@xiwebdesign/xicms-core 6.5.0 → 7.1.0

package/dist/server/shop.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/shop.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\nimport type { Metadata } from \"next\";\n\nimport { getAdminDb } from \"../firebase/admin\";\nimport {\n  ProductSchema,\n  ShopCategorySchema,\n  productPriceCents,\n  type Product,\n  type ShopCategory,\n} from \"../schema/shop\";\n\n/**\n * Server-readers voor de shop (5.6) — zelfde contract als server/pages.ts: Admin SDK als die\n * er is, anders keyless Firestore-REST met de publieke web-apiKey (de rules staan publieke\n * reads op actieve producten/categorieën toe). Reads zijn per-request gededupt via cache();\n * route-level ISR (`revalidate`) dempt de kosten tussen requests.\n *\n * Gebruik in de klantsite (catch-all):\n *   const blockData = { shop: await getShopPageData(siteId, path, searchParams) };\n *   <PublishedPage page={page} siteId={siteId} blockData={blockData} />\n */\n\nexport type ServerProduct = Product & { id: string };\nexport type ServerShopCategory = ShopCategory & { id: string };\n\n// Gedeelde vorm met de blocks (useBlockData(\"shop\")) — één bron van waarheid.\nexport type { ShopPageData } from \"../modules/shop/types\";\nimport type { ShopPageData } from \"../modules/shop/types\";\n\nfunction parseProduct(id: string, data: unknown): ServerProduct | null {\n  const res = ProductSchema.safeParse(data);\n  if (!res.success) {\n    console.warn(`[xicms] product \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\nfunction parseCategory(id: string, data: unknown): ServerShopCategory | null {\n  const res = ShopCategorySchema.safeParse(data);\n  if (!res.success) {\n    console.warn(`[xicms] categorie \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\n/* ── keyless REST (zelfde aanpak als server/pages.ts) ────────────────────── */\n\ntype FsValue = Record<string, unknown>;\nfunction decode(v: FsValue): unknown {\n  if (v == null) return null;\n  if (\"stringValue\" in v) return v.stringValue;\n  if (\"integerValue\" in v) return Number(v.integerValue);\n  if (\"doubleValue\" in v) return v.doubleValue;\n  if (\"booleanValue\" in v) return v.booleanValue;\n  if (\"nullValue\" in v) return null;\n  if (\"timestampValue\" in v) return v.timestampValue;\n  if (\"arrayValue\" in v) return (((v.arrayValue as FsValue)?.values as FsValue[]) ?? []).map(decode);\n  if (\"mapValue\" in v) return decodeFields(((v.mapValue as FsValue)?.fields as Record<string, FsValue>) ?? {});\n  return null;\n}\nfunction decodeFields(fields: Record<string, FsValue>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).map(([k, x]) => [k, decode(x)]));\n}\n\ninterface RestDoc {\n  id: string;\n  data: Record<string, unknown>;\n}\n\nasync function restQuery(\n  siteId: string,\n  collectionId: string,\n  filters: { fieldPath: string; value: string }[],\n  limit?: number,\n): Promise<RestDoc[]> {\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  const fieldFilters = filters.map((f) => ({\n    fieldFilter: { field: { fieldPath: f.fieldPath }, op: \"EQUAL\", value: { stringValue: f.value } },\n  }));\n  const where =\n    fieldFilters.length === 0\n      ? undefined\n      : fieldFilters.length === 1\n        ? fieldFilters[0]\n        : { compositeFilter: { op: \"AND\", filters: fieldFilters } };\n  const structuredQuery: Record<string, unknown> = { from: [{ collectionId }] };\n  if (where) structuredQuery.where = where;\n  if (limit) structuredQuery.limit = limit;\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery }),\n      next: { revalidate: 300 },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => ({ id: r.document!.name.split(\"/\").pop()!, data: decodeFields(r.document!.fields ?? {}) }));\n  } catch (err) {\n    console.error(\"[xicms] Firestore REST-query (shop) mislukt:\", err);\n    return [];\n  }\n}\n\n/* ── Readers ─────────────────────────────────────────────────────────────── */\n\nasync function getActiveProductsUncached(siteId: string): Promise<ServerProduct[]> {\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb.collection(`sites/${siteId}/products`).where(\"status\", \"==\", \"active\").limit(500).get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read producten mislukt — lege lijst:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(siteId, \"products\", [{ fieldPath: \"status\", value: \"active\" }], 500);\n  }\n  return docs\n    .map((d) => parseProduct(d.id, d.data))\n    .filter((p): p is ServerProduct => p !== null)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0) || a.name.localeCompare(b.name, \"nl\"));\n}\n\nasync function getShopCategoriesUncached(siteId: string): Promise<ServerShopCategory[]> {\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb.collection(`sites/${siteId}/shopCategories`).limit(100).get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read categorieën mislukt — lege lijst:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(siteId, \"shopCategories\", [], 100);\n  }\n  return docs\n    .map((d) => parseCategory(d.id, d.data))\n    .filter((c): c is ServerShopCategory => c !== null && c.visible !== false)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\nasync function getProductBySlugUncached(siteId: string, slug: string): Promise<ServerProduct | null> {\n  if (!slug) return null;\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb\n        .collection(`sites/${siteId}/products`)\n        .where(\"status\", \"==\", \"active\")\n        .where(\"slug\", \"==\", slug)\n        .limit(1)\n        .get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read product mislukt:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(\n      siteId,\n      \"products\",\n      [\n        { fieldPath: \"status\", value: \"active\" },\n        { fieldPath: \"slug\", value: slug },\n      ],\n      1,\n    );\n  }\n  const d = docs[0];\n  return d ? parseProduct(d.id, d.data) : null;\n}\n\nexport const getActiveProducts = cache(getActiveProductsUncached);\nexport const getShopCategories = cache(getShopCategoriesUncached);\nexport const getProductBySlug = cache(getProductBySlugUncached);\n\n/**\n * Verzamelt de shop-startdata voor één pagina. `searchParams.p` (detailpagina) bepaalt of er\n * ook een enkel product geladen wordt. Geef het resultaat door als\n * `<PublishedPage blockData={{ shop: data }}>`.\n */\nexport async function getShopPageData(\n  siteId: string,\n  searchParams?: { p?: string | string[]; [k: string]: unknown },\n): Promise<ShopPageData> {\n  const slugParam = searchParams?.p;\n  const slug = Array.isArray(slugParam) ? slugParam[0] : slugParam;\n  const [products, categories, product] = await Promise.all([\n    getActiveProducts(siteId),\n    getShopCategories(siteId),\n    slug ? getProductBySlug(siteId, slug) : Promise.resolve(undefined),\n  ]);\n  const data: ShopPageData = { products, categories };\n  if (slug !== undefined) data.product = product ?? null;\n  return data;\n}\n\n/* ── SEO ─────────────────────────────────────────────────────────────────── */\n\n/** Metadata voor een productdetailpagina (title/description/OG-beeld). */\nexport function buildProductMetadata(\n  product: ServerProduct | null,\n  site: { name: string; domain?: string },\n): Metadata {\n  if (!product) return { title: `Product — ${site.name}` };\n  const description = (product.description || `${product.name} — ${site.name}`)\n    .replace(/\\s+/g, \" \")\n    .slice(0, 300);\n  const image = product.images?.[0];\n  return {\n    title: `${product.name} — ${site.name}`,\n    description,\n    openGraph: {\n      title: product.name,\n      description,\n      type: \"website\",\n      ...(image ? { images: [{ url: image }] } : {}),\n    },\n  };\n}\n\n/** schema.org Product/Offer-JSON-LD met echte prijs en beschikbaarheid. */\nexport function buildProductJsonLd(\n  product: ServerProduct,\n  site: { name: string; domain?: string },\n  currency = \"EUR\",\n): Record<string, unknown> {\n  const soldOut =\n    product.trackStock === true &&\n    (product.options ?? []).length === 0 &&\n    product.stock !== undefined &&\n    product.stock <= 0;\n  return {\n    \"@context\": \"https://schema.org\",\n    \"@type\": \"Product\",\n    name: product.name,\n    ...(product.description ? { description: product.description.slice(0, 500) } : {}),\n    ...(product.images?.length ? { image: product.images } : {}),\n    offers: {\n      \"@type\": \"Offer\",\n      price: (productPriceCents(product) / 100).toFixed(2),\n      priceCurrency: currency,\n      availability: soldOut ? \"https://schema.org/OutOfStock\" : \"https://schema.org/InStock\",\n      ...(site.domain ? { url: `https://${site.domain}/product?p=${encodeURIComponent(product.slug)}` } : {}),\n    },\n    brand: { \"@type\": \"Brand\", name: site.name },\n  };\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAGtB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAoBP,SAAS,aAAa,IAAY,MAAqC;AACrE,QAAM,MAAM,cAAc,UAAU,IAAI;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,YAAQ,KAAK,oBAAoB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AACzG,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAEA,SAAS,cAAc,IAAY,MAA0C;AAC3E,QAAM,MAAM,mBAAmB,UAAU,IAAI;AAC7C,MAAI,CAAC,IAAI,SAAS;AAChB,YAAQ,KAAK,sBAAsB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AAC3G,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAKA,SAAS,OAAO,GAAqB;AACnC,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,OAAO,EAAE,YAAY;AACrD,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,EAAE;AAClC,MAAI,eAAe,EAAG,QAAO;AAC7B,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,gBAAgB,EAAG,SAAU,EAAE,YAAwB,UAAwB,CAAC,GAAG,IAAI,MAAM;AACjG,MAAI,cAAc,EAAG,QAAO,aAAe,EAAE,UAAsB,UAAsC,CAAC,CAAC;AAC3G,SAAO;AACT;AACA,SAAS,aAAa,QAA0D;AAC9E,SAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF;AAOA,eAAe,UACb,QACA,cACA,SACA,OACoB;AACpB,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,QAAM,eAAe,QAAQ,IAAI,CAAC,OAAO;AAAA,IACvC,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,SAAS,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE;AAAA,EACjG,EAAE;AACF,QAAM,QACJ,aAAa,WAAW,IACpB,SACA,aAAa,WAAW,IACtB,aAAa,CAAC,IACd,EAAE,iBAAiB,EAAE,IAAI,OAAO,SAAS,aAAa,EAAE;AAChE,QAAM,kBAA2C,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE;AAC5E,MAAI,MAAO,iBAAgB,QAAQ;AACnC,MAAI,MAAO,iBAAgB,QAAQ;AACnC,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,gBAAgB,CAAC;AAAA,MACxC,MAAM,EAAE,YAAY,IAAI;AAAA,IAC1B,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,MAAM,aAAa,EAAE,SAAU,UAAU,CAAC,CAAC,EAAE,EAAE;AAAA,EAC1G,SAAS,KAAK;AACZ,YAAQ,MAAM,gDAAgD,GAAG;AACjE,WAAO,CAAC;AAAA,EACV;AACF;AAIA,eAAe,0BAA0B,QAA0C;AACjF,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,WAAW,EAAE,MAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,IAAI;AAC7G,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,2DAAuD,GAAa,WAAW,CAAC;AAC7F,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM,UAAU,QAAQ,YAAY,CAAC,EAAE,WAAW,UAAU,OAAO,SAAS,CAAC,GAAG,GAAG;AAAA,EAC5F;AACA,SAAO,KACJ,IAAI,CAAC,MAAM,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,EACrC,OAAO,CAAC,MAA0B,MAAM,IAAI,EAC5C,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,IAAI,CAAC;AACzF;AAEA,eAAe,0BAA0B,QAA+C;AACtF,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,iBAAiB,EAAE,MAAM,GAAG,EAAE,IAAI;AACnF,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,gEAAyD,GAAa,WAAW,CAAC;AAC/F,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM,UAAU,QAAQ,kBAAkB,CAAC,GAAG,GAAG;AAAA,EAC1D;AACA,SAAO,KACJ,IAAI,CAAC,MAAM,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EACtC,OAAO,CAAC,MAA+B,MAAM,QAAQ,EAAE,YAAY,KAAK,EACxE,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE;AACnD;AAEA,eAAe,yBAAyB,QAAgB,MAA6C;AACnG,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAChB,WAAW,SAAS,MAAM,WAAW,EACrC,MAAM,UAAU,MAAM,QAAQ,EAC9B,MAAM,QAAQ,MAAM,IAAI,EACxB,MAAM,CAAC,EACP,IAAI;AACP,aAAO,KAAK,KAAK,IAAI,CAACA,QAAO,EAAE,IAAIA,GAAE,IAAI,MAAMA,GAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,uCAAwC,GAAa,WAAW,CAAC;AAC9E,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,QACE,EAAE,WAAW,UAAU,OAAO,SAAS;AAAA,QACvC,EAAE,WAAW,QAAQ,OAAO,KAAK;AAAA,MACnC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,IAAI,KAAK,CAAC;AAChB,SAAO,IAAI,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;AAC1C;AAEO,MAAM,oBAAoB,MAAM,yBAAyB;AACzD,MAAM,oBAAoB,MAAM,yBAAyB;AACzD,MAAM,mBAAmB,MAAM,wBAAwB;AAO9D,eAAsB,gBACpB,QACA,cACuB;AACvB,QAAM,YAAY,cAAc;AAChC,QAAM,OAAO,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AACvD,QAAM,CAAC,UAAU,YAAY,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IACxD,kBAAkB,MAAM;AAAA,IACxB,kBAAkB,MAAM;AAAA,IACxB,OAAO,iBAAiB,QAAQ,IAAI,IAAI,QAAQ,QAAQ,MAAS;AAAA,EACnE,CAAC;AACD,QAAM,OAAqB,EAAE,UAAU,WAAW;AAClD,MAAI,SAAS,OAAW,MAAK,UAAU,WAAW;AAClD,SAAO;AACT;AAKO,SAAS,qBACd,SACA,MACU;AACV,MAAI,CAAC,QAAS,QAAO,EAAE,OAAO,kBAAa,KAAK,IAAI,GAAG;AACvD,QAAM,eAAe,QAAQ,eAAe,GAAG,QAAQ,IAAI,WAAM,KAAK,IAAI,IACvE,QAAQ,QAAQ,GAAG,EACnB,MAAM,GAAG,GAAG;AACf,QAAM,QAAQ,QAAQ,SAAS,CAAC;AAChC,SAAO;AAAA,IACL,OAAO,GAAG,QAAQ,IAAI,WAAM,KAAK,IAAI;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,MACT,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,MAAM;AAAA,MACN,GAAI,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AACF;AAGO,SAAS,mBACd,SACA,MACA,WAAW,OACc;AACzB,QAAM,UACJ,QAAQ,eAAe,SACtB,QAAQ,WAAW,CAAC,GAAG,WAAW,KACnC,QAAQ,UAAU,UAClB,QAAQ,SAAS;AACnB,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,cAAc,EAAE,aAAa,QAAQ,YAAY,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC;AAAA,IAChF,GAAI,QAAQ,QAAQ,SAAS,EAAE,OAAO,QAAQ,OAAO,IAAI,CAAC;AAAA,IAC1D,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,QAAQ,kBAAkB,OAAO,IAAI,KAAK,QAAQ,CAAC;AAAA,MACnD,eAAe;AAAA,MACf,cAAc,UAAU,kCAAkC;AAAA,MAC1D,GAAI,KAAK,SAAS,EAAE,KAAK,WAAW,KAAK,MAAM,cAAc,mBAAmB,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC;AAAA,IACvG;AAAA,IACA,OAAO,EAAE,SAAS,SAAS,MAAM,KAAK,KAAK;AAAA,EAC7C;AACF;","names":["d"]}
+{"version":3,"sources":["../../src/server/shop.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\nimport type { Metadata } from \"next\";\n\nimport { getAdminDb } from \"../firebase/admin\";\nimport {\n  ProductSchema,\n  ShopCategorySchema,\n  productPriceCents,\n  type Product,\n  type ShopCategory,\n} from \"../schema/shop\";\n\n/**\n * Server-readers voor de shop (5.6) — zelfde contract als server/pages.ts: Admin SDK als die\n * er is, anders keyless Firestore-REST met de publieke web-apiKey (de rules staan publieke\n * reads op actieve producten/categorieën toe). Reads zijn per-request gededupt via cache();\n * route-level ISR (`revalidate`) dempt de kosten tussen requests.\n *\n * Gebruik in de klantsite (catch-all):\n *   const blockData = { shop: await getShopPageData(siteId, path, searchParams) };\n *   <PublishedPage page={page} siteId={siteId} blockData={blockData} />\n */\n\nexport type ServerProduct = Product & { id: string };\nexport type ServerShopCategory = ShopCategory & { id: string };\n\n// Gedeelde vorm met de blocks (useBlockData(\"shop\")) — één bron van waarheid.\nexport type { ShopPageData } from \"../modules/shop/types\";\nimport type { ShopPageData } from \"../modules/shop/types\";\n\nfunction parseProduct(id: string, data: unknown): ServerProduct | null {\n  const res = ProductSchema.safeParse(data);\n  if (!res.success) {\n    console.warn(`[xicms] product \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\nfunction parseCategory(id: string, data: unknown): ServerShopCategory | null {\n  const res = ShopCategorySchema.safeParse(data);\n  if (!res.success) {\n    console.warn(`[xicms] categorie \"${id}\" faalt schema-validatie en wordt overgeslagen:`, res.error.issues[0]);\n    return null;\n  }\n  return { id, ...res.data };\n}\n\n/* ── keyless REST (zelfde aanpak als server/pages.ts) ────────────────────── */\n\ntype FsValue = Record<string, unknown>;\nfunction decode(v: FsValue): unknown {\n  if (v == null) return null;\n  if (\"stringValue\" in v) return v.stringValue;\n  if (\"integerValue\" in v) return Number(v.integerValue);\n  if (\"doubleValue\" in v) return v.doubleValue;\n  if (\"booleanValue\" in v) return v.booleanValue;\n  if (\"nullValue\" in v) return null;\n  if (\"timestampValue\" in v) return v.timestampValue;\n  if (\"arrayValue\" in v) return (((v.arrayValue as FsValue)?.values as FsValue[]) ?? []).map(decode);\n  if (\"mapValue\" in v) return decodeFields(((v.mapValue as FsValue)?.fields as Record<string, FsValue>) ?? {});\n  return null;\n}\nfunction decodeFields(fields: Record<string, FsValue>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).map(([k, x]) => [k, decode(x)]));\n}\n\ninterface RestDoc {\n  id: string;\n  data: Record<string, unknown>;\n}\n\nasync function restQuery(\n  siteId: string,\n  collectionId: string,\n  filters: { fieldPath: string; value: string }[],\n  limit?: number,\n): Promise<RestDoc[]> {\n  const apiKey = process.env.NEXT_PUBLIC_FIREBASE_API_KEY;\n  const projectId = process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID;\n  if (!apiKey || !projectId) return [];\n  const url = `https://firestore.googleapis.com/v1/projects/${projectId}/databases/(default)/documents/sites/${siteId}:runQuery?key=${apiKey}`;\n  const fieldFilters = filters.map((f) => ({\n    fieldFilter: { field: { fieldPath: f.fieldPath }, op: \"EQUAL\", value: { stringValue: f.value } },\n  }));\n  const where =\n    fieldFilters.length === 0\n      ? undefined\n      : fieldFilters.length === 1\n        ? fieldFilters[0]\n        : { compositeFilter: { op: \"AND\", filters: fieldFilters } };\n  const structuredQuery: Record<string, unknown> = { from: [{ collectionId }] };\n  if (where) structuredQuery.where = where;\n  if (limit) structuredQuery.limit = limit;\n  try {\n    const res = await fetch(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ structuredQuery }),\n      // Zelfde vangnet-logica als pages.ts: de tag is het normale pad, de timer dekt een\n      // gemiste revalidate-push. Shop-content wijzigt zelden; elke 5 minuten opnieuw tellen was\n      // pure verspilling.\n      next: { revalidate: Number(process.env.XICMS_ISR_FALLBACK) || 3600, tags: [`xicms:${siteId}:${collectionId}`] },\n    });\n    if (!res.ok) return [];\n    const rows = (await res.json()) as { document?: { name: string; fields: Record<string, FsValue> } }[];\n    return rows\n      .filter((r) => r.document)\n      .map((r) => ({ id: r.document!.name.split(\"/\").pop()!, data: decodeFields(r.document!.fields ?? {}) }));\n  } catch (err) {\n    console.error(\"[xicms] Firestore REST-query (shop) mislukt:\", err);\n    return [];\n  }\n}\n\n/* ── Readers ─────────────────────────────────────────────────────────────── */\n\nasync function getActiveProductsUncached(siteId: string): Promise<ServerProduct[]> {\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb.collection(`sites/${siteId}/products`).where(\"status\", \"==\", \"active\").limit(500).get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read producten mislukt — lege lijst:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(siteId, \"products\", [{ fieldPath: \"status\", value: \"active\" }], 500);\n  }\n  return docs\n    .map((d) => parseProduct(d.id, d.data))\n    .filter((p): p is ServerProduct => p !== null)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0) || a.name.localeCompare(b.name, \"nl\"));\n}\n\nasync function getShopCategoriesUncached(siteId: string): Promise<ServerShopCategory[]> {\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb.collection(`sites/${siteId}/shopCategories`).limit(100).get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read categorieën mislukt — lege lijst:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(siteId, \"shopCategories\", [], 100);\n  }\n  return docs\n    .map((d) => parseCategory(d.id, d.data))\n    .filter((c): c is ServerShopCategory => c !== null && c.visible !== false)\n    .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));\n}\n\nasync function getProductBySlugUncached(siteId: string, slug: string): Promise<ServerProduct | null> {\n  if (!slug) return null;\n  const adb = getAdminDb();\n  let docs: RestDoc[];\n  if (adb) {\n    try {\n      const snap = await adb\n        .collection(`sites/${siteId}/products`)\n        .where(\"status\", \"==\", \"active\")\n        .where(\"slug\", \"==\", slug)\n        .limit(1)\n        .get();\n      docs = snap.docs.map((d) => ({ id: d.id, data: d.data() }));\n    } catch (e) {\n      console.warn(\"[xicms] Admin-read product mislukt:\", (e as Error)?.message ?? e);\n      docs = [];\n    }\n  } else {\n    docs = await restQuery(\n      siteId,\n      \"products\",\n      [\n        { fieldPath: \"status\", value: \"active\" },\n        { fieldPath: \"slug\", value: slug },\n      ],\n      1,\n    );\n  }\n  const d = docs[0];\n  return d ? parseProduct(d.id, d.data) : null;\n}\n\nexport const getActiveProducts = cache(getActiveProductsUncached);\nexport const getShopCategories = cache(getShopCategoriesUncached);\nexport const getProductBySlug = cache(getProductBySlugUncached);\n\n/**\n * Verzamelt de shop-startdata voor één pagina. `searchParams.p` (detailpagina) bepaalt of er\n * ook een enkel product geladen wordt. Geef het resultaat door als\n * `<PublishedPage blockData={{ shop: data }}>`.\n */\nexport async function getShopPageData(\n  siteId: string,\n  searchParams?: { p?: string | string[]; [k: string]: unknown },\n): Promise<ShopPageData> {\n  const slugParam = searchParams?.p;\n  const slug = Array.isArray(slugParam) ? slugParam[0] : slugParam;\n  const [products, categories, product] = await Promise.all([\n    getActiveProducts(siteId),\n    getShopCategories(siteId),\n    slug ? getProductBySlug(siteId, slug) : Promise.resolve(undefined),\n  ]);\n  const data: ShopPageData = { products, categories };\n  if (slug !== undefined) data.product = product ?? null;\n  return data;\n}\n\n/* ── SEO ─────────────────────────────────────────────────────────────────── */\n\n/** Metadata voor een productdetailpagina (title/description/OG-beeld). */\nexport function buildProductMetadata(\n  product: ServerProduct | null,\n  site: { name: string; domain?: string },\n): Metadata {\n  if (!product) return { title: `Product — ${site.name}` };\n  const description = (product.description || `${product.name} — ${site.name}`)\n    .replace(/\\s+/g, \" \")\n    .slice(0, 300);\n  const image = product.images?.[0];\n  return {\n    title: `${product.name} — ${site.name}`,\n    description,\n    openGraph: {\n      title: product.name,\n      description,\n      type: \"website\",\n      ...(image ? { images: [{ url: image }] } : {}),\n    },\n  };\n}\n\n/** schema.org Product/Offer-JSON-LD met echte prijs en beschikbaarheid. */\nexport function buildProductJsonLd(\n  product: ServerProduct,\n  site: { name: string; domain?: string },\n  currency = \"EUR\",\n): Record<string, unknown> {\n  const soldOut =\n    product.trackStock === true &&\n    (product.options ?? []).length === 0 &&\n    product.stock !== undefined &&\n    product.stock <= 0;\n  return {\n    \"@context\": \"https://schema.org\",\n    \"@type\": \"Product\",\n    name: product.name,\n    ...(product.description ? { description: product.description.slice(0, 500) } : {}),\n    ...(product.images?.length ? { image: product.images } : {}),\n    offers: {\n      \"@type\": \"Offer\",\n      price: (productPriceCents(product) / 100).toFixed(2),\n      priceCurrency: currency,\n      availability: soldOut ? \"https://schema.org/OutOfStock\" : \"https://schema.org/InStock\",\n      ...(site.domain ? { url: `https://${site.domain}/product?p=${encodeURIComponent(product.slug)}` } : {}),\n    },\n    brand: { \"@type\": \"Brand\", name: site.name },\n  };\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAGtB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAoBP,SAAS,aAAa,IAAY,MAAqC;AACrE,QAAM,MAAM,cAAc,UAAU,IAAI;AACxC,MAAI,CAAC,IAAI,SAAS;AAChB,YAAQ,KAAK,oBAAoB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AACzG,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAEA,SAAS,cAAc,IAAY,MAA0C;AAC3E,QAAM,MAAM,mBAAmB,UAAU,IAAI;AAC7C,MAAI,CAAC,IAAI,SAAS;AAChB,YAAQ,KAAK,sBAAsB,EAAE,mDAAmD,IAAI,MAAM,OAAO,CAAC,CAAC;AAC3G,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,GAAG,IAAI,KAAK;AAC3B;AAKA,SAAS,OAAO,GAAqB;AACnC,MAAI,KAAK,KAAM,QAAO;AACtB,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,OAAO,EAAE,YAAY;AACrD,MAAI,iBAAiB,EAAG,QAAO,EAAE;AACjC,MAAI,kBAAkB,EAAG,QAAO,EAAE;AAClC,MAAI,eAAe,EAAG,QAAO;AAC7B,MAAI,oBAAoB,EAAG,QAAO,EAAE;AACpC,MAAI,gBAAgB,EAAG,SAAU,EAAE,YAAwB,UAAwB,CAAC,GAAG,IAAI,MAAM;AACjG,MAAI,cAAc,EAAG,QAAO,aAAe,EAAE,UAAsB,UAAsC,CAAC,CAAC;AAC3G,SAAO;AACT;AACA,SAAS,aAAa,QAA0D;AAC9E,SAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF;AAOA,eAAe,UACb,QACA,cACA,SACA,OACoB;AACpB,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,UAAU,CAAC,UAAW,QAAO,CAAC;AACnC,QAAM,MAAM,gDAAgD,SAAS,wCAAwC,MAAM,iBAAiB,MAAM;AAC1I,QAAM,eAAe,QAAQ,IAAI,CAAC,OAAO;AAAA,IACvC,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,SAAS,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE;AAAA,EACjG,EAAE;AACF,QAAM,QACJ,aAAa,WAAW,IACpB,SACA,aAAa,WAAW,IACtB,aAAa,CAAC,IACd,EAAE,iBAAiB,EAAE,IAAI,OAAO,SAAS,aAAa,EAAE;AAChE,QAAM,kBAA2C,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,EAAE;AAC5E,MAAI,MAAO,iBAAgB,QAAQ;AACnC,MAAI,MAAO,iBAAgB,QAAQ;AACnC,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,gBAAgB,CAAC;AAAA;AAAA;AAAA;AAAA,MAIxC,MAAM,EAAE,YAAY,OAAO,QAAQ,IAAI,kBAAkB,KAAK,MAAM,MAAM,CAAC,SAAS,MAAM,IAAI,YAAY,EAAE,EAAE;AAAA,IAChH,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KACJ,OAAO,CAAC,MAAM,EAAE,QAAQ,EACxB,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAU,KAAK,MAAM,GAAG,EAAE,IAAI,GAAI,MAAM,aAAa,EAAE,SAAU,UAAU,CAAC,CAAC,EAAE,EAAE;AAAA,EAC1G,SAAS,KAAK;AACZ,YAAQ,MAAM,gDAAgD,GAAG;AACjE,WAAO,CAAC;AAAA,EACV;AACF;AAIA,eAAe,0BAA0B,QAA0C;AACjF,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,WAAW,EAAE,MAAM,UAAU,MAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,IAAI;AAC7G,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,2DAAuD,GAAa,WAAW,CAAC;AAC7F,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM,UAAU,QAAQ,YAAY,CAAC,EAAE,WAAW,UAAU,OAAO,SAAS,CAAC,GAAG,GAAG;AAAA,EAC5F;AACA,SAAO,KACJ,IAAI,CAAC,MAAM,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,EACrC,OAAO,CAAC,MAA0B,MAAM,IAAI,EAC5C,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,IAAI,CAAC;AACzF;AAEA,eAAe,0BAA0B,QAA+C;AACtF,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAAI,WAAW,SAAS,MAAM,iBAAiB,EAAE,MAAM,GAAG,EAAE,IAAI;AACnF,aAAO,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,gEAAyD,GAAa,WAAW,CAAC;AAC/F,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM,UAAU,QAAQ,kBAAkB,CAAC,GAAG,GAAG;AAAA,EAC1D;AACA,SAAO,KACJ,IAAI,CAAC,MAAM,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EACtC,OAAO,CAAC,MAA+B,MAAM,QAAQ,EAAE,YAAY,KAAK,EACxE,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,MAAM,EAAE,SAAS,EAAE;AACnD;AAEA,eAAe,yBAAyB,QAAgB,MAA6C;AACnG,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,WAAW;AACvB,MAAI;AACJ,MAAI,KAAK;AACP,QAAI;AACF,YAAM,OAAO,MAAM,IAChB,WAAW,SAAS,MAAM,WAAW,EACrC,MAAM,UAAU,MAAM,QAAQ,EAC9B,MAAM,QAAQ,MAAM,IAAI,EACxB,MAAM,CAAC,EACP,IAAI;AACP,aAAO,KAAK,KAAK,IAAI,CAACA,QAAO,EAAE,IAAIA,GAAE,IAAI,MAAMA,GAAE,KAAK,EAAE,EAAE;AAAA,IAC5D,SAAS,GAAG;AACV,cAAQ,KAAK,uCAAwC,GAAa,WAAW,CAAC;AAC9E,aAAO,CAAC;AAAA,IACV;AAAA,EACF,OAAO;AACL,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,QACE,EAAE,WAAW,UAAU,OAAO,SAAS;AAAA,QACvC,EAAE,WAAW,QAAQ,OAAO,KAAK;AAAA,MACnC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,IAAI,KAAK,CAAC;AAChB,SAAO,IAAI,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;AAC1C;AAEO,MAAM,oBAAoB,MAAM,yBAAyB;AACzD,MAAM,oBAAoB,MAAM,yBAAyB;AACzD,MAAM,mBAAmB,MAAM,wBAAwB;AAO9D,eAAsB,gBACpB,QACA,cACuB;AACvB,QAAM,YAAY,cAAc;AAChC,QAAM,OAAO,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AACvD,QAAM,CAAC,UAAU,YAAY,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IACxD,kBAAkB,MAAM;AAAA,IACxB,kBAAkB,MAAM;AAAA,IACxB,OAAO,iBAAiB,QAAQ,IAAI,IAAI,QAAQ,QAAQ,MAAS;AAAA,EACnE,CAAC;AACD,QAAM,OAAqB,EAAE,UAAU,WAAW;AAClD,MAAI,SAAS,OAAW,MAAK,UAAU,WAAW;AAClD,SAAO;AACT;AAKO,SAAS,qBACd,SACA,MACU;AACV,MAAI,CAAC,QAAS,QAAO,EAAE,OAAO,kBAAa,KAAK,IAAI,GAAG;AACvD,QAAM,eAAe,QAAQ,eAAe,GAAG,QAAQ,IAAI,WAAM,KAAK,IAAI,IACvE,QAAQ,QAAQ,GAAG,EACnB,MAAM,GAAG,GAAG;AACf,QAAM,QAAQ,QAAQ,SAAS,CAAC;AAChC,SAAO;AAAA,IACL,OAAO,GAAG,QAAQ,IAAI,WAAM,KAAK,IAAI;AAAA,IACrC;AAAA,IACA,WAAW;AAAA,MACT,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,MAAM;AAAA,MACN,GAAI,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AACF;AAGO,SAAS,mBACd,SACA,MACA,WAAW,OACc;AACzB,QAAM,UACJ,QAAQ,eAAe,SACtB,QAAQ,WAAW,CAAC,GAAG,WAAW,KACnC,QAAQ,UAAU,UAClB,QAAQ,SAAS;AACnB,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,cAAc,EAAE,aAAa,QAAQ,YAAY,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC;AAAA,IAChF,GAAI,QAAQ,QAAQ,SAAS,EAAE,OAAO,QAAQ,OAAO,IAAI,CAAC;AAAA,IAC1D,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,QAAQ,kBAAkB,OAAO,IAAI,KAAK,QAAQ,CAAC;AAAA,MACnD,eAAe;AAAA,MACf,cAAc,UAAU,kCAAkC;AAAA,MAC1D,GAAI,KAAK,SAAS,EAAE,KAAK,WAAW,KAAK,MAAM,cAAc,mBAAmB,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC;AAAA,IACvG;AAAA,IACA,OAAO,EAAE,SAAS,SAAS,MAAM,KAAK,KAAK;AAAA,EAC7C;AACF;","names":["d"]}

package/dist/server/version.d.ts

@@ -0,0 +1,16 @@
+import "server-only";
+/**
+ * GET-handler voor `app/api/version/route.ts` in de klantsite: vertelt op welke engine deze
+ * DEPLOYMENT draait.
+ *
+ * WAAROM EEN ENDPOINT EN GEEN VELD IN FIRESTORE: `sites/{siteId}` is client-side niet schrijfbaar
+ * (rules), dus een site kan zijn versie daar niet zelf in zetten. Je zou hem via een callable
+ * kunnen laten melden zodra iemand /beheer opent, maar dan lees je af wanneer er voor het laatst
+ * is ingelogd — niet wat er live staat. Een site die maanden niet is aangeraakt zou een versie
+ * melden die er allang niet meer op draait. Dit endpoint antwoordt uit de deployment zelf.
+ *
+ * Bewust publiek en zonder geheim: het is één versienummer, dat staat sowieso in de bundel. De
+ * open CORS-header is nodig omdat het superbeheer op een ánder domein draait dan de site die het
+ * bevraagt.
+ */
+export declare function versionGET(): Response;

package/dist/server/version.js

@@ -0,0 +1,17 @@
+import "server-only";
+import { CORE_VERSION } from "../version.js";
+function versionGET() {
+  return new Response(JSON.stringify({ core: CORE_VERSION }), {
+    status: 200,
+    headers: {
+      "Content-Type": "application/json",
+      "Access-Control-Allow-Origin": "*",
+      // Eén dag cachen: een versie verandert alleen bij een deploy, en dan is de cache toch koud.
+      "Cache-Control": "public, max-age=86400"
+    }
+  });
+}
+export {
+  versionGET
+};
+//# sourceMappingURL=version.js.map

package/dist/server/version.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/version.ts"],"sourcesContent":["import \"server-only\";\n\nimport { CORE_VERSION } from \"../version\";\n\n/**\n * GET-handler voor `app/api/version/route.ts` in de klantsite: vertelt op welke engine deze\n * DEPLOYMENT draait.\n *\n * WAAROM EEN ENDPOINT EN GEEN VELD IN FIRESTORE: `sites/{siteId}` is client-side niet schrijfbaar\n * (rules), dus een site kan zijn versie daar niet zelf in zetten. Je zou hem via een callable\n * kunnen laten melden zodra iemand /beheer opent, maar dan lees je af wanneer er voor het laatst\n * is ingelogd — niet wat er live staat. Een site die maanden niet is aangeraakt zou een versie\n * melden die er allang niet meer op draait. Dit endpoint antwoordt uit de deployment zelf.\n *\n * Bewust publiek en zonder geheim: het is één versienummer, dat staat sowieso in de bundel. De\n * open CORS-header is nodig omdat het superbeheer op een ánder domein draait dan de site die het\n * bevraagt.\n */\nexport function versionGET(): Response {\n  return new Response(JSON.stringify({ core: CORE_VERSION }), {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      // Eén dag cachen: een versie verandert alleen bij een deploy, en dan is de cache toch koud.\n      \"Cache-Control\": \"public, max-age=86400\",\n    },\n  });\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,oBAAoB;AAgBtB,SAAS,aAAuB;AACrC,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC,GAAG;AAAA,IAC1D,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,+BAA+B;AAAA;AAAA,MAE/B,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/settings/useSiteSettings.d.ts

@@ -1,6 +1,6 @@
 import { type ReactNode } from "react";
-import { type PublicSiteSettings } from "../schema/settings";
-import type { SiteConfig } from "../schema/siteConfig";
+import { type PublicSiteSettings } from "../schema/settings.js";
+import type { SiteConfig } from "../schema/siteConfig.js";
 /**
  * Live, publiek-veilige site-instellingen (`sites/{siteId}/settings/public`) zodat dingen die de
  * klant in /beheer wijzigt (footer, nav, thema, module-instellingen) direct op de site verschijnen.

package/dist/settings/useSiteSettings.js

@@ -1,13 +1,11 @@
 "use client";
 import { jsx } from "react/jsx-runtime";
 import { createContext, useContext, useEffect, useMemo, useState } from "react";
-import { doc, getDoc, onSnapshot } from "firebase/firestore";
-import { getDb } from "../firebase/client";
-import { useSiteConfig } from "../config";
+import { useSiteConfig } from "../config.js";
 import {
   PublicSiteSettingsSchema,
   mergeThemeTokens
-} from "../schema/settings";
+} from "../schema/settings.js";
 const SettingsContext = createContext({ settings: {}, loaded: false });
 function SiteSettingsProvider({
   siteId,
@@ -20,28 +18,38 @@ function SiteSettingsProvider({
   const [loaded, setLoaded] = useState(hasInitial);
   useEffect(() => {
     if (hasInitial && !live) return;
-    const db = getDb();
-    if (!db) {
-      setLoaded(true);
-      return;
-    }
-    const ref = doc(db, "sites", siteId, "settings", "public");
     const apply = (data) => {
       const res = PublicSiteSettingsSchema.safeParse(data ?? {});
       if (res.success) setSettings(res.data);
       setLoaded(true);
     };
-    if (live) {
-      return onSnapshot(
-        ref,
-        (snap) => apply(snap.exists() ? snap.data() : {}),
-        () => setLoaded(true)
-      );
-    }
     let cancelled = false;
-    getDoc(ref).then((snap) => !cancelled && apply(snap.exists() ? snap.data() : {})).catch(() => !cancelled && setLoaded(true));
+    let unsub;
+    void (async () => {
+      const [{ getDb }, { doc, getDoc, onSnapshot }] = await Promise.all([
+        import("../firebase/client.js"),
+        import("firebase/firestore")
+      ]);
+      const db = getDb();
+      if (!db || cancelled) {
+        setLoaded(true);
+        return;
+      }
+      const ref = doc(db, "sites", siteId, "settings", "public");
+      if (live) {
+        unsub = onSnapshot(ref, (snap) => apply(snap.exists() ? snap.data() : {}), () => setLoaded(true));
+        return;
+      }
+      try {
+        const snap = await getDoc(ref);
+        if (!cancelled) apply(snap.exists() ? snap.data() : {});
+      } catch {
+        if (!cancelled) setLoaded(true);
+      }
+    })();
     return () => {
       cancelled = true;
+      unsub?.();
     };
   }, [siteId, live, hasInitial]);
   const value = useMemo(() => ({ settings, loaded, _set: setSettings }), [settings, loaded]);
@@ -54,16 +62,28 @@ function useSiteSettingsLiveSync(siteId, enabled) {
   const { _set } = useContext(SettingsContext);
   useEffect(() => {
     if (!enabled || !_set) return;
-    const db = getDb();
-    if (!db) return;
-    return onSnapshot(
-      doc(db, "sites", siteId, "settings", "public"),
-      (snap) => {
-        const res = PublicSiteSettingsSchema.safeParse(snap.exists() ? snap.data() : {});
-        if (res.success) _set(res.data);
-      },
-      () => void 0
-    );
+    let unsub;
+    let afgebroken = false;
+    void (async () => {
+      const [{ getDb }, { doc, onSnapshot }] = await Promise.all([
+        import("../firebase/client.js"),
+        import("firebase/firestore")
+      ]);
+      const db = getDb();
+      if (!db || afgebroken) return;
+      unsub = onSnapshot(
+        doc(db, "sites", siteId, "settings", "public"),
+        (snap) => {
+          const res = PublicSiteSettingsSchema.safeParse(snap.exists() ? snap.data() : {});
+          if (res.success) _set(res.data);
+        },
+        () => void 0
+      );
+    })();
+    return () => {
+      afgebroken = true;
+      unsub?.();
+    };
   }, [enabled, siteId, _set]);
 }
 function useMergedSiteConfig() {

package/dist/settings/useSiteSettings.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/settings/useSiteSettings.tsx"],"sourcesContent":["\"use client\";\n\nimport { createContext, useContext, useEffect, useMemo, useState, type ReactNode } from \"react\";\nimport { doc, getDoc, onSnapshot } from \"firebase/firestore\";\nimport { getDb } from \"../firebase/client\";\nimport { useSiteConfig } from \"../config\";\nimport {\n  PublicSiteSettingsSchema,\n  mergeThemeTokens,\n  type PublicSiteSettings,\n} from \"../schema/settings\";\nimport type { SiteConfig } from \"../schema/siteConfig\";\n\n/**\n * Live, publiek-veilige site-instellingen (`sites/{siteId}/settings/public`) zodat dingen die de\n * klant in /beheer wijzigt (footer, nav, thema, module-instellingen) direct op de site verschijnen.\n *\n * - Met SSR-seed (`initial`, via XiCMSProvider `settingsData`): géén client-read voor publiek —\n *   de settings zitten al in de server-HTML (geen theme-flits) en verversen via ISR.\n * - Zonder seed (publiek): één `getDoc` (geen per-bezoeker listener).\n * - Editors: `useSiteSettingsLiveSync` (onSnapshot) zodat /beheer-wijzigingen meteen zichtbaar zijn.\n * Zonder Firebase of zonder doc valt alles terug op de statische `SiteConfig` (identiek aan vroeger).\n */\ninterface Ctx {\n  settings: PublicSiteSettings;\n  loaded: boolean;\n  /** Interne setter voor de editor-live-sync (useSiteSettingsLiveSync). */\n  _set?: (s: PublicSiteSettings) => void;\n}\nconst SettingsContext = createContext<Ctx>({ settings: {}, loaded: false });\n\nexport function SiteSettingsProvider({\n  siteId,\n  live = false,\n  initial,\n  children,\n}: {\n  siteId: string;\n  live?: boolean;\n  /** SSR-startset (server-side gelezen via `getPublicSiteSettings`); slaat de client-read over. */\n  initial?: PublicSiteSettings;\n  children: ReactNode;\n}) {\n  const hasInitial = initial !== undefined;\n  const [settings, setSettings] = useState<PublicSiteSettings>(initial ?? {});\n  const [loaded, setLoaded] = useState(hasInitial);\n\n  useEffect(() => {\n    // Met een SSR-seed doet de publieke site géén client-read meer: de layout-route is ISR-gecached\n    // en levert verse settings per revalidate; editors krijgen apart een live sync.\n    if (hasInitial && !live) return;\n    const db = getDb();\n    if (!db) {\n      setLoaded(true);\n      return;\n    }\n    const ref = doc(db, \"sites\", siteId, \"settings\", \"public\");\n    const apply = (data: unknown) => {\n      const res = PublicSiteSettingsSchema.safeParse(data ?? {});\n      if (res.success) setSettings(res.data);\n      setLoaded(true);\n    };\n    if (live) {\n      return onSnapshot(\n        ref,\n        (snap) => apply(snap.exists() ? snap.data() : {}),\n        () => setLoaded(true),\n      );\n    }\n    let cancelled = false;\n    getDoc(ref)\n      .then((snap) => !cancelled && apply(snap.exists() ? snap.data() : {}))\n      .catch(() => !cancelled && setLoaded(true));\n    return () => {\n      cancelled = true;\n    };\n  }, [siteId, live, hasInitial]);\n\n  const value = useMemo<Ctx>(() => ({ settings, loaded, _set: setSettings }), [settings, loaded]);\n  return <SettingsContext.Provider value={value}>{children}</SettingsContext.Provider>;\n}\n\n/** Ruwe publieke settings + laadstatus. */\nexport function useSiteSettings(): Ctx {\n  return useContext(SettingsContext);\n}\n\n/**\n * Editor-live-sync: onSnapshot op `settings/public` zolang `enabled` (ingelogde editor). Aparte\n * hook (i.p.v. `live` op de provider) zodat publiek nooit een listener krijgt — zelfde patroon\n * als CustomBlocksSync in XiCMSProvider. Een leesfout laat de bestaande settings staan.\n */\nexport function useSiteSettingsLiveSync(siteId: string, enabled: boolean) {\n  const { _set } = useContext(SettingsContext);\n  useEffect(() => {\n    if (!enabled || !_set) return;\n    const db = getDb();\n    if (!db) return;\n    return onSnapshot(\n      doc(db, \"sites\", siteId, \"settings\", \"public\"),\n      (snap) => {\n        const res = PublicSiteSettingsSchema.safeParse(snap.exists() ? snap.data() : {});\n        if (res.success) _set(res.data);\n      },\n      () => undefined,\n    );\n  }, [enabled, siteId, _set]);\n}\n\n/** SiteConfig met de live Firestore-settings eroverheen (Firestore wint waar gezet). */\nexport function useMergedSiteConfig(): SiteConfig {\n  const base = useSiteConfig();\n  const { settings } = useSiteSettings();\n  return useMemo(() => {\n    const nav = settings.nav && settings.nav.length > 0 ? settings.nav : base.nav;\n    return {\n      ...base,\n      name: settings.name ?? base.name,\n      nav,\n      theme: mergeThemeTokens(base.theme, settings.theme),\n      seoDefaults: settings.seoDefaults ?? base.seoDefaults,\n    };\n  }, [base, settings]);\n}\n"],"mappings":";AA+ES;AA7ET,SAAS,eAAe,YAAY,WAAW,SAAS,gBAAgC;AACxF,SAAS,KAAK,QAAQ,kBAAkB;AACxC,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAmBP,MAAM,kBAAkB,cAAmB,EAAE,UAAU,CAAC,GAAG,QAAQ,MAAM,CAAC;AAEnE,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AACF,GAMG;AACD,QAAM,aAAa,YAAY;AAC/B,QAAM,CAAC,UAAU,WAAW,IAAI,SAA6B,WAAW,CAAC,CAAC;AAC1E,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,UAAU;AAE/C,YAAU,MAAM;AAGd,QAAI,cAAc,CAAC,KAAM;AACzB,UAAM,KAAK,MAAM;AACjB,QAAI,CAAC,IAAI;AACP,gBAAU,IAAI;AACd;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI,SAAS,QAAQ,YAAY,QAAQ;AACzD,UAAM,QAAQ,CAAC,SAAkB;AAC/B,YAAM,MAAM,yBAAyB,UAAU,QAAQ,CAAC,CAAC;AACzD,UAAI,IAAI,QAAS,aAAY,IAAI,IAAI;AACrC,gBAAU,IAAI;AAAA,IAChB;AACA,QAAI,MAAM;AACR,aAAO;AAAA,QACL;AAAA,QACA,CAAC,SAAS,MAAM,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;AAAA,QAChD,MAAM,UAAU,IAAI;AAAA,MACtB;AAAA,IACF;AACA,QAAI,YAAY;AAChB,WAAO,GAAG,EACP,KAAK,CAAC,SAAS,CAAC,aAAa,MAAM,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EACpE,MAAM,MAAM,CAAC,aAAa,UAAU,IAAI,CAAC;AAC5C,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,UAAU,CAAC;AAE7B,QAAM,QAAQ,QAAa,OAAO,EAAE,UAAU,QAAQ,MAAM,YAAY,IAAI,CAAC,UAAU,MAAM,CAAC;AAC9F,SAAO,oBAAC,gBAAgB,UAAhB,EAAyB,OAAe,UAAS;AAC3D;AAGO,SAAS,kBAAuB;AACrC,SAAO,WAAW,eAAe;AACnC;AAOO,SAAS,wBAAwB,QAAgB,SAAkB;AACxE,QAAM,EAAE,KAAK,IAAI,WAAW,eAAe;AAC3C,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,KAAM;AACvB,UAAM,KAAK,MAAM;AACjB,QAAI,CAAC,GAAI;AACT,WAAO;AAAA,MACL,IAAI,IAAI,SAAS,QAAQ,YAAY,QAAQ;AAAA,MAC7C,CAAC,SAAS;AACR,cAAM,MAAM,yBAAyB,UAAU,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;AAC/E,YAAI,IAAI,QAAS,MAAK,IAAI,IAAI;AAAA,MAChC;AAAA,MACA,MAAM;AAAA,IACR;AAAA,EACF,GAAG,CAAC,SAAS,QAAQ,IAAI,CAAC;AAC5B;AAGO,SAAS,sBAAkC;AAChD,QAAM,OAAO,cAAc;AAC3B,QAAM,EAAE,SAAS,IAAI,gBAAgB;AACrC,SAAO,QAAQ,MAAM;AACnB,UAAM,MAAM,SAAS,OAAO,SAAS,IAAI,SAAS,IAAI,SAAS,MAAM,KAAK;AAC1E,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM,SAAS,QAAQ,KAAK;AAAA,MAC5B;AAAA,MACA,OAAO,iBAAiB,KAAK,OAAO,SAAS,KAAK;AAAA,MAClD,aAAa,SAAS,eAAe,KAAK;AAAA,IAC5C;AAAA,EACF,GAAG,CAAC,MAAM,QAAQ,CAAC;AACrB;","names":[]}
+{"version":3,"sources":["../../src/settings/useSiteSettings.tsx"],"sourcesContent":["\"use client\";\n\nimport { createContext, useContext, useEffect, useMemo, useState, type ReactNode } from \"react\";\nimport { useSiteConfig } from \"../config\";\nimport {\n  PublicSiteSettingsSchema,\n  mergeThemeTokens,\n  type PublicSiteSettings,\n} from \"../schema/settings\";\nimport type { SiteConfig } from \"../schema/siteConfig\";\n\n/**\n * Live, publiek-veilige site-instellingen (`sites/{siteId}/settings/public`) zodat dingen die de\n * klant in /beheer wijzigt (footer, nav, thema, module-instellingen) direct op de site verschijnen.\n *\n * - Met SSR-seed (`initial`, via XiCMSProvider `settingsData`): géén client-read voor publiek —\n *   de settings zitten al in de server-HTML (geen theme-flits) en verversen via ISR.\n * - Zonder seed (publiek): één `getDoc` (geen per-bezoeker listener).\n * - Editors: `useSiteSettingsLiveSync` (onSnapshot) zodat /beheer-wijzigingen meteen zichtbaar zijn.\n * Zonder Firebase of zonder doc valt alles terug op de statische `SiteConfig` (identiek aan vroeger).\n */\ninterface Ctx {\n  settings: PublicSiteSettings;\n  loaded: boolean;\n  /** Interne setter voor de editor-live-sync (useSiteSettingsLiveSync). */\n  _set?: (s: PublicSiteSettings) => void;\n}\nconst SettingsContext = createContext<Ctx>({ settings: {}, loaded: false });\n\nexport function SiteSettingsProvider({\n  siteId,\n  live = false,\n  initial,\n  children,\n}: {\n  siteId: string;\n  live?: boolean;\n  /** SSR-startset (server-side gelezen via `getPublicSiteSettings`); slaat de client-read over. */\n  initial?: PublicSiteSettings;\n  children: ReactNode;\n}) {\n  const hasInitial = initial !== undefined;\n  const [settings, setSettings] = useState<PublicSiteSettings>(initial ?? {});\n  const [loaded, setLoaded] = useState(hasInitial);\n\n  useEffect(() => {\n    // Met een SSR-seed doet de publieke site géén client-read meer: de layout-route is ISR-gecached\n    // en levert verse settings per revalidate; editors krijgen apart een live sync.\n    if (hasInitial && !live) return;\n    const apply = (data: unknown) => {\n      const res = PublicSiteSettingsSchema.safeParse(data ?? {});\n      if (res.success) setSettings(res.data);\n      setLoaded(true);\n    };\n    // Firestore DYNAMISCH: met een SSR-seed komt de publieke site hier niet eens, en een bezoeker\n    // hoort de SDK nooit te downloaden. Statisch importeren zette hem in de bundel van elke pagina.\n    let cancelled = false;\n    let unsub: (() => void) | undefined;\n    void (async () => {\n      const [{ getDb }, { doc, getDoc, onSnapshot }] = await Promise.all([\n        import(\"../firebase/client\"),\n        import(\"firebase/firestore\"),\n      ]);\n      const db = getDb();\n      if (!db || cancelled) {\n        setLoaded(true);\n        return;\n      }\n      const ref = doc(db, \"sites\", siteId, \"settings\", \"public\");\n      if (live) {\n        unsub = onSnapshot(ref, (snap) => apply(snap.exists() ? snap.data() : {}), () => setLoaded(true));\n        return;\n      }\n      try {\n        const snap = await getDoc(ref);\n        if (!cancelled) apply(snap.exists() ? snap.data() : {});\n      } catch {\n        if (!cancelled) setLoaded(true);\n      }\n    })();\n    return () => {\n      cancelled = true;\n      unsub?.();\n    };\n  }, [siteId, live, hasInitial]);\n\n  const value = useMemo<Ctx>(() => ({ settings, loaded, _set: setSettings }), [settings, loaded]);\n  return <SettingsContext.Provider value={value}>{children}</SettingsContext.Provider>;\n}\n\n/** Ruwe publieke settings + laadstatus. */\nexport function useSiteSettings(): Ctx {\n  return useContext(SettingsContext);\n}\n\n/**\n * Editor-live-sync: onSnapshot op `settings/public` zolang `enabled` (ingelogde editor). Aparte\n * hook (i.p.v. `live` op de provider) zodat publiek nooit een listener krijgt — zelfde patroon\n * als CustomBlocksSync in XiCMSProvider. Een leesfout laat de bestaande settings staan.\n */\nexport function useSiteSettingsLiveSync(siteId: string, enabled: boolean) {\n  const { _set } = useContext(SettingsContext);\n  useEffect(() => {\n    // Alleen editors (enabled) krijgen een listener, en pas dán laadt de SDK.\n    if (!enabled || !_set) return;\n    let unsub: (() => void) | undefined;\n    let afgebroken = false;\n    void (async () => {\n      const [{ getDb }, { doc, onSnapshot }] = await Promise.all([\n        import(\"../firebase/client\"),\n        import(\"firebase/firestore\"),\n      ]);\n      const db = getDb();\n      if (!db || afgebroken) return;\n      unsub = onSnapshot(\n        doc(db, \"sites\", siteId, \"settings\", \"public\"),\n        (snap) => {\n          const res = PublicSiteSettingsSchema.safeParse(snap.exists() ? snap.data() : {});\n          if (res.success) _set(res.data);\n        },\n        () => undefined,\n      );\n    })();\n    return () => {\n      afgebroken = true;\n      unsub?.();\n    };\n  }, [enabled, siteId, _set]);\n}\n\n/** SiteConfig met de live Firestore-settings eroverheen (Firestore wint waar gezet). */\nexport function useMergedSiteConfig(): SiteConfig {\n  const base = useSiteConfig();\n  const { settings } = useSiteSettings();\n  return useMemo(() => {\n    const nav = settings.nav && settings.nav.length > 0 ? settings.nav : base.nav;\n    return {\n      ...base,\n      name: settings.name ?? base.name,\n      nav,\n      theme: mergeThemeTokens(base.theme, settings.theme),\n      seoDefaults: settings.seoDefaults ?? base.seoDefaults,\n    };\n  }, [base, settings]);\n}\n"],"mappings":";AAuFS;AArFT,SAAS,eAAe,YAAY,WAAW,SAAS,gBAAgC;AACxF,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAmBP,MAAM,kBAAkB,cAAmB,EAAE,UAAU,CAAC,GAAG,QAAQ,MAAM,CAAC;AAEnE,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AACF,GAMG;AACD,QAAM,aAAa,YAAY;AAC/B,QAAM,CAAC,UAAU,WAAW,IAAI,SAA6B,WAAW,CAAC,CAAC;AAC1E,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,UAAU;AAE/C,YAAU,MAAM;AAGd,QAAI,cAAc,CAAC,KAAM;AACzB,UAAM,QAAQ,CAAC,SAAkB;AAC/B,YAAM,MAAM,yBAAyB,UAAU,QAAQ,CAAC,CAAC;AACzD,UAAI,IAAI,QAAS,aAAY,IAAI,IAAI;AACrC,gBAAU,IAAI;AAAA,IAChB;AAGA,QAAI,YAAY;AAChB,QAAI;AACJ,UAAM,YAAY;AAChB,YAAM,CAAC,EAAE,MAAM,GAAG,EAAE,KAAK,QAAQ,WAAW,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACjE,OAAO,oBAAoB;AAAA,QAC3B,OAAO,oBAAoB;AAAA,MAC7B,CAAC;AACD,YAAM,KAAK,MAAM;AACjB,UAAI,CAAC,MAAM,WAAW;AACpB,kBAAU,IAAI;AACd;AAAA,MACF;AACA,YAAM,MAAM,IAAI,IAAI,SAAS,QAAQ,YAAY,QAAQ;AACzD,UAAI,MAAM;AACR,gBAAQ,WAAW,KAAK,CAAC,SAAS,MAAM,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAChG;AAAA,MACF;AACA,UAAI;AACF,cAAM,OAAO,MAAM,OAAO,GAAG;AAC7B,YAAI,CAAC,UAAW,OAAM,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;AAAA,MACxD,QAAQ;AACN,YAAI,CAAC,UAAW,WAAU,IAAI;AAAA,MAChC;AAAA,IACF,GAAG;AACH,WAAO,MAAM;AACX,kBAAY;AACZ,cAAQ;AAAA,IACV;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,UAAU,CAAC;AAE7B,QAAM,QAAQ,QAAa,OAAO,EAAE,UAAU,QAAQ,MAAM,YAAY,IAAI,CAAC,UAAU,MAAM,CAAC;AAC9F,SAAO,oBAAC,gBAAgB,UAAhB,EAAyB,OAAe,UAAS;AAC3D;AAGO,SAAS,kBAAuB;AACrC,SAAO,WAAW,eAAe;AACnC;AAOO,SAAS,wBAAwB,QAAgB,SAAkB;AACxE,QAAM,EAAE,KAAK,IAAI,WAAW,eAAe;AAC3C,YAAU,MAAM;AAEd,QAAI,CAAC,WAAW,CAAC,KAAM;AACvB,QAAI;AACJ,QAAI,aAAa;AACjB,UAAM,YAAY;AAChB,YAAM,CAAC,EAAE,MAAM,GAAG,EAAE,KAAK,WAAW,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzD,OAAO,oBAAoB;AAAA,QAC3B,OAAO,oBAAoB;AAAA,MAC7B,CAAC;AACD,YAAM,KAAK,MAAM;AACjB,UAAI,CAAC,MAAM,WAAY;AACvB,cAAQ;AAAA,QACN,IAAI,IAAI,SAAS,QAAQ,YAAY,QAAQ;AAAA,QAC7C,CAAC,SAAS;AACR,gBAAM,MAAM,yBAAyB,UAAU,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;AAC/E,cAAI,IAAI,QAAS,MAAK,IAAI,IAAI;AAAA,QAChC;AAAA,QACA,MAAM;AAAA,MACR;AAAA,IACF,GAAG;AACH,WAAO,MAAM;AACX,mBAAa;AACb,cAAQ;AAAA,IACV;AAAA,EACF,GAAG,CAAC,SAAS,QAAQ,IAAI,CAAC;AAC5B;AAGO,SAAS,sBAAkC;AAChD,QAAM,OAAO,cAAc;AAC3B,QAAM,EAAE,SAAS,IAAI,gBAAgB;AACrC,SAAO,QAAQ,MAAM;AACnB,UAAM,MAAM,SAAS,OAAO,SAAS,IAAI,SAAS,IAAI,SAAS,MAAM,KAAK;AAC1E,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM,SAAS,QAAQ,KAAK;AAAA,MAC5B;AAAA,MACA,OAAO,iBAAiB,KAAK,OAAO,SAAS,KAAK;AAAA,MAClD,aAAa,SAAS,eAAe,KAAK;AAAA,IAC5C;AAAA,EACF,GAAG,CAAC,MAAM,QAAQ,CAAC;AACrB;","names":[]}

package/dist/styles.css

@@ -94,12 +94,35 @@
   font-family: var(--xicms-font-heading, var(--xicms-font, inherit));
 }
 
-/* Optionele donkere modus (volgt het systeem) — alleen actief bij theme.dark.auto.
-   `color-scheme` activeert light-dark() in de inline tokenwaarden (XiCMSProvider) én laat
-   native UI (scrollbars, formuliercontrols) meeschakelen. */
+/* Donkere modus in drie standen (theme.dark.mode):
+     "auto"  → volgt het systeem van de bezoeker
+     "dark"  → altijd donker
+     "light" → geen data-dark, dus dit blok doet niets
+   `color-scheme` activeert light-dark() in de inline tokenwaarden (XiCMSProvider) én laat native
+   UI (scrollbars, formuliercontrols) meeschakelen. */
 .xicms-root[data-dark="auto"] {
   color-scheme: light dark;
 }
+.xicms-root[data-dark="dark"] {
+  color-scheme: dark;
+}
+/* De tokens hieronder staan BEWUST twee keer: één keer achter de media-query voor "auto", en één
+   keer onvoorwaardelijk voor "dark". CSS kent geen manier om één declaratieblok te delen tussen een
+   selector binnen en buiten een @media, en een custom-property-schakelaar zou een style-query
+   vragen. Twee identieke blokken zijn hier eerlijker dan een truc; houd ze gelijk. */
+.xicms-root[data-dark="dark"] {
+  --xicms-bg: var(--xicms-bg-dark, #0f172a);
+  --xicms-fg: var(--xicms-fg-dark, #e2e8f0);
+  --xicms-primary: var(--xicms-primary-dark, var(--xicms-primary));
+  --xicms-surface: var(--xicms-surface-dark, #1e293b);
+  --xicms-border: var(--xicms-border-dark, rgba(255, 255, 255, 0.14));
+  --xicms-border-strong: rgba(255, 255, 255, 0.26);
+  --xicms-muted: rgba(255, 255, 255, 0.06);
+  --xicms-success-fg: #4ade80;
+  --xicms-danger-fg: #f87171;
+  background: var(--xicms-bg);
+  color: var(--xicms-fg);
+}
 @media (prefers-color-scheme: dark) {
   .xicms-root[data-dark="auto"] {
     --xicms-bg: var(--xicms-bg-dark, #0f172a);
@@ -1346,7 +1369,10 @@
   text-decoration: underline;
 }
 .xicms-hours__badge {
-  display: inline-block;
+  /* inline-flex + gap: de statusstip is nu een eigen element naast de tekst, geen teken erin. */
+  display: inline-flex;
+  align-items: center;
+  gap: 0.4rem;
   margin: 0.15rem 0 0.6rem;
   padding: 0.2rem 0.65rem;
   border-radius: 999px;

package/dist/theme/presets.d.ts

@@ -1,4 +1,4 @@
-import type { ThemeTokens } from "../schema/settings";
+import type { ThemeTokens } from "../schema/settings.js";
 /**
  * Kant-en-klare thema-presets (kleur + lettertype + afronding) waarmee een agent of editor in één
  * keuze een verzorgde huisstijl neerzet. Pas daarna gerust losse tokens aan. De `fontUrl` is een

package/dist/version.d.ts

@@ -0,0 +1,8 @@
+export declare const CORE_VERSION: string;
+/** De npm-registry, waar `npm run check:core-update` en het beheer de laatste versie ophalen. */
+export declare const CORE_PACKAGE = "@xiwebdesign/xicms-core";
+/**
+ * Vergelijkt twee semver-strings zonder dependency. Geeft true als `beschikbaar` nieuwer is.
+ * Pre-release-suffixen tellen niet mee — voor "is er een update?" volstaat major.minor.patch.
+ */
+export declare function isNieuwer(beschikbaar: string, huidig: string): boolean;

package/dist/version.js

@@ -0,0 +1,16 @@
+const CORE_VERSION = true ? "7.1.0" : "0.0.0-dev";
+const CORE_PACKAGE = "@xiwebdesign/xicms-core";
+function isNieuwer(beschikbaar, huidig) {
+  const delen = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+  const [aM, aN, aP] = delen(beschikbaar);
+  const [bM, bN, bP] = delen(huidig);
+  if (aM !== bM) return aM > bM;
+  if (aN !== bN) return aN > bN;
+  return aP > bP;
+}
+export {
+  CORE_PACKAGE,
+  CORE_VERSION,
+  isNieuwer
+};
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["/**\n * De versie van de engine waarop deze site draait.\n *\n * De waarde wordt bij het bouwen ingevuld (tsup `define`), niet uit package.json geïmporteerd: met\n * `bundle: false` zou zo'n import als losse JSON-module in `dist` belanden en bij de consumer niet\n * bestaan. In de monorepo (tests, dev) is de define er niet — vandaar de terugval, die meteen\n * zichtbaar maakt dát je naar een ongebouwde core kijkt.\n */\ndeclare const __XICMS_CORE_VERSION__: string | undefined;\n\nexport const CORE_VERSION: string =\n  typeof __XICMS_CORE_VERSION__ === \"string\" ? __XICMS_CORE_VERSION__ : \"0.0.0-dev\";\n\n/** De npm-registry, waar `npm run check:core-update` en het beheer de laatste versie ophalen. */\nexport const CORE_PACKAGE = \"@xiwebdesign/xicms-core\";\n\n/**\n * Vergelijkt twee semver-strings zonder dependency. Geeft true als `beschikbaar` nieuwer is.\n * Pre-release-suffixen tellen niet mee — voor \"is er een update?\" volstaat major.minor.patch.\n */\nexport function isNieuwer(beschikbaar: string, huidig: string): boolean {\n  const delen = (v: string) => v.split(\"-\")[0].split(\".\").map((n) => Number.parseInt(n, 10) || 0);\n  const [aM, aN, aP] = delen(beschikbaar);\n  const [bM, bN, bP] = delen(huidig);\n  if (aM !== bM) return aM > bM;\n  if (aN !== bN) return aN > bN;\n  return aP > bP;\n}\n"],"mappings":"AAUO,MAAM,eACX,OAA6C,UAAyB;AAGjE,MAAM,eAAe;AAMrB,SAAS,UAAU,aAAqB,QAAyB;AACtE,QAAM,QAAQ,CAAC,MAAc,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,KAAK,CAAC;AAC9F,QAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,WAAW;AACtC,QAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,MAAM;AACjC,MAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,MAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,SAAO,KAAK;AACd;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiwebdesign/xicms-core",
-  "version": "6.5.0",
+  "version": "7.1.0",
   "description": "XiCMS engine: gestructureerde content, pagina's, draft/publish, admin (TipTap+Radix), SEO en beveiliging voor klantsites.",
   "license": "UNLICENSED",
   "repository": {
@@ -40,6 +40,10 @@
       "types": "./dist/server/shop.d.ts",
       "import": "./dist/server/shop.js"
     },
+    "./server/auth": {
+      "types": "./dist/server/auth.d.ts",
+      "import": "./dist/server/auth.js"
+    },
     "./all": {
       "types": "./dist/all.d.ts",
       "import": "./dist/all.js"
@@ -76,13 +80,13 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup && tsc -p tsconfig.build.json && tailwindcss -c src/admin/tailwind.config.cjs -i src/admin/admin.css -o dist/admin.css --minify && node ./scripts/copy-css.mjs",
+    "build": "tsup && tsc -p tsconfig.build.json && tailwindcss -i src/admin/admin.css -o dist/admin.css --minify && node ./scripts/copy-css.mjs && node ./scripts/add-extensions.mjs",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "prepublishOnly": "npm run build"
   },
   "peerDependencies": {
-    "firebase": "^11.0.0",
+    "firebase": "^12.0.0",
     "next": "^15 || ^16",
     "react": "^18 || ^19",
     "react-dom": "^18 || ^19"
@@ -93,43 +97,40 @@
     }
   },
   "dependencies": {
-    "@astryxdesign/core": "^0.1.1",
-    "@astryxdesign/theme-neutral": "^0.1.1",
-    "@radix-ui/react-dialog": "^1.1.19",
-    "@radix-ui/react-dropdown-menu": "^2.1.20",
-    "@radix-ui/react-label": "^2.1.11",
-    "@radix-ui/react-select": "^2.3.3",
-    "@radix-ui/react-switch": "^1.3.3",
-    "@radix-ui/react-tabs": "^1.1.17",
-    "@radix-ui/react-toast": "^1.2.19",
-    "@radix-ui/react-tooltip": "^1.2.12",
-    "@tiptap/extension-image": "^2.11.0",
-    "@tiptap/extension-link": "^2.11.0",
-    "@tiptap/extension-text-style": "^2.27.2",
-    "@tiptap/extension-underline": "^2.27.2",
-    "@tiptap/pm": "^2.11.0",
-    "@tiptap/react": "^2.11.0",
-    "@tiptap/starter-kit": "^2.11.0",
+    "@astryxdesign/core": "^0.4.2",
+    "@astryxdesign/theme-neutral": "^0.4.2",
+    "@radix-ui/react-tabs": "^1.1.21",
+    "@tiptap/extension-image": "^3.30.1",
+    "@tiptap/extension-link": "^3.30.1",
+    "@tiptap/extension-text-style": "^3.30.1",
+    "@tiptap/pm": "^3.30.1",
+    "@tiptap/react": "^3.30.1",
+    "@tiptap/starter-kit": "^3.30.1",
     "clsx": "^2.1.1",
     "dompurify": "^3.2.3",
-    "firebase-admin": "^13.0.0",
-    "html2canvas-pro": "^1.5.11",
-    "sanitize-html": "^2.14.0",
-    "tailwind-merge": "^2.6.0",
-    "zod": "^3.24.1"
+    "firebase-admin": "^14.2.0",
+    "html2canvas-pro": "^2.3.8",
+    "sanitize-html": "^2.17.7",
+    "tailwind-merge": "^3.6.0",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@astryxdesign/cli": "^0.1.1",
-    "@types/react": "^19.0.0",
-    "@types/react-dom": "^19.0.0",
+    "@astryxdesign/cli": "^0.4.2",
+    "@tailwindcss/cli": "^4.3.3",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.4",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
     "@types/sanitize-html": "^2.13.0",
-    "firebase": "^11.0.0",
+    "firebase": "^12.17.1",
+    "jsdom": "^30.0.1",
     "next": "^16.0.0",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
-    "tailwindcss": "^3.4.17",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "tailwindcss": "^4.3.3",
     "tsup": "^8.5.0",
-    "typescript": "^5.6.0",
-    "vitest": "^2.1.8"
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
   }
 }