@flowselections/floriday-verkoop-module 1.0.8 → 1.0.9

package/dist-lib/integrations/supabase/types.js

@@ -8,8 +8,10 @@ export const Constants = {
                 "sales",
                 "developer",
                 "receptie",
+                "monteur",
             ],
             exact_env: ["staging", "live"],
+            exact_push_status: ["pending", "sent", "error"],
             quote_status: [
                 "concept",
                 "verzonden",

package/dist-lib/lib/floriday-gateway.server.d.ts

@@ -0,0 +1,42 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import { type FloridayConnectionRow } from "./floriday-sync";
+export type FlorydayEnvironment = "staging" | "live";
+export declare function apiBaseFor(env: FlorydayEnvironment | string | null | undefined): string;
+export declare function pickActiveConnection(supabase: SupabaseClient, env: FlorydayEnvironment | string): Promise<FloridayConnectionRow & {
+    gln_code?: string | null;
+}>;
+export interface FlorydayFetchResult<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T | null;
+    rawText: string;
+    connection: FloridayConnectionRow;
+}
+/** Low-level fetch with token-refresh + retry-once on 401/403. */
+export declare function florydayFetch<T = unknown>(supabase: SupabaseClient, conn: FloridayConnectionRow, init: {
+    method: string;
+    path: string;
+    body?: unknown;
+}): Promise<FlorydayFetchResult<T>>;
+export interface EnumCheck {
+    field: string;
+    listName: string;
+}
+export interface FlorydayWriteArgs {
+    module: string;
+    action: string;
+    method: "POST" | "PUT" | "PATCH" | "DELETE";
+    path: string;
+    referenceId?: string | null;
+    body?: unknown;
+    validateEnums?: EnumCheck[];
+}
+export interface FlorydayWriteResult {
+    ok: boolean;
+    status: number;
+    data?: any;
+    error?: string;
+    attemptId?: string;
+}
+export declare function florydayWrite(supabase: SupabaseClient, env: FlorydayEnvironment | string, args: FlorydayWriteArgs, callerUserId?: string | null): Promise<FlorydayWriteResult>;
+//# sourceMappingURL=floriday-gateway.server.d.ts.map

package/dist-lib/lib/floriday-gateway.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floriday-gateway.server.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-gateway.server.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AAKrD,wBAAgB,UAAU,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAIvF;AAMD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAChC,OAAO,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAa/D;AA6BD,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,kEAAkE;AAClE,wBAAsB,aAAa,CAAC,CAAC,GAAG,OAAO,EAC7C,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CA8CjC;AAGD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AA4DD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAcD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,EACjC,IAAI,EAAE,iBAAiB,EACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CA6D9B"}

package/dist-lib/lib/floriday-gateway.server.js

@@ -0,0 +1,222 @@
+// Internal Floriday gateway — server-only.
+// One place that owns: connection-selection, token-refresh + retry-on-401,
+// enum validation, idempotency-key, and write-log persistence.
+// Other modules MUST NOT call fetch on Floriday directly; they use the helpers
+// in floriday-writes.functions.ts and floriday-public.functions.ts.
+import { createHash } from "crypto";
+import { FLORIDAY_API_BASES } from "./floriday-sync";
+const AUTH_MODULE_REFRESH_URL = "https://project--vmicscahrnzpmhagztmx.lovable.app/api/public/cron/refresh-floriday-tokens";
+export function apiBaseFor(env) {
+    return env === "live" || env === "production" || env === "prod"
+        ? FLORIDAY_API_BASES.production
+        : FLORIDAY_API_BASES.staging;
+}
+function normalizeEnvKey(env) {
+    return env === "live" || env === "production" || env === "prod" ? "production" : "staging";
+}
+export async function pickActiveConnection(supabase, env) {
+    const dbEnv = normalizeEnvKey(env);
+    const { data, error } = await supabase
+        .from("floriday_connections")
+        .select("id, environment, access_token, api_key, is_active, gln_code")
+        .eq("environment", dbEnv)
+        .eq("is_active", true)
+        .order("updated_at", { ascending: false })
+        .limit(1)
+        .maybeSingle();
+    if (error)
+        throw new Error(`Floriday connectie ophalen mislukt: ${error.message}`);
+    if (!data)
+        throw new Error(`Geen actieve Floriday connectie voor "${dbEnv}"`);
+    return data;
+}
+async function triggerAuthModuleRefresh() {
+    try {
+        await fetch(AUTH_MODULE_REFRESH_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: "{}",
+        });
+    }
+    catch {
+        // best-effort — caller re-reads the token regardless
+    }
+}
+async function reloadConnection(supabase, connectionId) {
+    const { data, error } = await supabase
+        .from("floriday_connections")
+        .select("id, environment, access_token, api_key, is_active")
+        .eq("id", connectionId)
+        .maybeSingle();
+    if (error || !data) {
+        throw new Error(`Floriday connectie ${connectionId} herladen mislukt: ${error?.message ?? "not found"}`);
+    }
+    return data;
+}
+/** Low-level fetch with token-refresh + retry-once on 401/403. */
+export async function florydayFetch(supabase, conn, init) {
+    let active = conn;
+    let lastRes = null;
+    let lastText = "";
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        if (!active.access_token) {
+            await triggerAuthModuleRefresh();
+            active = await reloadConnection(supabase, active.id);
+            if (!active.access_token) {
+                throw new Error(`Floriday connectie ${active.id} heeft geen access_token`);
+            }
+        }
+        const url = `${apiBaseFor(active.environment)}${init.path}`;
+        const res = await fetch(url, {
+            method: init.method,
+            headers: {
+                Accept: "application/json",
+                ...(init.body !== undefined ? { "Content-Type": "application/json" } : {}),
+                Authorization: `Bearer ${active.access_token}`,
+                ...(active.api_key ? { "x-api-key": active.api_key } : {}),
+            },
+            body: init.body !== undefined ? JSON.stringify(init.body) : undefined,
+        });
+        const text = await res.text();
+        lastRes = res;
+        lastText = text;
+        if (res.ok) {
+            const parsed = text ? JSON.parse(text) : null;
+            return { ok: true, status: res.status, data: parsed, rawText: text, connection: active };
+        }
+        if ((res.status === 401 || res.status === 403) && attempt === 0) {
+            await triggerAuthModuleRefresh();
+            active = await reloadConnection(supabase, active.id);
+            continue;
+        }
+        break;
+    }
+    return {
+        ok: false,
+        status: lastRes?.status ?? 0,
+        data: null,
+        rawText: lastText,
+        connection: active,
+    };
+}
+async function fetchAllowedValues(supabase, env, listName) {
+    const dbEnv = normalizeEnvKey(env) === "production" ? "live" : "staging";
+    const { data, error } = await supabase
+        .from("floriday_code_lists_cache")
+        .select("code")
+        .eq("environment", dbEnv)
+        .eq("list_name", listName);
+    if (error)
+        throw new Error(`code-lists lezen faalde: ${error.message}`);
+    return (data ?? []).map((r) => String(r.code));
+}
+function readPathValues(body, path) {
+    const parts = path.split(".");
+    let nodes = [body];
+    for (const part of parts) {
+        const next = [];
+        const isArray = part.endsWith("[]");
+        const key = isArray ? part.slice(0, -2) : part;
+        for (const node of nodes) {
+            if (node == null || typeof node !== "object")
+                continue;
+            const v = node[key];
+            if (v === undefined)
+                continue;
+            if (isArray && Array.isArray(v))
+                next.push(...v);
+            else
+                next.push(v);
+        }
+        nodes = next;
+    }
+    return nodes;
+}
+async function runEnumChecks(supabase, env, body, checks) {
+    for (const check of checks) {
+        const values = readPathValues(body, check.field).filter((v) => v != null);
+        if (values.length === 0)
+            continue;
+        const allowed = await fetchAllowedValues(supabase, env, check.listName);
+        if (allowed.length === 0)
+            continue; // list not cached yet → skip
+        const bad = values.find((v) => !allowed.includes(String(v)));
+        if (bad !== undefined) {
+            return {
+                ok: false,
+                error: `Veld "${check.field}" heeft ongeldige waarde "${bad}" voor lijst "${check.listName}"`,
+                allowed,
+            };
+        }
+    }
+    return { ok: true };
+}
+function computeIdempotencyKey(args) {
+    const h = createHash("sha256");
+    h.update(args.module);
+    h.update("|");
+    h.update(args.action);
+    h.update("|");
+    h.update(args.referenceId ?? "");
+    h.update("|");
+    h.update(JSON.stringify(args.body ?? null));
+    return h.digest("hex");
+}
+export async function florydayWrite(supabase, env, args, callerUserId) {
+    const idempotencyKey = computeIdempotencyKey(args);
+    // 1) Local pre-flight enum validation (saves a Floriday roundtrip on mismatches).
+    if (args.validateEnums && args.validateEnums.length > 0) {
+        const v = await runEnumChecks(supabase, env, args.body, args.validateEnums);
+        if (!v.ok) {
+            const ins = await supabase.from("floriday_write_log")
+                .insert({
+                module: args.module,
+                action: args.action,
+                resource: args.path,
+                floriday_id: args.referenceId ?? null,
+                idempotency_key: idempotencyKey,
+                request: { body: args.body ?? null, env },
+                response: { allowed: v.allowed ?? null },
+                http_status: 0,
+                ok: false,
+                error: v.error,
+                user_id: callerUserId ?? null,
+            })
+                .select("id")
+                .maybeSingle();
+            return { ok: false, status: 0, error: v.error, attemptId: ins.data?.id };
+        }
+    }
+    const conn = await pickActiveConnection(supabase, env);
+    const res = await florydayFetch(supabase, conn, {
+        method: args.method,
+        path: args.path,
+        body: args.body,
+    });
+    const ins = await supabase.from("floriday_write_log")
+        .insert({
+        connection_id: conn.id,
+        module: args.module,
+        action: args.action,
+        resource: args.path,
+        floriday_id: args.referenceId ?? null,
+        idempotency_key: idempotencyKey,
+        request: { body: args.body ?? null, env, method: args.method },
+        response: res.rawText ? { body: res.rawText.slice(0, 32000) } : null,
+        http_status: res.status,
+        ok: res.ok,
+        error: res.ok ? null : res.rawText.slice(0, 500),
+        user_id: callerUserId ?? null,
+    })
+        .select("id")
+        .maybeSingle();
+    if (!res.ok) {
+        return {
+            ok: false,
+            status: res.status,
+            error: res.rawText ? res.rawText.slice(0, 400) : `HTTP ${res.status}`,
+            attemptId: ins.data?.id,
+        };
+    }
+    return { ok: true, status: res.status, data: res.data, attemptId: ins.data?.id };
+}