@anthusai/papyrus 1.0.0-next.3 → 1.0.0-next.4

package/middleware.ts

@@ -1,6 +1,8 @@
 import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
 import { getSiteBrand } from "./lib/site-brand";
+import { getSiteEnv, isIndexable } from "./lib/site-env";
+import { getStagingAccess } from "./lib/staging-gate";
 
 function usesNewsroomRootPaths(): boolean {
   const brand = getSiteBrand();
@@ -17,7 +19,14 @@ function isStaticOrApiPath(pathname: string): boolean {
   );
 }
 
-export function middleware(request: NextRequest) {
+function isStagingGatedPath(pathname: string): boolean {
+  if (isStaticOrApiPath(pathname)) return false;
+  if (pathname === "/robots.txt") return false;
+  if (pathname === "/newsroom" || pathname.startsWith("/newsroom/")) return false;
+  return true;
+}
+
+function routeRequest(request: NextRequest): NextResponse {
   if (!usesNewsroomRootPaths()) {
     return NextResponse.next();
   }
@@ -48,6 +57,34 @@ export function middleware(request: NextRequest) {
   return NextResponse.next();
 }
 
+export async function middleware(request: NextRequest): Promise<NextResponse> {
+  let sessionResponse: NextResponse | null = null;
+  if (getSiteEnv() === "staging" && isStagingGatedPath(request.nextUrl.pathname)) {
+    sessionResponse = NextResponse.next();
+    const access = await getStagingAccess(request, sessionResponse);
+    if (access === "anonymous") {
+      return withRobotsHeader(NextResponse.redirect(new URL("/newsroom", request.url)));
+    }
+    if (access === "forbidden") {
+      return withRobotsHeader(new NextResponse("Staging is limited to editors and admins.", { status: 403 }));
+    }
+  }
+
+  const response = routeRequest(request);
+  if (sessionResponse) {
+    for (const cookie of sessionResponse.headers.getSetCookie()) {
+      response.headers.append("set-cookie", cookie);
+    }
+  }
+  return withRobotsHeader(response);
+}
+
+function withRobotsHeader(response: NextResponse): NextResponse {
+  if (!isIndexable()) response.headers.set("X-Robots-Tag", "noindex, nofollow");
+  return response;
+}
+
 export const config = {
+  runtime: "nodejs",
   matcher: ["/((?!_next/static|_next/image|favicon.ico|icon).*)"],
 };

package/package.json

@@ -95,6 +95,7 @@
     "./components/reader-theme-control": "./components/reader-theme-control.tsx",
     "./components/reference-source-preview": "./components/reference-source-preview.tsx",
     "./components/settings-page": "./components/settings-page.tsx",
+    "./components/staging-banner": "./components/staging-banner.tsx",
     "./components/topic-steering-workspace": "./components/topic-steering-workspace.tsx",
     "./components/ui/badge": "./components/ui/badge.tsx",
     "./components/ui/button-group": "./components/ui/button-group.tsx",
@@ -129,6 +130,7 @@
     "./lib/content-actions-client": "./lib/content-actions-client.ts",
     "./lib/content-load-timing": "./lib/content-load-timing.ts",
     "./lib/content-repository": "./lib/content-repository.ts",
+    "./lib/content-source-context": "./lib/content-source-context.ts",
     "./lib/content-types": "./lib/content-types.ts",
     "./lib/define-site": "./lib/define-site.ts",
     "./lib/demo-amplify-outputs": "./lib/demo-amplify-outputs.ts",
@@ -181,8 +183,10 @@
     "./lib/semantic-graph": "./lib/semantic-graph.ts",
     "./lib/site-brand-tenant": "./lib/site-brand-tenant.ts",
     "./lib/site-brand": "./lib/site-brand.ts",
+    "./lib/site-env": "./lib/site-env.ts",
     "./lib/site-renderer": "./lib/site-renderer.ts",
     "./lib/site-stack": "./lib/site-stack.ts",
+    "./lib/staging-gate": "./lib/staging-gate.ts",
     "./lib/themed-image": "./lib/themed-image.ts",
     "./lib/utils": "./lib/utils.ts",
     "./renderers/markus/index": "./renderers/markus/index.ts",
@@ -257,7 +261,7 @@
       "optional": true
     }
   },
-  "version": "1.0.0-next.3",
+  "version": "1.0.0-next.4",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0-next.3",
+  "version": "1.0.0-next.4",
   "routes": [
     {
       "file": "app/[year]/[month]/[day]/[articleSlug]/page.tsx",