chore(release): 0.0.1-alpha.3

can now sub to a notification and user can remove them selfs plus an admin can remove,updates to add
new emails are good as well

.changeset/README.md

@@ -1,8 +0,0 @@
-# Changesets
-
-Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
-with multi-package repos, or single-package repos to help you version and publish your code. You can
-find the full documentation for it [in our repository](https://github.com/changesets/changesets)
-
-We have a quick list of common questions to get you started engaging with this project in
-[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/config.json

@@ -1,11 +0,0 @@
-{
-  "$schema": "https://unpkg.com/@changesets/config@3.1.2/schema.json",
-  "changelog": "@changesets/cli/changelog",
-  "commit": false,
-  "fixed": [],
-  "linked": [],
-  "access": "restricted",
-  "baseBranch": "main",
-  "updateInternalDependencies": "patch",
-  "ignore": []
-}

.dockerignore

@@ -6,4 +6,7 @@ Dockerfile
 docker-compose.yml
 npm-debug.log
 builds
-testFiles
+testFiles
+nssm.exe
+postgresql-17.9-2-windows-x64.exe
+VSCodeUserSetup-x64-1.112.0.msi

.gitea/workflows/docker-build.yml

@@ -0,0 +1,31 @@
+name: Build and Push LST Docker Image
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout (local)
+        run: |
+          git clone https://git.tuffraid.net/cowch/lst_v3.git .
+          git checkout ${{ gitea.sha }}
+
+      - name: Login to registry
+        run: echo "${{ secrets.PASSWORD }}" | docker login git.tuffraid.net -u "cowch" --password-stdin
+
+      - name: Build image
+        run: |
+          docker build \
+            -t git.tuffraid.net/cowch/lst_v3:latest \
+            -t git.tuffraid.net/cowch/lst_v3:${{ gitea.sha }} \
+            .
+
+      - name: Push
+        run: |
+          docker push git.tuffraid.net/cowch/lst_v3:latest
+          docker push git.tuffraid.net/cowch/lst_v3:${{ gitea.sha }}

.gitea/workflows/release.yml

@@ -0,0 +1,229 @@
+name: Release and Build Image
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    env:
+      # Internal/origin Gitea URL. Do NOT use the Cloudflare fronted URL here.
+      # Examples:
+      #   http://gitea.internal.lan:3000
+      #   https://gitea-origin.yourdomain.local
+      GITEA_INTERNAL_URL: "https://git.tuffraid.net"
+
+      # Internal/origin registry host. Usually same host as above, but without protocol.
+      # Example:
+      #   gitea.internal:3000
+      REGISTRY_HOST: "git.tuffraid.net"
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Prepare release metadata
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          TAG="${GITHUB_REF_NAME:-${GITHUB_REF##refs/tags/}}"
+          VERSION="${TAG#v}"
+          IMAGE_NAME="${REGISTRY_HOST}/${{ gitea.repository }}"
+
+          echo "TAG=$TAG" >> "$GITHUB_ENV"
+          echo "VERSION=$VERSION" >> "$GITHUB_ENV"
+          echo "IMAGE_NAME=$IMAGE_NAME" >> "$GITHUB_ENV"
+
+          if [[ "$TAG" == *-* ]]; then
+            echo "PRERELEASE=true" >> "$GITHUB_ENV"
+          else
+            echo "PRERELEASE=false" >> "$GITHUB_ENV"
+          fi
+
+          echo "Resolved TAG=$TAG"
+          echo "Resolved VERSION=$VERSION"
+          echo "Resolved IMAGE_NAME=$IMAGE_NAME"
+
+      - name: Log in to Gitea container registry
+        shell: bash
+        env:
+          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
+          REGISTRY_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+        run: |
+          set -euo pipefail
+          echo "$REGISTRY_TOKEN" | docker login "$REGISTRY_HOST" -u "$REGISTRY_USERNAME" --password-stdin
+
+      - name: Build Docker image
+        shell: bash
+        run: |
+          set -euo pipefail
+          docker build \
+            -t "$IMAGE_NAME:$TAG" \
+            -t "$IMAGE_NAME:latest" \
+            .
+
+      - name: Push version tag
+        shell: bash
+        run: |
+          set -euo pipefail
+          docker push "$IMAGE_NAME:$TAG"
+
+      - name: Push latest tag
+        if: ${{ !contains(env.TAG, '-') }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          docker push "$IMAGE_NAME:latest"
+
+      - name: Push prerelease channel tag
+        if: ${{ contains(env.TAG, '-') }}
+        shell: bash
+        env:
+          TAG: ${{ env.TAG }}
+        run: |
+          set -euo pipefail
+          CHANNEL="${TAG#*-}"
+          CHANNEL="${CHANNEL%%.*}"
+
+          echo "Resolved prerelease channel: $CHANNEL"
+
+          docker tag "$IMAGE_NAME:$TAG" "$IMAGE_NAME:$CHANNEL"
+          docker push "$IMAGE_NAME:$CHANNEL"
+
+      - name: Extract matching CHANGELOG section
+        shell: bash
+        env:
+          VERSION: ${{ env.VERSION }}
+        run: |
+          set -euo pipefail
+          python3 - <<'PY'
+          import os
+          import re
+          from pathlib import Path
+
+          version = os.environ["VERSION"]
+          changelog_path = Path("CHANGELOG.md")
+
+          if not changelog_path.exists():
+              Path("release_body.md").write_text(f"Release {version}\n", encoding="utf-8")
+              raise SystemExit(0)
+
+          text = changelog_path.read_text(encoding="utf-8")
+
+          # Matches headings like:
+          # ## [0.1.0]
+          # ## 0.1.0
+          # ## [0.1.0-alpha.1]
+          pattern = re.compile(
+              rf"^##\s+\[?{re.escape(version)}\]?[^\n]*\n(.*?)(?=^##\s+\[?[^\n]+|\Z)",
+              re.MULTILINE | re.DOTALL,
+          )
+
+          match = pattern.search(text)
+          if match:
+              body = match.group(1).strip()
+          else:
+              body = f"Release {version}"
+
+          if not body:
+              body = f"Release {version}"
+
+          Path("release_body.md").write_text(body + "\n", encoding="utf-8")
+          print("----- release_body.md -----")
+          print(body)
+          print("---------------------------")
+          PY
+
+      - name: Create Gitea release
+        shell: bash
+        env:
+          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          GITEA_REPOSITORY: ${{ gitea.repository }}
+          GITEA_INTERNAL_URL: ${{ env.GITEA_INTERNAL_URL }}
+          TAG: ${{ env.TAG }}
+          PRERELEASE: ${{ env.PRERELEASE }}
+        run: |
+          set -euo pipefail
+          python3 - <<'PY'
+          import json
+          import os
+          import urllib.request
+          import urllib.error
+          from pathlib import Path
+
+          tag = os.environ["TAG"]
+          prerelease = os.environ["PRERELEASE"].lower() == "true"
+          server_url = os.environ["GITEA_INTERNAL_URL"].rstrip("/")
+          repo = os.environ["GITEA_REPOSITORY"]
+          token = os.environ["RELEASE_TOKEN"]
+
+          body = Path("release_body.md").read_text(encoding="utf-8").strip()
+
+          # Check if the release already exists for this tag
+          get_url = f"{server_url}/api/v1/repos/{repo}/releases/tags/{tag}"
+          get_req = urllib.request.Request(
+              get_url,
+              method="GET",
+              headers={
+                  "Authorization": f"token {token}",
+                  "Accept": "application/json",
+                  "User-Agent": "lst-release-workflow/1.0",
+              },
+          )
+
+          existing_release = None
+          try:
+              with urllib.request.urlopen(get_req) as resp:
+                  existing_release = json.loads(resp.read().decode("utf-8"))
+          except urllib.error.HTTPError as e:
+              if e.code != 404:
+                  details = e.read().decode("utf-8", errors="replace")
+                  print("Failed checking existing release:")
+                  print(details)
+                  raise
+
+          payload = {
+              "tag_name": tag,
+              "name": tag,
+              "body": body,
+              "draft": False,
+              "prerelease": prerelease,
+          }
+
+          data = json.dumps(payload).encode("utf-8")
+
+          if existing_release:
+              release_id = existing_release["id"]
+              url = f"{server_url}/api/v1/repos/{repo}/releases/{release_id}"
+              method = "PATCH"
+              print(f"Release already exists for tag {tag}, updating release id {release_id}")
+          else:
+              url = f"{server_url}/api/v1/repos/{repo}/releases"
+              method = "POST"
+              print(f"No release exists for tag {tag}, creating a new one")
+
+          req = urllib.request.Request(
+              url,
+              data=data,
+              method=method,
+              headers={
+                  "Authorization": f"token {token}",
+                  "Content-Type": "application/json",
+                  "Accept": "application/json",
+                  "User-Agent": "lst-release-workflow/1.0",
+              },
+          )
+
+          try:
+              with urllib.request.urlopen(req) as resp:
+                  print(resp.read().decode("utf-8"))
+          except urllib.error.HTTPError as e:
+              details = e.read().decode("utf-8", errors="replace")
+              print("Release create/update failed:")
+              print(details)
+              raise
+          PY

.gitignore

@@ -4,8 +4,13 @@ builds
 .includes
 .buildNumber
 temp
+brunoApi
 .scriptCreds
 node-v24.14.0-x64.msi
+postgresql-17.9-2-windows-x64.exe
+VSCodeUserSetup-x64-1.112.0.exe
+nssm.exe
+
 # Logs
 logs
 *.log

.versionrc.json

@@ -11,7 +11,7 @@
         { "type": "ci", "hidden": false, "section": "📈 Project changes" },
         { "type": "build", "hidden": false, "section": "📈 Project Builds" }
     ],
-    "commitUrlFormat": "https://git.tuffraid.net/cowch/lst/commits/{{hash}}",
-    "compareUrlFormat": "https://git.tuffraid.net/cowch/lst/compare/{{previousTag}}...{{currentTag}}",
+    "commitUrlFormat": "https://git.tuffraid.net/cowch/lst_v3/commits/{{hash}}",
+    "compareUrlFormat": "https://git.tuffraid.net/cowch/lst_v3/compare/{{previousTag}}...{{currentTag}}",
     "header": "# All Changes to LST can be found below.\n"
 }

.vscode/settings.json

@@ -3,6 +3,8 @@
 	"workbench.colorTheme": "Default Dark+",
 	"terminal.integrated.env.windows": {},
 	"editor.formatOnSave": true,
+	  "typescript.preferences.importModuleSpecifier": "relative",
+  "javascript.preferences.importModuleSpecifier": "relative",
 	"editor.codeActionsOnSave": {
 		"source.fixAll.biome": "explicit",
 		"source.organizeImports.biome": "explicit"
@@ -52,8 +54,10 @@
 		"alpla",
 		"alplamart",
 		"alplaprod",
+		"alplapurchase",
 		"bookin",
 		"Datamart",
+		"dotenvx",
 		"dyco",
 		"intiallally",
 		"manadatory",
@@ -65,6 +69,7 @@
 		"preseed",
 		"prodlabels",
 		"prolink",
+		"Skelly",
 		"trycatch"
 	],
 	"gitea.token": "8456def90e1c651a761a8711763d6ef225d6b2db",

CHANGELOG.md

@@ -1,7 +1,90 @@
-# lst_v3
+# All Changes to LST can be found below.
 
-## 1.0.1
+## [0.0.1-alpha.3](https://git.tuffraid.net/cowch/lst_v3/compare/v0.0.1-alpha.2...v0.0.1-alpha.3) (2026-04-10)
 
-### Patch Changes
 
-- cf18e94: core stuff
+### 🌟 Enhancements
+
+* **puchase hist:** finished up purhcase historical / gp updates ([a691dc2](https://git.tuffraid.net/cowch/lst_v3/commits/a691dc276e8650c669409241f73d7b2d7a1f9176))
+
+
+### 🛠️ Code Refactor
+
+* **gp connect:** gp connect as was added to long live services ([635635b](https://git.tuffraid.net/cowch/lst_v3/commits/635635b356e1262e1c0b063408fe2209e6a8d4ec))
+* **reprints:** changes the module and submodule around to be more accurate ([97f93a1](https://git.tuffraid.net/cowch/lst_v3/commits/97f93a1830761437118863372108df810ce9977a))
+* **send email:** changes the error message to show the true message in the error ([995b1dd](https://git.tuffraid.net/cowch/lst_v3/commits/995b1dda7cdfebf4367d301ccac38fd339fab6dd))
+
+## [0.0.1-alpha.2](https://git.tuffraid.net/cowch/lst_v3/compare/v0.0.1-alpha.1...v0.0.1-alpha.2) (2026-04-08)
+
+
+### 📈 Project Builds
+
+* **release:** docker and release corrections ([103ae77](https://git.tuffraid.net/cowch/lst_v3/commits/103ae77e9f82fc008a8ae143b6feccc3ce802f8c))
+
+## [0.0.1-alpha.1](https://git.tuffraid.net/cowch/lst_v3/compare/v0.0.1-alpha.0...v0.0.1-alpha.1) (2026-04-08)
+
+
+* **notifcaion:** style changes to the notificaion card and started the table ([7d6c2db](https://git.tuffraid.net/cowch/lst_v3/commits/7d6c2db89cae1f137f126f5814dccd373f7ccb76))
+
+
+### 🌟 Enhancements
+
+* **notification:** base notifcaiton sub and admin compelted ([5865ac3](https://git.tuffraid.net/cowch/lst_v3/commits/5865ac3b99d60005c4245740369b0e0789c8fbbd))
+* **notification:** reprint added ([a17787e](https://git.tuffraid.net/cowch/lst_v3/commits/a17787e85217f1fa4a5e5389e29c33ec09c286c5))
+* **puchase history:** purhcase history changed to long running no notification ([34b0aba](https://git.tuffraid.net/cowch/lst_v3/commits/34b0abac36f645d0fe5f508881ddbef81ff04b7c))
+* **purchase:** historical data capture for alpla purchase ([42861cc](https://git.tuffraid.net/cowch/lst_v3/commits/42861cc69e8d4aba5a9670aaed55417efda2b505))
+* **user notifications:** added the ability for users to sub to notifications and add multi email ([637de85](https://git.tuffraid.net/cowch/lst_v3/commits/637de857f99499a41f7175181523f5d809d95d7e))
+
+
+### 🐛 Bug fixes
+
+* **build:** issue with how i wrote the release token ([fe889ca](https://git.tuffraid.net/cowch/lst_v3/commits/fe889ca75731af08c42ec714b7f2abf17cd1ee40))
+* **build:** type in how we pushed the header over ([83a94ca](https://git.tuffraid.net/cowch/lst_v3/commits/83a94cacf3fc87287cdc0c0cc861b339e72e4b83))
+* **build:** typo ([860207a](https://git.tuffraid.net/cowch/lst_v3/commits/860207a60b6e04b15736cba631be6c7eab74d020))
+* **i suck:** more learning experance ([9ceba8b](https://git.tuffraid.net/cowch/lst_v3/commits/9ceba8b5bba17959f27b16b28f50a83c044863fb))
+* **lala:** something here ([17aed6c](https://git.tuffraid.net/cowch/lst_v3/commits/17aed6cb89f8220570f6c66f78dba6bb202c1aaa))
+* **release:** typo that caused errors ([76747cf](https://git.tuffraid.net/cowch/lst_v3/commits/76747cf91738bd0d0530afcf7b4f51f0db11ca98))
+* **typo:** more dam typos ([079478f](https://git.tuffraid.net/cowch/lst_v3/commits/079478f93217dea31c9a1e8ffed85d2381a6977d))
+* **wrelease:** forgot to save ([3775760](https://git.tuffraid.net/cowch/lst_v3/commits/377576073449e95d315defb913dc317759cc3f43))
+
+
+### 📝 Chore
+
+* **release:** 0.1.0-alpha.10 ([98e408c](https://git.tuffraid.net/cowch/lst_v3/commits/98e408cb8577da18e24821b55474198439434f3e))
+* **release:** 0.1.0-alpha.11 ([d6d5b45](https://git.tuffraid.net/cowch/lst_v3/commits/d6d5b451cd9aeba642ef94654ca20f4acd0b827c))
+* **release:** 0.1.0-alpha.12 ([1ad789b](https://git.tuffraid.net/cowch/lst_v3/commits/1ad789b2b91a20a2f5a8dc9e6f39af2e19ec9cdc))
+* **release:** 0.1.0-alpha.9 ([8f59bba](https://git.tuffraid.net/cowch/lst_v3/commits/8f59bba614a8eaa3105bb56f0db36013d5e68485))
+* **release:** version packages ([fb2c560](https://git.tuffraid.net/cowch/lst_v3/commits/fb2c5609aa12ea7823783c364d5bd029c48a64bd))
+* **release:** version packages ([b02b93b](https://git.tuffraid.net/cowch/lst_v3/commits/b02b93b83f488fbcee6d24db080ad0d1fe1c5f59))
+* **release:** version packages ([2c0dbf9](https://git.tuffraid.net/cowch/lst_v3/commits/2c0dbf95c7b8dfd2c98b476d3f44bc8929668c88))
+* **release:** version packages ([5c64600](https://git.tuffraid.net/cowch/lst_v3/commits/5c6460012aa70d336fbc9702240b4f19262a6b41))
+* **release:** version packages ([0ce3790](https://git.tuffraid.net/cowch/lst_v3/commits/0ce3790675bc408762eafe76cbd5ab496fd06e73))
+* **release:** version packages ([4caaf74](https://git.tuffraid.net/cowch/lst_v3/commits/4caaf745693d4df847aefd3721ac5d0ae792114a))
+* **release:** version packages ([699c124](https://git.tuffraid.net/cowch/lst_v3/commits/699c124b0efba8282e436210619504bda8878e90))
+* **release:** version packages ([c4fd74f](https://git.tuffraid.net/cowch/lst_v3/commits/c4fd74fc93226cffd9e39602f507a05cd8ea628b))
+
+
+### 📚 Documentation
+
+* **readme:** updated progress data ([92ba3ef](https://git.tuffraid.net/cowch/lst_v3/commits/92ba3ef5121afd0d82d4f40a5a985e1fdc081011))
+* **sop:** added more info ([be1d408](https://git.tuffraid.net/cowch/lst_v3/commits/be1d4081e07b0982b355a270b7850a852a4398f5))
+
+
+### 🛠️ Code Refactor
+
+* **build:** added in more info to the relase section ([5854889](https://git.tuffraid.net/cowch/lst_v3/commits/5854889eb5398feebda50a5d256ce7aec39ce112))
+* **build:** changes to auto release when we cahnge version ([643d12f](https://git.tuffraid.net/cowch/lst_v3/commits/643d12ff182827e724e1569a583bd625a0d1dd0c))
+* **build:** changes to the way we do release so it builds as well ([7d55c5f](https://git.tuffraid.net/cowch/lst_v3/commits/7d55c5f43173edb48d8709adcb972b7d8fbc3ebd))
+* **changelog:** reverted back to commit-chagnelog, like more than changeset for solo dev ([ed052df](https://git.tuffraid.net/cowch/lst_v3/commits/ed052dff3c81a7064660a7d25685e0505065252c))
+* **notification:** reprint - removed a console log as it shouldnt bc there ([5f3d683](https://git.tuffraid.net/cowch/lst_v3/commits/5f3d683a13c831229674166cced699e373131316))
+* **notification:** select menu looks propper now ([74262be](https://git.tuffraid.net/cowch/lst_v3/commits/74262beb6596ddc971971cc9214a2688accf3a8e))
+* **opendock refactor on how releases are posted:** this was a bug maybe just a better refactory ([0880298](https://git.tuffraid.net/cowch/lst_v3/commits/0880298cf53d83e487c706e73854e0874ae2d9da))
+* **queries:** changed dev version to be 1500ms vs 5000ms ([f3b8dd9](https://git.tuffraid.net/cowch/lst_v3/commits/f3b8dd94e5ebae0cc4dd0a2689a19051942e94b8))
+* **release:** changes to only have the changelog in the release ([6e85991](https://git.tuffraid.net/cowch/lst_v3/commits/6e8599106298ed13febd069d6fda8b354efb5b7b))
+* **userprofile:** changes to have the table be blank and say nothing subscribed ([3ecf5fb](https://git.tuffraid.net/cowch/lst_v3/commits/3ecf5fb916d5dc1b1ffb224e2142d94f7a9cb126))
+
+
+### 📈 Project Builds
+
+* **agent:** added westbend into the flow ([28c226d](https://git.tuffraid.net/cowch/lst_v3/commits/28c226ddbc37ab85cd6a9a6aec091def3e5623d6))
+* **changelog:** reset the change log after all crap testing ([0059b9b](https://git.tuffraid.net/cowch/lst_v3/commits/0059b9b850c9647695a3fecaf5927c2e3ee7b192))

Dockerfile

@@ -9,10 +9,13 @@ WORKDIR /app
 # Copy package files
 COPY . .
 
-# Install production dependencies only
+# build backend
 RUN npm ci
+RUN npm run build:docker
 
-RUN npm run build
+# build frontend
+RUN npm --prefix frontend ci
+RUN npm --prefix frontend run build
 
 ###########
 # Stage 2 #
@@ -33,6 +36,9 @@ RUN npm ci --omit=dev
 
 
 COPY --from=build /app/dist ./dist
+COPY --from=build /app/frontend/dist ./frontend/dist
+
+# TODO add in drizzle migrates
 
 ENV RUNNING_IN_DOCKER=true
 EXPOSE 3000

README.md

@@ -7,7 +7,7 @@
 Quick summary of current rewrite/migration goal.
 
 - **Phase:** Backend rewrite
-- **Last updated:** 2024-05-01
+- **Last updated:** 2026-04-06
 
 ---
 
@@ -16,9 +16,9 @@ Quick summary of current rewrite/migration goal.
 | Feature | Description | Status |
 |----------|--------------|--------|
 | User Authentication | ~~Login~~, ~~Signup~~, API Key | 🟨 In Progress |
-| User Profile | Edit profile, upload avatar | ⏳ Not Started |
+| User Profile | ~~Edit profile~~, upload avatar | 🟨 In Progress |
 | User Admin | Edit user, create user, remove user, alplaprod user integration | ⏳ Not Started |
-| Notifications | Subscribe, Create, Update, Remove, Manual Trigger | ⏳ Not Started |
+| Notifications | ~~Subscribe~~, ~~Create~~, ~~Update~~, ~~~~Remove~~, Manual Trigger | 🟨 In Progress |
 | Datamart | Create, Update, Run, Deactivate | 🔧 In Progress |
 | Frontend | Analytics and charts | ⏳ Not Started |
 | Docs | Instructions and trouble shooting | ⏳ Not Started |
@@ -44,7 +44,7 @@ _Status legend:_
 How to run the current version of the app.
 
 ```bash
-git clone https://github.com/youruser/yourrepo.git
-cd yourrepo
+git clone https://git.tuffraid.net/cowch/lst_v3.git
+cd lst_v3
 npm install
 npm run dev

backend/app.ts

@@ -26,7 +26,7 @@ const createApp = async () => {
 	const __dirname = dirname(__filename);
 
 	// well leave this active so we can monitor it to validate
-	app.use(morgan("tiny"));
+	app.use(morgan("dev"));
 	app.set("trust proxy", true);
 	app.use(lstCors());
 	app.all(`${baseUrl}/api/auth/*splat`, toNodeHandler(auth));
@@ -34,11 +34,11 @@ const createApp = async () => {
 	setupRoutes(baseUrl, app);
 
 	app.use(
-		baseUrl + "/app",
+		`${baseUrl}/app`,
 		express.static(join(__dirname, "../frontend/dist")),
 	);
 
-	app.get(baseUrl + "/app/*splat", (_, res) => {
+	app.get(`${baseUrl}/app/*splat`, (_, res) => {
 		res.sendFile(join(__dirname, "../frontend/dist/index.html"));
 	});
 

backend/configs/gpSql.config.ts

@@ -0,0 +1,23 @@
+import type sql from "mssql";
+
+const username = "gpviewer";
+const password = "gp$$ViewOnly!";
+
+export const gpSqlConfig: sql.config = {
+	server: `USMCD1VMS011`,
+	database: `ALPLA`,
+	user: username,
+	password: password,
+	options: {
+		encrypt: true,
+		trustServerCertificate: true,
+	},
+	requestTimeout: 90000, // how long until we kill the query and fail it
+	pool: {
+		max: 20, // Maximum number of connections in the pool
+		min: 0, // Minimum number of connections in the pool
+		idleTimeoutMillis: 10000, // How long a connection is allowed to be idle before being released
+		reapIntervalMillis: 1000, // how often to check for idle resources to destroy
+		acquireTimeoutMillis: 100000, // How long until a complete timeout happens
+	},
+};

backend/db/schema/alplapurchase.schema.ts

@@ -0,0 +1,39 @@
+import {
+	integer,
+	jsonb,
+	pgTable,
+	text,
+	timestamp,
+	uuid,
+} from "drizzle-orm/pg-core";
+import { createInsertSchema, createSelectSchema } from "drizzle-zod";
+import type { z } from "zod";
+
+export const alplaPurchaseHistory = pgTable("alpla_purchase_history", {
+	id: uuid("id").defaultRandom().primaryKey(),
+	apo: integer("apo"),
+	revision: integer("revision"),
+	confirmed: integer("confirmed"),
+	status: integer("status"),
+	statusText: text("status_text"),
+	journalNum: integer("journal_num"),
+	add_date: timestamp("add_date").defaultNow(),
+	add_user: text("add_user"),
+	upd_user: text("upd_user"),
+	upd_date: timestamp("upd_date").defaultNow(),
+	remark: text("remark"),
+	approvedStatus: text("approved_status").default("new"),
+	position: jsonb("position").default([]),
+	createdAt: timestamp("created_at").defaultNow(),
+	updatedAt: timestamp("updated_at").defaultNow(),
+});
+
+export const alplaPurchaseHistorySchema =
+	createSelectSchema(alplaPurchaseHistory);
+export const newAlplaPurchaseHistorySchema =
+	createInsertSchema(alplaPurchaseHistory);
+
+export type AlplaPurchaseHistory = z.infer<typeof alplaPurchaseHistorySchema>;
+export type NewAlplaPurchaseHistory = z.infer<
+	typeof newAlplaPurchaseHistorySchema
+>;

backend/db/schema/notifications.schema.ts

@@ -0,0 +1,29 @@
+import {
+	boolean,
+	jsonb,
+	pgTable,
+	text,
+	uniqueIndex,
+	uuid,
+} from "drizzle-orm/pg-core";
+import { createInsertSchema, createSelectSchema } from "drizzle-zod";
+import type z from "zod";
+
+export const notifications = pgTable(
+	"notifications",
+	{
+		id: uuid("id").defaultRandom().primaryKey(),
+		name: text("name").notNull(),
+		description: text("description").notNull(),
+		active: boolean("active").default(false),
+		interval: text("interval").default("5"),
+		options: jsonb("options").default([]),
+	},
+	(table) => [uniqueIndex("notify_name").on(table.name)],
+);
+
+export const notificationSchema = createSelectSchema(notifications);
+export const newNotificationSchema = createInsertSchema(notifications);
+
+export type Notification = z.infer<typeof notificationSchema>;
+export type NewNotification = z.infer<typeof newNotificationSchema>;

backend/db/schema/notifications.sub.schema.ts

@@ -0,0 +1,30 @@
+import { pgTable, text, unique, uuid } from "drizzle-orm/pg-core";
+import { createInsertSchema, createSelectSchema } from "drizzle-zod";
+import type z from "zod";
+import { user } from "./auth.schema.js";
+import { notifications } from "./notifications.schema.js";
+
+export const notificationSub = pgTable(
+	"notification_sub",
+	{
+		id: uuid("id").defaultRandom().primaryKey(),
+		userId: text("user_id")
+			.notNull()
+			.references(() => user.id, { onDelete: "cascade" }),
+		notificationId: uuid("notification_id")
+			.notNull()
+			.references(() => notifications.id, { onDelete: "cascade" }),
+		emails: text("emails").array().default([]),
+	},
+	(table) => ({
+		userNotificationUnique: unique(
+			"notification_sub_user_notification_unique",
+		).on(table.userId, table.notificationId),
+	}),
+);
+
+export const notificationSubSchema = createSelectSchema(notificationSub);
+export const newNotificationSubSchema = createInsertSchema(notificationSub);
+
+export type NotificationSub = z.infer<typeof notificationSubSchema>;
+export type NewNotificationSub = z.infer<typeof newNotificationSubSchema>;

backend/db/schema/opendock.schema.ts

@@ -1,4 +1,5 @@
 import {
+	index,
 	integer,
 	jsonb,
 	pgTable,
@@ -9,14 +10,23 @@ import {
 import { createInsertSchema, createSelectSchema } from "drizzle-zod";
 import type { z } from "zod";
 
-export const opendockApt = pgTable("opendock_apt", {
-	id: uuid("id").defaultRandom().primaryKey(),
-	release: integer("release").unique(),
-	openDockAptId: text("open_dock_apt_id").notNull(),
-	appointment: jsonb("appointment").default([]),
-	upd_date: timestamp("upd_date").defaultNow(),
-	createdAt: timestamp("created_at").defaultNow(),
-});
+export const opendockApt = pgTable(
+	"opendock_apt",
+	{
+		id: uuid("id").defaultRandom().primaryKey(),
+		release: integer("release").notNull().unique(),
+		openDockAptId: text("open_dock_apt_id").notNull(),
+		appointment: jsonb("appointment").notNull().default([]),
+		upd_date: timestamp("upd_date").notNull().defaultNow(),
+		createdAt: timestamp("created_at").notNull().defaultNow(),
+	},
+	(table) => ({
+		releaseIdx: index("opendock_apt_release_idx").on(table.release),
+		openDockAptIdIdx: index("opendock_apt_opendock_id_idx").on(
+			table.openDockAptId,
+		),
+	}),
+);
 
 export const opendockAptSchema = createSelectSchema(opendockApt);
 export const newOpendockAptSchema = createInsertSchema(opendockApt);

backend/db/schema/printerLogs.schema.ts

@@ -0,0 +1,6 @@
+import { integer, pgTable, text } from "drizzle-orm/pg-core";
+
+export const opendockApt = pgTable("printer_log", {
+	id: integer().primaryKey().generatedAlwaysAsIdentity(),
+	name: text("name").notNull(),
+});

backend/gpSql/gpSql.routes.ts

@@ -0,0 +1,17 @@
+import { type Express, Router } from "express";
+import { requireAuth } from "../middleware/auth.middleware.js";
+import restart from "./gpSqlRestart.route.js";
+import start from "./gpSqlStart.route.js";
+import stop from "./gpSqlStop.route.js";
+export const setupGPSqlRoutes = (baseUrl: string, app: Express) => {
+	//setup all the routes
+	// Apply auth to entire router
+	const router = Router();
+	router.use(requireAuth);
+
+	router.use(start);
+	router.use(stop);
+	router.use(restart);
+
+	app.use(`${baseUrl}/api/system/gpSql`, router);
+};

backend/gpSql/gpSqlConnection.controller.ts

@@ -0,0 +1,155 @@
+import sql from "mssql";
+import { gpSqlConfig } from "../configs/gpSql.config.js";
+import { createLogger } from "../logger/logger.controller.js";
+import { checkHostnamePort } from "../utils/checkHost.utils.js";
+import { returnFunc } from "../utils/returnHelper.utils.js";
+
+export let pool2: sql.ConnectionPool;
+export let connected: boolean = false;
+export let reconnecting = false;
+
+export const connectGPSql = async () => {
+	const serverUp = await checkHostnamePort(`USMCD1VMS011:1433`);
+	if (!serverUp) {
+		// we will try to reconnect
+		connected = false;
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "system",
+			subModule: "db",
+			message: "GP server is offline or unreachable.",
+		});
+	}
+
+	// if we are trying to click restart from the api for some reason we want to kick back and say no
+	if (connected) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "system",
+			subModule: "db",
+			message: "The Sql server is already connected.",
+		});
+	}
+
+	// try to connect to the sql server
+	try {
+		pool2 = new sql.ConnectionPool(gpSqlConfig);
+		await pool2.connect();
+		connected = true;
+		return returnFunc({
+			success: true,
+			level: "info",
+			module: "system",
+			subModule: "db",
+			message: `${gpSqlConfig.server} is connected to ${gpSqlConfig.database}`,
+			data: [],
+			notify: false,
+		});
+	} catch (error) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "system",
+			subModule: "db",
+			message: "Failed to connect to the prod sql server.",
+			data: [error],
+			notify: false,
+		});
+	}
+};
+
+export const closePool = async () => {
+	if (!connected) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "system",
+			subModule: "db",
+			message: "There is no connection to the prod server currently.",
+		});
+	}
+
+	try {
+		await pool2.close();
+		connected = false;
+		return returnFunc({
+			success: true,
+			level: "info",
+			module: "system",
+			subModule: "db",
+			message: "The sql connection has been closed.",
+		});
+	} catch (error) {
+		connected = false;
+
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "system",
+			subModule: "db",
+			message: "There was an error closing the sql connection",
+			data: [error],
+		});
+	}
+};
+export const reconnectToSql = async () => {
+	const log = createLogger({
+		module: "system",
+		subModule: "db",
+	});
+	if (reconnecting) return;
+
+	//set reconnecting to true while we try to reconnect
+	reconnecting = true;
+
+	// start the delay out as 2 seconds
+	let delayStart = 2000;
+	let attempt = 0;
+	const maxAttempts = 10;
+
+	while (!connected && attempt < maxAttempts) {
+		attempt++;
+		log.info(
+			`Reconnect attempt ${attempt}/${maxAttempts} in ${delayStart / 1000}s ...`,
+		);
+
+		await new Promise((res) => setTimeout(res, delayStart));
+
+		const serverUp = await checkHostnamePort(`${process.env.PROD_SERVER}:1433`);
+
+		if (!serverUp) {
+			delayStart = Math.min(delayStart * 2, 30000); // exponential backoff until up to 30000
+			return;
+		}
+
+		try {
+			pool2 = await sql.connect(gpSqlConfig);
+			reconnecting = false;
+			connected = true;
+			log.info(`${gpSqlConfig.server} is connected to ${gpSqlConfig.database}`);
+		} catch (error) {
+			delayStart = Math.min(delayStart * 2, 30000);
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "system",
+				subModule: "db",
+				message: "Failed to reconnect to the prod sql server.",
+				data: [error],
+				notify: false,
+			});
+		}
+	}
+
+	if (!connected) {
+		log.error(
+			{ notify: true },
+			"Max reconnect attempts reached on the prodSql server. Stopping retries.",
+		);
+
+		reconnecting = false;
+		// TODO: exit alert someone here
+	}
+};

backend/gpSql/gpSqlQuery.controller.ts

@@ -0,0 +1,97 @@
+import { returnFunc } from "../utils/returnHelper.utils.js";
+import {
+	connected,
+	pool2,
+	reconnecting,
+	reconnectToSql,
+} from "./gpSqlConnection.controller.js";
+
+interface SqlError extends Error {
+	code?: string;
+	originalError?: {
+		info?: { message?: string };
+	};
+}
+
+/**
+ * Run a prod query
+ * just pass over the query as a string and the name of the query.
+ * Query should be like below.
+ *  * select * from AlplaPROD_test1.dbo.table
+ * You must use test1 always as it will be changed via query
+ */
+export const gpQuery = async (queryToRun: string, name: string) => {
+	if (!connected) {
+		reconnectToSql();
+
+		if (reconnecting) {
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "system",
+				subModule: "gpSql",
+				message: `The sql ${process.env.PROD_PLANT_TOKEN} is trying to reconnect already`,
+				data: [],
+				notify: false,
+			});
+		} else {
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "system",
+				subModule: "gpSql",
+				message: `${process.env.PROD_PLANT_TOKEN} is not connected, and failed to connect.`,
+				data: [],
+				notify: true,
+			});
+		}
+	}
+
+	//change to the correct server
+	const query = queryToRun.replaceAll(
+		"test1",
+		`${process.env.PROD_PLANT_TOKEN}`,
+	);
+
+	try {
+		const result = await pool2.request().query(query);
+		return {
+			success: true,
+			message: `Query results for: ${name}`,
+			data: result.recordset ?? [],
+		};
+	} catch (error: unknown) {
+		const err = error as SqlError;
+		if (err.code === "ETIMEOUT") {
+			return returnFunc({
+				success: false,
+				module: "system",
+				subModule: "gpSql",
+				level: "error",
+				message: `${name} did not run due to a timeout.`,
+				notify: false,
+				data: [],
+			});
+		}
+
+		if (err.code === "EREQUEST") {
+			return returnFunc({
+				success: false,
+				module: "system",
+				subModule: "gpSql",
+				level: "error",
+				message: `${name} encountered an error ${err.originalError?.info?.message || "undefined error"}`,
+				data: [],
+			});
+		}
+
+		return returnFunc({
+			success: false,
+			module: "system",
+			subModule: "gpSql",
+			level: "error",
+			message: `${name} encountered an unknown error.`,
+			data: [],
+		});
+	}
+};

backend/gpSql/gpSqlQuerySelector.utils.ts

@@ -0,0 +1,29 @@
+import { readFileSync } from "node:fs";
+
+export type SqlGPQuery = {
+	query: string;
+	success: boolean;
+	message: string;
+};
+
+export const sqlGpQuerySelector = (name: string) => {
+	try {
+		const queryFile = readFileSync(
+			new URL(`../gpSql/queries/${name}.sql`, import.meta.url),
+			"utf8",
+		);
+
+		return {
+			success: true,
+			message: `Query for: ${name}`,
+			query: queryFile,
+		};
+	} catch (e) {
+		console.error(e);
+		return {
+			success: false,
+			message:
+				"Error getting the query file, please make sure you have the correct name.",
+		};
+	}
+};

backend/gpSql/gpSqlRestart.route.ts

@@ -0,0 +1,23 @@
+import { Router } from "express";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { closePool, connectGPSql } from "./gpSqlConnection.controller.js";
+
+const r = Router();
+
+r.post("/restart", async (_, res) => {
+	await closePool();
+
+	await new Promise((r) => setTimeout(r, 2000));
+
+	const connect = await connectGPSql();
+	apiReturn(res, {
+		success: connect.success,
+		level: connect.success ? "info" : "error",
+		module: "routes",
+		subModule: "prodSql",
+		message: "Sql Server has been restarted",
+		data: connect.data,
+		status: connect.success ? 200 : 400,
+	});
+});
+export default r;

backend/gpSql/gpSqlStart.route.ts

@@ -0,0 +1,20 @@
+import { Router } from "express";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { connectGPSql } from "./gpSqlConnection.controller.js";
+
+const r = Router();
+
+r.post("/start", async (_, res) => {
+	const connect = await connectGPSql();
+	apiReturn(res, {
+		success: connect.success,
+		level: connect.success ? "info" : "error",
+		module: "routes",
+		subModule: "prodSql",
+		message: connect.message,
+		data: connect.data,
+		status: connect.success ? 200 : 400,
+	});
+});
+
+export default r;

backend/gpSql/gpSqlStop.route.ts

@@ -0,0 +1,20 @@
+import { Router } from "express";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { closePool } from "./gpSqlConnection.controller.js";
+
+const r = Router();
+
+r.post("/stop", async (_, res) => {
+	const connect = await closePool();
+	apiReturn(res, {
+		success: connect.success,
+		level: connect.success ? "info" : "error",
+		module: "routes",
+		subModule: "prodSql",
+		message: connect.message,
+		data: connect.data,
+		status: connect.success ? 200 : 400,
+	});
+});
+
+export default r;

backend/gpSql/queries/reqCheck.sql

@@ -0,0 +1,39 @@
+USE [ALPLA]
+
+SELECT Distinct r.[POPRequisitionNumber] as req, 
+r.[ApprovalStatus] as approvalStatus,
+r.[Requested By] requestedBy,
+format(t.[Created Date], 'yyyy-MM-dd') as  createdAt,
+format(r.[Requisition Date], 'MM/dd/yyyy') as expectedDate,
+r.[Requisition Amount] as glAccount,
+case when r.[Account Segment 2] is null or r.[Account Segment 2] = '' then '999' else cast(r.[Account Segment 2] as varchar) end as plant
+,t.Status as status
+,t.[Document Status] as docStatus
+,t.[Workflow Status] as reqState
+,CASE 
+    WHEN [Workflow Status] = 'Completed' 
+        THEN 'Pending APO convertion'
+    WHEN [Workflow Status] = 'Pending User Action' 
+         AND r.[ApprovalStatus] = 'Pending Approval' 
+        THEN 'Pending plant approver'
+   WHEN [Workflow Status] = '' 
+         AND r.[ApprovalStatus] = 'Not Submitted' 
+        THEN 'Req not submited'
+    ELSE 'Unknown reason' 
+END AS approvedStatus
+
+FROM [dbo].[PORequisitions] r  (nolock)
+
+
+
+left join 
+[dbo].[PurchaseRequisitions] as t (nolock) on
+t.[Requisition Number] = r.[POPRequisitionNumber]
+
+
+--where ApprovalStatus = 'Pending Approval'
+--and [Account Segment 2] = 80
+
+where r.POPRequisitionNumber in ([reqsToCheck])
+
+Order By r.POPRequisitionNumber

backend/middleware/auth.requiredPerms.middleware.ts

@@ -0,0 +1,52 @@
+import type { NextFunction, Request, Response } from "express";
+import { auth } from "../utils/auth.utils.js";
+
+type PermissionMap = Record<string, string[]>;
+
+declare global {
+	namespace Express {
+		interface Request {
+			authz?: {
+				success: boolean;
+				permissions: PermissionMap;
+			};
+		}
+	}
+}
+
+function normalizeRoles(roles: unknown): string {
+	if (Array.isArray(roles)) return roles.join(",");
+	if (typeof roles === "string") return roles;
+	return "";
+}
+
+export function requirePermission(permissions: PermissionMap) {
+	return async (req: Request, res: Response, next: NextFunction) => {
+		try {
+			const role = normalizeRoles(req.user?.roles) as any;
+
+			const result = await auth.api.userHasPermission({
+				body: {
+					role,
+					permissions,
+				},
+			});
+
+			req.authz = {
+				success: !!result?.success,
+				permissions,
+			};
+
+			if (!result?.success) {
+				return res.status(403).json({
+					ok: false,
+					message: "You do not have permission to perform this action.",
+				});
+			}
+
+			next();
+		} catch (error) {
+			next(error);
+		}
+	};
+}

backend/notification/notification.alplapurchase.ts

@@ -0,0 +1,113 @@
+import { eq } from "drizzle-orm";
+import { db } from "../db/db.controller.js";
+import { notifications } from "../db/schema/notifications.schema.js";
+import { prodQuery } from "../prodSql/prodSqlQuery.controller.js";
+import {
+	type SqlQuery,
+	sqlQuerySelector,
+} from "../prodSql/prodSqlQuerySelector.utils.js";
+import { returnFunc } from "../utils/returnHelper.utils.js";
+import { sendEmail } from "../utils/sendEmail.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+/**
+ *
+ */
+const func = async (data: any, emails: string) => {
+	// get the actual notification as items will be updated between intervals if no one touches
+	const { data: l, error: le } = (await tryCatch(
+		db.select().from(notifications).where(eq(notifications.id, data.id)),
+	)) as any;
+
+	if (le) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "query",
+			message: `${data.name} encountered an error while trying to get initial info`,
+			data: [le],
+			notify: true,
+		});
+	}
+
+	// search the query db for the query by name
+	const sqlQuery = sqlQuerySelector(`${data.name}`) as SqlQuery;
+	// create the ignore audit logs ids
+	const ignoreIds = l[0].options[0]?.auditId
+		? `${l[0].options[0]?.auditId}`
+		: "0";
+
+	// run the check
+	const { data: queryRun, error } = await tryCatch(
+		prodQuery(
+			sqlQuery.query
+				.replace("[intervalCheck]", l[0].interval)
+				.replace("[ignoreList]", ignoreIds),
+			`Running notification query: ${l[0].name}`,
+		),
+	);
+
+	if (error) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "query",
+			message: `Data for: ${l[0].name} encountered an error while trying to get it`,
+			data: [error],
+			notify: true,
+		});
+	}
+
+	if (queryRun.data.length > 0) {
+		// update the latest audit id
+		const { error: dbe } = await tryCatch(
+			db
+				.update(notifications)
+				.set({ options: [{ auditId: `${queryRun.data[0].id}` }] })
+				.where(eq(notifications.id, data.id)),
+		);
+
+		if (dbe) {
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "query",
+				message: `Data for: ${l[0].name} encountered an error while trying to get it`,
+				data: [dbe],
+				notify: true,
+			});
+		}
+
+		// send the email
+
+		const sentEmail = await sendEmail({
+			email: emails,
+			subject: "Alert! Label Reprinted",
+			template: "reprintLabels",
+			context: {
+				items: queryRun.data,
+			},
+		});
+
+		if (!sentEmail?.success) {
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "email",
+				subModule: "notification",
+				message: `${l[0].name} failed to send the email`,
+				data: [sentEmail],
+				notify: true,
+			});
+		}
+	} else {
+		console.log("doing nothing as there is nothing to do.");
+	}
+	// TODO send the error to systemAdmin users so they do not always need to be on the notifications.
+	// these errors are defined per notification.
+};
+
+export default func;

backend/notification/notification.controller.ts

@@ -0,0 +1,153 @@
+import { eq } from "drizzle-orm";
+import { db } from "../db/db.controller.js";
+import { notifications } from "../db/schema/notifications.schema.js";
+import { notificationSub } from "../db/schema/notifications.sub.schema.js";
+import { createLogger } from "../logger/logger.controller.js";
+import { minutesToCron } from "../utils/croner.minConvert.js";
+import { createCronJob, stopCronJob } from "../utils/croner.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+const log = createLogger({ module: "notifications", subModule: "start" });
+
+export const startNotifications = async () => {
+	// get active notification
+
+	const { data, error } = await tryCatch(
+		db.select().from(notifications).where(eq(notifications.active, true)),
+	);
+
+	if (error) {
+		log.error(
+			{ error: error },
+			"There was an error when getting notifications.",
+		);
+		return;
+	}
+
+	if (data) {
+		if (data.length === 0) {
+			log.info(
+				{},
+				"There are know currently active notifications to start up.",
+			);
+			return;
+		}
+
+		// get the subs and see if we have any subs currently so we can fire up the notification
+		const { data: sub, error: subError } = await tryCatch(
+			db.select().from(notificationSub),
+		);
+
+		if (subError) {
+			log.error(
+				{ error: error },
+				"There was an error when getting subscriptions.",
+			);
+			return;
+		}
+
+		if (sub.length === 0) {
+			log.info({}, "There are know currently active subscriptions.");
+			return;
+		}
+
+		const emailString = [
+			...new Set(
+				sub.flatMap((e) =>
+					e.emails?.map((email) => email.trim().toLowerCase()),
+				),
+			),
+		].join(";");
+
+		for (const n of data) {
+			createCronJob(
+				n.name,
+				minutesToCron(parseInt(n.interval ?? "15", 10)),
+				async () => {
+					try {
+						const { default: runFun } = await import(
+							`./notification.${n.name.trim()}.js`
+						);
+						await runFun(n, emailString);
+					} catch (error) {
+						log.error(
+							{ error: error },
+							"There was an error starting the notification",
+						);
+					}
+				},
+			);
+		}
+	}
+};
+
+export const modifiedNotification = async (id: string) => {
+	// when a notifications subscribed to, updated, deleted we want to get the info and rerun the startup on the single notification.
+	const { data, error } = await tryCatch(
+		db.select().from(notifications).where(eq(notifications.id, id)),
+	);
+
+	if (error) {
+		log.error(
+			{ error: error },
+			"There was an error when getting notifications.",
+		);
+		return;
+	}
+
+	if (data) {
+		if (!data[0]?.active) {
+			stopCronJob(data[0]?.name ?? "");
+			return;
+		}
+
+		// get the subs for the specific id as we only want to up the modified one
+		const { data: sub, error: subError } = await tryCatch(
+			db
+				.select()
+				.from(notificationSub)
+				.where(eq(notificationSub.notificationId, id)),
+		);
+
+		if (subError) {
+			log.error(
+				{ error: error },
+				"There was an error when getting subscriptions.",
+			);
+
+			return;
+		}
+
+		if (sub.length === 0) {
+			log.info({}, "There are know currently active subscriptions.");
+			stopCronJob(data[0]?.name ?? "");
+			return;
+		}
+
+		const emailString = [
+			...new Set(
+				sub.flatMap((e) =>
+					e.emails?.map((email) => email.trim().toLowerCase()),
+				),
+			),
+		].join(";");
+
+		createCronJob(
+			data[0].name,
+			minutesToCron(parseInt(data[0].interval ?? "15", 10)),
+			async () => {
+				try {
+					const { default: runFun } = await import(
+						`./notification.${data[0]?.name.trim()}.js`
+					);
+					await runFun(data[0], emailString);
+				} catch (error) {
+					log.error(
+						{ error: error },
+						"There was an error starting the notification",
+					);
+				}
+			},
+		);
+	}
+};

backend/notification/notification.reprintLabels.ts

@@ -0,0 +1,115 @@
+import { eq } from "drizzle-orm";
+import { db } from "../db/db.controller.js";
+import { notifications } from "../db/schema/notifications.schema.js";
+import { prodQuery } from "../prodSql/prodSqlQuery.controller.js";
+import {
+	type SqlQuery,
+	sqlQuerySelector,
+} from "../prodSql/prodSqlQuerySelector.utils.js";
+import { returnFunc } from "../utils/returnHelper.utils.js";
+import { sendEmail } from "../utils/sendEmail.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+const reprint = async (data: any, emails: string) => {
+	// TODO: do the actual logic for the notification.
+	const { data: l, error: le } = (await tryCatch(
+		db.select().from(notifications).where(eq(notifications.id, data.id)),
+	)) as any;
+
+	if (le) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "query",
+			message: `${data.name} encountered an error while trying to get initial info`,
+			data: [le],
+			notify: true,
+		});
+	}
+
+	// search the query db for the query by name
+	const sqlQuery = sqlQuerySelector(`${data.name}`) as SqlQuery;
+	// create the ignore audit logs ids
+	const ignoreIds = l[0].options[0]?.auditId
+		? `${l[0].options[0]?.auditId}`
+		: "0";
+
+	// run the check
+	const { data: queryRun, error } = await tryCatch(
+		prodQuery(
+			sqlQuery.query
+				.replace("[intervalCheck]", l[0].interval)
+				.replace("[ignoreList]", ignoreIds),
+			`Running notification query: ${l[0].name}`,
+		),
+	);
+
+	if (error) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "query",
+			message: `Data for: ${l[0].name} encountered an error while trying to get it`,
+			data: [error],
+			notify: true,
+		});
+	}
+
+	if (queryRun.data.length > 0) {
+		// update the latest audit id
+		const { error: dbe } = await tryCatch(
+			db
+				.update(notifications)
+				.set({ options: [{ auditId: `${queryRun.data[0].id}` }] })
+				.where(eq(notifications.id, data.id)),
+		);
+
+		if (dbe) {
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "query",
+				message: `Data for: ${l[0].name} encountered an error while trying to get it`,
+				data: [dbe],
+				notify: true,
+			});
+		}
+
+		// send the email
+
+		const sentEmail = await sendEmail({
+			email: emails,
+			subject: "Alert! Label Reprinted",
+			template: "reprintLabels",
+			context: {
+				items: queryRun.data,
+			},
+		});
+
+		if (!sentEmail?.success) {
+			// sendEmail({
+			// 	email: "Blake.matths@alpla.com",
+			// 	subject: `${os.hostname()} failed to run ${data[0]?.name}.`,
+			// 	template: "serverCrash",
+			// 	context: {
+			// 		error: sentEmail?.data,
+			// 		plant: `${os.hostname()}`,
+			// 	},
+			// });
+			return returnFunc({
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "email",
+				message: `${l[0].name} failed to send the email`,
+				data: [sentEmail?.data],
+				notify: true,
+			});
+		}
+	}
+};
+
+export default reprint;

backend/notification/notification.route.ts

@@ -0,0 +1,55 @@
+import { eq } from "drizzle-orm";
+import { type Response, Router } from "express";
+
+import { db } from "../db/db.controller.js";
+import { notifications } from "../db/schema/notifications.schema.js";
+import { auth } from "../utils/auth.utils.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+const r = Router();
+
+r.get("/", async (req, res: Response) => {
+	const hasPermissions = await auth.api.userHasPermission({
+		body: {
+			//userId: req?.user?.id,
+			role: req.user?.roles as any,
+			permissions: {
+				notifications: ["readAll"], // This must match the structure in your access control
+			},
+		},
+	});
+
+	const { data: nName, error: nError } = await tryCatch(
+		db
+			.select()
+			.from(notifications)
+			.where(
+				!hasPermissions.success ? eq(notifications.active, true) : undefined,
+			)
+			.orderBy(notifications.name),
+	);
+
+	if (nError) {
+		return apiReturn(res, {
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "get",
+			message: `There was an error getting the notifications `,
+			data: [nError],
+			status: 400,
+		});
+	}
+
+	return apiReturn(res, {
+		success: true,
+		level: "info",
+		module: "notification",
+		subModule: "get",
+		message: `All current notifications`,
+		data: nName ?? [],
+		status: 200,
+	});
+});
+export default r;

backend/notification/notification.routes.ts

@@ -0,0 +1,20 @@
+import type { Express } from "express";
+import { requireAuth } from "../middleware/auth.middleware.js";
+import getNotifications from "./notification.route.js";
+import updateNote from "./notification.update.route.js";
+import deleteSub from "./notificationSub.delete.route.js";
+import subs from "./notificationSub.get.route.js";
+import newSub from "./notificationSub.post.route.js";
+import updateSub from "./notificationSub.update.route.js";
+
+export const setupNotificationRoutes = (baseUrl: string, app: Express) => {
+	//stats will be like this as we dont need to change this
+	app.use(`${baseUrl}/api/notification`, requireAuth, getNotifications);
+	app.use(`${baseUrl}/api/notification`, requireAuth, updateNote);
+	app.use(`${baseUrl}/api/notification/sub`, requireAuth, subs);
+	app.use(`${baseUrl}/api/notification/sub`, requireAuth, newSub);
+	app.use(`${baseUrl}/api/notification/sub`, requireAuth, updateSub);
+	app.use(`${baseUrl}/api/notification/sub`, requireAuth, deleteSub);
+
+	// all other system should be under /api/system/*
+};

backend/notification/notification.update.route.ts

@@ -0,0 +1,81 @@
+import { eq } from "drizzle-orm";
+import { type Response, Router } from "express";
+import z from "zod";
+import { db } from "../db/db.controller.js";
+import { notifications } from "../db/schema/notifications.schema.js";
+import { requirePermission } from "../middleware/auth.requiredPerms.middleware.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+import { modifiedNotification } from "./notification.controller.js";
+
+const r = Router();
+
+const updateNote = z.object({
+	description: z.string().optional(),
+	active: z.boolean().optional(),
+	interval: z.string().optional(),
+	options: z.array(z.record(z.string(), z.unknown())).optional(),
+});
+
+r.patch(
+	"/:id",
+	requirePermission({ notifications: ["update"] }),
+	async (req, res: Response) => {
+		const { id } = req.params;
+
+		try {
+			const validated = updateNote.parse(req.body);
+
+			const { data: nName, error: nError } = await tryCatch(
+				db
+					.update(notifications)
+					.set(validated)
+					.where(eq(notifications.id, id as string))
+					.returning(),
+			);
+
+			await modifiedNotification(id as string);
+
+			if (nError) {
+				return apiReturn(res, {
+					success: false,
+					level: "error",
+					module: "notification",
+					subModule: "update",
+					message: `There was an error getting the notifications `,
+					data: [nError],
+					status: 400,
+				});
+			}
+
+			return apiReturn(res, {
+				success: true,
+				level: "info",
+				module: "notification",
+				subModule: "update",
+				message: `Notification was updated`,
+				data: nName ?? [],
+				status: 200,
+			});
+		} catch (err) {
+			if (err instanceof z.ZodError) {
+				const flattened = z.flattenError(err);
+				// return res.status(400).json({
+				// 	error: "Validation failed",
+				// 	details: flattened,
+				// });
+
+				return apiReturn(res, {
+					success: false,
+					level: "error", //connect.success ? "info" : "error",
+					module: "routes",
+					subModule: "notification",
+					message: "Validation failed",
+					data: [flattened.fieldErrors],
+					status: 400, //connect.success ? 200 : 400,
+				});
+			}
+		}
+	},
+);
+export default r;

backend/notification/notificationSub.delete.route.ts

@@ -0,0 +1,103 @@
+import { and, eq } from "drizzle-orm";
+import { type Response, Router } from "express";
+import z from "zod";
+import { db } from "../db/db.controller.js";
+import { notificationSub } from "../db/schema/notifications.sub.schema.js";
+import { auth } from "../utils/auth.utils.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+import { modifiedNotification } from "./notification.controller.js";
+
+const newSubscribe = z.object({
+	userId: z.string().describe("User id."),
+	notificationId: z.string().describe("Notification id"),
+});
+
+const r = Router();
+
+r.delete("/", async (req, res: Response) => {
+	const hasPermissions = await auth.api.userHasPermission({
+		body: {
+			//userId: req?.user?.id,
+			role: req.user?.roles as any,
+			permissions: {
+				notifications: ["readAll"], // This must match the structure in your access control
+			},
+		},
+	});
+
+	try {
+		const validated = newSubscribe.parse(req.body);
+
+		const { data, error } = await tryCatch(
+			db
+				.delete(notificationSub)
+				.where(
+					and(
+						eq(
+							notificationSub.userId,
+							hasPermissions ? validated.userId : (req?.user?.id ?? ""),
+						), // allows the admin to delete this
+						//eq(notificationSub.userId, req?.user?.id ?? ""),
+						eq(notificationSub.notificationId, validated.notificationId),
+					),
+				)
+				.returning(),
+		);
+
+		await modifiedNotification(validated.notificationId);
+
+		if (error) {
+			return apiReturn(res, {
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "post",
+				message: `There was an error deleting the subscription `,
+				data: [error],
+				status: 400,
+			});
+		}
+
+		if (data.length <= 0) {
+			return apiReturn(res, {
+				success: false,
+				level: "info",
+				module: "notification",
+				subModule: "post",
+				message: `Subscription was not deleted invalid data sent over`,
+				data: data ?? [],
+				status: 200,
+			});
+		}
+
+		return apiReturn(res, {
+			success: true,
+			level: "info",
+			module: "notification",
+			subModule: "post",
+			message: `Subscription deleted`,
+			data: data ?? [],
+			status: 200,
+		});
+	} catch (err) {
+		if (err instanceof z.ZodError) {
+			const flattened = z.flattenError(err);
+			// return res.status(400).json({
+			// 	error: "Validation failed",
+			// 	details: flattened,
+			// });
+
+			return apiReturn(res, {
+				success: false,
+				level: "error", //connect.success ? "info" : "error",
+				module: "routes",
+				subModule: "notification",
+				message: "Validation failed",
+				data: [flattened.fieldErrors],
+				status: 400, //connect.success ? 200 : 400,
+			});
+		}
+	}
+});
+export default r;

backend/notification/notificationSub.get.route.ts

@@ -0,0 +1,61 @@
+import { eq } from "drizzle-orm";
+import { type Response, Router } from "express";
+import { db } from "../db/db.controller.js";
+import { notificationSub } from "../db/schema/notifications.sub.schema.js";
+import { auth } from "../utils/auth.utils.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+const r = Router();
+
+r.get("/", async (req, res: Response) => {
+	const { userId } = req.query;
+
+	const hasPermissions = await auth.api.userHasPermission({
+		body: {
+			//userId: req?.user?.id,
+			role: req.user?.roles as any,
+			permissions: {
+				notifications: ["readAll"], // This must match the structure in your access control
+			},
+		},
+	});
+
+	if (userId) {
+		hasPermissions.success = false;
+	}
+
+	const { data, error } = await tryCatch(
+		db
+			.select()
+			.from(notificationSub)
+			.where(
+				!hasPermissions.success
+					? eq(notificationSub.userId, `${req?.user?.id ?? ""}`)
+					: undefined,
+			),
+	);
+
+	if (error) {
+		return apiReturn(res, {
+			success: false,
+			level: "error",
+			module: "notification",
+			subModule: "post",
+			message: `There was an error getting subscriptions `,
+			data: [error],
+			status: 400,
+		});
+	}
+
+	return apiReturn(res, {
+		success: true,
+		level: "info",
+		module: "notification",
+		subModule: "post",
+		message: `Subscriptions`,
+		data: data ?? [],
+		status: 200,
+	});
+});
+export default r;

backend/notification/notificationSub.post.route.ts

@@ -0,0 +1,92 @@
+import { type Response, Router } from "express";
+import z from "zod";
+import { db } from "../db/db.controller.js";
+import { notificationSub } from "../db/schema/notifications.sub.schema.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+import { modifiedNotification } from "./notification.controller.js";
+
+const newSubscribe = z.object({
+	emails: z
+		.email()
+		.array()
+
+		.describe("An array of emails"),
+	userId: z.string().describe("User id."),
+	notificationId: z
+		.string()
+
+		.describe("Notification id"),
+});
+
+const r = Router();
+
+r.post("/", async (req, res: Response) => {
+	try {
+		const validated = newSubscribe.parse(req.body);
+
+		const emails = validated.emails
+			.map((e) => e.trim().toLowerCase())
+			.filter(Boolean);
+
+		const uniqueEmails = [...new Set(emails)];
+
+		const { data, error } = await tryCatch(
+			db
+				.insert(notificationSub)
+				.values({
+					userId: req?.user?.id ?? "",
+					notificationId: validated.notificationId,
+					emails: uniqueEmails,
+				})
+				.onConflictDoUpdate({
+					target: [notificationSub.userId, notificationSub.notificationId],
+					set: { emails: uniqueEmails },
+				})
+				.returning(),
+		);
+
+		await modifiedNotification(validated.notificationId);
+
+		if (error) {
+			return apiReturn(res, {
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "post",
+				message: `There was an error getting the notifications `,
+				data: [error],
+				status: 400,
+			});
+		}
+
+		return apiReturn(res, {
+			success: true,
+			level: "info",
+			module: "notification",
+			subModule: "post",
+			message: `Subscribed to notification`,
+			data: data ?? [],
+			status: 200,
+		});
+	} catch (err) {
+		if (err instanceof z.ZodError) {
+			const flattened = z.flattenError(err);
+			// return res.status(400).json({
+			// 	error: "Validation failed",
+			// 	details: flattened,
+			// });
+
+			return apiReturn(res, {
+				success: false,
+				level: "error", //connect.success ? "info" : "error",
+				module: "routes",
+				subModule: "notification",
+				message: "Validation failed",
+				data: [flattened.fieldErrors],
+				status: 400, //connect.success ? 200 : 400,
+			});
+		}
+	}
+});
+export default r;

backend/notification/notificationSub.update.route.ts

@@ -0,0 +1,84 @@
+import { and, eq } from "drizzle-orm";
+import { type Response, Router } from "express";
+import z from "zod";
+import { db } from "../db/db.controller.js";
+import { notificationSub } from "../db/schema/notifications.sub.schema.js";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+import { modifiedNotification } from "./notification.controller.js";
+
+const newSubscribe = z.object({
+	emails: z.email().array().describe("An array of emails"),
+	userId: z.string().describe("User id."),
+	notificationId: z.string().describe("Notification id"),
+});
+
+const r = Router();
+
+r.patch("/", async (req, res: Response) => {
+	try {
+		const validated = newSubscribe.parse(req.body);
+
+		const emails = validated.emails
+			.map((e) => e.trim().toLowerCase())
+			.filter(Boolean);
+
+		const uniqueEmails = [...new Set(emails)];
+
+		const { data, error } = await tryCatch(
+			db
+				.update(notificationSub)
+				.set({ emails: uniqueEmails })
+				.where(
+					and(
+						eq(notificationSub.userId, validated.userId),
+						eq(notificationSub.notificationId, validated.notificationId),
+					),
+				)
+				.returning(),
+		);
+
+		await modifiedNotification(validated.notificationId);
+
+		if (error) {
+			return apiReturn(res, {
+				success: false,
+				level: "error",
+				module: "notification",
+				subModule: "update",
+				message: `There was an error updating the notifications `,
+				data: [error],
+				status: 400,
+			});
+		}
+
+		return apiReturn(res, {
+			success: true,
+			level: "info",
+			module: "notification",
+			subModule: "update",
+			message: `Subscription updated`,
+			data: data ?? [],
+			status: 200,
+		});
+	} catch (err) {
+		if (err instanceof z.ZodError) {
+			const flattened = z.flattenError(err);
+			// return res.status(400).json({
+			// 	error: "Validation failed",
+			// 	details: flattened,
+			// });
+
+			return apiReturn(res, {
+				success: false,
+				level: "error", //connect.success ? "info" : "error",
+				module: "routes",
+				subModule: "notification",
+				message: "Validation failed",
+				data: [flattened.fieldErrors],
+				status: 400, //connect.success ? 200 : 400,
+			});
+		}
+	}
+});
+export default r;

backend/notification/notifications.master.ts

@@ -0,0 +1,70 @@
+import { sql } from "drizzle-orm";
+import { db } from "../db/db.controller.js";
+import {
+	type NewNotification,
+	notifications,
+} from "../db/schema/notifications.schema.js";
+import { createLogger } from "../logger/logger.controller.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+
+const note: NewNotification[] = [
+	{
+		name: "reprintLabels",
+		description:
+			"Monitors the labels that are printed and returns a there data, if one falls withing the time frame.",
+		active: false,
+		interval: "10",
+		options: [{ auditId: [0] }],
+	},
+	{
+		name: "qualityBlocking",
+		description:
+			"Checks for new blocking orders that have been entered, recommend to get the most recent order in here before activating.",
+		active: false,
+		interval: "10",
+		options: [{ sentBlockingOrders: [{ timeStamp: "0", blockingOrder: 1 }] }],
+	},
+	{
+		name: "alplaPurchaseHistory",
+		description:
+			"Will check the alpla purchase data for any changes, if the req has not been sent already then we will send this, for a po or fresh order we will ignore. ",
+		active: false,
+		interval: "5",
+		options: [
+			{ sentReqs: [{ timeStamp: "0", req: 1, approved: false }] },
+			{ sentAPOs: [{ timeStamp: "0", apo: 1 }] },
+			{ sentRCT: [{ timeStamp: "0", rct: 1 }] },
+		],
+	},
+];
+
+export const createNotifications = async () => {
+	const log = createLogger({ module: "notifications", subModule: "create" });
+	const { data, error } = await tryCatch(
+		db
+			.insert(notifications)
+			.values(note)
+			.onConflictDoUpdate({
+				target: notifications.name,
+				set: {
+					description: sql`excluded.description`,
+				},
+				// where: sql`
+				//         settings.seed_version IS NULL
+				//         OR settings.seed_version < excluded.seed_version
+				//     `,
+			})
+			.returning(),
+	);
+
+	if (error) {
+		log.error(
+			{ error: error },
+			"There was an error when adding or updating the notifications.",
+		);
+	}
+
+	if (data) {
+		log.info({}, "All notifications were added/updated");
+	}
+};

backend/ocp/ocp.printer.listener.ts

@@ -0,0 +1,36 @@
+/**
+ * the route that listens for the printers post.
+ *
+ * and http-post alert should be setup on each printer pointing to at min you will want to make the alert for
+ * pause printer, you can have all on here as it will also monitor and do things on all messages
+ *
+ * http://{serverIP}:2222/lst/api/ocp/printer/listener/{printerName}
+ *
+ * the messages will be sent over to the db for logging as well as specific ones will do something
+ *
+ * pause will validate if can print
+ * close head will repause the printer so it wont print a label
+ * power up will just repause the printer so it wont print a label
+ */
+
+import { Router } from "express";
+import { apiReturn } from "../utils/returnHelper.utils.js";
+
+const r = Router();
+
+r.post("/printer/listener/:printer", async (req, res) => {
+	const { printer: printerName } = req.params;
+	console.log(req.body);
+
+	return apiReturn(res, {
+		success: true,
+		level: "info",
+		module: "ocp",
+		subModule: "printing",
+		message: `${printerName} just passed over a message`,
+		data: req.body ?? [],
+		status: 200,
+	});
+});
+
+export default r;

backend/ocp/ocp.printer.manage.ts

@@ -0,0 +1,19 @@
+/**
+ * this will do a prod sync, update or add alerts to the printer, validate the next pm intervale as well as head replacement.
+ *
+ * if a printer is upcoming on a pm or head replacement send to the plant to address.
+ *
+ * a trigger on the printer table will have the ability to run this as well
+ *
+ * heat beats on all assigned printers
+ *
+ * printer status will live here this will be how we manage all the levels of status like 3 paused, 1 printing, 8 error, 10 power up, etc...
+ */
+
+export const printerManager = async () => {};
+
+export const printerHeartBeat = async () => {
+	// heat heats will be defaulted to 60 seconds no reason to allow anything else
+};
+
+//export const printerStatus = async (statusNr: number, printerId: number) => {};

backend/ocp/ocp.routes.ts

@@ -0,0 +1,22 @@
+import { type Express, Router } from "express";
+import { requireAuth } from "../middleware/auth.middleware.js";
+import { featureCheck } from "../middleware/featureActive.middleware.js";
+import listener from "./ocp.printer.listener.js";
+
+export const setupOCPRoutes = (baseUrl: string, app: Express) => {
+	//setup all the routes
+	const router = Router();
+
+	// is the feature even on?
+	router.use(featureCheck("ocp"));
+
+	// non auth routes up here
+	router.use(listener);
+
+	// auth routes below here
+	router.use(requireAuth);
+
+	//router.use("");
+
+	app.use(`${baseUrl}/api/ocp`, router);
+};

backend/opendock/openDockRreleaseMonitor.utils.ts

@@ -17,15 +17,6 @@ import { returnFunc } from "../utils/returnHelper.utils.js";
 import { tryCatch } from "../utils/trycatch.utils.js";
 import { getToken, odToken } from "./opendock.utils.js";
 
-let lastCheck = formatInTimeZone(
-	new Date().toISOString(),
-	"America/New_York",
-	"yyyy-MM-dd HH:mm:ss",
-);
-
-//const queue: unknown[] = [];
-//const isProcessing: boolean = false;
-
 type Releases = {
 	ReleaseNumber: number;
 	DeliveryState: number;
@@ -37,10 +28,38 @@ type Releases = {
 	LineItemArticleWeight: number;
 	CustomerReleaseNumber: string;
 };
-
+const timeZone = process.env.TIMEZONE as string;
 const TWENTY_FOUR_HOURS = 24 * 60 * 60 * 1000;
 const log = createLogger({ module: "opendock", subModule: "releaseMonitor" });
 
+// making the cron more safe when it comes to buffer stuff
+let opendockSyncRunning = false;
+
+let lastCheck = formatInTimeZone(
+	new Date().toISOString(),
+	timeZone,
+	"yyyy-MM-dd HH:mm:ss",
+);
+
+// const lastCheck = formatInTimeZone(
+// 	new Date().toISOString(),
+// 	`America/New_York`, //TODO: Pull timezone from the .env last as process.env.TIME_ZONE is not working so need to figure itout
+// 	"yyyy-MM-dd HH:mm:ss",
+// );
+
+//const queue: unknown[] = [];
+//const isProcessing: boolean = false;
+
+// const parseDbDate = (value: string | Date) => {
+// 	if (value instanceof Date) return value;
+
+// 	// normalize "2026-04-08 13:10:43.280" -> "2026-04-08T13:10:43.280"
+// 	const normalized = value.replace(" ", "T");
+
+// 	// interpret that wall-clock time as America/New_York
+// 	return fromZonedTime(normalized, timeZone);
+// };
+
 const postRelease = async (release: Releases) => {
 	if (!odToken.odToken) {
 		log.info({}, "Getting Auth Token");
@@ -152,22 +171,25 @@ const postRelease = async (release: Releases) => {
 	};
 
 	// TODO: pull the current added releases from the db and if one matches then we want to get its id and run the update vs create
-	const { data: apt, error: aptError } = await tryCatch(
-		db.select().from(opendockApt),
+	const { data: existingApt, error: aptError } = await tryCatch(
+		db
+			.select()
+			.from(opendockApt)
+			.where(eq(opendockApt.release, release.ReleaseNumber))
+			.limit(1),
 	);
-
 	if (aptError) {
 		log.error({ error: aptError }, "Error getting apt data");
 		// TODO: send an error email on this one as it will cause issues
 		return;
 	}
 
-	const releaseCheck = apt.filter((r) => r.release === release.ReleaseNumber);
+	const existing = existingApt[0];
 
 	//console.log(releaseCheck);
 
-	if (releaseCheck.length > 0) {
-		const id = releaseCheck[0]?.openDockAptId;
+	if (existing) {
+		const id = existing.openDockAptId;
 		try {
 			const response = await axios.patch(
 				`${process.env.OPENDOCK_URL}/appointment/${id}`,
@@ -196,7 +218,11 @@ const postRelease = async (release: Releases) => {
 					})
 					.onConflictDoUpdate({
 						target: opendockApt.release,
-						set: { appointment: response.data.data, upd_date: sql`NOW()` },
+						set: {
+							openDockAptId: response.data.data.id,
+							appointment: response.data.data,
+							upd_date: sql`NOW()`,
+						},
 					})
 					.returning();
 
@@ -250,8 +276,12 @@ const postRelease = async (release: Releases) => {
 						appointment: response.data.data,
 					})
 					.onConflictDoUpdate({
-						target: opendockApt.id,
-						set: { appointment: response.data.data, upd_date: sql`NOW()` },
+						target: opendockApt.release,
+						set: {
+							openDockAptId: response.data.data.id,
+							appointment: response.data.data,
+							upd_date: sql`NOW()`,
+						},
 					})
 					.returning();
 
@@ -270,7 +300,7 @@ const postRelease = async (release: Releases) => {
 		}
 	}
 
-	await delay(500); // rate limit protection
+	await delay(750); // rate limit protection
 };
 
 export const monitorReleaseChanges = async () => {
@@ -298,184 +328,66 @@ export const monitorReleaseChanges = async () => {
 	}
 
 	if (openDockMonitor[0]?.active) {
-		createCronJob("opendock_sync", "*/15 * * * * *", async () => {
-			try {
-				const result = await prodQuery(
-					sqlQuery.query.replace("[dateCheck]", `'${lastCheck}'`),
-					"Get release info",
-				);
+		// const BUFFER_MS =
+		// 	Math.floor(parseInt(openDockMonitor[0]?.value, 10) || 30) * 1.5 * 1000; // this should be >= to the interval we set in the cron TODO: should pull the buffer from the setting and give it an extra 10% then round to nearest int.
 
-				if (result.data.length) {
-					for (const release of result.data) {
-						await postRelease(release);
-
-						lastCheck = formatInTimeZone(
-							new Date(release.Upd_Date).toISOString(),
-							"UTC",
-							"yyyy-MM-dd HH:mm:ss",
-						);
-
-						await delay(500);
-					}
+		createCronJob(
+			"opendock_sync",
+			`*/${parseInt(openDockMonitor[0]?.value, 10) || 30} * * * * *`,
+			async () => {
+				if (opendockSyncRunning) {
+					log.warn(
+						{},
+						"Skipping opendock_sync because previous run is still active",
+					);
+					return;
 				}
-			} catch (e) {
-				console.error(
-					{ error: e },
-					"Error occurred while running the monitor job",
-				);
-				log.error({ error: e }, "Error occurred while running the monitor job");
-			}
-		});
+
+				opendockSyncRunning = true;
+				try {
+					// set this to the latest time.
+
+					const result = await prodQuery(
+						sqlQuery.query.replace("[dateCheck]", `'${lastCheck}'`),
+						"Get release info",
+					);
+
+					log.debug(
+						{ lastCheck },
+						`${result.data.length} Changes to a release have been made`,
+					);
+
+					if (result.data.length) {
+						for (const release of result.data) {
+							await postRelease(release);
+
+							// add a 2 seconds to account for a massive influx of orders and when we dont finish in 1 go it wont try to grab the same amount again
+							const nDate = new Date(release.Upd_Date);
+							nDate.setSeconds(nDate.getSeconds() + 2);
+
+							lastCheck = formatInTimeZone(
+								nDate.toISOString(),
+								"UTC",
+								"yyyy-MM-dd HH:mm:ss",
+							);
+							log.debug({ lastCheck }, "Changes to a release have been made");
+							await delay(500);
+						}
+					}
+				} catch (e) {
+					console.error(
+						{ error: e },
+						"Error occurred while running the monitor job",
+					);
+					log.error(
+						{ error: e },
+						"Error occurred while running the monitor job",
+					);
+				} finally {
+					opendockSyncRunning = false;
+				}
+			},
+			"monitorReleaseChanges",
+		);
 	}
-
-	// run the main game loop
-	// while (openDockSetting) {
-	// 	try {
-	// 		const result = await prodQuery(
-	// 			sqlQuery.query.replace("[dateCheck]", `'${lastCheck}'`),
-	// 			"Get release info",
-	// 		);
-
-	// 		if (result.data.length) {
-	// 			for (const release of result.data) {
-	// 				// potentially move this to a buffer table to easy up on memory
-	// 				await postRelease(release);
-
-	// 				// Move checkpoint AFTER successful post
-	// 				lastCheck = formatInTimeZone(
-	// 					new Date(release.Upd_Date).toISOString(),
-	// 					"UTC",
-	// 					"yyyy-MM-dd HH:mm:ss",
-	// 				);
-
-	// 				await delay(500);
-	// 			}
-	// 		}
-	// 	} catch (e) {
-	// 		console.error("Monitor error:", e);
-	// 	}
-
-	// 	await delay(15 * 1000); // making this 15 seconds as we would really only see issues if we have a mass burst.
-	// }
 };
-
-// export const monitorReleaseChanges = async () => {
-// 	console.log("Starting release monitor", lastCheck);
-// 	setInterval(async () => {
-// 		try {
-// 			const result = await prodQuery(
-// 				releaseQuery.replace("[dateCheck]", `'${lastCheck}'`),
-// 				"get last release change",
-// 			);
-
-// 			//console.log(releaseQuery.replace("[dateCheck]", `'${lastCheck}'`));
-// 			if (result.data.length > 0) {
-// 				console.log(
-// 					formatInTimeZone(
-// 						result.data[result.data.length - 1].Upd_Date,
-// 						"UTC",
-// 						"yyyy-MM-dd HH:mm:ss",
-// 					),
-// 					lastCheck,
-// 				);
-// 				lastCheck = formatInTimeZone(
-// 					result.data[result.data.length - 1].Upd_Date,
-// 					"UTC",
-// 					"yyyy-MM-dd HH:mm:ss",
-// 				);
-// 				const releases = result.data;
-// 				for (let i = 0; i < releases.length; i++) {
-// 					const newDockApt = {
-// 						status: "Scheduled",
-// 						userId: "ee956455-e193-47fc-b53b-dff30fabdf4b", // this should be the carrierid
-// 						loadTypeId: "0aa7988e-b17b-4f10-acdd-3d029b44a773", // well get this and make it a default one
-// 						dockId: "00ba4386-ce5a-4dd1-9356-6e6d10a24609", // this the warehouse we want it in to start out
-// 						refNumbers: [releases[i].ReleaseNumber],
-// 						refNumber: releases[i].ReleaseNumber,
-// 						start: releases[i].DeliveryDate,
-// 						end: addHours(releases[i].DeliveryDate, 1),
-// 						notes: "",
-// 						ccEmails: [""],
-// 						muteNotifications: true,
-// 						metadata: {
-// 							externalValidationFailed: false,
-// 							externalValidationErrorMessage: null,
-// 						},
-// 						units: null,
-// 						customFields: [
-// 							{
-// 								name: "strArticle",
-// 								type: "str",
-// 								label: "Article",
-// 								value: `${releases[i].LineItemHumanReadableId} - ${releases[i].ArticleAlias}`,
-// 								description: "What bottle are we sending ",
-// 								placeholder: "",
-// 								dropDownValues: [],
-// 								minLengthOrValue: 1,
-// 								hiddenFromCarrier: false,
-// 								requiredForCarrier: false,
-// 								requiredForWarehouse: false,
-// 							},
-// 							{
-// 								name: "intPallet Count",
-// 								type: "int",
-// 								label: "Pallet Count",
-// 								value: parseInt(releases[i].LoadingUnits, 10),
-// 								description: "How many pallets",
-// 								placeholder: "22",
-// 								dropDownValues: [],
-// 								minLengthOrValue: 1,
-// 								hiddenFromCarrier: false,
-// 								requiredForCarrier: false,
-// 								requiredForWarehouse: false,
-// 							},
-// 							{
-// 								name: "strTotal Weight",
-// 								type: "str",
-// 								label: "Total Weight",
-// 								value: `${(((releases[i].Quantity * releases[i].LineItemArticleWeight) / 1000) * 2.20462).toFixed(2)}`,
-// 								description: "What is the total weight of the load",
-// 								placeholder: "",
-// 								dropDownValues: [],
-// 								minLengthOrValue: 1,
-// 								hiddenFromCarrier: false,
-// 								requiredForCarrier: false,
-// 								requiredForWarehouse: false,
-// 							},
-// 							{
-// 								name: "strCustomer ReleaseNumber",
-// 								type: "str",
-// 								label: "Customer Release Number",
-// 								value: `${releases[i].CustomerReleaseNumber}`,
-// 								description: "What is the customer release number",
-// 								placeholder: "",
-// 								dropDownValues: [],
-// 								minLengthOrValue: 1,
-// 								hiddenFromCarrier: false,
-// 								requiredForCarrier: false,
-// 								requiredForWarehouse: false,
-// 							},
-// 						],
-// 					};
-
-// 					//console.log(newDockApt);
-
-// 					const newDockResult = await axios.post(
-// 						"https://neutron.staging.opendock.com/appointment",
-// 						newDockApt,
-// 						{
-// 							headers: {
-// 								"content-type": "application/json; charset=utf-8",
-// 								},
-// 						},
-// 					);
-
-// 					console.log(newDockResult.statusText);
-// 					await delay(500);
-// 				}
-// 			}
-// 		} catch (e) {
-// 			console.log(e);
-// 		}
-// 	}, 5 * 1000);
-// };

backend/opendock/opendock.utils.ts

@@ -28,7 +28,7 @@ export const getToken = async () => {
 		}
 
 		odToken = { odToken: data.access_token, tokenDate: new Date() };
-		log.info({}, "Token added");
+		log.info({ odToken }, "Token added");
 	} catch (e) {
 		log.error({ error: e }, "Error getting/refreshing token");
 	}

backend/opendock/opendockSocketMonitor.utils.ts

@@ -36,12 +36,12 @@ export const opendockSocketMonitor = async () => {
 	// 	console.log(data);
 	// });
 
-	socket.on("create-Appointment", (data) => {
-		console.log("appt create:", data);
+	socket.on("create-Appointment", () => {
+		//console.log("appt create:", data);
 	});
 
-	socket.on("update-Appointment", (data) => {
-		console.log("appt update:", data);
+	socket.on("update-Appointment", () => {
+		//console.log("appt update:", data);
 	});
 
 	socket.on("error", (data) => {

backend/prodSql/queries/alplapurchase.sql

@@ -0,0 +1,63 @@
+use AlplaPROD_test1
+declare @intervalCheck as int = '[interval]'
+
+/*
+Monitors alpla purchase for thing new. this will not update unless the order status is updated.
+this means if a user just reopens the order it will update but everything changed in the position will not be updated until the user reorders or cancels the po
+*/
+
+select
+IdBestellung as apo
+,po.revision as revision
+,po.Bestaetigt as confirmed
+,po.status
+,case po.Status
+	when 1 then 'Created'
+	when 2 then 'Ordered'
+	when 22 then 'Reopened'
+	when 11 then 'Reopened'
+	when 4 then 'Planned'
+	when 5 then 'Partly Delivered'
+	when 6 then 'Delivered'
+	when 7 then 'Canceled'
+	when 8 then 'Closed'
+	else 'Unknown' end as statusText
+,po.IdJournal as journalNum   -- use this to validate if we used it already.
+,po.Add_User as add_user
+,po.Add_Date as add_date
+,po.Upd_User as upd_user
+,po.Upd_Date as upd_Date
+,po.Bemerkung as remark
+,po.IdJournal as journal  -- use this to validate if we used it already.
+,isnull((
+select 
+	o.IdArtikelVarianten as av
+	,a.Bezeichnung as alias
+	,Lieferdatum as deliveryDate
+	,cast(BestellMenge as decimal(18,2)) as qty
+	,cast(BestellMengeVPK as decimal(18,0)) as pkg
+	,cast(PreisProEinheit  as decimal(18,0)) as price
+	,PositionsStatus
+	,case PositionsStatus
+		when 1 then 'Created'
+		when 2 then 'Ordered'
+		when 22 then 'Reopened'
+		when 4 then 'Planned'
+		when 5 then 'Partly Delivered'
+		when 6 then 'Delivered'
+		when 7 then 'Canceled'
+		when 8 then 'Closed'
+		else 'Unknown' end as statusText
+	,o.upd_user
+	,o.upd_date
+from T_Bestellpositionen (nolock) as o
+
+left join
+	T_Artikelvarianten as a on 
+	a.IdArtikelvarianten = o.IdArtikelVarianten
+where o.IdBestellung = po.IdBestellung
+for json path
+), '[]') as position
+--,* 
+from T_Bestellungen (nolock) as po
+where po.Upd_Date > dateadd(MINUTE, -@intervalCheck, getdate()) 

backend/prodSql/queries/reprintLabels.sql

@@ -0,0 +1,28 @@
+use [test1_AlplaPROD2.0_Read]
+
+SELECT
+	--JSON_VALUE(content, '$.EntityId') as labelId
+	a.id
+	,ActorName
+	,FORMAT(PrintDate, 'yyyy-MM-dd HH:mm') as printDate
+	,FORMAT(CreatedDateTime, 'yyyy-MM-dd HH:mm') createdDateTime
+    ,l.ArticleHumanReadableId as av
+	,l.ArticleDescription as alias
+	,PrintedCopies
+	,p.name as printerName
+	,RunningNumber
+	--,*
+FROM [support].[AuditLog] (nolock) as a
+
+left join
+	[labelling].[InternalLabel] (nolock)  as l on 
+	l.id = JSON_VALUE(content, '$.EntityId')
+
+left join
+	[masterData].[printer] (nolock) as p on
+	p.id = l.PrinterId
+
+where message like '%reprint%'
+	and CreatedDateTime > DATEADD(minute, -[intervalCheck], SYSDATETIMEOFFSET())
+	and a.id > [ignoreList]
+order by CreatedDateTime desc

backend/purchase/puchase.gpCheck.ts

@@ -0,0 +1,117 @@
+import { gpQuery } from "../gpSql/gpSqlQuery.controller.js";
+import {
+	type SqlGPQuery,
+	sqlGpQuerySelector,
+} from "../gpSql/gpSqlQuerySelector.utils.js";
+import { createLogger } from "../logger/logger.controller.js";
+import type { GpStatus } from "../types/purhcaseTypes.js";
+import { returnFunc } from "../utils/returnHelper.utils.js";
+
+const log = createLogger({ module: "purchase", subModule: "gp" });
+
+export const gpReqCheck = async (data: GpStatus[]) => {
+	const gpReqCheck = sqlGpQuerySelector("reqCheck") as SqlGPQuery;
+	const reqs = data.map((r) => r.req.trim());
+
+	if (!gpReqCheck.success) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "purchase",
+			subModule: "query",
+			message: `Error getting alpla purchase info`,
+			data: [gpReqCheck.message],
+			notify: false,
+		});
+	}
+
+	try {
+		// check the initial req table
+		const result = await gpQuery(
+			gpReqCheck.query.replace(
+				"[reqsToCheck]",
+				data.map((r) => `'${r.req}'`).join(", ") ?? "",
+			),
+			"Get req info",
+		);
+
+		log.debug(
+			{},
+			`There are ${result.data.length} reqs that need to be updated with there current status`,
+		);
+
+		const firstFound = result.data.map((r) => ({
+			req: r.req.trim(),
+			approvedStatus: r.approvedStatus,
+		}));
+
+		const firstFoundSet = new Set(result.data.map((r) => r.req.trim()));
+
+		const missing1Reqs = reqs.filter((req) => !firstFoundSet.has(req));
+
+		//check if we have a recall on our req
+		const reqCheck = await gpQuery(
+			`select 
+            [Requisition Number] as req
+            ,case when [Workflow Status] = 'recall' then 'returned' else [Workflow Status] end as approvedStatus
+            --,* 
+            from  [dbo].[PurchaseRequisitions] where [Requisition Number] in (${missing1Reqs.map((r) => `'${r}'`).join(", ")})`,
+			"validate req is not in recall",
+		);
+
+		const secondFound = reqCheck.data.map((r) => ({
+			req: r.req.trim(),
+			approvedStatus: r.approvedStatus,
+		}));
+
+		const secondFoundSet =
+			new Set(reqCheck.data.map((r) => r.req.trim())) ?? [];
+
+		const missing2Reqs = missing1Reqs.filter((req) => !secondFoundSet.has(req));
+
+		// check if we have a po already
+		const apoCheck = await gpQuery(
+			`select
+                SOPNUMBE
+                ,PONUMBER
+                ,reqStatus='converted'
+                ,* 
+	        from alpla.dbo.sop60100 (nolock)  where sopnumbe in (${missing2Reqs.map((r) => `'${r}'`).join(", ")})`,
+			"Get release info",
+		);
+
+		const thirdRound = apoCheck.data.map((r) => ({
+			req: r.req.trim(),
+			approvedStatus: r.approvedStatus,
+		}));
+
+		const missing3Reqs = missing2Reqs.filter((req) => !secondFoundSet.has(req));
+
+		// remaining just got canceled or no longer exist
+		const remaining = missing3Reqs.map((m) => ({
+			req: m,
+			approvedStatus: "canceled",
+		}));
+
+		const allFound = [
+			...firstFound,
+			...secondFound,
+			...thirdRound,
+			...remaining,
+		];
+
+		const statusMap = new Map(
+			allFound.map((r: any) => [r.req, r.approvedStatus]),
+		);
+
+		const updateData = data.map((row) => ({
+			id: row.id,
+			//req: row.req,
+			approvedStatus: statusMap.get(row.req.trim()) ?? null,
+		}));
+
+		return updateData;
+	} catch (error) {
+		log.error({ stack: error });
+	}
+};

backend/purchase/purchase.controller.ts

@@ -0,0 +1,230 @@
+/**
+ * This will monitor alpla purchase
+ */
+
+import { eq, sql } from "drizzle-orm";
+import { db } from "../db/db.controller.js";
+import {
+	alplaPurchaseHistory,
+	type NewAlplaPurchaseHistory,
+} from "../db/schema/alplapurchase.schema.js";
+import { settings } from "../db/schema/settings.schema.js";
+import { createLogger } from "../logger/logger.controller.js";
+import { prodQuery } from "../prodSql/prodSqlQuery.controller.js";
+import {
+	type SqlQuery,
+	sqlQuerySelector,
+} from "../prodSql/prodSqlQuerySelector.utils.js";
+import type { GpStatus, StatusUpdate } from "../types/purhcaseTypes.js";
+import { createCronJob } from "../utils/croner.utils.js";
+import { delay } from "../utils/delay.utils.js";
+import { returnFunc } from "../utils/returnHelper.utils.js";
+import { tryCatch } from "../utils/trycatch.utils.js";
+import { gpReqCheck } from "./puchase.gpCheck.js";
+
+const log = createLogger({ module: "purchase", subModule: "purchaseMonitor" });
+
+export const monitorAlplaPurchase = async () => {
+	const purchaseMonitor = await db
+		.select()
+		.from(settings)
+		.where(eq(settings.name, "purchaseMonitor"));
+
+	const sqlQuery = sqlQuerySelector(`alplapurchase`) as SqlQuery;
+
+	if (!sqlQuery.success) {
+		return returnFunc({
+			success: false,
+			level: "error",
+			module: "purchase",
+			subModule: "query",
+			message: `Error getting alpla purchase info`,
+			data: [sqlQuery.message],
+			notify: false,
+		});
+	}
+
+	if (purchaseMonitor[0]?.active) {
+		createCronJob("purchaseMonitor", "0 */5 * * * *", async () => {
+			try {
+				const result = await prodQuery(
+					sqlQuery.query.replace(
+						"[interval]",
+						`${purchaseMonitor[0]?.value || "5"}`,
+					),
+					"Get release info",
+				);
+
+				log.debug(
+					{},
+					`There are ${result.data.length} pending to be updated from the last ${purchaseMonitor[0]?.value}`,
+				);
+				if (result.data.length) {
+					const convertedData = result.data.map((i) => ({
+						...i,
+						position: JSON.parse(i.position),
+					})) as NewAlplaPurchaseHistory;
+
+					const { data, error } = await tryCatch(
+						db.insert(alplaPurchaseHistory).values(convertedData).returning(),
+					);
+
+					if (data) {
+						log.debug(
+							{ data },
+							"New data was just added to alpla purchase history",
+						);
+					}
+
+					if (error) {
+						log.error(
+							{ error },
+							"There was an error adding alpla purchase history",
+						);
+					}
+
+					await delay(500);
+				}
+			} catch (e) {
+				log.error({ error: e }, "Error occurred while running the monitor job");
+				log.error({ error: e }, "Error occurred while running the monitor job");
+
+				return;
+			}
+
+			// re-pull re-pull everything that has approvedStatus is pending
+
+			const { data: allReq, error: errorReq } = await tryCatch(
+				db
+					.select()
+					.from(alplaPurchaseHistory)
+					.where(eq(alplaPurchaseHistory.approvedStatus, "new")),
+			);
+
+			// if theres no reqs just end meow
+			if (errorReq) {
+				log.error(
+					{ stack: errorReq },
+					"There was an error getting history data",
+				);
+				return;
+			}
+
+			log.debug({}, `There are ${allReq.length} pending reqs to be updated`);
+
+			if (!allReq.length) {
+				log.debug({}, "There are not reqs to be processed");
+				return;
+			}
+			/**
+			 * approvedStatus
+			 * remark = '' then pending req/manual po
+			 * pending = pending
+			 * approved = approved
+			 *
+			 */
+
+			// the flow for all the fun stuff
+
+			const needsGpLookup: GpStatus[] = [];
+			const updates: StatusUpdate[] = [];
+
+			for (const row of allReq ?? []) {
+				const remark = row.remark?.toLowerCase() ?? "";
+
+				if (remark === "") {
+					updates.push({ id: row.id, approvedStatus: "initial" });
+					continue;
+				}
+
+				if (remark.includes("rct")) {
+					updates.push({ id: row.id, approvedStatus: "received" });
+					continue;
+				}
+
+				if (remark.includes("apo")) {
+					updates.push({ id: row.id, approvedStatus: "approved" });
+					continue;
+				}
+
+				// not handled locally, defer to GP lookup
+				needsGpLookup.push({ id: row.id, req: row.remark?.trim() ?? "" });
+			}
+
+			const gpSmash = (await gpReqCheck(needsGpLookup)) as StatusUpdate[];
+
+			const merge = [...updates, ...gpSmash];
+
+			if (merge.length > 0) {
+				await db.execute(sql`
+					UPDATE ${alplaPurchaseHistory}
+					SET approved_status = CASE
+						${sql.join(
+							merge.map(
+								(row) =>
+									sql`WHEN ${alplaPurchaseHistory.id} = ${row.id} THEN ${row.approvedStatus}`,
+							),
+							sql` `,
+						)}
+						ELSE approved_status
+					END,
+					updated_at = NOW()
+					WHERE ${alplaPurchaseHistory.id} IN (
+						${sql.join(
+							merge.map((row) => sql`${row.id}`),
+							sql`, `,
+						)}
+					)
+				`);
+				log.info(
+					{},
+					"All alpla purchase orders have been processed and updated",
+				);
+			}
+
+			// for reqs, create a string of reqs then run them through the gp req table to see there status. then update in lst ass see fit.
+
+			// then double check if we have all reqs covered, for the reqs missing from above restring them and check the po table
+
+			// these ones will be called to as converted to po
+
+			// for the remaining reqs from above check the actual req table to see the status of it if the workflow is set at Recall this means a change was requested from purchasing team and needs to be re approved
+
+			// for all remaining reqs we change them to replace/canceled
+		});
+	}
+};
+
+// const updates = (allReq ?? [])
+// 	.map((row) => {
+// 		const remark = row.remark?.toLowerCase() ?? "";
+
+// 		let approvedStatus: string | null = null;
+
+// 		// priority order matters here
+// 		if (remark === "") {
+// 			approvedStatus = "initial";
+// 		} else if (remark.includes("rct")) {
+// 			approvedStatus = "received";
+// 		} else if (remark.includes("apo")) {
+// 			approvedStatus = "approved";
+// 		}
+
+// 		// add your next 4 checks here
+// 		// else if (...) approvedStatus = "somethingElse";
+
+// 		if (!approvedStatus) return null;
+
+// 		return {
+// 			id: row.id,
+// 			approvedStatus,
+// 		};
+// 	})
+// 	.filter(
+// 		(
+// 			row,
+// 		): row is {
+// 			id: string;
+// 			approvedStatus: string;
+// 		} => row !== null,
+// 	);

backend/rfid/daytonConfig copy.json

@@ -0,0 +1,188 @@
+{
+  "GPIO-LED": {
+    "GPODefaults": {
+      "1": "HIGH",
+      "2": "HIGH",
+      "3": "HIGH",
+      "4": "HIGH"
+    },
+    "LEDDefaults": {
+      "3": "GREEN"
+    },
+    "TAG_READ": [
+      {
+        "pin": 1,
+        "state": "HIGH",
+        "type": "GPO"
+      }
+    ]
+  },
+  "READER-GATEWAY": {
+    "batching": [
+      {
+        "maxPayloadSizePerReport": 256000,
+        "reportingInterval": 2000
+      }
+    ],
+    "endpointConfig": {
+      "data": {
+        "event": {
+          "connections": [
+            {
+              "additionalOptions": {
+                "batching": {
+                  "maxPayloadSizePerReport": 256000,
+                  "reportingInterval": 2000
+                },
+                "retention": {
+                  "maxEventRetentionTimeInMin": 500,
+                  "maxNumEvents": 150000,
+                  "throttle": 100
+                }
+              },
+              "description": "",
+              "name": "LST",
+              "options": {
+                "URL": "https://usday1prod.alpla.net/lst/old/api/rfid/taginfo/line3.4",
+                "security": {
+                  "CACertificateFileLocation": "",
+                  "authenticationOptions": {
+                    "privateKeyFileLocation": "/readerconfig/ssl/server.key",
+                    "publicKeyFileLocation": "/readerconfig/ssl/server.crt"
+                  },
+                  "authenticationType": "NONE",
+                  "verifyHost": false,
+                  "verifyPeer": false
+                }
+              },
+              "type": "httpPost"
+            }
+          ]
+        }
+      }
+    },
+    "managementEventConfig": {
+      "errors": {
+        "antenna": false,
+        "cpu": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "database": true,
+        "flash": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "ntp": true,
+        "radio": true,
+        "radio_control": true,
+        "ram": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "reader_gateway": true,
+        "userApp": {
+          "reportIntervalInSec": 1800,
+          "threshold": 120
+        }
+      },
+      "gpiEvents": true,
+      "gpoEvents": true,
+      "heartbeat": {
+        "fields": {
+          "radio_control": [
+            "ANTENNAS",
+            "RADIO_ACTIVITY",
+            "RADIO_CONNECTION",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_ERRORS",
+            "NUM_WARNINGS",
+            "NUM_TAG_READS",
+            "NUM_TAG_READS_PER_ANTENNA",
+            "NUM_DATA_MESSAGES_TXED",
+            "NUM_RADIO_PACKETS_RXED"
+          ],
+          "reader_gateway": [
+            "NUM_DATA_MESSAGES_RXED",
+            "NUM_MANAGEMENT_EVENTS_TXED",
+            "NUM_DATA_MESSAGES_TXED",
+            "NUM_DATA_MESSAGES_RETAINED",
+            "NUM_DATA_MESSAGES_DROPPED",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_ERRORS",
+            "NUM_WARNINGS",
+            "INTERFACE_CONNECTION_STATUS",
+            "NOLOCKQ_DEPTH"
+          ],
+          "system": [
+            "CPU",
+            "FLASH",
+            "NTP",
+            "RAM",
+            "SYSTEMTIME",
+            "TEMPERATURE",
+            "UPTIME",
+            "GPO",
+            "GPI",
+            "POWER_NEGOTIATION",
+            "POWER_SOURCE",
+            "MAC_ADDRESS",
+            "HOSTNAME"
+          ],
+          "userDefined": null,
+          "userapps": [
+            "STATUS",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_DATA_MESSAGES_RXED",
+            "NUM_DATA_MESSAGES_TXED",
+            "INCOMING_DATA_BUFFER_PERCENTAGE_REMAINING",
+            "OUTGOING_DATA_BUFFER_PERCENTAGE_REMAINING"
+          ]
+        },
+        "interval": 60
+      },
+      "userappEvents": true,
+      "warnings": {
+        "cpu": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "database": true,
+        "flash": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "ntp": true,
+        "radio_api": true,
+        "radio_control": true,
+        "ram": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "reader_gateway": true,
+        "temperature": {
+          "ambient": 75,
+          "pa": 105
+        },
+        "userApp": {
+          "reportIntervalInSec": 1800,
+          "threshold": 60
+        }
+      }
+    },
+    "retention": [
+      {
+        "maxEventRetentionTimeInMin": 500,
+        "maxNumEvents": 150000,
+        "throttle": 100
+      }
+    ]
+  },
+  "xml": "<?xml version='1.0'?>\n<Motorola xmlns:Falcon='http://www.motorola.com/RFID/Readers/Config/Falcon' xmlns='http://www.motorola.com/RFID/Readers/Config/Falcon'>\n<Config>\n<AppVersion major='3' minor='28' build='1' maintenance='0'/>\n<CommConfig EnabledStacks='IPV4' DisableRAPktProcessing='1' EnableDHCPv6='1' IPv6StaticIPAddr='fe80::1' IPv6SubnetMask='64' IPv6StaticGateway='::' IPv6DNSIP='fe80::20' DHCP='1' IPAddr='10.44.14.39' Mask='255.255.255.0' Gateway='10.44.14.252' DNS='10.44.9.250' DomainSearch='example.com' HttpRunning='2' TelnetActive='2' FtpActive='2' usbMode='0' WatchdogEnabled='1' AvahiEnabled='1' NetBIOSEnabled='0' RDMPAgentEnabled='1' SerialConTimeout='0' SNTP='0.0.0.0' SNTPHostName='pool.ntp.org' sntpHostDisplayMode='0' llrpClientMode='0' llrpSecureMode='0' llrpSecureModeValidatePeer='0' llrpPort='5084' llrpHostIP='192.168.127.2' allowllrpConnOverride='0' shouldReconnect='1'/>\n<Bluetooth discoverable='0' pairable='0' PincodeEnabled='0' passkey='165CB22DA5BE7BBEFB77709DD0A94B03FB77709DD0A94B03FB77709DD0A94B03FB77709DD0A94B03FB77709DD0A94B03FB77709DD0A94B03FB77709DD0A94B03' startIP='192.168.0.2' endIP='192.168.0.3'/>\n<WirelessConfig essid='' autoconnect='0'/>\n<RegionConfig RFCountry='United States/Canada' RFRegulatory='US FCC 15' RFScanMode='0' LBTEnable='0' ChannelData='FFFFFFFFFFFFFFFF'/>\n<SnmpConfig snmpVersion='1' heartbeat='1'/>\n<SyslogConfig RemoteIp='0.0.0.0' RemotePort='514' LogMinSeverity='7' ApplyFilter='0' MinimumSeverity='7' ProcessFilter='rmserver.elf,llrpserver.elf,snmpextagent.elf,RDMPAgent'/>\n<UserList>\n<User name='admin' PSWD='$6$weLpDwlv$utr0AwgPIae2O4Gln4cQ2IJJblXye412Xqni0V.ahIFKUOCEDGjzZ4ttthhrw7rmmQYsCXKwA9znyqPkAT.IL/'/>\n<User name='rfidadm' PSWD='15491'/>\n</UserList>\n<IPReader name='FX96007AF832 FX9600 RFID Reader' desc='FX96007AF832 Advanced Reader' flags='0' MonoStatic='0' CheckAntenna='1' gpiDebounceTime='0' gpioMapping='0' idleModeTimeOut='0' diagMode='0' extDiagMode='0' contact='Zebra Technologies Corporation' PowerNegotiation='0' PowerNegotiationProtocol='0' allowGuestLogin='1' configureHostName='0'>\n<ReadPoint name='Read Point 1' flags='0' CableLossPerHundredFt='10' CableLength='10'/>\n<ReadPoint name='Read Point 2' flags='0' CableLossPerHundredFt='10' CableLength='10'/>\n<ReadPoint name='Read Point 3' flags='1' CableLossPerHundredFt='10' CableLength='10'/>\n<ReadPoint name='Read Point 4' flags='1' CableLossPerHundredFt='10' CableLength='10'/>\n</IPReader>\n<SerialPortConf Mode='0' Baudrate='115200' Databits='8' Parity='none' Stopbits='1' Flowcontrol='hardware' TagMetaData='0' InventoryControl='0' IsAutostart='0'/>\n<FXConnectConfig FXConnectMode='0' TagMetaData='0' InventoryControl='None' HeartBeatPeriod='0' IsAutostart='0' PreFilterMode='0' PreFilters='None'/>\n<ProfinetConfig virtualDAP='1'/>\n<NodeJSPortConf Portnumber='8001'/>\n</Config>\n<MOTOROLA_LLRP_CONFIG><LLRP_READER_CONFIG />\n</MOTOROLA_LLRP_CONFIG>\n<IOT_CONNECT_CONFIG><OPERATING_MODE />\n</IOT_CONNECT_CONFIG>\n<RadioProfileData><RadioRegisterData Address='0' Data='00'/>\n</RadioProfileData>\n<CustomProfileData ForceEAPMode='0' FIPS_MODE_ENABLED='0' MaxNumberOfTagsBuffered='512'/>\n</Motorola >\n"
+}

backend/rfid/daytonConfig.json

@@ -0,0 +1,206 @@
+{
+  "GPIO-LED": {
+    "GPODefaults": {
+      "1": "HIGH",
+      "2": "HIGH",
+      "3": "HIGH",
+      "4": "HIGH"
+    },
+    "LEDDefaults": {
+      "3": "GREEN"
+    },
+    "TAG_READ": [
+      {
+        "pin": 1,
+        "state": "HIGH",
+        "type": "GPO"
+      }
+    ]
+  },
+  "READER-GATEWAY": {
+    "batching": [
+      {
+        "maxPayloadSizePerReport": 256000,
+        "reportingInterval": 2000
+      }
+    ],
+    "endpointConfig": {
+      "data": {
+        "event": {
+          "connections": [
+            {
+              "additionalOptions": {
+                "retention": {
+                  "maxEventRetentionTimeInMin": 500,
+                  "maxNumEvents": 150000,
+                  "throttle": 100
+                }
+              },
+              "description": "",
+              "name": "lst",
+              "options": {
+                "URL": "http://usday1vms006:3100/api/rfid/taginfo/wrapper1",
+                "security": {
+                  "CACertificateFileLocation": "",
+                  "authenticationOptions": {},
+                  "authenticationType": "NONE",
+                  "verifyHost": false,
+                  "verifyPeer": false
+                }
+              },
+              "type": "httpPost"
+            },
+            {
+              "additionalOptions": {
+                "retention": {
+                  "maxEventRetentionTimeInMin": 500,
+                  "maxNumEvents": 150000,
+                  "throttle": 100
+                }
+              },
+              "description": "",
+              "name": "mgt",
+              "options": {
+                "URL": "http://usday1vms006:3100/api/rfid/mgtevents/wrapper1",
+                "security": {
+                  "CACertificateFileLocation": "",
+                  "authenticationOptions": {},
+                  "authenticationType": "NONE",
+                  "verifyHost": false,
+                  "verifyPeer": false
+                }
+              },
+              "type": "httpPost"
+            }
+          ]
+        }
+      }
+    },
+    "interfaces": {
+    "tagDataInterface1": "lst",
+    "managementEventsInterface": "mgt"
+  },
+    "managementEventConfig": {
+      "errors": {
+        "antenna": false,
+        "cpu": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "database": true,
+        "flash": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "ntp": true,
+        "radio": true,
+        "radio_control": true,
+        "ram": {
+          "reportIntervalInSec": 1800,
+          "threshold": 90
+        },
+        "reader_gateway": true,
+        "userApp": {
+          "reportIntervalInSec": 1800,
+          "threshold": 120
+        }
+      },
+      "gpiEvents": true,
+      "gpoEvents": true,
+      "heartbeat": {
+        "fields": {
+          "radio_control": [
+            "ANTENNAS",
+            "RADIO_ACTIVITY",
+            "RADIO_CONNECTION",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_ERRORS",
+            "NUM_WARNINGS",
+            "NUM_TAG_READS",
+            "NUM_TAG_READS_PER_ANTENNA",
+            "NUM_DATA_MESSAGES_TXED",
+            "NUM_RADIO_PACKETS_RXED"
+          ],
+          "reader_gateway": [
+            "NUM_DATA_MESSAGES_RXED",
+            "NUM_MANAGEMENT_EVENTS_TXED",
+            "NUM_DATA_MESSAGES_TXED",
+            "NUM_DATA_MESSAGES_RETAINED",
+            "NUM_DATA_MESSAGES_DROPPED",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_ERRORS",
+            "NUM_WARNINGS",
+            "INTERFACE_CONNECTION_STATUS",
+            "NOLOCKQ_DEPTH"
+          ],
+          "system": [
+            "CPU",
+            "FLASH",
+            "NTP",
+            "RAM",
+            "SYSTEMTIME",
+            "TEMPERATURE",
+            "UPTIME",
+            "GPO",
+            "GPI",
+            "POWER_NEGOTIATION",
+            "POWER_SOURCE",
+            "MAC_ADDRESS",
+            "HOSTNAME"
+          ],
+          "userDefined": null,
+          "userapps": [
+            "STATUS",
+            "CPU",
+            "RAM",
+            "UPTIME",
+            "NUM_DATA_MESSAGES_RXED",
+            "NUM_DATA_MESSAGES_TXED",
+            "INCOMING_DATA_BUFFER_PERCENTAGE_REMAINING",
+            "OUTGOING_DATA_BUFFER_PERCENTAGE_REMAINING"
+          ]
+        },
+        "interval": 60
+      },
+      "userappEvents": true,
+      "warnings": {
+        "cpu": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "database": true,
+        "flash": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "ntp": true,
+        "radio_api": true,
+        "radio_control": true,
+        "ram": {
+          "reportIntervalInSec": 1800,
+          "threshold": 80
+        },
+        "reader_gateway": true,
+        "temperature": {
+          "ambient": 75,
+          "pa": 105
+        },
+        "userApp": {
+          "reportIntervalInSec": 1800,
+          "threshold": 60
+        }
+      }
+    },
+    "retention": [
+      {
+        "maxEventRetentionTimeInMin": 500,
+        "maxNumEvents": 150000,
+        "throttle": 100
+      }
+    ]
+  }
+}

backend/routeHandler.routes.ts

@@ -1,8 +1,12 @@
 import type { Express } from "express";
+
 import { setupAuthRoutes } from "./auth/auth.routes.js";
 // import the routes and route setups
 import { setupApiDocsRoutes } from "./configs/scaler.config.js";
 import { setupDatamartRoutes } from "./datamart/datamart.routes.js";
+import { setupGPSqlRoutes } from "./gpSql/gpSql.routes.js";
+import { setupNotificationRoutes } from "./notification/notification.routes.js";
+import { setupOCPRoutes } from "./ocp/ocp.routes.js";
 import { setupOpendockRoutes } from "./opendock/opendock.routes.js";
 import { setupProdSqlRoutes } from "./prodSql/prodSql.routes.js";
 import { setupSystemRoutes } from "./system/system.routes.js";
@@ -13,8 +17,11 @@ export const setupRoutes = (baseUrl: string, app: Express) => {
 	setupSystemRoutes(baseUrl, app);
 	setupApiDocsRoutes(baseUrl, app);
 	setupProdSqlRoutes(baseUrl, app);
+	setupGPSqlRoutes(baseUrl, app);
 	setupDatamartRoutes(baseUrl, app);
 	setupAuthRoutes(baseUrl, app);
 	setupUtilsRoutes(baseUrl, app);
 	setupOpendockRoutes(baseUrl, app);
+	setupNotificationRoutes(baseUrl, app);
+	setupOCPRoutes(baseUrl, app);
 };

backend/server.ts

@@ -4,10 +4,14 @@ import createApp from "./app.js";
 import { db } from "./db/db.controller.js";
 import { dbCleanup } from "./db/dbCleanup.controller.js";
 import { type Setting, settings } from "./db/schema/settings.schema.js";
+import { connectGPSql } from "./gpSql/gpSqlConnection.controller.js";
 import { createLogger } from "./logger/logger.controller.js";
+import { startNotifications } from "./notification/notification.controller.js";
+import { createNotifications } from "./notification/notifications.master.js";
 import { monitorReleaseChanges } from "./opendock/openDockRreleaseMonitor.utils.js";
 import { opendockSocketMonitor } from "./opendock/opendockSocketMonitor.utils.js";
 import { connectProdSql } from "./prodSql/prodSqlConnection.controller.js";
+import { monitorAlplaPurchase } from "./purchase/purchase.controller.js";
 import { setupSocketIORoutes } from "./socket.io/serverSetup.js";
 import { baseSettingValidationCheck } from "./system/settingsBase.controller.js";
 import { createCronJob } from "./utils/croner.utils.js";
@@ -25,6 +29,7 @@ const start = async () => {
 
 	// triggering long lived processes
 	connectProdSql();
+	connectGPSql();
 
 	// trigger startup processes these must run before anything else can run
 	await baseSettingValidationCheck();
@@ -34,7 +39,7 @@ const start = async () => {
 	// also we always want to have long lived processes inside a setting check.
 	setTimeout(() => {
 		if (systemSettings.filter((n) => n.name === "opendock_sync")[0]?.active) {
-			log.info({}, "Opendock is not active");
+			log.info({}, "Opendock is active");
 			monitorReleaseChanges(); // this is od monitoring the db for all new releases
 			opendockSocketMonitor();
 			createCronJob("opendockAptCleanup", "0 30 5 * * *", () =>
@@ -42,11 +47,19 @@ const start = async () => {
 			);
 		}
 
+		if (systemSettings.filter((n) => n.name === "purchaseMonitor")[0]?.active) {
+			monitorAlplaPurchase();
+		}
+
 		// these jobs below are system jobs and should run no matter what.
 		createCronJob("JobAuditLogCleanUp", "0 0 5 * * *", () =>
 			dbCleanup("jobs", 30),
 		);
 		createCronJob("logsCleanup", "0 15 5 * * *", () => dbCleanup("logs", 120));
+
+		// one shots only needed to run on server startups
+		createNotifications();
+		startNotifications();
 	}, 5 * 1000);
 
 	server.listen(port, async () => {

backend/socket.io/roomDefinitions.socket.ts

@@ -1,3 +1,4 @@
+import { desc } from "drizzle-orm";
 import { db } from "../db/db.controller.js";
 import { logs } from "../db/schema/logs.schema.js";
 import type { RoomId } from "./types.socket.js";
@@ -6,6 +7,11 @@ type RoomDefinition<T = unknown> = {
 	seed: (limit: number) => Promise<T[]>;
 };
 
+export const protectedRooms: any = {
+	logs: { requiresAuth: true, role: ["admin", "systemAdmin"] },
+	admin: { requiresAuth: true, role: ["admin", "systemAdmin"] },
+};
+
 export const roomDefinition: Record<RoomId, RoomDefinition> = {
 	logs: {
 		seed: async (limit) => {
@@ -13,7 +19,7 @@ export const roomDefinition: Record<RoomId, RoomDefinition> = {
 				const rows = await db
 					.select()
 					.from(logs)
-					.orderBy(logs.createdAt)
+					.orderBy(desc(logs.createdAt))
 					.limit(limit);
 
 				return rows; //.reverse();

backend/socket.io/serverSetup.ts

@@ -3,6 +3,7 @@ import type { Server as HttpServer } from "node:http";
 //import { fileURLToPath } from "node:url";
 import { instrument } from "@socket.io/admin-ui";
 import { Server } from "socket.io";
+
 import { createLogger } from "../logger/logger.controller.js";
 import { allowedOrigins } from "../utils/cors.utils.js";
 import { registerEmitter } from "./roomEmitter.socket.js";
@@ -12,6 +13,17 @@ import { createRoomEmitter, preseedRoom } from "./roomService.socket.js";
 //const __dirname = dirname(__filename);
 const log = createLogger({ module: "socket.io", subModule: "setup" });
 
+import { auth } from "../utils/auth.utils.js";
+//import type { Session, User } from "better-auth"; // adjust if needed
+import { protectedRooms } from "./roomDefinitions.socket.js";
+
+// declare module "socket.io" {
+// 	interface Socket {
+// 		user?: User | any;
+// 		session?: Session;
+// 	}
+// }
+
 export const setupSocketIORoutes = (baseUrl: string, server: HttpServer) => {
 	const io = new Server(server, {
 		path: `${baseUrl}/api/socket.io`,
@@ -25,6 +37,38 @@ export const setupSocketIORoutes = (baseUrl: string, server: HttpServer) => {
 	const { addDataToRoom } = createRoomEmitter(io);
 	registerEmitter(addDataToRoom);
 
+	io.use(async (socket, next) => {
+		try {
+			//const cookieHeader = socket.handshake.headers.cookie;
+			const headers = new Headers();
+
+			for (const [key, value] of Object.entries(socket.request.headers)) {
+				if (typeof value === "string") {
+					headers.set(key, value);
+				} else if (Array.isArray(value)) {
+					headers.set(key, value.join(", "));
+				}
+			}
+
+			const session = await auth.api.getSession({
+				headers,
+			});
+
+			if (!session) {
+				return next(); // allow connection, but no auth
+			}
+
+			if (session) {
+				socket.user = session.user;
+				socket.session = session as any;
+			}
+
+			next();
+		} catch (err) {
+			next();
+		}
+	});
+
 	io.on("connection", (s) => {
 		log.info({}, `User connected: ${s.id}`);
 
@@ -35,6 +79,26 @@ export const setupSocketIORoutes = (baseUrl: string, server: HttpServer) => {
 		});
 
 		s.on("join-room", async (rn) => {
+			const config = protectedRooms[rn];
+
+			if (config?.requiresAuth && !s.user) {
+				return s.emit("room-error", {
+					room: rn,
+					message: "Authentication required",
+				});
+			}
+
+			const roles = Array.isArray(config.role) ? config.role : [config.role];
+
+			console.log(roles, s.user.role);
+
+			//if (config?.role && s.user?.role !== config.role) {
+			if (config?.role && !roles.includes(s.user?.role)) {
+				return s.emit("room-error", {
+					room: rn,
+					message: `Not authorized to be in room: ${rn}`,
+				});
+			}
 			s.join(rn);
 
 			// get room seeded

backend/system/settingsBase.controller.ts

@@ -8,8 +8,8 @@ const newSettings: NewSetting[] = [
 	// feature settings
 	{
 		name: "opendock_sync",
-		value: "0",
-		active: true,
+		value: "15",
+		active: false,
 		description: "Dock Scheduling system",
 		moduleName: "opendock",
 		settingType: "feature",
@@ -19,7 +19,7 @@ const newSettings: NewSetting[] = [
 	{
 		name: "ocp",
 		value: "1",
-		active: true,
+		active: false,
 		description: "One click print",
 		moduleName: "ocp",
 		settingType: "feature",
@@ -29,7 +29,7 @@ const newSettings: NewSetting[] = [
 	{
 		name: "ocme",
 		value: "0",
-		active: true,
+		active: false,
 		description: "Dayton Agv system",
 		moduleName: "ocme",
 		settingType: "feature",
@@ -39,7 +39,7 @@ const newSettings: NewSetting[] = [
 	{
 		name: "demandManagement",
 		value: "1",
-		active: true,
+		active: false,
 		description: "Fake EDI System",
 		moduleName: "demandManagement",
 		settingType: "feature",
@@ -49,7 +49,7 @@ const newSettings: NewSetting[] = [
 	{
 		name: "qualityRequest",
 		value: "0",
-		active: true,
+		active: false,
 		description: "Quality System",
 		moduleName: "qualityRequest",
 		settingType: "feature",
@@ -59,13 +59,23 @@ const newSettings: NewSetting[] = [
 	{
 		name: "tms",
 		value: "0",
-		active: true,
+		active: false,
 		description: "Transport system integration",
 		moduleName: "tms",
 		settingType: "feature",
 		roles: ["admin"],
 		seedVersion: 1,
 	},
+	{
+		name: "purchaseMonitor",
+		value: "5",
+		active: true,
+		description: "Monitors alpla purchase fo all changes",
+		moduleName: "purchase",
+		settingType: "feature",
+		roles: ["admin"],
+		seedVersion: 1,
+	},
 
 	// standard settings
 	{

backend/system/settingsFeatures.controller.ts

@@ -10,6 +10,7 @@ import {
 	killOpendockSocket,
 	opendockSocketMonitor,
 } from "../opendock/opendockSocketMonitor.utils.js";
+import { monitorAlplaPurchase } from "../purchase/purchase.controller.js";
 import {
 	createCronJob,
 	resumeCronJob,
@@ -31,8 +32,24 @@ export const featureControl = async (data: Setting) => {
 		createCronJob("opendockAptCleanup", "0 30 5 * * *", () =>
 			dbCleanup("opendockApt", 90),
 		);
-	} else {
+	}
+
+	if (data.name === "opendock_sync" && !data.active) {
 		killOpendockSocket();
 		stopCronJob("opendockAptCleanup");
 	}
+
+	// purchase stuff
+	if (data.name === "purchaseMonitor" && data.active) {
+		monitorAlplaPurchase();
+	}
+
+	if (data.name === "purchaseMonitor" && !data.active) {
+		stopCronJob("purchaseMonitor");
+	}
+
+	// this means the data time has changed
+	if (data.name === "purchaseMonitor" && data.value) {
+		monitorAlplaPurchase();
+	}
 };

backend/types/purhcaseTypes.ts

@@ -0,0 +1,9 @@
+export type GpStatus = {
+	id: string;
+	req: string;
+};
+
+export type StatusUpdate = {
+	id: string;
+	approvedStatus: string;
+};

backend/types/socket.d.ts

@@ -0,0 +1,9 @@
+import "socket.io";
+import type { Session, User } from "better-auth"; // adjust if needed
+
+declare module "socket.io" {
+	interface Socket {
+		user?: User | any;
+		session?: Session;
+	}
+}

backend/utils/auth.permissions.ts

@@ -0,0 +1,26 @@
+import { createAccessControl } from "better-auth/plugins/access";
+
+export const statement = {
+	app: ["read", "create", "share", "update", "delete", "readAll"],
+	user: ["ban"],
+	quality: ["read", "create", "share", "update", "delete", "readAll"],
+	notifications: ["read", "create", "share", "update", "delete", "readAll"],
+} as const;
+
+export const ac = createAccessControl(statement);
+
+export const user = ac.newRole({
+	app: ["read", "create"],
+	notifications: ["read", "create"],
+});
+
+export const admin = ac.newRole({
+	app: ["read", "create", "update"],
+});
+
+export const systemAdmin = ac.newRole({
+	app: ["read", "create", "share", "update", "delete", "readAll"],
+	user: ["ban"],
+	quality: ["read", "create", "share", "update", "delete", "readAll"],
+	notifications: ["read", "create", "share", "update", "delete", "readAll"],
+});

backend/utils/auth.utils.ts

@@ -1,7 +1,7 @@
 import { betterAuth } from "better-auth";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import {
-	admin,
+	admin as adminPlugin,
 	// apiKey,
 	// createAuthMiddleware,
 	//customSession,
@@ -12,6 +12,7 @@ import {
 //import { eq } from "drizzle-orm";
 import { db } from "../db/db.controller.js";
 import * as rawSchema from "../db/schema/auth.schema.js";
+import { ac, admin, systemAdmin, user } from "./auth.permissions.js";
 import { allowedOrigins } from "./cors.utils.js";
 import { sendEmail } from "./sendEmail.utils.js";
 
@@ -32,19 +33,26 @@ export const auth = betterAuth({
 		schema,
 	}),
 	trustedOrigins: allowedOrigins,
-	// user: {
-	// 	additionalFields: {
-	// 		role: {
-	// 			type: "string",
-	// 			//required: false,
-	// 			input: false,
-	// 		},
-	// 	},
-	// },
+	user: {
+		additionalFields: {
+			role: {
+				type: "string",
+				//required: false,
+				input: false,
+			},
+		},
+	},
 	plugins: [
 		jwt({ jwt: { expirationTime: "1h" } }),
 		//apiKey(),
-		admin(),
+		adminPlugin({
+			ac,
+			roles: {
+				admin,
+				user,
+				systemAdmin,
+			},
+		}),
 		lastLoginMethod(),
 		username({
 			minUsernameLength: 5,
@@ -77,7 +85,7 @@ export const auth = betterAuth({
 		minPasswordLength: 8, // optional config
 		resetPasswordTokenExpirySeconds: process.env.RESET_EXPIRY_SECONDS, // time in seconds
 		sendResetPassword: async ({ user, token }) => {
-			const frontendUrl = `${process.env.BETTER_AUTH_URL}/lst/app/user/resetpassword?token=${token}`;
+			const frontendUrl = `${process.env.URL}/lst/app/user/resetpassword?token=${token}`;
 			const expiryMinutes = Math.floor(
 				parseInt(process.env.RESET_EXPIRY_SECONDS ?? "3600", 10) / 60,
 			);

backend/utils/cors.utils.ts

@@ -15,6 +15,7 @@ export const allowedOrigins = [
 	`http://${process.env.PROD_SERVER}:3000`,
 	`http://${process.env.PROD_SERVER}:3100`, // temp
 	`http://usmcd1olp082:3000`,
+	`${process.env.EXTERNAL_URL}`, // internal docker
 ];
 export const lstCors = () => {
 	return cors({

backend/utils/croner.minConvert.ts

@@ -0,0 +1,38 @@
+import { createLogger } from "../logger/logger.controller.js";
+
+const minTime = 5;
+export const minutesToCron = (minutes: number): string => {
+	const log = createLogger({ module: "system", subModule: "croner" });
+	if (minutes < minTime) {
+		log.error(
+			{},
+			`Conversion of less then ${minTime} min and is not allowed on this server`,
+		);
+	}
+
+	// Every X minutes (under 60)
+	if (minutes < 60) {
+		return `*/${minutes} * * * *`;
+	}
+
+	// Every X hours (clean division)
+	if (minutes % 60 === 0 && minutes < 1440) {
+		const hours = minutes / 60;
+		return `0 0 */${hours} * * *`;
+	}
+
+	// Every day
+	if (minutes === 1440) {
+		return `0 0 8 * * *`; // 8am
+	}
+
+	// Every X days (clean division)
+	if (minutes % 1440 === 0) {
+		const days = minutes / 1440;
+		return `0 0 0 */${days} * *`;
+	}
+
+	// Fallback (not cleanly divisible)
+	// Cron can't represent this perfectly → run every X minutes as approximation
+	return `0 */${minutes} * * * *`;
+};

backend/utils/croner.utils.ts

@@ -18,7 +18,9 @@ export interface JobInfo {
 
 // Store running cronjobs
 export const runningCrons: Record<string, Cron> = {};
+const activeRuns = new Set<string>();
 const log = createLogger({ module: "system", subModule: "croner" });
+const cronStats: Record<string, { created: number; replaced: number }> = {};
 
 // how to se the times
 //  * ┌──────────────── (optional) second (0 - 59)
@@ -38,17 +40,36 @@ const log = createLogger({ module: "system", subModule: "croner" });
  * @param name Name of the job we want to run
  * @param schedule Cron expression (example: `*\/5 * * * * *`)
  * @param task Async function that will run
+ * @param source we can add where it came from to assist in getting this tracked down, more for debugging
  */
 export const createCronJob = async (
 	name: string,
 	schedule: string, // cron string with 8 8 IE: */5 * * * * * every 5th second
 	task: () => Promise<void>, // what function are we passing over
+	source = "unknown",
 ) => {
 	// get the timezone based on the os timezone set
 	const timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
 
+	// initial go so just store it this is more for debugging to see if something crazy keeps happening
+	if (!cronStats[name]) {
+		cronStats[name] = { created: 0, replaced: 0 };
+	}
+
 	// Destroy existing job if it exist
 	if (runningCrons[name]) {
+		cronStats[name].replaced += 1;
+		log.warn(
+			{
+				job: name,
+				source,
+				oldSchedule: runningCrons[name].getPattern?.(),
+				newSchedule: schedule,
+				replaceCount: cronStats[name].replaced,
+			},
+			`Cron job "${name}" already existed and is being replaced`,
+		);
+
 		runningCrons[name].stop();
 	}
 
@@ -61,6 +82,13 @@ export const createCronJob = async (
 			name: name,
 		},
 		async () => {
+			if (activeRuns.has(name)) {
+				log.warn({ jobName: name }, "Skipping overlapping cron execution");
+				return;
+			}
+
+			activeRuns.add(name);
+
 			const startedAt = new Date();
 			const start = Date.now();
 
@@ -91,14 +119,19 @@ export const createCronJob = async (
 					.where(eq(jobAuditLog.id, executionId));
 			} catch (e: any) {
 				if (executionId) {
-					await db.update(jobAuditLog).set({
-						finishedAt: new Date(),
-						durationMs: Date.now() - start,
-						status: "error",
-						errorMessage: e.message,
-						errorStack: e.stack,
-					});
+					await db
+						.update(jobAuditLog)
+						.set({
+							finishedAt: new Date(),
+							durationMs: Date.now() - start,
+							status: "error",
+							errorMessage: e.message,
+							errorStack: e.stack,
+						})
+						.where(eq(jobAuditLog.id, executionId));
 				}
+			} finally {
+				activeRuns.delete(name);
 			}
 		},
 	);

backend/utils/mailViews/reprintLabels.hbs

@@ -0,0 +1,47 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    {{!-- <link rel="stylesheet" href="styles/styles.css" /> --}}
+    {{> styles}}
+</head>
+<body>
+        <p>All,</p> 
+        <p>The below labels have been reprinted.</p>        
+        <table > 
+        <thead> 
+            <tr> 
+            <th>AV</th> 
+            <th>Description</th> 
+            <th>Label Number</th> 
+            <th>Date Added</th> 
+            <th>Date Reprinted</th> 
+            <th>Who printed/Updated</th> 
+            <th>What printer it came from</th> 
+ 
+            </tr> 
+        </thead> 
+
+        <tbody>
+            {{#each items}}
+                    <tr>
+                        <td>{{av}}</td>
+                        <td>{{alias}}</td>
+                        <td>{{RunningNumber}}</td>
+                        <td>{{printDate}}</td>
+                        <td>{{createdDateTime}}</td>
+                        <td>{{ActorName}}</td>
+                        <td>{{printerName}}</td>
+
+                    </tr>
+                {{/each}}
+        </tbody>
+        </table>
+
+        <div>
+        <p>Thank you,</p>
+        <p>LST Team</p> 
+        </div>
+</body>
+</html>

backend/utils/returnHelper.utils.ts

@@ -3,7 +3,16 @@ import { createLogger } from "../logger/logger.controller.js";
 
 interface Data<T = unknown[]> {
 	success: boolean;
-	module: "system" | "ocp" | "routes" | "datamart" | "utils" | "opendock";
+	module:
+		| "system"
+		| "ocp"
+		| "routes"
+		| "datamart"
+		| "utils"
+		| "opendock"
+		| "notification"
+		| "email"
+		| "purchase";
 	subModule:
 		| "db"
 		| "labeling"
@@ -15,7 +24,16 @@ interface Data<T = unknown[]> {
 		| "datamart"
 		| "jobs"
 		| "apt"
-		| "settings";
+		| "settings"
+		| "get"
+		| "update"
+		| "delete"
+		| "post"
+		| "notification"
+		| "delete"
+		| "printing"
+		| "gpSql"
+		| "email";
 	level: "info" | "error" | "debug" | "fatal";
 	message: string;
 	room?: string;
@@ -47,13 +65,14 @@ export const returnFunc = (data: Data) => {
 			log.info({ notify: notify, room }, data.message);
 			break;
 		case "error":
-			log.error({ notify: notify, error: data.data, room }, data.message);
+			log.error({ notify: notify, stack: data.data ?? [], room }, data.message);
+
 			break;
 		case "debug":
-			log.debug({ notify: notify, room }, data.message);
+			log.debug({ notify: notify, stack: data.data ?? [], room }, data.message);
 			break;
 		case "fatal":
-			log.fatal({ notify: notify, room }, data.message);
+			log.fatal({ notify: notify, stack: data.data ?? [], room }, data.message);
 	}
 
 	// api section to return

backend/utils/sendEmail.utils.ts

@@ -1,12 +1,9 @@
-import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import type { Transporter } from "nodemailer";
 import nodemailer from "nodemailer";
 import type Mail from "nodemailer/lib/mailer/index.js";
-import type { Address } from "nodemailer/lib/mailer/index.js";
-import type SMTPTransport from "nodemailer/lib/smtp-transport/index.js";
 import hbs from "nodemailer-express-handlebars";
 import { returnFunc } from "./returnHelper.utils.js";
 import { tryCatch } from "./trycatch.utils.js";
@@ -24,62 +21,36 @@ interface EmailData {
 }
 
 export const sendEmail = async (data: EmailData) => {
-	let transporter: Transporter;
-	let fromEmail: string | Address;
+	const fromEmail: string = `DoNotReply@mail.alpla.com`;
+	const transporter: Transporter = nodemailer.createTransport({
+		host: "smtp.azurecomm.net",
+		port: 587,
+		//rejectUnauthorized: false,
+		tls: {
+			minVersion: "TLSv1.2",
+		},
+		auth: {
+			user: "donotreply@mail.alpla.com",
+			pass: process.env.SMTP_PASSWORD,
+		},
+		debug: true,
+	});
 
-	if (os.hostname().includes("OLP")) {
-		transporter = nodemailer.createTransport({
-			service: "gmail",
-			auth: {
-				user: process.env.EMAIL_USER,
-				pass: process.env.EMAIL_PASSWORD, // The 16-character App Password
-			},
-			//debug: true,
-		});
-
-		// update the from email
-		fromEmail = process.env.EMAIL_USER as string;
-
-		// update the from email
-		fromEmail = `donotreply@alpla.com`;
-	} else {
-		//create the servers smtp config
-		let host = `${os.hostname().replace("VMS006", "")}-smtp.alpla.net`;
-
-		if (os.hostname().includes("VMS036")) {
-			host = "USMCD1-smtp.alpla.net";
-		}
-
-		transporter = nodemailer.createTransport({
-			host: host,
-			port: 25,
-			rejectUnauthorized: false,
-			//secure: false,
-			// auth: {
-			//   user: "alplaprod",
-			//   pass: "obelix",
-			// },
-			debug: true,
-		} as SMTPTransport.Options);
-
-		// update the from email
-		fromEmail = `donotreply@alpla.com`;
-	}
-
-	// create the handlebars view
+	// creating the handlbar options
 	const viewPath = path.resolve(
 		path.dirname(fileURLToPath(import.meta.url)),
-		"./mailViews",
+		"../utils/mailViews/",
 	);
 
 	const handlebarOptions = {
 		viewEngine: {
 			extname: ".hbs",
-			defaultLayout: "",
+			//layoutsDir: path.resolve(viewPath, "layouts"), // Path to layouts directory
+			defaultLayout: "", // Specify the default layout
 			partialsDir: viewPath,
 		},
 		viewPath: viewPath,
-		extName: ".hbs",
+		extName: ".hbs", // File extension for Handlebars templates
 	};
 
 	transporter.use("compile", hbs(handlebarOptions));
@@ -89,7 +60,7 @@ export const sendEmail = async (data: EmailData) => {
 		to: data.email,
 		subject: data.subject,
 		//text: "You will have a reset token here and only have 30min to click the link before it expires.",
-		//html: emailTemplate("Blake's Test", "This is an example with css"),
+		//html: emailTemplate("BlakesTest", "This is an example with css"),
 		template: data.template, // Name of the Handlebars template (e.g., 'welcome.hbs')
 		context: data.context,
 	};
@@ -117,7 +88,7 @@ export const sendEmail = async (data: EmailData) => {
 			level: "error",
 			module: "utils",
 			subModule: "sendmail",
-			message: `Error sending Email to : ${data.email}`,
+			message: `Error sending Email to : ${data.email}, Error: ${error.message}`,
 			data: [{ error: error }],
 			notify: false,
 		});

brunoApi/environments/lstv3.bru

@@ -1,3 +1,7 @@
 vars {
-  url: http://uslim1vms006:3100/lst
+  url: http://localhost:3600/lst
+  readerIp: 10.44.14.215
 }
+vars:secret [
+  token
+]

brunoApi/notifications/Get All notifications.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Get All notifications.
+  type: http
+  seq: 1
+}
+
+get {
+  url: {{url}}/api/notification
+  body: none
+  auth: inherit
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}
+
+docs {
+  Passing all as a query param will return all queries active and none active
+}

brunoApi/notifications/Subscribe to notification.bru

@@ -0,0 +1,24 @@
+meta {
+  name: Subscribe to notification
+  type: http
+  seq: 2
+}
+
+post {
+  url: {{url}}/api/notification/sub
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "userId":"m6AbQXFwOXoX3YKLfwWgq2LIdDqS5jqv",
+    "notificationId": "0399eb2a-39df-48b7-9f1c-d233cec94d2e",
+    "emails": ["blake.mattes@alpla.com","cowchmonkey@gmail.com"]
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/notifications/folder.bru

@@ -0,0 +1,8 @@
+meta {
+  name: notifications
+  seq: 7
+}
+
+auth {
+  mode: inherit
+}

brunoApi/notifications/remove sub notification.bru

@@ -0,0 +1,24 @@
+meta {
+  name: remove sub notification
+  type: http
+  seq: 4
+}
+
+delete {
+  url: {{url}}/api/notification/sub
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "userId":"0kHd6Kkdub4GW6rK1qa1yjWwqXtvykqT",
+    "notificationId": "0399eb2a-39df-48b7-9f1c-d233cec94d2e",
+    "emails": ["blake.mattes@alpla.com"]
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/notifications/subscriptions.bru

@@ -0,0 +1,16 @@
+meta {
+  name: subscriptions
+  type: http
+  seq: 5
+}
+
+get {
+  url: {{url}}/api/notification/sub
+  body: json
+  auth: inherit
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/notifications/update notification.bru

@@ -0,0 +1,31 @@
+meta {
+  name: update notification
+  type: http
+  seq: 6
+}
+
+patch {
+  url: {{url}}/api/notification/:id
+  body: json
+  auth: inherit
+}
+
+params:path {
+  id: 0399eb2a-39df-48b7-9f1c-d233cec94d2e
+}
+
+body:json {
+  {
+    "active" : true,
+    "options": []
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}
+
+docs {
+  Passing all as a query param will return all queries active and none active
+}

brunoApi/notifications/update sub notification.bru

@@ -0,0 +1,24 @@
+meta {
+  name: update sub notification
+  type: http
+  seq: 3
+}
+
+patch {
+  url: {{url}}/api/notification/sub
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "userId":"m6AbQXFwOXoX3YKLfwWgq2LIdDqS5jqv",
+    "notificationId": "0399eb2a-39df-48b7-9f1c-d233cec94d2e",
+    "emails": ["cowchmonkey@gmail.com"]
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/ocp/Printer Listenter.bru

@@ -0,0 +1,22 @@
+meta {
+  name: Printer Listenter
+  type: http
+  seq: 1
+}
+
+post {
+  url: {{url}}/api/ocp/printer/listener/line_1
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {
+    "message":"xnvjdhhgsdfr"
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/ocp/folder.bru

@@ -0,0 +1,8 @@
+meta {
+  name: ocp
+  seq: 9
+}
+
+auth {
+  mode: inherit
+}

brunoApi/rfidReaders/folder.bru

@@ -0,0 +1,8 @@
+meta {
+  name: rfidReaders
+  seq: 8
+}
+
+auth {
+  mode: inherit
+}

brunoApi/rfidReaders/reader.bru

@@ -0,0 +1,20 @@
+meta {
+  name: reader
+  type: http
+  seq: 2
+}
+
+post {
+  url: https://usday1prod.alpla.net/lst/old/api/rfid/mgtevents/line3.1
+  body: json
+  auth: inherit
+}
+
+body:json {
+  {}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/rfidReaders/readerSpecific/Config.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Config
+  type: http
+  seq: 2
+}
+
+get {
+  url: https://{{readerIp}}/cloud/config
+  body: none
+  auth: bearer
+}
+
+auth:bearer {
+  token: {{token}}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/rfidReaders/readerSpecific/Login.bru

@@ -0,0 +1,32 @@
+meta {
+  name: Login
+  type: http
+  seq: 1
+}
+
+get {
+  url: https://{{readerIp}}/cloud/localRestLogin
+  body: none
+  auth: basic
+}
+
+auth:basic {
+  username: admin
+  password: Zebra123!
+}
+
+script:post-response {
+  const body = res.getBody();
+  
+  if (body.message) {
+    bru.setEnvVar("token", body.message);
+  } else {
+    bru.setEnvVar("token", "error");
+  }
+  
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/rfidReaders/readerSpecific/Update Config.bru

@@ -0,0 +1,237 @@
+meta {
+  name: Update Config
+  type: http
+  seq: 3
+}
+
+put {
+  url: https://{{readerIp}}/cloud/config
+  body: json
+  auth: bearer
+}
+
+headers {
+  Content-Type: application/json
+}
+
+auth:bearer {
+  token: {{token}}
+}
+
+body:json {
+  {
+    "GPIO-LED": {
+      "GPODefaults": {
+        "1": "HIGH",
+        "2": "HIGH",
+        "3": "HIGH",
+        "4": "HIGH"
+      },
+      "LEDDefaults": {
+        "3": "GREEN"
+      },
+      "TAG_READ": [
+        {
+          "pin": 1,
+          "state": "HIGH",
+          "type": "GPO"
+        }
+      ]
+    },
+    "READER-GATEWAY": {
+      "batching": [
+        {
+          "maxPayloadSizePerReport": 256000,
+          "reportingInterval": 2000
+        },
+        {
+          "maxPayloadSizePerReport": 256000,
+          "reportingInterval": 2000
+        }
+      ],
+      "endpointConfig": {
+        "data": {
+          "event": {
+            "connections": [
+              {
+                "additionalOptions": {
+                  "retention": {
+                    "maxEventRetentionTimeInMin": 500,
+                    "maxNumEvents": 150000,
+                    "throttle": 100
+                  }
+                },
+                "description": "",
+                "name": "LST",
+                "options": {
+                  "URL": "https://usday1prod.alpla.net/lst/old/api/rfid/taginfo/line3.4",
+                  "security": {
+                    "CACertificateFileLocation": "",
+                    "authenticationOptions": {},
+                    "authenticationType": "NONE",
+                    "verifyHost": false,
+                    "verifyPeer": false
+                  }
+                },
+                "type": "httpPost"
+              },
+              {
+                "additionalOptions": {
+                  "retention": {
+                    "maxEventRetentionTimeInMin": 500,
+                    "maxNumEvents": 150000,
+                    "throttle": 100
+                  }
+                },
+                "description": "",
+                "name": "mgt",
+                "options": {
+                  "URL": "https://usday1prod.alpla.net/lst/old/api/rfid/mgtevents/line3.4",
+                  "security": {
+                    "CACertificateFileLocation": "",
+                    "authenticationOptions": {},
+                    "authenticationType": "NONE",
+                    "verifyHost": false,
+                    "verifyPeer": false
+                  }
+                },
+                "type": "httpPost"
+              }
+            ]
+          }
+        }
+      },
+      "managementEventConfig": {
+        "errors": {
+          "antenna": false,
+          "cpu": {
+            "reportIntervalInSec": 1800,
+            "threshold": 90
+          },
+          "database": true,
+          "flash": {
+            "reportIntervalInSec": 1800,
+            "threshold": 90
+          },
+          "ntp": true,
+          "radio": true,
+          "radio_control": true,
+          "ram": {
+            "reportIntervalInSec": 1800,
+            "threshold": 90
+          },
+          "reader_gateway": true,
+          "userApp": {
+            "reportIntervalInSec": 1800,
+            "threshold": 120
+          }
+        },
+        "gpiEvents": true,
+        "gpoEvents": true,
+        "heartbeat": {
+          "fields": {
+            "radio_control": [
+              "ANTENNAS",
+              "RADIO_ACTIVITY",
+              "RADIO_CONNECTION",
+              "CPU",
+              "RAM",
+              "UPTIME",
+              "NUM_ERRORS",
+              "NUM_WARNINGS",
+              "NUM_TAG_READS",
+              "NUM_TAG_READS_PER_ANTENNA",
+              "NUM_DATA_MESSAGES_TXED",
+              "NUM_RADIO_PACKETS_RXED"
+            ],
+            "reader_gateway": [
+              "NUM_DATA_MESSAGES_RXED",
+              "NUM_MANAGEMENT_EVENTS_TXED",
+              "NUM_DATA_MESSAGES_TXED",
+              "NUM_DATA_MESSAGES_RETAINED",
+              "NUM_DATA_MESSAGES_DROPPED",
+              "CPU",
+              "RAM",
+              "UPTIME",
+              "NUM_ERRORS",
+              "NUM_WARNINGS",
+              "INTERFACE_CONNECTION_STATUS",
+              "NOLOCKQ_DEPTH"
+            ],
+            "system": [
+              "CPU",
+              "FLASH",
+              "NTP",
+              "RAM",
+              "SYSTEMTIME",
+              "TEMPERATURE",
+              "UPTIME",
+              "GPO",
+              "GPI",
+              "POWER_NEGOTIATION",
+              "POWER_SOURCE",
+              "MAC_ADDRESS",
+              "HOSTNAME"
+            ],
+            "userapps": [
+              "STATUS",
+              "CPU",
+              "RAM",
+              "UPTIME",
+              "NUM_DATA_MESSAGES_RXED",
+              "NUM_DATA_MESSAGES_TXED",
+              "INCOMING_DATA_BUFFER_PERCENTAGE_REMAINING",
+              "OUTGOING_DATA_BUFFER_PERCENTAGE_REMAINING"
+            ]
+          },
+          "interval": 60
+        },
+        "userappEvents": true,
+        "warnings": {
+          "cpu": {
+            "reportIntervalInSec": 1800,
+            "threshold": 80
+          },
+          "database": true,
+          "flash": {
+            "reportIntervalInSec": 1800,
+            "threshold": 80
+          },
+          "ntp": true,
+          "radio_api": true,
+          "radio_control": true,
+          "ram": {
+            "reportIntervalInSec": 1800,
+            "threshold": 80
+          },
+          "reader_gateway": true,
+          "temperature": {
+            "ambient": 75,
+            "pa": 105
+          },
+          "userApp": {
+            "reportIntervalInSec": 1800,
+            "threshold": 60
+          }
+        }
+      },
+      "retention": [
+        {
+          "maxEventRetentionTimeInMin": 500,
+          "maxNumEvents": 150000,
+          "throttle": 100
+        },
+        {
+          "maxEventRetentionTimeInMin": 500,
+          "maxNumEvents": 150000,
+          "throttle": 100
+        }
+      ]
+    }
+  }
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

brunoApi/rfidReaders/readerSpecific/folder.bru

@@ -0,0 +1,12 @@
+meta {
+  name: readerSpecific
+}
+
+auth {
+  mode: basic
+}
+
+auth:basic {
+  username: admin
+  password: Zebra123!
+}

brunoApi/system/updateSetting.bru

@@ -12,8 +12,8 @@ patch {
 
 body:json {
   {
-    "value" : "0",
-    "active": "false"
+    "value" : "1",
+    "active": "true"
   }
 }
 

docker-compose.yml

@@ -1,16 +1,26 @@
 services:
-    app:
-        build:
-            context: .
-            dockerfile: Dockerfile
+    lst:
+        image: git.tuffraid.net/cowch/lst_v3:latest
         container_name: lst_app
+        restart: unless-stopped
+    # app:
+    #     build:
+    #         context: .
+    #         dockerfile: Dockerfile
+    #     container_name: lst_app
         ports:
             #- "${VITE_PORT:-4200}:4200"
             - "3600:3000"
+        dns:
+            - 10.193.9.250
+            - 10.193.9.251   # your internal DNS server
+        dns_search:
+            - alpla.net      # or your internal search suffix
         environment:
             - NODE_ENV=production
             - LOG_LEVEL=info
-            - DATABASE_HOST=host.docker.internal
+            - EXTERNAL_URL=http://192.168.8.222:3600
+            - DATABASE_HOST=host.docker.internal # if running on the same docker then do this
             - DATABASE_PORT=5433
             - DATABASE_USER=${DATABASE_USER}
             - DATABASE_PASSWORD=${DATABASE_PASSWORD}
@@ -21,7 +31,6 @@ services:
             - PROD_PASSWORD=${PROD_PASSWORD}
             - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
             - BETTER_AUTH_URL=${URL}
-        restart: unless-stopped
         # for all host including prod servers, plc's, printers, or other de
 #         extra_hosts:
 #             - "${PROD_SERVER}:${PROD_IP}"

frontend/.tanstack/tmp/ed188a72-a9536593d3b207d3d1a62b792253ec09

@@ -0,0 +1,9 @@
+import { createFileRoute } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/admin/settings')({
+  component: RouteComponent,
+})
+
+function RouteComponent() {
+  return <div>Hello "/admin/settings"!</div>
+}

frontend/README.md

@@ -1,69 +0,0 @@
-# React + TypeScript + Vite
-
-This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
-
-Currently, two official plugins are available:
-
-- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Babel](https://babeljs.io/) for Fast Refresh
-- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/) for Fast Refresh
-
-## Expanding the ESLint configuration
-
-If you are developing a production application, we recommend updating the configuration to enable type-aware lint rules:
-
-```js
-export default defineConfig([
-  globalIgnores(['dist']),
-  {
-    files: ['**/*.{ts,tsx}'],
-    extends: [
-      // Other configs...
-
-      // Remove tseslint.configs.recommended and replace with this
-      tseslint.configs.recommendedTypeChecked,
-      // Alternatively, use this for stricter rules
-      tseslint.configs.strictTypeChecked,
-      // Optionally, add this for stylistic rules
-      tseslint.configs.stylisticTypeChecked,
-
-      // Other configs...
-    ],
-    languageOptions: {
-      parserOptions: {
-        project: ['./tsconfig.node.json', './tsconfig.app.json'],
-        tsconfigRootDir: import.meta.dirname,
-      },
-      // other options...
-    },
-  },
-])
-```
-
-You can also install [eslint-plugin-react-x](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-x) and [eslint-plugin-react-dom](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-dom) for React-specific lint rules:
-
-```js
-// eslint.config.js
-import reactX from 'eslint-plugin-react-x'
-import reactDom from 'eslint-plugin-react-dom'
-
-export default defineConfig([
-  globalIgnores(['dist']),
-  {
-    files: ['**/*.{ts,tsx}'],
-    extends: [
-      // Other configs...
-      // Enable lint rules for React
-      reactX.configs['recommended-typescript'],
-      // Enable lint rules for React DOM
-      reactDom.configs.recommended,
-    ],
-    languageOptions: {
-      parserOptions: {
-        project: ['./tsconfig.node.json', './tsconfig.app.json'],
-        tsconfigRootDir: import.meta.dirname,
-      },
-      // other options...
-    },
-  },
-])
-```

frontend/index.html

@@ -2,9 +2,9 @@
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="/vite.svg" />
+    <link rel="icon" type="image/svg+xml" href="/lst.ico" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Vite + React + TS</title>
+    <title>Logistics Support Tool</title>
   </head>
   <body>
     <div id="root"></div>

frontend/package-lock.json

@@ -10,9 +10,11 @@
       "dependencies": {
         "@fontsource-variable/inter": "^5.2.8",
         "@tailwindcss/vite": "^4.2.1",
+        "@tanstack/react-form": "^1.28.5",
         "@tanstack/react-query": "^5.90.21",
         "@tanstack/react-router": "^1.166.7",
         "@tanstack/react-router-devtools": "^1.166.7",
+        "@tanstack/react-table": "^8.21.3",
         "axios": "^1.13.6",
         "better-auth": "^1.5.5",
         "class-variance-authority": "^0.7.1",
@@ -3994,6 +3996,37 @@
         "vite": "^5.2.0 || ^6 || ^7"
       }
     },
+    "node_modules/@tanstack/devtools-event-client": {
+      "version": "0.4.3",
+      "resolved": "https://registry.npmjs.org/@tanstack/devtools-event-client/-/devtools-event-client-0.4.3.tgz",
+      "integrity": "sha512-OZI6QyULw0FI0wjgmeYzCIfbgPsOEzwJtCpa69XrfLMtNXLGnz3d/dIabk7frg0TmHo+Ah49w5I4KC7Tufwsvw==",
+      "license": "MIT",
+      "bin": {
+        "intent": "bin/intent.js"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
+    "node_modules/@tanstack/form-core": {
+      "version": "1.28.5",
+      "resolved": "https://registry.npmjs.org/@tanstack/form-core/-/form-core-1.28.5.tgz",
+      "integrity": "sha512-8lYnduHHfP6uaXF9+2OLnh3Fo27tH4TdtekWLG2b/Bp26ynbrWG6L4qhBgEb7VcvTpJw/RjvJF/JyFhZkG3pfQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/devtools-event-client": "^0.4.1",
+        "@tanstack/pacer-lite": "^0.1.1",
+        "@tanstack/store": "^0.9.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
     "node_modules/@tanstack/history": {
       "version": "1.161.6",
       "resolved": "https://registry.npmjs.org/@tanstack/history/-/history-1.161.6.tgz",
@@ -4007,6 +4040,19 @@
         "url": "https://github.com/sponsors/tannerlinsley"
       }
     },
+    "node_modules/@tanstack/pacer-lite": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/@tanstack/pacer-lite/-/pacer-lite-0.1.1.tgz",
+      "integrity": "sha512-y/xtNPNt/YeyoVxE/JCx+T7yjEzpezmbb+toK8DDD1P4m7Kzs5YR956+7OKexG3f8aXgC3rLZl7b1V+yNUSy5w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
     "node_modules/@tanstack/query-core": {
       "version": "5.90.20",
       "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.90.20.tgz",
@@ -4017,6 +4063,28 @@
         "url": "https://github.com/sponsors/tannerlinsley"
       }
     },
+    "node_modules/@tanstack/react-form": {
+      "version": "1.28.5",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-form/-/react-form-1.28.5.tgz",
+      "integrity": "sha512-CL8IeWkeXnEEDsHt5wBuIOZvSYrKiLRtsC9ca0LzfJJ22SYCma9cBmh1UX1EBX0o3gH2U21PmUf+y5f9OJNoEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/form-core": "1.28.5",
+        "@tanstack/react-store": "^0.9.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      },
+      "peerDependencies": {
+        "react": "^17.0.0 || ^18.0.0 || ^19.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@tanstack/react-start": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@tanstack/react-query": {
       "version": "5.90.21",
       "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.90.21.tgz",
@@ -4103,6 +4171,26 @@
         "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
+    "node_modules/@tanstack/react-table": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-table/-/react-table-8.21.3.tgz",
+      "integrity": "sha512-5nNMTSETP4ykGegmVkhjcS8tTLW6Vl4axfEGQN3v0zdHYbK4UfoqfPChclTrJ4EoK9QynqAu9oUf8VEmrpZ5Ww==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/table-core": "8.21.3"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      },
+      "peerDependencies": {
+        "react": ">=16.8",
+        "react-dom": ">=16.8"
+      }
+    },
     "node_modules/@tanstack/router-core": {
       "version": "1.167.3",
       "resolved": "https://registry.npmjs.org/@tanstack/router-core/-/router-core-1.167.3.tgz",
@@ -4284,6 +4372,19 @@
         "url": "https://github.com/sponsors/tannerlinsley"
       }
     },
+    "node_modules/@tanstack/table-core": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/@tanstack/table-core/-/table-core-8.21.3.tgz",
+      "integrity": "sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
     "node_modules/@tanstack/virtual-file-routes": {
       "version": "1.161.6",
       "resolved": "https://registry.npmjs.org/@tanstack/virtual-file-routes/-/virtual-file-routes-1.161.6.tgz",

frontend/package.json

@@ -12,9 +12,11 @@
   "dependencies": {
     "@fontsource-variable/inter": "^5.2.8",
     "@tailwindcss/vite": "^4.2.1",
+    "@tanstack/react-form": "^1.28.5",
     "@tanstack/react-query": "^5.90.21",
     "@tanstack/react-router": "^1.166.7",
     "@tanstack/react-router-devtools": "^1.166.7",
+    "@tanstack/react-table": "^8.21.3",
     "axios": "^1.13.6",
     "better-auth": "^1.5.5",
     "class-variance-authority": "^0.7.1",

frontend/src/components/Header.tsx

@@ -1,37 +1,113 @@
-import { Link } from "@tanstack/react-router";
+import { Link, useNavigate, useRouterState } from "@tanstack/react-router";
 import { SidebarIcon } from "lucide-react";
+import { authClient, useSession } from "@/lib/auth-client";
 import { ModeToggle } from "./mode-toggle";
+import { Avatar, AvatarFallback, AvatarImage } from "./ui/avatar";
 import { Button } from "./ui/button";
+import {
+	DropdownMenu,
+	DropdownMenuContent,
+	DropdownMenuItem,
+	DropdownMenuLabel,
+	DropdownMenuSeparator,
+	DropdownMenuTrigger,
+} from "./ui/dropdown-menu";
 import { useSidebar } from "./ui/sidebar";
 
 export default function Header() {
 	const { toggleSidebar } = useSidebar();
+	const { data: session } = useSession();
+	const { signOut } = authClient;
+	const router = useRouterState();
+	const navigate = useNavigate();
+	const currentPath = router.location.href;
+
 	return (
 		<header className="sticky top-0 z-50 flex w-full items-center border-b bg-background">
-			<div className="flex h-(--header-height) w-full items-center gap-2 px-4">
-				<div className="flex flex-row">
-					<Link to="/">
-						<img
-							src="/lst/app/imgs/dkLst.png"
-							alt="Home"
-							className="size-8 cursor-pointer"
-						/>
-					</Link>
+			<div className="flex justify-between w-full">
+				<div className="flex items-center gap-2 px-4">
+					<div className="flex flex-row">
+						<Link to="/">
+							<img
+								src="/lst/app/imgs/dkLst.png"
+								alt="Home"
+								className="size-8 cursor-pointer"
+							/>
+						</Link>
+					</div>
+					<Button
+						className="h-8 w-8"
+						variant="ghost"
+						size="icon"
+						onClick={toggleSidebar}
+					>
+						<SidebarIcon />
+					</Button>
+				</div>
+				<div className="flex flex-col gap-0.5 leading-none p-2">
+					<span className="font-semibold text-2xl">Logistics Support Tool</span>
+				</div>
+				<div className="m-1 flex gap-1">
+					<div>
+						<ModeToggle />
+					</div>
+					<div>
+						{session ? (
+							<DropdownMenu>
+								<DropdownMenuTrigger>
+									<Avatar>
+										<AvatarImage
+											src="https://github.com/evilrabbit.png"
+											alt="@evilrabbit"
+										/>
+										<AvatarFallback>CN</AvatarFallback>
+									</Avatar>
+								</DropdownMenuTrigger>
+								<DropdownMenuContent>
+									<DropdownMenuLabel>
+										Hello {session.user?.name}
+									</DropdownMenuLabel>
+									<DropdownMenuSeparator />
+									<DropdownMenuItem>
+										<Link to="/user/profile">Account</Link>
+									</DropdownMenuItem>
+
+									{/* <DropdownMenuItem>Billing</DropdownMenuItem>
+                                                <DropdownMenuItem>Team</DropdownMenuItem>
+                                                <DropdownMenuItem>Subscription</DropdownMenuItem> */}
+									<hr className="solid"></hr>
+									<DropdownMenuItem>
+										<div className="m-auto">
+											<Button
+												size="xs"
+												variant="ghost"
+												onClick={() =>
+													signOut({
+														fetchOptions: {
+															onSuccess: () => {
+																navigate({ to: "/" });
+															},
+														},
+													})
+												}
+											>
+												Logout
+											</Button>
+										</div>
+									</DropdownMenuItem>
+								</DropdownMenuContent>
+							</DropdownMenu>
+						) : (
+							<div className="">
+								<Button>
+									<Link to="/login" search={{ redirect: currentPath }}>
+										Login
+									</Link>
+								</Button>
+							</div>
+						)}
+					</div>
 				</div>
-				<Button
-					className="h-8 w-8"
-					variant="ghost"
-					size="icon"
-					onClick={toggleSidebar}
-				>
-					<SidebarIcon />
-				</Button>
-			</div>
-			<div className="flex flex-col gap-0.5 leading-none w-52">
-				<span className="font-semibold">Logistics Support Tool</span>
-			</div>
-			<div className="m-1">
-				<ModeToggle />
 			</div>
 		</header>
 	);

frontend/src/components/Sidebar/AdminBar.tsx

@@ -1,5 +1,5 @@
 import { Link } from "@tanstack/react-router";
-import { Logs } from "lucide-react";
+import { Bell, Logs, Settings } from "lucide-react";
 
 import {
 	SidebarGroup,
@@ -11,17 +11,35 @@ import {
 	useSidebar,
 } from "../ui/sidebar";
 
-export default function AdminSidebar() {
+// type AdminSidebarProps = {
+// 	session: {
+// 		user: {
+// 			name?: string | null;
+// 			email?: string | null;
+// 			role?: string | string[];
+// 		};
+// 	} | null;
+//};
+
+export default function AdminSidebar({ session }: any) {
 	const { setOpen } = useSidebar();
 	const items = [
-		// {
-		// 	title: "Users",
-		// 	url: "/admin/users",
-		// 	icon: User,
-		// 	role: ["systemAdmin", "admin"],
-		// 	module: "admin",
-		// 	active: true,
-		// },
+		{
+			title: "Notifications",
+			url: "/admin/notifications",
+			icon: Bell,
+			role: ["systemAdmin", "admin"],
+			module: "admin",
+			active: true,
+		},
+		{
+			title: "Settings",
+			url: "/admin/settings",
+			icon: Settings,
+			role: ["systemAdmin"],
+			module: "admin",
+			active: true,
+		},
 		{
 			title: "Logs",
 			url: "/admin/logs",
@@ -53,14 +71,18 @@ export default function AdminSidebar() {
 			<SidebarGroupContent>
 				<SidebarMenu>
 					{items.map((item) => (
-						<SidebarMenuItem key={item.title}>
-							<SidebarMenuButton asChild>
-								<Link to={item.url} onClick={() => setOpen(false)}>
-									<item.icon />
-									<span>{item.title}</span>
-								</Link>
-							</SidebarMenuButton>
-						</SidebarMenuItem>
+						<>
+							{item.role.includes(session.user.role) && (
+								<SidebarMenuItem key={item.title}>
+									<SidebarMenuButton asChild>
+										<Link to={item.url} onClick={() => setOpen(false)}>
+											<item.icon />
+											<span>{item.title}</span>
+										</Link>
+									</SidebarMenuButton>
+								</SidebarMenuItem>
+							)}
+						</>
 					))}
 				</SidebarMenu>
 			</SidebarGroupContent>

frontend/src/components/Sidebar/sidebar.tsx

@@ -10,6 +10,7 @@ import AdminSidebar from "./AdminBar";
 
 export function AppSidebar() {
 	const { data: session } = useSession();
+
 	return (
 		<Sidebar
 			variant="sidebar"
@@ -20,7 +21,11 @@ export function AppSidebar() {
 				<SidebarMenu>
 					<SidebarMenuItem>
 						<SidebarContent>
-							{session && session.user.role === "admin" && <AdminSidebar />}
+							{session &&
+								(session.user.role === "admin" ||
+									session.user.role === "systemAdmin") && (
+									<AdminSidebar session={session} />
+								)}
 						</SidebarContent>
 					</SidebarMenuItem>
 				</SidebarMenu>

frontend/src/components/ui/avatar.tsx

@@ -0,0 +1,110 @@
+import * as React from "react"
+import { Avatar as AvatarPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Avatar({
+  className,
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Root> & {
+  size?: "default" | "sm" | "lg"
+}) {
+  return (
+    <AvatarPrimitive.Root
+      data-slot="avatar"
+      data-size={size}
+      className={cn(
+        "group/avatar relative flex size-8 shrink-0 rounded-full select-none after:absolute after:inset-0 after:rounded-full after:border after:border-border after:mix-blend-darken data-[size=lg]:size-10 data-[size=sm]:size-6 dark:after:mix-blend-lighten",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarImage({
+  className,
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Image>) {
+  return (
+    <AvatarPrimitive.Image
+      data-slot="avatar-image"
+      className={cn(
+        "aspect-square size-full rounded-full object-cover",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarFallback({
+  className,
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Fallback>) {
+  return (
+    <AvatarPrimitive.Fallback
+      data-slot="avatar-fallback"
+      className={cn(
+        "flex size-full items-center justify-center rounded-full bg-muted text-sm text-muted-foreground group-data-[size=sm]/avatar:text-xs",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarBadge({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="avatar-badge"
+      className={cn(
+        "absolute right-0 bottom-0 z-10 inline-flex items-center justify-center rounded-full bg-primary text-primary-foreground bg-blend-color ring-2 ring-background select-none",
+        "group-data-[size=sm]/avatar:size-2 group-data-[size=sm]/avatar:[&>svg]:hidden",
+        "group-data-[size=default]/avatar:size-2.5 group-data-[size=default]/avatar:[&>svg]:size-2",
+        "group-data-[size=lg]/avatar:size-3 group-data-[size=lg]/avatar:[&>svg]:size-2",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="avatar-group"
+      className={cn(
+        "group/avatar-group flex -space-x-2 *:data-[slot=avatar]:ring-2 *:data-[slot=avatar]:ring-background",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function AvatarGroupCount({
+  className,
+  ...props
+}: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="avatar-group-count"
+      className={cn(
+        "relative flex size-8 shrink-0 items-center justify-center rounded-full bg-muted text-sm text-muted-foreground ring-2 ring-background group-has-data-[size=lg]/avatar-group:size-10 group-has-data-[size=sm]/avatar-group:size-6 [&>svg]:size-4 group-has-data-[size=lg]/avatar-group:[&>svg]:size-5 group-has-data-[size=sm]/avatar-group:[&>svg]:size-3",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export {
+  Avatar,
+  AvatarImage,
+  AvatarFallback,
+  AvatarGroup,
+  AvatarGroupCount,
+  AvatarBadge,
+}

frontend/src/components/ui/card.tsx

@@ -0,0 +1,103 @@
+import * as React from "react"
+
+import { cn } from "@/lib/utils"
+
+function Card({
+  className,
+  size = "default",
+  ...props
+}: React.ComponentProps<"div"> & { size?: "default" | "sm" }) {
+  return (
+    <div
+      data-slot="card"
+      data-size={size}
+      className={cn(
+        "group/card flex flex-col gap-4 overflow-hidden rounded-xl bg-card py-4 text-sm text-card-foreground ring-1 ring-foreground/10 has-data-[slot=card-footer]:pb-0 has-[>img:first-child]:pt-0 data-[size=sm]:gap-3 data-[size=sm]:py-3 data-[size=sm]:has-data-[slot=card-footer]:pb-0 *:[img:first-child]:rounded-t-xl *:[img:last-child]:rounded-b-xl",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-header"
+      className={cn(
+        "group/card-header @container/card-header grid auto-rows-min items-start gap-1 rounded-t-xl px-4 group-data-[size=sm]/card:px-3 has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto] [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-title"
+      className={cn(
+        "text-base leading-snug font-medium group-data-[size=sm]/card:text-sm",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-description"
+      className={cn("text-sm text-muted-foreground", className)}
+      {...props}
+    />
+  )
+}
+
+function CardAction({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-action"
+      className={cn(
+        "col-start-2 row-span-2 row-start-1 self-start justify-self-end",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+function CardContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-content"
+      className={cn("px-4 group-data-[size=sm]/card:px-3", className)}
+      {...props}
+    />
+  )
+}
+
+function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-footer"
+      className={cn(
+        "flex items-center rounded-b-xl border-t bg-muted/50 p-4 group-data-[size=sm]/card:p-3",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export {
+  Card,
+  CardHeader,
+  CardFooter,
+  CardTitle,
+  CardAction,
+  CardDescription,
+  CardContent,
+}

frontend/src/components/ui/checkbox.tsx

@@ -0,0 +1,31 @@
+import * as React from "react"
+import { Checkbox as CheckboxPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+import { CheckIcon } from "lucide-react"
+
+function Checkbox({
+  className,
+  ...props
+}: React.ComponentProps<typeof CheckboxPrimitive.Root>) {
+  return (
+    <CheckboxPrimitive.Root
+      data-slot="checkbox"
+      className={cn(
+        "peer relative flex size-4 shrink-0 items-center justify-center rounded-[4px] border border-input transition-colors outline-none group-has-disabled/field:opacity-50 after:absolute after:-inset-x-3 after:-inset-y-2 focus-visible:border-ring focus-visible:ring-3 focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-3 aria-invalid:ring-destructive/20 aria-invalid:aria-checked:border-primary dark:bg-input/30 dark:aria-invalid:border-destructive/50 dark:aria-invalid:ring-destructive/40 data-checked:border-primary data-checked:bg-primary data-checked:text-primary-foreground dark:data-checked:bg-primary",
+        className
+      )}
+      {...props}
+    >
+      <CheckboxPrimitive.Indicator
+        data-slot="checkbox-indicator"
+        className="grid place-content-center text-current transition-none [&>svg]:size-3.5"
+      >
+        <CheckIcon
+        />
+      </CheckboxPrimitive.Indicator>
+    </CheckboxPrimitive.Root>
+  )
+}
+
+export { Checkbox }

frontend/src/components/ui/label.tsx

@@ -0,0 +1,22 @@
+import * as React from "react"
+import { Label as LabelPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Label({
+  className,
+  ...props
+}: React.ComponentProps<typeof LabelPrimitive.Root>) {
+  return (
+    <LabelPrimitive.Root
+      data-slot="label"
+      className={cn(
+        "flex items-center gap-2 text-sm leading-none font-medium select-none group-data-[disabled=true]:pointer-events-none group-data-[disabled=true]:opacity-50 peer-disabled:cursor-not-allowed peer-disabled:opacity-50",
+        className
+      )}
+      {...props}
+    />
+  )
+}
+
+export { Label }

frontend/src/components/ui/scroll-area.tsx

@@ -0,0 +1,53 @@
+import * as React from "react"
+import { ScrollArea as ScrollAreaPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function ScrollArea({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.Root>) {
+  return (
+    <ScrollAreaPrimitive.Root
+      data-slot="scroll-area"
+      className={cn("relative", className)}
+      {...props}
+    >
+      <ScrollAreaPrimitive.Viewport
+        data-slot="scroll-area-viewport"
+        className="size-full rounded-[inherit] transition-[color,box-shadow] outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50 focus-visible:outline-1"
+      >
+        {children}
+      </ScrollAreaPrimitive.Viewport>
+      <ScrollBar />
+      <ScrollAreaPrimitive.Corner />
+    </ScrollAreaPrimitive.Root>
+  )
+}
+
+function ScrollBar({
+  className,
+  orientation = "vertical",
+  ...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.ScrollAreaScrollbar>) {
+  return (
+    <ScrollAreaPrimitive.ScrollAreaScrollbar
+      data-slot="scroll-area-scrollbar"
+      data-orientation={orientation}
+      orientation={orientation}
+      className={cn(
+        "flex touch-none p-px transition-colors select-none data-horizontal:h-2.5 data-horizontal:flex-col data-horizontal:border-t data-horizontal:border-t-transparent data-vertical:h-full data-vertical:w-2.5 data-vertical:border-l data-vertical:border-l-transparent",
+        className
+      )}
+      {...props}
+    >
+      <ScrollAreaPrimitive.ScrollAreaThumb
+        data-slot="scroll-area-thumb"
+        className="relative flex-1 rounded-full bg-border"
+      />
+    </ScrollAreaPrimitive.ScrollAreaScrollbar>
+  )
+}
+
+export { ScrollArea, ScrollBar }

frontend/src/components/ui/select.tsx

@@ -0,0 +1,190 @@
+import * as React from "react"
+import { Select as SelectPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+import { ChevronDownIcon, CheckIcon, ChevronUpIcon } from "lucide-react"
+
+function Select({
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Root>) {
+  return <SelectPrimitive.Root data-slot="select" {...props} />
+}
+
+function SelectGroup({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Group>) {
+  return (
+    <SelectPrimitive.Group
+      data-slot="select-group"
+      className={cn("scroll-my-1 p-1", className)}
+      {...props}
+    />
+  )
+}
+
+function SelectValue({
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Value>) {
+  return <SelectPrimitive.Value data-slot="select-value" {...props} />
+}
+
+function SelectTrigger({
+  className,
+  size = "default",
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Trigger> & {
+  size?: "sm" | "default"
+}) {
+  return (
+    <SelectPrimitive.Trigger
+      data-slot="select-trigger"
+      data-size={size}
+      className={cn(
+        "flex w-fit items-center justify-between gap-1.5 rounded-lg border border-input bg-transparent py-2 pr-2 pl-2.5 text-sm whitespace-nowrap transition-colors outline-none select-none focus-visible:border-ring focus-visible:ring-3 focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-3 aria-invalid:ring-destructive/20 data-placeholder:text-muted-foreground data-[size=default]:h-8 data-[size=sm]:h-7 data-[size=sm]:rounded-[min(var(--radius-md),10px)] *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center *:data-[slot=select-value]:gap-1.5 dark:bg-input/30 dark:hover:bg-input/50 dark:aria-invalid:border-destructive/50 dark:aria-invalid:ring-destructive/40 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      {children}
+      <SelectPrimitive.Icon asChild>
+        <ChevronDownIcon className="pointer-events-none size-4 text-muted-foreground" />
+      </SelectPrimitive.Icon>
+    </SelectPrimitive.Trigger>
+  )
+}
+
+function SelectContent({
+  className,
+  children,
+  position = "item-aligned",
+  align = "center",
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Content>) {
+  return (
+    <SelectPrimitive.Portal>
+      <SelectPrimitive.Content
+        data-slot="select-content"
+        data-align-trigger={position === "item-aligned"}
+        className={cn("relative z-50 max-h-(--radix-select-content-available-height) min-w-36 origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-lg bg-popover text-popover-foreground shadow-md ring-1 ring-foreground/10 duration-100 data-[align-trigger=true]:animate-none data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95", position ==="popper"&&"data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1", className )}
+        position={position}
+        align={align}
+        {...props}
+      >
+        <SelectScrollUpButton />
+        <SelectPrimitive.Viewport
+          data-position={position}
+          className={cn(
+            "data-[position=popper]:h-(--radix-select-trigger-height) data-[position=popper]:w-full data-[position=popper]:min-w-(--radix-select-trigger-width)",
+            position === "popper" && ""
+          )}
+        >
+          {children}
+        </SelectPrimitive.Viewport>
+        <SelectScrollDownButton />
+      </SelectPrimitive.Content>
+    </SelectPrimitive.Portal>
+  )
+}
+
+function SelectLabel({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Label>) {
+  return (
+    <SelectPrimitive.Label
+      data-slot="select-label"
+      className={cn("px-1.5 py-1 text-xs text-muted-foreground", className)}
+      {...props}
+    />
+  )
+}
+
+function SelectItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Item>) {
+  return (
+    <SelectPrimitive.Item
+      data-slot="select-item"
+      className={cn(
+        "relative flex w-full cursor-default items-center gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2",
+        className
+      )}
+      {...props}
+    >
+      <span className="pointer-events-none absolute right-2 flex size-4 items-center justify-center">
+        <SelectPrimitive.ItemIndicator>
+          <CheckIcon className="pointer-events-none" />
+        </SelectPrimitive.ItemIndicator>
+      </span>
+      <SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
+    </SelectPrimitive.Item>
+  )
+}
+
+function SelectSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Separator>) {
+  return (
+    <SelectPrimitive.Separator
+      data-slot="select-separator"
+      className={cn("pointer-events-none -mx-1 my-1 h-px bg-border", className)}
+      {...props}
+    />
+  )
+}
+
+function SelectScrollUpButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollUpButton>) {
+  return (
+    <SelectPrimitive.ScrollUpButton
+      data-slot="select-scroll-up-button"
+      className={cn(
+        "z-10 flex cursor-default items-center justify-center bg-popover py-1 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      <ChevronUpIcon
+      />
+    </SelectPrimitive.ScrollUpButton>
+  )
+}
+
+function SelectScrollDownButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollDownButton>) {
+  return (
+    <SelectPrimitive.ScrollDownButton
+      data-slot="select-scroll-down-button"
+      className={cn(
+        "z-10 flex cursor-default items-center justify-center bg-popover py-1 [&_svg:not([class*='size-'])]:size-4",
+        className
+      )}
+      {...props}
+    >
+      <ChevronDownIcon
+      />
+    </SelectPrimitive.ScrollDownButton>
+  )
+}
+
+export {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectLabel,
+  SelectScrollDownButton,
+  SelectScrollUpButton,
+  SelectSeparator,
+  SelectTrigger,
+  SelectValue,
+}

frontend/src/components/ui/spinner.tsx

@@ -0,0 +1,10 @@
+import { cn } from "@/lib/utils"
+import { Loader2Icon } from "lucide-react"
+
+function Spinner({ className, ...props }: React.ComponentProps<"svg">) {
+  return (
+    <Loader2Icon role="status" aria-label="Loading" className={cn("size-4 animate-spin", className)} {...props} />
+  )
+}
+
+export { Spinner }

frontend/src/components/ui/switch.tsx

@@ -0,0 +1,31 @@
+import * as React from "react"
+import { Switch as SwitchPrimitive } from "radix-ui"
+
+import { cn } from "@/lib/utils"
+
+function Switch({
+  className,
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof SwitchPrimitive.Root> & {
+  size?: "sm" | "default"
+}) {
+  return (
+    <SwitchPrimitive.Root
+      data-slot="switch"
+      data-size={size}
+      className={cn(
+        "peer group/switch relative inline-flex shrink-0 items-center rounded-full border border-transparent transition-all outline-none after:absolute after:-inset-x-3 after:-inset-y-2 focus-visible:border-ring focus-visible:ring-3 focus-visible:ring-ring/50 aria-invalid:border-destructive aria-invalid:ring-3 aria-invalid:ring-destructive/20 data-[size=default]:h-[18.4px] data-[size=default]:w-[32px] data-[size=sm]:h-[14px] data-[size=sm]:w-[24px] dark:aria-invalid:border-destructive/50 dark:aria-invalid:ring-destructive/40 data-checked:bg-primary data-unchecked:bg-input dark:data-unchecked:bg-input/80 data-disabled:cursor-not-allowed data-disabled:opacity-50",
+        className
+      )}
+      {...props}
+    >
+      <SwitchPrimitive.Thumb
+        data-slot="switch-thumb"
+        className="pointer-events-none block rounded-full bg-background ring-0 transition-transform group-data-[size=default]/switch:size-4 group-data-[size=sm]/switch:size-3 group-data-[size=default]/switch:data-checked:translate-x-[calc(100%-2px)] group-data-[size=sm]/switch:data-checked:translate-x-[calc(100%-2px)] dark:data-checked:bg-primary-foreground group-data-[size=default]/switch:data-unchecked:translate-x-0 group-data-[size=sm]/switch:data-unchecked:translate-x-0 dark:data-unchecked:bg-foreground"
+      />
+    </SwitchPrimitive.Root>
+  )
+}
+
+export { Switch }