توثيق الربط مع أنظمة العيادات

https://cadcam.algomaei.com/connect?app_id=<APP_ID>&redirect_uri=https%3A%2F%2Fclinic-hub.example.com%2Flab%2Freturn&state=<RANDOM>

curl -X POST https://cadcam.lovable.app/api/public/partner/connect/exchange \
  -H "x-app-id: <APP_ID>" -H "x-app-secret: <APP_SECRET>" \
  -H "Content-Type: application/json" \
  -d '{ "code": "<CODE_FROM_REDIRECT>" }'

# { "api_key": "lab_live_…", "account": { "id": "…", "name": "عيادة النور", "type": "clinic" } }

curl -X POST https://cadcam.lovable.app/api/public/partner/connect/revoke -H "Authorization: Bearer lab_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

https://cadcam.lovable.app/api/public/partner

Authorization: Bearer lab_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/json

curl -H "Authorization: Bearer $LAB_API_KEY" https://cadcam.lovable.app/api/public/partner/ping

{
  "ok": true,
  "lab": "معمل الجُماعي كاد كام",
  "account": { "id": "7f0c…", "name": "عيادة النور", "type": "clinic" }
}

curl -H "Authorization: Bearer $LAB_API_KEY" https://cadcam.lovable.app/api/public/partner/catalog

{
  "groups": [{ "id": "…", "name": "الزيركون", "description": null, "sort_order": 1 }],
  "work_types": [
    {
      "id": "8c1f…",
      "group_id": "…",
      "name": "تاج زيركون",
      "case_type": "digital",
      "unit": "قطعة",
      "price": 9000,
      "currency": "YER",
      "fields": [
        { "id": "…", "label": "نوع الحافة", "field_type": "select", "required": true, "options": ["كتف", "شامفر"] }
      ]
    }
  ]
}

curl -X POST https://cadcam.lovable.app/api/public/partner/cases \
  -H "Authorization: Bearer $LAB_API_KEY" -H "Content-Type: application/json" \
  -d '{
    "external_ref": "clinic-visit-8841",
    "patient_name": "أحمد محمد",
    "patient_age": 34,
    "patient_gender": "male",
    "case_type": "digital",
    "priority": "normal",
    "due_date": "2026-10-05",
    "notes": "اللون A2 — تسليم قبل الخميس",
    "items": [
      { "work_type_id": "8c1f…", "teeth": [11, 12], "shade": "A2" },
      { "work_type_id": "8c1f…", "bridges": [[14, 15, 16]], "quantity": 3 }
    ]
  }'

{ "id": "b2d9…", "code": "25-1043", "duplicate": false }

curl -X POST https://cadcam.lovable.app/api/public/partner/files \
  -H "Authorization: Bearer $LAB_API_KEY" -H "Content-Type: application/json" \
  -d "{\"case\":\"25-1043\",\"name\":\"upper.stl\",\"content_base64\":\"$(base64 -w0 upper.stl)\"}"

{
  "file": { "id": "…", "url": "/api/public/media/cases/partner/…stl", "name": "upper.stl", "kind": "partner", "created_at": "…" },
  "case": { "id": "b2d9…", "code": "25-1043" }
}

curl -H "Authorization: Bearer $LAB_API_KEY" "https://cadcam.lovable.app/api/public/partner/cases?limit=20&search=أحمد"
curl -H "Authorization: Bearer $LAB_API_KEY" https://cadcam.lovable.app/api/public/partner/cases/25-1043

{
  "case": { "id": "b2d9…", "code": "25-1043", "external_ref": "clinic-visit-8841", "status": "in_progress",
            "delivery_status": "pending", "due_date": "2026-10-05", "total_price": 18000, "discount": 0, "currency": "YER" },
  "items":  [{ "work_type_name": "تاج زيركون", "teeth": [11, 12], "quantity": 2, "unit_price": 9000 }],
  "stages": [{ "name": "التصميم", "department": "cad", "status": "done", "completed_at": "…" },
             { "name": "القص", "department": "milling", "status": "in_progress" }],
  "files":   [{ "name": "upper.stl", "url": "/api/public/media/…" }],
  "reviews": [{ "id": "…", "image_url": "…", "message": "يرجى الموافقة على التصميم", "status": "pending" }],
  "payments": [{ "amount": 10000, "currency": "YER", "receipt_no": "R-221" }],
  "balance": 8000
}

curl -H "Authorization: Bearer $LAB_API_KEY" "https://cadcam.lovable.app/api/public/partner/statement?from=2026-09-01"

{
  "totals": { "YER": { "opening": 0, "billed": 480000, "paid": 300000, "balance": 180000 } },
  "cases": [{ "code": "25-1043", "patient_name": "أحمد محمد", "total_price": 18000, "currency": "YER" }],
  "payments": [{ "amount": 10000, "currency": "YER", "receipt_no": "R-221", "created_at": "…" }]
}

{
  "event": "case.updated",
  "sent_at": "2026-09-19T08:14:22.104Z",
  "data": { "id": "b2d9…", "code": "25-1043", "external_ref": "clinic-visit-8841",
            "status": "ready", "delivery_status": "pending", "patient_name": "أحمد محمد" }
}

import { createHmac, timingSafeEqual } from "crypto";

export async function handleLabWebhook(request: Request) {
  const raw = await request.text();                       // النص الخام أولاً
  const sent = request.headers.get("x-lab-signature") ?? "";
  const expected = createHmac("sha256", process.env.LAB_WEBHOOK_SECRET!)
    .update(raw)
    .digest("hex");

  const a = Buffer.from(sent, "utf8");
  const b = Buffer.from(expected, "utf8");
  if (a.length !== b.length || !timingSafeEqual(a, b)) {
    return new Response("invalid signature", { status: 401 });
  }

  const { event, data } = JSON.parse(raw);
  // حدّث العمل عندك بحسب data.external_ref أو data.code
  return new Response("ok");
}

التوثيق كنص خام (Markdown): https://cadcam.algomaei.com/docs/integration.md
وصف الواجهة (OpenAPI 3.1): https://cadcam.algomaei.com/api/public/partner/openapi.json

اقرأ https://cadcam.algomaei.com/docs/integration.md ثم أضف في هذا المشروع:
1) شاشة «إعدادات الربط بالمعمل»: حفظ مفتاح lab_live_ في أسرار الخادم + زر اختبار الاتصال عبر GET /ping.
2) في ملف المريض زر «إرسال للمعمل»: يجلب /catalog ويعرض أنواع الأعمال وأسعارها، يختار الأسنان بنظام FDI،
   ثم POST /cases مع external_ref = معرّف الزيارة، ثم POST /files لكل ملف سكان.
3) شاشة «أعمالي في المعمل»: GET /cases و GET /cases/{code} مع تنبيه عند وجود طلب موافقة تصميم، و GET /statement للرصيد.
4) نقطة استقبال إشعارات: تتحقق من X-Lab-Signature (HMAC SHA-256 على النص الخام) قبل التحديث.
كل النداءات من الخادم فقط، والمفتاح لا يظهر في المتصفح.