@flowselections/logistiek-engine 1.0.183 → 1.0.185

package/db/schema/logistiek-engine.sql

@@ -30674,3 +30674,1429 @@ AS $function$
 $function$;
 REVOKE ALL ON FUNCTION public.logistics_sticker_etiket_status() FROM PUBLIC, anon;
 GRANT EXECUTE ON FUNCTION public.logistics_sticker_etiket_status() TO authenticated, service_role;
+
+
+-- ============================================================================
+-- 1.0.184 — Vervoerder per order (gedeeld contract; de Engine is eigenaar)
+-- ============================================================================
+-- * Kolommen op orders: carrier_id, carrier_source, carrier_reason,
+--   carrier_resolved_at, carrier_set_by, carrier_set_at.
+-- * Eén regel: logistics_resolve_carrier_core (vaste volgorde, op id).
+-- * BEFORE-trigger vult NEW.carrier_* direct (geen extra UPDATE, geen lus).
+-- * Herberekenlijst wordt alleen gevuld door triggers op carriers en
+--   customer_delivery_locations; nooit door de trigger op orders.
+-- * Bestaande orders (vóór installatie) pas na de schakelaar in Beheer.
+-- * Opslaan of wijzigen van een vervoerder verstuurt nooit een mail.
+-- Velden van Afhandeling/Klanten worden via to_jsonb gelezen, zodat dit ook
+-- werkt vóór hun koppelprompts (de stap wordt dan overgeslagen met reden).
+-- ============================================================================
+
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_id uuid;
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_source text;
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_reason text;
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_resolved_at timestamptz;
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_set_by uuid;
+ALTER TABLE public.orders ADD COLUMN IF NOT EXISTS carrier_set_at timestamptz;
+
+DO $fs$ BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'orders_carrier_source_check') THEN
+    ALTER TABLE public.orders ADD CONSTRAINT orders_carrier_source_check CHECK (carrier_source IS NULL OR carrier_source IN
+      ('handmatig','afleverlocatie','afleverlocatie_gln','klant','werkgebied','favoriet','geen','oud'));
+  END IF;
+END $fs$;
+
+DO $fs$ BEGIN
+  IF to_regclass('public.carriers') IS NOT NULL
+     AND NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'orders_carrier_id_fkey') THEN
+    ALTER TABLE public.orders ADD CONSTRAINT orders_carrier_id_fkey FOREIGN KEY (carrier_id)
+      REFERENCES public.carriers(id) ON DELETE SET NULL NOT VALID;
+  END IF;
+END $fs$;
+
+CREATE INDEX IF NOT EXISTS orders_carrier_source_idx ON public.orders (carrier_source);
+
+CREATE TABLE IF NOT EXISTS public.logistics_carrier_settings (
+  id boolean PRIMARY KEY DEFAULT true CHECK (id),
+  installed_at timestamptz NOT NULL DEFAULT now(),
+  backfill_existing boolean NOT NULL DEFAULT false,
+  backfill_set_by uuid,
+  backfill_set_at timestamptz,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+GRANT SELECT ON public.logistics_carrier_settings TO authenticated;
+GRANT ALL ON public.logistics_carrier_settings TO service_role;
+ALTER TABLE public.logistics_carrier_settings ENABLE ROW LEVEL SECURITY;
+DO $fs$ BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename='logistics_carrier_settings' AND policyname='logistics_carrier_settings_read') THEN
+    CREATE POLICY logistics_carrier_settings_read ON public.logistics_carrier_settings FOR SELECT TO authenticated USING (true);
+  END IF;
+END $fs$;
+-- Eén rij per Shell; gegevens gaan niet mee met kloon of schemasync, dus de rij wordt
+-- bij gebruik aangemaakt (standaard "uit"). installed_at = moment van eerste gebruik in deze Shell.
+CREATE OR REPLACE FUNCTION public.logistics_carrier_settings_ensure()
+ RETURNS public.logistics_carrier_settings LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE r public.logistics_carrier_settings;
+BEGIN
+  SELECT * INTO r FROM public.logistics_carrier_settings WHERE id;
+  IF NOT FOUND THEN
+    INSERT INTO public.logistics_carrier_settings (id, backfill_existing) VALUES (true, false)
+    ON CONFLICT (id) DO NOTHING;
+    SELECT * INTO r FROM public.logistics_carrier_settings WHERE id;
+  END IF;
+  RETURN r;
+END $function$;
+REVOKE ALL ON FUNCTION public.logistics_carrier_settings_ensure() FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION public.logistics_carrier_settings_ensure() TO service_role;
+
+-- Zichtbare vastlegging van vervoerderwijzigingen en mislukte bufferherberekening.
+CREATE TABLE IF NOT EXISTS public.logistics_carrier_events (
+  id bigint GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+  order_id uuid NOT NULL,
+  soort text NOT NULL DEFAULT 'info',
+  bericht text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+GRANT SELECT ON public.logistics_carrier_events TO authenticated;
+GRANT ALL ON public.logistics_carrier_events TO service_role;
+ALTER TABLE public.logistics_carrier_events ENABLE ROW LEVEL SECURITY;
+DO $fe$ BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_policies WHERE schemaname='public' AND tablename='logistics_carrier_events' AND policyname='logistics_carrier_events_read') THEN
+    CREATE POLICY logistics_carrier_events_read ON public.logistics_carrier_events FOR SELECT TO authenticated USING (true);
+  END IF;
+END $fe$;
+CREATE INDEX IF NOT EXISTS logistics_carrier_events_order_idx ON public.logistics_carrier_events (order_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS public.logistics_carrier_recalc_queue (
+  order_id uuid PRIMARY KEY,
+  reden text NOT NULL,
+  queued_at timestamptz NOT NULL DEFAULT now(),
+  processed_at timestamptz,
+  last_checked_at timestamptz
+);
+GRANT ALL ON public.logistics_carrier_recalc_queue TO service_role;
+ALTER TABLE public.logistics_carrier_recalc_queue ENABLE ROW LEVEL SECURITY;
+CREATE INDEX IF NOT EXISTS logistics_carrier_recalc_queue_open_idx
+  ON public.logistics_carrier_recalc_queue (queued_at) WHERE processed_at IS NULL;
+
+-- Waarom een vervoerder niet bruikbaar is (NULL = bruikbaar).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_skip_reason(p_carrier_id uuid)
+ RETURNS text LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE c jsonb;
+BEGIN
+  IF p_carrier_id IS NULL THEN RETURN 'is leeg'; END IF;
+  SELECT to_jsonb(ca) INTO c FROM public.carriers ca WHERE ca.id = p_carrier_id;
+  IF c IS NULL THEN RETURN 'bestaat niet (meer)'; END IF;
+  IF nullif(c->>'archived_at', '') IS NOT NULL THEN RETURN coalesce(c->>'name', '?') || ' is gearchiveerd'; END IF;
+  IF NOT (c ? 'carrier_kind') THEN
+    RETURN coalesce(c->>'name', '?') || ' heeft nog geen soort (veld carrier_kind ontbreekt nog; Afhandeling)';
+  END IF;
+  IF coalesce(c->>'carrier_kind', '') NOT IN ('extern', 'eigen_vervoer', 'klant_haalt_op') THEN
+    RETURN coalesce(c->>'name', '?') || ' heeft geen soort ingesteld';
+  END IF;
+  IF c->>'carrier_kind' = 'extern' AND nullif(btrim(coalesce(c->>'email', '')), '') IS NULL THEN
+    RETURN coalesce(c->>'name', '?') || ' heeft geen e-mailadres';
+  END IF;
+  RETURN NULL;
+END $function$;
+
+-- Heeft de vervoerder een ophaalmoment voor deze leverdag?
+CREATE OR REPLACE FUNCTION public.logistics_carrier_picks_up_for(p_carrier_id uuid, p_delivery_date date)
+ RETURNS boolean LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT EXISTS (
+    SELECT 1 FROM public.carriers ca
+      CROSS JOIN LATERAL jsonb_array_elements(CASE WHEN jsonb_typeof(ca.pickup_moments) = 'array' THEN ca.pickup_moments ELSE '[]'::jsonb END) m
+     WHERE ca.id = p_carrier_id AND nullif(m->>'pickup_time', '') IS NOT NULL
+       AND (p_delivery_date IS NULL OR ca.pickup_weekdays IS NULL OR cardinality(ca.pickup_weekdays) = 0
+            OR extract(isodow FROM p_delivery_date - coalesce(nullif(m->>'pickup_days', '')::int, 0))::int = ANY (ca.pickup_weekdays)))
+$function$;
+
+-- Opgemaakt resultaat volgens het contract.
+CREATE OR REPLACE FUNCTION public.logistics_carrier_result(p_carrier_id uuid, p_bron text, p_reden text, p_skips text[])
+ RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE c jsonb; v_kind text; v_name text; v_reden text := p_reden;
+BEGIN
+  IF p_carrier_id IS NOT NULL THEN
+    SELECT to_jsonb(ca) INTO c FROM public.carriers ca WHERE ca.id = p_carrier_id;
+    v_kind := c->>'carrier_kind';
+    v_name := CASE v_kind WHEN 'eigen_vervoer' THEN 'Eigen vervoer' WHEN 'klant_haalt_op' THEN 'Afhalen' ELSE c->>'name' END;
+  END IF;
+  IF coalesce(cardinality(p_skips), 0) > 0 THEN
+    v_reden := v_reden || ' Overgeslagen: ' || array_to_string(p_skips, '; ') || '.';
+  END IF;
+  RETURN jsonb_build_object('carrier_id', p_carrier_id, 'carrier_name', v_name, 'carrier_kind', v_kind,
+    'bron', p_bron, 'reden', v_reden, 'waarschuwing', NULL, 'overgeslagen', to_jsonb(coalesce(p_skips, '{}'::text[])));
+END $function$;
+
+-- Favoriet van Afhandeling op id (afh_favorite_carrier() geeft een rij met carrier_id).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_favorite_id()
+ RETURNS uuid LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE j jsonb;
+BEGIN
+  IF to_regprocedure('public.afh_favorite_carrier()') IS NULL THEN RETURN NULL; END IF;
+  EXECUTE 'SELECT to_jsonb(f) FROM public.afh_favorite_carrier() f LIMIT 1' INTO j;
+  RETURN public.logistics_try_uuid(CASE jsonb_typeof(j) WHEN 'object' THEN coalesce(j->>'carrier_id', j->>'id')
+                                                       WHEN 'string' THEN j#>>'{}' END);
+END $function$;
+
+-- DE regel. p_order = to_jsonb(orders-rij) (of een deel daarvan).
+-- Volgorde: 1 handmatig (en 'oud' uit custom_fields.carrier) -> 2 afleverlocatie
+-- -> 3 GLN-lijst per vervoerder -> 4 standaard van de klant -> 5 werkgebied
+-- (plaats > provincie > land, ophaalmoment op de leverdag) -> 6 favoriet.
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_core(p_order jsonb, p_skip_manual boolean DEFAULT false)
+ RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE
+  cf jsonb := CASE WHEN jsonb_typeof(p_order->'custom_fields') = 'object' THEN p_order->'custom_fields' ELSE '{}'::jsonb END;
+  v_cust uuid := public.logistics_try_uuid(p_order->>'customer_id');
+  v_zonder_datum boolean := coalesce((p_order->>'_zonder_datum')::boolean, false);
+  v_date date; v_loc_raw text; v_loc_id uuid; v_gln text;
+  l jsonb; cu jsonb; v_id uuid; v_skip text; v_skips text[] := '{}'::text[];
+  v_country text; v_prov text; v_city text; v_lvl int; v_any boolean; r record; v_fav text;
+BEGIN
+  IF coalesce(p_order->>'delivery_date', '') ~ '^\d{4}-\d{2}-\d{2}' THEN
+    v_date := left(p_order->>'delivery_date', 10)::date;
+  END IF;
+
+  -- 1. Handmatig gekozen op de order (alleen via logistics_set_order_carrier).
+  IF NOT p_skip_manual AND p_order->>'carrier_source' = 'handmatig' THEN
+    v_id := public.logistics_try_uuid(p_order->>'carrier_id');
+    v_skip := public.logistics_carrier_skip_reason(v_id);
+    IF v_skip IS NULL THEN
+      RETURN public.logistics_carrier_result(v_id, 'handmatig', 'Handmatig gekozen op de order.', v_skips);
+    END IF;
+    v_skips := v_skips || ('handmatige keuze: ' || v_skip);
+  END IF;
+  -- 1b. Overgenomen uit een bestaande custom_fields.carrier (bron 'oud').
+  v_id := public.logistics_try_uuid(cf->>'carrier');
+  IF v_id IS NOT NULL THEN
+    v_skip := public.logistics_carrier_skip_reason(v_id);
+    IF v_skip IS NULL THEN
+      RETURN public.logistics_carrier_result(v_id, 'oud', 'Overgenomen uit de bestaande vervoerder op de order.', v_skips);
+    END IF;
+    v_skips := v_skips || ('bestaande vervoerder op de order: ' || v_skip);
+  END IF;
+
+  -- 2. Afleverlocatie (op id, anders op GLN).
+  v_loc_raw := coalesce(nullif(btrim(cf->>'delivery_location_id'), ''), nullif(btrim(cf->>'delivery_location'), ''));
+  v_loc_id := public.logistics_try_uuid(v_loc_raw);
+  v_gln := coalesce(nullif(btrim(cf->>'delivery_location_gln'), ''), CASE WHEN v_loc_id IS NULL THEN v_loc_raw END);
+  IF v_loc_id IS NOT NULL THEN
+    SELECT to_jsonb(x) INTO l FROM public.customer_delivery_locations x WHERE x.id = v_loc_id;
+  END IF;
+  IF l IS NULL AND v_gln IS NOT NULL THEN
+    SELECT to_jsonb(x) INTO l FROM public.customer_delivery_locations x
+     WHERE x.gln = v_gln
+     ORDER BY (x.customer_id IS NOT DISTINCT FROM v_cust) DESC, x.is_primary DESC NULLS LAST, x.created_at, x.id
+     LIMIT 1;
+  END IF;
+  IF l IS NOT NULL THEN
+    v_gln := coalesce(nullif(btrim(l->>'gln'), ''), v_gln);
+    IF coalesce((l->>'self_pickup')::boolean, false) THEN
+      RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', 'Afhalen', 'carrier_kind', 'klant_haalt_op',
+        'bron', 'afleverlocatie', 'reden', 'Klant haalt zelf op (ingesteld bij de afleverlocatie).'
+          || CASE WHEN cardinality(v_skips) > 0 THEN ' Overgeslagen: ' || array_to_string(v_skips, '; ') || '.' ELSE '' END,
+        'waarschuwing', NULL, 'overgeslagen', to_jsonb(v_skips));
+    END IF;
+    v_id := public.logistics_try_uuid(l->>'carrier_id');
+    IF v_id IS NOT NULL THEN
+      IF coalesce(l->>'carrier_assignment_source', '') <> 'manual' THEN
+        v_skips := v_skips || 'vervoerder bij de afleverlocatie is geen handmatige keuze'::text;
+      ELSE
+        v_skip := public.logistics_carrier_skip_reason(v_id);
+        IF v_skip IS NULL THEN
+          RETURN public.logistics_carrier_result(v_id, 'afleverlocatie', 'Vervoerder van de afleverlocatie.', v_skips);
+        END IF;
+        v_skips := v_skips || ('afleverlocatie: ' || v_skip);
+      END IF;
+    END IF;
+  END IF;
+
+  -- 3. Vervoerder die deze afleverlocatie-GLN bedient (lijst van Afhandeling).
+  IF v_gln IS NOT NULL THEN
+    IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'carriers' AND column_name = 'delivery_location_glns') THEN
+      FOR r IN SELECT ca.id FROM public.carriers ca
+                WHERE coalesce(to_jsonb(ca)->'delivery_location_glns', '[]'::jsonb) ? v_gln
+                ORDER BY ca.sort_order NULLS LAST, ca.id LOOP
+        v_skip := public.logistics_carrier_skip_reason(r.id);
+        IF v_skip IS NULL THEN
+          RETURN public.logistics_carrier_result(r.id, 'afleverlocatie_gln', 'Vervoerder bedient afleverlocatie-GLN ' || v_gln || '.', v_skips);
+        END IF;
+        v_skips := v_skips || ('GLN-lijst: ' || v_skip);
+      END LOOP;
+    ELSE
+      v_skips := v_skips || 'GLN-lijst per vervoerder bestaat nog niet (Afhandeling)'::text;
+    END IF;
+  END IF;
+
+  -- 4. Standaardvervoerder van de klant (veld van Klanten).
+  IF v_cust IS NOT NULL THEN
+    SELECT to_jsonb(x) INTO cu FROM public.customers x WHERE x.id = v_cust;
+    IF cu IS NOT NULL AND NOT (cu ? 'default_carrier_id') THEN
+      v_skips := v_skips || 'standaardvervoerder per klant bestaat nog niet (Klanten)'::text;
+    ELSE
+      v_id := public.logistics_try_uuid(cu->>'default_carrier_id');
+      IF v_id IS NOT NULL THEN
+        v_skip := public.logistics_carrier_skip_reason(v_id);
+        IF v_skip IS NULL THEN
+          RETURN public.logistics_carrier_result(v_id, 'klant', 'Standaardvervoerder van de klant.', v_skips);
+        END IF;
+        v_skips := v_skips || ('standaard van de klant: ' || v_skip);
+      END IF;
+    END IF;
+  END IF;
+
+  -- 5. Werkgebied: plaats > provincie > land, met een ophaalmoment op de leverdag.
+  IF v_date IS NULL AND NOT v_zonder_datum THEN
+    v_skips := v_skips || 'werkgebied: leverdatum onbekend'::text;
+  ELSE
+    BEGIN
+      v_country := public.afh_normalize_country(coalesce(l->>'country', cu->>'country'));
+      v_city := public.afh_city_code(v_country, coalesce(l->>'city', cu->>'city'));
+      v_prov := public.afh_normalize_nl_province(l->>'province');
+    EXCEPTION WHEN undefined_function THEN
+      v_country := upper(nullif(btrim(coalesce(l->>'country', cu->>'country')), ''));
+      v_city := nullif(btrim(coalesce(l->>'city', cu->>'city')), '');
+      v_prov := nullif(btrim(l->>'province'), '');
+    END;
+    FOR v_lvl IN 1..3 LOOP
+      v_any := false;
+      FOR r IN SELECT ca.id FROM public.carriers ca
+                WHERE CASE v_lvl WHEN 1 THEN v_city IS NOT NULL AND v_city = ANY (ca.service_cities)
+                                 WHEN 2 THEN v_prov IS NOT NULL AND v_prov = ANY (ca.service_provinces)
+                                 ELSE v_country IS NOT NULL AND v_country = ANY (ca.service_countries) END
+                ORDER BY ca.sort_order NULLS LAST, ca.id LOOP
+        v_skip := public.logistics_carrier_skip_reason(r.id);
+        IF v_skip IS NULL AND NOT public.logistics_carrier_picks_up_for(r.id, v_date) THEN
+          v_skip := (SELECT name FROM public.carriers WHERE id = r.id) || ' heeft geen ophaalmoment op de leverdag';
+        END IF;
+        IF v_skip IS NULL THEN
+          RETURN public.logistics_carrier_result(r.id, 'werkgebied',
+            'Werkgebied (' || CASE v_lvl WHEN 1 THEN 'plaats' WHEN 2 THEN 'provincie' ELSE 'land' END || ').', v_skips);
+        END IF;
+        v_skips := v_skips || ('werkgebied: ' || v_skip);
+      END LOOP;
+    END LOOP;
+  END IF;
+
+  -- 6. Favoriete vervoerder van de Shell (Afhandeling).
+  IF to_regprocedure('public.afh_favorite_carrier()') IS NULL THEN
+    v_skips := v_skips || 'favoriete vervoerder bestaat nog niet (Afhandeling)'::text;
+  ELSE
+    BEGIN
+      v_fav := public.logistics_carrier_favorite_id()::text;
+    EXCEPTION WHEN OTHERS THEN
+      v_fav := NULL; v_skips := v_skips || ('favoriet niet te lezen: ' || SQLERRM);
+    END;
+    v_id := public.logistics_try_uuid(v_fav);
+    IF v_id IS NULL THEN
+      v_skips := v_skips || 'er is geen favoriete vervoerder ingesteld'::text;
+    ELSE
+      v_skip := public.logistics_carrier_skip_reason(v_id);
+      IF v_skip IS NULL THEN
+        RETURN public.logistics_carrier_result(v_id, 'favoriet', 'Favoriete vervoerder van de Shell.', v_skips);
+      END IF;
+      v_skips := v_skips || ('favoriet: ' || v_skip);
+    END IF;
+  END IF;
+
+  RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', NULL, 'carrier_kind', NULL, 'bron', 'geen',
+    'reden', 'Geen vervoerder: stel een favoriete vervoerder in (Afhandeling → Vervoerders).'
+      || CASE WHEN cardinality(v_skips) > 0 THEN ' Overgeslagen: ' || array_to_string(v_skips, '; ') || '.' ELSE '' END,
+    'waarschuwing', NULL, 'overgeslagen', to_jsonb(v_skips));
+END $function$;
+
+-- Waarom de vervoerder van deze order niet meer automatisch wijzigt (NULL = mag).
+-- "Aangemeld" = vastlegging van Afhandeling in carrier_signup_dispatches (sent_at gevuld,
+-- order_ids bevat de order), gelezen via to_jsonb.
+CREATE OR REPLACE FUNCTION public.logistics_carrier_frozen_reason(p_order_id uuid)
+ RETURNS text LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_locked timestamptz; v_hit boolean;
+BEGIN
+  SELECT plan_locked_at INTO v_locked FROM public.orders WHERE id = p_order_id;
+  IF v_locked IS NOT NULL THEN RETURN 'de planning is vastgezet'; END IF;
+  BEGIN
+    IF public.logistics_order_is_frozen(p_order_id) THEN RETURN 'het picken is begonnen of de order staat op een vastgezette kar'; END IF;
+  EXCEPTION WHEN undefined_function OR undefined_table THEN NULL; END;
+  BEGIN
+    IF public.logistics_order_frozen(p_order_id) THEN RETURN 'de order is gepickt, gecontroleerd of afgemeld'; END IF;
+  EXCEPTION WHEN undefined_function OR undefined_table THEN NULL; END;
+  IF to_regclass('public.carrier_signup_dispatches') IS NOT NULL THEN
+    BEGIN
+      EXECUTE 'SELECT EXISTS (SELECT 1 FROM public.carrier_signup_dispatches d
+                WHERE nullif(to_jsonb(d)->>''sent_at'', '''') IS NOT NULL
+                  AND coalesce(to_jsonb(d)->''order_ids'', ''[]''::jsonb) ? $1)'
+        INTO v_hit USING p_order_id::text;
+      IF v_hit THEN RETURN 'de order is al bij de vervoerder aangemeld'; END IF;
+    EXCEPTION WHEN OTHERS THEN NULL; END;
+  END IF;
+  RETURN NULL;
+END $function$;
+
+-- Vervoerder van een order volgens het contract (alleen lezen).
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier(p_order_id uuid)
+ RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE o jsonb; r jsonb; v_fr text;
+BEGIN
+  SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id;
+  IF o IS NULL THEN
+    RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', NULL, 'carrier_kind', NULL, 'bron', 'geen',
+      'reden', 'Order niet gevonden.', 'waarschuwing', NULL);
+  END IF;
+  r := public.logistics_resolve_carrier_core(o, false);
+  v_fr := public.logistics_carrier_frozen_reason(p_order_id);
+  IF v_fr IS NOT NULL AND o->>'carrier_source' IS NOT NULL
+     AND ((r->>'carrier_id') IS DISTINCT FROM (o->>'carrier_id') OR (r->>'bron') IS DISTINCT FROM (o->>'carrier_source')) THEN
+    r := r || jsonb_build_object('waarschuwing',
+      'Vervoerder zou nu ' || coalesce(r->>'carrier_name', 'geen') || ' zijn; niet aangepast omdat ' || v_fr || '.');
+  END IF;
+  RETURN r || jsonb_build_object('bevroren', v_fr);
+END $function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_many(p_order_ids uuid[])
+ RETURNS TABLE(order_id uuid, resultaat jsonb) LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT x.id, public.logistics_resolve_carrier(x.id) FROM unnest(coalesce(p_order_ids, '{}'::uuid[])) AS x(id)
+$function$;
+
+-- Voor Klanten: dezelfde volgorde zonder stap 1 (geen order, dus geen leverdag).
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location(p_location_id uuid, p_customer_id uuid)
+ RETURNS jsonb LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT public.logistics_resolve_carrier_core(jsonb_build_object(
+    'customer_id', coalesce(p_customer_id, (SELECT l.customer_id FROM public.customer_delivery_locations l WHERE l.id = p_location_id)),
+    'custom_fields', jsonb_build_object('delivery_location_id', p_location_id),
+    '_zonder_datum', true), true)
+$function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location_many(p_location_ids uuid[], p_customer_id uuid)
+ RETURNS TABLE(location_id uuid, resultaat jsonb) LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT x.id, public.logistics_resolve_carrier_for_location(x.id, p_customer_id)
+    FROM unnest(coalesce(p_location_ids, '{}'::uuid[])) AS x(id)
+$function$;
+
+-- Variant voor een hele klantenlijst: [{location_id, customer_id}, ...] (max. 1000 regels).
+CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location_many(p_items jsonb)
+ RETURNS TABLE(location_id uuid, customer_id uuid, carrier_id uuid, carrier_name text, carrier_kind text,
+               bron text, reden text, waarschuwing text)
+ LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE it jsonb; r jsonb; v_loc uuid; v_cust uuid;
+BEGIN
+  IF auth.uid() IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
+  IF p_items IS NULL OR jsonb_typeof(p_items) <> 'array' THEN RAISE EXCEPTION 'p_items moet een lijst zijn: [{location_id, customer_id}, ...]'; END IF;
+  IF jsonb_array_length(p_items) > 1000 THEN RAISE EXCEPTION 'Te veel regels (%); maximaal 1000 per aanroep.', jsonb_array_length(p_items); END IF;
+  FOR it IN SELECT e FROM jsonb_array_elements(p_items) WITH ORDINALITY AS t(e, n) ORDER BY n LOOP
+    v_loc := public.logistics_try_uuid(it->>'location_id');
+    v_cust := public.logistics_try_uuid(it->>'customer_id');
+    IF v_loc IS NULL AND v_cust IS NULL THEN
+      location_id := NULL; customer_id := NULL; carrier_id := NULL; carrier_name := NULL; carrier_kind := NULL;
+      bron := 'geen'; reden := 'Ongeldige regel: geen geldig location_id of customer_id.'; waarschuwing := NULL;
+      RETURN NEXT; CONTINUE;
+    END IF;
+    r := public.logistics_resolve_carrier_for_location(v_loc, v_cust);
+    location_id := v_loc; customer_id := v_cust;
+    carrier_id := public.logistics_try_uuid(r->>'carrier_id'); carrier_name := r->>'carrier_name';
+    carrier_kind := r->>'carrier_kind'; bron := r->>'bron'; reden := r->>'reden'; waarschuwing := r->>'waarschuwing';
+    RETURN NEXT;
+  END LOOP;
+END $function$;
+
+-- Opgeslagen vervoerder (of, zolang nog niet opgeslagen, de regel live; niets schrijven).
+CREATE OR REPLACE FUNCTION public.logistics_order_carrier_info(p_order_id uuid)
+ RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE o jsonb;
+BEGIN
+  SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id;
+  IF o IS NULL THEN RETURN jsonb_build_object('carrier_id', NULL, 'bron', 'geen', 'reden', 'Order niet gevonden.'); END IF;
+  IF o->>'carrier_source' IS NOT NULL THEN
+    IF o->>'carrier_source' = 'afleverlocatie' AND o->>'carrier_id' IS NULL THEN
+      RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', 'Afhalen', 'carrier_kind', 'klant_haalt_op',
+        'bron', o->>'carrier_source', 'reden', o->>'carrier_reason', 'opgeslagen', true);
+    END IF;
+    IF o->>'carrier_id' IS NULL THEN
+      RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', NULL, 'carrier_kind', NULL,
+        'bron', o->>'carrier_source', 'reden', o->>'carrier_reason', 'opgeslagen', true);
+    END IF;
+    RETURN public.logistics_carrier_result((o->>'carrier_id')::uuid, o->>'carrier_source', o->>'carrier_reason', '{}'::text[])
+           || jsonb_build_object('reden', o->>'carrier_reason', 'opgeslagen', true);
+  END IF;
+  RETURN public.logistics_resolve_carrier_core(o, false) || jsonb_build_object('opgeslagen', false);
+END $function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_order_carrier_label(p_order_id uuid)
+ RETURNS text LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT public.logistics_order_carrier_info(p_order_id)->>'carrier_name'
+$function$;
+
+-- Bestaande functie: nu volgens dezelfde regel.
+CREATE OR REPLACE FUNCTION public.logistics_order_carrier_id(p_order_id uuid)
+ RETURNS uuid LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT public.logistics_try_uuid(public.logistics_order_carrier_info(p_order_id)->>'carrier_id')
+$function$;
+
+-- Bestaande functie blijft; dezelfde regel (locatie op id of GLN).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_for_location(p_location text, p_customer_id uuid)
+ RETURNS uuid LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  SELECT public.logistics_try_uuid(public.logistics_resolve_carrier_core(jsonb_build_object(
+    'customer_id', p_customer_id,
+    'custom_fields', jsonb_build_object('delivery_location', nullif(btrim(coalesce(p_location, '')), '')),
+    '_zonder_datum', true), true)->>'carrier_id')
+$function$;
+
+-- BEFORE INSERT/UPDATE op orders: vult NEW.carrier_* direct in.
+-- Geen lus: deze trigger zet nooit iets op de herberekenlijst en schrijft
+-- niets anders weg. Engine-schrijvers zetten logistics.carrier_writer = 'engine'.
+CREATE OR REPLACE FUNCTION public.logistics_orders_carrier_fill()
+ RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE r jsonb; s record;
+BEGIN
+  IF coalesce(current_setting('logistics.carrier_writer', true), '') = 'engine' THEN RETURN NEW; END IF;
+  IF TG_OP = 'INSERT' THEN
+    IF NEW.carrier_source = 'handmatig' THEN RETURN NEW; END IF;
+  ELSE
+    IF OLD.carrier_source = 'handmatig' THEN RETURN NEW; END IF;
+    IF NEW.customer_id IS NOT DISTINCT FROM OLD.customer_id
+       AND NEW.delivery_date IS NOT DISTINCT FROM OLD.delivery_date
+       AND (NEW.custom_fields->>'delivery_location') IS NOT DISTINCT FROM (OLD.custom_fields->>'delivery_location')
+       AND (NEW.custom_fields->>'delivery_location_id') IS NOT DISTINCT FROM (OLD.custom_fields->>'delivery_location_id')
+       AND (NEW.custom_fields->>'delivery_location_gln') IS NOT DISTINCT FROM (OLD.custom_fields->>'delivery_location_gln')
+       AND (NEW.custom_fields->>'carrier') IS NOT DISTINCT FROM (OLD.custom_fields->>'carrier') THEN
+      RETURN NEW;
+    END IF;
+    SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
+    IF OLD.carrier_source IS NULL AND NOT coalesce(s.backfill_existing, false)
+       AND OLD.created_at < coalesce(s.installed_at, now()) THEN
+      RETURN NEW; -- bestaande order: pas na akkoord (schakelaar in Beheer)
+    END IF;
+    IF NEW.plan_locked_at IS NOT NULL OR public.logistics_carrier_frozen_reason(NEW.id) IS NOT NULL THEN
+      RETURN NEW; -- bevroren: alleen waarschuwing bij het lezen
+    END IF;
+  END IF;
+  BEGIN
+    r := public.logistics_resolve_carrier_core(to_jsonb(NEW), false);
+  EXCEPTION WHEN OTHERS THEN
+    r := jsonb_build_object('carrier_id', NULL, 'bron', 'geen',
+      'reden', 'Geen vervoerder: de vervoerder kon niet worden bepaald (' || left(SQLERRM, 200) || ').');
+  END;
+  IF TG_OP = 'INSERT'
+     OR public.logistics_try_uuid(r->>'carrier_id') IS DISTINCT FROM NEW.carrier_id
+     OR (r->>'bron') IS DISTINCT FROM NEW.carrier_source
+     OR (r->>'reden') IS DISTINCT FROM NEW.carrier_reason THEN
+    NEW.carrier_id := public.logistics_try_uuid(r->>'carrier_id');
+    NEW.carrier_source := r->>'bron';
+    NEW.carrier_reason := r->>'reden';
+    NEW.carrier_resolved_at := now();
+  END IF;
+  RETURN NEW;
+END $function$;
+
+DROP TRIGGER IF EXISTS trg_logistics_orders_carrier_fill ON public.orders;
+CREATE TRIGGER trg_logistics_orders_carrier_fill BEFORE INSERT OR UPDATE ON public.orders
+  FOR EACH ROW EXECUTE FUNCTION public.logistics_orders_carrier_fill();
+
+-- AFTER UPDATE: alleen als carrier_id echt verandert en de order niet bevroren is:
+-- buffer opnieuw bepalen (bestaande regels) en de kar opnieuw laten indelen.
+CREATE OR REPLACE FUNCTION public.logistics_orders_carrier_changed()
+ RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_fr text;
+BEGIN
+  IF NEW.deleted_at IS NOT NULL THEN RETURN NULL; END IF;
+  v_fr := public.logistics_carrier_frozen_reason(NEW.id);
+  IF v_fr IS NOT NULL THEN
+    BEGIN
+      INSERT INTO public.logistics_carrier_events(order_id, soort, bericht)
+      VALUES (NEW.id, 'bevroren', 'Vervoerder gewijzigd, maar buffer en kar blijven: ' || v_fr || '.');
+    EXCEPTION WHEN undefined_table THEN NULL; END;
+    RETURN NULL;
+  END IF;
+  BEGIN
+    PERFORM public.logistics_apply_order_buffer(NEW.id);
+  EXCEPTION WHEN OTHERS THEN
+    BEGIN
+      INSERT INTO public.logistics_carrier_events(order_id, soort, bericht)
+      VALUES (NEW.id, 'fout', 'Vervoerder gewijzigd; buffer opnieuw bepalen mislukte: ' || left(SQLERRM, 200));
+    EXCEPTION WHEN undefined_table THEN NULL; END;
+  END;
+  BEGIN
+    PERFORM public.enqueue_cart_replan_if_unlocked(NEW.id);
+  EXCEPTION WHEN OTHERS THEN
+    INSERT INTO public.logistics_carrier_events(order_id, soort, bericht)
+    VALUES (NEW.id, 'fout', 'Vervoerder gewijzigd; opnieuw indelen aanvragen mislukte: ' || left(SQLERRM, 200));
+  END;
+  BEGIN
+    INSERT INTO public.logistics_carrier_events(order_id, soort, bericht)
+    VALUES (NEW.id, 'info', 'Vervoerder gewijzigd (' || coalesce(NEW.carrier_source, '?') || '); buffer en kar opnieuw bepaald.');
+  EXCEPTION WHEN undefined_table THEN NULL; END;
+  RETURN NULL;
+END $function$;
+
+DROP TRIGGER IF EXISTS trg_logistics_orders_carrier_changed ON public.orders;
+CREATE TRIGGER trg_logistics_orders_carrier_changed AFTER UPDATE OF carrier_id ON public.orders
+  FOR EACH ROW WHEN (OLD.carrier_id IS DISTINCT FROM NEW.carrier_id)
+  EXECUTE FUNCTION public.logistics_orders_carrier_changed();
+
+-- Herberekenlijst vullen: alleen open orders, nooit handmatig, bestaande orders pas na de schakelaar.
+CREATE OR REPLACE FUNCTION public.logistics_carrier_enqueue(p_order_ids uuid[], p_reden text)
+ RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE n int;
+BEGIN
+  PERFORM public.logistics_carrier_settings_ensure();
+  INSERT INTO public.logistics_carrier_recalc_queue AS q (order_id, reden)
+  SELECT o.id, p_reden FROM public.orders o
+    JOIN public.logistics_carrier_settings s ON s.id
+   WHERE o.id = ANY (p_order_ids)
+     AND o.deleted_at IS NULL AND o.cancelled_at IS NULL
+     AND o.carrier_source IS DISTINCT FROM 'handmatig'
+     AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date
+     AND (s.backfill_existing OR o.created_at >= s.installed_at)
+  ON CONFLICT (order_id) DO UPDATE SET processed_at = NULL, queued_at = now(), reden = EXCLUDED.reden;
+  GET DIAGNOSTICS n = ROW_COUNT;
+  RETURN n;
+END $function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_carriers_enqueue_orders()
+ RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+BEGIN
+  BEGIN
+    PERFORM public.logistics_carrier_enqueue(ARRAY(
+      SELECT o.id FROM public.orders o
+       WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
+         AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date),
+      'Vervoerdersinstellingen gewijzigd');
+  EXCEPTION WHEN OTHERS THEN NULL; END;
+  RETURN NULL;
+END $function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_locations_enqueue_orders()
+ RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_old_gln text;
+BEGIN
+  IF TG_OP = 'UPDATE' THEN v_old_gln := OLD.gln; END IF;
+  BEGIN
+    PERFORM public.logistics_carrier_enqueue(ARRAY(
+      SELECT o.id FROM public.orders o
+       WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
+         AND ((o.custom_fields->>'delivery_location_id') = NEW.id::text
+           OR (o.custom_fields->>'delivery_location') = NEW.id::text
+           OR (NEW.gln IS NOT NULL AND ((o.custom_fields->>'delivery_location_gln') = NEW.gln OR (o.custom_fields->>'delivery_location') = NEW.gln))
+           OR (v_old_gln IS NOT NULL AND (o.custom_fields->>'delivery_location_gln') = v_old_gln))),
+      'Afleverlocatie gewijzigd');
+  EXCEPTION WHEN OTHERS THEN NULL; END;
+  RETURN NULL;
+END $function$;
+
+DO $fs$ BEGIN
+  IF to_regclass('public.carriers') IS NOT NULL THEN
+    DROP TRIGGER IF EXISTS trg_logistics_carriers_enqueue ON public.carriers;
+    CREATE TRIGGER trg_logistics_carriers_enqueue AFTER INSERT OR UPDATE ON public.carriers
+      FOR EACH STATEMENT EXECUTE FUNCTION public.logistics_carriers_enqueue_orders();
+  ELSE
+    RAISE NOTICE 'logistiek-engine: trigger trg_logistics_carriers_enqueue overgeslagen: tabel carriers ontbreekt';
+  END IF;
+  IF to_regclass('public.customer_delivery_locations') IS NOT NULL THEN
+    DROP TRIGGER IF EXISTS trg_logistics_locations_enqueue ON public.customer_delivery_locations;
+    CREATE TRIGGER trg_logistics_locations_enqueue
+      AFTER INSERT OR UPDATE OF carrier_id, carrier_assignment_source, self_pickup, gln ON public.customer_delivery_locations
+      FOR EACH ROW EXECUTE FUNCTION public.logistics_locations_enqueue_orders();
+  ELSE
+    RAISE NOTICE 'logistiek-engine: trigger trg_logistics_locations_enqueue overgeslagen: tabel customer_delivery_locations ontbreekt';
+  END IF;
+END $fs$;
+
+-- Minuutronde: eerst de herberekenlijst, dan het vangnet (open orders die
+-- langer dan 24 uur niet gecontroleerd zijn). Hooguit p_limit (200) orders per
+-- ronde. Schrijft ALLEEN als carrier_id, bron of reden verschilt.
+CREATE OR REPLACE FUNCTION public.logistics_carrier_recalc_run(p_limit integer DEFAULT 200)
+ RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE s record; r record; o jsonb; v jsonb; v_fr text;
+  n_chk int := 0; n_upd int := 0; n_frozen int := 0; n_hand int := 0; n_err int := 0;
+BEGIN
+  SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
+  IF NOT FOUND THEN RETURN jsonb_build_object('overgeslagen', 'instellingen vervoerder ontbreken'); END IF;
+  FOR r IN
+    WITH kand_open AS (
+      SELECT o.id FROM public.orders o
+       WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
+         AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date
+         AND (s.backfill_existing OR o.created_at >= s.installed_at)
+    ), cand AS (
+      SELECT q.order_id AS id, 1 AS prio, q.queued_at AS t
+        FROM public.logistics_carrier_recalc_queue q JOIN kand_open ON kand_open.id = q.order_id
+       WHERE q.processed_at IS NULL
+      UNION ALL
+      SELECT kand_open.id, 2, coalesce(q.last_checked_at, '-infinity'::timestamptz)
+        FROM kand_open LEFT JOIN public.logistics_carrier_recalc_queue q ON q.order_id = kand_open.id
+       WHERE q.order_id IS NULL OR (q.processed_at IS NOT NULL
+             AND (q.last_checked_at IS NULL OR q.last_checked_at < now() - interval '24 hours'))
+    )
+    SELECT c.id FROM (SELECT DISTINCT ON (cand.id) cand.id, cand.prio, cand.t FROM cand ORDER BY cand.id, cand.prio) c
+     ORDER BY c.prio, c.t LIMIT greatest(1, least(coalesce(p_limit, 200), 1000))
+  LOOP
+    BEGIN
+      SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = r.id FOR UPDATE SKIP LOCKED;
+      IF o IS NULL THEN CONTINUE; END IF;
+      n_chk := n_chk + 1;
+      IF o->>'carrier_source' = 'handmatig' THEN
+        n_hand := n_hand + 1;
+      ELSE
+        v_fr := public.logistics_carrier_frozen_reason(r.id);
+        IF v_fr IS NOT NULL THEN
+          n_frozen := n_frozen + 1;
+        ELSE
+          v := public.logistics_resolve_carrier_core(o, false);
+          IF (v->>'carrier_id') IS DISTINCT FROM (o->>'carrier_id')
+             OR (v->>'bron') IS DISTINCT FROM (o->>'carrier_source')
+             OR (v->>'reden') IS DISTINCT FROM (o->>'carrier_reason') THEN
+            PERFORM set_config('logistics.carrier_writer', 'engine', true);
+            UPDATE public.orders
+               SET carrier_id = public.logistics_try_uuid(v->>'carrier_id'), carrier_source = v->>'bron',
+                   carrier_reason = v->>'reden', carrier_resolved_at = now()
+             WHERE id = r.id;
+            PERFORM set_config('logistics.carrier_writer', '', true);
+            n_upd := n_upd + 1;
+          END IF;
+        END IF;
+      END IF;
+      INSERT INTO public.logistics_carrier_recalc_queue AS q (order_id, reden, processed_at, last_checked_at)
+      VALUES (r.id, 'Vangnet', now(), now())
+      ON CONFLICT (order_id) DO UPDATE SET processed_at = now(), last_checked_at = now();
+    EXCEPTION WHEN OTHERS THEN
+      PERFORM set_config('logistics.carrier_writer', '', true);
+      n_err := n_err + 1;
+    END;
+  END LOOP;
+  RETURN jsonb_build_object('gecontroleerd', n_chk, 'gewijzigd', n_upd, 'bevroren', n_frozen,
+    'handmatig', n_hand, 'fouten', n_err, 'bestaandeOrders', s.backfill_existing);
+END $function$;
+
+-- Handmatig kiezen: de enige manier. NULL = terug naar automatisch. Verstuurt nooit een mail.
+CREATE OR REPLACE FUNCTION public.logistics_set_order_carrier(p_order_id uuid, p_carrier_id uuid)
+ RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_uid uuid := auth.uid(); o jsonb; v_skip text; r jsonb;
+BEGIN
+  IF v_uid IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
+  SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id AND x.deleted_at IS NULL FOR UPDATE;
+  IF o IS NULL THEN RAISE EXCEPTION 'Order niet gevonden.'; END IF;
+  IF p_carrier_id IS NOT NULL THEN
+    v_skip := public.logistics_carrier_skip_reason(p_carrier_id);
+    IF v_skip IS NOT NULL THEN RAISE EXCEPTION 'Deze vervoerder kan niet gekozen worden: %.', v_skip; END IF;
+    r := public.logistics_carrier_result(p_carrier_id, 'handmatig', 'Handmatig gekozen op de order.', '{}'::text[]);
+  ELSE
+    r := public.logistics_resolve_carrier_core(o, true);
+  END IF;
+  PERFORM set_config('logistics.carrier_writer', 'engine', true);
+  UPDATE public.orders
+     SET carrier_id = public.logistics_try_uuid(r->>'carrier_id'), carrier_source = r->>'bron',
+         carrier_reason = r->>'reden', carrier_resolved_at = now(), carrier_set_by = v_uid, carrier_set_at = now()
+   WHERE id = p_order_id;
+  PERFORM set_config('logistics.carrier_writer', '', true);
+  RETURN r || jsonb_build_object('bevroren', public.logistics_carrier_frozen_reason(p_order_id));
+END $function$;
+
+-- Lijst F: wat de regel per bestaande open order zou opslaan (alleen lezen).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_preview_existing(p_limit integer DEFAULT 1000)
+ RETURNS TABLE(order_id uuid, order_number text, order_source text, delivery_date text, huidig_custom_carrier text,
+               carrier_id uuid, carrier_name text, carrier_kind text, bron text, reden text, bevroren text)
+ LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+BEGIN
+  IF auth.uid() IS NOT NULL AND NOT public.logistics_is_beheer() THEN
+    RAISE EXCEPTION 'Alleen beheer mag deze lijst bekijken.';
+  END IF;
+  RETURN QUERY
+  SELECT o.id, o.order_number, o.order_source, o.delivery_date, o.custom_fields->>'carrier',
+         public.logistics_try_uuid(v.r->>'carrier_id'), v.r->>'carrier_name', v.r->>'carrier_kind', v.r->>'bron', v.r->>'reden',
+         public.logistics_carrier_frozen_reason(o.id)
+    FROM public.orders o
+    CROSS JOIN LATERAL (SELECT public.logistics_resolve_carrier_core(to_jsonb(o), false) AS r) v
+   WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL AND o.carrier_source IS NULL
+     AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date
+   ORDER BY o.delivery_date, o.order_number
+   LIMIT greatest(1, coalesce(p_limit, 1000));
+END $function$;
+
+-- Schakelaar "Vervoerder berekenen voor bestaande orders" (alleen beheer).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_set_backfill(p_on boolean)
+ RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+BEGIN
+  IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
+    RAISE EXCEPTION 'Alleen beheer mag deze schakelaar wijzigen.';
+  END IF;
+  PERFORM public.logistics_carrier_settings_ensure();
+  UPDATE public.logistics_carrier_settings
+     SET backfill_existing = coalesce(p_on, false), backfill_set_by = auth.uid(), backfill_set_at = now(), updated_at = now()
+   WHERE id;
+  RETURN (SELECT to_jsonb(s) FROM public.logistics_carrier_settings s WHERE s.id);
+END $function$;
+
+-- 'oud' -> 'handmatig', alleen na akkoord en met exact aantal (alleen beheer).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_promote_oud(p_order_ids uuid[], p_confirm_count integer)
+ RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE n int;
+BEGIN
+  IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
+    RAISE EXCEPTION 'Alleen beheer mag dit doen.';
+  END IF;
+  SELECT count(*) INTO n FROM public.orders WHERE id = ANY (p_order_ids) AND carrier_source = 'oud';
+  IF n IS DISTINCT FROM p_confirm_count THEN
+    RAISE EXCEPTION 'Aantal klopt niet: % orders met bron oud, bevestigd %.', n, p_confirm_count;
+  END IF;
+  PERFORM set_config('logistics.carrier_writer', 'engine', true);
+  UPDATE public.orders SET carrier_source = 'handmatig', carrier_reason = 'Handmatig (overgenomen uit de bestaande vervoerder).',
+         carrier_set_by = auth.uid(), carrier_set_at = now()
+   WHERE id = ANY (p_order_ids) AND carrier_source = 'oud';
+  PERFORM set_config('logistics.carrier_writer', '', true);
+  RETURN n;
+END $function$;
+
+-- Bewaking in Beheer (alleen lezen).
+CREATE OR REPLACE FUNCTION public.logistics_carrier_status()
+ RETURNS jsonb LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE s record; v jsonb;
+BEGIN
+  IF auth.uid() IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
+  SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
+  WITH open_orders AS (
+    SELECT o.id, o.order_number, o.delivery_date, o.carrier_source, o.carrier_reason, o.created_at
+      FROM public.orders o
+     WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
+       AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date
+  )
+  SELECT jsonb_build_object(
+    'zonderVervoerder', count(*) FILTER (WHERE carrier_source = 'geen' OR (carrier_source IS NULL AND created_at >= s.installed_at)),
+    'viaFavoriet', count(*) FILTER (WHERE carrier_source = 'favoriet'),
+    'nogNietBerekend', count(*) FILTER (WHERE carrier_source IS NULL AND created_at < s.installed_at),
+    'bronOud', count(*) FILTER (WHERE carrier_source = 'oud'),
+    'lijstZonder', coalesce(jsonb_agg(jsonb_build_object('orderId', id, 'orderNumber', order_number, 'deliveryDate', delivery_date,
+        'reden', coalesce(carrier_reason, 'Nog niet berekend.')) ORDER BY delivery_date, order_number)
+        FILTER (WHERE carrier_source = 'geen' OR (carrier_source IS NULL AND created_at >= s.installed_at)), '[]'::jsonb),
+    'lijstFavoriet', coalesce(jsonb_agg(jsonb_build_object('orderId', id, 'orderNumber', order_number, 'deliveryDate', delivery_date,
+        'reden', carrier_reason) ORDER BY delivery_date, order_number) FILTER (WHERE carrier_source = 'favoriet'), '[]'::jsonb))
+    INTO v FROM open_orders;
+  RETURN v || jsonb_build_object('bufferFouten', (SELECT count(*) FROM public.logistics_carrier_events e
+      WHERE e.soort = 'fout' AND e.created_at > now() - interval '7 days'), 'bestaandeOrders', coalesce(s.backfill_existing, false),
+    'installedAt', s.installed_at, 'schakelaarGezetDoor', s.backfill_set_by, 'schakelaarGezetOp', s.backfill_set_at);
+END $function$;
+
+-- Installatiecontrole voor de vervoerder-onderdelen (alleen lezen).
+CREATE OR REPLACE FUNCTION public.logistics_install_check()
+ RETURNS TABLE(onderdeel text, ok boolean, toelichting text)
+ LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE c text; f text; t text; v_fav text; n bigint; s record;
+BEGIN
+  -- Engine-onderdelen waar de vervoerder van afhangt + 1.0.179/1.0.182 (functie of tabel op naam).
+  FOREACH f IN ARRAY ARRAY[
+      'f:logistics_try_uuid','f:logistics_tz','f:logistics_is_beheer','f:logistics_buffer_payload','f:logistics_apply_order_buffer',
+      'f:logistics_apply_buffer_decision','f:logistics_rebuffer_pending','f:logistics_departure_calc','f:logistics_own_transport_departure',
+      'f:logistics_order_departure','f:logistics_brief_transport','f:logistics_order_frozen','f:logistics_order_is_frozen',
+      'f:logistics_order_finalize_run','f:run_logistics_tasks_dispatch','f:enqueue_cart_replan_if_unlocked','f:logistics_tick',
+      't:logistics_tick_runs',
+      'f:logistics_belading_bevestig','f:logistics_cart_seq_dubbel','f:logistics_plan_retry_later','f:logistics_own_traysticker_sync',
+      't:logistics_belading_bevestigingen',
+      'f:logistics_sticker_copies','f:logistics_sticker_etiket_status','f:logistics_sticker_order_counts','f:logistics_sticker_sync',
+      'c:logistics_sticker_prints.kopieen_bron',
+      'f:logistics_carrier_settings_ensure','t:logistics_carrier_settings','t:logistics_carrier_recalc_queue','t:logistics_carrier_events',
+      'f:logistics_carrier_status','f:logistics_carrier_set_backfill','f:logistics_carrier_preview_existing','c:control_get_todays_carts.carrier_name'] LOOP
+    onderdeel := 'Engine: ' || substr(f, 3);
+    ok := CASE left(f, 1)
+      WHEN 'f' THEN EXISTS (SELECT 1 FROM pg_proc p WHERE p.pronamespace = 'public'::regnamespace AND p.proname = substr(f, 3))
+      WHEN 't' THEN to_regclass('public.' || substr(f, 3)) IS NOT NULL
+      ELSE CASE WHEN split_part(substr(f, 3), '.', 1) = 'control_get_todays_carts'
+             THEN coalesce(pg_get_function_result(to_regprocedure('public.control_get_todays_carts()')), '') LIKE '%carrier_name%'
+             ELSE EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public'
+                           AND table_name = split_part(substr(f, 3), '.', 1) AND column_name = split_part(substr(f, 3), '.', 2)) END
+    END;
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie (1.0.182 t/m 1.0.184) in dev uitvoeren en via schemasync verspreiden' END;
+    RETURN NEXT;
+  END LOOP;
+  FOREACH c IN ARRAY ARRAY['carrier_id','carrier_source','carrier_reason','carrier_resolved_at','carrier_set_by','carrier_set_at'] LOOP
+    onderdeel := 'orders.' || c;
+    ok := EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public' AND table_name='orders' AND column_name=c);
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie' END; RETURN NEXT;
+  END LOOP;
+  FOREACH f IN ARRAY ARRAY['logistics_resolve_carrier(uuid)','logistics_resolve_carrier_many(uuid[])',
+      'logistics_resolve_carrier_for_location(uuid,uuid)','logistics_resolve_carrier_for_location_many(uuid[],uuid)',
+      'logistics_resolve_carrier_for_location_many(jsonb)',
+      'logistics_set_order_carrier(uuid,uuid)','logistics_carrier_recalc_run(integer)'] LOOP
+    onderdeel := 'functie ' || f; ok := to_regprocedure('public.' || f) IS NOT NULL;
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie' END; RETURN NEXT;
+  END LOOP;
+  FOREACH t IN ARRAY ARRAY['orders:trg_logistics_orders_carrier_fill','orders:trg_logistics_orders_carrier_changed',
+      'carriers:trg_logistics_carriers_enqueue','customer_delivery_locations:trg_logistics_locations_enqueue'] LOOP
+    onderdeel := 'trigger ' || split_part(t, ':', 2);
+    ok := EXISTS (SELECT 1 FROM pg_trigger g WHERE g.tgname = split_part(t, ':', 2)
+                   AND g.tgrelid = to_regclass('public.' || split_part(t, ':', 1)));
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie' END; RETURN NEXT;
+  END LOOP;
+  onderdeel := 'minuutronde rekent vervoerders';
+  ok := EXISTS (SELECT 1 FROM pg_proc WHERE proname = 'logistics_tick' AND prosrc LIKE '%logistics_carrier_recalc_run%');
+  toelichting := CASE WHEN ok THEN 'ja' ELSE 'nee' END; RETURN NEXT;
+  FOREACH c IN ARRAY ARRAY['carrier_kind','is_favorite','archived_at','delivery_location_glns'] LOOP
+    onderdeel := 'Afhandeling: carriers.' || c;
+    ok := EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public' AND table_name='carriers' AND column_name=c);
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Afhandeling' END; RETURN NEXT;
+  END LOOP;
+  FOREACH f IN ARRAY ARRAY['afh_favorite_carrier','afh_city_code','afh_normalize_country','afh_normalize_nl_province'] LOOP
+    onderdeel := 'Afhandeling: ' || f || '()';
+    ok := EXISTS (SELECT 1 FROM pg_proc p WHERE p.pronamespace = 'public'::regnamespace AND p.proname = f);
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Afhandeling' END; RETURN NEXT;
+  END LOOP;
+  onderdeel := 'Favoriete vervoerder ingesteld en bruikbaar';
+  IF to_regprocedure('public.afh_favorite_carrier()') IS NULL THEN ok := false; toelichting := 'functie ontbreekt';
+  ELSE
+    BEGIN v_fav := public.logistics_carrier_favorite_id()::text; EXCEPTION WHEN OTHERS THEN v_fav := NULL; END;
+    ok := public.logistics_try_uuid(v_fav) IS NOT NULL AND public.logistics_carrier_skip_reason(public.logistics_try_uuid(v_fav)) IS NULL;
+    toelichting := CASE WHEN ok THEN 'ja' WHEN v_fav IS NULL THEN 'geen favoriet ingesteld (Afhandeling → Vervoerders)'
+                        ELSE public.logistics_carrier_skip_reason(public.logistics_try_uuid(v_fav)) END;
+  END IF;
+  RETURN NEXT;
+  onderdeel := 'Klanten: customers.default_carrier_id';
+  ok := EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public' AND table_name='customers' AND column_name='default_carrier_id');
+  toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Klanten' END; RETURN NEXT;
+  IF to_regclass('public.logistics_carrier_settings') IS NOT NULL AND to_regclass('public.orders') IS NOT NULL
+     AND EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public' AND table_name='orders' AND column_name='carrier_source') THEN
+    SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
+    EXECUTE $q$SELECT count(*) FROM public.orders o
+      WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
+        AND coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' AND left(o.delivery_date, 10)::date >= current_date
+        AND (o.carrier_source = 'geen' OR (o.carrier_source IS NULL AND o.created_at >= $1))$q$ INTO n USING s.installed_at;
+    onderdeel := 'Open orders zonder vervoerder'; ok := n = 0; toelichting := n || ' order(s)'; RETURN NEXT;
+    onderdeel := 'Schakelaar bestaande orders'; ok := true;
+    toelichting := CASE WHEN coalesce(s.backfill_existing, false) THEN 'aan' ELSE 'uit (bestaande orders wachten op akkoord)' END; RETURN NEXT;
+  END IF;
+END $function$;
+
+-- Buffergegevens: vervoerder van de order (kolom) gaat voor custom_fields.
+CREATE OR REPLACE FUNCTION public.logistics_buffer_payload(p_order_id uuid)
+ RETURNS jsonb
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+  SELECT jsonb_build_object(
+      'orderRef', COALESCE(o.order_number, o.id::text),
+      'checkinAt', COALESCE(cf ->> 'checkin_at', cf ->> 'checkin_moment', cf ->> 'pickup_moment', cf ->> 'pickup_datetime'),
+      'pickupAt', COALESCE(cf ->> 'pickup_datetime', cf ->> 'pickup_moment', cf ->> 'checkin_at'),
+      'customerRef', o.customer_id::text,
+      'floridayCustomerRef', COALESCE(cf ->> 'floriday_customer_id', cf ->> 'floriday_customer_ref'),
+      'floridaySalesOrderRef', COALESCE(o.floriday_sales_order_id::text, cf ->> 'floriday_sales_order_id'),
+      'bvoCustomerRef', COALESCE(cf ->> 'bvo_customer_ref', cf ->> 'bvo_customer_id'),
+      'deliveryLocationRef', COALESCE(cf ->> 'delivery_location_gln', cf ->> 'delivery_location_id', cf ->> 'delivery_location'),
+      'deliveryDate', o.delivery_date::text,
+      'carrierRef', CASE WHEN o.carrier_id IS NOT NULL THEN o.carrier_id::text
+                         WHEN o.carrier_source IS NOT NULL AND o.carrier_source <> 'geen' THEN 'klant_haalt_op'
+                         ELSE COALESCE(cf ->> 'carrier_id', cf ->> 'carrier') END,
+      'loadCarrierType', COALESCE(cf ->> 'load_carrier_type', 'trolley'),
+      'orderType', COALESCE(cf ->> 'order_type', o.order_source, 'standaard'),
+      'isReservation', COALESCE(o.is_reservation, false)
+    )
+  FROM public.orders o
+  CROSS JOIN LATERAL (SELECT COALESCE(o.custom_fields, '{}'::jsonb) AS cf) x
+  WHERE o.id = p_order_id;
+$function$;
+
+-- Vertrek per order: eigen vervoer en afhalen op soort; geen vervoerder = luide reden.
+CREATE OR REPLACE FUNCTION public.logistics_order_departure(p_order_id uuid)
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE o record; v jsonb; v_own jsonb; v_txt text; v_at timestamptz; v_info jsonb;
+BEGIN
+  IF public.logistics_tz() IS NULL THEN
+    RETURN jsonb_build_object('ok', false, 'reason', 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.');
+  END IF;
+  SELECT id, created_at, delivery_date, custom_fields INTO o FROM public.orders WHERE id = p_order_id;
+  IF NOT FOUND OR coalesce(o.delivery_date,'') !~ '^\d{4}-\d{2}-\d{2}' THEN
+    RETURN jsonb_build_object('ok', false, 'reason', 'De leverdatum van de order is onbekend.');
+  END IF;
+
+  v_own := CASE WHEN jsonb_typeof(o.custom_fields->'own_transport') = 'object' THEN o.custom_fields->'own_transport' END;
+  IF v_own IS NOT NULL THEN
+    v_txt := nullif(btrim(coalesce(v_own->>'pickup_at', '')), '');
+    IF v_txt IS NOT NULL THEN
+      IF v_txt !~ '(Z|[+-]\d{2}(:?\d{2})?)$' THEN
+        RETURN jsonb_build_object('ok', false, 'ownTransport', true,
+          'reason', 'De ophaaltijd bij eigen vervoer mist een tijdzone.');
+      END IF;
+      BEGIN
+        v_at := v_txt::timestamptz;
+      EXCEPTION WHEN OTHERS THEN
+        RETURN jsonb_build_object('ok', false, 'ownTransport', true,
+          'reason', 'De ophaaltijd bij eigen vervoer is geen geldige tijd.');
+      END;
+    END IF;
+    RETURN public.logistics_own_transport_departure(left(o.delivery_date,10)::date, v_at);
+  END IF;
+
+  v_info := public.logistics_order_carrier_info(p_order_id);
+  IF v_info->>'carrier_kind' IN ('eigen_vervoer', 'klant_haalt_op') THEN
+    RETURN public.logistics_own_transport_departure(left(o.delivery_date,10)::date, NULL)
+      || jsonb_build_object('carrierKind', v_info->>'carrier_kind', 'carrierLabel', v_info->>'carrier_name',
+                            'carrierSource', v_info->>'bron');
+  END IF;
+  IF public.logistics_try_uuid(v_info->>'carrier_id') IS NULL THEN
+    RETURN jsonb_build_object('ok', false, 'carrierSource', coalesce(v_info->>'bron', 'geen'),
+      'reason', coalesce(v_info->>'reden', 'Geen vervoerder: stel een favoriete vervoerder in (Afhandeling → Vervoerders).'));
+  END IF;
+
+  v := public.logistics_departure_calc((v_info->>'carrier_id')::uuid, left(o.delivery_date,10)::date, o.created_at, NULL);
+  RETURN (v - 'moments') || jsonb_build_object('carrierSource', v_info->>'bron', 'carrierLabel', v_info->>'carrier_name');
+END $function$;
+
+-- Vervoerder op brieven: zelfde regel; eigen vervoer/afhalen als label, nooit "onbekend".
+CREATE OR REPLACE FUNCTION public.logistics_brief_transport(p_order_id uuid, p_cart_id uuid DEFAULT NULL::uuid)
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE
+  o record; v_carrier_id uuid; v_bron text; ca public.carriers%ROWTYPE; v_info jsonb; v_own jsonb;
+  v_naam text; v_code text; v_date date; v_time time; n int;
+  v_wens text; onbekend text[] := '{}'::text[]; uit jsonb := '{}'::jsonb;
+BEGIN
+  SELECT id, custom_fields, floriday_sales_order_id, delivery_date INTO o FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
+  IF o.id IS NULL THEN
+    RETURN jsonb_build_object('onbekend', jsonb_build_array('order'));
+  END IF;
+
+  v_info := public.logistics_order_carrier_info(p_order_id);
+  IF v_info->>'carrier_kind' IN ('eigen_vervoer', 'klant_haalt_op') THEN
+    uit := jsonb_build_object('vervoerder', jsonb_build_object('naam', v_info->>'carrier_name'),
+      'vervoerder_bron', v_info->>'bron', 'carrier_label', v_info->>'carrier_name', 'carrier_kind', v_info->>'carrier_kind');
+    IF coalesce(o.delivery_date, '') ~ '^\d{4}-\d{2}-\d{2}' THEN
+      v_own := public.logistics_own_transport_departure(left(o.delivery_date, 10)::date, NULL);
+      IF coalesce((v_own->>'ok')::boolean, false) AND v_own->>'departureAt' IS NOT NULL THEN
+        uit := uit || jsonb_build_object('ophaalmoment', v_own->>'departureAt');
+      ELSE
+        onbekend := array_append(onbekend, 'ophaalmoment');
+      END IF;
+    ELSE
+      onbekend := array_append(onbekend, 'ophaalmoment');
+    END IF;
+    RETURN uit || jsonb_build_object('onbekend', to_jsonb(onbekend));
+  END IF;
+
+  v_carrier_id := public.logistics_try_uuid(v_info->>'carrier_id');
+  v_bron := v_info->>'bron';
+  IF v_carrier_id IS NOT NULL THEN
+    SELECT * INTO ca FROM public.carriers WHERE id = v_carrier_id;
+  END IF;
+
+  IF ca.id IS NOT NULL AND nullif(trim(ca.name),'') IS NOT NULL THEN
+    uit := uit || jsonb_build_object('vervoerder', jsonb_build_object('naam', ca.name), 'vervoerder_bron', v_bron,
+                                     'carrier_label', ca.name, 'carrier_kind', v_info->>'carrier_kind');
+  ELSE
+    SELECT count(*), min(fc.name), min(nullif(fc.gln_code,'')) INTO n, v_naam, v_code
+      FROM public.floriday_delivery_orders_cache d
+      JOIN public.floriday_carriers_cache fc ON fc.organization_id::text = d.data->>'carrierOrganizationId'
+     WHERE o.floriday_sales_order_id IS NOT NULL
+       AND d.data::text LIKE '%' || o.floriday_sales_order_id::text || '%'
+       AND coalesce(d.is_deleted,false) = false;
+    IF n = 1 AND nullif(trim(v_naam),'') IS NOT NULL THEN
+      uit := uit || jsonb_build_object('vervoerder', jsonb_build_object('naam', v_naam) ||
+             CASE WHEN v_code IS NOT NULL THEN jsonb_build_object('code', v_code) ELSE '{}'::jsonb END,
+             'vervoerder_bron', 'floriday', 'carrier_label', v_naam);
+    ELSE
+      onbekend := array_append(onbekend, CASE WHEN n > 1 THEN 'vervoerder_niet_eenduidig' ELSE 'vervoerder' END);
+    END IF;
+  END IF;
+
+  SELECT pick_date INTO v_date FROM public.logistics_order_pick_day WHERE order_id = p_order_id;
+  IF v_date IS NULL OR ca.id IS NULL OR jsonb_typeof(ca.pickup_moments) IS DISTINCT FROM 'array' THEN
+    onbekend := array_append(onbekend, 'ophaalmoment');
+  ELSIF ca.pickup_weekdays IS NOT NULL AND array_length(ca.pickup_weekdays,1) > 0
+        AND NOT (extract(isodow FROM v_date)::int = ANY (ca.pickup_weekdays)) THEN
+    onbekend := array_append(onbekend, 'ophaalmoment');
+  ELSE
+    v_wens := nullif(o.custom_fields->>'pickup_moment','');
+    SELECT count(*), min(nullif(m->>'pickup_time','')::time) INTO n, v_time
+      FROM jsonb_array_elements(ca.pickup_moments) m
+     WHERE nullif(m->>'pickup_time','') IS NOT NULL
+       AND coalesce(nullif(m->>'pickup_days',''),'0') = '0'
+       AND (v_wens IS NULL OR left(m->>'pickup_time',5) = left(v_wens,5));
+    IF n = 1 THEN
+      uit := uit || jsonb_build_object('ophaalmoment',
+        to_char(((v_date + v_time) AT TIME ZONE public.logistics_tz()) AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"'));
+    ELSE
+      onbekend := array_append(onbekend, CASE WHEN n > 1 THEN 'ophaalmoment_niet_eenduidig' ELSE 'ophaalmoment' END);
+    END IF;
+  END IF;
+
+  RETURN uit || jsonb_build_object('onbekend', to_jsonb(onbekend));
+END;
+$function$;
+
+-- Minuutronde met stap 'vervoerder' (hooguit 200 orders per ronde).
+CREATE OR REPLACE FUNCTION public.logistics_tick()
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE v_result jsonb := '{}'::jsonb; v_start timestamptz := clock_timestamp(); v_t timestamptz; v_err boolean := false;
+BEGIN
+  v_t := clock_timestamp();
+  BEGIN
+    PERFORM set_config('statement_timeout', '10000', true);
+    v_result := v_result || jsonb_build_object('vervoerder', public.logistics_carrier_recalc_run(200));
+  EXCEPTION WHEN OTHERS THEN
+    v_err := true; v_result := v_result || jsonb_build_object('vervoerder', left(SQLERRM, 200));
+  END;
+  v_result := v_result || jsonb_build_object('vervoerder_ms', (extract(epoch from clock_timestamp()-v_t)*1000)::int);
+
+  v_t := clock_timestamp();
+  BEGIN
+    PERFORM set_config('statement_timeout', '15000', true);
+    PERFORM public.logistics_rebuffer_pending();
+    v_result := v_result || jsonb_build_object('rebuffer', 'ok');
+  EXCEPTION WHEN OTHERS THEN
+    v_err := true;
+    IF SQLERRM ILIKE '%tijdzone%' THEN
+      v_result := v_result || jsonb_build_object('rebuffer', 'overgeslagen: tijdzone ontbreekt in Werktijden');
+      BEGIN
+        UPDATE public.logistics_rebuffer_state SET last_error = 'Herindelen overgeslagen: de tijdzone ontbreekt in Werktijden.', updated_at = now() WHERE id;
+      EXCEPTION WHEN OTHERS THEN NULL; END;
+    ELSE
+      v_result := v_result || jsonb_build_object('rebuffer', left(SQLERRM, 200));
+    END IF;
+  END;
+  v_result := v_result || jsonb_build_object('rebuffer_ms', (extract(epoch from clock_timestamp()-v_t)*1000)::int);
+
+  v_t := clock_timestamp();
+  BEGIN
+    PERFORM set_config('statement_timeout', '20000', true);
+    PERFORM public.run_logistics_tasks_dispatch();
+    v_result := v_result || jsonb_build_object('taken', 'ok');
+  EXCEPTION WHEN OTHERS THEN
+    v_err := true; v_result := v_result || jsonb_build_object('taken', left(SQLERRM, 200));
+  END;
+  v_result := v_result || jsonb_build_object('taken_ms', (extract(epoch from clock_timestamp()-v_t)*1000)::int);
+
+  v_t := clock_timestamp();
+  BEGIN
+    PERFORM set_config('statement_timeout', '20000', true);
+    v_result := v_result || jsonb_build_object('afgerond', public.logistics_order_finalize_run(25, 120));
+  EXCEPTION WHEN OTHERS THEN
+    v_err := true; v_result := v_result || jsonb_build_object('afgerond', left(SQLERRM, 200));
+  END;
+  v_result := v_result || jsonb_build_object('afgerond_ms', (extract(epoch from clock_timestamp()-v_t)*1000)::int);
+
+  BEGIN
+    INSERT INTO public.logistics_tick_runs(started_at, finished_at, duration_ms, has_error, steps)
+    VALUES (v_start, clock_timestamp(), (extract(epoch from clock_timestamp()-v_start)*1000)::int, v_err, v_result);
+  EXCEPTION WHEN OTHERS THEN NULL;
+  END;
+  PERFORM set_config('statement_timeout', '30000', true);
+  RETURN v_result;
+END $function$;
+
+-- Rechten: API-functies voor ingelogde gebruikers; interne functies alleen service_role.
+DO $fs$ DECLARE f text; BEGIN
+  FOREACH f IN ARRAY ARRAY['logistics_resolve_carrier(uuid)','logistics_resolve_carrier_many(uuid[])',
+      'logistics_resolve_carrier_for_location(uuid,uuid)','logistics_resolve_carrier_for_location_many(uuid[],uuid)',
+      'logistics_set_order_carrier(uuid,uuid)','logistics_carrier_status()','logistics_carrier_set_backfill(boolean)',
+      'logistics_carrier_preview_existing(integer)','logistics_carrier_promote_oud(uuid[],integer)',
+      'logistics_order_carrier_label(uuid)','logistics_install_check()','logistics_order_departure(uuid)','logistics_resolve_carrier_for_location_many(jsonb)'] LOOP
+    EXECUTE format('REVOKE ALL ON FUNCTION public.%s FROM PUBLIC, anon', f);
+    EXECUTE format('GRANT EXECUTE ON FUNCTION public.%s TO authenticated, service_role', f);
+  END LOOP;
+  FOREACH f IN ARRAY ARRAY['logistics_carrier_skip_reason(uuid)','logistics_carrier_picks_up_for(uuid,date)','logistics_carrier_favorite_id()',
+      'logistics_carrier_result(uuid,text,text,text[])','logistics_resolve_carrier_core(jsonb,boolean)',
+      'logistics_carrier_frozen_reason(uuid)','logistics_order_carrier_info(uuid)','logistics_carrier_enqueue(uuid[],text)',
+      'logistics_carrier_recalc_run(integer)','logistics_orders_carrier_fill()','logistics_orders_carrier_changed()',
+      'logistics_carriers_enqueue_orders()','logistics_locations_enqueue_orders()',
+      'logistics_order_carrier_id(uuid)','logistics_carrier_for_location(text,uuid)','logistics_buffer_payload(uuid)',
+      'logistics_brief_transport(uuid,uuid)','logistics_tick()'] LOOP
+    EXECUTE format('REVOKE ALL ON FUNCTION public.%s FROM PUBLIC, anon, authenticated', f);
+    EXECUTE format('GRANT EXECUTE ON FUNCTION public.%s TO service_role', f);
+  END LOOP;
+END $fs$;
+
+-- 1.0.184: karrenlijst toont de vervoerder uit orders.carrier_id (achteraan toegevoegd).
+-- "Eigen vervoer" en "Afhalen" op carrier_kind / self_pickup, nooit op naam.
+DO $m$ BEGIN
+  IF to_regprocedure('public.control_get_todays_carts()') IS NOT NULL
+     AND pg_get_function_result('public.control_get_todays_carts()'::regprocedure) NOT LIKE '%carrier_name%' THEN
+    DROP FUNCTION public.control_get_todays_carts();
+  END IF;
+END $m$;
+
+CREATE OR REPLACE FUNCTION public.control_get_todays_carts()
+ RETURNS TABLE(cart_number_id uuid, cart_number text, order_source text, order_id text, cart_index integer, order_number text, pick_date date, status text, printed_at timestamp with time zone, printed_today boolean, crates_on_cart integer, country_code text, carrier_name text)
+ LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+  WITH vandaag AS (
+    SELECT (now() AT TIME ZONE public.logistics_tz())::date AS d
+  ),
+  idx AS (
+    SELECT DISTINCT ON (i.cart_id) i.*
+    FROM public.logistics_cart_index((SELECT d FROM vandaag), (SELECT d FROM vandaag)) i
+    ORDER BY i.cart_id, i.order_number
+  ),
+  gecontroleerd AS (
+    SELECT cci.cart_number_id, cci.order_source, cci.order_id, cci.cart_index
+      FROM public.cart_control_items cci
+      JOIN public.cart_control_sessions ccs ON ccs.id = cci.session_id
+     WHERE ccs.control_date = (SELECT d FROM vandaag)
+       AND cci.action = 'checked'
+  )
+  SELECT
+    i.cart_id,
+    COALESCE(cn.cart_number, i.cart_label),
+    i.order_source,
+    i.order_uuid::text,
+    i.cart_index,
+    i.order_number,
+    i.pick_date,
+    COALESCE(cn.status, 'pending'),
+    i.printed_at,
+    (i.printed_at >= (SELECT d FROM vandaag)::timestamptz),
+    (SELECT sum(ci.crates)::int FROM public.order_cart_items ci WHERE ci.cart_id = i.cart_id),
+    (SELECT CASE WHEN upper(btrim(l.country)) ~ '^[A-Z]{2}$' THEN upper(btrim(l.country)) END
+       FROM public.orders o
+       JOIN public.customer_delivery_locations l
+         ON l.id = public.logistics_try_uuid(o.custom_fields->>'delivery_location')
+      WHERE o.id = i.order_uuid
+      LIMIT 1),
+    (SELECT CASE WHEN c.carrier_kind = 'eigen_vervoer' THEN 'Eigen vervoer'
+                 WHEN c.carrier_kind = 'klant_haalt_op' THEN 'Afhalen'
+                 WHEN o.carrier_id IS NULL AND o.carrier_source = 'afleverlocatie' THEN 'Afhalen'
+                 ELSE c.name END
+       FROM public.orders o
+       LEFT JOIN public.carriers c ON c.id = o.carrier_id
+      WHERE o.id = i.order_uuid
+      LIMIT 1)
+  FROM idx i
+  LEFT JOIN public.cart_numbers cn
+    ON cn.order_source = i.order_source
+   AND cn.order_id = i.order_uuid::text
+   AND cn.cart_index = i.cart_index
+  LEFT JOIN gecontroleerd g1 ON g1.cart_number_id = i.cart_id
+  LEFT JOIN gecontroleerd g2
+    ON g2.order_source = i.order_source
+   AND g2.order_id = i.order_uuid::text
+   AND g2.cart_index = i.cart_index
+  WHERE COALESCE(cn.status, 'pending') <> 'delivered'
+    AND g1.cart_number_id IS NULL
+    AND g2.order_id IS NULL
+  ORDER BY i.order_number, i.cart_index;
+$function$;
+REVOKE ALL ON FUNCTION public.control_get_todays_carts() FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.control_get_todays_carts() TO authenticated, service_role;
+
+-- ===== 1.0.184 toegangscontrole in functies (overleeft schemasync) =====
+CREATE OR REPLACE FUNCTION public.logistics_acc_is_server()
+ RETURNS boolean LANGUAGE sql STABLE SET search_path TO 'public'
+AS $function$
+  SELECT coalesce(nullif(current_setting('request.jwt.claims', true), '')::jsonb ->> 'role', '') = 'service_role'
+      OR session_user::text <> 'authenticator'
+$function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_acc_direct(p_fn text)
+ RETURNS boolean LANGUAGE sql STABLE SET search_path TO 'public'
+AS $function$
+  SELECT coalesce(current_query(), '') ~* ('(^|[^a-z0-9_])' || p_fn || '([^a-z0-9_]|$)')
+$function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_acc_guard(p_level text, p_fn text)
+ RETURNS void LANGUAGE plpgsql STABLE SET search_path TO 'public'
+AS $function$
+BEGIN
+  IF public.logistics_acc_is_server() THEN RETURN; END IF;
+  IF pg_trigger_depth() > 0 THEN RETURN; END IF;
+  IF NOT public.logistics_acc_direct(p_fn) THEN RETURN; END IF;
+  IF p_level = 'ingelogd' AND auth.uid() IS NOT NULL THEN RETURN; END IF;
+  IF p_level = 'beheer' AND auth.uid() IS NOT NULL AND public.logistics_is_beheer() THEN RETURN; END IF;
+  RAISE EXCEPTION '%', CASE p_level
+      WHEN 'server' THEN 'Geen toegang: ' || p_fn || ' is alleen voor de server.'
+      WHEN 'beheer' THEN 'Geen toegang: ' || p_fn || ' is alleen voor beheer.'
+      ELSE 'Geen toegang: log in om ' || p_fn || ' te gebruiken.' END
+    USING ERRCODE = '42501';
+END $function$;
+REVOKE ALL ON FUNCTION public.logistics_acc_guard(text, text) FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_acc_guard(text, text) TO authenticated, service_role;
+REVOKE ALL ON FUNCTION public.logistics_acc_direct(text) FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_acc_direct(text) TO authenticated, service_role;
+REVOKE ALL ON FUNCTION public.logistics_acc_is_server() FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_acc_is_server() TO authenticated, service_role;
+
+CREATE OR REPLACE FUNCTION public.logistics_acc_levels()
+ RETURNS TABLE(functie text, niveau text) LANGUAGE sql IMMUTABLE SET search_path TO 'public'
+AS $function$
+  SELECT * FROM (
+    SELECT unnest(ARRAY['claim_logistics_tasks','control_get_todays_carts','control_mark_carts_delivered','control_mark_carts_delivered_detail','logistics_allowed_load_carriers','logistics_apply_buffer_decision','logistics_apply_document_layouts','logistics_apply_order_buffer','logistics_approve_delay_reschedule','logistics_archived_orders','logistics_backorder_allowed','logistics_belading_bevestig','logistics_belading_verstuurder','logistics_blocked_orders','logistics_blocked_overview','logistics_buffer_decision','logistics_buffer_detach_late_orders','logistics_buffer_frozen_order','logistics_buffer_handled','logistics_buffer_notify','logistics_buffer_open_key','logistics_buffer_payload','logistics_buffer_simulate','logistics_cancel_order','logistics_cancel_orphan_tasks','logistics_capacity_day_check','logistics_carrier_preview_existing','logistics_carrier_status','logistics_cart_archive','logistics_cart_archive_preview','logistics_cart_checkin_at','logistics_cart_fixed_numbering','logistics_cart_handled','logistics_cart_index','logistics_cart_is_archived','logistics_cart_is_full','logistics_cart_json_fixed','logistics_cart_layout_method','logistics_cart_order_ids','logistics_cart_order_refs','logistics_cart_plan_overview','logistics_cart_plan_status_core','logistics_cart_release_reason','logistics_cart_seq','logistics_cart_unarchive','logistics_cart_units','logistics_cart_wait_until','logistics_check_order_allowed','logistics_check_order_stock','logistics_claim_next_task','logistics_cleanup_duplicate_order_lines','logistics_cleanup_history','logistics_cleanup_tasks','logistics_consistency_check','logistics_control_complete_cart','logistics_control_settings','logistics_cron_health','logistics_day_windows','logistics_delivery_agenda','logistics_departure_preview','logistics_document_layout','logistics_document_layout_v2','logistics_emit_event','logistics_external_fulfillment_key_report','logistics_floriday_cart_plan','logistics_floriday_claim_pushes','logistics_floriday_finish_push','logistics_floriday_finish_push_v2','logistics_floriday_finish_push_v3','logistics_floriday_is_read_only','logistics_floriday_log_refusal','logistics_floriday_log_send','logistics_floriday_order_approved','logistics_floriday_prune_pushes','logistics_floriday_queue_push','logistics_full_cart_min_layers','logistics_full_cart_min_percentage','logistics_install_check','logistics_is_beheer','logistics_item_external_fulfilled','logistics_layout_method_status','logistics_link_order_items','logistics_local_hhmi','logistics_local_today','logistics_merge_decision','logistics_merge_floriday_lines','logistics_merge_lines_enabled','logistics_merge_partial_carts','logistics_opening_timezone','logistics_order_backlog_info','logistics_order_cart_approval','logistics_order_cart_ids','logistics_order_changed','logistics_order_definitively_blocked','logistics_order_departure','logistics_order_departure_list','logistics_order_documents_ready','logistics_order_documents_ready_bool','logistics_order_external_state','logistics_order_finalize_enqueue','logistics_order_finalize_overview','logistics_order_finalize_prune','logistics_order_finalize_reconcile','logistics_order_finalize_retry','logistics_order_finalize_run','logistics_order_frozen','logistics_order_handled','logistics_order_is_archived','logistics_order_is_backlog','logistics_order_is_frozen','logistics_order_line_duplicates','logistics_order_mergeable','logistics_order_overview','logistics_order_plan_coverage','logistics_order_plan_coverage_list','logistics_orphan_carts_list','logistics_orphan_carts_summary','logistics_own_transport_departure','logistics_packing_autofix','logistics_packing_block_reason','logistics_packing_dismiss','logistics_packing_overview','logistics_packing_reconcile','logistics_packing_set_manual','logistics_partial_wait_minutes','logistics_payload_is_floriday','logistics_plan_block','logistics_plan_defer','logistics_plan_enqueue','logistics_plan_finish','logistics_plan_floriday_order','logistics_plan_lock_acquire','logistics_plan_lock_release','logistics_plan_progress','logistics_plan_progress_pct','logistics_plan_queue_list','logistics_plan_reset_queue','logistics_plan_retry','logistics_plan_state_for','logistics_plan_timeout_running','logistics_plan_unarchive','logistics_prune_buffer_member_queue','logistics_queue_capacity_email','logistics_queue_stock_email','logistics_reapply_buffer_decisions','logistics_rebuffer_open_orders','logistics_rebuffer_orders','logistics_rebuffer_pending','logistics_rebuffer_report','logistics_refresh_plan_state','logistics_replan_all','logistics_replan_all_force','logistics_replan_order_journey','logistics_replan_preview','logistics_replan_selected','logistics_report_delay','logistics_reschedule_order','logistics_reschedule_preview','logistics_resolve_carrier','logistics_resolve_carrier_for_location','logistics_resolve_carrier_for_location_many','logistics_resolve_carrier_many','logistics_resolve_settings','logistics_sales_order_external_fulfilled','logistics_schedule_tasks','logistics_set_order_priority','logistics_subtract_working_minutes','logistics_supersede_stale_tasks','logistics_sync_task_carriers','logistics_task_open_counts','logistics_tasks_prune','logistics_tick_health','logistics_tick_ping','logistics_timezone_options','logistics_trace','logistics_trace_all_orders','logistics_trace_archive_order','logistics_trace_batch','logistics_trace_derive','logistics_trace_order_journey_start','logistics_trace_order_origin','logistics_trace_order_overview','logistics_trace_order_state','logistics_trace_order_step','logistics_trace_orders','logistics_trace_progress','logistics_trace_progress_order','logistics_trace_step_once','logistics_trace_stock_check','logistics_trace_timeline','logistics_trace_version_events','logistics_trace_versions','logistics_tz','logistics_unit_order_ids','logistics_upsert_task','logistics_valid_timezone','logistics_write_buffer_layer_positions','logistics_write_cart_layer_positions']), 'ingelogd'
+    UNION ALL
+    SELECT unnest(ARRAY['logistics_active_layout_method','logistics_address_key','logistics_block_reason_code','logistics_buffer_criteria','logistics_buffer_decision_for_settings','logistics_buffer_value','logistics_capacity_plan_day','logistics_carrier_minutes','logistics_delay_customer_email','logistics_document_selection_status','logistics_document_type_map','logistics_floriday_delivery_note_create_enabled','logistics_floriday_gate_status','logistics_floriday_shipping_document','logistics_floriday_status_updates_enabled','logistics_floriday_stock_updates_enabled','logistics_floriday_write_allowed','logistics_is_engine_response','logistics_live_carriers','logistics_live_cart_count','logistics_next_workday_date','logistics_next_workday_not_past','logistics_nl_date','logistics_nl_moment','logistics_not_past','logistics_order_cart_count','logistics_order_is_shipped_status','logistics_order_merge_key','logistics_plan_error_class','logistics_plan_error_text','logistics_resolve_product_id','logistics_resolve_product_match','logistics_retention_days','logistics_rule_bool','logistics_rule_num','logistics_rule_text','logistics_rule_value','logistics_shift_to_workday','logistics_status_after_shipping','logistics_task_owner','logistics_task_retention_days','logistics_trace_node','logistics_trace_redact','logistics_trace_source_node','logistics_tray_plants','logistics_try_uuid']), 'open (rekenhulp/rechten aanroeper)'
+    UNION ALL
+    SELECT unnest(ARRAY['logistics_active_pick_workdays','logistics_auto_send_status','logistics_barcode_lookup','logistics_cancel_stale_cart_pick_rows','logistics_carrier_picks_up_for','logistics_cart_barcode_opschonen','logistics_cart_barcode_value','logistics_cart_has_packing_slip','logistics_cart_pick_starts_at','logistics_cart_plan_status','logistics_cart_released','logistics_cart_scanned','logistics_cart_slip_plan','logistics_cart_slip_queued','logistics_cart_sticker_state','logistics_carts_per_print','logistics_claim_task','logistics_cleanup_orphan_print_jobs','logistics_complete_task','logistics_control_scan_approve','logistics_control_scan_claim','logistics_control_scan_finish','logistics_control_scan_lookup','logistics_control_scan_overview','logistics_control_scan_print_own','logistics_control_scan_record_afmelding','logistics_control_scan_record_afmelding_cart','logistics_control_scan_retry','logistics_document_for_order','logistics_document_station','logistics_enqueue_shipping_note_with_slip','logistics_enqueue_sticker_with_slip','logistics_ensure_cart_barcode','logistics_ensure_pick_data','logistics_ensure_shipping_notes','logistics_fail_task','logistics_fix_wrong_shipping_notes','logistics_fulfill_barcode_requests','logistics_is_group_label','logistics_is_pick_workday','logistics_normalize_product_label','logistics_order_all_carts_scanned','logistics_order_carrier_label','logistics_order_is_topick','logistics_order_pick_day','logistics_order_released','logistics_order_sticker_meldingen','logistics_own_sticker_count','logistics_own_sticker_sync','logistics_own_traysticker_payload','logistics_own_traysticker_sync','logistics_packing_scan','logistics_pakbon_old_order_row','logistics_pakbon_oude_orderregels','logistics_parse_pickup','logistics_pick_agenda','logistics_pick_backlog_max_days','logistics_pick_barcode_enabled','logistics_pick_email_purpose','logistics_pick_mode','logistics_pick_partial_mode','logistics_pick_queue_close','logistics_pick_start_estimate','logistics_pick_units','logistics_pickup_moments_today','logistics_prepare_pick_documents','logistics_print_job_state','logistics_print_via_layout','logistics_prune_handled_pick_queue','logistics_refresh_pick_queue_status','logistics_refresh_pickup_moments','logistics_rescan_orders','logistics_resolve_pick_document','logistics_scan_delays','logistics_scan_order_stock','logistics_scan_resolve','logistics_set_pick_day','logistics_shipping_note_diagnose','logistics_shipping_note_ensure_accepted','logistics_shipping_note_follows_slip','logistics_shipping_note_from_barcode','logistics_shipping_note_job_for_slip','logistics_shipping_note_max_attempts','logistics_shipping_note_release','logistics_shipping_note_status','logistics_shipping_note_wait_reasons','logistics_shipping_note_wake','logistics_shipping_notes_wake_all','logistics_slip_is_floriday','logistics_slip_is_herprint','logistics_slip_note_claim','logistics_slip_note_finish','logistics_slip_note_hold','logistics_slip_note_hold_belading','logistics_slip_note_hold_kenmerk','logistics_slip_note_hold_layout','logistics_slip_note_hold_read_only','logistics_slip_note_keep_waiting','logistics_slip_note_release_layout','logistics_slip_note_retry','logistics_slip_note_skip_herprint','logistics_sticker_blocked_list','logistics_sticker_cart_plek','logistics_sticker_copies','logistics_sticker_distribution','logistics_sticker_etiket_status','logistics_sticker_external_fulfilled','logistics_sticker_follows_slip','logistics_sticker_moment','logistics_sticker_order_counts','logistics_sticker_parse_size','logistics_sticker_sync','logistics_sticker_upsert','logistics_subtract_pick_workdays','logistics_sync_pick_queue','logistics_sync_pick_queue_backlog','logistics_sync_pick_queue_core','logistics_task_pick_minutes','logistics_trace_pick_state','logistics_unit_all_carts_scanned','logistics_working_hours_status','pick_cart_breakdown','pick_enqueue_print_job','pick_queue_cart_plan']), 'wacht op pickschermlijst'
+    UNION ALL
+    SELECT unnest(ARRAY['logistics_afhandeling_fulfillment_order','logistics_allocation_check_changes','logistics_allocation_fp','logistics_allocation_frozen','logistics_apply_cart_swap','logistics_apply_external_fulfillment','logistics_auto_send_claim','logistics_auto_send_enqueue_for_order','logistics_auto_send_finish','logistics_auto_send_route_missing','logistics_auto_send_sent_elsewhere','logistics_auto_send_status_core','logistics_base_url_check_status','logistics_base_url_checks_resolve','logistics_brief_transport','logistics_buffer_closed_for_join','logistics_buffer_frozen','logistics_buffer_target','logistics_carrier_enqueue','logistics_carrier_favorite_id','logistics_carrier_for_location','logistics_carrier_frozen_reason','logistics_carrier_recalc_run','logistics_carrier_result','logistics_carrier_settings_ensure','logistics_carrier_skip_reason','logistics_cart_archive_classify','logistics_cart_coverage_check','logistics_cart_extra_fields','logistics_cart_ids_frozen','logistics_cart_is_frozen','logistics_cart_plan_status_core_v152','logistics_cart_seq_dubbel','logistics_departure_calc','logistics_double_group_lines','logistics_ensure_runtime_defaults','logistics_expand_line','logistics_fill_cart_departure','logistics_floriday_layout_id','logistics_floriday_push_hold_read_only','logistics_floriday_release_read_only','logistics_frozen_allocation_scaled','logistics_key_product','logistics_mark_cart_delivered_core','logistics_order_afgemeld','logistics_order_buffer_excluded','logistics_order_carrier_id','logistics_order_carrier_info','logistics_order_current_warnings','logistics_order_fp','logistics_order_line_allocation','logistics_order_on_frozen_shared_cart','logistics_order_plan_coverage_list_v152','logistics_order_plan_coverage_v165','logistics_plan_all','logistics_plan_buffer_sql','logistics_plan_claim','logistics_plan_close_claim','logistics_plan_coverage_check','logistics_plan_due_count','logistics_plan_ensure_event','logistics_plan_housekeeping','logistics_plan_impact_orders','logistics_plan_kick','logistics_plan_prune','logistics_plan_queue_dubbel','logistics_plan_release_stale','logistics_plan_retry_later','logistics_plan_setting','logistics_plan_wachttijd','logistics_plan_wachttijd_melden','logistics_planner_cart_snapshot','logistics_planner_diff_mode','logistics_planner_diff_prune','logistics_planner_lines','logistics_prune_cron_history','logistics_queue_row_has_open_peer','logistics_rebuffer_candidates','logistics_rebuffer_simulate_open','logistics_recalc_tick_kick','logistics_recompute_reserved_targeted','logistics_reconcile_missing_plan_queue','logistics_register_tick_apikey','logistics_replan_candidates','logistics_replan_clear_foreign_cart_items','logistics_replan_selected_orders','logistics_report_frozen_shortage','logistics_reserved_fast_skip','logistics_reserved_key','logistics_reserved_order_excluded','logistics_reserved_stock_nightly','logistics_resolve_carrier_core','logistics_set_components_scaled','logistics_shared_cart_peers','logistics_shell_base_url','logistics_sync_stock_alert_email_status','logistics_sync_task_status','logistics_tick','logistics_tick_base_url_check','logistics_tick_calls_resolve','logistics_tick_runs_prune','logistics_today_cart_ids','logistics_verkoop_order_link']), 'server'
+    UNION ALL
+    SELECT unnest(ARRAY['logistics_carrier_promote_oud','logistics_carrier_set_backfill']), 'beheer'
+    UNION ALL
+    SELECT unnest(ARRAY['logistics_set_order_carrier']), 'eigen (p_actor)'
+    UNION ALL
+    SELECT unnest(ARRAY['recompute_all_reserved_stock','recompute_reserved_stock']), 'eigenaar Voorraad'
+  ) v(functie, niveau)
+$function$;
+
+DO $acc$
+DECLARE r record; v_def text; v_new text; v_pos int; v_fail text[] := '{}'::text[]; n int := 0;
+BEGIN
+  FOR r IN
+    SELECT p.oid, p.proname, l.lanname, p.prosrc, x.lvl
+      FROM public.logistics_acc_levels() x(fn, lvl)
+      JOIN pg_proc p ON p.proname = x.fn AND p.pronamespace = 'public'::regnamespace
+      JOIN pg_language l ON l.oid = p.prolang
+     WHERE x.lvl IN ('server', 'ingelogd', 'beheer')
+       AND p.prorettype <> 'trigger'::regtype AND coalesce(p.prosrc, '') <> ''
+       AND p.prosrc NOT LIKE '%logistics_acc_guard(%'
+  LOOP
+    BEGIN
+      v_def := pg_get_functiondef(r.oid);
+      IF r.lanname = 'plpgsql' THEN
+        v_pos := regexp_instr(r.prosrc, '\mBEGIN\M', 1, 1, 1, 'i');
+        IF v_pos = 0 THEN RAISE EXCEPTION 'geen BEGIN gevonden'; END IF;
+        v_new := left(r.prosrc, v_pos - 1) || E'\n  PERFORM public.logistics_acc_guard(' || quote_literal(r.lvl) || ', '
+                 || quote_literal(r.proname) || ');' || substr(r.prosrc, v_pos);
+      ELSIF r.lanname = 'sql' THEN
+        v_new := E'\n  SELECT public.logistics_acc_guard(' || quote_literal(r.lvl) || ', ' || quote_literal(r.proname) || ');' || r.prosrc;
+      ELSE
+        RAISE EXCEPTION 'taal % niet ondersteund', r.lanname;
+      END IF;
+      v_pos := position(r.prosrc IN v_def);
+      IF v_pos = 0 THEN RAISE EXCEPTION 'definitie niet te herschrijven'; END IF;
+      v_def := overlay(v_def placing v_new from v_pos for length(r.prosrc));
+      EXECUTE v_def;
+      n := n + 1;
+    EXCEPTION WHEN OTHERS THEN
+      v_fail := v_fail || (r.proname || ': ' || SQLERRM);
+    END;
+  END LOOP;
+  RAISE NOTICE 'logistiek-engine toegangscontrole: % functies voorzien; mislukt: %', n, array_to_string(v_fail, ' | ');
+END $acc$;
+
+CREATE OR REPLACE FUNCTION public.logistics_set_order_carrier(p_order_id uuid, p_carrier_id uuid, p_actor uuid)
+ RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_uid uuid; o jsonb; v_skip text; r jsonb;
+BEGIN
+  IF public.logistics_acc_is_server() THEN
+    v_uid := coalesce(p_actor, auth.uid());
+  ELSE
+    v_uid := auth.uid();
+    IF v_uid IS NULL THEN
+      RAISE EXCEPTION 'Geen toegang: log in om een vervoerder te kiezen.' USING ERRCODE = '42501';
+    END IF;
+  END IF;
+  SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id AND x.deleted_at IS NULL FOR UPDATE;
+  IF o IS NULL THEN RAISE EXCEPTION 'Order niet gevonden.'; END IF;
+  IF p_carrier_id IS NOT NULL THEN
+    v_skip := public.logistics_carrier_skip_reason(p_carrier_id);
+    IF v_skip IS NOT NULL THEN RAISE EXCEPTION 'Deze vervoerder kan niet gekozen worden: %.', v_skip; END IF;
+    r := public.logistics_carrier_result(p_carrier_id, 'handmatig', 'Handmatig gekozen op de order.', '{}'::text[]);
+  ELSE
+    r := public.logistics_resolve_carrier_core(o, true);
+  END IF;
+  PERFORM set_config('logistics.carrier_writer', 'engine', true);
+  UPDATE public.orders
+     SET carrier_id = public.logistics_try_uuid(r->>'carrier_id'), carrier_source = r->>'bron',
+         carrier_reason = r->>'reden', carrier_resolved_at = now(), carrier_set_by = v_uid, carrier_set_at = now()
+   WHERE id = p_order_id;
+  PERFORM set_config('logistics.carrier_writer', '', true);
+  RETURN r || jsonb_build_object('bevroren', public.logistics_carrier_frozen_reason(p_order_id));
+END $function$;
+
+CREATE OR REPLACE FUNCTION public.logistics_set_order_carrier(p_order_id uuid, p_carrier_id uuid)
+ RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+BEGIN
+  RETURN public.logistics_set_order_carrier(p_order_id, p_carrier_id, NULL::uuid);
+END $function$;
+REVOKE ALL ON FUNCTION public.logistics_set_order_carrier(uuid, uuid, uuid) FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_set_order_carrier(uuid, uuid, uuid) TO authenticated, service_role;
+REVOKE ALL ON FUNCTION public.logistics_set_order_carrier(uuid, uuid) FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_set_order_carrier(uuid, uuid) TO authenticated, service_role;
+
+CREATE OR REPLACE FUNCTION public.logistics_access_check()
+ RETURNS TABLE(onderdeel text, ok boolean, toelichting text)
+ LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE r record;
+BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_access_check');
+  FOR r IN
+    SELECT lv.functie, lv.niveau, p.oid, p.prosrc,
+           has_function_privilege('anon', p.oid, 'EXECUTE') AS an,
+           has_function_privilege('authenticated', p.oid, 'EXECUTE') AS au,
+           pg_get_function_identity_arguments(p.oid) AS args
+      FROM public.logistics_acc_levels() lv
+      LEFT JOIN pg_proc p ON p.proname = lv.functie AND p.pronamespace = 'public'::regnamespace
+     ORDER BY lv.functie, args
+  LOOP
+    onderdeel := 'Toegang ' || r.functie || CASE WHEN r.args IS NOT NULL AND r.args <> '' THEN '(' || r.args || ')' ELSE '' END;
+    IF r.oid IS NULL THEN
+      ok := r.niveau IN ('niet van Engine', 'eigenaar Voorraad'); toelichting := r.niveau || '; functie ontbreekt';
+    ELSIF r.niveau IN ('server', 'ingelogd', 'beheer') THEN
+      ok := r.prosrc LIKE '%logistics_acc_guard(%';
+      toelichting := 'niveau ' || r.niveau || '; controle ' || CASE WHEN ok THEN 'aanwezig' ELSE 'ONTBREEKT' END
+        || '; uitvoerrecht anon ' || CASE WHEN r.an THEN 'ja' ELSE 'nee' END || ', authenticated ' || CASE WHEN r.au THEN 'ja' ELSE 'nee' END;
+    ELSE
+      ok := true;
+      toelichting := CASE r.niveau WHEN 'wacht op pickschermlijst' THEN 'bewust open: wacht op pickschermlijst (pickscherm/scanner zonder inlog)'
+                                  ELSE r.niveau END
+        || '; uitvoerrecht anon ' || CASE WHEN r.an THEN 'ja' ELSE 'nee' END || ', authenticated ' || CASE WHEN r.au THEN 'ja' ELSE 'nee' END;
+    END IF;
+    RETURN NEXT;
+  END LOOP;
+  FOR r IN SELECT t.n, t.tbl FROM unnest(ARRAY['logistics_capacity_alert_notify_trg','logistics_formulas_touch','logistics_packing_deviations_touch','logistics_strategies_touch','logistics_strategy_schedules_touch','logistics_variables_touch','set_logistics_delay_alerts_updated_at','set_logistics_stock_alerts_updated_at','touch_capacity_alerts','touch_pickup_moments','touch_staff_planning','trg_cart_items_layer_positions','trg_cart_number_prunes_pick_queue','trg_control_item_prunes_pick_queue','trg_floriday_gate_status_queue','trg_floriday_gate_stock_queue','trg_fust_types_requeue_blocked','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart','trg_guard_archived_cart_row','trg_logistics_auto_send_on_scan','trg_logistics_block_bvo_note_for_floriday','trg_logistics_block_merged_shipping_note','trg_logistics_carriers_enqueue','trg_logistics_cart_barcode_autofill','trg_logistics_clear_layer_positions','trg_logistics_close_pick_rows_on_shipped','trg_logistics_event_buffer','trg_logistics_event_insert','trg_logistics_keep_archived_cart','trg_logistics_locations_enqueue','trg_logistics_order_finalize_queue_updated','trg_logistics_order_item_autolink','trg_logistics_order_items_stock','trg_logistics_order_sticker_warnings_touch','trg_logistics_orders_carrier_changed','trg_logistics_orders_carrier_fill','trg_logistics_pick_queue_enrich','trg_logistics_pick_queue_layout','trg_logistics_pick_queue_sync','trg_logistics_pin_pick_day','trg_logistics_plan_order_items','trg_logistics_plan_orders','trg_logistics_plan_products','trg_logistics_require_cart_on_packing_slip','trg_logistics_require_pakbon_barcode','trg_logistics_reschedules_touch','trg_logistics_rule_config_layout_sync','trg_logistics_rule_config_method_changed','trg_logistics_rule_config_rebuffer','trg_logistics_rule_config_single_active','trg_logistics_rule_config_snapshot','trg_logistics_rule_config_snapshot_write','trg_logistics_schedule_after_event','trg_logistics_shipping_note_after_slip','trg_logistics_shipping_note_follow_printer','trg_logistics_shipping_note_release_on_scan','trg_logistics_slip_note_block_herprint','trg_logistics_sticker_prints_touch','trg_logistics_stock_alert_email','trg_logistics_stock_alert_skip_closed','trg_logistics_task_status_note','trg_logistics_task_status_scan','trg_logistics_time_settings_validate','trg_logistics_trace_pick_queue','trg_orders_guard_buffer_id','trg_pick_queue_cart_breakdown','trg_strategies_requeue_blocked','trg_trace_control_scan','trg_trace_order_cart_items_del','trg_trace_order_cart_items_ins','trg_trace_order_carts','trg_trace_order_carts_del','trg_trace_order_carts_ins','trg_trace_pick_queue_insert','trg_trace_plan_queue','trg_trace_print_jobs','trg_trace_slip_shipping_note','update_logistics_document_prints_updated_at','update_logistics_events_updated_at','update_logistics_floriday_pushes_updated_at','update_logistics_plan_runs_updated_at','update_logistics_recalc_jobs_updated_at','update_logistics_reservation_allocations_updated_at','update_logistics_rule_configs_updated_at','update_logistics_tasks_updated_at'],
+      ARRAY['logistics_capacity_alerts','logistics_formulas','logistics_packing_deviations','logistics_strategies','logistics_strategy_schedules','logistics_variables','logistics_delay_alerts','logistics_stock_alerts','logistics_capacity_alerts','logistics_pickup_moments','logistics_staff_planning','order_cart_items','cart_numbers','cart_control_items','floriday_status_sync_queue','floriday_continuous_stock_queue','fust_types','logistics_cart_barcode','logistics_control_scan','logistics_slip_shipping_note','logistics_sticker_prints','order_cart_items','pakbon_barcode_verzoeken','pick_queue','print_jobs','order_carts','logistics_control_scan','print_jobs','pick_queue','carriers','order_carts','logistics_rule_configs','orders','logistics_events','logistics_events','order_carts','customer_delivery_locations','logistics_order_finalize_queue','order_items','order_items','logistics_order_sticker_warnings','orders','orders','pick_queue','pick_queue','logistics_tasks','pick_queue','order_items','orders','products','print_jobs','print_jobs','logistics_reschedules','logistics_rule_configs','logistics_rule_configs','logistics_rule_configs','logistics_rule_configs','logistics_rule_configs','logistics_rule_configs','logistics_events','print_jobs','print_jobs','logistics_control_scan','logistics_slip_shipping_note','logistics_sticker_prints','logistics_stock_alerts','logistics_stock_alerts','print_jobs','logistics_control_scan','logistics_time_settings','pick_queue','orders','pick_queue','logistics_strategies','logistics_control_scan','order_cart_items','order_cart_items','order_carts','order_carts','order_carts','pick_queue','logistics_plan_queue','print_jobs','logistics_slip_shipping_note','logistics_document_prints','logistics_events','logistics_floriday_pushes','logistics_plan_runs','logistics_recalc_jobs','logistics_reservation_allocations','logistics_rule_configs','logistics_tasks']) t(n, tbl) LOOP
+    onderdeel := 'Trigger ' || r.n || ' op ' || r.tbl;
+    ok := EXISTS (SELECT 1 FROM pg_trigger g WHERE g.tgname = r.n AND g.tgrelid = to_regclass('public.' || r.tbl));
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt (schemasync controleren)' END; RETURN NEXT;
+  END LOOP;
+  FOR r IN SELECT t.n, t.tbl FROM unnest(ARRAY['Authenticated can read document prints','Beheer leest externe afhandeling','Beheer leest kar-archieflog','Beheer leest minuutronde-log','Beheer leest reserveringstoewijzing','Beheer leest vertrekcontrole','Beheerders lezen verdeel-vingerafdrukken','Eigen vertragingslogboek','Eigen vertragingsmeldingen','Eigen voorraadmeldingen','Ingelogd lezen stickermeldingen','Ingelogd lezen stickerprints','Ingelogd lezen vastgezette orders','Ingelogde gebruikers kunnen herberekeningen bekijken','Ingelogde gebruikers lezen de hartslag','Ingelogde gebruikers lezen de herberekenstatus','Ingelogde gebruikers lezen dekkingspogingen','Ingelogde gebruikers lezen pickdagen','Ingelogde gebruikers lezen planner-vergelijkingen','Ingelogde gebruikers lezen verzendbriefwachtrij','Ingelogde gebruikers zien beladingsafwijkingen','Ingelogde gebruikers zien de pushstatus','Users manage their own logistics events','Users manage their own logistics tasks','Users manage their own plan runs','Users manage their own rule configs','Users manage their own rule versions','beheer leest bevestigingen','finalize_queue_read_authenticated','logistics_carrier_events_read','logistics_carrier_settings_read','logistics_cart_barcode_read','logistics_control_scan_authenticated','logistics_floriday_carrier_map_read','logistics_opening_exceptions_rw','logistics_opening_hours_rw','logistics_order_merge_lines_read','logistics_order_merges_read','logistics_pick_data_requests_rw','logistics_shipping_note_scan_read','logistics_time_settings_rw','naamkoppeling logboek lezen door beheerders','override log readable','own capacity alerts','own capacity events','own capacity settings','own decisions','own formulas','own pickup moments','own schedules','own staff planning','own strategies','own variables','plan queue readable','plan settings readable','plan_locks_read_authenticated','refusals_read_authenticated','reschedules own insert','reschedules own read','service role manages runtime config','status_sends_read_authenticated','trace lezen door ingelogde gebruikers','trace_archive_read_authenticated'],
+      ARRAY['logistics_document_prints','logistics_external_fulfillment','logistics_cart_archive_log','logistics_tick_runs','logistics_reservation_allocations','logistics_departure_check','logistics_allocation_fingerprint','logistics_delay_log','logistics_delay_alerts','logistics_stock_alerts','logistics_order_sticker_warnings','logistics_sticker_prints','logistics_order_plan_exclusion','logistics_recalc_jobs','logistics_tick_heartbeat','logistics_rebuffer_state','logistics_plan_coverage_retries','logistics_order_pick_day','logistics_planner_diff_runs','logistics_slip_shipping_note','logistics_packing_deviations','logistics_floriday_pushes','logistics_events','logistics_tasks','logistics_plan_runs','logistics_rule_configs','logistics_rule_versions','logistics_belading_bevestigingen','logistics_order_finalize_queue','logistics_carrier_events','logistics_carrier_settings','logistics_cart_barcode','logistics_control_scan','logistics_floriday_carrier_map','logistics_opening_exceptions','logistics_opening_hours','logistics_order_merge_lines','logistics_order_merges','logistics_pick_data_requests','logistics_shipping_note_scan','logistics_time_settings','logistics_autolink_audit','logistics_layer_override_log','logistics_capacity_alerts','logistics_capacity_events','logistics_capacity_settings','logistics_decisions','logistics_formulas','logistics_pickup_moments','logistics_strategy_schedules','logistics_staff_planning','logistics_strategies','logistics_variables','logistics_plan_queue','logistics_plan_settings','logistics_plan_locks','logistics_floriday_push_refusals','logistics_reschedules','logistics_reschedules','module_runtime_config','logistics_floriday_status_sends','logistics_trace_events','logistics_trace_events_archive']) t(n, tbl) LOOP
+    onderdeel := 'Policy "' || r.n || '" op ' || r.tbl;
+    ok := EXISTS (SELECT 1 FROM pg_policies x WHERE x.schemaname = 'public' AND x.tablename = r.tbl AND x.policyname = r.n);
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt (schemasync controleren)' END; RETURN NEXT;
+  END LOOP;
+END $function$;
+REVOKE ALL ON FUNCTION public.logistics_access_check() FROM PUBLIC, anon;
+GRANT EXECUTE ON FUNCTION public.logistics_access_check() TO authenticated, service_role;
+
+DO $ic$
+DECLARE v_def text;
+BEGIN
+  v_def := pg_get_functiondef('public.logistics_install_check()'::regprocedure);
+  IF v_def NOT LIKE '%logistics_access_check()%' THEN
+    v_def := regexp_replace(v_def, 'END \$function\$\s*$', E'  RETURN QUERY SELECT * FROM public.logistics_access_check();\nEND $function$');
+    EXECUTE v_def;
+  END IF;
+END $ic$;