@flowselections/logistiek-engine 1.0.110 → 1.0.111

package/dist-lib/lib/handlers/index.d.ts

@@ -1,3 +1,4 @@
 export { handleLogisticsTick } from "./logistics-tick.server.js";
 export { handleShippingNoteNow } from "./logistics-shipping-note-now.server.js";
+export { handleLogisticsPing } from "./logistics-ping.server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist-lib/lib/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/handlers/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/handlers/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist-lib/lib/handlers/index.js

@@ -3,3 +3,4 @@
 // ============================================================================
 export { handleLogisticsTick } from "./logistics-tick.server.js";
 export { handleShippingNoteNow } from "./logistics-shipping-note-now.server.js";
+export { handleLogisticsPing } from "./logistics-ping.server.js";

package/dist-lib/lib/handlers/logistics-ping.server.d.ts

@@ -0,0 +1,4 @@
+export declare function handleLogisticsPing(request: Request, opts?: {
+    moduleProject?: boolean;
+}): Promise<Response>;
+//# sourceMappingURL=logistics-ping.server.d.ts.map

package/dist-lib/lib/handlers/logistics-ping.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logistics-ping.server.d.ts","sourceRoot":"","sources":["../../../src/lib/handlers/logistics-ping.server.ts"],"names":[],"mappings":"AAiBA,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC,QAAQ,CAAC,CAiBnB"}

package/dist-lib/lib/handlers/logistics-ping.server.js

@@ -0,0 +1,28 @@
+// ============================================================================
+// src/lib/handlers/logistics-ping.server.ts — testroute "bedient de Shell mij?"
+// ============================================================================
+// /api/public/hooks/logistics-ping. Doet niets in de database. Geeft altijd een
+// eigen, herkenbaar antwoord (engine = "logistiek-engine"): 200 met geldige
+// sleutel, 401 zonder. Zo is een 404 of websitepagina altijd te onderscheiden.
+// Sleutel komt uit de omgeving (fail closed: ontbreekt hij, dan 401).
+// ============================================================================
+import { engineIdent } from "./logistics-tick.server.js";
+const CORS_HEADERS = {
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Headers": "apikey, authorization, content-type",
+    "Access-Control-Allow-Methods": "POST, GET, OPTIONS",
+};
+export async function handleLogisticsPing(request, opts) {
+    if (request.method === "OPTIONS") {
+        return new Response(null, { status: 204, headers: CORS_HEADERS });
+    }
+    const ident = engineIdent(opts);
+    const apikey = request.headers.get("apikey") ??
+        request.headers.get("authorization")?.replace(/^Bearer /i, "") ??
+        "";
+    const expected = (process.env["SUPABASE_PUBLISHABLE_KEY"] ?? process.env["SUPABASE_ANON_KEY"] ?? "").replace(/^["']|["']$/g, "");
+    if (!expected || apikey !== expected) {
+        return Response.json({ ...ident, ok: false, error: "Unauthorized" }, { status: 401, headers: CORS_HEADERS });
+    }
+    return Response.json({ ...ident, ok: true, ping: true }, { status: 200, headers: CORS_HEADERS });
+}

package/dist-lib/lib/handlers/logistics-tick.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logistics-tick.server.d.ts","sourceRoot":"","sources":["../../../src/lib/handlers/logistics-tick.server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE;;;;EAE7D;AAQD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,EACxB,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC,QAAQ,CAAC,CA4EnB;AAED,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,eAAe,CAAC"}
+{"version":3,"file":"logistics-tick.server.d.ts","sourceRoot":"","sources":["../../../src/lib/handlers/logistics-tick.server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE;;;;EAE7D;AAQD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,EACxB,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC,QAAQ,CAAC,CA6EnB;AAED,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,eAAe,CAAC"}

package/dist-lib/lib/handlers/logistics-tick.server.js

@@ -31,7 +31,8 @@ export async function handleLogisticsTick(request, supabase, opts) {
         process.env["SUPABASE_ANON_KEY"] ??
         "").replace(/^["']|["']$/g, "");
     if (!expected || apikey !== expected) {
-        return new Response(JSON.stringify({ error: "Unauthorized" }), {
+        // Eigen, herkenbare weigering: de Shell-adrescontrole telt dit als "route aanwezig".
+        return new Response(JSON.stringify({ ...ident, ok: false, error: "Unauthorized" }), {
             status: 401,
             headers: { "Content-Type": "application/json", ...CORS_HEADERS },
         });

package/dist-lib/lib/modulePrompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modulePrompts.d.ts","sourceRoot":"","sources":["../../src/lib/modulePrompts.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;CAIvB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAKhE,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAm1ID,eAAO,MAAM,cAAc,EAAE,YAAY,EAUL,CAAC;AAErC,gEAAgE;AAChE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,oBAAoB,GAC7B,MAAM,CAeR;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,IAAI,MAAM,CAiB9C;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,eAAe,EAC1B,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAIR"}
+{"version":3,"file":"modulePrompts.d.ts","sourceRoot":"","sources":["../../src/lib/modulePrompts.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;CAIvB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAKhE,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAi3ID,eAAO,MAAM,cAAc,EAAE,YAAY,EAUL,CAAC;AAErC,gEAAgE;AAChE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,oBAAoB,GAC7B,MAAM,CAeR;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,IAAI,MAAM,CAiB9C;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,eAAe,EAC1B,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAIR"}

package/dist-lib/lib/modulePrompts.js

@@ -3794,6 +3794,35 @@ CONTROLELIJST
 [ ] Onbekende actie wordt geweigerd, niet toegestaan.
 [ ] Geen URL's, sleutels, project-refs, klantnamen of vaste id's in code.`,
             },
+            {
+                number: 6,
+                title: "Bestaande voorraadsleutel ook zonder Floriday-koppeling teruggeven",
+                date: "2026-10-08",
+                withSharedContract: false,
+                summary: "ensure_trade_item_stock_row_key geeft nu NULL zonder actieve Floriday-koppeling, ook als de rij al bestaat. Geef dan de bestaande canonieke sleutel terug.",
+                body: `WAAROM
+In een shell zonder actieve Floriday-koppeling geeft
+public.ensure_trade_item_stock_row_key(p_key) altijd NULL, omdat de controle op
+de koppeling vóór het opzoeken staat. De reserveringsherberekening van de Engine
+kan dan geen enkele sleutel bepalen; zonder extra opvang zou de reservering daar
+nooit worden berekend (risico op oververkoop). De Engine vangt het nu op met een
+alleen-lezende terugval, maar de juiste plek is deze functie.
+
+WAT JE AANPAST (alleen in de Voorraad-module)
+1. Bepaal eerst de canonieke sleutel (zoals nu).
+2. Bestaat er al een rij met die sleutel, geef de sleutel terug — ook zonder
+   actieve koppeling.
+3. Alleen als er een NIEUWE rij nodig is en er geen koppeling is: NULL
+   teruggeven (geen rij aanmaken, geen terugvalwaarde verzinnen).
+Naam, parameters en returntype blijven exact gelijk.
+
+CONTROLELIJST
+[ ] Zonder koppeling: bestaande sleutel komt terug, er wordt niets ingevoegd.
+[ ] Zonder koppeling en zonder rij: NULL, geen rij.
+[ ] Met koppeling: gedrag ongewijzigd.
+[ ] Fysiek, minimum en inkomend worden nooit geraakt.
+[ ] Geen URL's, sleutels, project-refs, klantnamen of vaste id's in code of migratie.`,
+            },
         ],
     },
     klanten: {

package/dist-lib/lib/moduleVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const MODULE_VERSION = "1.0.110";
+export declare const MODULE_VERSION = "1.0.111";
 //# sourceMappingURL=moduleVersion.d.ts.map

package/dist-lib/lib/moduleVersion.js

@@ -1,2 +1,2 @@
 // Automatisch gegenereerd door prebuild:lib; niet handmatig aanpassen.
-export const MODULE_VERSION = "1.0.110";
+export const MODULE_VERSION = "1.0.111";

package/dist-lib/lib/shellAdres.d.ts

@@ -0,0 +1,15 @@
+export declare const SHELL_ADRES_STATUSSEN: readonly ["wachtend", "geslaagd", "al_actueel", "shell_adres_onbekend", "sleutel_ontbreekt", "route_ontbreekt", "oud_adres_geweigerd"];
+export type ShellAdresStatus = (typeof SHELL_ADRES_STATUSSEN)[number];
+/** Gedeelde sleutel in module_runtime_config; eigenaar: Floriday-authenticatiemodule. */
+export declare const SHELL_BASE_URL_KEY = "shell_base_url";
+export declare const LOGISTICS_PING_PATH = "/api/public/hooks/logistics-ping";
+export declare const SHELL_ADRES_TEKST: Record<ShellAdresStatus, string>;
+export declare function isShellAdresStatus(v: unknown): v is ShellAdresStatus;
+/**
+ * Telt een antwoord als "eigen antwoord of weigering van de Engine"?
+ * Zelfde regel als in logistics_base_url_checks_resolve(): status 200 of 401
+ * én JSON met engine = "logistiek-engine". 404, HTML, time-out of een ander
+ * JSON-antwoord telt niet.
+ */
+export declare function isEngineAntwoord(status: number | null | undefined, body: string | null | undefined): boolean;
+//# sourceMappingURL=shellAdres.d.ts.map

package/dist-lib/lib/shellAdres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellAdres.d.ts","sourceRoot":"","sources":["../../src/lib/shellAdres.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,qBAAqB,wIAQxB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,mBAAmB,qCAAqC,CAAC;AAEtE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAQ9D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAS5G"}

package/dist-lib/lib/shellAdres.functions.d.ts

@@ -0,0 +1,15 @@
+export declare const getShellAdresStand: import("@tanstack/start-client-core").OptionalFetcher<readonly [import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, undefined, undefined, undefined>, import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, {
+    supabase: import("../integrations/supabase/auth-middleware.js").AuthedSupabaseClient;
+    userId: string;
+    claims: import("@supabase/auth-js").User;
+}, undefined, undefined, undefined>], undefined, Promise<{
+    json: string;
+}>>;
+export declare const startShellAdresControle: import("@tanstack/start-client-core").OptionalFetcher<readonly [import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, undefined, undefined, undefined>, import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, {
+    supabase: import("../integrations/supabase/auth-middleware.js").AuthedSupabaseClient;
+    userId: string;
+    claims: import("@supabase/auth-js").User;
+}, undefined, undefined, undefined>], undefined, Promise<{
+    status: string;
+}>>;
+//# sourceMappingURL=shellAdres.functions.d.ts.map

package/dist-lib/lib/shellAdres.functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellAdres.functions.d.ts","sourceRoot":"","sources":["../../src/lib/shellAdres.functions.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,kBAAkB;;;;;UAEM,MAAM;GAKvC,CAAC;AAEL,eAAO,MAAM,uBAAuB;;;;;YAEc,MAAM;GAUpD,CAAC"}

package/dist-lib/lib/shellAdres.functions.js

@@ -0,0 +1,41 @@
+// ============================================================================
+// src/lib/shellAdres.functions.ts — knop "Shell-adres controleren" + stand
+// ============================================================================
+// Rol wordt eerst gecontroleerd als de gebruiker zelf (admin, superadmin of
+// developer); pas daarna roept de server de databasefunctie aan.
+// ============================================================================
+import { createServerFn } from "@tanstack/react-start";
+import { requireSupabaseAuth } from "../integrations/supabase/auth-middleware.js";
+import { readableServerErrors } from "./readableServerErrors.js";
+const ROLLEN = ["admin", "superadmin", "developer"];
+async function magBeheren(sb, userId) {
+    for (const rol of ROLLEN) {
+        const { data, error } = await sb.rpc("has_role", { _user_id: userId, _role: rol });
+        if (!error && data === true)
+            return true;
+    }
+    return false;
+}
+export const getShellAdresStand = createServerFn({ method: "GET" })
+    .middleware([readableServerErrors, requireSupabaseAuth])
+    .handler(async () => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server.js");
+    const { data, error } = await supabaseAdmin.rpc("logistics_base_url_check_status");
+    if (error)
+        throw new Error(error.message);
+    return { json: JSON.stringify(data ?? {}) };
+});
+export const startShellAdresControle = createServerFn({ method: "POST" })
+    .middleware([readableServerErrors, requireSupabaseAuth])
+    .handler(async ({ context }) => {
+    const { supabase, userId } = context;
+    if (!(await magBeheren(supabase, userId))) {
+        throw new Error("Alleen admin, superadmin of developer mag het Shell-adres controleren");
+    }
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server.js");
+    const { data, error } = await supabaseAdmin.rpc("logistics_tick_base_url_check");
+    if (error)
+        throw new Error(error.message);
+    const status = data?.status;
+    return { status: typeof status === "string" ? status : "onbekend" };
+});

package/dist-lib/lib/shellAdres.js

@@ -0,0 +1,50 @@
+// ============================================================================
+// src/lib/shellAdres.ts — controle van het Shell-adres voor de minuutronde
+// ============================================================================
+// Vastgelegde, toegestane waarden (gelijk aan de CHECK in de database,
+// tabel logistics_base_url_checks). Nieuwe waarde? Eerst hier én in het
+// contractdocument vastleggen, dan pas in een migratie.
+// ============================================================================
+export const SHELL_ADRES_STATUSSEN = [
+    "wachtend",
+    "geslaagd",
+    "al_actueel",
+    "shell_adres_onbekend",
+    "sleutel_ontbreekt",
+    "route_ontbreekt",
+    "oud_adres_geweigerd",
+];
+/** Gedeelde sleutel in module_runtime_config; eigenaar: Floriday-authenticatiemodule. */
+export const SHELL_BASE_URL_KEY = "shell_base_url";
+export const LOGISTICS_PING_PATH = "/api/public/hooks/logistics-ping";
+export const SHELL_ADRES_TEKST = {
+    wachtend: "Controle loopt, wacht op antwoord",
+    geslaagd: "Overgestapt naar het Shell-adres",
+    al_actueel: "Het adres wijst al naar de Shell",
+    shell_adres_onbekend: "Shell-adres onbekend",
+    sleutel_ontbreekt: "Sleutel voor de minuutronde ontbreekt (logistics_tick_apikey)",
+    route_ontbreekt: "Route ontbreekt in de Shell, module opnieuw uitbrengen en installeren",
+    oud_adres_geweigerd: "Shell-adres is een eerder gebruikt adres; niet teruggezet",
+};
+export function isShellAdresStatus(v) {
+    return typeof v === "string" && SHELL_ADRES_STATUSSEN.includes(v);
+}
+/**
+ * Telt een antwoord als "eigen antwoord of weigering van de Engine"?
+ * Zelfde regel als in logistics_base_url_checks_resolve(): status 200 of 401
+ * én JSON met engine = "logistiek-engine". 404, HTML, time-out of een ander
+ * JSON-antwoord telt niet.
+ */
+export function isEngineAntwoord(status, body) {
+    if (status !== 200 && status !== 401)
+        return false;
+    if (!body)
+        return false;
+    try {
+        const j = JSON.parse(body);
+        return !!j && typeof j === "object" && j["engine"] === "logistiek-engine";
+    }
+    catch {
+        return false;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/logistiek-engine",
-  "version": "1.0.110",
+  "version": "1.0.111",
   "flowselections": {
     "moduleId": "logistiek-engine",
     "pages": [
@@ -67,6 +67,16 @@
           "POST",
           "OPTIONS"
         ]
+      },
+      {
+        "routePath": "/api/public/hooks/logistics-ping",
+        "import": "@flowselections/logistiek-engine/hooks",
+        "handler": "handleLogisticsPing",
+        "methods": [
+          "POST",
+          "GET",
+          "OPTIONS"
+        ]
       }
     ]
   },
@@ -123,8 +133,8 @@
   "devDependencies": {
     "@cloudflare/vite-plugin": "^1.25.5",
     "@eslint/js": "^9.32.0",
-    "@flowselections/core": "1.0.28",
-    "@lovable.dev/vite-tanstack-config": "2.23.1",
+    "@flowselections/core": "1.0.29",
+    "@lovable.dev/vite-tanstack-config": "2.25.3",
     "@rsbuild/core": "^1.0.0",
     "@tailwindcss/vite": "^4.2.1",
     "@tanstack/react-query": "^5.83.0",