@flowselections/floriday-authenticatie-module 1.0.46 → 1.0.47

package/dist-lib/lib/floriday.functions.js

@@ -123,7 +123,14 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
     }
     try {
         const { getFlorydayTokenFromCentral } = await import("./central-auth.server.js");
-        const result = await getFlorydayTokenFromCentral(env, options.scope, "default");
+        let result = await getFlorydayTokenFromCentral(env, options.scope, "default");
+        // Central Auth kan bij gelijktijdige grants incidenteel één 5xx teruggeven,
+        // terwijl dezelfde aanvraag direct daarna slaagt. Eén korte herpoging houdt
+        // voorraadregels uit de foutstatus zonder echte configuratiefouten te maskeren.
+        if (!result.ok && result.raw.status >= 500) {
+            await new Promise((resolve) => setTimeout(resolve, 250));
+            result = await getFlorydayTokenFromCentral(env, options.scope, "default");
+        }
         if (!result.ok) {
             throw await createFlorydayTokenError(result.raw.status, result.raw.body, requestedScope, env);
         }
@@ -819,7 +826,13 @@ export async function resolveFlorydayCronBaseUrlAsync() {
 export async function syncShellHostRuntimeConfig() {
     let base = null;
     try {
-        base = await resolveFlorydayCronBaseUrlAsync();
+        // Voor deze databasewaarde is géén project/env-fallback toegestaan: een
+        // gekopieerde module zou dan ongemerkt terug naar de bouwshell wijzen.
+        // Alleen de actieve tenant-host uit Central Auth mag deze waarde bepalen.
+        const { getShellHostFromCentral } = await import("./central-auth.server.js");
+        base = await getShellHostFromCentral();
+        if (!base)
+            return { base: null, changed: false };
     }
     catch {
         return { base: null, changed: false };
@@ -838,14 +851,9 @@ export async function syncShellHostRuntimeConfig() {
             value: base,
             updated_at: new Date().toISOString(),
         }, { onConflict: "key" });
-        // Ook de pg_cron-job zelf laten wijzen naar de nieuwe host.
-        const apikey = process.env.SUPABASE_PUBLISHABLE_KEY ?? process.env.VITE_SUPABASE_PUBLISHABLE_KEY;
-        if (apikey) {
-            await supabaseAdmin.rpc("schedule_floriday_stock_queue_process", {
-                p_url: `${base}/api/public/cron/process-stock-queue`,
-                p_apikey: apikey,
-            });
-        }
+        // De actieve minuuttaak roept `run_floriday_stock_queue_process()` aan;
+        // die leest deze waarde bij iedere ronde opnieuw. Herplannen is dus niet
+        // nodig en zou hier bovendien falen zonder een ingelogde admin-context.
         console.log(`[floriday] shell-host bijgewerkt naar ${base}`);
         return { base, changed: true };
     }
@@ -854,6 +862,54 @@ export async function syncShellHostRuntimeConfig() {
         return { base, changed: false };
     }
 }
+export const getFlorydayShellHostStatus = createServerFn({ method: "GET" })
+    .middleware([requireSupabaseAuth])
+    .handler(async ({ context }) => {
+    const { data: isAdmin, error: roleError } = await context.supabase.rpc("has_role", {
+        _user_id: context.userId,
+        _role: "admin",
+    });
+    if (roleError)
+        throw new Error(roleError.message);
+    if (!isAdmin)
+        throw new Error("Alleen admins mogen de verwerker-host controleren");
+    const { getShellHostFromCentral } = await import("./central-auth.server.js");
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server.js");
+    const centralHost = await getShellHostFromCentral();
+    const { data, error } = await supabaseAdmin
+        .from("module_runtime_config")
+        .select("value, updated_at")
+        .eq("key", "stock_queue_processor_base_url")
+        .maybeSingle();
+    if (error) {
+        return { ok: false, error: error.message, centralHost };
+    }
+    const processorHost = typeof data?.value === "string" ? data.value : null;
+    return {
+        ok: true,
+        centralHost,
+        processorHost,
+        updatedAt: typeof data?.updated_at === "string" ? data.updated_at : null,
+        matches: Boolean(centralHost && processorHost === centralHost),
+    };
+});
+export const repairFlorydayShellHost = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .handler(async ({ context }) => {
+    const { data: isAdmin, error: roleError } = await context.supabase.rpc("has_role", {
+        _user_id: context.userId,
+        _role: "admin",
+    });
+    if (roleError)
+        throw new Error(roleError.message);
+    if (!isAdmin)
+        throw new Error("Alleen admins mogen de verwerker-host herstellen");
+    const result = await syncShellHostRuntimeConfig();
+    if (!result.base) {
+        throw new Error("Central Auth gaf geen actieve shell-host terug.");
+    }
+    return { ok: true, host: result.base, changed: result.changed };
+});
 async function scheduleFlorydayTokenRefreshInternal(supabase) {
     const apikey = process.env.SUPABASE_PUBLISHABLE_KEY ?? process.env.VITE_SUPABASE_PUBLISHABLE_KEY;
     if (!apikey)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.46",
+  "version": "1.0.47",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",