@optifye/dashboard-core 6.10.46 → 6.10.48

package/dist/index.js

@@ -3947,6 +3947,10 @@ var AuthService = class {
       email: enrichedUser.email,
       role: enrichedUser.role,
       role_level: enrichedUser.role,
+      scope_mode: enrichedUser.scope_mode,
+      scope_generated_at: enrichedUser.scope_generated_at,
+      scope_ttl_seconds: enrichedUser.scope_ttl_seconds,
+      access_scope: enrichedUser.access_scope,
       company_id: enrichedUser.company_id,
       first_login_completed: enrichedUser.profile.first_login_completed,
       properties: {
@@ -8153,6 +8157,8 @@ var AuthProvider = ({ children }) => {
   const isFetchingRef = React26.useRef(false);
   const lastProcessedSessionRef = React26.useRef(null);
   const hasAuthenticatedRef = React26.useRef(false);
+  const scopeFetchedAtRef = React26.useRef(0);
+  const scopeTtlSecondsRef = React26.useRef(300);
   const fetchSession = React26.useCallback(async (supabaseSession, isReauth = false, allowRetry = true) => {
     if (isFetchingRef.current) {
       console.log("[AuthContext] Already fetching, skipping duplicate request");
@@ -8165,6 +8171,9 @@ var AuthProvider = ({ children }) => {
     }
     try {
       const enrichedUser = await AuthService.getSession(supabaseSession.access_token);
+      const parsedScopeGeneratedAt = enrichedUser.scope_generated_at ? Date.parse(enrichedUser.scope_generated_at) : NaN;
+      scopeFetchedAtRef.current = Number.isFinite(parsedScopeGeneratedAt) ? parsedScopeGeneratedAt : Date.now();
+      scopeTtlSecondsRef.current = enrichedUser.scope_ttl_seconds || 300;
       const authUser = AuthService.toAuthUser(enrichedUser);
       setUser(authUser);
       setSession(supabaseSession);
@@ -8254,6 +8263,8 @@ var AuthProvider = ({ children }) => {
       setError(null);
       setShowOnboarding(false);
       hasAuthenticatedRef.current = false;
+      scopeFetchedAtRef.current = 0;
+      scopeTtlSecondsRef.current = 300;
       router$1.push("/login");
     } catch (err) {
       console.error("[AuthContext] Sign out error:", err);
@@ -8316,6 +8327,44 @@ var AuthProvider = ({ children }) => {
       clearInterval(intervalId);
     };
   }, [session, supabase]);
+  React26.useEffect(() => {
+    if (!session || !user) {
+      return;
+    }
+    const refreshScopeIfExpired = async () => {
+      if (!session || isFetchingRef.current) {
+        return;
+      }
+      const ttlSeconds = user.scope_ttl_seconds || scopeTtlSecondsRef.current || 300;
+      const fetchedAt = scopeFetchedAtRef.current || 0;
+      const shouldRefresh = fetchedAt === 0 || Date.now() - fetchedAt >= ttlSeconds * 1e3;
+      if (!shouldRefresh) {
+        return;
+      }
+      try {
+        console.log("[AuthContext] Scope TTL expired, refreshing session scope");
+        await fetchSession(session, true);
+      } catch (err) {
+        console.error("[AuthContext] Scope refresh failed:", err);
+      }
+    };
+    refreshScopeIfExpired();
+    const intervalId = setInterval(refreshScopeIfExpired, 6e4);
+    return () => clearInterval(intervalId);
+  }, [session, user?.id, user?.scope_ttl_seconds, fetchSession]);
+  React26.useEffect(() => {
+    if (typeof window === "undefined") {
+      return;
+    }
+    const handleScopeRefresh = () => {
+      if (!session) {
+        return;
+      }
+      void fetchSession(session, true);
+    };
+    window.addEventListener("rbac:refresh-scope", handleScopeRefresh);
+    return () => window.removeEventListener("rbac:refresh-scope", handleScopeRefresh);
+  }, [session, fetchSession]);
   React26.useEffect(() => {
     if (!supabase) {
       console.log("[AuthContext] No Supabase client, skipping auth initialization");
@@ -8384,7 +8433,8 @@ var AuthProvider = ({ children }) => {
       } else if (event === "TOKEN_REFRESHED") {
         console.log("[AuthContext] Token refreshed automatically");
         if (currentSession) {
-          setSession(currentSession);
+          const isReauth = hasAuthenticatedRef.current;
+          await fetchSession(currentSession, isReauth);
           const expiresAt = currentSession.expires_at;
           if (expiresAt) {
             const minutesUntilExpiry = Math.floor((expiresAt * 1e3 - Date.now()) / 6e4);
@@ -10532,12 +10582,16 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
   const configuredLineIds = React26.useMemo(() => {
     return getConfiguredLineIds(entityConfig);
   }, [entityConfig]);
+  const targetFactoryLineIds = React26.useMemo(() => {
+    const sourceLineIds = userAccessibleLineIds !== void 0 ? userAccessibleLineIds : configuredLineIds;
+    return Array.from(new Set((sourceLineIds || []).filter(Boolean)));
+  }, [userAccessibleLineIds, configuredLineIds]);
   const { shiftConfig: staticShiftConfig } = useDashboardConfig();
   const {
     shiftConfigMap: multiLineShiftConfigMap,
     isLoading: isMultiLineShiftConfigLoading
   } = useMultiLineShiftConfigs(
-    isFactoryView ? configuredLineIds : [],
+    isFactoryView ? targetFactoryLineIds : [],
     staticShiftConfig
   );
   const {
@@ -10632,7 +10686,7 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
       return;
     }
     const isFactory = currentLineIdToUse === factoryViewId;
-    const targetLineIds = isFactory ? userAccessibleLineIds || configuredLineIds : [currentLineIdToUse];
+    const targetLineIds = isFactory ? targetFactoryLineIds : [currentLineIdToUse];
     const targetLineIdsKey = targetLineIds.slice().sort().join(",");
     const usesShiftGroups = isFactory && shiftGroups.length > 0;
     const singleShiftDetails = usesShiftGroups ? null : shiftConfig ? getCurrentShift(defaultTimezone, shiftConfig) : shiftGroups.length === 1 ? { date: shiftGroups[0].date, shiftId: shiftGroups[0].shiftId } : getCurrentShift(defaultTimezone, staticShiftConfig);
@@ -10681,7 +10735,16 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
         throw new Error("Backend URL is not configured. Please set NEXT_PUBLIC_BACKEND_URL in your environment.");
       }
       if (targetLineIds.length === 0) {
-        throw new Error("No target line IDs available for fetching metrics.");
+        logDebug("[useDashboardMetrics] Skipping fetch: no target line IDs after scope filtering");
+        setMetrics({
+          workspaceMetrics: [],
+          lineMetrics: [],
+          metadata: void 0,
+          efficiencyLegend: DEFAULT_EFFICIENCY_LEGEND
+        });
+        setMetricsLineId(requestLineId);
+        lastFetchKeyRef.current = inFlightFetchKeyRef.current;
+        return;
       }
       let allWorkspaceMetrics = [];
       let allLineMetrics = [];
@@ -10699,11 +10762,16 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
             lineCount: group.lineIds.length
           }))
         });
+        const targetLineIdSet = new Set(targetLineIds);
         const metricsPromises = shiftGroups.map(async (group) => {
-          const lineIdsParam = `line_ids=${group.lineIds.join(",")}`;
+          const groupLineIds = group.lineIds.filter((lineGroupId) => targetLineIdSet.has(lineGroupId));
+          if (groupLineIds.length === 0) {
+            return null;
+          }
+          const lineIdsParam = `line_ids=${groupLineIds.join(",")}`;
           const url = `${apiUrl}/api/dashboard/metrics?${lineIdsParam}&date=${group.date}&shift_id=${group.shiftId}&company_id=${companyId}${forceParam}`;
           logDebug(`[useDashboardMetrics] \u{1F4CA} Fetching for shift ${group.shiftId} (${group.shiftName}):`, {
-            lineIds: group.lineIds,
+            lineIds: groupLineIds,
             date: group.date
           });
           const response = await fetch(url, {
@@ -10727,7 +10795,7 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
             throw new Error(`Invalid JSON response from backend`);
           }
         });
-        const results = await Promise.all(metricsPromises);
+        const results = (await Promise.all(metricsPromises)).filter((result) => !!result);
         hasFlowBuffers = results.some((result) => result?.metadata?.has_flow_buffers);
         results.forEach((result) => {
           const idleMap = result?.metadata?.idle_time_vlm_by_line;
@@ -10905,6 +10973,7 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
     shiftGroups,
     shiftGroupsKey,
     configuredLineIds,
+    targetFactoryLineIds,
     isFactoryView,
     multiLineShiftConfigMap,
     staticShiftConfig,
@@ -10997,8 +11066,14 @@ var useDashboardMetrics = ({ onLineMetricsUpdate, lineId, userAccessibleLineIds
       logDebug("[useDashboardMetrics] Setting up group subscriptions:", {
         groupCount: currentShiftGroups.length
       });
+      const targetFactoryLineIdsForSubscriptions = currentUserAccessibleLineIds !== void 0 ? currentUserAccessibleLineIds : currentConfiguredLineIds;
+      const targetFactoryLineIdSet = new Set(
+        (targetFactoryLineIdsForSubscriptions || []).filter(Boolean)
+      );
       currentShiftGroups.forEach((group, index) => {
-        const groupLineIds = group.lineIds.filter((id3) => id3 && id3 !== factoryViewIdentifier);
+        const groupLineIds = group.lineIds.filter(
+          (id3) => id3 && id3 !== factoryViewIdentifier && targetFactoryLineIdSet.has(id3)
+        );
         if (groupLineIds.length === 0) {
           logDebug("[useDashboardMetrics] Skipping group subscription: no line IDs after filtering", {
             groupIndex: index,
@@ -16177,6 +16252,7 @@ function useAccessControl() {
 function useTeamManagementPermissions() {
   const { user } = useAuth();
   const currentRole = user?.role_level;
+  const isSuperAdminOptifye = currentRole === "optifye" && (user?.scope_mode === "SUPER_ADMIN" || !!user?.access_scope?.is_super_admin);
   return {
     /**
      * Can the current user assign lines to this user?
@@ -16232,7 +16308,10 @@ function useTeamManagementPermissions() {
     availableRolesToAssign: () => {
       if (!currentRole) return [];
       if (currentRole === "optifye") {
-        return ["owner", "it", "plant_head", "supervisor"];
+        if (isSuperAdminOptifye) {
+          return ["owner", "it", "plant_head", "supervisor"];
+        }
+        return ["it", "plant_head", "supervisor"];
       }
       if (currentRole === "owner") {
         return ["it", "plant_head", "supervisor"];
@@ -16250,7 +16329,12 @@ function useTeamManagementPermissions() {
      */
     canInviteRole: (role) => {
       if (!currentRole) return false;
-      if (currentRole === "optifye") return true;
+      if (currentRole === "optifye") {
+        if (role === "owner") {
+          return isSuperAdminOptifye;
+        }
+        return true;
+      }
       if (currentRole === "owner") {
         return ["it", "plant_head", "supervisor"].includes(role);
       }
@@ -16284,40 +16368,133 @@ function useTeamManagementPermissions() {
 }
 function useUserLineAccess(configLineIds) {
   const { user } = useAuth();
+  const { lines: dbLines } = useLines();
   const { accessibleLineIds, defaultLineId } = React26.useMemo(() => {
+    const dbLineIds = dbLines.map((line) => line.id);
+    const dbLineIdSet = new Set(dbLineIds);
+    const fallbackAllLineIds = configLineIds && configLineIds.length > 0 ? configLineIds : dbLineIds;
+    const normalizeIds = (value) => {
+      if (Array.isArray(value)) {
+        return value.filter((id3) => typeof id3 === "string" && !!id3);
+      }
+      if (typeof value === "string" && value) {
+        return [value];
+      }
+      return [];
+    };
+    const uniqueIds = (ids) => Array.from(new Set(ids.filter(Boolean)));
+    const filterToEnabledDb = (lineIds, options = {}) => {
+      const deduped = uniqueIds(lineIds);
+      if (dbLineIdSet.size === 0) {
+        return options.allowWhenDbUnavailable ? deduped : [];
+      }
+      return deduped.filter((lineId) => dbLineIdSet.has(lineId));
+    };
     if (!user) {
-      return { accessibleLineIds: configLineIds || [], defaultLineId: configLineIds?.[0] };
-    }
-    if (user.role_level === "supervisor") {
-      const assignedLineIds = user.properties?.line_id || user.properties?.line_ids || [];
-      if (Array.isArray(assignedLineIds) && assignedLineIds.length > 0) {
-        console.log("[useUserLineAccess] Supervisor has assigned lines:", assignedLineIds);
-        return {
-          accessibleLineIds: assignedLineIds,
-          defaultLineId: assignedLineIds[0]
-        };
+      const fallback = filterToEnabledDb(fallbackAllLineIds, { allowWhenDbUnavailable: true });
+      return { accessibleLineIds: fallback, defaultLineId: fallback[0] };
+    }
+    const configSet = new Set(configLineIds || []);
+    const hasScopePayload = !!user.access_scope || !!user.scope_mode;
+    const role = user.role_level || user.role;
+    const scopedLineIds = normalizeIds(user.access_scope?.line_ids);
+    const scopedFactoryIds = normalizeIds(user.access_scope?.factory_ids);
+    const properties = user.properties || {};
+    const propertyLineIds = normalizeIds(properties?.line_ids || properties?.line_id);
+    const propertyFactoryIds = normalizeIds(properties?.factory_ids || properties?.factory_id);
+    const propertyCompanyId = typeof properties?.company_id === "string" ? properties.company_id : user.company_id;
+    const scopedCompanyId = user.access_scope?.company_id || propertyCompanyId;
+    const isExplicitSuperAdmin = user.scope_mode === "SUPER_ADMIN" || !!user.access_scope?.is_super_admin;
+    const isLegacyOptifyeGlobal = !hasScopePayload && role === "optifye" && propertyLineIds.length === 0 && propertyFactoryIds.length === 0 && !propertyCompanyId;
+    const lineFactoryMap = /* @__PURE__ */ new Map();
+    dbLines.forEach((line) => {
+      lineFactoryMap.set(line.id, line.factory_id);
+    });
+    const applyConfigFilter = (lineIds) => {
+      const dedupedLineIds = uniqueIds(lineIds);
+      if (!configLineIds || configLineIds.length === 0) {
+        return dedupedLineIds;
       }
-      console.warn("[useUserLineAccess] Supervisor has NO assigned lines!", {
-        properties: user.properties,
-        hasLineId: !!user.properties?.line_id,
-        hasLineIds: !!user.properties?.line_ids
+      const filtered = dedupedLineIds.filter((id3) => configSet.has(id3));
+      return filtered.length > 0 ? filtered : dedupedLineIds;
+    };
+    const resolveFactoryScopedLines = (factoryIds) => {
+      const factorySet = new Set(factoryIds);
+      const baseLineIds = configLineIds && configLineIds.length > 0 ? configLineIds : dbLineIds;
+      const filtered = baseLineIds.filter((lineId) => {
+        const factoryId = lineFactoryMap.get(lineId);
+        return !!factoryId && factorySet.has(factoryId);
       });
+      if (filtered.length > 0) {
+        return uniqueIds(filtered);
+      }
+      const fromDb = dbLines.filter((line) => !!line.factory_id && factorySet.has(line.factory_id)).map((line) => line.id);
+      if (fromDb.length > 0) {
+        return uniqueIds(fromDb);
+      }
+      return [];
+    };
+    if (isExplicitSuperAdmin || isLegacyOptifyeGlobal) {
+      const all = filterToEnabledDb(fallbackAllLineIds, { allowWhenDbUnavailable: true });
       return {
-        accessibleLineIds: [],
-        defaultLineId: void 0
+        accessibleLineIds: all,
+        defaultLineId: all[0]
       };
     }
-    if (user.role_level === "plant_head") {
+    if (scopedLineIds.length > 0) {
+      const filtered = applyConfigFilter(scopedLineIds);
+      const scoped = filterToEnabledDb(filtered.length > 0 ? filtered : uniqueIds(scopedLineIds));
       return {
-        accessibleLineIds: configLineIds || [],
-        defaultLineId: configLineIds?.[0]
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
       };
     }
-    return {
-      accessibleLineIds: configLineIds || [],
-      defaultLineId: configLineIds?.[0]
-    };
-  }, [user, configLineIds]);
+    if (scopedFactoryIds.length > 0) {
+      const scoped = filterToEnabledDb(resolveFactoryScopedLines(scopedFactoryIds));
+      return {
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
+      };
+    }
+    if (scopedCompanyId) {
+      const dbCompanyLineIds = dbLines.filter((line) => !line.company_id || line.company_id === scopedCompanyId).map((line) => line.id);
+      const companyScopedLines = configLineIds && configLineIds.length > 0 ? (() => {
+        const dbCompanySet = new Set(dbCompanyLineIds);
+        const filtered = configLineIds.filter((lineId) => dbCompanySet.has(lineId));
+        if (filtered.length > 0) return filtered;
+        return dbCompanyLineIds;
+      })() : dbCompanyLineIds;
+      const scoped = filterToEnabledDb(companyScopedLines);
+      return {
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
+      };
+    }
+    if (propertyLineIds.length > 0) {
+      const filtered = applyConfigFilter(propertyLineIds);
+      const scoped = filterToEnabledDb(filtered);
+      return {
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
+      };
+    }
+    if (propertyFactoryIds.length > 0) {
+      const scoped = filterToEnabledDb(resolveFactoryScopedLines(propertyFactoryIds));
+      return {
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
+      };
+    }
+    if (role === "owner" || role === "it" || role === "optifye") {
+      const companyScopedLines = scopedCompanyId ? dbLines.filter((line) => !line.company_id || line.company_id === scopedCompanyId).map((line) => line.id) : [];
+      const scoped = filterToEnabledDb(companyScopedLines);
+      return {
+        accessibleLineIds: scoped,
+        defaultLineId: scoped[0]
+      };
+    }
+    return { accessibleLineIds: [], defaultLineId: void 0 };
+  }, [user, configLineIds, dbLines]);
   return { accessibleLineIds, defaultLineId, user };
 }
 function useActiveLineId(queryLineId, configLineIds) {
@@ -16509,12 +16686,7 @@ var useSupervisorsByLineIds = (lineIds, options) => {
       const nextSupervisorsByLineId = /* @__PURE__ */ new Map();
       const nextAllSupervisorsMap = /* @__PURE__ */ new Map();
       if (useBackend && resolvedCompanyId) {
-        const searchParams = new URLSearchParams({
-          company_id: resolvedCompanyId
-        });
-        if (lineIdsKey) {
-          searchParams.set("line_ids", lineIdsKey);
-        }
+        const searchParams = new URLSearchParams({ company_id: resolvedCompanyId });
         const data = await fetchBackendJson(supabase, `/api/dashboard/line-supervisors?${searchParams.toString()}`);
         (data?.supervisors || []).forEach((row) => {
           const assignedLineIds = Array.isArray(row.line_ids) ? row.line_ids : [];
@@ -28334,8 +28506,52 @@ function withAccessControl(WrappedComponent2, options = {}) {
   const WithAccessControlComponent = (props) => {
     const router$1 = router.useRouter();
     const { user, loading: authLoading } = useAuth();
-    const { canAccessPage, userRole } = useAccessControl();
-    requiredPath || router$1.pathname;
+    const role = user?.role_level;
+    const scope = user?.access_scope;
+    const isSuperAdmin = !!scope?.is_super_admin || user?.scope_mode === "SUPER_ADMIN";
+    const getBasePath = (path) => {
+      const firstSegment = path.split("?")[0].split("/").filter(Boolean)[0];
+      return firstSegment ? `/${firstSegment}` : "/";
+    };
+    const getIdFromPath = (path, key) => {
+      const queryValue = router$1.query[key];
+      if (typeof queryValue === "string") return queryValue;
+      if (Array.isArray(queryValue) && queryValue.length > 0) return queryValue[0];
+      const segments = path.split("?")[0].split("/").filter(Boolean);
+      const keyIndex = segments.findIndex((segment) => segment.toLowerCase() === key.toLowerCase());
+      if (keyIndex >= 0 && keyIndex < segments.length - 1) return segments[keyIndex + 1];
+      return null;
+    };
+    const roleAccessMap = {
+      optifye: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/improvement-center", "/tickets"],
+      owner: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/improvement-center", "/tickets"],
+      it: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/improvement-center", "/tickets"],
+      plant_head: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/improvement-center", "/tickets"],
+      supervisor: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/skus", "/help", "/health", "/profile", "/workspace", "/improvement-center", "/tickets"]
+    };
+    const canAccessPath = (path) => {
+      if (!user || !role) return false;
+      if (isSuperAdmin) return true;
+      const basePath = getBasePath(path);
+      const allowed = roleAccessMap[role] || [];
+      if (!allowed.includes(basePath)) {
+        return false;
+      }
+      const workspaceId = getIdFromPath(path, "workspace");
+      if (workspaceId && scope?.workspace_ids?.length) {
+        return scope.workspace_ids.includes(workspaceId);
+      }
+      const lineId = getIdFromPath(path, "kpis") || getIdFromPath(path, "line");
+      if (lineId && scope?.line_ids?.length) {
+        return scope.line_ids.includes(lineId);
+      }
+      const factoryId = getIdFromPath(path, "factory");
+      if (factoryId && scope?.factory_ids?.length) {
+        return scope.factory_ids.includes(factoryId);
+      }
+      return true;
+    };
+    const pathToCheck = requiredPath || router$1.asPath || router$1.pathname;
     if (authLoading) {
       return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex h-screen w-full items-center justify-center", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "text-center", children: [
         /* @__PURE__ */ jsxRuntime.jsx("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-blue-600 mx-auto mb-4" }),
@@ -28345,6 +28561,24 @@ function withAccessControl(WrappedComponent2, options = {}) {
     if (!user) {
       return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex h-screen w-full items-center justify-center", children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "text-center", children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-gray-600 mb-4", children: "Please log in to continue" }) }) });
     }
+    const hasAccess = canAccessPath(pathToCheck);
+    if (!hasAccess) {
+      if (UnauthorizedComponent) {
+        return /* @__PURE__ */ jsxRuntime.jsx(UnauthorizedComponent, {});
+      }
+      if (typeof window !== "undefined") {
+        router$1.replace(redirectTo);
+      }
+      return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex h-screen w-full items-center justify-center", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "text-center", children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "text-2xl font-bold text-gray-900 mb-2", children: "Access Denied" }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-gray-600 mb-4", children: "You don't have permission to access this page." }),
+        /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "text-sm text-gray-500", children: [
+          "Your role: ",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "font-medium", children: role || "Unknown" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500 mt-2", children: "Redirecting to home page..." })
+      ] }) });
+    }
     return /* @__PURE__ */ jsxRuntime.jsx(WrappedComponent2, { ...props });
   };
   WithAccessControlComponent.displayName = `withAccessControl(${WrappedComponent2.displayName || WrappedComponent2.name || "Component"})`;
@@ -48658,9 +48892,29 @@ var SideNavBar = React26.memo(({
 }) => {
   const router$1 = router.useRouter();
   const { navigate } = useNavigation();
-  const { signOut } = useAuth();
+  const { signOut, user } = useAuth();
   const entityConfig = useEntityConfig();
   const dashboardConfig = useDashboardConfig();
+  const isSuperAdmin = user?.scope_mode === "SUPER_ADMIN" || !!user?.access_scope?.is_super_admin;
+  const role = user?.role_level;
+  const roleAccessMap = {
+    optifye: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/tickets", "/improvement-center"],
+    owner: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/tickets", "/improvement-center"],
+    it: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/tickets", "/improvement-center"],
+    plant_head: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/supervisor-management", "/skus", "/help", "/health", "/profile", "/workspace", "/factory-view", "/team-management", "/tickets", "/improvement-center"],
+    supervisor: ["/", "/leaderboard", "/kpis", "/targets", "/shifts", "/skus", "/help", "/health", "/profile", "/workspace", "/tickets", "/improvement-center"]
+  };
+  const getBasePath = React26.useCallback((path) => {
+    const firstSegment = path.split("?")[0].split("/").filter(Boolean)[0];
+    return firstSegment ? `/${firstSegment}` : "/";
+  }, []);
+  const canAccessPath = React26.useCallback((path) => {
+    if (!role) return false;
+    if (isSuperAdmin) return true;
+    const basePath = getBasePath(path);
+    const allowedPaths = roleAccessMap[role] || [];
+    return allowedPaths.includes(basePath);
+  }, [role, isSuperAdmin, getBasePath]);
   const lineId = entityConfig.defaultLineId || LINE_1_UUID;
   const skuEnabled = dashboardConfig?.skuConfig?.enabled || false;
   dashboardConfig?.supervisorConfig?.enabled || false;
@@ -48826,7 +49080,7 @@ var SideNavBar = React26.memo(({
   const settingsTriggerRef = React26.useRef(null);
   const settingsItems = React26.useMemo(() => {
     const items = [
-      {
+      ...canAccessPath("/targets") ? [{
         key: "targets",
         label: "Targets",
         icon: outline.AdjustmentsHorizontalIcon,
@@ -48835,8 +49089,8 @@ var SideNavBar = React26.memo(({
           setIsSettingsOpen(false);
         },
         isActive: pathname === "/targets" || pathname.startsWith("/targets/")
-      },
-      {
+      }] : [],
+      ...canAccessPath("/shifts") ? [{
         key: "shifts",
         label: "Shifts",
         icon: outline.ClockIcon,
@@ -48845,8 +49099,8 @@ var SideNavBar = React26.memo(({
           setIsSettingsOpen(false);
         },
         isActive: pathname === "/shifts" || pathname.startsWith("/shifts/")
-      },
-      {
+      }] : [],
+      ...canAccessPath("/team-management") ? [{
         key: "teams",
         label: "Teams",
         icon: outline.UsersIcon,
@@ -48855,8 +49109,8 @@ var SideNavBar = React26.memo(({
           setIsSettingsOpen(false);
         },
         isActive: pathname === "/team-management" || pathname.startsWith("/team-management/")
-      },
-      {
+      }] : [],
+      ...canAccessPath("/profile") ? [{
         key: "profile",
         label: "Profile",
         icon: outline.UserCircleIcon,
@@ -48865,9 +49119,9 @@ var SideNavBar = React26.memo(({
           setIsSettingsOpen(false);
         },
         isActive: pathname === "/profile" || pathname.startsWith("/profile/")
-      }
+      }] : []
     ];
-    if (ticketsEnabled) {
+    if (ticketsEnabled && canAccessPath("/tickets")) {
       items.push({
         key: "tickets",
         label: "Tickets",
@@ -48879,18 +49133,20 @@ var SideNavBar = React26.memo(({
         isActive: pathname === "/tickets" || pathname.startsWith("/tickets/")
       });
     }
-    items.push({
-      key: "help",
-      label: "Help",
-      icon: outline.QuestionMarkCircleIcon,
-      onClick: () => {
-        handleHelpClick();
-        setIsSettingsOpen(false);
-      },
-      isActive: pathname === "/help" || pathname.startsWith("/help/")
-    });
+    if (canAccessPath("/help")) {
+      items.push({
+        key: "help",
+        label: "Help",
+        icon: outline.QuestionMarkCircleIcon,
+        onClick: () => {
+          handleHelpClick();
+          setIsSettingsOpen(false);
+        },
+        isActive: pathname === "/help" || pathname.startsWith("/help/")
+      });
+    }
     return items;
-  }, [handleTargetsClick, handleShiftsClick, handleTeamManagementClick, handleProfileClick, handleTicketsClick, handleHelpClick, pathname, ticketsEnabled]);
+  }, [handleTargetsClick, handleShiftsClick, handleTeamManagementClick, handleProfileClick, handleTicketsClick, handleHelpClick, pathname, ticketsEnabled, canAccessPath]);
   const handleLogout = React26.useCallback(async () => {
     setIsSettingsOpen(false);
     try {
@@ -48928,7 +49184,7 @@ var SideNavBar = React26.memo(({
       }
     ) }),
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex-1 w-full py-6 px-4 overflow-y-auto", children: [
-      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mb-6", children: /* @__PURE__ */ jsxRuntime.jsxs(
+      /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mb-6", children: canAccessPath("/") && /* @__PURE__ */ jsxRuntime.jsxs(
         "button",
         {
           onClick: handleHomeClick,
@@ -48944,7 +49200,7 @@ var SideNavBar = React26.memo(({
         }
       ) }),
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-4", children: [
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/leaderboard") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleLeaderboardClick,
@@ -48959,7 +49215,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/kpis") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleKPIsClick,
@@ -48974,7 +49230,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/improvement-center") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleImprovementClick,
@@ -48990,7 +49246,7 @@ var SideNavBar = React26.memo(({
           }
         ),
         showSupervisorManagement,
-        skuEnabled && true && /* @__PURE__ */ jsxRuntime.jsxs(
+        skuEnabled && canAccessPath("/skus") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleSKUsClick,
@@ -49005,7 +49261,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/health") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleHealthClick,
@@ -49022,7 +49278,7 @@ var SideNavBar = React26.memo(({
         )
       ] })
     ] }),
-    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full py-5 px-4 border-t border-gray-100 flex-shrink-0", children: /* @__PURE__ */ jsxRuntime.jsxs(
+    settingsItems.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full py-5 px-4 border-t border-gray-100 flex-shrink-0", children: /* @__PURE__ */ jsxRuntime.jsxs(
       "button",
       {
         ref: settingsTriggerRef,
@@ -49060,7 +49316,7 @@ var SideNavBar = React26.memo(({
       };
     };
     return /* @__PURE__ */ jsxRuntime.jsxs("nav", { className: "px-5 py-6", children: [
-      /* @__PURE__ */ jsxRuntime.jsxs(
+      canAccessPath("/") && /* @__PURE__ */ jsxRuntime.jsxs(
         "button",
         {
           onClick: handleMobileNavClick(handleHomeClick),
@@ -49073,7 +49329,7 @@ var SideNavBar = React26.memo(({
         }
       ),
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-6 space-y-2", children: [
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/leaderboard") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleMobileNavClick(handleLeaderboardClick),
@@ -49085,7 +49341,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/kpis") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleMobileNavClick(handleKPIsClick),
@@ -49097,7 +49353,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/improvement-center") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleMobileNavClick(handleImprovementClick),
@@ -49110,7 +49366,7 @@ var SideNavBar = React26.memo(({
           }
         ),
         showSupervisorManagement,
-        skuEnabled && true && /* @__PURE__ */ jsxRuntime.jsxs(
+        skuEnabled && canAccessPath("/skus") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleMobileNavClick(handleSKUsClick),
@@ -49122,7 +49378,7 @@ var SideNavBar = React26.memo(({
             ]
           }
         ),
-        /* @__PURE__ */ jsxRuntime.jsxs(
+        canAccessPath("/health") && /* @__PURE__ */ jsxRuntime.jsxs(
           "button",
           {
             onClick: handleMobileNavClick(handleHealthClick),
@@ -49135,10 +49391,10 @@ var SideNavBar = React26.memo(({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-8 pt-6 border-t border-gray-100", children: [
+      settingsItems.length > 0 && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-8 pt-6 border-t border-gray-100", children: [
         /* @__PURE__ */ jsxRuntime.jsx("h3", { className: "px-5 mb-3 text-[10px] font-bold text-gray-400 uppercase tracking-widest", children: "Settings & Support" }),
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-1", children: [
-          /* @__PURE__ */ jsxRuntime.jsxs(
+          canAccessPath("/targets") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleTargetsClick),
@@ -49150,7 +49406,7 @@ var SideNavBar = React26.memo(({
               ]
             }
           ),
-          /* @__PURE__ */ jsxRuntime.jsxs(
+          canAccessPath("/shifts") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleShiftsClick),
@@ -49162,7 +49418,7 @@ var SideNavBar = React26.memo(({
               ]
             }
           ),
-          /* @__PURE__ */ jsxRuntime.jsxs(
+          canAccessPath("/team-management") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleTeamManagementClick),
@@ -49174,7 +49430,7 @@ var SideNavBar = React26.memo(({
               ]
             }
           ),
-          /* @__PURE__ */ jsxRuntime.jsxs(
+          canAccessPath("/profile") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleProfileClick),
@@ -49186,7 +49442,7 @@ var SideNavBar = React26.memo(({
               ]
             }
           ),
-          ticketsEnabled && /* @__PURE__ */ jsxRuntime.jsxs(
+          ticketsEnabled && canAccessPath("/tickets") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleTicketsClick),
@@ -49198,7 +49454,7 @@ var SideNavBar = React26.memo(({
               ]
             }
           ),
-          /* @__PURE__ */ jsxRuntime.jsxs(
+          canAccessPath("/help") && /* @__PURE__ */ jsxRuntime.jsxs(
             "button",
             {
               onClick: handleMobileNavClick(handleHelpClick),
@@ -51454,13 +51710,41 @@ var InviteUserDialog = ({
   const [selectedRole, setSelectedRole] = React26.useState("supervisor");
   const [selectedLines, setSelectedLines] = React26.useState([]);
   const [selectedFactories, setSelectedFactories] = React26.useState([]);
+  const [lineSearch, setLineSearch] = React26.useState("");
+  const [factorySearch, setFactorySearch] = React26.useState("");
   const [isSubmitting, setIsSubmitting] = React26.useState(false);
   const [error, setError] = React26.useState(null);
-  const [isLinesDropdownOpen, setIsLinesDropdownOpen] = React26.useState(false);
-  const [isFactoriesDropdownOpen, setIsFactoriesDropdownOpen] = React26.useState(false);
+  const isSuperAdminOptifye = user?.role_level === "optifye" && (user?.scope_mode === "SUPER_ADMIN" || !!user?.access_scope?.is_super_admin);
+  const canInviteOwner = isSuperAdminOptifye;
   const canInviteIT = user?.role_level === "owner" || user?.role_level === "optifye";
   const canInvitePlantHead = user?.role_level === "owner" || user?.role_level === "it" || user?.role_level === "optifye";
   const canInviteSupervisor = ["owner", "it", "plant_head", "optifye"].includes(user?.role_level || "");
+  const invitableRoles = React26.useMemo(() => {
+    const roles = [];
+    if (canInviteOwner) roles.push("owner");
+    if (canInviteIT) roles.push("it");
+    if (canInvitePlantHead) roles.push("plant_head");
+    if (canInviteSupervisor) roles.push("supervisor");
+    return roles;
+  }, [canInviteOwner, canInviteIT, canInvitePlantHead, canInviteSupervisor]);
+  const filteredLines = React26.useMemo(() => {
+    const search = lineSearch.trim().toLowerCase();
+    if (!search) return availableLines;
+    return availableLines.filter((line) => line.name.toLowerCase().includes(search));
+  }, [availableLines, lineSearch]);
+  const filteredFactories = React26.useMemo(() => {
+    const search = factorySearch.trim().toLowerCase();
+    if (!search) return availableFactories;
+    return availableFactories.filter((factory) => factory.name.toLowerCase().includes(search));
+  }, [availableFactories, factorySearch]);
+  const selectedLineItems = React26.useMemo(
+    () => availableLines.filter((line) => selectedLines.includes(line.id)),
+    [availableLines, selectedLines]
+  );
+  const selectedFactoryItems = React26.useMemo(
+    () => availableFactories.filter((factory) => selectedFactories.includes(factory.id)),
+    [availableFactories, selectedFactories]
+  );
   React26.useEffect(() => {
     if (!isOpen) {
       setEmail("");
@@ -51469,11 +51753,19 @@ var InviteUserDialog = ({
       setSelectedRole("supervisor");
       setSelectedLines([]);
       setSelectedFactories([]);
+      setLineSearch("");
+      setFactorySearch("");
       setError(null);
-      setIsLinesDropdownOpen(false);
-      setIsFactoriesDropdownOpen(false);
     }
   }, [isOpen]);
+  React26.useEffect(() => {
+    if (!isOpen || invitableRoles.length === 0) {
+      return;
+    }
+    if (!invitableRoles.includes(selectedRole)) {
+      setSelectedRole(invitableRoles[0]);
+    }
+  }, [isOpen, invitableRoles, selectedRole]);
   const validateEmail = (email2) => {
     const emailRegex = /^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}$/;
     return emailRegex.test(email2);
@@ -51503,6 +51795,14 @@ var InviteUserDialog = ({
       setError("Please enter a valid email address");
       return;
     }
+    if (!invitableRoles.includes(selectedRole)) {
+      setError("You do not have permission to assign this role.");
+      return;
+    }
+    if (selectedRole === "owner" && !canInviteOwner) {
+      setError("Only super-admin Optifye users can create owner users.");
+      return;
+    }
     const companyId = entityConfig?.companyId || user?.properties?.company_id;
     if (!companyId) {
       setError("Company ID not found. Please refresh and try again.");
@@ -51540,7 +51840,6 @@ var InviteUserDialog = ({
       try {
         const dashboardUrl = typeof window !== "undefined" ? window.location.origin : "";
         if (dashboardUrl) {
-          console.log("Sending welcome email to:", email.trim());
           const { data: emailData, error: emailError } = await supabase.functions.invoke("hyper-service", {
             body: {
               action: "send-welcome-email",
@@ -51553,13 +51852,8 @@ var InviteUserDialog = ({
             console.error("Failed to send welcome email:", emailError);
             sonner.toast.warning("User added successfully, but welcome email could not be sent");
           } else if (emailData?.success) {
-            console.log("Welcome email sent successfully:", emailData);
             sonner.toast.success("User added and welcome email sent!");
-          } else {
-            console.log("Welcome email response:", emailData);
           }
-        } else {
-          console.warn("Dashboard URL not available, skipping welcome email");
         }
       } catch (emailErr) {
         console.error("Error sending welcome email:", emailErr);
@@ -51585,7 +51879,7 @@ var InviteUserDialog = ({
       children: /* @__PURE__ */ jsxRuntime.jsxs(
         "div",
         {
-          className: "bg-white rounded-xl shadow-2xl max-w-lg w-full max-h-[90vh] overflow-y-auto transform transition-all animate-in fade-in duration-200",
+          className: "bg-white rounded-xl shadow-2xl max-w-2xl w-full max-h-[90vh] overflow-y-auto transform transition-all animate-in fade-in duration-200",
           onClick: (e) => e.stopPropagation(),
           children: [
             /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between p-6 border-b border-gray-200", children: [
@@ -51613,7 +51907,7 @@ var InviteUserDialog = ({
                 /* @__PURE__ */ jsxRuntime.jsx("span", { children: error })
               ] }),
               /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-5", children: [
-                /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-2 gap-4", children: [
+                /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-1 sm:grid-cols-2 gap-4", children: [
                   /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
                     /* @__PURE__ */ jsxRuntime.jsxs("label", { htmlFor: "firstName", className: "block text-sm font-medium text-gray-700 mb-2", children: [
                       "First Name ",
@@ -51689,6 +51983,33 @@ var InviteUserDialog = ({
                     /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-red-500", children: "*" })
                   ] }),
                   /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-2", children: [
+                    canInviteOwner && /* @__PURE__ */ jsxRuntime.jsxs(
+                      "label",
+                      {
+                        className: cn(
+                          "flex items-start gap-3 p-4 border-2 rounded-lg cursor-pointer transition-all duration-200",
+                          selectedRole === "owner" ? "border-amber-500 bg-amber-50" : "border-gray-200 hover:border-gray-300 hover:bg-gray-50"
+                        ),
+                        children: [
+                          /* @__PURE__ */ jsxRuntime.jsx(
+                            "input",
+                            {
+                              type: "radio",
+                              name: "role",
+                              value: "owner",
+                              checked: selectedRole === "owner",
+                              onChange: (e) => setSelectedRole(e.target.value),
+                              className: "mt-1",
+                              disabled: isSubmitting
+                            }
+                          ),
+                          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex-1", children: [
+                            /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex items-center gap-2 mb-1", children: /* @__PURE__ */ jsxRuntime.jsx(RoleBadge_default, { role: "owner", size: "sm" }) }),
+                            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-600", children: "Company owner access. Full management permissions for the selected company dashboard." })
+                          ] })
+                        ]
+                      }
+                    ),
                     canInviteIT && /* @__PURE__ */ jsxRuntime.jsxs(
                       "label",
                       {
@@ -51772,124 +52093,192 @@ var InviteUserDialog = ({
                     )
                   ] })
                 ] }),
-                selectedRole === "plant_head" && availableFactories.length > 0 && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
-                  /* @__PURE__ */ jsxRuntime.jsxs("label", { className: "block text-sm font-medium text-gray-700 mb-2", children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Building2, { className: "w-4 h-4 inline mr-1" }),
-                    "Assign to Factories"
+                selectedRole === "plant_head" && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "rounded-xl border border-slate-200 bg-slate-50 p-4 space-y-3", children: [
+                  /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-start justify-between gap-3", children: [
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+                      /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "text-sm font-medium text-gray-800 flex items-center gap-1.5", children: [
+                        /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Building2, { className: "w-4 h-4 text-blue-600" }),
+                        "Factory Access"
+                      ] }),
+                      /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-gray-500 mt-1", children: "Choose the factories this plant head will manage." })
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "text-xs font-medium bg-white border border-gray-200 text-gray-600 rounded-full px-2 py-1", children: [
+                      selectedFactories.length,
+                      " selected"
+                    ] })
                   ] }),
-                  /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-gray-500 mb-2", children: "Select one or multiple factories this plant head will manage" }),
-                  /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(
-                      "button",
+                  availableFactories.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-lg border border-dashed border-gray-300 bg-white px-3 py-4 text-sm text-gray-500", children: "No factories available for assignment." }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "button",
+                        {
+                          type: "button",
+                          onClick: () => setSelectedFactories(availableFactories.map((factory) => factory.id)),
+                          className: "px-2.5 py-1 text-xs font-medium text-blue-700 bg-blue-100 rounded-md hover:bg-blue-200 transition-colors",
+                          disabled: isSubmitting,
+                          children: "Select all"
+                        }
+                      ),
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "button",
+                        {
+                          type: "button",
+                          onClick: () => setSelectedFactories([]),
+                          className: "px-2.5 py-1 text-xs font-medium text-gray-700 bg-white border border-gray-300 rounded-md hover:bg-gray-50 transition-colors",
+                          disabled: isSubmitting || selectedFactories.length === 0,
+                          children: "Clear"
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Search, { className: "w-4 h-4 text-gray-400 absolute left-3 top-1/2 -translate-y-1/2" }),
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "input",
+                        {
+                          type: "text",
+                          value: factorySearch,
+                          onChange: (e) => setFactorySearch(e.target.value),
+                          placeholder: "Search factories",
+                          className: "w-full pl-9 pr-3 py-2 text-sm border border-gray-300 rounded-lg bg-white focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent",
+                          disabled: isSubmitting
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "max-h-56 overflow-y-auto rounded-lg border border-gray-200 bg-white divide-y divide-gray-100", children: filteredFactories.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "px-4 py-6 text-sm text-gray-500 text-center", children: "No factories match your search." }) : filteredFactories.map((factory) => /* @__PURE__ */ jsxRuntime.jsxs(
+                      "label",
                       {
-                        type: "button",
-                        onClick: () => setIsFactoriesDropdownOpen(!isFactoriesDropdownOpen),
-                        disabled: isSubmitting,
-                        className: "w-full min-h-[42px] px-4 py-2 border border-gray-300 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent bg-white text-left",
-                        children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between gap-2", children: [
-                          selectedFactories.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-500", children: "Select factories..." }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-1.5 flex-1", children: selectedFactories.map((factoryId) => {
-                            const factory = availableFactories.find((f) => f.id === factoryId);
-                            return factory ? /* @__PURE__ */ jsxRuntime.jsxs(
-                              "span",
+                        className: "flex items-center justify-between gap-3 px-4 py-2.5 hover:bg-gray-50 cursor-pointer",
+                        children: [
+                          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3 min-w-0", children: [
+                            /* @__PURE__ */ jsxRuntime.jsx(
+                              "input",
                               {
-                                className: "inline-flex items-center gap-1 px-2 py-0.5 bg-blue-100 text-blue-700 text-xs rounded-md font-medium",
-                                children: [
-                                  factory.name,
-                                  /* @__PURE__ */ jsxRuntime.jsx(
-                                    "button",
-                                    {
-                                      type: "button",
-                                      onClick: (e) => {
-                                        e.stopPropagation();
-                                        toggleFactorySelection(factory.id);
-                                      },
-                                      className: "ml-0.5 hover:bg-blue-200 rounded-sm transition-colors",
-                                      disabled: isSubmitting,
-                                      children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.X, { className: "w-3 h-3" })
-                                    }
-                                  )
-                                ]
-                              },
-                              factory.id
-                            ) : null;
-                          }) }),
-                          /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ChevronDown, { className: cn("w-4 h-4 text-gray-400 transition-transform flex-shrink-0", isFactoriesDropdownOpen && "rotate-180") })
-                        ] })
-                      }
-                    ),
-                    isFactoriesDropdownOpen && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "absolute z-10 w-full mt-1 bg-white border border-gray-300 rounded-lg shadow-lg max-h-60 overflow-y-auto", children: availableFactories.map((factory) => /* @__PURE__ */ jsxRuntime.jsxs(
-                      "div",
+                                type: "checkbox",
+                                checked: selectedFactories.includes(factory.id),
+                                onChange: () => toggleFactorySelection(factory.id),
+                                className: "h-4 w-4 text-blue-600 border-gray-300 rounded focus:ring-blue-500",
+                                disabled: isSubmitting
+                              }
+                            ),
+                            /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-800 truncate", children: factory.name })
+                          ] }),
+                          selectedFactories.includes(factory.id) && /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Check, { className: "w-4 h-4 text-blue-600 flex-shrink-0" })
+                        ]
+                      },
+                      factory.id
+                    )) }),
+                    selectedFactoryItems.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-1.5", children: selectedFactoryItems.map((factory) => /* @__PURE__ */ jsxRuntime.jsxs(
+                      "span",
                       {
-                        onClick: () => toggleFactorySelection(factory.id),
-                        className: cn(
-                          "px-4 py-2.5 cursor-pointer flex items-center justify-between hover:bg-gray-50 transition-colors",
-                          selectedFactories.includes(factory.id) && "bg-blue-50"
-                        ),
+                        className: "inline-flex items-center gap-1 px-2 py-1 bg-blue-100 text-blue-700 text-xs rounded-md font-medium",
                         children: [
-                          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-700", children: factory.name }),
-                          selectedFactories.includes(factory.id) && /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Check, { className: "w-4 h-4 text-blue-600" })
+                          factory.name,
+                          /* @__PURE__ */ jsxRuntime.jsx(
+                            "button",
+                            {
+                              type: "button",
+                              onClick: () => toggleFactorySelection(factory.id),
+                              className: "hover:bg-blue-200 rounded-sm transition-colors",
+                              disabled: isSubmitting,
+                              children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.X, { className: "w-3 h-3" })
+                            }
+                          )
                         ]
                       },
                       factory.id
                     )) })
                   ] })
                 ] }),
-                selectedRole === "supervisor" && availableLines.length > 0 && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
-                  /* @__PURE__ */ jsxRuntime.jsxs("label", { className: "block text-sm font-medium text-gray-700 mb-2", children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Users, { className: "w-4 h-4 inline mr-1" }),
-                    "Assign to Lines"
+                selectedRole === "supervisor" && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "rounded-xl border border-slate-200 bg-slate-50 p-4 space-y-3", children: [
+                  /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-start justify-between gap-3", children: [
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+                      /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "text-sm font-medium text-gray-800 flex items-center gap-1.5", children: [
+                        /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Users, { className: "w-4 h-4 text-blue-600" }),
+                        "Line Access"
+                      ] }),
+                      /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-gray-500 mt-1", children: "Choose the lines this supervisor will monitor." })
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "text-xs font-medium bg-white border border-gray-200 text-gray-600 rounded-full px-2 py-1", children: [
+                      selectedLines.length,
+                      " selected"
+                    ] })
                   ] }),
-                  /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-xs text-gray-500 mb-2", children: "Select one or multiple lines this supervisor will monitor" }),
-                  /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(
-                      "button",
+                  availableLines.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-lg border border-dashed border-gray-300 bg-white px-3 py-4 text-sm text-gray-500", children: "No lines available for assignment." }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "button",
+                        {
+                          type: "button",
+                          onClick: () => setSelectedLines(availableLines.map((line) => line.id)),
+                          className: "px-2.5 py-1 text-xs font-medium text-blue-700 bg-blue-100 rounded-md hover:bg-blue-200 transition-colors",
+                          disabled: isSubmitting,
+                          children: "Select all"
+                        }
+                      ),
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "button",
+                        {
+                          type: "button",
+                          onClick: () => setSelectedLines([]),
+                          className: "px-2.5 py-1 text-xs font-medium text-gray-700 bg-white border border-gray-300 rounded-md hover:bg-gray-50 transition-colors",
+                          disabled: isSubmitting || selectedLines.length === 0,
+                          children: "Clear"
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "relative", children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Search, { className: "w-4 h-4 text-gray-400 absolute left-3 top-1/2 -translate-y-1/2" }),
+                      /* @__PURE__ */ jsxRuntime.jsx(
+                        "input",
+                        {
+                          type: "text",
+                          value: lineSearch,
+                          onChange: (e) => setLineSearch(e.target.value),
+                          placeholder: "Search lines",
+                          className: "w-full pl-9 pr-3 py-2 text-sm border border-gray-300 rounded-lg bg-white focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent",
+                          disabled: isSubmitting
+                        }
+                      )
+                    ] }),
+                    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "max-h-56 overflow-y-auto rounded-lg border border-gray-200 bg-white divide-y divide-gray-100", children: filteredLines.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: "px-4 py-6 text-sm text-gray-500 text-center", children: "No lines match your search." }) : filteredLines.map((line) => /* @__PURE__ */ jsxRuntime.jsxs(
+                      "label",
                       {
-                        type: "button",
-                        onClick: () => setIsLinesDropdownOpen(!isLinesDropdownOpen),
-                        disabled: isSubmitting,
-                        className: "w-full min-h-[42px] px-4 py-2 border border-gray-300 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent bg-white text-left",
-                        children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between gap-2", children: [
-                          selectedLines.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-500", children: "Select lines..." }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-1.5 flex-1", children: selectedLines.map((lineId) => {
-                            const line = availableLines.find((l) => l.id === lineId);
-                            return line ? /* @__PURE__ */ jsxRuntime.jsxs(
-                              "span",
+                        className: "flex items-center justify-between gap-3 px-4 py-2.5 hover:bg-gray-50 cursor-pointer",
+                        children: [
+                          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3 min-w-0", children: [
+                            /* @__PURE__ */ jsxRuntime.jsx(
+                              "input",
                               {
-                                className: "inline-flex items-center gap-1 px-2 py-0.5 bg-blue-100 text-blue-700 text-xs rounded-md font-medium",
-                                children: [
-                                  line.name,
-                                  /* @__PURE__ */ jsxRuntime.jsx(
-                                    "button",
-                                    {
-                                      type: "button",
-                                      onClick: (e) => {
-                                        e.stopPropagation();
-                                        toggleLineSelection(line.id);
-                                      },
-                                      className: "ml-0.5 hover:bg-blue-200 rounded-sm transition-colors",
-                                      disabled: isSubmitting,
-                                      children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.X, { className: "w-3 h-3" })
-                                    }
-                                  )
-                                ]
-                              },
-                              line.id
-                            ) : null;
-                          }) }),
-                          /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ChevronDown, { className: cn("w-4 h-4 text-gray-400 transition-transform flex-shrink-0", isLinesDropdownOpen && "rotate-180") })
-                        ] })
-                      }
-                    ),
-                    isLinesDropdownOpen && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "absolute z-10 w-full mt-1 bg-white border border-gray-300 rounded-lg shadow-lg max-h-60 overflow-y-auto", children: availableLines.map((line) => /* @__PURE__ */ jsxRuntime.jsxs(
-                      "div",
+                                type: "checkbox",
+                                checked: selectedLines.includes(line.id),
+                                onChange: () => toggleLineSelection(line.id),
+                                className: "h-4 w-4 text-blue-600 border-gray-300 rounded focus:ring-blue-500",
+                                disabled: isSubmitting
+                              }
+                            ),
+                            /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-800 truncate", children: line.name })
+                          ] }),
+                          selectedLines.includes(line.id) && /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Check, { className: "w-4 h-4 text-blue-600 flex-shrink-0" })
+                        ]
+                      },
+                      line.id
+                    )) }),
+                    selectedLineItems.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-1.5", children: selectedLineItems.map((line) => /* @__PURE__ */ jsxRuntime.jsxs(
+                      "span",
                       {
-                        onClick: () => toggleLineSelection(line.id),
-                        className: cn(
-                          "px-4 py-2.5 cursor-pointer flex items-center justify-between hover:bg-gray-50 transition-colors",
-                          selectedLines.includes(line.id) && "bg-blue-50"
-                        ),
+                        className: "inline-flex items-center gap-1 px-2 py-1 bg-blue-100 text-blue-700 text-xs rounded-md font-medium",
                         children: [
-                          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-sm text-gray-700", children: line.name }),
-                          selectedLines.includes(line.id) && /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Check, { className: "w-4 h-4 text-blue-600" })
+                          line.name,
+                          /* @__PURE__ */ jsxRuntime.jsx(
+                            "button",
+                            {
+                              type: "button",
+                              onClick: () => toggleLineSelection(line.id),
+                              className: "hover:bg-blue-200 rounded-sm transition-colors",
+                              disabled: isSubmitting,
+                              children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.X, { className: "w-3 h-3" })
+                            }
+                          )
                         ]
                       },
                       line.id
@@ -52424,10 +52813,22 @@ var LineAssignmentDropdown = ({
   canEdit,
   onUpdate
 }) => {
+  const VIEWPORT_MARGIN = 8;
+  const DROPDOWN_GAP = 6;
+  const MIN_DROPDOWN_WIDTH = 300;
+  const MAX_DROPDOWN_WIDTH = 420;
+  const PREFERRED_DROPDOWN_HEIGHT = 420;
+  const MIN_DROPDOWN_HEIGHT = 180;
   const [isOpen, setIsOpen] = React26.useState(false);
   const [selectedIds, setSelectedIds] = React26.useState(currentLineIds);
   const [isSaving, setIsSaving] = React26.useState(false);
-  const [position, setPosition] = React26.useState({ top: 0, left: 0, width: 0 });
+  const [position, setPosition] = React26.useState({
+    top: 0,
+    left: 0,
+    width: MIN_DROPDOWN_WIDTH,
+    maxHeight: PREFERRED_DROPDOWN_HEIGHT,
+    openAbove: false
+  });
   const buttonRef = React26.useRef(null);
   const dropdownRef = React26.useRef(null);
   React26.useEffect(() => {
@@ -52437,10 +52838,31 @@ var LineAssignmentDropdown = ({
     const updatePosition = () => {
       if (isOpen && buttonRef.current) {
         const rect = buttonRef.current.getBoundingClientRect();
+        const viewportWidth = window.innerWidth;
+        const viewportHeight = window.innerHeight;
+        const width = Math.min(
+          Math.max(rect.width, MIN_DROPDOWN_WIDTH),
+          Math.min(MAX_DROPDOWN_WIDTH, viewportWidth - VIEWPORT_MARGIN * 2)
+        );
+        const left = Math.min(
+          Math.max(VIEWPORT_MARGIN, rect.left),
+          viewportWidth - width - VIEWPORT_MARGIN
+        );
+        const spaceBelow = viewportHeight - rect.bottom - VIEWPORT_MARGIN - DROPDOWN_GAP;
+        const spaceAbove = rect.top - VIEWPORT_MARGIN - DROPDOWN_GAP;
+        const openAbove = spaceBelow < 260 && spaceAbove > spaceBelow;
+        const availableSpace = openAbove ? spaceAbove : spaceBelow;
+        const maxHeight = Math.max(
+          MIN_DROPDOWN_HEIGHT,
+          Math.min(PREFERRED_DROPDOWN_HEIGHT, availableSpace > 0 ? availableSpace : viewportHeight - VIEWPORT_MARGIN * 2)
+        );
+        const top = openAbove ? rect.top - DROPDOWN_GAP : Math.min(rect.bottom + DROPDOWN_GAP, viewportHeight - VIEWPORT_MARGIN - maxHeight);
         setPosition({
-          top: rect.bottom,
-          left: rect.left,
-          width: rect.width
+          top,
+          left,
+          width,
+          maxHeight,
+          openAbove
         });
       }
     };
@@ -52518,7 +52940,7 @@ var LineAssignmentDropdown = ({
       assignedLines.length - 2
     ] });
   };
-  const hasChanges = JSON.stringify(selectedIds.sort()) !== JSON.stringify(currentLineIds.sort());
+  const hasChanges = JSON.stringify([...selectedIds].sort()) !== JSON.stringify([...currentLineIds].sort());
   if (!canEdit) {
     return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "text-sm", children: getDisplayText() });
   }
@@ -52548,13 +52970,13 @@ var LineAssignmentDropdown = ({
           "div",
           {
             ref: dropdownRef,
-            className: "fixed z-[9999] bg-white rounded-lg shadow-2xl border border-gray-200",
+            className: "fixed z-[9999] bg-white rounded-lg shadow-2xl border border-gray-200 flex flex-col overflow-hidden",
             style: {
-              top: `${position.top + 4}px`,
+              top: `${position.top}px`,
               left: `${position.left}px`,
-              minWidth: `${Math.max(position.width, 300)}px`,
-              maxWidth: "400px",
-              maxHeight: "calc(100vh - 100px)"
+              width: `${position.width}px`,
+              maxHeight: `${position.maxHeight}px`,
+              transform: position.openAbove ? "translateY(-100%)" : void 0
             },
             children: [
               /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-3 border-b border-gray-200 bg-gray-50", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between", children: [
@@ -52571,7 +52993,7 @@ var LineAssignmentDropdown = ({
                   }
                 )
               ] }) }),
-              /* @__PURE__ */ jsxRuntime.jsx("div", { className: "max-h-80 overflow-y-auto", children: availableLines.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-8 text-center", children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500", children: "No lines available" }) }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "py-1", children: availableLines.map((line) => /* @__PURE__ */ jsxRuntime.jsxs(
+              /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex-1 overflow-y-auto", children: availableLines.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-8 text-center", children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500", children: "No lines available" }) }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "py-1", children: availableLines.map((line) => /* @__PURE__ */ jsxRuntime.jsxs(
                 "label",
                 {
                   className: "flex items-center gap-3 px-4 py-2.5 hover:bg-gray-50 cursor-pointer transition-colors",
@@ -52631,10 +53053,22 @@ var FactoryAssignmentDropdown = ({
   canEdit,
   onUpdate
 }) => {
+  const VIEWPORT_MARGIN = 8;
+  const DROPDOWN_GAP = 6;
+  const MIN_DROPDOWN_WIDTH = 300;
+  const MAX_DROPDOWN_WIDTH = 420;
+  const PREFERRED_DROPDOWN_HEIGHT = 420;
+  const MIN_DROPDOWN_HEIGHT = 180;
   const [isOpen, setIsOpen] = React26.useState(false);
   const [selectedIds, setSelectedIds] = React26.useState(currentFactoryIds);
   const [isSaving, setIsSaving] = React26.useState(false);
-  const [position, setPosition] = React26.useState({ top: 0, left: 0, width: 0 });
+  const [position, setPosition] = React26.useState({
+    top: 0,
+    left: 0,
+    width: MIN_DROPDOWN_WIDTH,
+    maxHeight: PREFERRED_DROPDOWN_HEIGHT,
+    openAbove: false
+  });
   const buttonRef = React26.useRef(null);
   const dropdownRef = React26.useRef(null);
   React26.useEffect(() => {
@@ -52644,10 +53078,31 @@ var FactoryAssignmentDropdown = ({
     const updatePosition = () => {
       if (isOpen && buttonRef.current) {
         const rect = buttonRef.current.getBoundingClientRect();
+        const viewportWidth = window.innerWidth;
+        const viewportHeight = window.innerHeight;
+        const width = Math.min(
+          Math.max(rect.width, MIN_DROPDOWN_WIDTH),
+          Math.min(MAX_DROPDOWN_WIDTH, viewportWidth - VIEWPORT_MARGIN * 2)
+        );
+        const left = Math.min(
+          Math.max(VIEWPORT_MARGIN, rect.left),
+          viewportWidth - width - VIEWPORT_MARGIN
+        );
+        const spaceBelow = viewportHeight - rect.bottom - VIEWPORT_MARGIN - DROPDOWN_GAP;
+        const spaceAbove = rect.top - VIEWPORT_MARGIN - DROPDOWN_GAP;
+        const openAbove = spaceBelow < 260 && spaceAbove > spaceBelow;
+        const availableSpace = openAbove ? spaceAbove : spaceBelow;
+        const maxHeight = Math.max(
+          MIN_DROPDOWN_HEIGHT,
+          Math.min(PREFERRED_DROPDOWN_HEIGHT, availableSpace > 0 ? availableSpace : viewportHeight - VIEWPORT_MARGIN * 2)
+        );
+        const top = openAbove ? rect.top - DROPDOWN_GAP : Math.min(rect.bottom + DROPDOWN_GAP, viewportHeight - VIEWPORT_MARGIN - maxHeight);
         setPosition({
-          top: rect.bottom,
-          left: rect.left,
-          width: rect.width
+          top,
+          left,
+          width,
+          maxHeight,
+          openAbove
         });
       }
     };
@@ -52725,7 +53180,7 @@ var FactoryAssignmentDropdown = ({
       assignedFactories.length - 2
     ] });
   };
-  const hasChanges = JSON.stringify(selectedIds.sort()) !== JSON.stringify(currentFactoryIds.sort());
+  const hasChanges = JSON.stringify([...selectedIds].sort()) !== JSON.stringify([...currentFactoryIds].sort());
   if (!canEdit) {
     return /* @__PURE__ */ jsxRuntime.jsx("div", { className: "text-sm", children: getDisplayText() });
   }
@@ -52755,13 +53210,13 @@ var FactoryAssignmentDropdown = ({
           "div",
           {
             ref: dropdownRef,
-            className: "fixed z-[9999] bg-white rounded-lg shadow-2xl border border-gray-200",
+            className: "fixed z-[9999] bg-white rounded-lg shadow-2xl border border-gray-200 flex flex-col overflow-hidden",
             style: {
-              top: `${position.top + 4}px`,
+              top: `${position.top}px`,
               left: `${position.left}px`,
-              minWidth: `${Math.max(position.width, 300)}px`,
-              maxWidth: "400px",
-              maxHeight: "calc(100vh - 100px)"
+              width: `${position.width}px`,
+              maxHeight: `${position.maxHeight}px`,
+              transform: position.openAbove ? "translateY(-100%)" : void 0
             },
             children: [
               /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-3 border-b border-gray-200 bg-gray-50", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between", children: [
@@ -52778,7 +53233,7 @@ var FactoryAssignmentDropdown = ({
                   }
                 )
               ] }) }),
-              /* @__PURE__ */ jsxRuntime.jsx("div", { className: "max-h-80 overflow-y-auto", children: availableFactories.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-8 text-center", children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500", children: "No factories available" }) }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "py-1", children: availableFactories.map((factory) => /* @__PURE__ */ jsxRuntime.jsxs(
+              /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex-1 overflow-y-auto", children: availableFactories.length === 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-4 py-8 text-center", children: /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-500", children: "No factories available" }) }) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "py-1", children: availableFactories.map((factory) => /* @__PURE__ */ jsxRuntime.jsxs(
                 "label",
                 {
                   className: "flex items-center gap-3 px-4 py-2.5 hover:bg-gray-50 cursor-pointer transition-colors",
@@ -53426,11 +53881,32 @@ var UserManagementTable = ({
       setSortDirection("asc");
     }
   };
+  const getFactoryIdsFromUser = (user) => {
+    const properties = user.properties || {};
+    const rawFactoryIds = properties.factory_ids ?? properties.factory_id;
+    if (Array.isArray(rawFactoryIds)) {
+      return rawFactoryIds.filter((factoryId) => typeof factoryId === "string" && factoryId.length > 0);
+    }
+    if (typeof rawFactoryIds === "string" && rawFactoryIds.length > 0) {
+      return [rawFactoryIds];
+    }
+    return [];
+  };
   const formatAssignments = (user) => {
     if (user.role_level === "owner" || user.role_level === "it") return "Company-wide";
     if (user.role_level === "optifye") return "All companies";
-    if (user.role_level === "plant_head" && user.assigned_factories) {
-      return user.assigned_factories.join(", ") || "No factories assigned";
+    if (user.role_level === "plant_head") {
+      if (user.assigned_factories && user.assigned_factories.length > 0) {
+        return user.assigned_factories.join(", ");
+      }
+      const assignedFactoryIds = getFactoryIdsFromUser(user);
+      if (assignedFactoryIds.length === 1) {
+        return "1 factory assigned";
+      }
+      if (assignedFactoryIds.length > 1) {
+        return `${assignedFactoryIds.length} factories assigned`;
+      }
+      return "No factories assigned";
     }
     if (user.role_level === "supervisor" && user.assigned_lines) {
       return user.assigned_lines.join(", ") || "No lines assigned";
@@ -53622,22 +54098,28 @@ var UserManagementTable = ({
                     onUpdate: onLineAssignmentUpdate || (async () => {
                     })
                   }
-                ) : user.role_level === "plant_head" ? /* @__PURE__ */ jsxRuntime.jsx(
-                  FactoryAssignmentDropdown,
-                  {
-                    userId: user.user_id,
-                    currentFactoryIds: user.properties?.factory_ids || [],
-                    availableFactories: (
-                      // Filter factories to only show those from the target user's company
-                      user.properties?.company_id ? availableFactories.filter(
-                        (factory) => factory.company_id === user.properties?.company_id
-                      ) : availableFactories
-                    ),
-                    canEdit: permissions.canAssignFactories(user) && !!onFactoryAssignmentUpdate,
-                    onUpdate: onFactoryAssignmentUpdate || (async () => {
-                    })
+                ) : user.role_level === "plant_head" ? (() => {
+                  const canEditFactoryAssignments = permissions.canAssignFactories(user) && !!onFactoryAssignmentUpdate;
+                  if (!canEditFactoryAssignments) {
+                    return /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-900", children: formatAssignments(user) });
                   }
-                ) : /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-900", children: formatAssignments(user) }) }),
+                  return /* @__PURE__ */ jsxRuntime.jsx(
+                    FactoryAssignmentDropdown,
+                    {
+                      userId: user.user_id,
+                      currentFactoryIds: getFactoryIdsFromUser(user),
+                      availableFactories: (
+                        // Filter factories to only show those from the target user's company
+                        user.properties?.company_id ? availableFactories.filter(
+                          (factory) => factory.company_id === user.properties?.company_id
+                        ) : availableFactories
+                      ),
+                      canEdit: canEditFactoryAssignments,
+                      onUpdate: onFactoryAssignmentUpdate || (async () => {
+                      })
+                    }
+                  );
+                })() : /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-gray-900", children: formatAssignments(user) }) }),
                 showUsageStats && /* @__PURE__ */ jsxRuntime.jsx("td", { className: "px-6 py-4", children: user.role_level === "plant_head" || user.role_level === "supervisor" ? /* @__PURE__ */ jsxRuntime.jsx(
                   "button",
                   {
@@ -54802,52 +55284,18 @@ function HomeView({
     });
     return merged;
   }, [lineNames, dbLines]);
-  const isOwner = user?.role_level === "owner";
-  const isPlantHead = user?.role_level === "plant_head";
+  const enabledLineIdSet = React26.useMemo(
+    () => new Set(dbLines.filter((line) => line.enable).map((line) => line.id)),
+    [dbLines]
+  );
   const isSupervisor = user?.role_level === "supervisor";
-  const assignedLineIds = React26.useMemo(() => {
-    const rawLineIds = user?.properties?.line_id || user?.properties?.line_ids || [];
-    return Array.isArray(rawLineIds) ? rawLineIds : [];
-  }, [user]);
-  const assignedLineIdsInConfig = React26.useMemo(() => {
-    if (assignedLineIds.length === 0) {
-      return [];
-    }
-    return assignedLineIds.filter((id3) => allLineIds.includes(id3));
-  }, [assignedLineIds, allLineIds]);
-  const assignedFactoryIds = React26.useMemo(() => {
-    const rawFactoryIds = user?.properties?.factory_id || user?.properties?.factory_ids || [];
-    return Array.isArray(rawFactoryIds) ? rawFactoryIds : [];
-  }, [user]);
-  const lineFactoryMap = React26.useMemo(() => {
-    const map = /* @__PURE__ */ new Map();
-    dbLines.forEach((line) => {
-      map.set(line.id, line.factory_id);
-    });
-    return map;
-  }, [dbLines]);
-  const plantHeadLineIds = React26.useMemo(() => {
-    if (!isPlantHead || assignedFactoryIds.length === 0) {
-      return [];
-    }
-    const assignedFactoryIdSet = new Set(assignedFactoryIds);
-    return allLineIds.filter((lineId) => assignedFactoryIdSet.has(lineFactoryMap.get(lineId) || ""));
-  }, [isPlantHead, assignedFactoryIds, allLineIds, lineFactoryMap]);
   const visibleLineIds = React26.useMemo(() => {
-    if (isOwner) {
-      return allLineIds;
-    }
-    if (isPlantHead) {
-      const combinedLineIds = /* @__PURE__ */ new Set();
-      plantHeadLineIds.forEach((lineId) => combinedLineIds.add(lineId));
-      assignedLineIdsInConfig.forEach((lineId) => combinedLineIds.add(lineId));
-      return Array.from(combinedLineIds);
+    const scoped = Array.from(new Set(allLineIds.filter(Boolean)));
+    if (enabledLineIdSet.size === 0) {
+      return scoped;
     }
-    if (isSupervisor) {
-      return assignedLineIdsInConfig;
-    }
-    return allLineIds;
-  }, [isOwner, isPlantHead, isSupervisor, allLineIds, plantHeadLineIds, assignedLineIdsInConfig]);
+    return scoped.filter((lineId) => enabledLineIdSet.has(lineId));
+  }, [allLineIds, enabledLineIdSet]);
   const fallbackLineId = visibleLineIds[0] || defaultLineId;
   const defaultHomeLineId = fallbackLineId;
   const availableLineIds = React26.useMemo(() => {
@@ -54874,7 +55322,7 @@ function HomeView({
     return defaultHomeLineId;
   });
   React26.useEffect(() => {
-    if (!user || !isSupervisor && !isPlantHead || availableLineIds.length === 0) {
+    if (!user || availableLineIds.length === 0) {
       return;
     }
     try {
@@ -54888,13 +55336,14 @@ function HomeView({
     } catch (error) {
       console.warn("Failed to read line filter from sessionStorage:", error);
     }
+    if (availableLineIds.includes(selectedLineId)) {
+      return;
+    }
     if (defaultHomeLineId !== selectedLineId) {
       setSelectedLineId(defaultHomeLineId);
     }
   }, [
     user,
-    isSupervisor,
-    isPlantHead,
     availableLineIds,
     defaultHomeLineId,
     selectedLineId,
@@ -54913,14 +55362,14 @@ function HomeView({
   const [diagnoses, setDiagnoses] = React26.useState([]);
   const timezone = useAppTimezone();
   const { shiftConfigMap: lineShiftConfigs } = useMultiLineShiftConfigs(
-    allLineIds,
+    visibleLineIds,
     dashboardConfig?.shiftConfig
   );
   React26.useEffect(() => {
     const initDisplayNames = async () => {
       try {
         if (selectedLineId === factoryViewId) {
-          for (const lineId of allLineIds) {
+          for (const lineId of visibleLineIds) {
             await preInitializeWorkspaceDisplayNames(lineId);
           }
         } else {
@@ -54933,7 +55382,7 @@ function HomeView({
       }
     };
     initDisplayNames();
-  }, [selectedLineId, factoryViewId, allLineIds]);
+  }, [selectedLineId, factoryViewId, visibleLineIds]);
   const displayNameLineId = selectedLineId === factoryViewId ? void 0 : selectedLineId;
   const {
     displayNames: workspaceDisplayNames,
@@ -58684,8 +59133,32 @@ var KPIsOverviewView = ({
   const dbTimezone = useAppTimezone();
   const configuredTimezone = dbTimezone || dateTimeConfig.defaultTimezone || "UTC";
   const { startDate: monthStartDate, endDate: monthEndDateKey, monthEndDate } = getMonthDateInfo(configuredTimezone);
-  const isSupervisor = user?.role_level === "supervisor";
-  const assignedLineIdsForLeaderboard = isSupervisor ? lineIds : void 0;
+  const isSuperAdmin = user?.scope_mode === "SUPER_ADMIN" || !!user?.access_scope?.is_super_admin;
+  const scopedLineIds = React26__namespace.default.useMemo(
+    () => Array.isArray(user?.access_scope?.line_ids) ? user.access_scope.line_ids.filter((lineId) => typeof lineId === "string" && lineId.length > 0) : [],
+    [user?.access_scope?.line_ids]
+  );
+  const hasCanonicalScope = !!user?.scope_mode || !!user?.access_scope;
+  const scopeRole = (user?.role_level || user?.role || "").toLowerCase();
+  const isStrictLineScopedRole = scopeRole === "supervisor" || scopeRole === "plant_head";
+  const resolvedAssignedLineIds = React26__namespace.default.useMemo(() => {
+    if (isSuperAdmin) return [];
+    if (scopedLineIds.length > 0) return scopedLineIds;
+    if (lineIds && lineIds.length > 0) return lineIds;
+    if (isStrictLineScopedRole && hasCanonicalScope) return [];
+    return [];
+  }, [isSuperAdmin, scopedLineIds, lineIds, isStrictLineScopedRole, hasCanonicalScope]);
+  const assignedLineIdSet = React26__namespace.default.useMemo(
+    () => new Set(resolvedAssignedLineIds),
+    [resolvedAssignedLineIds]
+  );
+  const metricsLineIds = React26__namespace.default.useMemo(() => {
+    if (isSuperAdmin) {
+      return lineIds ?? [];
+    }
+    return resolvedAssignedLineIds;
+  }, [isSuperAdmin, lineIds, resolvedAssignedLineIds]);
+  const assignedLineIdsForLeaderboard = isSuperAdmin ? void 0 : resolvedAssignedLineIds;
   const leaderboardLinesForView = React26__namespace.default.useMemo(() => {
     const targetMode = viewType === "machine" ? "uptime" : "output";
     return leaderboardLines.filter((line) => (line.monitoring_mode ?? "output") === targetMode);
@@ -58737,7 +59210,7 @@ var KPIsOverviewView = ({
     error: metricsError
   } = useDashboardMetrics({
     lineId: factoryViewId,
-    userAccessibleLineIds: lineIds
+    userAccessibleLineIds: metricsLineIds
   });
   const defaultKPIs = React26__namespace.default.useMemo(() => createDefaultKPIs(), []);
   const kpisByLineId = React26__namespace.default.useMemo(() => {
@@ -58791,16 +59264,16 @@ var KPIsOverviewView = ({
         console.log("[KPIsOverviewView] Fetching lines with lineIds filter:", lineIds);
         const allLines = await dashboardService.getAllLines();
         let filteredLines = allLines;
-        if (lineIds && lineIds.length > 0) {
-          filteredLines = allLines.filter((line) => lineIds.includes(line.id));
-          console.log("[KPIsOverviewView] Filtered lines:", {
+        if (!isSuperAdmin) {
+          filteredLines = allLines.filter((line) => assignedLineIdSet.has(line.id));
+          console.log("[KPIsOverviewView] Applied scoped line filter:", {
             total: allLines.length,
             filtered: filteredLines.length,
-            lineIds,
+            allowedLineIds: resolvedAssignedLineIds,
             filteredLineIds: filteredLines.map((l) => l.id)
           });
         } else {
-          console.log("[KPIsOverviewView] No lineIds filter, showing all lines:", allLines.length);
+          console.log("[KPIsOverviewView] Super admin view, showing all lines:", allLines.length);
         }
         setLines(filteredLines);
       } catch (err) {
@@ -58811,34 +59284,36 @@ var KPIsOverviewView = ({
       }
     };
     fetchLines();
-  }, [supabase, dashboardConfig, lineIds]);
+  }, [supabase, dashboardConfig, lineIds, isSuperAdmin, assignedLineIdSet, resolvedAssignedLineIds]);
   React26.useEffect(() => {
     let isMounted = true;
     const fetchLeaderboardLines = async () => {
       if (!supabase || !resolvedCompanyId) {
-        setLeaderboardLines(lines);
+        setLeaderboardLines(lines.filter((line) => line.enable !== false));
         return;
       }
       setLeaderboardLinesLoading(true);
       try {
-        const linesService2 = new LinesService(supabase);
-        const companyLines = await linesService2.getLinesByCompanyId(resolvedCompanyId);
+        const data = await fetchBackendJson(
+          supabase,
+          `/api/dashboard/leaderboard-lines?company_id=${encodeURIComponent(resolvedCompanyId)}`
+        );
         if (!isMounted) return;
-        const transformed = companyLines.map((line) => ({
+        const transformed = (data.lines || []).filter((line) => line.enable !== false).map((line) => ({
           id: line.id,
-          line_name: line.name,
-          factory_id: line.factoryId || "",
+          line_name: line.line_name,
+          factory_id: line.factory_id || "",
           factory_name: "N/A",
-          company_id: line.companyId,
+          company_id: line.company_id,
           company_name: "",
-          enable: line.isActive ?? true,
-          monitoring_mode: line.monitoringMode ?? "output"
+          enable: line.enable ?? true,
+          monitoring_mode: line.monitoring_mode ?? "output"
         }));
         setLeaderboardLines(transformed);
       } catch (err) {
         console.error("[KPIsOverviewView] Failed to load leaderboard lines:", err);
         if (!isMounted) return;
-        setLeaderboardLines(lines);
+        setLeaderboardLines(lines.filter((line) => line.enable !== false));
       } finally {
         if (isMounted) setLeaderboardLinesLoading(false);
       }
@@ -58919,11 +59394,10 @@ var KPIsOverviewView = ({
         lineMode: viewType === "machine" ? "uptime" : "output"
       });
       const nextMap = /* @__PURE__ */ new Map();
+      targetLineIds.forEach((lineId) => nextMap.set(lineId, 0));
       entries.forEach((entry) => {
         const value = Number(entry.avg_efficiency);
-        if (Number.isFinite(value)) {
-          nextMap.set(entry.line_id, value);
-        }
+        nextMap.set(entry.line_id, Number.isFinite(value) ? value : 0);
       });
       setTodayEfficiencyByLineId(nextMap);
     } catch (err) {
@@ -59006,6 +59480,9 @@ var KPIsOverviewView = ({
     };
   };
   const handleLineClick = (line, kpis) => {
+    if (!isSuperAdmin && !assignedLineIdSet.has(line.id)) {
+      return;
+    }
     const trackProps = {
       line_id: line.id,
       line_name: line.line_name,
@@ -59518,6 +59995,7 @@ var MobileWorkspaceCard = React26.memo(({
   workspace,
   rank,
   cardClass,
+  isClickable,
   onWorkspaceClick,
   getMedalIcon,
   efficiencyLabel
@@ -59530,8 +60008,8 @@ var MobileWorkspaceCard = React26.memo(({
     transition: {
       layout: { duration: 0.3, ease: "easeInOut" }
     },
-    onClick: () => onWorkspaceClick(workspace, rank),
-    className: `${cardClass} p-3 rounded-lg border shadow-sm active:scale-[0.98] cursor-pointer`,
+    onClick: isClickable ? () => onWorkspaceClick(workspace, rank) : void 0,
+    className: `${cardClass} p-3 rounded-lg border shadow-sm active:scale-[0.98] ${isClickable ? "cursor-pointer" : "cursor-not-allowed opacity-75"}`,
     children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between mb-2", children: [
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-3", children: [
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
@@ -59553,13 +60031,14 @@ var MobileWorkspaceCard = React26.memo(({
     ] })
   }
 ), (prevProps, nextProps) => {
-  return prevProps.efficiencyLabel === nextProps.efficiencyLabel && prevProps.rank === nextProps.rank && prevProps.cardClass === nextProps.cardClass && prevProps.workspace.workspace_uuid === nextProps.workspace.workspace_uuid && prevProps.workspace.efficiency === nextProps.workspace.efficiency && prevProps.workspace.action_count === nextProps.workspace.action_count && prevProps.workspace.action_threshold === nextProps.workspace.action_threshold && prevProps.workspace.avg_cycle_time === nextProps.workspace.avg_cycle_time && prevProps.workspace.displayName === nextProps.workspace.displayName && prevProps.workspace.lineName === nextProps.workspace.lineName;
+  return prevProps.efficiencyLabel === nextProps.efficiencyLabel && prevProps.rank === nextProps.rank && prevProps.cardClass === nextProps.cardClass && prevProps.isClickable === nextProps.isClickable && prevProps.workspace.workspace_uuid === nextProps.workspace.workspace_uuid && prevProps.workspace.efficiency === nextProps.workspace.efficiency && prevProps.workspace.action_count === nextProps.workspace.action_count && prevProps.workspace.action_threshold === nextProps.workspace.action_threshold && prevProps.workspace.avg_cycle_time === nextProps.workspace.avg_cycle_time && prevProps.workspace.displayName === nextProps.workspace.displayName && prevProps.workspace.lineName === nextProps.workspace.lineName;
 });
 MobileWorkspaceCard.displayName = "MobileWorkspaceCard";
 var DesktopWorkspaceRow = React26.memo(({
   workspace,
   index,
   rowClass,
+  isClickable,
   onWorkspaceClick,
   getMedalIcon
 }) => /* @__PURE__ */ jsxRuntime.jsxs(
@@ -59569,8 +60048,8 @@ var DesktopWorkspaceRow = React26.memo(({
     layoutId: `row-${workspace.workspace_uuid}`,
     initial: false,
     transition: { layout: { duration: 0.3, ease: "easeInOut" } },
-    onClick: () => onWorkspaceClick(workspace, index + 1),
-    className: `${rowClass} hover:bg-gray-50/90 transition-colors duration-150 cursor-pointer group`,
+    onClick: isClickable ? () => onWorkspaceClick(workspace, index + 1) : void 0,
+    className: `${rowClass} transition-colors duration-150 ${isClickable ? "hover:bg-gray-50/90 cursor-pointer group" : "cursor-not-allowed opacity-75"}`,
     children: [
       /* @__PURE__ */ jsxRuntime.jsx("td", { className: "px-3 py-2.5 sm:p-4 text-sm sm:text-base whitespace-nowrap group-hover:font-medium", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
         /* @__PURE__ */ jsxRuntime.jsx("span", { children: index + 1 }),
@@ -59582,7 +60061,7 @@ var DesktopWorkspaceRow = React26.memo(({
     ]
   }
 ), (prevProps, nextProps) => {
-  return prevProps.index === nextProps.index && prevProps.rowClass === nextProps.rowClass && prevProps.workspace.workspace_uuid === nextProps.workspace.workspace_uuid && prevProps.workspace.efficiency === nextProps.workspace.efficiency && prevProps.workspace.displayName === nextProps.workspace.displayName && prevProps.workspace.lineName === nextProps.workspace.lineName;
+  return prevProps.index === nextProps.index && prevProps.rowClass === nextProps.rowClass && prevProps.isClickable === nextProps.isClickable && prevProps.workspace.workspace_uuid === nextProps.workspace.workspace_uuid && prevProps.workspace.efficiency === nextProps.workspace.efficiency && prevProps.workspace.displayName === nextProps.workspace.displayName && prevProps.workspace.lineName === nextProps.workspace.lineName;
 });
 DesktopWorkspaceRow.displayName = "DesktopWorkspaceRow";
 var LeaderboardDetailView = React26.memo(({
@@ -59742,6 +60221,16 @@ var LeaderboardDetailView = React26.memo(({
     }
     return allLineIds;
   }, [entityConfig, userAccessibleLineIds]);
+  const accessibleLineIdSet = React26.useMemo(
+    () => new Set((userAccessibleLineIds || []).filter(Boolean)),
+    [userAccessibleLineIds]
+  );
+  const canOpenWorkspace = React26.useCallback((workspaceLineId) => {
+    if (!workspaceLineId) return false;
+    if (!userAccessibleLineIds) return true;
+    if (accessibleLineIdSet.size === 0) return false;
+    return accessibleLineIdSet.has(workspaceLineId);
+  }, [accessibleLineIdSet, userAccessibleLineIds]);
   const { hasUptime: lineModeHasUptime, hasOutput: lineModeHasOutput } = React26.useMemo(() => {
     if (!lines || lines.length === 0) {
       return { hasUptime: false, hasOutput: false };
@@ -60139,6 +60628,9 @@ var LeaderboardDetailView = React26.memo(({
     return `${startDate.toLocaleDateString("en-US", { month: "short", day: "numeric" })} - ${endDate.toLocaleDateString("en-US", { month: "short", day: "numeric", year: "numeric" })}`;
   }, [normalizedRange]);
   const handleWorkspaceClick = React26.useCallback((workspace, rank) => {
+    if (!canOpenWorkspace(workspace.line_id)) {
+      return;
+    }
     trackCoreEvent("Workspace from Leaderboard Clicked", {
       workspace_name: workspace.workspace_name,
       workspace_id: workspace.workspace_uuid,
@@ -60171,7 +60663,7 @@ var LeaderboardDetailView = React26.memo(({
       const combinedParams = navParams ? `${navParams}&${contextParamString}` : `?${contextParamString}`;
       navigation.navigate(`/workspace/${workspace.workspace_uuid}${combinedParams}`);
     }
-  }, [onWorkspaceClick, navigation, date, shiftId]);
+  }, [canOpenWorkspace, onWorkspaceClick, navigation, date, shiftId]);
   React26.useEffect(() => {
     workspacesLengthRef.current = activeEntries.length || 0;
   }, [activeEntries.length]);
@@ -60462,6 +60954,7 @@ var LeaderboardDetailView = React26.memo(({
           workspace: ws,
           rank,
           cardClass,
+          isClickable: canOpenWorkspace(ws.line_id),
           onWorkspaceClick: stableHandleWorkspaceClick,
           getMedalIcon: stableGetMedalIcon,
           efficiencyLabel
@@ -60486,6 +60979,7 @@ var LeaderboardDetailView = React26.memo(({
               workspace: ws,
               index,
               rowClass,
+              isClickable: canOpenWorkspace(ws.line_id),
               onWorkspaceClick: stableHandleWorkspaceClick,
               getMedalIcon: stableGetMedalIcon
             },
@@ -60496,7 +60990,7 @@ var LeaderboardDetailView = React26.memo(({
     ) })
   ] });
 }, (prevProps, nextProps) => {
-  return prevProps.lineId === nextProps.lineId && prevProps.date === nextProps.date && prevProps.shift === nextProps.shift && prevProps.line1Id === nextProps.line1Id && prevProps.line2Id === nextProps.line2Id && JSON.stringify(prevProps.lineNames) === JSON.stringify(nextProps.lineNames) && prevProps.className === nextProps.className;
+  return prevProps.lineId === nextProps.lineId && prevProps.date === nextProps.date && prevProps.shift === nextProps.shift && prevProps.line1Id === nextProps.line1Id && prevProps.line2Id === nextProps.line2Id && JSON.stringify(prevProps.lineNames) === JSON.stringify(nextProps.lineNames) && JSON.stringify(prevProps.userAccessibleLineIds) === JSON.stringify(nextProps.userAccessibleLineIds) && prevProps.className === nextProps.className;
 });
 LeaderboardDetailView.displayName = "LeaderboardDetailView";
 var LeaderboardDetailViewWithDisplayNames = withAllWorkspaceDisplayNames(LeaderboardDetailView);
@@ -60911,6 +61405,20 @@ var ProfileView = () => {
   ] });
 };
 var ProfileView_default = ProfileView;
+
+// src/lib/constants/actions.ts
+var ACTION_NAMES = {
+  /** Assembly operations */
+  ASSEMBLY: "Assembly",
+  /** Packaging operations */
+  PACKAGING: "Packaging",
+  /** Inspection operations */
+  INSPECTION: "Inspection",
+  /** Testing operations */
+  TESTING: "Testing",
+  /** Quality control operations */
+  QUALITY_CONTROL: "Quality Control"
+};
 var calculateShiftHours = (startTime, endTime, breaks = []) => {
   if (!startTime || !endTime) return 8;
   const [startHour, startMinute] = startTime.split(":").map(Number);
@@ -60924,6 +61432,43 @@ var calculateShiftHours = (startTime, endTime, breaks = []) => {
   const hoursDiff = (endMinutes - startMinutes - totalBreakMinutes) / 60;
   return Number(hoursDiff.toFixed(1));
 };
+var calculateBreakDuration2 = (startTime, endTime) => {
+  const [startHour, startMinute] = startTime.split(":").map(Number);
+  const [endHour, endMinute] = endTime.split(":").map(Number);
+  let startMinutes = startHour * 60 + startMinute;
+  let endMinutes = endHour * 60 + endMinute;
+  if (endMinutes < startMinutes) {
+    endMinutes += 24 * 60;
+  }
+  return endMinutes - startMinutes;
+};
+var parseBreaksFromDB = (dbBreaks) => {
+  if (!dbBreaks) return [];
+  if (Array.isArray(dbBreaks)) {
+    return dbBreaks.map((breakItem) => ({
+      startTime: breakItem.start || breakItem.startTime || "00:00",
+      endTime: breakItem.end || breakItem.endTime || "00:00",
+      duration: calculateBreakDuration2(
+        breakItem.start || breakItem.startTime || "00:00",
+        breakItem.end || breakItem.endTime || "00:00"
+      ),
+      remarks: breakItem.remarks || breakItem.name || ""
+    }));
+  } else if (dbBreaks.breaks && Array.isArray(dbBreaks.breaks)) {
+    return dbBreaks.breaks.map((breakItem) => ({
+      startTime: breakItem.start || breakItem.startTime || "00:00",
+      endTime: breakItem.end || breakItem.endTime || "00:00",
+      duration: calculateBreakDuration2(
+        breakItem.start || breakItem.startTime || "00:00",
+        breakItem.end || breakItem.endTime || "00:00"
+      ),
+      remarks: breakItem.remarks || breakItem.name || ""
+    }));
+  } else {
+    console.warn("Unexpected breaks format:", dbBreaks);
+    return [];
+  }
+};
 var getStoredLineState = (lineId) => {
   try {
     return JSON.parse(localStorage.getItem(`line_${lineId}_open`) || "false");
@@ -60940,6 +61485,7 @@ var formatBreaks = (breaks) => {
     }))
   };
 };
+var SHIFT_HOURS_EPSILON = 1e-3;
 var BreakRow = React26.memo(({
   break: breakItem,
   onUpdate,
@@ -61235,16 +61781,22 @@ var ShiftsView = ({
   );
   const [loading, setLoading] = React26.useState(true);
   const [error, setError] = React26.useState(null);
+  const [saveStatusMessages, setSaveStatusMessages] = React26.useState(
+    () => lineIds.reduce((acc, id3) => ({ ...acc, [id3]: null }), {})
+  );
   const showToast = React26.useCallback((type, message) => {
     if (onToast) {
-      onToast(type, message);
-    } else {
-      if (type === "success") {
-        sonner.toast.success(message);
-      } else {
-        sonner.toast.error(message);
+      try {
+        onToast(type, message);
+      } catch (error2) {
+        console.warn("[ShiftsView] onToast callback failed, falling back to sonner toast:", error2);
       }
     }
+    if (type === "success") {
+      sonner.toast.success(message);
+    } else {
+      sonner.toast.error(message);
+    }
   }, [onToast]);
   React26.useEffect(() => {
     const fetchShiftConfigs = async () => {
@@ -61395,15 +61947,196 @@ var ShiftsView = ({
       return config;
     }));
   }, []);
+  const getOperationalDateForLine = React26.useCallback((lineConfig) => {
+    const sortedShifts = [...lineConfig.shifts || []].sort((a, b) => a.shiftId - b.shiftId);
+    const dayBoundaryStart = sortedShifts[0]?.startTime || "06:00";
+    return getOperationalDate(lineConfig.timezone || "UTC", /* @__PURE__ */ new Date(), dayBoundaryStart);
+  }, []);
+  const recalculateTargetsForShiftHourChanges = React26.useCallback(
+    async ({
+      lineId,
+      lineConfig,
+      previousShiftHours,
+      updatedBy
+    }) => {
+      const primaryOperationalDate = getOperationalDate(lineConfig.timezone || "UTC");
+      const alternateOperationalDate = getOperationalDateForLine(lineConfig);
+      const candidateOperationalDates = primaryOperationalDate === alternateOperationalDate ? [primaryOperationalDate] : [primaryOperationalDate, alternateOperationalDate];
+      let recalculatedCount = 0;
+      const { data: lineRow, error: lineRowError } = await supabase.from("lines").select("factory_id").eq("id", lineId).maybeSingle();
+      if (lineRowError) {
+        throw new Error(`Failed to resolve line factory for target recalculation: ${lineRowError.message}`);
+      }
+      const lineFactoryId = lineRow?.factory_id || null;
+      for (const shift of lineConfig.shifts || []) {
+        const oldShiftHours = previousShiftHours[shift.shiftId];
+        const newShiftHours = calculateShiftHours(shift.startTime, shift.endTime, shift.breaks || []);
+        if (oldShiftHours === void 0) continue;
+        if (!Number.isFinite(newShiftHours) || newShiftHours <= 0) {
+          console.warn(
+            `[ShiftsView] Skipping target recalculation for line ${lineId}, shift ${shift.shiftId} due to invalid new shift hours: ${newShiftHours}`
+          );
+          continue;
+        }
+        if (Math.abs(newShiftHours - oldShiftHours) <= SHIFT_HOURS_EPSILON) continue;
+        let thresholdDateForShift = candidateOperationalDates[0];
+        let currentThresholds = [];
+        for (const candidateDate of candidateOperationalDates) {
+          const { data: thresholdRows, error: thresholdsFetchError } = await supabase.from("action_thresholds").select("line_id, shift_id, action_id, workspace_id, date, pph_threshold, ideal_cycle_time, total_day_output, action_name, sku_id").eq("line_id", lineId).eq("date", candidateDate).eq("shift_id", shift.shiftId);
+          if (thresholdsFetchError) {
+            throw new Error(
+              `Failed to fetch action thresholds for line ${lineId}, shift ${shift.shiftId}: ${thresholdsFetchError.message}`
+            );
+          }
+          if ((thresholdRows || []).length > 0) {
+            thresholdDateForShift = candidateDate;
+            currentThresholds = thresholdRows || [];
+            break;
+          }
+        }
+        if (currentThresholds.length === 0) {
+          continue;
+        }
+        const actionIds = Array.from(
+          new Set(currentThresholds.map((threshold) => threshold.action_id).filter(Boolean))
+        );
+        const actionNameById = /* @__PURE__ */ new Map();
+        if (actionIds.length > 0) {
+          const { data: actionRows, error: actionsError } = await supabase.from("actions").select("id, action_name").in("id", actionIds);
+          if (actionsError) {
+            console.warn(
+              `[ShiftsView] Failed to resolve action names for line ${lineId}, shift ${shift.shiftId}: ${actionsError.message}`
+            );
+          } else {
+            (actionRows || []).forEach((actionRow) => {
+              if (actionRow.id && actionRow.action_name) {
+                actionNameById.set(actionRow.id, actionRow.action_name);
+              }
+            });
+          }
+        }
+        const expandedHours = newShiftHours > oldShiftHours;
+        const recalculatedThresholds = currentThresholds.map((threshold) => {
+          const existingPPH = Number(threshold.pph_threshold) || 0;
+          const existingDayOutput = Number(threshold.total_day_output) || 0;
+          const baselineDayOutput = existingDayOutput > 0 ? existingDayOutput : Math.round(existingPPH * Math.max(oldShiftHours, 0));
+          let nextPPH = existingPPH;
+          let nextDayOutput = existingDayOutput;
+          if (expandedHours) {
+            const pphToKeep = existingPPH > 0 ? existingPPH : oldShiftHours > 0 ? Math.round(baselineDayOutput / oldShiftHours) : 0;
+            nextPPH = pphToKeep;
+            nextDayOutput = Math.round(pphToKeep * newShiftHours);
+          } else {
+            const dayOutputToKeep = baselineDayOutput;
+            nextDayOutput = dayOutputToKeep;
+            nextPPH = newShiftHours > 0 ? Math.round(dayOutputToKeep / newShiftHours) : 0;
+          }
+          const resolvedActionName = (typeof threshold.action_name === "string" && threshold.action_name.trim().length > 0 ? threshold.action_name : actionNameById.get(threshold.action_id)) || ACTION_NAMES.ASSEMBLY;
+          return {
+            line_id: threshold.line_id || lineId,
+            shift_id: shift.shiftId,
+            action_id: threshold.action_id,
+            workspace_id: threshold.workspace_id,
+            date: threshold.date || thresholdDateForShift,
+            pph_threshold: Math.max(0, Math.round(Number.isFinite(nextPPH) ? nextPPH : 0)),
+            ideal_cycle_time: Number(threshold.ideal_cycle_time) || 0,
+            total_day_output: Math.max(0, Math.round(Number.isFinite(nextDayOutput) ? nextDayOutput : 0)),
+            action_name: resolvedActionName,
+            updated_by: updatedBy,
+            ...threshold.sku_id ? { sku_id: threshold.sku_id } : {}
+          };
+        });
+        const { error: thresholdsUpsertError } = await supabase.from("action_thresholds").upsert(recalculatedThresholds);
+        if (thresholdsUpsertError) {
+          throw new Error(
+            `Failed to update action thresholds for line ${lineId}, shift ${shift.shiftId}: ${thresholdsUpsertError.message}`
+          );
+        }
+        const packagingActionIds = new Set(
+          Array.from(actionNameById.entries()).filter(([, actionName]) => actionName.toLowerCase() === ACTION_NAMES.PACKAGING.toLowerCase()).map(([actionId]) => actionId)
+        );
+        const packagingThresholds = recalculatedThresholds.filter((threshold) => {
+          if (packagingActionIds.has(threshold.action_id)) return true;
+          return typeof threshold.action_name === "string" && threshold.action_name.toLowerCase() === ACTION_NAMES.PACKAGING.toLowerCase();
+        });
+        const thresholdDayOutput = packagingThresholds.reduce(
+          (sum, threshold) => sum + (Number(threshold.total_day_output) || 0),
+          0
+        );
+        const thresholdPPH = packagingThresholds.reduce(
+          (sum, threshold) => sum + (Number(threshold.pph_threshold) || 0),
+          0
+        );
+        const { data: existingLineThreshold, error: existingLineThresholdError } = await supabase.from("line_thresholds").select("factory_id, product_code, sku_id").eq("line_id", lineId).eq("date", thresholdDateForShift).eq("shift_id", shift.shiftId).maybeSingle();
+        if (existingLineThresholdError) {
+          console.warn(
+            `[ShiftsView] Failed to read existing line threshold for line ${lineId}, shift ${shift.shiftId}: ${existingLineThresholdError.message}`
+          );
+        }
+        const factoryId = existingLineThreshold?.factory_id || lineFactoryId;
+        if (factoryId) {
+          const lineThresholdPayload = {
+            factory_id: factoryId,
+            line_id: lineId,
+            date: thresholdDateForShift,
+            shift_id: shift.shiftId,
+            product_code: existingLineThreshold?.product_code || "",
+            threshold_day_output: thresholdDayOutput,
+            threshold_pph: thresholdPPH
+          };
+          if (existingLineThreshold?.sku_id) {
+            lineThresholdPayload.sku_id = existingLineThreshold.sku_id;
+          }
+          const { error: lineThresholdUpsertError } = await supabase.from("line_thresholds").upsert(lineThresholdPayload, { onConflict: "factory_id,line_id,date,shift_id" });
+          if (lineThresholdUpsertError) {
+            throw new Error(
+              `Failed to update line thresholds for line ${lineId}, shift ${shift.shiftId}: ${lineThresholdUpsertError.message}`
+            );
+          }
+        } else {
+          console.warn(
+            `[ShiftsView] Missing factory_id while updating line thresholds for line ${lineId}, shift ${shift.shiftId}`
+          );
+        }
+        recalculatedCount += recalculatedThresholds.length;
+      }
+      return recalculatedCount;
+    },
+    [getOperationalDateForLine, supabase]
+  );
   const handleSaveShifts = React26.useCallback(async (lineId) => {
+    const userId = "6bf6f271-1e55-4a95-9b89-1c3820b58739";
     setLineConfigs((prev) => prev.map(
       (config) => config.id === lineId ? { ...config, isSaving: true, saveSuccess: false } : config
     ));
+    setSaveStatusMessages((prev) => ({ ...prev, [lineId]: null }));
     try {
       const lineConfig = lineConfigs.find((config) => config.id === lineId);
       if (!lineConfig) {
         throw new Error("Line configuration not found");
       }
+      const { data: existingRows, error: existingRowsError } = await supabase.from("line_operating_hours").select("shift_id, start_time, end_time, breaks").eq("line_id", lineId);
+      if (existingRowsError) {
+        throw new Error(`Failed to read existing shift timings: ${existingRowsError.message}`);
+      }
+      const previousShiftHours = (existingRows || []).reduce(
+        (acc, row) => {
+          acc[row.shift_id] = calculateShiftHours(
+            row.start_time,
+            row.end_time,
+            parseBreaksFromDB(row.breaks)
+          );
+          return acc;
+        },
+        {}
+      );
+      const changedShiftCount = (lineConfig.shifts || []).reduce((count, shift) => {
+        const oldShiftHours = previousShiftHours[shift.shiftId];
+        if (oldShiftHours === void 0) return count;
+        const newShiftHours = calculateShiftHours(shift.startTime, shift.endTime, shift.breaks || []);
+        if (!Number.isFinite(newShiftHours)) return count;
+        return Math.abs(newShiftHours - oldShiftHours) > SHIFT_HOURS_EPSILON ? count + 1 : count;
+      }, 0);
       const allSavedRows = [];
       for (const shift of lineConfig.shifts || []) {
         const shiftData = {
@@ -61425,23 +62158,65 @@ var ShiftsView = ({
       if (allSavedRows.length > 0) {
         shiftConfigStore.setFromOperatingHoursRows(lineId, allSavedRows, shiftConfigStore.get(lineId));
       }
+      let recalculatedTargetsCount = 0;
+      try {
+        recalculatedTargetsCount = await recalculateTargetsForShiftHourChanges({
+          lineId,
+          lineConfig,
+          previousShiftHours,
+          updatedBy: userId
+        });
+      } catch (recalcError) {
+        console.error("[ShiftsView] Shift timings were saved but target recalculation failed:", recalcError);
+        showToast("error", "Shift timings saved, but target recalculation failed. Please review targets.");
+        setSaveStatusMessages((prev) => ({
+          ...prev,
+          [lineId]: {
+            message: "Shift timings saved, but target recalculation failed. Please review targets.",
+            tone: "error"
+          }
+        }));
+      }
       setLineConfigs((prev) => prev.map(
         (config) => config.id === lineId ? { ...config, isSaving: false, saveSuccess: true } : config
       ));
-      showToast("success", "Shift configurations saved successfully");
+      let successMessage = "Shift configurations saved successfully.";
+      if (changedShiftCount > 0 && recalculatedTargetsCount > 0) {
+        successMessage = `Shift configurations saved. Targets updated successfully for ${recalculatedTargetsCount} workspace${recalculatedTargetsCount === 1 ? "" : "s"}.`;
+      } else if (changedShiftCount > 0) {
+        successMessage = "Shift configurations saved. Target recalculation completed successfully.";
+      }
+      showToast("success", successMessage);
+      setSaveStatusMessages((prev) => ({
+        ...prev,
+        [lineId]: {
+          message: successMessage,
+          tone: "success"
+        }
+      }));
       setTimeout(() => {
         setLineConfigs((prev) => prev.map(
           (config) => config.id === lineId ? { ...config, saveSuccess: false } : config
         ));
       }, 3e3);
+      setTimeout(() => {
+        setSaveStatusMessages((prev) => ({ ...prev, [lineId]: null }));
+      }, 7e3);
     } catch (error2) {
       console.error("Error saving shift configurations:", error2);
       showToast("error", "Failed to save shift configurations");
+      setSaveStatusMessages((prev) => ({
+        ...prev,
+        [lineId]: {
+          message: "Failed to save shift configurations",
+          tone: "error"
+        }
+      }));
       setLineConfigs((prev) => prev.map(
         (config) => config.id === lineId ? { ...config, isSaving: false, saveSuccess: false } : config
       ));
     }
-  }, [lineConfigs, supabase, showToast]);
+  }, [lineConfigs, recalculateTargetsForShiftHourChanges, supabase, showToast]);
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: `min-h-screen bg-slate-50 ${className}`, children: [
     /* @__PURE__ */ jsxRuntime.jsx("div", { className: "sticky top-0 z-10 bg-white border-b border-gray-200/80 shadow-sm", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "px-3 sm:px-4 md:px-6 lg:px-8 py-3 sm:py-4", children: [
       /* @__PURE__ */ jsxRuntime.jsx("div", { className: "sm:hidden", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center", children: [
@@ -61496,7 +62271,14 @@ var ShiftsView = ({
           /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col sm:flex-row items-start sm:items-center gap-2 sm:gap-4 w-full sm:w-auto", children: [
             /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
               config.isSaving && /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-xs sm:text-sm font-medium text-blue-600", children: "Saving..." }),
-              config.saveSuccess && /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-xs sm:text-sm font-medium text-green-600", children: "Saved!" })
+              config.saveSuccess && /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-xs sm:text-sm font-medium text-green-600", children: "Saved!" }),
+              saveStatusMessages[config.id]?.message && /* @__PURE__ */ jsxRuntime.jsx(
+                "span",
+                {
+                  className: `text-xs sm:text-sm font-medium ${saveStatusMessages[config.id]?.tone === "error" ? "text-red-600" : saveStatusMessages[config.id]?.tone === "info" ? "text-blue-600" : "text-green-600"}`,
+                  children: saveStatusMessages[config.id]?.message
+                }
+              )
             ] }),
             /* @__PURE__ */ jsxRuntime.jsxs(
               "button",
@@ -61553,20 +62335,6 @@ var ShiftsView = ({
 var AuthenticatedShiftsView = withAuth(React26__namespace.default.memo(ShiftsView));
 var ShiftsView_default = ShiftsView;
 
-// src/lib/constants/actions.ts
-var ACTION_NAMES = {
-  /** Assembly operations */
-  ASSEMBLY: "Assembly",
-  /** Packaging operations */
-  PACKAGING: "Packaging",
-  /** Inspection operations */
-  INSPECTION: "Inspection",
-  /** Testing operations */
-  TESTING: "Testing",
-  /** Quality control operations */
-  QUALITY_CONTROL: "Quality Control"
-};
-
 // src/views/TargetsView.utils.ts
 var calculatePPH = (cycleTime, breaks = [], shiftHours = 0) => {
   if (cycleTime === "" || cycleTime === 0) return "";
@@ -65983,9 +66751,38 @@ var TeamManagementView = ({
     optifye: 0
   });
   const [isAddUserDialogOpen, setIsAddUserDialogOpen] = React26.useState(false);
-  const canAddUsers = user?.role_level === "owner" || user?.role_level === "it" || user?.role_level === "optifye";
+  const normalizeIds = React26.useCallback((value) => {
+    if (Array.isArray(value)) {
+      return value.filter((id3) => typeof id3 === "string" && id3.length > 0);
+    }
+    if (typeof value === "string" && value.length > 0) {
+      return [value];
+    }
+    return [];
+  }, []);
+  const plantHeadFactoryIds = React26.useMemo(() => {
+    if (user?.role_level !== "plant_head") return [];
+    const scopedFactoryIds = normalizeIds(user?.access_scope?.factory_ids);
+    if (scopedFactoryIds.length > 0) {
+      return Array.from(new Set(scopedFactoryIds));
+    }
+    const propertyFactoryIds = normalizeIds(
+      user?.properties?.factory_ids ?? user?.properties?.factory_id
+    );
+    if (propertyFactoryIds.length > 0) {
+      return Array.from(new Set(propertyFactoryIds));
+    }
+    return entityConfig?.factoryId ? [entityConfig.factoryId] : [];
+  }, [user, entityConfig?.factoryId, normalizeIds]);
+  const notifyScopeRefresh = React26.useCallback(() => {
+    if (typeof window !== "undefined") {
+      window.dispatchEvent(new Event("rbac:refresh-scope"));
+    }
+  }, []);
+  const canAddUsers = user?.role_level === "owner" || user?.role_level === "it" || user?.role_level === "plant_head" || user?.role_level === "optifye";
   const canViewUsageStats = user?.role_level === "owner" || user?.role_level === "it" || user?.role_level === "optifye";
-  const companyIdForUsage = entityConfig?.companyId || user?.properties?.company_id;
+  const pageCompanyId = entityConfig?.companyId || user?.properties?.company_id;
+  const companyIdForUsage = pageCompanyId;
   const usageDateRange = React26.useMemo(() => {
     const today = /* @__PURE__ */ new Date();
     const dayOfWeek = today.getDay();
@@ -66016,8 +66813,8 @@ var TeamManagementView = ({
       return acc;
     }, {});
   }, [usageData, usageDateRange.daysElapsed]);
-  const pageTitle = user?.role_level === "optifye" ? "Platform Users" : "Team Management";
-  const pageDescription = user?.role_level === "optifye" ? "Manage users across all companies" : user?.role_level === "owner" || user?.role_level === "it" ? "Manage team members and view their daily usage" : "Manage supervisors in your factory";
+  const pageTitle = "Team Management";
+  const pageDescription = user?.role_level === "owner" || user?.role_level === "it" || user?.role_level === "optifye" ? "Manage team members and view their daily usage" : "Manage supervisors in your factory";
   const hasAccess = user ? user.role_level === void 0 || ["optifye", "owner", "it", "plant_head"].includes(user.role_level) : false;
   const loadData = React26.useCallback(async () => {
     if (!supabase) {
@@ -66025,20 +66822,16 @@ var TeamManagementView = ({
       setIsLoading(false);
       return;
     }
-    const isOptifyeUser = user?.role_level === "optifye";
-    if (!isOptifyeUser) {
-      const companyId2 = entityConfig?.companyId || user?.properties?.company_id;
-      if (!companyId2) {
-        setError("Company not found. Please contact your administrator.");
-        setIsLoading(false);
-        return;
-      }
+    const companyId = pageCompanyId;
+    if (!companyId) {
+      setError("Company not found. Please contact your administrator.");
+      setIsLoading(false);
+      return;
     }
-    const companyId = entityConfig?.companyId || user?.properties?.company_id;
     console.log("[TeamManagementView] Loading data:", {
       role: user?.role_level,
-      isOptifye: isOptifyeUser,
-      companyId: isOptifyeUser ? "ALL" : companyId
+      isOptifye: user?.role_level === "optifye",
+      companyId
     });
     setIsLoading(true);
     setError(void 0);
@@ -66053,23 +66846,7 @@ var TeamManagementView = ({
       if (!backendUrl) {
         throw new Error("Backend URL is not configured. Please set NEXT_PUBLIC_BACKEND_URL in your environment.");
       }
-      if (isOptifyeUser) {
-        const { data: factories } = await supabase.from("factories").select("id, factory_name, company_id").order("factory_name");
-        const linesResponse = await fetch(`${backendUrl}/api/lines`, {
-          headers: {
-            "Authorization": `Bearer ${token}`,
-            "Content-Type": "application/json"
-          }
-        });
-        if (!linesResponse.ok) {
-          throw new Error(`Failed to fetch lines: ${linesResponse.statusText}`);
-        }
-        const linesData = await linesResponse.json();
-        const lines = linesData.lines || [];
-        setAvailableFactories(factories || []);
-        setAvailableLines(lines);
-        console.log("[TeamManagementView] Optifye - Loaded factories:", factories?.length, "lines:", lines?.length, "Sample lines:", lines?.slice(0, 3));
-      } else if ((user?.role_level === "owner" || user?.role_level === "it") && companyId) {
+      if ((user?.role_level === "optifye" || user?.role_level === "owner" || user?.role_level === "it") && companyId) {
         const { data: factories } = await supabase.from("factories").select("id, factory_name, company_id").eq("company_id", companyId).order("factory_name");
         const linesResponse = await fetch(`${backendUrl}/api/lines?company_id=${companyId}`, {
           headers: {
@@ -66084,9 +66861,8 @@ var TeamManagementView = ({
         const lines = linesData.lines || [];
         setAvailableFactories(factories || []);
         setAvailableLines(lines);
-        console.log("[TeamManagementView] Owner/IT - Company:", companyId, "Loaded factories:", factories?.length, "lines:", lines?.length);
+        console.log("[TeamManagementView] Company-scoped team view - Company:", companyId, "Loaded factories:", factories?.length, "lines:", lines?.length);
       } else if (user?.role_level === "plant_head") {
-        const plantHeadFactoryIds = user?.properties?.factory_ids || [];
         if (plantHeadFactoryIds.length > 0) {
           if (companyId) {
             const linesResponse = await fetch(`${backendUrl}/api/lines?company_id=${companyId}`, {
@@ -66139,35 +66915,46 @@ var TeamManagementView = ({
         setAvailableFactories([]);
         console.log("[TeamManagementView] Fallback - Company:", companyId, "Loaded lines:", lines?.length);
       }
-      if (isOptifyeUser) {
-        const [usersData, userStats] = await Promise.all([
-          userManagementService.getAllUsers(),
-          userManagementService.getAllUserStats()
-        ]);
-        setUsers(usersData);
-        setStats({
-          totalUsers: userStats.total,
-          owners: userStats.owners,
-          it: userStats.it,
-          plantHeads: userStats.plant_heads,
-          supervisors: userStats.supervisors,
-          optifye: userStats.optifye
-        });
-      } else {
-        const [usersData, userStats] = await Promise.all([
-          user?.role_level === "plant_head" && entityConfig?.factoryId ? userManagementService.getFactoryUsers(entityConfig.factoryId) : userManagementService.getCompanyUsers(companyId),
-          userManagementService.getUserStats(companyId)
-        ]);
-        setUsers(usersData);
-        setStats({
-          totalUsers: userStats.total,
-          owners: userStats.owners,
-          it: userStats.it,
-          plantHeads: userStats.plant_heads,
-          supervisors: userStats.supervisors,
-          optifye: 0
-        });
-      }
+      const usersPromise = user?.role_level === "plant_head" ? (async () => {
+        if (plantHeadFactoryIds.length === 0) {
+          return [];
+        }
+        const results = await Promise.allSettled(
+          plantHeadFactoryIds.map((factoryId) => userManagementService.getFactoryUsers(factoryId))
+        );
+        const successful = results.filter(
+          (result) => result.status === "fulfilled"
+        ).flatMap((result) => result.value || []);
+        if (successful.length > 0) {
+          const byUserId = /* @__PURE__ */ new Map();
+          successful.forEach((u) => {
+            if (u?.user_id) {
+              byUserId.set(u.user_id, u);
+            }
+          });
+          return Array.from(byUserId.values());
+        }
+        const firstRejected = results.find(
+          (result) => result.status === "rejected"
+        );
+        if (firstRejected) {
+          throw firstRejected.reason;
+        }
+        return [];
+      })() : userManagementService.getCompanyUsers(companyId);
+      const [usersData, userStats] = await Promise.all([
+        usersPromise,
+        userManagementService.getUserStats(companyId)
+      ]);
+      setUsers(usersData);
+      setStats({
+        totalUsers: userStats.total,
+        owners: userStats.owners,
+        it: userStats.it,
+        plantHeads: userStats.plant_heads,
+        supervisors: userStats.supervisors,
+        optifye: 0
+      });
     } catch (err) {
       console.error("Error loading team management data:", err);
       setError(err instanceof Error ? err.message : "Failed to load data");
@@ -66175,16 +66962,16 @@ var TeamManagementView = ({
     } finally {
       setIsLoading(false);
     }
-  }, [supabase, user, entityConfig]);
+  }, [supabase, user, pageCompanyId, entityConfig?.factoryId, plantHeadFactoryIds]);
   React26.useEffect(() => {
-    const companyId = entityConfig?.companyId || user?.properties?.company_id;
-    const canLoad = hasAccess && user && (user.role_level === "optifye" || !!companyId);
+    const companyId = pageCompanyId;
+    const canLoad = hasAccess && user && !!companyId;
     if (canLoad) {
       loadData();
     } else if (!user) {
       setIsLoading(true);
     }
-  }, [hasAccess, loadData, user, entityConfig?.companyId]);
+  }, [hasAccess, loadData, user, pageCompanyId]);
   const handleUserAdded = React26.useCallback(() => {
     loadData();
   }, [loadData]);
@@ -66198,12 +66985,13 @@ var TeamManagementView = ({
         updated_by: user.id
       });
       sonner.toast.success("User role updated successfully");
+      notifyScopeRefresh();
       loadData();
     } catch (err) {
       console.error("Error updating user role:", err);
       sonner.toast.error("Failed to update user role");
     }
-  }, [supabase, user, loadData]);
+  }, [supabase, user, loadData, notifyScopeRefresh]);
   const handleRemoveUser = React26.useCallback(async (userId) => {
     if (!supabase || !user) return;
     try {
@@ -66226,12 +67014,13 @@ var TeamManagementView = ({
         assigned_by: user.id
       });
       sonner.toast.success("Line assignments updated successfully");
+      notifyScopeRefresh();
       loadData();
     } catch (err) {
       console.error("Error updating line assignments:", err);
       sonner.toast.error("Failed to update line assignments");
     }
-  }, [supabase, user, loadData]);
+  }, [supabase, user, loadData, notifyScopeRefresh]);
   const handleFactoryAssignmentUpdate = React26.useCallback(async (userId, factoryIds) => {
     if (!supabase || !user) return;
     try {
@@ -66242,12 +67031,13 @@ var TeamManagementView = ({
         assigned_by: user.id
       });
       sonner.toast.success("Factory assignments updated successfully");
+      notifyScopeRefresh();
       loadData();
     } catch (err) {
       console.error("Error updating factory assignments:", err);
       sonner.toast.error("Failed to update factory assignments");
     }
-  }, [supabase, user, loadData]);
+  }, [supabase, user, loadData, notifyScopeRefresh]);
   const handleProfileUpdate = React26.useCallback(async (userId, firstName, lastName, profilePhotoUrl) => {
     if (!supabase || !user) return;
     try {