npm - @flowselections/logistiek-engine - Versions diffs - 1.0.187 → 1.0.189 - Mend

@flowselections/logistiek-engine 1.0.187 → 1.0.189

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/db/schema/logistiek-engine.sql +624 -76
package/dist-lib/integrations/supabase/types.d.ts +2154 -176
package/dist-lib/integrations/supabase/types.d.ts.map +1 -1
package/dist-lib/lib/moduleVersion.d.ts +1 -1
package/dist-lib/lib/moduleVersion.js +1 -1
package/package.json +1 -1

package/db/schema/logistiek-engine.sql CHANGED Viewed

@@ -4066,6 +4066,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'claim_logistics_tasks');
   RETURN QUERY
   WITH candidates AS (
     SELECT t.id
@@ -4109,6 +4110,7 @@ AS $function$
 DECLARE
   v_total integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'control_mark_carts_delivered');
   SELECT count(*)::integer INTO v_total
     FROM public.control_mark_carts_delivered_detail(p_carts) r
    WHERE r.outcome = 'delivered';
@@ -4129,6 +4131,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_cart uuid; v_res jsonb; v_today date; v_bron text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'control_mark_carts_delivered_detail');
   IF auth.uid() IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   IF p_carts IS NULL OR jsonb_typeof(p_carts) <> 'array' OR jsonb_array_length(p_carts) = 0 THEN RETURN; END IF;
   FOR r IN
@@ -4251,6 +4254,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_active_pick_workdays');
   SELECT COALESCE(
     (SELECT ARRAY(
         SELECT jsonb_array_elements_text(c.settings -> 'orderpicken' -> 'pick_workdays')
@@ -4320,6 +4324,7 @@ AS $function$
 DECLARE
   v_buf uuid; v_sales text; v_del text; v_n int; v_id text; v_key text; v_sent boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_afhandeling_fulfillment_order');
   SELECT buffer_id, nullif(btrim(floriday_sales_order_id),'') INTO v_buf, v_sales FROM public.orders WHERE id = _order_id;
   IF NOT FOUND THEN
     RETURN jsonb_build_object('fulfillmentOrderId', NULL, 'sleutel', NULL, 'kandidaten', 0, 'verstuurd', false);
@@ -4372,6 +4377,7 @@ DECLARE
   v_rem numeric := public.logistics_plan_setting('verdeling_rem_minuten', NULL);
   n_base int := 0; n_replan int := 0; n_rem int := 0; n_same int := 0; n_frozen int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_allocation_check_changes');
   IF public.logistics_plan_setting('verdeling_bevriezen_actief', 0) <> 1 THEN
     RETURN jsonb_build_object('status', 'uit');
   END IF;
@@ -4423,6 +4429,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_allocation_fp');
   SELECT md5(COALESCE(string_agg(a.order_item_id::text || '|' || COALESCE(a.trade_item_key,'') || '|' || round(a.qty, 3)::text,
                                  ';' ORDER BY a.order_item_id, a.trade_item_key, a.source), ''))
     FROM public.logistics_reservation_allocations a
@@ -4441,6 +4448,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_allocation_frozen');
   SELECT p_order_id IS NOT NULL
      AND public.logistics_plan_setting('verdeling_bevriezen_actief', 0) = 1
      AND (EXISTS (SELECT 1 FROM public.orders o WHERE o.id = p_order_id AND o.plan_locked_at IS NOT NULL)
@@ -4476,6 +4484,7 @@ DECLARE
   v_items jsonb := '[]'::jsonb;
   c text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_allowed_load_carriers');
   IF p_strategy_id IS NOT NULL THEN
     SELECT settings INTO v_settings
     FROM public.logistics_rule_configs
@@ -4558,6 +4567,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_apply_document_layouts');
   UPDATE public.pick_queue q
      SET payload = coalesce(q.payload, '{}'::jsonb),
          updated_at = now()
@@ -4582,6 +4592,7 @@ DECLARE
   v_missing text[]; v_run uuid; v_tasks int := 0; v_rows int := 0; v_carts int := 0; v_stickers int := 0;
   v_peer uuid; v_reason constant text := 'Afgehandeld in Floriday'; v_fail text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_apply_external_fulfillment');
   SELECT * INTO ev FROM public.logistics_events WHERE id = p_event_id;
   IF NOT FOUND THEN RETURN NULL; END IF;
   pl := coalesce(ev.payload, '{}'::jsonb);
@@ -4710,6 +4721,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_buffer uuid; v_number text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_apply_order_buffer');
   SELECT order_number INTO v_number FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF v_number IS NULL THEN
     RETURN jsonb_build_object('applied', false, 'reason', 'order_not_found');
@@ -4733,6 +4745,7 @@ AS $function$
 DECLARE
   a public.logistics_delay_alerts%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_approve_delay_reschedule');
   SELECT * INTO a FROM public.logistics_delay_alerts WHERE id = p_alert_id;
   IF NOT FOUND OR a.user_id <> auth.uid() THEN RETURN false; END IF;
@@ -4768,6 +4781,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_archived_orders');
   IF auth.uid() IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   RETURN QUERY SELECT q.id, q.order_id, COALESCE(o.order_number, q.order_id::text), o.delivery_date::date,
     q.reason, q.reason_code, q.error, COALESCE(q.attempts,0), q.updated_at
@@ -4788,6 +4802,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_at timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_auto_send_claim');
   -- Eerst afsluiten wat al met de hand verstuurd is.
   FOR r IN SELECT a.id, a.order_id FROM public.logistics_auto_send a WHERE a.status IN ('wachtend','bezig') LOOP
     v_at := public.logistics_auto_send_sent_elsewhere(r.order_id);
@@ -4820,6 +4835,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_members uuid[]; v_lead uuid; v_buf uuid; v_carts uuid[];
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_auto_send_enqueue_for_order');
   IF NOT coalesce((public.logistics_pick_mode()->>'autoSendLoading')::boolean, false) THEN RETURN false; END IF;
   v_members := public.logistics_unit_order_ids(p_order_id);
   v_lead := v_members[1];
@@ -4856,6 +4872,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r public.logistics_auto_send; v_wait int[] := ARRAY[1,5,15,60];
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_auto_send_finish');
   SELECT * INTO r FROM public.logistics_auto_send WHERE id = p_id FOR UPDATE;
   IF NOT FOUND OR r.status IN ('verstuurd','mislukt') THEN RETURN jsonb_build_object('ok', false, 'reden', 'niet_actief'); END IF;
   IF p_ok THEN
@@ -4916,6 +4933,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_auto_send_route_missing');
   SELECT EXISTS (SELECT 1 FROM public.logistics_auto_send a WHERE a.last_http_status = 404
      AND a.updated_at > coalesce((SELECT max(b.sent_at) FROM public.logistics_auto_send b WHERE b.status = 'verstuurd' AND coalesce(b.sent_how,'automatisch') = 'automatisch'), '-infinity'))
 $function$
@@ -4933,6 +4951,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE j jsonb; v_at timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_auto_send_sent_elsewhere');
   j := public.logistics_afhandeling_fulfillment_order(p_order_id);
   IF NOT coalesce((j->>'verstuurd')::boolean, false) THEN RETURN NULL; END IF;
   SELECT min(a.created_at) INTO v_at FROM public.floriday_loading_attempts a
@@ -4970,6 +4989,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r public.logistics_auto_send; v_tekst text; v_status text; v_sent timestamptz; v_how text; v_elders timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_auto_send_status_core');
   SELECT * INTO r FROM public.logistics_auto_send a WHERE a.order_id = p_order_id OR p_order_id = ANY(a.order_ids)
    ORDER BY a.created_at DESC LIMIT 1;
   IF NOT FOUND THEN
@@ -5014,6 +5034,7 @@ DECLARE
   v_ov jsonb;
   v_val text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_backorder_allowed');
   IF p_strategy_id IS NOT NULL THEN
     SELECT settings INTO v_settings FROM public.logistics_rule_configs
      WHERE strategy_id = p_strategy_id AND user_id = auth.uid() LIMIT 1;
@@ -5164,6 +5185,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_last record; v_cur text; v_shell text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_base_url_check_status');
   PERFORM public.logistics_base_url_checks_resolve();
   SELECT value INTO v_cur FROM public.module_runtime_config WHERE key = 'logistics_tick_base_url';
   SELECT value INTO v_shell FROM public.module_runtime_config WHERE key = 'shell_base_url';
@@ -5196,6 +5218,7 @@ DECLARE
   q_status int; q_content text; q_done boolean;
   v_ping_ok boolean; v_route_ok boolean; v_rows int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_base_url_checks_resolve');
   FOR r IN SELECT * FROM public.logistics_base_url_checks WHERE status = 'wachtend' ORDER BY id FOR UPDATE SKIP LOCKED LOOP
     SELECT h.status_code, h.content, true INTO p_status, p_content, p_done
       FROM net._http_response h WHERE h.id = r.ping_request_id;
@@ -5262,6 +5285,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_belading_verstuurder');
   SELECT CASE WHEN lower(btrim(value)) IN ('engine','afhandeling') THEN lower(btrim(value)) END
     FROM public.module_runtime_config WHERE key = 'belading_verstuurder'
 $function$
@@ -5377,6 +5401,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_blocked_orders');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -5414,6 +5439,7 @@ DECLARE
   v_pending integer := 0;
   v_last timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_blocked_overview');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -5446,6 +5472,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_buffer_closed_for_join');
   SELECT b.closed_at IS NOT NULL
       OR (b.close_at IS NOT NULL AND b.close_at <= now())
       OR public.logistics_buffer_handled(b.id)
@@ -5511,6 +5538,7 @@ DECLARE
   v_settings jsonb;
   d jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_buffer_decision');
   IF p_strategy_id IS NOT NULL THEN
     SELECT settings INTO v_settings FROM public.logistics_rule_configs
      WHERE strategy_id = p_strategy_id AND (v_user IS NULL OR user_id = v_user)
@@ -5690,6 +5718,7 @@ DECLARE
   i int;
   v_locked uuid[] := ARRAY[]::uuid[];
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_buffer_detach_late_orders');
   FOR r IN
     SELECT b.id, b.buffer_key,
            (SELECT count(*) FROM public.orders o WHERE o.buffer_id = b.id AND o.deleted_at IS NULL) AS orders
@@ -5812,6 +5841,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_buffer_frozen');
   SELECT p_buffer IS NOT NULL AND (
     EXISTS (SELECT 1 FROM logistics_active.order_carts oc
              WHERE oc.buffer_id = p_buffer
@@ -5839,6 +5869,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_buffer_frozen_order');
   SELECT EXISTS (
     SELECT 1
       FROM public.orders o
@@ -5868,6 +5899,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_buffer_handled');
   WITH karren AS (
     SELECT oc.id, oc.cart_number, oc.order_id
       FROM logistics_active.order_carts oc
@@ -5924,6 +5956,7 @@ DECLARE
   v_uid uuid;
   v_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_buffer_notify');
   v_uid := auth.uid();
   IF v_uid IS NULL THEN
     SELECT user_id INTO v_uid FROM public.logistics_rule_configs
@@ -5964,6 +5997,7 @@ DECLARE
   v_id uuid;
   v_closed boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_buffer_open_key');
   IF p_base_key IS NULL OR btrim(p_base_key) = '' THEN
     RETURN p_base_key;
   END IF;
@@ -6017,6 +6051,7 @@ DECLARE
   d jsonb;
   results jsonb := '[]'::jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_buffer_simulate');
   IF jsonb_typeof(p_orders) <> 'array' THEN
     RETURN jsonb_build_object('orders', '[]'::jsonb, 'groups', '[]'::jsonb);
   END IF;
@@ -6063,6 +6098,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE o public.orders%ROWTYPE; d jsonb; v_ref text; v_key text; v_buffer uuid; v_try int := 0; v_skip text[] := '{}';
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_buffer_target');
   SELECT * INTO o FROM public.orders WHERE id = p_order_id;
   IF NOT FOUND OR o.deleted_at IS NOT NULL THEN RETURN jsonb_build_object('soort','geen'); END IF;
   IF public.logistics_order_buffer_excluded(o.id) THEN RETURN jsonb_build_object('soort','uitgesloten'); END IF;
@@ -6137,6 +6173,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE uid uuid := COALESCE(p_user_id, auth.uid()); n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cancel_order');
   IF uid IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   UPDATE public.logistics_tasks
@@ -6165,6 +6202,7 @@ AS $function$
 DECLARE
   v_n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cancel_orphan_tasks');
   UPDATE public.logistics_tasks t
      SET status = 'cancelled',
          updated_at = now(),
@@ -6215,6 +6253,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cancel_stale_cart_pick_rows');
   IF p_order_ids IS NULL OR array_length(p_order_ids,1) IS NULL THEN RETURN 0; END IF;
   UPDATE public.pick_queue q
      SET cancelled_at = now(), updated_at = now(),
@@ -6271,6 +6310,7 @@ DECLARE
   v_capacity numeric;
   v_result jsonb := '[]'::jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_capacity_day_check');
   SELECT settings, user_id INTO v_settings, v_owner
     FROM public.logistics_rule_configs
    WHERE (v_user IS NULL OR user_id = v_user)
@@ -6531,6 +6571,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int; v_ok int; v_bad text; v_done int;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_archive');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag karren archiveren.';
   END IF;
@@ -6568,6 +6609,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_cart_archive_classify');
   WITH k AS MATERIALIZED (SELECT public.logistics_tz() AS tz, public.logistics_local_today() AS d),
   base AS MATERIALIZED (
     SELECT c.id, c.cart_number, c.buffer_id, c.order_id, c.created_at,
@@ -6654,6 +6696,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_archive_preview');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag de archiveerlijst bekijken.';
   END IF;
@@ -6704,6 +6747,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int; v_weg int;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_barcode_opschonen');
   WITH kandidaat AS (
     SELECT b.cart_id FROM public.logistics_cart_barcode b
      WHERE b.created_at < now() - interval '14 days'
@@ -6733,7 +6777,9 @@ DO $fsdo$ BEGIN
  RETURNS text
  LANGUAGE sql
  IMMUTABLE
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_barcode_value');
   SELECT CASE WHEN _cart_id IS NULL THEN NULL
               ELSE 'LC' || upper(substring(replace(_cart_id::text, '-', '') from 1 for 16))
          END;
@@ -6750,6 +6796,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_checkin_at');
   select min(coalesce(
            lt.planned_end,
            lt.due_at,
@@ -6771,6 +6818,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_cart_coverage_check');
 WITH o AS (
   SELECT id, order_number, order_source, status, buffer_id,
     (status IN ('Verzonden','Gereed voor facturatie')) afgehandeld
@@ -6822,6 +6870,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_c record; v_crates int; v_buf int; v_start timestamptz; v_reason text; v_wait timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_cart_extra_fields');
   SELECT * INTO v_c FROM logistics_active.order_carts WHERE id = p_cart_id;
   IF NOT FOUND THEN RETURN '{}'::jsonb; END IF;
   SELECT sum(coalesce(crates,0))::int INTO v_crates FROM logistics_active.order_cart_items WHERE cart_id = p_cart_id;
@@ -6851,6 +6900,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_fixed_numbering');
   WITH c AS (SELECT * FROM public.order_carts WHERE id = p_cart_id),
   u AS (
     SELECT c2.id, c2.total_carts FROM c JOIN public.order_carts c2
@@ -6876,6 +6926,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_handled');
   WITH parts AS (
     SELECT DISTINCT btrim(t.nr) AS ref FROM unnest(string_to_array(coalesce(p_order_id, ''), ',')) AS t(nr) WHERE btrim(t.nr) <> ''
   ), keys AS (
@@ -6909,6 +6960,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_has_packing_slip');
   SELECT p_cart_id IS NOT NULL AND EXISTS (
     SELECT 1 FROM public.pick_queue q
      WHERE q.cancelled_at IS NULL
@@ -6928,6 +6980,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_cart_ids_frozen');
   SELECT c FROM unnest(COALESCE(p_cart_ids, ARRAY[]::uuid[])) AS c
    WHERE public.logistics_cart_is_frozen(c);
 $function$
@@ -6943,6 +6996,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_index');
   WITH bounds AS (
     SELECT
       COALESCE(p_from, (now() AT TIME ZONE public.logistics_tz())::date) AS d_from,
@@ -7082,6 +7136,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_is_archived');
   SELECT EXISTS (SELECT 1 FROM public.order_carts WHERE id = p_cart_id AND archived_at IS NOT NULL)
 $function$
 $fsdef$;
@@ -7096,6 +7151,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_cart_is_frozen');
   SELECT p_cart_id IS NOT NULL AND (
     EXISTS (
       SELECT 1 FROM public.print_jobs pj
@@ -7126,6 +7182,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare c public.order_carts; l integer; p integer;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_is_full');
   select * into c from logistics_active.order_carts where id = p_cart_id;
   if not found then return false; end if;
   l := public.logistics_full_cart_min_layers();
@@ -7174,6 +7231,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_id uuid; v_fix jsonb; v_lead uuid; v_items jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_json_fixed');
   BEGIN v_id := nullif(p_cart->>'cartId','')::uuid; EXCEPTION WHEN others THEN RETURN p_cart; END;
   IF v_id IS NULL THEN RETURN p_cart; END IF;
   v_fix := public.logistics_cart_fixed_numbering(v_id);
@@ -7204,6 +7262,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_layout_method');
   select jsonb_build_object(
     'layoutMethod', m,
     'showLayerLayout', m = 'afmetingen'
@@ -7229,6 +7288,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_order_ids');
   SELECT coalesce(array_agg(DISTINCT x.oid) FILTER (WHERE x.oid IS NOT NULL), '{}') FROM (
     SELECT c.order_id AS oid FROM logistics_active.order_carts c WHERE c.id = p_cart_id
     UNION SELECT oi.order_id FROM logistics_active.order_cart_items ci JOIN public.order_items oi ON oi.id = ci.order_item_id
@@ -7247,6 +7307,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_order_refs');
   select coalesce(array_agg(distinct o.order_number), '{}'::text[])
     from public.orders o
    where o.id in (
@@ -7269,6 +7330,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_pick_starts_at');
   SELECT min(lt.planned_start) FROM public.logistics_tasks lt
    WHERE lt.order_ref = ANY(public.logistics_cart_order_refs(p_cart_id))
      AND lt.task_type = 'pick.execute' AND lt.status NOT IN ('done','cancelled','superseded','skipped')
@@ -7290,6 +7352,7 @@ DECLARE
   r record;
   v_status jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_plan_overview');
   FOR r IN
     SELECT o.order_number, NULLIF(o.delivery_date, '')::date AS ddate
       FROM public.orders o
@@ -7346,6 +7409,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r jsonb; v_start timestamptz; v_code text; v_ref text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_plan_status_core');
   r := public.logistics_cart_plan_status_core_v152(p_ref);
   v_ref := coalesce(r->>'orderRef', p_ref);
   SELECT min(lt.planned_start) INTO v_start FROM public.logistics_tasks lt
@@ -7377,6 +7441,7 @@ declare
   v_cart jsonb; v_cart_id uuid; v_busy boolean := false; v_blocked text;
   v_uuid uuid; v_ref_type text; v_q_order uuid; v_t jsonb;
 begin
+  PERFORM public.logistics_acc_guard('server', 'logistics_cart_plan_status_core_v152');
   if p_ref is null or btrim(p_ref) = '' then
     return jsonb_build_object('ready', false, 'released', false,
       'reason', 'Geen order- of documentnummer meegegeven.');
@@ -7525,6 +7590,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_refs text[]; v_ref text; v_released boolean := false; v_until timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_release_reason');
   v_refs := public.logistics_cart_order_refs(p_cart_id);
   IF v_refs IS NULL OR cardinality(v_refs) = 0 THEN RETURN 'Deze kar hoort bij geen enkele actieve order.'; END IF;
   FOREACH v_ref IN ARRAY v_refs LOOP
@@ -7549,7 +7615,8 @@ DO $fsdo$ BEGIN
  LANGUAGE sql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$ select public.logistics_cart_release_reason(p_cart_id) is null; $function$
+AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_released'); select public.logistics_cart_release_reason(p_cart_id) is null; $function$
 $fsdef$;
 EXCEPTION WHEN undefined_object OR undefined_table OR undefined_function OR invalid_schema_name THEN
   RAISE NOTICE 'logistiek-engine: functie public.logistics_cart_released overgeslagen (onderdeel van andere module ontbreekt): %', SQLERRM;
@@ -7561,7 +7628,8 @@ DO $fsdo$ BEGIN
  LANGUAGE sql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$ SELECT EXISTS (SELECT 1 FROM public.logistics_control_scan s
+AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_scanned'); SELECT EXISTS (SELECT 1 FROM public.logistics_control_scan s
    WHERE s.cart_id = p_cart_id AND s.approved_at IS NOT NULL AND s.status <> 'geannuleerd') $function$
 $fsdef$;
 EXCEPTION WHEN undefined_object OR undefined_table OR undefined_function OR invalid_schema_name THEN
@@ -7715,6 +7783,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_slip_queued');
   SELECT p_cart IS NOT NULL AND EXISTS (
     SELECT 1 FROM public.print_jobs pj
      WHERE pj.payload->>'cart_id' = p_cart::text AND pj.documenttype = 'pakbon'
@@ -7760,6 +7829,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_res jsonb := '[]'::jsonb; v_why text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_unarchive');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag karren terugzetten.';
   END IF;
@@ -7798,6 +7868,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_units');
   WITH idx AS (SELECT * FROM public.logistics_cart_index(p_from, p_to)),
   u AS (SELECT * FROM public.logistics_pick_units()),
   j AS (
@@ -7836,6 +7907,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_cart_wait_until');
   SELECT CASE WHEN public.logistics_cart_is_full(p_cart_id) OR public.logistics_pick_partial_mode() = 'also_before' THEN NULL
     ELSE coalesce(
       (SELECT min(lt.planned_start) FROM public.logistics_tasks lt
@@ -7860,6 +7932,7 @@ DECLARE
   s jsonb;
   v numeric;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_carts_per_print');
   SELECT settings INTO s
     FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC
@@ -7889,6 +7962,7 @@ DECLARE
   v_allow boolean := public.logistics_backorder_allowed(p_strategy_id);
   v_shortages jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_check_order_allowed');
   IF p_lines IS NULL OR jsonb_typeof(p_lines) <> 'array' THEN
     RETURN jsonb_build_object('allowed', true, 'allowBackorder', v_allow, 'shortages', '[]'::jsonb);
   END IF;
@@ -7950,6 +8024,7 @@ DECLARE
   emails text[]; prio_text text; prio integer;
   alert_id uuid; note_id uuid; lines text := '';
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_check_order_stock');
   SELECT * INTO ev FROM public.logistics_events WHERE id = p_event_id;
   IF NOT FOUND OR ev.event_type <> 'order.received' OR ev.shadow THEN RETURN NULL; END IF;
@@ -8062,6 +8137,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE t public.logistics_tasks%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_claim_next_task');
   SELECT * INTO t FROM public.logistics_tasks
    WHERE user_id = auth.uid() AND owner_module = p_owner_module
      AND status = 'planned' AND shadow = false
@@ -8090,6 +8166,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE t public.logistics_tasks%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_claim_task');
   SELECT * INTO t FROM public.logistics_tasks
    WHERE id = p_task_id AND user_id = auth.uid() AND status = 'planned'
    FOR UPDATE SKIP LOCKED;
@@ -8121,6 +8198,7 @@ DECLARE
   v_after    bigint;
   v_limit    integer := greatest(1, least(coalesce(p_limit, 20000), 100000));
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cleanup_duplicate_order_lines');
   IF p_order_id IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reden', 'geen_order');
   END IF;
@@ -8219,6 +8297,7 @@ DECLARE
   v_limit        integer := GREATEST(100, LEAST(COALESCE(p_limit, 20000), 200000));
   v_trace int := 0; v_arch int := 0; v_pick int := 0; v_barcode int := 0; v_autolink int := 0; n int; i int; r int;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cleanup_history');
   FOR i IN 1..4 LOOP
     n := 0;
     IF v_trace_days IS NOT NULL AND v_trace_days >= 1 THEN
@@ -8283,6 +8362,7 @@ DECLARE
   v_zonder_kar int := 0;
   v_verdwenen_kar int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cleanup_orphan_print_jobs');
   UPDATE public.print_jobs j
      SET status = 'geannuleerd'::print_job_status,
          foutmelding = 'Vervallen: deze pakbon hoorde bij een order in plaats van bij een kar. Er staan nieuwe pakbonnen per kar klaar.',
@@ -8325,6 +8405,7 @@ DECLARE
   v_days integer := public.logistics_task_retention_days();
   v_deleted integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cleanup_tasks');
   -- Geen ingestelde bewaartermijn: niets opruimen en dat duidelijk melden.
   IF v_days IS NULL OR v_days < 1 THEN
     RETURN jsonb_build_object(
@@ -8469,6 +8550,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_consistency_check');
   WITH vandaag AS (SELECT (now() AT TIME ZONE public.logistics_tz())::date AS d),
   idx AS (SELECT * FROM public.logistics_cart_index((SELECT d FROM vandaag), (SELECT d FROM vandaag))),
   agenda AS (SELECT a.cart_count FROM public.logistics_pick_agenda((SELECT d FROM vandaag), (SELECT d FROM vandaag)) a),
@@ -8545,6 +8627,7 @@ declare
   v_source text;
   v_count integer;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_complete_cart');
   select c.order_id, c.cart_number into v_order, v_index
     from logistics_active.order_carts c where c.id = p_cart_id;
   if v_order is null or v_index is null then
@@ -8594,6 +8677,7 @@ declare
   v_is_flo boolean; v_scanner uuid; v_printer uuid; v_scan public.logistics_control_scan%rowtype;
   v_res jsonb; v_ok boolean; v_scan_only boolean; v_marked integer;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_approve');
   v_look := public.logistics_control_scan_lookup(p_barcode);
   if not coalesce((v_look->>'ok')::boolean, false) then
     return v_look;
@@ -8678,6 +8762,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_claim');
   update public.logistics_control_scan s
      set status = 'mislukt',
          error_code = 'wachtlimiet',
@@ -8722,6 +8807,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare r public.logistics_control_scan%rowtype; v_status text;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_finish');
   v_status := coalesce(_status, case when _ok then 'in_printwachtrij' else 'mislukt' end);
   if v_status = 'geprint' then v_status := 'in_printwachtrij'; end if;
   update public.logistics_control_scan
@@ -8755,6 +8841,7 @@ declare
   v_look jsonb; v_cart_id uuid; v_order_id uuid; v_sales text;
   v_scan public.logistics_control_scan%rowtype; v_seq record;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_lookup');
   v_look := public.logistics_barcode_lookup(p_barcode);
   if not coalesce((v_look->>'ok')::boolean, false) then return v_look; end if;
   v_cart_id := nullif(v_look->'cart'->>'cartId','')::uuid;
@@ -8793,6 +8880,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_control_scan_overview');
   select coalesce(jsonb_agg(x order by x->>'updatedAt' desc), '[]'::jsonb)
     from (
       select jsonb_build_object(
@@ -8830,6 +8918,7 @@ DECLARE
   s public.logistics_control_scan%rowtype;
   v_look jsonb; v_cart jsonb; v_layout jsonb; v_layout_id uuid; v_doc_type text; v_res jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_print_own');
   SELECT * INTO s FROM public.logistics_control_scan WHERE id = p_scan_id;
   IF s.id IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'error', 'Deze controle bestaat niet meer.');
@@ -8886,6 +8975,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n integer := 0; v_c uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_record_afmelding');
   IF p_order_id IS NULL THEN RETURN 0; END IF;
   FOR v_c IN SELECT oc.id FROM logistics_active.order_carts oc WHERE oc.order_id = p_order_id LOOP
     v_n := v_n + public.logistics_control_scan_record_afmelding_cart(v_c, p_bron);
@@ -8907,6 +8997,7 @@ AS $function$
 DECLARE v_bron text := CASE WHEN p_bron IN ('scanner','bulk','controlepost') THEN p_bron ELSE 'onbekend' END;
   v_n integer := 0; v_order uuid; v_number text; v_flo boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_record_afmelding_cart');
   IF p_cart_id IS NULL THEN RETURN 0; END IF;
   SELECT (public.logistics_cart_order_ids(p_cart_id))[1] INTO v_order;
   SELECT o.order_number, nullif(btrim(coalesce(o.floriday_sales_order_id::text,'')),'') IS NOT NULL
@@ -8935,6 +9026,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare r public.logistics_control_scan%rowtype; v_res jsonb;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_scan_retry');
   update public.logistics_control_scan
      set status = case when is_floriday then 'afleverbrief_aangevraagd' else 'goedgekeurd' end,
          attempts = 0, locked_until = null, error = null, error_code = null, updated_at = now()
@@ -8972,6 +9064,7 @@ declare
   f jsonb;
   v_mode text;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_control_settings');
   select settings->'controle'->'fields' into f
     from public.logistics_rule_configs
    order by is_active desc, (status = 'actief') desc, updated_at desc
@@ -9006,6 +9099,7 @@ AS $function$
 DECLARE
   v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cron_health');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -9051,6 +9145,7 @@ DECLARE
   v_tz text := public.logistics_opening_timezone();
   v_has_exception boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_day_windows');
   IF v_tz IS NULL THEN
     RAISE EXCEPTION 'Tijdzone van de vestiging ontbreekt in logistics_time_settings; werkuren kunnen niet berekend worden.';
   END IF;
@@ -9136,6 +9231,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_delivery_agenda');
   WITH idx AS (SELECT * FROM public.logistics_cart_units('1900-01-01'::date, '2999-12-31'::date)),
   scope AS (
     SELECT * FROM idx
@@ -9182,6 +9278,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_tz text := public.logistics_tz(); v_moments jsonb; v_best record; v_list jsonb; v_rows jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_departure_calc');
   IF v_tz IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reason', 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.');
   END IF;
@@ -9250,6 +9347,7 @@ DECLARE v_tz text := public.logistics_tz(); v_carrier uuid := p_carrier_id; v_no
   v jsonb; v_feasible boolean; v_first date; v_first_dl timestamptz; d date; t jsonb; v_reason text;
   v_next jsonb; m jsonb; v_own jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_departure_preview');
   IF v_tz IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reason', 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.');
   END IF;
@@ -9334,6 +9432,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_document_layout');
   SELECT public.logistics_document_layout_v2(_document_code, false);
 $function$
 $fsdef$;
@@ -9354,6 +9453,7 @@ DECLARE
   k text;
   v text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_document_station');
   SELECT settings->'pickstations'->'fields' INTO f
   FROM public.logistics_rule_configs
   ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC
@@ -9445,6 +9545,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_double_group_lines');
   WITH g AS (
     SELECT oi.id, oi.order_id,
            (SELECT pg.id FROM public.product_groups pg
@@ -9480,6 +9581,7 @@ DECLARE
   ev public.logistics_events%ROWTYPE;
   new_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_emit_event');
   IF uid IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   IF p_idempotency_key IS NOT NULL THEN
@@ -9525,6 +9627,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_enqueue_shipping_note_with_slip');
   -- Bewust leeg. Zie trg_logistics_shipping_note_after_slip op public.print_jobs.
   RETURN NULL;
 END;
@@ -9545,6 +9648,7 @@ DECLARE
   item public.pick_queue; dt public.pick_document_types; doc_code text; slip public.print_jobs;
   layout_meta jsonb; v_layout uuid; v_doc_type text := 'sticker'; v_layout_type text; v_plek uuid; v_cart text; v_res jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_enqueue_sticker_with_slip');
   IF NOT public.logistics_sticker_follows_slip() THEN RETURN NULL; END IF;
   IF coalesce(_is_herprint, false) THEN RETURN NULL; END IF;
   SELECT * INTO item FROM public.pick_queue WHERE id = _queue_item_id;
@@ -9638,6 +9742,7 @@ AS $function$
 DECLARE
   v_code text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_ensure_cart_barcode');
   IF _cart_id IS NULL THEN RETURN NULL; END IF;
   v_code := public.logistics_cart_barcode_value(_cart_id);
@@ -9664,6 +9769,7 @@ declare
   v_log_id uuid; v_order_id uuid; v_order_ref text; v_unit_ref text;
   v_actions jsonb := '[]'::jsonb; v_status jsonb; v_cart record; v_rows integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_ensure_pick_data');
   insert into public.logistics_pick_data_requests(event_id, order_ref, missing, status)
   values (p_event_id, coalesce(btrim(p_ref), ''), coalesce(p_missing, '[]'::jsonb), 'processing')
   returning id into v_log_id;
@@ -9730,6 +9836,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_ensure_runtime_defaults');
   INSERT INTO public.module_runtime_config (key, value, updated_at)
   VALUES ('belading_verstuurder', 'engine', now())
   ON CONFLICT (key) DO NOTHING;
@@ -9750,6 +9857,7 @@ DECLARE
   slip record; v_order public.orders; v_order_number text; v_cart uuid; v_bron boolean;
   v_fo integer := 0; v_bvo integer := 0; v_onbekend integer := 0; v_bekeken integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_ensure_shipping_notes');
   IF NOT public.logistics_shipping_note_follows_slip() THEN
     RETURN jsonb_build_object('actief', false, 'bekeken', 0, 'floriday', 0, 'eigen', 0);
   END IF;
@@ -9852,6 +9960,7 @@ DECLARE
   r record;
   v_key text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_expand_line');
   IF p_product_id IS NULL OR COALESCE(p_qty, 0) <= 0 THEN RETURN; END IF;
   IF p_product_id = ANY(p_path) THEN
@@ -9911,6 +10020,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_external_fulfillment_key_report');
   SELECT o.id, o.order_number, o.floriday_sales_order_id, count(*)::int,
          count(*) FILTER (WHERE nullif(btrim(coalesce(oi.source_line_key,'')),'') IS NULL)::int,
          count(*) FILTER (WHERE nullif(btrim(coalesce(oi.source_line_key,'')),'') IS NOT NULL
@@ -9935,6 +10045,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE t public.logistics_tasks%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_fail_task');
   UPDATE public.logistics_tasks
      SET status = 'failed', error = p_error, claimed_by = NULL, claimed_at = NULL, updated_at = now()
    WHERE id = p_task_id AND user_id = auth.uid()
@@ -9958,6 +10069,7 @@ DECLARE
   v_since timestamptz := (SELECT departure_rule_since FROM public.logistics_time_settings ORDER BY updated_at DESC NULLS LAST LIMIT 1);
   v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_fill_cart_departure');
   IF v_since IS NULL THEN RETURN 0; END IF;
   WITH carts AS (
     SELECT c.id FROM public.order_carts c
@@ -10005,6 +10117,7 @@ DECLARE
   v_nr text;
   v_order_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_fix_wrong_shipping_notes');
   FOR r IN
     SELECT j.id,
            nullif(replace(j.idempotentie_sleutel, 'verzendbrief-bij-pakbon:', ''), '') AS slip_txt,
@@ -10055,6 +10168,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_cart_plan');
   WITH so AS (
     SELECT o.floriday_sales_order_id::text AS sid FROM public.orders o WHERE o.id = p_order_id
   ), lc AS (
@@ -10086,6 +10200,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_floriday_claim_pushes');
   RETURN QUERY
   WITH due AS (
     SELECT p.id
@@ -10141,6 +10256,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_finish_push');
   SELECT public.logistics_floriday_finish_push_v2(
     _id, _revision, _ok, _error, _fulfillment_order_id, _sent_hash,
     _permanent, _max_attempts, _max_age_hours, NULL, NULL, NULL
@@ -10158,6 +10274,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_finish_push_v2');
   SELECT public.logistics_floriday_finish_push_v3(
     _id, _revision,
     CASE WHEN _ok THEN 'ok' ELSE 'error' END,
@@ -10189,6 +10306,7 @@ DECLARE
   _age_limit integer;
   _is_wait boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_floriday_finish_push_v3');
   SELECT * INTO _row FROM public.logistics_floriday_pushes WHERE id = _id FOR UPDATE;
   IF NOT FOUND THEN
     RETURN 'missing';
@@ -10398,6 +10516,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_floriday_is_read_only');
   BEGIN
     v := public.floriday_write_mode();
   EXCEPTION WHEN OTHERS THEN
@@ -10420,6 +10539,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_count int; v_std int; v_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_floriday_layout_id');
   SELECT count(*), count(*) FILTER (WHERE is_standaard IS TRUE)
     INTO v_count, v_std
     FROM public.document_layouts
@@ -10453,6 +10573,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_log_refusal');
   INSERT INTO public.logistics_floriday_push_refusals (order_ref, reason, source_module, source_shell, action)
   VALUES (COALESCE(NULLIF(btrim(_order_ref), ''), 'onbekend'), _reason, _module, _shell, _action)
 $function$
@@ -10468,6 +10589,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_log_send');
   INSERT INTO public.logistics_floriday_status_sends (order_ref, action, ok, http_status, detail, source_module, source_shell)
   VALUES (COALESCE(NULLIF(btrim(_order_ref), ''), 'onbekend'), _action, COALESCE(_ok,false), _http_status, _detail, _module, _shell)
 $function$
@@ -10540,6 +10662,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_floriday_order_approved');
   SELECT EXISTS (SELECT 1 FROM public.logistics_control_scan s WHERE s.approved_at IS NOT NULL AND s.order_number = _order_ref)
       OR EXISTS (SELECT 1 FROM public.orders o
                    JOIN public.order_items oi ON oi.order_id = o.id
@@ -10562,6 +10685,7 @@ AS $function$
 DECLARE
   _n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_floriday_prune_pushes');
   DELETE FROM public.logistics_floriday_pushes
   WHERE (
       (status = 'sent' AND sent_at IS NOT NULL AND sent_at < now() - make_interval(days => GREATEST(_days, 1)))
@@ -10585,6 +10709,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_floriday_push_hold_read_only');
   UPDATE public.logistics_floriday_pushes
      SET status = 'pending', locked_until = NULL, locked_by = NULL,
          last_error = 'Tegengehouden: alleen lezen', last_error_code = 'alleen_lezen',
@@ -10608,6 +10733,7 @@ DECLARE
   _id uuid;
   _reason text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_floriday_queue_push');
   IF _order_ref IS NULL OR btrim(_order_ref) = '' THEN RETURN NULL; END IF;
   IF NOT public.logistics_floriday_status_updates_enabled() THEN
@@ -10648,6 +10774,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_p int := 0; v_s int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_floriday_release_read_only');
   IF public.logistics_floriday_is_read_only() THEN
     RETURN jsonb_build_object('readOnly', true, 'pushes', 0, 'shippingNotes', 0);
   END IF;
@@ -10733,6 +10860,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_frozen_allocation_scaled');
   WITH a AS (
     SELECT a.trade_item_key, a.source, a.group_id, a.qty AS old_qty,
            CASE WHEN COALESCE(a.line_qty, 0) > 0 THEN a.qty * GREATEST(COALESCE(p_new_qty, 0), 0) / a.line_qty ELSE a.qty END AS raw
@@ -10766,6 +10894,7 @@ DECLARE
   v_reason text; v_hard boolean; v_delivered integer := 0; v_cancelled integer := 0;
   v_open integer := 0; v_reasons jsonb := '[]'::jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_fulfill_barcode_requests');
   FOR r IN
     SELECT v.print_job_id, v.cart_id::text AS cart_id, v.cart_index, v.order_ref, v.order_nummer,
            j.id AS job_id, j.payload
@@ -10881,6 +11010,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_full_cart_min_layers');
   SELECT NULLIF(GREATEST(0, COALESCE(
     (SELECT public.logistics_rule_num(settings, 'karrenindeling', 'full_cart_min_layers', NULL)
        FROM public.logistics_rule_configs
@@ -10899,6 +11029,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_full_cart_min_percentage');
   SELECT NULLIF(GREATEST(0, COALESCE(
     (SELECT public.logistics_rule_num(settings, 'karrenindeling', 'full_cart_min_percentage', NULL)
        FROM public.logistics_rule_configs
@@ -11020,6 +11151,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_is_beheer');
   SELECT auth.uid() IS NOT NULL AND (
     public.has_role(auth.uid(), 'admin') OR public.has_role(auth.uid(), 'superadmin')
     OR public.has_role(auth.uid(), 'developer'))
@@ -11059,6 +11191,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v text := btrim(COALESCE(p_label, '')); j jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_is_group_label');
   IF left(v, 1) = '{' THEN
     BEGIN j := v::jsonb; v := COALESCE(j->>'nl', j->>'en', j->>'value', v);
     EXCEPTION WHEN others THEN NULL; END;
@@ -11113,6 +11246,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_item_external_fulfilled');
   SELECT EXISTS (SELECT 1 FROM public.logistics_external_fulfillment x
                   WHERE x.order_id = p_order_id
                     AND (x.full_fulfilled OR lower(btrim(coalesce(p_source_line_key,''))) = ANY (x.sales_order_ids)));
@@ -11149,6 +11283,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_key_product');
   SELECT p.id FROM public.products p
    WHERE p.floriday_trade_item_id::text = p_key OR p.id::text = p_key
       OR p.trade_item_key = p_key OR ('product:' || p.id::text) = p_key
@@ -11167,6 +11302,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_layout_method_status');
   SELECT jsonb_build_object(
     'methode', public.logistics_active_layout_method(),
     'actieveWerkwijze', (SELECT name FROM public.logistics_rule_configs WHERE is_active ORDER BY updated_at DESC LIMIT 1),
@@ -11190,6 +11326,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_linked int := 0; v_orders int := 0; r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_link_order_items');
   WITH kandidaten AS (
     SELECT oi.id, oi.order_id, public.logistics_resolve_product_id(oi.product_name::text) AS pid
       FROM logistics_active.order_items oi
@@ -11269,6 +11406,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_local_hhmi');
   SELECT CASE WHEN p_ts IS NULL THEN NULL
               WHEN public.logistics_tz() IS NULL THEN to_char(p_ts AT TIME ZONE 'UTC', 'HH24:MI') || ' UTC (tijdzone ontbreekt bij Werktijden)'
               ELSE to_char(p_ts AT TIME ZONE public.logistics_tz(), 'HH24:MI') END
@@ -11287,6 +11425,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_tz text := public.logistics_tz();
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_local_today');
   IF v_tz IS NULL THEN
     RAISE EXCEPTION 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.' USING ERRCODE = 'P0001';
   END IF;
@@ -11308,6 +11447,7 @@ DECLARE v_cart public.order_carts; v_src text; v_orders uuid[]; v_o uuid; v_k uu
   v_was boolean; v_klaar jsonb := '[]'::jsonb; v_wacht jsonb := '[]'::jsonb; v_seq int; v_num text;
   v_huidig int[]; v_ordnr text; r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_mark_cart_delivered_core');
   IF p_cart_id IS NULL THEN RETURN jsonb_build_object('ok', false, 'reden', 'geen_kar'); END IF;
   PERFORM pg_advisory_xact_lock(hashtextextended('afmelden:' || p_cart_id::text, 0));
   SELECT * INTO v_cart FROM logistics_active.order_carts WHERE id = p_cart_id;
@@ -11400,6 +11540,7 @@ DECLARE
   v_reason text;
   i int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_merge_decision');
   IF jsonb_typeof(v_lines) <> 'array' THEN
     RAISE EXCEPTION 'p_lines moet een JSON-array zijn';
   END IF;
@@ -11503,6 +11644,7 @@ DECLARE
   v_moved int; v_logged int; v_total int := 0; v_count int := 0;
   v_lines text[] := ARRAY[]::text[];
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_merge_floriday_lines');
   IF p_order_id IS NULL THEN RETURN p_order_id; END IF;
   IF NOT public.logistics_merge_lines_enabled() THEN RETURN p_order_id; END IF;
   IF NOT public.logistics_order_mergeable(p_order_id) THEN RETURN p_order_id; END IF;
@@ -11593,6 +11735,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_merge_lines_enabled');
   SELECT c.settings->'order_verwerking'->'fields'->'floriday_merge_lines' INTO v
     FROM public.logistics_rule_configs c WHERE c.is_active ORDER BY c.updated_at DESC LIMIT 1;
   RETURN v IS NOT NULL AND jsonb_typeof(v) = 'boolean' AND v = 'true'::jsonb;
@@ -11613,6 +11756,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare r record; v_count integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_merge_partial_carts');
   if coalesce(public.logistics_pick_mode()->>'pickMode','') <> 'cart' then
     return jsonb_build_object('overgeslagen', 'pickmethode is niet per kar');
   end if;
@@ -11741,6 +11885,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v text; v_json jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_normalize_product_label');
   v := btrim(COALESCE(p_label, ''));
   IF v = '' THEN RETURN NULL; END IF;
   IF left(v, 1) = '{' THEN
@@ -11779,7 +11924,8 @@ DO $fsdo$ BEGIN
  LANGUAGE sql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$ SELECT NULLIF(btrim(timezone), '') FROM public.logistics_time_settings WHERE id LIMIT 1; $function$
+AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_opening_timezone'); SELECT NULLIF(btrim(timezone), '') FROM public.logistics_time_settings WHERE id LIMIT 1; $function$
 $fsdef$;
 EXCEPTION WHEN undefined_object OR undefined_table OR undefined_function OR invalid_schema_name THEN
   RAISE NOTICE 'logistiek-engine: functie public.logistics_opening_timezone overgeslagen (onderdeel van andere module ontbreekt): %', SQLERRM;
@@ -11792,6 +11938,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_order_afgemeld');
   SELECT p_order_id IS NOT NULL AND (
     EXISTS (SELECT 1 FROM public.orders o WHERE o.id = p_order_id
                AND lower(btrim(coalesce(o.status, ''))) IN ('verzonden','gereed voor facturatie','afgerond','klaar voor verzending'))
@@ -11815,6 +11962,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_all_carts_scanned');
   SELECT cardinality(k) > 0 AND NOT EXISTS (SELECT 1 FROM unnest(k) cid WHERE NOT public.logistics_cart_scanned(cid))
     FROM (SELECT public.logistics_order_cart_ids(p_order_id) AS k) s
 $function$
@@ -11830,6 +11978,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_backlog_info');
   SELECT jsonb_build_object('achterstand', true, 'leverdatum', (o.delivery_date::text)::date,
            'dagen', (now() AT TIME ZONE public.logistics_tz())::date - (o.delivery_date::text)::date)
     FROM public.orders o
@@ -11854,6 +12003,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_order_buffer_excluded');
   SELECT EXISTS (SELECT 1 FROM public.logistics_order_plan_exclusion x WHERE x.order_id = p_order_id)
       OR public.logistics_order_afgemeld(p_order_id)
 $function$
@@ -11870,6 +12020,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_cart_approval');
   WITH o AS (
     SELECT id FROM public.orders
      WHERE order_number = _order_ref AND deleted_at IS NULL
@@ -11935,6 +12086,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_cart_ids');
   SELECT coalesce(array_agg(DISTINCT k.cid) FILTER (WHERE k.cid IS NOT NULL), '{}') FROM (
     SELECT c.id AS cid FROM logistics_active.order_carts c WHERE c.order_id = p_order_id
     UNION SELECT ci.cart_id FROM logistics_active.order_cart_items ci JOIN public.order_items oi ON oi.id = ci.order_item_id
@@ -11956,6 +12108,7 @@ AS $function$
 DECLARE v_number text; v_ok boolean; v_wacht jsonb; v_fp text;
   v_reason text := COALESCE(NULLIF(btrim(p_reason), ''), 'wijziging');
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_changed');
   IF p_order_id IS NULL THEN RETURN; END IF;
   IF COALESCE(current_setting('logistics.replanning', true), '') = '1' THEN RETURN; END IF;
   v_fp := public.logistics_order_fp(p_order_id);
@@ -12021,6 +12174,7 @@ DECLARE
   v_out text[] := '{}';
   v_num text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_order_current_warnings');
   IF p_order_id IS NULL THEN RETURN v_out; END IF;
   IF public.logistics_allocation_frozen(p_order_id) THEN
@@ -12062,6 +12216,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_max int := COALESCE(public.logistics_plan_setting('max_attempts', 5)::int, 5);
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_definitively_blocked');
   IF auth.uid() IS NULL AND auth.role() <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   SELECT q.status, q.attempts, q.reason_code, q.reason, q.error INTO r
     FROM public.logistics_plan_queue q WHERE q.order_id = p_order_id
@@ -12086,6 +12241,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_id uuid; d jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_departure_list');
   IF p_order_ids IS NULL THEN RETURN; END IF;
   IF array_length(p_order_ids, 1) > 1000 THEN
     RAISE EXCEPTION 'Maximaal 1000 orders per aanvraag.';
@@ -12129,6 +12285,7 @@ DECLARE
   v_stickers_zonder_pdf integer := 0;
   v_note_ok boolean := false;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_documents_ready');
   IF coalesce(btrim(p_order_ref), '') = '' THEN
     RETURN jsonb_build_object('klaar', false, 'reden', 'Geen ordernummer opgegeven.');
   END IF;
@@ -12230,6 +12387,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_documents_ready_bool');
   SELECT coalesce((public.logistics_order_documents_ready(p_order_ref) ->> 'klaar')::boolean, false);
 $function$
 $fsdef$;
@@ -12244,6 +12402,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_external_state');
   SELECT jsonb_build_object('full', x.full_fulfilled, 'salesOrderIds', to_jsonb(x.sales_order_ids),
                             'reason', x.reason, 'appliedAt', x.applied_at, 'eventId', x.event_id)
     FROM public.logistics_external_fulfillment x WHERE x.order_id = p_order_id;
@@ -12261,6 +12420,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_enqueue');
   IF p_order_id IS NULL THEN
     RETURN;
   END IF;
@@ -12296,6 +12456,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_overview');
   SELECT
     count(*) FILTER (WHERE status = 'pending')::int,
     count(*) FILTER (WHERE status = 'running')::int,
@@ -12326,6 +12487,7 @@ AS $function$
 DECLARE
   v_count integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_prune');
   WITH weg AS (
     DELETE FROM public.logistics_order_finalize_queue q
      WHERE (q.status = 'done'
@@ -12354,6 +12516,7 @@ DECLARE
   r record;
   v_count integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_reconcile');
   FOR r IN
     WITH kandidaat AS (
       SELECT o.id,
@@ -12400,6 +12563,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_retry');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'niet ingelogd';
   END IF;
@@ -12431,6 +12595,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_done integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_finalize_run');
   IF NOT EXISTS (SELECT 1 FROM public.logistics_order_finalize_queue q WHERE q.status IN ('pending', 'running')) THEN RETURN 0; END IF;
   FOR r IN
     WITH kandidaat AS (
@@ -12483,6 +12648,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_order_fp');
   SELECT md5(concat_ws('|', o.status, o.delivery_date, o.customer_id, o.buffer_id, o.deleted_at, o.is_reservation,
                        o.plan_locked_at, o.custom_fields::text))
     FROM public.orders o WHERE o.id = p_order_id
@@ -12501,6 +12667,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_number text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_frozen');
   SELECT o.order_number INTO v_number FROM public.orders o WHERE o.id = p_order_id;
   IF v_number IS NULL THEN RETURN false; END IF;
   IF EXISTS (SELECT 1 FROM public.logistics_order_plan_exclusion x WHERE x.order_id = p_order_id) THEN RETURN true; END IF;
@@ -12523,6 +12690,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_handled');
   WITH karren AS (SELECT DISTINCT oc.cart_number AS cart_index FROM logistics_active.order_carts oc WHERE oc.order_id = p_order_uuid),
   gedeeld AS (
     SELECT DISTINCT ci.cart_id FROM logistics_active.order_cart_items ci JOIN public.order_items oi ON oi.id = ci.order_item_id
@@ -12556,6 +12724,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_is_archived');
   IF auth.uid() IS NULL AND auth.role() <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   SELECT q.status, q.updated_at, COALESCE(q.error, q.reason) AS reden INTO r
     FROM public.logistics_plan_queue q WHERE q.order_id = p_order_id ORDER BY q.updated_at DESC LIMIT 1;
@@ -12578,6 +12747,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_max integer := public.logistics_pick_backlog_max_days(); v_info jsonb; v_ref text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_is_backlog');
   IF v_max IS NULL THEN RETURN false; END IF;
   v_info := public.logistics_order_backlog_info(p_order_id);
   IF v_info IS NULL OR (v_info->>'dagen')::int > v_max THEN RETURN false; END IF;
@@ -12597,6 +12767,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_is_frozen');
   SELECT EXISTS (
     SELECT 1 FROM public.pick_queue p
      WHERE p.cancelled_at IS NULL
@@ -12644,6 +12815,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_is_topick');
   SELECT EXISTS (
     SELECT 1
       FROM public.orders o
@@ -12711,6 +12883,7 @@ DECLARE
   v_oi record; part record; member_rec record;
   v_key text; v_last text; v_rem numeric; v_av numeric; v_take numeric; v_err text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_order_line_allocation');
   IF p_order_item_id IS NULL THEN RETURN; END IF;
   IF EXISTS (SELECT 1 FROM public.logistics_double_group_lines(
@@ -12796,6 +12969,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_line_duplicates');
   WITH groepen AS (
     SELECT
       count(*) AS aantal
@@ -12856,6 +13030,7 @@ AS $function$
 DECLARE
   v_ok boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_mergeable');
   SELECT (o.deleted_at IS NULL
           AND o.cancelled_at IS NULL
           AND o.plan_locked_at IS NULL
@@ -12888,6 +13063,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_order_on_frozen_shared_cart');
   SELECT EXISTS (
     SELECT 1 FROM public.logistics_shared_cart_peers(p_order_id) p
       JOIN logistics_active.order_carts c ON c.id = p.cart_id
@@ -12912,6 +13088,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_overview');
   WITH idx AS (
     SELECT * FROM public.logistics_cart_index(
       COALESCE(p_from, '1900-01-01'::date),
@@ -12956,6 +13133,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_pick_day');
   SELECT COALESCE(
     NULLIF(o.custom_fields ->> 'manual_pick_day', '')::date,
     (SELECT min((lt.planned_start AT TIME ZONE public.logistics_tz())::date)
@@ -12983,6 +13161,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE b jsonb := public.logistics_order_plan_coverage_v165(p_order_id); x jsonb := public.logistics_order_external_state(p_order_id);
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_plan_coverage');
   IF x IS NULL THEN RETURN b || jsonb_build_object('externalFulfilled', NULL); END IF;
   IF (x->>'full')::boolean THEN
     b := b || jsonb_build_object('state', 'afgehandeld_extern', 'label', 'Afgehandeld in Floriday',
@@ -13002,6 +13181,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_plan_coverage_list');
   WITH b AS (SELECT * FROM public.logistics_order_plan_coverage_list_v152(p_order_ids)),
   mem AS (
     SELECT DISTINCT b.buffer_id AS buf, o.id AS oid FROM b
@@ -13038,6 +13218,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_order_plan_coverage_list_v152');
   IF p_order_ids IS NULL THEN RETURN; END IF;
   IF cardinality(p_order_ids) > 1000 THEN
     RAISE EXCEPTION 'Te veel orders in één aanroep (%); maximaal 1000.', cardinality(p_order_ids);
@@ -13108,6 +13289,7 @@ DECLARE
   v_pick text; v_picked_at timestamptz; v_total int; v_done int; v_printed int;
   v_ncarts int; v_nscanned int; v_scan_at timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_order_plan_coverage_v165');
   SELECT o.id, o.order_number, o.buffer_id INTO v_order FROM public.orders o WHERE o.id = p_order_id;
   IF NOT FOUND THEN
     RETURN jsonb_build_object('orderId', p_order_id, 'state', 'onbekend', 'reason', 'Order niet gevonden.');
@@ -13257,6 +13439,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_orphan_carts_list');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag de opruimlijst bekijken.';
   END IF;
@@ -13290,6 +13473,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_orphan_carts_summary');
   SELECT COALESCE(jsonb_agg(jsonb_build_object('reden', x.reden, 'aantal', x.n, 'oudste', x.oudste, 'nieuwste', x.nieuwste) ORDER BY x.n DESC), '[]'::jsonb)
   FROM (
     SELECT CASE
@@ -13318,6 +13502,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_tz text := public.logistics_tz(); v_open time; v_closed boolean; v_at timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_own_transport_departure');
   IF v_tz IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'ownTransport', true, 'reason', 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.');
   END IF;
@@ -13364,6 +13549,7 @@ DECLARE
   v_order record;
   v_locked timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_block_reason');
   SELECT o.status, o.plan_locked_at, o.deleted_at, o.is_reservation
     INTO v_order
     FROM public.orders o
@@ -13442,6 +13628,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_dismiss');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'niet ingelogd';
   END IF;
@@ -13467,6 +13654,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_packing_overview');
   SELECT
     count(*) FILTER (WHERE resolved_at IS NULL)::int,
     count(*) FILTER (WHERE resolved_at IS NULL AND needs_human)::int,
@@ -13496,6 +13684,7 @@ DECLARE
   v_open integer;
   v_fix integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_reconcile');
   v_open := public.logistics_packing_scan(p_scan_limit);
   v_fix := public.logistics_packing_autofix(p_fix_limit);
@@ -13522,6 +13711,7 @@ AS $function$
 DECLARE
   v_open integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_scan');
   CREATE TEMP TABLE _pack_diff ON COMMIT DROP AS
     SELECT * FROM public.logistics_packing_diff
      LIMIT GREATEST(1, LEAST(p_limit, 5000));
@@ -13589,6 +13779,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_set_manual');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'niet ingelogd';
   END IF;
@@ -13613,6 +13804,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_pakbon_old_order_row');
   SELECT p_ids IS NOT NULL AND cardinality(p_ids) > 0 AND EXISTS (
     SELECT 1 FROM public.pick_queue q
       JOIN public.pick_document_types t ON t.id = q.document_type_id AND t.code = 'pakbon'
@@ -13635,6 +13827,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_pakbon_oude_orderregels');
   WITH oud AS (
     SELECT q.id, q.document_number, (q.printed_at IS NOT NULL OR q.completed_at IS NOT NULL) AS afgehandeld,
            array_agg(DISTINCT o.id) AS ids
@@ -13684,6 +13877,7 @@ DECLARE
   v_date date;
   v_time time;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_parse_pickup');
   IF p_value IS NULL OR btrim(p_value) = '' THEN RETURN NULL; END IF;
   v_parts := string_to_array(p_value, '|');
   BEGIN
@@ -13715,6 +13909,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE s jsonb; v text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_partial_wait_minutes');
   SELECT settings INTO s FROM public.logistics_rule_configs ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC LIMIT 1;
   v := CASE WHEN s IS NULL THEN NULL ELSE public.logistics_rule_text(s, 'order_picken', 'deelkar_wacht_minuten', '15') END;
   RETURN greatest(0, least(coalesce(nullif(v, '')::int, 15), 1440));
@@ -13737,6 +13932,7 @@ DECLARE
   v_order_id_txt text;
   v_order public.orders;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_payload_is_floriday');
   IF _payload IS NULL THEN RETURN NULL; END IF;
   IF nullif(_payload->>'floriday_sales_order_id', '') IS NOT NULL
      OR nullif(_payload->'data'->>'floridaySalesOrderId', '') IS NOT NULL THEN
@@ -13782,6 +13978,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_pick_agenda');
   WITH idx AS (SELECT * FROM public.logistics_cart_units(p_from, p_to)),
   per_unit AS (
     SELECT i.pick_date, i.unit_ref, bool_or(i.is_buffer) AS is_buffer,
@@ -13826,6 +14023,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_on text; v_days text; n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_backlog_max_days');
   BEGIN
     SELECT lower(btrim(value)) INTO v_on FROM public.module_runtime_config WHERE key = 'logistics_pick_backlog_enabled' LIMIT 1;
     SELECT btrim(value) INTO v_days FROM public.module_runtime_config WHERE key = 'logistics_pick_backlog_max_days' LIMIT 1;
@@ -13852,6 +14050,7 @@ AS $function$
 DECLARE
   s jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_barcode_enabled');
   SELECT settings INTO s
     FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC
@@ -13877,6 +14076,7 @@ AS $function$
 DECLARE
   p text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_email_purpose');
   FOREACH p IN ARRAY ARRAY['orders','customer','klant','internal','marketing'] LOOP
     IF EXISTS (
       SELECT 1 FROM public.email_auth_connections c
@@ -13933,6 +14133,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare s jsonb; v text;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_partial_mode');
   select settings into s from public.logistics_rule_configs
    order by is_active desc, (status = 'actief') desc, updated_at desc limit 1;
   if s is null then return 'after_checkin'; end if;
@@ -13953,6 +14154,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n integer := 0; r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_queue_close');
   IF p_ids IS NULL OR cardinality(p_ids) = 0 THEN RETURN 0; END IF;
   FOR r IN
     UPDATE public.pick_queue q
@@ -14052,6 +14254,7 @@ DECLARE
   pick_start timestamptz;
   default_minutes numeric;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_pick_start_estimate');
   BEGIN
     checkin_at := NULLIF(p_order ->> 'checkinAt', '')::timestamptz;
   EXCEPTION WHEN others THEN checkin_at := NULL; END;
@@ -14113,6 +14316,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_pick_units');
   WITH leden AS (
     SELECT o.id, o.order_number, o.buffer_id
     FROM public.orders o
@@ -14139,6 +14343,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_pickup_moments_today');
   WITH ids AS MATERIALIZED (SELECT unnest(public.logistics_today_cart_ids()) AS id),
   scanned AS MATERIALIZED (
     SELECT DISTINCT s.cart_id FROM public.logistics_control_scan s
@@ -14227,6 +14432,7 @@ DECLARE
   v_pickup timestamptz;
   v_indeling jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_all');
   IF p_user_id IS NULL THEN RAISE EXCEPTION 'user_id ontbreekt'; END IF;
   BEGIN
@@ -14342,6 +14548,7 @@ DECLARE
   v_last jsonb;
   v_members text[];
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_block');
   IF p_order_ids IS NULL OR array_length(p_order_ids, 1) IS NULL THEN
     RETURN 0;
   END IF;
@@ -14465,6 +14672,7 @@ DECLARE
   v_fl uuid[] := ARRAY[]::uuid[];
   o record;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_buffer_sql');
   IF (public.logistics_cart_layout_method() ->> 'layoutMethod') = 'afmetingen' THEN
     RETURN 0;
   END IF;
@@ -14632,6 +14840,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_limit int := COALESCE(p_limit, public.logistics_plan_setting('batch_size', 10)::int);
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_claim');
   PERFORM public.logistics_plan_release_stale();
   RETURN QUERY
   WITH pick AS (
@@ -14663,6 +14872,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_close_claim');
   UPDATE public.logistics_plan_queue q
      SET status='geblokkeerd', reason=COALESCE(p_reason, q.reason), error=p_reason,
          reason_code=COALESCE(p_reason_code, public.logistics_block_reason_code(p_reason, '{}'::jsonb)),
@@ -14687,6 +14897,7 @@ DECLARE
   v_max int := public.logistics_plan_setting('coverage_max_attempts', 3)::int;
   r record; v_pct int; v_att int; v_queued int := 0; v_gaveup int := 0; v_fixed int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_coverage_check');
   -- Hersteld: pogingenregel opruimen.
   DELETE FROM public.logistics_plan_coverage_retries c
    WHERE c.order_id IN (
@@ -14752,6 +14963,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_order uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_defer');
   SELECT order_id INTO v_order FROM public.logistics_plan_queue WHERE id = p_id;
   UPDATE public.logistics_plan_queue
@@ -14782,6 +14994,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_plan_due_count');
   SELECT count(*)::int FROM public.logistics_plan_queue WHERE status = 'pending' AND next_attempt_at <= now()
 $function$
 $fsdef$;
@@ -14804,6 +15017,7 @@ DECLARE
   v_target uuid := p_order_id;
   v_wacht jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_enqueue');
   IF COALESCE(current_setting('logistics.merging', true), '') <> '1' THEN
     BEGIN
       PERFORM set_config('logistics.merging', '1', true);
@@ -14882,6 +15096,7 @@ DECLARE
   v_user uuid;
   v_pickup timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_ensure_event');
   SELECT id, order_number, delivery_date, custom_fields, buffer_id
     INTO o
     FROM public.orders
@@ -15000,6 +15215,7 @@ DECLARE
   v_next timestamptz;
   v_min numeric;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_finish');
   SELECT order_id, attempts INTO v_order, v_attempts
     FROM public.logistics_plan_queue WHERE id = p_id;
@@ -15074,6 +15290,7 @@ DECLARE
   v_share numeric;
   v_crates integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_floriday_order');
   -- Werkwijze "Indelen op basis van afmetingen": de SQL-belading mag dan niets
   -- indelen. Alleen de afmetingenplanner van de engine schrijft dan karren.
   IF (public.logistics_cart_layout_method() ->> 'layoutMethod') = 'afmetingen' THEN
@@ -15155,6 +15372,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_resolved int := 0; v_archived int := 0; v_alerts int := 0; v_gone int := 0; v_refs text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_housekeeping');
   UPDATE public.logistics_plan_queue q SET status='opgelost', error='opgelost: order is al verzonden',
          claimed_at=NULL, updated_at=now()
     FROM public.orders o
@@ -15212,6 +15430,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_plan_impact_orders');
   WITH src AS (SELECT id, buffer_id, delivery_date FROM public.orders WHERE id = p_order_id)
   SELECT o.id, o.buffer_id, o.delivery_date
     FROM public.orders o, src
@@ -15236,6 +15455,7 @@ DECLARE
   v_debounce int := public.logistics_plan_setting('kick_debounce_seconds', 5)::int;
   v_running boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_kick');
   -- Loopt er al een tick-ronde (slot 'tick:ronde')? Dan geen tweede ronde wekken.
   -- Fail-closed: kan dit niet worden vastgesteld, dan valt de EXCEPTION-tak
   -- hieronder en wordt de wek-aanroep overgeslagen; de minuut-cron is het vangnet.
@@ -15283,6 +15503,7 @@ AS $function$
 DECLARE
   _got boolean := false;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_lock_acquire');
   IF _key IS NULL OR btrim(_key) = '' THEN
     RETURN false;
   END IF;
@@ -15316,6 +15537,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_plan_lock_release');
   DELETE FROM public.logistics_plan_locks
    WHERE lock_key = _key
      AND (_owner IS NULL OR owner IS NOT DISTINCT FROM _owner);
@@ -15337,6 +15559,7 @@ BEGIN
     PERFORM public.logistics_order_changed(COALESCE(NEW.order_id, OLD.order_id), 'orderregels gewijzigd');
   EXCEPTION WHEN OTHERS THEN
     RAISE WARNING 'logistiek-engine: aanmelden voor indeling mislukt voor order %: %', COALESCE(NEW.order_id, OLD.order_id), SQLERRM;
+    PERFORM public.logistics_plan_fail_log('trg_logistics_plan_order_items', COALESCE(NEW.order_id, OLD.order_id), SQLSTATE, SQLERRM);
   END;
   RETURN COALESCE(NEW, OLD);
 END;
@@ -15379,6 +15602,7 @@ BEGIN
     PERFORM public.logistics_order_changed(NEW.id, v_reason);
   EXCEPTION WHEN OTHERS THEN
     RAISE WARNING 'logistiek-engine: aanmelden voor indeling mislukt voor order %: %', NEW.id, SQLERRM;
+    PERFORM public.logistics_plan_fail_log('trg_logistics_plan_orders', NEW.id, SQLSTATE, SQLERRM);
   END;
   RETURN NEW;
 END;
@@ -15436,6 +15660,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare r text; v jsonb;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_progress');
   if p_refs is null then return; end if;
   foreach r in array p_refs loop
     if r is null or btrim(r) = '' then continue; end if;
@@ -15463,6 +15688,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_plan_progress_pct');
   SELECT CASE WHEN t.totaal = 0 THEN NULL
               ELSE LEAST(100, GREATEST(0, ROUND(100.0 * t.gedaan / t.totaal)))::int END
     FROM (
@@ -15487,6 +15713,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int; v_days int := public.logistics_plan_setting('retention_days', 7)::int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_prune');
   DELETE FROM public.logistics_plan_queue
    WHERE status IN ('done','failed') AND updated_at < now() - make_interval(days => v_days);
   GET DIAGNOSTICS v_n = ROW_COUNT;
@@ -15506,6 +15733,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_plan_queue_list');
   WITH b AS (
     SELECT q.*, o.order_number AS o_number, o.customer_name AS o_customer, o.created_at AS o_created,
            public.logistics_plan_progress_pct(q.order_id) AS pct
@@ -15560,6 +15788,7 @@ DECLARE
   v_txt text;
   r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_release_stale');
   v_txt := 'de ronde heeft deze indeling na ' || v_min || ' minuten niet afgesloten (claim niet afgerond)';
   FOR r IN
     UPDATE public.logistics_plan_queue q
@@ -15608,6 +15837,7 @@ DECLARE
   v_scope text := lower(COALESCE(p_scope, 'failed'));
   r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_reset_queue');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -15667,6 +15897,7 @@ DECLARE
   v_n integer := 0;
   v_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_retry');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -15712,6 +15943,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_plan_setting');
   SELECT COALESCE((SELECT NULLIF(value,'')::numeric FROM public.logistics_plan_settings WHERE key = p_key), p_default);
 $function$
 $fsdef$;
@@ -15731,6 +15963,7 @@ declare
   v_plan_state text; v_progress integer; v_since timestamptz;
   v_order_id uuid; v_order_ref text; v_cart_id uuid; v_ref text;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_state_for');
   v_ref := btrim(coalesce(p_ref, ''));
   if v_ref = '' then
     return jsonb_build_object('ref', p_ref, 'planState', 'blocked', 'planProgress', null,
@@ -15803,6 +16036,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_timeout_running');
   IF auth.uid() IS NULL THEN
     RETURN 0;
   END IF;
@@ -15822,6 +16056,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_plan_unarchive');
   IF auth.uid() IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   IF p_order_ids IS NULL OR array_length(p_order_ids,1) IS NULL THEN RETURN 0; END IF;
   UPDATE public.logistics_plan_queue q SET status='pending', attempts=0, reason='opnieuw aangeboden na archief',
@@ -15846,6 +16081,7 @@ DECLARE
   v_reason text := lower(btrim(COALESCE(p_reason, '')));
   v_q record;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_wachttijd');
   IF p_order_id IS NULL OR auth.uid() IS NOT NULL
      OR v_reason NOT IN ('order_gewijzigd', 'nieuwe of gewijzigde floriday-order', 'wijziging', 'change', 'verdeling gewijzigd', '') THEN
     RETURN jsonb_build_object('wacht', false);
@@ -15879,6 +16115,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_wachttijd_melden');
   PERFORM public.logistics_trace_order_step(
     p_order_id, 'stap:beladingindeling', 'wachttijd na mislukte indeling', 'wachtend',
     CASE WHEN p_wacht->>'status' = 'failed' THEN 'niet opnieuw ingedeeld (gestopt na mislukte pogingen)'
@@ -15903,6 +16140,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_planner_cart_snapshot');
   SELECT COALESCE(jsonb_agg(jsonb_build_object(
       'cartId', c.id, 'cartNumber', c.cart_number, 'bufferId', c.buffer_id, 'orderId', c.order_id,
       'items', COALESCE((SELECT jsonb_agg(jsonb_build_object('orderItemId', i.order_item_id, 'crates', i.crates)
@@ -15926,6 +16164,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_planner_diff_mode');
   BEGIN
     SELECT lower(btrim(value)) INTO v FROM public.module_runtime_config WHERE key = 'logistics_planner_diff_mode' LIMIT 1;
   EXCEPTION WHEN others THEN RETURN 'off';
@@ -15947,6 +16186,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE n int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_planner_diff_prune');
   DELETE FROM public.logistics_planner_diff_runs WHERE created_at < now() - interval '30 days';
   GET DIAGNOSTICS n = ROW_COUNT; RETURN n;
 END $function$
@@ -15970,6 +16210,7 @@ DECLARE
   v_err text;
   v_comp jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_planner_lines');
   IF p_order_id IS NULL THEN RETURN; END IF;
   v_frozen := public.logistics_allocation_frozen(p_order_id);
   SELECT COALESCE(array_agg(d.order_item_id), '{}') INTO v_double FROM public.logistics_double_group_lines(p_order_id) d;
@@ -16050,6 +16291,7 @@ declare
   v_open integer := 0;
   v_totaal integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_prepare_pick_documents');
   for r in
     select distinct q.order_number
       from public.pick_queue q
@@ -16090,6 +16332,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_print_job_state');
   SELECT status::text FROM public.print_jobs WHERE id = p_job_id;
 $function$
 $fsdef$;
@@ -16109,6 +16352,7 @@ DECLARE
   v_code text;
   v_msg text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_print_via_layout');
   SELECT * INTO r FROM public.layout_print_document(
     _documenttype, _documentnaam, _pdf_base64, _pdf_url, _layout_id,
     _print_plek_id, NULL, 1, _herkomst, coalesce(_is_herprint, false),
@@ -16135,6 +16379,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_prune_buffer_member_queue');
   RETURN public.logistics_pick_queue_close(ARRAY(
     SELECT q.id FROM public.pick_queue q
      WHERE q.cancelled_at IS NULL AND q.completed_at IS NULL
@@ -16157,6 +16402,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_count bigint;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_prune_cron_history');
   DELETE FROM cron.job_run_details WHERE start_time < now() - make_interval(days => GREATEST(COALESCE(p_days, 7), 1));
   GET DIAGNOSTICS v_count = ROW_COUNT;
   RETURN v_count;
@@ -16175,6 +16421,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_prune_handled_pick_queue');
   -- Kar gescand/afgemeld: regel afronden. Karregel kijkt naar de eigen kar.
   v_n := public.logistics_pick_queue_close(ARRAY(
     SELECT q.id FROM public.pick_queue q
@@ -16210,6 +16457,7 @@ DECLARE
   outbox_id uuid;
   body_txt text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_queue_capacity_email');
   SELECT * INTO a FROM public.logistics_capacity_alerts WHERE id = p_alert_id;
   IF NOT FOUND OR NOT COALESCE(a.email_enabled, false) THEN RETURN NULL; END IF;
@@ -16266,6 +16514,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_queue_row_has_open_peer');
   SELECT EXISTS (
     SELECT 1
       FROM jsonb_array_elements_text(
@@ -16301,6 +16550,7 @@ DECLARE
   conn_id uuid; lines_txt text := ''; lines_html text := ''; rec jsonb; outbox_id uuid;
   v_link text; v_datum text; v_code text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_queue_stock_email');
   SELECT * INTO a FROM public.logistics_stock_alerts WHERE id = p_alert_id;
   IF NOT FOUND THEN RETURN NULL; END IF;
   IF NOT COALESCE(a.email_enabled, false) THEN RETURN NULL; END IF;
@@ -16366,6 +16616,7 @@ DECLARE
   r record;
   n int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_reapply_buffer_decisions');
   FOR r IN
     SELECT id FROM public.orders
      WHERE deleted_at IS NULL
@@ -16395,6 +16646,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_today date := public.logistics_local_today(); -- fail closed zonder tijdzone
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_rebuffer_candidates');
   RETURN QUERY
   WITH base AS MATERIALIZED (
     SELECT o.id FROM public.orders o
@@ -16435,6 +16687,7 @@ DECLARE
   changed int := 0;
   checked int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_rebuffer_open_orders');
   FOR r IN
     SELECT order_ref,
            (array_agg(payload ORDER BY sequence))[1] AS payload,
@@ -16495,6 +16748,7 @@ DECLARE
   v_mode text; v_checked int := 0; v_updated int := 0; v_would int := 0;
   v_start timestamptz := clock_timestamp(); v_ms int; r record; v_after uuid; v_report jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_rebuffer_orders');
   SELECT CASE WHEN lower(btrim(value)) = 'apply' THEN 'apply' ELSE 'report' END
     INTO v_mode FROM public.module_runtime_config WHERE key = 'logistics_rebuffer_mode';
   v_mode := coalesce(v_mode, 'report');
@@ -16540,6 +16794,7 @@ AS $function$
 DECLARE
   v_pending boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_rebuffer_pending');
   SELECT pending INTO v_pending FROM public.logistics_rebuffer_state WHERE id;
   IF NOT COALESCE(v_pending, false) THEN
     RETURN jsonb_build_object('skipped', true);
@@ -16561,6 +16816,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v jsonb; s record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_rebuffer_report');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag de herindeellijst bekijken.';
   END IF;
@@ -16590,6 +16846,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_rebuffer_simulate_open');
   RETURN QUERY
   WITH c AS MATERIALIZED (
     SELECT o.id, o.order_number, o.delivery_date, o.buffer_id, public.logistics_buffer_target(o.id) AS t
@@ -16631,6 +16888,7 @@ AS $function$
 DECLARE
   v_base text; v_key text; v_path text; v_req bigint; v_host text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_recalc_tick_kick');
   BEGIN PERFORM public.logistics_tick_calls_resolve(); EXCEPTION WHEN others THEN NULL; END;
   SELECT NULLIF(btrim(value),'') INTO v_base FROM public.module_runtime_config WHERE key = 'logistics_tick_base_url';
@@ -16674,6 +16932,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare v_status jsonb; v_ref text; v_updated integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_refresh_pick_queue_status');
   v_ref := btrim(coalesce(p_ref, ''));
   if v_ref = '' then return 0; end if;
   v_status := public.logistics_cart_plan_status(v_ref);
@@ -16714,6 +16973,7 @@ declare
   v_updated integer := 0;
   v_removed integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_refresh_pickup_moments');
   -- Bron: uitsluitend de vervoerdersinstellingen van de klant (public.carriers).
   -- Geen omgevingswaarden of standaardtijden in code: is er niets ingesteld,
   -- dan gebeurt er niets en blijft de tabel leeg (fail closed).
@@ -16815,6 +17075,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare rec record; v jsonb; v_ref text; v_updated integer := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_refresh_plan_state');
   for rec in
     select q.id, q.payload, q.order_number, q.document_number
       from public.pick_queue q
@@ -16854,6 +17115,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_count int := 0; r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_all');
   IF auth.uid() IS NOT NULL AND pg_trigger_depth() = 0 AND NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer (admin, superadmin of developer) mag orders opnieuw indelen.' USING ERRCODE = '42501';
   END IF;
@@ -16896,6 +17158,7 @@ DECLARE
   v_cleanup jsonb;
   r record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_all_force');
   IF auth.uid() IS NOT NULL AND pg_trigger_depth() = 0 AND NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer (admin, superadmin of developer) mag orders opnieuw indelen.' USING ERRCODE = '42501';
   END IF;
@@ -16995,6 +17258,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_replan_candidates');
   SELECT o.id, public.logistics_order_is_frozen(o.id)
     FROM public.orders o
    WHERE o.deleted_at IS NULL AND o.cancelled_at IS NULL
@@ -17018,6 +17282,7 @@ AS $function$
 DECLARE v_number text; v_buffer uuid; v_items int := 0; v_carts int := 0; v_skipped int := 0;
   v_cart_ids uuid[]; v_empty uuid[];
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_replan_clear_foreign_cart_items');
   SELECT order_number, buffer_id INTO v_number, v_buffer FROM orders WHERE id = p_order_id;
   IF v_number IS NULL THEN RETURN jsonb_build_object('regels',0,'karren',0); END IF;
@@ -17082,6 +17347,7 @@ DECLARE
   v_events int := 0; v_runs int := 0;
   v_target uuid; v_foreign jsonb; v_mode text := public.logistics_planner_diff_mode();
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_order_journey');
   SELECT o.id, o.order_number, o.buffer_id INTO v_order_id, v_number, v_buffer
     FROM public.orders o WHERE o.order_number = p_order_ref
    LIMIT 1;
@@ -17141,6 +17407,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_order_journey');
   PERFORM set_config('logistics.replan_reason', COALESCE(NULLIF(btrim(p_reason),''),'handmatige_herberekening'), true);
   r := public.logistics_replan_order_journey(p_order_ref);
   PERFORM set_config('logistics.replan_reason', '', true);
@@ -17161,6 +17428,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_total int; v_frozen int;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_preview');
   IF NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer (admin, superadmin of developer) mag orders opnieuw indelen.' USING ERRCODE = '42501';
   END IF;
@@ -17185,6 +17453,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_ids uuid[]; v_n int; v_id uuid; v_ok int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_replan_selected');
   IF NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer (admin, superadmin of developer) mag orders opnieuw indelen.' USING ERRCODE = '42501';
   END IF;
@@ -17219,6 +17488,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_id uuid; v_out jsonb := '[]'::jsonb; v_before jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_replan_selected_orders');
   IF p_order_ids IS NULL OR cardinality(p_order_ids) = 0 THEN RAISE EXCEPTION 'Geen orders opgegeven.'; END IF;
   IF cardinality(p_order_ids) > 100 THEN RAISE EXCEPTION 'Hooguit 100 orders per keer.'; END IF;
   FOREACH v_id IN ARRAY p_order_ids LOOP
@@ -17263,6 +17533,7 @@ DECLARE
   cust_email text; cust_lang text; cust_name text;
   mail record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_report_delay');
   SELECT * INTO ord FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF NOT FOUND THEN RETURN NULL; END IF;
@@ -17446,6 +17717,7 @@ DECLARE
   mail record;
   v_purpose text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_report_delay');
   SELECT * INTO ord FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF NOT FOUND THEN RETURN NULL; END IF;
@@ -17613,6 +17885,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_reason text; v_last text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_report_frozen_shortage');
   IF p_order_item_ids IS NULL OR cardinality(p_order_item_ids) = 0 THEN RETURN; END IF;
   FOR r IN
     SELECT DISTINCT oi.order_id, o.order_number, COALESCE(p.product, a.trade_item_key) AS lid
@@ -17754,6 +18027,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_rescan_orders');
   FOR r IN SELECT id FROM public.orders
             WHERE deleted_at IS NULL
               AND created_at > now() - make_interval(days => GREATEST(p_days, 0))
@@ -17792,6 +18066,7 @@ DECLARE
   v_new_buffer uuid;
   v_mail_error text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_reschedule_order');
   prev := public.logistics_reschedule_preview(p_order_ref, p_pickup_date, p_pickup_from, p_pickup_to);
   IF NOT COALESCE((prev->>'ok')::boolean, false) THEN RETURN prev; END IF;
@@ -17919,6 +18194,7 @@ DECLARE
   v_direction text;
   v_tasks integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_reschedule_preview');
   SELECT * INTO ord FROM public.orders
    WHERE order_number = p_order_ref AND deleted_at IS NULL
    ORDER BY created_at DESC LIMIT 1;
@@ -17990,6 +18266,7 @@ DECLARE
   v_s text;
   v_u uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_reserved_fast_skip');
   IF p_key IS NULL OR v_raw = '' OR p_key LIKE 'group:%' OR p_key LIKE 'draft:%' THEN RETURN false; END IF;
   -- Reservering staat al op 0 (of er is geen rij)? Anders altijd volledig rekenen.
@@ -18056,6 +18333,7 @@ DECLARE
   v_key text;
   v_pid uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_reserved_key');
   IF p_key IS NULL OR btrim(p_key) = '' THEN RETURN NULL; END IF;
   v_raw := btrim(p_key);
@@ -18100,6 +18378,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; a jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_reserved_order_excluded');
   SELECT o.deleted_at, o.cancelled_at, o.status INTO r FROM public.orders o WHERE o.id = p_order_id;
   IF NOT FOUND THEN RETURN false; END IF;
   IF r.deleted_at IS NOT NULL OR r.cancelled_at IS NOT NULL
@@ -18126,6 +18405,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_reserved_stock_nightly');
   PERFORM set_config('statement_timeout', '600000', true);
   PERFORM public.recompute_all_reserved_stock();
 END
@@ -18189,6 +18469,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_resolve_settings');
   IF p_config_id IS NULL THEN RETURN '{}'::jsonb; END IF;
   IF p_version IS NOT NULL THEN
     SELECT settings INTO v FROM public.logistics_rule_versions
@@ -18411,6 +18692,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sales_order_external_fulfilled');
   SELECT public.logistics_item_external_fulfilled(p_order_id, p_sales_order_id);
 $function$
 $fsdef$;
@@ -18429,6 +18711,7 @@ DECLARE
   rec record;
   cnt integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_scan_delays');
   FOR rec IN
     SELECT o.id
       FROM public.orders o
@@ -18471,6 +18754,7 @@ DECLARE
   alert_id uuid; note_id uuid; lines text := '';
   existing_id uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_scan_order_stock');
   SELECT * INTO ord FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF NOT FOUND THEN RETURN NULL; END IF;
@@ -18656,6 +18940,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_schedule_tasks');
   SELECT public.logistics_schedule_tasks(NULL::text)
 $function$
 $fsdef$;
@@ -18677,6 +18962,7 @@ DECLARE
   v_since timestamptz := (SELECT departure_rule_since FROM public.logistics_time_settings ORDER BY updated_at DESC NULLS LAST LIMIT 1);
   v_160 timestamptz := (SELECT rule_160_since FROM public.logistics_time_settings ORDER BY updated_at DESC NULLS LAST LIMIT 1);
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_schedule_tasks');
   CREATE TEMP TABLE IF NOT EXISTS tmp_logistics_dep (order_id uuid PRIMARY KEY, ref text, dep jsonb) ON COMMIT DROP;
   TRUNCATE tmp_logistics_dep;
   INSERT INTO tmp_logistics_dep(order_id, ref, dep)
@@ -18815,6 +19101,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_set_components_scaled');
   WITH oi AS (
     SELECT o.id, o.product_id, COALESCE(o.quantity, 0)::numeric AS q
       FROM public.order_items o
@@ -18859,6 +19146,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE uid uuid := COALESCE(p_user_id, auth.uid()); n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_set_order_priority');
   IF uid IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   UPDATE public.logistics_tasks
@@ -18884,6 +19172,7 @@ DECLARE
   v_order_id uuid;
   v_updated integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_set_pick_day');
   IF auth.uid() IS NULL THEN
     RAISE EXCEPTION 'Niet ingelogd';
   END IF;
@@ -18957,6 +19246,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_shared_cart_peers');
   SELECT DISTINCT oi2.order_id, c.id, c.cart_number, c.buffer_id
     FROM public.order_items oi
     JOIN logistics_active.order_cart_items ci ON ci.order_item_id = oi.id
@@ -18977,6 +19267,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_shell_base_url');
   SELECT CASE WHEN v ~* '^https?://[^/\s]+' THEN rtrim(v, '/') END
     FROM (SELECT nullif(btrim(value::text), '') v FROM public.module_runtime_config
            WHERE key = 'shell_base_url' LIMIT 1) s
@@ -19091,6 +19382,7 @@ DECLARE
   v_reden text;
   v_actie text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_diagnose');
   IF coalesce(btrim(p_order_number), '') = '' THEN
     RETURN jsonb_build_object('gevonden', false);
   END IF;
@@ -19162,6 +19454,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE r record; v_cart uuid; v_n int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_ensure_accepted');
   FOR r IN
     SELECT o.id, o.order_number FROM public.orders o
      WHERE o.deleted_at IS NULL
@@ -19231,6 +19524,7 @@ DECLARE
   v_slip_station uuid;
   v_note_station uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_follows_slip');
   SELECT settings INTO s
     FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC
@@ -19376,6 +19670,7 @@ DECLARE
   v_order text;
   v_res jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_job_for_slip');
   SELECT * INTO slip FROM public.print_jobs WHERE id = _slip_job_id;
   IF NOT FOUND THEN RETURN NULL; END IF;
   v_order := coalesce(slip.payload->>'ordernummer', slip.payload->>'order_number');
@@ -19452,6 +19747,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_max_attempts');
   SELECT CASE WHEN btrim(c.value) ~ '^[0-9]{1,3}$' AND btrim(c.value)::int BETWEEN 1 AND 200
               THEN btrim(c.value)::int END
     FROM public.module_runtime_config c
@@ -19472,6 +19768,7 @@ AS $function$
 DECLARE
   v_n integer := 0; v_m integer := 0; v_k integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_release');
   IF public.logistics_belading_verstuurder() = 'afhandeling' THEN
     UPDATE public.logistics_slip_shipping_note s
        SET error_code = 'wacht_op_belading', retry_class = 'wacht_op_belading',
@@ -19663,6 +19960,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_wait_reasons');
   IF coalesce(auth.role(),'') <> 'service_role' AND NOT EXISTS (
       SELECT 1 FROM public.user_roles r WHERE r.user_id = auth.uid()
          AND r.role::text IN ('developer','superadmin','admin')) THEN
@@ -19696,6 +19994,7 @@ AS $function$
 DECLARE
   v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_note_wake');
   IF _slip_job_id IS NULL THEN RETURN 0; END IF;
   UPDATE public.logistics_slip_shipping_note s
      SET next_attempt_at = now(),
@@ -19724,6 +20023,7 @@ DECLARE
   v_gewekt integer := 0;
   v_open integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_shipping_notes_wake_all');
   UPDATE public.logistics_slip_shipping_note s
      SET next_attempt_at = now(),
          locked_until = NULL,
@@ -19753,6 +20053,7 @@ AS $function$
 DECLARE
   v_payload jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_is_floriday');
   SELECT j.payload INTO v_payload FROM public.print_jobs j WHERE j.id = _slip_job_id;
   IF v_payload IS NULL THEN RETURN NULL; END IF;
   RETURN public.logistics_payload_is_floriday(v_payload);
@@ -19770,6 +20071,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_slip_is_herprint');
   SELECT EXISTS (
     SELECT 1 FROM public.print_jobs j
      WHERE j.id = p_slip_job_id
@@ -19811,6 +20113,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_claim');
   IF public.logistics_shipping_note_max_attempts() IS NULL THEN
     RETURN;
   END IF;
@@ -19846,6 +20149,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_finish');
   UPDATE public.logistics_slip_shipping_note
      SET status = COALESCE(_status, CASE WHEN _ok THEN 'geprint' ELSE 'mislukt' END),
          attempts = CASE WHEN _status = 'in_printwachtrij' THEN greatest(attempts - 1, 0) ELSE attempts END,
@@ -19872,6 +20176,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_hold');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wacht_op_vrijgave',
          attempts = greatest(attempts - 1, 0),
@@ -19897,6 +20202,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_hold_belading');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wacht_op_vrijgave',
          attempts = greatest(attempts - 1, 0),
@@ -19922,6 +20228,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_hold_kenmerk');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wacht_op_vrijgave',
          attempts = greatest(attempts - 1, 0),
@@ -19946,6 +20253,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_hold_layout');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wacht_op_vrijgave',
          attempts = greatest(attempts - 1, 0),
@@ -19970,6 +20278,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_hold_read_only');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wacht_op_vrijgave', attempts = greatest(attempts - 1, 0),
          locked_until = NULL, next_attempt_at = NULL, retry_class = 'alleen_lezen',
@@ -19993,6 +20302,7 @@ DECLARE
   v_max integer := public.logistics_shipping_note_max_attempts();
   v_delay integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_keep_waiting');
   SELECT attempts INTO v_attempts FROM public.logistics_slip_shipping_note WHERE id = _id;
   IF v_max IS NULL OR coalesce(v_attempts, 0) >= v_max THEN
@@ -20037,6 +20347,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_release_layout');
   IF (public.logistics_floriday_layout_id('afleverbrief')->>'layout_id') IS NULL THEN RETURN 0; END IF;
   UPDATE public.logistics_slip_shipping_note
      SET status = 'wachtend', next_attempt_at = now(), retry_class = 'tijdelijk',
@@ -20062,6 +20373,7 @@ DECLARE
   v_open boolean;
   r public.logistics_slip_shipping_note%rowtype;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_slip_note_retry');
   SELECT * INTO v_note FROM public.logistics_slip_shipping_note WHERE id = _id;
   IF v_note.id IS NULL OR v_note.status <> 'mislukt' THEN
     RETURN jsonb_build_object('ok', false, 'error', 'Deze verzendbrief bestaat niet (meer) of is niet mislukt.');
@@ -20100,6 +20412,7 @@ DO $fsdo$ BEGIN
  SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_slip_note_skip_herprint');
   UPDATE public.logistics_slip_shipping_note
      SET status = 'overgeslagen', error_code = 'herprint',
          error = 'Herprint: alleen dit document opnieuw, geen nieuwe verzendbrief.',
@@ -20134,6 +20447,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_blocked_list');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag de geblokkeerde stickers bekijken.';
   END IF;
@@ -20157,6 +20471,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sticker_cart_plek');
   SELECT coalesce(
     (SELECT nullif(btrim(pj.payload->>'print_plek_id'),'') FROM public.print_jobs pj
       WHERE pj.payload->>'cart_id' = _cart::text AND pj.documenttype = 'pakbon'
@@ -20176,6 +20491,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sticker_distribution');
   WITH t AS (SELECT upper(coalesce(p_type,'')) AS ty),
   base AS (
     SELECT oc.id AS cart, min(oc.cart_number) AS nr, sum(coalesce(ci.crates,0))::int AS crates,
@@ -20213,6 +20529,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sticker_external_fulfilled');
   SELECT EXISTS (
     SELECT 1 FROM public.logistics_sticker_prints sp
       LEFT JOIN public.floriday_customer_stickers_cache c ON c.floriday_id = sp.bron_id AND sp.soort = 'sticker'
@@ -20234,6 +20551,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE s jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_follows_slip');
   SELECT settings INTO s
     FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC
@@ -20258,6 +20576,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_pick timestamptz;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_moment');
   IF public.logistics_cart_is_frozen(_cart) THEN RETURN true; END IF;
   IF _release = 'with_packing_slip' THEN RETURN false; END IF;
   SELECT t.planned_start INTO v_pick FROM public.logistics_tasks t
@@ -20282,6 +20601,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE t text; m text[];
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_parse_size');
   IF p IS NULL OR p = 'null'::jsonb THEN RETURN NULL; END IF;
   IF jsonb_typeof(p) = 'object' THEN
     IF (p->>'width') ~ '^\d+(\.\d+)?$' AND (p->>'height') ~ '^\d+(\.\d+)?$' THEN
@@ -20321,6 +20641,7 @@ DO $fsdo$ BEGIN
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_upsert');
   INSERT INTO public.logistics_sticker_prints AS t
     (soort, bron_id, order_id, order_number, cart_id, kopieen, breedte_mm, hoogte_mm, print_plek_id, fulfillment_order_id, status, reden)
   VALUES (_soort, _bron, _order, _order_number, _cart, coalesce(_kopieen,0), _size[1], _size[2], _plek, _fo, _status, _reden)
@@ -20389,6 +20710,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE d date := p_day; n int := greatest(coalesce(p_days,0),0); guard int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_subtract_pick_workdays');
   WHILE n > 0 AND guard < 60 LOOP
     d := d - 1; guard := guard + 1;
     IF public.logistics_is_pick_workday(d) THEN n := n - 1; END IF;
@@ -20421,6 +20743,7 @@ DECLARE
   v_seg_end timestamptz;
   v_avail numeric;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_subtract_working_minutes');
   IF p_deadline IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reason', 'Geen deadline meegegeven.');
   END IF;
@@ -20486,6 +20809,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE n integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_supersede_stale_tasks');
   UPDATE public.logistics_tasks
      SET status = 'superseded', updated_at = now(),
          payload = payload || jsonb_build_object('supersededByRun', p_run_id)
@@ -20508,6 +20832,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_core jsonb; v_back jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sync_pick_queue');
   v_core := public.logistics_sync_pick_queue_core();
   BEGIN
     v_back := public.logistics_sync_pick_queue_backlog();
@@ -20535,6 +20860,7 @@ DECLARE
   v_lines integer; v_carts integer; v_payload jsonb; v_breakdown jsonb;
   v_ins integer := 0; v_upd integer := 0; v_orders integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sync_pick_queue_backlog');
   IF v_max IS NULL THEN RETURN jsonb_build_object('achterstand', 'uit'); END IF;
   v_pickmode := COALESCE(public.logistics_pick_mode()->>'pickMode', '');
   IF v_pickmode <> 'cart' THEN
@@ -20645,6 +20971,7 @@ DECLARE
   v_cart_lines integer; v_fix jsonb; v_cart_payload jsonb; v_cart_rows integer;
   v_wait timestamptz; v_reason text; v_ok boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sync_pick_queue_core');
   v_today := public.logistics_local_today();
   v_forced := NULLIF(current_setting('logistics.forced_pick_day', true), '')::date;
   SELECT id INTO v_type_id FROM public.pick_document_types WHERE code = 'pakbon' LIMIT 1;
@@ -20871,6 +21198,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_sent int := 0; v_failed int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_sync_stock_alert_email_status');
   WITH k AS (
     SELECT a.id, o.status AS ostatus, o.sent_at, o.last_error
       FROM public.logistics_stock_alerts a
@@ -20912,6 +21240,7 @@ DECLARE
   v_carriers jsonb;
   v_source text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sync_task_carriers');
   FOR r IN
     SELECT o.order_number,
            COALESCE(jsonb_agg(x.entry ORDER BY x.entry ->> 'type') FILTER (WHERE x.entry IS NOT NULL), '[]'::jsonb) AS carriers,
@@ -20976,6 +21305,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_sync_task_status');
   WITH refs AS (
     SELECT DISTINCT t.order_ref FROM public.logistics_tasks t
      WHERE t.status IN ('planned','ready','claimed','in_progress')
@@ -21028,6 +21358,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_task_open_counts');
   SELECT t.owner_module::text, count(*)
     FROM public.logistics_tasks t
    WHERE t.status::text IN ('planned','open','claimed','pending','running')
@@ -21065,6 +21396,7 @@ DO $fsdo$ BEGIN
  STABLE
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_task_pick_minutes');
   SELECT COALESCE(
     NULLIF((
       SELECT SUM(COALESCE((e ->> 'count')::numeric, 1)
@@ -21145,6 +21477,7 @@ AS $function$
 DECLARE
   v_count integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_tasks_prune');
   WITH weg AS (
     DELETE FROM public.logistics_tasks t
      WHERE t.status IN ('cancelled', 'superseded')
@@ -21173,6 +21506,7 @@ DECLARE
   v_shell text; v_cur text; v_key text; v_path text;
   v_host text; v_ping bigint; v_route bigint; v_id bigint; v_open record;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_tick_base_url_check');
   IF v_uid IS NOT NULL AND NOT (
        public.has_role(v_uid, 'admin') OR public.has_role(v_uid, 'superadmin') OR public.has_role(v_uid, 'developer')) THEN
     RAISE EXCEPTION 'Geen rechten om het Shell-adres te controleren';
@@ -21248,6 +21582,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE n int := 0; r record; v_json jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_tick_calls_resolve');
   FOR r IN
     SELECT c.id, h.status_code, h.content, h.error_msg, h.timed_out
     FROM public.logistics_tick_calls c
@@ -21295,6 +21630,7 @@ AS $function$
 DECLARE v_recent jsonb; v_fail int := 0; r record; v_last_ok timestamptz; v_last record; v_status text; v_ok_versie text;
   v_shell_fout_24u int; v_db_fout_24u int; v_laatste_fout timestamptz; v_laatste_stapfout jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_tick_health');
   SELECT * INTO v_last FROM public.logistics_tick_calls WHERE resolved_at IS NOT NULL ORDER BY called_at DESC LIMIT 1;
   FOR r IN SELECT engine_ok, status_code FROM public.logistics_tick_calls WHERE resolved_at IS NOT NULL ORDER BY called_at DESC LIMIT 10 LOOP
     EXIT WHEN COALESCE(r.engine_ok, false) AND r.status_code = 200;
@@ -21341,6 +21677,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_now timestamptz := now();
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_tick_ping');
   INSERT INTO public.logistics_tick_heartbeat (id, last_tick_at)
   VALUES (true, v_now)
   ON CONFLICT (id) DO UPDATE SET last_tick_at = EXCLUDED.last_tick_at;
@@ -21361,6 +21698,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE n int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_tick_runs_prune');
   DELETE FROM public.logistics_tick_runs
    WHERE (NOT has_error AND started_at < now() - interval '14 days')
       OR (has_error AND started_at < now() - interval '90 days');
@@ -21397,6 +21735,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_timezone_options');
   SELECT n.name::text
     FROM pg_timezone_names n
    WHERE n.name LIKE '%/%'
@@ -21414,6 +21753,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_today_cart_ids');
   WITH k AS MATERIALIZED (SELECT public.logistics_tz() AS tz, public.logistics_local_today() AS d)
   SELECT coalesce(array_agg(DISTINCT x), '{}') FROM (
     SELECT ci.cart_id AS x FROM k, LATERAL public.logistics_cart_index(k.d, k.d) ci WHERE ci.cart_id IS NOT NULL
@@ -21451,6 +21791,7 @@ DECLARE
   v_status text;
   v_class  text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace');
   v_status := CASE WHEN p->>'status' IN ('geslaagd','wachtend','waarschuwing','overgeslagen','mislukt')
                    THEN p->>'status' ELSE 'geslaagd' END;
   v_class := NULLIF(p->>'errorClass','');
@@ -21508,6 +21849,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_trace_all_orders');
   WITH selected_orders AS MATERIALIZED (
     SELECT o.id, o.order_number, o.order_source, o.status AS order_status, o.delivery_date,
            o.customer_name, o.created_at, o.cancelled_at, o.buffer_id
@@ -21561,6 +21903,7 @@ DECLARE
   v_cols text;
   v_n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_archive_order');
   SELECT string_agg(quote_ident(column_name), ', ' ORDER BY ordinal_position)
     INTO v_cols
     FROM information_schema.columns
@@ -21594,6 +21937,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE item jsonb; n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_batch');
   IF p IS NULL OR jsonb_typeof(p) <> 'array' THEN RETURN 0; END IF;
   FOR item IN SELECT * FROM jsonb_array_elements(p) LOOP
     IF public.logistics_trace(item) IS NOT NULL THEN n := n + 1; END IF;
@@ -21728,6 +22072,7 @@ DECLARE
   e jsonb;
   n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_derive');
   IF p IS NULL OR jsonb_typeof(p) <> 'array' THEN RETURN 0; END IF;
   FOR e IN SELECT * FROM jsonb_array_elements(p) LOOP
@@ -21803,6 +22148,7 @@ DECLARE
   v_target   uuid := p_order_id;
   v_enabled  boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_order_journey_start');
   SELECT o.order_source, o.order_number INTO v_source, v_number
     FROM public.orders o WHERE o.id = p_order_id;
   IF v_number IS NULL THEN RETURN p_order_id; END IF;
@@ -21898,6 +22244,7 @@ DECLARE
   v_number text;
   v_node   text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_order_origin');
   SELECT o.order_source, o.order_number INTO v_source, v_number
     FROM public.orders o WHERE o.id = p_order_id;
   IF v_number IS NULL THEN RETURN; END IF;
@@ -21944,6 +22291,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_trace_order_overview');
   WITH o AS (
     SELECT o.order_number, o.order_source, o.status AS order_status, o.delivery_date,
            o.customer_name, o.created_at, o.cancelled_at, o.buffer_id
@@ -22053,6 +22401,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_trace_order_state');
   WITH laatste AS (
     SELECT * FROM public.logistics_trace_events
     WHERE order_ref = p_order_ref
@@ -22119,6 +22468,7 @@ DECLARE
   v_number text;
   v_source text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_order_step');
   SELECT o.order_number, o.order_source INTO v_number, v_source
     FROM public.orders o WHERE o.id = p_order_id;
   IF v_number IS NULL THEN RETURN; END IF;
@@ -22157,6 +22507,7 @@ DECLARE
   v_search text := NULLIF(btrim(COALESCE(p_search,'')), '');
   v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_orders');
   EXECUTE $q$
   WITH refs AS (
     SELECT DISTINCT e.order_ref FROM public.logistics_trace_events e
@@ -22256,6 +22607,7 @@ DECLARE
   v_last_dn  timestamptz;
   v_ready    jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_pick_state');
   IF p_order_number IS NULL OR btrim(p_order_number) = '' THEN RETURN; END IF;
   SELECT o.id INTO v_id
@@ -22338,6 +22690,7 @@ DECLARE
   r        record;
   v_orders integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_progress');
   FOR r IN
     SELECT o.order_number
       FROM public.orders o
@@ -22380,6 +22733,7 @@ DECLARE
   v_pq_done    integer;
   v_scans      integer;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_progress_order');
   IF p_order_ref IS NULL OR btrim(p_order_ref) = '' THEN
     RETURN jsonb_build_object('gevonden', false);
   END IF;
@@ -22609,6 +22963,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_number text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_step_once');
   SELECT o.order_number INTO v_number FROM public.orders o WHERE o.id = p_order_id;
   IF v_number IS NULL THEN RETURN; END IF;
@@ -22650,6 +23005,7 @@ DECLARE
   v_tekst        text := '';
   v_alert        public.logistics_stock_alerts%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_stock_check');
   SELECT * INTO ord FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF NOT FOUND THEN RETURN; END IF;
@@ -22769,6 +23125,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_trace_timeline');
   SELECT COALESCE(jsonb_agg(to_jsonb(t) ORDER BY t.created_at ASC, t.id ASC), '[]'::jsonb)
   FROM (SELECT * FROM public.logistics_trace_events WHERE order_ref = p_order_ref
         ORDER BY created_at DESC LIMIT GREATEST(COALESCE(p_limit,500),1)) t;
@@ -22785,6 +23142,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_trace_version_events');
   SELECT COALESCE(jsonb_agg(to_jsonb(e) ORDER BY e.created_at ASC), '[]'::jsonb)
   FROM (
     SELECT *
@@ -22816,6 +23174,7 @@ DECLARE
   v_carts    jsonb;
   v_versions jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_trace_versions');
   IF p_order_ref IS NULL OR p_order_ref = '' THEN
     RETURN jsonb_build_object('order', NULL, 'carts', NULL, 'versions', '[]'::jsonb);
   END IF;
@@ -22985,7 +23344,8 @@ DO $fsdo$ BEGIN
  LANGUAGE sql
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
-AS $function$ SELECT nullif(btrim(t.timezone), '') FROM public.logistics_time_settings t ORDER BY t.updated_at DESC NULLS LAST LIMIT 1 $function$
+AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_tz'); SELECT nullif(btrim(t.timezone), '') FROM public.logistics_time_settings t ORDER BY t.updated_at DESC NULLS LAST LIMIT 1 $function$
 $fsdef$;
 EXCEPTION WHEN undefined_object OR undefined_table OR undefined_function OR invalid_schema_name THEN
   RAISE NOTICE 'logistiek-engine: functie public.logistics_tz overgeslagen (onderdeel van andere module ontbreekt): %', SQLERRM;
@@ -22998,6 +23358,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_unit_all_carts_scanned');
   SELECT NOT EXISTS (SELECT 1 FROM unnest(public.logistics_unit_order_ids(p_order_id)) m
                       WHERE NOT public.logistics_order_all_carts_scanned(m))
      AND NOT EXISTS (SELECT 1 FROM public.orders o JOIN logistics_active.order_carts c ON c.buffer_id = o.buffer_id AND c.order_id IS NULL
@@ -23016,6 +23377,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_unit_order_ids');
   WITH o AS (SELECT id, buffer_id FROM public.orders WHERE id = p_order_id),
   m AS (SELECT o2.id, o2.order_number FROM o JOIN public.orders o2 ON o2.buffer_id = o.buffer_id
          WHERE o.buffer_id IS NOT NULL AND o2.deleted_at IS NULL AND o2.cancelled_at IS NULL)
@@ -23036,6 +23398,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE existing public.logistics_tasks%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_upsert_task');
   SELECT * INTO existing FROM public.logistics_tasks
    WHERE user_id = p_user_id AND order_ref = p_order_ref AND task_type = p_task_type
      AND status NOT IN ('cancelled','superseded')
@@ -23076,6 +23439,7 @@ DO $fsdo$ BEGIN
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_valid_timezone');
   SELECT EXISTS (SELECT 1 FROM pg_timezone_names n WHERE n.name = _tz)
 $function$
 $fsdef$;
@@ -23092,6 +23456,7 @@ DO $fsdo$ BEGIN
 AS $function$
 DECLARE v_base text; v_path text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_verkoop_order_link');
   IF p_order_id IS NULL THEN RETURN NULL; END IF;
   v_base := public.logistics_shell_base_url();
   SELECT nullif(btrim(value), '') INTO v_path FROM public.module_runtime_config WHERE key = 'verkoop_order_path' LIMIT 1;
@@ -23135,6 +23500,7 @@ DO $fsdo$ BEGIN
 AS $function$
 declare c record; v_total int := 0;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_write_buffer_layer_positions');
   for c in select id from logistics_active.order_carts where buffer_id = p_buffer_id loop
     v_total := v_total + public.logistics_write_cart_layer_positions(c.id);
   end loop;
@@ -23178,6 +23544,7 @@ declare
   v_k int; v_s int; v_slot jsonb;
   v_placed jsonb := '[]'::jsonb;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_write_cart_layer_positions');
   select * into v_cart from logistics_active.order_carts where id = p_cart_id;
   if v_cart.id is null then return 0; end if;
@@ -23406,6 +23773,7 @@ DECLARE
   v_total integer := 0; v_full integer := 0; v_partial integer := 0;
   v_shared integer := 0; v_crates integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'pick_cart_breakdown');
   v_orders := public.pick_buffer_order_ids(_order_id);
   IF v_orders IS NULL OR cardinality(v_orders) = 0 THEN v_orders := ARRAY[_order_id]; END IF;
   SELECT o.order_number INTO v_ref FROM public.orders o WHERE o.id = _order_id;
@@ -23533,6 +23901,9 @@ DECLARE
   v_key text := NULLIF(btrim(coalesce(p_key, '')), '');
   v_cur text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_register_tick_apikey');
+  -- Alleen de server van de Shell (service_role) mag dit; die geeft zijn eigen
+  -- openbare sleutel door, dezelfde waarmee de minuutronde-route controleert.
   IF v_key IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'status', 'geen_sleutel_op_server');
   END IF;
@@ -26448,13 +26819,12 @@ DECLARE
   v_types public.doc_layout_type[];
   v_layout public.document_layouts%ROWTYPE;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_document_layout_v2');
   v_types := public.logistics_document_type_map(lower(btrim(coalesce(_document_code, ''))));
   IF array_length(v_types, 1) IS NULL THEN RETURN NULL; END IF;
-  SELECT * INTO v_layout
-    FROM public.document_layouts
+  SELECT * INTO v_layout FROM public.document_layouts
    WHERE actief IS TRUE AND documenttype = ANY (v_types)
-   ORDER BY array_position(v_types, documenttype),
-            (coalesce(bron, 'eigen') = 'eigen') DESC,
+   ORDER BY array_position(v_types, documenttype), (coalesce(bron, 'eigen') = 'eigen') DESC,
             is_standaard DESC NULLS LAST, updated_at DESC
    LIMIT 1;
   IF v_layout.id IS NULL THEN RETURN NULL; END IF;
@@ -26486,8 +26856,12 @@ $function$;
 -- 4. Centrale beslisregel.
 -- 5. Eigen stickers (HO/MO/AO): één per klant+product, aantal = planten van regels met needs_sticker.
 CREATE OR REPLACE FUNCTION public.logistics_own_sticker_count(p_unit text, p_quantity numeric, p_ppc_regel numeric, p_ppc_product numeric)
-RETURNS integer LANGUAGE sql IMMUTABLE SET search_path = public AS $cnt$
-  -- stuks/planten = aantal planten; fust = aantal x planten per fust (regel, anders product); onbekend = NULL (tegenhouden).
+ RETURNS integer
+ LANGUAGE sql
+ IMMUTABLE
+ SET search_path TO 'public'
+AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_own_sticker_count');
   SELECT CASE
     WHEN p_quantity IS NULL THEN NULL
     WHEN lower(coalesce(p_unit, '')) = 'fust' THEN
@@ -26495,7 +26869,7 @@ RETURNS integer LANGUAGE sql IMMUTABLE SET search_path = public AS $cnt$
            ELSE (p_quantity * coalesce(nullif(p_ppc_regel, 0), nullif(p_ppc_product, 0)))::int END
     ELSE p_quantity::int
   END
-$cnt$;
+$function$;
 CREATE OR REPLACE FUNCTION public.logistics_own_sticker_sync(p_limit integer DEFAULT 200)
  RETURNS jsonb
@@ -26514,6 +26888,7 @@ DECLARE
   v_vrij int := 0;
   v_uit int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_own_sticker_sync');
   FOR r IN
     SELECT o.id AS order_id, o.order_number, o.customer_id, oi.product_id,
            sum(public.logistics_own_sticker_count(oi.unit, oi.quantity, oi.plants_per_crate, prd.plants_per_crate))::int AS planten,
@@ -26566,7 +26941,6 @@ BEGIN
     v_bijgewerkt := v_bijgewerkt + 1;
   END LOOP;
-  -- Vinkje uitgezet (of order vervallen) vóór het printen: niet printen.
   UPDATE public.logistics_sticker_prints p
      SET status = 'niet_printen', reden = 'Sticker uitgezet op de orderregel of order vervallen.', updated_at = now()
    WHERE p.soort = 'eigen_sticker' AND p.status IN ('wacht_op_moment', 'geblokkeerd', 'klaar')
@@ -26577,7 +26951,6 @@ BEGIN
           AND o.deleted_at IS NULL AND o.cancelled_at IS NULL AND coalesce(o.status, '') <> 'geannuleerd');
   GET DIAGNOSTICS v_uit = ROW_COUNT;
-  -- Vrijgeven met de pakbon: kar en printplek van de geprinte pakbonrij, formaat uit sticker of layout.
   WITH vrij AS (
     SELECT p.id,
            (SELECT public.logistics_try_uuid(q.payload->>'cartId')
@@ -26646,6 +27019,7 @@ DECLARE
   v_freeze boolean := public.logistics_plan_setting('verdeling_bevriezen_actief', 0) = 1;
   v_frozen_ids uuid[]; v_line_ids uuid[];
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_recompute_reserved_targeted');
   IF p_product_id IS NULL THEN RETURN jsonb_build_object('status', 'geen_product'); END IF;
   IF current_setting('app.recomputing_reserved', true) = 'on' THEN RETURN jsonb_build_object('status', 'al_bezig'); END IF;
   PERFORM set_config('app.recomputing_reserved', 'on', true);
@@ -26846,7 +27220,8 @@ BEGIN
                JOIN public.orders ord ON ord.id = op.order_id
               WHERE r.trade_item_key = d.trade_item_key AND r.qty > 0
                 AND NOT (public.normalize_order_source(ord.order_source) = 'FO'
-                         AND COALESCE(public.voorraad_floriday_leads_key(d.trade_item_key), false))), 0);
+                         AND COALESCE(public.voorraad_floriday_leads_key(d.trade_item_key), false))), 0)
+     WHERE d.trade_item_key IS NOT NULL;  -- safeupdate: sleutel van _rt_demand (altijd gevuld)
   ELSE
     PERFORM public.logistics_trace(jsonb_build_object(
       'phase', 'reservering', 'step', 'reservering herberekenen', 'status', 'waarschuwing',
@@ -26937,6 +27312,7 @@ DECLARE
   v_ok boolean := true;
   v_reden text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_resolve_pick_document');
   SELECT * INTO item FROM public.pick_queue WHERE id = _queue_item_id;
   IF NOT FOUND THEN
     RAISE EXCEPTION 'Dit document bestaat niet meer.' USING ERRCODE = 'P0002';
@@ -27106,6 +27482,7 @@ declare
   doc jsonb; target_printer uuid; job_id uuid; v_cart_id uuid;
   v_doc_code text; v_plan jsonb; v_cart jsonb; v_last uuid; v_row_cart text;
 begin
+  PERFORM public.logistics_acc_guard('ingelogd', 'pick_enqueue_print_job');
   select lower(btrim(coalesce(nullif(q.payload->>'documentType',''), nullif(t.code,''), ''))),
          nullif(q.payload->>'cartId','')
     into v_doc_code, v_row_cart
@@ -27198,6 +27575,7 @@ DECLARE
   v_sleutel text;
   v_order uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'pick_enqueue_print_job');
   SELECT * INTO item FROM public.pick_queue WHERE id = _queue_item_id;
   IF NOT FOUND THEN RAISE EXCEPTION 'Dit document bestaat niet meer.'; END IF;
   SELECT * INTO dt FROM public.pick_document_types WHERE id = item.document_type_id;
@@ -27366,7 +27744,6 @@ BEGIN
     RETURN jsonb_build_object('ok', false, 'layout_id', NULL, 'reden', 'Geen documentsoort opgegeven.');
   END IF;
-  -- 1.0.176: 'verzenddocument' wordt hier vertaald naar het echte document van de order.
   IF v_soort IN ('verzenddocument', 'verzendbrief') THEN
     SELECT o.order_source = 'floriday' INTO v_floriday FROM public.orders o WHERE o.id = p_order_id;
     IF NOT FOUND THEN
@@ -27466,12 +27843,16 @@ RETURNS integer LANGUAGE sql IMMUTABLE SET search_path = public AS $tp$
 $tp$;
 CREATE OR REPLACE FUNCTION public.logistics_own_traysticker_payload(p_id uuid)
- RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE
   p record; o record; c record; v_ci uuid; v_k int; v_nr int; v_tot int; v_loc text;
   v_ppc int; v_regel_tot int; v_item_voor int; v_item_fusten int; v_aantal int; v_prod jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_own_traysticker_payload');
   SELECT * INTO p FROM public.logistics_sticker_prints WHERE id = p_id AND soort = 'eigen_traysticker';
   IF p.id IS NULL THEN RETURN jsonb_build_object('ok', false, 'reden', 'Traysticker niet gevonden.'); END IF;
   v_ci := public.logistics_try_uuid(split_part(p.bron_id, ':', 3));
@@ -27490,7 +27871,6 @@ BEGIN
   END IF;
   SELECT * INTO o FROM public.orders WHERE id = p.order_id;
-  -- Fustnummer x van y binnen de order (alle karren), volgorde kar, regel, fust.
   WITH alle AS (
     SELECT ci.id, ci.crates, row_number() OVER (ORDER BY ci.cart_id, ci.created_at, ci.id) AS rn
       FROM public.order_cart_items ci JOIN public.order_items oi ON oi.id = ci.order_item_id
@@ -27500,7 +27880,6 @@ BEGIN
          coalesce(sum(crates) FILTER (WHERE rn < (SELECT rn FROM alle WHERE id = v_ci)), 0)::int + v_k
     INTO v_tot, v_nr FROM alle;
-  -- Planten per fust: karregel, dan orderregel, dan product. Laatste fust van de regel: de rest.
   v_ppc := coalesce(nullif(c.plants_per_crate, 0), nullif(c.ppc_regel, 0), nullif(c.ppc_product, 0))::int;
   IF v_ppc IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reden', 'Planten per fust onbekend (niet op de regel en niet bij het product). Vul planten per fust in.');
@@ -27557,10 +27936,14 @@ DO $p$ BEGIN
   END IF;
 END $p$;
-CREATE OR REPLACE FUNCTION public.logistics_belading_bevestig(p_order_id uuid, p_sleutel text, p_redenen text[] DEFAULT '{}')
- RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+CREATE OR REPLACE FUNCTION public.logistics_belading_bevestig(p_order_id uuid, p_sleutel text, p_redenen text[] DEFAULT '{}'::text[])
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_belading_bevestig');
   IF NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag een belading bevestigen.';
   END IF;
@@ -27578,9 +27961,13 @@ GRANT EXECUTE ON FUNCTION public.logistics_belading_bevestig(uuid, text, text[])
 -- 5. Lease bezet: opdracht blijft open en komt later terug (nooit 'done' zonder indeling).
 CREATE OR REPLACE FUNCTION public.logistics_plan_retry_later(p_id uuid, p_seconds integer DEFAULT 30)
- RETURNS void LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS void
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_retry_later');
   UPDATE public.logistics_plan_queue
      SET status = 'pending', claimed_at = NULL,
          next_attempt_at = now() + make_interval(secs => greatest(5, least(coalesce(p_seconds, 30), 600))),
@@ -27617,10 +28004,13 @@ DO $c$ BEGIN
 END $c$;
 -- Dubbele kar-indexen per order (twee karren met hetzelfde volgnummer): alleen-lezen lijst.
-CREATE OR REPLACE FUNCTION public.logistics_cart_seq_dubbel(p_order_uuid uuid DEFAULT NULL)
+CREATE OR REPLACE FUNCTION public.logistics_cart_seq_dubbel(p_order_uuid uuid DEFAULT NULL::uuid)
  RETURNS TABLE(order_uuid uuid, cart_index integer, cart_ids uuid[])
- LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_cart_seq_dubbel');
   WITH ruw AS (
     SELECT oc.id AS cart_id, oc.cart_number AS cart_index, oc.order_id AS order_uuid
       FROM logistics_active.order_carts oc
@@ -27642,10 +28032,13 @@ GRANT EXECUTE ON FUNCTION public.logistics_cart_seq_dubbel(uuid) TO service_role
 -- Karnummer eerst via kar-id, anders via order + index (bestaande nummers).
 CREATE OR REPLACE FUNCTION public.logistics_cart_seq(p_order_uuid uuid DEFAULT NULL::uuid)
  RETURNS TABLE(order_uuid uuid, cart_id uuid, cart_index integer, cart_seq integer, cart_number text, cart_total integer)
- LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE d record;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_cart_seq');
   SELECT * INTO d FROM public.logistics_cart_seq_dubbel(p_order_uuid) LIMIT 1;
   IF d.order_uuid IS NOT NULL THEN
     RAISE EXCEPTION 'Karnummering ongeldig: order % heeft % karren met volgnummer %. Deel de order opnieuw in; er wordt geen kar weggelaten.',
@@ -27682,13 +28075,17 @@ GRANT EXECUTE ON FUNCTION public.logistics_cart_seq(uuid) TO authenticated, serv
 -- 8. Kar wisselen: eerst vergrendelen en pickup_locked controleren, dan pas verwijderen; geen stille 1.
 CREATE OR REPLACE FUNCTION public.logistics_apply_cart_swap(p_delete_ids uuid[], p_new_carts jsonb)
- RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE
   v_del uuid[] := COALESCE(p_delete_ids, ARRAY[]::uuid[]);
   v_cart jsonb; v_row jsonb; v_id uuid; v_map jsonb := '[]'::jsonb;
   v_jobs int := 0; v_carts int := 0; v_items int := 0; v_locked int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_apply_cart_swap');
   IF jsonb_typeof(COALESCE(p_new_carts, '[]'::jsonb)) <> 'array' THEN
     RAISE EXCEPTION 'Nieuwe karren ontbreken of zijn ongeldig.';
   END IF;
@@ -27753,10 +28150,14 @@ GRANT EXECUTE ON FUNCTION public.logistics_apply_cart_swap(uuid[], jsonb) TO ser
 -- 1. Autofix schrijft alleen een volledige, positieve Floriday-verpakking weg (0 = onbekend).
 CREATE OR REPLACE FUNCTION public.logistics_packing_autofix(p_limit integer DEFAULT 100)
- RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE r record; v_reden text; v_aantal integer := 0; v_ppc int; v_cpl int; v_lpc int;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_packing_autofix');
   FOR r IN
     SELECT d.* FROM public.logistics_packing_deviations d
      WHERE d.resolved_at IS NULL AND d.scope = 'order_line' AND d.needs_human = false
@@ -27796,10 +28197,14 @@ $function$;
 -- 9. Reconcile alleen bij een echte wijziging sinds de laatste afgeronde of geblokkeerde opdracht; kleinere porties.
 CREATE OR REPLACE FUNCTION public.logistics_reconcile_missing_plan_queue()
- RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE r record; n integer := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_reconcile_missing_plan_queue');
   FOR r IN
     SELECT o.id FROM public.orders o
      WHERE o.deleted_at IS NULL
@@ -27842,9 +28247,12 @@ END $q$;
 -- Alleen-lezen lijst: orders met meer dan één open planopdracht.
 CREATE OR REPLACE FUNCTION public.logistics_plan_queue_dubbel()
- RETURNS TABLE(order_id uuid, open_opdrachten bigint, oudste timestamptz, nieuwste timestamptz)
- LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS TABLE(order_id uuid, open_opdrachten bigint, oudste timestamp with time zone, nieuwste timestamp with time zone)
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_plan_queue_dubbel');
   SELECT q.order_id, count(*), min(q.enqueued_at), max(q.enqueued_at)
     FROM public.logistics_plan_queue q
    WHERE q.status IN ('pending','running','geblokkeerd')
@@ -27855,13 +28263,17 @@ GRANT EXECUTE ON FUNCTION public.logistics_plan_queue_dubbel() TO service_role;
 -- 10. Buffer uit: elke order krijgt een eigen buffer (sleutel solo:<order-id>) en wordt dus per order ingedeeld.
 CREATE OR REPLACE FUNCTION public.logistics_apply_buffer_decision(p_order_id uuid)
- RETURNS uuid LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS uuid
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE
   o public.orders%ROWTYPE;
   cf jsonb; d jsonb; v_ref text; v_close timestamptz; v_key text;
   v_buffer uuid; v_closed boolean; v_try int := 0; v_on_cart boolean; v_solo boolean := false;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_apply_buffer_decision');
   SELECT * INTO o FROM public.orders WHERE id = p_order_id;
   IF NOT FOUND OR o.deleted_at IS NOT NULL THEN RETURN NULL; END IF;
   cf := COALESCE(o.custom_fields, '{}'::jsonb);
@@ -27951,13 +28363,17 @@ $function$;
 -- 13. Eigen traystickers: zolang bij één regel van de order het fustaantal onbekend is, wachten ALLE
 --     eigen traystickers van die order ("Fustaantal van regel X onbekend"), zodat x van y klopt.
 CREATE OR REPLACE FUNCTION public.logistics_own_traysticker_sync(p_limit integer DEFAULT 200)
- RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE
   s jsonb; v_tray text; v_rel text; v_station text;
   r record; v_bron text; v_keep text[] := '{}'; v_wacht_orders uuid[] := '{}';
   n int := 0; n_geblokkeerd int := 0; n_vrij int := 0; n_uit int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_own_traysticker_sync');
   SELECT settings INTO s FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC LIMIT 1;
   v_tray := public.logistics_rule_text(s, 'pickstations', 'traysticker_release', 'uit');
@@ -28006,7 +28422,6 @@ BEGIN
       VALUES ('eigen_traysticker', v_bron, r.order_id, r.order_number, r.cart_id, 1,
               public.logistics_sticker_cart_plek(r.cart_id, v_station), 'wacht_op_moment', 'Wacht op de pakbon van deze kar.')
       ON CONFLICT DO NOTHING;
-      -- Was hij eerder tegengehouden door een onbekend fustaantal: weer laten wachten op het moment.
       UPDATE public.logistics_sticker_prints
          SET status = 'wacht_op_moment', reden = 'Wacht op de pakbon van deze kar.', updated_at = now()
        WHERE soort = 'eigen_traysticker' AND bron_id = v_bron AND status = 'geblokkeerd'
@@ -28015,7 +28430,6 @@ BEGIN
     END LOOP;
   END LOOP;
-  -- Order met onbekend fustaantal: alle nog niet geprinte stickers wachten (niet vervallen).
   UPDATE public.logistics_sticker_prints p
      SET status = 'geblokkeerd',
          reden = (SELECT b.reden FROM public.logistics_sticker_prints b
@@ -28061,6 +28475,7 @@ CREATE OR REPLACE FUNCTION public.logistics_sticker_order_counts(p_order uuid, p
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sticker_order_counts');
   WITH ci AS (
     SELECT ci.* FROM logistics_active.order_cart_items ci
       JOIN public.order_items oi ON oi.id = ci.order_item_id
@@ -28087,6 +28502,7 @@ CREATE OR REPLACE FUNCTION public.logistics_sticker_copies(p_order uuid, p_stick
 AS $function$
 DECLARE v int; c jsonb; t text := upper(coalesce(p_type,''));
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_copies');
   IF (p_fi->>'numberOfCopies') ~ '^\d+$' AND (p_fi->>'numberOfCopies')::int > 0 THEN
     RETURN jsonb_build_object('aantal', (p_fi->>'numberOfCopies')::int, 'bron', 'numberOfCopies');
   END IF;
@@ -28123,6 +28539,7 @@ DECLARE
   v_crates_tot int; v_pieces_tot int; r record; v_rows int; v_cp jsonb; v_bron text; v_ncarts int; sv record;
   n_st int := 0; n_tray int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_sticker_sync');
   SELECT settings INTO s FROM public.logistics_rule_configs
    ORDER BY is_active DESC, (status = 'actief') DESC, updated_at DESC LIMIT 1;
   v_rel := public.logistics_rule_text(s, 'pickstations', 'sticker_release', 'with_pick_release');
@@ -28334,6 +28751,7 @@ CREATE OR REPLACE FUNCTION public.logistics_sticker_etiket_status()
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_sticker_etiket_status');
   SELECT jsonb_build_object(
     'wachtend', (SELECT count(*) FROM public.logistics_sticker_prints
                   WHERE status IN ('klaar','geblokkeerd') AND reden LIKE 'Stel bij je labelprinter in welk etiket erin zit%'),
@@ -28407,10 +28825,14 @@ END $fs$;
 -- Eén rij per Shell; gegevens gaan niet mee met kloon of schemasync, dus de rij wordt
 -- bij gebruik aangemaakt (standaard "uit"). installed_at = moment van eerste gebruik in deze Shell.
 CREATE OR REPLACE FUNCTION public.logistics_carrier_settings_ensure()
- RETURNS public.logistics_carrier_settings LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS logistics_carrier_settings
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE r public.logistics_carrier_settings;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_settings_ensure');
   SELECT * INTO r FROM public.logistics_carrier_settings WHERE id;
   IF NOT FOUND THEN
     INSERT INTO public.logistics_carrier_settings (id, backfill_existing) VALUES (true, false)
@@ -28454,10 +28876,14 @@ CREATE INDEX IF NOT EXISTS logistics_carrier_recalc_queue_open_idx
 -- Waarom een vervoerder niet bruikbaar is (NULL = bruikbaar).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_skip_reason(p_carrier_id uuid)
- RETURNS text LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS text
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE c jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_skip_reason');
   IF p_carrier_id IS NULL THEN RETURN 'is leeg'; END IF;
   SELECT to_jsonb(ca) INTO c FROM public.carriers ca WHERE ca.id = p_carrier_id;
   IF c IS NULL THEN RETURN 'bestaat niet (meer)'; END IF;
@@ -28476,8 +28902,12 @@ END $function$;
 -- Heeft de vervoerder een ophaalmoment voor deze leverdag?
 CREATE OR REPLACE FUNCTION public.logistics_carrier_picks_up_for(p_carrier_id uuid, p_delivery_date date)
- RETURNS boolean LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS boolean
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_carrier_picks_up_for');
   SELECT EXISTS (
     SELECT 1 FROM public.carriers ca
       CROSS JOIN LATERAL jsonb_array_elements(CASE WHEN jsonb_typeof(ca.pickup_moments) = 'array' THEN ca.pickup_moments ELSE '[]'::jsonb END) m
@@ -28488,10 +28918,14 @@ $function$;
 -- Opgemaakt resultaat volgens het contract.
 CREATE OR REPLACE FUNCTION public.logistics_carrier_result(p_carrier_id uuid, p_bron text, p_reden text, p_skips text[])
- RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE c jsonb; v_kind text; v_name text; v_reden text := p_reden;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_result');
   IF p_carrier_id IS NOT NULL THEN
     SELECT to_jsonb(ca) INTO c FROM public.carriers ca WHERE ca.id = p_carrier_id;
     v_kind := c->>'carrier_kind';
@@ -28506,10 +28940,14 @@ END $function$;
 -- Favoriet van Afhandeling op id (afh_favorite_carrier() geeft een rij met carrier_id).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_favorite_id()
- RETURNS uuid LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS uuid
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE j jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_favorite_id');
   IF to_regprocedure('public.afh_favorite_carrier()') IS NULL THEN RETURN NULL; END IF;
   EXECUTE 'SELECT to_jsonb(f) FROM public.afh_favorite_carrier() f LIMIT 1' INTO j;
   RETURN public.logistics_try_uuid(CASE jsonb_typeof(j) WHEN 'object' THEN coalesce(j->>'carrier_id', j->>'id')
@@ -28521,7 +28959,10 @@ END $function$;
 -- -> 3 GLN-lijst per vervoerder -> 4 standaard van de klant -> 5 werkgebied
 -- (plaats > provincie > land, ophaalmoment op de leverdag) -> 6 favoriet.
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_core(p_order jsonb, p_skip_manual boolean DEFAULT false)
- RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE
   cf jsonb := CASE WHEN jsonb_typeof(p_order->'custom_fields') = 'object' THEN p_order->'custom_fields' ELSE '{}'::jsonb END;
@@ -28531,11 +28972,11 @@ DECLARE
   l jsonb; cu jsonb; v_id uuid; v_skip text; v_skips text[] := '{}'::text[];
   v_country text; v_prov text; v_city text; v_lvl int; v_any boolean; r record; v_fav text;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_resolve_carrier_core');
   IF coalesce(p_order->>'delivery_date', '') ~ '^\d{4}-\d{2}-\d{2}' THEN
     v_date := left(p_order->>'delivery_date', 10)::date;
   END IF;
-  -- 1. Handmatig gekozen op de order (alleen via logistics_set_order_carrier).
   IF NOT p_skip_manual AND p_order->>'carrier_source' = 'handmatig' THEN
     v_id := public.logistics_try_uuid(p_order->>'carrier_id');
     v_skip := public.logistics_carrier_skip_reason(v_id);
@@ -28544,7 +28985,6 @@ BEGIN
     END IF;
     v_skips := v_skips || ('handmatige keuze: ' || v_skip);
   END IF;
-  -- 1b. Overgenomen uit een bestaande custom_fields.carrier (bron 'oud').
   v_id := public.logistics_try_uuid(cf->>'carrier');
   IF v_id IS NOT NULL THEN
     v_skip := public.logistics_carrier_skip_reason(v_id);
@@ -28554,7 +28994,6 @@ BEGIN
     v_skips := v_skips || ('bestaande vervoerder op de order: ' || v_skip);
   END IF;
-  -- 2. Afleverlocatie (op id, anders op GLN).
   v_loc_raw := coalesce(nullif(btrim(cf->>'delivery_location_id'), ''), nullif(btrim(cf->>'delivery_location'), ''));
   v_loc_id := public.logistics_try_uuid(v_loc_raw);
   v_gln := coalesce(nullif(btrim(cf->>'delivery_location_gln'), ''), CASE WHEN v_loc_id IS NULL THEN v_loc_raw END);
@@ -28589,7 +29028,6 @@ BEGIN
     END IF;
   END IF;
-  -- 3. Vervoerder die deze afleverlocatie-GLN bedient (lijst van Afhandeling).
   IF v_gln IS NOT NULL THEN
     IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'carriers' AND column_name = 'delivery_location_glns') THEN
       FOR r IN SELECT ca.id FROM public.carriers ca
@@ -28606,7 +29044,6 @@ BEGIN
     END IF;
   END IF;
-  -- 4. Standaardvervoerder van de klant (veld van Klanten).
   IF v_cust IS NOT NULL THEN
     SELECT to_jsonb(x) INTO cu FROM public.customers x WHERE x.id = v_cust;
     IF cu IS NOT NULL AND NOT (cu ? 'default_carrier_id') THEN
@@ -28623,7 +29060,6 @@ BEGIN
     END IF;
   END IF;
-  -- 5. Werkgebied: plaats > provincie > land, met een ophaalmoment op de leverdag.
   IF v_date IS NULL AND NOT v_zonder_datum THEN
     v_skips := v_skips || 'werkgebied: leverdatum onbekend'::text;
   ELSE
@@ -28656,7 +29092,6 @@ BEGIN
     END LOOP;
   END IF;
-  -- 6. Favoriete vervoerder van de Shell (Afhandeling).
   IF to_regprocedure('public.afh_favorite_carrier()') IS NULL THEN
     v_skips := v_skips || 'favoriete vervoerder bestaat nog niet (Afhandeling)'::text;
   ELSE
@@ -28687,10 +29122,14 @@ END $function$;
 -- "Aangemeld" = vastlegging van Afhandeling in carrier_signup_dispatches (sent_at gevuld,
 -- order_ids bevat de order), gelezen via to_jsonb.
 CREATE OR REPLACE FUNCTION public.logistics_carrier_frozen_reason(p_order_id uuid)
- RETURNS text LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS text
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE v_locked timestamptz; v_hit boolean;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_frozen_reason');
   SELECT plan_locked_at INTO v_locked FROM public.orders WHERE id = p_order_id;
   IF v_locked IS NOT NULL THEN RETURN 'de planning is vastgezet'; END IF;
   BEGIN
@@ -28713,10 +29152,14 @@ END $function$;
 -- Vervoerder van een order volgens het contract (alleen lezen).
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier(p_order_id uuid)
- RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE o jsonb; r jsonb; v_fr text;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_resolve_carrier');
   SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id;
   IF o IS NULL THEN
     RETURN jsonb_build_object('carrier_id', NULL, 'carrier_name', NULL, 'carrier_kind', NULL, 'bron', 'geen',
@@ -28733,15 +29176,23 @@ BEGIN
 END $function$;
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_many(p_order_ids uuid[])
- RETURNS TABLE(order_id uuid, resultaat jsonb) LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS TABLE(order_id uuid, resultaat jsonb)
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_resolve_carrier_many');
   SELECT x.id, public.logistics_resolve_carrier(x.id) FROM unnest(coalesce(p_order_ids, '{}'::uuid[])) AS x(id)
 $function$;
 -- Voor Klanten: dezelfde volgorde zonder stap 1 (geen order, dus geen leverdag).
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location(p_location_id uuid, p_customer_id uuid)
- RETURNS jsonb LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_resolve_carrier_for_location');
   SELECT public.logistics_resolve_carrier_core(jsonb_build_object(
     'customer_id', coalesce(p_customer_id, (SELECT l.customer_id FROM public.customer_delivery_locations l WHERE l.id = p_location_id)),
     'custom_fields', jsonb_build_object('delivery_location_id', p_location_id),
@@ -28749,20 +29200,26 @@ AS $function$
 $function$;
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location_many(p_location_ids uuid[], p_customer_id uuid)
- RETURNS TABLE(location_id uuid, resultaat jsonb) LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS TABLE(location_id uuid, resultaat jsonb)
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_resolve_carrier_for_location_many');
   SELECT x.id, public.logistics_resolve_carrier_for_location(x.id, p_customer_id)
     FROM unnest(coalesce(p_location_ids, '{}'::uuid[])) AS x(id)
 $function$;
 -- Variant voor een hele klantenlijst: [{location_id, customer_id}, ...] (max. 1000 regels).
 CREATE OR REPLACE FUNCTION public.logistics_resolve_carrier_for_location_many(p_items jsonb)
- RETURNS TABLE(location_id uuid, customer_id uuid, carrier_id uuid, carrier_name text, carrier_kind text,
-               bron text, reden text, waarschuwing text)
- LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS TABLE(location_id uuid, customer_id uuid, carrier_id uuid, carrier_name text, carrier_kind text, bron text, reden text, waarschuwing text)
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE it jsonb; r jsonb; v_loc uuid; v_cust uuid;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_resolve_carrier_for_location_many');
   IF auth.uid() IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   IF p_items IS NULL OR jsonb_typeof(p_items) <> 'array' THEN RAISE EXCEPTION 'p_items moet een lijst zijn: [{location_id, customer_id}, ...]'; END IF;
   IF jsonb_array_length(p_items) > 1000 THEN RAISE EXCEPTION 'Te veel regels (%); maximaal 1000 per aanroep.', jsonb_array_length(p_items); END IF;
@@ -28784,10 +29241,14 @@ END $function$;
 -- Opgeslagen vervoerder (of, zolang nog niet opgeslagen, de regel live; niets schrijven).
 CREATE OR REPLACE FUNCTION public.logistics_order_carrier_info(p_order_id uuid)
- RETURNS jsonb LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE o jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_order_carrier_info');
   SELECT to_jsonb(x) INTO o FROM public.orders x WHERE x.id = p_order_id;
   IF o IS NULL THEN RETURN jsonb_build_object('carrier_id', NULL, 'bron', 'geen', 'reden', 'Order niet gevonden.'); END IF;
   IF o->>'carrier_source' IS NOT NULL THEN
@@ -28806,22 +29267,34 @@ BEGIN
 END $function$;
 CREATE OR REPLACE FUNCTION public.logistics_order_carrier_label(p_order_id uuid)
- RETURNS text LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS text
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_order_carrier_label');
   SELECT public.logistics_order_carrier_info(p_order_id)->>'carrier_name'
 $function$;
 -- Bestaande functie: nu volgens dezelfde regel.
 CREATE OR REPLACE FUNCTION public.logistics_order_carrier_id(p_order_id uuid)
- RETURNS uuid LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS uuid
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_order_carrier_id');
   SELECT public.logistics_try_uuid(public.logistics_order_carrier_info(p_order_id)->>'carrier_id')
 $function$;
 -- Bestaande functie blijft; dezelfde regel (locatie op id of GLN).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_for_location(p_location text, p_customer_id uuid)
- RETURNS uuid LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS uuid
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('server', 'logistics_carrier_for_location');
   SELECT public.logistics_try_uuid(public.logistics_resolve_carrier_core(jsonb_build_object(
     'customer_id', p_customer_id,
     'custom_fields', jsonb_build_object('delivery_location', nullif(btrim(coalesce(p_location, '')), '')),
@@ -28832,7 +29305,10 @@ $function$;
 -- Geen lus: deze trigger zet nooit iets op de herberekenlijst en schrijft
 -- niets anders weg. Engine-schrijvers zetten logistics.carrier_writer = 'engine'.
 CREATE OR REPLACE FUNCTION public.logistics_orders_carrier_fill()
- RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS trigger
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE r jsonb; s record;
 BEGIN
@@ -28852,10 +29328,10 @@ BEGIN
     SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
     IF OLD.carrier_source IS NULL AND NOT coalesce(s.backfill_existing, false)
        AND OLD.created_at < coalesce(s.installed_at, now()) THEN
-      RETURN NEW; -- bestaande order: pas na akkoord (schakelaar in Beheer)
+      RETURN NEW;
     END IF;
     IF NEW.plan_locked_at IS NOT NULL OR public.logistics_carrier_frozen_reason(NEW.id) IS NOT NULL THEN
-      RETURN NEW; -- bevroren: alleen waarschuwing bij het lezen
+      RETURN NEW;
     END IF;
   END IF;
   BEGIN
@@ -28924,10 +29400,14 @@ CREATE TRIGGER trg_logistics_orders_carrier_changed AFTER UPDATE OF carrier_id O
 -- Herberekenlijst vullen: alleen open orders, nooit handmatig, bestaande orders pas na de schakelaar.
 CREATE OR REPLACE FUNCTION public.logistics_carrier_enqueue(p_order_ids uuid[], p_reden text)
- RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE n int;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_enqueue');
   PERFORM public.logistics_carrier_settings_ensure();
   INSERT INTO public.logistics_carrier_recalc_queue AS q (order_id, reden)
   SELECT o.id, p_reden FROM public.orders o
@@ -28997,11 +29477,15 @@ END $fs$;
 -- langer dan 24 uur niet gecontroleerd zijn). Hooguit p_limit (200) orders per
 -- ronde. Schrijft ALLEEN als carrier_id, bron of reden verschilt.
 CREATE OR REPLACE FUNCTION public.logistics_carrier_recalc_run(p_limit integer DEFAULT 200)
- RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE s record; r record; o jsonb; v jsonb; v_fr text;
   n_chk int := 0; n_upd int := 0; n_frozen int := 0; n_hand int := 0; n_err int := 0;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_carrier_recalc_run');
   SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
   IF NOT FOUND THEN RETURN jsonb_build_object('overgeslagen', 'instellingen vervoerder ontbreken'); END IF;
   FOR r IN
@@ -29063,11 +29547,13 @@ END $function$;
 -- Handmatig kiezen: de enige manier. NULL = terug naar automatisch. Verstuurt nooit een mail.
 -- Lijst F: wat de regel per bestaande open order zou opslaan (alleen lezen).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_preview_existing(p_limit integer DEFAULT 1000)
- RETURNS TABLE(order_id uuid, order_number text, order_source text, delivery_date text, huidig_custom_carrier text,
-               carrier_id uuid, carrier_name text, carrier_kind text, bron text, reden text, bevroren text)
- LANGUAGE plpgsql STABLE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS TABLE(order_id uuid, order_number text, order_source text, delivery_date text, huidig_custom_carrier text, carrier_id uuid, carrier_name text, carrier_kind text, bron text, reden text, bevroren text)
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_carrier_preview_existing');
   IF auth.uid() IS NOT NULL AND NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag deze lijst bekijken.';
   END IF;
@@ -29085,9 +29571,13 @@ END $function$;
 -- Schakelaar "Vervoerder berekenen voor bestaande orders" (alleen beheer).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_set_backfill(p_on boolean)
- RETURNS jsonb LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.logistics_acc_guard('beheer', 'logistics_carrier_set_backfill');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag deze schakelaar wijzigen.';
   END IF;
@@ -29100,10 +29590,14 @@ END $function$;
 -- 'oud' -> 'handmatig', alleen na akkoord en met exact aantal (alleen beheer).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_promote_oud(p_order_ids uuid[], p_confirm_count integer)
- RETURNS integer LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE n int;
 BEGIN
+  PERFORM public.logistics_acc_guard('beheer', 'logistics_carrier_promote_oud');
   IF auth.uid() IS NULL OR NOT public.logistics_is_beheer() THEN
     RAISE EXCEPTION 'Alleen beheer mag dit doen.';
   END IF;
@@ -29121,10 +29615,14 @@ END $function$;
 -- Bewaking in Beheer (alleen lezen).
 CREATE OR REPLACE FUNCTION public.logistics_carrier_status()
- RETURNS jsonb LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE s record; v jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_carrier_status');
   IF auth.uid() IS NULL AND coalesce(auth.role(), '') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   SELECT * INTO s FROM public.logistics_carrier_settings_ensure();
   WITH open_orders AS (
@@ -29152,11 +29650,13 @@ END $function$;
 -- Installatiecontrole voor de vervoerder-onderdelen (alleen lezen).
 CREATE OR REPLACE FUNCTION public.logistics_install_check()
  RETURNS TABLE(onderdeel text, ok boolean, toelichting text)
- LANGUAGE plpgsql VOLATILE SECURITY DEFINER SET search_path TO 'public'
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
 DECLARE c text; f text; t text; v_fav text; n bigint; s record;
 BEGIN
-  -- Engine-onderdelen waar de vervoerder van afhangt + 1.0.179/1.0.182 (functie of tabel op naam).
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_install_check');
   FOREACH f IN ARRAY ARRAY[
       'f:logistics_try_uuid','f:logistics_tz','f:logistics_is_beheer','f:logistics_buffer_payload','f:logistics_apply_order_buffer',
       'f:logistics_apply_buffer_decision','f:logistics_rebuffer_pending','f:logistics_departure_calc','f:logistics_own_transport_departure',
@@ -29168,7 +29668,8 @@ BEGIN
       'f:logistics_sticker_copies','f:logistics_sticker_etiket_status','f:logistics_sticker_order_counts','f:logistics_sticker_sync',
       'c:logistics_sticker_prints.kopieen_bron',
       'f:logistics_carrier_settings_ensure','t:logistics_carrier_settings','t:logistics_carrier_recalc_queue','t:logistics_carrier_events',
-      'f:logistics_carrier_status','f:logistics_carrier_set_backfill','f:logistics_carrier_preview_existing','c:control_get_todays_carts.carrier_name'] LOOP
+      'f:logistics_carrier_status','f:logistics_carrier_set_backfill','f:logistics_carrier_preview_existing','c:control_get_todays_carts.carrier_name',
+      'f:logistics_plan_fail_log'] LOOP
     onderdeel := 'Engine: ' || substr(f, 3);
     ok := CASE left(f, 1)
       WHEN 'f' THEN EXISTS (SELECT 1 FROM pg_proc p WHERE p.pronamespace = 'public'::regnamespace AND p.proname = substr(f, 3))
@@ -29178,7 +29679,7 @@ BEGIN
              ELSE EXISTS (SELECT 1 FROM information_schema.columns WHERE table_schema='public'
                            AND table_name = split_part(substr(f, 3), '.', 1) AND column_name = split_part(substr(f, 3), '.', 2)) END
     END;
-    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie (1.0.182 t/m 1.0.184) in dev uitvoeren en via schemasync verspreiden' END;
+    toelichting := CASE WHEN ok THEN 'aanwezig' ELSE 'ontbreekt: Engine-migratie (1.0.182 t/m 1.0.188) in dev uitvoeren en via schemasync verspreiden' END;
     RETURN NEXT;
   END LOOP;
   FOREACH c IN ARRAY ARRAY['carrier_id','carrier_source','carrier_reason','carrier_resolved_at','carrier_set_by','carrier_set_at'] LOOP
@@ -29236,6 +29737,16 @@ BEGIN
     onderdeel := 'Schakelaar bestaande orders'; ok := true;
     toelichting := CASE WHEN coalesce(s.backfill_existing, false) THEN 'aan' ELSE 'uit (bestaande orders wachten op akkoord)' END; RETURN NEXT;
   END IF;
+  -- 1.0.188: mislukte aanmelding voor (her)planning vanuit de ordertriggers.
+  SELECT count(*) INTO n FROM public.logistics_trace_events e
+   WHERE e.actor IN ('trg_logistics_plan_order_items', 'trg_logistics_plan_orders')
+     AND e.status = 'mislukt' AND e.created_at > now() - interval '24 hours';
+  onderdeel := 'Mislukte herplanning (laatste 24 uur)'; ok := n = 0;
+  toelichting := CASE WHEN n = 0 THEN 'geen' ELSE n || ' keer; laatste: ' || coalesce((SELECT coalesce(e.order_ref, '?') || ': ' || coalesce(e.error, '') FROM public.logistics_trace_events e
+     WHERE e.actor IN ('trg_logistics_plan_order_items', 'trg_logistics_plan_orders') AND e.status = 'mislukt'
+     ORDER BY e.created_at DESC LIMIT 1), '') END;
+  RETURN NEXT;
+  RETURN QUERY SELECT * FROM public.logistics_access_check();
 END $function$;
 -- Buffergegevens: vervoerder van de order (kolom) gaat voor custom_fields.
@@ -29245,6 +29756,7 @@ CREATE OR REPLACE FUNCTION public.logistics_buffer_payload(p_order_id uuid)
  STABLE SECURITY DEFINER
  SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'logistics_buffer_payload');
   SELECT jsonb_build_object(
       'orderRef', COALESCE(o.order_number, o.id::text),
       'checkinAt', COALESCE(cf ->> 'checkin_at', cf ->> 'checkin_moment', cf ->> 'pickup_moment', cf ->> 'pickup_datetime'),
@@ -29276,6 +29788,7 @@ CREATE OR REPLACE FUNCTION public.logistics_order_departure(p_order_id uuid)
 AS $function$
 DECLARE o record; v jsonb; v_own jsonb; v_txt text; v_at timestamptz; v_info jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('ingelogd', 'logistics_order_departure');
   IF public.logistics_tz() IS NULL THEN
     RETURN jsonb_build_object('ok', false, 'reason', 'De tijdzone van de vestiging ontbreekt. Stel die in bij Werktijden.');
   END IF;
@@ -29329,6 +29842,7 @@ DECLARE
   v_naam text; v_code text; v_date date; v_time time; n int;
   v_wens text; onbekend text[] := '{}'::text[]; uit jsonb := '{}'::jsonb;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_brief_transport');
   SELECT id, custom_fields, floriday_sales_order_id, delivery_date INTO o FROM public.orders WHERE id = p_order_id AND deleted_at IS NULL;
   IF o.id IS NULL THEN
     RETURN jsonb_build_object('onbekend', jsonb_build_array('order'));
@@ -29410,6 +29924,7 @@ CREATE OR REPLACE FUNCTION public.logistics_tick()
 AS $function$
 DECLARE v_result jsonb := '{}'::jsonb; v_start timestamptz := clock_timestamp(); v_t timestamptz; v_err boolean := false;
 BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_tick');
   v_t := clock_timestamp();
   BEGIN
     PERFORM set_config('statement_timeout', '10000', true);
@@ -29498,8 +30013,11 @@ END $m$;
 CREATE OR REPLACE FUNCTION public.control_get_todays_carts()
  RETURNS TABLE(cart_number_id uuid, cart_number text, order_source text, order_id text, cart_index integer, order_number text, pick_date date, status text, printed_at timestamp with time zone, printed_today boolean, crates_on_cart integer, country_code text, carrier_name text)
- LANGUAGE sql STABLE SECURITY DEFINER SET search_path TO 'public'
+ LANGUAGE sql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
 AS $function$
+  SELECT public.logistics_acc_guard('ingelogd', 'control_get_todays_carts');
   WITH vandaag AS (
     SELECT (now() AT TIME ZONE public.logistics_tz())::date AS d
   ),
@@ -29607,9 +30125,12 @@ REVOKE ALL ON FUNCTION public.logistics_acc_is_server() FROM PUBLIC, anon;
 GRANT EXECUTE ON FUNCTION public.logistics_acc_is_server() TO authenticated, service_role;
 CREATE OR REPLACE FUNCTION public.logistics_acc_levels()
- RETURNS TABLE(functie text, niveau text) LANGUAGE sql IMMUTABLE SET search_path TO 'public'
+ RETURNS TABLE(functie text, niveau text)
+ LANGUAGE sql
+ IMMUTABLE
+ SET search_path TO 'public'
 AS $function$
-  SELECT * FROM (
+  SELECT v.functie, CASE WHEN v.niveau = 'wacht op pickschermlijst' THEN CASE WHEN v.functie = ANY (ARRAY['logistics_auto_send_status','logistics_barcode_lookup','logistics_cart_plan_status','logistics_cart_slip_plan','logistics_cart_sticker_state','logistics_complete_task','logistics_document_for_order','logistics_is_pick_workday','logistics_order_released','logistics_order_sticker_meldingen','logistics_pick_mode','logistics_scan_resolve','logistics_shipping_note_from_barcode','logistics_shipping_note_status','logistics_working_hours_status','pick_queue_cart_plan']) THEN 'open (pickscherm/scanner zonder inlog)' ELSE 'ingelogd' END ELSE v.niveau END AS niveau FROM (
     SELECT unnest(ARRAY['claim_logistics_tasks','control_get_todays_carts','control_mark_carts_delivered','control_mark_carts_delivered_detail','logistics_allowed_load_carriers','logistics_apply_buffer_decision','logistics_apply_document_layouts','logistics_apply_order_buffer','logistics_approve_delay_reschedule','logistics_archived_orders','logistics_backorder_allowed','logistics_belading_bevestig','logistics_belading_verstuurder','logistics_blocked_orders','logistics_blocked_overview','logistics_buffer_decision','logistics_buffer_detach_late_orders','logistics_buffer_frozen_order','logistics_buffer_handled','logistics_buffer_notify','logistics_buffer_open_key','logistics_buffer_payload','logistics_buffer_simulate','logistics_cancel_order','logistics_cancel_orphan_tasks','logistics_capacity_day_check','logistics_carrier_preview_existing','logistics_carrier_status','logistics_cart_archive','logistics_cart_archive_preview','logistics_cart_checkin_at','logistics_cart_fixed_numbering','logistics_cart_handled','logistics_cart_index','logistics_cart_is_archived','logistics_cart_is_full','logistics_cart_json_fixed','logistics_cart_layout_method','logistics_cart_order_ids','logistics_cart_order_refs','logistics_cart_plan_overview','logistics_cart_plan_status_core','logistics_cart_release_reason','logistics_cart_seq','logistics_cart_unarchive','logistics_cart_units','logistics_cart_wait_until','logistics_check_order_allowed','logistics_check_order_stock','logistics_claim_next_task','logistics_cleanup_duplicate_order_lines','logistics_cleanup_history','logistics_cleanup_tasks','logistics_consistency_check','logistics_control_complete_cart','logistics_control_settings','logistics_cron_health','logistics_day_windows','logistics_delivery_agenda','logistics_departure_preview','logistics_document_layout','logistics_document_layout_v2','logistics_emit_event','logistics_external_fulfillment_key_report','logistics_floriday_cart_plan','logistics_floriday_claim_pushes','logistics_floriday_finish_push','logistics_floriday_finish_push_v2','logistics_floriday_finish_push_v3','logistics_floriday_is_read_only','logistics_floriday_log_refusal','logistics_floriday_log_send','logistics_floriday_order_approved','logistics_floriday_prune_pushes','logistics_floriday_queue_push','logistics_full_cart_min_layers','logistics_full_cart_min_percentage','logistics_install_check','logistics_is_beheer','logistics_item_external_fulfilled','logistics_layout_method_status','logistics_link_order_items','logistics_local_hhmi','logistics_local_today','logistics_merge_decision','logistics_merge_floriday_lines','logistics_merge_lines_enabled','logistics_merge_partial_carts','logistics_opening_timezone','logistics_order_backlog_info','logistics_order_cart_approval','logistics_order_cart_ids','logistics_order_changed','logistics_order_definitively_blocked','logistics_order_departure','logistics_order_departure_list','logistics_order_documents_ready','logistics_order_documents_ready_bool','logistics_order_external_state','logistics_order_finalize_enqueue','logistics_order_finalize_overview','logistics_order_finalize_prune','logistics_order_finalize_reconcile','logistics_order_finalize_retry','logistics_order_finalize_run','logistics_order_frozen','logistics_order_handled','logistics_order_is_archived','logistics_order_is_backlog','logistics_order_is_frozen','logistics_order_line_duplicates','logistics_order_mergeable','logistics_order_overview','logistics_order_plan_coverage','logistics_order_plan_coverage_list','logistics_orphan_carts_list','logistics_orphan_carts_summary','logistics_own_transport_departure','logistics_packing_autofix','logistics_packing_block_reason','logistics_packing_dismiss','logistics_packing_overview','logistics_packing_reconcile','logistics_packing_set_manual','logistics_partial_wait_minutes','logistics_payload_is_floriday','logistics_plan_block','logistics_plan_defer','logistics_plan_enqueue','logistics_plan_finish','logistics_plan_floriday_order','logistics_plan_lock_acquire','logistics_plan_lock_release','logistics_plan_progress','logistics_plan_progress_pct','logistics_plan_queue_list','logistics_plan_reset_queue','logistics_plan_retry','logistics_plan_state_for','logistics_plan_timeout_running','logistics_plan_unarchive','logistics_prune_buffer_member_queue','logistics_queue_capacity_email','logistics_queue_stock_email','logistics_reapply_buffer_decisions','logistics_rebuffer_open_orders','logistics_rebuffer_orders','logistics_rebuffer_pending','logistics_rebuffer_report','logistics_refresh_plan_state','logistics_replan_all','logistics_replan_all_force','logistics_replan_order_journey','logistics_replan_preview','logistics_replan_selected','logistics_report_delay','logistics_reschedule_order','logistics_reschedule_preview','logistics_resolve_carrier','logistics_resolve_carrier_for_location','logistics_resolve_carrier_for_location_many','logistics_resolve_carrier_many','logistics_resolve_settings','logistics_sales_order_external_fulfilled','logistics_schedule_tasks','logistics_set_order_priority','logistics_subtract_working_minutes','logistics_supersede_stale_tasks','logistics_sync_task_carriers','logistics_task_open_counts','logistics_tasks_prune','logistics_tick_health','logistics_tick_ping','logistics_timezone_options','logistics_trace','logistics_trace_all_orders','logistics_trace_archive_order','logistics_trace_batch','logistics_trace_derive','logistics_trace_order_journey_start','logistics_trace_order_origin','logistics_trace_order_overview','logistics_trace_order_state','logistics_trace_order_step','logistics_trace_orders','logistics_trace_progress','logistics_trace_progress_order','logistics_trace_step_once','logistics_trace_stock_check','logistics_trace_timeline','logistics_trace_version_events','logistics_trace_versions','logistics_tz','logistics_unit_order_ids','logistics_upsert_task','logistics_valid_timezone','logistics_write_buffer_layer_positions','logistics_write_cart_layer_positions']), 'ingelogd'
     UNION ALL
     SELECT unnest(ARRAY['logistics_active_layout_method','logistics_address_key','logistics_block_reason_code','logistics_buffer_criteria','logistics_buffer_decision_for_settings','logistics_buffer_value','logistics_capacity_plan_day','logistics_carrier_minutes','logistics_delay_customer_email','logistics_document_selection_status','logistics_document_type_map','logistics_floriday_delivery_note_create_enabled','logistics_floriday_gate_status','logistics_floriday_shipping_document','logistics_floriday_status_updates_enabled','logistics_floriday_stock_updates_enabled','logistics_floriday_write_allowed','logistics_is_engine_response','logistics_live_carriers','logistics_live_cart_count','logistics_next_workday_date','logistics_next_workday_not_past','logistics_nl_date','logistics_nl_moment','logistics_not_past','logistics_order_cart_count','logistics_order_is_shipped_status','logistics_order_merge_key','logistics_plan_error_class','logistics_plan_error_text','logistics_resolve_product_id','logistics_resolve_product_match','logistics_retention_days','logistics_rule_bool','logistics_rule_num','logistics_rule_text','logistics_rule_value','logistics_shift_to_workday','logistics_status_after_shipping','logistics_task_owner','logistics_task_retention_days','logistics_trace_node','logistics_trace_redact','logistics_trace_source_node','logistics_tray_plants','logistics_try_uuid']), 'open (rekenhulp/rechten aanroeper)'
@@ -29816,3 +30337,30 @@ BEGIN
 END $acc$;
 ALTER FUNCTION public.logistics_cart_barcode_value(uuid) SET search_path TO 'public';
+-- 1.0.188: mislukte aanmelding voor (her)planning zichtbaar maken.
+CREATE OR REPLACE FUNCTION public.logistics_plan_fail_log(p_actor text, p_order_id uuid, p_state text, p_msg text)
+ RETURNS void LANGUAGE plpgsql SECURITY DEFINER SET search_path TO 'public'
+AS $function$
+DECLARE v_num text;
+BEGIN
+  PERFORM public.logistics_acc_guard('server', 'logistics_plan_fail_log');
+  BEGIN
+    SELECT o.order_number INTO v_num FROM public.orders o WHERE o.id = p_order_id;
+    PERFORM public.logistics_trace(jsonb_build_object(
+      'orderRef', coalesce(v_num, p_order_id::text), 'phase', 'planning', 'step', 'aanmelden voor indeling',
+      'status', 'mislukt', 'actor', p_actor, 'errorClass', 'technisch', 'nodeId', 'stap:orders_combineren',
+      'error', p_state || ': ' || coalesce(p_msg, ''),
+      'reason', 'De wijziging is opgeslagen, maar de order kon niet voor (her)indeling worden aangemeld. De planwachtrij probeert het opnieuw.'));
+  EXCEPTION WHEN OTHERS THEN
+    RAISE WARNING 'logistiek-engine: fout niet vastgelegd voor order %: %', p_order_id, SQLERRM;
+  END;
+  -- Vangnet: alsnog in de planwachtrij, in een eigen subblok.
+  BEGIN
+    PERFORM public.logistics_plan_enqueue(p_order_id, 'herplanning mislukt');
+  EXCEPTION WHEN OTHERS THEN NULL;
+  END;
+END $function$;
+REVOKE ALL ON FUNCTION public.logistics_plan_fail_log(text, uuid, text, text) FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION public.logistics_plan_fail_log(text, uuid, text, text) TO service_role;
+COMMENT ON FUNCTION public.logistics_plan_fail_log(text, uuid, text, text) IS 'Logistiek Engine: legt een mislukte aanmelding voor (her)planning vast in het logboek en zet de order alsnog in de planwachtrij.';