@burdenoff/microfe-movethewheels 2026.1031.6 → 2026.1101.1

package/dist/utils/carrierIntegrations.js

@@ -0,0 +1,105 @@
+import { resolveGraphqlUrl as e } from "./graphqlClient.js";
+//#region src/movethewheels/utils/carrierIntegrations.ts
+var t = [
+	{
+		id: "PROJECT44",
+		label: "project44"
+	},
+	{
+		id: "FOURKITES",
+		label: "FourKites"
+	},
+	{
+		id: "DESCARTES",
+		label: "Descartes"
+	}
+], n = [
+	"ACTIVE",
+	"PAUSED",
+	"DISABLED"
+], r = [
+	"CREATED",
+	"PICKED_UP",
+	"IN_TRANSIT",
+	"ARRIVED",
+	"DEPARTED",
+	"OUT_FOR_DELIVERY",
+	"DELIVERED",
+	"FAILED",
+	"RETURNED"
+], i = "x-webhook-signature", a = "\n  id\n  workspaceId\n  provider\n  name\n  status\n  lastSyncAt\n  lastErrorAt\n  lastErrorMessage\n  createdAt\n  updatedAt\n", o = `
+  query MtwCarrierIntegrations($filter: IntegrationFilterInput, $pagination: PaginationInput) {
+    integrations(filter: $filter, pagination: $pagination) {
+      ${a}
+    }
+    integrationsCount(filter: $filter)
+  }
+`, s = "\n  query MtwCarrierIntegrationCounts {\n    all: integrationsCount\n    active: integrationsCount(filter: { status: ACTIVE })\n  }\n", c = "\n  query MtwCarrierIntegrationEvents($integrationId: ID, $pagination: PaginationInput) {\n    integrationEvents(integrationId: $integrationId, pagination: $pagination) {\n      id\n      integrationId\n      externalEventId\n      shipmentId\n      eventType\n      status\n      errorMessage\n      receivedAt\n      processedAt\n    }\n  }\n", l = `
+  mutation CreateMtwCarrierIntegration($input: CreateIntegrationInput!) {
+    createIntegration(input: $input) {
+      ${a}
+    }
+  }
+`, u = `
+  mutation UpdateMtwCarrierIntegration($id: ID!, $input: UpdateIntegrationInput!) {
+    updateIntegration(id: $id, input: $input) {
+      ${a}
+    }
+  }
+`, d = "\n  mutation DeleteMtwCarrierIntegration($id: ID!) {\n    deleteIntegration(id: $id)\n  }\n";
+function f(e = globalThis.crypto) {
+	let t = e.getRandomValues(new Uint8Array(32));
+	return Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
+}
+function p(e) {
+	return e.trim().length < 32 ? "Use a signing secret of at least 32 characters." : null;
+}
+function m(e) {
+	let t = e.trim();
+	return t ? t.length > 120 ? "Keep the name under 120 characters." : null : "Give the integration a name.";
+}
+function h(t, n, r, i) {
+	return `${new URL(e(t), i).origin}/api/integrations/webhook/${n}/${r}`;
+}
+function g(e = /* @__PURE__ */ new Date()) {
+	return JSON.stringify({
+		externalEventId: "evt_0001",
+		trackingNumber: "YOUR-TRACKING-NUMBER",
+		eventType: "IN_TRANSIT",
+		timestamp: e.toISOString().replace(/\.\d{3}Z$/, "Z"),
+		location: {
+			lat: 12.9716,
+			lng: 77.5946,
+			address: "Bengaluru hub"
+		},
+		details: "Departed origin hub"
+	}, null, 2);
+}
+function _(e) {
+	return `'${e.split("'").join("'\\''")}'`;
+}
+function v(e) {
+	return [
+		"BODY='{\"externalEventId\":\"evt_0001\",\"trackingNumber\":\"YOUR-TRACKING-NUMBER\",\"eventType\":\"IN_TRANSIT\"}'",
+		"SIG=$(printf '%s' \"$BODY\" | openssl dgst -sha256 -hmac \"$MTW_WEBHOOK_SECRET\" -hex | sed 's/^.* //')",
+		`curl -X POST ${_(e)} \\`,
+		"  -H 'Content-Type: application/json' \\",
+		`  -H "${i}: sha256=$SIG" \\`,
+		"  --data \"$BODY\""
+	].join("\n");
+}
+function y(e) {
+	let t = e.toLowerCase().split("_").join(" ");
+	return t.charAt(0).toUpperCase() + t.slice(1);
+}
+function b(e) {
+	return e === "ACTIVE" ? "default" : e === "PAUSED" ? "secondary" : "outline";
+}
+function x(e) {
+	return e === "ACCEPTED" ? "default" : e === "DUPLICATE" || e === "PARTIAL" || e === "RECEIVED" ? "secondary" : "destructive";
+}
+function S(e) {
+	return e === "ACTIVE" ? "Signed deliveries are accepted and become tracking events." : e === "PAUSED" ? "Deliveries are refused with HTTP 423 so the sender can retry after you resume." : "Deliveries are refused with HTTP 410. Resume to accept them again.";
+}
+//#endregion
+export { l as CREATE_INTEGRATION_MUTATION, d as DELETE_INTEGRATION_MUTATION, s as INTEGRATION_COUNTS_QUERY, c as INTEGRATION_EVENTS_QUERY, n as INTEGRATION_STATUSES, o as LIST_INTEGRATIONS_QUERY, t as ROADMAP_PROVIDERS, i as SIGNATURE_HEADER, r as TRACKING_EVENT_TYPES, u as UPDATE_INTEGRATION_MUTATION, v as curlExample, x as eventStatusTone, g as examplePayload, f as generateSigningSecret, y as humanize, m as integrationNameError, b as integrationStatusTone, p as signingSecretError, S as statusExplanation, h as webhookUrl };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-movethewheels",
-  "version": "2026.1031.6",
+  "version": "2026.1101.1",
   "description": "Burdenoff MoveTheWheels Microfrontend - Logistics & Supply Chain Management Platform",
   "type": "module",
   "files": [
@@ -37,7 +37,7 @@
     "format": "prettier --write \"src/**/*.{ts,tsx}\"",
     "type:check": "bash scripts/build-limits.sh tsc --noEmit",
     "validate:schema-drift": "graphql-schema-drift",
-    "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run codegen && bun run validate:schema-drift && bun run lint:sanity && bun run format && bun run type:check && bun run verify:live-logistics-contract && bun run verify:empty-reuse-retry && bun run verify:empty-reuse-recovery && bun run verify:trip-utilization-input && bun run verify:trip-draft-context && bun run verify:stock-binding-input && bun run verify:stock-observation-input && bun run verify:pending-pick-input && bun run verify:pick-review-ack && bun run verify:driver-license-expiry && bun run verify:tracking-alerts && bun run verify:freight-input && bun run verify:freight-recovery && bun run verify:freight-commercial && bun run verify:freight-invoice && bun run verify:procedure-input && bun run verify:consolidation && bun run verify:multimodal-single-attempt && bun run verify:workspace-predispatch && bun run verify:tracking-quality-outcomes && bun run verify:shipment-status-authority && bun run verify:free-time-permissions && bun run verify:core-codegen && bun run verify:order-vehicle-hold && bun run verify:pallet-preview && bun run verify:entity-export && bun run verify:entity-import && bun run verify:module-settings && bun run verify:consumed-fuel-preview && bun run build && bun run build-storybook'",
+    "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run codegen && bun run validate:schema-drift && bun run lint:sanity && bun run format && bun run type:check && bun run verify:live-logistics-contract && bun run verify:empty-reuse-retry && bun run verify:empty-reuse-recovery && bun run verify:trip-utilization-input && bun run verify:trip-draft-context && bun run verify:stock-binding-input && bun run verify:stock-observation-input && bun run verify:pending-pick-input && bun run verify:pick-review-ack && bun run verify:driver-license-expiry && bun run verify:tracking-alerts && bun run verify:freight-input && bun run verify:freight-recovery && bun run verify:freight-commercial && bun run verify:freight-invoice && bun run verify:procedure-input && bun run verify:consolidation && bun run verify:multimodal-single-attempt && bun run verify:workspace-predispatch && bun run verify:tracking-quality-outcomes && bun run verify:shipment-status-authority && bun run verify:free-time-permissions && bun run verify:core-codegen && bun run verify:order-vehicle-hold && bun run verify:pallet-preview && bun run verify:entity-export && bun run verify:entity-import && bun run verify:module-settings && bun run verify:carrier-integrations && bun run verify:consumed-fuel-preview && bun run build && bun run build-storybook'",
     "storybook": "storybook dev -p 6006",
     "build-storybook": "storybook build",
     "test:storybook": "vitest run --project=storybook",
@@ -75,6 +75,7 @@
     "verify:entity-export": "bun test scripts/check-entity-export.test.ts",
     "verify:entity-import": "bun test scripts/check-entity-import.test.ts",
     "verify:module-settings": "bun test scripts/check-module-settings.test.ts",
+    "verify:carrier-integrations": "bun test scripts/check-carrier-integrations.test.ts",
     "verify:pallet-preview": "bun test scripts/check-pallet-preview.test.ts && bun scripts/verify-pallet-preview-hook.mjs",
     "verify:consumed-fuel-preview": "bun test scripts/check-consumed-fuel-preview.test.ts && bun scripts/verify-consumed-fuel-preview-hook.mjs && bun scripts/verify-consumed-fuel-preview-component.mjs"
   },

package/src/movethewheels/MoveTheWheelsRoot.tsx

@@ -25,6 +25,7 @@ import {
   Store,
   ArrowDownUp,
   Settings,
+  Plug,
 } from 'lucide-react';
 import { MoveTheWheelsProvider } from './providers/MoveTheWheelsProvider';
 import { ModuleSettingsProvider } from './providers/ModuleSettingsProvider';
@@ -309,6 +310,13 @@ const NavRegistrar: FC<Pick<MoveTheWheelsRootProps, 'registerNavItems' | 'basePa
           icon: <Bot size={16} />,
           order: 13,
         },
+        {
+          id: 'mtw-integrations',
+          label: tr('movethewheels.root.nav.integrations', 'Integrations'),
+          path: joinPath(basePath, 'integrations'),
+          icon: <Plug size={16} />,
+          order: 98,
+        },
         {
           id: 'mtw-settings',
           label: tr('movethewheels.root.nav.settings', 'Settings'),

package/src/movethewheels/MoveTheWheelsRoutes.tsx

@@ -75,6 +75,7 @@ const CustomerDetailsPage = lazy(() => import('./pages/CustomerDetailsPage'));
 const MarketplacePage = lazy(() => import('./pages/MarketplacePage'));
 const ImportExportPage = lazy(() => import('./pages/ImportExportPage'));
 const SettingsPage = lazy(() => import('./pages/SettingsPage'));
+const IntegrationsPage = lazy(() => import('./pages/IntegrationsPage'));
 const RoutesPage = lazy(() => import('./pages/RoutesPage'));
 const RouteDetailsPage = lazy(() => import('./pages/RouteDetailsPage'));
 const AnalyticsPage = lazy(() => import('./pages/AnalyticsPage'));
@@ -172,6 +173,9 @@ export function MoveTheWheelsRoutes() {
         {/* Workspace operational defaults: currency, units, time zone (BOFF-10488) */}
         <Route path="settings" element={<SettingsPage />} />
 
+        {/* Carrier, ELD and GPS tracking feeds as signed webhooks (BOFF-4404) */}
+        <Route path="integrations" element={<IntegrationsPage />} />
+
         {/* Routes */}
         <Route path="routes" element={<RoutesPage />} />
         <Route path="routes/trip-utilization" element={<TripUtilizationPage />} />

package/src/movethewheels/hooks/useCarrierIntegrations.ts

@@ -0,0 +1,221 @@
+/**
+ * Carrier and telematics integration hooks (BOFF-4404).
+ *
+ * Reads and writes the workspace's `MtwIntegration` rows and their delivery
+ * log through wspace-movethewheels-svc's integration module. The service
+ * validates every write (supported provider, signing-secret length) and never
+ * returns the signing secret.
+ */
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { useMoveTheWheels } from '../providers/MoveTheWheelsProvider';
+import { executeGraphQL } from '../utils/graphqlClient';
+import {
+  CREATE_INTEGRATION_MUTATION,
+  DELETE_INTEGRATION_MUTATION,
+  INTEGRATION_COUNTS_QUERY,
+  INTEGRATION_EVENTS_QUERY,
+  LIST_INTEGRATIONS_QUERY,
+  UPDATE_INTEGRATION_MUTATION,
+  type CarrierIntegration,
+  type CarrierIntegrationEvent,
+  type IntegrationStatus,
+  type SupportedProvider,
+} from '../utils/carrierIntegrations';
+
+export interface CreateCarrierIntegrationInput {
+  provider: SupportedProvider;
+  name: string;
+  apiSecret: string;
+}
+
+export interface UpdateCarrierIntegrationInput {
+  name?: string;
+  status?: IntegrationStatus;
+  apiSecret?: string;
+}
+
+function useGraphQLOptions() {
+  const { apiGatewayUrl, authToken, workspaceToken, workspaceId, tenantId, currentUser } =
+    useMoveTheWheels();
+  return useMemo(
+    () => ({
+      apiGatewayUrl,
+      authToken,
+      workspaceToken,
+      workspaceId,
+      tenantId,
+      actorId: currentUser?.id,
+    }),
+    [apiGatewayUrl, authToken, workspaceToken, workspaceId, tenantId, currentUser?.id]
+  );
+}
+
+function toError(error: unknown, fallback: string): Error {
+  return error instanceof Error ? error : new Error(fallback);
+}
+
+export function useCarrierIntegrations(options: {
+  status?: IntegrationStatus;
+  limit: number;
+  offset: number;
+}) {
+  const graphQLOptions = useGraphQLOptions();
+  const { status, limit, offset } = options;
+  const [integrations, setIntegrations] = useState<CarrierIntegration[]>([]);
+  const [total, setTotal] = useState(0);
+  const [isLoading, setIsLoading] = useState(false);
+  const [error, setError] = useState<Error | null>(null);
+  // Only the latest request may update state: a slower response for a
+  // previous filter or page must not overwrite the current view.
+  const latestRequest = useRef(0);
+
+  const load = useCallback(async () => {
+    const request = ++latestRequest.current;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const data = await executeGraphQL<{
+        integrations: CarrierIntegration[];
+        integrationsCount: number;
+      }>(graphQLOptions, LIST_INTEGRATIONS_QUERY, {
+        filter: status ? { status } : undefined,
+        pagination: { limit, offset },
+      });
+      if (request !== latestRequest.current) return;
+      setIntegrations(data.integrations);
+      setTotal(data.integrationsCount);
+    } catch (loadError) {
+      if (request !== latestRequest.current) return;
+      setError(toError(loadError, 'Failed to load integrations'));
+    } finally {
+      if (request === latestRequest.current) setIsLoading(false);
+    }
+  }, [graphQLOptions, status, limit, offset]);
+
+  useEffect(() => {
+    void load();
+    return () => {
+      // Invalidate the in-flight request when the filter, page or unmount changes.
+      latestRequest.current += 1;
+    };
+  }, [load]);
+
+  // A refetch requested by a mutation that started under an earlier filter or
+  // page must load the view that is current when it completes, not the one
+  // captured when the mutation started.
+  const latestLoad = useRef(load);
+  useEffect(() => {
+    latestLoad.current = load;
+  }, [load]);
+  const refetch = useCallback(() => latestLoad.current(), []);
+
+  return { integrations, total, isLoading, error, refetch };
+}
+
+/** Workspace-wide feed counts (all and active) in one request, independent of the list filter. */
+export function useCarrierIntegrationCounts() {
+  const graphQLOptions = useGraphQLOptions();
+  const [counts, setCounts] = useState<{ all: number; active: number }>({ all: 0, active: 0 });
+  const latestRequest = useRef(0);
+
+  const load = useCallback(async () => {
+    const request = ++latestRequest.current;
+    try {
+      const data = await executeGraphQL<{ all: number; active: number }>(
+        graphQLOptions,
+        INTEGRATION_COUNTS_QUERY,
+        {}
+      );
+      if (request === latestRequest.current) setCounts({ all: data.all, active: data.active });
+    } catch {
+      // The list request surfaces load errors; the counts keep their last value.
+    }
+  }, [graphQLOptions]);
+
+  useEffect(() => {
+    void load();
+    return () => {
+      latestRequest.current += 1;
+    };
+  }, [load]);
+
+  return { ...counts, refetch: load };
+}
+
+/** The most recent deliveries for one integration, newest first. */
+export function useCarrierIntegrationEvents(
+  integrationId: string | null,
+  refreshKey: number,
+  limit = 20
+) {
+  const graphQLOptions = useGraphQLOptions();
+  const [events, setEvents] = useState<CarrierIntegrationEvent[]>([]);
+  const [isLoading, setIsLoading] = useState(false);
+  const [error, setError] = useState<Error | null>(null);
+
+  useEffect(() => {
+    if (!integrationId) {
+      setEvents([]);
+      return;
+    }
+    let cancelled = false;
+    setIsLoading(true);
+    setError(null);
+    executeGraphQL<{ integrationEvents: CarrierIntegrationEvent[] }>(
+      graphQLOptions,
+      INTEGRATION_EVENTS_QUERY,
+      { integrationId, pagination: { limit, offset: 0 } }
+    )
+      .then((data) => {
+        if (!cancelled) setEvents(data.integrationEvents);
+      })
+      .catch((loadError: unknown) => {
+        if (!cancelled) setError(toError(loadError, 'Failed to load deliveries'));
+      })
+      .finally(() => {
+        if (!cancelled) setIsLoading(false);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [graphQLOptions, integrationId, refreshKey, limit]);
+
+  return { events, isLoading, error };
+}
+
+export function useCarrierIntegrationActions() {
+  const graphQLOptions = useGraphQLOptions();
+
+  return useMemo(
+    () => ({
+      create: async (input: CreateCarrierIntegrationInput) => {
+        // A lost response must not create a second integration with a secret
+        // the operator never saw, so the write is attempted once.
+        const data = await executeGraphQL<{ createIntegration: CarrierIntegration }>(
+          graphQLOptions,
+          CREATE_INTEGRATION_MUTATION,
+          { input: { ...input, name: input.name.trim(), status: 'ACTIVE' } },
+          'SINGLE_ATTEMPT'
+        );
+        return data.createIntegration;
+      },
+      update: async (id: string, input: UpdateCarrierIntegrationInput) => {
+        const data = await executeGraphQL<{ updateIntegration: CarrierIntegration }>(
+          graphQLOptions,
+          UPDATE_INTEGRATION_MUTATION,
+          { id, input: input.name !== undefined ? { ...input, name: input.name.trim() } : input }
+        );
+        return data.updateIntegration;
+      },
+      remove: async (id: string) => {
+        const data = await executeGraphQL<{ deleteIntegration: boolean }>(
+          graphQLOptions,
+          DELETE_INTEGRATION_MUTATION,
+          { id }
+        );
+        return data.deleteIntegration;
+      },
+    }),
+    [graphQLOptions]
+  );
+}