@flowselections/ai-authenticatie 1.0.14 → 1.1.1

package/dist-lib/lib/aiAttachments.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Pure helpers voor pdf-bijlagen in AI-aanroepen. Geen netwerk, geen Supabase:
+ * zo zijn de opgebouwde verzoeken per provider los te testen.
+ */
+import type { AiChatAttachment, AiChatMessage } from './aiChat.types.js';
+export type AiProviderKind = 'openai' | 'anthropic' | 'gemini' | 'unknown';
+export declare const MAX_ATTACHMENT_BYTES: number;
+export declare const MAX_ATTACHMENTS = 5;
+export declare function providerKind(slug: string): AiProviderKind;
+/**
+ * Of dit model pdf-bestanden kan lezen. Null = ondersteund, anders een Nederlandse reden.
+ */
+export declare function pdfSupportProblem(kind: AiProviderKind, modelSlug: string): string | null;
+/** Valideer ruwe invoer tot nette bijlagen; gooit een Nederlandse fout bij ongeldige invoer. */
+export declare function normalizeAttachments(raw: unknown): AiChatAttachment[];
+/** OpenAI chat/completions: bijlagen als `file`-onderdelen in het laatste gebruikersbericht. */
+export declare function buildOpenAIMessages(messages: AiChatMessage[], attachments: AiChatAttachment[]): unknown[];
+/** Anthropic messages: bijlagen als `document`-blokken (zonder system-rol). */
+export declare function buildAnthropicMessages(messages: AiChatMessage[], attachments: AiChatAttachment[]): unknown[];
+/** Gemini generateContent: bijlagen als `inlineData` in de laatste gebruikersbeurt. */
+export declare function buildGeminiContents(messages: AiChatMessage[], attachments: AiChatAttachment[]): unknown[];
+//# sourceMappingURL=aiAttachments.d.ts.map

package/dist-lib/lib/aiAttachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiAttachments.d.ts","sourceRoot":"","sources":["../../src/lib/aiAttachments.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AACrD,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAMzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBxF;AAED,gGAAgG;AAChG,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAcrE;AAOD,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,EAAE,CAazG;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,EAAE,CAc5G;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,EAAE,CASzG"}

package/dist-lib/lib/aiAttachments.js

@@ -0,0 +1,105 @@
+export const MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+export const MAX_ATTACHMENTS = 5;
+export function providerKind(slug) {
+    const s = (slug || '').toLowerCase();
+    if (s.includes('openai') || s.includes('gpt'))
+        return 'openai';
+    if (s.includes('anthropic') || s.includes('claude'))
+        return 'anthropic';
+    if (s.includes('gemini') || s.includes('google'))
+        return 'gemini';
+    return 'unknown';
+}
+/**
+ * Of dit model pdf-bestanden kan lezen. Null = ondersteund, anders een Nederlandse reden.
+ */
+export function pdfSupportProblem(kind, modelSlug) {
+    const m = (modelSlug || '').toLowerCase();
+    if (kind === 'gemini')
+        return null;
+    if (kind === 'anthropic') {
+        if (/claude-(instant|2)/.test(m) || /claude-3-haiku-20240307/.test(m)) {
+            return `Het Claude-model "${modelSlug}" kan geen pdf-bestanden lezen. Kies een nieuwer Claude-model.`;
+        }
+        return null;
+    }
+    if (kind === 'openai') {
+        if (/gpt-3\.5|gpt-4(-\d{4}|-turbo-preview)?$|^o1-mini|^o3-mini|davinci|babbage/.test(m)) {
+            return `Het OpenAI-model "${modelSlug}" kan geen pdf-bestanden lezen. Kies bijvoorbeeld gpt-4o, gpt-4.1 of nieuwer.`;
+        }
+        return null;
+    }
+    return 'Deze provider ondersteunt geen pdf-bijlagen.';
+}
+/** Valideer ruwe invoer tot nette bijlagen; gooit een Nederlandse fout bij ongeldige invoer. */
+export function normalizeAttachments(raw) {
+    if (raw == null)
+        return [];
+    if (!Array.isArray(raw))
+        throw new Error('attachments moet een lijst zijn');
+    if (raw.length > MAX_ATTACHMENTS)
+        throw new Error(`Maximaal ${MAX_ATTACHMENTS} bijlagen per aanroep`);
+    return raw.map((a, i) => {
+        const v = (a ?? {});
+        const mimeType = typeof v.mimeType === 'string' ? v.mimeType.trim().toLowerCase() : '';
+        const data = typeof v.data === 'string' ? v.data.replace(/^data:[^;]+;base64,/, '').replace(/\s+/g, '') : '';
+        const filename = typeof v.filename === 'string' && v.filename.trim() ? v.filename.trim() : `bijlage-${i + 1}.pdf`;
+        if (mimeType !== 'application/pdf')
+            throw new Error(`Bijlage ${i + 1}: alleen pdf (application/pdf) wordt ondersteund`);
+        if (!data || !/^[A-Za-z0-9+/]+=*$/.test(data))
+            throw new Error(`Bijlage ${i + 1}: data moet base64 zijn`);
+        if (Math.floor((data.length * 3) / 4) > MAX_ATTACHMENT_BYTES)
+            throw new Error(`Bijlage ${i + 1} is groter dan 20 MB`);
+        return { mimeType: 'application/pdf', data, filename };
+    });
+}
+function lastUserIndex(messages) {
+    for (let i = messages.length - 1; i >= 0; i--)
+        if (messages[i].role === 'user')
+            return i;
+    return -1;
+}
+/** OpenAI chat/completions: bijlagen als `file`-onderdelen in het laatste gebruikersbericht. */
+export function buildOpenAIMessages(messages, attachments) {
+    if (!attachments.length)
+        return messages;
+    const idx = lastUserIndex(messages);
+    return messages.map((m, i) => i !== idx ? m : {
+        role: 'user',
+        content: [
+            ...attachments.map(a => ({
+                type: 'file',
+                file: { filename: a.filename, file_data: `data:${a.mimeType};base64,${a.data}` },
+            })),
+            { type: 'text', text: m.content },
+        ],
+    });
+}
+/** Anthropic messages: bijlagen als `document`-blokken (zonder system-rol). */
+export function buildAnthropicMessages(messages, attachments) {
+    const rest = messages.filter(m => m.role !== 'system');
+    if (!attachments.length)
+        return rest.map(m => ({ role: m.role, content: m.content }));
+    const idx = lastUserIndex(rest);
+    return rest.map((m, i) => i !== idx ? { role: m.role, content: m.content } : {
+        role: 'user',
+        content: [
+            ...attachments.map(a => ({
+                type: 'document',
+                source: { type: 'base64', media_type: a.mimeType, data: a.data },
+            })),
+            { type: 'text', text: m.content },
+        ],
+    });
+}
+/** Gemini generateContent: bijlagen als `inlineData` in de laatste gebruikersbeurt. */
+export function buildGeminiContents(messages, attachments) {
+    const rest = messages.filter(m => m.role !== 'system');
+    const idx = attachments.length ? lastUserIndex(rest) : -1;
+    return rest.map((m, i) => ({
+        role: m.role === 'assistant' ? 'model' : 'user',
+        parts: i === idx
+            ? [...attachments.map(a => ({ inlineData: { mimeType: a.mimeType, data: a.data } })), { text: m.content }]
+            : [{ text: m.content }],
+    }));
+}

package/dist-lib/lib/aiChat.functions.d.ts

@@ -1,9 +1,10 @@
-import type { AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo } from './aiChat.types.js';
-export type { AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo, AiChatSuccess, AiChatError, AiChatUsage, AiChatRole } from './aiChat.types.js';
+import type { AiChatAttachment, AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo } from './aiChat.types.js';
+export type { AiChatAttachment, AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo, AiChatSuccess, AiChatError, AiChatUsage, AiChatRole } from './aiChat.types.js';
 declare function validate(input: unknown): {
     consumerModuleId: string;
     messages: AiChatMessage[];
     options?: AiChatOptions;
+    attachments?: AiChatAttachment[];
 };
 export declare const runAiChat: import("@tanstack/start-client-core").OptionalFetcher<readonly [import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, {
     supabase: import("../integrations/supabase/auth-middleware.js").AuthedSupabaseClient;

package/dist-lib/lib/aiChat.functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiChat.functions.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.functions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEpG,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIzJ,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAA;CAAE,CAwBlH;AAED,eAAO,MAAM,SAAS;;;;6EAMlB,CAAC;AAEL,eAAO,MAAM,iBAAiB;;;;8CAEJ,OAAO;;8BAS7B,CAAC"}
+{"version":3,"file":"aiChat.functions.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.functions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEtH,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAI3K,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAAE,CA6BpJ;AAED,eAAO,MAAM,SAAS;;;;6EAMlB,CAAC;AAEL,eAAO,MAAM,iBAAiB;;;;8CAEJ,OAAO;;8BAS7B,CAAC"}

package/dist-lib/lib/aiChat.functions.js

@@ -1,5 +1,6 @@
 import { createServerFn } from '@tanstack/react-start';
 import { requireSupabaseAuth } from '../integrations/supabase/auth-middleware.js';
+import { normalizeAttachments } from './aiAttachments.js';
 const ALLOWED_ROLES = new Set(['system', 'user', 'assistant']);
 function validate(input) {
     const v = (input ?? {});
@@ -27,7 +28,11 @@ function validate(input) {
         options.maxTokens = rawOpts.maxTokens;
     if (typeof rawOpts.topP === 'number')
         options.topP = rawOpts.topP;
-    return { consumerModuleId, messages, options };
+    const attachments = normalizeAttachments(v.attachments);
+    if (attachments.length && !messages.some(m => m.role === 'user')) {
+        throw new Error('Een bijlage vereist minimaal één gebruikersbericht');
+    }
+    return attachments.length ? { consumerModuleId, messages, options, attachments } : { consumerModuleId, messages, options };
 }
 export const runAiChat = createServerFn({ method: 'POST' })
     .middleware([requireSupabaseAuth])

package/dist-lib/lib/aiChat.server.d.ts

@@ -1,4 +1,4 @@
-import type { AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo } from './aiChat.types.js';
+import type { AiChatAttachment, AiChatMessage, AiChatOptions, AiChatResult, AiChatBindingInfo } from './aiChat.types.js';
 /**
  * Zelfherstel: als de koppeling geen (geldige) sleutel meer heeft, pak dan de
  * actieve sleutel van DEZELFDE provider en leg die keuze vast in de koppeling.
@@ -10,10 +10,17 @@ export declare function adoptActiveCredential(bindingId: string, providerId: str
     active: boolean;
     label: string;
 } | null>;
+/**
+ * Vangnet: een module die AI vraagt maar nog niet bekend is, wordt hier (server-side,
+ * service role) aangemeld. Hij verschijnt dan met "Nog geen AI-agent" in het beheerscherm;
+ * zonder koppeling gaat er nooit een aanroep naar een provider.
+ */
+export declare function registerRuntimeConsumer(consumerModuleId: string): Promise<void>;
 export declare function runAiChatForRequest(input: {
     consumerModuleId: string;
     messages: AiChatMessage[];
     options?: AiChatOptions;
+    attachments?: AiChatAttachment[];
 }): Promise<AiChatResult>;
 export declare function describeBindingForRequest(consumerModuleId: string): Promise<AiChatBindingInfo>;
 //# sourceMappingURL=aiChat.server.d.ts.map

package/dist-lib/lib/aiChat.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiChat.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,aAAa,EACb,aAAa,EACb,YAAY,EAEZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAwQxB;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAYjF;AAmFD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAA;CAAE,GACtF,OAAO,CAAC,YAAY,CAAC,CA6CvB;AAED,wBAAsB,yBAAyB,CAC7C,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}
+{"version":3,"file":"aiChat.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAEhB,aAAa,EACb,aAAa,EACb,YAAY,EAEZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAoQxB;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAYjF;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMrF;AAuFD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAAE,GACxH,OAAO,CAAC,YAAY,CAAC,CAuDvB;AAED,wBAAsB,yBAAyB,CAC7C,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}

package/dist-lib/lib/aiChat.server.js

@@ -1,4 +1,5 @@
 import { supabaseAdmin } from '../integrations/supabase/client.server.js';
+import { buildAnthropicMessages, buildGeminiContents, buildOpenAIMessages, pdfSupportProblem, providerKind, } from './aiAttachments.js';
 function isChatError(v) {
     return !!v && typeof v === 'object' && v.ok === false;
 }
@@ -55,7 +56,7 @@ function trimBase(url) {
     return url.trim().replace(/\/+$/, '');
 }
 // ─── Provider adapters ────────────────────────────────────────────────
-async function callOpenAI(apiKey, baseUrl, modelSlug, messages, options) {
+async function callOpenAI(apiKey, baseUrl, modelSlug, messages, options, attachments = []) {
     const base = trimBase(baseUrl || OPENAI_DEFAULT);
     const url = `${base}/chat/completions`;
     const { signal, done } = withTimeout();
@@ -69,7 +70,7 @@ async function callOpenAI(apiKey, baseUrl, modelSlug, messages, options) {
             },
             body: JSON.stringify({
                 model: modelSlug,
-                messages,
+                messages: buildOpenAIMessages(messages, attachments),
                 ...(options.temperature != null ? { temperature: options.temperature } : {}),
                 ...(options.maxTokens != null ? { max_tokens: options.maxTokens } : {}),
                 ...(options.topP != null ? { top_p: options.topP } : {}),
@@ -98,14 +99,12 @@ async function callOpenAI(apiKey, baseUrl, modelSlug, messages, options) {
         done();
     }
 }
-async function callAnthropic(apiKey, baseUrl, modelSlug, messages, options) {
+async function callAnthropic(apiKey, baseUrl, modelSlug, messages, options, attachments = []) {
     const base = trimBase(baseUrl || ANTHROPIC_DEFAULT);
     const url = `${base}/v1/messages`;
     // Anthropic vereist system als top-level string en messages zonder system-rol.
     const systemParts = messages.filter(m => m.role === 'system').map(m => m.content).filter(Boolean);
-    const rest = messages
-        .filter(m => m.role !== 'system')
-        .map(m => ({ role: m.role, content: m.content }));
+    const rest = buildAnthropicMessages(messages, attachments);
     const { signal, done } = withTimeout();
     try {
         const res = await fetch(url, {
@@ -167,17 +166,12 @@ function normalizeGeminiBase(baseUrl) {
         return GEMINI_DEFAULT;
     }
 }
-async function callGemini(apiKey, baseUrl, modelSlug, messages, options) {
+async function callGemini(apiKey, baseUrl, modelSlug, messages, options, attachments = []) {
     const base = normalizeGeminiBase(baseUrl);
     const modelPath = modelSlug.startsWith('models/') ? modelSlug : `models/${modelSlug}`;
     const url = `${base}/${modelPath}:generateContent?key=${encodeURIComponent(apiKey)}`;
     const systemParts = messages.filter(m => m.role === 'system').map(m => m.content).filter(Boolean);
-    const contents = messages
-        .filter(m => m.role !== 'system')
-        .map(m => ({
-        role: m.role === 'assistant' ? 'model' : 'user',
-        parts: [{ text: m.content }],
-    }));
+    const contents = buildGeminiContents(messages, attachments);
     const body = {
         contents,
         generationConfig: {
@@ -240,13 +234,30 @@ export async function adoptActiveCredential(bindingId, providerId) {
     await supabaseAdmin.from('ai_module_bindings').update({ credential_id: cred.id }).eq('id', bindingId);
     return { id: cred.id, api_key: cred.api_key, active: cred.active, label: cred.label };
 }
+/**
+ * Vangnet: een module die AI vraagt maar nog niet bekend is, wordt hier (server-side,
+ * service role) aangemeld. Hij verschijnt dan met "Nog geen AI-agent" in het beheerscherm;
+ * zonder koppeling gaat er nooit een aanroep naar een provider.
+ */
+export async function registerRuntimeConsumer(consumerModuleId) {
+    try {
+        await supabaseAdmin.rpc('ai_register_runtime_consumer', { _module_key: consumerModuleId });
+    }
+    catch {
+        // registratie mag een aanroep nooit blokkeren
+    }
+}
 async function moduleAiEnabled(consumerModuleId) {
     const { data } = await supabaseAdmin
         .from('ai_modules')
         .select('module_key, ai_enabled')
         .eq('module_key', consumerModuleId)
         .maybeSingle();
-    return !!data && data.ai_enabled === true;
+    if (!data) {
+        await registerRuntimeConsumer(consumerModuleId);
+        return false;
+    }
+    return data.ai_enabled === true;
 }
 async function resolveBinding(consumerModuleId) {
     if (!(await moduleAiEnabled(consumerModuleId))) {
@@ -327,15 +338,24 @@ export async function runAiChatForRequest(input) {
     const { provider, model, credential } = resolved;
     const slug = provider.slug.toLowerCase();
     const options = input.options ?? {};
+    const attachments = Array.isArray(input.attachments) ? input.attachments : [];
+    if (attachments.length) {
+        const problem = pdfSupportProblem(providerKind(provider.slug), model.slug);
+        if (problem) {
+            const r = err(400, 'unsupported_attachment', problem);
+            await logCall({ consumerModuleId: input.consumerModuleId, providerSlug: provider.slug, modelSlug: model.slug, result: r, durationMs: Date.now() - started });
+            return r;
+        }
+    }
     let providerRes;
     if (slug.includes('openai') || slug.includes('gpt')) {
-        providerRes = await callOpenAI(credential.api_key, provider.base_url, model.slug, input.messages, options);
+        providerRes = await callOpenAI(credential.api_key, provider.base_url, model.slug, input.messages, options, attachments);
     }
     else if (slug.includes('anthropic') || slug.includes('claude')) {
-        providerRes = await callAnthropic(credential.api_key, provider.base_url, model.slug, input.messages, options);
+        providerRes = await callAnthropic(credential.api_key, provider.base_url, model.slug, input.messages, options, attachments);
     }
     else if (slug.includes('gemini') || slug.includes('google')) {
-        providerRes = await callGemini(credential.api_key, provider.base_url, model.slug, input.messages, options);
+        providerRes = await callGemini(credential.api_key, provider.base_url, model.slug, input.messages, options, attachments);
     }
     else {
         const r = err(400, 'unsupported_provider', `Provider "${provider.name}" wordt niet ondersteund voor chat.`);

package/dist-lib/lib/aiChat.stream.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiChat.stream.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.stream.server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7F;;;GAGG;AAEH,KAAK,WAAW,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,wBAAuB,sBAAsB,CAAC,KAAK,EAAE;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,cAAc,CAAC,WAAW,CAAC,CAoG9B"}
+{"version":3,"file":"aiChat.stream.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.stream.server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7F;;;GAGG;AAEH,KAAK,WAAW,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,wBAAuB,sBAAsB,CAAC,KAAK,EAAE;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,cAAc,CAAC,WAAW,CAAC,CAqG9B"}

package/dist-lib/lib/aiChat.stream.server.js

@@ -1,8 +1,10 @@
 import { supabaseAdmin } from '../integrations/supabase/client.server.js';
-import { adoptActiveCredential } from './aiChat.server.js';
+import { adoptActiveCredential, registerRuntimeConsumer } from './aiChat.server.js';
 export async function* streamAiChatForRequest(input) {
     const started = Date.now();
     const { data: moduleRow } = await supabaseAdmin.from('ai_modules').select('module_key, ai_enabled').eq('module_key', input.consumerModuleId).maybeSingle();
+    if (!moduleRow)
+        await registerRuntimeConsumer(input.consumerModuleId);
     if (!moduleRow || moduleRow.ai_enabled !== true) {
         yield { type: 'error', code: 'no_binding', status: 404, message: `Module "${input.consumerModuleId}" heeft geen AI ingeschakeld.` };
         return;

package/dist-lib/lib/aiChat.types.d.ts

@@ -3,6 +3,12 @@ export type AiChatMessage = {
     role: AiChatRole;
     content: string;
 };
+/** Pdf-bijlage (base64, zonder data:-voorvoegsel). */
+export type AiChatAttachment = {
+    mimeType: 'application/pdf';
+    data: string;
+    filename?: string;
+};
 export type AiChatOptions = {
     temperature?: number;
     maxTokens?: number;
@@ -43,8 +49,9 @@ export type AiChatError = {
      * - `network` — netwerk/timeout
      * - `unsupported_provider` — providerslug niet herkend
      * - `forbidden` — 403
+     * - `unsupported_attachment` — provider/model kan deze bijlage niet lezen
      */
-    code: 'no_binding' | 'not_configured' | 'unauthorized' | 'rate_limited' | 'quota_exceeded' | 'bad_request' | 'provider_error' | 'network' | 'unsupported_provider' | 'forbidden';
+    code: 'no_binding' | 'not_configured' | 'unauthorized' | 'rate_limited' | 'quota_exceeded' | 'bad_request' | 'provider_error' | 'network' | 'unsupported_provider' | 'forbidden' | 'unsupported_attachment';
     message: string;
 };
 export type AiChatResult = AiChatSuccess | AiChatError;

package/dist-lib/lib/aiChat.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiChat.types.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAEzD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,IAAI,EACA,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,SAAS,GACT,sBAAsB,GACtB,WAAW,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,WAAW,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,wDAAwD;IACxD,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"aiChat.types.d.ts","sourceRoot":"","sources":["../../src/lib/aiChat.types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAEzD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;OAaG;IACH,IAAI,EACA,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,SAAS,GACT,sBAAsB,GACtB,WAAW,GACX,wBAAwB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,WAAW,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,wDAAwD;IACxD,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist-lib/lib/aiModules.server.d.ts

@@ -4,6 +4,10 @@ export type AiModuleRow = {
     module_key: string;
     module_name: string;
     ai_enabled: boolean;
+    declared_ai?: boolean;
+    ai_source?: string | null;
+    last_declared_at?: string | null;
+    is_in_use?: boolean;
 };
 export type AiModuleStats = {
     module_key: string;

package/dist-lib/lib/aiModules.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiModules.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiModules.server.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAMD,wBAAsB,WAAW,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAOvE;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACvE,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACjD,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAK/F;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,cAAc,CAAC,CA0CzB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,GAAG,EACb,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,SAAM,GACV,OAAO,CAAC,cAAc,EAAE,CAAC,CAwB3B"}
+{"version":3,"file":"aiModules.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiModules.server.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAMD,wBAAsB,WAAW,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAWvE;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACvE,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACjD,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAK/F;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,cAAc,CAAC,CA0CzB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,GAAG,EACb,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,SAAM,GACV,OAAO,CAAC,cAAc,EAAE,CAAC,CAwB3B"}

package/dist-lib/lib/aiModules.server.js

@@ -14,10 +14,13 @@ function emptyStats(module_key) {
 export async function listModules(supabase) {
     const { data, error } = await supabase
         .from('ai_modules')
-        .select('id, module_key, module_name, ai_enabled')
+        .select('id, module_key, module_name, ai_enabled, declared_ai, ai_source, last_declared_at, is_in_use')
         .order('module_name');
-    if (error)
-        return [];
+    if (error) {
+        // Oudere database zonder de nieuwe kolommen: val terug op de basisvelden.
+        const fb = await supabase.from('ai_modules').select('id, module_key, module_name, ai_enabled').order('module_name');
+        return (Array.isArray(fb.data) ? fb.data : []);
+    }
     return (Array.isArray(data) ? data : []);
 }
 export async function upsertModule(supabase, input) {

package/dist-lib/lib/aiRegistry.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pure helpers voor het `flowselections.ai`-veld in package.json van modules.
+ * Gebruikt door shell-setup en update dashboard (via registerAiConsumers) en getest zonder database.
+ *
+ *   "flowselections": { "ai": [{ "moduleKey": "werkbon-postvak", "name": "Postvak Werkbonnen", "description": "..." }] }
+ */
+export type AiConsumerDeclaration = {
+    moduleKey: string;
+    name: string;
+    description?: string | null;
+};
+/** Resultaat van het lezen van alle geïnstalleerde pakketten in een shell. */
+export type InstalledPackageRead = {
+    packageName: string;
+    ok: boolean;
+    /** Ruwe inhoud van package.json (alleen bij ok). */
+    manifest?: unknown;
+};
+export declare function normalizeAiDeclarations(raw: unknown): AiConsumerDeclaration[];
+/** Haal de AI-declaraties uit één package.json (`flowselections.ai`). */
+export declare function declarationsFromManifest(manifest: unknown): AiConsumerDeclaration[];
+/**
+ * Bouw de registratie-aanvraag uit alle gelezen pakketten.
+ * `fullList` is alleen waar als ÉLK pakket zonder fout is gelezen en er minstens één
+ * declaratie is; anders wordt in de database nooit iets op "niet meer in gebruik" gezet.
+ */
+export declare function buildRegistration(reads: InstalledPackageRead[]): {
+    modules: AiConsumerDeclaration[];
+    fullList: boolean;
+};
+//# sourceMappingURL=aiRegistry.d.ts.map

package/dist-lib/lib/aiRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiRegistry.d.ts","sourceRoot":"","sources":["../../src/lib/aiRegistry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAIF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAa7E;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAGnF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG;IAChE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,QAAQ,EAAE,OAAO,CAAC;CACnB,CAUA"}

package/dist-lib/lib/aiRegistry.functions.d.ts

@@ -0,0 +1,25 @@
+import { type AiConsumerDeclaration } from './aiRegistry.js';
+export type { AiConsumerDeclaration };
+export type AiRegistrationResult = {
+    ok: boolean;
+    message: string;
+    registered?: number;
+    retired?: number;
+};
+/**
+ * Meld AI-gebruikende modules aan in de database van deze shell.
+ * Alleen beheerders (controle in de database-functie). Nooit verwijderen;
+ * `fullList` alleen meegeven als de complete lijst geïnstalleerde modules zonder fouten is gelezen.
+ */
+export declare const registerAiConsumers: import("@tanstack/start-client-core").RequiredFetcher<readonly [import("@tanstack/start-client-core").FunctionMiddlewareAfterServer<{}, unknown, undefined, {
+    supabase: import("../integrations/supabase/auth-middleware.js").AuthedSupabaseClient;
+    userId: string;
+    claims: import("@supabase/auth-js").User;
+}, undefined, undefined, undefined>], (data: {
+    modules: AiConsumerDeclaration[];
+    fullList?: boolean;
+}) => {
+    modules: AiConsumerDeclaration[];
+    fullList: boolean;
+}, Promise<AiRegistrationResult>>;
+//# sourceMappingURL=aiRegistry.functions.d.ts.map

package/dist-lib/lib/aiRegistry.functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiRegistry.functions.d.ts","sourceRoot":"","sources":["../../src/lib/aiRegistry.functions.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2B,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAEnF,YAAY,EAAE,qBAAqB,EAAE,CAAC;AACtC,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3G;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;6CAEP;IAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE;;;iCAa7E,CAAC"}

package/dist-lib/lib/aiRegistry.functions.js

@@ -0,0 +1,25 @@
+import { createServerFn } from '@tanstack/react-start';
+import { requireSupabaseAuth } from '../integrations/supabase/auth-middleware.js';
+import { normalizeAiDeclarations } from './aiRegistry.js';
+/**
+ * Meld AI-gebruikende modules aan in de database van deze shell.
+ * Alleen beheerders (controle in de database-functie). Nooit verwijderen;
+ * `fullList` alleen meegeven als de complete lijst geïnstalleerde modules zonder fouten is gelezen.
+ */
+export const registerAiConsumers = createServerFn({ method: 'POST' })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((data) => ({
+    modules: normalizeAiDeclarations(data?.modules),
+    fullList: data?.fullList === true,
+}))
+    .handler(async ({ data, context }) => {
+    const { data: res, error } = await context.supabase.rpc('ai_register_consumers', {
+        _modules: data.modules,
+        _full_list: data.fullList && data.modules.length > 0,
+        _source: 'manifest',
+    });
+    if (error)
+        return { ok: false, message: `Registreren mislukt: ${error.message}` };
+    const r = (res ?? {});
+    return { ok: true, message: 'AI-modules bijgewerkt.', registered: Number(r.registered ?? 0), retired: Number(r.retired ?? 0) };
+});

package/dist-lib/lib/aiRegistry.js

@@ -0,0 +1,46 @@
+/**
+ * Pure helpers voor het `flowselections.ai`-veld in package.json van modules.
+ * Gebruikt door shell-setup en update dashboard (via registerAiConsumers) en getest zonder database.
+ *
+ *   "flowselections": { "ai": [{ "moduleKey": "werkbon-postvak", "name": "Postvak Werkbonnen", "description": "..." }] }
+ */
+const KEY_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+export function normalizeAiDeclarations(raw) {
+    const list = Array.isArray(raw) ? raw : raw && typeof raw === 'object' ? [raw] : [];
+    const out = new Map();
+    for (const item of list) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const v = item;
+        const key = String(v.moduleKey ?? v.module_key ?? '').trim().toLowerCase();
+        if (!KEY_RE.test(key))
+            continue;
+        const name = String(v.name ?? v.module_name ?? '').trim() || key;
+        const description = typeof v.description === 'string' && v.description.trim() ? v.description.trim() : null;
+        out.set(key, { moduleKey: key, name, description });
+    }
+    return Array.from(out.values());
+}
+/** Haal de AI-declaraties uit één package.json (`flowselections.ai`). */
+export function declarationsFromManifest(manifest) {
+    const fs = manifest?.flowselections;
+    return normalizeAiDeclarations(fs?.ai);
+}
+/**
+ * Bouw de registratie-aanvraag uit alle gelezen pakketten.
+ * `fullList` is alleen waar als ÉLK pakket zonder fout is gelezen en er minstens één
+ * declaratie is; anders wordt in de database nooit iets op "niet meer in gebruik" gezet.
+ */
+export function buildRegistration(reads) {
+    const safe = Array.isArray(reads) ? reads : [];
+    const allOk = safe.length > 0 && safe.every(r => r && r.ok === true);
+    const merged = new Map();
+    for (const r of safe) {
+        if (!r?.ok)
+            continue;
+        for (const d of declarationsFromManifest(r.manifest))
+            merged.set(d.moduleKey, d);
+    }
+    const modules = Array.from(merged.values());
+    return { modules, fullList: allOk && modules.length > 0 };
+}

package/dist-lib/lib/aiRegistry.server.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Server-only: registratie met de service role, voor shell-setup en update dashboard
+ * die zonder ingelogde gebruiker draaien. Nooit vanuit de browser importeren.
+ */
+import { type InstalledPackageRead } from './aiRegistry.js';
+export declare function registerAiConsumersFromPackages(reads: InstalledPackageRead[]): Promise<{
+    ok: boolean;
+    message: string;
+    registered: number;
+    retired: number;
+    fullList: boolean;
+}>;
+//# sourceMappingURL=aiRegistry.server.d.ts.map

package/dist-lib/lib/aiRegistry.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiRegistry.server.d.ts","sourceRoot":"","sources":["../../src/lib/aiRegistry.server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAqB,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE5E,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oBAAoB,EAAE,GAC5B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAcnG"}

package/dist-lib/lib/aiRegistry.server.js

@@ -0,0 +1,21 @@
+/**
+ * Server-only: registratie met de service role, voor shell-setup en update dashboard
+ * die zonder ingelogde gebruiker draaien. Nooit vanuit de browser importeren.
+ */
+import { buildRegistration } from './aiRegistry.js';
+export async function registerAiConsumersFromPackages(reads) {
+    const { modules, fullList } = buildRegistration(reads);
+    if (modules.length === 0) {
+        return { ok: true, message: 'Geen AI-declaraties gevonden; niets gewijzigd.', registered: 0, retired: 0, fullList: false };
+    }
+    const { supabaseAdmin } = await import('../integrations/supabase/client.server.js');
+    const { data, error } = await supabaseAdmin.rpc('ai_register_consumers', {
+        _modules: modules,
+        _full_list: fullList,
+        _source: 'manifest',
+    });
+    if (error)
+        return { ok: false, message: `Registreren mislukt: ${error.message}`, registered: 0, retired: 0, fullList };
+    const r = (data ?? {});
+    return { ok: true, message: 'AI-modules bijgewerkt.', registered: Number(r.registered ?? 0), retired: Number(r.retired ?? 0), fullList };
+}

package/dist-lib/lib/aiUsageByModule.functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiUsageByModule.functions.d.ts","sourceRoot":"","sources":["../../src/lib/aiUsageByModule.functions.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;8CAEL,OAAO;;iCAsB7B,CAAC;AAEL,eAAO,MAAM,SAAS;;;;;QAEwB,OAAO;GAMjD,CAAC"}
+{"version":3,"file":"aiUsageByModule.functions.d.ts","sourceRoot":"","sources":["../../src/lib/aiUsageByModule.functions.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;8CAEL,OAAO;;iCAsB7B,CAAC;AAEL,eAAO,MAAM,SAAS;;;;;QAEwB,OAAO;GAGjD,CAAC"}

package/dist-lib/lib/aiUsageByModule.functions.js

@@ -29,9 +29,6 @@ export const getAiUsageByModule = createServerFn({ method: 'POST' })
 export const isAiAdmin = createServerFn({ method: 'GET' })
     .middleware([requireSupabaseAuth])
     .handler(async ({ context }) => {
-    const { data } = await context.supabase.rpc('has_role', {
-        _user_id: context.userId,
-        _role: 'ai_admin',
-    });
+    const { data } = await context.supabase.rpc('ai_is_admin', { _uid: context.userId });
     return { ok: data === true };
 });

package/dist-lib/lib/modules.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modules.server.d.ts","sourceRoot":"","sources":["../../src/lib/modules.server.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAc/E;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC/E,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,GAAG,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,oBAAoB,CAAC,CAK/B"}
+{"version":3,"file":"modules.server.d.ts","sourceRoot":"","sources":["../../src/lib/modules.server.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAc/E;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,GAAG,EACb,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC/E,OAAO,CAAC,oBAAoB,CAAC,CAe/B;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,GAAG,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,oBAAoB,CAAC,CAK/B"}