@flowselections/floriday-authenticatie-module 1.0.20 → 1.0.21

package/dist-lib/lib/floriday.functions.js

@@ -6,7 +6,7 @@
 // ============================================================================
 import { createServerFn } from "@tanstack/react-start";
 import { requireSupabaseAuth } from "../integrations/supabase/auth-middleware";
-import { FLORYDAY_AGREEMENT_PERMISSION_MESSAGE, FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE, FLORYDAY_CONTRACT_PERMISSION_MESSAGE, FLORYDAY_SALES_STRATEGY_PERMISSION_MESSAGE, FLORYDAY_STANDARD_SCOPE, getFlorydayScopeForPath, isAgreementScope, isClockSupplyScope, isContractScope, isSalesStrategyScope, } from "./floriday-scopes";
+import { FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE, FLORYDAY_CONTRACT_PERMISSION_MESSAGE, FLORYDAY_SALES_STRATEGY_PERMISSION_MESSAGE, FLORYDAY_STANDARD_SCOPE, getFlorydayScopeForPath, isClockSupplyScope, isContractScope, isSalesStrategyScope, } from "./floriday-scopes";
 /**
  * Valideert een GS1 GLN: exact 13 cijfers met geldige check digit.
  * Retourneert null als geldig, anders een nl-foutmelding.
@@ -184,9 +184,6 @@ function createFlorydayTokenError(status, body, scope) {
         if (isSalesStrategyScope(scope)) {
             return new Error(FLORYDAY_SALES_STRATEGY_PERMISSION_MESSAGE);
         }
-        if (isAgreementScope(scope)) {
-            return new Error(FLORYDAY_AGREEMENT_PERMISSION_MESSAGE);
-        }
         if (isClockSupplyScope(scope)) {
             return new Error(FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE);
         }
@@ -369,28 +366,56 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
-    // Verwijder bestaande rijen voor deze omgeving zodat oude secrets niet
-    // achterblijven in de DB (in plaats van alleen op is_active=false zetten).
-    await context.supabase
-        .from("floriday_connections")
-        .delete()
-        .eq("environment", data.environment);
-    const { data: inserted, error } = await context.supabase
+    // Update-in-place op (environment, is_active=true) — geen DELETE meer,
+    // anders zou ON DELETE CASCADE alle cache-data voor deze connection wissen
+    // bij een gewone credential-wijziging. SELECT-filter matcht exact de
+    // partiële unieke index floriday_connections_env_active_uniq
+    // (environment) WHERE is_active = true.
+    const { data: existing, error: selectError } = await context.supabase
         .from("floriday_connections")
-        .insert({
-        environment: data.environment,
+        .select("id")
+        .eq("environment", data.environment)
+        .eq("is_active", true)
+        .limit(1)
+        .maybeSingle();
+    if (selectError)
+        throw new Error(selectError.message);
+    const payload = {
         label: data.label ?? "",
         client_id: deepSanitizeCredential(data.client_id),
         client_secret: deepSanitizeCredential(data.client_secret),
         api_key: deepSanitizeCredential(data.api_key),
         is_active: true,
+        // Oud access_token is ongeldig zodra credentials wijzigen.
         access_token: null,
         token_expires_at: null,
-    })
-        .select("*")
-        .single();
-    if (error)
-        throw new Error(error.message);
+    };
+    let inserted;
+    if (existing?.id) {
+        const { data: updated, error } = await context.supabase
+            .from("floriday_connections")
+            .update(payload)
+            .eq("id", existing.id)
+            .select("*")
+            .single();
+        if (error)
+            throw new Error(error.message);
+        inserted = updated;
+    }
+    else {
+        // Race: twee gelijktijdige opslag-acties kunnen beide hier belanden;
+        // de partiële unieke index vangt de tweede insert luid af met een
+        // constraint-error. Credentials opslaan is een handmatige, zeldzame
+        // actie — geen extra locking nodig.
+        const { data: created, error } = await context.supabase
+            .from("floriday_connections")
+            .insert({ environment: data.environment, ...payload })
+            .select("*")
+            .single();
+        if (error)
+            throw new Error(error.message);
+        inserted = created;
+    }
     // Automatisch (her)plan de uurlijkse token-refresh cron. Niet-fataal
     // bij falen — credentials zijn al opgeslagen.
     try {
@@ -546,8 +571,6 @@ const MANAGED_FLORYDAY_CRON_JOB_NAMES = new Set([
     "floriday-sales-strategies-sync-hourly",
     "floriday-base-items-sync-hourly",
     "floriday-contract-trade-item-groups-sync-hourly",
-    "floriday-agreements-sync-hourly",
-    "floriday-agreement-calloffs-sync-hourly",
     // Referentiedata (schema + code-lijsten)
     "floriday-reference-data-refresh-daily",
 ]);
@@ -699,7 +722,10 @@ async function fetchMaxSequence(supabase, env, maxSequenceEndpoint) {
     const json = await res.json().catch(() => null);
     if (typeof json === "number")
         return json;
-    const n = json?.maxSequenceNumber ?? json?.maxSequence ?? json?.value;
+    const n = json?.maxSequenceNumber ??
+        json?.maxSequence ??
+        json?.maximumSequenceNumber ??
+        json?.value;
     if (typeof n !== "number") {
         throw new Error(`Onbekende max-sequence response: ${JSON.stringify(json).slice(0, 200)}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",
@@ -39,7 +39,7 @@
   "devDependencies": {
     "@flowselections/core": "1.0.12",
     "@eslint/js": "^9.32.0",
-    "@lovable.dev/vite-tanstack-config": "2.6.4",
+    "@lovable.dev/vite-tanstack-config": "2.7.1",
     "@types/node": "^22.16.5",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",