@flowselections/admin-installatietechniek 1.0.4 → 1.0.6

package/dist-lib/components/AdminForInstallatieTechniek.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AdminForInstallatieTechniek.d.ts","sourceRoot":"","sources":["../../src/components/AdminForInstallatieTechniek.tsx"],"names":[],"mappings":"AAsFA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+DD,wBAAgB,2BAA2B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAE,gCAAqC,+BA2oCtG"}
+{"version":3,"file":"AdminForInstallatieTechniek.d.ts","sourceRoot":"","sources":["../../src/components/AdminForInstallatieTechniek.tsx"],"names":[],"mappings":"AAgGA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA2FD,wBAAgB,2BAA2B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAE,gCAAqC,+BAyjDtG"}

package/dist-lib/components/AdminForInstallatieTechniek.js

@@ -1,10 +1,11 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useEffect, useMemo, useState } from "react";
-import { useAuth, AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, Badge, Button, Card, CardContent, CardHeader, CardTitle, Checkbox, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuSub, DropdownMenuSubContent, DropdownMenuSubTrigger, DropdownMenuTrigger, Input, Label, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, Tabs, TabsContent, TabsList, TabsTrigger, toast, } from "@flowselections/core";
-import { ChevronDown, ChevronRight, Copy, FlaskConical, MoreVertical, Plus, Pencil, Shield, UserPlus, UserX, } from "lucide-react";
-import { assignRole, createRole, createTestUser, deleteRole, deleteUser, duplicateRole, getRoles, getUserModulePermissions, getUsersWithRoles, inviteUser, removeRole, setUserModulePermission, syncModuleRegistry, updateRole, updateUserName, } from "../lib/admin.functions";
+import { useAuth, AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, Badge, Button, Card, CardContent, CardHeader, CardTitle, Checkbox, Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuSub, DropdownMenuSubContent, DropdownMenuSubTrigger, DropdownMenuTrigger, Input, Label, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Switch, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, Tabs, TabsContent, TabsList, TabsTrigger, toast, } from "@flowselections/core";
+import { Building2, ChevronDown, ChevronRight, Copy, FlaskConical, MoreVertical, Plus, Pencil, Shield, UserPlus, UserX, } from "lucide-react";
+import { assignRole, createRole, createProfile, createTestUser, deleteProfile, deleteRole, deleteUser, duplicateProfile, duplicateRole, getProfiles, getRoles, getUserModulePermissions, getUsersWithRoles, inviteUser, removeRole, setActiveProfile, setModuleEnforce, setUserModulePermission, syncModuleRegistry, updateProfile, updateRole, updateUserName, } from "../lib/admin.functions";
 import { useDiscoveredModules } from "../lib/moduleDiscovery";
 import { supabase } from "../integrations/supabase/client";
+const ACTIVE_PROFILE_STORAGE_KEY = "flowselections.admin.activeProfileId";
 const USER_PERMISSION_LABELS = {
     inherit: "Volg rol",
     none: "Geen toegang",
@@ -66,6 +67,17 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
     const [searchQuery, setSearchQuery] = useState("");
     const [roleFilter, setRoleFilter] = useState("all");
     const [sortBy, setSortBy] = useState("name-asc");
+    const [orgProfiles, setOrgProfiles] = useState([]);
+    const [tenants, setTenants] = useState([]);
+    const [profilesLoading, setProfilesLoading] = useState(false);
+    const [activeProfileId, setActiveProfileId] = useState(() => {
+        if (typeof window === "undefined")
+            return "";
+        return window.localStorage.getItem(ACTIVE_PROFILE_STORAGE_KEY) ?? "";
+    });
+    const [profileEditor, setProfileEditor] = useState(null);
+    const [profileSaving, setProfileSaving] = useState(false);
+    const [profileDeleteTarget, setProfileDeleteTarget] = useState(null);
     const [permUserId, setPermUserId] = useState("");
     const [userPermModules, setUserPermModules] = useState([]);
     const [userPermMap, setUserPermMap] = useState({});
@@ -82,7 +94,9 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
     const loadUsers = async () => {
         setLoading(true);
         try {
-            const result = await getUsersWithRoles();
+            const result = await getUsersWithRoles({
+                data: activeProfileId ? { profileId: activeProfileId } : {},
+            });
             setUsers(Array.isArray(result?.users) ? result.users : []);
             const roleList = Array.isArray(result?.availableRoles) ? result.availableRoles : [];
             setAvailableRoles(roleList);
@@ -100,7 +114,9 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
     const loadRoles = async () => {
         setRolesLoading(true);
         try {
-            const result = await getRoles();
+            const result = await getRoles({
+                data: activeProfileId ? { profileId: activeProfileId } : {},
+            });
             setRoles(Array.isArray(result?.roles) ? result.roles : []);
             setRoleModules(Array.isArray(result?.modules) ? result.modules : []);
             setRolePermissions(Array.isArray(result?.permissions) ? result.permissions : []);
@@ -112,6 +128,28 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
             setRolesLoading(false);
         }
     };
+    const loadProfiles = async () => {
+        if (!isAdmin)
+            return;
+        setProfilesLoading(true);
+        try {
+            const result = await getProfiles();
+            const list = Array.isArray(result?.profiles) ? result.profiles : [];
+            setOrgProfiles(list);
+            setTenants(Array.isArray(result?.tenants) ? result.tenants : []);
+            setActiveProfileId((current) => {
+                if (current && list.some((p) => p.id === current))
+                    return current;
+                return list.find((p) => p.isDefault)?.id ?? list[0]?.id ?? "";
+            });
+        }
+        catch (error) {
+            toast.error(getErrorMessage(error, "Fout bij het laden van bedrijfsprofielen"));
+        }
+        finally {
+            setProfilesLoading(false);
+        }
+    };
     const loadUserPermissions = async (userId) => {
         if (!userId) {
             setUserPermModules([]);
@@ -157,6 +195,7 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
             }
             if (cancelled)
                 return;
+            loadProfiles();
             loadUsers();
             loadRoles();
         })();
@@ -165,6 +204,19 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
         };
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [canAccess, isAdmin, shellModulesKey, effectiveShellId]);
+    useEffect(() => {
+        if (typeof window === "undefined")
+            return;
+        if (activeProfileId)
+            window.localStorage.setItem(ACTIVE_PROFILE_STORAGE_KEY, activeProfileId);
+    }, [activeProfileId]);
+    useEffect(() => {
+        if (!canAccess || !activeProfileId)
+            return;
+        loadUsers();
+        loadRoles();
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [activeProfileId]);
     useEffect(() => {
         if (!canAccess)
             return;
@@ -188,6 +240,17 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
             toast.error(getErrorMessage(error, "Opslaan mislukt"));
         }
     };
+    const handleEnforceChange = async (moduleId, enforce) => {
+        setRoleModules((prev) => prev.map((m) => (m.id === moduleId ? { ...m, enforce } : m)));
+        try {
+            await setModuleEnforce({ data: { moduleId, enforce } });
+            toast.success(`Module ${enforce ? "afgedwongen" : "niet langer afgedwongen"}`);
+        }
+        catch (error) {
+            setRoleModules((prev) => prev.map((m) => (m.id === moduleId ? { ...m, enforce: !enforce } : m)));
+            toast.error(getErrorMessage(error, "Afdwingen wijzigen mislukt"));
+        }
+    };
     const handleAssign = async (userId, roleId) => {
         setSubmitting(true);
         try {
@@ -308,7 +371,12 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
         setInviting(true);
         try {
             await inviteUser({
-                data: { email: inviteEmail.trim(), displayName: inviteName.trim(), roleId: inviteRole },
+                data: {
+                    email: inviteEmail.trim(),
+                    displayName: inviteName.trim(),
+                    roleId: inviteRole,
+                    ...(activeProfileId ? { profileId: activeProfileId } : {}),
+                },
             });
             toast.success(`Uitnodiging verstuurd naar ${inviteEmail.trim()}`);
             setInviteOpen(false);
@@ -367,7 +435,11 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
         setTestCreating(true);
         try {
             const result = await createTestUser({
-                data: { displayName: testName.trim(), roleId: testRole },
+                data: {
+                    displayName: testName.trim(),
+                    roleId: testRole,
+                    ...(activeProfileId ? { profileId: activeProfileId } : {}),
+                },
             });
             setTestCredentials({ email: result.email, password: result.password });
             setTestOpen(false);
@@ -391,6 +463,91 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
             toast.error("Kopiëren mislukt");
         }
     };
+    const openProfileEditor = (profile) => {
+        setProfileEditor({
+            profileId: profile?.id ?? null,
+            name: profile?.name ?? "",
+            tenantId: profile?.tenantId ?? "",
+            roleIds: profile?.roleIds ?? [],
+            moduleIds: profile?.moduleIds ?? [],
+        });
+    };
+    const toggleProfileValue = (field, value) => {
+        setProfileEditor((state) => {
+            if (!state)
+                return state;
+            const list = state[field];
+            return {
+                ...state,
+                [field]: list.includes(value) ? list.filter((v) => v !== value) : [...list, value],
+            };
+        });
+    };
+    const handleSaveProfile = async () => {
+        if (!profileEditor || !profileEditor.name.trim())
+            return;
+        setProfileSaving(true);
+        try {
+            const payload = {
+                name: profileEditor.name.trim(),
+                tenantId: profileEditor.tenantId ? profileEditor.tenantId : null,
+                roleIds: profileEditor.roleIds,
+                moduleIds: profileEditor.moduleIds,
+            };
+            if (profileEditor.profileId) {
+                await updateProfile({ data: { profileId: profileEditor.profileId, ...payload } });
+                toast.success("Bedrijfsprofiel bijgewerkt");
+            }
+            else {
+                await createProfile({ data: payload });
+                toast.success("Bedrijfsprofiel aangemaakt");
+            }
+            setProfileEditor(null);
+            await loadProfiles();
+            await Promise.all([loadUsers(), loadRoles()]);
+        }
+        catch (error) {
+            toast.error(getErrorMessage(error, "Opslaan mislukt"));
+        }
+        finally {
+            setProfileSaving(false);
+        }
+    };
+    const handleDuplicateProfile = async (profile) => {
+        try {
+            await duplicateProfile({ data: { profileId: profile.id } });
+            toast.success("Bedrijfsprofiel gedupliceerd");
+            await loadProfiles();
+        }
+        catch (error) {
+            toast.error(getErrorMessage(error, "Dupliceren mislukt"));
+        }
+    };
+    const handleDeleteProfile = async () => {
+        if (!profileDeleteTarget)
+            return;
+        try {
+            await deleteProfile({ data: { profileId: profileDeleteTarget.id } });
+            toast.success("Bedrijfsprofiel verwijderd");
+            setProfileDeleteTarget(null);
+            await loadProfiles();
+        }
+        catch (error) {
+            toast.error(getErrorMessage(error, "Verwijderen mislukt"));
+        }
+    };
+    const handleSetActiveProfile = async (profile) => {
+        try {
+            await setActiveProfile({ data: { profileId: profile.id } });
+            setActiveProfileId(profile.id);
+            toast.success(`${profile.name} is nu het standaardprofiel`);
+            await loadProfiles();
+        }
+        catch (error) {
+            toast.error(getErrorMessage(error, "Instellen mislukt"));
+        }
+    };
+    const allRolesForProfile = roles.length > 0 ? roles : availableRoles;
     const filteredUsers = useMemo(() => {
         const query = searchQuery.trim().toLowerCase();
         const list = users.filter((u) => {
@@ -422,7 +579,7 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
     if (!canAccess) {
         return (_jsx("main", { className: "p-6", children: _jsx(Card, { children: _jsx(CardContent, { className: "pt-6", children: _jsx("p", { className: "text-muted-foreground", children: "Je hebt geen toegang tot deze pagina." }) }) }) }));
     }
-    return (_jsxs("main", { className: "p-6 space-y-6", children: [_jsxs(Card, { children: [_jsx(CardHeader, { className: "space-y-4", children: _jsxs("div", { className: "flex flex-row items-start justify-between gap-4", children: [_jsxs("div", { className: "space-y-1", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Shield, { className: "h-5 w-5 text-primary" }), _jsx(CardTitle, { children: "Gebruikers & rollen" })] }), _jsx("p", { className: "text-sm text-muted-foreground", children: "Hier vind je alle gebruikers die toegang hebben en zie je welke rol zij hebben. Ook beheer je hier alle beschikbare rollen." })] }), _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [isAdmin && activeTab === "roles" && (_jsxs(Button, { size: "sm", onClick: () => openRoleEditor(), children: [_jsx(Plus, { className: "h-4 w-4 mr-2" }), "Nieuwe rol"] })), activeTab === "users" && (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", onClick: () => setTestOpen(true), children: [_jsx(FlaskConical, { className: "h-4 w-4 mr-2" }), "Testaccount"] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => setInviteOpen(true), children: [_jsx(UserPlus, { className: "h-4 w-4 mr-2" }), "Account aanmaken"] })] }))] })] }) }), _jsx(CardContent, { children: _jsxs(Tabs, { value: activeTab, onValueChange: setActiveTab, children: [_jsxs(TabsList, { children: [_jsx(TabsTrigger, { value: "users", children: "Gebruikers" }), _jsx(TabsTrigger, { value: "roles", children: "Rollen" }), _jsx(TabsTrigger, { value: "user-permissions", children: "Rechten per gebruiker" })] }), _jsxs(TabsContent, { value: "users", className: "mt-4 space-y-6", children: [_jsxs("div", { className: "flex flex-col gap-4 sm:flex-row sm:items-end", children: [_jsxs("div", { className: "flex-1 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Zoeken" }), _jsx(Input, { placeholder: "Zoek op naam of e-mail", value: searchQuery, onChange: (e) => setSearchQuery(e.target.value) })] }), _jsxs("div", { className: "w-full sm:w-48 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Filter op rol" }), _jsxs(Select, { value: roleFilter, onValueChange: setRoleFilter, children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsx(SelectItem, { value: "all", children: "Alle rollen" }), availableRoles.map((role) => (_jsx(SelectItem, { value: role.id, children: role.name }, role.id))), _jsx(SelectItem, { value: "none", children: "Geen rollen" })] })] })] }), _jsxs("div", { className: "w-full sm:w-48 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Sorteren" }), _jsxs(Select, { value: sortBy, onValueChange: (value) => setSortBy(value), children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsx(SelectItem, { value: "name-asc", children: "Naam A-Z" }), _jsx(SelectItem, { value: "name-desc", children: "Naam Z-A" }), _jsx(SelectItem, { value: "role-asc", children: "Rol A-Z" }), _jsx(SelectItem, { value: "role-desc", children: "Rol Z-A" })] })] })] })] }), loading ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Laden..." })) : filteredUsers.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: hasActiveFilters
+    return (_jsxs("main", { className: "p-6 space-y-6", children: [_jsxs(Card, { children: [_jsx(CardHeader, { className: "space-y-4", children: _jsxs("div", { className: "flex flex-row items-start justify-between gap-4", children: [_jsxs("div", { className: "space-y-1", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Shield, { className: "h-5 w-5 text-primary" }), _jsx(CardTitle, { children: "Gebruikers & rollen" })] }), _jsx("p", { className: "text-sm text-muted-foreground", children: "Hier vind je alle gebruikers die toegang hebben en zie je welke rol zij hebben. Ook beheer je hier alle beschikbare rollen." })] }), _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [isAdmin && orgProfiles.length > 0 && (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Building2, { className: "h-4 w-4 text-muted-foreground" }), _jsxs(Select, { value: activeProfileId, onValueChange: setActiveProfileId, children: [_jsx(SelectTrigger, { className: "w-56", children: _jsx(SelectValue, { placeholder: "Bedrijfsprofiel" }) }), _jsx(SelectContent, { children: orgProfiles.map((profile) => (_jsx(SelectItem, { value: profile.id, children: profile.name }, profile.id))) })] })] })), isAdmin && activeTab === "profiles" && (_jsxs(Button, { size: "sm", onClick: () => openProfileEditor(), children: [_jsx(Plus, { className: "h-4 w-4 mr-2" }), "Nieuw profiel"] })), isAdmin && activeTab === "roles" && (_jsxs(Button, { size: "sm", onClick: () => openRoleEditor(), children: [_jsx(Plus, { className: "h-4 w-4 mr-2" }), "Nieuwe rol"] })), activeTab === "users" && (_jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", onClick: () => setTestOpen(true), children: [_jsx(FlaskConical, { className: "h-4 w-4 mr-2" }), "Testaccount"] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => setInviteOpen(true), children: [_jsx(UserPlus, { className: "h-4 w-4 mr-2" }), "Account aanmaken"] })] }))] })] }) }), _jsx(CardContent, { children: _jsxs(Tabs, { value: activeTab, onValueChange: setActiveTab, children: [_jsxs(TabsList, { children: [_jsx(TabsTrigger, { value: "users", children: "Gebruikers" }), _jsx(TabsTrigger, { value: "roles", children: "Rollen" }), _jsx(TabsTrigger, { value: "user-permissions", children: "Rechten per gebruiker" }), _jsx(TabsTrigger, { value: "modules", children: "Modules" }), isAdmin && _jsx(TabsTrigger, { value: "profiles", children: "Profielen" })] }), _jsxs(TabsContent, { value: "users", className: "mt-4 space-y-6", children: [_jsxs("div", { className: "flex flex-col gap-4 sm:flex-row sm:items-end", children: [_jsxs("div", { className: "flex-1 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Zoeken" }), _jsx(Input, { placeholder: "Zoek op naam of e-mail", value: searchQuery, onChange: (e) => setSearchQuery(e.target.value) })] }), _jsxs("div", { className: "w-full sm:w-48 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Filter op rol" }), _jsxs(Select, { value: roleFilter, onValueChange: setRoleFilter, children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsx(SelectItem, { value: "all", children: "Alle rollen" }), availableRoles.map((role) => (_jsx(SelectItem, { value: role.id, children: role.name }, role.id))), _jsx(SelectItem, { value: "none", children: "Geen rollen" })] })] })] }), _jsxs("div", { className: "w-full sm:w-48 space-y-2", children: [_jsx(Label, { className: "text-sm font-medium", children: "Sorteren" }), _jsxs(Select, { value: sortBy, onValueChange: (value) => setSortBy(value), children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, {}) }), _jsxs(SelectContent, { children: [_jsx(SelectItem, { value: "name-asc", children: "Naam A-Z" }), _jsx(SelectItem, { value: "name-desc", children: "Naam Z-A" }), _jsx(SelectItem, { value: "role-asc", children: "Rol A-Z" }), _jsx(SelectItem, { value: "role-desc", children: "Rol Z-A" })] })] })] })] }), loading ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Laden..." })) : filteredUsers.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: hasActiveFilters
                                                 ? "Geen gebruikers gevonden met de huidige filters."
                                                 : "Geen gebruikers gevonden." })) : (_jsxs(Table, { children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { children: "Gebruiker" }), _jsx(TableHead, { children: "Rollen" }), _jsx(TableHead, { className: "w-16" })] }) }), _jsx(TableBody, { children: filteredUsers.map((u) => {
                                                         const manageable = canManageUser(u);
@@ -439,7 +596,7 @@ export function AdminForInstallatieTechniek({ modules, shellId } = {}) {
                                                             rows.push(_jsxs(TableRow, { children: [_jsx(TableCell, { className: "pl-8 text-sm text-muted-foreground", children: f.name }), _jsx(TableCell, { children: _jsxs(Select, { value: userPermMap[permCellKey(mod.id, f.id)] ?? "inherit", onValueChange: (v) => handleUserPermChange(mod.id, f.id, v), children: [_jsx(SelectTrigger, { className: "w-48", children: _jsx(SelectValue, {}) }), _jsx(SelectContent, { children: Object.keys(USER_PERMISSION_LABELS).map((p) => (_jsx(SelectItem, { value: p, children: USER_PERMISSION_LABELS[p] }, p))) })] }) })] }, `${mod.id}-${f.id}`));
                                                         }
                                                         return rows;
-                                                    }) })] }))] })] }) })] }), _jsx(Dialog, { open: editor !== null, onOpenChange: (open) => !open && !editorSaving && setEditor(null), children: _jsxs(DialogContent, { className: "max-w-3xl", children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: editor?.roleId ? "Rol bewerken" : "Rol toevoegen" }), _jsx(DialogDescription, { children: "Maak hier een rol aan en wijs de gewenste rechten toe. Vink je een onderdeel niet aan? Dan heeft de gebruiker geen toegang tot (een deel van) die pagina." })] }), _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "role-name", children: "Naam rol" }), _jsx(Input, { id: "role-name", value: editor?.name ?? "", placeholder: "Vul een naam voor de rol in.", onChange: (e) => setEditor((state) => (state ? { ...state, name: e.target.value } : state)), disabled: editorSaving })] }), _jsxs("div", { className: "max-h-[45vh] overflow-y-auto rounded-md border", children: [_jsxs("div", { className: "flex items-center justify-end gap-8 border-b px-4 py-2 text-sm font-medium", children: [_jsx("span", { className: "w-16 text-center", children: "Lezen" }), _jsx("span", { className: "w-16 text-center", children: "Bewerken" })] }), roleModules.length === 0 ? (_jsx("p", { className: "p-4 text-sm text-muted-foreground", children: "Er zijn nog geen modules geregistreerd voor deze shell." })) : (roleModules.map((mod) => {
+                                                    }) })] }))] }), _jsxs(TabsContent, { value: "modules", className: "mt-4 space-y-6", children: [_jsx("p", { className: "text-sm text-muted-foreground", children: "Schakel \"Toegang afdwingen\" in voor een module om de rollen en gebruikersrechten actief te laten controleren. Modules zonder deze schakelaar blijven voor iedereen toegankelijk (default-allow)." }), roleModules.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Er zijn nog geen modules geregistreerd." })) : (_jsxs(Table, { children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { children: "Module" }), _jsx(TableHead, { className: "w-48", children: "Toegang afdwingen" })] }) }), _jsx(TableBody, { children: roleModules.map((mod) => (_jsxs(TableRow, { children: [_jsx(TableCell, { className: "font-medium", children: mod.name }), _jsx(TableCell, { children: _jsxs("div", { className: "flex items-center gap-3", children: [_jsx(Switch, { id: `enforce-${mod.id}`, checked: mod.enforce ?? false, onCheckedChange: (checked) => handleEnforceChange(mod.id, checked), disabled: submitting || !isAdmin }), _jsx(Label, { htmlFor: `enforce-${mod.id}`, className: "text-sm font-normal", children: (mod.enforce ?? false) ? "Ingeschakeld" : "Uitgeschakeld" })] }) })] }, mod.id))) })] }))] }), isAdmin && (_jsxs(TabsContent, { value: "profiles", className: "mt-4 space-y-6", children: [_jsx("p", { className: "text-sm text-muted-foreground", children: "Een bedrijfsprofiel bundelt de rollen en modules van \u00E9\u00E9n organisatie. Het gekozen profiel bepaalt welke medewerkers en rollen je hierboven ziet." }), profilesLoading ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Laden..." })) : orgProfiles.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Er zijn nog geen bedrijfsprofielen." })) : (_jsxs(Table, { children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { children: "Profiel" }), _jsx(TableHead, { children: "Bedrijf" }), _jsx(TableHead, { className: "w-24", children: "Rollen" }), _jsx(TableHead, { className: "w-24", children: "Modules" }), _jsx(TableHead, { className: "w-28", children: "Gebruikers" }), _jsx(TableHead, { className: "w-16 text-right", children: "Acties" })] }) }), _jsx(TableBody, { children: orgProfiles.map((profile) => (_jsxs(TableRow, { children: [_jsx(TableCell, { className: "font-medium", children: _jsxs("div", { className: "flex items-center gap-2", children: [profile.name, profile.isDefault && _jsx(Badge, { variant: "secondary", children: "Standaard" })] }) }), _jsx(TableCell, { className: "text-muted-foreground", children: profile.tenantName ?? "-" }), _jsx(TableCell, { children: profile.roleIds.length }), _jsx(TableCell, { children: profile.moduleIds.length }), _jsx(TableCell, { children: profile.userCount }), _jsx(TableCell, { className: "text-right", children: _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", children: _jsx(MoreVertical, { className: "h-4 w-4" }) }) }), _jsxs(DropdownMenuContent, { align: "end", children: [_jsxs(DropdownMenuItem, { onClick: () => openProfileEditor(profile), children: [_jsx(Pencil, { className: "h-4 w-4 mr-2" }), "Bewerken"] }), _jsxs(DropdownMenuItem, { onClick: () => handleDuplicateProfile(profile), children: [_jsx(Copy, { className: "h-4 w-4 mr-2" }), "Dupliceren"] }), !profile.isDefault && (_jsxs(DropdownMenuItem, { onClick: () => handleSetActiveProfile(profile), children: [_jsx(Shield, { className: "h-4 w-4 mr-2" }), "Als standaard instellen"] })), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { className: "text-destructive", disabled: profile.isDefault, onClick: () => setProfileDeleteTarget(profile), children: [_jsx(UserX, { className: "h-4 w-4 mr-2" }), "Verwijderen"] })] })] }) })] }, profile.id))) })] }))] }))] }) })] }), _jsx(Dialog, { open: profileEditor !== null, onOpenChange: (open) => !open && !profileSaving && setProfileEditor(null), children: _jsxs(DialogContent, { className: "max-w-2xl", children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: profileEditor?.profileId ? "Bedrijfsprofiel bewerken" : "Bedrijfsprofiel toevoegen" }), _jsx(DialogDescription, { children: "Koppel het profiel aan een bedrijf en kies welke rollen en modules erbij horen." })] }), _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "profile-name", children: "Naam profiel" }), _jsx(Input, { id: "profile-name", value: profileEditor?.name ?? "", placeholder: "Bijvoorbeeld: Installatie Techniek BV", onChange: (e) => setProfileEditor((state) => (state ? { ...state, name: e.target.value } : state)), disabled: profileSaving })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { children: "Bedrijf" }), _jsxs(Select, { value: profileEditor?.tenantId ? profileEditor.tenantId : "none", onValueChange: (value) => setProfileEditor((state) => state ? { ...state, tenantId: value === "none" ? "" : value } : state), children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, { placeholder: "Kies een bedrijf" }) }), _jsxs(SelectContent, { children: [_jsx(SelectItem, { value: "none", children: "Geen bedrijf (alle gebruikers)" }), tenants.map((tenant) => (_jsx(SelectItem, { value: tenant.id, children: tenant.name }, tenant.id)))] })] })] }), _jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { children: "Rollen in dit profiel" }), _jsx("div", { className: "max-h-56 space-y-2 overflow-y-auto rounded-md border p-3", children: allRolesForProfile.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Geen rollen beschikbaar." })) : (allRolesForProfile.map((role) => (_jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx(Checkbox, { checked: profileEditor?.roleIds.includes(role.id) ?? false, onCheckedChange: () => toggleProfileValue("roleIds", role.id), disabled: profileSaving }), role.name] }, role.id)))) })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { children: "Modules in dit profiel" }), _jsx("div", { className: "max-h-56 space-y-2 overflow-y-auto rounded-md border p-3", children: roleModules.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "Geen modules geregistreerd." })) : (roleModules.map((mod) => (_jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx(Checkbox, { checked: profileEditor?.moduleIds.includes(mod.id) ?? false, onCheckedChange: () => toggleProfileValue("moduleIds", mod.id), disabled: profileSaving }), mod.name] }, mod.id)))) })] })] })] }), _jsxs(DialogFooter, { children: [_jsx(Button, { variant: "outline", onClick: () => setProfileEditor(null), disabled: profileSaving, children: "Annuleren" }), _jsx(Button, { onClick: handleSaveProfile, disabled: profileSaving || !profileEditor?.name.trim(), children: profileSaving ? "Opslaan..." : "Opslaan" })] })] }) }), _jsx(AlertDialog, { open: profileDeleteTarget !== null, onOpenChange: (open) => !open && setProfileDeleteTarget(null), children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsx(AlertDialogTitle, { children: "Bedrijfsprofiel verwijderen?" }), _jsxs(AlertDialogDescription, { children: ["Weet je zeker dat je \"", profileDeleteTarget?.name, "\" wilt verwijderen? Rollen en gebruikers blijven bestaan, alleen de bundeling verdwijnt."] })] }), _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { children: "Annuleren" }), _jsx(AlertDialogAction, { onClick: handleDeleteProfile, children: "Verwijderen" })] })] }) }), _jsx(Dialog, { open: editor !== null, onOpenChange: (open) => !open && !editorSaving && setEditor(null), children: _jsxs(DialogContent, { className: "max-w-3xl", children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: editor?.roleId ? "Rol bewerken" : "Rol toevoegen" }), _jsx(DialogDescription, { children: "Maak hier een rol aan en wijs de gewenste rechten toe. Vink je een onderdeel niet aan? Dan heeft de gebruiker geen toegang tot (een deel van) die pagina." })] }), _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "role-name", children: "Naam rol" }), _jsx(Input, { id: "role-name", value: editor?.name ?? "", placeholder: "Vul een naam voor de rol in.", onChange: (e) => setEditor((state) => (state ? { ...state, name: e.target.value } : state)), disabled: editorSaving })] }), _jsxs("div", { className: "max-h-[45vh] overflow-y-auto rounded-md border", children: [_jsxs("div", { className: "flex items-center justify-end gap-8 border-b px-4 py-2 text-sm font-medium", children: [_jsx("span", { className: "w-16 text-center", children: "Lezen" }), _jsx("span", { className: "w-16 text-center", children: "Bewerken" })] }), roleModules.length === 0 ? (_jsx("p", { className: "p-4 text-sm text-muted-foreground", children: "Er zijn nog geen modules geregistreerd voor deze shell." })) : (roleModules.map((mod) => {
                                             const cell = editor?.cells[permCellKey(mod.id, "")] ?? {
                                                 canView: false,
                                                 canEdit: false,

package/dist-lib/components/ModuleAccessGuard.d.ts

@@ -0,0 +1,15 @@
+interface ModuleAccessGuardProps {
+    children: React.ReactNode;
+    featureId?: string;
+    fallback?: React.ReactNode;
+}
+/**
+ * Rendert alleen kinderen als de ingelogde gebruiker toegang heeft tot de
+ * huidige module. Tijdens laden een skeleton; bij onvoldoende recht een nette
+ * "geen toegang"-kaart. Modules die niet geregistreerd zijn worden altijd
+ * toegestaan (default-allow), zodat bestaande shells zonder aanpassingen
+ * blijven werken.
+ */
+export declare function ModuleAccessGuard({ children, featureId, fallback }: ModuleAccessGuardProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=ModuleAccessGuard.d.ts.map

package/dist-lib/components/ModuleAccessGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModuleAccessGuard.d.ts","sourceRoot":"","sources":["../../src/components/ModuleAccessGuard.tsx"],"names":[],"mappings":"AAKA,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B;AAYD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,SAAc,EAAE,QAAQ,EAAE,EAAE,sBAAsB,+BAwC/F"}

package/dist-lib/components/ModuleAccessGuard.js

@@ -0,0 +1,40 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useRouterState } from "@tanstack/react-router";
+import { Card, CardContent, CardHeader, CardTitle } from "@flowselections/core";
+import { ShieldAlert } from "lucide-react";
+import { useModulePermission } from "../hooks/useModulePermission";
+const EXCLUDED_SEGMENTS = new Set(["admin-installatietechniek", "instellingen"]);
+function deriveModuleId(pathname) {
+    const segments = pathname.split("/").filter(Boolean);
+    const first = segments[0];
+    if (!first || first.startsWith("$") || first.startsWith("_"))
+        return null;
+    if (EXCLUDED_SEGMENTS.has(first))
+        return null;
+    return first;
+}
+/**
+ * Rendert alleen kinderen als de ingelogde gebruiker toegang heeft tot de
+ * huidige module. Tijdens laden een skeleton; bij onvoldoende recht een nette
+ * "geen toegang"-kaart. Modules die niet geregistreerd zijn worden altijd
+ * toegestaan (default-allow), zodat bestaande shells zonder aanpassingen
+ * blijven werken.
+ */
+export function ModuleAccessGuard({ children, featureId = "", fallback }) {
+    const pathname = useRouterState({ select: (s) => s.location.pathname });
+    const moduleId = deriveModuleId(pathname);
+    // Als we geen module kunnen afleiden (bijv. admin of instellingen), toon
+    // altijd de inhoud.
+    if (!moduleId)
+        return _jsx(_Fragment, { children: children });
+    const { permission, loading, canView } = useModulePermission(moduleId, featureId);
+    if (loading) {
+        return (_jsxs("div", { className: "flex-1 p-6", children: [_jsx("div", { className: "h-6 w-48 animate-pulse rounded bg-muted mb-4" }), _jsx("div", { className: "h-32 animate-pulse rounded bg-muted" })] }));
+    }
+    if (!canView) {
+        if (fallback)
+            return _jsx(_Fragment, { children: fallback });
+        return (_jsx("div", { className: "flex-1 flex items-center justify-center p-6", children: _jsxs(Card, { className: "max-w-md w-full", children: [_jsxs(CardHeader, { className: "flex flex-row items-center gap-3", children: [_jsx(ShieldAlert, { className: "h-6 w-6 text-destructive" }), _jsx(CardTitle, { children: "Geen toegang" })] }), _jsx(CardContent, { children: _jsx("p", { className: "text-sm text-muted-foreground", children: "Je hebt geen toegang tot deze module. Neem contact op met een beheerder als je denkt dat dit niet klopt." }) })] }) }));
+    }
+    return _jsx(_Fragment, { children: children });
+}

package/dist-lib/hooks/useModulePermission.d.ts

@@ -1,11 +1,12 @@
-export type ModulePermission = "none" | "view" | "edit";
+import type { ModulePermission } from "../lib/permission-types";
+export type { ModulePermission };
 /**
  * Haalt de effectieve rechten van de ingelogde gebruiker op voor alle
  * geregistreerde modules en onderdelen. Persoonlijke uitzonderingen winnen
- * van rolrechten.
+ * van rolrechten. Gedeelde cache via React Query; één keer per sessie.
  */
 export declare function useMyModulePermissions(): {
-    permissions: Record<string, ModulePermission>;
+    permissions: NoInfer<Record<string, ModulePermission>>;
     loading: boolean;
 };
 /** Effectief recht voor één module of onderdeel: "none" | "view" | "edit". */
@@ -15,4 +16,10 @@ export declare function useModulePermission(moduleId: string, featureId?: string
     canEdit: boolean;
     loading: boolean;
 };
+/** Invalidatie-aanhaker voor auth-wijzigingen. */
+export declare function invalidateModulePermissions(queryClient: {
+    invalidateQueries: (options: {
+        queryKey: string[];
+    }) => Promise<void>;
+}): Promise<void>;
 //# sourceMappingURL=useModulePermission.d.ts.map

package/dist-lib/hooks/useModulePermission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useModulePermission.d.ts","sourceRoot":"","sources":["../../src/hooks/useModulePermission.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAIxD;;;;GAIG;AACH,wBAAgB,sBAAsB;;;EA2BrC;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAK;;;;;EAUnE"}
+{"version":3,"file":"useModulePermission.d.ts","sourceRoot":"","sources":["../../src/hooks/useModulePermission.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAMjC;;;;GAIG;AACH,wBAAgB,sBAAsB;;;EAmBrC;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAK;;;;;EAgBnE;AAED,kDAAkD;AAClD,wBAAgB,2BAA2B,CAAC,WAAW,EAAE;IACvD,iBAAiB,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE,iBAEA"}

package/dist-lib/hooks/useModulePermission.js

@@ -1,42 +1,41 @@
-import { useEffect, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
 import { supabase } from "../integrations/supabase/client";
 const cellKey = (moduleId, featureId) => `${moduleId}::${featureId}`;
+const permissionQueryKey = ["my-module-permissions"];
 /**
  * Haalt de effectieve rechten van de ingelogde gebruiker op voor alle
  * geregistreerde modules en onderdelen. Persoonlijke uitzonderingen winnen
- * van rolrechten.
+ * van rolrechten. Gedeelde cache via React Query; één keer per sessie.
  */
 export function useMyModulePermissions() {
-    const [permissions, setPermissions] = useState({});
-    const [loading, setLoading] = useState(true);
-    useEffect(() => {
-        let cancelled = false;
-        (async () => {
+    const { data, isLoading } = useQuery({
+        queryKey: permissionQueryKey,
+        queryFn: async () => {
             const { data, error } = await supabase.rpc("my_module_permissions");
-            if (cancelled)
-                return;
+            if (error)
+                throw error;
             const rows = Array.isArray(data)
                 ? data
                 : [];
-            if (!error) {
-                const map = {};
-                for (const row of rows) {
-                    map[cellKey(row.module_id, row.feature_id ?? "")] = row.permission;
-                }
-                setPermissions(map);
+            const map = {};
+            for (const row of rows) {
+                map[cellKey(row.module_id, row.feature_id ?? "")] = row.permission;
             }
-            setLoading(false);
-        })();
-        return () => {
-            cancelled = true;
-        };
-    }, []);
-    return { permissions, loading };
+            return map;
+        },
+        staleTime: 5 * 60 * 1000,
+    });
+    return { permissions: data ?? {}, loading: isLoading };
 }
 /** Effectief recht voor één module of onderdeel: "none" | "view" | "edit". */
 export function useModulePermission(moduleId, featureId = "") {
     const { permissions, loading } = useMyModulePermissions();
-    const permission = permissions[cellKey(moduleId, featureId)] ?? permissions[cellKey(moduleId, "")] ?? "none";
+    const exact = permissions[cellKey(moduleId, featureId)];
+    const moduleFallback = permissions[cellKey(moduleId, "")];
+    // Niet geregistreerde modules zijn default toegestaan (edit) zodat
+    // bestaande shells blijven werken totdat een beheerder expliciet rechten
+    // instelt en enforce aanzet.
+    const permission = exact ?? moduleFallback ?? "edit";
     return {
         permission,
         canView: permission === "view" || permission === "edit",
@@ -44,3 +43,7 @@ export function useModulePermission(moduleId, featureId = "") {
         loading,
     };
 }
+/** Invalidatie-aanhaker voor auth-wijzigingen. */
+export function invalidateModulePermissions(queryClient) {
+    return queryClient.invalidateQueries({ queryKey: permissionQueryKey });
+}

package/dist-lib/index.d.ts

@@ -6,5 +6,7 @@ export { useModulePermission, useMyModulePermissions } from './hooks/useModulePe
 export type { ModulePermission } from './hooks/useModulePermission';
 export { useDiscoveredModules } from './lib/moduleDiscovery';
 export type { DiscoveredModule, DiscoveredFeature } from './lib/moduleDiscovery';
+export { ModuleAccessGuard } from './components/ModuleAccessGuard';
+export { requireModulePermission } from './lib/permissions.server';
 export declare const adminInstallatietechniekModule: FlowModule;
 //# sourceMappingURL=index.d.ts.map

package/dist-lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,YAAY,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACnH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,YAAY,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGjF,eAAO,MAAM,8BAA8B,EAAE,UAY5C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,YAAY,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACnH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,YAAY,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAInE,eAAO,MAAM,8BAA8B,EAAE,UAY5C,CAAC"}

package/dist-lib/index.js

@@ -6,6 +6,8 @@ export * from './_core-safelist';
 export { AdminForInstallatieTechniek } from './components/AdminForInstallatieTechniek';
 export { useModulePermission, useMyModulePermissions } from './hooks/useModulePermission';
 export { useDiscoveredModules } from './lib/moduleDiscovery';
+export { ModuleAccessGuard } from './components/ModuleAccessGuard';
+export { requireModulePermission } from './lib/permissions.server';
 export const adminInstallatietechniekModule = {
     id: "admin-installatietechniek",
     name: "Admin Installatietechniek",

package/dist-lib/integrations/supabase/auth-attacher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-attacher.d.ts","sourceRoot":"","sources":["../../../src/integrations/supabase/auth-attacher.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,kBAAkB,mHAQ9B,CAAA"}
+{"version":3,"file":"auth-attacher.d.ts","sourceRoot":"","sources":["../../../src/integrations/supabase/auth-attacher.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,kBAAkB,mHAY9B,CAAA"}

package/dist-lib/integrations/supabase/auth-attacher.js

@@ -7,6 +7,10 @@ export const attachSupabaseAuth = createMiddleware({ type: 'function' }).client(
     const { data } = await supabase.auth.getSession();
     const token = data.session?.access_token;
     return next({
-        headers: token ? { Authorization: `Bearer ${token}` } : {},
+        // `x-sb-auth` is een fallback: sommige preview-proxies overschrijven de
+        // Authorization-header, waardoor de server een ongeldig token zag.
+        headers: token
+            ? { Authorization: `Bearer ${token}`, 'x-sb-auth': token }
+            : {},
     });
 });