From 4009a1d2a7adf2e191a2726a76e4ca15899c5ca8 Mon Sep 17 00:00:00 2001
From: rene <mail@motocamp.de>
Date: Wed, 6 May 2026 19:39:03 +0200
Subject: [PATCH] =?UTF-8?q?Fix:=20Breeder-Chips=20nie=20aus=20Sicherheitsn?=
 =?UTF-8?q?etz=20erzwingen=20=E2=80=94=20nur=20Admin/Mod/Social=20(SW=20by?=
 =?UTF-8?q?-v743)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 backend/main.py             |  2 +-
 backend/static/index.html   |  2 +-
 backend/static/js/app.js    |  2 +-
 backend/static/js/worlds.js | 10 +++++-----
 backend/static/sw.js        |  2 +-
 5 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/backend/main.py b/backend/main.py
index ee3ba1c..5d0a807 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -327,7 +327,7 @@ MEDIA_DIR = os.getenv("MEDIA_DIR", "/data/media")
 os.makedirs(MEDIA_DIR, exist_ok=True)
 app.mount("/media", StaticFiles(directory=MEDIA_DIR), name="media")
 
-APP_VER = "742"  # muss mit APP_VER in app.js übereinstimmen
+APP_VER = "743"  # muss mit APP_VER in app.js übereinstimmen
 
 @app.get("/api/version")
 async def app_version():
diff --git a/backend/static/index.html b/backend/static/index.html
index 45c11df..33be94e 100644
--- a/backend/static/index.html
+++ b/backend/static/index.html
@@ -578,7 +578,7 @@
 <script src="/js/api.js?v=94"></script>
 <script src="/js/ui.js?v=94"></script>
 <script src="/js/app.js?v=94"></script>
-<script src="/js/worlds.js?v=742"></script>
+<script src="/js/worlds.js?v=743"></script>
 
 <!-- Feature-Seiten werden lazy geladen -->
 
diff --git a/backend/static/js/app.js b/backend/static/js/app.js
index c2a5089..d5e601b 100644
--- a/backend/static/js/app.js
+++ b/backend/static/js/app.js
@@ -3,7 +3,7 @@
    Router, State-Management, Navigation, Initialisierung.
    ============================================================ */
 
-const APP_VER     = '742'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
+const APP_VER     = '743'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
 const APP_VERSION = '1.5.0'; // ← semantische Version, wird bei make release gesetzt
 const IS_STAGING  = location.hostname === 'staging.banyaro.app';
 
diff --git a/backend/static/js/worlds.js b/backend/static/js/worlds.js
index 1b7fdda..f8ead1a 100644
--- a/backend/static/js/worlds.js
+++ b/backend/static/js/worlds.js
@@ -594,15 +594,15 @@ window.Worlds = (() => {
 
   function _chipsForWorld(world) {
     const pages = _getConfig()[world] || _DEFAULT_CONFIG[world];
+    // Alle Chips filtern — _chipAllowed entscheidet ob angezeigt
     const chips = pages.map(_chipMeta).filter(c => c && _chipAllowed(c));
-    // Sicherheitsnetz: Rolle-gebundene Chips immer einfügen wenn berechtigt
-    const u = _state?.user;
+    // Sicherheitsnetz: Admin/Mod/Social-Chips aus Default immer einfügen wenn berechtigt
+    // (nicht Breeder — der folgt strikt dem Tier)
     const alreadyIn = new Set(chips.map(c => c.page));
-    const defaults = _DEFAULT_CONFIG[world] || [];
-    for (const page of defaults) {
+    for (const page of (_DEFAULT_CONFIG[world] || [])) {
       if (alreadyIn.has(page)) continue;
       const meta = _chipMeta(page);
-      if (!meta?.role) continue; // nur role-gebundene Chips
+      if (!meta?.role || meta.role === 'breeder') continue; // Breeder nie erzwingen
       if (_chipAllowed(meta)) { chips.push(meta); alreadyIn.add(page); }
     }
     return chips;
diff --git a/backend/static/sw.js b/backend/static/sw.js
index 55cd3b0..b3046f8 100644
--- a/backend/static/sw.js
+++ b/backend/static/sw.js
@@ -3,7 +3,7 @@
    Offline-Cache + Push Notifications + Tile-Cache
    ============================================================ */
 
-const CACHE_VERSION = 'by-v742';
+const CACHE_VERSION = 'by-v743';
 const CACHE_STATIC  = `${CACHE_VERSION}-static`;
 const CACHE_TILES   = 'ban-yaro-tiles-v1';  // bleibt über SW-Updates erhalten
 const CACHE_API     = 'ban-yaro-api-v1';    // API-Response-Cache