@flowselections/floriday-voorraad 1.0.156 → 1.0.158

package/dist-lib/server-hooks/guard.d.ts

@@ -1,3 +1,12 @@
+/**
+ * Deze verwerkers staan zonder expliciete instelling alleen aan zolang er
+ * minstens één ERP-leidend artikel is (erp_leading = true, of een artikel van
+ * vóór 1.0.84 met een andere modus dan Uit). Anders uit: een Shell die alles
+ * uit Floriday overneemt, verstuurt dan niets.
+ */
+export declare const DEFAULT_ON_IF_ERP_LEADING: Set<string>;
+/** Standaard aan zonder voorwaarde (alleen lezen uit Floriday, verstuurt niets). */
+export declare const DEFAULT_ON: Set<string>;
 export declare function hookEnabled(name: string): Promise<boolean>;
 export declare function runGuardedHook(request: Request, name: string, handle: (request: Request) => Promise<Response>, label: string): Promise<Response>;
 //# sourceMappingURL=guard.d.ts.map

package/dist-lib/server-hooks/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/server-hooks/guard.ts"],"names":[],"mappings":"AA+DA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAahE;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,EAC/C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,QAAQ,CAAC,CAUnB"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/server-hooks/guard.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,aAAuD,CAAC;AAE9F,oFAAoF;AACpF,eAAO,MAAM,UAAU,aAAmD,CAAC;AAsC3E,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAchE;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,EAC/C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,QAAQ,CAAC,CAUnB"}

package/dist-lib/server-hooks/guard.js

@@ -19,9 +19,9 @@ const CORS = {
  * vóór 1.0.84 met een andere modus dan Uit). Anders uit: een Shell die alles
  * uit Floriday overneemt, verstuurt dan niets.
  */
-const DEFAULT_ON_IF_ERP_LEADING = new Set(["floriday_base_supply", "logistics_tasks"]);
+export const DEFAULT_ON_IF_ERP_LEADING = new Set(["floriday_base_supply", "logistics_tasks"]);
 /** Standaard aan zonder voorwaarde (alleen lezen uit Floriday, verstuurt niets). */
-const DEFAULT_ON = new Set(["follow_floriday", "floriday_versies"]);
+export const DEFAULT_ON = new Set(["follow_floriday", "floriday_versies"]);
 async function hasErpLeadingArticle(admin) {
     const lead = await admin
         .from("floriday_inventory_settings")
@@ -64,7 +64,8 @@ export async function hookEnabled(name) {
         .select("value")
         .eq("key", `voorraad_hook_enabled.${name}`)
         .maybeSingle();
-    if (!data) {
+    // 'standaard' (vastgelegd door voorraad_ensure_defaults) = dezelfde regel als geen rij.
+    if (!data || String(data.value).trim().toLowerCase() === "standaard") {
         if (DEFAULT_ON.has(name))
             return true;
         return DEFAULT_ON_IF_ERP_LEADING.has(name) && (await hasErpLeadingArticle(admin));

package/dist-lib/server-hooks/trade-item-photo.d.ts

@@ -1,3 +1,15 @@
+/**
+ * Upload-handler voor artikelfoto's (losse app én Shell via flowselections.serverRoutes).
+ * Alleen ingelogde gebruikers van deze database (sessie-bearer); de gateway-
+ * sleutel blijft server-side. Server-only.
+ *
+ * Flow (§14.11):
+ *  1. Browser POSTet multipart/form-data met `file` en optioneel `tradeItemId`.
+ *  2. Wij verifiëren de Supabase-bearer en bepalen de actieve koppeling zelf.
+ *  3. We sturen de RAW bytes door naar /api/public/gateway/media-upload —
+ *     géén base64-inflatie, géén formData-rebuild. HMAC zit in
+ *     gatewayMediaUpload (server-only secret).
+ */
 type UploadReason = "image_too_small" | "image_too_large" | "unsupported_type" | "invalid_payload" | "network" | "not_logged_in" | "not_connected" | "config_missing" | "unknown";
 /** Breedte/hoogte uit PNG-IHDR of JPEG-SOF-marker. */
 export declare function imageSize(b: Uint8Array): {

package/dist-lib/server-hooks/trade-item-photo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trade-item-photo.d.ts","sourceRoot":"","sources":["../../src/server-hooks/trade-item-photo.ts"],"names":[],"mappings":"AAqBA,KAAK,YAAY,GACb,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,SAAS,GACT,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,SAAS,CAAC;AAgFd,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBxE;AAKD,wBAAgB,UAAU,CACxB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACX;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASjD;AAMD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+P9E"}
+{"version":3,"file":"trade-item-photo.d.ts","sourceRoot":"","sources":["../../src/server-hooks/trade-item-photo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,KAAK,YAAY,GACb,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,SAAS,GACT,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,SAAS,CAAC;AAgFd,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBxE;AAKD,wBAAgB,UAAU,CACxB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACX;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASjD;AAMD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+P9E"}

package/dist-lib/server-hooks/trade-item-photo.js

@@ -10,7 +10,6 @@
  *     géén base64-inflatie, géén formData-rebuild. HMAC zit in
  *     gatewayMediaUpload (server-only secret).
  */
-import { createClient } from "@supabase/supabase-js";
 function json(body, status = 200) {
     return new Response(JSON.stringify(body), {
         status,
@@ -134,10 +133,16 @@ export async function handleTradeItemPhoto(request) {
     if (request.method !== "POST")
         return json({ error: "Method not allowed" }, 405);
     try {
-        const SUPABASE_URL = process.env.SUPABASE_URL;
-        const SUPABASE_PUBLISHABLE_KEY = process.env.SUPABASE_PUBLISHABLE_KEY;
-        if (!SUPABASE_URL || !SUPABASE_PUBLISHABLE_KEY) {
-            return plainFail("config_missing", 500, "SUPABASE_URL/SUPABASE_PUBLISHABLE_KEY ontbreekt op de server");
+        // C1: geen eigen client met de publishable key. Sessie server-side
+        // controleren met de service-role-client (getUser), pas daarna verder.
+        let supabase;
+        try {
+            const { getAdminClient } = await import("../lib/supabase-admin.server.js");
+            supabase = getAdminClient();
+        }
+        catch (e) {
+            console.error("[trade-item-photo] serverconfiguratie ontbreekt", e);
+            return plainFail("config_missing", 500, "SUPABASE_URL/SUPABASE_SERVICE_ROLE_KEY ontbreekt op de server");
         }
         // --- 1. Bearer-validatie -------------------------------------------------
         const authHeader = request.headers.get("authorization");
@@ -148,12 +153,8 @@ export async function handleTradeItemPhoto(request) {
         const token = authHeader.slice("Bearer ".length).trim();
         if (!token)
             return plainFail("not_logged_in", 401, "Unauthorized: leeg token");
-        const supabase = createClient(SUPABASE_URL, SUPABASE_PUBLISHABLE_KEY, {
-            global: { headers: { Authorization: `Bearer ${token}` } },
-            auth: { storage: undefined, persistSession: false, autoRefreshToken: false },
-        });
-        const { data: claimsData, error: claimsErr } = await supabase.auth.getClaims(token);
-        if (claimsErr || !claimsData?.claims?.sub) {
+        const { data: userData, error: userErr } = await supabase.auth.getUser(token);
+        if (userErr || !userData?.user?.id) {
             return plainFail("not_logged_in", 401, "Unauthorized: token ongeldig");
         }
         // --- 2. Multipart body ---------------------------------------------------
@@ -218,7 +219,7 @@ export async function handleTradeItemPhoto(request) {
         // ZONDER versie-prefix — die moet dus in het pad zelf zitten.
         const path = "/suppliers-api-2026v1/media";
         const requestTimestamp = Date.now();
-        const clientUserId = claimsData.claims.sub;
+        const clientUserId = userData.user.id;
         const reportFailure = async (info) => {
             // (a) push naar Auth-module diagnostics-endpoint
             try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-voorraad",
-  "version": "1.0.156",
+  "version": "1.0.158",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",
@@ -52,7 +52,7 @@
     "@cloudflare/vite-plugin": "^1.25.5",
     "@electric-sql/pglite": "^0.5.15",
     "@eslint/js": "^9.32.0",
-    "@flowselections/core": "1.0.35",
+    "@flowselections/core": "1.0.37",
     "@lovable.dev/vite-tanstack-config": "2.26.5",
     "@rsbuild/core": "^1.0.0",
     "@tailwindcss/vite": "^4.2.1",
@@ -185,6 +185,33 @@
           "OPTIONS"
         ]
       }
-    ]
+    ],
+    "crons": [
+      {
+        "name": "voorraad-floriday-base-supply",
+        "kind": "http",
+        "path": "/api/public/hooks/floriday-base-supply",
+        "schedule": "* * * * *"
+      },
+      {
+        "name": "voorraad-floriday-follow",
+        "kind": "http",
+        "path": "/api/public/hooks/floriday-follow",
+        "replaces": [
+          "floriday-follow-hourly"
+        ],
+        "schedule": "23 * * * *"
+      },
+      {
+        "name": "voorraad-logistics-tasks-run",
+        "kind": "http",
+        "path": "/api/public/hooks/logistics-tasks-run",
+        "schedule": "* * * * *"
+      }
+    ],
+    "install": {
+      "ensureDefaults": "voorraad_ensure_defaults",
+      "installCheck": "voorraad_install_check"
+    }
   }
 }

package/sql/AGENTS.md

@@ -9,7 +9,7 @@
 - `sql/floriday-voorraad-schema.sql` must name the newest `supabase/migrations` file in its "Laatste migratie" header and contain the required objects; `scripts/check-schema-version.mjs` (prepublishOnly + test) blocks publishing otherwise; the header version is informational and never higher than package.json, because 1.0.139 shipped a stale schema and the dashboard bumps versions without schema changes.
 - Default data only via `voorraad_ensure_defaults()` (system data upserted by code keeping `naam_aangepast`, retired codes set inactive; customer settings only inserted when missing, with column defaults equal to reader fallbacks); bump `voorraad_defaults_versie()` on every list change, because new shells get the schema without data and the fast exit compares that version.
 - Load carrier → Engine code only via the Engine's `logistics_ladingdrager_resolve`; no own mapping list or fallback, because two lists drift.
-- Floriday trade items become own articles only via `voorraad_floriday_artikelen_aanmaken` (match GTIN → article code → name; ambiguity goes to `voorraad_koppel_twijfel`, never guessed; reuses the existing stock row keyed by the Floriday id); the cache trigger only enqueues and wakes a self-unscheduling drain, with an hourly safety net from `voorraad_ensure_defaults`, because inline creation slowed Floriday-auth syncs.
+- Floriday trade items become own articles only via `voorraad_floriday_artikelen_aanmaken` (match GTIN → article code → name; ambiguity goes to `voorraad_koppel_twijfel`, never guessed; reuses the existing stock row keyed by the Floriday id); the cache trigger only enqueues, because inline creation slowed Floriday-auth syncs.
 - Floriday order lines resolve their article only from source metadata (`voorraad_orderregel_trade_item`, sales order id → trade item), overriding name matches; existing empty lines only via `voorraad_correctie_1144` (unambiguous, not shipped/cancelled/processed, batched), because name matches linked the wrong article.
 - Fust balance counts only bookings from the start moment (`fust_startmoment`, global or per fust) plus the opening count; earlier bookings stay visible but outside the balance, and an automatic start moment is set only when none exists and `fust_stock_mutations` is empty, because existing shells must choose their own start.
 - The stock list reads only `voorraad_lijst` (search/filter/sort/count/page on the server, max 500 per page, archived rows only under filter `gearchiveerd`); quick stock changes from the list go through `voorraad_voorraad_corrigeren` (delta + reason, row-locked), because client-side merging hit silent 1,000-row limits and absolute saves could overwrite concurrent order consumption.
@@ -17,4 +17,4 @@
 - A price change re-queues Floriday stock rows only when `voorraad_floriday_volgt(product)` (ERP leading and mode not DISABLED), because local-steered articles must never gain queue rows.
 - Custom fields and tray sticker save only via `voorraad_eigen_velden_opslaan` / `voorraad_traysticker_opslaan` (compare against the state at opening), because direct table writes overwrote concurrent edits.
 - Replaced/expired Floriday trade item versions are recorded only by `voorraad_floriday_versies_vastleggen` (server-only, from a complete error-free per-id read round, blocked above the max share with a message, source recorded); they never become visible articles (alias to the successor or an archived article with stock mode off), and historic shipped lines of such versions never get recalculated fust (`voorraad_fust_historisch_vervallen`), because old versions doubled the catalogue and re-linking history must not book anything.
-- New visible articles from Floriday are created only after a successful version round for that connection (`voorraad_floriday_versieronde_geslaagd`); rounds run only automatically (cron → reconcile hook `?taak=versies`, portions via `_volgende`/`_portie`), an item failing 3 consecutive rounds is set aside as unknown (never marked, never created), and only a whole failed round produces a user notice, because users must never need a manual step and one bad item must not block forever.
+- New visible articles from Floriday are created only after a successful version round for that connection (`voorraad_floriday_versieronde_geslaagd`); rounds run only automatically (portions via `_volgende`/`_portie`), an item failing 3 consecutive rounds is set aside as unknown (never marked, never created), and only a whole failed round produces a user notice, because users must never need a manual step and one bad item must not block forever.

package/sql/floriday-voorraad-schema.sql

@@ -1,5 +1,5 @@
--- @flowselections/floriday-voorraad 1.0.155 – volledig schema (idempotent, geen gegevens).
--- Laatste migratie: 20261105084822_83a0e67a-a170-423b-a118-b20bb20eaa4a.sql
+-- @flowselections/floriday-voorraad 1.0.157 – volledig schema (idempotent, geen gegevens).
+-- Laatste migratie: 20261105135333_640ef1da-e3c7-4569-8060-2fd73ac2ca6c.sql
 -- Gegenereerd uit de database met scripts/generate-voorraad-schema.py. Niet met de hand wijzigen.
 -- Volgorde 20. Ontbrekende tabellen van andere modules worden overgeslagen met een NOTICE; draai opnieuw na die module.
 -- De statuscontrole van floriday_continuous_stock_queue is van Voorraad en wordt hier opnieuw gemaakt.
@@ -995,10 +995,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.apply_stock_reservation(p_trade_item_key text, p_qty numeric, p_order_id uuid, p_order_item_id uuid, p_source text, p_reason text)
@@ -1039,10 +1035,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.autolink_product_to_floriday(p_product_id uuid)
@@ -1099,10 +1091,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION autolink_product_to_floriday(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION autolink_product_to_floriday(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.backfill_open_order_reservations()
@@ -1136,10 +1124,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION backfill_open_order_reservations() FROM PUBLIC;
 REVOKE ALL ON FUNCTION backfill_open_order_reservations() FROM anon;
-REVOKE EXECUTE ON FUNCTION backfill_open_order_reservations() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO authenticated;
-GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO service_role;
-REVOKE EXECUTE ON FUNCTION backfill_open_order_reservations() FROM anon;
 GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO authenticated;
 GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO service_role;
 CREATE OR REPLACE FUNCTION public.calculate_floriday_desired_stock(p_connection_id uuid, p_product_id uuid)
@@ -1558,29 +1542,23 @@ $function$
 ;
 REVOKE ALL ON FUNCTION claim_floriday_stock_queue(integer,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION claim_floriday_stock_queue(integer,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) FROM anon;
 GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.cleanup_floriday_stock_queue()
  RETURNS void
- LANGUAGE sql
+ LANGUAGE plpgsql
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+BEGIN
+  PERFORM public.voorraad_vereis('server', 'cleanup_floriday_stock_queue');
   DELETE FROM public.floriday_continuous_stock_queue
    WHERE status IN ('sent', 'superseded')
      AND updated_at < now() - interval '30 days';
-$function$
+END $function$
 ;
 REVOKE ALL ON FUNCTION cleanup_floriday_stock_queue() FROM PUBLIC;
 REVOKE ALL ON FUNCTION cleanup_floriday_stock_queue() FROM anon;
-REVOKE EXECUTE ON FUNCTION cleanup_floriday_stock_queue() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO authenticated;
-GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO service_role;
-REVOKE EXECUTE ON FUNCTION cleanup_floriday_stock_queue() FROM anon;
 GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO authenticated;
 GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO service_role;
 CREATE OR REPLACE FUNCTION public.cleanup_voorraad_module_history()
@@ -1783,10 +1761,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM anon;
 GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.complete_floriday_stock_queue_outcome(p_id uuid, p_outcome text, p_availability_sent boolean DEFAULT false, p_quantity_sent boolean DEFAULT false, p_error text DEFAULT NULL::text, p_attempt_id text DEFAULT NULL::text, p_permanent boolean DEFAULT false)
@@ -2615,7 +2589,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION ensure_trade_item_stock_row(text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION ensure_trade_item_stock_row(text) FROM anon;
-REVOKE EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) FROM anon;
 GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.ensure_trade_item_stock_row_key(p_key text)
@@ -2822,10 +2795,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION find_trade_item_key(text,text,uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION find_trade_item_key(text,text,uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_adopt_connection(p_old uuid, p_new uuid)
@@ -2879,7 +2848,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_autoheal_connections()
@@ -2926,7 +2894,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION floriday_autoheal_connections() FROM PUBLIC;
 REVOKE ALL ON FUNCTION floriday_autoheal_connections() FROM anon;
-REVOKE EXECUTE ON FUNCTION floriday_autoheal_connections() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_autoheal_connections() TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_autoheal_connections() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_capture_stock_snapshot()
@@ -3876,7 +3843,6 @@ END; $function$
 ;
 REVOKE ALL ON FUNCTION floriday_relink_products(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION floriday_relink_products(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION floriday_relink_products(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_relink_products(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_relink_products(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_requeue_dead_letters(p_connection_id uuid DEFAULT NULL::uuid)
@@ -4274,86 +4240,73 @@ REVOKE ALL ON FUNCTION fust_types_duplicate_guard() FROM anon;
 GRANT EXECUTE ON FUNCTION fust_types_duplicate_guard() TO service_role;
 CREATE OR REPLACE FUNCTION public.get_active_floriday_context()
  RETURNS TABLE(connection_id uuid, user_id uuid)
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT ts.connection_id, ts.user_id
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'get_active_floriday_context');
+  RETURN QUERY SELECT ts.connection_id, ts.user_id
     FROM public.trade_item_stock ts
     JOIN public.floriday_connections fc ON fc.id = ts.connection_id AND fc.is_active
    ORDER BY ts.created_at ASC
    LIMIT 1;
-$function$
+END $function$
 ;
 REVOKE ALL ON FUNCTION get_active_floriday_context() FROM PUBLIC;
 REVOKE ALL ON FUNCTION get_active_floriday_context() FROM anon;
-REVOKE EXECUTE ON FUNCTION get_active_floriday_context() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO authenticated;
-GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO service_role;
-REVOKE EXECUTE ON FUNCTION get_active_floriday_context() FROM anon;
 GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO authenticated;
 GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO service_role;
 CREATE OR REPLACE FUNCTION public.get_group_allocation_keys(p_product_id uuid)
  RETURNS TABLE(k text, ord integer)
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$
-  WITH grp AS (
-    SELECT pg.id AS group_id
-    FROM public.product_groups pg
-    WHERE pg.is_active = true
-      AND (pg.head_product_id = p_product_id OR pg.id = p_product_id)
-    ORDER BY pg.created_at ASC
-    LIMIT 1
-  )
-  SELECT public.resolve_group_member_stock_key(pgi.trade_item_id) AS k,
-         pgi.sort_order::int AS ord
-  FROM public.product_group_items pgi
-  JOIN grp ON grp.group_id = pgi.product_group_id
-  WHERE public.resolve_group_member_stock_key(pgi.trade_item_id) IS NOT NULL
-  ORDER BY pgi.sort_order ASC NULLS LAST, pgi.created_at ASC;
-$function$
+AS $function$
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'get_group_allocation_keys');
+  RETURN QUERY
+  WITH grp AS (
+    SELECT pg.id AS group_id FROM public.product_groups pg
+     WHERE pg.is_active = true AND (pg.head_product_id = p_product_id OR pg.id = p_product_id)
+     ORDER BY pg.created_at ASC LIMIT 1
+  )
+  SELECT public.resolve_group_member_stock_key(pgi.trade_item_id), pgi.sort_order::int
+    FROM public.product_group_items pgi
+    JOIN grp ON grp.group_id = pgi.product_group_id
+   WHERE public.resolve_group_member_stock_key(pgi.trade_item_id) IS NOT NULL
+   ORDER BY pgi.sort_order ASC NULLS LAST, pgi.created_at ASC;
+END $function$
 ;
 REVOKE ALL ON FUNCTION get_group_allocation_keys(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION get_group_allocation_keys(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION get_group_allocation_keys(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION get_group_allocation_keys(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_group_head_key(p_group_id uuid)
  RETURNS text
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$
-  WITH top_member AS (
-    SELECT public.resolve_group_member_stock_key(pgi.trade_item_id) AS k
-    FROM public.product_group_items pgi
-    WHERE pgi.product_group_id = p_group_id
-    ORDER BY pgi.sort_order ASC NULLS LAST, pgi.created_at ASC
-    LIMIT 1
-  ), g AS (
-    SELECT head_product_id, head_trade_item_floriday_id
-    FROM public.product_groups
-    WHERE id = p_group_id AND is_active = true
-    LIMIT 1
-  )
-  SELECT COALESCE(
-    (SELECT k FROM top_member WHERE k IS NOT NULL AND k <> ''),
-    (SELECT head_trade_item_floriday_id FROM g WHERE head_trade_item_floriday_id IS NOT NULL AND head_trade_item_floriday_id <> ''),
-    (SELECT 'product:' || head_product_id::text FROM g WHERE head_product_id IS NOT NULL)
-  );
-$function$
+AS $function$
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'get_group_head_key');
+  RETURN (
+  WITH top_member AS (
+    SELECT public.resolve_group_member_stock_key(pgi.trade_item_id) AS k
+      FROM public.product_group_items pgi WHERE pgi.product_group_id = p_group_id
+     ORDER BY pgi.sort_order ASC NULLS LAST, pgi.created_at ASC LIMIT 1
+  ), g AS (
+    SELECT head_product_id, head_trade_item_floriday_id FROM public.product_groups
+     WHERE id = p_group_id AND is_active = true LIMIT 1
+  )
+  SELECT COALESCE(
+    (SELECT top_member.k FROM top_member WHERE top_member.k IS NOT NULL AND top_member.k <> ''),
+    (SELECT head_trade_item_floriday_id FROM g WHERE head_trade_item_floriday_id IS NOT NULL AND head_trade_item_floriday_id <> ''),
+    (SELECT 'product:' || head_product_id::text FROM g WHERE head_product_id IS NOT NULL)));
+END $function$
 ;
 REVOKE ALL ON FUNCTION get_group_head_key(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION get_group_head_key(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION get_group_head_key(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION get_group_head_key(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_product_stock(p_product_id uuid)
@@ -4536,10 +4489,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION merge_products(uuid,uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION merge_products(uuid,uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION merge_products(uuid,uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION merge_products(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.normalize_order_source(p_src text)
@@ -5101,10 +5050,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION promote_trade_item_key(text,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION promote_trade_item_key(text,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION promote_trade_item_key(text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION promote_trade_item_key(text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_all_reserved_stock()
@@ -5313,10 +5258,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION recompute_all_reserved_stock() FROM PUBLIC;
 REVOKE ALL ON FUNCTION recompute_all_reserved_stock() FROM anon;
-REVOKE EXECUTE ON FUNCTION recompute_all_reserved_stock() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO authenticated;
-GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO service_role;
-REVOKE EXECUTE ON FUNCTION recompute_all_reserved_stock() FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_order_status(p_order_id uuid)
@@ -5372,10 +5313,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION recompute_order_status(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION recompute_order_status(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION recompute_order_status(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION recompute_order_status(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_reserved_for_order(p_order_id uuid)
@@ -5398,10 +5335,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION recompute_reserved_for_order(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION recompute_reserved_for_order(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_reserved_stock(p_trade_item_key text)
@@ -5507,10 +5440,6 @@ $function$
 ;
 REVOKE ALL ON FUNCTION recompute_reserved_stock(text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION recompute_reserved_stock(text) FROM anon;
-REVOKE EXECUTE ON FUNCTION recompute_reserved_stock(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO authenticated;
-GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO service_role;
-REVOKE EXECUTE ON FUNCTION recompute_reserved_stock(text) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.requeue_skipped_stock_rows(p_status text, p_connection_id uuid, p_trade_item_id text DEFAULT NULL::text)
@@ -5647,57 +5576,36 @@ $function$
 ;
 REVOKE ALL ON FUNCTION resolve_group_allocation(uuid,integer) FROM PUBLIC;
 REVOKE ALL ON FUNCTION resolve_group_allocation(uuid,integer) FROM anon;
-REVOKE EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO authenticated;
-GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO service_role;
-REVOKE EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_group_member_stock_key(p_trade_item_id text)
  RETURNS text
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT CASE
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'resolve_group_member_stock_key');
+  RETURN (SELECT CASE
     WHEN p_trade_item_id IS NULL OR btrim(p_trade_item_id) = '' THEN NULL
     WHEN p_trade_item_id LIKE 'draft:%' OR p_trade_item_id LIKE 'group:%' THEN p_trade_item_id
     WHEN p_trade_item_id LIKE 'product:%' THEN COALESCE(
-      (
-        SELECT COALESCE(
-          NULLIF(btrim(COALESCE(p.floriday_trade_item_id, '')), ''),
-          NULLIF(btrim(COALESCE(p.trade_item_key, '')), ''),
-          p.id::text
-        )
-        FROM public.products p
-        WHERE p.id::text = substring(p_trade_item_id from 9)
-        LIMIT 1
-      ),
-      p_trade_item_id
-    )
+      (SELECT COALESCE(NULLIF(btrim(COALESCE(p.floriday_trade_item_id, '')), ''),
+                       NULLIF(btrim(COALESCE(p.trade_item_key, '')), ''), p.id::text)
+         FROM public.products p WHERE p.id::text = substring(p_trade_item_id from 9) LIMIT 1),
+      p_trade_item_id)
     WHEN EXISTS (SELECT 1 FROM public.products p WHERE p.id::text = p_trade_item_id) THEN (
-      SELECT COALESCE(
-        NULLIF(btrim(COALESCE(p.floriday_trade_item_id, '')), ''),
-        NULLIF(btrim(COALESCE(p.trade_item_key, '')), ''),
-        p.id::text
-      )
-      FROM public.products p
-      WHERE p.id::text = p_trade_item_id
-      LIMIT 1
-    )
-    WHEN EXISTS (
-      SELECT 1 FROM public.trade_item_drafts d WHERE d.id::text = p_trade_item_id
-    ) THEN 'draft:' || p_trade_item_id
-    WHEN EXISTS (
-      SELECT 1 FROM public.trade_item_stock s WHERE s.trade_item_key = 'draft:' || p_trade_item_id
-    ) THEN 'draft:' || p_trade_item_id
+      SELECT COALESCE(NULLIF(btrim(COALESCE(p.floriday_trade_item_id, '')), ''),
+                      NULLIF(btrim(COALESCE(p.trade_item_key, '')), ''), p.id::text)
+        FROM public.products p WHERE p.id::text = p_trade_item_id LIMIT 1)
+    WHEN EXISTS (SELECT 1 FROM public.trade_item_drafts d WHERE d.id::text = p_trade_item_id) THEN 'draft:' || p_trade_item_id
+    WHEN EXISTS (SELECT 1 FROM public.trade_item_stock s WHERE s.trade_item_key = 'draft:' || p_trade_item_id) THEN 'draft:' || p_trade_item_id
     ELSE p_trade_item_id
-  END;
-$function$
+  END);
+END $function$
 ;
 REVOKE ALL ON FUNCTION resolve_group_member_stock_key(text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION resolve_group_member_stock_key(text) FROM anon;
-REVOKE EXECUTE ON FUNCTION resolve_group_member_stock_key(text) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_group_member_stock_key(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_group_member_stock_key(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_product_id_for_item(p_product_name text)
@@ -5718,37 +5626,25 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION resolve_product_id_for_item(text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION resolve_product_id_for_item(text) FROM anon;
-REVOKE EXECUTE ON FUNCTION resolve_product_id_for_item(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO authenticated;
-GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO service_role;
-REVOKE EXECUTE ON FUNCTION resolve_product_id_for_item(text) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_stock_trade_item_key(p_product_id uuid)
  RETURNS text
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$
-  SELECT COALESCE(
-    (
-      SELECT hp.trade_item_key
-      FROM public.product_groups pg
-      JOIN public.products hp ON hp.id = pg.head_product_id
-      WHERE pg.id = p_product_id
-        AND pg.is_active = true
-      LIMIT 1
-    ),
-    (SELECT trade_item_key FROM public.products WHERE id = p_product_id)
-  );
-$function$
+AS $function$
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'resolve_stock_trade_item_key');
+  RETURN COALESCE(
+    (SELECT hp.trade_item_key FROM public.product_groups pg
+       JOIN public.products hp ON hp.id = pg.head_product_id
+      WHERE pg.id = p_product_id AND pg.is_active = true LIMIT 1),
+    (SELECT trade_item_key FROM public.products WHERE id = p_product_id));
+END $function$
 ;
 REVOKE ALL ON FUNCTION resolve_stock_trade_item_key(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION resolve_stock_trade_item_key(uuid) FROM anon;
-REVOKE EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO authenticated;
-GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO service_role;
-REVOKE EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.reverse_production(p_parent_key text, p_quantity numeric, p_user_id uuid DEFAULT NULL::uuid, p_connection_id uuid DEFAULT NULL::uuid, p_reason text DEFAULT NULL::text)
@@ -5929,10 +5825,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_continuous_stock_sync() FROM PUBLIC;
 REVOKE ALL ON FUNCTION run_floriday_continuous_stock_sync() FROM anon;
-REVOKE EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO authenticated;
-GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO service_role;
-REVOKE EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO authenticated;
 GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_follow()
@@ -6035,10 +5927,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION run_logistics_tasks_dispatch() FROM PUBLIC;
 REVOKE ALL ON FUNCTION run_logistics_tasks_dispatch() FROM anon;
-REVOKE EXECUTE ON FUNCTION run_logistics_tasks_dispatch() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO authenticated;
-GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO service_role;
-REVOKE EXECUTE ON FUNCTION run_logistics_tasks_dispatch() FROM anon;
 GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO authenticated;
 GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO service_role;
 CREATE OR REPLACE FUNCTION public.self_heal_floriday_links()
@@ -6100,10 +5988,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION self_heal_floriday_links() FROM PUBLIC;
 REVOKE ALL ON FUNCTION self_heal_floriday_links() FROM anon;
-REVOKE EXECUTE ON FUNCTION self_heal_floriday_links() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO authenticated;
-GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO service_role;
-REVOKE EXECUTE ON FUNCTION self_heal_floriday_links() FROM anon;
 GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO authenticated;
 GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO service_role;
 CREATE OR REPLACE FUNCTION public.set_module_runtime_config_updated_at()
@@ -6212,10 +6096,6 @@ END; $function$
 ;
 REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.set_updated_at_order_fust_bookings()
@@ -6736,29 +6616,25 @@ GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO authenticated;
 GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO service_role;
 CREATE OR REPLACE FUNCTION public.trade_item_stock_duplicates()
  RETURNS TABLE(product_id uuid, product_name text, keys text[], row_count integer)
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT p.id,
-         p.product,
-         array_agg(ts.trade_item_key ORDER BY ts.trade_item_key),
-         count(*)::int
-  FROM public.products p
-  JOIN public.trade_item_stock ts
-    ON ts.trade_item_key = p.id::text
-    OR ts.trade_item_key = 'product:' || p.id::text
-    OR (p.floriday_trade_item_id IS NOT NULL AND ts.trade_item_key = p.floriday_trade_item_id)
-  GROUP BY p.id, p.product
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'trade_item_stock_duplicates');
+  RETURN QUERY
+  SELECT p.id, p.product, array_agg(ts.trade_item_key ORDER BY ts.trade_item_key), count(*)::int
+    FROM public.products p
+    JOIN public.trade_item_stock ts
+      ON ts.trade_item_key = p.id::text
+      OR ts.trade_item_key = 'product:' || p.id::text
+      OR (p.floriday_trade_item_id IS NOT NULL AND ts.trade_item_key = p.floriday_trade_item_id)
+   GROUP BY p.id, p.product
   HAVING count(*) > 1;
-$function$
+END $function$
 ;
 REVOKE ALL ON FUNCTION trade_item_stock_duplicates() FROM PUBLIC;
 REVOKE ALL ON FUNCTION trade_item_stock_duplicates() FROM anon;
-REVOKE EXECUTE ON FUNCTION trade_item_stock_duplicates() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO authenticated;
-GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO service_role;
-REVOKE EXECUTE ON FUNCTION trade_item_stock_duplicates() FROM anon;
 GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO authenticated;
 GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_cart_numbers_sync_order_status_fn()
@@ -8045,10 +7921,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) FROM anon;
-REVOKE EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) TO authenticated;
-GRANT EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) TO service_role;
-REVOKE EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_afboeken(uuid,text,numeric,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_alert_floriday_not_updated(p_key text, p_qty numeric, p_order_id uuid, p_order_item_id uuid)
@@ -9306,10 +9178,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_correctie_1136(boolean) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_correctie_1136(boolean) FROM anon;
-REVOKE EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) TO authenticated;
-GRANT EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) TO service_role;
-REVOKE EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_correctie_1136(boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_correctie_1140(p_uitvoeren boolean DEFAULT false)
@@ -9524,7 +9392,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_defaults_versie()
  LANGUAGE sql
  IMMUTABLE
  SET search_path TO 'public'
-AS $function$ SELECT 3 $function$
+AS $function$ SELECT 4 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_defaults_versie() FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_defaults_versie() FROM anon;
@@ -9610,7 +9478,7 @@ DECLARE
   v_ph text[] := ARRAY['artikelcode','artikelnummer','naam','name','code','article code','articlecode','test','-','x','nvt','n.v.t.','tbd','todo'];
   v_lc jsonb := '[{"code":"AUCTION_TROLLEY","naam":"Stapelwagen","volgorde":1},{"code":"DANISH_TROLLEY","naam":"Deense container","volgorde":2},{"code":"EURO_TROLLEY","naam":"Euro-rolcontainer","volgorde":3},{"code":"PALLET","naam":"Pallet","volgorde":4},{"code":"EURO_PALLET","naam":"Euro-pallet","volgorde":5},{"code":"NONE","naam":"Geen ladingdrager","volgorde":6}]';
   v_vervallen text[] := ARRAY[]::text[];
-  n_ph int := 0; n_lc_nieuw int := 0; n_lc_bij int := 0; n_lc_uit int := 0; n_lim int := 0; n_inst int := 0; n_fust int := 0;
+  n_ph int := 0; n_lc_nieuw int := 0; n_lc_bij int := 0; n_lc_uit int := 0; n_lim int := 0; n_inst int := 0; n_fust int := 0; n_sch int := 0;
   v_idx text := 'bestaat'; v_job text := 'bestaat'; v_res jsonb; v_job_ok boolean;
 BEGIN
   PERFORM public.voorraad_vereis('ingelogd', 'voorraad_ensure_defaults');
@@ -9623,6 +9491,7 @@ BEGIN
        AND EXISTS (SELECT 1 FROM public.voorraad_load_carrier_types)
        AND EXISTS (SELECT 1 FROM public.voorraad_instellingen WHERE id)
        AND NOT EXISTS (SELECT 1 FROM public.fust_types WHERE saldo_bijhouden IS NULL)
+       AND (SELECT count(*) FROM public.module_runtime_config WHERE key LIKE 'voorraad_hook_enabled.%') >= 7
        AND v_job_ok THEN
       RETURN jsonb_build_object('ok', true, 'versie', v_versie, 'overgeslagen', true);
     END IF;
@@ -9654,6 +9523,21 @@ BEGIN
     UPDATE public.fust_types SET saldo_bijhouden = NOT COALESCE(vbn_code IN (999, 800), false) WHERE saldo_bijhouden IS NULL;
     GET DIAGNOSTICS n_fust = ROW_COUNT;
 
+    -- Schakelaars van de verwerkers: alleen aanmaken als ze ontbreken, nooit overschrijven.
+    -- 'standaard' = dezelfde regel als zonder rij (aan zolang er een ERP-leidend artikel is).
+    PERFORM set_config('voorraad.schakelaar_defaults', 'aan', true);
+    INSERT INTO public.module_runtime_config(key, value) VALUES
+      ('voorraad_hook_enabled.follow_floriday', 'true'),
+      ('voorraad_hook_enabled.floriday_versies', 'true'),
+      ('voorraad_hook_enabled.floriday_base_supply', 'standaard'),
+      ('voorraad_hook_enabled.logistics_tasks', 'standaard'),
+      ('voorraad_hook_enabled.stock_reconcile', 'false'),
+      ('voorraad_hook_enabled.continuous_stock', 'false'),
+      ('voorraad_hook_enabled.continuous_stock_pull', 'false')
+      ON CONFLICT (key) DO NOTHING;
+    GET DIAGNOSTICS n_sch = ROW_COUNT;
+    PERFORM set_config('voorraad.schakelaar_defaults', '', true);
+
     -- Unieke index op het Floriday-id; overslaan (en melden in de installatiecontrole) bij dubbelen.
     IF NOT EXISTS (SELECT 1 FROM pg_indexes WHERE schemaname = 'public' AND indexname = 'products_floriday_trade_item_id_uniek') THEN
       IF jsonb_array_length(public.voorraad_floriday_dubbele_ids()) = 0 THEN
@@ -9677,7 +9561,7 @@ BEGIN
 
     v_res := jsonb_build_object('plaatshoudercodes_toegevoegd', n_ph, 'ladingdragers_toegevoegd', n_lc_nieuw,
       'ladingdragers_bijgewerkt', n_lc_bij, 'ladingdragers_niet_actief', n_lc_uit, 'herberekenlimieten_aangemaakt', n_lim,
-      'instellingen_aangemaakt', n_inst, 'fustsoorten_saldo_ingevuld', n_fust, 'unieke_index', v_idx, 'uurlijkse_controle', v_job);
+      'instellingen_aangemaakt', n_inst, 'fustsoorten_saldo_ingevuld', n_fust, 'unieke_index', v_idx, 'uurlijkse_controle', v_job, 'schakelaars_aangemaakt', n_sch);
     INSERT INTO public.voorraad_defaults_state(id, versie, toegepast_at, resultaat) VALUES (true, v_versie, now(), v_res)
       ON CONFLICT (id) DO UPDATE SET versie = EXCLUDED.versie, toegepast_at = EXCLUDED.toegepast_at, resultaat = EXCLUDED.resultaat;
     RETURN jsonb_build_object('ok', true, 'versie', v_versie, 'overgeslagen', false) || v_res;
@@ -9954,15 +9838,17 @@ REVOKE ALL ON FUNCTION voorraad_floriday_artikelen_vangnet() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_floriday_artikelen_vangnet() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_floriday_dubbele_ids()
  RETURNS jsonb
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT COALESCE(jsonb_agg(jsonb_build_object('floriday_id', k, 'artikelen', ids) ORDER BY k), '[]'::jsonb)
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_floriday_dubbele_ids');
+  RETURN (SELECT COALESCE(jsonb_agg(jsonb_build_object('floriday_id', k, 'artikelen', ids) ORDER BY k), '[]'::jsonb)
     FROM (SELECT lower(btrim(floriday_trade_item_id)) k, jsonb_agg(id ORDER BY id) ids
             FROM public.products WHERE NULLIF(btrim(COALESCE(floriday_trade_item_id,'')),'') IS NOT NULL
-           GROUP BY 1 HAVING count(*) > 1) d
-$function$
+           GROUP BY 1 HAVING count(*) > 1) d);
+END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_floriday_dubbele_ids() FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_floriday_dubbele_ids() FROM anon;
@@ -9987,10 +9873,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() FROM anon;
-REVOKE EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() TO authenticated;
-GRANT EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() TO service_role;
-REVOKE EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_floriday_klaarzetten_toegestaan() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_floriday_leads_key(p_key text)
@@ -10363,13 +10245,15 @@ REVOKE ALL ON FUNCTION voorraad_floriday_volgt(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_floriday_volgt(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_fust_bijhouden(p_fust_type_id uuid)
  RETURNS boolean
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT COALESCE(f.saldo_bijhouden, NOT COALESCE(f.vbn_code IN (999, 800), false))
-    FROM public.fust_types f WHERE f.id = p_fust_type_id
-$function$
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_fust_bijhouden');
+  RETURN (SELECT COALESCE(f.saldo_bijhouden, NOT COALESCE(f.vbn_code IN (999, 800), false))
+            FROM public.fust_types f WHERE f.id = p_fust_type_id);
+END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_fust_bijhouden(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_fust_bijhouden(uuid) FROM anon;
@@ -10602,14 +10486,16 @@ GRANT EXECUTE ON FUNCTION voorraad_fust_startmoment_opslaan(uuid,timestamp with
 GRANT EXECUTE ON FUNCTION voorraad_fust_startmoment_opslaan(uuid,timestamp with time zone,integer,jsonb,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_fust_startmoment_van(p_fust_type_id uuid)
  RETURNS timestamp with time zone
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT COALESCE(
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_fust_startmoment_van');
+  RETURN COALESCE(
     (SELECT s.moment FROM public.fust_startmoment s WHERE s.fust_type_id = public.voorraad_active_fust_id(NULL, p_fust_type_id)),
-    (SELECT s.moment FROM public.fust_startmoment s WHERE s.fust_type_id IS NULL))
-$function$
+    (SELECT s.moment FROM public.fust_startmoment s WHERE s.fust_type_id IS NULL));
+END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_fust_startmoment_van(uuid) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_fust_startmoment_van(uuid) FROM anon;
@@ -10617,13 +10503,15 @@ GRANT EXECUTE ON FUNCTION voorraad_fust_startmoment_van(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_fust_startmoment_van(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_fust_voor_startmoment(p_fust_type_id uuid, p_lever date)
  RETURNS boolean
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT p_fust_type_id IS NOT NULL AND p_lever IS NOT NULL
-     AND COALESCE(p_lever < (public.voorraad_fust_startmoment_van(p_fust_type_id) AT TIME ZONE 'Europe/Amsterdam')::date, false)
-$function$
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_fust_voor_startmoment');
+  RETURN p_fust_type_id IS NOT NULL AND p_lever IS NOT NULL
+     AND COALESCE(p_lever < (public.voorraad_fust_startmoment_van(p_fust_type_id) AT TIME ZONE 'Europe/Amsterdam')::date, false);
+END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_fust_voor_startmoment(uuid,date) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_fust_voor_startmoment(uuid,date) FROM anon;
@@ -10739,14 +10627,23 @@ REVOKE ALL ON FUNCTION voorraad_hook_base_url() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_hook_base_url() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_hook_on(p_name text)
  RETURNS boolean
- LANGUAGE sql
+ LANGUAGE plpgsql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
-  SELECT COALESCE((SELECT lower(trim(value)) = 'true' FROM public.module_runtime_config
-                    WHERE key = 'voorraad_hook_enabled.' || p_name),
-                  p_name IN ('floriday_base_supply','logistics_tasks','follow_floriday'));
-$function$
+DECLARE v text;
+BEGIN
+  PERFORM public.voorraad_vereis('server', 'voorraad_hook_on');
+  -- Zelfde regel als src/server-hooks/guard.ts (hookEnabled).
+  SELECT lower(trim(value)) INTO v FROM public.module_runtime_config WHERE key = 'voorraad_hook_enabled.' || p_name;
+  IF v IS NOT NULL AND v <> 'standaard' THEN RETURN v = 'true'; END IF;
+  IF p_name IN ('follow_floriday', 'floriday_versies') THEN RETURN true; END IF;
+  IF p_name IN ('floriday_base_supply', 'logistics_tasks') THEN
+    RETURN EXISTS (SELECT 1 FROM public.floriday_inventory_settings WHERE erp_leading = true)
+        OR EXISTS (SELECT 1 FROM public.floriday_inventory_settings WHERE erp_leading IS NULL AND stock_mode <> 'DISABLED');
+  END IF;
+  RETURN false;
+END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_hook_on(text) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_hook_on(text) FROM anon;
@@ -10781,6 +10678,8 @@ CREATE OR REPLACE FUNCTION public.voorraad_hook_switch_jobs()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  -- Vastleggen van standaardschakelaars verandert niets aan bestaande taken.
+  IF TG_OP = 'INSERT' AND current_setting('voorraad.schakelaar_defaults', true) = 'aan' THEN RETURN NEW; END IF;
   IF NEW.key IN ('voorraad_hook_enabled.continuous_stock','voorraad_hook_enabled.continuous_stock_pull') THEN
     IF public.voorraad_hook_on('continuous_stock') OR public.voorraad_hook_on('continuous_stock_pull') THEN
       IF NOT EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'floriday-continuous-stock-sync') THEN
@@ -11584,10 +11483,6 @@ END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) FROM PUBLIC;
 REVOKE ALL ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) FROM anon;
-REVOKE EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) TO authenticated;
-GRANT EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) TO service_role;
-REVOKE EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_overzicht_orderregel_koppeling(integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_packing_from_floriday(p_product_id uuid, p_uitvoeren boolean)