@flowselections/floriday-authenticatie-module 1.0.13 → 1.0.14

package/dist-lib/lib/floriday-public.functions.js

@@ -0,0 +1,241 @@
+/**
+ * Floriday-leeszijde — publieke helpers voor andere modules.
+ *
+ * Andere modules (Verkoop, Magazijn, Catalogus, …) lezen Floriday-gegevens
+ * uit de lokale cache via deze helpers, nooit rechtstreeks van de API.
+ * Op die manier:
+ *   - Blijft de cadans-richtlijn van Floriday gerespecteerd (sequence-sync).
+ *   - Profiteren alle modules van dezelfde refresh-/token-keten.
+ *   - Kunnen we per resource centraal stale-detectie inbouwen.
+ */
+import { createServerFn } from "@tanstack/react-start";
+import { requireSupabaseAuth } from "../integrations/supabase/auth-middleware";
+import { getActiveFlorydayCredentials, } from "./floriday.functions";
+const CACHE_TABLES = {
+    "sales-orders": "floriday_salesorders_cache",
+    "trade-items": "floriday_trade_items_cache",
+    "customer-organizations": "floriday_customers_cache",
+    "carriers": "floriday_carriers_cache",
+    "fulfillment-orders": "floriday_fulfillment_orders_cache",
+    "delivery-orders": "floriday_delivery_orders_cache",
+    "clock-supplies": "floriday_clock_supplies_cache",
+    "clock-presales": "floriday_clock_presales_cache",
+    "contracts": "floriday_contracts_cache",
+    "blanket-orders": "floriday_blanket_orders_cache",
+    "warehouses": "floriday_warehouses_cache",
+    "delivery-locations": "floriday_delivery_locations_cache",
+    "packings": "floriday_packings_cache",
+    "connections": "floriday_connections_cache",
+    "customer-stickers": "floriday_customer_stickers_cache",
+    "additional-services": "floriday_additional_services_cache",
+    "commercial-service-types": "floriday_commercial_service_types_cache",
+    "collections": "floriday_collections_cache",
+    "price-groups": "floriday_price_groups_cache",
+    "delivery-condition-sets": "floriday_delivery_condition_sets_cache",
+    "sales-strategies": "floriday_sales_strategies_cache",
+    "base-items": "floriday_base_items_cache",
+    "contract-trade-item-groups": "floriday_contract_trade_item_groups_cache",
+    "trade-item-classifications": "floriday_trade_item_classifications_cache",
+};
+/**
+ * Generieke cache-lezer. Andere modules gebruiken dit i.p.v. zelf
+ * naar `floriday_*_cache` tabellen te queryen.
+ */
+export const getFlorydayCachedList = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!["staging", "live"].includes(input.environment)) {
+        throw new Error("Ongeldige environment");
+    }
+    if (!(input.entity in CACHE_TABLES)) {
+        throw new Error(`Onbekende entity: ${input.entity}`);
+    }
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    const conn = await getActiveFlorydayCredentials(context.supabase, data.environment);
+    if (!conn) {
+        return { ok: false, error: `Geen actieve koppeling voor ${data.environment}` };
+    }
+    const table = CACHE_TABLES[data.entity];
+    const limit = Math.min(Math.max(data.limit ?? 100, 1), 1000);
+    const { data: rows, error } = await context.supabase
+        .from(table)
+        .select("*")
+        .eq("connection_id", conn.id)
+        .order("updated_at", { ascending: false })
+        .limit(limit);
+    if (error)
+        return { ok: false, error: error.message };
+    return { ok: true, rows: (rows ?? []) };
+});
+/**
+ * Code-lijst lezen (enums, keuze-opties). Bron is een combinatie van de
+ * Floriday Swagger-enums en specifiek door Floriday gepubliceerde lijsten
+ * (landen, eenheden, kwaliteitsmerken). Andere modules gebruiken dit om
+ * dropdowns te vullen en input te valideren.
+ */
+export const getFlorydayCodeList = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!["staging", "live"].includes(input.environment)) {
+        throw new Error("Ongeldige environment");
+    }
+    if (!input.listName || typeof input.listName !== "string") {
+        throw new Error("listName is verplicht");
+    }
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    const { data: rows, error } = await context.supabase
+        .from("floriday_code_lists_cache")
+        .select("code, label, payload")
+        .eq("environment", data.environment)
+        .eq("list_name", data.listName)
+        .order("code", { ascending: true });
+    if (error)
+        return { ok: false, error: error.message };
+    return {
+        ok: true,
+        values: (rows ?? []),
+    };
+});
+/**
+ * VBN-productlookup. Floriday publiceert VBN-bloem/plant-codes als
+ * referentiedata; we exposen ze via dezelfde code-lijst-tabel onder de
+ * vaste list-naam `vbn-products`. Resolved op exacte code óf zoekterm
+ * (ILIKE op label/payload->>'name').
+ */
+export const getFlorydayVbnProduct = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!["staging", "live"].includes(input.environment)) {
+        throw new Error("Ongeldige environment");
+    }
+    if (!input.code && !input.search) {
+        throw new Error("code of search is verplicht");
+    }
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    const limit = Math.min(Math.max(data.limit ?? 25, 1), 200);
+    let query = context.supabase
+        .from("floriday_code_lists_cache")
+        .select("code, label, payload")
+        .eq("environment", data.environment)
+        .eq("list_name", "vbn-products");
+    if (data.code) {
+        query = query.eq("code", data.code);
+    }
+    else if (data.search) {
+        query = query.ilike("label", `%${data.search}%`);
+    }
+    const { data: rows, error } = await query.limit(limit);
+    if (error)
+        return { ok: false, error: error.message };
+    return {
+        ok: true,
+        products: (rows ?? []),
+    };
+});
+/**
+ * JSON-schema (incl. enums) voor een Floriday-resource ophalen — typisch
+ * `trade-item`. Bron is de Suppliers-API Swagger. Andere modules genereren
+ * hiermee formulieren en runtime-validatie zonder dat ze de Floriday-spec
+ * zelf hoeven te kennen.
+ */
+export const getFlorydayResourceSchema = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!input.resource)
+        throw new Error("resource is verplicht");
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    let query = context.supabase
+        .from("floriday_resource_schemas")
+        .select("resource, version, schema, enums, fetched_at")
+        .eq("resource", data.resource);
+    if (data.version)
+        query = query.eq("version", data.version);
+    const { data: rows, error } = await query
+        .order("fetched_at", { ascending: false })
+        .limit(1);
+    if (error)
+        return { ok: false, error: error.message };
+    const row = (rows ?? [])[0];
+    if (!row)
+        return { ok: false, error: "Schema niet gevonden — draai eerst de referentiedata-refresh" };
+    return {
+        ok: true,
+        resource: row.resource,
+        version: row.version,
+        schema: row.schema,
+        enums: (row.enums ?? {}),
+        fetched_at: row.fetched_at,
+    };
+});
+/**
+ * Toegestane waarden voor een veld uit een Floriday code-lijst ophalen.
+ * Gebruikt door andere modules om dropdowns te vullen en input vóór een
+ * write-call lokaal te valideren — zonder Floriday-roundtrip.
+ *
+ * `listName` is gelijk aan de enum-typenaam uit de Swagger
+ * (bv. `Currency`, `Incoterm`, `SalesUnit`, `AuctionLocation`, `PhotoType`).
+ */
+export const getFlorydayAllowedValues = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!["staging", "live"].includes(input.environment)) {
+        throw new Error("Ongeldige environment");
+    }
+    if (!input.listName?.trim())
+        throw new Error("listName is verplicht");
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    const { data: rows, error } = await context.supabase
+        .from("floriday_code_lists_cache")
+        .select("code")
+        .eq("environment", data.environment)
+        .eq("list_name", data.listName)
+        .order("code", { ascending: true });
+    if (error)
+        return { ok: false, error: error.message };
+    return {
+        ok: true,
+        values: (rows ?? []).map((r) => r.code),
+    };
+});
+/**
+ * Snelle assertion-helper. Geeft `{ ok: true }` bij valide waarde,
+ * anders `{ ok: false, allowed }` zodat de UI direct kan tonen welke
+ * waarden wél geaccepteerd worden.
+ */
+export const assertFlorydayValue = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((input) => {
+    if (!["staging", "live"].includes(input.environment)) {
+        throw new Error("Ongeldige environment");
+    }
+    if (!input.listName?.trim())
+        throw new Error("listName is verplicht");
+    return input;
+})
+    .handler(async ({ data, context }) => {
+    const { data: rows, error } = await context.supabase
+        .from("floriday_code_lists_cache")
+        .select("code")
+        .eq("environment", data.environment)
+        .eq("list_name", data.listName);
+    if (error)
+        return { ok: false, error: error.message };
+    const allowed = (rows ?? []).map((r) => r.code);
+    if (allowed.length === 0) {
+        // Geen cache aanwezig → laat de write-call zelf valideren bij Floriday.
+        return { ok: true, skipped: true };
+    }
+    if (allowed.includes(data.value))
+        return { ok: true };
+    return { ok: false, error: "ongeldige waarde", allowed };
+});

package/dist-lib/lib/floriday-scopes.d.ts

@@ -0,0 +1,20 @@
+export declare const FLORYDAY_STANDARD_SCOPES: readonly ["role:app", "catalog:read", "catalog:write", "sales-order:write", "organization:read", "supply:read", "supply:write", "sales-order:read", "delivery-conditions:read", "fulfillment:write", "fulfillment:read", "network:read", "network:write", "sticker:read"];
+export declare const FLORYDAY_CLOCK_SUPPLY_SCOPES: readonly ["clock-supply:read", "clock-supply:write"];
+export declare const FLORYDAY_CLOCK_SUPPLY_READ_SCOPES: readonly ["clock-supply:read"];
+export declare const FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPES: readonly ["clock-supply:write"];
+export declare const FLORYDAY_CONTRACT_SCOPES: readonly ["contract:read", "contract:write"];
+export declare const FLORYDAY_CONTRACT_READ_SCOPES: readonly ["contract:read"];
+export declare const FLORYDAY_CONTRACT_WRITE_SCOPES: readonly ["contract:write"];
+export declare const FLORYDAY_STANDARD_SCOPE: string;
+export declare const FLORYDAY_CLOCK_SUPPLY_SCOPE: string;
+export declare const FLORYDAY_CLOCK_SUPPLY_READ_SCOPE: string;
+export declare const FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPE: string;
+export declare const FLORYDAY_CONTRACT_SCOPE: string;
+export declare const FLORYDAY_CONTRACT_READ_SCOPE: string;
+export declare const FLORYDAY_CONTRACT_WRITE_SCOPE: string;
+export declare function getFlorydayScopeForPath(path: string, method?: string): string;
+export declare function isClockSupplyScope(scope: string): boolean;
+export declare function isContractScope(scope: string): boolean;
+export declare const FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE = "Floriday heeft Verkoopstrategie\u00EBn/Klokaanvoer nog niet vrijgegeven voor deze koppeling. Laat deze rechten in Floriday activeren en vernieuw daarna de verbinding.";
+export declare const FLORYDAY_CONTRACT_PERMISSION_MESSAGE = "Floriday heeft de Contracten-module nog niet vrijgegeven voor deze koppeling. Laat dit recht in Floriday activeren en vernieuw daarna de verbinding.";
+//# sourceMappingURL=floriday-scopes.d.ts.map

package/dist-lib/lib/floriday-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floriday-scopes.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-scopes.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,wBAAwB,2QAe3B,CAAC;AAOX,eAAO,MAAM,4BAA4B,sDAG/B,CAAC;AACX,eAAO,MAAM,iCAAiC,gCAAiC,CAAC;AAChF,eAAO,MAAM,kCAAkC,iCAAkC,CAAC;AAElF,eAAO,MAAM,wBAAwB,8CAG3B,CAAC;AACX,eAAO,MAAM,6BAA6B,4BAA6B,CAAC;AACxE,eAAO,MAAM,8BAA8B,6BAA8B,CAAC;AAE1E,eAAO,MAAM,uBAAuB,QAAqC,CAAC;AAE1E,eAAO,MAAM,2BAA2B,QAG7B,CAAC;AACZ,eAAO,MAAM,gCAAgC,QAGlC,CAAC;AACZ,eAAO,MAAM,iCAAiC,QAGnC,CAAC;AAEZ,eAAO,MAAM,uBAAuB,QAGzB,CAAC;AACZ,eAAO,MAAM,4BAA4B,QAG9B,CAAC;AACZ,eAAO,MAAM,6BAA6B,QAG/B,CAAC;AAEZ,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAQ,GAAG,MAAM,CAyB5E;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,eAAO,MAAM,wCAAwC,2KACgH,CAAC;AAEtK,eAAO,MAAM,oCAAoC,yJACuG,CAAC"}

package/dist-lib/lib/floriday-scopes.js

@@ -0,0 +1,89 @@
+// Floriday OAuth scopes used by the shared authentication gateway.
+// Keep this file free of server-only imports so cron routes and server functions
+// can both use the exact same scope definitions.
+export const FLORYDAY_STANDARD_SCOPES = [
+    "role:app",
+    "catalog:read",
+    "catalog:write",
+    "sales-order:write",
+    "organization:read",
+    "supply:read",
+    "supply:write",
+    "sales-order:read",
+    "delivery-conditions:read",
+    "fulfillment:write",
+    "fulfillment:read",
+    "network:read",
+    "network:write",
+    "sticker:read",
+];
+// ─── Optionele modules (alleen aanvragen wanneer endpoint dit nodig heeft) ──
+// Floriday weigert het volledige token (401 "Policy evaluation failed" / 403)
+// als één gevraagde scope niet voor de Client ID is vrijgegeven. Daarom worden
+// module-specifieke scopes pas op endpoint-basis toegevoegd.
+export const FLORYDAY_CLOCK_SUPPLY_SCOPES = [
+    "clock-supply:read",
+    "clock-supply:write",
+];
+export const FLORYDAY_CLOCK_SUPPLY_READ_SCOPES = ["clock-supply:read"];
+export const FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPES = ["clock-supply:write"];
+export const FLORYDAY_CONTRACT_SCOPES = [
+    "contract:read",
+    "contract:write",
+];
+export const FLORYDAY_CONTRACT_READ_SCOPES = ["contract:read"];
+export const FLORYDAY_CONTRACT_WRITE_SCOPES = ["contract:write"];
+export const FLORYDAY_STANDARD_SCOPE = FLORYDAY_STANDARD_SCOPES.join(" ");
+export const FLORYDAY_CLOCK_SUPPLY_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CLOCK_SUPPLY_SCOPES,
+].join(" ");
+export const FLORYDAY_CLOCK_SUPPLY_READ_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CLOCK_SUPPLY_READ_SCOPES,
+].join(" ");
+export const FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPES,
+].join(" ");
+export const FLORYDAY_CONTRACT_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CONTRACT_SCOPES,
+].join(" ");
+export const FLORYDAY_CONTRACT_READ_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CONTRACT_READ_SCOPES,
+].join(" ");
+export const FLORYDAY_CONTRACT_WRITE_SCOPE = [
+    ...FLORYDAY_STANDARD_SCOPES,
+    ...FLORYDAY_CONTRACT_WRITE_SCOPES,
+].join(" ");
+export function getFlorydayScopeForPath(path, method = "GET") {
+    const normalized = path.toLowerCase();
+    const upperMethod = method.toUpperCase();
+    // Let op: volgens Suppliers API 2026v1 gebruiken `clock-supply-lines` en
+    // `clock-presales-supply-lines` de algemene `supply:*` scopes. Alleen
+    // `sales-strategies` gebruikt de aparte `clock-supply:*` scopes.
+    if (normalized.includes("/sales-strategies")) {
+        return upperMethod === "GET"
+            ? FLORYDAY_CLOCK_SUPPLY_READ_SCOPE
+            : FLORYDAY_CLOCK_SUPPLY_WRITE_SCOPE;
+    }
+    // Contracten + contract-trade-item-groups vereisen de `contract:*` scope.
+    if (normalized.includes("/contracts") ||
+        normalized.includes("/contract-trade-item-groups") ||
+        normalized.includes("/blanket-orders")) {
+        return upperMethod === "GET"
+            ? FLORYDAY_CONTRACT_READ_SCOPE
+            : FLORYDAY_CONTRACT_WRITE_SCOPE;
+    }
+    return FLORYDAY_STANDARD_SCOPE;
+}
+export function isClockSupplyScope(scope) {
+    return FLORYDAY_CLOCK_SUPPLY_SCOPES.some((s) => scope.includes(s));
+}
+export function isContractScope(scope) {
+    return FLORYDAY_CONTRACT_SCOPES.some((s) => scope.includes(s));
+}
+export const FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE = "Floriday heeft Verkoopstrategieën/Klokaanvoer nog niet vrijgegeven voor deze koppeling. Laat deze rechten in Floriday activeren en vernieuw daarna de verbinding.";
+export const FLORYDAY_CONTRACT_PERMISSION_MESSAGE = "Floriday heeft de Contracten-module nog niet vrijgegeven voor deze koppeling. Laat dit recht in Floriday activeren en vernieuw daarna de verbinding.";