Benjamin_Boenisch/breakpilot-core
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: re-secure fp-patch
All checks were successful
Build pitch-deck / build-push-deploy (push) Successful in 1m14s
Details
CI / go-lint (push) Has been skipped
Details
CI / python-lint (push) Has been skipped
Details
CI / nodejs-lint (push) Has been skipped
Details
CI / test-go-consent (push) Successful in 40s
Details
CI / test-python-voice (push) Successful in 33s
Details
CI / test-bqas (push) Successful in 34s
Details

Browse Source
This commit is contained in:
Benjamin Admin
2026-04-22 09:19:30 +02:00
parent ced3333430
commit e37906d92e
2 changed files with 9 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
pitch-deck/app/api/admin/fp-patch/route.ts
View File

@@ -1,38 +1,17 @@
import { NextRequest, NextResponse } from 'next/server'
import { requireAdmin } from '@/lib/admin-auth'
import pool from '@/lib/db'
import { computeFinanzplan } from '@/lib/finanzplan/engine'
/** Admin-only: recompute a Finanzplan scenario. */
export async function POST(request: NextRequest) {
const WD = 'c0000000-0000-0000-0000-000000000200'
const results: string[] = []
const guard = await requireAdmin(request)
if (guard.kind === 'response') return guard.response
try {
// KFZ-Leasing rename + values
const leasing = Object.fromEntries(Array.from({length:36},(_,i)=>[`m${i+25}`,1050]))
await pool.query(`UPDATE fp_betriebliche_aufwendungen SET row_label='KFZ-Leasing (3 Fahrzeuge)', values=$1 WHERE scenario_id=$2 AND row_label IN ('Fahrzeugkosten','Fahrzeugkosten (F)')`, [JSON.stringify(leasing), WD])
const body = await request.json().catch(() => ({}))
const scenarioId = body.scenarioId || (await pool.query("SELECT id FROM fp_scenarios WHERE is_default = true LIMIT 1")).rows[0]?.id
if (!scenarioId) return NextResponse.json({ error: 'No scenario found' }, { status: 404 })
// Kraftstoff (add if missing)
const fuel = Object.fromEntries(Array.from({length:36},(_,i)=>[`m${i+25}`,450]))
const {rows:ex} = await pool.query(`SELECT id FROM fp_betriebliche_aufwendungen WHERE scenario_id=$1 AND row_label='Kraftstoff / Ladestrom'`, [WD])
if (ex.length === 0) {
await pool.query(`INSERT INTO fp_betriebliche_aufwendungen (scenario_id,category,row_label,row_index,is_editable,is_sum_row,values,sort_order) VALUES ($1,'fahrzeug','Kraftstoff / Ladestrom',24,true,false,$2,24)`, [WD, JSON.stringify(fuel)])
}
// KFZ-Versicherung fix
const vers = Object.fromEntries(Array.from({length:36},(_,i)=>[`m${i+25}`,300]))
await pool.query(`UPDATE fp_betriebliche_aufwendungen SET values=$1 WHERE scenario_id=$2 AND row_label='KFZ-Versicherung'`, [JSON.stringify(vers), WD])
// KFZ-Steuern fix
const steuern = Object.fromEntries(Array.from({length:36},(_,i)=>[`m${i+25}`,45]))
await pool.query(`UPDATE fp_betriebliche_aufwendungen SET values=$1 WHERE scenario_id=$2 AND row_label ILIKE 'KFZ-Steuern%'`, [JSON.stringify(steuern), WD])
results.push('KFZ updated')
const r = await computeFinanzplan(pool, WD)
results.push(`WD cash_m60=${r.liquiditaet?.endstand?.m60}`)
} catch (err) {
results.push(`ERROR: ${err instanceof Error ? err.message : String(err)}`)
}
return NextResponse.json({ ok: true, results })
const result = await computeFinanzplan(pool, scenarioId)
return NextResponse.json({ success: true, scenarioId, cash_m60: result.liquiditaet?.endstand?.m60 })
}