10 KiB
API route inventory
Updated access categories on 7 October 2026 (Africa/Johannesburg).
[id], [poNumber], etc. are path parameters. [...filename] is a catch-all. The proxy category below is from src/lib/auth/proxy-path.ts for AUTH_MODE=users; route handlers can require additional credentials, site permissions, or an Origin header. Dashboard categories also enforce Office section selection. Clock categories are limited to scanners and document upload/status/retry. PIN mode skips the proxy login check. A machine category means the proxy defers authentication to the handler, usually x-ingest-secret.
See the connection guide for authentication and tested examples. This inventory replaces assumptions based on older route documentation.
| Methods | Route | Proxy category | Source |
|---|---|---|---|
| PATCH, DELETE | /api/admin/users/[id] |
admin | route.ts |
| GET, POST | /api/admin/users |
manager | route.ts |
| POST | /api/agent/actions/[id]/apply |
admin | route.ts |
| POST | /api/agent/actions/[id]/reject |
admin | route.ts |
| GET | /api/agent/actions/[id] |
admin | route.ts |
| POST | /api/agent/actions/[id]/undo |
admin | route.ts |
| PATCH | /api/ask/change-requests/[id] |
admin | route.ts |
| GET | /api/ask/change-requests |
admin | route.ts |
| DELETE | /api/ask/memories/[id] |
admin | route.ts |
| GET, POST | /api/ask/memories |
admin | route.ts |
| GET | /api/ask/messages/[id]/pdf |
admin | route.ts |
| GET | /api/ask/users |
admin | route.ts |
| POST | /api/auth/change-password |
public | route.ts |
| POST | /api/auth/login |
public | route.ts |
| POST | /api/auth/logout |
public | route.ts |
| POST | /api/chat/attachments |
admin | route.ts |
| POST | /api/chat |
admin | route.ts |
| GET, PATCH, DELETE | /api/chat/threads/[id] |
admin | route.ts |
| GET, POST | /api/chat/threads |
admin | route.ts |
| GET | /api/clock/employee-lookup |
clock | route.ts |
| GET | /api/clock/employee-search |
clock | route.ts |
| POST | /api/clock/events/[id]/correct |
dashboard | route.ts |
| POST | /api/clock/scan |
clock | route.ts |
| POST | /api/clock/vehicle-lookup |
clock | route.ts |
| POST | /api/clock/vehicle-scan |
clock | route.ts |
| GET | /api/dashboard-attention |
dashboard | route.ts |
| POST | /api/data-import-batches/[id]/retry |
dashboard | route.ts |
| GET | /api/data-import-batches/[id]/status |
dashboard | route.ts |
| POST | /api/delivery-notes/[id]/assign-po |
dashboard | route.ts |
| POST | /api/delivery-notes/[id]/ocr-result |
admin | route.ts |
| GET | /api/delivery-notes/[id]/slip |
machine | route.ts |
| POST | /api/delivery-notes/upload |
clock | route.ts |
| POST | /api/dn-batches/[id]/assembly |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/dismiss |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/correct-receipt |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/dismiss |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/matching |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/post-line |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/post |
dashboard | route.ts |
| GET, POST | /api/dn-batches/[id]/notes/[noteId]/processing-preview |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/resolve-entities |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/notes/[noteId]/resolve-item |
dashboard | route.ts |
| PATCH | /api/dn-batches/[id]/notes/[noteId] |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/pages/[n]/dismiss |
dashboard | route.ts |
| GET | /api/dn-batches/[id]/pages/[n] |
dashboard | route.ts |
| POST | /api/dn-batches/[id]/rerun |
dashboard | route.ts |
| POST | /api/dn-batches/tick |
machine | route.ts |
| POST | /api/fuel-logs/import |
dashboard | route.ts |
| GET | /api/health |
public | route.ts |
| GET | /api/pb-files/[collection]/[recordId]/[...filename] |
dashboard | route.ts |
| DELETE | /api/plant-hours/[id] |
dashboard | route.ts |
| GET | /api/plant-hours/exception-report/[sheetId] |
dashboard | route.ts |
| POST | /api/plant-hours/import |
dashboard | route.ts |
| GET | /api/plant-hours/template |
dashboard | route.ts |
| GET | /api/purchase-orders/[id]/delivery-reconciliation |
machine | route.ts |
| GET | /api/purchase-orders/[id]/document |
dashboard | route.ts |
| PATCH, DELETE | /api/purchase-orders/[id]/items/[itemId] |
dashboard | route.ts |
| POST | /api/purchase-orders/[id]/items |
dashboard | route.ts |
| GET | /api/purchase-orders/[id]/pages/[n] |
dashboard | route.ts |
| POST | /api/purchase-orders/[id]/retry |
clock | route.ts |
| GET | /api/purchase-orders/[id]/status |
clock | route.ts |
| POST | /api/purchase-orders/[id]/supplier |
dashboard | route.ts |
| GET | /api/purchase-orders/by-number/[poNumber]/items |
machine | route.ts |
| POST | /api/purchase-orders/ingest |
machine | route.ts |
| POST | /api/purchase-orders/process-batch |
machine | route.ts |
| POST | /api/purchase-orders/upload |
clock | route.ts |
| POST | /api/records/[collection]/[id]/verify |
dashboard for purchase_orders/delivery_notes; admin otherwise | route.ts |
| POST | /api/sites/[id]/fixed-costs |
dashboard | route.ts |
| PATCH | /api/sites/[id] |
dashboard | route.ts |
| POST | /api/sites |
dashboard | route.ts |
| PATCH | /api/suppliers/[id] |
dashboard | route.ts |
| POST | /api/suppliers |
dashboard | route.ts |
| POST | /api/timesheets/import |
dashboard | route.ts |
| POST, DELETE | /api/vehicles/[id]/attention-dismiss |
dashboard | route.ts |
| POST | /api/vehicles/[id]/merge |
dashboard | route.ts |
| PATCH, DELETE | /api/vehicles/[id] |
dashboard | route.ts |
| POST | /api/vehicles/import-summary |
dashboard | route.ts |
| POST | /api/vehicles |
dashboard | route.ts |
78 route files. Next.js may also supply HEAD/OPTIONS automatically; the table lists explicitly exported methods.