MEGAINFRA-WEBAPP/docs/setup/api-route-inventory.md

10 KiB

API route inventory

Updated access categories on 7 October 2026 (Africa/Johannesburg).

[id], [poNumber], etc. are path parameters. [...filename] is a catch-all. The proxy category below is from src/lib/auth/proxy-path.ts for AUTH_MODE=users; route handlers can require additional credentials, site permissions, or an Origin header. Dashboard categories also enforce Office section selection. Clock categories are limited to scanners and document upload/status/retry. PIN mode skips the proxy login check. A machine category means the proxy defers authentication to the handler, usually x-ingest-secret.

See the connection guide for authentication and tested examples. This inventory replaces assumptions based on older route documentation.

Methods Route Proxy category Source
PATCH, DELETE /api/admin/users/[id] admin route.ts
GET, POST /api/admin/users manager route.ts
POST /api/agent/actions/[id]/apply admin route.ts
POST /api/agent/actions/[id]/reject admin route.ts
GET /api/agent/actions/[id] admin route.ts
POST /api/agent/actions/[id]/undo admin route.ts
PATCH /api/ask/change-requests/[id] admin route.ts
GET /api/ask/change-requests admin route.ts
DELETE /api/ask/memories/[id] admin route.ts
GET, POST /api/ask/memories admin route.ts
GET /api/ask/messages/[id]/pdf admin route.ts
GET /api/ask/users admin route.ts
POST /api/auth/change-password public route.ts
POST /api/auth/login public route.ts
POST /api/auth/logout public route.ts
POST /api/chat/attachments admin route.ts
POST /api/chat admin route.ts
GET, PATCH, DELETE /api/chat/threads/[id] admin route.ts
GET, POST /api/chat/threads admin route.ts
GET /api/clock/employee-lookup clock route.ts
GET /api/clock/employee-search clock route.ts
POST /api/clock/events/[id]/correct dashboard route.ts
POST /api/clock/scan clock route.ts
POST /api/clock/vehicle-lookup clock route.ts
POST /api/clock/vehicle-scan clock route.ts
GET /api/dashboard-attention dashboard route.ts
POST /api/data-import-batches/[id]/retry dashboard route.ts
GET /api/data-import-batches/[id]/status dashboard route.ts
POST /api/delivery-notes/[id]/assign-po dashboard route.ts
POST /api/delivery-notes/[id]/ocr-result admin route.ts
GET /api/delivery-notes/[id]/slip machine route.ts
POST /api/delivery-notes/upload clock route.ts
POST /api/dn-batches/[id]/assembly dashboard route.ts
POST /api/dn-batches/[id]/dismiss dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/correct-receipt dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/dismiss dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/matching dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/post-line dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/post dashboard route.ts
GET, POST /api/dn-batches/[id]/notes/[noteId]/processing-preview dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/resolve-entities dashboard route.ts
POST /api/dn-batches/[id]/notes/[noteId]/resolve-item dashboard route.ts
PATCH /api/dn-batches/[id]/notes/[noteId] dashboard route.ts
POST /api/dn-batches/[id]/pages/[n]/dismiss dashboard route.ts
GET /api/dn-batches/[id]/pages/[n] dashboard route.ts
POST /api/dn-batches/[id]/rerun dashboard route.ts
POST /api/dn-batches/tick machine route.ts
POST /api/fuel-logs/import dashboard route.ts
GET /api/health public route.ts
GET /api/pb-files/[collection]/[recordId]/[...filename] dashboard route.ts
DELETE /api/plant-hours/[id] dashboard route.ts
GET /api/plant-hours/exception-report/[sheetId] dashboard route.ts
POST /api/plant-hours/import dashboard route.ts
GET /api/plant-hours/template dashboard route.ts
GET /api/purchase-orders/[id]/delivery-reconciliation machine route.ts
GET /api/purchase-orders/[id]/document dashboard route.ts
PATCH, DELETE /api/purchase-orders/[id]/items/[itemId] dashboard route.ts
POST /api/purchase-orders/[id]/items dashboard route.ts
GET /api/purchase-orders/[id]/pages/[n] dashboard route.ts
POST /api/purchase-orders/[id]/retry clock route.ts
GET /api/purchase-orders/[id]/status clock route.ts
POST /api/purchase-orders/[id]/supplier dashboard route.ts
GET /api/purchase-orders/by-number/[poNumber]/items machine route.ts
POST /api/purchase-orders/ingest machine route.ts
POST /api/purchase-orders/process-batch machine route.ts
POST /api/purchase-orders/upload clock route.ts
POST /api/records/[collection]/[id]/verify dashboard for purchase_orders/delivery_notes; admin otherwise route.ts
POST /api/sites/[id]/fixed-costs dashboard route.ts
PATCH /api/sites/[id] dashboard route.ts
POST /api/sites dashboard route.ts
PATCH /api/suppliers/[id] dashboard route.ts
POST /api/suppliers dashboard route.ts
POST /api/timesheets/import dashboard route.ts
POST, DELETE /api/vehicles/[id]/attention-dismiss dashboard route.ts
POST /api/vehicles/[id]/merge dashboard route.ts
PATCH, DELETE /api/vehicles/[id] dashboard route.ts
POST /api/vehicles/import-summary dashboard route.ts
POST /api/vehicles dashboard route.ts

78 route files. Next.js may also supply HEAD/OPTIONS automatically; the table lists explicitly exported methods.