@flowselections/floriday-voorraad 1.0.13 → 1.0.15

package/dist-lib/lib/floriday-gateway.server.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Server-only HMAC client for the Floriday Auth-module gateway.
+ *
+ * Headers exact volgens §14.2:
+ *   x-floriday-timestamp: <unix milliseconds>
+ *   x-floriday-caller:    voorraad
+ *   x-floriday-signature: sha256=<hex HMAC-SHA256 over `${ts}.${rawBody}`>
+ *
+ * Niet importeren vanuit client code (filename eindigt op .server.ts en
+ * wordt geblokkeerd door de client bundler).
+ *
+ * Fail-closed contract:
+ *  - Voor ELKE call: response MOET application/json zijn en HTTP 2xx — anders error.
+ *  - Voor WRITE-call (`/api/public/gateway/write`) EXTRA envelope-eisen:
+ *      { ok: true, status: 2xx, attemptId: "...", data: ... }
+ *    Ontbreekt één daarvan → throw met de echte `json.error`.
+ *  - Lees-/upload-paden (schema, code-list, cached-list, media) krijgen
+ *    GEEN envelope-check; die geven gewoon de payload terug.
+ */
+export interface GatewaySchemaInput {
+    environment: "staging" | "live";
+    resource: string;
+    /**
+     * §15.2 — optionele lijst code-list-namen (kebab-case, max 25) die de
+     * gateway in dezelfde response moet meeleveren onder `codeLists`.
+     */
+    includeCodeLists?: string[];
+    [key: string]: unknown;
+}
+export declare function gatewaySchema<T = unknown>(input: GatewaySchemaInput): Promise<T>;
+export interface GatewayCodeListInput {
+    environment: "staging" | "live";
+    listName: string;
+}
+export declare function gatewayCodeList<T = unknown>(input: GatewayCodeListInput): Promise<T>;
+import { type GatewayEntity } from "./floriday-gateway-entities";
+export interface GatewayCachedListInput {
+    environment: "staging" | "live";
+    /**
+     * Kebab-case Floriday-resource (bv. "packings", "trade-item-classifications").
+     * NIET de Supabase-tabelnaam — die wordt server-side geweigerd met
+     * `400 Onbekende entity`.
+     */
+    entity: GatewayEntity;
+    limit?: number;
+}
+export declare function gatewayCachedList<T = unknown>(input: GatewayCachedListInput): Promise<T>;
+export interface GatewayWriteInput {
+    environment: "staging" | "live";
+    module: string;
+    action: string;
+    method: "POST" | "PUT" | "PATCH" | "DELETE";
+    path: string;
+    referenceId: string;
+    idempotencyKey: string;
+    body: unknown;
+    validateEnums?: {
+        field: string;
+        listName: string;
+    }[];
+}
+export interface GatewayWriteResult {
+    data: any;
+    attemptId: string;
+    status: number;
+}
+export declare function gatewayWrite(input: GatewayWriteInput): Promise<GatewayWriteResult>;
+export interface GatewayMediaUploadInput {
+    caller?: string;
+    environment: "staging" | "live";
+    path: string;
+    method?: "POST" | "PUT";
+    filename: string;
+    contentType: string;
+    bytes: Uint8Array;
+    formField?: string;
+    referenceId?: string;
+    idempotencyKey?: string;
+    extraFields?: Record<string, string>;
+}
+export interface GatewayMediaUploadResult {
+    ok: boolean;
+    status: number;
+    data: any;
+    attemptId: string | null;
+    error?: string;
+}
+/**
+ * Streamt het bestand 1-op-1 naar de centrale Auth-gateway. HMAC wordt
+ * berekend over `${timestamp}.${sha256hex(bodyBytes)}` (§14.11), GEEN
+ * base64-inflatie en geen formData-buffering meer.
+ */
+export declare function gatewayMediaUpload(input: GatewayMediaUploadInput): Promise<GatewayMediaUploadResult>;
+export interface GatewayDiagnosticsReport {
+    caller?: string;
+    module: string;
+    action: string;
+    environment: "staging" | "live";
+    path: string;
+    referenceId?: string | null;
+    idempotencyKey?: string | null;
+    attemptNumber?: number;
+    requestTimestamp?: number;
+    requestBodyHash?: string | null;
+    fileMeta?: {
+        filename?: string;
+        contentType?: string;
+        sizeBytes?: number;
+    };
+    responseStatus?: number | null;
+    responseContentType?: string | null;
+    responseSnippet?: string | null;
+    errorMessage?: string | null;
+    clientUserId?: string | null;
+}
+/**
+ * Stuurt een machine-leesbaar diagnoserapport naar de Authenticatie-module
+ * (gateway-endpoint `/api/public/gateway/diagnostics`). Fire-and-forget: fouten
+ * worden geslikt zodat de oorspronkelijke caller niet cascadeert.
+ */
+export declare function reportGatewayFailure(report: GatewayDiagnosticsReport): Promise<void>;
+//# sourceMappingURL=floriday-gateway.server.d.ts.map

package/dist-lib/lib/floriday-gateway.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floriday-gateway.server.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-gateway.server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA0IH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhF;AAID,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,wBAAgB,eAAe,CAAC,CAAC,GAAG,OAAO,EACzC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAEZ;AAID,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAElF,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC;;;;OAIG;IACH,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAC3C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,CAAC,CAAC,CAUZ;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AACD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAElF;AAID,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AASD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CA8DnC;AAID,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist-lib/lib/floriday-gateway.server.js

@@ -0,0 +1,230 @@
+/**
+ * Server-only HMAC client for the Floriday Auth-module gateway.
+ *
+ * Headers exact volgens §14.2:
+ *   x-floriday-timestamp: <unix milliseconds>
+ *   x-floriday-caller:    voorraad
+ *   x-floriday-signature: sha256=<hex HMAC-SHA256 over `${ts}.${rawBody}`>
+ *
+ * Niet importeren vanuit client code (filename eindigt op .server.ts en
+ * wordt geblokkeerd door de client bundler).
+ *
+ * Fail-closed contract:
+ *  - Voor ELKE call: response MOET application/json zijn en HTTP 2xx — anders error.
+ *  - Voor WRITE-call (`/api/public/gateway/write`) EXTRA envelope-eisen:
+ *      { ok: true, status: 2xx, attemptId: "...", data: ... }
+ *    Ontbreekt één daarvan → throw met de echte `json.error`.
+ *  - Lees-/upload-paden (schema, code-list, cached-list, media) krijgen
+ *    GEEN envelope-check; die geven gewoon de payload terug.
+ */
+// HMAC via Web Crypto (browser/Node 15+/Deno). Node's "node:crypto" is niet
+// beschikbaar wanneer dist-lib client-side wordt gebundeld door de shell.
+const CALLER = "voorraad";
+const WRITE_PATH = "/api/public/gateway/write";
+function getConfig() {
+    const url = process.env.FLORIDAY_GATEWAY_URL;
+    const secret = process.env.FLORIDAY_GATEWAY_SECRET;
+    if (!url || !secret) {
+        throw new Error("FLORIDAY_GATEWAY_URL / FLORIDAY_GATEWAY_SECRET ontbreken — gateway niet bereikbaar.");
+    }
+    return { url: url.replace(/\/$/, ""), secret };
+}
+async function hmacSha256Hex(secret, data) {
+    const key = await globalThis.crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const sig = await globalThis.crypto.subtle.sign("HMAC", key, new TextEncoder().encode(data));
+    return Array.from(new Uint8Array(sig))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+async function sign(ts, rawBody, secret) {
+    return hmacSha256Hex(secret, `${ts}.${rawBody}`);
+}
+async function doSignedFetch(path, rawBody) {
+    const { url, secret } = getConfig();
+    // x-floriday-timestamp MOET per call vers gezet worden op Date.now()
+    // (unix-MILLISECONDEN, niet seconden, niet gecached). De HMAC wordt
+    // berekend over exact `${timestamp}.${rawBody}` met diezelfde string.
+    const timestamp = Date.now().toString();
+    const sigHex = await sign(timestamp, rawBody, secret);
+    return fetch(`${url}${path}`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "x-floriday-timestamp": timestamp,
+            "x-floriday-signature": `sha256=${sigHex}`,
+            "x-floriday-caller": CALLER,
+        },
+        body: rawBody,
+    });
+}
+async function gatewayPost(path, body) {
+    // Runtime-guard: als de body een `environment`-veld bevat, MOET het exact
+    // "staging" of "live" zijn. Voorkomt dat een "production" of undefined
+    // de gateway 400 "Ongeldige environment" oplevert.
+    if (body && typeof body === "object") {
+        const env = body.environment;
+        if (env !== undefined && env !== "staging" && env !== "live") {
+            const { FloridayEnvError } = await import("./floriday-env");
+            throw new FloridayEnvError("INVALID_FLORIDAY_ENVIRONMENT", `Body.environment moet "staging" of "live" zijn (kreeg: ${JSON.stringify(env)}).`);
+        }
+    }
+    const raw = JSON.stringify(body ?? {});
+    const res = await doSignedFetch(path, raw);
+    const ct = res.headers.get("content-type") ?? "";
+    const text = await res.text();
+    // Fail-closed: alleen JSON wordt geaccepteerd. HTML/leeg = fout, ook bij 2xx.
+    if (!ct.toLowerCase().includes("application/json")) {
+        throw new Error(`gateway ${path} → niet-JSON antwoord (status=${res.status}, content-type=${ct || "leeg"})`);
+    }
+    let parsed;
+    try {
+        parsed = text ? JSON.parse(text) : null;
+    }
+    catch {
+        throw new Error(`gateway ${path} → JSON parse-fout (status=${res.status})`);
+    }
+    if (parsed == null) {
+        throw new Error(`gateway ${path} → lege JSON-body (status=${res.status})`);
+    }
+    if (!res.ok) {
+        const detail = parsed?.error || parsed?.detail || parsed?.message || `HTTP ${res.status}`;
+        throw new Error(`gateway ${path} → ${detail}`);
+    }
+    // Write-pad: strikte envelope-check.
+    if (path === WRITE_PATH) {
+        if (parsed.ok !== true) {
+            throw new Error(parsed.error ??
+                `Gateway-call niet bevestigd door Floriday (status=${parsed.status ?? "onbekend"})`);
+        }
+        if (typeof parsed.status !== "number" ||
+            parsed.status < 200 ||
+            parsed.status >= 300) {
+            throw new Error(parsed.error ??
+                `Gateway-call niet bevestigd door Floriday (status=${parsed.status ?? "onbekend"})`);
+        }
+        if (!parsed.attemptId) {
+            throw new Error("Gateway-call verwerkt, maar zonder centrale logbevestiging (attemptId ontbreekt)");
+        }
+        return {
+            data: parsed.data ?? null,
+            attemptId: String(parsed.attemptId),
+            status: parsed.status,
+        };
+    }
+    return parsed;
+}
+export function gatewaySchema(input) {
+    return gatewayPost("/api/public/gateway/schema", input);
+}
+export function gatewayCodeList(input) {
+    return gatewayPost("/api/public/gateway/code-list", input);
+}
+// ---------- Cached list (stamdata uit gedeelde Supabase cache) -------------
+import { isGatewayEntity } from "./floriday-gateway-entities";
+export function gatewayCachedList(input) {
+    if (!isGatewayEntity(input.entity)) {
+        throw new Error(`gateway.cachedList: ongeldige entity ${JSON.stringify(input.entity)} — gebruik een kebab-case Floriday-resource uit GATEWAY_ENTITIES.`);
+    }
+    return gatewayPost("/api/public/gateway/cached-list", {
+        limit: 1000,
+        ...input,
+    });
+}
+export function gatewayWrite(input) {
+    return gatewayPost(WRITE_PATH, input);
+}
+function toHex(buf) {
+    const a = new Uint8Array(buf);
+    let s = "";
+    for (let i = 0; i < a.length; i++)
+        s += a[i].toString(16).padStart(2, "0");
+    return s;
+}
+/**
+ * Streamt het bestand 1-op-1 naar de centrale Auth-gateway. HMAC wordt
+ * berekend over `${timestamp}.${sha256hex(bodyBytes)}` (§14.11), GEEN
+ * base64-inflatie en geen formData-buffering meer.
+ */
+export async function gatewayMediaUpload(input) {
+    const { url, secret } = getConfig();
+    const timestamp = Date.now().toString();
+    const bodyHashBuf = await crypto.subtle.digest("SHA-256", input.bytes);
+    const bodyHash = toHex(bodyHashBuf);
+    const sigHex = await hmacSha256Hex(secret, `${timestamp}.${bodyHash}`);
+    const headers = {
+        "Content-Type": input.contentType,
+        "x-floriday-timestamp": timestamp,
+        "x-floriday-signature": `sha256=${sigHex}`,
+        "x-floriday-caller": input.caller ?? CALLER,
+        "x-floriday-environment": input.environment,
+        "x-floriday-path": input.path,
+        "x-floriday-filename": input.filename,
+        "x-floriday-content-type": input.contentType,
+    };
+    if (input.method)
+        headers["x-floriday-method"] = input.method;
+    if (input.formField)
+        headers["x-floriday-form-field"] = input.formField;
+    if (input.referenceId)
+        headers["x-floriday-reference-id"] = input.referenceId;
+    if (input.idempotencyKey)
+        headers["x-floriday-idempotency-key"] = input.idempotencyKey;
+    if (input.extraFields)
+        headers["x-floriday-extra-fields"] = JSON.stringify(input.extraFields);
+    const res = await fetch(`${url}/api/public/gateway/media-upload`, {
+        method: "POST",
+        headers,
+        body: input.bytes,
+    });
+    const ct = res.headers.get("content-type") ?? "";
+    const text = await res.text();
+    if (!ct.toLowerCase().includes("application/json")) {
+        throw new Error(`gateway media-upload → niet-JSON antwoord (status=${res.status})`);
+    }
+    let parsed;
+    try {
+        parsed = text ? JSON.parse(text) : null;
+    }
+    catch {
+        throw new Error(`gateway media-upload → JSON parse-fout (status=${res.status})`);
+    }
+    if (parsed == null) {
+        throw new Error(`gateway media-upload → lege body (status=${res.status})`);
+    }
+    if (!res.ok || parsed.ok !== true) {
+        const detail = parsed?.error || parsed?.detail || parsed?.message || `HTTP ${res.status}`;
+        throw new Error(detail);
+    }
+    return {
+        ok: true,
+        status: typeof parsed.status === "number" ? parsed.status : res.status,
+        data: parsed.data ?? null,
+        attemptId: parsed.attemptId ?? null,
+    };
+}
+/**
+ * Stuurt een machine-leesbaar diagnoserapport naar de Authenticatie-module
+ * (gateway-endpoint `/api/public/gateway/diagnostics`). Fire-and-forget: fouten
+ * worden geslikt zodat de oorspronkelijke caller niet cascadeert.
+ */
+export async function reportGatewayFailure(report) {
+    try {
+        const { url, secret } = getConfig();
+        const body = JSON.stringify({ caller: CALLER, ...report });
+        const timestamp = Date.now().toString();
+        const sigHex = await hmacSha256Hex(secret, `${timestamp}.${body}`);
+        await fetch(`${url}/api/public/gateway/diagnostics`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "x-floriday-timestamp": timestamp,
+                "x-floriday-signature": `sha256=${sigHex}`,
+                "x-floriday-caller": report.caller ?? CALLER,
+            },
+            body,
+        });
+    }
+    catch (e) {
+        console.warn("[reportGatewayFailure] kon diagnose niet versturen:", e);
+    }
+}

package/dist-lib/lib/floriday-import-validator.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Validatie-helpers voor Excel-import → auto-koppel / auto-publiceer flow.
+ *
+ * De lijst met verplichte velden is bewust hier gecentraliseerd zodat we die
+ * kunnen uitbreiden zodra Floriday nieuwe eisen stelt zonder de import-logica
+ * te raken.
+ */
+import type { WizardData } from "./floriday-payload";
+export type DraftLinkStatus = "unlinked" | "linked" | "waiting_for_data" | "ready_to_publish" | "publish_failed" | "ambiguous_match" | "published";
+export interface RequiredFieldSpec {
+    key: string;
+    label: string;
+    check: (d: Partial<WizardData>) => boolean;
+}
+/**
+ * Basisset van verplichte velden voor publicatie naar Floriday. Uitbreidbaar:
+ * voeg eenvoudig extra items toe wanneer Floriday nieuwe eisen stelt.
+ */
+export declare const REQUIRED_FIELDS_FOR_PUBLISH: RequiredFieldSpec[];
+export interface ValidationResult {
+    ok: boolean;
+    missing: string[];
+    missingKeys: string[];
+}
+export declare function validateDraftForPublish(d: Partial<WizardData>): ValidationResult;
+//# sourceMappingURL=floriday-import-validator.d.ts.map

package/dist-lib/lib/floriday-import-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floriday-import-validator.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-import-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,QAAQ,GACR,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;CAC5C;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,iBAAiB,EA0B1D,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAUhF"}

package/dist-lib/lib/floriday-import-validator.js

@@ -0,0 +1,41 @@
+/**
+ * Basisset van verplichte velden voor publicatie naar Floriday. Uitbreidbaar:
+ * voeg eenvoudig extra items toe wanneer Floriday nieuwe eisen stelt.
+ */
+export const REQUIRED_FIELDS_FOR_PUBLISH = [
+    { key: "articleCode", label: "Artikelcode", check: (d) => !!d.articleCode?.trim() },
+    { key: "name", label: "Artikelnaam", check: (d) => !!d.name?.trim() && d.name.trim().length >= 2 },
+    { key: "vbnCode", label: "VBN-productcode", check: (d) => !!d.vbnCode?.trim() },
+    { key: "productGroup", label: "Productgroep", check: (d) => !!d.productGroup },
+    {
+        key: "botanicalName",
+        label: "Botanische naam",
+        check: (d) => !!d.botanicalName?.trim(),
+    },
+    {
+        key: "countryOfOrigin",
+        label: "Land van oorsprong",
+        check: (d) => !!d.countryOfOrigin?.trim(),
+    },
+    {
+        key: "images",
+        label: "Minstens 1 foto",
+        check: (d) => Array.isArray(d.images) && d.images.length > 0,
+    },
+    {
+        key: "packingConfigurations",
+        label: "Beladingsconfiguratie",
+        check: (d) => Array.isArray(d.packingConfigurations) && d.packingConfigurations.length > 0,
+    },
+];
+export function validateDraftForPublish(d) {
+    const missing = [];
+    const missingKeys = [];
+    for (const f of REQUIRED_FIELDS_FOR_PUBLISH) {
+        if (!f.check(d)) {
+            missing.push(f.label);
+            missingKeys.push(f.key);
+        }
+    }
+    return { ok: missing.length === 0, missing, missingKeys };
+}

package/dist-lib/lib/floriday-payload.d.ts

@@ -1,16 +1,44 @@
 import { z } from "zod";
 export type ProductGroup = "CUT_FLOWER" | "POT_PLANT" | "GARDEN_PLANT";
 export type ArticleType = "REGULAR" | "CUSTOMER_SPECIFIC";
+export type PackingSource = "VBN" | "SUPPLIER";
 export interface PackingConfigurationInput {
     id: string;
     floridayId?: string;
-    packagingType: string;
+    /** Bron van het fust: reguliere VBN-fust óf aangesloten verpakkingsleverancier */
+    source: PackingSource;
+    /** Ladingdrager (verplicht) */
     loadCarrier: string;
+    /** VBN-fustcode — verplicht wanneer source = "VBN", en als fallback bij "SUPPLIER" */
+    packagingType: string;
+    /** Alleen bij source = "SUPPLIER" */
+    packagingSupplierId?: string;
+    packagingSupplierName?: string;
+    packagingMaterialId?: string;
+    packagingMaterialName?: string;
+    packageWidthMm?: number;
+    packageLengthMm?: number;
+    volumeWeightKg?: number;
+    /** Belading afmetingen */
     unitsPerPackage: number;
     packagesPerLayer: number;
     layersPerLoadCarrier: number;
     stackingHeightCm?: number;
+    /** Foto van artikel in dit fust (optioneel). URL is Floriday-CDN url. */
+    photoUrl?: string;
+    photoImageId?: string;
+    photoPreviewUrl?: string;
+    /** Reguliere of klantspecifieke belading */
+    isCustomerSpecific: boolean;
+    customerOrganizationIds: string[];
+    /** Eerste belading = primair. Wordt door de UI beheerd. */
+    isPrimary: boolean;
 }
+/** Hardcoded lijst met aangesloten verpakkingsleveranciers zoals in Floriday. */
+export declare const PACKAGING_SUPPLIERS: {
+    id: string;
+    name: string;
+}[];
 export interface AdditionalPackagingInput {
     id: string;
     code: string;
@@ -22,6 +50,10 @@ export interface PhotoInput {
     name?: string;
     primary?: boolean;
     sortOrder?: number;
+    /** Floriday mediaId (UUID), teruggegeven door POST /media (AddImage). */
+    imageId?: string | null;
+    /** Lokale blob/object URL voor previewweergave in de wizard (niet verstuurd) */
+    previewUrl?: string;
 }
 export interface WizardData {
     productGroup: ProductGroup | null;
@@ -80,11 +112,18 @@ export declare const stepSchemas: {
     }, z.core.$strip>;
     beladingen: z.ZodObject<{
         packingConfigurations: z.ZodArray<z.ZodObject<{
-            packagingType: z.ZodString;
+            source: z.ZodDefault<z.ZodEnum<{
+                VBN: "VBN";
+                SUPPLIER: "SUPPLIER";
+            }>>;
+            packagingType: z.ZodDefault<z.ZodString>;
             loadCarrier: z.ZodString;
+            packagingSupplierId: z.ZodOptional<z.ZodString>;
             unitsPerPackage: z.ZodNumber;
             packagesPerLayer: z.ZodNumber;
             layersPerLoadCarrier: z.ZodNumber;
+            isCustomerSpecific: z.ZodDefault<z.ZodBoolean>;
+            customerOrganizationIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     beschikbaarheid: z.ZodObject<{
@@ -100,6 +139,7 @@ export declare function validateStep(key: StepKey, data: WizardData): {
     errors: string[];
 };
 export type LoadCarrierEnum = "NONE" | "AUCTION_TROLLEY" | "DANISH_TROLLEY" | "EURO_TROLLEY" | "PALLET" | "EURO_PALLET";
+export type LoadCarrierPayload = LoadCarrierEnum | number | string;
 export type PhotoTypeEnum = "UNKNOWN" | "PIECE" | "TRAY" | "DETAIL" | "RULER" | "WEBSHOPFRIENDLY" | "SCENE" | "SEASON" | "STEM" | "BUNCH" | "CONTAINER" | "CLOCK";
 export interface AddPackingConfigPayload {
     primary: boolean;
@@ -109,8 +149,11 @@ export interface AddPackingConfigPayload {
     };
     packagesPerLayer: number;
     layersPerLoadCarrier: number;
-    loadCarrier: LoadCarrierEnum;
+    loadCarrier: LoadCarrierPayload;
     isHiddenForDirectSales: boolean;
+    packagingSupplierId?: string;
+    packagingSupplierMaterialId?: string;
+    customerOrganizationIds?: string[];
 }
 export declare function buildPackingConfigPayload(p: PackingConfigurationInput, primary?: boolean): AddPackingConfigPayload;
 export interface AddTradeItemPayload {
@@ -143,4 +186,5 @@ export interface AddTradeItemPayload {
 }
 export declare function buildAddTradeItemPayload(d: WizardData): AddTradeItemPayload;
 export declare const emptyWizardData: WizardData;
+export declare function floridayCacheToWizardData(raw: any): WizardData;
 //# sourceMappingURL=floriday-payload.d.ts.map

package/dist-lib/lib/floriday-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"floriday-payload.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-payload.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;AACvE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAE1D,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IAEzB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAE3B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAElB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,CAAC;IAErB,qBAAqB,EAAE,yBAAyB,EAAE,CAAC;IAEnD,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;IAEhD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOnD;AAID,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEvB,CAAC;AAEF,MAAM,MAAM,OAAO,GACf,KAAK,GACL,SAAS,GACT,UAAU,GACV,eAAe,GACf,SAAS,GACT,OAAO,GACP,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,iBAAiB,CAAC;AAEtB,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,UAAU,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAmDhD;AAMD,MAAM,MAAM,eAAe,GACvB,MAAM,GAAG,iBAAiB,GAAG,gBAAgB,GAC7C,cAAc,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE9C,MAAM,MAAM,aAAa,GACrB,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GACjD,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GACzD,WAAW,GAAG,OAAO,CAAC;AAmB1B,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;IAC7B,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,yBAAyB,EAC5B,OAAO,UAAQ,GACd,uBAAuB,CAgBzB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,eAAe,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpF,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;IACjD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAoBD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,UAAU,GAAG,mBAAmB,CAmD3E;AAED,eAAO,MAAM,eAAe,EAAE,UAsB7B,CAAC"}
+{"version":3,"file":"floriday-payload.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-payload.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;AACvE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAE1D,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,CAAC;AAE/C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,MAAM,EAAE,aAAa,CAAC;IACtB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAgB7D,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,UAAU;IAEzB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAE3B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAElB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAElC,MAAM,EAAE,UAAU,EAAE,CAAC;IAErB,qBAAqB,EAAE,yBAAyB,EAAE,CAAC;IAEnD,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;IAEhD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOnD;AAID,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgGvB,CAAC;AAEF,MAAM,MAAM,OAAO,GACf,KAAK,GACL,SAAS,GACT,UAAU,GACV,eAAe,GACf,SAAS,GACT,OAAO,GACP,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,iBAAiB,CAAC;AAEtB,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,UAAU,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAmDhD;AAMD,MAAM,MAAM,eAAe,GACvB,MAAM,GAAG,iBAAiB,GAAG,gBAAgB,GAC7C,cAAc,GAAG,QAAQ,GAAG,aAAa,CAAC;AAC9C,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnE,MAAM,MAAM,aAAa,GACrB,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GACjD,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GACzD,WAAW,GAAG,OAAO,CAAC;AAyB1B,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,kBAAkB,CAAC;IAChC,sBAAsB,EAAE,OAAO,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,yBAAyB,EAC5B,OAAO,UAAQ,GACd,uBAAuB,CA0BzB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,eAAe,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpF,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;IACjD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAoBD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,UAAU,GAAG,mBAAmB,CAmD3E;AAED,eAAO,MAAM,eAAe,EAAE,UAsB7B,CAAC;AAiDF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CA+E9D"}