Docs: Update SuperOffice Connector README with Production details, critical API bug (UDF crash), and Circuit Breaker logic [31188f42]

connector-superoffice/README.md

@@ -3,7 +3,57 @@
 ## Overview
 This directory contains Python scripts designed to integrate with the SuperOffice CRM API, primarily for data extraction and analysis related to sales and customer product information.
 
-## Authentication
+## 🚀 Production Deployment (March 2026)
+
+**Status:** ✅ Live (with active workarounds)
+**Environment:** `online3` (Production)
+**Tenant:** `Cust26720`
+
+### 1. Architecture & Flow
+1.  **Trigger:** SuperOffice sends a webhook (`contact.created`, `contact.changed`) to `https://floke-ai.duckdns.org/connector/webhook`.
+2.  **Reception:** `webhook_app.py` (FastAPI) receives the event, validates the token, and pushes a job to the SQLite queue (`connector_queue.db`).
+3.  **Processing:** `worker.py` polls the queue, fetches contact details from SuperOffice, and sends them to the **Company Explorer**.
+4.  **Enrichment:** Company Explorer analyzes the data and returns enrichment info (Vertical, Summary, etc.).
+5.  **Sync:** `worker.py` patches the data back into SuperOffice (`UserDefinedFields`).
+
+### 2. Critical Issues & Workarounds (Lessons Learned)
+
+#### 🛑 A. The "Unhashable Dict" API Bug (Critical)
+*   **Symptom:** When fetching contact details (`GET /Contact/{id}`), Python crashes with `TypeError: unhashable type: 'dict'` when accessing `UserDefinedFields`.
+*   **Cause:** The SuperOffice Production API (`online3`) returns a malformed structure for `UserDefinedFields` for this tenant. It appears that one of the keys in the JSON response is being parsed as a dictionary object instead of a string, rendering the entire dictionary invalid for standard Python lookups. This behavior **did not** occur on the DEV (`sod`) environment.
+*   **Workaround (Active):** The `worker.py` implements a **"Fail Open"** strategy (`safe_get_udfs`).
+    *   It catches the `TypeError`.
+    *   It treats the existing UDFs as **empty**.
+    *   It proceeds with the enrichment and overwrites/patches the fields blindly.
+    *   *Consequence:* We cannot check if a field is already set before writing. We always write.
+
+#### 🔄 B. The "Ping-Pong" Loop (Resolved)
+*   **Symptom:** Accounts stuck in a loop (`Processing` -> `Completed` -> `Processing` -> ...).
+*   **Cause:** Due to Workaround A (Blind Write), the worker *always* sends a PATCH request to SuperOffice. Every PATCH triggers a new `contact.changed` webhook. Since we can't read the value to see "it's already done", we write again -> new webhook -> infinite loop.
+*   **Solution:** Implemented a **Circuit Breaker** in `worker.py`.
+    *   The worker checks the `ChangedByAssociateId` in the webhook payload.
+    *   If the ID matches our API User (**528**), the job is immediately marked as `SUCCESS` and skipped.
+
+#### 🔐 C. Environment Variables in Docker
+*   **Lesson:** `docker-compose` `env_file` directive makes variables available to the container, but python scripts run *manually* via `docker exec` do NOT see them unless `load_dotenv` is used explicitly.
+*   **Fix:** All scripts in `tools/` now explicitly load the `.env` from the project root. `config.py` defaults to `online3` to prevent accidental dev-connections.
+
+### 3. Tooling (New)
+Located in `connector-superoffice/tools/`:
+
+*   `create_company.py`: Creates a test company ("Bremer Abenteuerland") in Prod to trigger the webhook flow.
+*   `verify_enrichment.py`: Checks if the enrichment data (Vertical, Summary) actually landed in SuperOffice (bypassing the UDF crash).
+*   `debug_raw_response.py`: Saves the raw JSON response from SuperOffice to `raw_api_response.json` for debugging API structure issues.
+*   `who_am_i.py`: Attempts to identify the current API user (Associate ID).
+
+### 4. Open Todos
+*   [ ] **Support Ticket:** Wait for SuperOffice to fix the `UserDefinedFields` JSON structure on `Cust26720`.
+*   [ ] **Docker Optimization:** The `connector-superoffice` build takes >8 minutes due to compiling C-extensions. Implement Multi-Stage Build.
+*   [ ] **Hardcoded ID:** Make the Circuit Breaker ID (`528`) configurable via `.env` (`SO_API_ASSOCIATE_ID`).
+
+---
+
+## Authentication (Legacy)
 Authentication is handled via the `AuthHandler` class, which uses a refresh token flow to obtain access tokens. Ensure that the `.env` file in the project root is correctly configured with `SO_CLIENT_ID`, `SO_CLIENT_SECRET`, `SO_REFRESH_TOKEN`, `SO_REDIRECT_URI`, `SO_ENVIRONMENT`, and `SO_CONTEXT_IDENTIFIER`.
 
 ## Key SuperOffice Entities and Data Model Observations