GFS Platform

Infrastructure

Worker endpoints, cron, bindings, secrets map

Custom domain

api.ai-globalfoodsolutions.co

Fallback

gfs-platform.mikelevine.workers.dev

Endpoints

Crons

DNS records

Cloudflare services

Worker — gfs-platform, source src/index.ts. Routes api.ai-globalfoodsolutions.co/*.
D1 — gfs-netsuite (3818ecd5-995e-4694-a08b-a273c94291da).
KV — namespace CACHE (e880e40bc3674963bc37cf90e02f6369).
R2 — bucket gfs-files.
Pages — gfs-netsuite.pages.dev (this platform). Legacy: gfs-system-guide.pages.dev.
DNS / zone — ai-globalfoodsolutions.co (owned). Corporate domain globalfoodsolutions.co also owned.

Worker endpoints — overview 59 detected

Detected by static analysis of src/index.ts. Detail per endpoint below.

Path	Auth	Method
/	Public	GET
/api/	Bearer	GET
/api/ai/caps	Bearer	GET
/api/ai/metrics	Bearer	GET
/api/ar/aging	Bearer	GET
/api/assemblies	Bearer	GET
/api/assembly-cost-rollup/refresh	Bearer	GET
/api/auth/edit-check	Bearer	GET
/api/bids	Bearer	GET
/api/bids/create	Bearer	GET
/api/briefing	Bearer	GET
/api/chat/feedback	Bearer	GET
/api/chat/sessions	Bearer	GET
/api/customers	Bearer	GET
/api/customers/ranking	Bearer	GET
/api/embed/refresh	Bearer	GET
/api/evals	Bearer	GET
/api/evals/run	Bearer	GET
/api/financials/monthly	Bearer	GET
/api/financials/summary	Bearer	GET
/api/gl/accounts	Bearer	GET
/api/health	Public	GET
/api/healthcheck	Bearer	GET
/api/items	Bearer	GET
/api/items/performance	Bearer	GET
/api/kpis	Bearer	GET
/api/mapping/confirm	Bearer	GET
/api/mapping/fuzzy	Bearer	GET
/api/mapping/populate	Bearer	GET
/api/mapping/unmatched	Bearer	GET
/api/ns/touchpoints	Bearer	GET
/api/pricing-chat	Bearer	GET
/api/pricing-chat/intent	Bearer	GET
/api/pricing/audit/summary	Bearer	GET
/api/pricing/compare	Bearer	GET
/api/pricing/derive	Bearer	GET
/api/pricing/diff	Bearer	GET
/api/pricing/push	Bearer	GET
/api/programs	Bearer	GET
/api/programs/accruals	Bearer	GET
/api/programs/create	Bearer	GET
/api/quotes	Bearer	GET
/api/revenue/trend	Bearer	GET
/api/review-queue	Bearer	GET
/api/search	Bearer	GET
/api/spec-drift-vs-ns	Bearer	GET
/api/spec-items	Bearer	GET
/api/spec/by-claim	Bearer	GET
/api/sync-status	Public	GET
/api/transactions	Bearer	GET
/api/vendor-costs	Bearer	GET
/api/vendor-costs/create	Bearer	GET
/api/vendor-mapping/confirm	Bearer	GET
/api/vendor-mapping/fuzzy	Bearer	GET
/api/vendor-mapping/populate	Bearer	GET
/api/vendor-mapping/unmatched	Bearer	GET
/api/vendors	Bearer	GET
/api/vendors/spend	Bearer	GET
/api/whoami	Bearer	GET

Worker endpoints — per-endpoint detail 24 documented

Param tables, auth, and example responses for every public endpoint. Source: data/api-endpoints.json.

GET /api/healthPublic

Example response

{
  "status": "ok",
  "database": "gfs-netsuite",
  "counts": {
    "customers": 283, "vendors": 484, "items": 1265,
    "transactions": 102367, "invoice_lines": 28528,
    "so_lines": 29098, "vb_lines": 21315, "pricing": 1264
  },
  "timestamp": "2026-05-19T13:33:03.674Z"
}

GET /api/kpisBearer

Example response

{
  "revenue_2026_ytd": 11272175.89,
  "revenue_2025_total": 28435586.26,
  "open_ar": { "amount": 2299955.6, "count": 216 },
  "open_ap": { "amount": ..., "count": ... },
  "open_so": { "amount": ..., "count": 90 },
  "timestamp": "..."
}

GET /api/briefingBearer

Example response

{
  "revenue_2026_ytd": ...,
  "open_ar": { "amount": ..., "count": ... },
  "open_so": { "amount": ..., "count": ... },
  "invoices_this_month": { "amount": ..., "count": ... },
  "top_customers_2026": [ { "entity_name": "Driscoll Foods", "revenue": 4107918.47 }, ... ],
  "timestamp": "..."
}

GET /api/customersBearer

Parameters

Param	Type	Default	Description
q	string	—	Search by company name (LIKE %q%)
limit	int	50	1-200
offset	int	0	0-100000

Example response

{ "items": [...], "total": 283, "limit": 50, "offset": 0 }

GET /api/customers/:idBearer

Example response

{ "id": 475, "companyname": "Jkings", ..., "contacts": [...], "pricing": [...], "recent_orders": [...] }

GET /api/customers/:id/historyBearer

Example response

{ "customer_id": "475", "yearly": [{ "year": 2026, "type": "CustInvc", "txn_count": 47, "total": ... }], "top_items": [...] }

GET /api/customers/rankingBearer

Parameters

Param	Type	Default
year	int	2026

Example response

{ "year": 2026, "items": [{ "customer": "Driscoll Foods", "customer_id": 539, "inv_count": ..., "revenue": 4107918.47 }, ...] }

GET /api/vendorsBearer

GET /api/vendors/spendBearer

Parameters

Param	Type	Default
year	int	2026

GET /api/itemsBearer

Parameters

Param	Type	Default	Allowed Values
type	string	—	InvtPart, Assembly, Kit, NonInvtPart
allergen	string	—	milk, eggs, peanuts, soybeans, wheat, fish, tree_nuts, crustacean, celery, lupin, molluscs, mustard, sesame, sulphur_dioxide
limit	int	50	1-200
offset	int	0	0-100000

GET /api/items/:idBearer

GET /api/items/performanceBearer

Parameters

Param	Type	Default
year	int	2026

GET /api/items/:id/customersBearer

GET /api/transactionsBearer

Parameters

Param	Type	Default	Allowed
type	string	CustInvc	16 validated types
year	int	—	2018-2027
limit	int	50	1-200
offset	int	0	0-100000

GET /api/ar/agingBearer

Example response

{ "items": [{ "customer": "...", "customer_id": ..., "inv_count": ..., "total_ar": ..., "current_bal": ..., "days_1_30": ..., "days_31_60": ..., "days_61_90": ..., "days_90_plus": ... }] }

GET /api/financials/summaryBearer

Example response

{ "revenue": [{ "year": 2026, "invoices": 712, "total": 11272175.89 }, ...], "cogs": [...], "collections": [...] }

GET /api/financials/monthlyBearer

Parameters

Param	Type	Default
year	int	2026

GET /api/revenue/trendBearer

GET /api/gl/accountsBearer

Parameters

Param	Type	Default	Values
type	string	—	Bank, AcctRec, AcctPay, Income, COGS, Expense, Equity, OthCurrAsset, OthCurrLiab, FixedAsset, OthIncome, OthExpense, NonPosting

GET /api/searchBearer

Parameters

Param	Type	Required
q	string	Yes (max 100 chars)

Example response

{ "results": [{ "id": 475, "name": "Jkings", "type": "customer" }, { "id": 539, "name": "Driscoll Foods", "type": "customer" }, ...] }

GET /api/pricing/deriveBearer (admin)

Triggers full re-derivation of customer_pricing_proposed from invoice_lines. Reads up to last 3 invoices per (customer, item) since 2024-01, applies median when 3+ exist, else last_paid. Clears existing 'proposed' rows then inserts the fresh set. Idempotent — running twice produces the same result. Implements ADR-012.

Example response

{
  "derived_count": 661,
  "median_last_3": 445,
  "last_paid": 216,
  "invoice_rows_read": 24560,
  "derived_at": "2026-05-20T13:30:00.000Z",
  "ms": 4823
}

GET /api/pricing/diffBearer

Three-bucket audit across customer_pricing (NS current state) vs customer_pricing_proposed (derived). Listed+Recent = both have rows for the pair → drift check. Listed+Stale = NS has row, derive doesn't → candidate to deprecate. Not-Listed+Recent = derive has row, NS doesn't → orphan items being bought without price-list entry.

Parameters

Param	Type	Default	Description
customer	int	—	Scope to one customer ID

Example response

{
  "summary": { "proposed_customers": 103, "proposed_rows": 661 },
  "buckets": {
    "listed_recent":     { "count": 434, "sample": [...] },
    "listed_stale":      { "count": 830, "sample": [...] },
    "not_listed_recent": { "count": 227, "sample": [...] }
  },
  "customer_filter": null,
  "timestamp": "..."
}

GET /api/pricing/customer/:idBearer

Per-customer pricing view: current NS rows + derived proposed rows + stale rows (in NS but no recent invoice). Each proposed row tagged with bucket (listed_recent / not_listed_recent) and delta_pct vs current.

Example response

{
  "customer": { "id": 539, "name": "Driscoll Foods" },
  "current_count": 42,
  "proposed_count": 88,
  "stale_count": 12,
  "proposed": [
    { "item": 913, "itemid": "PUB5001H ...", "derived_price": 110.40, "current_price": 102.00, "source": "median_last_3", "invoice_count": 3, "bucket": "listed_recent", "delta_pct": 8.2 }
  ],
  "stale": [...],
  "current_full": [...]
}

GET /api/pricing/audit/summaryBearer

High-level pricing audit snapshot: proposed counts, source breakdown (median_last_3 vs last_paid), three-bucket counts, open SOs in flight (would be affected by cutover), last-derived timestamp.

Example response

{
  "proposed_customers": 103,
  "proposed_rows": 661,
  "source_breakdown": [
    { "source": "last_paid",     "cnt": 216 },
    { "source": "median_last_3", "cnt": 445 }
  ],
  "buckets": {
    "listed_recent":     434,
    "listed_stale":      830,
    "not_listed_recent": 227
  },
  "open_sos_in_flight": { "count": 90, "customers_affected": 33 },
  "last_derived_at": "2026-05-20T...",
  "timestamp": "..."
}

Example requests

# Health (public)
curl https://api.ai-globalfoodsolutions.co/api/health

# KPIs (auth)
curl -H "Authorization: Bearer $API_KEY" \
  https://api.ai-globalfoodsolutions.co/api/kpis

# Fallback when custom domain unavailable
curl https://gfs-platform.mikelevine.workers.dev/api/health

CORS & security headers

Origins allowed by the Worker: https://ai-globalfoodsolutions.co, https://www.ai-globalfoodsolutions.co, http://localhost:3000, http://localhost:8787.

Headers on every JSON response: X-Content-Type-Options: nosniff, X-Frame-Options: DENY, Referrer-Policy: strict-origin-when-cross-origin, Content-Security-Policy: default-src 'none'; frame-ancestors 'none'.

DNS records 6 records

Records on the ai-globalfoodsolutions.co zone. Proxied = behind Cloudflare WAF/CDN.

Type	Name	Value	Proxy
CNAME	api	gfs-platform.mikelevine.workers.dev	Proxied
CNAME	www	ai-globalfoodsolutions.co	Proxied
MX	@	route1.mx.cloudflare.net (priority 87)	—
TXT	@	v=spf1 include:_spf.mx.cloudflare.net ~all	—
TXT	_dmarc	v=DMARC1; p=none; ...	—
NS	@	chance.ns.cloudflare.com · leanna.ns.cloudflare.com	—

Cron schedules

Declared in wrangler.jsonc:

*/15 * * * *
0 19 * * *
0 3 1 * *
5 */2 * * *

Worker scheduled() handler is not implemented in src/index.ts. Periodic work runs locally — see next section.

Local cron (actually running)

Script	Cadence	Function	Source
sync.sh	every 15 min via launchd	Queries Chartstone (localhost:56411) for modified NS transactions in the last 30 min, upserts into D1.	sync.sh
daily-report.sh	archived	(Out of scope — revenue report.)	archive/2026-05/daily-report.sh

Single-laptop dependency: if the Mac is off, sync stops. Migration to Worker-side scheduled() handler calling SuiteAPI directly — Tier 2 GAP.

Bindings

Binding	Type	Target
DB	D1 database	gfs-netsuite (3818ecd5-995e-4694-a08b-a273c94291da)
CACHE	KV namespace	e880e40bc3674963bc37cf90e02f6369
STORAGE	R2 bucket	gfs-files
API_KEY	Secret	set via `wrangler secret put API_KEY`

Secrets map

Names only. Rotation cadence in runbook → secret rotation.

Name	Location	Use
API_KEY	Worker env (Cloudflare)	Bearer for protected REST endpoints
CHARTSTONE_SECRET	Local ~/.zshenv	Bearer used by sync.sh to call Chartstone
(NetSuite TBA tokens)	NetSuite Manage Auth Tokens	SuiteAttach, Analytics Warehouse, Chartstone Pro

Deploy commands

# Worker
wrangler deploy

# Tail Worker logs
wrangler tail

# Run query against D1
wrangler d1 execute gfs-netsuite --remote --command="SELECT COUNT(*) FROM transactions"

# Manage secret
wrangler secret put API_KEY

# Pages deploy (this platform)
wrangler pages deploy . --project-name gfs-netsuite

Infrastructure

Cloudflare services

Worker endpoints — overview 59 detected

Worker endpoints — per-endpoint detail 24 documented

Example response

Example response

Example response

Parameters

Example response

Example response

Example response

Parameters

Example response

Parameters

Parameters

Parameters

Parameters

Example response

Example response

Parameters

Parameters

Parameters

Example response

Example response

Parameters

Example response

Example response

Example response

Example requests

CORS & security headers

DNS records 6 records

Cron schedules

Local cron (actually running)

Bindings

Secrets map

Deploy commands

Related surfaces

Cloudflare

Data model

Admin dashboard

Runbook

Decision log