arie378/tokoflow-api repository overview

⁠tokoflow-api

Core business/domain API for Tokoflow — a multi-tenant retail & UMKM POS + back-office SaaS. Built on Helidon SE 4 (virtual threads) and shipped as a GraalVM native-image binary.

⁠What it does

• gRPC server exposing the platform's domain services: sales, inventory, procurement, accounting/GL, CRM, HR/payroll, loyalty, and the "toko binaan" (fostered-store) network.
• Backed by PostgreSQL (HikariCP/JDBC) with per-tenant Row-Level Security; schema managed by the built-in SqlBootstrap migrator.
• Uses tokoflow-grpc-contract (standard grpc-java stubs, tokoflow.* wire) + tokoflow-common.

⁠Architecture

Not a public-facing service. It sits behind tokoflow-gateway, which verifies the user JWT and calls this API over gRPC with an internal token. PDF/Jasper rendering is delegated to the tokoflow-report sidecar.

⁠Image

• Native binary · entrypoint id.tokoflow.api.TokoflowApiMain
• Exposes 8084 (gRPC, h2c)

⁠Key environment

• DB_* / JDBC — PostgreSQL connection
• DB_MIGRATOR — sqlbootstrap (default) or flyway
• INTERNAL_TOKEN_SECRET — shared with tokoflow-gateway (must match)
• JWT_SECRET, REPORT_SERVICE_URL, REPORT_SERVICE_JWT_SECRET
• REDIS_URL (Valkey), OTEL_* (OpenTelemetry → OpenObserve)
• Secrets resolved via Infisical when configured, else env