Aksiyonlar (Actions)

{
  "actions": [
    {
      "key": "create-invoice",
      "type": "iframe",
      "placement": "order.detail",
      "title": { "tr": "İşbaşı'nda fatura kes", "en": "Create İşbaşı invoice" },
      "path": "/actions/create-invoice",
      "presentation": "modal"
    },
    {
      "key": "bulk-invoice",
      "type": "api",
      "placement": "order.list",
      "title": { "tr": "Seçilenleri faturala", "en": "Invoice selected" },
      "path": "/api/actions/bulk-invoice",
      "confirm": {
        "tr": "Seçili siparişler için fatura kesilsin mi?",
        "en": "Create invoices for selected orders?"
      }
    }
  ]
}

https://isbasi.apps.tecof.site/actions/create-invoice?installationId=…&merchantId=…&locale=tr&embedded=1&host=…&session=…&actionRunId=…&actionKey=create-invoice&placement=order.detail&ids=6720bb00cc11dd22ee33ff44

// app/actions/create-invoice/page.tsx
"use client";

import { useState } from "react";
import { useAppBridge, useAppContext, useSessionFetch } from "@tecof/app-bridge/react";

export default function CreateInvoiceAction() {
  const bridge = useAppBridge();
  const context = useAppContext();
  const sessionFetch = useSessionFetch();
  const [busy, setBusy] = useState(false);

  const orderId = context.action?.ids[0];

  async function createInvoice() {
    if (!orderId) return;
    setBusy(true);
    bridge.setLoading(true);
    try {
      const res = await sessionFetch("/api/invoices", {
        method: "POST",
        headers: { "Content-Type": "application/json" },
        body: JSON.stringify({ orderId }),
      });
      if (!res.ok) throw new Error("invoice-failed");
      bridge.close({ refresh: true, message: "Fatura oluşturuldu", kind: "success" });
    } catch {
      bridge.toast("Fatura oluşturulamadı", { kind: "error" });
    } finally {
      bridge.setLoading(false);
      setBusy(false);
    }
  }

  return (
    <main style={{ padding: 24 }}>
      <h1>Fatura kes</h1>
      <p>Sipariş: {orderId}</p>
      <button onClick={createInvoice} disabled={busy}>Faturayı oluştur</button>
      <button onClick={() => bridge.close()}>Vazgeç</button>
    </main>
  );
}

POST /api/actions/bulk-invoice HTTP/1.1
Content-Type: application/json
X-Tecof-Timestamp: 1760087770
X-Tecof-Signature: t=1760087770,v1=5f2c…e91a
X-Tecof-Action: bulk-invoice
X-Tecof-Installation-Id: 6720aa00bb11cc22dd33ee55

{
  "actionRunId": "6720cc00dd11ee22ff33aa55",
  "actionKey": "bulk-invoice",
  "placement": "order.list",
  "ids": ["6720bb00cc11dd22ee33ff44", "6720bb00cc11dd22ee33ff45"],
  "merchantId": "66f0c0ffee0000000000abcd",
  "installationId": "6720aa00bb11cc22dd33ee55",
  "userId": "66f0aa00bb11cc22dd33ee66",
  "locale": "tr",
  "timestamp": "2026-10-10T09:16:10.000Z"
}

{
  "ok": true,
  "message": "2 fatura oluşturuldu",
  "kind": "success",
  "redirectUrl": "https://isbasi.apps.tecof.site/invoices",
  "refresh": true
}

// app/api/actions/bulk-invoice/route.ts
import { tecof } from "@/lib/tecof";

export async function POST(req: Request) {
  const rawBody = await req.text();

  let action;
  try {
    action = tecof.verifyActionRequest(rawBody, req.headers);
  } catch {
    return Response.json({ ok: false, kind: "error", message: "Geçersiz imza" }, { status: 401 });
  }

  const api = tecof.client(action.installationId);
  let created = 0;
  const failed: string[] = [];

  for (const orderId of action.ids) {
    try {
      const order = await api.orders.get(orderId);
      // … faturayı oluştur, siparişe metafield yaz
      created++;
    } catch {
      failed.push(orderId);
    }
  }

  if (failed.length > 0) {
    return Response.json({
      ok: created > 0,
      kind: created > 0 ? "warning" : "error",
      message: `${created} fatura oluşturuldu, ${failed.length} sipariş atlandı`,
      refresh: true,
    });
  }

  return Response.json({ ok: true, kind: "success", message: `${created} fatura oluşturuldu`, refresh: true });
}

SECRET="$TECOF_CLIENT_SECRET"
T=$(date +%s)
BODY='{"actionRunId":"local-run-1","actionKey":"bulk-invoice","placement":"order.list","ids":["6720bb00cc11dd22ee33ff44"],"merchantId":"66f0c0ffee0000000000abcd","installationId":"6720aa00bb11cc22dd33ee55","userId":"66f0aa00bb11cc22dd33ee66","locale":"tr","timestamp":"2026-10-10T09:16:10.000Z"}'
SIG=$(printf '%s.%s' "$T" "$BODY" | openssl dgst -sha256 -hmac "$SECRET" | awk '{print $NF}')

curl -X POST http://localhost:3000/api/actions/bulk-invoice \
  -H "Content-Type: application/json" \
  -H "X-Tecof-Timestamp: $T" \
  -H "X-Tecof-Signature: t=$T,v1=$SIG" \
  -H "X-Tecof-Action: bulk-invoice" \
  -H "X-Tecof-Installation-Id: 6720aa00bb11cc22dd33ee55" \
  --data-binary "$BODY"