@xiwebdesign/xicms-core 6.4.7 → 7.0.0

package/dist/agentFiles/files.d.ts

@@ -1,8 +1,8 @@
-import { type Page } from "../schema/pages";
-import { type SymbolDefinition } from "../schema/symbols";
-import { type CustomBlock } from "../schema/customBlocks";
-import { type FormDefinition } from "../schema/forms";
-import type { NewsArticle } from "../content/types";
+import { type Page } from "../schema/pages.js";
+import { type SymbolDefinition } from "../schema/symbols.js";
+import { type CustomBlock } from "../schema/customBlocks.js";
+import { type FormDefinition } from "../schema/forms.js";
+import type { NewsArticle } from "../content/types.js";
 /** Stabiele JSON-representatie (gesorteerde sleutels, zonder undefined) voor hashing. */
 export declare function stableStringify(value: unknown): string;
 /** FNV-1a 64-bit (hex) — snel, dependency-vrij en client-safe (geen node:crypto). Dit is een

package/dist/agentFiles/files.js

@@ -1,8 +1,8 @@
-import { z } from "zod";
-import { PageSchema } from "../schema/pages";
-import { SymbolSchema } from "../schema/symbols";
-import { CustomBlockSchema } from "../schema/customBlocks";
-import { FormSchema } from "../schema/forms";
+import * as z from "zod/mini";
+import { PageSchema } from "../schema/pages.js";
+import { SymbolSchema } from "../schema/symbols.js";
+import { CustomBlockSchema } from "../schema/customBlocks.js";
+import { FormSchema } from "../schema/forms.js";
 function stableStringify(value) {
   if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
   if (value && typeof value === "object") {
@@ -52,7 +52,7 @@ function serializePage(page) {
     ...page.translations && Object.keys(page.translations).length > 0 ? { translations: page.translations } : {}
   };
 }
-const PageFileSchema = PageSchema.extend({ id: z.string().min(1).max(64) });
+const PageFileSchema = z.extend(PageSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(64)) });
 function parsePageFile(obj) {
   const res = PageFileSchema.safeParse(obj);
   if (!res.success) {
@@ -69,7 +69,7 @@ function serializeSymbol(symbol) {
     ...symbol.translations && Object.keys(symbol.translations).length > 0 ? { translations: symbol.translations } : {}
   };
 }
-const SymbolFileSchema = SymbolSchema.extend({ id: z.string().min(1).max(120) });
+const SymbolFileSchema = z.extend(SymbolSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(120)) });
 function parseSymbolFile(obj) {
   const res = SymbolFileSchema.safeParse(obj);
   if (!res.success) {
@@ -94,15 +94,15 @@ function parseCustomBlockFiles(meta, template, css) {
   return res.data;
 }
 const NewsFileSchema = z.object({
-  id: z.string().min(1).max(120),
-  title: z.string().min(1).max(200),
-  slug: z.string().min(1).max(200),
-  excerpt: z.string().max(1e3).optional(),
-  body: z.string().max(5e4).default(""),
-  bodyHtml: z.string().max(2e5).optional(),
-  coverUrl: z.string().max(2e3).optional(),
-  date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "datum als yyyy-mm-dd"),
-  published: z.boolean().default(false)
+  id: z.string().check(z.minLength(1)).check(z.maxLength(120)),
+  title: z.string().check(z.minLength(1)).check(z.maxLength(200)),
+  slug: z.string().check(z.minLength(1)).check(z.maxLength(200)),
+  excerpt: z.optional(z.string().check(z.maxLength(1e3))),
+  body: z._default(z.string().check(z.maxLength(5e4)), ""),
+  bodyHtml: z.optional(z.string().check(z.maxLength(2e5))),
+  coverUrl: z.optional(z.string().check(z.maxLength(2e3))),
+  date: z.string().check(z.regex(/^\d{4}-\d{2}-\d{2}$/, "datum als yyyy-mm-dd")),
+  published: z._default(z.boolean(), false)
 });
 function serializeNews(a) {
   return {
@@ -136,7 +136,7 @@ function serializeForm(form) {
     fields: form.fields
   };
 }
-const FormFileSchema = FormSchema.extend({ id: z.string().min(1).max(120) });
+const FormFileSchema = z.extend(FormSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(120)) });
 function parseFormFile(obj) {
   const res = FormFileSchema.safeParse(obj);
   if (!res.success) {

package/dist/agentFiles/files.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agentFiles/files.ts"],"sourcesContent":["/**\n * Agent-bestandslaag (5.0, primo-concept \"DB ⇄ files\"): pure serialisatie-, hash- en\n * sync-logica voor de `pull-site`/`push-site`-scripts. Een site wordt een map met YAML/HTML-\n * bestanden die een coding-agent direct kan bewerken; `.xicms/manifest.json` onthoudt per\n * entiteit een inhouds-hash van het pull-moment zodat push conflicten kan detecteren\n * (drie-wegen: basis/lokaal/remote) in plaats van stil werk te overschrijven.\n *\n * Alleen pure functies — geen I/O, geen Firebase — zodat dit unit-testbaar is en zowel de\n * scripts als toekomstige tooling (bv. een cloud-agent) er op kunnen bouwen.\n */\nimport { z } from \"zod\";\nimport { PageSchema, type Page } from \"../schema/pages\";\nimport { SymbolSchema, type SymbolDefinition } from \"../schema/symbols\";\nimport { CustomBlockSchema, type CustomBlock } from \"../schema/customBlocks\";\nimport { FormSchema, type FormDefinition } from \"../schema/forms\";\nimport type { NewsArticle } from \"../content/types\";\n\n/* ---------------- hashing ---------------- */\n\n/** Stabiele JSON-representatie (gesorteerde sleutels, zonder undefined) voor hashing. */\nexport function stableStringify(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(stableStringify).join(\",\")}]`;\n  if (value && typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>)\n      .filter(([, v]) => v !== undefined)\n      .sort(([a], [b]) => (a < b ? -1 : 1));\n    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(\",\")}}`;\n  }\n  return JSON.stringify(value) ?? \"null\";\n}\n\n/** FNV-1a 64-bit (hex) — snel, dependency-vrij en client-safe (geen node:crypto). Dit is een\n *  wijzigingsdetector, geen beveiligingshash. */\nexport function contentHash(value: unknown): string {\n  const s = stableStringify(value);\n  let h = 0xcbf29ce484222325n;\n  const prime = 0x100000001b3n;\n  for (let i = 0; i < s.length; i++) {\n    h ^= BigInt(s.charCodeAt(i));\n    h = (h * prime) & 0xffffffffffffffffn;\n  }\n  return h.toString(16).padStart(16, \"0\");\n}\n\n/* ---------------- manifest + sync-beslissing ---------------- */\n\nexport interface ManifestEntry {\n  /** Relatief bestandspad binnen de site-map (bv. \"pages/diensten/web.yaml\"). */\n  file: string;\n  /** contentHash van de geserialiseerde entiteit op pull-moment (de \"basis\"). */\n  hash: string;\n}\n\nexport interface Manifest {\n  format: \"xicms-files\";\n  version: 1;\n  siteId: string;\n  pulledAt: string;\n  /** Sleutels: \"<soort>:<id>\", bv. \"page:abc123\", \"symbol:cta\", \"customBlock:custom-usps\". */\n  entities: Record<string, ManifestEntry>;\n}\n\nexport function emptyManifest(siteId: string, pulledAt: string): Manifest {\n  return { format: \"xicms-files\", version: 1, siteId, pulledAt, entities: {} };\n}\n\nexport type SyncAction = \"push\" | \"skip\" | \"conflict\" | \"create\" | \"remote-deleted\";\n\n/**\n * Drie-wegen-beslissing per entiteit:\n * - basis (manifest-hash van pull), lokaal (bestand nu), remote (database nu).\n * - lokaal ongewijzigd → skip (niets te pushen), ook als remote intussen veranderde.\n * - lokaal gewijzigd + remote ongewijzigd → push.\n * - beide gewijzigd → conflict (push weigert zonder --force).\n * - geen basis (nieuw bestand) → create; bestaat remote al ook → conflict.\n * - basis wel, remote weg → remote-deleted (conflict-achtig: iemand verwijderde de entiteit).\n */\nexport function decideSync(base: string | undefined, local: string, remote: string | undefined): SyncAction {\n  if (base === undefined) return remote === undefined ? \"create\" : remote === local ? \"skip\" : \"conflict\";\n  if (remote === undefined) return \"remote-deleted\";\n  if (remote === local) return \"skip\"; // al identiek — niets te doen\n  if (local === base) return \"skip\"; // lokaal niets gewijzigd — remote-wijziging laten staan\n  if (remote === base) return \"push\"; // alleen lokaal gewijzigd\n  return \"conflict\"; // beide kanten gewijzigd\n}\n\n/* ---------------- bestandsnamen ---------------- */\n\n/** Pagina-pad → relatief YAML-pad: \"/\" → \"pages/index.yaml\", \"/diensten/web\" → \"pages/diensten/web.yaml\". */\nexport function pagePathToFile(path: string): string {\n  const clean = path.replace(/^\\/+|\\/+$/g, \"\");\n  return clean === \"\" ? \"pages/index.yaml\" : `pages/${clean}.yaml`;\n}\n\n/** Veilige bestandsnaam voor een id (symbolen kunnen elk Firestore-id hebben). */\nexport function idToFilename(id: string): string {\n  return id.replace(/[^a-zA-Z0-9_-]/g, \"_\");\n}\n\n/* ---------------- serialisatie (entiteit ⇄ plain object) ---------------- */\n\n/** Pagina-doc → bestandsobject met vaste, leesbare sleutelvolgorde. */\nexport function serializePage(page: Page & { id: string }): Record<string, unknown> {\n  return {\n    id: page.id,\n    title: page.title,\n    slug: page.slug,\n    path: page.path,\n    parentId: page.parentId ?? null,\n    order: page.order ?? 0,\n    ...(page.seo && Object.keys(page.seo).length > 0 ? { seo: page.seo } : {}),\n    blocks: page.blocks ?? [],\n    ...(page.translations && Object.keys(page.translations).length > 0 ? { translations: page.translations } : {}),\n  };\n}\n\nconst PageFileSchema = PageSchema.extend({ id: z.string().min(1).max(64) });\n\n/** Bestandsobject → gevalideerde pagina. Gooit met een leesbare melding bij ongeldige inhoud. */\nexport function parsePageFile(obj: unknown): Page & { id: string } {\n  const res = PageFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldige pagina: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\nexport function serializeSymbol(symbol: SymbolDefinition & { id: string }): Record<string, unknown> {\n  return {\n    id: symbol.id,\n    name: symbol.name,\n    blocks: symbol.blocks ?? [],\n    ...(symbol.translations && Object.keys(symbol.translations).length > 0 ? { translations: symbol.translations } : {}),\n  };\n}\n\nconst SymbolFileSchema = SymbolSchema.extend({ id: z.string().min(1).max(120) });\n\nexport function parseSymbolFile(obj: unknown): SymbolDefinition & { id: string } {\n  const res = SymbolFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig symbool: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\n/** Custom block → drie bestanden: block.yaml (meta + Field-IR), template.html, style.css. */\nexport function serializeCustomBlock(def: CustomBlock): { meta: Record<string, unknown>; template: string; css: string } {\n  return {\n    meta: { type: def.type, label: def.label, icon: def.icon, version: def.version, fields: def.fields },\n    template: def.template,\n    css: def.css,\n  };\n}\n\nexport function parseCustomBlockFiles(meta: unknown, template: string, css: string): CustomBlock {\n  const res = CustomBlockSchema.safeParse({ ...(meta as Record<string, unknown>), template, css });\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldige bouwsteen: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\n/* ---------------- nieuws & formulieren (round-trip in pull/push) ---------------- */\n\n/**\n * Runtime-schema voor nieuwsartikelen in de bestandslaag. `NewsArticle` is elders alleen een\n * TS-interface (het beheer schrijft rechtstreeks naar Firestore); voor pull/push valideren we\n * wél — een agent-geschreven YAML met een kapotte datum of ontbrekende titel hoort luid te\n * falen, niet stil een kapot artikel te maken. `createdAt`/`updatedAt` (servertimestamps)\n * blijven bewust buiten de bestanden: die beheert Firestore.\n */\nconst NewsFileSchema = z.object({\n  id: z.string().min(1).max(120),\n  title: z.string().min(1).max(200),\n  slug: z.string().min(1).max(200),\n  excerpt: z.string().max(1000).optional(),\n  body: z.string().max(50_000).default(\"\"),\n  bodyHtml: z.string().max(200_000).optional(),\n  coverUrl: z.string().max(2000).optional(),\n  date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"datum als yyyy-mm-dd\"),\n  published: z.boolean().default(false),\n});\n\n/** Nieuws-doc → bestandsobject (vaste sleutelvolgorde, zonder servertimestamps/lege velden). */\nexport function serializeNews(a: NewsArticle): Record<string, unknown> {\n  return {\n    id: a.id,\n    title: a.title,\n    slug: a.slug,\n    date: a.date,\n    published: a.published,\n    ...(a.excerpt ? { excerpt: a.excerpt } : {}),\n    ...(a.coverUrl ? { coverUrl: a.coverUrl } : {}),\n    body: a.body ?? \"\",\n    ...(a.bodyHtml ? { bodyHtml: a.bodyHtml } : {}),\n  };\n}\n\n/** Bestandsobject → gevalideerd nieuwsartikel. Gooit met een leesbare melding. */\nexport function parseNewsFile(obj: unknown): NewsArticle {\n  const res = NewsFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig nieuwsartikel: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\nexport function serializeForm(form: FormDefinition & { id: string }): Record<string, unknown> {\n  return {\n    id: form.id,\n    name: form.name,\n    submitLabel: form.submitLabel,\n    successMessage: form.successMessage,\n    ...(form.successRedirect ? { successRedirect: form.successRedirect } : {}),\n    ...(form.confirmSubmitter !== undefined ? { confirmSubmitter: form.confirmSubmitter } : {}),\n    fields: form.fields,\n  };\n}\n\nconst FormFileSchema = FormSchema.extend({ id: z.string().min(1).max(120) });\n\nexport function parseFormFile(obj: unknown): FormDefinition & { id: string } {\n  const res = FormFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig formulier: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n"],"mappings":"AAUA,SAAS,SAAS;AAClB,SAAS,kBAA6B;AACtC,SAAS,oBAA2C;AACpD,SAAS,yBAA2C;AACpD,SAAS,kBAAuC;AAMzC,SAAS,gBAAgB,OAAwB;AACtD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,eAAe,EAAE,KAAK,GAAG,CAAC;AACzE,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,UAAU,OAAO,QAAQ,KAAgC,EAC5D,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EACjC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,CAAE;AACtC,WAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,EAC5F;AACA,SAAO,KAAK,UAAU,KAAK,KAAK;AAClC;AAIO,SAAS,YAAY,OAAwB;AAClD,QAAM,IAAI,gBAAgB,KAAK;AAC/B,MAAI,IAAI;AACR,QAAM,QAAQ;AACd,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,OAAO,EAAE,WAAW,CAAC,CAAC;AAC3B,QAAK,IAAI,QAAS;AAAA,EACpB;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACxC;AAoBO,SAAS,cAAc,QAAgB,UAA4B;AACxE,SAAO,EAAE,QAAQ,eAAe,SAAS,GAAG,QAAQ,UAAU,UAAU,CAAC,EAAE;AAC7E;AAaO,SAAS,WAAW,MAA0B,OAAe,QAAwC;AAC1G,MAAI,SAAS,OAAW,QAAO,WAAW,SAAY,WAAW,WAAW,QAAQ,SAAS;AAC7F,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,WAAW,MAAO,QAAO;AAC7B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO;AACT;AAKO,SAAS,eAAe,MAAsB;AACnD,QAAM,QAAQ,KAAK,QAAQ,cAAc,EAAE;AAC3C,SAAO,UAAU,KAAK,qBAAqB,SAAS,KAAK;AAC3D;AAGO,SAAS,aAAa,IAAoB;AAC/C,SAAO,GAAG,QAAQ,mBAAmB,GAAG;AAC1C;AAKO,SAAS,cAAc,MAAsD;AAClF,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,KAAK,SAAS;AAAA,IACrB,GAAI,KAAK,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE,SAAS,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IACxE,QAAQ,KAAK,UAAU,CAAC;AAAA,IACxB,GAAI,KAAK,gBAAgB,OAAO,KAAK,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;AAAA,EAC9G;AACF;AAEA,MAAM,iBAAiB,WAAW,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAGnE,SAAS,cAAc,KAAqC;AACjE,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,qBAAqB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACrF;AACA,SAAO,IAAI;AACb;AAEO,SAAS,gBAAgB,QAAoE;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,QAAQ,OAAO,UAAU,CAAC;AAAA,IAC1B,GAAI,OAAO,gBAAgB,OAAO,KAAK,OAAO,YAAY,EAAE,SAAS,IAAI,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,EACpH;AACF;AAEA,MAAM,mBAAmB,aAAa,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAExE,SAAS,gBAAgB,KAAiD;AAC/E,QAAM,MAAM,iBAAiB,UAAU,GAAG;AAC1C,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,qBAAqB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACrF;AACA,SAAO,IAAI;AACb;AAGO,SAAS,qBAAqB,KAAoF;AACvH,SAAO;AAAA,IACL,MAAM,EAAE,MAAM,IAAI,MAAM,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,QAAQ,IAAI,OAAO;AAAA,IACnG,UAAU,IAAI;AAAA,IACd,KAAK,IAAI;AAAA,EACX;AACF;AAEO,SAAS,sBAAsB,MAAe,UAAkB,KAA0B;AAC/F,QAAM,MAAM,kBAAkB,UAAU,EAAE,GAAI,MAAkC,UAAU,IAAI,CAAC;AAC/F,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,wBAAwB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACxF;AACA,SAAO,IAAI;AACb;AAWA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,QAAQ,EAAE;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAO,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACxC,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB,sBAAsB;AAAA,EACpE,WAAW,EAAE,QAAQ,EAAE,QAAQ,KAAK;AACtC,CAAC;AAGM,SAAS,cAAc,GAAyC;AACrE,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,OAAO,EAAE;AAAA,IACT,MAAM,EAAE;AAAA,IACR,MAAM,EAAE;AAAA,IACR,WAAW,EAAE;AAAA,IACb,GAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,MAAM,EAAE,QAAQ;AAAA,IAChB,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,EAC/C;AACF;AAGO,SAAS,cAAc,KAA2B;AACvD,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,2BAA2B,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EAC3F;AACA,SAAO,IAAI;AACb;AAEO,SAAS,cAAc,MAAgE;AAC5F,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;AAAA,IACxE,GAAI,KAAK,qBAAqB,SAAY,EAAE,kBAAkB,KAAK,iBAAiB,IAAI,CAAC;AAAA,IACzF,QAAQ,KAAK;AAAA,EACf;AACF;AAEA,MAAM,iBAAiB,WAAW,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAEpE,SAAS,cAAc,KAA+C;AAC3E,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,uBAAuB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACvF;AACA,SAAO,IAAI;AACb;","names":[]}
+{"version":3,"sources":["../../src/agentFiles/files.ts"],"sourcesContent":["/**\n * Agent-bestandslaag (5.0, primo-concept \"DB ⇄ files\"): pure serialisatie-, hash- en\n * sync-logica voor de `pull-site`/`push-site`-scripts. Een site wordt een map met YAML/HTML-\n * bestanden die een coding-agent direct kan bewerken; `.xicms/manifest.json` onthoudt per\n * entiteit een inhouds-hash van het pull-moment zodat push conflicten kan detecteren\n * (drie-wegen: basis/lokaal/remote) in plaats van stil werk te overschrijven.\n *\n * Alleen pure functies — geen I/O, geen Firebase — zodat dit unit-testbaar is en zowel de\n * scripts als toekomstige tooling (bv. een cloud-agent) er op kunnen bouwen.\n */\nimport * as z from \"zod/mini\";\nimport { PageSchema, type Page } from \"../schema/pages\";\nimport { SymbolSchema, type SymbolDefinition } from \"../schema/symbols\";\nimport { CustomBlockSchema, type CustomBlock } from \"../schema/customBlocks\";\nimport { FormSchema, type FormDefinition } from \"../schema/forms\";\nimport type { NewsArticle } from \"../content/types\";\n\n/* ---------------- hashing ---------------- */\n\n/** Stabiele JSON-representatie (gesorteerde sleutels, zonder undefined) voor hashing. */\nexport function stableStringify(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(stableStringify).join(\",\")}]`;\n  if (value && typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>)\n      .filter(([, v]) => v !== undefined)\n      .sort(([a], [b]) => (a < b ? -1 : 1));\n    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(\",\")}}`;\n  }\n  return JSON.stringify(value) ?? \"null\";\n}\n\n/** FNV-1a 64-bit (hex) — snel, dependency-vrij en client-safe (geen node:crypto). Dit is een\n *  wijzigingsdetector, geen beveiligingshash. */\nexport function contentHash(value: unknown): string {\n  const s = stableStringify(value);\n  let h = 0xcbf29ce484222325n;\n  const prime = 0x100000001b3n;\n  for (let i = 0; i < s.length; i++) {\n    h ^= BigInt(s.charCodeAt(i));\n    h = (h * prime) & 0xffffffffffffffffn;\n  }\n  return h.toString(16).padStart(16, \"0\");\n}\n\n/* ---------------- manifest + sync-beslissing ---------------- */\n\nexport interface ManifestEntry {\n  /** Relatief bestandspad binnen de site-map (bv. \"pages/diensten/web.yaml\"). */\n  file: string;\n  /** contentHash van de geserialiseerde entiteit op pull-moment (de \"basis\"). */\n  hash: string;\n}\n\nexport interface Manifest {\n  format: \"xicms-files\";\n  version: 1;\n  siteId: string;\n  pulledAt: string;\n  /** Sleutels: \"<soort>:<id>\", bv. \"page:abc123\", \"symbol:cta\", \"customBlock:custom-usps\". */\n  entities: Record<string, ManifestEntry>;\n}\n\nexport function emptyManifest(siteId: string, pulledAt: string): Manifest {\n  return { format: \"xicms-files\", version: 1, siteId, pulledAt, entities: {} };\n}\n\nexport type SyncAction = \"push\" | \"skip\" | \"conflict\" | \"create\" | \"remote-deleted\";\n\n/**\n * Drie-wegen-beslissing per entiteit:\n * - basis (manifest-hash van pull), lokaal (bestand nu), remote (database nu).\n * - lokaal ongewijzigd → skip (niets te pushen), ook als remote intussen veranderde.\n * - lokaal gewijzigd + remote ongewijzigd → push.\n * - beide gewijzigd → conflict (push weigert zonder --force).\n * - geen basis (nieuw bestand) → create; bestaat remote al ook → conflict.\n * - basis wel, remote weg → remote-deleted (conflict-achtig: iemand verwijderde de entiteit).\n */\nexport function decideSync(base: string | undefined, local: string, remote: string | undefined): SyncAction {\n  if (base === undefined) return remote === undefined ? \"create\" : remote === local ? \"skip\" : \"conflict\";\n  if (remote === undefined) return \"remote-deleted\";\n  if (remote === local) return \"skip\"; // al identiek — niets te doen\n  if (local === base) return \"skip\"; // lokaal niets gewijzigd — remote-wijziging laten staan\n  if (remote === base) return \"push\"; // alleen lokaal gewijzigd\n  return \"conflict\"; // beide kanten gewijzigd\n}\n\n/* ---------------- bestandsnamen ---------------- */\n\n/** Pagina-pad → relatief YAML-pad: \"/\" → \"pages/index.yaml\", \"/diensten/web\" → \"pages/diensten/web.yaml\". */\nexport function pagePathToFile(path: string): string {\n  const clean = path.replace(/^\\/+|\\/+$/g, \"\");\n  return clean === \"\" ? \"pages/index.yaml\" : `pages/${clean}.yaml`;\n}\n\n/** Veilige bestandsnaam voor een id (symbolen kunnen elk Firestore-id hebben). */\nexport function idToFilename(id: string): string {\n  return id.replace(/[^a-zA-Z0-9_-]/g, \"_\");\n}\n\n/* ---------------- serialisatie (entiteit ⇄ plain object) ---------------- */\n\n/** Pagina-doc → bestandsobject met vaste, leesbare sleutelvolgorde. */\nexport function serializePage(page: Page & { id: string }): Record<string, unknown> {\n  return {\n    id: page.id,\n    title: page.title,\n    slug: page.slug,\n    path: page.path,\n    parentId: page.parentId ?? null,\n    order: page.order ?? 0,\n    ...(page.seo && Object.keys(page.seo).length > 0 ? { seo: page.seo } : {}),\n    blocks: page.blocks ?? [],\n    ...(page.translations && Object.keys(page.translations).length > 0 ? { translations: page.translations } : {}),\n  };\n}\n\nconst PageFileSchema = z.extend(PageSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(64)) });\n\n/** Bestandsobject → gevalideerde pagina. Gooit met een leesbare melding bij ongeldige inhoud. */\nexport function parsePageFile(obj: unknown): Page & { id: string } {\n  const res = PageFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldige pagina: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\nexport function serializeSymbol(symbol: SymbolDefinition & { id: string }): Record<string, unknown> {\n  return {\n    id: symbol.id,\n    name: symbol.name,\n    blocks: symbol.blocks ?? [],\n    ...(symbol.translations && Object.keys(symbol.translations).length > 0 ? { translations: symbol.translations } : {}),\n  };\n}\n\nconst SymbolFileSchema = z.extend(SymbolSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(120)) });\n\nexport function parseSymbolFile(obj: unknown): SymbolDefinition & { id: string } {\n  const res = SymbolFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig symbool: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\n/** Custom block → drie bestanden: block.yaml (meta + Field-IR), template.html, style.css. */\nexport function serializeCustomBlock(def: CustomBlock): { meta: Record<string, unknown>; template: string; css: string } {\n  return {\n    meta: { type: def.type, label: def.label, icon: def.icon, version: def.version, fields: def.fields },\n    template: def.template,\n    css: def.css,\n  };\n}\n\nexport function parseCustomBlockFiles(meta: unknown, template: string, css: string): CustomBlock {\n  const res = CustomBlockSchema.safeParse({ ...(meta as Record<string, unknown>), template, css });\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldige bouwsteen: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\n/* ---------------- nieuws & formulieren (round-trip in pull/push) ---------------- */\n\n/**\n * Runtime-schema voor nieuwsartikelen in de bestandslaag. `NewsArticle` is elders alleen een\n * TS-interface (het beheer schrijft rechtstreeks naar Firestore); voor pull/push valideren we\n * wél — een agent-geschreven YAML met een kapotte datum of ontbrekende titel hoort luid te\n * falen, niet stil een kapot artikel te maken. `createdAt`/`updatedAt` (servertimestamps)\n * blijven bewust buiten de bestanden: die beheert Firestore.\n */\nconst NewsFileSchema = z.object({\n  id: z.string().check(z.minLength(1)).check(z.maxLength(120)),\n  title: z.string().check(z.minLength(1)).check(z.maxLength(200)),\n  slug: z.string().check(z.minLength(1)).check(z.maxLength(200)),\n  excerpt: z.optional(z.string().check(z.maxLength(1000))),\n  body: z._default(z.string().check(z.maxLength(50_000)), \"\"),\n  bodyHtml: z.optional(z.string().check(z.maxLength(200_000))),\n  coverUrl: z.optional(z.string().check(z.maxLength(2000))),\n  date: z.string().check(z.regex(/^\\d{4}-\\d{2}-\\d{2}$/, \"datum als yyyy-mm-dd\")),\n  published: z._default(z.boolean(), false),\n});\n\n/** Nieuws-doc → bestandsobject (vaste sleutelvolgorde, zonder servertimestamps/lege velden). */\nexport function serializeNews(a: NewsArticle): Record<string, unknown> {\n  return {\n    id: a.id,\n    title: a.title,\n    slug: a.slug,\n    date: a.date,\n    published: a.published,\n    ...(a.excerpt ? { excerpt: a.excerpt } : {}),\n    ...(a.coverUrl ? { coverUrl: a.coverUrl } : {}),\n    body: a.body ?? \"\",\n    ...(a.bodyHtml ? { bodyHtml: a.bodyHtml } : {}),\n  };\n}\n\n/** Bestandsobject → gevalideerd nieuwsartikel. Gooit met een leesbare melding. */\nexport function parseNewsFile(obj: unknown): NewsArticle {\n  const res = NewsFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig nieuwsartikel: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n\nexport function serializeForm(form: FormDefinition & { id: string }): Record<string, unknown> {\n  return {\n    id: form.id,\n    name: form.name,\n    submitLabel: form.submitLabel,\n    successMessage: form.successMessage,\n    ...(form.successRedirect ? { successRedirect: form.successRedirect } : {}),\n    ...(form.confirmSubmitter !== undefined ? { confirmSubmitter: form.confirmSubmitter } : {}),\n    fields: form.fields,\n  };\n}\n\nconst FormFileSchema = z.extend(FormSchema, { id: z.string().check(z.minLength(1)).check(z.maxLength(120)) });\n\nexport function parseFormFile(obj: unknown): FormDefinition & { id: string } {\n  const res = FormFileSchema.safeParse(obj);\n  if (!res.success) {\n    const i = res.error.issues[0];\n    throw new Error(`ongeldig formulier: ${i?.path.join(\".\") || \"(root)\"}: ${i?.message}`);\n  }\n  return res.data;\n}\n"],"mappings":"AAUA,YAAY,OAAO;AACnB,SAAS,kBAA6B;AACtC,SAAS,oBAA2C;AACpD,SAAS,yBAA2C;AACpD,SAAS,kBAAuC;AAMzC,SAAS,gBAAgB,OAAwB;AACtD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,eAAe,EAAE,KAAK,GAAG,CAAC;AACzE,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,UAAU,OAAO,QAAQ,KAAgC,EAC5D,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EACjC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,CAAE;AACtC,WAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,EAC5F;AACA,SAAO,KAAK,UAAU,KAAK,KAAK;AAClC;AAIO,SAAS,YAAY,OAAwB;AAClD,QAAM,IAAI,gBAAgB,KAAK;AAC/B,MAAI,IAAI;AACR,QAAM,QAAQ;AACd,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,OAAO,EAAE,WAAW,CAAC,CAAC;AAC3B,QAAK,IAAI,QAAS;AAAA,EACpB;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AACxC;AAoBO,SAAS,cAAc,QAAgB,UAA4B;AACxE,SAAO,EAAE,QAAQ,eAAe,SAAS,GAAG,QAAQ,UAAU,UAAU,CAAC,EAAE;AAC7E;AAaO,SAAS,WAAW,MAA0B,OAAe,QAAwC;AAC1G,MAAI,SAAS,OAAW,QAAO,WAAW,SAAY,WAAW,WAAW,QAAQ,SAAS;AAC7F,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,WAAW,MAAO,QAAO;AAC7B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO;AACT;AAKO,SAAS,eAAe,MAAsB;AACnD,QAAM,QAAQ,KAAK,QAAQ,cAAc,EAAE;AAC3C,SAAO,UAAU,KAAK,qBAAqB,SAAS,KAAK;AAC3D;AAGO,SAAS,aAAa,IAAoB;AAC/C,SAAO,GAAG,QAAQ,mBAAmB,GAAG;AAC1C;AAKO,SAAS,cAAc,MAAsD;AAClF,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,UAAU,KAAK,YAAY;AAAA,IAC3B,OAAO,KAAK,SAAS;AAAA,IACrB,GAAI,KAAK,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE,SAAS,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IACxE,QAAQ,KAAK,UAAU,CAAC;AAAA,IACxB,GAAI,KAAK,gBAAgB,OAAO,KAAK,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;AAAA,EAC9G;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAGpG,SAAS,cAAc,KAAqC;AACjE,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,qBAAqB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACrF;AACA,SAAO,IAAI;AACb;AAEO,SAAS,gBAAgB,QAAoE;AAClG,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,QAAQ,OAAO,UAAU,CAAC;AAAA,IAC1B,GAAI,OAAO,gBAAgB,OAAO,KAAK,OAAO,YAAY,EAAE,SAAS,IAAI,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,EACpH;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC;AAEzG,SAAS,gBAAgB,KAAiD;AAC/E,QAAM,MAAM,iBAAiB,UAAU,GAAG;AAC1C,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,qBAAqB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACrF;AACA,SAAO,IAAI;AACb;AAGO,SAAS,qBAAqB,KAAoF;AACvH,SAAO;AAAA,IACL,MAAM,EAAE,MAAM,IAAI,MAAM,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,QAAQ,IAAI,OAAO;AAAA,IACnG,UAAU,IAAI;AAAA,IACd,KAAK,IAAI;AAAA,EACX;AACF;AAEO,SAAS,sBAAsB,MAAe,UAAkB,KAA0B;AAC/F,QAAM,MAAM,kBAAkB,UAAU,EAAE,GAAI,MAAkC,UAAU,IAAI,CAAC;AAC/F,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,wBAAwB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACxF;AACA,SAAO,IAAI;AACb;AAWA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC;AAAA,EAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC;AAAA,EAC9D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC;AAAA,EAC7D,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAI,CAAC,CAAC;AAAA,EACvD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAM,CAAC,GAAG,EAAE;AAAA,EAC1D,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAO,CAAC,CAAC;AAAA,EAC3D,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAI,CAAC,CAAC;AAAA,EACxD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,sBAAsB,CAAC;AAAA,EAC7E,WAAW,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;AAC1C,CAAC;AAGM,SAAS,cAAc,GAAyC;AACrE,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,OAAO,EAAE;AAAA,IACT,MAAM,EAAE;AAAA,IACR,MAAM,EAAE;AAAA,IACR,WAAW,EAAE;AAAA,IACb,GAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,MAAM,EAAE,QAAQ;AAAA,IAChB,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,EAC/C;AACF;AAGO,SAAS,cAAc,KAA2B;AACvD,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,2BAA2B,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EAC3F;AACA,SAAO,IAAI;AACb;AAEO,SAAS,cAAc,MAAgE;AAC5F,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,gBAAgB,KAAK;AAAA,IACrB,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;AAAA,IACxE,GAAI,KAAK,qBAAqB,SAAY,EAAE,kBAAkB,KAAK,iBAAiB,IAAI,CAAC;AAAA,IACzF,QAAQ,KAAK;AAAA,EACf;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC;AAErG,SAAS,cAAc,KAA+C;AAC3E,QAAM,MAAM,eAAe,UAAU,GAAG;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,UAAM,IAAI,IAAI,MAAM,OAAO,CAAC;AAC5B,UAAM,IAAI,MAAM,uBAAuB,GAAG,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,GAAG,OAAO,EAAE;AAAA,EACvF;AACA,SAAO,IAAI;AACb;","names":[]}

package/dist/all.d.ts

@@ -1,6 +1,6 @@
 /** Alle modules incl. shop (5.x-gedrag). */
-export declare const allModules: import("./modules").ModuleDefinition[];
+export declare const allModules: import("./modules/index.js").ModuleDefinition[];
 /** Alle admin-panelen incl. het shop-paneel (5.x-gedrag). */
-export declare const allPanels: import("./admin").PanelDefinition[];
-export { shopModule } from "./modules/shop";
-export { shopPanel } from "./admin/shop";
+export declare const allPanels: import("./admin/index.js").PanelDefinition[];
+export { shopModule } from "./modules/shop/index.js";
+export { shopPanel } from "./admin/shop/index.js";

package/dist/all.js

@@ -1,11 +1,11 @@
-import { builtinModules } from "./modules/builtins";
-import { shopModule } from "./modules/shop";
-import { builtinPanels } from "./admin/panelRegistry";
-import { shopPanel } from "./admin/shop";
+import { builtinModules } from "./modules/builtins.js";
+import { shopModule } from "./modules/shop/index.js";
+import { builtinPanels } from "./admin/panelRegistry.js";
+import { shopPanel } from "./admin/shop/index.js";
 const allModules = [...builtinModules, shopModule];
 const allPanels = [...builtinPanels, shopPanel];
-import { shopModule as shopModule2 } from "./modules/shop";
-import { shopPanel as shopPanel2 } from "./admin/shop";
+import { shopModule as shopModule2 } from "./modules/shop/index.js";
+import { shopPanel as shopPanel2 } from "./admin/shop/index.js";
 export {
   allModules,
   allPanels,

package/dist/auth/AuthProvider.d.ts

@@ -1,6 +1,6 @@
 import { type ReactNode } from "react";
-import { type User } from "firebase/auth";
-import { type Role, type XiClaims } from "./roles";
+import type { User } from "firebase/auth";
+import { type Role, type XiClaims } from "./roles.js";
 interface AuthState {
     /** Of Firebase überhaupt geconfigureerd is. */
     configured: boolean;

package/dist/auth/AuthProvider.js

@@ -7,16 +7,9 @@ import {
   useMemo,
   useState
 } from "react";
-import {
-  GoogleAuthProvider,
-  onAuthStateChanged,
-  signInWithEmailAndPassword,
-  signInWithPopup,
-  signOut as fbSignOut
-} from "firebase/auth";
-import { getFirebaseAuth, isFirebaseConfigured } from "../firebase/client";
-import { roleForSite } from "./roles";
-import { DEMO_EVENT, isDemoLoggedIn, setDemoLoggedIn } from "../demo/demoStore";
+import { hasAuthHint, isFirebaseConfigured, setAuthHint } from "../firebase/config.js";
+import { roleForSite } from "./roles.js";
+import { DEMO_EVENT, isDemoLoggedIn, setDemoLoggedIn } from "../demo/demoStore.js";
 const AuthContext = createContext(null);
 function AuthProvider({
   siteId,
@@ -35,6 +28,12 @@ function AuthProvider({
     window.addEventListener(DEMO_EVENT, sync);
     return () => window.removeEventListener(DEMO_EVENT, sync);
   }, [demo]);
+  async function authSdk() {
+    const [client, sdk] = await Promise.all([import("../firebase/client.js"), import("firebase/auth")]);
+    const auth = client.getFirebaseAuth();
+    if (!auth) throw new Error("Firebase is niet geconfigureerd.");
+    return { auth, sdk };
+  }
   async function loadClaims(u, forceRefresh = false) {
     if (!u) {
       setClaims(null);
@@ -47,18 +46,33 @@ function AuthProvider({
     });
   }
   useEffect(() => {
-    const auth = getFirebaseAuth();
-    if (!auth) {
+    if (!configured || !hasAuthHint()) {
       setLoading(false);
       return;
     }
-    const unsub = onAuthStateChanged(auth, async (u) => {
-      setUser(u);
-      await loadClaims(u);
-      setLoading(false);
-    });
-    return () => unsub();
-  }, []);
+    let unsub;
+    let afgebroken = false;
+    void (async () => {
+      const { auth, sdk } = await authSdk().catch(() => ({ auth: null, sdk: null }));
+      if (!auth || afgebroken) {
+        setLoading(false);
+        return;
+      }
+      void sdk.getRedirectResult(auth).catch((e) => {
+        console.error("[xicms] inloggen via redirect mislukt:", e);
+      });
+      unsub = sdk.onAuthStateChanged(auth, async (u) => {
+        setUser(u);
+        setAuthHint(Boolean(u));
+        await loadClaims(u);
+        setLoading(false);
+      });
+    })();
+    return () => {
+      afgebroken = true;
+      unsub?.();
+    };
+  }, [configured]);
   const value = useMemo(() => {
     const demoActiveLogin = demo && demoLoggedIn;
     const effectiveUser = demoActiveLogin ? { uid: "demo", email: "demo@voorbeeld.nl", displayName: "Demo-beheerder" } : user;
@@ -70,25 +84,34 @@ function AuthProvider({
       claims: effectiveClaims,
       role: roleForSite(effectiveClaims, siteId),
       async signIn(email, password) {
-        const auth = getFirebaseAuth();
-        if (!auth) throw new Error("Firebase is niet geconfigureerd.");
-        await signInWithEmailAndPassword(auth, email, password);
+        const { auth, sdk } = await authSdk();
+        await sdk.signInWithEmailAndPassword(auth, email, password);
+        setAuthHint(true);
       },
       async signInWithGoogle() {
-        const auth = getFirebaseAuth();
-        if (!auth) throw new Error("Firebase is niet geconfigureerd.");
-        await signInWithPopup(auth, new GoogleAuthProvider());
+        const { auth, sdk } = await authSdk();
+        const provider = new sdk.GoogleAuthProvider();
+        try {
+          await sdk.signInWithPopup(auth, provider);
+          setAuthHint(true);
+        } catch (e) {
+          const code = e?.code ?? "";
+          if (code === "auth/cancelled-popup-request" || code === "auth/popup-closed-by-user") throw e;
+          await sdk.signInWithRedirect(auth, provider);
+        }
       },
       async signOut() {
         if (demo) {
           setDemoLoggedIn(false);
           return;
         }
-        const auth = getFirebaseAuth();
-        if (auth) await fbSignOut(auth);
+        const { auth, sdk } = await authSdk();
+        await sdk.signOut(auth);
+        setAuthHint(false);
       },
       async refresh() {
-        await loadClaims(getFirebaseAuth()?.currentUser ?? user, true);
+        const { auth } = await authSdk();
+        await loadClaims(auth.currentUser ?? user, true);
       },
       demo,
       demoSignIn() {

package/dist/auth/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/AuthProvider.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useEffect,\n  useMemo,\n  useState,\n  type ReactNode,\n} from \"react\";\nimport {\n  GoogleAuthProvider,\n  onAuthStateChanged,\n  signInWithEmailAndPassword,\n  signInWithPopup,\n  signOut as fbSignOut,\n  type User,\n} from \"firebase/auth\";\nimport { getFirebaseAuth, isFirebaseConfigured } from \"../firebase/client\";\nimport { roleForSite, type Role, type XiClaims } from \"./roles\";\nimport { DEMO_EVENT, isDemoLoggedIn, setDemoLoggedIn } from \"../demo/demoStore\";\n\ninterface AuthState {\n  /** Of Firebase überhaupt geconfigureerd is. */\n  configured: boolean;\n  /** Bezig met laden van de auth-status. */\n  loading: boolean;\n  user: User | null;\n  claims: XiClaims | null;\n  /** Effectieve rol op de huidige site (uit `siteId`). */\n  role: Role | null;\n  signIn: (email: string, password: string) => Promise<void>;\n  /** Inloggen met Google (popup). */\n  signInWithGoogle: () => Promise<void>;\n  signOut: () => Promise<void>;\n  /** Forceer het opnieuw inlezen van claims (na een rolwijziging). */\n  refresh: () => Promise<void>;\n  /** Demo-bewerkmodus actief (config.demoEditing) — pseudo-login, niets wordt opgeslagen. */\n  demo: boolean;\n  /** Pseudo-login voor de demo: geeft lokaal een siteadmin-rol zonder Firebase. */\n  demoSignIn: () => void;\n}\n\nconst AuthContext = createContext<AuthState | null>(null);\n\nexport function AuthProvider({\n  siteId,\n  demo = false,\n  children,\n}: {\n  siteId: string;\n  demo?: boolean;\n  children: ReactNode;\n}) {\n  const configured = isFirebaseConfigured();\n  const [loading, setLoading] = useState(configured);\n  const [user, setUser] = useState<User | null>(null);\n  const [claims, setClaims] = useState<XiClaims | null>(null);\n  const [demoLoggedIn, setDemoLoggedInState] = useState(false);\n\n  // Demo-login uit de (sessie)opslag inlezen + meeluisteren met wijzigingen (login/logout/reset).\n  useEffect(() => {\n    if (!demo) return;\n    const sync = () => setDemoLoggedInState(isDemoLoggedIn());\n    sync();\n    window.addEventListener(DEMO_EVENT, sync);\n    return () => window.removeEventListener(DEMO_EVENT, sync);\n  }, [demo]);\n\n  async function loadClaims(u: User | null, forceRefresh = false) {\n    if (!u) {\n      setClaims(null);\n      return;\n    }\n    // Standaard GEEN geforceerde token-refresh: dat is een netwerk-roundtrip op élke\n    // auth-state-change (incl. eerste load van elke ingelogde editor). Alleen refresh() —\n    // na een rolwijziging — forceert, want dan is het gecachte token per definitie verouderd.\n    const token = await u.getIdTokenResult(forceRefresh);\n    setClaims({\n      superadmin: token.claims.superadmin === true,\n      roles: (token.claims.roles as XiClaims[\"roles\"]) ?? {},\n    });\n  }\n\n  useEffect(() => {\n    const auth = getFirebaseAuth();\n    if (!auth) {\n      setLoading(false);\n      return;\n    }\n    const unsub = onAuthStateChanged(auth, async (u) => {\n      setUser(u);\n      await loadClaims(u);\n      setLoading(false);\n    });\n    return () => unsub();\n  }, []);\n\n  const value = useMemo<AuthState>(() => {\n    // In de demo met actieve pseudo-login: doe alsof een siteadmin is ingelogd (lokaal, geen Firebase).\n    const demoActiveLogin = demo && demoLoggedIn;\n    const effectiveUser = demoActiveLogin\n      ? ({ uid: \"demo\", email: \"demo@voorbeeld.nl\", displayName: \"Demo-beheerder\" } as unknown as User)\n      : user;\n    const effectiveClaims: XiClaims | null = demoActiveLogin ? { roles: { [siteId]: \"siteadmin\" } } : claims;\n\n    return {\n      configured,\n      loading,\n      user: effectiveUser,\n      claims: effectiveClaims,\n      role: roleForSite(effectiveClaims, siteId),\n      async signIn(email, password) {\n        const auth = getFirebaseAuth();\n        if (!auth) throw new Error(\"Firebase is niet geconfigureerd.\");\n        await signInWithEmailAndPassword(auth, email, password);\n      },\n      async signInWithGoogle() {\n        const auth = getFirebaseAuth();\n        if (!auth) throw new Error(\"Firebase is niet geconfigureerd.\");\n        await signInWithPopup(auth, new GoogleAuthProvider());\n      },\n      async signOut() {\n        if (demo) {\n          setDemoLoggedIn(false);\n          return;\n        }\n        const auth = getFirebaseAuth();\n        if (auth) await fbSignOut(auth);\n      },\n      async refresh() {\n        // Altijd de actuele Firebase-user (niet de gememoïseerde) — na een snelle\n        // uitlog/inlog-wissel zou de closure anders claims van de vorige user verversen.\n        // Force-refresh: na een rolwijziging is het gecachte token verouderd.\n        await loadClaims(getFirebaseAuth()?.currentUser ?? user, true);\n      },\n      demo,\n      demoSignIn() {\n        setDemoLoggedIn(true);\n      },\n    };\n  }, [configured, loading, user, claims, siteId, demo, demoLoggedIn]);\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\nexport function useAuth(): AuthState {\n  const ctx = useContext(AuthContext);\n  if (!ctx) throw new Error(\"useAuth moet binnen <XiCMSProvider> worden gebruikt.\");\n  return ctx;\n}\n"],"mappings":";AA+IS;AA7IT;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AAAA,OAEN;AACP,SAAS,iBAAiB,4BAA4B;AACtD,SAAS,mBAA6C;AACtD,SAAS,YAAY,gBAAgB,uBAAuB;AAuB5D,MAAM,cAAc,cAAgC,IAAI;AAEjD,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA,OAAO;AAAA,EACP;AACF,GAIG;AACD,QAAM,aAAa,qBAAqB;AACxC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,UAAU;AACjD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAsB,IAAI;AAClD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA0B,IAAI;AAC1D,QAAM,CAAC,cAAc,oBAAoB,IAAI,SAAS,KAAK;AAG3D,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,UAAM,OAAO,MAAM,qBAAqB,eAAe,CAAC;AACxD,SAAK;AACL,WAAO,iBAAiB,YAAY,IAAI;AACxC,WAAO,MAAM,OAAO,oBAAoB,YAAY,IAAI;AAAA,EAC1D,GAAG,CAAC,IAAI,CAAC;AAET,iBAAe,WAAW,GAAgB,eAAe,OAAO;AAC9D,QAAI,CAAC,GAAG;AACN,gBAAU,IAAI;AACd;AAAA,IACF;AAIA,UAAM,QAAQ,MAAM,EAAE,iBAAiB,YAAY;AACnD,cAAU;AAAA,MACR,YAAY,MAAM,OAAO,eAAe;AAAA,MACxC,OAAQ,MAAM,OAAO,SAA+B,CAAC;AAAA,IACvD,CAAC;AAAA,EACH;AAEA,YAAU,MAAM;AACd,UAAM,OAAO,gBAAgB;AAC7B,QAAI,CAAC,MAAM;AACT,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,UAAM,QAAQ,mBAAmB,MAAM,OAAO,MAAM;AAClD,cAAQ,CAAC;AACT,YAAM,WAAW,CAAC;AAClB,iBAAW,KAAK;AAAA,IAClB,CAAC;AACD,WAAO,MAAM,MAAM;AAAA,EACrB,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ,QAAmB,MAAM;AAErC,UAAM,kBAAkB,QAAQ;AAChC,UAAM,gBAAgB,kBACjB,EAAE,KAAK,QAAQ,OAAO,qBAAqB,aAAa,iBAAiB,IAC1E;AACJ,UAAM,kBAAmC,kBAAkB,EAAE,OAAO,EAAE,CAAC,MAAM,GAAG,YAAY,EAAE,IAAI;AAElG,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,MAAM,YAAY,iBAAiB,MAAM;AAAA,MACzC,MAAM,OAAO,OAAO,UAAU;AAC5B,cAAM,OAAO,gBAAgB;AAC7B,YAAI,CAAC,KAAM,OAAM,IAAI,MAAM,kCAAkC;AAC7D,cAAM,2BAA2B,MAAM,OAAO,QAAQ;AAAA,MACxD;AAAA,MACA,MAAM,mBAAmB;AACvB,cAAM,OAAO,gBAAgB;AAC7B,YAAI,CAAC,KAAM,OAAM,IAAI,MAAM,kCAAkC;AAC7D,cAAM,gBAAgB,MAAM,IAAI,mBAAmB,CAAC;AAAA,MACtD;AAAA,MACA,MAAM,UAAU;AACd,YAAI,MAAM;AACR,0BAAgB,KAAK;AACrB;AAAA,QACF;AACA,cAAM,OAAO,gBAAgB;AAC7B,YAAI,KAAM,OAAM,UAAU,IAAI;AAAA,MAChC;AAAA,MACA,MAAM,UAAU;AAId,cAAM,WAAW,gBAAgB,GAAG,eAAe,MAAM,IAAI;AAAA,MAC/D;AAAA,MACA;AAAA,MACA,aAAa;AACX,wBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,SAAS,MAAM,QAAQ,QAAQ,MAAM,YAAY,CAAC;AAElE,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAAqB;AACnC,QAAM,MAAM,WAAW,WAAW;AAClC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,sDAAsD;AAChF,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/auth/AuthProvider.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useEffect,\n  useMemo,\n  useState,\n  type ReactNode,\n} from \"react\";\nimport type { User } from \"firebase/auth\";\nimport { hasAuthHint, isFirebaseConfigured, setAuthHint } from \"../firebase/config\";\nimport { roleForSite, type Role, type XiClaims } from \"./roles\";\nimport { DEMO_EVENT, isDemoLoggedIn, setDemoLoggedIn } from \"../demo/demoStore\";\n\ninterface AuthState {\n  /** Of Firebase überhaupt geconfigureerd is. */\n  configured: boolean;\n  /** Bezig met laden van de auth-status. */\n  loading: boolean;\n  user: User | null;\n  claims: XiClaims | null;\n  /** Effectieve rol op de huidige site (uit `siteId`). */\n  role: Role | null;\n  signIn: (email: string, password: string) => Promise<void>;\n  /** Inloggen met Google (popup). */\n  signInWithGoogle: () => Promise<void>;\n  signOut: () => Promise<void>;\n  /** Forceer het opnieuw inlezen van claims (na een rolwijziging). */\n  refresh: () => Promise<void>;\n  /** Demo-bewerkmodus actief (config.demoEditing) — pseudo-login, niets wordt opgeslagen. */\n  demo: boolean;\n  /** Pseudo-login voor de demo: geeft lokaal een siteadmin-rol zonder Firebase. */\n  demoSignIn: () => void;\n}\n\nconst AuthContext = createContext<AuthState | null>(null);\n\nexport function AuthProvider({\n  siteId,\n  demo = false,\n  children,\n}: {\n  siteId: string;\n  demo?: boolean;\n  children: ReactNode;\n}) {\n  const configured = isFirebaseConfigured();\n  const [loading, setLoading] = useState(configured);\n  const [user, setUser] = useState<User | null>(null);\n  const [claims, setClaims] = useState<XiClaims | null>(null);\n  const [demoLoggedIn, setDemoLoggedInState] = useState(false);\n\n  // Demo-login uit de (sessie)opslag inlezen + meeluisteren met wijzigingen (login/logout/reset).\n  useEffect(() => {\n    if (!demo) return;\n    const sync = () => setDemoLoggedInState(isDemoLoggedIn());\n    sync();\n    window.addEventListener(DEMO_EVENT, sync);\n    return () => window.removeEventListener(DEMO_EVENT, sync);\n  }, [demo]);\n\n  /** Laadt de auth-SDK pas wanneer er iets mee moet gebeuren (inloggen, uitloggen, verversen). */\n  async function authSdk() {\n    const [client, sdk] = await Promise.all([import(\"../firebase/client\"), import(\"firebase/auth\")]);\n    const auth = client.getFirebaseAuth();\n    if (!auth) throw new Error(\"Firebase is niet geconfigureerd.\");\n    return { auth, sdk };\n  }\n\n  async function loadClaims(u: User | null, forceRefresh = false) {\n    if (!u) {\n      setClaims(null);\n      return;\n    }\n    // Standaard GEEN geforceerde token-refresh: dat is een netwerk-roundtrip op élke\n    // auth-state-change (incl. eerste load van elke ingelogde editor). Alleen refresh() —\n    // na een rolwijziging — forceert, want dan is het gecachte token per definitie verouderd.\n    const token = await u.getIdTokenResult(forceRefresh);\n    setClaims({\n      superadmin: token.claims.superadmin === true,\n      roles: (token.claims.roles as XiClaims[\"roles\"]) ?? {},\n    });\n  }\n\n  useEffect(() => {\n    // Zonder sessie-hint laden we de auth-SDK NIET: een anonieme bezoeker hoeft ~1 MB niet te\n    // downloaden om te ontdekken dat hij niet is ingelogd. Zodra hij inlogt of het beheer opent\n    // komt de SDK alsnog, en vindt onAuthStateChanged een bestaande sessie meteen terug.\n    if (!configured || !hasAuthHint()) {\n      setLoading(false);\n      return;\n    }\n    let unsub: (() => void) | undefined;\n    let afgebroken = false;\n    void (async () => {\n      const { auth, sdk } = await authSdk().catch(() => ({ auth: null, sdk: null }) as never);\n      if (!auth || afgebroken) {\n        setLoading(false);\n        return;\n      }\n      // Terugkeer van een redirect-login afronden (zie signInWithGoogle). `onAuthStateChanged`\n      // pikt de sessie zelf al op; deze aanroep is er om een FOUT bij terugkomst niet stil te\n      // laten verdwijnen — anders sta je weer op het inlogscherm zonder te weten waarom.\n      void sdk.getRedirectResult(auth).catch((e: unknown) => {\n        console.error(\"[xicms] inloggen via redirect mislukt:\", e);\n      });\n\n      unsub = sdk.onAuthStateChanged(auth, async (u: User | null) => {\n        setUser(u);\n        setAuthHint(Boolean(u));\n        await loadClaims(u);\n        setLoading(false);\n      });\n    })();\n    return () => {\n      afgebroken = true;\n      unsub?.();\n    };\n  }, [configured]);\n\n  const value = useMemo<AuthState>(() => {\n    // In de demo met actieve pseudo-login: doe alsof een siteadmin is ingelogd (lokaal, geen Firebase).\n    const demoActiveLogin = demo && demoLoggedIn;\n    const effectiveUser = demoActiveLogin\n      ? ({ uid: \"demo\", email: \"demo@voorbeeld.nl\", displayName: \"Demo-beheerder\" } as unknown as User)\n      : user;\n    const effectiveClaims: XiClaims | null = demoActiveLogin ? { roles: { [siteId]: \"siteadmin\" } } : claims;\n\n    return {\n      configured,\n      loading,\n      user: effectiveUser,\n      claims: effectiveClaims,\n      role: roleForSite(effectiveClaims, siteId),\n      async signIn(email, password) {\n        const { auth, sdk } = await authSdk();\n        await sdk.signInWithEmailAndPassword(auth, email, password);\n        setAuthHint(true);\n      },\n      async signInWithGoogle() {\n        const { auth, sdk } = await authSdk();\n        const provider = new sdk.GoogleAuthProvider();\n        try {\n          await sdk.signInWithPopup(auth, provider);\n          setAuthHint(true);\n        } catch (e) {\n          // TERUGVAL OP REDIRECT. `signInWithPopup` faalt in de praktijk vaker dan je denkt: een\n          // popup-blokkade, een browser die de popup als tab opent (dan raakt Firebase het\n          // venster kwijt), of strengere cookie-instellingen. Gemeten op localhost: de popup ging\n          // dicht, de gebruiker bleef uitgelogd, en er kwam GEEN foutcode — waardoor het\n          // inlogscherm alleen \"mislukt of geannuleerd\" kon melden. Doodlopend voor de klant.\n          //\n          // De redirect-variant heeft geen venster nodig en werkt daarom overal; het resultaat\n          // wordt bij terugkomst opgepikt (zie de getRedirectResult-effect hieronder). Alleen bij\n          // een échte annulering door de gebruiker gooien we door — dan opnieuw beginnen is\n          // precies niet wat hij wil.\n          const code = (e as { code?: string })?.code ?? \"\";\n          if (code === \"auth/cancelled-popup-request\" || code === \"auth/popup-closed-by-user\") throw e;\n          await sdk.signInWithRedirect(auth, provider);\n        }\n      },\n      async signOut() {\n        if (demo) {\n          setDemoLoggedIn(false);\n          return;\n        }\n        const { auth, sdk } = await authSdk();\n        await sdk.signOut(auth);\n        setAuthHint(false);\n      },\n      async refresh() {\n        // Altijd de actuele Firebase-user (niet de gememoïseerde) — na een snelle\n        // uitlog/inlog-wissel zou de closure anders claims van de vorige user verversen.\n        // Force-refresh: na een rolwijziging is het gecachte token verouderd.\n        const { auth } = await authSdk();\n        await loadClaims(auth.currentUser ?? user, true);\n      },\n      demo,\n      demoSignIn() {\n        setDemoLoggedIn(true);\n      },\n    };\n  }, [configured, loading, user, claims, siteId, demo, demoLoggedIn]);\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;\n}\n\nexport function useAuth(): AuthState {\n  const ctx = useContext(AuthContext);\n  if (!ctx) throw new Error(\"useAuth moet binnen <XiCMSProvider> worden gebruikt.\");\n  return ctx;\n}\n"],"mappings":";AAyLS;AAvLT;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP,SAAS,aAAa,sBAAsB,mBAAmB;AAC/D,SAAS,mBAA6C;AACtD,SAAS,YAAY,gBAAgB,uBAAuB;AAuB5D,MAAM,cAAc,cAAgC,IAAI;AAEjD,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA,OAAO;AAAA,EACP;AACF,GAIG;AACD,QAAM,aAAa,qBAAqB;AACxC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,UAAU;AACjD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAsB,IAAI;AAClD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA0B,IAAI;AAC1D,QAAM,CAAC,cAAc,oBAAoB,IAAI,SAAS,KAAK;AAG3D,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,UAAM,OAAO,MAAM,qBAAqB,eAAe,CAAC;AACxD,SAAK;AACL,WAAO,iBAAiB,YAAY,IAAI;AACxC,WAAO,MAAM,OAAO,oBAAoB,YAAY,IAAI;AAAA,EAC1D,GAAG,CAAC,IAAI,CAAC;AAGT,iBAAe,UAAU;AACvB,UAAM,CAAC,QAAQ,GAAG,IAAI,MAAM,QAAQ,IAAI,CAAC,OAAO,oBAAoB,GAAG,OAAO,eAAe,CAAC,CAAC;AAC/F,UAAM,OAAO,OAAO,gBAAgB;AACpC,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,kCAAkC;AAC7D,WAAO,EAAE,MAAM,IAAI;AAAA,EACrB;AAEA,iBAAe,WAAW,GAAgB,eAAe,OAAO;AAC9D,QAAI,CAAC,GAAG;AACN,gBAAU,IAAI;AACd;AAAA,IACF;AAIA,UAAM,QAAQ,MAAM,EAAE,iBAAiB,YAAY;AACnD,cAAU;AAAA,MACR,YAAY,MAAM,OAAO,eAAe;AAAA,MACxC,OAAQ,MAAM,OAAO,SAA+B,CAAC;AAAA,IACvD,CAAC;AAAA,EACH;AAEA,YAAU,MAAM;AAId,QAAI,CAAC,cAAc,CAAC,YAAY,GAAG;AACjC,iBAAW,KAAK;AAChB;AAAA,IACF;AACA,QAAI;AACJ,QAAI,aAAa;AACjB,UAAM,YAAY;AAChB,YAAM,EAAE,MAAM,IAAI,IAAI,MAAM,QAAQ,EAAE,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,KAAK,EAAW;AACtF,UAAI,CAAC,QAAQ,YAAY;AACvB,mBAAW,KAAK;AAChB;AAAA,MACF;AAIA,WAAK,IAAI,kBAAkB,IAAI,EAAE,MAAM,CAAC,MAAe;AACrD,gBAAQ,MAAM,0CAA0C,CAAC;AAAA,MAC3D,CAAC;AAED,cAAQ,IAAI,mBAAmB,MAAM,OAAO,MAAmB;AAC7D,gBAAQ,CAAC;AACT,oBAAY,QAAQ,CAAC,CAAC;AACtB,cAAM,WAAW,CAAC;AAClB,mBAAW,KAAK;AAAA,MAClB,CAAC;AAAA,IACH,GAAG;AACH,WAAO,MAAM;AACX,mBAAa;AACb,cAAQ;AAAA,IACV;AAAA,EACF,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,QAAQ,QAAmB,MAAM;AAErC,UAAM,kBAAkB,QAAQ;AAChC,UAAM,gBAAgB,kBACjB,EAAE,KAAK,QAAQ,OAAO,qBAAqB,aAAa,iBAAiB,IAC1E;AACJ,UAAM,kBAAmC,kBAAkB,EAAE,OAAO,EAAE,CAAC,MAAM,GAAG,YAAY,EAAE,IAAI;AAElG,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,MAAM,YAAY,iBAAiB,MAAM;AAAA,MACzC,MAAM,OAAO,OAAO,UAAU;AAC5B,cAAM,EAAE,MAAM,IAAI,IAAI,MAAM,QAAQ;AACpC,cAAM,IAAI,2BAA2B,MAAM,OAAO,QAAQ;AAC1D,oBAAY,IAAI;AAAA,MAClB;AAAA,MACA,MAAM,mBAAmB;AACvB,cAAM,EAAE,MAAM,IAAI,IAAI,MAAM,QAAQ;AACpC,cAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,YAAI;AACF,gBAAM,IAAI,gBAAgB,MAAM,QAAQ;AACxC,sBAAY,IAAI;AAAA,QAClB,SAAS,GAAG;AAWV,gBAAM,OAAQ,GAAyB,QAAQ;AAC/C,cAAI,SAAS,kCAAkC,SAAS,4BAA6B,OAAM;AAC3F,gBAAM,IAAI,mBAAmB,MAAM,QAAQ;AAAA,QAC7C;AAAA,MACF;AAAA,MACA,MAAM,UAAU;AACd,YAAI,MAAM;AACR,0BAAgB,KAAK;AACrB;AAAA,QACF;AACA,cAAM,EAAE,MAAM,IAAI,IAAI,MAAM,QAAQ;AACpC,cAAM,IAAI,QAAQ,IAAI;AACtB,oBAAY,KAAK;AAAA,MACnB;AAAA,MACA,MAAM,UAAU;AAId,cAAM,EAAE,KAAK,IAAI,MAAM,QAAQ;AAC/B,cAAM,WAAW,KAAK,eAAe,MAAM,IAAI;AAAA,MACjD;AAAA,MACA;AAAA,MACA,aAAa;AACX,wBAAgB,IAAI;AAAA,MACtB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,SAAS,MAAM,QAAQ,QAAQ,MAAM,YAAY,CAAC;AAElE,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,SAAS,UAAqB;AACnC,QAAM,MAAM,WAAW,WAAW;AAClC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,sDAAsD;AAChF,SAAO;AACT;","names":[]}

package/dist/auth/LoginForm.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useState } from "react";
-import { useAuth } from "./AuthProvider";
+import { useAuth } from "./AuthProvider.js";
 function authErrorMessage(e, fallback) {
   const code = e?.code ?? "";
   switch (code) {

package/dist/auth/roles.js

@@ -1,7 +1,10 @@
 function roleForSite(claims, siteId) {
   if (!claims) return null;
   if (claims.superadmin) return "superadmin";
-  return claims.roles?.[siteId] ?? null;
+  const roles = claims.roles;
+  if (!roles || !Object.hasOwn(roles, siteId)) return null;
+  const role = roles[siteId];
+  return role === "siteadmin" || role === "editor" ? role : null;
 }
 function canEdit(role) {
   return role === "superadmin" || role === "siteadmin" || role === "editor";

package/dist/auth/roles.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/roles.ts"],"sourcesContent":["/** Rollen binnen XiCMS. */\nexport type Role = \"superadmin\" | \"siteadmin\" | \"editor\";\n\n/** Vorm van de custom claims op het Firebase ID-token. */\nexport interface XiClaims {\n  superadmin?: boolean;\n  roles?: Record<string, \"siteadmin\" | \"editor\">;\n}\n\n/** De effectieve rol van een gebruiker op één site. */\nexport function roleForSite(claims: XiClaims | null | undefined, siteId: string): Role | null {\n  if (!claims) return null;\n  if (claims.superadmin) return \"superadmin\";\n  return claims.roles?.[siteId] ?? null;\n}\n\n/** Mag deze rol content bewerken? */\nexport function canEdit(role: Role | null): boolean {\n  return role === \"superadmin\" || role === \"siteadmin\" || role === \"editor\";\n}\n\n/** Mag deze rol de site beheren (instellingen, accounts voor zover toegestaan)? */\nexport function canManageSite(role: Role | null): boolean {\n  return role === \"superadmin\" || role === \"siteadmin\";\n}\n\n/** Alleen de superadmin mag sites en accounts aanmaken. */\nexport function isSuperadmin(claims: XiClaims | null | undefined): boolean {\n  return Boolean(claims?.superadmin);\n}\n"],"mappings":"AAUO,SAAS,YAAY,QAAqC,QAA6B;AAC5F,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,WAAY,QAAO;AAC9B,SAAO,OAAO,QAAQ,MAAM,KAAK;AACnC;AAGO,SAAS,QAAQ,MAA4B;AAClD,SAAO,SAAS,gBAAgB,SAAS,eAAe,SAAS;AACnE;AAGO,SAAS,cAAc,MAA4B;AACxD,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAGO,SAAS,aAAa,QAA8C;AACzE,SAAO,QAAQ,QAAQ,UAAU;AACnC;","names":[]}
+{"version":3,"sources":["../../src/auth/roles.ts"],"sourcesContent":["/** Rollen binnen XiCMS. */\nexport type Role = \"superadmin\" | \"siteadmin\" | \"editor\";\n\n/** Vorm van de custom claims op het Firebase ID-token. */\nexport interface XiClaims {\n  superadmin?: boolean;\n  roles?: Record<string, \"siteadmin\" | \"editor\">;\n}\n\n/** De effectieve rol van een gebruiker op één site. */\nexport function roleForSite(claims: XiClaims | null | undefined, siteId: string): Role | null {\n  if (!claims) return null;\n  if (claims.superadmin) return \"superadmin\";\n  const roles = claims.roles;\n  // `roles[siteId]` zou zonder eigen-sleutel-check doorlezen naar Object.prototype: een siteId als\n  // \"constructor\" of \"toString\" leverde dan een functie op i.p.v. null — het retourtype loog. Niet\n  // uitbuitbaar (canEdit/canManageSite vergelijken met ===), maar `role` is publiek geëxporteerd,\n  // dus een klantrepo die `if (role)` schrijft kreeg een truthy waarde. Meteen ook de waarde\n  // narrowen: claims komen van Cloud Functions, maar het type moet waar zijn zonder dat vertrouwen.\n  if (!roles || !Object.hasOwn(roles, siteId)) return null;\n  const role = roles[siteId];\n  return role === \"siteadmin\" || role === \"editor\" ? role : null;\n}\n\n/** Mag deze rol content bewerken? */\nexport function canEdit(role: Role | null): boolean {\n  return role === \"superadmin\" || role === \"siteadmin\" || role === \"editor\";\n}\n\n/** Mag deze rol de site beheren (instellingen, accounts voor zover toegestaan)? */\nexport function canManageSite(role: Role | null): boolean {\n  return role === \"superadmin\" || role === \"siteadmin\";\n}\n\n/** Alleen de superadmin mag sites en accounts aanmaken. */\nexport function isSuperadmin(claims: XiClaims | null | undefined): boolean {\n  return Boolean(claims?.superadmin);\n}\n"],"mappings":"AAUO,SAAS,YAAY,QAAqC,QAA6B;AAC5F,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,WAAY,QAAO;AAC9B,QAAM,QAAQ,OAAO;AAMrB,MAAI,CAAC,SAAS,CAAC,OAAO,OAAO,OAAO,MAAM,EAAG,QAAO;AACpD,QAAM,OAAO,MAAM,MAAM;AACzB,SAAO,SAAS,eAAe,SAAS,WAAW,OAAO;AAC5D;AAGO,SAAS,QAAQ,MAA4B;AAClD,SAAO,SAAS,gBAAgB,SAAS,eAAe,SAAS;AACnE;AAGO,SAAS,cAAc,MAA4B;AACxD,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAGO,SAAS,aAAa,QAA8C;AACzE,SAAO,QAAQ,QAAQ,UAAU;AACnC;","names":[]}

package/dist/blocks/BlockRenderer.d.ts

@@ -1,4 +1,4 @@
-import { type BlockRegistry } from "./registry";
+import { type BlockRegistry } from "./registry.js";
 /**
  * Rendert een blocks-array via de registry. Server-safe (geen "use client"): bruikbaar in
  * React Server Components én client. Geef de registry expliciet mee (zo werkt server-rendering);

package/dist/blocks/BlockRenderer.js

@@ -1,7 +1,7 @@
 import { Fragment, jsx } from "react/jsx-runtime";
-import { validateBlocks } from "./registry";
-import { BlockErrorBoundary } from "./BlockErrorBoundary";
-import { blockStyleAttrs } from "./blockStyle";
+import { validateBlocks } from "./registry.js";
+import { BlockErrorBoundary } from "./BlockErrorBoundary.js";
+import { blockStyleAttrs } from "./blockStyle.js";
 function BlockRenderer({
   blocks,
   registry,

package/dist/blocks/blockStyle.d.ts

@@ -1,5 +1,5 @@
 import type { CSSProperties } from "react";
-import type { BlockStyle } from "../schema/blocks";
+import type { BlockStyle } from "../schema/blocks.js";
 export interface BlockStyleAttrs {
     id?: string;
     className: string;

package/dist/blocks/builtins/Accordion.d.ts

@@ -1,2 +1,2 @@
 import type { z } from "zod";
-export declare const accordionBlock: import("..").BlockDefinition<z.ZodTypeAny>;
+export declare const accordionBlock: import("../index.js").BlockDefinition<z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;

package/dist/blocks/builtins/Accordion.js

@@ -1,10 +1,10 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useState } from "react";
-import { AccordionBlockSchema } from "../../schema/blocks";
-import { defineBlock } from "../registry";
+import { AccordionBlockSchema } from "../../schema/blocks.js";
+import { defineBlock } from "../registry.js";
 import { Collapsible } from "@astryxdesign/core/Collapsible";
-import { VStack, Heading, Text } from "../ui";
+import { VStack, Heading, Text } from "../ui/index.js";
 function AccordionRender({ block }) {
   const items = (block.items ?? []).filter((i) => i.title);
   const [openIdx, setOpenIdx] = useState(null);
@@ -15,9 +15,16 @@ function AccordionRender({ block }) {
       const body = it.bodyHtml ? (
         // Server-side gesanitized bij publiceren (*Html-velden) — zie functions/lib/sanitize.
         // eslint-disable-next-line react/no-danger
-        /* @__PURE__ */ jsx("div", { className: "xicms-richtext", dangerouslySetInnerHTML: { __html: it.bodyHtml } })
-      ) : /* @__PURE__ */ jsx(Text, { color: "secondary", children: it.body });
-      const trigger = /* @__PURE__ */ jsx(Text, { weight: "bold", children: it.title });
+        /* @__PURE__ */ jsx(
+          "div",
+          {
+            className: "xicms-richtext",
+            "data-xicms-edit": `items.${i}.bodyHtml`,
+            dangerouslySetInnerHTML: { __html: it.bodyHtml }
+          }
+        )
+      ) : /* @__PURE__ */ jsx(Text, { color: "secondary", "data-xicms-edit": `items.${i}.body`, children: it.body });
+      const trigger = /* @__PURE__ */ jsx(Text, { weight: "bold", "data-xicms-edit": `items.${i}.title`, children: it.title });
       return block.multiple ? /* @__PURE__ */ jsx(Collapsible, { trigger, defaultIsOpen: false, children: body }, i) : /* @__PURE__ */ jsx(
         Collapsible,
         {

package/dist/blocks/builtins/Accordion.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/blocks/builtins/Accordion.tsx"],"sourcesContent":["\"use client\";\n\nimport { useState } from \"react\";\nimport type { z } from \"zod\";\nimport { AccordionBlockSchema } from \"../../schema/blocks\";\nimport { defineBlock, type BlockRenderProps } from \"../registry\";\nimport { Collapsible } from \"@astryxdesign/core/Collapsible\";\nimport { VStack, Heading, Text } from \"../ui\";\n\ntype Accordion = z.infer<typeof AccordionBlockSchema>;\n\n/** Accordeon op Astryx Collapsible. Bij `multiple: false` is er max. één paneel tegelijk open. */\nfunction AccordionRender({ block }: BlockRenderProps<Accordion>) {\n  const items = (block.items ?? []).filter((i) => i.title);\n  const [openIdx, setOpenIdx] = useState<number | null>(null);\n  if (items.length === 0) return null;\n  return (\n    <VStack gap={3} as=\"section\" className=\"xicms-accordion\">\n      {block.heading && <Heading level={2} data-xicms-edit=\"heading\">{block.heading}</Heading>}\n      <VStack gap={1.5}>\n        {items.map((it, i) => {\n          const body = it.bodyHtml ? (\n            // Server-side gesanitized bij publiceren (*Html-velden) — zie functions/lib/sanitize.\n            // eslint-disable-next-line react/no-danger\n            <div className=\"xicms-richtext\" dangerouslySetInnerHTML={{ __html: it.bodyHtml }} />\n          ) : (\n            <Text color=\"secondary\">{it.body}</Text>\n          );\n          const trigger = <Text weight=\"bold\">{it.title}</Text>;\n          return block.multiple ? (\n            <Collapsible key={i} trigger={trigger} defaultIsOpen={false}>{body}</Collapsible>\n          ) : (\n            <Collapsible\n              key={i}\n              trigger={trigger}\n              isOpen={openIdx === i}\n              onOpenChange={(o) => setOpenIdx(o ? i : null)}\n            >\n              {body}\n            </Collapsible>\n          );\n        })}\n      </VStack>\n    </VStack>\n  );\n}\n\nexport const accordionBlock = defineBlock({\n  type: \"accordion\",\n  schema: AccordionBlockSchema,\n  Render: AccordionRender,\n  label: \"Accordeon\",\n  icon: \"🪗\",\n  defaults: () => ({ items: [{ title: \"Titel\", body: \"Inhoud…\" }], multiple: false }),\n});\n"],"mappings":";AAiBI,SACoB,KADpB;AAfJ,SAAS,gBAAgB;AAEzB,SAAS,4BAA4B;AACrC,SAAS,mBAA0C;AACnD,SAAS,mBAAmB;AAC5B,SAAS,QAAQ,SAAS,YAAY;AAKtC,SAAS,gBAAgB,EAAE,MAAM,GAAgC;AAC/D,QAAM,SAAS,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK;AACvD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAwB,IAAI;AAC1D,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SACE,qBAAC,UAAO,KAAK,GAAG,IAAG,WAAU,WAAU,mBACpC;AAAA,UAAM,WAAW,oBAAC,WAAQ,OAAO,GAAG,mBAAgB,WAAW,gBAAM,SAAQ;AAAA,IAC9E,oBAAC,UAAO,KAAK,KACV,gBAAM,IAAI,CAAC,IAAI,MAAM;AACpB,YAAM,OAAO,GAAG;AAAA;AAAA;AAAA,QAGd,oBAAC,SAAI,WAAU,kBAAiB,yBAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG;AAAA,UAElF,oBAAC,QAAK,OAAM,aAAa,aAAG,MAAK;AAEnC,YAAM,UAAU,oBAAC,QAAK,QAAO,QAAQ,aAAG,OAAM;AAC9C,aAAO,MAAM,WACX,oBAAC,eAAoB,SAAkB,eAAe,OAAQ,kBAA5C,CAAiD,IAEnE;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,QAAQ,YAAY;AAAA,UACpB,cAAc,CAAC,MAAM,WAAW,IAAI,IAAI,IAAI;AAAA,UAE3C;AAAA;AAAA,QALI;AAAA,MAMP;AAAA,IAEJ,CAAC,GACH;AAAA,KACF;AAEJ;AAEO,MAAM,iBAAiB,YAAY;AAAA,EACxC,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,eAAU,CAAC,GAAG,UAAU,MAAM;AACnF,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/blocks/builtins/Accordion.tsx"],"sourcesContent":["\"use client\";\n\nimport { useState } from \"react\";\nimport type { z } from \"zod\";\nimport { AccordionBlockSchema } from \"../../schema/blocks\";\nimport { defineBlock, type BlockRenderProps } from \"../registry\";\nimport { Collapsible } from \"@astryxdesign/core/Collapsible\";\nimport { VStack, Heading, Text } from \"../ui\";\n\ntype Accordion = z.infer<typeof AccordionBlockSchema>;\n\n/** Accordeon op Astryx Collapsible. Bij `multiple: false` is er max. één paneel tegelijk open. */\nfunction AccordionRender({ block }: BlockRenderProps<Accordion>) {\n  const items = (block.items ?? []).filter((i) => i.title);\n  const [openIdx, setOpenIdx] = useState<number | null>(null);\n  if (items.length === 0) return null;\n  return (\n    <VStack gap={3} as=\"section\" className=\"xicms-accordion\">\n      {block.heading && <Heading level={2} data-xicms-edit=\"heading\">{block.heading}</Heading>}\n      <VStack gap={1.5}>\n        {items.map((it, i) => {\n          const body = it.bodyHtml ? (\n            // Server-side gesanitized bij publiceren (*Html-velden) — zie functions/lib/sanitize.\n            // eslint-disable-next-line react/no-danger\n            <div\n              className=\"xicms-richtext\"\n              data-xicms-edit={`items.${i}.bodyHtml`}\n              dangerouslySetInnerHTML={{ __html: it.bodyHtml }}\n            />\n          ) : (\n            <Text color=\"secondary\" data-xicms-edit={`items.${i}.body`}>{it.body}</Text>\n          );\n          const trigger = <Text weight=\"bold\" data-xicms-edit={`items.${i}.title`}>{it.title}</Text>;\n          return block.multiple ? (\n            <Collapsible key={i} trigger={trigger} defaultIsOpen={false}>{body}</Collapsible>\n          ) : (\n            <Collapsible\n              key={i}\n              trigger={trigger}\n              isOpen={openIdx === i}\n              onOpenChange={(o) => setOpenIdx(o ? i : null)}\n            >\n              {body}\n            </Collapsible>\n          );\n        })}\n      </VStack>\n    </VStack>\n  );\n}\n\nexport const accordionBlock = defineBlock({\n  type: \"accordion\",\n  schema: AccordionBlockSchema,\n  Render: AccordionRender,\n  label: \"Accordeon\",\n  icon: \"🪗\",\n  defaults: () => ({ items: [{ title: \"Titel\", body: \"Inhoud…\" }], multiple: false }),\n});\n"],"mappings":";AAiBI,SACoB,KADpB;AAfJ,SAAS,gBAAgB;AAEzB,SAAS,4BAA4B;AACrC,SAAS,mBAA0C;AACnD,SAAS,mBAAmB;AAC5B,SAAS,QAAQ,SAAS,YAAY;AAKtC,SAAS,gBAAgB,EAAE,MAAM,GAAgC;AAC/D,QAAM,SAAS,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK;AACvD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAwB,IAAI;AAC1D,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SACE,qBAAC,UAAO,KAAK,GAAG,IAAG,WAAU,WAAU,mBACpC;AAAA,UAAM,WAAW,oBAAC,WAAQ,OAAO,GAAG,mBAAgB,WAAW,gBAAM,SAAQ;AAAA,IAC9E,oBAAC,UAAO,KAAK,KACV,gBAAM,IAAI,CAAC,IAAI,MAAM;AACpB,YAAM,OAAO,GAAG;AAAA;AAAA;AAAA,QAGd;AAAA,UAAC;AAAA;AAAA,YACC,WAAU;AAAA,YACV,mBAAiB,SAAS,CAAC;AAAA,YAC3B,yBAAyB,EAAE,QAAQ,GAAG,SAAS;AAAA;AAAA,QACjD;AAAA,UAEA,oBAAC,QAAK,OAAM,aAAY,mBAAiB,SAAS,CAAC,SAAU,aAAG,MAAK;AAEvE,YAAM,UAAU,oBAAC,QAAK,QAAO,QAAO,mBAAiB,SAAS,CAAC,UAAW,aAAG,OAAM;AACnF,aAAO,MAAM,WACX,oBAAC,eAAoB,SAAkB,eAAe,OAAQ,kBAA5C,CAAiD,IAEnE;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,QAAQ,YAAY;AAAA,UACpB,cAAc,CAAC,MAAM,WAAW,IAAI,IAAI,IAAI;AAAA,UAE3C;AAAA;AAAA,QALI;AAAA,MAMP;AAAA,IAEJ,CAAC,GACH;AAAA,KACF;AAEJ;AAEO,MAAM,iBAAiB,YAAY;AAAA,EACxC,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,SAAS,MAAM,eAAU,CAAC,GAAG,UAAU,MAAM;AACnF,CAAC;","names":[]}

package/dist/blocks/builtins/Agenda.d.ts

@@ -26,4 +26,4 @@ export declare function selectAgendaEvents<T extends AgendaEvent>(events: T[] |
     hidePast?: boolean;
     limit?: number;
 }): T[];
-export declare const agendaBlock: import("..").BlockDefinition<z.ZodTypeAny>;
+export declare const agendaBlock: import("../index.js").BlockDefinition<z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;

package/dist/blocks/builtins/Agenda.js

@@ -1,9 +1,9 @@
 import { jsx, jsxs } from "react/jsx-runtime";
-import { jsonLdHtml } from "./jsonld";
-import { AgendaBlockSchema } from "../../schema/blocks";
-import { defineBlock } from "../registry";
-import { Heading } from "../ui";
-import { icsDataUrl } from "./lib/ics";
+import { jsonLdHtml } from "./jsonld.js";
+import { AgendaBlockSchema } from "../../schema/blocks.js";
+import { defineBlock } from "../registry.js";
+import { Heading } from "../ui/index.js";
+import { icsDataUrl } from "./lib/ics.js";
 function parseEventDate(value) {
   const m = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value.trim());
   if (m) return new Date(Number(m[1]), Number(m[2]) - 1, Number(m[3]));

package/dist/blocks/builtins/Banner.d.ts

@@ -1,2 +1,2 @@
 import type { z } from "zod";
-export declare const bannerBlock: import("..").BlockDefinition<z.ZodTypeAny>;
+export declare const bannerBlock: import("../index.js").BlockDefinition<z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;

package/dist/blocks/builtins/Banner.js

@@ -1,8 +1,8 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
-import { BannerBlockSchema } from "../../schema/blocks";
-import { defineBlock } from "../registry";
+import { BannerBlockSchema } from "../../schema/blocks.js";
+import { defineBlock } from "../registry.js";
 function storageKey(block) {
   return `xicms-banner:${block._key}${block.dismissVersion ? `:${block.dismissVersion}` : ""}`;
 }

package/dist/blocks/builtins/BeforeAfter.d.ts

@@ -1,2 +1,2 @@
 import type { z } from "zod";
-export declare const beforeAfterBlock: import("..").BlockDefinition<z.ZodTypeAny>;
+export declare const beforeAfterBlock: import("../index.js").BlockDefinition<z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;

package/dist/blocks/builtins/BeforeAfter.js

@@ -1,8 +1,8 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useState } from "react";
-import { BeforeAfterBlockSchema } from "../../schema/blocks";
-import { defineBlock } from "../registry";
+import { BeforeAfterBlockSchema } from "../../schema/blocks.js";
+import { defineBlock } from "../registry.js";
 function BeforeAfterRender({ block }) {
   const [pos, setPos] = useState(50);
   if (!block.beforeUrl || !block.afterUrl) return null;
@@ -12,8 +12,8 @@ function BeforeAfterRender({ block }) {
       /* @__PURE__ */ jsx("img", { className: "xicms-beforeafter__img", src: block.beforeUrl, alt: block.alt || block.beforeLabel, loading: "lazy" }),
       /* @__PURE__ */ jsx("div", { className: "xicms-beforeafter__clip", style: { clipPath: `inset(0 0 0 ${pos}%)` }, "aria-hidden": true, children: /* @__PURE__ */ jsx("img", { className: "xicms-beforeafter__img", src: block.afterUrl, alt: "", loading: "lazy" }) }),
       /* @__PURE__ */ jsx("div", { className: "xicms-beforeafter__divider", style: { left: `${pos}%` }, "aria-hidden": true, children: /* @__PURE__ */ jsx("span", { className: "xicms-beforeafter__handle", children: "\u27E8\u27E9" }) }),
-      /* @__PURE__ */ jsx("span", { className: "xicms-beforeafter__badge xicms-beforeafter__badge--before", children: block.beforeLabel }),
-      /* @__PURE__ */ jsx("span", { className: "xicms-beforeafter__badge xicms-beforeafter__badge--after", children: block.afterLabel }),
+      /* @__PURE__ */ jsx("span", { className: "xicms-beforeafter__badge xicms-beforeafter__badge--before", "data-xicms-edit": "beforeLabel", children: block.beforeLabel }),
+      /* @__PURE__ */ jsx("span", { className: "xicms-beforeafter__badge xicms-beforeafter__badge--after", "data-xicms-edit": "afterLabel", children: block.afterLabel }),
       /* @__PURE__ */ jsx(
         "input",
         {

package/dist/blocks/builtins/BeforeAfter.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/blocks/builtins/BeforeAfter.tsx"],"sourcesContent":["\"use client\";\n\nimport { useState } from \"react\";\nimport type { z } from \"zod\";\nimport { BeforeAfterBlockSchema } from \"../../schema/blocks\";\nimport { defineBlock, type BlockRenderProps } from \"../registry\";\n\ntype BeforeAfter = z.infer<typeof BeforeAfterBlockSchema>;\n\n/**\n * Voor/na-vergelijker: het \"na\"-beeld wordt geclipt op de sleppositie. De greep is een échte\n * range-input (over de hele breedte, transparant) — slepen, klikken én pijltjestoetsen werken\n * daarmee gratis en toegankelijk (aria-label + waarde in %).\n */\nfunction BeforeAfterRender({ block }: BlockRenderProps<BeforeAfter>) {\n  const [pos, setPos] = useState(50);\n  if (!block.beforeUrl || !block.afterUrl) return null;\n  return (\n    <figure className=\"xicms-beforeafter\" style={{ aspectRatio: block.aspectRatio.replace(\"/\", \" / \") }}>\n      {block.heading && <figcaption className=\"xicms-beforeafter__heading\" data-xicms-edit=\"heading\">{block.heading}</figcaption>}\n      <div className=\"xicms-beforeafter__stage\">\n        {/* eslint-disable-next-line @next/next/no-img-element */}\n        <img className=\"xicms-beforeafter__img\" src={block.beforeUrl} alt={block.alt || block.beforeLabel} loading=\"lazy\" />\n        <div className=\"xicms-beforeafter__clip\" style={{ clipPath: `inset(0 0 0 ${pos}%)` }} aria-hidden>\n          {/* eslint-disable-next-line @next/next/no-img-element */}\n          <img className=\"xicms-beforeafter__img\" src={block.afterUrl} alt=\"\" loading=\"lazy\" />\n        </div>\n        <div className=\"xicms-beforeafter__divider\" style={{ left: `${pos}%` }} aria-hidden>\n          <span className=\"xicms-beforeafter__handle\">⟨⟩</span>\n        </div>\n        <span className=\"xicms-beforeafter__badge xicms-beforeafter__badge--before\">{block.beforeLabel}</span>\n        <span className=\"xicms-beforeafter__badge xicms-beforeafter__badge--after\">{block.afterLabel}</span>\n        <input\n          className=\"xicms-beforeafter__range\"\n          type=\"range\"\n          min={0}\n          max={100}\n          value={pos}\n          onChange={(e) => setPos(Number(e.target.value))}\n          aria-label={`Vergelijk ${block.beforeLabel} en ${block.afterLabel}`}\n          aria-valuetext={`${pos}% ${block.afterLabel}`}\n        />\n      </div>\n    </figure>\n  );\n}\n\nexport const beforeAfterBlock = defineBlock({\n  type: \"beforeAfter\",\n  fields: { beforeUrl: { type: \"image\" }, afterUrl: { type: \"image\" } },\n  schema: BeforeAfterBlockSchema,\n  Render: BeforeAfterRender,\n  label: \"Voor / na\",\n  icon: \"🔀\",\n  defaults: () => ({ beforeUrl: \"\", afterUrl: \"\", beforeLabel: \"Voor\", afterLabel: \"Na\", aspectRatio: \"4/3\" }),\n});\n"],"mappings":";AAmBwB,cAClB,YADkB;AAjBxB,SAAS,gBAAgB;AAEzB,SAAS,8BAA8B;AACvC,SAAS,mBAA0C;AASnD,SAAS,kBAAkB,EAAE,MAAM,GAAkC;AACnE,QAAM,CAAC,KAAK,MAAM,IAAI,SAAS,EAAE;AACjC,MAAI,CAAC,MAAM,aAAa,CAAC,MAAM,SAAU,QAAO;AAChD,SACE,qBAAC,YAAO,WAAU,qBAAoB,OAAO,EAAE,aAAa,MAAM,YAAY,QAAQ,KAAK,KAAK,EAAE,GAC/F;AAAA,UAAM,WAAW,oBAAC,gBAAW,WAAU,8BAA6B,mBAAgB,WAAW,gBAAM,SAAQ;AAAA,IAC9G,qBAAC,SAAI,WAAU,4BAEb;AAAA,0BAAC,SAAI,WAAU,0BAAyB,KAAK,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,aAAa,SAAQ,QAAO;AAAA,MAClH,oBAAC,SAAI,WAAU,2BAA0B,OAAO,EAAE,UAAU,eAAe,GAAG,KAAK,GAAG,eAAW,MAE/F,8BAAC,SAAI,WAAU,0BAAyB,KAAK,MAAM,UAAU,KAAI,IAAG,SAAQ,QAAO,GACrF;AAAA,MACA,oBAAC,SAAI,WAAU,8BAA6B,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,eAAW,MACjF,8BAAC,UAAK,WAAU,6BAA4B,0BAAE,GAChD;AAAA,MACA,oBAAC,UAAK,WAAU,6DAA6D,gBAAM,aAAY;AAAA,MAC/F,oBAAC,UAAK,WAAU,4DAA4D,gBAAM,YAAW;AAAA,MAC7F;AAAA,QAAC;AAAA;AAAA,UACC,WAAU;AAAA,UACV,MAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,UAC9C,cAAY,aAAa,MAAM,WAAW,OAAO,MAAM,UAAU;AAAA,UACjE,kBAAgB,GAAG,GAAG,KAAK,MAAM,UAAU;AAAA;AAAA,MAC7C;AAAA,OACF;AAAA,KACF;AAEJ;AAEO,MAAM,mBAAmB,YAAY;AAAA,EAC1C,MAAM;AAAA,EACN,QAAQ,EAAE,WAAW,EAAE,MAAM,QAAQ,GAAG,UAAU,EAAE,MAAM,QAAQ,EAAE;AAAA,EACpE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,OAAO,EAAE,WAAW,IAAI,UAAU,IAAI,aAAa,QAAQ,YAAY,MAAM,aAAa,MAAM;AAC5G,CAAC;","names":[]}
+{"version":3,"sources":["../../../src/blocks/builtins/BeforeAfter.tsx"],"sourcesContent":["\"use client\";\n\nimport { useState } from \"react\";\nimport type { z } from \"zod\";\nimport { BeforeAfterBlockSchema } from \"../../schema/blocks\";\nimport { defineBlock, type BlockRenderProps } from \"../registry\";\n\ntype BeforeAfter = z.infer<typeof BeforeAfterBlockSchema>;\n\n/**\n * Voor/na-vergelijker: het \"na\"-beeld wordt geclipt op de sleppositie. De greep is een échte\n * range-input (over de hele breedte, transparant) — slepen, klikken én pijltjestoetsen werken\n * daarmee gratis en toegankelijk (aria-label + waarde in %).\n */\nfunction BeforeAfterRender({ block }: BlockRenderProps<BeforeAfter>) {\n  const [pos, setPos] = useState(50);\n  if (!block.beforeUrl || !block.afterUrl) return null;\n  return (\n    <figure className=\"xicms-beforeafter\" style={{ aspectRatio: block.aspectRatio.replace(\"/\", \" / \") }}>\n      {block.heading && <figcaption className=\"xicms-beforeafter__heading\" data-xicms-edit=\"heading\">{block.heading}</figcaption>}\n      <div className=\"xicms-beforeafter__stage\">\n        {/* eslint-disable-next-line @next/next/no-img-element */}\n        <img className=\"xicms-beforeafter__img\" src={block.beforeUrl} alt={block.alt || block.beforeLabel} loading=\"lazy\" />\n        <div className=\"xicms-beforeafter__clip\" style={{ clipPath: `inset(0 0 0 ${pos}%)` }} aria-hidden>\n          {/* eslint-disable-next-line @next/next/no-img-element */}\n          <img className=\"xicms-beforeafter__img\" src={block.afterUrl} alt=\"\" loading=\"lazy\" />\n        </div>\n        <div className=\"xicms-beforeafter__divider\" style={{ left: `${pos}%` }} aria-hidden>\n          <span className=\"xicms-beforeafter__handle\">⟨⟩</span>\n        </div>\n        <span className=\"xicms-beforeafter__badge xicms-beforeafter__badge--before\" data-xicms-edit=\"beforeLabel\">{block.beforeLabel}</span>\n        <span className=\"xicms-beforeafter__badge xicms-beforeafter__badge--after\" data-xicms-edit=\"afterLabel\">{block.afterLabel}</span>\n        <input\n          className=\"xicms-beforeafter__range\"\n          type=\"range\"\n          min={0}\n          max={100}\n          value={pos}\n          onChange={(e) => setPos(Number(e.target.value))}\n          aria-label={`Vergelijk ${block.beforeLabel} en ${block.afterLabel}`}\n          aria-valuetext={`${pos}% ${block.afterLabel}`}\n        />\n      </div>\n    </figure>\n  );\n}\n\nexport const beforeAfterBlock = defineBlock({\n  type: \"beforeAfter\",\n  fields: { beforeUrl: { type: \"image\" }, afterUrl: { type: \"image\" } },\n  schema: BeforeAfterBlockSchema,\n  Render: BeforeAfterRender,\n  label: \"Voor / na\",\n  icon: \"🔀\",\n  defaults: () => ({ beforeUrl: \"\", afterUrl: \"\", beforeLabel: \"Voor\", afterLabel: \"Na\", aspectRatio: \"4/3\" }),\n});\n"],"mappings":";AAmBwB,cAClB,YADkB;AAjBxB,SAAS,gBAAgB;AAEzB,SAAS,8BAA8B;AACvC,SAAS,mBAA0C;AASnD,SAAS,kBAAkB,EAAE,MAAM,GAAkC;AACnE,QAAM,CAAC,KAAK,MAAM,IAAI,SAAS,EAAE;AACjC,MAAI,CAAC,MAAM,aAAa,CAAC,MAAM,SAAU,QAAO;AAChD,SACE,qBAAC,YAAO,WAAU,qBAAoB,OAAO,EAAE,aAAa,MAAM,YAAY,QAAQ,KAAK,KAAK,EAAE,GAC/F;AAAA,UAAM,WAAW,oBAAC,gBAAW,WAAU,8BAA6B,mBAAgB,WAAW,gBAAM,SAAQ;AAAA,IAC9G,qBAAC,SAAI,WAAU,4BAEb;AAAA,0BAAC,SAAI,WAAU,0BAAyB,KAAK,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,aAAa,SAAQ,QAAO;AAAA,MAClH,oBAAC,SAAI,WAAU,2BAA0B,OAAO,EAAE,UAAU,eAAe,GAAG,KAAK,GAAG,eAAW,MAE/F,8BAAC,SAAI,WAAU,0BAAyB,KAAK,MAAM,UAAU,KAAI,IAAG,SAAQ,QAAO,GACrF;AAAA,MACA,oBAAC,SAAI,WAAU,8BAA6B,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,eAAW,MACjF,8BAAC,UAAK,WAAU,6BAA4B,0BAAE,GAChD;AAAA,MACA,oBAAC,UAAK,WAAU,6DAA4D,mBAAgB,eAAe,gBAAM,aAAY;AAAA,MAC7H,oBAAC,UAAK,WAAU,4DAA2D,mBAAgB,cAAc,gBAAM,YAAW;AAAA,MAC1H;AAAA,QAAC;AAAA;AAAA,UACC,WAAU;AAAA,UACV,MAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,UAC9C,cAAY,aAAa,MAAM,WAAW,OAAO,MAAM,UAAU;AAAA,UACjE,kBAAgB,GAAG,GAAG,KAAK,MAAM,UAAU;AAAA;AAAA,MAC7C;AAAA,OACF;AAAA,KACF;AAEJ;AAEO,MAAM,mBAAmB,YAAY;AAAA,EAC1C,MAAM;AAAA,EACN,QAAQ,EAAE,WAAW,EAAE,MAAM,QAAQ,GAAG,UAAU,EAAE,MAAM,QAAQ,EAAE;AAAA,EACpE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,OAAO,EAAE,WAAW,IAAI,UAAU,IAAI,aAAa,QAAQ,YAAY,MAAM,aAAa,MAAM;AAC5G,CAAC;","names":[]}

package/dist/blocks/builtins/Booking.d.ts

@@ -1,2 +1,2 @@
 import type { z } from "zod";
-export declare const bookingBlock: import("..").BlockDefinition<z.ZodTypeAny>;
+export declare const bookingBlock: import("../index.js").BlockDefinition<z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;

package/dist/blocks/builtins/Booking.js

@@ -1,10 +1,10 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { BookingBlockSchema } from "../../schema/blocks";
-import { defineBlock } from "../registry";
-import { Heading } from "../ui";
-import { ConsentEmbed } from "./consentEmbed";
-import { buildBookingUrl } from "./lib/bookingUrl";
+import { BookingBlockSchema } from "../../schema/blocks.js";
+import { defineBlock } from "../registry.js";
+import { Heading } from "../ui/index.js";
+import { ConsentEmbed } from "./consentEmbed.js";
+import { buildBookingUrl } from "./lib/bookingUrl.js";
 function BookingRender({ block, mode }) {
   const src = buildBookingUrl(block.provider ?? "custom", block.embedUrl);
   if (!src) return null;