at")
-    private Instant updatedAt;
-
-    @ColumnDefault("false")
-    @Column(name = "is_admin")
-    private Boolean isAdmin;
-
-    @Column(name = "last_login")
-    private Instant lastLogin;
-
-    @ColumnDefault("false")
-    @Column(name = "email_verified", nullable = false)
-    private Boolean emailVerified = false;
-
-    @ColumnDefault("'public'")
-    @Column(name = "build_privacy_setting", length = Integer.MAX_VALUE)
-    private String buildPrivacySetting;
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @Column(name = "id", nullable = false)
+    private Integer id;

+    @NotNull
    @ColumnDefault("gen_random_uuid()")
-    @Column(name = "uuid")
+    @Column(name = "uuid", nullable = false)
    private UUID uuid;

-    @Column(name = "discord_id")
-    private String discordId;
+    @NotNull
+    @Column(name = "email", nullable = false, length = Integer.MAX_VALUE)
+    private String email;

-    @Column(name = "hashed_password")
-    private String hashedPassword;
+    @NotNull
+    @Column(name = "password_hash", nullable = false, length = Integer.MAX_VALUE)
+    private String passwordHash;

-    @Column(name = "avatar")
-    private String avatar;
+    @Column(name = "display_name", length = Integer.MAX_VALUE)
+    private String displayName;

-    @Column(name = "stripe_subscription_id", length = 191)
-    private String stripeSubscriptionId;
+    @NotNull
+    @ColumnDefault("'USER'")
+    @Column(name = "role", nullable = false, length = Integer.MAX_VALUE)
+    private String role;

-    @Column(name = "stripe_price_id", length = 191)
-    private String stripePriceId;
+    @NotNull
+    @ColumnDefault("true")
+    @Column(name = "is_active", nullable = false)
+    private boolean isActive = true;

-    @Column(name = "stripe_customer_id", length = 191)
-    private String stripeCustomerId;
+    @NotNull
+    @ColumnDefault("now()")
+    @Column(name = "created_at", nullable = false)
+    private OffsetDateTime createdAt;

-    @Column(name = "stripe_current_period_end")
-    private Instant stripeCurrentPeriodEnd;
+    @NotNull
+    @ColumnDefault("now()")
+    @Column(name = "updated_at", nullable = false)
+    private OffsetDateTime updatedAt;

-    public String getId() {
+    @Column(name = "deleted_at")
+    private OffsetDateTime deletedAt;
+
+    // NEW FIELDS
+
+    @Column(name = "email_verified_at")
+    private OffsetDateTime emailVerifiedAt;
+
+    @Column(name = "verification_token", length = Integer.MAX_VALUE)
+    private String verificationToken;
+
+    @Column(name = "reset_password_token", length = Integer.MAX_VALUE)
+    private String resetPasswordToken;
+
+    @Column(name = "reset_password_expires_at")
+    private OffsetDateTime resetPasswordExpiresAt;
+
+    @Column(name = "last_login_at")
+    private OffsetDateTime lastLoginAt;
+
+    @ColumnDefault("0")
+    @Column(name = "login_count", nullable = false)
+    private Integer loginCount = 0;
+
+    // --- Getters / setters ---
+
+    public Integer getId() {
        return id;
    }

-    public void setId(String id) {
+    public void setId(Integer id) {
        this.id = id;
    }

-    public String getName() {
-        return name;
-    }
-
-    public void setName(String name) {
-        this.name = name;
-    }
-
-    public String getUsername() {
-        return username;
-    }
-
-    public void setUsername(String username) {
-        this.username = username;
-    }
-
-    public String getEmail() {
-        return email;
-    }
-
-    public void setEmail(String email) {
-        this.email = email;
-    }
-
-    public String getFirstName() {
-        return firstName;
-    }
-
-    public void setFirstName(String firstName) {
-        this.firstName = firstName;
-    }
-
-    public String getLastName() {
-        return lastName;
-    }
-
-    public void setLastName(String lastName) {
-        this.lastName = lastName;
-    }
-
-    public String getFullName() {
-        return fullName;
-    }
-
-    public void setFullName(String fullName) {
-        this.fullName = fullName;
-    }
-
-    public String getProfilePicture() {
-        return profilePicture;
-    }
-
-    public void setProfilePicture(String profilePicture) {
-        this.profilePicture = profilePicture;
-    }
-
-    public String getImage() {
-        return image;
-    }
-
-    public void setImage(String image) {
-        this.image = image;
-    }
-
-    public LocalDate getDateOfBirth() {
-        return dateOfBirth;
-    }
-
-    public void setDateOfBirth(LocalDate dateOfBirth) {
-        this.dateOfBirth = dateOfBirth;
-    }
-
-    public String getPhoneNumber() {
-        return phoneNumber;
-    }
-
-    public void setPhoneNumber(String phoneNumber) {
-        this.phoneNumber = phoneNumber;
-    }
-
-    public Instant getCreatedAt() {
-        return createdAt;
-    }
-
-    public void setCreatedAt(Instant createdAt) {
-        this.createdAt = createdAt;
-    }
-
-    public Instant getUpdatedAt() {
-        return updatedAt;
-    }
-
-    public void setUpdatedAt(Instant updatedAt) {
-        this.updatedAt = updatedAt;
-    }
-
-    public Boolean getIsAdmin() {
-        return isAdmin;
-    }
-
-    public void setIsAdmin(Boolean isAdmin) {
-        this.isAdmin = isAdmin;
-    }
-
-    public Instant getLastLogin() {
-        return lastLogin;
-    }
-
-    public void setLastLogin(Instant lastLogin) {
-        this.lastLogin = lastLogin;
-    }
-
-    public Boolean getEmailVerified() {
-        return emailVerified;
-    }
-
-    public void setEmailVerified(Boolean emailVerified) {
-        this.emailVerified = emailVerified;
-    }
-
-    public String getBuildPrivacySetting() {
-        return buildPrivacySetting;
-    }
-
-    public void setBuildPrivacySetting(String buildPrivacySetting) {
-        this.buildPrivacySetting = buildPrivacySetting;
-    }
-
    public UUID getUuid() {
        return uuid;
    }
@@ -239,60 +94,129 @@ public class User {
        this.uuid = uuid;
    }

-    public String getDiscordId() {
-        return discordId;
+    public String getEmail() {
+        return email;
    }

-    public void setDiscordId(String discordId) {
-        this.discordId = discordId;
+    public void setEmail(String email) {
+        this.email = email;
    }

-    public String getHashedPassword() {
-        return hashedPassword;
+    public String getPasswordHash() {
+        return passwordHash;
    }

-    public void setHashedPassword(String hashedPassword) {
-        this.hashedPassword = hashedPassword;
+    public void setPasswordHash(String passwordHash) {
+        this.passwordHash = passwordHash;
    }

-    public String getAvatar() {
-        return avatar;
+    public String getDisplayName() {
+        return displayName;
    }

-    public void setAvatar(String avatar) {
-        this.avatar = avatar;
+    public void setDisplayName(String displayName) {
+        this.displayName = displayName;
    }

-    public String getStripeSubscriptionId() {
-        return stripeSubscriptionId;
+    public String getRole() {
+        return role;
    }

-    public void setStripeSubscriptionId(String stripeSubscriptionId) {
-        this.stripeSubscriptionId = stripeSubscriptionId;
+    public void setRole(String role) {
+        this.role = role;
    }

-    public String getStripePriceId() {
-        return stripePriceId;
+    public boolean getIsActive() {
+        return isActive;
    }

-    public void setStripePriceId(String stripePriceId) {
-        this.stripePriceId = stripePriceId;
+    public void setIsActive(boolean active) {
+        isActive = active;
    }

-    public String getStripeCustomerId() {
-        return stripeCustomerId;
+    public OffsetDateTime getCreatedAt() {
+        return createdAt;
    }

-    public void setStripeCustomerId(String stripeCustomerId) {
-        this.stripeCustomerId = stripeCustomerId;
+    public void setCreatedAt(OffsetDateTime createdAt) {
+        this.createdAt = createdAt;
    }

-    public Instant getStripeCurrentPeriodEnd() {
-        return stripeCurrentPeriodEnd;
+    public OffsetDateTime getUpdatedAt() {
+        return updatedAt;
    }

-    public void setStripeCurrentPeriodEnd(Instant stripeCurrentPeriodEnd) {
-        this.stripeCurrentPeriodEnd = stripeCurrentPeriodEnd;
+    public void setUpdatedAt(OffsetDateTime updatedAt) {
+        this.updatedAt = updatedAt;
    }

+    public OffsetDateTime getDeletedAt() {
+        return deletedAt;
+    }
+
+    public void setDeletedAt(OffsetDateTime deletedAt) {
+        this.deletedAt = deletedAt;
+    }
+
+    public OffsetDateTime getEmailVerifiedAt() {
+        return emailVerifiedAt;
+    }
+
+    public void setEmailVerifiedAt(OffsetDateTime emailVerifiedAt) {
+        this.emailVerifiedAt = emailVerifiedAt;
+    }
+
+    public String getVerificationToken() {
+        return verificationToken;
+    }
+
+    public void setVerificationToken(String verificationToken) {
+        this.verificationToken = verificationToken;
+    }
+
+    public String getResetPasswordToken() {
+        return resetPasswordToken;
+    }
+
+    public void setResetPasswordToken(String resetPasswordToken) {
+        this.resetPasswordToken = resetPasswordToken;
+    }
+
+    public OffsetDateTime getResetPasswordExpiresAt() {
+        return resetPasswordExpiresAt;
+    }
+
+    public void setResetPasswordExpiresAt(OffsetDateTime resetPasswordExpiresAt) {
+        this.resetPasswordExpiresAt = resetPasswordExpiresAt;
+    }
+
+    public OffsetDateTime getLastLoginAt() {
+        return lastLoginAt;
+    }
+
+    public void setLastLoginAt(OffsetDateTime lastLoginAt) {
+        this.lastLoginAt = lastLoginAt;
+    }
+
+    public Integer getLoginCount() {
+        return loginCount;
+    }
+
+    public void setLoginCount(Integer loginCount) {
+        this.loginCount = loginCount;
+    }
+
+    // convenience helpers
+
+    @Transient
+    public boolean isEmailVerified() {
+        return emailVerifiedAt != null;
+    }
+
+    public void incrementLoginCount() {
+        if (loginCount == null) {
+            loginCount = 0;
+        }
+        loginCount++;
+    }
 }
--- a/src/main/java/group/goforward/ballistic/repos/AccountRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/AccountRepository.java
@@ -1,5 +1,6 @@
-package group.goforward.ballistic.model;
+package group.goforward.ballistic.repos;

+import group.goforward.ballistic.model.Account;
 import org.springframework.data.jpa.repository.JpaRepository;

 import java.util.UUID;
--- a/src/main/java/group/goforward/ballistic/repos/CategoryMappingRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/CategoryMappingRepository.java
@@ -1,7 +1,22 @@
 package group.goforward.ballistic.repos;

-import group.goforward.ballistic.model.AffiliateCategoryMap;
+import group.goforward.ballistic.model.CategoryMapping;
+import group.goforward.ballistic.model.Merchant;
 import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.data.jpa.repository.Query;

-public interface CategoryMappingRepository extends JpaRepository<AffiliateCategoryMap, Integer> {
+import java.util.List;
+
+public interface CategoryMappingRepository extends JpaRepository<CategoryMapping, Integer> {
+
+    // All mappings for a merchant, ordered nicely
+    List<CategoryMapping> findByMerchantIdOrderByRawCategoryPathAsc(Integer merchantId);
+
+    // Merchants that actually have mappings (for the dropdown)
+    @Query("""
+        select distinct cm.merchant
+        from CategoryMapping cm
+        order by cm.merchant.name asc
+    """)
+    List<Merchant> findDistinctMerchantsWithMappings();
 }
--- a/src/main/java/group/goforward/ballistic/repos/PartCategoryRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/PartCategoryRepository.java
@@ -2,8 +2,13 @@ package group.goforward.ballistic.repos;

 import group.goforward.ballistic.model.PartCategory;
 import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.List;
 import java.util.Optional;

 public interface PartCategoryRepository extends JpaRepository<PartCategory, Integer> {
+
    Optional<PartCategory> findBySlug(String slug);
+
+    List<PartCategory> findAllByOrderByGroupNameAscSortOrderAscNameAsc();
 }
--- a/src/main/java/group/goforward/ballistic/repos/PartRoleCategoryMappingRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/PartRoleCategoryMappingRepository.java
@@ -0,0 +1,14 @@
+package group.goforward.ballistic.repos;
+
+import group.goforward.ballistic.model.PartRoleCategoryMapping;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.List;
+import java.util.Optional;
+
+public interface PartRoleCategoryMappingRepository extends JpaRepository<PartRoleCategoryMapping, Integer> {
+
+    List<PartRoleCategoryMapping> findAllByPlatformOrderByPartRoleAsc(String platform);
+
+    Optional<PartRoleCategoryMapping> findByPlatformAndPartRole(String platform, String partRole);
+}
--- a/src/main/java/group/goforward/ballistic/repos/PartRoleMappingRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/PartRoleMappingRepository.java
@@ -0,0 +1,12 @@
+package group.goforward.ballistic.repos;
+
+import group.goforward.ballistic.model.PartRoleMapping;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import java.util.List;
+
+public interface PartRoleMappingRepository extends JpaRepository<PartRoleMapping, Integer> {
+
+    // List mappings for a platform, ordered nicely for the UI
+    List<PartRoleMapping> findByPlatformOrderByPartRoleAsc(String platform);
+}
--- a/src/main/java/group/goforward/ballistic/repos/ProductRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/ProductRepository.java
@@ -1,27 +1,62 @@
 package group.goforward.ballistic.repos;

-import group.goforward.ballistic.model.Product;
 import group.goforward.ballistic.model.Brand;
+import group.goforward.ballistic.model.Product;
 import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.data.jpa.repository.Query;
+import org.springframework.data.repository.query.Param;

-import java.util.Optional;
-import java.util.UUID;
 import java.util.List;
-import java.util.Collection;

 public interface ProductRepository extends JpaRepository<Product, Integer> {

-    Optional<Product> findByUuid(UUID uuid);
-
-    boolean existsBySlug(String slug);
+    // -------------------------------------------------
+    // Used by MerchantFeedImportServiceImpl
+    // -------------------------------------------------

    List<Product> findAllByBrandAndMpn(Brand brand, String mpn);

    List<Product> findAllByBrandAndUpc(Brand brand, String upc);

-    // All products for a given platform (e.g. "AR-15")
-    List<Product> findByPlatform(String platform);
+    boolean existsBySlug(String slug);

-    // Products filtered by platform + part roles (e.g. upper-receiver, barrel, etc.)
-    List<Product> findByPlatformAndPartRoleIn(String platform, Collection<String> partRoles);
+    // -------------------------------------------------
+    // Used by ProductController for platform views
+    // -------------------------------------------------
+
+    @Query("""
+           SELECT p
+           FROM Product p
+           JOIN FETCH p.brand b
+           WHERE p.platform = :platform
+             AND p.deletedAt IS NULL
+           """)
+    List<Product> findByPlatformWithBrand(@Param("platform") String platform);
+
+    @Query("""
+           SELECT p
+           FROM Product p
+           JOIN FETCH p.brand b
+           WHERE p.platform = :platform
+             AND p.partRole IN :roles
+             AND p.deletedAt IS NULL
+           """)
+    List<Product> findByPlatformAndPartRoleInWithBrand(
+            @Param("platform") String platform,
+            @Param("roles") List<String> roles
+    );
+
+    // -------------------------------------------------
+    // Used by Gunbuilder service (if you wired this)
+    // -------------------------------------------------
+
+    @Query("""
+           SELECT DISTINCT p
+           FROM Product p
+           LEFT JOIN FETCH p.brand b
+           LEFT JOIN FETCH p.offers o
+           WHERE p.platform = :platform
+             AND p.deletedAt IS NULL
+           """)
+    List<Product> findSomethingForGunbuilder(@Param("platform") String platform);
 }
--- a/src/main/java/group/goforward/ballistic/repos/UserRepository.java
+++ b/src/main/java/group/goforward/ballistic/repos/UserRepository.java
@@ -2,10 +2,15 @@ package group.goforward.ballistic.repos;

 import group.goforward.ballistic.model.User;
 import org.springframework.data.jpa.repository.JpaRepository;
+
 import java.util.Optional;
 import java.util.UUID;

 public interface UserRepository extends JpaRepository<User, Integer> {
-    Optional<User> findByEmail(String email);
+
+    Optional<User> findByEmailIgnoreCaseAndDeletedAtIsNull(String email);
+
+    boolean existsByEmailIgnoreCaseAndDeletedAtIsNull(String email);
+
    Optional<User> findByUuid(UUID uuid);
 }
--- a/src/main/java/group/goforward/ballistic/security/CustomUserDetails.java
+++ b/src/main/java/group/goforward/ballistic/security/CustomUserDetails.java
@@ -0,0 +1,59 @@
+package group.goforward.ballistic.security;
+
+import group.goforward.ballistic.model.User;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+import java.util.List;
+
+public class CustomUserDetails implements UserDetails {
+
+    private final User user;
+    private final List<GrantedAuthority> authorities;
+
+    public CustomUserDetails(User user) {
+        this.user = user;
+        this.authorities = List.of(new SimpleGrantedAuthority("ROLE_" + user.getRole()));
+    }
+
+    public User getUser() {
+        return user;
+    }
+
+    @Override
+    public Collection<? extends GrantedAuthority> getAuthorities() {
+        return authorities;
+    }
+
+    @Override
+    public String getPassword() {
+        return user.getPasswordHash();
+    }
+
+    @Override
+    public String getUsername() {
+        return user.getEmail();
+    }
+
+    @Override
+    public boolean isAccountNonExpired() {
+        return user.getDeletedAt() == null;
+    }
+
+    @Override
+    public boolean isAccountNonLocked() {
+        return user.getIsActive();
+    }
+
+    @Override
+    public boolean isCredentialsNonExpired() {
+        return user.getDeletedAt() == null;
+    }
+
+    @Override
+    public boolean isEnabled() {
+        return user.getIsActive() && user.getDeletedAt() == null;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/security/CustomUserDetailsService.java
+++ b/src/main/java/group/goforward/ballistic/security/CustomUserDetailsService.java
@@ -0,0 +1,25 @@
+package group.goforward.ballistic.security;
+
+import group.goforward.ballistic.model.User;
+import group.goforward.ballistic.repos.UserRepository;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+@Service
+public class CustomUserDetailsService implements UserDetailsService {
+
+    private final UserRepository users;
+
+    public CustomUserDetailsService(UserRepository users) {
+        this.users = users;
+    }
+
+    @Override
+    public UserDetails loadUserByUsername(String email) throws UsernameNotFoundException {
+        User user = users.findByEmailIgnoreCaseAndDeletedAtIsNull(email)
+                .orElseThrow(() -> new UsernameNotFoundException("User not found"));
+        return new CustomUserDetails(user);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/security/JwtAuthenticationEntryPoint.java
+++ b/src/main/java/group/goforward/ballistic/security/JwtAuthenticationEntryPoint.java
@@ -0,0 +1,26 @@
+package group.goforward.ballistic.security;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+
+@Component
+public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint {
+
+    @Override
+    public void commence(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            AuthenticationException authException
+    ) throws IOException, ServletException {
+        // Simple JSON 401 response
+        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+        response.setContentType("application/json");
+        response.getWriter().write("{\"error\":\"Unauthorized\"}");
+    }
+}
--- a/src/main/java/group/goforward/ballistic/security/JwtAuthenticationFilter.java
+++ b/src/main/java/group/goforward/ballistic/security/JwtAuthenticationFilter.java
@@ -0,0 +1,80 @@
+package group.goforward.ballistic.security;
+
+import group.goforward.ballistic.model.User;
+import group.goforward.ballistic.repos.UserRepository;
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
+import org.springframework.stereotype.Component;
+import org.springframework.util.StringUtils;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+import java.util.UUID;
+
+@Component
+public class JwtAuthenticationFilter extends OncePerRequestFilter {
+
+    private final JwtService jwtService;
+    private final UserRepository userRepository;
+
+    public JwtAuthenticationFilter(JwtService jwtService, UserRepository userRepository) {
+        this.jwtService = jwtService;
+        this.userRepository = userRepository;
+    }
+
+    @Override
+    protected void doFilterInternal(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            FilterChain filterChain
+    ) throws ServletException, IOException {
+
+        String authHeader = request.getHeader("Authorization");
+
+        if (!StringUtils.hasText(authHeader) || !authHeader.startsWith("Bearer ")) {
+            filterChain.doFilter(request, response);
+            return;
+        }
+
+        String token = authHeader.substring(7);
+
+        if (!jwtService.isTokenValid(token)) {
+            filterChain.doFilter(request, response);
+            return;
+        }
+
+        UUID userUuid = jwtService.extractUserUuid(token);
+
+        if (userUuid == null || SecurityContextHolder.getContext().getAuthentication() != null) {
+            filterChain.doFilter(request, response);
+            return;
+        }
+
+        User user = userRepository.findByUuid(userUuid)
+                .orElse(null);
+
+        if (user == null || !user.getIsActive()) {
+            filterChain.doFilter(request, response);
+            return;
+        }
+
+        CustomUserDetails userDetails = new CustomUserDetails(user);
+
+        UsernamePasswordAuthenticationToken authToken =
+                new UsernamePasswordAuthenticationToken(
+                        userDetails,
+                        null,
+                        userDetails.getAuthorities()
+                );
+        authToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
+
+        SecurityContextHolder.getContext().setAuthentication(authToken);
+
+        filterChain.doFilter(request, response);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/security/JwtService.java
+++ b/src/main/java/group/goforward/ballistic/security/JwtService.java
@@ -0,0 +1,71 @@
+package group.goforward.ballistic.security;
+
+import group.goforward.ballistic.model.User;
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.JwtException;
+import io.jsonwebtoken.SignatureAlgorithm;
+import io.jsonwebtoken.security.Keys;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+
+import java.security.Key;
+import java.time.Instant;
+import java.time.temporal.ChronoUnit;
+import java.util.Date;
+import java.util.Map;
+import java.util.UUID;
+
+@Service
+public class JwtService {
+
+    private final Key key;
+    private final long accessTokenMinutes;
+
+    public JwtService(
+            @Value("${security.jwt.secret}") String secret,
+            @Value("${security.jwt.access-token-minutes:60}") long accessTokenMinutes
+    ) {
+        this.key = Keys.hmacShaKeyFor(secret.getBytes());
+        this.accessTokenMinutes = accessTokenMinutes;
+    }
+
+    public String generateToken(User user) {
+        Instant now = Instant.now();
+        Instant expiry = now.plus(accessTokenMinutes, ChronoUnit.MINUTES);
+
+        return Jwts.builder()
+                .setSubject(user.getUuid().toString())
+                .setIssuedAt(Date.from(now))
+                .setExpiration(Date.from(expiry))
+                .addClaims(Map.of(
+                        "email", user.getEmail(),
+                        "role", user.getRole(),
+                        "displayName", user.getDisplayName()
+                ))
+                .signWith(key, SignatureAlgorithm.HS256)
+                .compact();
+    }
+
+    public UUID extractUserUuid(String token) {
+        Claims claims = parseClaims(token);
+        return UUID.fromString(claims.getSubject());
+    }
+
+    public boolean isTokenValid(String token) {
+        try {
+            parseClaims(token);
+            return true;
+        } catch (JwtException | IllegalArgumentException ex) {
+            return false;
+        }
+    }
+
+    private Claims parseClaims(String token) {
+        return Jwts.parserBuilder()
+                .setSigningKey(key)
+                .build()
+                .parseClaimsJws(token)
+                .getBody();
+    }
+}
--- a/src/main/java/group/goforward/ballistic/services/GunbuilderProductService.java
+++ b/src/main/java/group/goforward/ballistic/services/GunbuilderProductService.java
@@ -0,0 +1,57 @@
+package group.goforward.ballistic.services;
+
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.model.Product;
+import group.goforward.ballistic.repos.ProductRepository;
+import group.goforward.ballistic.web.dto.GunbuilderProductDto;
+import org.springframework.stereotype.Service;
+
+import java.util.List;
+
+@Service
+public class GunbuilderProductService {
+
+    private final ProductRepository productRepository;
+    private final PartCategoryResolverService partCategoryResolverService;
+
+    public GunbuilderProductService(
+            ProductRepository productRepository,
+            PartCategoryResolverService partCategoryResolverService
+    ) {
+        this.productRepository = productRepository;
+        this.partCategoryResolverService = partCategoryResolverService;
+    }
+
+    public List<GunbuilderProductDto> listGunbuilderProducts(String platform) {
+
+        List<Product> products = productRepository.findSomethingForGunbuilder(platform);
+
+        return products.stream()
+                .map(p -> {
+                    var maybeCategory = partCategoryResolverService
+                            .resolveForPlatformAndPartRole(platform, p.getPartRole());
+
+                    if (maybeCategory.isEmpty()) {
+                        // you can also log here
+                        return null;
+                    }
+
+                    PartCategory cat = maybeCategory.get();
+
+                    return new GunbuilderProductDto(
+                            p.getId(),
+                            p.getName(),
+                            p.getBrand().getName(),
+                            platform,
+                            p.getPartRole(),
+                            p.getBestOfferPrice(),
+                            p.getMainImageUrl(),
+                            p.getBestOfferBuyUrl(),
+                            cat.getSlug(),
+                            cat.getGroupName()
+                    );
+                })
+                .filter(dto -> dto != null)
+                .toList();
+    }
+}
--- a/src/main/java/group/goforward/ballistic/services/MerchantFeedImportService.java
+++ b/src/main/java/group/goforward/ballistic/services/MerchantFeedImportService.java
@@ -3,7 +3,12 @@ package group.goforward.ballistic.services;
 public interface MerchantFeedImportService {

    /**
-     * Import the feed for a given merchant id.
+     * Full product + offer import for a given merchant.
     */
    void importMerchantFeed(Integer merchantId);
+
+    /**
+     * Offers-only sync (price / stock) for a given merchant.
+     */
+    void syncOffersOnly(Integer merchantId);
 }
--- a/src/main/java/group/goforward/ballistic/services/PartCategoryResolverService.java
+++ b/src/main/java/group/goforward/ballistic/services/PartCategoryResolverService.java
@@ -0,0 +1,41 @@
+package group.goforward.ballistic.services;
+
+import group.goforward.ballistic.model.PartCategory;
+import group.goforward.ballistic.repos.PartCategoryRepository;
+import org.springframework.stereotype.Service;
+
+import java.util.Optional;
+
+@Service
+public class PartCategoryResolverService {
+
+    private final PartCategoryRepository partCategoryRepository;
+
+    public PartCategoryResolverService(PartCategoryRepository partCategoryRepository) {
+        this.partCategoryRepository = partCategoryRepository;
+    }
+
+    /**
+     * Resolve the canonical PartCategory for a given platform + partRole.
+     *
+     * For now we keep it simple:
+     * - We treat partRole as the slug (e.g. "barrel", "upper", "trigger").
+     * - Normalize to lower-kebab (spaces -> dashes, lowercased).
+     * - Look up by slug in part_categories.
+     *
+     * Later, if we want per-merchant / per-platform overrides using category_mappings,
+     * we can extend this method without changing callers.
+     */
+    public Optional<PartCategory> resolveForPlatformAndPartRole(String platform, String partRole) {
+        if (partRole == null || partRole.isBlank()) {
+            return Optional.empty();
+        }
+
+        String normalizedSlug = partRole
+                .trim()
+                .toLowerCase()
+                .replace(" ", "-");
+
+        return partCategoryRepository.findBySlug(normalizedSlug);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/services/PsaService.java
+++ b/src/main/java/group/goforward/ballistic/services/PsaService.java
@@ -1,40 +1,17 @@
 package group.goforward.ballistic.services;
+
 import group.goforward.ballistic.model.Psa;
-import group.goforward.ballistic.repos.PsaRepository;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.stereotype.Service;

 import java.util.List;
 import java.util.Optional;
 import java.util.UUID;

-@Service
-public class PsaService implements group.goforward.ballistic.services.impl.PsaService {
+public interface PsaService {
+    List<Psa> findAll();

-    private final PsaRepository psaRepository;
+    Optional<Psa> findById(UUID id);

-    @Autowired
-    public PsaService(PsaRepository psaRepository) {
-        this.psaRepository = psaRepository;
-    }
+    Psa save(Psa psa);

-    @Override
-    public List<Psa> findAll() {
-        return psaRepository.findAll();
-    }
-
-    @Override
-    public Optional<Psa> findById(UUID id) {
-        return psaRepository.findById(id);
-    }
-
-    @Override
-    public Psa save(Psa psa) {
-        return psaRepository.save(psa);
-    }
-
-    @Override
-    public void deleteById(UUID id) {
-        psaRepository.deleteById(id);
-    }
+    void deleteById(UUID id);
 }
--- a/src/main/java/group/goforward/ballistic/services/UsersService.java
+++ b/src/main/java/group/goforward/ballistic/services/UsersService.java
@@ -0,0 +1,16 @@
+package group.goforward.ballistic.services;
+
+import group.goforward.ballistic.model.User;
+
+import java.util.List;
+import java.util.Optional;
+
+public interface UsersService {
+
+    List<User> findAll();
+
+    Optional<User> findById(Integer id);
+
+    User save(User item);
+    void deleteById(Integer id);
+}
--- a/src/main/java/group/goforward/ballistic/services/impl/MerchantFeedImportServiceImpl.java
+++ b/src/main/java/group/goforward/ballistic/services/impl/MerchantFeedImportServiceImpl.java
@@ -4,16 +4,22 @@ import java.math.BigDecimal;
 import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
+import java.util.Map;
+import java.util.HashMap;
 import java.io.Reader;
+import java.io.BufferedReader;
 import java.io.InputStreamReader;
 import java.net.URL;
 import java.nio.charset.StandardCharsets;
+import org.springframework.cache.annotation.CacheEvict;

 import group.goforward.ballistic.imports.MerchantFeedRow;
 import group.goforward.ballistic.services.MerchantFeedImportService;
 import org.apache.commons.csv.CSVFormat;
 import org.apache.commons.csv.CSVParser;
 import org.apache.commons.csv.CSVRecord;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;

 import group.goforward.ballistic.model.Brand;
 import group.goforward.ballistic.model.Merchant;
@@ -33,6 +39,7 @@ import java.time.OffsetDateTime;
@Service
@Transactional
 public class MerchantFeedImportServiceImpl implements MerchantFeedImportService {
+    private static final Logger log = LoggerFactory.getLogger(MerchantFeedImportServiceImpl.class);

    private final MerchantRepository merchantRepository;
    private final BrandRepository brandRepository;
@@ -53,27 +60,22 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
    }

    @Override
+    @CacheEvict(value = "gunbuilderProducts", allEntries = true)
    public void importMerchantFeed(Integer merchantId) {
-        System.out.println("IMPORT >>> importMerchantFeed(" + merchantId + ")");
+        log.info("Starting full import for merchantId={}", merchantId);

        Merchant merchant = merchantRepository.findById(merchantId)
                .orElseThrow(() -> new IllegalArgumentException("Merchant not found: " + merchantId));

        // Read all rows from the merchant feed
        List<MerchantFeedRow> rows = readFeedRowsForMerchant(merchant);
-        System.out.println("IMPORT >>> read " + rows.size() + " rows for merchant=" + merchant.getName());
+        log.info("Read {} feed rows for merchant={}", rows.size(), merchant.getName());

        for (MerchantFeedRow row : rows) {
-            // Resolve brand from the row (fallback to "Aero Precision" or whatever you want as default)
            Brand brand = resolveBrand(row);
            Product p = upsertProduct(merchant, brand, row);
-
-            System.out.println("IMPORT >>> upserted product id=" + p.getId()
-                    + ", name=" + p.getName()
-                    + ", slug=" + p.getSlug()
-                    + ", platform=" + p.getPlatform()
-                    + ", partRole=" + p.getPartRole()
-                    + ", merchant=" + merchant.getName());
+            log.debug("Upserted product id={}, name={}, slug={}, platform={}, partRole={}, merchant={}",
+                    p.getId(), p.getName(), p.getSlug(), p.getPlatform(), p.getPartRole(), merchant.getName());
        }
    }

@@ -82,9 +84,7 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
    // ---------------------------------------------------------------------

    private Product upsertProduct(Merchant merchant, Brand brand, MerchantFeedRow row) {
-        System.out.println("IMPORT >>> upsertProduct brand=" + brand.getName()
-                + ", sku=" + row.sku()
-                + ", productName=" + row.productName());
+        log.debug("Upserting product for brand={}, sku={}, name={}", brand.getName(), row.sku(), row.productName());

        String mpn = trimOrNull(row.manufacturerId());
        String upc = trimOrNull(row.sku()); // placeholder until real UPC field
@@ -106,9 +106,8 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
            p.setBrand(brand);
        } else {
            if (candidates.size() > 1) {
-                System.out.println("IMPORT !!! WARNING: multiple existing products found for brand="
-                        + brand.getName() + ", mpn=" + mpn + ", upc=" + upc
-                        + ". Using the first match (id=" + candidates.get(0).getId() + ")");
+                log.warn("Multiple existing products found for brand={}, mpn={}, upc={}. Using first match id={}",
+                        brand.getName(), mpn, upc, candidates.get(0).getId());
            }
            p = candidates.get(0);
        }
@@ -123,6 +122,37 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService

        return saved;
    }
+    private List<Map<String, String>> fetchFeedRows(String feedUrl) {
+        log.info("Reading offer feed from {}", feedUrl);
+
+        List<Map<String, String>> rows = new ArrayList<>();
+
+        try (Reader reader = (feedUrl.startsWith("http://") || feedUrl.startsWith("https://"))
+                ? new InputStreamReader(new URL(feedUrl).openStream(), StandardCharsets.UTF_8)
+                : java.nio.file.Files.newBufferedReader(java.nio.file.Paths.get(feedUrl), StandardCharsets.UTF_8);
+             CSVParser parser = CSVFormat.DEFAULT
+                     .withFirstRecordAsHeader()
+                     .withIgnoreSurroundingSpaces()
+                     .withTrim()
+                     .parse(reader)) {
+
+            // capture header names from the CSV
+            List<String> headers = new ArrayList<>(parser.getHeaderMap().keySet());
+
+            for (CSVRecord rec : parser) {
+                Map<String, String> row = new HashMap<>();
+                for (String header : headers) {
+                    row.put(header, rec.get(header));
+                }
+                rows.add(row);
+            }
+        } catch (Exception ex) {
+            throw new RuntimeException("Failed to read offer feed from " + feedUrl, ex);
+        }
+
+        log.info("Parsed {} offer rows from offer feed {}", rows.size(), feedUrl);
+        return rows;
+    }
    
    private void updateProductFromRow(Product p, Merchant merchant, MerchantFeedRow row, boolean isNew) {
        // ---------- NAME ----------
@@ -221,7 +251,7 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
        String avantlinkProductId = trimOrNull(row.sku());
        if (avantlinkProductId == null) {
            // If there's truly no SKU, bail out – we can't match this offer reliably.
-            System.out.println("IMPORT !!! skipping offer: no SKU for product id=" + product.getId());
+            log.debug("Skipping offer row with no SKU for product id={}", product.getId());
            return;
        }

@@ -286,6 +316,68 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
    //  Feed reading + brand resolution
    // ---------------------------------------------------------------------

+    /**
+     * Open a Reader for either an HTTP(S) URL or a local file path.
+     */
+    private Reader openFeedReader(String feedUrl) throws java.io.IOException {
+        if (feedUrl.startsWith("http://") || feedUrl.startsWith("https://")) {
+            return new InputStreamReader(new URL(feedUrl).openStream(), StandardCharsets.UTF_8);
+        } else {
+            return java.nio.file.Files.newBufferedReader(
+                    java.nio.file.Paths.get(feedUrl),
+                    StandardCharsets.UTF_8
+            );
+        }
+    }
+
+    /**
+     * Try a few common delimiters (tab, comma, semicolon) and pick the one
+     * that yields the expected AvantLink-style header set.
+     */
+    private CSVFormat detectCsvFormat(String feedUrl) throws Exception {
+        char[] delimiters = new char[]{'\t', ',', ';'};
+        java.util.List<String> requiredHeaders =
+                java.util.Arrays.asList("SKU", "Manufacturer Id", "Brand Name", "Product Name");
+
+        Exception lastException = null;
+
+        for (char delimiter : delimiters) {
+            try (Reader reader = openFeedReader(feedUrl);
+                 CSVParser parser = CSVFormat.DEFAULT.builder()
+                         .setDelimiter(delimiter)
+                         .setHeader()
+                         .setSkipHeaderRecord(true)
+                         .setIgnoreSurroundingSpaces(true)
+                         .setTrim(true)
+                         .build()
+                         .parse(reader)) {
+
+                Map<String, Integer> headerMap = parser.getHeaderMap();
+                if (headerMap != null && headerMap.keySet().containsAll(requiredHeaders)) {
+                    log.info("Detected delimiter '{}' for feed {}", (delimiter == '\t' ? "\\t" : String.valueOf(delimiter)), feedUrl);
+
+                    return CSVFormat.DEFAULT.builder()
+                            .setDelimiter(delimiter)
+                            .setHeader()
+                            .setSkipHeaderRecord(true)
+                            .setIgnoreSurroundingSpaces(true)
+                            .setTrim(true)
+                            .build();
+                } else if (headerMap != null) {
+                    log.debug("Delimiter '{}' produced headers {} for feed {}", (delimiter == '\t' ? "\\t" : String.valueOf(delimiter)), headerMap.keySet(), feedUrl);
+                }
+            } catch (Exception ex) {
+                lastException = ex;
+                log.warn("Error probing delimiter '{}' for {}: {}", delimiter, feedUrl, ex.getMessage());
+            }
+        }
+
+        if (lastException != null) {
+            throw lastException;
+        }
+        throw new RuntimeException("Could not auto-detect delimiter for feed: " + feedUrl);
+    }
+
    private List<MerchantFeedRow> readFeedRowsForMerchant(Merchant merchant) {
        String rawFeedUrl = merchant.getFeedUrl();
        if (rawFeedUrl == null || rawFeedUrl.isBlank()) {
@@ -293,55 +385,56 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
        }

        String feedUrl = rawFeedUrl.trim();
-        System.out.println("IMPORT >>> reading feed for merchant=" + merchant.getName() + " from: " + feedUrl);
+        log.info("Reading product feed for merchant={} from {}", merchant.getName(), feedUrl);

        List<MerchantFeedRow> rows = new ArrayList<>();

-        try (Reader reader = (feedUrl.startsWith("http://") || feedUrl.startsWith("https://"))
-                ? new InputStreamReader(new URL(feedUrl).openStream(), StandardCharsets.UTF_8)
-                : java.nio.file.Files.newBufferedReader(java.nio.file.Paths.get(feedUrl), StandardCharsets.UTF_8);
-             CSVParser parser = CSVFormat.DEFAULT
-                     .withFirstRecordAsHeader()
-                     .withIgnoreSurroundingSpaces()
-                     .withTrim()
-                     .parse(reader)) {
+        try {
+            // Auto-detect delimiter (TSV/CSV/semicolon) based on header row
+            CSVFormat format = detectCsvFormat(feedUrl);
+
+            try (Reader reader = openFeedReader(feedUrl);
+                 CSVParser parser = new CSVParser(reader, format)) {
+
+                log.debug("Detected feed headers for merchant {}: {}", merchant.getName(), parser.getHeaderMap().keySet());

                for (CSVRecord rec : parser) {
                    MerchantFeedRow row = new MerchantFeedRow(
-                        rec.get("SKU"),
-                        rec.get("Manufacturer Id"),
-                        rec.get("Brand Name"),
-                        rec.get("Product Name"),
-                        rec.get("Long Description"),
-                        rec.get("Short Description"),
-                        rec.get("Department"),
-                        rec.get("Category"),
-                        rec.get("SubCategory"),
-                        rec.get("Thumb URL"),
-                        rec.get("Image URL"),
-                        rec.get("Buy Link"),
-                        rec.get("Keywords"),
-                        rec.get("Reviews"),
-                        parseBigDecimal(rec.get("Retail Price")),
-                        parseBigDecimal(rec.get("Sale Price")),
-                        rec.get("Brand Page Link"),
-                        rec.get("Brand Logo Image"),
-                        rec.get("Product Page View Tracking"),
-                        rec.get("Variants XML"),
-                        rec.get("Medium Image URL"),
-                        rec.get("Product Content Widget"),
-                        rec.get("Google Categorization"),
-                        rec.get("Item Based Commission")
+                            getCsvValue(rec, "SKU"),
+                            getCsvValue(rec, "Manufacturer Id"),
+                            getCsvValue(rec, "Brand Name"),
+                            getCsvValue(rec, "Product Name"),
+                            getCsvValue(rec, "Long Description"),
+                            getCsvValue(rec, "Short Description"),
+                            getCsvValue(rec, "Department"),
+                            getCsvValue(rec, "Category"),
+                            getCsvValue(rec, "SubCategory"),
+                            getCsvValue(rec, "Thumb URL"),
+                            getCsvValue(rec, "Image URL"),
+                            getCsvValue(rec, "Buy Link"),
+                            getCsvValue(rec, "Keywords"),
+                            getCsvValue(rec, "Reviews"),
+                            parseBigDecimal(getCsvValue(rec, "Retail Price")),
+                            parseBigDecimal(getCsvValue(rec, "Sale Price")),
+                            getCsvValue(rec, "Brand Page Link"),
+                            getCsvValue(rec, "Brand Logo Image"),
+                            getCsvValue(rec, "Product Page View Tracking"),
+                            null,
+                            getCsvValue(rec, "Medium Image URL"),
+                            getCsvValue(rec, "Product Content Widget"),
+                            getCsvValue(rec, "Google Categorization"),
+                            getCsvValue(rec, "Item Based Commission")
                    );

                    rows.add(row);
                }
+            }
        } catch (Exception ex) {
            throw new RuntimeException("Failed to read feed for merchant "
                    + merchant.getName() + " from " + feedUrl, ex);
        }

-        System.out.println("IMPORT >>> parsed " + rows.size() + " rows for merchant=" + merchant.getName());
+        log.info("Parsed {} product rows for merchant={}", rows.size(), merchant.getName());
        return rows;
    }

@@ -368,7 +461,28 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService
        try {
            return new BigDecimal(trimmed);
        } catch (NumberFormatException ex) {
-            System.out.println("IMPORT !!! bad BigDecimal value: '" + raw + "', skipping");
+            log.debug("Skipping invalid numeric value '{}'", raw);
+            return null;
+        }
+    }
+
+    /**
+     * Safely get a column value by header name. If the record is "short"
+     * (fewer values than headers) or the header is missing, return null
+     * instead of throwing IllegalArgumentException.
+     */
+    private String getCsvValue(CSVRecord rec, String header) {
+        if (rec == null || header == null) {
+            return null;
+        }
+        if (!rec.isMapped(header)) {
+            // Header not present at all
+            return null;
+        }
+        try {
+            return rec.get(header);
+        } catch (IllegalArgumentException ex) {
+            log.debug("Short CSV record #{} missing column '{}', treating as null", rec.getRecordNumber(), header);
            return null;
        }
    }
@@ -465,4 +579,82 @@ public class MerchantFeedImportServiceImpl implements MerchantFeedImportService

        return "unknown";
    }
+    @CacheEvict(value = "gunbuilderProducts", allEntries = true)
+    public void syncOffersOnly(Integer merchantId) {
+        log.info("Starting offers-only sync for merchantId={}", merchantId);
+        Merchant merchant = merchantRepository.findById(merchantId)
+            .orElseThrow(() -> new RuntimeException("Merchant not found"));
+
+        if (Boolean.FALSE.equals(merchant.getIsActive())) {
+            return;
+        }
+
+        String feedUrl = merchant.getOfferFeedUrl() != null
+                ? merchant.getOfferFeedUrl()
+                : merchant.getFeedUrl();
+
+        if (feedUrl == null) {
+            throw new RuntimeException("No offer feed URL configured for merchant " + merchantId);
+        }
+
+        List<Map<String, String>> rows = fetchFeedRows(feedUrl);
+
+        for (Map<String, String> row : rows) {
+            upsertOfferOnlyFromRow(merchant, row);
+        }
+
+        merchant.setLastOfferSyncAt(OffsetDateTime.now());
+        merchantRepository.save(merchant);
+        log.info("Completed offers-only sync for merchantId={} ({} rows processed)", merchantId, rows.size());
+    }
+
+    private void upsertOfferOnlyFromRow(Merchant merchant, Map<String, String> row) {
+        // For the offer-only sync, we key offers by the same identifier we used when creating them.
+        // In the current AvantLink-style feed, that is the SKU column.
+        String avantlinkProductId = trimOrNull(row.get("SKU"));
+        if (avantlinkProductId == null || avantlinkProductId.isBlank()) {
+            return;
+        }
+
+        // Find existing offer
+        ProductOffer offer = productOfferRepository
+            .findByMerchantIdAndAvantlinkProductId(merchant.getId(), avantlinkProductId)
+            .orElse(null);
+
+        if (offer == null) {
+            // This is a *sync* pass, not full ETL – if we don't already have an offer, skip.
+            return;
+        }
+
+        // Parse price fields (column names match the main product feed)
+        BigDecimal price = parseBigDecimal(row.get("Sale Price"));
+        BigDecimal originalPrice = parseBigDecimal(row.get("Retail Price"));
+
+        // Update only *offer* fields – do not touch Product
+        offer.setPrice(price);
+        offer.setOriginalPrice(originalPrice);
+        offer.setInStock(parseInStock(row));
+
+        // Prefer a fresh Buy Link from the feed if present, otherwise keep existing
+        String newBuyUrl = trimOrNull(row.get("Buy Link"));
+        offer.setBuyUrl(coalesce(newBuyUrl, offer.getBuyUrl()));
+
+        offer.setLastSeenAt(OffsetDateTime.now());
+
+        productOfferRepository.save(offer);
+    }
+    private Boolean parseInStock(Map<String, String> row) {
+        String inStock = trimOrNull(row.get("In Stock"));
+        if (inStock == null) return Boolean.FALSE;
+    
+        String lower = inStock.toLowerCase();
+        if (lower.contains("true") || lower.contains("yes") || lower.contains("1")) {
+            return Boolean.TRUE;
+        }
+        if (lower.contains("false") || lower.contains("no") || lower.contains("0")) {
+            return Boolean.FALSE;
+        }
+    
+        return Boolean.FALSE;
+    }
 }
--- a/src/main/java/group/goforward/ballistic/services/impl/PsaService.java
+++ b/src/main/java/group/goforward/ballistic/services/impl/PsaService.java
@@ -1,17 +0,0 @@
-package group.goforward.ballistic.services.impl;
-
-import group.goforward.ballistic.model.Psa;
-
-import java.util.List;
-import java.util.Optional;
-import java.util.UUID;
-
-public interface PsaService {
-    List<Psa> findAll();
-
-    Optional<Psa> findById(UUID id);
-
-    Psa save(Psa psa);
-
-    void deleteById(UUID id);
-}
--- a/src/main/java/group/goforward/ballistic/services/impl/PsaServiceImpl.java
+++ b/src/main/java/group/goforward/ballistic/services/impl/PsaServiceImpl.java
@@ -0,0 +1,41 @@
+package group.goforward.ballistic.services.impl;
+import group.goforward.ballistic.model.Psa;
+import group.goforward.ballistic.repos.PsaRepository;
+import group.goforward.ballistic.services.PsaService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Service;
+
+import java.util.List;
+import java.util.Optional;
+import java.util.UUID;
+
+@Service
+public class PsaServiceImpl implements PsaService {
+
+    private final PsaRepository psaRepository;
+
+    @Autowired
+    public PsaServiceImpl(PsaRepository psaRepository) {
+        this.psaRepository = psaRepository;
+    }
+
+    @Override
+    public List<Psa> findAll() {
+        return psaRepository.findAll();
+    }
+
+    @Override
+    public Optional<Psa> findById(UUID id) {
+        return psaRepository.findById(id);
+    }
+
+    @Override
+    public Psa save(Psa psa) {
+        return psaRepository.save(psa);
+    }
+
+    @Override
+    public void deleteById(UUID id) {
+        psaRepository.deleteById(id);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/services/impl/UsersServiceImpl.java
+++ b/src/main/java/group/goforward/ballistic/services/impl/UsersServiceImpl.java
@@ -0,0 +1,37 @@
+package group.goforward.ballistic.services.impl;
+
+import group.goforward.ballistic.model.User;
+import group.goforward.ballistic.repos.UserRepository;
+import group.goforward.ballistic.services.UsersService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Service;
+
+import java.util.List;
+import java.util.Optional;
+
+@Service
+public class UsersServiceImpl implements UsersService {
+
+    @Autowired
+    private UserRepository repo;
+
+    @Override
+    public List<User> findAll() {
+        return repo.findAll();
+    }
+
+    @Override
+    public Optional<User> findById(Integer id) {
+        return repo.findById(id);
+    }
+
+    @Override
+    public User save(User item) {
+        return null;
+    }
+
+    @Override
+    public void deleteById(Integer id) {
+        deleteById(id);
+    }
+}
--- a/src/main/java/group/goforward/ballistic/services/impl/package-info.java
+++ b/src/main/java/group/goforward/ballistic/services/impl/package-info.java
@@ -1 +1,13 @@
+/**
+ * Provides the classes necessary for the Spring Services implementations for the ballistic -Builder application.
+ * This package includes Services implementations  for Spring-Boot application
+ *
+ *
+ * <p>The main entry point for managing the inventory is the
+ * {@link group.goforward.ballistic.BallisticApplication} class.</p>
+ *
+ * @since 1.0
+ * @author Don Strawsburg
+ * @version 1.1
+ */
 package group.goforward.ballistic.services.impl;
--- a/src/main/java/group/goforward/ballistic/web/dto/GunbuilderProductDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/GunbuilderProductDto.java
@@ -0,0 +1,53 @@
+package group.goforward.ballistic.web.dto;
+
+import java.math.BigDecimal;
+
+public class GunbuilderProductDto {
+
+    private Integer id;
+    private String name;
+    private String brand;
+    private String platform;
+    private String partRole;
+    private BigDecimal price;
+    private String imageUrl;
+    private String buyUrl;
+    private String categorySlug;
+    private String categoryGroup;
+
+    public GunbuilderProductDto(
+            Integer id,
+            String name,
+            String brand,
+            String platform,
+            String partRole,
+            BigDecimal price,
+            String imageUrl,
+            String buyUrl,
+            String categorySlug,
+            String categoryGroup
+    ) {
+        this.id = id;
+        this.name = name;
+        this.brand = brand;
+        this.platform = platform;
+        this.partRole = partRole;
+        this.price = price;
+        this.imageUrl = imageUrl;
+        this.buyUrl = buyUrl;
+        this.categorySlug = categorySlug;
+        this.categoryGroup = categoryGroup;
+    }
+
+    // --- Getters only (DTOs are read-only in most cases) ---
+    public Integer getId() { return id; }
+    public String getName() { return name; }
+    public String getBrand() { return brand; }
+    public String getPlatform() { return platform; }
+    public String getPartRole() { return partRole; }
+    public BigDecimal getPrice() { return price; }
+    public String getImageUrl() { return imageUrl; }
+    public String getBuyUrl() { return buyUrl; }
+    public String getCategorySlug() { return categorySlug; }
+    public String getCategoryGroup() { return categoryGroup; }
+}
--- a/src/main/java/group/goforward/ballistic/web/dto/MerchantAdminDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/MerchantAdminDto.java
@@ -0,0 +1,70 @@
+// MerchantAdminDto.java
+package group.goforward.ballistic.web.dto;
+
+import java.time.OffsetDateTime;
+
+public class MerchantAdminDto {
+    private Integer id;
+    private String name;
+    private String feedUrl;
+    private String offerFeedUrl;
+    private Boolean isActive;
+    private OffsetDateTime lastFullImportAt;
+    private OffsetDateTime lastOfferSyncAt;
+
+    public Integer getId() {
+        return id;
+    }
+
+    public void setId(Integer id) {
+        this.id = id;
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public void setName(String name) {
+        this.name = name;
+    }
+
+    public String getFeedUrl() {
+        return feedUrl;
+    }
+
+    public void setFeedUrl(String feedUrl) {
+        this.feedUrl = feedUrl;
+    }
+
+    public String getOfferFeedUrl() {
+        return offerFeedUrl;
+    }
+
+    public void setOfferFeedUrl(String offerFeedUrl) {
+        this.offerFeedUrl = offerFeedUrl;
+    }
+
+    public Boolean getIsActive() {
+        return isActive;
+    }
+
+    public void setIsActive(Boolean isActive) {
+        this.isActive = isActive;
+    }
+
+    public OffsetDateTime getLastFullImportAt() {
+        return lastFullImportAt;
+    }
+
+    public void setLastFullImportAt(OffsetDateTime lastFullImportAt) {
+        this.lastFullImportAt = lastFullImportAt;
+    }
+
+    public OffsetDateTime getLastOfferSyncAt() {
+        return lastOfferSyncAt;
+    }
+
+    public void setLastOfferSyncAt(OffsetDateTime lastOfferSyncAt) {
+        this.lastOfferSyncAt = lastOfferSyncAt;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/AdminPartRoleMappingDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/AdminPartRoleMappingDto.java
@@ -0,0 +1,10 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record AdminPartRoleMappingDto(
+        Integer id,
+        String platform,
+        String partRole,
+        String categorySlug,
+        String groupName,
+        String notes
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/CreatePartRoleMappingRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/CreatePartRoleMappingRequest.java
@@ -0,0 +1,8 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record CreatePartRoleMappingRequest(
+        String platform,
+        String partRole,
+        String categorySlug,
+        String notes
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/MerchantCategoryMappingDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/MerchantCategoryMappingDto.java
@@ -0,0 +1,11 @@
+// src/main/java/group/goforward/ballistic/web/dto/admin/MerchantCategoryMappingDto.java
+package group.goforward.ballistic.web.dto.admin;
+
+public record MerchantCategoryMappingDto(
+        Integer id,
+        Integer merchantId,
+        String merchantName,
+        String rawCategoryPath,
+        Integer partCategoryId,
+        String partCategoryName
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/PartCategoryDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/PartCategoryDto.java
@@ -0,0 +1,10 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record PartCategoryDto(
+        Integer id,
+        String slug,
+        String name,
+        String description,
+        String groupName,
+        Integer sortOrder
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/PartRoleMappingDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/PartRoleMappingDto.java
@@ -0,0 +1,10 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record PartRoleMappingDto(
+        Integer id,
+        String platform,
+        String partRole,
+        String categorySlug,
+        String groupName,
+        String notes
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/PartRoleMappingRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/PartRoleMappingRequest.java
@@ -0,0 +1,8 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record PartRoleMappingRequest(
+        String platform,
+        String partRole,
+        String categorySlug,
+        String notes
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/SimpleMerchantDto.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/SimpleMerchantDto.java
@@ -0,0 +1,6 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record SimpleMerchantDto(
+        Integer id,
+        String name
+) { }
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/UpdateMerchantCategoryMappingRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/UpdateMerchantCategoryMappingRequest.java
@@ -0,0 +1,5 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record UpdateMerchantCategoryMappingRequest(
+        Integer partCategoryId
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/admin/UpdatePartRoleMappingRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/admin/UpdatePartRoleMappingRequest.java
@@ -0,0 +1,8 @@
+package group.goforward.ballistic.web.dto.admin;
+
+public record UpdatePartRoleMappingRequest(
+        String platform,
+        String partRole,
+        String categorySlug,
+        String notes
+) {}
--- a/src/main/java/group/goforward/ballistic/web/dto/auth/AuthResponse.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/auth/AuthResponse.java
@@ -0,0 +1,49 @@
+package group.goforward.ballistic.web.dto.auth;
+
+public class AuthResponse {
+    private String token;
+    private String email;
+    private String displayName;
+    private String role;
+
+    public AuthResponse() {}
+
+    public AuthResponse(String token, String email, String displayName, String role) {
+        this.token = token;
+        this.email = email;
+        this.displayName = displayName;
+        this.role = role;
+    }
+
+    public String getToken() {
+        return token;
+    }
+
+    public void setToken(String token) {
+        this.token = token;
+    }
+
+    public String getEmail() {
+        return email;
+    }
+
+    public void setEmail(String email) {
+        this.email = email;
+    }
+
+    public String getDisplayName() {
+        return displayName;
+    }
+
+    public void setDisplayName(String displayName) {
+        this.displayName = displayName;
+    }
+
+    public String getRole() {
+        return role;
+    }
+
+    public void setRole(String role) {
+        this.role = role;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/web/dto/auth/LoginRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/auth/LoginRequest.java
@@ -0,0 +1,22 @@
+package group.goforward.ballistic.web.dto.auth;
+
+public class LoginRequest {
+    private String email;
+    private String password;
+
+    public String getEmail() {
+        return email;
+    }
+
+    public void setEmail(String email) {
+        this.email = email;
+    }
+
+    public String getPassword() {
+        return password;
+    }
+
+    public void setPassword(String password) {
+        this.password = password;
+    }
+}
--- a/src/main/java/group/goforward/ballistic/web/dto/auth/RegisterRequest.java
+++ b/src/main/java/group/goforward/ballistic/web/dto/auth/RegisterRequest.java
@@ -0,0 +1,31 @@
+package group.goforward.ballistic.web.dto.auth;
+
+public class RegisterRequest {
+    private String email;
+    private String password;
+    private String displayName;
+
+    public String getEmail() {
+        return email;
+    }
+
+    public void setEmail(String email) {
+        this.email = email;
+    }
+
+    public String getPassword() {
+        return password;
+    }
+
+    public void setPassword(String password) {
+        this.password = password;
+    }
+
+    public String getDisplayName() {
+        return displayName;
+    }
+
+    public void setDisplayName(String displayName) {
+        this.displayName = displayName;
+    }
+}
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -9,3 +9,6 @@ spring.datasource.driver-class-name=org.postgresql.Driver
 #spring.jpa.hibernate.ddl-auto=update
 spring.jpa.show-sql=true
 spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect
+
+security.jwt.secret=ballistic-test-secret-key-1234567890-ABCDEFGHIJKLNMOPQRST
+security.jwt.access-token-minutes=2880
--- a/src/test/java/group/goforward/ballistic/BallisticApplicationTests.java
+++ b/src/test/java/group/goforward/ballistic/BallisticApplicationTests.java
@@ -3,7 +3,7 @@ package group.goforward.ballistic;
 import org.junit.jupiter.api.Test;
 import org.springframework.boot.test.context.SpringBootTest;

-@SpringBootTest
+// @SpringBootTest
 class BallisticApplicationTests {

 	@Test
Author	SHA1	Message	Date
Sean	e986fa97ca	running finally..	2025-12-04 15:20:42 -05:00
Sean	9096ddd165	running finally..	2025-12-04 15:06:29 -05:00
Sean	3d1501cc87	running finally..	2025-12-04 14:43:07 -05:00
Sean	74a5c42e26	dynamic category mapping and updating from admin.	2025-12-03 21:50:00 -05:00
Sean	5e3f7d5044	expanded category grouping from db	2025-12-03 19:13:43 -05:00
Sean	85b00e9d99	jaca security auth - working	2025-12-03 10:55:35 -05:00
Sean	7e1b33efdf	added java caching and optimized controller queries	2025-12-02 20:19:56 -05:00
Don Strawsburg	009e512a66	docker...	2025-12-02 17:23:32 -05:00
Don Strawsburg	9fabf30406	getting ready for docker deployment	2025-12-02 17:18:26 -05:00
Don Strawsburg	346ccc3813	got ride of the swagger geneerated api end oints	2025-12-02 14:42:34 -05:00
Don Strawsburg	9779bdb5c0	package-infos and a few other changes	2025-12-02 13:55:01 -05:00
Sean	d7ae362c23	readme docs	2025-12-02 07:21:23 -05:00
Sean	7fb24fdde3	buffer	2025-12-02 05:41:17 -05:00
Sean	c4d2adad1a	running build. New merchant import admin page.	2025-12-01 21:28:39 -05:00
Don Strawsburg	0b2b3afd0c	adding more package-info dfiles	2025-12-01 16:58:49 -05:00