@flowselections/floriday-authenticatie-module 1.0.79 → 1.0.81

package/dist-lib/lib/gateway/customer-stickers.d.ts

@@ -39,18 +39,22 @@ export interface StickerUploadRequest {
     expired: boolean;
     canRespond: boolean;
 }
+export declare const UPLOAD_REQUESTS_RECHECK_MS: number;
+export type UploadRequestsProbe = "ok" | "no_sequence" | "unavailable" | "error";
+/** Pure beslisregel op de twee HTTP-statussen (syncStatus null = niet geprobeerd). */
+export declare function decideUploadRequestsProbe(maxSeqStatus: number, syncStatus: number | null): UploadRequestsProbe;
+/** Pure regel: overslaan zolang de laatste "niet beschikbaar" jonger is dan 24 uur. */
+export declare function shouldSkipUnavailable(state: {
+    status?: string;
+    checkedAt?: string;
+} | null, now?: number): boolean;
+export declare const uploadRequestsStateKey: (connectionId: string, env: FlorydayEnvironment) => string;
 /** Inhaalronde op de sequence-sync; ook gebruikt door de sticker-cron. */
 export declare function syncStickerUploadRequests(supabase: SupabaseClient, env: FlorydayEnvironment, connectionId: string, opts?: {
     maxBatches?: number;
     deadlineMs?: number;
-}): Promise<{
-    synced: number;
-    fromSequence: number;
-    toSequence: number;
-    durationMs: number;
-    backfillNeeded?: boolean;
-    partial?: boolean;
-}>;
+    force?: boolean;
+}): Promise<Record<string, unknown>>;
 /** Pure regel: alleen PENDING en niet verlopen mag beantwoord worden. */
 export declare function canRespondToUploadRequest(status: string | null, expiresOn: string | null, now?: number): {
     expired: boolean;

package/dist-lib/lib/gateway/customer-stickers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"customer-stickers.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/customer-stickers.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAML,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,MAAM,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACjD,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,CAAC,GAClB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAWlH;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjF,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAkC3H;AAMD,MAAM,WAAW,oBAAoB;IACnC,8BAA8B,EAAE,MAAM,CAAC;IACvC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,EACxB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;GAsCxD;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,SAAa;;;EAG1G;AAmBD,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACvI,OAAO,CAAC,aAAa,CAAC;IAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAA;CAAE,CAAC,CAAC,CAiB9D;AAED,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAwBvI;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9G,OAAO,CAAC,aAAa,CAAC;IAAE,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAAC,CAoC3D;AAYD,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqC1G"}
+{"version":3,"file":"customer-stickers.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/customer-stickers.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAML,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,MAAM,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACjD,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,CAAC,GAClB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAWlH;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjF,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAkC3H;AAMD,MAAM,WAAW,oBAAoB;IACnC,8BAA8B,EAAE,MAAM,CAAC;IACvC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAaD,eAAO,MAAM,0BAA0B,QAAgB,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,aAAa,GAAG,aAAa,GAAG,OAAO,CAAC;AAEjF,sFAAsF;AACtF,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,CAO9G;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,GAAG,SAAa,WAG5G;AAED,eAAO,MAAM,sBAAsB,GAAI,cAAc,MAAM,EAAE,KAAK,mBAAmB,WACrB,CAAC;AA6BjE,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,EACxB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GACvE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0HlC;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,SAAa;;;EAG1G;AAmBD,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACvI,OAAO,CAAC,aAAa,CAAC;IAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAA;CAAE,CAAC,CAAC,CAiB9D;AAED,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAwBvI;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9G,OAAO,CAAC,aAAa,CAAC;IAAE,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAAC,CAoC3D;AAYD,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqC1G"}

package/dist-lib/lib/gateway/customer-stickers.js

@@ -61,46 +61,199 @@ export async function runCustomerStickersHandled(supabase, input) {
     }
     return { ok: true, stickerIds: ids };
 }
+// ---------------------------------------------------------------------------
+// Beschikbaarheid van de upload-requests-endpoints.
+// De swagger kent op current-max-sequence geen 404 (alleen 401/403/423/5xx),
+// dus een 404 is geen bewijs dat het endpoint ontbreekt. Volgorde:
+//  1. current-max-sequence 200 → normale sync.
+//  2. 404 → probeer sync/0?limitResult=1. 200 → sync vanaf 0 ("geen
+//     volgnummer bekend"), geen fout.
+//  3. beide 404 → "niet beschikbaar in deze omgeving" met foutinhoud; pas na
+//     24 uur opnieuw proberen.
+// ---------------------------------------------------------------------------
+export const UPLOAD_REQUESTS_RECHECK_MS = 24 * 3600000;
+/** Pure beslisregel op de twee HTTP-statussen (syncStatus null = niet geprobeerd). */
+export function decideUploadRequestsProbe(maxSeqStatus, syncStatus) {
+    if (maxSeqStatus >= 200 && maxSeqStatus < 300)
+        return "ok";
+    if (maxSeqStatus !== 404)
+        return "error";
+    if (syncStatus === null)
+        return "error";
+    if (syncStatus >= 200 && syncStatus < 300)
+        return "no_sequence";
+    if (syncStatus === 404)
+        return "unavailable";
+    return "error";
+}
+/** Pure regel: overslaan zolang de laatste "niet beschikbaar" jonger is dan 24 uur. */
+export function shouldSkipUnavailable(state, now = Date.now()) {
+    if (!state || state.status !== "unavailable" || !state.checkedAt)
+        return false;
+    return now - Date.parse(state.checkedAt) < UPLOAD_REQUESTS_RECHECK_MS;
+}
+export const uploadRequestsStateKey = (connectionId, env) => `floriday_upload_requests_availability:${env}:${connectionId}`;
+async function readAvailability(supabase, key) {
+    const { data } = await supabase.from("module_runtime_config").select("value").eq("key", key).maybeSingle();
+    try {
+        return data?.value ? JSON.parse(data.value) : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function writeAvailability(supabase, key, value) {
+    await supabase.from("module_runtime_config")
+        .upsert({ key, value: JSON.stringify(value), updated_at: new Date().toISOString() }, { onConflict: "key" });
+}
+async function describe(res, url) {
+    const text = await res.text().catch(() => "");
+    let j = null;
+    try {
+        j = JSON.parse(text);
+    }
+    catch { /* geen JSON */ }
+    let host = null;
+    try {
+        host = new URL(url).host;
+    }
+    catch { /* relatief */ }
+    return {
+        status: res.status,
+        title: j?.title ?? null,
+        detail: j?.detail ?? null,
+        traceId: j?.traceId ?? j?.traceid ?? res.headers.get("traceparent") ?? null,
+        url,
+        host,
+        body: text.slice(0, 4000),
+    };
+}
 /** Inhaalronde op de sequence-sync; ook gebruikt door de sticker-cron. */
 export async function syncStickerUploadRequests(supabase, env, connectionId, opts = {}) {
-    return syncFloridayEntityBySequence(supabase, env, connectionId, {
-        entityType: "customer-sticker-upload-requests",
-        maxSequenceEndpoint: `/${SUPPLIERS_API_VERSION}/customer-sticker-upload-requests/current-max-sequence`,
-        bySequenceEndpointBase: `/${SUPPLIERS_API_VERSION}/customer-sticker-upload-requests/sync`,
-        maxBatches: opts.maxBatches,
-        deadlineMs: opts.deadlineMs,
-        onBatch: async (items) => {
-            const stickerIds = Array.from(new Set(items.map((i) => i?.customerStickerId).filter(Boolean).map(String)));
-            const soByS = new Map();
-            if (stickerIds.length) {
-                const { data } = await supabase.from("floriday_customer_stickers_cache")
-                    .select("floriday_id, sales_order_id").eq("connection_id", connectionId).in("floriday_id", stickerIds);
-                for (const r of (data ?? []))
-                    soByS.set(String(r.floriday_id), r.sales_order_id ?? null);
-            }
-            const rows = items
-                .filter((i) => i?.customerStickerUploadRequestId)
-                .map((i) => ({
-                connection_id: connectionId,
-                floriday_id: String(i.customerStickerUploadRequestId),
-                customer_sticker_id: i.customerStickerId ?? null,
-                // Orderkoppeling via de sticker (op id); het schema heeft geen salesOrderId op de aanvraag.
-                sales_order_id: i.customerStickerId ? soByS.get(String(i.customerStickerId)) ?? null : null,
-                status: i.status ?? null,
-                expires_on: i.expiresOn ?? null,
-                responded_on: i.respondedOn ?? null,
-                sequence_number: Number(i.sequenceNumber ?? 0),
-                data: i,
-                fetched_at: new Date().toISOString(),
-            }));
-            if (rows.length) {
-                const { error } = await supabase.from("floriday_customer_sticker_upload_requests_cache")
-                    .upsert(rows, { onConflict: "connection_id,floriday_id" });
-                if (error)
-                    throw new Error(`Stickeraanvragen opslaan: ${error.message}`);
-            }
-        },
+    const key = uploadRequestsStateKey(connectionId, env);
+    const state = await readAvailability(supabase, key);
+    if (!opts.force && shouldSkipUnavailable(state)) {
+        return { skipped: "unavailable", since: state.since ?? state.checkedAt, nextCheckAt: new Date(Date.parse(state.checkedAt) + UPLOAD_REQUESTS_RECHECK_MS).toISOString() };
+    }
+    const { FLORYDAY_ENDPOINTS } = await import("../floriday.functions.js");
+    const base = FLORYDAY_ENDPOINTS[env].apiBaseUrl;
+    const maxPath = `/${SUPPLIERS_API_VERSION}/customer-sticker-upload-requests/current-max-sequence`;
+    const syncBase = `/${SUPPLIERS_API_VERSION}/customer-sticker-upload-requests/sync`;
+    const maxRes = await florydayFetch(supabase, env, maxPath, {
+        cache: "no-store",
+        flowLog: { module: "floriday-sync", caller: "customer-sticker-upload-requests", action: "controle:customer-sticker-upload-requests", kind: "poll-check", countItems: false },
+    });
+    let maxSeqDetail = null;
+    let syncDetail = null;
+    let probeStatus = null;
+    if (!maxRes.ok) {
+        maxSeqDetail = await describe(maxRes, base + maxPath);
+        if (maxRes.status === 404) {
+            const probeRes = await florydayFetch(supabase, env, `${syncBase}/0?limitResult=1`, {
+                cache: "no-store",
+                flowLog: { module: "floriday-sync", caller: "customer-sticker-upload-requests", action: "proef:customer-sticker-upload-requests sync/0", kind: "poll-check", countItems: false },
+            });
+            probeStatus = probeRes.status;
+            if (!probeRes.ok)
+                syncDetail = await describe(probeRes, `${base}${syncBase}/0?limitResult=1`);
+        }
+    }
+    const decision = decideUploadRequestsProbe(maxRes.status, probeStatus);
+    const nowIso = new Date().toISOString();
+    if (decision === "unavailable") {
+        const first = state?.status !== "unavailable";
+        await writeAvailability(supabase, key, { status: "unavailable", since: first ? nowIso : state.since, checkedAt: nowIso, maxSequence: maxSeqDetail, sync0: syncDetail });
+        if (first) {
+            const { logFlorydayCall } = await import("../floriday-api-log.server.js");
+            await logFlorydayCall({
+                direction: "inbound", environment: env, connectionId, method: "GET", path: maxPath, httpStatus: 404, ok: false,
+                durationMs: 0, module: "floriday-sync", caller: "customer-sticker-upload-requests",
+                action: "niet beschikbaar:customer-sticker-upload-requests", kind: "status",
+                error: `Stickeraanvragen niet beschikbaar in deze omgeving (beide routes 404). Volgende controle over 24 uur. Foutinhoud: ${JSON.stringify({ maxSequence: maxSeqDetail, sync0: syncDetail })}`,
+            }).catch(() => undefined);
+        }
+        return { skipped: "unavailable", maxSequence: maxSeqDetail, sync0: syncDetail };
+    }
+    if (decision === "error") {
+        throw new Error(`Stickeraanvragen: Floriday ${maxRes.status}${maxSeqDetail ? ` ${JSON.stringify(maxSeqDetail)}` : ""}`);
+    }
+    if (state?.status === "unavailable" || state?.status === "no_sequence" || decision === "no_sequence") {
+        await writeAvailability(supabase, key, { status: decision, checkedAt: nowIso, ...(decision === "no_sequence" ? { maxSequence: maxSeqDetail } : {}) });
+    }
+    const onBatch = async (items) => {
+        const stickerIds = Array.from(new Set(items.map((i) => i?.customerStickerId).filter(Boolean).map(String)));
+        const soByS = new Map();
+        if (stickerIds.length) {
+            const { data } = await supabase.from("floriday_customer_stickers_cache")
+                .select("floriday_id, sales_order_id").eq("connection_id", connectionId).in("floriday_id", stickerIds);
+            for (const r of (data ?? []))
+                soByS.set(String(r.floriday_id), r.sales_order_id ?? null);
+        }
+        const rows = items
+            .filter((i) => i?.customerStickerUploadRequestId)
+            .map((i) => ({
+            connection_id: connectionId,
+            floriday_id: String(i.customerStickerUploadRequestId),
+            customer_sticker_id: i.customerStickerId ?? null,
+            // Orderkoppeling via de sticker (op id); het schema heeft geen salesOrderId op de aanvraag.
+            sales_order_id: i.customerStickerId ? soByS.get(String(i.customerStickerId)) ?? null : null,
+            status: i.status ?? null,
+            expires_on: i.expiresOn ?? null,
+            responded_on: i.respondedOn ?? null,
+            sequence_number: Number(i.sequenceNumber ?? 0),
+            data: i,
+            fetched_at: new Date().toISOString(),
+        }));
+        if (rows.length) {
+            const { error } = await supabase.from("floriday_customer_sticker_upload_requests_cache")
+                .upsert(rows, { onConflict: "connection_id,floriday_id" });
+            if (error)
+                throw new Error(`Stickeraanvragen opslaan: ${error.message}`);
+        }
+    };
+    if (decision === "ok") {
+        return syncFloridayEntityBySequence(supabase, env, connectionId, {
+            entityType: "customer-sticker-upload-requests",
+            maxSequenceEndpoint: maxPath,
+            bySequenceEndpointBase: syncBase,
+            maxBatches: opts.maxBatches,
+            deadlineMs: opts.deadlineMs,
+            onBatch,
+        });
+    }
+    // no_sequence: zelf pagineren vanaf de eigen cursor (start 0), tot een lege of kleine pagina.
+    const { data: st } = await supabase.from("floriday_sync_state").select("last_sequence_number")
+        .eq("connection_id", connectionId).eq("entity_type", "customer-sticker-upload-requests").maybeSingle();
+    let cursor = Number(st?.last_sequence_number ?? 0);
+    const from = cursor;
+    let synced = 0;
+    for (let i = 0; i < (opts.maxBatches ?? 20); i++) {
+        if (opts.deadlineMs && Date.now() >= opts.deadlineMs)
+            break;
+        const r = await florydayFetch(supabase, env, `${syncBase}/${cursor}`, {
+            cache: "no-store",
+            flowLog: { module: "floriday-sync", caller: "customer-sticker-upload-requests", action: "ophalen:customer-sticker-upload-requests", kind: "poll-fetch", cursorFrom: cursor, countItems: true },
+        });
+        if (!r.ok)
+            throw new Error(`Stickeraanvragen sync/${cursor}: Floriday ${r.status}`);
+        const j = await r.json().catch(() => null);
+        const items = Array.isArray(j) ? j : Array.isArray(j?.results) ? j.results : [];
+        if (items.length === 0)
+            break;
+        await onBatch(items);
+        synced += items.length;
+        const highest = items.reduce((m, it) => Math.max(m, Number(it?.sequenceNumber ?? 0)), cursor);
+        if (highest <= cursor)
+            break;
+        cursor = highest;
+        if (items.length < 1000)
+            break;
+    }
+    await supabase.from("floriday_sync_state").upsert({
+        connection_id: connectionId, entity_type: "customer-sticker-upload-requests", last_sequence_number: cursor,
+        last_synced_at: nowIso, last_success_at: nowIso, last_items_processed: synced, last_error: null,
     });
+    return { synced, fromSequence: from, toSequence: cursor, mode: "no_sequence" };
 }
 /** Pure regel: alleen PENDING en niet verlopen mag beantwoord worden. */
 export function canRespondToUploadRequest(status, expiresOn, now = Date.now()) {

package/dist-lib/lib/gateway/webhook.d.ts

@@ -1,12 +1,27 @@
 import type { SupabaseClient } from "@supabase/supabase-js";
 export declare const WEBHOOK_SUBSCRIPTIONS_TABLE = "floriday_webhook_subscriptions";
 export declare function sha256HexString(s: string): Promise<string>;
+/** Adres zoals de afzender het aanriep (achter een proxy via x-forwarded-host/proto). */
+export declare function originalRequestUrl(request: Request): string;
 export interface WebhookResult {
     status: number;
     payload: unknown;
 }
-export declare function runFloridayWebhook(supabase: SupabaseClient, token: string, rawBody: string): Promise<WebhookResult>;
-export declare function handleFloridayWebhook(request: Request, supabase: SupabaseClient, token: string): Promise<Response>;
+export interface WebhookCallContext {
+    /** Volledig adres waarop de melding binnenkwam (incl. token). */
+    callbackUrl?: string | null;
+    route?: string;
+}
+/** Token in een callback-adres maskeren: eerste 4 en laatste 4 tekens. */
+export declare function maskCallbackUrl(url: string): string;
+export declare const STALE_CALLBACK_PREFIX = "floriday_webhook_stale_callback:";
+/**
+ * Onbekend token: het volledige adres bewaren in module_runtime_config
+ * (alleen service-role leesbaar), met teller en eerste/laatste moment.
+ */
+export declare function recordStaleCallback(supabase: SupabaseClient, url: string, route: string): Promise<string>;
+export declare function runFloridayWebhook(supabase: SupabaseClient, token: string, rawBody: string, ctx?: WebhookCallContext): Promise<WebhookResult>;
+export declare function handleFloridayWebhook(request: Request, supabase: SupabaseClient, token: string, route?: string): Promise<Response>;
 /**
  * Shell-geschikte variant zonder padparameter: POST
  * /api/public/gateway/webhook-in?t=<token>. Zelfde verificatie (token-hash,

package/dist-lib/lib/gateway/webhook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/webhook.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAW5D,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAE5E,wBAAsB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AA4CD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,aAAa,CAAC,CA2JxB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,CAAC,CAGnB;AAKD,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBhG;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,CAAC,CAWnB"}
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/webhook.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAW5D,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAE5E,wBAAsB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AA4CD,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAO3D;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,eAAO,MAAM,qBAAqB,qCAAqC,CAAC;AAExE;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB/G;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,kBAAuB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA6KxB;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,EACb,KAAK,SAAoB,GACxB,OAAO,CAAC,QAAQ,CAAC,CAcnB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,CAAC,CAGnB;AAKD,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBhG;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,CAAC,CAWnB"}

package/dist-lib/lib/gateway/webhook.js

@@ -53,9 +53,64 @@ async function logRejected(supabase, reason, connectionId, payload) {
         /* loggen mag de respons niet breken */
     }
 }
-export async function runFloridayWebhook(supabase, token, rawBody) {
-    if (!token || token.length < 32)
+/** Adres zoals de afzender het aanriep (achter een proxy via x-forwarded-host/proto). */
+export function originalRequestUrl(request) {
+    const u = new URL(request.url);
+    const host = request.headers.get("x-forwarded-host")?.split(",")[0]?.trim();
+    const proto = request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim();
+    if (host)
+        u.host = host;
+    if (proto === "https" || proto === "http")
+        u.protocol = proto + ":";
+    return u.toString();
+}
+/** Token in een callback-adres maskeren: eerste 4 en laatste 4 tekens. */
+export function maskCallbackUrl(url) {
+    const mask = (t) => (t.length <= 8 ? "****" : `${t.slice(0, 4)}…${t.slice(-4)}`);
+    return url
+        .replace(/([?&]t=)([^&#]+)/, (_m, a, t) => a + mask(t))
+        .replace(/(\/webhook\/)([^/?#]+)/, (_m, a, t) => a + mask(t));
+}
+export const STALE_CALLBACK_PREFIX = "floriday_webhook_stale_callback:";
+/**
+ * Onbekend token: het volledige adres bewaren in module_runtime_config
+ * (alleen service-role leesbaar), met teller en eerste/laatste moment.
+ */
+export async function recordStaleCallback(supabase, url, route) {
+    const keyHash = (await sha256HexString(url)).slice(0, 32);
+    const key = STALE_CALLBACK_PREFIX + keyHash;
+    try {
+        const { data } = await supabase.from("module_runtime_config").select("value").eq("key", key).maybeSingle();
+        let prev = null;
+        try {
+            prev = data?.value ? JSON.parse(data.value) : null;
+        }
+        catch {
+            prev = null;
+        }
+        const now = new Date().toISOString();
+        const value = {
+            callbackUrl: url,
+            route,
+            count: (prev?.count ?? 0) + 1,
+            firstAt: prev?.firstAt ?? now,
+            lastAt: now,
+            unsubscribe: prev?.unsubscribe ?? null,
+        };
+        await supabase.from("module_runtime_config")
+            .upsert({ key, value: JSON.stringify(value), updated_at: now }, { onConflict: "key" });
+    }
+    catch { /* vastleggen mag de respons niet breken */ }
+    return keyHash;
+}
+export async function runFloridayWebhook(supabase, token, rawBody, ctx = {}) {
+    const route = ctx.route ?? "webhook";
+    if (!token || token.length < 32) {
+        await logRejected(supabase, "Ongeldig of ontbrekend callback-token", null, {
+            route, callbackUrlMasked: ctx.callbackUrl ? maskCallbackUrl(ctx.callbackUrl) : null,
+        });
         return { status: 404, payload: { ok: false } };
+    }
     const tokenHash = await sha256HexString(token);
     const { data: sub } = await supabase
         .from(WEBHOOK_SUBSCRIPTIONS_TABLE)
@@ -63,7 +118,24 @@ export async function runFloridayWebhook(supabase, token, rawBody) {
         .eq("callback_token_hash", tokenHash)
         .maybeSingle();
     if (!sub) {
-        await logRejected(supabase, "Onbekend callback-token", null, null);
+        let parsed = null;
+        try {
+            parsed = rawBody ? JSON.parse(rawBody) : null;
+        }
+        catch {
+            parsed = null;
+        }
+        const callbackKey = ctx.callbackUrl ? await recordStaleCallback(supabase, ctx.callbackUrl, route) : null;
+        await logRejected(supabase, "Onbekend callback-token", null, {
+            route,
+            reason: "Onbekend callback-token",
+            callbackUrlMasked: ctx.callbackUrl ? maskCallbackUrl(ctx.callbackUrl) : null,
+            callbackKey,
+            messageType: pick(parsed, "Type") ?? null,
+            topicArn: pick(parsed, "TopicArn") ?? null,
+            aggregateType: pick(parsed, "aggregateType", "AggregateType") ?? null,
+            eventType: pick(parsed, "eventType", "EventType") ?? null,
+        });
         return { status: 404, payload: { ok: false } };
     }
     let body;
@@ -196,14 +268,17 @@ export async function runFloridayWebhook(supabase, token, rawBody) {
     // Altijd 200 na vastleggen.
     return { status: 200, payload: { ok: true, ...summary } };
 }
-export async function handleFloridayWebhook(request, supabase, token) {
+export async function handleFloridayWebhook(request, supabase, token, route = "webhook/<token>") {
     if (request.method !== "POST")
         return new Response("Method Not Allowed", { status: 405 });
     try {
         const raw = await request.text();
         if (raw.length > 256000)
             return new Response("Payload Too Large", { status: 413 });
-        const { status, payload } = await runFloridayWebhook(supabase, token, raw);
+        const { status, payload } = await runFloridayWebhook(supabase, token, raw, {
+            callbackUrl: originalRequestUrl(request),
+            route,
+        });
         return Response.json(payload, { status });
     }
     catch (e) {
@@ -218,7 +293,7 @@ export async function handleFloridayWebhook(request, supabase, token) {
  */
 export async function handleFloridayWebhookIn(request, supabase) {
     const token = new URL(request.url).searchParams.get("t") ?? "";
-    return handleFloridayWebhook(request, supabase, token);
+    return handleFloridayWebhook(request, supabase, token, "webhook-in");
 }
 // ---------------------------------------------------------------------------
 // Herhaalronde voor mislukte events (cron, elke minuut).

package/dist-lib/lib/module-version.d.ts

@@ -1,2 +1,2 @@
-export declare const MODULE_VERSION = "1.0.79";
+export declare const MODULE_VERSION = "1.0.81";
 //# sourceMappingURL=module-version.d.ts.map

package/dist-lib/lib/module-version.js

@@ -1,2 +1,2 @@
 // GEGENEREERD door scripts/write-module-version.mjs uit package.json — niet handmatig wijzigen.
-export const MODULE_VERSION = "1.0.79";
+export const MODULE_VERSION = "1.0.81";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.79",
+  "version": "1.0.81",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",
@@ -68,7 +68,7 @@
     "@cloudflare/vite-plugin": "^1.25.5",
     "@rsbuild/core": "^1.0.0",
     "@tailwindcss/vite": "^4.2.1",
-    "@tanstack/router-plugin": "^1.167.10",
+    "@tanstack/router-plugin": "1.167.33",
     "tailwindcss": "^4.2.1",
     "tw-animate-css": "^1.3.4",
     "vite-tsconfig-paths": "^6.0.2",