@flowselections/floriday-authenticatie-module 1.0.23 → 1.0.25

package/dist-lib/lib/floriday.functions.js

@@ -93,7 +93,8 @@ function toPublic(row) {
 }
 // ─── Reusable internals (importable by other server fns) ────────────────────
 export async function getActiveFlorydayCredentials(supabase, env) {
-    const { data, error } = await supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data, error } = await supabaseAdmin
         .from("floriday_connections")
         .select("*")
         .eq("environment", env)
@@ -104,6 +105,7 @@ export async function getActiveFlorydayCredentials(supabase, env) {
     return data;
 }
 export async function getFlorydayAccessToken(supabase, env, options = {}) {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const row = await getActiveFlorydayCredentials(supabase, env);
     if (!row)
         throw new Error(`Geen actieve Floriday-koppeling voor ${env}`);
@@ -117,7 +119,7 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
     // Concurrency-guard: vlak voor de tokenrequest opnieuw lezen — een parallelle worker
     // kan zojuist een fresh token hebben geschreven en dan hoeven we niet nóg eens te refreshen.
     if (canReuseStoredToken && !options.forceRefresh) {
-        const { data: fresh } = await supabase
+        const { data: fresh } = await supabaseAdmin
             .from("floriday_connections")
             .select("access_token, token_expires_at")
             .eq("id", row.id)
@@ -138,7 +140,7 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
         accessToken = result.access_token;
         newExpiresAt = result.expires_at;
         if (canReuseStoredToken) {
-            await supabase
+            await supabaseAdmin
                 .from("floriday_connections")
                 .update({ access_token: accessToken, token_expires_at: newExpiresAt })
                 .eq("id", row.id);
@@ -182,6 +184,7 @@ function createFlorydayTokenError(status, body, scope) {
     return new Error(`Floriday token-aanvraag mislukt [${status}]: ${body.slice(0, 300)}`);
 }
 async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId) {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     try {
         // Stap 1: bepaal de eigen organizationId via trade-settings.
         const tsRes = await florydayFetch(supabase, env, `/${SUPPLIERS_API_VERSION}/trade-settings/supplier/current-organization`);
@@ -207,7 +210,7 @@ async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId
         if (!name)
             return null;
         // Lees huidige rij om gln_code niet te overschrijven als die al gezet is.
-        const { data: existing } = await supabase
+        const { data: existing } = await supabaseAdmin
             .from("floriday_connections")
             .select("gln_code")
             .eq("id", connectionId)
@@ -216,7 +219,7 @@ async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId
         if (gln && !existing?.gln_code) {
             update.gln_code = gln;
         }
-        await supabase.from("floriday_connections").update(update).eq("id", connectionId);
+        await supabaseAdmin.from("floriday_connections").update(update).eq("id", connectionId);
         return name;
     }
     catch (e) {
@@ -299,7 +302,8 @@ export async function florydayFetch(supabase, pathOrEnv, pathOrInit, maybeInit =
 export const listFlorydayConnections = createServerFn({ method: "GET" })
     .middleware([requireSupabaseAuth])
     .handler(async ({ context }) => {
-    const { data, error } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data, error } = await supabaseAdmin
         .from("floriday_connections")
         .select("*")
         .order("environment", { ascending: true });
@@ -310,7 +314,8 @@ export const listFlorydayConnections = createServerFn({ method: "GET" })
 export const getFlorydayTokenHealth = createServerFn({ method: "GET" })
     .middleware([requireSupabaseAuth])
     .handler(async ({ context }) => {
-    const { data: conns } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data: conns } = await supabaseAdmin
         .from("floriday_connections")
         .select("id, environment, token_expires_at, is_active")
         .eq("is_active", true);
@@ -333,8 +338,9 @@ export const forceRefreshFlorydayToken = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     await getFlorydayAccessToken(context.supabase, data.environment, { forceRefresh: true });
-    const { data: row } = await context.supabase
+    const { data: row } = await supabaseAdmin
         .from("floriday_connections")
         .select("token_expires_at")
         .eq("environment", data.environment)
@@ -354,12 +360,13 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     // Update-in-place op (environment, is_active=true) — geen DELETE meer,
     // anders zou ON DELETE CASCADE alle cache-data voor deze connection wissen
     // bij een gewone credential-wijziging. SELECT-filter matcht exact de
     // partiële unieke index floriday_connections_env_active_uniq
     // (environment) WHERE is_active = true.
-    const { data: existing, error: selectError } = await context.supabase
+    const { data: existing, error: selectError } = await supabaseAdmin
         .from("floriday_connections")
         .select("id")
         .eq("environment", data.environment)
@@ -380,7 +387,7 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
     };
     let inserted;
     if (existing?.id) {
-        const { data: updated, error } = await context.supabase
+        const { data: updated, error } = await supabaseAdmin
             .from("floriday_connections")
             .update(payload)
             .eq("id", existing.id)
@@ -395,7 +402,7 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
         // de partiële unieke index vangt de tweede insert luid af met een
         // constraint-error. Credentials opslaan is een handmatige, zeldzame
         // actie — geen extra locking nodig.
-        const { data: created, error } = await context.supabase
+        const { data: created, error } = await supabaseAdmin
             .from("floriday_connections")
             .insert({ environment: data.environment, ...payload })
             .select("*")
@@ -479,7 +486,8 @@ export const deleteFlorydayConnection = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
-    const { error } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { error } = await supabaseAdmin
         .from("floriday_connections")
         .delete()
         .eq("id", data.id);
@@ -681,10 +689,11 @@ export const updateFlorydayPublishingSettings = createServerFn({ method: "POST"
     return { ...input, gln_code: trimmed || null };
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const row = await getActiveFlorydayCredentials(context.supabase, data.environment);
     if (!row)
         throw new Error(`Geen actieve Floriday-koppeling voor ${data.environment}`);
-    const { error } = await context.supabase
+    const { error } = await supabaseAdmin
         .from("floriday_connections")
         .update({
         gln_code: data.gln_code?.trim() || null,
@@ -731,6 +740,7 @@ async function fetchBySequence(supabase, env, bySequenceEndpointBase, fromSequen
 }
 export async function syncFloridayEntityBySequence(supabase, env, connectionId, opts) {
     const t0 = Date.now();
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const { data: stateRow } = await supabase
         .from("floriday_sync_state")
         .select("last_sequence_number")
@@ -742,7 +752,7 @@ export async function syncFloridayEntityBySequence(supabase, env, connectionId,
         // Debug-logging: helpt 401's onderscheid maken tussen scope-issue,
         // expired token en wrong env. Token zelf wordt NIET gelogd.
         try {
-            const { data: connRow } = await supabase
+            const { data: connRow } = await supabaseAdmin
                 .from("floriday_connections")
                 .select("token_expires_at")
                 .eq("id", connectionId)

package/dist-lib/lib/gateway/active-environment.d.ts

@@ -0,0 +1,7 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface ActiveEnvironmentResult {
+    ok: true;
+    environment: "staging" | "live";
+}
+export declare function runActiveEnvironment(supabase: SupabaseClient): Promise<ActiveEnvironmentResult>;
+//# sourceMappingURL=active-environment.d.ts.map

package/dist-lib/lib/gateway/active-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-environment.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/active-environment.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;CACjC;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,uBAAuB,CAAC,CAGlC"}

package/dist-lib/lib/gateway/active-environment.js

@@ -0,0 +1,8 @@
+// Gateway business-logica voor /api/public/gateway/active-environment.
+// Verplaatst uit de route; gedrag byte-identiek.
+// Throw uit resolveGatewayEnvironment bubbelt naar de adapter → 409.
+import { resolveGatewayEnvironment } from "./shared";
+export async function runActiveEnvironment(supabase) {
+    const environment = await resolveGatewayEnvironment(supabase);
+    return { ok: true, environment };
+}

package/dist-lib/lib/gateway/code-list.d.ts

@@ -0,0 +1,16 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface CodeListInput {
+    environment: "staging" | "live";
+    listName: string;
+    /** Optioneel filter voor grote lijsten, bijvoorbeeld "101123:%". */
+    codeLike?: string;
+}
+export declare function runCodeList(supabase: SupabaseClient, parsed: CodeListInput): Promise<{
+    ok: true;
+    values: Array<{
+        code: string;
+        label: string | null;
+        payload: any;
+    }>;
+}>;
+//# sourceMappingURL=code-list.d.ts.map

package/dist-lib/lib/gateway/code-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-list.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/code-list.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA4BD,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAQ5F"}

package/dist-lib/lib/gateway/code-list.js

@@ -0,0 +1,28 @@
+// Gateway business-logica voor /api/public/gateway/code-list.
+// Verplaatst uit de route; byte-identiek gedrag.
+async function fetchAllCodeListRows(supabaseAdmin, environment, listName, codeLike) {
+    const pageSize = 1000;
+    const rows = [];
+    for (let from = 0;; from += pageSize) {
+        let query = supabaseAdmin
+            .from("floriday_code_lists_cache")
+            .select("code, label, payload")
+            .eq("environment", environment)
+            .eq("list_name", listName)
+            .order("code", { ascending: true })
+            .range(from, from + pageSize - 1);
+        if (codeLike && typeof codeLike === "string")
+            query = query.like("code", codeLike);
+        const { data, error } = await query;
+        if (error)
+            throw error;
+        rows.push(...(data ?? []));
+        if (!data || data.length < pageSize)
+            break;
+    }
+    return rows;
+}
+export async function runCodeList(supabase, parsed) {
+    const rows = await fetchAllCodeListRows(supabase, parsed.environment, parsed.listName, parsed.codeLike);
+    return { ok: true, values: rows ?? [] };
+}

package/dist-lib/lib/gateway/diagnostics.d.ts

@@ -0,0 +1,13 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface DiagnosticsInput {
+    rawBody: string;
+    callerHeader: string | null;
+    callerAuth: string;
+}
+export interface DiagnosticsResult {
+    stored: boolean;
+    attemptId: string | null;
+    error?: string;
+}
+export declare function runDiagnostics(supabase: SupabaseClient, input: DiagnosticsInput): Promise<DiagnosticsResult>;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist-lib/lib/gateway/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/diagnostics.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA4B5D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,iBAAiB,CAAC,CA4D5B"}

package/dist-lib/lib/gateway/diagnostics.js

@@ -0,0 +1,66 @@
+// Gateway module: diagnostics-log endpoint (fail-soft).
+// Spiegel van src/routes/api/public/gateway/diagnostics.ts.
+const MAX_STRING_LEN = 4 * 1024;
+function truncate(value) {
+    if (typeof value === "string") {
+        return value.length > MAX_STRING_LEN
+            ? value.slice(0, MAX_STRING_LEN) + "…[truncated]"
+            : value;
+    }
+    return value;
+}
+export async function runDiagnostics(supabase, input) {
+    let body;
+    try {
+        body = input.rawBody ? JSON.parse(input.rawBody) : {};
+    }
+    catch {
+        // Fail-soft: ongeldige JSON niet hard afwijzen — log raw en bevestig.
+        body = { summary: "invalid-json", context: { raw: truncate(input.rawBody) } };
+    }
+    const caller = (input.callerHeader ?? body.caller ?? input.callerAuth ?? "external")
+        .trim()
+        .slice(0, 64) || "external";
+    const summary = typeof body.summary === "string" && body.summary.trim()
+        ? body.summary.slice(0, MAX_STRING_LEN)
+        : "diagnostics-report";
+    const safeRequest = {
+        summary,
+        environment: body.environment ?? null,
+        fileName: body.fileName ? String(body.fileName).slice(0, 512) : null,
+        contentType: body.contentType ? String(body.contentType).slice(0, 128) : null,
+        bytes: typeof body.bytes === "number" ? body.bytes : null,
+        httpStatus: typeof body.httpStatus === "number" ? body.httpStatus : null,
+        attemptId: body.attemptId ? String(body.attemptId).slice(0, 128) : null,
+        referenceId: body.referenceId ? String(body.referenceId).slice(0, 256) : null,
+        florydayError: truncate(body.florydayError ?? null),
+        stack: truncate(body.stack ?? null),
+        context: body.context ?? null,
+    };
+    const { data: inserted, error } = await supabase
+        .from("floriday_write_log")
+        .insert({
+        connection_id: null,
+        module: caller,
+        action: "diagnostics-report",
+        resource: "diagnostics",
+        floriday_id: safeRequest.referenceId,
+        request: safeRequest,
+        response: null,
+        http_status: safeRequest.httpStatus ?? 0,
+        ok: true,
+        error: summary,
+        idempotency_key: null,
+        caller,
+    })
+        .select("id")
+        .maybeSingle();
+    if (error) {
+        console.error("[gateway/diagnostics] insert failed:", error.message);
+        return { stored: false, attemptId: null, error: "diagnostics-not-stored" };
+    }
+    return {
+        stored: true,
+        attemptId: inserted?.id ?? null,
+    };
+}

package/dist-lib/lib/gateway/floricode-records.d.ts

@@ -0,0 +1,22 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface FloricodeRecordsInput {
+    resource: string;
+    recordIds?: string[];
+    since?: string;
+    limit?: number;
+    offset?: number;
+}
+export type FloricodeRecordsResult = {
+    ok: true;
+    resource: string;
+    rows: unknown[];
+    count: number | null;
+    offset: number;
+    limit: number;
+    nextOffset: number | null;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function runFloricodeRecords(supabase: SupabaseClient, body: FloricodeRecordsInput): Promise<FloricodeRecordsResult>;
+//# sourceMappingURL=floricode-records.d.ts.map

package/dist-lib/lib/gateway/floricode-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floricode-records.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/floricode-records.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CA8BjC"}

package/dist-lib/lib/gateway/floricode-records.js

@@ -0,0 +1,32 @@
+// Gateway business-logica voor /api/public/gateway/floricode-records.
+// Read-only access tot floricode_records; gedrag byte-identiek t.o.v. HEAD.
+export async function runFloricodeRecords(supabase, body) {
+    if (!body.resource) {
+        return { ok: false, error: "resource is verplicht" };
+    }
+    const limit = Math.min(Math.max(body.limit ?? 500, 1), 5000);
+    const offset = Math.max(body.offset ?? 0, 0);
+    let q = supabase
+        .from("floricode_records")
+        .select("resource, record_id, payload, updated_at, last_seen_at", { count: "exact" })
+        .eq("resource", body.resource);
+    if (body.recordIds && body.recordIds.length > 0) {
+        q = q.in("record_id", body.recordIds);
+    }
+    if (body.since) {
+        q = q.gte("updated_at", body.since);
+    }
+    q = q.order("updated_at", { ascending: true }).range(offset, offset + limit - 1);
+    const { data, error, count } = await q;
+    if (error)
+        return { ok: false, error: error.message };
+    return {
+        ok: true,
+        resource: body.resource,
+        rows: data ?? [],
+        count: count ?? null,
+        offset,
+        limit,
+        nextOffset: (data?.length ?? 0) === limit ? offset + limit : null,
+    };
+}

package/dist-lib/lib/gateway/fulfillment-order-send.d.ts

@@ -0,0 +1,7 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface FulfillmentOrderSendResult {
+    status: number;
+    payload: unknown;
+}
+export declare function runFulfillmentOrderSend(supabase: SupabaseClient, body: any, caller: string): Promise<FulfillmentOrderSendResult>;
+//# sourceMappingURL=fulfillment-order-send.d.ts.map

package/dist-lib/lib/gateway/fulfillment-order-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fulfillment-order-send.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/fulfillment-order-send.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAkB5D,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,0BAA0B,CAAC,CA8GrC"}

package/dist-lib/lib/gateway/fulfillment-order-send.js

@@ -0,0 +1,123 @@
+// Gateway module: verstuur fulfillment-order (2026v1).
+// Spiegel van src/routes/api/public/gateway/fulfillment-order.send.ts.
+import { resolveGatewayEnvironment } from "./shared";
+import { florydayWrite, getActiveFlorydayCredentials } from "../floriday.functions";
+function extractPackageCount(req) {
+    const candidates = [
+        req?.numberOfPackages,
+        req?.packageCount,
+        req?.numberOfLoadCarriers,
+        req?.quantity,
+    ];
+    for (const c of candidates) {
+        const n = Number(c);
+        if (Number.isFinite(n) && n > 0)
+            return n;
+    }
+    return 1;
+}
+export async function runFulfillmentOrderSend(supabase, body, caller) {
+    const deliveryOrderId = String(body?.deliveryOrderId ?? "").trim();
+    const explicitLoadCarrierItems = Array.isArray(body?.loadCarrierItems)
+        ? body.loadCarrierItems
+        : null;
+    const env = await resolveGatewayEnvironment(supabase, body?.environment);
+    const conn = await getActiveFlorydayCredentials(supabase, env);
+    if (!conn) {
+        return {
+            status: 400,
+            payload: { ok: false, error: `Geen actieve Floriday-koppeling voor ${env}` },
+        };
+    }
+    // Idempotency: is er al een fulfillment-order voor deze delivery?
+    if (deliveryOrderId) {
+        const { data: existing } = await supabase
+            .from("floriday_fulfillment_orders_cache")
+            .select("floriday_id")
+            .eq("connection_id", conn.id)
+            .eq("delivery_order_id", deliveryOrderId)
+            .maybeSingle();
+        if (existing?.floriday_id) {
+            return {
+                status: 200,
+                payload: {
+                    ok: true,
+                    skipped: true,
+                    fulfillmentOrderId: existing.floriday_id,
+                },
+            };
+        }
+    }
+    // Body opbouwen — hetzij passthrough, hetzij vanuit cache.
+    let loadCarrierItems = explicitLoadCarrierItems;
+    if (!loadCarrierItems) {
+        const { data: doRow } = await supabase
+            .from("floriday_delivery_orders_cache")
+            .select("floriday_id, data")
+            .eq("connection_id", conn.id)
+            .eq("floriday_id", deliveryOrderId)
+            .maybeSingle();
+        if (!doRow) {
+            return {
+                status: 404,
+                payload: { ok: false, error: "Delivery-order niet in cache — sync eerst" },
+            };
+        }
+        const allRequests = Array.isArray(doRow.data?.fulfillmentRequests)
+            ? doRow.data.fulfillmentRequests
+            : [];
+        const filterIds = Array.isArray(body?.fulfillmentRequestIds)
+            ? body.fulfillmentRequestIds.map((s) => String(s))
+            : null;
+        const requests = allRequests
+            .filter((r) => {
+            const id = r?.fulfillmentRequestId ?? r?.id;
+            return !filterIds || filterIds.includes(String(id));
+        })
+            .map((r) => {
+            const id = r?.fulfillmentRequestId ?? r?.id;
+            if (!id)
+                return null;
+            return {
+                deliveryOrderId,
+                fulfillmentRequestId: id,
+                numberOfPackages: extractPackageCount(r),
+            };
+        })
+            .filter(Boolean);
+        if (requests.length === 0) {
+            return {
+                status: 400,
+                payload: {
+                    ok: false,
+                    error: "Geen fulfillmentRequests gevonden in delivery-order",
+                },
+            };
+        }
+        loadCarrierItems = [{ fulfillmentRequests: requests }];
+    }
+    const result = await florydayWrite(supabase, env, {
+        module: "auto-process",
+        action: "send-fulfillment-order",
+        method: "POST",
+        path: "/fulfillment-orders",
+        body: { loadCarrierItems },
+        referenceId: deliveryOrderId || "batch",
+        idempotencyKey: deliveryOrderId
+            ? `do:${deliveryOrderId}:fulfillment-order`
+            : undefined,
+        caller,
+    });
+    const fulfillmentOrderId = result.data?.fulfillmentOrderId ??
+        result.data?.id ??
+        result.data?.floridayId;
+    return {
+        status: result.ok ? 200 : 502,
+        payload: {
+            ok: result.ok,
+            skipped: false,
+            fulfillmentOrderId,
+            error: result.error,
+        },
+    };
+}

package/dist-lib/lib/gateway/index.d.ts

@@ -1,4 +1,18 @@
 export * from "./shared";
 export * from "./cache-tables";
 export * from "./cached-list";
+export * from "./active-environment";
+export * from "./floricode-records";
+export * from "./product-characteristics";
+export * from "./code-list";
+export * from "./schema";
+export * from "./pdf";
+export * from "./pdf-bulk";
+export * from "./pdf-bulk-merged";
+export * from "./write";
+export * from "./fulfillment-order-send";
+export * from "./diagnostics";
+export * from "./media";
+export * from "./media-upload";
+export * from "./supply-line";
 //# sourceMappingURL=index.d.ts.map

package/dist-lib/lib/gateway/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist-lib/lib/gateway/index.js

@@ -1,3 +1,17 @@
 export * from "./shared";
 export * from "./cache-tables";
 export * from "./cached-list";
+export * from "./active-environment";
+export * from "./floricode-records";
+export * from "./product-characteristics";
+export * from "./code-list";
+export * from "./schema";
+export * from "./pdf";
+export * from "./pdf-bulk";
+export * from "./pdf-bulk-merged";
+export * from "./write";
+export * from "./fulfillment-order-send";
+export * from "./diagnostics";
+export * from "./media";
+export * from "./media-upload";
+export * from "./supply-line";

package/dist-lib/lib/gateway/media-upload.d.ts

@@ -0,0 +1,21 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import { type FlorydayEnvironment } from "../floriday.functions";
+export interface MediaUploadInput {
+    bytes: Uint8Array;
+    environment: FlorydayEnvironment;
+    path: string;
+    method: "POST" | "PUT";
+    fileName: string;
+    contentType: string;
+    formField: string;
+    referenceId: string | null;
+    idempotencyKey: string | null;
+    extraFields: Record<string, string> | null;
+    caller: string;
+}
+export interface MediaUploadResult {
+    status: number;
+    payload: unknown;
+}
+export declare function runMediaUpload(supabase: SupabaseClient, input: MediaUploadInput): Promise<MediaUploadResult>;
+//# sourceMappingURL=media-upload.d.ts.map

package/dist-lib/lib/gateway/media-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-upload.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/media-upload.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,mBAAmB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAyG5B"}