@flowselections/floriday-voorraad 1.0.65 → 1.0.67

package/dist-lib/server-hooks/guard.js

@@ -0,0 +1,60 @@
+/**
+ * Gemeenschappelijke poort voor alle Voorraad-verwerkers (losse app én Shell).
+ *
+ * Volgorde: OPTIONS → sleutel (401 JSON) → schakelaar per verwerker in
+ * `module_runtime_config` (`voorraad_hook_enabled.<naam>`) → verwerking.
+ * Staat de schakelaar uit of ontbreekt hij, dan gebeurt er niets
+ * (behalve voor de verwerkers waarvan de standaard "aan" is).
+ *
+ * Server-only.
+ */
+const CORS = {
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Methods": "POST, OPTIONS",
+    "Access-Control-Allow-Headers": "content-type, apikey, x-api-key, authorization",
+};
+/** Standaard als de instelling (nog) niet bestaat. Gelijk aan de migratie. */
+const DEFAULT_ON = new Set(["floriday_base_supply", "logistics_tasks"]);
+function json(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json", ...CORS },
+    });
+}
+function keyOk(request) {
+    const apikey = request.headers.get("apikey") ??
+        request.headers.get("x-api-key") ??
+        request.headers.get("authorization")?.replace(/^Bearer\s+/i, "");
+    const expected = process.env.SUPABASE_PUBLISHABLE_KEY ??
+        process.env.SUPABASE_ANON_KEY ??
+        process.env.VITE_SUPABASE_PUBLISHABLE_KEY ??
+        "";
+    return !!expected && !!apikey && apikey === expected;
+}
+export async function hookEnabled(name) {
+    const { getAdminClient } = await import("../lib/supabase-admin.server.js");
+    const admin = getAdminClient();
+    const { data } = await admin
+        .from("module_runtime_config")
+        .select("value")
+        .eq("key", `voorraad_hook_enabled.${name}`)
+        .maybeSingle();
+    if (!data)
+        return DEFAULT_ON.has(name);
+    return String(data.value).trim().toLowerCase() === "true";
+}
+export async function runGuardedHook(request, name, handle, label) {
+    if (request.method === "OPTIONS")
+        return new Response(null, { status: 204, headers: CORS });
+    if (!keyOk(request))
+        return json({ error: "Unauthorized" }, 401);
+    try {
+        if (!(await hookEnabled(name)))
+            return json({ ok: true, skipped: "disabled", hook: name });
+        return await handle(request);
+    }
+    catch (e) {
+        console.error(`[voorraad] ${label} fatal:`, e?.message ?? e);
+        return json({ error: "Verwerking mislukt" }, 500);
+    }
+}

package/dist-lib/server-hooks/logistics-tasks-run.d.ts

@@ -0,0 +1,3 @@
+/** Shell-handler voor /api/public/hooks/logistics-tasks-run. Schakelaar: voorraad_hook_enabled.logistics_tasks. */
+export declare function handleLogisticsTasksRun(request: Request): Promise<Response>;
+//# sourceMappingURL=logistics-tasks-run.d.ts.map

package/dist-lib/server-hooks/logistics-tasks-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logistics-tasks-run.d.ts","sourceRoot":"","sources":["../../src/server-hooks/logistics-tasks-run.ts"],"names":[],"mappings":"AAyCA,mHAAmH;AACnH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEjF"}

package/dist-lib/server-hooks/logistics-tasks-run.js

@@ -0,0 +1,37 @@
+/**
+ * Cron-endpoint (elke minuut): verwerkt openstaande Logistics Engine-taken
+ * (`stock.reserve`) volledig op de achtergrond, inclusief automatische
+ * herpogingen. Geen UI, geen gebruikersinteractie.
+ *
+ * Authenticatie: apikey-header met de anon key (dit endpoint zit onder
+ * `/api/public/*`, dus platform-auth wordt overgeslagen; wij verifiëren de
+ * apikey zelf).
+ */
+import { runGuardedHook } from "./guard";
+async function handle(request) {
+    const apikey = request.headers.get("apikey") ??
+        request.headers.get("x-api-key") ??
+        request.headers.get("authorization")?.replace(/^Bearer\s+/i, "");
+    const expected = process.env.SUPABASE_PUBLISHABLE_KEY ?? process.env.SUPABASE_ANON_KEY ?? "";
+    if (!expected || !apikey || apikey !== expected) {
+        return new Response(JSON.stringify({ error: "Unauthorized" }), {
+            status: 401,
+            headers: { "Content-Type": "application/json" },
+        });
+    }
+    try {
+        const { runLogisticsTasks } = await import("../lib/logistics-tasks.server.js");
+        const summary = await runLogisticsTasks();
+        return new Response(JSON.stringify({ ok: true, ...summary }), {
+            headers: { "Content-Type": "application/json" },
+        });
+    }
+    catch (e) {
+        console.error("[voorraad] logistics-tasks-run mislukt:", e?.message ?? e);
+        return new Response(JSON.stringify({ ok: false, error: e?.message ?? String(e) }), { status: 500, headers: { "Content-Type": "application/json" } });
+    }
+}
+/** Shell-handler voor /api/public/hooks/logistics-tasks-run. Schakelaar: voorraad_hook_enabled.logistics_tasks. */
+export async function handleLogisticsTasksRun(request) {
+    return runGuardedHook(request, "logistics_tasks", handle, "logistics-tasks-run");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-voorraad",
-  "version": "1.0.65",
+  "version": "1.0.67",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",
@@ -9,6 +9,10 @@
     ".": {
       "types": "./dist-lib/index.d.ts",
       "default": "./dist-lib/index.js"
+    },
+    "./hooks": {
+      "types": "./dist-lib/hooks-entry.d.ts",
+      "default": "./dist-lib/hooks-entry.js"
     }
   },
   "files": [
@@ -100,7 +104,7 @@
         "export": "FustenPage",
         "route": "voorraad_/fusten",
         "title": "Fusten",
-        "nav": false
+        "nav": true
       },
       {
         "export": "PublicatiesPage",
@@ -108,6 +112,53 @@
         "title": "Publicaties",
         "nav": false
       }
+    ],
+    "serverRoutes": [
+      {
+        "routePath": "/api/public/hooks/floriday-base-supply",
+        "import": "@flowselections/floriday-voorraad/hooks",
+        "handler": "handleFloridayBaseSupply",
+        "methods": [
+          "POST",
+          "OPTIONS"
+        ]
+      },
+      {
+        "routePath": "/api/public/hooks/floriday-continuous-stock",
+        "import": "@flowselections/floriday-voorraad/hooks",
+        "handler": "handleFloridayContinuousStock",
+        "methods": [
+          "POST",
+          "OPTIONS"
+        ]
+      },
+      {
+        "routePath": "/api/public/hooks/floriday-continuous-stock-pull",
+        "import": "@flowselections/floriday-voorraad/hooks",
+        "handler": "handleFloridayContinuousStockPull",
+        "methods": [
+          "POST",
+          "OPTIONS"
+        ]
+      },
+      {
+        "routePath": "/api/public/hooks/floriday-stock-reconcile",
+        "import": "@flowselections/floriday-voorraad/hooks",
+        "handler": "handleFloridayStockReconcile",
+        "methods": [
+          "POST",
+          "OPTIONS"
+        ]
+      },
+      {
+        "routePath": "/api/public/hooks/logistics-tasks-run",
+        "import": "@flowselections/floriday-voorraad/hooks",
+        "handler": "handleLogisticsTasksRun",
+        "methods": [
+          "POST",
+          "OPTIONS"
+        ]
+      }
     ]
   }
 }