@flowselections/core 1.0.20 → 1.0.22

package/dist/auth/redirect.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Accepteert alleen een same-site pad: begint met "/", niet met "//",
+ * geen backslash, geen schema en geen stuurtekens. Anders `fallback`.
+ */
+export declare function safeRedirectPath(value: unknown, fallback: string): string;
+/**
+ * Leest `?redirect=` direct uit de adresbalk, zodat het ook werkt als de
+ * login-route van de shell geen validateSearch heeft.
+ */
+export declare function readRedirectParam(fallback: string): string;
+export interface RequireAuthArgs {
+    context: unknown;
+    location: {
+        href: string;
+    };
+}
+/**
+ * Guard voor de `_authenticated`-route (gebruik in beforeLoad, met ssr: false).
+ * Zolang auth laadt: geen redirect; de root invalideert de router zodra auth
+ * geladen is, waarna deze guard opnieuw draait.
+ */
+export declare function requireAuth({ context, location }: RequireAuthArgs, loginPath?: string): void;
+//# sourceMappingURL=redirect.d.ts.map

package/dist/auth/redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../../src/core/auth/redirect.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAezE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,SAAS,SAAW,GAAG,IAAI,CAI9F"}

package/dist/auth/redirect.js

@@ -0,0 +1,47 @@
+import { redirect } from "@tanstack/react-router";
+/**
+ * Accepteert alleen een same-site pad: begint met "/", niet met "//",
+ * geen backslash, geen schema en geen stuurtekens. Anders `fallback`.
+ */
+export function safeRedirectPath(value, fallback) {
+    if (typeof value !== "string" || value.length === 0)
+        return fallback;
+    if (!value.startsWith("/") || value.startsWith("//"))
+        return fallback;
+    if (value.includes("\\"))
+        return fallback;
+    // eslint-disable-next-line no-control-regex
+    if (/[\u0000-\u001f\u007f]/.test(value))
+        return fallback;
+    // Schema vóór het eerste "/", "?" of "#" (bijv. "/javascript:..." is ok, "javascript:" niet;
+    // dat laatste valt al af op de "/"-regel, dit vangt varianten als "/\t//").
+    try {
+        const url = new URL(value, "http://same.invalid");
+        if (url.origin !== "http://same.invalid")
+            return fallback;
+    }
+    catch {
+        return fallback;
+    }
+    return value;
+}
+/**
+ * Leest `?redirect=` direct uit de adresbalk, zodat het ook werkt als de
+ * login-route van de shell geen validateSearch heeft.
+ */
+export function readRedirectParam(fallback) {
+    if (typeof window === "undefined")
+        return fallback;
+    return safeRedirectPath(new URLSearchParams(window.location.search).get("redirect"), fallback);
+}
+/**
+ * Guard voor de `_authenticated`-route (gebruik in beforeLoad, met ssr: false).
+ * Zolang auth laadt: geen redirect; de root invalideert de router zodra auth
+ * geladen is, waarna deze guard opnieuw draait.
+ */
+export function requireAuth({ context, location }, loginPath = "/login") {
+    const auth = context?.auth;
+    if (!auth || auth.loading || auth.isAuthenticated)
+        return;
+    throw redirect({ to: loginPath, search: { redirect: location.href } });
+}

package/dist/components/layout/AuthenticatedLayout.d.ts

@@ -0,0 +1,20 @@
+import type { ReactNode } from "react";
+import type { SidebarProps } from "./Sidebar";
+/**
+ * Alle Sidebar-props (auth, modules, shellId, ...) plus optionele children.
+ * Zo verliest een shell bij migratie naar AuthenticatedLayout geen enkele
+ * prop die hij voorheen rechtstreeks aan <Sidebar /> gaf.
+ */
+export type AuthenticatedLayoutProps = SidebarProps & {
+    /** Optioneel; standaard rendert de layout <Outlet />. */
+    children?: ReactNode;
+    /** Toon de gedeelde paginakop. Standaard ingeschakeld. */
+    header?: boolean;
+};
+/**
+ * Zijbalk + content-offset + mobiele topbalk. Desktop: ml-64 (gelijk aan de
+ * oude shell-layout). Mobiel: geen marge, pt-14 onder de topbalk; de sticky
+ * Header schuift via --core-topbar-h onder de topbalk.
+ */
+export declare function AuthenticatedLayout({ children, header, ...sidebarProps }: AuthenticatedLayoutProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=AuthenticatedLayout.d.ts.map

package/dist/components/layout/AuthenticatedLayout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticatedLayout.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/AuthenticatedLayout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAG9C;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG;IACpD,yDAAyD;IACzD,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,QAAQ,EAAE,MAAa,EAAE,GAAG,YAAY,EAAE,EAAE,wBAAwB,2CAkBzG"}

package/dist/components/layout/AuthenticatedLayout.js

@@ -0,0 +1,15 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Outlet, useMatches } from "@tanstack/react-router";
+import { Sidebar } from "./Sidebar";
+import { Header } from "./Header";
+/**
+ * Zijbalk + content-offset + mobiele topbalk. Desktop: ml-64 (gelijk aan de
+ * oude shell-layout). Mobiel: geen marge, pt-14 onder de topbalk; de sticky
+ * Header schuift via --core-topbar-h onder de topbalk.
+ */
+export function AuthenticatedLayout({ children, header = true, ...sidebarProps }) {
+    const matches = useMatches();
+    const titleMatch = [...matches].reverse().find((match) => typeof match.staticData?.title === "string");
+    const title = titleMatch?.staticData?.title ?? "";
+    return (_jsxs("div", { className: "min-h-screen bg-background [--core-topbar-h:3.5rem] md:[--core-topbar-h:0px]", children: [_jsx(Sidebar, { ...sidebarProps }), _jsxs("div", { className: "flex min-h-dvh flex-col pt-14 md:ml-64 md:pt-0", children: [header && _jsx(Header, { title: title }), _jsx("main", { className: "flex-1", children: children ?? _jsx(Outlet, {}) })] })] }));
+}

package/dist/components/layout/HandoverPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HandoverPage.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/HandoverPage.tsx"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,YAAY,CAAC,EAAE,UAAgB,EAAE,SAAoB,EAAE,EAAE,iBAAiB,2CAgGzF"}
+{"version":3,"file":"HandoverPage.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/HandoverPage.tsx"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,YAAY,CAAC,EAAE,UAAgB,EAAE,SAAoB,EAAE,EAAE,iBAAiB,2CA0FzF"}

package/dist/components/layout/HandoverPage.js

@@ -4,6 +4,7 @@ import { useRouter } from "@tanstack/react-router";
 import { Button } from "../ui/button";
 import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from "../ui/card";
 import { supabase } from "../../supabase/client";
+import { readRedirectParam } from "../../auth/redirect";
 import { exchangeHandover } from "../../auth/handover.functions.js";
 const FOUTMELDING = "Inloggen is niet gelukt. Probeer het opnieuw vanaf de inlogpagina.";
 export function HandoverPage({ redirectTo = "/", loginPath = "/login" }) {
@@ -27,6 +28,8 @@ export function HandoverPage({ redirectTo = "/", loginPath = "/login" }) {
         started.current = true;
         (async () => {
             const code = new URLSearchParams(window.location.search).get("code");
+            // Doel vóór het opschonen van de URL lezen; alleen same-site paden.
+            const target = readRedirectParam(redirectTo);
             if (!code) {
                 setFailed(true);
                 return;
@@ -36,14 +39,6 @@ export function HandoverPage({ redirectTo = "/", loginPath = "/login" }) {
             const cleanUrl = window.location.pathname + window.location.hash;
             window.history.replaceState(null, "", cleanUrl);
             try {
-                // Eerst een eventuele bestaande sessie beëindigen, anders belandt
-                // iemand in de omgeving van de vorige gebruiker. Scope 'local':
-                // alleen de lokale opslag wissen, geen server-side sessies intrekken.
-                // De standaardscope ('global') zou óók de net aangemaakte
-                // handover-sessie server-side ongeldig maken (session_not_found).
-                const { data } = await supabase.auth.getSession();
-                if (data.session)
-                    await supabase.auth.signOut({ scope: "local" });
                 const result = await exchangeHandover({ data: { code } });
                 const { error } = await supabase.auth.setSession({
                     access_token: result.accessToken,
@@ -56,7 +51,7 @@ export function HandoverPage({ redirectTo = "/", loginPath = "/login" }) {
                 await waitForAuthContext();
                 // Nooit window.location.href: een volledige pagina-load laat de
                 // server (zonder sessie) eerst naar /login redirecten.
-                await router.navigate({ to: redirectTo, replace: true });
+                await router.navigate({ href: target, replace: true });
             }
             catch {
                 setFailed(true);

package/dist/components/layout/Header.js

@@ -7,5 +7,5 @@ import { BugsDialog } from "./BugsDialog";
 import { NotificationBell } from "./NotificationBell";
 export function Header({ title }) {
     const [bugsDialogOpen, setBugsDialogOpen] = useState(false);
-    return (_jsxs(_Fragment, { children: [_jsxs("header", { className: "sticky top-0 z-30 flex h-16 items-center justify-between border-b border-border bg-card px-6", children: [_jsx("h1", { className: "text-xl font-semibold text-foreground", children: title }), _jsxs("div", { className: "flex items-center gap-4", children: [_jsxs("div", { className: "relative hidden md:block", children: [_jsx(Search, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" }), _jsx(Input, { placeholder: "Zoeken...", className: "w-64 pl-9" })] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => setBugsDialogOpen(true), children: [_jsx(Bug, { className: "mr-2 h-4 w-4" }), "Bugs melden"] }), _jsx(NotificationBell, {})] })] }), _jsx(BugsDialog, { open: bugsDialogOpen, onOpenChange: setBugsDialogOpen })] }));
+    return (_jsxs(_Fragment, { children: [_jsxs("header", { className: "sticky top-[var(--core-topbar-h,0px)] md:top-0 z-30 flex h-16 items-center justify-between border-b border-border bg-card px-6", children: [_jsx("h1", { className: "text-xl font-semibold text-foreground", children: title }), _jsxs("div", { className: "flex items-center gap-4", children: [_jsxs("div", { className: "relative hidden md:block", children: [_jsx(Search, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" }), _jsx(Input, { placeholder: "Zoeken...", className: "w-64 pl-9" })] }), _jsxs(Button, { variant: "outline", size: "sm", onClick: () => setBugsDialogOpen(true), children: [_jsx(Bug, { className: "mr-2 h-4 w-4" }), "Bugs melden"] }), _jsx(NotificationBell, {})] })] }), _jsx(BugsDialog, { open: bugsDialogOpen, onOpenChange: setBugsDialogOpen })] }));
 }

package/dist/components/layout/InstellingenPage.js

@@ -74,5 +74,5 @@ const coreCards = [
 export function InstellingenPage({ modules }) {
     const moduleCards = modules.flatMap((m) => m.settingsCards);
     const allCards = [...coreCards, ...moduleCards].sort((a, b) => a.order - b.order);
-    return (_jsx("main", { className: "p-6", children: _jsx("div", { className: "grid gap-6 lg:grid-cols-2", children: allCards.map((card, i) => _jsx(card.component, {}, i)) }) }));
+    return (_jsx("div", { className: "p-6", children: _jsx("div", { className: "grid gap-6 lg:grid-cols-2", children: allCards.map((card, i) => _jsx(card.component, {}, i)) }) }));
 }

package/dist/components/layout/LoginPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/LoginPage.tsx"],"names":[],"mappings":"AAUA,UAAU,cAAc;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,SAAS,CAAC,EAAE,UAA4B,EAAE,EAAE,cAAc,2CAgIzE"}
+{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/LoginPage.tsx"],"names":[],"mappings":"AAWA,UAAU,cAAc;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,SAAS,CAAC,EAAE,UAA4B,EAAE,EAAE,cAAc,2CA+HzE"}

package/dist/components/layout/LoginPage.js

@@ -8,6 +8,7 @@ import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle }
 import { toast } from "sonner";
 import { loginSchema } from "../../lib/validationSchemas";
 import { supabase } from "../../supabase/client";
+import { readRedirectParam } from "../../auth/redirect";
 export function LoginPage({ redirectTo = "/instellingen" }) {
     const router = useRouter();
     const [email, setEmail] = useState("");
@@ -42,12 +43,11 @@ export function LoginPage({ redirectTo = "/instellingen" }) {
         }
         // Client-side navigatie zonder volledige herlaad: dat voorkomt de flits
         // waarbij de server (zonder sessie) eerst naar /login terugstuurt.
-        const ready = await waitForAuthContext();
-        if (!ready) {
-            window.location.href = redirectTo;
-            return;
-        }
-        await router.navigate({ to: redirectTo, replace: true });
+        // Geen window.location.href-fallback: een volledige load laat de guard
+        // opnieuw beslissen; de root-invalidate pakt de sessie alsnog op.
+        await waitForAuthContext();
+        const target = readRedirectParam(redirectTo);
+        await router.navigate({ href: target, replace: true });
         setIsLoading(false);
     };
     const handleForgotPassword = async (e) => {

package/dist/components/layout/Sidebar.d.ts

@@ -1,9 +1,19 @@
 import type { AuthContext } from "../../auth/useAuth";
 import type { FlowModule } from "../../types/module.js";
-interface SidebarProps {
+export interface SidebarProps {
     auth: AuthContext;
     modules: FlowModule[];
+    /**
+     * Identificeert de shell (bijv. "floriday-voorraad"). De core gebruikt hem
+     * niet voor logica; hij komt als data-attribuut op de zijbalk, zodat
+     * extensies en shells per-shell zijbalkvolgorde of styling kunnen koppelen.
+     */
+    shellId?: string;
 }
-export declare function Sidebar({ auth, modules }: SidebarProps): import("react/jsx-runtime").JSX.Element;
-export {};
+/**
+ * Desktop (md+): vaste zijbalk links, w-64 — ongewijzigd t.o.v. eerdere versies.
+ * Mobiel (<md): vaste topbalk (h-14) met menuknop die de zijbalk als Sheet opent.
+ * Shells die AuthenticatedLayout gebruiken krijgen de juiste content-offset.
+ */
+export declare function Sidebar({ auth, modules, shellId }: SidebarProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=Sidebar.d.ts.map

package/dist/components/layout/Sidebar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Sidebar.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/Sidebar.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,uBAAuB,CAAC;AAMjE,UAAU,YAAY;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAkFD,wBAAgB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,2CAqDtD"}
+{"version":3,"file":"Sidebar.d.ts","sourceRoot":"","sources":["../../../src/core/components/layout/Sidebar.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,uBAAuB,CAAC;AAMjE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6ID;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,2CA8C/D"}

package/dist/components/layout/Sidebar.js

@@ -1,32 +1,49 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { useState } from "react";
+import { useEffect, useState } from "react";
 import { Link, useLocation } from "@tanstack/react-router";
-import { Settings, LogOut, ChevronDown } from "lucide-react";
+import { Settings, LogOut, ChevronDown, Menu } from "lucide-react";
+import { Sheet, SheetContent, SheetTitle } from "../ui/sheet";
 import { cn } from "../../lib/utils";
 import { useModuleListTransform } from "../../extensions/ShellExtensions.js";
 // ─── Single flat nav link ─────────────────────────────────────────────────────
-function SidebarLink({ item, pathname, indent = false, }) {
+function SidebarLink({ item, pathname, indent = false, onNavigate, }) {
     const isActive = pathname === item.href;
-    return (_jsxs(Link, { to: item.href, className: cn("flex items-center gap-3 rounded-lg px-3 text-sm font-medium transition-colors", indent ? "py-2" : "py-2.5", isActive
+    return (_jsxs(Link, { to: item.href, onClick: onNavigate, className: cn("flex items-center gap-3 rounded-lg px-3 text-sm font-medium transition-colors", indent ? "py-2" : "py-2.5", isActive
             ? "bg-sidebar-accent text-sidebar-accent-foreground"
             : "text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"), children: [_jsx(item.icon, { className: cn(indent ? "h-4 w-4" : "h-5 w-5") }), item.label] }));
 }
 // ─── Collapsible group (for modules with children) ────────────────────────────
-function SidebarGroup({ item, pathname, }) {
+function SidebarGroup({ item, pathname, onNavigate, }) {
     const groupActive = item.children?.some((child) => pathname === child.href || pathname.startsWith(child.href + "/")) ?? false;
     const [open, setOpen] = useState(groupActive);
     return (_jsxs(_Fragment, { children: [_jsxs("button", { onClick: () => setOpen(!open), className: cn("flex w-full items-center gap-3 rounded-lg px-3 py-2.5 text-sm font-medium transition-colors cursor-pointer", groupActive
                     ? "text-sidebar-accent-foreground"
-                    : "text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"), children: [_jsx(item.icon, { className: "h-5 w-5" }), _jsx("span", { className: "flex-1 text-left", children: item.label }), _jsx(ChevronDown, { className: cn("h-4 w-4 transition-transform", open && "rotate-180") })] }), open && (_jsx("div", { className: "ml-3 space-y-1", children: item.children.map((child) => (_jsx(SidebarLink, { item: child, pathname: pathname, indent: true }, child.href))) }))] }));
+                    : "text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"), children: [_jsx(item.icon, { className: "h-5 w-5" }), _jsx("span", { className: "flex-1 text-left", children: item.label }), _jsx(ChevronDown, { className: cn("h-4 w-4 transition-transform", open && "rotate-180") })] }), open && (_jsx("div", { className: "ml-3 space-y-1", children: item.children.map((child) => (_jsx(SidebarLink, { item: child, pathname: pathname, indent: true, onNavigate: onNavigate }, child.href))) }))] }));
 }
-// ─── Main Sidebar ─────────────────────────────────────────────────────────────
-export function Sidebar({ auth, modules }) {
-    const location = useLocation();
-    const pathname = location.pathname;
+// ─── Shared content (desktop aside + mobile sheet) ────────────────────────────
+function SidebarContent({ auth, modules, pathname, onNavigate, }) {
     // Zonder ShellExtensionsProvider komt de lijst ongewijzigd terug (code-volgorde).
     const visibleModules = useModuleListTransform(modules);
     const handleSignOut = async () => {
+        onNavigate?.();
         await auth.signOut();
     };
-    return (_jsx("aside", { className: "fixed left-0 top-0 z-40 h-screen w-64 bg-sidebar", children: _jsxs("div", { className: "flex h-full flex-col", children: [_jsx("div", { className: "px-12 py-0 border-b border-sidebar-border", children: _jsx("img", { src: "/logo.png", alt: "Logo", className: "w-full h-auto object-contain" }) }), _jsx("nav", { className: "flex-1 space-y-1 px-3 py-4 overflow-y-auto sidebar-scroll", children: visibleModules.map((mod) => mod.nav.children?.length ? (_jsx(SidebarGroup, { item: mod.nav, pathname: pathname }, mod.id)) : (_jsx(SidebarLink, { item: mod.nav, pathname: pathname }, mod.id))) }), _jsxs("div", { className: "border-t border-sidebar-border px-3 py-4", children: [_jsx(SidebarLink, { item: { label: "Instellingen", href: "/instellingen", icon: Settings }, pathname: pathname }), _jsxs("button", { onClick: handleSignOut, className: "flex w-full items-center gap-3 rounded-lg px-3 py-2.5 text-sm font-medium transition-colors text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground mt-1 cursor-pointer", children: [_jsx(LogOut, { className: "h-5 w-5" }), "Uitloggen"] })] })] }) }));
+    return (_jsxs("div", { className: "flex h-full min-h-0 flex-col", children: [_jsx("div", { className: "flex shrink-0 items-center justify-center px-12 py-0 border-b border-sidebar-border", children: _jsx("img", { src: "/logo.png", alt: "Logo", className: "max-h-24 w-auto max-w-full object-contain" }) }), _jsx("nav", { className: "min-h-0 flex-1 space-y-1 px-3 py-4 overflow-y-auto sidebar-scroll", children: visibleModules.map((mod) => mod.nav.children?.length ? (_jsx(SidebarGroup, { item: mod.nav, pathname: pathname, onNavigate: onNavigate }, mod.id)) : (_jsx(SidebarLink, { item: mod.nav, pathname: pathname, onNavigate: onNavigate }, mod.id))) }), _jsxs("div", { className: "shrink-0 border-t border-sidebar-border px-3 py-4", children: [_jsx(SidebarLink, { item: { label: "Instellingen", href: "/instellingen", icon: Settings }, pathname: pathname, onNavigate: onNavigate }), _jsxs("button", { onClick: handleSignOut, className: "flex w-full items-center gap-3 rounded-lg px-3 py-2.5 text-sm font-medium transition-colors text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground mt-1 cursor-pointer", children: [_jsx(LogOut, { className: "h-5 w-5" }), "Uitloggen"] })] })] }));
+}
+// ─── Main Sidebar ─────────────────────────────────────────────────────────────
+/**
+ * Desktop (md+): vaste zijbalk links, w-64 — ongewijzigd t.o.v. eerdere versies.
+ * Mobiel (<md): vaste topbalk (h-14) met menuknop die de zijbalk als Sheet opent.
+ * Shells die AuthenticatedLayout gebruiken krijgen de juiste content-offset.
+ */
+export function Sidebar({ auth, modules, shellId }) {
+    const location = useLocation();
+    const pathname = location.pathname;
+    const [mobileOpen, setMobileOpen] = useState(false);
+    // Sluit het mobiele menu bij elke routewijziging.
+    useEffect(() => {
+        setMobileOpen(false);
+    }, [pathname]);
+    const close = () => setMobileOpen(false);
+    return (_jsxs(_Fragment, { children: [_jsx("aside", { "data-shell": shellId, className: "fixed left-0 top-0 z-40 hidden h-screen h-dvh w-64 bg-sidebar md:block", children: _jsx(SidebarContent, { auth: auth, modules: modules, pathname: pathname }) }), _jsxs("div", { className: "fixed inset-x-0 top-0 z-40 flex h-14 items-center gap-3 border-b border-sidebar-border bg-sidebar px-3 md:hidden", children: [_jsx("button", { type: "button", onClick: () => setMobileOpen(true), "aria-label": "Menu openen", className: "flex h-10 w-10 shrink-0 items-center justify-center rounded-lg text-sidebar-muted hover:bg-sidebar-accent hover:text-sidebar-accent-foreground", children: _jsx(Menu, { className: "h-5 w-5" }) }), _jsx("img", { src: "/logo.png", alt: "Logo", className: "h-8 w-auto max-w-[10rem] object-contain" })] }), _jsx(Sheet, { open: mobileOpen, onOpenChange: setMobileOpen, children: _jsxs(SheetContent, { side: "left", "data-shell": shellId, className: "w-64 max-w-[85vw] border-sidebar-border bg-sidebar p-0 md:hidden", children: [_jsx(SheetTitle, { className: "sr-only", children: "Navigatie" }), _jsx(SidebarContent, { auth: auth, modules: modules, pathname: pathname, onNavigate: close })] }) })] }));
 }

package/dist/index.d.ts

@@ -3,12 +3,17 @@ export type { AuthContext, AuthState, AuthActions, AppRole } from "./auth/useAut
 export { supabase } from "./supabase/client";
 export type { Database } from "./supabase/types";
 export { LoginPage } from "./components/layout/LoginPage";
+export { requireAuth, safeRedirectPath, readRedirectParam } from "./auth/redirect";
+export type { RequireAuthArgs } from "./auth/redirect";
 export { HandoverPage } from "./components/layout/HandoverPage";
 export type { HandoverPageProps } from "./components/layout/HandoverPage";
 export { ResetWachtwoordPage } from "./components/layout/ResetWachtwoordPage";
 export { Header } from "./components/layout/Header";
 export { InstellingenPage } from "./components/layout/InstellingenPage";
 export { Sidebar } from "./components/layout/Sidebar";
+export type { SidebarProps } from "./components/layout/Sidebar";
+export { AuthenticatedLayout } from "./components/layout/AuthenticatedLayout";
+export type { AuthenticatedLayoutProps } from "./components/layout/AuthenticatedLayout";
 export { Toaster } from "./components/ui/sonner";
 export { Button } from "./components/ui/button";
 export { Input } from "./components/ui/input";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGnF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGjD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EACL,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EACnE,aAAa,EAAE,YAAY,EAAE,WAAW,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EACrE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAC5D,gBAAgB,EAAE,kBAAkB,GACrC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,GAC9D,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,GAC9D,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB,EACxE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAClE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAC9D,kBAAkB,EAAE,eAAe,EAAE,sBAAsB,EAC3D,sBAAsB,EAAE,sBAAsB,GAC/C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAClG,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGlE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,YAAY,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGnF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnF,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,YAAY,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGjD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EACL,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EACnE,aAAa,EAAE,YAAY,EAAE,WAAW,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EACrE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAC5D,gBAAgB,EAAE,kBAAkB,GACrC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,GAC9D,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,GAC9D,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB,EACxE,wBAAwB,EAAE,qBAAqB,EAAE,iBAAiB,EAClE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAC9D,kBAAkB,EAAE,eAAe,EAAE,sBAAsB,EAC3D,sBAAsB,EAAE,sBAAsB,GAC/C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAClG,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGlE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,YAAY,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/index.js

@@ -4,11 +4,13 @@ export { useAuth, useAuthState } from "./auth/useAuth";
 export { supabase } from "./supabase/client";
 // Layout
 export { LoginPage } from "./components/layout/LoginPage";
+export { requireAuth, safeRedirectPath, readRedirectParam } from "./auth/redirect";
 export { HandoverPage } from "./components/layout/HandoverPage";
 export { ResetWachtwoordPage } from "./components/layout/ResetWachtwoordPage";
 export { Header } from "./components/layout/Header";
 export { InstellingenPage } from "./components/layout/InstellingenPage";
 export { Sidebar } from "./components/layout/Sidebar";
+export { AuthenticatedLayout } from "./components/layout/AuthenticatedLayout";
 export { Toaster } from "./components/ui/sonner";
 // UI components
 export { Button } from "./components/ui/button";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/core",
-  "version": "1.0.20",
+  "version": "1.0.22",
   "private": false,
   "sideEffects": false,
   "type": "module",
@@ -91,7 +91,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.32.0",
-    "@lovable.dev/vite-tanstack-config": "2.13.1",
+    "@lovable.dev/vite-tanstack-config": "2.23.1",
     "@types/node": "^22.16.5",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",