@flowselections/google-maps-api-installatie-techniek 1.0.4 → 1.0.5

package/dist-lib/components/MapsBeheerPage.js

@@ -4,7 +4,7 @@ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { useServerFn } from "@tanstack/react-start";
 import { Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, Input, Label, Switch, Tabs, TabsContent, TabsList, TabsTrigger, toast, } from "@flowselections/core";
 import { MapPin, RefreshCw, Trash2, Timer } from "lucide-react";
-import { clearMapsCache, getMapsOverview, getMapsStatus, processMapsQueue, purgeExpiredTravelTimes, updateMapsSettings, } from "../lib/maps.functions";
+import { clearMapsCache, getMapsOverview, getMapsStatus, processMapsQueue, purgeExpiredTravelTimes, updateMapsSettings, } from "../lib/maps.functions.js";
 import { MapsStatusPanel } from "./maps/MapsStatusPanel";
 import { MapsDiagnosticsPanel } from "./maps/MapsDiagnosticsPanel";
 function Stat({ label, value }) {

package/dist-lib/components/maps/MapsDiagnosticsPanel.js

@@ -5,7 +5,7 @@ import { useState } from "react";
 import { useServerFn } from "@tanstack/react-start";
 import { Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, } from "@flowselections/core";
 import { AlertTriangle, CheckCircle2, ClipboardCopy, Loader2, XCircle, } from "lucide-react";
-import { getMapsDiagnostics } from "../../lib/maps.functions";
+import { getMapsDiagnostics } from "../../lib/maps.functions.js";
 function formatDateTime(value) {
     const parsed = Date.parse(value);
     if (Number.isNaN(parsed))

package/dist-lib/components/maps/MapsStatusPanel.d.ts

@@ -1,4 +1,4 @@
-import type { MapsConnectionStatus } from "../../lib/central-auth.server";
+import type { MapsConnectionStatus } from "../../lib/central-auth.server.js";
 export declare function MapsStatusPanel({ status, }: {
     status: MapsConnectionStatus | null;
 }): import("react").JSX.Element;

package/dist-lib/components/maps/MapsStatusPanel.js

@@ -6,7 +6,7 @@ import { useServerFn } from "@tanstack/react-start";
 import { useQuery } from "@tanstack/react-query";
 import { Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, toast, } from "@flowselections/core";
 import { AlertTriangle, CheckCircle2, RefreshCw, ShieldCheck, XCircle, } from "lucide-react";
-import { getMapsOverview, testMapsConnection } from "../../lib/maps.functions";
+import { getMapsOverview, testMapsConnection } from "../../lib/maps.functions.js";
 function formatDateTime(value) {
     if (!value)
         return "onbekend";

package/dist-lib/components/settings/MapsSettingsCard.js

@@ -4,7 +4,7 @@ import { useServerFn } from "@tanstack/react-start";
 import { Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, } from "@flowselections/core";
 import { Link } from "@tanstack/react-router";
 import { MapPin } from "lucide-react";
-import { getMapsOverview } from "../../lib/maps.functions";
+import { getMapsOverview } from "../../lib/maps.functions.js";
 export function MapsSettingsCard() {
     const fetchOverview = useServerFn(getMapsOverview);
     const { data } = useQuery({

package/dist-lib/integrations/supabase/client.js

@@ -19,7 +19,7 @@ function createSupabaseClient() {
 }
 let _supabase;
 // Import the supabase client like this:
-// import { supabase } from "../../integrations/supabase/client";
+// import { supabase } from "./client.js";
 export const supabase = new Proxy({}, {
     get(_, prop, receiver) {
         if (!_supabase)

package/dist-lib/integrations/supabase/client.server.js

@@ -20,7 +20,7 @@ function createSupabaseAdminClient() {
 let _supabaseAdmin;
 // Server-side Supabase client with service role - bypasses RLS
 // SECURITY: Only use this for trusted server-side operations, never expose to client code
-// Import like: import { supabaseAdmin } from "../../integrations/supabase/client.server";
+// Import like: import { supabaseAdmin } from "./client.server.js";
 export const supabaseAdmin = new Proxy({}, {
     get(_, prop, receiver) {
         if (!_supabaseAdmin)

package/dist-lib/integrations/supabase/previewAuthStorage.d.ts

@@ -1,6 +1,12 @@
-export declare function brokeredPreviewStorage(): Storage | {
-    getItem: (key: string) => Promise<string | null>;
-    setItem: (key: string, value: string) => Promise<void>;
-    removeItem: (key: string) => Promise<undefined>;
-} | undefined;
+/** Storage accepted by Supabase's `auth.storage` option; `localStorage` and the editor broker both satisfy it. */
+export interface PreviewAuthStorage {
+    getItem: (key: string) => string | null | Promise<string | null>;
+    setItem: (key: string, value: string) => void | Promise<void>;
+    removeItem: (key: string) => void | Promise<void>;
+}
+/**
+ * On a Lovable preview surface, broker the auth session to the editor over
+ * postMessage so the project's preview surfaces share one login; else localStorage.
+ */
+export declare function brokeredPreviewStorage(): PreviewAuthStorage | undefined;
 //# sourceMappingURL=previewAuthStorage.d.ts.map

package/dist-lib/integrations/supabase/previewAuthStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"previewAuthStorage.d.ts","sourceRoot":"","sources":["../../../src/integrations/supabase/previewAuthStorage.ts"],"names":[],"mappings":"AAIA,wBAAgB,sBAAsB;mBA2Db,MAAM;mBAeZ,MAAM,SAAS,MAAM;sBASlB,MAAM;cAK3B"}
+{"version":3,"file":"previewAuthStorage.d.ts","sourceRoot":"","sources":["../../../src/integrations/supabase/previewAuthStorage.ts"],"names":[],"mappings":"AAEA,kHAAkH;AAClH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AA6BD;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,kBAAkB,GAAG,SAAS,CAsGvE"}

package/dist-lib/integrations/supabase/previewAuthStorage.js

@@ -1,6 +1,21 @@
 // This file is automatically generated. Do not edit it directly.
-// On a Lovable preview surface, broker the auth session to the editor over
-// postMessage so the project's preview surfaces share one login; else localStorage.
+const RESULT = 'lovable-preview-auth:result';
+function readBrokerReply(data, requestId) {
+    if (typeof data !== 'object' || data === null)
+        return null;
+    if (!('type' in data) || data.type !== RESULT)
+        return null;
+    if (!('requestId' in data) || data.requestId !== requestId)
+        return null;
+    return {
+        ok: 'ok' in data && Boolean(data.ok),
+        value: 'value' in data && typeof data.value === 'string' ? data.value : null,
+    };
+}
+/**
+ * On a Lovable preview surface, broker the auth session to the editor over
+ * postMessage so the project's preview surfaces share one login; else localStorage.
+ */
 export function brokeredPreviewStorage() {
     if (typeof window === 'undefined')
         return undefined;
@@ -11,10 +26,13 @@ export function brokeredPreviewStorage() {
     // preview--<name> host can't smuggle another project's id.
     const UUID = '[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}';
     const projectId = onPreviewZone
-        ? (host.match(new RegExp('^(?:id-preview(?:-[a-z0-9]+)?|project)--(' + UUID + ')(?:-dev)?(?=\\.|$)', 'i'))?.[1]
-            ?? host.match(new RegExp('^(' + UUID + ')(?=[.-])', 'i'))?.[1])
+        ? (new RegExp('^(?:id-preview(?:-[a-z0-9]+)?|project)--(' + UUID + ')(?:-dev)?(?=\\.|$)', 'i').exec(host)?.[1]
+            ?? new RegExp('^(' + UUID + ')(?=[.-])', 'i').exec(host)?.[1])
         : undefined;
-    const framed = window.parent && window.parent !== window;
+    // lib.dom types window.parent and location.ancestorOrigins as always set, but a
+    // detached frame has no parent and not every browser implements ancestorOrigins.
+    const parentWindow = window.parent;
+    const framed = parentWindow !== null && parentWindow !== window;
     if (!projectId || !framed)
         return localStorage;
     // Post only to the real editor ancestor, validated as a Lovable origin, so the
@@ -23,59 +41,75 @@ export function brokeredPreviewStorage() {
     const EDITOR = dev
         ? /^https:\/\/([a-z0-9-]+\.)*(lovable\.dev|gptengineer\.app)$|^http:\/\/localhost:3000$/
         : /^https:\/\/([a-z0-9-]+\.)*(lovable\.dev|gptengineer\.app)$/;
-    const ancestor = (location.ancestorOrigins && location.ancestorOrigins[0]) || (document.referrer ? new URL(document.referrer).origin : '');
+    const ancestorOrigins = location.ancestorOrigins;
+    const ancestor = ancestorOrigins?.[0] ?? (document.referrer ? new URL(document.referrer).origin : '');
     const editorOrigins = ancestor && EDITOR.test(ancestor)
         ? [ancestor]
         : (dev ? ['https://lovable.dev', 'http://localhost:3000'] : ['https://lovable.dev']);
-    const RESULT = 'lovable-preview-auth:result';
     const TIMEOUT = 2000;
     const newId = () => Math.random().toString(36).slice(2) + Date.now().toString(36);
     const request = (type, key, value) => new Promise((resolve) => {
         const requestId = newId();
         let done = false;
-        let timer;
-        const finish = (r) => {
+        const finish = (reply) => {
             if (done)
                 return;
             done = true;
             clearTimeout(timer);
             window.removeEventListener('message', onMessage);
-            resolve(r);
+            resolve(reply);
         };
         const onMessage = (e) => {
-            if (editorOrigins.indexOf(e.origin) < 0)
+            if (!editorOrigins.includes(e.origin))
                 return;
-            const d = e.data;
-            if (d && d.type === RESULT && d.requestId === requestId)
-                finish(d);
+            const reply = readBrokerReply(e.data, requestId);
+            if (reply)
+                finish(reply);
         };
         window.addEventListener('message', onMessage);
+        const timer = setTimeout(() => { finish(null); }, TIMEOUT);
         const msg = { type, requestId, projectId, key };
         if (value !== undefined)
-            msg['value'] = value;
+            msg.value = value;
         // targetOrigin per trusted editor origin, so a session token never reaches an arbitrary embedder.
         for (const origin of editorOrigins)
             window.parent.postMessage(msg, origin);
-        timer = setTimeout(() => finish(null), TIMEOUT);
     });
     // The editor may not be listening yet at the first getItem, so retry once.
     let firstGet = true;
     const RETRY_DELAY = 250;
+    // Blocked third-party storage throws here; seeding must not break broker reads.
+    const readLocal = (key) => { try {
+        return localStorage.getItem(key);
+    }
+    catch {
+        return undefined;
+    } };
     return {
         getItem: async (key) => {
-            let res = await request('lovable-preview-auth:get', key);
+            // Sent with GET and REMOVE so an editor that never cached this session can check or revoke it.
+            const local = readLocal(key);
+            let res = await request('lovable-preview-auth:get', key, local ?? undefined);
             if (!res && firstGet) {
-                await new Promise((r) => setTimeout(r, RETRY_DELAY));
-                res = await request('lovable-preview-auth:get', key);
+                await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY));
+                res = await request('lovable-preview-auth:get', key, local ?? undefined);
             }
             firstGet = false;
             // '' is the logout tombstone: clear the local copy too so it can't resurrect if
-            // the broker later goes silent. A null reply means never-synced -> keep local.
-            if (res && res.ok && typeof res.value === 'string') {
+            // the broker later goes silent. A null value means never-synced -> keep local.
+            if (res?.ok && res.value !== null) {
                 if (res.value === '') {
-                    localStorage.removeItem(key);
+                    if (local !== undefined && readLocal(key) === local)
+                        localStorage.removeItem(key);
                     return null;
                 }
+                // Seed this origin so a new tab, whose editor holds no session, stays signed in.
+                if (local === null && readLocal(key) === null) {
+                    try {
+                        localStorage.setItem(key, res.value);
+                    }
+                    catch { /* storage full: still return the editor's session */ }
+                }
                 return res.value;
             }
             return localStorage.getItem(key);
@@ -83,7 +117,7 @@ export function brokeredPreviewStorage() {
         setItem: (key, value) => {
             localStorage.setItem(key, value);
             return request('lovable-preview-auth:set', key, value).then((res) => {
-                if (res && res.ok && typeof res.value === 'string' && localStorage.getItem(key) === value) {
+                if (res?.ok && res.value !== null && localStorage.getItem(key) === value) {
                     if (res.value === '')
                         localStorage.removeItem(key);
                     else
@@ -92,8 +126,9 @@ export function brokeredPreviewStorage() {
             });
         },
         removeItem: (key) => {
+            const local = readLocal(key);
             localStorage.removeItem(key);
-            return request('lovable-preview-auth:remove', key).then(() => undefined);
+            return request('lovable-preview-auth:remove', key, local ?? undefined).then(() => { });
         },
     };
 }