@xiwebdesign/xicms-core 5.6.1 → 5.7.0

package/dist/blocks/index.d.ts

@@ -4,6 +4,6 @@
  */
 export { defineBlock, createRegistry, mergeRegistry, validateBlocks, type BlockDefinition, type BlockRegistry, type BlockRenderProps, type BlockEditorProps, } from "./registry";
 export { BlockRenderer } from "./BlockRenderer";
-export { RegistryProvider, useRegistry } from "./context";
+export { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from "./context";
 export { builtinBlocks } from "./builtins";
 export * from "./builtins";

package/dist/blocks/index.js

@@ -5,16 +5,18 @@ import {
   validateBlocks
 } from "./registry";
 import { BlockRenderer } from "./BlockRenderer";
-import { RegistryProvider, useRegistry } from "./context";
+import { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from "./context";
 import { builtinBlocks } from "./builtins";
 export * from "./builtins";
 export {
+  BlockDataProvider,
   BlockRenderer,
   RegistryProvider,
   builtinBlocks,
   createRegistry,
   defineBlock,
   mergeRegistry,
+  useBlockData,
   useRegistry,
   validateBlocks
 };

package/dist/blocks/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/blocks/index.ts"],"sourcesContent":["/**\n * @xiwebdesign/xicms-core/blocks — ingebouwde blokken + de registry-API.\n * Render-componenten zijn server-safe (waar mogelijk); admin-editors zitten in `/admin`.\n */\nexport {\n  defineBlock,\n  createRegistry,\n  mergeRegistry,\n  validateBlocks,\n  type BlockDefinition,\n  type BlockRegistry,\n  type BlockRenderProps,\n  type BlockEditorProps,\n} from \"./registry\";\nexport { BlockRenderer } from \"./BlockRenderer\";\nexport { RegistryProvider, useRegistry } from \"./context\";\nexport { builtinBlocks } from \"./builtins\";\nexport * from \"./builtins\";\n"],"mappings":"AAIA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,qBAAqB;AAC9B,cAAc;","names":[]}
+{"version":3,"sources":["../../src/blocks/index.ts"],"sourcesContent":["/**\n * @xiwebdesign/xicms-core/blocks — ingebouwde blokken + de registry-API.\n * Render-componenten zijn server-safe (waar mogelijk); admin-editors zitten in `/admin`.\n */\nexport {\n  defineBlock,\n  createRegistry,\n  mergeRegistry,\n  validateBlocks,\n  type BlockDefinition,\n  type BlockRegistry,\n  type BlockRenderProps,\n  type BlockEditorProps,\n} from \"./registry\";\nexport { BlockRenderer } from \"./BlockRenderer\";\nexport { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from \"./context\";\nexport { builtinBlocks } from \"./builtins\";\nexport * from \"./builtins\";\n"],"mappings":"AAIA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,aAAa,mBAAmB,oBAAoB;AAC/E,SAAS,qBAAqB;AAC9B,cAAc;","names":[]}

package/dist/components/News.js

@@ -7,6 +7,7 @@ import { useSiteConfig } from "../config";
 import DOMPurify from "dompurify";
 import { useAuth } from "../auth/AuthProvider";
 import { canEdit } from "../auth/roles";
+import { useBlockData } from "../blocks/context";
 import { isDemoActive, getDemoNews } from "../demo/demoStore";
 import { Img } from "../media/ImageContext";
 import { jsonLdHtml } from "../blocks/builtins/jsonld";
@@ -14,12 +15,20 @@ function useNews(opts = {}) {
   const { siteId } = useSiteConfig();
   const { role } = useAuth();
   const editor = canEdit(role);
-  const [articles, setArticles] = useState([]);
-  const [loading, setLoading] = useState(true);
+  const serverNews = useBlockData("news");
   const onlyPublished = opts.onlyPublished ?? !editor;
   const live = opts.live ?? editor;
   const cap = Math.min(opts.max ?? 50, 50);
+  const seed = serverNews ? (onlyPublished ? serverNews.filter((a) => a.published) : serverNews).slice(0, cap) : [];
+  const [articles, setArticles] = useState(seed);
+  const [loading, setLoading] = useState(!serverNews);
   useEffect(() => {
+    if (serverNews) {
+      const all = onlyPublished ? serverNews.filter((a) => a.published) : serverNews;
+      setArticles(all.slice(0, cap));
+      setLoading(false);
+      return;
+    }
     if (isDemoActive()) {
       const all = getDemoNews(siteId);
       setArticles((onlyPublished ? all.filter((a) => a.published) : all).slice(0, cap));
@@ -55,7 +64,7 @@ function useNews(opts = {}) {
       () => setLoading(false)
     );
     return () => unsub();
-  }, [siteId, onlyPublished, live, cap]);
+  }, [siteId, onlyPublished, live, cap, serverNews]);
   return { articles, loading };
 }
 function NewsList({ basePath = "/nieuws", className, emptyLabel = "Nog geen nieuws.", limit, pageSize }) {

package/dist/components/News.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/News.tsx"],"sourcesContent":["\"use client\";\n\nimport { useEffect, useState } from \"react\";\nimport { collection, getDocs, limit as fbLimit, onSnapshot, orderBy, query, where } from \"firebase/firestore\";\nimport { getDb } from \"../firebase/client\";\nimport { useSiteConfig } from \"../config\";\nimport DOMPurify from \"dompurify\";\nimport { useAuth } from \"../auth/AuthProvider\";\nimport { canEdit } from \"../auth/roles\";\nimport { isDemoActive, getDemoNews } from \"../demo/demoStore\";\nimport { Img } from \"../media/ImageContext\";\nimport type { NewsArticle } from \"../content/types\";\nimport { jsonLdHtml } from \"../blocks/builtins/jsonld\";\n\n/**\n * Lijst van nieuwsartikelen voor de huidige site.\n * - `live: false` (standaard publiek): één keer ophalen met getDocs → geen per-bezoeker listener\n *   (scheelt Firestore-kosten op druk bezochte sites).\n * - `live: true` (admin): realtime via onSnapshot, zodat wijzigingen meteen zichtbaar zijn.\n */\nexport function useNews(opts: { onlyPublished?: boolean; live?: boolean; max?: number } = {}): {\n  articles: NewsArticle[];\n  loading: boolean;\n} {\n  const { siteId } = useSiteConfig();\n  // Via useAuth (niet via het deprecated ContentProvider-pad — News hoort niet aan legacy te hangen).\n  const { role } = useAuth();\n  const editor = canEdit(role);\n  const [articles, setArticles] = useState<NewsArticle[]>([]);\n  const [loading, setLoading] = useState(true);\n  const onlyPublished = opts.onlyPublished ?? !editor;\n  const live = opts.live ?? editor; // editors zien live; publiek één keer\n  // Begrens de query: zonder cap zou een nieuws-rijke site ALLE artikelen downloaden bij elk bezoek.\n  const cap = Math.min(opts.max ?? 50, 50);\n\n  useEffect(() => {\n    // Demo-modus: nieuws komt uit de lokale seed (geen Firebase), zodat nieuws-blokken/widgets\n    // in de demo ook gevuld zijn.\n    if (isDemoActive()) {\n      const all = getDemoNews(siteId);\n      setArticles((onlyPublished ? all.filter((a) => a.published) : all).slice(0, cap));\n      setLoading(false);\n      return;\n    }\n    const db = getDb();\n    if (!db) {\n      setLoading(false);\n      return;\n    }\n    const base = collection(db, \"sites\", siteId, \"news\");\n    const q = onlyPublished\n      ? query(base, where(\"published\", \"==\", true), orderBy(\"date\", \"desc\"), fbLimit(cap))\n      : query(base, orderBy(\"date\", \"desc\"), fbLimit(cap));\n    const map = (snap: { docs: { id: string; data: () => unknown }[] }) =>\n      setArticles(snap.docs.map((d) => ({ id: d.id, ...(d.data() as Omit<NewsArticle, \"id\">) })));\n\n    if (!live) {\n      let active = true;\n      getDocs(q)\n        .then((snap) => {\n          if (active) {\n            map(snap);\n            setLoading(false);\n          }\n        })\n        .catch(() => active && setLoading(false));\n      return () => {\n        active = false;\n      };\n    }\n\n    const unsub = onSnapshot(\n      q,\n      (snap) => {\n        map(snap);\n        setLoading(false);\n      },\n      () => setLoading(false),\n    );\n    return () => unsub();\n  }, [siteId, onlyPublished, live, cap]);\n\n  return { articles, loading };\n}\n\ninterface NewsListProps {\n  /** Basispad voor links naar een artikel, bv. \"/nieuws\". */\n  basePath?: string;\n  className?: string;\n  emptyLabel?: string;\n  /** Maximaal aantal artikelen om te tonen. */\n  limit?: number;\n  /** Toon eerst dit aantal en laad de rest met een \"Meer laden\"-knop (0/leeg = alles ineens). */\n  pageSize?: number;\n}\n\n/** Standaardweergave van nieuwsartikelen als kaartenlijst, optioneel gepagineerd. */\nexport function NewsList({ basePath = \"/nieuws\", className, emptyLabel = \"Nog geen nieuws.\", limit, pageSize }: NewsListProps) {\n  const { articles, loading } = useNews({ max: limit });\n  const paged = typeof pageSize === \"number\" && pageSize > 0;\n  const [visible, setVisible] = useState(paged ? pageSize : Infinity);\n\n  if (loading) return <p>Nieuws laden…</p>;\n  if (articles.length === 0) return <p>{emptyLabel}</p>;\n\n  const all = typeof limit === \"number\" ? articles.slice(0, limit) : articles;\n  const shown = paged ? all.slice(0, visible) : all;\n\n  return (\n    <div className={className} style={{ display: \"grid\", gap: \"1rem\" }}>\n      {shown.map((a, i) => (\n        <article key={a.id} className=\"xicms-card\" style={{ padding: \"1.25rem\" }}>\n          {a.coverUrl && (\n            // Eerste cover boven de vouw = vaak de LCP → priority (geen lazy-load-vertraging).\n            <Img src={a.coverUrl} alt=\"\" width={1200} height={700} sizes=\"(max-width: 720px) 100vw, 33vw\" priority={i === 0} style={{ width: \"100%\", height: \"auto\", borderRadius: 8, marginBottom: \"0.75rem\" }} />\n          )}\n          <p style={{ fontSize: 12, opacity: 0.7, margin: 0 }}>{a.date}</p>\n          {/* h2: de lijst staat direct onder de pagina-h1 — h3 zou een kopniveau overslaan. */}\n          <h2 style={{ margin: \"0.25rem 0\", fontSize: \"1.35rem\" }}>\n            <a href={`${basePath}/${a.slug ?? a.id}`}>{a.title}</a>\n            {!a.published && <span style={{ marginLeft: 8, fontSize: 12, color: \"#b45309\" }}>(concept)</span>}\n          </h2>\n          {a.excerpt && <p style={{ margin: 0, opacity: 0.85 }}>{a.excerpt}</p>}\n        </article>\n      ))}\n      {paged && shown.length < all.length && (\n        <div style={{ textAlign: \"center\" }}>\n          <button type=\"button\" className=\"xicms-btn\" onClick={() => setVisible((v) => v + (pageSize as number))}>\n            Meer laden ({all.length - shown.length})\n          </button>\n        </div>\n      )}\n    </div>\n  );\n}\n\n/** BlogPosting-JSON-LD voor een artikel — puur, zodat het testbaar is. */\nexport function articleBlogPostingJsonLd(article: NewsArticle, opts: { siteName?: string; url?: string } = {}): Record<string, unknown> {\n  return {\n    \"@context\": \"https://schema.org\",\n    \"@type\": \"BlogPosting\",\n    headline: article.title,\n    datePublished: article.date,\n    ...(article.excerpt ? { description: article.excerpt } : {}),\n    ...(article.coverUrl ? { image: article.coverUrl } : {}),\n    ...(opts.url ? { url: opts.url, mainEntityOfPage: opts.url } : {}),\n    ...(opts.siteName ? { publisher: { \"@type\": \"Organization\", name: opts.siteName } } : {}),\n  };\n}\n\n/** Detailweergave van één artikel, met BlogPosting-JSON-LD voor zoekmachines. */\nexport function NewsArticleView({ article, jsonLd = true }: { article: NewsArticle; jsonLd?: boolean }) {\n  const { name } = useSiteConfig();\n  // Rich-text wordt bij het RENDEREN gesanitized (DOMPurify) — de render is de veiligheidsgrens,\n  // ook als er ooit ongesaneerde HTML in Firestore zou belanden. DOMPurify heeft echter een echte\n  // DOM nodig: op de server (SSR/prerender) is sanitize geen functie. Daarom rendert de eerste\n  // render (server én client-hydration, identiek) de platte-tekst-fallback en wisselt het effect\n  // — client-only — naar de gesanitizede rich-text.\n  const [html, setHtml] = useState<string | null>(null);\n  useEffect(() => {\n    setHtml(article.bodyHtml ? DOMPurify.sanitize(article.bodyHtml) : null);\n  }, [article.bodyHtml]);\n  // Fallback tot de sanitizer klaar is: kale tekst (tags gestript, gerenderd als tekstnodes — veilig).\n  const fallbackText = article.body ?? (article.bodyHtml ? article.bodyHtml.replace(/<[^>]*>/g, \" \") : \"\");\n  return (\n    <article>\n      <p style={{ fontSize: 12, opacity: 0.6 }}>{article.date}</p>\n      <h1>{article.title}</h1>\n      {article.coverUrl && (\n        <Img src={article.coverUrl} alt=\"\" width={1200} height={700} sizes=\"(max-width: 900px) 100vw, 800px\" priority style={{ width: \"100%\", height: \"auto\", borderRadius: 12, margin: \"1rem 0\" }} />\n      )}\n      {html ? (\n        // eslint-disable-next-line react/no-danger\n        <div className=\"xicms-richtext\" dangerouslySetInnerHTML={{ __html: html }} />\n      ) : (\n        fallbackText.split(/\\n{2,}/).map((p, i) => (\n          <p key={i} style={{ whiteSpace: \"pre-wrap\" }}>\n            {p}\n          </p>\n        ))\n      )}\n      {jsonLd && (\n        <script\n          type=\"application/ld+json\"\n          // eslint-disable-next-line react/no-danger\n          dangerouslySetInnerHTML={{ __html: jsonLdHtml(articleBlogPostingJsonLd(article, { siteName: name })) }}\n        />\n      )}\n    </article>\n  );\n}\n"],"mappings":";AAsGsB,cAgBZ,YAhBY;AApGtB,SAAS,WAAW,gBAAgB;AACpC,SAAS,YAAY,SAAS,SAAS,SAAS,YAAY,SAAS,OAAO,aAAa;AACzF,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,OAAO,eAAe;AACtB,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,cAAc,mBAAmB;AAC1C,SAAS,WAAW;AAEpB,SAAS,kBAAkB;AAQpB,SAAS,QAAQ,OAAkE,CAAC,GAGzF;AACA,QAAM,EAAE,OAAO,IAAI,cAAc;AAEjC,QAAM,EAAE,KAAK,IAAI,QAAQ;AACzB,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,CAAC,CAAC;AAC1D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,gBAAgB,KAAK,iBAAiB,CAAC;AAC7C,QAAM,OAAO,KAAK,QAAQ;AAE1B,QAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI,EAAE;AAEvC,YAAU,MAAM;AAGd,QAAI,aAAa,GAAG;AAClB,YAAM,MAAM,YAAY,MAAM;AAC9B,mBAAa,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,MAAM,GAAG,GAAG,CAAC;AAChF,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,UAAM,KAAK,MAAM;AACjB,QAAI,CAAC,IAAI;AACP,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,UAAM,OAAO,WAAW,IAAI,SAAS,QAAQ,MAAM;AACnD,UAAM,IAAI,gBACN,MAAM,MAAM,MAAM,aAAa,MAAM,IAAI,GAAG,QAAQ,QAAQ,MAAM,GAAG,QAAQ,GAAG,CAAC,IACjF,MAAM,MAAM,QAAQ,QAAQ,MAAM,GAAG,QAAQ,GAAG,CAAC;AACrD,UAAM,MAAM,CAAC,SACX,YAAY,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAI,EAAE,KAAK,EAA8B,EAAE,CAAC;AAE5F,QAAI,CAAC,MAAM;AACT,UAAI,SAAS;AACb,cAAQ,CAAC,EACN,KAAK,CAAC,SAAS;AACd,YAAI,QAAQ;AACV,cAAI,IAAI;AACR,qBAAW,KAAK;AAAA,QAClB;AAAA,MACF,CAAC,EACA,MAAM,MAAM,UAAU,WAAW,KAAK,CAAC;AAC1C,aAAO,MAAM;AACX,iBAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,CAAC,SAAS;AACR,YAAI,IAAI;AACR,mBAAW,KAAK;AAAA,MAClB;AAAA,MACA,MAAM,WAAW,KAAK;AAAA,IACxB;AACA,WAAO,MAAM,MAAM;AAAA,EACrB,GAAG,CAAC,QAAQ,eAAe,MAAM,GAAG,CAAC;AAErC,SAAO,EAAE,UAAU,QAAQ;AAC7B;AAcO,SAAS,SAAS,EAAE,WAAW,WAAW,WAAW,aAAa,oBAAoB,OAAO,SAAS,GAAkB;AAC7H,QAAM,EAAE,UAAU,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,CAAC;AACpD,QAAM,QAAQ,OAAO,aAAa,YAAY,WAAW;AACzD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,QAAQ,WAAW,QAAQ;AAElE,MAAI,QAAS,QAAO,oBAAC,OAAE,gCAAa;AACpC,MAAI,SAAS,WAAW,EAAG,QAAO,oBAAC,OAAG,sBAAW;AAEjD,QAAM,MAAM,OAAO,UAAU,WAAW,SAAS,MAAM,GAAG,KAAK,IAAI;AACnE,QAAM,QAAQ,QAAQ,IAAI,MAAM,GAAG,OAAO,IAAI;AAE9C,SACE,qBAAC,SAAI,WAAsB,OAAO,EAAE,SAAS,QAAQ,KAAK,OAAO,GAC9D;AAAA,UAAM,IAAI,CAAC,GAAG,MACb,qBAAC,aAAmB,WAAU,cAAa,OAAO,EAAE,SAAS,UAAU,GACpE;AAAA,QAAE;AAAA,MAED,oBAAC,OAAI,KAAK,EAAE,UAAU,KAAI,IAAG,OAAO,MAAM,QAAQ,KAAK,OAAM,kCAAiC,UAAU,MAAM,GAAG,OAAO,EAAE,OAAO,QAAQ,QAAQ,QAAQ,cAAc,GAAG,cAAc,UAAU,GAAG;AAAA,MAEvM,oBAAC,OAAE,OAAO,EAAE,UAAU,IAAI,SAAS,KAAK,QAAQ,EAAE,GAAI,YAAE,MAAK;AAAA,MAE7D,qBAAC,QAAG,OAAO,EAAE,QAAQ,aAAa,UAAU,UAAU,GACpD;AAAA,4BAAC,OAAE,MAAM,GAAG,QAAQ,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAK,YAAE,OAAM;AAAA,QAClD,CAAC,EAAE,aAAa,oBAAC,UAAK,OAAO,EAAE,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,GAAG,uBAAS;AAAA,SAC5F;AAAA,MACC,EAAE,WAAW,oBAAC,OAAE,OAAO,EAAE,QAAQ,GAAG,SAAS,KAAK,GAAI,YAAE,SAAQ;AAAA,SAXrD,EAAE,EAYhB,CACD;AAAA,IACA,SAAS,MAAM,SAAS,IAAI,UAC3B,oBAAC,SAAI,OAAO,EAAE,WAAW,SAAS,GAChC,+BAAC,YAAO,MAAK,UAAS,WAAU,aAAY,SAAS,MAAM,WAAW,CAAC,MAAM,IAAK,QAAmB,GAAG;AAAA;AAAA,MACzF,IAAI,SAAS,MAAM;AAAA,MAAO;AAAA,OACzC,GACF;AAAA,KAEJ;AAEJ;AAGO,SAAS,yBAAyB,SAAsB,OAA4C,CAAC,GAA4B;AACtI,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU,QAAQ;AAAA,IAClB,eAAe,QAAQ;AAAA,IACvB,GAAI,QAAQ,UAAU,EAAE,aAAa,QAAQ,QAAQ,IAAI,CAAC;AAAA,IAC1D,GAAI,QAAQ,WAAW,EAAE,OAAO,QAAQ,SAAS,IAAI,CAAC;AAAA,IACtD,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,kBAAkB,KAAK,IAAI,IAAI,CAAC;AAAA,IAChE,GAAI,KAAK,WAAW,EAAE,WAAW,EAAE,SAAS,gBAAgB,MAAM,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,EACzF;AACF;AAGO,SAAS,gBAAgB,EAAE,SAAS,SAAS,KAAK,GAA+C;AACtG,QAAM,EAAE,KAAK,IAAI,cAAc;AAM/B,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,IAAI;AACpD,YAAU,MAAM;AACd,YAAQ,QAAQ,WAAW,UAAU,SAAS,QAAQ,QAAQ,IAAI,IAAI;AAAA,EACxE,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAErB,QAAM,eAAe,QAAQ,SAAS,QAAQ,WAAW,QAAQ,SAAS,QAAQ,YAAY,GAAG,IAAI;AACrG,SACE,qBAAC,aACC;AAAA,wBAAC,OAAE,OAAO,EAAE,UAAU,IAAI,SAAS,IAAI,GAAI,kBAAQ,MAAK;AAAA,IACxD,oBAAC,QAAI,kBAAQ,OAAM;AAAA,IAClB,QAAQ,YACP,oBAAC,OAAI,KAAK,QAAQ,UAAU,KAAI,IAAG,OAAO,MAAM,QAAQ,KAAK,OAAM,mCAAkC,UAAQ,MAAC,OAAO,EAAE,OAAO,QAAQ,QAAQ,QAAQ,cAAc,IAAI,QAAQ,SAAS,GAAG;AAAA,IAE7L;AAAA;AAAA,MAEC,oBAAC,SAAI,WAAU,kBAAiB,yBAAyB,EAAE,QAAQ,KAAK,GAAG;AAAA,QAE3E,aAAa,MAAM,QAAQ,EAAE,IAAI,CAAC,GAAG,MACnC,oBAAC,OAAU,OAAO,EAAE,YAAY,WAAW,GACxC,eADK,CAER,CACD;AAAA,IAEF,UACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QAEL,yBAAyB,EAAE,QAAQ,WAAW,yBAAyB,SAAS,EAAE,UAAU,KAAK,CAAC,CAAC,EAAE;AAAA;AAAA,IACvG;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/components/News.tsx"],"sourcesContent":["\"use client\";\n\nimport { useEffect, useState } from \"react\";\nimport { collection, getDocs, limit as fbLimit, onSnapshot, orderBy, query, where } from \"firebase/firestore\";\nimport { getDb } from \"../firebase/client\";\nimport { useSiteConfig } from \"../config\";\nimport DOMPurify from \"dompurify\";\nimport { useAuth } from \"../auth/AuthProvider\";\nimport { canEdit } from \"../auth/roles\";\nimport { useBlockData } from \"../blocks/context\";\nimport { isDemoActive, getDemoNews } from \"../demo/demoStore\";\nimport { Img } from \"../media/ImageContext\";\nimport type { NewsArticle } from \"../content/types\";\nimport { jsonLdHtml } from \"../blocks/builtins/jsonld\";\n\n/**\n * Lijst van nieuwsartikelen voor de huidige site.\n * - `live: false` (standaard publiek): één keer ophalen met getDocs → geen per-bezoeker listener\n *   (scheelt Firestore-kosten op druk bezochte sites).\n * - `live: true` (admin): realtime via onSnapshot, zodat wijzigingen meteen zichtbaar zijn.\n */\nexport function useNews(opts: { onlyPublished?: boolean; live?: boolean; max?: number } = {}): {\n  articles: NewsArticle[];\n  loading: boolean;\n} {\n  const { siteId } = useSiteConfig();\n  // Via useAuth (niet via het deprecated ContentProvider-pad — News hoort niet aan legacy te hangen).\n  const { role } = useAuth();\n  const editor = canEdit(role);\n  // Server-gefetchte nieuwsdata (content-bundle 5.7): als de publieke route deze via\n  // <BlockDataProvider data={{ news }}> meegeeft, renderen we daaruit (SSR, geen browser-Firestore).\n  // Afwezig (admin/preview/dev, of geen bundle) → val terug op het Firestore-pad hieronder.\n  const serverNews = useBlockData<NewsArticle[]>(\"news\");\n  const onlyPublished = opts.onlyPublished ?? !editor;\n  const live = opts.live ?? editor; // editors zien live; publiek één keer\n  // Begrens de query: zonder cap zou een nieuws-rijke site ALLE artikelen downloaden bij elk bezoek.\n  const cap = Math.min(opts.max ?? 50, 50);\n  // Bundle-data staat al bij de EERSTE render klaar (server + hydration, identiek): de nieuwsinhoud\n  // zit zo in de SSR-HTML (SEO) i.p.v. pas na een client-effect (geen \"laden…\"-flits).\n  const seed = serverNews ? (onlyPublished ? serverNews.filter((a) => a.published) : serverNews).slice(0, cap) : [];\n  const [articles, setArticles] = useState<NewsArticle[]>(seed);\n  const [loading, setLoading] = useState(!serverNews);\n\n  useEffect(() => {\n    // Bundle-data aanwezig? Render daaruit — geen listener, geen getDocs.\n    if (serverNews) {\n      const all = onlyPublished ? serverNews.filter((a) => a.published) : serverNews;\n      setArticles(all.slice(0, cap));\n      setLoading(false);\n      return;\n    }\n    // Demo-modus: nieuws komt uit de lokale seed (geen Firebase), zodat nieuws-blokken/widgets\n    // in de demo ook gevuld zijn.\n    if (isDemoActive()) {\n      const all = getDemoNews(siteId);\n      setArticles((onlyPublished ? all.filter((a) => a.published) : all).slice(0, cap));\n      setLoading(false);\n      return;\n    }\n    const db = getDb();\n    if (!db) {\n      setLoading(false);\n      return;\n    }\n    const base = collection(db, \"sites\", siteId, \"news\");\n    const q = onlyPublished\n      ? query(base, where(\"published\", \"==\", true), orderBy(\"date\", \"desc\"), fbLimit(cap))\n      : query(base, orderBy(\"date\", \"desc\"), fbLimit(cap));\n    const map = (snap: { docs: { id: string; data: () => unknown }[] }) =>\n      setArticles(snap.docs.map((d) => ({ id: d.id, ...(d.data() as Omit<NewsArticle, \"id\">) })));\n\n    if (!live) {\n      let active = true;\n      getDocs(q)\n        .then((snap) => {\n          if (active) {\n            map(snap);\n            setLoading(false);\n          }\n        })\n        .catch(() => active && setLoading(false));\n      return () => {\n        active = false;\n      };\n    }\n\n    const unsub = onSnapshot(\n      q,\n      (snap) => {\n        map(snap);\n        setLoading(false);\n      },\n      () => setLoading(false),\n    );\n    return () => unsub();\n  }, [siteId, onlyPublished, live, cap, serverNews]);\n\n  return { articles, loading };\n}\n\ninterface NewsListProps {\n  /** Basispad voor links naar een artikel, bv. \"/nieuws\". */\n  basePath?: string;\n  className?: string;\n  emptyLabel?: string;\n  /** Maximaal aantal artikelen om te tonen. */\n  limit?: number;\n  /** Toon eerst dit aantal en laad de rest met een \"Meer laden\"-knop (0/leeg = alles ineens). */\n  pageSize?: number;\n}\n\n/** Standaardweergave van nieuwsartikelen als kaartenlijst, optioneel gepagineerd. */\nexport function NewsList({ basePath = \"/nieuws\", className, emptyLabel = \"Nog geen nieuws.\", limit, pageSize }: NewsListProps) {\n  const { articles, loading } = useNews({ max: limit });\n  const paged = typeof pageSize === \"number\" && pageSize > 0;\n  const [visible, setVisible] = useState(paged ? pageSize : Infinity);\n\n  if (loading) return <p>Nieuws laden…</p>;\n  if (articles.length === 0) return <p>{emptyLabel}</p>;\n\n  const all = typeof limit === \"number\" ? articles.slice(0, limit) : articles;\n  const shown = paged ? all.slice(0, visible) : all;\n\n  return (\n    <div className={className} style={{ display: \"grid\", gap: \"1rem\" }}>\n      {shown.map((a, i) => (\n        <article key={a.id} className=\"xicms-card\" style={{ padding: \"1.25rem\" }}>\n          {a.coverUrl && (\n            // Eerste cover boven de vouw = vaak de LCP → priority (geen lazy-load-vertraging).\n            <Img src={a.coverUrl} alt=\"\" width={1200} height={700} sizes=\"(max-width: 720px) 100vw, 33vw\" priority={i === 0} style={{ width: \"100%\", height: \"auto\", borderRadius: 8, marginBottom: \"0.75rem\" }} />\n          )}\n          <p style={{ fontSize: 12, opacity: 0.7, margin: 0 }}>{a.date}</p>\n          {/* h2: de lijst staat direct onder de pagina-h1 — h3 zou een kopniveau overslaan. */}\n          <h2 style={{ margin: \"0.25rem 0\", fontSize: \"1.35rem\" }}>\n            <a href={`${basePath}/${a.slug ?? a.id}`}>{a.title}</a>\n            {!a.published && <span style={{ marginLeft: 8, fontSize: 12, color: \"#b45309\" }}>(concept)</span>}\n          </h2>\n          {a.excerpt && <p style={{ margin: 0, opacity: 0.85 }}>{a.excerpt}</p>}\n        </article>\n      ))}\n      {paged && shown.length < all.length && (\n        <div style={{ textAlign: \"center\" }}>\n          <button type=\"button\" className=\"xicms-btn\" onClick={() => setVisible((v) => v + (pageSize as number))}>\n            Meer laden ({all.length - shown.length})\n          </button>\n        </div>\n      )}\n    </div>\n  );\n}\n\n/** BlogPosting-JSON-LD voor een artikel — puur, zodat het testbaar is. */\nexport function articleBlogPostingJsonLd(article: NewsArticle, opts: { siteName?: string; url?: string } = {}): Record<string, unknown> {\n  return {\n    \"@context\": \"https://schema.org\",\n    \"@type\": \"BlogPosting\",\n    headline: article.title,\n    datePublished: article.date,\n    ...(article.excerpt ? { description: article.excerpt } : {}),\n    ...(article.coverUrl ? { image: article.coverUrl } : {}),\n    ...(opts.url ? { url: opts.url, mainEntityOfPage: opts.url } : {}),\n    ...(opts.siteName ? { publisher: { \"@type\": \"Organization\", name: opts.siteName } } : {}),\n  };\n}\n\n/** Detailweergave van één artikel, met BlogPosting-JSON-LD voor zoekmachines. */\nexport function NewsArticleView({ article, jsonLd = true }: { article: NewsArticle; jsonLd?: boolean }) {\n  const { name } = useSiteConfig();\n  // Rich-text wordt bij het RENDEREN gesanitized (DOMPurify) — de render is de veiligheidsgrens,\n  // ook als er ooit ongesaneerde HTML in Firestore zou belanden. DOMPurify heeft echter een echte\n  // DOM nodig: op de server (SSR/prerender) is sanitize geen functie. Daarom rendert de eerste\n  // render (server én client-hydration, identiek) de platte-tekst-fallback en wisselt het effect\n  // — client-only — naar de gesanitizede rich-text.\n  const [html, setHtml] = useState<string | null>(null);\n  useEffect(() => {\n    setHtml(article.bodyHtml ? DOMPurify.sanitize(article.bodyHtml) : null);\n  }, [article.bodyHtml]);\n  // Fallback tot de sanitizer klaar is: kale tekst (tags gestript, gerenderd als tekstnodes — veilig).\n  const fallbackText = article.body ?? (article.bodyHtml ? article.bodyHtml.replace(/<[^>]*>/g, \" \") : \"\");\n  return (\n    <article>\n      <p style={{ fontSize: 12, opacity: 0.6 }}>{article.date}</p>\n      <h1>{article.title}</h1>\n      {article.coverUrl && (\n        <Img src={article.coverUrl} alt=\"\" width={1200} height={700} sizes=\"(max-width: 900px) 100vw, 800px\" priority style={{ width: \"100%\", height: \"auto\", borderRadius: 12, margin: \"1rem 0\" }} />\n      )}\n      {html ? (\n        // eslint-disable-next-line react/no-danger\n        <div className=\"xicms-richtext\" dangerouslySetInnerHTML={{ __html: html }} />\n      ) : (\n        fallbackText.split(/\\n{2,}/).map((p, i) => (\n          <p key={i} style={{ whiteSpace: \"pre-wrap\" }}>\n            {p}\n          </p>\n        ))\n      )}\n      {jsonLd && (\n        <script\n          type=\"application/ld+json\"\n          // eslint-disable-next-line react/no-danger\n          dangerouslySetInnerHTML={{ __html: jsonLdHtml(articleBlogPostingJsonLd(article, { siteName: name })) }}\n        />\n      )}\n    </article>\n  );\n}\n"],"mappings":";AAqHsB,cAgBZ,YAhBY;AAnHtB,SAAS,WAAW,gBAAgB;AACpC,SAAS,YAAY,SAAS,SAAS,SAAS,YAAY,SAAS,OAAO,aAAa;AACzF,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,OAAO,eAAe;AACtB,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAC7B,SAAS,cAAc,mBAAmB;AAC1C,SAAS,WAAW;AAEpB,SAAS,kBAAkB;AAQpB,SAAS,QAAQ,OAAkE,CAAC,GAGzF;AACA,QAAM,EAAE,OAAO,IAAI,cAAc;AAEjC,QAAM,EAAE,KAAK,IAAI,QAAQ;AACzB,QAAM,SAAS,QAAQ,IAAI;AAI3B,QAAM,aAAa,aAA4B,MAAM;AACrD,QAAM,gBAAgB,KAAK,iBAAiB,CAAC;AAC7C,QAAM,OAAO,KAAK,QAAQ;AAE1B,QAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI,EAAE;AAGvC,QAAM,OAAO,cAAc,gBAAgB,WAAW,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,YAAY,MAAM,GAAG,GAAG,IAAI,CAAC;AAChH,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAC5D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,CAAC,UAAU;AAElD,YAAU,MAAM;AAEd,QAAI,YAAY;AACd,YAAM,MAAM,gBAAgB,WAAW,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI;AACpE,kBAAY,IAAI,MAAM,GAAG,GAAG,CAAC;AAC7B,iBAAW,KAAK;AAChB;AAAA,IACF;AAGA,QAAI,aAAa,GAAG;AAClB,YAAM,MAAM,YAAY,MAAM;AAC9B,mBAAa,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,MAAM,GAAG,GAAG,CAAC;AAChF,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,UAAM,KAAK,MAAM;AACjB,QAAI,CAAC,IAAI;AACP,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,UAAM,OAAO,WAAW,IAAI,SAAS,QAAQ,MAAM;AACnD,UAAM,IAAI,gBACN,MAAM,MAAM,MAAM,aAAa,MAAM,IAAI,GAAG,QAAQ,QAAQ,MAAM,GAAG,QAAQ,GAAG,CAAC,IACjF,MAAM,MAAM,QAAQ,QAAQ,MAAM,GAAG,QAAQ,GAAG,CAAC;AACrD,UAAM,MAAM,CAAC,SACX,YAAY,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAI,EAAE,KAAK,EAA8B,EAAE,CAAC;AAE5F,QAAI,CAAC,MAAM;AACT,UAAI,SAAS;AACb,cAAQ,CAAC,EACN,KAAK,CAAC,SAAS;AACd,YAAI,QAAQ;AACV,cAAI,IAAI;AACR,qBAAW,KAAK;AAAA,QAClB;AAAA,MACF,CAAC,EACA,MAAM,MAAM,UAAU,WAAW,KAAK,CAAC;AAC1C,aAAO,MAAM;AACX,iBAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,CAAC,SAAS;AACR,YAAI,IAAI;AACR,mBAAW,KAAK;AAAA,MAClB;AAAA,MACA,MAAM,WAAW,KAAK;AAAA,IACxB;AACA,WAAO,MAAM,MAAM;AAAA,EACrB,GAAG,CAAC,QAAQ,eAAe,MAAM,KAAK,UAAU,CAAC;AAEjD,SAAO,EAAE,UAAU,QAAQ;AAC7B;AAcO,SAAS,SAAS,EAAE,WAAW,WAAW,WAAW,aAAa,oBAAoB,OAAO,SAAS,GAAkB;AAC7H,QAAM,EAAE,UAAU,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,CAAC;AACpD,QAAM,QAAQ,OAAO,aAAa,YAAY,WAAW;AACzD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,QAAQ,WAAW,QAAQ;AAElE,MAAI,QAAS,QAAO,oBAAC,OAAE,gCAAa;AACpC,MAAI,SAAS,WAAW,EAAG,QAAO,oBAAC,OAAG,sBAAW;AAEjD,QAAM,MAAM,OAAO,UAAU,WAAW,SAAS,MAAM,GAAG,KAAK,IAAI;AACnE,QAAM,QAAQ,QAAQ,IAAI,MAAM,GAAG,OAAO,IAAI;AAE9C,SACE,qBAAC,SAAI,WAAsB,OAAO,EAAE,SAAS,QAAQ,KAAK,OAAO,GAC9D;AAAA,UAAM,IAAI,CAAC,GAAG,MACb,qBAAC,aAAmB,WAAU,cAAa,OAAO,EAAE,SAAS,UAAU,GACpE;AAAA,QAAE;AAAA,MAED,oBAAC,OAAI,KAAK,EAAE,UAAU,KAAI,IAAG,OAAO,MAAM,QAAQ,KAAK,OAAM,kCAAiC,UAAU,MAAM,GAAG,OAAO,EAAE,OAAO,QAAQ,QAAQ,QAAQ,cAAc,GAAG,cAAc,UAAU,GAAG;AAAA,MAEvM,oBAAC,OAAE,OAAO,EAAE,UAAU,IAAI,SAAS,KAAK,QAAQ,EAAE,GAAI,YAAE,MAAK;AAAA,MAE7D,qBAAC,QAAG,OAAO,EAAE,QAAQ,aAAa,UAAU,UAAU,GACpD;AAAA,4BAAC,OAAE,MAAM,GAAG,QAAQ,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAK,YAAE,OAAM;AAAA,QAClD,CAAC,EAAE,aAAa,oBAAC,UAAK,OAAO,EAAE,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,GAAG,uBAAS;AAAA,SAC5F;AAAA,MACC,EAAE,WAAW,oBAAC,OAAE,OAAO,EAAE,QAAQ,GAAG,SAAS,KAAK,GAAI,YAAE,SAAQ;AAAA,SAXrD,EAAE,EAYhB,CACD;AAAA,IACA,SAAS,MAAM,SAAS,IAAI,UAC3B,oBAAC,SAAI,OAAO,EAAE,WAAW,SAAS,GAChC,+BAAC,YAAO,MAAK,UAAS,WAAU,aAAY,SAAS,MAAM,WAAW,CAAC,MAAM,IAAK,QAAmB,GAAG;AAAA;AAAA,MACzF,IAAI,SAAS,MAAM;AAAA,MAAO;AAAA,OACzC,GACF;AAAA,KAEJ;AAEJ;AAGO,SAAS,yBAAyB,SAAsB,OAA4C,CAAC,GAA4B;AACtI,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU,QAAQ;AAAA,IAClB,eAAe,QAAQ;AAAA,IACvB,GAAI,QAAQ,UAAU,EAAE,aAAa,QAAQ,QAAQ,IAAI,CAAC;AAAA,IAC1D,GAAI,QAAQ,WAAW,EAAE,OAAO,QAAQ,SAAS,IAAI,CAAC;AAAA,IACtD,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,kBAAkB,KAAK,IAAI,IAAI,CAAC;AAAA,IAChE,GAAI,KAAK,WAAW,EAAE,WAAW,EAAE,SAAS,gBAAgB,MAAM,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,EACzF;AACF;AAGO,SAAS,gBAAgB,EAAE,SAAS,SAAS,KAAK,GAA+C;AACtG,QAAM,EAAE,KAAK,IAAI,cAAc;AAM/B,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,IAAI;AACpD,YAAU,MAAM;AACd,YAAQ,QAAQ,WAAW,UAAU,SAAS,QAAQ,QAAQ,IAAI,IAAI;AAAA,EACxE,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAErB,QAAM,eAAe,QAAQ,SAAS,QAAQ,WAAW,QAAQ,SAAS,QAAQ,YAAY,GAAG,IAAI;AACrG,SACE,qBAAC,aACC;AAAA,wBAAC,OAAE,OAAO,EAAE,UAAU,IAAI,SAAS,IAAI,GAAI,kBAAQ,MAAK;AAAA,IACxD,oBAAC,QAAI,kBAAQ,OAAM;AAAA,IAClB,QAAQ,YACP,oBAAC,OAAI,KAAK,QAAQ,UAAU,KAAI,IAAG,OAAO,MAAM,QAAQ,KAAK,OAAM,mCAAkC,UAAQ,MAAC,OAAO,EAAE,OAAO,QAAQ,QAAQ,QAAQ,cAAc,IAAI,QAAQ,SAAS,GAAG;AAAA,IAE7L;AAAA;AAAA,MAEC,oBAAC,SAAI,WAAU,kBAAiB,yBAAyB,EAAE,QAAQ,KAAK,GAAG;AAAA,QAE3E,aAAa,MAAM,QAAQ,EAAE,IAAI,CAAC,GAAG,MACnC,oBAAC,OAAU,OAAO,EAAE,YAAY,WAAW,GACxC,eADK,CAER,CACD;AAAA,IAEF,UACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QAEL,yBAAyB,EAAE,QAAQ,WAAW,yBAAyB,SAAS,EAAE,UAAU,KAAK,CAAC,CAAC,EAAE;AAAA;AAAA,IACvG;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/index.d.ts

@@ -44,7 +44,7 @@ export { PageView } from "./components/PageView";
 export { NewsList, NewsArticleView, useNews } from "./components/News";
 export { defineBlock, createRegistry, mergeRegistry, validateBlocks, buildBlockAddOptions, type BlockDefinition, type BlockRegistry, type BlockRenderProps, type BlockEditorProps, type BlockCategory, } from "./blocks/registry";
 export { BlockRenderer } from "./blocks/BlockRenderer";
-export { RegistryProvider, useRegistry } from "./blocks/context";
+export { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from "./blocks/context";
 export { builtinBlocks, ConsentEmbed } from "./blocks/builtins";
 export { PageRenderer } from "./render/PageRenderer";
 export { PublishedPage } from "./render/PublishedPage";

package/dist/index.js

@@ -53,7 +53,7 @@ import {
   buildBlockAddOptions
 } from "./blocks/registry";
 import { BlockRenderer } from "./blocks/BlockRenderer";
-import { RegistryProvider, useRegistry } from "./blocks/context";
+import { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from "./blocks/context";
 import { builtinBlocks, ConsentEmbed } from "./blocks/builtins";
 import { PageRenderer } from "./render/PageRenderer";
 import { PublishedPage } from "./render/PublishedPage";
@@ -86,6 +86,7 @@ import {
 import { initAppCheck } from "./firebase/appcheck";
 export {
   AuthProvider,
+  BlockDataProvider,
   BlockRenderer,
   ConsentBanner,
   ConsentEmbed,
@@ -158,6 +159,7 @@ export {
   scopeCss,
   siteLocales,
   useAuth,
+  useBlockData,
   useConsent,
   useEditor,
   useImageComponent,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * Publieke runtime-API van @xiwebdesign/xicms-core (lichte client/runtime laag).\n * - Admin (TipTap/Radix) zit in \"@xiwebdesign/xicms-core/admin\".\n * - Server-only code (firebase-admin, sanitize, SEO) zit in \"@xiwebdesign/xicms-core/server\".\n * - Pure schema's in \"@xiwebdesign/xicms-core/schema\".\n */\n\n// Provider & config\nexport { XiCMSProvider } from \"./XiCMSProvider\";\nexport { useSiteConfig } from \"./config\";\n\n// Theming & design-primitieven (maatwerk zonder core te forken).\n// - `defineTheme` maakt een eigen Astryx-thema (tokens + component-overrides) → geef door als\n//   XiCMSProvider `astryxTheme`-prop.\n// - De `ui`-primitieven (Card/Stack/Grid/Heading/Text/Btn…) zijn de bouwstenen waarop de ingebouwde\n//   blokken draaien; gebruik ze in eigen blokken voor een consistent maar te herstijlen uiterlijk.\nexport { defineTheme, useTheme } from \"@astryxdesign/core/theme\";\nexport type { DefinedTheme } from \"@astryxdesign/core/theme\";\n// Framework-router-integratie: geef `next/link` door als XiCMSProvider `linkComponent`-prop\n// (soepele client-nav + prefetch op alle Astryx-knoppen/links). `useLinkComponent` voor eigen blokken.\nexport { LinkProvider, useLinkComponent } from \"@astryxdesign/core/Link\";\nexport type { LinkComponentType } from \"@astryxdesign/core/Link\";\n// Beeldoptimalisatie: geef `next/image` door als XiCMSProvider `imageComponent`-prop. `Img` is de\n// wrapper die de blokken gebruiken; `useImageComponent` voor eigen blokken.\nexport { Img, ImageProvider, useImageComponent, InlineImageEditProvider } from \"./media/ImageContext\";\nexport type { ImageComponentType, ImgProps } from \"./media/ImageContext\";\nexport * from \"./blocks/ui\";\nexport {\n  SiteSettingsProvider,\n  useSiteSettings,\n  useMergedSiteConfig,\n} from \"./settings/useSiteSettings\";\nexport { SiteFooter } from \"./components/site/SiteFooter\";\nexport { EditorProvider, useEditor } from \"./editor/EditorProvider\";\nexport {\n  definePattern,\n  instantiatePattern,\n  collectPatternTypes,\n  builtinPatterns,\n  type Pattern,\n  type PatternBlock,\n} from \"./patterns\";\nexport { builtinThemePresets, type ThemePreset } from \"./theme/presets\";\nexport { defineSiteConfig } from \"./schema/siteConfig\";\nexport type { SiteConfig, SiteMode } from \"./schema/siteConfig\";\n// 5.0: Field-IR (primo-port), symbolen en custom blocks.\nexport { FieldSchema, FieldsSchema, fieldsToZod, fieldsDefaults, isFieldVisible, isRichTextKey } from \"./schema/fields\";\nexport type { Field, FieldHints, ShowIf } from \"./schema/fields\";\nexport { SymbolSchema } from \"./schema/symbols\";\nexport type { SymbolDefinition, StoredSymbol } from \"./schema/symbols\";\nexport { CustomBlockSchema } from \"./schema/customBlocks\";\nexport type { CustomBlock, CustomBlock as CustomBlockData } from \"./schema/customBlocks\";\nexport { customBlockToDefinition } from \"./blocks/customTemplate/definition\";\nexport { interpretTemplate, scopeCss } from \"./blocks/customTemplate/interpret\";\n// 5.0: localisatie — overlay-model (primo's locale-per-waarde, additief vertaald).\nexport {\n  siteLocales,\n  parseLocaleSlugs,\n  localizedPath,\n  localizePage,\n  localizeBlocks,\n  pruneTranslations,\n  TranslationsSchema,\n} from \"./i18n/overlay\";\nexport type { Translations, LocaleConfig } from \"./i18n/overlay\";\nexport type { ThemeTokens, NavItem, SiteSettings, PublicSiteSettings, FormsSender } from \"./schema/settings\";\nexport type { Seo } from \"./schema/seo\";\nexport type { Page, PageStatus } from \"./schema/pages\";\nexport type { FormDefinition, FormField } from \"./schema/forms\";\n\n// Auth\nexport { AuthProvider, useAuth } from \"./auth/AuthProvider\";\nexport { LoginForm } from \"./auth/LoginForm\";\nexport {\n  roleForSite,\n  canEdit,\n  canManageSite,\n  isSuperadmin,\n  type Role,\n  type XiClaims,\n} from \"./auth/roles\";\n\n// De legacy inline-laag (ContentProvider/useContent + EditableText/EditableRichText/EditableImage,\n// het v1 platte `cms/content`-model) is in 5.0 VERWIJDERD, zoals bij de deprecatie aangekondigd.\n// Inline bewerken loopt via het block-model: markeer tekstvelden met `data-xicms-edit` in de Render.\nexport type { NewsArticle, MediaItem, MediaVariant } from \"./content/types\";\n\nexport { EditBar } from \"./components/EditBar\";\nexport { ResponsiveImage } from \"./components/ResponsiveImage\";\nexport { PageView } from \"./components/PageView\";\nexport { NewsList, NewsArticleView, useNews } from \"./components/News\";\n\n// Block-systeem (runtime: registry + renderer; editors zitten in /admin)\nexport {\n  defineBlock,\n  createRegistry,\n  mergeRegistry,\n  validateBlocks,\n  buildBlockAddOptions,\n  type BlockDefinition,\n  type BlockRegistry,\n  type BlockRenderProps,\n  type BlockEditorProps,\n  type BlockCategory,\n} from \"./blocks/registry\";\nexport { BlockRenderer } from \"./blocks/BlockRenderer\";\nexport { RegistryProvider, useRegistry } from \"./blocks/context\";\nexport { builtinBlocks, ConsentEmbed } from \"./blocks/builtins\";\nexport { PageRenderer } from \"./render/PageRenderer\";\nexport { PublishedPage } from \"./render/PublishedPage\";\n\n// Module-systeem (XiCMS 3.0): modules bundelen blocks + instellingen; per site aan/uit + te stylen.\nexport {\n  defineModule,\n  resolveModules,\n  isModuleActive,\n  ModulesProvider,\n  useModules,\n  useModuleActive,\n  useModuleSettings,\n  applyBlockOverrides,\n  moduleIdForBlockType,\n  builtinModules,\n  validateModuleContract,\n  assertModuleContract,\n  useConsent,\n  ConsentBanner,\n  ConsentGate,\n  ConsentReopenLink,\n  type ConsentState,\n  type ConsentSettings,\n  type ConsentCategory,\n  type ModuleDefinition,\n  type ModuleSiteSetting,\n  type ModulesSiteConfig,\n  type Capability,\n  type ResolvedModules,\n  type BlockOverride,\n  type BlockOverrides,\n} from \"./modules\";\n\n// Demo-lock\nexport { DemoLock } from \"./lock/DemoLock\";\n\n// Demo-bewerkmodus (lokaal-only) leeft op het subpad `@xiwebdesign/xicms-core/demo` — dit zijn\n// demo-store-internals die niet in de publieke runtime-API thuishoren (klantsites gebruiken ze nooit;\n// alleen de XiCMS.nl-showcase). DemoStudio wordt intern door XiCMSProvider gerenderd.\n\n// Firebase (client)\nexport {\n  getFirebaseApp,\n  getFirebaseAuth,\n  getDb,\n  getBucket,\n  isFirebaseConfigured,\n} from \"./firebase/client\";\nexport { initAppCheck } from \"./firebase/appcheck\";\n"],"mappings":"AAQA,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAO9B,SAAS,aAAa,gBAAgB;AAItC,SAAS,cAAc,wBAAwB;AAI/C,SAAS,KAAK,eAAe,mBAAmB,+BAA+B;AAE/E,cAAc;AACd;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,iBAAiB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,2BAA6C;AACtD,SAAS,wBAAwB;AAGjC,SAAS,aAAa,cAAc,aAAa,gBAAgB,gBAAgB,qBAAqB;AAEtG,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAElC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB,gBAAgB;AAE5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,cAAc,eAAe;AACtC,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAOP,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC,SAAS,gBAAgB;AACzB,SAAS,UAAU,iBAAiB,eAAe;AAGnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,eAAe,oBAAoB;AAC5C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAG9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAWK;AAGP,SAAS,gBAAgB;AAOzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * Publieke runtime-API van @xiwebdesign/xicms-core (lichte client/runtime laag).\n * - Admin (TipTap/Radix) zit in \"@xiwebdesign/xicms-core/admin\".\n * - Server-only code (firebase-admin, sanitize, SEO) zit in \"@xiwebdesign/xicms-core/server\".\n * - Pure schema's in \"@xiwebdesign/xicms-core/schema\".\n */\n\n// Provider & config\nexport { XiCMSProvider } from \"./XiCMSProvider\";\nexport { useSiteConfig } from \"./config\";\n\n// Theming & design-primitieven (maatwerk zonder core te forken).\n// - `defineTheme` maakt een eigen Astryx-thema (tokens + component-overrides) → geef door als\n//   XiCMSProvider `astryxTheme`-prop.\n// - De `ui`-primitieven (Card/Stack/Grid/Heading/Text/Btn…) zijn de bouwstenen waarop de ingebouwde\n//   blokken draaien; gebruik ze in eigen blokken voor een consistent maar te herstijlen uiterlijk.\nexport { defineTheme, useTheme } from \"@astryxdesign/core/theme\";\nexport type { DefinedTheme } from \"@astryxdesign/core/theme\";\n// Framework-router-integratie: geef `next/link` door als XiCMSProvider `linkComponent`-prop\n// (soepele client-nav + prefetch op alle Astryx-knoppen/links). `useLinkComponent` voor eigen blokken.\nexport { LinkProvider, useLinkComponent } from \"@astryxdesign/core/Link\";\nexport type { LinkComponentType } from \"@astryxdesign/core/Link\";\n// Beeldoptimalisatie: geef `next/image` door als XiCMSProvider `imageComponent`-prop. `Img` is de\n// wrapper die de blokken gebruiken; `useImageComponent` voor eigen blokken.\nexport { Img, ImageProvider, useImageComponent, InlineImageEditProvider } from \"./media/ImageContext\";\nexport type { ImageComponentType, ImgProps } from \"./media/ImageContext\";\nexport * from \"./blocks/ui\";\nexport {\n  SiteSettingsProvider,\n  useSiteSettings,\n  useMergedSiteConfig,\n} from \"./settings/useSiteSettings\";\nexport { SiteFooter } from \"./components/site/SiteFooter\";\nexport { EditorProvider, useEditor } from \"./editor/EditorProvider\";\nexport {\n  definePattern,\n  instantiatePattern,\n  collectPatternTypes,\n  builtinPatterns,\n  type Pattern,\n  type PatternBlock,\n} from \"./patterns\";\nexport { builtinThemePresets, type ThemePreset } from \"./theme/presets\";\nexport { defineSiteConfig } from \"./schema/siteConfig\";\nexport type { SiteConfig, SiteMode } from \"./schema/siteConfig\";\n// 5.0: Field-IR (primo-port), symbolen en custom blocks.\nexport { FieldSchema, FieldsSchema, fieldsToZod, fieldsDefaults, isFieldVisible, isRichTextKey } from \"./schema/fields\";\nexport type { Field, FieldHints, ShowIf } from \"./schema/fields\";\nexport { SymbolSchema } from \"./schema/symbols\";\nexport type { SymbolDefinition, StoredSymbol } from \"./schema/symbols\";\nexport { CustomBlockSchema } from \"./schema/customBlocks\";\nexport type { CustomBlock, CustomBlock as CustomBlockData } from \"./schema/customBlocks\";\nexport { customBlockToDefinition } from \"./blocks/customTemplate/definition\";\nexport { interpretTemplate, scopeCss } from \"./blocks/customTemplate/interpret\";\n// 5.0: localisatie — overlay-model (primo's locale-per-waarde, additief vertaald).\nexport {\n  siteLocales,\n  parseLocaleSlugs,\n  localizedPath,\n  localizePage,\n  localizeBlocks,\n  pruneTranslations,\n  TranslationsSchema,\n} from \"./i18n/overlay\";\nexport type { Translations, LocaleConfig } from \"./i18n/overlay\";\nexport type { ThemeTokens, NavItem, SiteSettings, PublicSiteSettings, FormsSender } from \"./schema/settings\";\nexport type { Seo } from \"./schema/seo\";\nexport type { Page, PageStatus } from \"./schema/pages\";\nexport type { FormDefinition, FormField } from \"./schema/forms\";\n\n// Auth\nexport { AuthProvider, useAuth } from \"./auth/AuthProvider\";\nexport { LoginForm } from \"./auth/LoginForm\";\nexport {\n  roleForSite,\n  canEdit,\n  canManageSite,\n  isSuperadmin,\n  type Role,\n  type XiClaims,\n} from \"./auth/roles\";\n\n// De legacy inline-laag (ContentProvider/useContent + EditableText/EditableRichText/EditableImage,\n// het v1 platte `cms/content`-model) is in 5.0 VERWIJDERD, zoals bij de deprecatie aangekondigd.\n// Inline bewerken loopt via het block-model: markeer tekstvelden met `data-xicms-edit` in de Render.\nexport type { NewsArticle, MediaItem, MediaVariant } from \"./content/types\";\n\nexport { EditBar } from \"./components/EditBar\";\nexport { ResponsiveImage } from \"./components/ResponsiveImage\";\nexport { PageView } from \"./components/PageView\";\nexport { NewsList, NewsArticleView, useNews } from \"./components/News\";\n\n// Block-systeem (runtime: registry + renderer; editors zitten in /admin)\nexport {\n  defineBlock,\n  createRegistry,\n  mergeRegistry,\n  validateBlocks,\n  buildBlockAddOptions,\n  type BlockDefinition,\n  type BlockRegistry,\n  type BlockRenderProps,\n  type BlockEditorProps,\n  type BlockCategory,\n} from \"./blocks/registry\";\nexport { BlockRenderer } from \"./blocks/BlockRenderer\";\nexport { RegistryProvider, useRegistry, BlockDataProvider, useBlockData } from \"./blocks/context\";\nexport { builtinBlocks, ConsentEmbed } from \"./blocks/builtins\";\nexport { PageRenderer } from \"./render/PageRenderer\";\nexport { PublishedPage } from \"./render/PublishedPage\";\n\n// Module-systeem (XiCMS 3.0): modules bundelen blocks + instellingen; per site aan/uit + te stylen.\nexport {\n  defineModule,\n  resolveModules,\n  isModuleActive,\n  ModulesProvider,\n  useModules,\n  useModuleActive,\n  useModuleSettings,\n  applyBlockOverrides,\n  moduleIdForBlockType,\n  builtinModules,\n  validateModuleContract,\n  assertModuleContract,\n  useConsent,\n  ConsentBanner,\n  ConsentGate,\n  ConsentReopenLink,\n  type ConsentState,\n  type ConsentSettings,\n  type ConsentCategory,\n  type ModuleDefinition,\n  type ModuleSiteSetting,\n  type ModulesSiteConfig,\n  type Capability,\n  type ResolvedModules,\n  type BlockOverride,\n  type BlockOverrides,\n} from \"./modules\";\n\n// Demo-lock\nexport { DemoLock } from \"./lock/DemoLock\";\n\n// Demo-bewerkmodus (lokaal-only) leeft op het subpad `@xiwebdesign/xicms-core/demo` — dit zijn\n// demo-store-internals die niet in de publieke runtime-API thuishoren (klantsites gebruiken ze nooit;\n// alleen de XiCMS.nl-showcase). DemoStudio wordt intern door XiCMSProvider gerenderd.\n\n// Firebase (client)\nexport {\n  getFirebaseApp,\n  getFirebaseAuth,\n  getDb,\n  getBucket,\n  isFirebaseConfigured,\n} from \"./firebase/client\";\nexport { initAppCheck } from \"./firebase/appcheck\";\n"],"mappings":"AAQA,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAO9B,SAAS,aAAa,gBAAgB;AAItC,SAAS,cAAc,wBAAwB;AAI/C,SAAS,KAAK,eAAe,mBAAmB,+BAA+B;AAE/E,cAAc;AACd;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,iBAAiB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,2BAA6C;AACtD,SAAS,wBAAwB;AAGjC,SAAS,aAAa,cAAc,aAAa,gBAAgB,gBAAgB,qBAAqB;AAEtG,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAElC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB,gBAAgB;AAE5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,cAAc,eAAe;AACtC,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAOP,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC,SAAS,gBAAgB;AACzB,SAAS,UAAU,iBAAiB,eAAe;AAGnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB,aAAa,mBAAmB,oBAAoB;AAC/E,SAAS,eAAe,oBAAoB;AAC5C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAG9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAWK;AAGP,SAAS,gBAAgB;AAOzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;","names":[]}

package/dist/server/bundle.d.ts

@@ -0,0 +1,66 @@
+import "server-only";
+import type { Page } from "../schema/pages";
+import type { StoredSymbol } from "../schema/symbols";
+import type { CustomBlock } from "../schema/customBlocks";
+import type { PublicSiteSettings } from "../schema/settings";
+import type { NewsArticle } from "../content/types";
+/**
+ * BUILD-TIME content-bundle READER (5.7).
+ *
+ * Een klantsite kan de GEPUBLICEERDE, publiek-veilige stand van zijn site lezen uit één
+ * gecommit JSON-bestand (`content/published.bundle.json`, in de repo-root) i.p.v. uit Firestore.
+ * De Cloud-Function-worker schrijft dat bestand bij elke publicatie en committeert het; een verse
+ * build/rebuild heeft dan Firebase NOCH Firestore nodig — puur statische data.
+ *
+ * Contract: server/pages.ts leest bundle-first. Is er een bundle → serveer daaruit (zelfde
+ * return-vormen als de Firestore-readers). Is er GEEN bundle (dev/lokaal, of een repo zonder
+ * gecommit bundle) → val ongewijzigd terug op het Admin-SDK / keyless-REST-pad. De reader hier
+ * gooit NOOIT: een ontbrekend/leeg/corrupt bestand levert `null` (met één regel warn), zodat de
+ * Firestore-fallback het overneemt.
+ *
+ * De bundle-vorm moet 1-op-1 matchen met de writer (functions/src/lib/bundle.ts).
+ */
+/** Eén bundle-item: doc-id samengevoegd met (gesaneerde) doc-data. */
+export type BundleItem = {
+    id: string;
+} & Record<string, unknown>;
+/** Canonieke, PUBLIEKE bundle-vorm. Moet 1-op-1 matchen met de writer. */
+export interface PublishedBundle {
+    version: 1;
+    siteId: string;
+    generatedAt: string;
+    /** = sites/{siteId}/settings/public (PublicSiteSettings-vorm), of null. */
+    settings: (PublicSiteSettings & Record<string, unknown>) | null;
+    /** ALLEEN gepubliceerde pagina's (status === "published"). */
+    pages: Array<Page & {
+        id: string;
+    }>;
+    symbols: Array<StoredSymbol>;
+    customBlocks: Array<CustomBlock & {
+        id: string;
+    }>;
+    /** ALLEEN gepubliceerd nieuws (published === true). */
+    news: Array<{
+        id: string;
+    } & Record<string, unknown>>;
+}
+declare function readBundle(): PublishedBundle | null;
+/**
+ * De gecommit content-bundle, of `null` als er geen (bruikbaar) bestand is. Per render-pass één keer
+ * gelezen (React `cache()`), zodat alle bundle-first readers dezelfde in-memory kopie delen.
+ */
+export declare const getBundle: typeof readBundle;
+/** Pad-matching gelijk aan server/pages.ts (`path`-veld exact). */
+export declare function getBundlePage(bundle: PublishedBundle, pagePath: string): (Page & {
+    id: string;
+}) | null;
+/** Gepubliceerd nieuws uit de bundle, aflopend op datum (spiegelt de Firestore `orderBy(date,desc)`). */
+export declare function getBundleNews(bundle: PublishedBundle): NewsArticle[];
+/**
+ * Server-side nieuwsdata voor de publieke nieuws-routes: geef het resultaat door als
+ * `<BlockDataProvider data={{ news }}>` zodat `useNews`/`NewsList` uit de bundle renderen (SSR,
+ * geen browser-Firestore-read). Geeft `null` als er geen bundle (voor deze site) is — dan valt
+ * `useNews` terug op zijn eigen Firestore-pad (admin/preview/dev, ongewijzigd gedrag).
+ */
+export declare function getNewsPageData(siteId: string): NewsArticle[] | null;
+export {};

package/dist/server/bundle.js

@@ -0,0 +1,65 @@
+import "server-only";
+import { cache } from "react";
+import fs from "fs";
+import path from "path";
+const BUNDLE_PATH = "content/published.bundle.json";
+function revive(v) {
+  if (v === null || typeof v !== "object") return v;
+  if (Array.isArray(v)) return v.map(revive);
+  const o = v;
+  if (typeof o._seconds === "number" && typeof o._nanoseconds === "number") {
+    return new Date(o._seconds * 1e3 + Math.round(o._nanoseconds / 1e6)).toISOString();
+  }
+  const out = {};
+  for (const [k, val] of Object.entries(o)) out[k] = revive(val);
+  return out;
+}
+function readBundle() {
+  const file = path.join(process.cwd(), BUNDLE_PATH);
+  let raw;
+  try {
+    raw = fs.readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+  if (!raw.trim()) return null;
+  try {
+    const parsed = revive(JSON.parse(raw));
+    if (!parsed || parsed.version !== 1 || typeof parsed.siteId !== "string") {
+      console.warn(`[xicms] ${BUNDLE_PATH} heeft een onbekende vorm (version/siteId) \u2014 Firestore-fallback wordt gebruikt.`);
+      return null;
+    }
+    return {
+      version: 1,
+      siteId: parsed.siteId,
+      generatedAt: typeof parsed.generatedAt === "string" ? parsed.generatedAt : "",
+      settings: parsed.settings ?? null,
+      pages: Array.isArray(parsed.pages) ? parsed.pages : [],
+      symbols: Array.isArray(parsed.symbols) ? parsed.symbols : [],
+      customBlocks: Array.isArray(parsed.customBlocks) ? parsed.customBlocks : [],
+      news: Array.isArray(parsed.news) ? parsed.news : []
+    };
+  } catch (err) {
+    console.warn(`[xicms] ${BUNDLE_PATH} kon niet geparsed worden \u2014 Firestore-fallback wordt gebruikt:`, err?.message ?? err);
+    return null;
+  }
+}
+const getBundle = cache(readBundle);
+function getBundlePage(bundle, pagePath) {
+  return bundle.pages.find((p) => p.path === pagePath) ?? null;
+}
+function getBundleNews(bundle) {
+  return [...bundle.news].filter((n) => n.published !== false).sort((a, b) => String(b.date ?? "").localeCompare(String(a.date ?? "")));
+}
+function getNewsPageData(siteId) {
+  const bundle = getBundle();
+  if (!bundle || bundle.siteId !== siteId) return null;
+  return getBundleNews(bundle);
+}
+export {
+  getBundle,
+  getBundleNews,
+  getBundlePage,
+  getNewsPageData
+};
+//# sourceMappingURL=bundle.js.map

package/dist/server/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/bundle.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\nimport fs from \"fs\";\nimport path from \"path\";\n\nimport type { Page } from \"../schema/pages\";\nimport type { StoredSymbol } from \"../schema/symbols\";\nimport type { CustomBlock } from \"../schema/customBlocks\";\nimport type { PublicSiteSettings } from \"../schema/settings\";\nimport type { NewsArticle } from \"../content/types\";\n\n/**\n * BUILD-TIME content-bundle READER (5.7).\n *\n * Een klantsite kan de GEPUBLICEERDE, publiek-veilige stand van zijn site lezen uit één\n * gecommit JSON-bestand (`content/published.bundle.json`, in de repo-root) i.p.v. uit Firestore.\n * De Cloud-Function-worker schrijft dat bestand bij elke publicatie en committeert het; een verse\n * build/rebuild heeft dan Firebase NOCH Firestore nodig — puur statische data.\n *\n * Contract: server/pages.ts leest bundle-first. Is er een bundle → serveer daaruit (zelfde\n * return-vormen als de Firestore-readers). Is er GEEN bundle (dev/lokaal, of een repo zonder\n * gecommit bundle) → val ongewijzigd terug op het Admin-SDK / keyless-REST-pad. De reader hier\n * gooit NOOIT: een ontbrekend/leeg/corrupt bestand levert `null` (met één regel warn), zodat de\n * Firestore-fallback het overneemt.\n *\n * De bundle-vorm moet 1-op-1 matchen met de writer (functions/src/lib/bundle.ts).\n */\n\n/** Eén bundle-item: doc-id samengevoegd met (gesaneerde) doc-data. */\nexport type BundleItem = { id: string } & Record<string, unknown>;\n\n/** Canonieke, PUBLIEKE bundle-vorm. Moet 1-op-1 matchen met de writer. */\nexport interface PublishedBundle {\n  version: 1;\n  siteId: string;\n  generatedAt: string; // ISO\n  /** = sites/{siteId}/settings/public (PublicSiteSettings-vorm), of null. */\n  settings: (PublicSiteSettings & Record<string, unknown>) | null;\n  /** ALLEEN gepubliceerde pagina's (status === \"published\"). */\n  pages: Array<Page & { id: string }>;\n  symbols: Array<StoredSymbol>;\n  customBlocks: Array<CustomBlock & { id: string }>;\n  /** ALLEEN gepubliceerd nieuws (published === true). */\n  news: Array<{ id: string } & Record<string, unknown>>;\n}\n\n/** Pad naar het gecommit bundle-bestand, relatief aan de repo-root (process.cwd() bij build/render). */\nconst BUNDLE_PATH = \"content/published.bundle.json\";\n\n/**\n * Serialiseert nog-niet-ge-ISO'de Firestore-Timestamps ({_seconds,_nanoseconds}) alsnog naar ISO.\n * De writer doet dit al, maar de reader blijft defensief: zo kan een handmatig/ouder bundle-bestand\n * geen zod-validatie breken. Recursief, referentie-behoudend is niet nodig (eenmalige read).\n */\nfunction revive(v: unknown): unknown {\n  if (v === null || typeof v !== \"object\") return v;\n  if (Array.isArray(v)) return v.map(revive);\n  const o = v as Record<string, unknown>;\n  if (typeof o._seconds === \"number\" && typeof o._nanoseconds === \"number\") {\n    return new Date(o._seconds * 1000 + Math.round(o._nanoseconds / 1e6)).toISOString();\n  }\n  const out: Record<string, unknown> = {};\n  for (const [k, val] of Object.entries(o)) out[k] = revive(val);\n  return out;\n}\n\nfunction readBundle(): PublishedBundle | null {\n  const file = path.join(process.cwd(), BUNDLE_PATH);\n  let raw: string;\n  try {\n    raw = fs.readFileSync(file, \"utf8\");\n  } catch {\n    // Geen bestand = geen bundle: doodnormaal in dev/lokaal → stil de Firestore-fallback laten winnen.\n    return null;\n  }\n  if (!raw.trim()) return null;\n  try {\n    const parsed = revive(JSON.parse(raw)) as Partial<PublishedBundle>;\n    if (!parsed || parsed.version !== 1 || typeof parsed.siteId !== \"string\") {\n      console.warn(`[xicms] ${BUNDLE_PATH} heeft een onbekende vorm (version/siteId) — Firestore-fallback wordt gebruikt.`);\n      return null;\n    }\n    // Normaliseer de collecties naar arrays (defensief tegen een half-geschreven bestand).\n    return {\n      version: 1,\n      siteId: parsed.siteId,\n      generatedAt: typeof parsed.generatedAt === \"string\" ? parsed.generatedAt : \"\",\n      settings: (parsed.settings as PublishedBundle[\"settings\"]) ?? null,\n      pages: Array.isArray(parsed.pages) ? parsed.pages : [],\n      symbols: Array.isArray(parsed.symbols) ? parsed.symbols : [],\n      customBlocks: Array.isArray(parsed.customBlocks) ? parsed.customBlocks : [],\n      news: Array.isArray(parsed.news) ? parsed.news : [],\n    };\n  } catch (err) {\n    console.warn(`[xicms] ${BUNDLE_PATH} kon niet geparsed worden — Firestore-fallback wordt gebruikt:`, (err as Error)?.message ?? err);\n    return null;\n  }\n}\n\n/**\n * De gecommit content-bundle, of `null` als er geen (bruikbaar) bestand is. Per render-pass één keer\n * gelezen (React `cache()`), zodat alle bundle-first readers dezelfde in-memory kopie delen.\n */\nexport const getBundle = cache(readBundle);\n\n/** Pad-matching gelijk aan server/pages.ts (`path`-veld exact). */\nexport function getBundlePage(bundle: PublishedBundle, pagePath: string): (Page & { id: string }) | null {\n  return bundle.pages.find((p) => p.path === pagePath) ?? null;\n}\n\n/** Gepubliceerd nieuws uit de bundle, aflopend op datum (spiegelt de Firestore `orderBy(date,desc)`). */\nexport function getBundleNews(bundle: PublishedBundle): NewsArticle[] {\n  return [...bundle.news]\n    .filter((n) => (n as { published?: unknown }).published !== false)\n    .sort((a, b) => String(b.date ?? \"\").localeCompare(String(a.date ?? \"\"))) as unknown as NewsArticle[];\n}\n\n/**\n * Server-side nieuwsdata voor de publieke nieuws-routes: geef het resultaat door als\n * `<BlockDataProvider data={{ news }}>` zodat `useNews`/`NewsList` uit de bundle renderen (SSR,\n * geen browser-Firestore-read). Geeft `null` als er geen bundle (voor deze site) is — dan valt\n * `useNews` terug op zijn eigen Firestore-pad (admin/preview/dev, ongewijzigd gedrag).\n */\nexport function getNewsPageData(siteId: string): NewsArticle[] | null {\n  const bundle = getBundle();\n  if (!bundle || bundle.siteId !== siteId) return null;\n  return getBundleNews(bundle);\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AACtB,OAAO,QAAQ;AACf,OAAO,UAAU;AA4CjB,MAAM,cAAc;AAOpB,SAAS,OAAO,GAAqB;AACnC,MAAI,MAAM,QAAQ,OAAO,MAAM,SAAU,QAAO;AAChD,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,MAAM;AACzC,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,aAAa,YAAY,OAAO,EAAE,iBAAiB,UAAU;AACxE,WAAO,IAAI,KAAK,EAAE,WAAW,MAAO,KAAK,MAAM,EAAE,eAAe,GAAG,CAAC,EAAE,YAAY;AAAA,EACpF;AACA,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,GAAG,KAAK,OAAO,QAAQ,CAAC,EAAG,KAAI,CAAC,IAAI,OAAO,GAAG;AAC7D,SAAO;AACT;AAEA,SAAS,aAAqC;AAC5C,QAAM,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,WAAW;AACjD,MAAI;AACJ,MAAI;AACF,UAAM,GAAG,aAAa,MAAM,MAAM;AAAA,EACpC,QAAQ;AAEN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,IAAI,KAAK,EAAG,QAAO;AACxB,MAAI;AACF,UAAM,SAAS,OAAO,KAAK,MAAM,GAAG,CAAC;AACrC,QAAI,CAAC,UAAU,OAAO,YAAY,KAAK,OAAO,OAAO,WAAW,UAAU;AACxE,cAAQ,KAAK,WAAW,WAAW,sFAAiF;AACpH,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO,OAAO,gBAAgB,WAAW,OAAO,cAAc;AAAA,MAC3E,UAAW,OAAO,YAA4C;AAAA,MAC9D,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,MACrD,SAAS,MAAM,QAAQ,OAAO,OAAO,IAAI,OAAO,UAAU,CAAC;AAAA,MAC3D,cAAc,MAAM,QAAQ,OAAO,YAAY,IAAI,OAAO,eAAe,CAAC;AAAA,MAC1E,MAAM,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC;AAAA,IACpD;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,KAAK,WAAW,WAAW,uEAAmE,KAAe,WAAW,GAAG;AACnI,WAAO;AAAA,EACT;AACF;AAMO,MAAM,YAAY,MAAM,UAAU;AAGlC,SAAS,cAAc,QAAyB,UAAkD;AACvG,SAAO,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ,KAAK;AAC1D;AAGO,SAAS,cAAc,QAAwC;AACpE,SAAO,CAAC,GAAG,OAAO,IAAI,EACnB,OAAO,CAAC,MAAO,EAA8B,cAAc,KAAK,EAChE,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE,QAAQ,EAAE,EAAE,cAAc,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5E;AAQO,SAAS,gBAAgB,QAAsC;AACpE,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,UAAU,OAAO,WAAW,OAAQ,QAAO;AAChD,SAAO,cAAc,MAAM;AAC7B;","names":[]}

package/dist/server/index.d.ts

@@ -10,4 +10,5 @@ export { buildMetadata, buildJsonLd, buildSitemap, buildRobots, siteOrigin, busi
 export { validateEnv, assertEnv, type EnvReport } from "./env";
 export { getActiveProducts, getShopCategories, getProductBySlug, getShopPageData, buildProductMetadata, buildProductJsonLd, type ServerProduct, type ServerShopCategory, type ShopPageData, } from "./shop";
 export { pathFromSlugs, listPublishedPages, getPublishedPageByPath, getPublishedPageByPathExpanded, getSiteSymbols, expandSymbols, getSiteCustomBlocks, getPublicSiteSettings, getDraftPageById, getDraftPageByPath, type StoredPage, } from "./pages";
+export { getBundle, getBundlePage, getBundleNews, getNewsPageData, type PublishedBundle, type BundleItem, } from "./bundle";
 export { siteLocales, parseLocaleSlugs, localizedPath, localizePage, localizeBlocks, pruneTranslations, TranslationsSchema, type Translations, type LocaleConfig, } from "../i18n/overlay";

package/dist/server/index.js

@@ -37,6 +37,12 @@ import {
   getDraftPageById,
   getDraftPageByPath
 } from "./pages";
+import {
+  getBundle,
+  getBundlePage,
+  getBundleNews,
+  getNewsPageData
+} from "./bundle";
 import {
   siteLocales,
   parseLocaleSlugs,
@@ -64,8 +70,12 @@ export {
   getAdminApp,
   getAdminAuth,
   getAdminDb,
+  getBundle,
+  getBundleNews,
+  getBundlePage,
   getDraftPageById,
   getDraftPageByPath,
+  getNewsPageData,
   getProductBySlug,
   getPublicSiteSettings,
   getPublishedPageByPath,

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/index.ts"],"sourcesContent":["/**\n * @xiwebdesign/xicms-core/server — server-only helpers (firebase-admin, sanitization, SEO,\n * pagina-reads). NOOIT importeren in client-componenten.\n */\nimport \"server-only\";\n\nexport { getAdminApp, getAdminAuth, getAdminDb } from \"../firebase/admin\";\nexport { sanitizeRichText } from \"./sanitize\";\n// Veilige JSON-LD-serialisatie voor <script type=\"application/ld+json\"> in consumer-routes\n// (escapet `<` zodat klant-tekst met </script> de pagina niet kan breken).\nexport { jsonLdHtml } from \"../blocks/builtins/jsonld\";\nexport {\n  buildMetadata,\n  buildJsonLd,\n  buildSitemap,\n  buildRobots,\n  siteOrigin,\n  businessJsonLd,\n  breadcrumbListJsonLd,\n  articleJsonLd,\n  productJsonLd,\n  openingHoursJsonLd,\n  galleryJsonLd,\n  videoObjectJsonLd,\n  type BusinessInfo,\n} from \"./seo\";\nexport { validateEnv, assertEnv, type EnvReport } from \"./env\";\n// Shop-SSR (5.6): server-readers + product-SEO. Zie getShopPageData voor het blockData-patroon.\nexport {\n  getActiveProducts,\n  getShopCategories,\n  getProductBySlug,\n  getShopPageData,\n  buildProductMetadata,\n  buildProductJsonLd,\n  type ServerProduct,\n  type ServerShopCategory,\n  type ShopPageData,\n} from \"./shop\";\nexport {\n  pathFromSlugs,\n  listPublishedPages,\n  getPublishedPageByPath,\n  getPublishedPageByPathExpanded,\n  getSiteSymbols,\n  expandSymbols,\n  getSiteCustomBlocks,\n  getPublicSiteSettings,\n  getDraftPageById,\n  getDraftPageByPath,\n  type StoredPage,\n} from \"./pages\";\n// Localisatie (5.0) — server-safe overlay-helpers, ook bruikbaar in route-handlers/layouts.\nexport {\n  siteLocales,\n  parseLocaleSlugs,\n  localizedPath,\n  localizePage,\n  localizeBlocks,\n  pruneTranslations,\n  TranslationsSchema,\n  type Translations,\n  type LocaleConfig,\n} from \"../i18n/overlay\";\n"],"mappings":"AAIA,OAAO;AAEP,SAAS,aAAa,cAAc,kBAAkB;AACtD,SAAS,wBAAwB;AAGjC,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,aAAa,iBAAiC;AAEvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;","names":[]}
+{"version":3,"sources":["../../src/server/index.ts"],"sourcesContent":["/**\n * @xiwebdesign/xicms-core/server — server-only helpers (firebase-admin, sanitization, SEO,\n * pagina-reads). NOOIT importeren in client-componenten.\n */\nimport \"server-only\";\n\nexport { getAdminApp, getAdminAuth, getAdminDb } from \"../firebase/admin\";\nexport { sanitizeRichText } from \"./sanitize\";\n// Veilige JSON-LD-serialisatie voor <script type=\"application/ld+json\"> in consumer-routes\n// (escapet `<` zodat klant-tekst met </script> de pagina niet kan breken).\nexport { jsonLdHtml } from \"../blocks/builtins/jsonld\";\nexport {\n  buildMetadata,\n  buildJsonLd,\n  buildSitemap,\n  buildRobots,\n  siteOrigin,\n  businessJsonLd,\n  breadcrumbListJsonLd,\n  articleJsonLd,\n  productJsonLd,\n  openingHoursJsonLd,\n  galleryJsonLd,\n  videoObjectJsonLd,\n  type BusinessInfo,\n} from \"./seo\";\nexport { validateEnv, assertEnv, type EnvReport } from \"./env\";\n// Shop-SSR (5.6): server-readers + product-SEO. Zie getShopPageData voor het blockData-patroon.\nexport {\n  getActiveProducts,\n  getShopCategories,\n  getProductBySlug,\n  getShopPageData,\n  buildProductMetadata,\n  buildProductJsonLd,\n  type ServerProduct,\n  type ServerShopCategory,\n  type ShopPageData,\n} from \"./shop\";\nexport {\n  pathFromSlugs,\n  listPublishedPages,\n  getPublishedPageByPath,\n  getPublishedPageByPathExpanded,\n  getSiteSymbols,\n  expandSymbols,\n  getSiteCustomBlocks,\n  getPublicSiteSettings,\n  getDraftPageById,\n  getDraftPageByPath,\n  type StoredPage,\n} from \"./pages\";\n// Content-bundle (5.7): build-time reader van `content/published.bundle.json`. De pagina-/settings-/\n// symbol-/customBlock-readers hierboven zijn al bundle-first; deze exports zijn voor directe\n// consumptie (bv. nieuws-blockData in de klant-routes).\nexport {\n  getBundle,\n  getBundlePage,\n  getBundleNews,\n  getNewsPageData,\n  type PublishedBundle,\n  type BundleItem,\n} from \"./bundle\";\n// Localisatie (5.0) — server-safe overlay-helpers, ook bruikbaar in route-handlers/layouts.\nexport {\n  siteLocales,\n  parseLocaleSlugs,\n  localizedPath,\n  localizePage,\n  localizeBlocks,\n  pruneTranslations,\n  TranslationsSchema,\n  type Translations,\n  type LocaleConfig,\n} from \"../i18n/overlay\";\n"],"mappings":"AAIA,OAAO;AAEP,SAAS,aAAa,cAAc,kBAAkB;AACtD,SAAS,wBAAwB;AAGjC,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,aAAa,iBAAiC;AAEvD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;","names":[]}

package/dist/server/pages.d.ts

@@ -3,12 +3,21 @@ import { type Page } from "../schema/pages";
 import { type StoredSymbol } from "../schema/symbols";
 import { type CustomBlock } from "../schema/customBlocks";
 import { type PublicSiteSettings } from "../schema/settings";
+/**
+ * BUNDLE-FIRST, Firestore-fallback (5.7).
+ *
+ * Elke publieke reader hieronder kijkt eerst of er een gecommit content-bundle is (server/bundle.ts,
+ * `content/published.bundle.json`). Zo ja → serveer daaruit met exact dezelfde return-vormen als het
+ * Firestore-pad (incl. schema-validatie, i18n-overlay en symbol-expansie). Zo nee (dev/lokaal of een
+ * repo zonder gecommit bundle) → val ongewijzigd terug op de Admin-SDK / keyless-REST-implementatie.
+ * De bundle-tak is puur additief: signatures en gedrag van de fallback blijven identiek.
+ */
 export type StoredPage = Page & {
     id: string;
 };
 /** Pad uit Next catch-all params (`[[...slug]]`). "/" voor de root. */
 export declare function pathFromSlugs(slugs: string[] | undefined): string;
-/** Alle gepubliceerde pagina's (sitemap / generateStaticParams). Keyless via REST als geen Admin. */
+/** Alle gepubliceerde pagina's (sitemap / generateStaticParams). Bundle-first, anders keyless/Admin. */
 export declare function listPublishedPages(siteId: string): Promise<StoredPage[]>;
 /**
  * Per-request-dedup via React cache(): metadata (generateMetadata) én de render lezen dezelfde
@@ -20,13 +29,13 @@ export declare const getPublishedPageByPath: typeof getPublishedPageByPathUncach
 export declare const getSiteSymbols: typeof getSiteSymbolsUncached;
 export declare const getSiteCustomBlocks: typeof getSiteCustomBlocksUncached;
 export declare const getPublicSiteSettings: typeof getPublicSiteSettingsUncached;
-/** Eén gepubliceerde pagina op pad. Keyless via REST als geen Admin. */
+/** Eén gepubliceerde pagina op pad. Bundle-first, anders keyless via REST/Admin. */
 declare function getPublishedPageByPathUncached(siteId: string, path: string): Promise<StoredPage | null>;
 /** Draft-versie (voor preview achter auth). */
 export declare function getDraftPageById(siteId: string, pageId: string): Promise<StoredPage | null>;
 /** Draft op pad (preview). */
 export declare function getDraftPageByPath(siteId: string, path: string): Promise<StoredPage | null>;
-/** Alle symbolen van een site (gevalideerd; ongeldige overgeslagen met waarschuwing). */
+/** Alle symbolen van een site (gevalideerd; ongeldige overgeslagen met waarschuwing). Bundle-first. */
 declare function getSiteSymbolsUncached(siteId: string): Promise<StoredSymbol[]>;
 /**
  * Vervangt symbolRef-blokken door de blokken van hun symbool (één niveau — symbolen kunnen zelf
@@ -41,6 +50,10 @@ export declare function expandSymbols<T extends {
  * Gepubliceerde pagina op pad mét symbolRef-expansie (SEO: symboolinhoud zit in de SSR-HTML).
  * Geef `locale` mee (een NIET-default taal) om de vertaal-overlay toe te passen — op de pagina
  * én op de ingevoegde symbolen (elk symbool draagt zijn eigen `translations`).
+ *
+ * Bundle-first werkt hier automatisch: deze functie componeert `getPublishedPageByPath` en
+ * `getSiteSymbols`, die beide al bundle-first zijn — de i18n-overlay en expansie draaien identiek
+ * op bundle- én Firestore-data.
  */
 export declare function getPublishedPageByPathExpanded(siteId: string, path: string, locale?: string): Promise<StoredPage | null>;
 /**
@@ -51,6 +64,6 @@ export declare function getPublishedPageByPathExpanded(siteId: string, path: str
  * Fouten leveren `{}` op — de site valt dan terug op de statische SiteConfig.
  */
 declare function getPublicSiteSettingsUncached(siteId: string): Promise<PublicSiteSettings>;
-/** Alle custom blocks van een site (gevalideerd) — voor SSR-registratie via XiCMSProvider. */
+/** Alle custom blocks van een site (gevalideerd) — voor SSR-registratie via XiCMSProvider. Bundle-first. */
 declare function getSiteCustomBlocksUncached(siteId: string): Promise<CustomBlock[]>;
 export {};

package/dist/server/pages.js

@@ -6,6 +6,7 @@ import { SymbolSchema } from "../schema/symbols";
 import { CustomBlockSchema } from "../schema/customBlocks";
 import { PublicSiteSettingsSchema } from "../schema/settings";
 import { localizePage, localizeBlocks } from "../i18n/overlay";
+import { getBundle, getBundlePage } from "./bundle";
 function toPath(slugs) {
   const clean = (slugs ?? []).filter(Boolean);
   return "/" + clean.join("/");
@@ -75,6 +76,10 @@ async function restQuery(siteId, filters, limit) {
   }
 }
 async function listPublishedPages(siteId) {
+  const bundle = getBundle();
+  if (bundle && bundle.siteId === siteId) {
+    return bundle.pages.map((p) => parse(p.id, p)).filter((p) => p !== null);
+  }
   const adb = getAdminDb();
   if (adb) {
     return safeAdminRead([], `listPublishedPages ${siteId}`, async () => {
@@ -89,6 +94,11 @@ const getSiteSymbols = cache(getSiteSymbolsUncached);
 const getSiteCustomBlocks = cache(getSiteCustomBlocksUncached);
 const getPublicSiteSettings = cache(getPublicSiteSettingsUncached);
 async function getPublishedPageByPathUncached(siteId, path) {
+  const bundle = getBundle();
+  if (bundle && bundle.siteId === siteId) {
+    const hit = getBundlePage(bundle, path);
+    return hit ? parse(hit.id, hit) : null;
+  }
   const adb = getAdminDb();
   if (adb) {
     return safeAdminRead(null, `getPublishedPageByPath ${siteId}${path}`, async () => {
@@ -145,7 +155,8 @@ async function readCollection(siteId, collectionId) {
   }
 }
 async function getSiteSymbolsUncached(siteId) {
-  const rows = await readCollection(siteId, "symbols");
+  const bundle = getBundle();
+  const rows = bundle && bundle.siteId === siteId ? bundle.symbols.map((s) => ({ id: s.id, data: s })) : await readCollection(siteId, "symbols");
   const out = [];
   for (const r of rows) {
     const res = SymbolSchema.safeParse(r.data);
@@ -180,6 +191,11 @@ async function getPublishedPageByPathExpanded(siteId, path, locale) {
   return expandSymbols(page, symbols);
 }
 async function getPublicSiteSettingsUncached(siteId) {
+  const bundle = getBundle();
+  if (bundle && bundle.siteId === siteId) {
+    const parsed2 = PublicSiteSettingsSchema.safeParse(bundle.settings ?? {});
+    return parsed2.success ? parsed2.data : {};
+  }
   const adb = getAdminDb();
   let data = {};
   if (adb) {
@@ -207,7 +223,8 @@ async function getPublicSiteSettingsUncached(siteId) {
   return parsed.success ? parsed.data : {};
 }
 async function getSiteCustomBlocksUncached(siteId) {
-  const rows = await readCollection(siteId, "customBlocks");
+  const bundle = getBundle();
+  const rows = bundle && bundle.siteId === siteId ? bundle.customBlocks.map((c) => ({ id: c.id, data: c })) : await readCollection(siteId, "customBlocks");
   const out = [];
   for (const r of rows) {
     const res = CustomBlockSchema.safeParse({ ...r.data, type: r.data.type ?? r.id });

package/dist/server/pages.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/pages.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\n\nimport { getAdminDb } from \"../firebase/admin\";\nimport { PageSchema, type Page } from \"../schema/pages\";\nimport { SymbolSchema, type StoredSymbol } from \"../schema/symbols\";\nimport { CustomBlockSchema, type CustomBlock } from \"../schema/customBlocks\";\nimport { PublicSiteSettingsSchema, type PublicSiteSettings } from \"../schema/settings\";\nimport { localizePage, localizeBlocks } from \"../i18n/overlay\";\n\nexport type StoredPage = Page & { id: string };\n\nfunction toPath(slugs: string[] | undefined): string {\n  const clean = (slugs ?? []).filter(Boolean);\n  return \"/\" + clean.join(\"/\");\n}\n\n/** Pad uit Next catch-all params (`[[...slug]]`). \"/\" voor de root. */\nexport function pathFromSlugs(slugs: string[] | undefined): string {\n  const p = toPath(slugs);\n  return p === \"/\" ? \"/\" : p.replace(/\\/$/, \"\");\n}\n\nfunction parse(id: string, data: unknown): StoredPage | null {\n  const res = PageSchema.safeParse(data);\n  if (!res.success) {\n    // Niet stil 404'en: een gepubliceerde pagina die het schema niet haalt is een diagnose-signaal\n    // (schema-evolutie zonder default, of corrupte write) — zelfde patroon als symbols/customBlocks.\n    console.warn(`[xicms] pagina \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\n/**\n * Admin-SDK-reads mogen een PUBLIEKE pagina nooit laten 500'en — zelfde belofte als het REST-pad\n * (dat al overal try/catch → lege fallback heeft). Een Firestore-hikje wordt gelogd en levert de\n * fallback op; de route rendert dan 404/fallback i.p.v. een servererror.\n */\nasync function safeAdminRead<T>(fallback: T, what: string, fn: () => Promise<T>): Promise<T> {\n  try {\n    return await fn();\n  } catch (e) {\n    console.warn(`[xicms] Admin-read mislukt (${what}) — fallback gebruikt:`, (e as Error)?.message ?? e);\n    return fallback;\n  }\n}\n\n/* ---------------- keyless public reads via Firestore REST (alleen apiKey) ----------------\n * Gepubliceerde pagina's zijn publiek leesbaar (rules). De Firestore REST-API honoreert die\n * rules met enkel de web-apiKey (geen Admin-credentials, geen client-SDK), dus dit werkt\n * server-side op keyless deployments (org-policy zonder service-account-keys).\n */\ntype FsValue = Record<string, unknown>;\nfunction decode(v: FsValue): unknown {\n  if (v == null) return null;\n  if (\"stringValue\" in v) return v.stringValue;\n  if (\"integerValue\" in v) return Number(v.integerValue);\n  if (\"doubleValue\" in v) return v.doubleValue;\n  if (\"booleanValue\" in v) return v.booleanValue;\n  if (\"nullValue\" in v) return null;\n  if (\"timestampValue\" in v) return v.timestampValue;\n  if (\"referenceValue\" in v) return v.referenceValue;\n  if (\"geoPointValue\" in v) return v.geoPointValue;\n  if (\"arrayValue\" in v) return (((v.arrayValue as FsValue)?.values as FsValue[]) ?? []).map(decode);\n  if (\"mapValue\" in v) return decodeFields(((v.mapValue as FsValue)?.fields as Record<string, FsValue>) ?? {});\n  return null;\n}\nfunction decodeFields(fields: Record<string, FsValue>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).map(([k, x]) => [k, decode(x)]));\n}\n\ninterface Filter { fieldFilter: { field: { fieldPath: string }; op: \"EQUAL\"; value: { stringValue: string } } }\nfunction eq(fieldPath: string, value: string): Filter {\n  return { fieldFilter: { field: { fieldPath }, op: \"EQUAL\", value: { stringValue: value } } };\n}\n\nasync function restQuery(siteId: string, filters: Filter[], limit?: number): Promise<StoredPage[]> {\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  const where = filters.length === 1 ? filters[0] : { compositeFilter: { op: \"AND\", filters } };\n  const structuredQuery: Record<string, unknown> = { from: [{ collectionId: \"pages\" }], where };\n  if (limit) structuredQuery.limit = limit;\n  // Netwerk-/parsefouten mogen een publieke pagina nooit laten crashen (500) — dan liever een\n  // lege lijst (Next toont dan een 404 of de fallback, en de volgende revalidate probeert opnieuw).\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery }),\n      // Pagina's zijn ISR-gecached; next-cache mag dit hergebruiken.\n      next: { revalidate: 300 },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => parse(r.document!.name.split(\"/\").pop()!, decodeFields(r.document!.fields)))\n      .filter((p): p is StoredPage => p !== null);\n  } catch (err) {\n    console.error(\"[xicms] Firestore REST-query mislukt:\", err);\n    return [];\n  }\n}\n\n/** Alle gepubliceerde pagina's (sitemap / generateStaticParams). Keyless via REST als geen Admin. */\nexport async function listPublishedPages(siteId: string): Promise<StoredPage[]> {\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead([], `listPublishedPages ${siteId}`, async () => {\n      const snap = await adb.collection(`sites/${siteId}/pages`).where(\"status\", \"==\", \"published\").get();\n      return snap.docs.map((d) => parse(d.id, d.data())).filter((p): p is StoredPage => p !== null);\n    });\n  }\n  return restQuery(siteId, [eq(\"status\", \"published\")]);\n}\n\n/**\n * Per-request-dedup via React cache(): metadata (generateMetadata) én de render lezen dezelfde\n * pagina — zonder cache() waren dat twee identieke Firestore-reads per request. NB: de\n * `next:{revalidate}`-hint op het REST-pad dekt dit niet (POST-fetches cachen niet); route-level\n * ISR (revalidate=300 in de consumer) blijft de echte kosten-demper tussen requests.\n */\nexport const getPublishedPageByPath = cache(getPublishedPageByPathUncached);\nexport const getSiteSymbols = cache(getSiteSymbolsUncached);\nexport const getSiteCustomBlocks = cache(getSiteCustomBlocksUncached);\nexport const getPublicSiteSettings = cache(getPublicSiteSettingsUncached);\n\n/** Eén gepubliceerde pagina op pad. Keyless via REST als geen Admin. */\nasync function getPublishedPageByPathUncached(siteId: string, path: string): Promise<StoredPage | null> {\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead(null, `getPublishedPageByPath ${siteId}${path}`, async () => {\n      const snap = await adb\n        .collection(`sites/${siteId}/pages`)\n        .where(\"status\", \"==\", \"published\")\n        .where(\"path\", \"==\", path)\n        .limit(1)\n        .get();\n      const d = snap.docs[0];\n      return d ? parse(d.id, d.data()) : null;\n    });\n  }\n  const rows = await restQuery(siteId, [eq(\"status\", \"published\"), eq(\"path\", path)], 1);\n  return rows[0] ?? null;\n}\n\n/** Draft-versie (voor preview achter auth). */\nexport async function getDraftPageById(siteId: string, pageId: string): Promise<StoredPage | null> {\n  const db = getAdminDb();\n  if (!db) return null;\n  return safeAdminRead(null, `getDraftPageById ${siteId}/${pageId}`, async () => {\n    const d = await db.doc(`sites/${siteId}/drafts/${pageId}`).get();\n    return d.exists ? parse(d.id, d.data()) : null;\n  });\n}\n\n/** Draft op pad (preview). */\nexport async function getDraftPageByPath(siteId: string, path: string): Promise<StoredPage | null> {\n  const db = getAdminDb();\n  if (!db) return null;\n  return safeAdminRead(null, `getDraftPageByPath ${siteId}${path}`, async () => {\n    const snap = await db.collection(`sites/${siteId}/drafts`).where(\"path\", \"==\", path).limit(1).get();\n    const d = snap.docs[0];\n    return d ? parse(d.id, d.data()) : null;\n  });\n}\n\n/* ---------------- symbols & custom blocks (5.0) ---------------- */\n\n/** Generieke publieke collectie-read onder sites/{siteId}/ — Admin als beschikbaar, anders REST. */\nasync function readCollection(siteId: string, collectionId: string): Promise<{ id: string; data: Record<string, unknown> }[]> {\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead([], `readCollection ${siteId}/${collectionId}`, async () => {\n      const snap = await adb.collection(`sites/${siteId}/${collectionId}`).get();\n      return snap.docs.map((d) => ({ id: d.id, data: d.data() as Record<string, unknown> }));\n    });\n  }\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery: { from: [{ collectionId }] } }),\n      next: { revalidate: 300 },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => ({ id: r.document!.name.split(\"/\").pop()!, data: decodeFields(r.document!.fields ?? {}) }));\n  } catch (err) {\n    console.error(`[xicms] Firestore REST-read van ${collectionId} mislukt:`, err);\n    return [];\n  }\n}\n\n/** Alle symbolen van een site (gevalideerd; ongeldige overgeslagen met waarschuwing). */\nasync function getSiteSymbolsUncached(siteId: string): Promise<StoredSymbol[]> {\n  const rows = await readCollection(siteId, \"symbols\");\n  const out: StoredSymbol[] = [];\n  for (const r of rows) {\n    const res = SymbolSchema.safeParse(r.data);\n    if (res.success) out.push({ id: r.id, ...res.data });\n    else console.warn(`[xicms] symbool \"${r.id}\" ongeldig — overgeslagen.`);\n  }\n  return out;\n}\n\n/**\n * Vervangt symbolRef-blokken door de blokken van hun symbool (één niveau — symbolen kunnen zelf\n * geen symbolRef bevatten). `_key`s van de ingevoegde blokken worden geprefixt met de ref-key\n * zodat ze uniek blijven wanneer hetzelfde symbool vaker op een pagina staat. Verweesde refs\n * verdwijnen stil (de pagina mag nooit breken op een verwijderd symbool).\n */\nexport function expandSymbols<T extends { blocks?: unknown[] }>(page: T, symbols: StoredSymbol[]): T {\n  const byId = new Map(symbols.map((s) => [s.id, s]));\n  const blocks = (page.blocks ?? []).flatMap((b) => {\n    const blk = b as { _type?: string; _key?: string; symbolId?: string };\n    if (blk?._type !== \"symbolRef\") return [b];\n    const sym = blk.symbolId ? byId.get(blk.symbolId) : undefined;\n    if (!sym) return [];\n    return sym.blocks.map((sb, i) => ({ ...(sb as Record<string, unknown>), _key: `${blk._key ?? \"sym\"}-${(sb as { _key?: string })._key ?? i}` }));\n  });\n  return { ...page, blocks };\n}\n\n/**\n * Gepubliceerde pagina op pad mét symbolRef-expansie (SEO: symboolinhoud zit in de SSR-HTML).\n * Geef `locale` mee (een NIET-default taal) om de vertaal-overlay toe te passen — op de pagina\n * én op de ingevoegde symbolen (elk symbool draagt zijn eigen `translations`).\n */\nexport async function getPublishedPageByPathExpanded(\n  siteId: string,\n  path: string,\n  locale?: string,\n): Promise<StoredPage | null> {\n  let page = await getPublishedPageByPath(siteId, path);\n  if (!page) return null;\n  // De caller geeft alléén een niet-default taal door; \"\" als default matcht dus nooit.\n  if (locale) page = localizePage(page, locale, \"\");\n  if (!(page.blocks ?? []).some((b) => (b as { _type?: string })._type === \"symbolRef\")) return page;\n  let symbols = await getSiteSymbols(siteId);\n  if (locale) {\n    symbols = symbols.map((s) => ({\n      ...s,\n      blocks: localizeBlocks(s.blocks as Array<{ _key?: string }>, s.translations?.[locale]) as typeof s.blocks,\n    }));\n  }\n  return expandSymbols(page, symbols);\n}\n\n/**\n * Publieke site-instellingen (`sites/{siteId}/settings/public`) server-side — voor de\n * `settingsData`-prop van XiCMSProvider. Zo zit het klant-thema/nav/footer al in de server-HTML\n * (geen theme-flits bij eerste paint) én vervalt de per-bezoeker `getDoc` in de browser: de\n * layout-route is ISR-gecached, dus dit kost ~1 read per revalidate i.p.v. per bezoeker.\n * Fouten leveren `{}` op — de site valt dan terug op de statische SiteConfig.\n */\nasync function getPublicSiteSettingsUncached(siteId: string): Promise<PublicSiteSettings> {\n  const adb = getAdminDb();\n  let data: unknown = {};\n  if (adb) {\n    data = await safeAdminRead<unknown>({}, `getPublicSiteSettings ${siteId}`, async () => {\n      const d = await adb.doc(`sites/${siteId}/settings/public`).get();\n      return d.exists ? d.data() : {};\n    });\n  } else {\n    const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n    const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n    if (apiKey && projectId) {\n      const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}/settings/public?key=${apiKey}`;\n      try {\n        // GET-fetches worden — anders dan de runQuery-POSTs — wél door de Next-datacache gedekt.\n        const res = await fetch(url, { next: { revalidate: 300 } });\n        if (res.ok) {\n          const doc = (await res.json()) as { fields?: Record<string, FsValue> };\n          data = decodeFields(doc.fields ?? {});\n        }\n      } catch (err) {\n        console.error(\"[xicms] Firestore REST-read van settings/public mislukt:\", err);\n      }\n    }\n  }\n  const parsed = PublicSiteSettingsSchema.safeParse(data ?? {});\n  return parsed.success ? parsed.data : {};\n}\n\n/** Alle custom blocks van een site (gevalideerd) — voor SSR-registratie via XiCMSProvider. */\nasync function getSiteCustomBlocksUncached(siteId: string): Promise<CustomBlock[]> {\n  const rows = await readCollection(siteId, \"customBlocks\");\n  const out: CustomBlock[] = [];\n  for (const r of rows) {\n    const res = CustomBlockSchema.safeParse({ ...r.data, type: r.data.type ?? r.id });\n    if (res.success) out.push(res.data);\n    else console.warn(`[xicms] custom block \"${r.id}\" ongeldig — overgeslagen.`);\n  }\n  return out;\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,kBAAkB;AAC3B,SAAS,kBAA6B;AACtC,SAAS,oBAAuC;AAChD,SAAS,yBAA2C;AACpD,SAAS,gCAAyD;AAClE,SAAS,cAAc,sBAAsB;AAI7C,SAAS,OAAO,OAAqC;AACnD,QAAM,SAAS,SAAS,CAAC,GAAG,OAAO,OAAO;AAC1C,SAAO,MAAM,MAAM,KAAK,GAAG;AAC7B;AAGO,SAAS,cAAc,OAAqC;AACjE,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,MAAM,MAAM,MAAM,EAAE,QAAQ,OAAO,EAAE;AAC9C;AAEA,SAAS,MAAM,IAAY,MAAkC;AAC3D,QAAM,MAAM,WAAW,UAAU,IAAI;AACrC,MAAI,CAAC,IAAI,SAAS;AAGhB,YAAQ,KAAK,mBAAmB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AACxG,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAOA,eAAe,cAAiB,UAAa,MAAc,IAAkC;AAC3F,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,SAAS,GAAG;AACV,YAAQ,KAAK,+BAA+B,IAAI,+BAA2B,GAAa,WAAW,CAAC;AACpG,WAAO;AAAA,EACT;AACF;AAQA,SAAS,OAAO,GAAqB;AACnC,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,OAAO,EAAE,YAAY;AACrD,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,EAAE;AAClC,MAAI,eAAe,EAAG,QAAO;AAC7B,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,mBAAmB,EAAG,QAAO,EAAE;AACnC,MAAI,gBAAgB,EAAG,SAAU,EAAE,YAAwB,UAAwB,CAAC,GAAG,IAAI,MAAM;AACjG,MAAI,cAAc,EAAG,QAAO,aAAe,EAAE,UAAsB,UAAsC,CAAC,CAAC;AAC3G,SAAO;AACT;AACA,SAAS,aAAa,QAA0D;AAC9E,SAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF;AAGA,SAAS,GAAG,WAAmB,OAAuB;AACpD,SAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,SAAS,OAAO,EAAE,aAAa,MAAM,EAAE,EAAE;AAC7F;AAEA,eAAe,UAAU,QAAgB,SAAmB,OAAuC;AACjG,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,QAAM,QAAQ,QAAQ,WAAW,IAAI,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,OAAO,QAAQ,EAAE;AAC5F,QAAM,kBAA2C,EAAE,MAAM,CAAC,EAAE,cAAc,QAAQ,CAAC,GAAG,MAAM;AAC5F,MAAI,MAAO,iBAAgB,QAAQ;AAGnC,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,gBAAgB,CAAC;AAAA;AAAA,MAExC,MAAM,EAAE,YAAY,IAAI;AAAA,IAC1B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,MAAM,MAAM,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,aAAa,EAAE,SAAU,MAAM,CAAC,CAAC,EACtF,OAAO,CAAC,MAAuB,MAAM,IAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,YAAQ,MAAM,yCAAyC,GAAG;AAC1D,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAsB,mBAAmB,QAAuC;AAC9E,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,CAAC,GAAG,sBAAsB,MAAM,IAAI,YAAY;AACnE,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,QAAQ,EAAE,MAAM,UAAU,MAAM,WAAW,EAAE,IAAI;AAClG,aAAO,KAAK,KAAK,IAAI,CAAC,MAAM,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAuB,MAAM,IAAI;AAAA,IAC9F,CAAC;AAAA,EACH;AACA,SAAO,UAAU,QAAQ,CAAC,GAAG,UAAU,WAAW,CAAC,CAAC;AACtD;AAQO,MAAM,yBAAyB,MAAM,8BAA8B;AACnE,MAAM,iBAAiB,MAAM,sBAAsB;AACnD,MAAM,sBAAsB,MAAM,2BAA2B;AAC7D,MAAM,wBAAwB,MAAM,6BAA6B;AAGxE,eAAe,+BAA+B,QAAgB,MAA0C;AACtG,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,MAAM,0BAA0B,MAAM,GAAG,IAAI,IAAI,YAAY;AAChF,YAAM,OAAO,MAAM,IAChB,WAAW,SAAS,MAAM,QAAQ,EAClC,MAAM,UAAU,MAAM,WAAW,EACjC,MAAM,QAAQ,MAAM,IAAI,EACxB,MAAM,CAAC,EACP,IAAI;AACP,YAAM,IAAI,KAAK,KAAK,CAAC;AACrB,aAAO,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,IACrC,CAAC;AAAA,EACH;AACA,QAAM,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG,UAAU,WAAW,GAAG,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC;AACrF,SAAO,KAAK,CAAC,KAAK;AACpB;AAGA,eAAsB,iBAAiB,QAAgB,QAA4C;AACjG,QAAM,KAAK,WAAW;AACtB,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO,cAAc,MAAM,oBAAoB,MAAM,IAAI,MAAM,IAAI,YAAY;AAC7E,UAAM,IAAI,MAAM,GAAG,IAAI,SAAS,MAAM,WAAW,MAAM,EAAE,EAAE,IAAI;AAC/D,WAAO,EAAE,SAAS,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,EAC5C,CAAC;AACH;AAGA,eAAsB,mBAAmB,QAAgB,MAA0C;AACjG,QAAM,KAAK,WAAW;AACtB,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO,cAAc,MAAM,sBAAsB,MAAM,GAAG,IAAI,IAAI,YAAY;AAC5E,UAAM,OAAO,MAAM,GAAG,WAAW,SAAS,MAAM,SAAS,EAAE,MAAM,QAAQ,MAAM,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI;AAClG,UAAM,IAAI,KAAK,KAAK,CAAC;AACrB,WAAO,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,EACrC,CAAC;AACH;AAKA,eAAe,eAAe,QAAgB,cAAgF;AAC5H,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,CAAC,GAAG,kBAAkB,MAAM,IAAI,YAAY,IAAI,YAAY;AAC/E,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,IAAI,YAAY,EAAE,EAAE,IAAI;AACzE,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAA6B,EAAE;AAAA,IACvF,CAAC;AAAA,EACH;AACA,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC;AAAA,MACtE,MAAM,EAAE,YAAY,IAAI;AAAA,IAC1B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,MAAM,aAAa,EAAE,SAAU,UAAU,CAAC,CAAC,EAAE,EAAE;AAAA,EAC1G,SAAS,KAAK;AACZ,YAAQ,MAAM,mCAAmC,YAAY,aAAa,GAAG;AAC7E,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAe,uBAAuB,QAAyC;AAC7E,QAAM,OAAO,MAAM,eAAe,QAAQ,SAAS;AACnD,QAAM,MAAsB,CAAC;AAC7B,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,aAAa,UAAU,EAAE,IAAI;AACzC,QAAI,IAAI,QAAS,KAAI,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,CAAC;AAAA,QAC9C,SAAQ,KAAK,oBAAoB,EAAE,EAAE,iCAA4B;AAAA,EACxE;AACA,SAAO;AACT;AAQO,SAAS,cAAgD,MAAS,SAA4B;AACnG,QAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,QAAM,UAAU,KAAK,UAAU,CAAC,GAAG,QAAQ,CAAC,MAAM;AAChD,UAAM,MAAM;AACZ,QAAI,KAAK,UAAU,YAAa,QAAO,CAAC,CAAC;AACzC,UAAM,MAAM,IAAI,WAAW,KAAK,IAAI,IAAI,QAAQ,IAAI;AACpD,QAAI,CAAC,IAAK,QAAO,CAAC;AAClB,WAAO,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,EAAE,GAAI,IAAgC,MAAM,GAAG,IAAI,QAAQ,KAAK,IAAK,GAAyB,QAAQ,CAAC,GAAG,EAAE;AAAA,EAChJ,CAAC;AACD,SAAO,EAAE,GAAG,MAAM,OAAO;AAC3B;AAOA,eAAsB,+BACpB,QACA,MACA,QAC4B;AAC5B,MAAI,OAAO,MAAM,uBAAuB,QAAQ,IAAI;AACpD,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI,OAAQ,QAAO,aAAa,MAAM,QAAQ,EAAE;AAChD,MAAI,EAAE,KAAK,UAAU,CAAC,GAAG,KAAK,CAAC,MAAO,EAAyB,UAAU,WAAW,EAAG,QAAO;AAC9F,MAAI,UAAU,MAAM,eAAe,MAAM;AACzC,MAAI,QAAQ;AACV,cAAU,QAAQ,IAAI,CAAC,OAAO;AAAA,MAC5B,GAAG;AAAA,MACH,QAAQ,eAAe,EAAE,QAAoC,EAAE,eAAe,MAAM,CAAC;AAAA,IACvF,EAAE;AAAA,EACJ;AACA,SAAO,cAAc,MAAM,OAAO;AACpC;AASA,eAAe,8BAA8B,QAA6C;AACxF,QAAM,MAAM,WAAW;AACvB,MAAI,OAAgB,CAAC;AACrB,MAAI,KAAK;AACP,WAAO,MAAM,cAAuB,CAAC,GAAG,yBAAyB,MAAM,IAAI,YAAY;AACrF,YAAM,IAAI,MAAM,IAAI,IAAI,SAAS,MAAM,kBAAkB,EAAE,IAAI;AAC/D,aAAO,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;AAAA,IAChC,CAAC;AAAA,EACH,OAAO;AACL,UAAM,SAAS,QAAQ,IAAI;AAC3B,UAAM,YAAY,QAAQ,IAAI;AAC9B,QAAI,UAAU,WAAW;AACvB,YAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,wBAAwB,MAAM;AACjJ,UAAI;AAEF,cAAM,MAAM,MAAM,MAAM,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;AAC1D,YAAI,IAAI,IAAI;AACV,gBAAM,MAAO,MAAM,IAAI,KAAK;AAC5B,iBAAO,aAAa,IAAI,UAAU,CAAC,CAAC;AAAA,QACtC;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,MAAM,4DAA4D,GAAG;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,yBAAyB,UAAU,QAAQ,CAAC,CAAC;AAC5D,SAAO,OAAO,UAAU,OAAO,OAAO,CAAC;AACzC;AAGA,eAAe,4BAA4B,QAAwC;AACjF,QAAM,OAAO,MAAM,eAAe,QAAQ,cAAc;AACxD,QAAM,MAAqB,CAAC;AAC5B,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,kBAAkB,UAAU,EAAE,GAAG,EAAE,MAAM,MAAM,EAAE,KAAK,QAAQ,EAAE,GAAG,CAAC;AAChF,QAAI,IAAI,QAAS,KAAI,KAAK,IAAI,IAAI;AAAA,QAC7B,SAAQ,KAAK,yBAAyB,EAAE,EAAE,iCAA4B;AAAA,EAC7E;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/server/pages.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\n\nimport { getAdminDb } from \"../firebase/admin\";\nimport { PageSchema, type Page } from \"../schema/pages\";\nimport { SymbolSchema, type StoredSymbol } from \"../schema/symbols\";\nimport { CustomBlockSchema, type CustomBlock } from \"../schema/customBlocks\";\nimport { PublicSiteSettingsSchema, type PublicSiteSettings } from \"../schema/settings\";\nimport { localizePage, localizeBlocks } from \"../i18n/overlay\";\nimport { getBundle, getBundlePage } from \"./bundle\";\n\n/**\n * BUNDLE-FIRST, Firestore-fallback (5.7).\n *\n * Elke publieke reader hieronder kijkt eerst of er een gecommit content-bundle is (server/bundle.ts,\n * `content/published.bundle.json`). Zo ja → serveer daaruit met exact dezelfde return-vormen als het\n * Firestore-pad (incl. schema-validatie, i18n-overlay en symbol-expansie). Zo nee (dev/lokaal of een\n * repo zonder gecommit bundle) → val ongewijzigd terug op de Admin-SDK / keyless-REST-implementatie.\n * De bundle-tak is puur additief: signatures en gedrag van de fallback blijven identiek.\n */\n\nexport type StoredPage = Page & { id: string };\n\nfunction toPath(slugs: string[] | undefined): string {\n  const clean = (slugs ?? []).filter(Boolean);\n  return \"/\" + clean.join(\"/\");\n}\n\n/** Pad uit Next catch-all params (`[[...slug]]`). \"/\" voor de root. */\nexport function pathFromSlugs(slugs: string[] | undefined): string {\n  const p = toPath(slugs);\n  return p === \"/\" ? \"/\" : p.replace(/\\/$/, \"\");\n}\n\nfunction parse(id: string, data: unknown): StoredPage | null {\n  const res = PageSchema.safeParse(data);\n  if (!res.success) {\n    // Niet stil 404'en: een gepubliceerde pagina die het schema niet haalt is een diagnose-signaal\n    // (schema-evolutie zonder default, of corrupte write) — zelfde patroon als symbols/customBlocks.\n    console.warn(`[xicms] pagina \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\n/**\n * Admin-SDK-reads mogen een PUBLIEKE pagina nooit laten 500'en — zelfde belofte als het REST-pad\n * (dat al overal try/catch → lege fallback heeft). Een Firestore-hikje wordt gelogd en levert de\n * fallback op; de route rendert dan 404/fallback i.p.v. een servererror.\n */\nasync function safeAdminRead<T>(fallback: T, what: string, fn: () => Promise<T>): Promise<T> {\n  try {\n    return await fn();\n  } catch (e) {\n    console.warn(`[xicms] Admin-read mislukt (${what}) — fallback gebruikt:`, (e as Error)?.message ?? e);\n    return fallback;\n  }\n}\n\n/* ---------------- keyless public reads via Firestore REST (alleen apiKey) ----------------\n * Gepubliceerde pagina's zijn publiek leesbaar (rules). De Firestore REST-API honoreert die\n * rules met enkel de web-apiKey (geen Admin-credentials, geen client-SDK), dus dit werkt\n * server-side op keyless deployments (org-policy zonder service-account-keys).\n */\ntype FsValue = Record<string, unknown>;\nfunction decode(v: FsValue): unknown {\n  if (v == null) return null;\n  if (\"stringValue\" in v) return v.stringValue;\n  if (\"integerValue\" in v) return Number(v.integerValue);\n  if (\"doubleValue\" in v) return v.doubleValue;\n  if (\"booleanValue\" in v) return v.booleanValue;\n  if (\"nullValue\" in v) return null;\n  if (\"timestampValue\" in v) return v.timestampValue;\n  if (\"referenceValue\" in v) return v.referenceValue;\n  if (\"geoPointValue\" in v) return v.geoPointValue;\n  if (\"arrayValue\" in v) return (((v.arrayValue as FsValue)?.values as FsValue[]) ?? []).map(decode);\n  if (\"mapValue\" in v) return decodeFields(((v.mapValue as FsValue)?.fields as Record<string, FsValue>) ?? {});\n  return null;\n}\nfunction decodeFields(fields: Record<string, FsValue>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).map(([k, x]) => [k, decode(x)]));\n}\n\ninterface Filter { fieldFilter: { field: { fieldPath: string }; op: \"EQUAL\"; value: { stringValue: string } } }\nfunction eq(fieldPath: string, value: string): Filter {\n  return { fieldFilter: { field: { fieldPath }, op: \"EQUAL\", value: { stringValue: value } } };\n}\n\nasync function restQuery(siteId: string, filters: Filter[], limit?: number): Promise<StoredPage[]> {\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  const where = filters.length === 1 ? filters[0] : { compositeFilter: { op: \"AND\", filters } };\n  const structuredQuery: Record<string, unknown> = { from: [{ collectionId: \"pages\" }], where };\n  if (limit) structuredQuery.limit = limit;\n  // Netwerk-/parsefouten mogen een publieke pagina nooit laten crashen (500) — dan liever een\n  // lege lijst (Next toont dan een 404 of de fallback, en de volgende revalidate probeert opnieuw).\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery }),\n      // Pagina's zijn ISR-gecached; next-cache mag dit hergebruiken.\n      next: { revalidate: 300 },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => parse(r.document!.name.split(\"/\").pop()!, decodeFields(r.document!.fields)))\n      .filter((p): p is StoredPage => p !== null);\n  } catch (err) {\n    console.error(\"[xicms] Firestore REST-query mislukt:\", err);\n    return [];\n  }\n}\n\n/** Alle gepubliceerde pagina's (sitemap / generateStaticParams). Bundle-first, anders keyless/Admin. */\nexport async function listPublishedPages(siteId: string): Promise<StoredPage[]> {\n  const bundle = getBundle();\n  if (bundle && bundle.siteId === siteId) {\n    return bundle.pages.map((p) => parse(p.id, p)).filter((p): p is StoredPage => p !== null);\n  }\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead([], `listPublishedPages ${siteId}`, async () => {\n      const snap = await adb.collection(`sites/${siteId}/pages`).where(\"status\", \"==\", \"published\").get();\n      return snap.docs.map((d) => parse(d.id, d.data())).filter((p): p is StoredPage => p !== null);\n    });\n  }\n  return restQuery(siteId, [eq(\"status\", \"published\")]);\n}\n\n/**\n * Per-request-dedup via React cache(): metadata (generateMetadata) én de render lezen dezelfde\n * pagina — zonder cache() waren dat twee identieke Firestore-reads per request. NB: de\n * `next:{revalidate}`-hint op het REST-pad dekt dit niet (POST-fetches cachen niet); route-level\n * ISR (revalidate=300 in de consumer) blijft de echte kosten-demper tussen requests.\n */\nexport const getPublishedPageByPath = cache(getPublishedPageByPathUncached);\nexport const getSiteSymbols = cache(getSiteSymbolsUncached);\nexport const getSiteCustomBlocks = cache(getSiteCustomBlocksUncached);\nexport const getPublicSiteSettings = cache(getPublicSiteSettingsUncached);\n\n/** Eén gepubliceerde pagina op pad. Bundle-first, anders keyless via REST/Admin. */\nasync function getPublishedPageByPathUncached(siteId: string, path: string): Promise<StoredPage | null> {\n  const bundle = getBundle();\n  if (bundle && bundle.siteId === siteId) {\n    const hit = getBundlePage(bundle, path);\n    return hit ? parse(hit.id, hit) : null;\n  }\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead(null, `getPublishedPageByPath ${siteId}${path}`, async () => {\n      const snap = await adb\n        .collection(`sites/${siteId}/pages`)\n        .where(\"status\", \"==\", \"published\")\n        .where(\"path\", \"==\", path)\n        .limit(1)\n        .get();\n      const d = snap.docs[0];\n      return d ? parse(d.id, d.data()) : null;\n    });\n  }\n  const rows = await restQuery(siteId, [eq(\"status\", \"published\"), eq(\"path\", path)], 1);\n  return rows[0] ?? null;\n}\n\n/** Draft-versie (voor preview achter auth). */\nexport async function getDraftPageById(siteId: string, pageId: string): Promise<StoredPage | null> {\n  const db = getAdminDb();\n  if (!db) return null;\n  return safeAdminRead(null, `getDraftPageById ${siteId}/${pageId}`, async () => {\n    const d = await db.doc(`sites/${siteId}/drafts/${pageId}`).get();\n    return d.exists ? parse(d.id, d.data()) : null;\n  });\n}\n\n/** Draft op pad (preview). */\nexport async function getDraftPageByPath(siteId: string, path: string): Promise<StoredPage | null> {\n  const db = getAdminDb();\n  if (!db) return null;\n  return safeAdminRead(null, `getDraftPageByPath ${siteId}${path}`, async () => {\n    const snap = await db.collection(`sites/${siteId}/drafts`).where(\"path\", \"==\", path).limit(1).get();\n    const d = snap.docs[0];\n    return d ? parse(d.id, d.data()) : null;\n  });\n}\n\n/* ---------------- symbols & custom blocks (5.0) ---------------- */\n\n/** Generieke publieke collectie-read onder sites/{siteId}/ — Admin als beschikbaar, anders REST. */\nasync function readCollection(siteId: string, collectionId: string): Promise<{ id: string; data: Record<string, unknown> }[]> {\n  const adb = getAdminDb();\n  if (adb) {\n    return safeAdminRead([], `readCollection ${siteId}/${collectionId}`, async () => {\n      const snap = await adb.collection(`sites/${siteId}/${collectionId}`).get();\n      return snap.docs.map((d) => ({ id: d.id, data: d.data() as Record<string, unknown> }));\n    });\n  }\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery: { from: [{ collectionId }] } }),\n      next: { revalidate: 300 },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => ({ id: r.document!.name.split(\"/\").pop()!, data: decodeFields(r.document!.fields ?? {}) }));\n  } catch (err) {\n    console.error(`[xicms] Firestore REST-read van ${collectionId} mislukt:`, err);\n    return [];\n  }\n}\n\n/** Alle symbolen van een site (gevalideerd; ongeldige overgeslagen met waarschuwing). Bundle-first. */\nasync function getSiteSymbolsUncached(siteId: string): Promise<StoredSymbol[]> {\n  const bundle = getBundle();\n  const rows =\n    bundle && bundle.siteId === siteId\n      ? bundle.symbols.map((s) => ({ id: s.id, data: s as Record<string, unknown> }))\n      : await readCollection(siteId, \"symbols\");\n  const out: StoredSymbol[] = [];\n  for (const r of rows) {\n    const res = SymbolSchema.safeParse(r.data);\n    if (res.success) out.push({ id: r.id, ...res.data });\n    else console.warn(`[xicms] symbool \"${r.id}\" ongeldig — overgeslagen.`);\n  }\n  return out;\n}\n\n/**\n * Vervangt symbolRef-blokken door de blokken van hun symbool (één niveau — symbolen kunnen zelf\n * geen symbolRef bevatten). `_key`s van de ingevoegde blokken worden geprefixt met de ref-key\n * zodat ze uniek blijven wanneer hetzelfde symbool vaker op een pagina staat. Verweesde refs\n * verdwijnen stil (de pagina mag nooit breken op een verwijderd symbool).\n */\nexport function expandSymbols<T extends { blocks?: unknown[] }>(page: T, symbols: StoredSymbol[]): T {\n  const byId = new Map(symbols.map((s) => [s.id, s]));\n  const blocks = (page.blocks ?? []).flatMap((b) => {\n    const blk = b as { _type?: string; _key?: string; symbolId?: string };\n    if (blk?._type !== \"symbolRef\") return [b];\n    const sym = blk.symbolId ? byId.get(blk.symbolId) : undefined;\n    if (!sym) return [];\n    return sym.blocks.map((sb, i) => ({ ...(sb as Record<string, unknown>), _key: `${blk._key ?? \"sym\"}-${(sb as { _key?: string })._key ?? i}` }));\n  });\n  return { ...page, blocks };\n}\n\n/**\n * Gepubliceerde pagina op pad mét symbolRef-expansie (SEO: symboolinhoud zit in de SSR-HTML).\n * Geef `locale` mee (een NIET-default taal) om de vertaal-overlay toe te passen — op de pagina\n * én op de ingevoegde symbolen (elk symbool draagt zijn eigen `translations`).\n *\n * Bundle-first werkt hier automatisch: deze functie componeert `getPublishedPageByPath` en\n * `getSiteSymbols`, die beide al bundle-first zijn — de i18n-overlay en expansie draaien identiek\n * op bundle- én Firestore-data.\n */\nexport async function getPublishedPageByPathExpanded(\n  siteId: string,\n  path: string,\n  locale?: string,\n): Promise<StoredPage | null> {\n  let page = await getPublishedPageByPath(siteId, path);\n  if (!page) return null;\n  // De caller geeft alléén een niet-default taal door; \"\" als default matcht dus nooit.\n  if (locale) page = localizePage(page, locale, \"\");\n  if (!(page.blocks ?? []).some((b) => (b as { _type?: string })._type === \"symbolRef\")) return page;\n  let symbols = await getSiteSymbols(siteId);\n  if (locale) {\n    symbols = symbols.map((s) => ({\n      ...s,\n      blocks: localizeBlocks(s.blocks as Array<{ _key?: string }>, s.translations?.[locale]) as typeof s.blocks,\n    }));\n  }\n  return expandSymbols(page, symbols);\n}\n\n/**\n * Publieke site-instellingen (`sites/{siteId}/settings/public`) server-side — voor de\n * `settingsData`-prop van XiCMSProvider. Zo zit het klant-thema/nav/footer al in de server-HTML\n * (geen theme-flits bij eerste paint) én vervalt de per-bezoeker `getDoc` in de browser: de\n * layout-route is ISR-gecached, dus dit kost ~1 read per revalidate i.p.v. per bezoeker.\n * Fouten leveren `{}` op — de site valt dan terug op de statische SiteConfig.\n */\nasync function getPublicSiteSettingsUncached(siteId: string): Promise<PublicSiteSettings> {\n  const bundle = getBundle();\n  if (bundle && bundle.siteId === siteId) {\n    const parsed = PublicSiteSettingsSchema.safeParse(bundle.settings ?? {});\n    return parsed.success ? parsed.data : {};\n  }\n  const adb = getAdminDb();\n  let data: unknown = {};\n  if (adb) {\n    data = await safeAdminRead<unknown>({}, `getPublicSiteSettings ${siteId}`, async () => {\n      const d = await adb.doc(`sites/${siteId}/settings/public`).get();\n      return d.exists ? d.data() : {};\n    });\n  } else {\n    const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n    const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n    if (apiKey && projectId) {\n      const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}/settings/public?key=${apiKey}`;\n      try {\n        // GET-fetches worden — anders dan de runQuery-POSTs — wél door de Next-datacache gedekt.\n        const res = await fetch(url, { next: { revalidate: 300 } });\n        if (res.ok) {\n          const doc = (await res.json()) as { fields?: Record<string, FsValue> };\n          data = decodeFields(doc.fields ?? {});\n        }\n      } catch (err) {\n        console.error(\"[xicms] Firestore REST-read van settings/public mislukt:\", err);\n      }\n    }\n  }\n  const parsed = PublicSiteSettingsSchema.safeParse(data ?? {});\n  return parsed.success ? parsed.data : {};\n}\n\n/** Alle custom blocks van een site (gevalideerd) — voor SSR-registratie via XiCMSProvider. Bundle-first. */\nasync function getSiteCustomBlocksUncached(siteId: string): Promise<CustomBlock[]> {\n  const bundle = getBundle();\n  const rows =\n    bundle && bundle.siteId === siteId\n      ? bundle.customBlocks.map((c) => ({ id: c.id, data: c as Record<string, unknown> }))\n      : await readCollection(siteId, \"customBlocks\");\n  const out: CustomBlock[] = [];\n  for (const r of rows) {\n    const res = CustomBlockSchema.safeParse({ ...r.data, type: r.data.type ?? r.id });\n    if (res.success) out.push(res.data);\n    else console.warn(`[xicms] custom block \"${r.id}\" ongeldig — overgeslagen.`);\n  }\n  return out;\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,kBAAkB;AAC3B,SAAS,kBAA6B;AACtC,SAAS,oBAAuC;AAChD,SAAS,yBAA2C;AACpD,SAAS,gCAAyD;AAClE,SAAS,cAAc,sBAAsB;AAC7C,SAAS,WAAW,qBAAqB;AAczC,SAAS,OAAO,OAAqC;AACnD,QAAM,SAAS,SAAS,CAAC,GAAG,OAAO,OAAO;AAC1C,SAAO,MAAM,MAAM,KAAK,GAAG;AAC7B;AAGO,SAAS,cAAc,OAAqC;AACjE,QAAM,IAAI,OAAO,KAAK;AACtB,SAAO,MAAM,MAAM,MAAM,EAAE,QAAQ,OAAO,EAAE;AAC9C;AAEA,SAAS,MAAM,IAAY,MAAkC;AAC3D,QAAM,MAAM,WAAW,UAAU,IAAI;AACrC,MAAI,CAAC,IAAI,SAAS;AAGhB,YAAQ,KAAK,mBAAmB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AACxG,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAOA,eAAe,cAAiB,UAAa,MAAc,IAAkC;AAC3F,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,SAAS,GAAG;AACV,YAAQ,KAAK,+BAA+B,IAAI,+BAA2B,GAAa,WAAW,CAAC;AACpG,WAAO;AAAA,EACT;AACF;AAQA,SAAS,OAAO,GAAqB;AACnC,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,OAAO,EAAE,YAAY;AACrD,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,EAAE;AAClC,MAAI,eAAe,EAAG,QAAO;AAC7B,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,mBAAmB,EAAG,QAAO,EAAE;AACnC,MAAI,gBAAgB,EAAG,SAAU,EAAE,YAAwB,UAAwB,CAAC,GAAG,IAAI,MAAM;AACjG,MAAI,cAAc,EAAG,QAAO,aAAe,EAAE,UAAsB,UAAsC,CAAC,CAAC;AAC3G,SAAO;AACT;AACA,SAAS,aAAa,QAA0D;AAC9E,SAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF;AAGA,SAAS,GAAG,WAAmB,OAAuB;AACpD,SAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,SAAS,OAAO,EAAE,aAAa,MAAM,EAAE,EAAE;AAC7F;AAEA,eAAe,UAAU,QAAgB,SAAmB,OAAuC;AACjG,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,QAAM,QAAQ,QAAQ,WAAW,IAAI,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,OAAO,QAAQ,EAAE;AAC5F,QAAM,kBAA2C,EAAE,MAAM,CAAC,EAAE,cAAc,QAAQ,CAAC,GAAG,MAAM;AAC5F,MAAI,MAAO,iBAAgB,QAAQ;AAGnC,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,gBAAgB,CAAC;AAAA;AAAA,MAExC,MAAM,EAAE,YAAY,IAAI;AAAA,IAC1B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,MAAM,MAAM,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,aAAa,EAAE,SAAU,MAAM,CAAC,CAAC,EACtF,OAAO,CAAC,MAAuB,MAAM,IAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,YAAQ,MAAM,yCAAyC,GAAG;AAC1D,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAsB,mBAAmB,QAAuC;AAC9E,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,OAAO,WAAW,QAAQ;AACtC,WAAO,OAAO,MAAM,IAAI,CAAC,MAAM,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,MAAuB,MAAM,IAAI;AAAA,EAC1F;AACA,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,CAAC,GAAG,sBAAsB,MAAM,IAAI,YAAY;AACnE,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,QAAQ,EAAE,MAAM,UAAU,MAAM,WAAW,EAAE,IAAI;AAClG,aAAO,KAAK,KAAK,IAAI,CAAC,MAAM,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAuB,MAAM,IAAI;AAAA,IAC9F,CAAC;AAAA,EACH;AACA,SAAO,UAAU,QAAQ,CAAC,GAAG,UAAU,WAAW,CAAC,CAAC;AACtD;AAQO,MAAM,yBAAyB,MAAM,8BAA8B;AACnE,MAAM,iBAAiB,MAAM,sBAAsB;AACnD,MAAM,sBAAsB,MAAM,2BAA2B;AAC7D,MAAM,wBAAwB,MAAM,6BAA6B;AAGxE,eAAe,+BAA+B,QAAgB,MAA0C;AACtG,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,OAAO,WAAW,QAAQ;AACtC,UAAM,MAAM,cAAc,QAAQ,IAAI;AACtC,WAAO,MAAM,MAAM,IAAI,IAAI,GAAG,IAAI;AAAA,EACpC;AACA,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,MAAM,0BAA0B,MAAM,GAAG,IAAI,IAAI,YAAY;AAChF,YAAM,OAAO,MAAM,IAChB,WAAW,SAAS,MAAM,QAAQ,EAClC,MAAM,UAAU,MAAM,WAAW,EACjC,MAAM,QAAQ,MAAM,IAAI,EACxB,MAAM,CAAC,EACP,IAAI;AACP,YAAM,IAAI,KAAK,KAAK,CAAC;AACrB,aAAO,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,IACrC,CAAC;AAAA,EACH;AACA,QAAM,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG,UAAU,WAAW,GAAG,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC;AACrF,SAAO,KAAK,CAAC,KAAK;AACpB;AAGA,eAAsB,iBAAiB,QAAgB,QAA4C;AACjG,QAAM,KAAK,WAAW;AACtB,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO,cAAc,MAAM,oBAAoB,MAAM,IAAI,MAAM,IAAI,YAAY;AAC7E,UAAM,IAAI,MAAM,GAAG,IAAI,SAAS,MAAM,WAAW,MAAM,EAAE,EAAE,IAAI;AAC/D,WAAO,EAAE,SAAS,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,EAC5C,CAAC;AACH;AAGA,eAAsB,mBAAmB,QAAgB,MAA0C;AACjG,QAAM,KAAK,WAAW;AACtB,MAAI,CAAC,GAAI,QAAO;AAChB,SAAO,cAAc,MAAM,sBAAsB,MAAM,GAAG,IAAI,IAAI,YAAY;AAC5E,UAAM,OAAO,MAAM,GAAG,WAAW,SAAS,MAAM,SAAS,EAAE,MAAM,QAAQ,MAAM,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI;AAClG,UAAM,IAAI,KAAK,KAAK,CAAC;AACrB,WAAO,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAAA,EACrC,CAAC;AACH;AAKA,eAAe,eAAe,QAAgB,cAAgF;AAC5H,QAAM,MAAM,WAAW;AACvB,MAAI,KAAK;AACP,WAAO,cAAc,CAAC,GAAG,kBAAkB,MAAM,IAAI,YAAY,IAAI,YAAY;AAC/E,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,IAAI,YAAY,EAAE,EAAE,IAAI;AACzE,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAA6B,EAAE;AAAA,IACvF,CAAC;AAAA,EACH;AACA,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC;AAAA,MACtE,MAAM,EAAE,YAAY,IAAI;AAAA,IAC1B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,MAAM,aAAa,EAAE,SAAU,UAAU,CAAC,CAAC,EAAE,EAAE;AAAA,EAC1G,SAAS,KAAK;AACZ,YAAQ,MAAM,mCAAmC,YAAY,aAAa,GAAG;AAC7E,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAe,uBAAuB,QAAyC;AAC7E,QAAM,SAAS,UAAU;AACzB,QAAM,OACJ,UAAU,OAAO,WAAW,SACxB,OAAO,QAAQ,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAA6B,EAAE,IAC5E,MAAM,eAAe,QAAQ,SAAS;AAC5C,QAAM,MAAsB,CAAC;AAC7B,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,aAAa,UAAU,EAAE,IAAI;AACzC,QAAI,IAAI,QAAS,KAAI,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,CAAC;AAAA,QAC9C,SAAQ,KAAK,oBAAoB,EAAE,EAAE,iCAA4B;AAAA,EACxE;AACA,SAAO;AACT;AAQO,SAAS,cAAgD,MAAS,SAA4B;AACnG,QAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,QAAM,UAAU,KAAK,UAAU,CAAC,GAAG,QAAQ,CAAC,MAAM;AAChD,UAAM,MAAM;AACZ,QAAI,KAAK,UAAU,YAAa,QAAO,CAAC,CAAC;AACzC,UAAM,MAAM,IAAI,WAAW,KAAK,IAAI,IAAI,QAAQ,IAAI;AACpD,QAAI,CAAC,IAAK,QAAO,CAAC;AAClB,WAAO,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,EAAE,GAAI,IAAgC,MAAM,GAAG,IAAI,QAAQ,KAAK,IAAK,GAAyB,QAAQ,CAAC,GAAG,EAAE;AAAA,EAChJ,CAAC;AACD,SAAO,EAAE,GAAG,MAAM,OAAO;AAC3B;AAWA,eAAsB,+BACpB,QACA,MACA,QAC4B;AAC5B,MAAI,OAAO,MAAM,uBAAuB,QAAQ,IAAI;AACpD,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI,OAAQ,QAAO,aAAa,MAAM,QAAQ,EAAE;AAChD,MAAI,EAAE,KAAK,UAAU,CAAC,GAAG,KAAK,CAAC,MAAO,EAAyB,UAAU,WAAW,EAAG,QAAO;AAC9F,MAAI,UAAU,MAAM,eAAe,MAAM;AACzC,MAAI,QAAQ;AACV,cAAU,QAAQ,IAAI,CAAC,OAAO;AAAA,MAC5B,GAAG;AAAA,MACH,QAAQ,eAAe,EAAE,QAAoC,EAAE,eAAe,MAAM,CAAC;AAAA,IACvF,EAAE;AAAA,EACJ;AACA,SAAO,cAAc,MAAM,OAAO;AACpC;AASA,eAAe,8BAA8B,QAA6C;AACxF,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,OAAO,WAAW,QAAQ;AACtC,UAAMA,UAAS,yBAAyB,UAAU,OAAO,YAAY,CAAC,CAAC;AACvE,WAAOA,QAAO,UAAUA,QAAO,OAAO,CAAC;AAAA,EACzC;AACA,QAAM,MAAM,WAAW;AACvB,MAAI,OAAgB,CAAC;AACrB,MAAI,KAAK;AACP,WAAO,MAAM,cAAuB,CAAC,GAAG,yBAAyB,MAAM,IAAI,YAAY;AACrF,YAAM,IAAI,MAAM,IAAI,IAAI,SAAS,MAAM,kBAAkB,EAAE,IAAI;AAC/D,aAAO,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;AAAA,IAChC,CAAC;AAAA,EACH,OAAO;AACL,UAAM,SAAS,QAAQ,IAAI;AAC3B,UAAM,YAAY,QAAQ,IAAI;AAC9B,QAAI,UAAU,WAAW;AACvB,YAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,wBAAwB,MAAM;AACjJ,UAAI;AAEF,cAAM,MAAM,MAAM,MAAM,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;AAC1D,YAAI,IAAI,IAAI;AACV,gBAAM,MAAO,MAAM,IAAI,KAAK;AAC5B,iBAAO,aAAa,IAAI,UAAU,CAAC,CAAC;AAAA,QACtC;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,MAAM,4DAA4D,GAAG;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,yBAAyB,UAAU,QAAQ,CAAC,CAAC;AAC5D,SAAO,OAAO,UAAU,OAAO,OAAO,CAAC;AACzC;AAGA,eAAe,4BAA4B,QAAwC;AACjF,QAAM,SAAS,UAAU;AACzB,QAAM,OACJ,UAAU,OAAO,WAAW,SACxB,OAAO,aAAa,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAA6B,EAAE,IACjF,MAAM,eAAe,QAAQ,cAAc;AACjD,QAAM,MAAqB,CAAC;AAC5B,aAAW,KAAK,MAAM;AACpB,UAAM,MAAM,kBAAkB,UAAU,EAAE,GAAG,EAAE,MAAM,MAAM,EAAE,KAAK,QAAQ,EAAE,GAAG,CAAC;AAChF,QAAI,IAAI,QAAS,KAAI,KAAK,IAAI,IAAI;AAAA,QAC7B,SAAQ,KAAK,yBAAyB,EAAE,EAAE,iCAA4B;AAAA,EAC7E;AACA,SAAO;AACT;","names":["parsed"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiwebdesign/xicms-core",
-  "version": "5.6.1",
+  "version": "5.7.0",
   "description": "XiCMS engine: gestructureerde content, pagina's, draft/publish, admin (TipTap+Radix), SEO en beveiliging voor klantsites.",
   "license": "UNLICENSED",
   "repository": {