@avocadostudio-ai/cli 0.25.0 → 0.26.0

package/README.md

@@ -54,6 +54,7 @@ npx @avocadostudio-ai/cli start \
 | `--orchestrator <url>` | `AVOCADO_ORCHESTRATOR_URL` | `http://localhost:4200` | Orchestrator base URL the editor talks to |
 | `--preview <url>` | `AVOCADO_SITE_ORIGIN` | `http://localhost:3000` | Default preview site origin (can be overridden per-session via `?previewUrl=`) |
 | `--publish-token <tok>` | `AVOCADO_PUBLISH_TOKEN` | _unset_ | Forwarded as `x-publish-token` on publish requests |
+| `--draft-secret <s>` | `AVOCADO_SITE_DRAFT_SECRET`, then `DRAFT_MODE_SECRET` | _unset_ | The site's draft secret, for a loopback bind (see below) |
 | `--port <n>` | `PORT` | `4100` | Port for the editor server |
 | `--host <addr>` | `HOST` | `127.0.0.1` | Bind address. Use `0.0.0.0` for LAN access |
 
@@ -63,6 +64,8 @@ Run `avocadostudio --help` for the up-to-date list.
 
 The CLI serves the editor as a static SPA and injects a small `<script>` into `<head>` that sets `window.__AVOCADO_CONFIG__` before the app boots. The editor reads from this object first, falling back to its build-time defaults.
 
+**Credentials stay out of the page on a public bind.** The page is served before the editor's password gate runs, so anything written into it can be read by anyone who loads it. On a non-loopback `--host` the CLI therefore writes neither `siteDraftSecret` nor `publishToken`. After sign-in the editor fetches both from the orchestrator's `GET /editor/credentials`, which reads the orchestrator's own `DRAFT_MODE_SECRET` and `PUBLISH_TOKEN` and requires a valid access token. To host the editor, set those on the orchestrator and an access password, not on the CLI. On `127.0.0.1` the flags still write into the page, as before.
+
 This means the same prebuilt bundle works against any orchestrator — no rebuild needed per deployment. If you want to embed the editor inside your own Next.js app instead of running this CLI, mount the bundle yourself and inject the same `__AVOCADO_CONFIG__` shape; the keys are `orchestratorUrl`, `siteOrigin`, and `publishToken`.
 
 ## Compatibility

package/dist/index.js

@@ -15579,13 +15579,20 @@ function resolveEditorDist() {
     "Could not locate editor bundle. Expected editor-dist/ (published package) or ../apps/editor/dist (monorepo). Run `pnpm --filter @ai-site-editor/editor build` first."
   );
 }
-function configScript(opts) {
-  const cfg = {
+function isLoopbackHost(host) {
+  const h = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
+  return h === "localhost" || h === "::1" || /^127(\.\d{1,3}){3}$/.test(h);
+}
+function editorPageConfig(opts) {
+  const local = isLoopbackHost(opts.host);
+  return {
     orchestratorUrl: opts.orchestrator,
     siteOrigin: opts.siteOrigin,
-    publishToken: opts.publishToken,
-    siteDraftSecret: opts.siteDraftSecret
+    ...local ? { publishToken: opts.publishToken, siteDraftSecret: opts.siteDraftSecret } : {}
   };
+}
+function configScript(opts) {
+  const cfg = editorPageConfig(opts);
   const json2 = JSON.stringify(cfg).replace(/</g, "\\u003c");
   return `<script>window.__AVOCADO_CONFIG__=${json2};</script>`;
 }
@@ -15667,6 +15674,10 @@ async function startCommand(args) {
       ...opts.host === "127.0.0.1" ? [`  also reachable at http://localhost:${opts.port} \u2014 the spelling the docs use`] : [],
       `  orchestrator: ${opts.orchestrator}`,
       `  preview site: ${opts.siteOrigin}`,
+      ...isLoopbackHost(opts.host) ? [] : [
+        `  public bind: the draft secret and publish token are not written into the page;`,
+        `               the editor fetches them from the orchestrator after sign-in`
+      ],
       opts.publishToken ? `  publish token: (set)` : `  publish token: (unset)`,
       /*
        * Say this out loud, because its absence is silent and catastrophic.
@@ -15708,7 +15719,9 @@ function printHelp() {
       "  --preview <url>        Default preview site origin (env AVOCADO_SITE_ORIGIN, default http://localhost:3000)",
       "  --publish-token <tok>  Forward x-publish-token header (env AVOCADO_PUBLISH_TOKEN)",
       "  --draft-secret <s>     Site DRAFT_MODE_SECRET; required for editing in production",
-      "                         (env AVOCADO_SITE_DRAFT_SECRET, then DRAFT_MODE_SECRET)",
+      "                         (env AVOCADO_SITE_DRAFT_SECRET, then DRAFT_MODE_SECRET).",
+      "                         Written into the page only on a loopback --host; on a public",
+      "                         bind the editor fetches it from the orchestrator after sign-in",
       "  --port <n>             Port to serve the editor on (env PORT, default 4100)",
       "  --host <addr>          Bind address (env HOST, default 127.0.0.1)",
       "",

package/editor-dist/assets/{Editor-EPSED64A-DSDEiRED.js → Editor-EPSED64A-Bglre1zy.js}

@@ -1 +1 @@
-import{P as b}from"./chunk-2CNEFIQP-BCM0jyMr.js";import{u as y,a as j,E as L,_ as m,L as M,b as p,o as P,i as A}from"./PuckPrototypeRoute-BMFSrgRi.js";import{r as s,j as g}from"./index-BWf4GeHX.js";import{E as N,u as U}from"./index-DxOQxIUC.js";import"./index-C8b9WNzA.js";A();A();function C({content:a,onChange:x,extensions:v,editable:d=!0,onFocusChange:o,name:c}){const[i,E]=P(null,50,{leading:!0,maxWait:200}),l=s.useRef(!1),S=s.useRef(""),f=s.useRef(null),R=!!f.current,_=j(t=>t.state.ui.field.focus===c),T=t=>{f.current&&clearTimeout(f.current),f.current=setTimeout(()=>{S.current===t&&(f.current=null)},200)},u=y(),e=U({extensions:v,content:a,editable:d,immediatelyRender:!1,parseOptions:{preserveWhitespace:"full"},onUpdate:({editor:t})=>{if(l.current||!_){u.getState().setUi({field:{focus:c}});return}const r=t.getHTML(),{from:n,to:h}=t.state.selection;E({from:n,to:h,html:r}),T(r),S.current=r}});return s.useEffect(()=>{if(!e)return;const t=()=>{o==null||o(e)};return e.on("focus",t),()=>{e.off("focus",t)}},[e,o]),s.useEffect(()=>{if(i){const{ui:t}=u.getState().state;x(i.html,{field:m(p({},t.field),{metadata:{from:i.from,to:i.to}})})}},[e,i,x,u,c]),s.useEffect(()=>{e==null||e.setEditable(d)},[e,d]),s.useEffect(()=>{var t;if(!e||R||e.getHTML()===a)return;l.current=!0,e.commands.setContent(a,{emitUpdate:!1});const{ui:n}=u.getState().state;typeof((t=n.field.metadata)==null?void 0:t.from)<"u"&&e.commands.setTextSelection({from:n.field.metadata.from,to:n.field.metadata.to}),l.current=!1},[a,e,u]),e}var F=s.memo(a=>{const{onChange:x,content:v,readOnly:d=!1,field:o,inline:c=!1,onFocus:i,id:E,name:l}=a,{tiptap:S={},options:f}=o,{extensions:R=[]}=S,_=s.useMemo(()=>[b.configure(f),...R],[o,R]),T=y(),u=`${l}${c?"::inline":""}`,e=C({content:v,onChange:x,extensions:_,editable:!d,name:u,onFocusChange:r=>{if(r){const n=T.getState();T.setState({currentRichText:{field:o,editor:r,id:E,inline:c},state:m(p({},n.state),{ui:m(p({},n.state.ui),{field:m(p({},n.state.ui.field),{focus:u})})})}),i==null||i(r)}}}),t=j(r=>{var n,h;return!c&&((n=r.currentRichText)==null?void 0:n.id)===E&&((h=r.currentRichText)!=null&&h.inlineComponentId)?r.currentRichText.editor:e});return e?g.jsx(L,m(p({},a),{editor:e,menu:g.jsx(M,{field:o,editor:t,readOnly:d}),children:g.jsx(N,{editor:e,className:"rich-text"})})):null});F.displayName="Editor";export{F as Editor};
+import{P as b}from"./chunk-2CNEFIQP-kdd7MquI.js";import{u as y,a as j,E as L,_ as m,L as M,b as p,o as P,i as A}from"./PuckPrototypeRoute-CFwlZaQP.js";import{r as s,j as g}from"./index-Cy-PEt_d.js";import{E as N,u as U}from"./index-BI9xm3sn.js";import"./index-bSPYizZ6.js";A();A();function C({content:a,onChange:x,extensions:v,editable:d=!0,onFocusChange:o,name:c}){const[i,E]=P(null,50,{leading:!0,maxWait:200}),l=s.useRef(!1),S=s.useRef(""),f=s.useRef(null),R=!!f.current,_=j(t=>t.state.ui.field.focus===c),T=t=>{f.current&&clearTimeout(f.current),f.current=setTimeout(()=>{S.current===t&&(f.current=null)},200)},u=y(),e=U({extensions:v,content:a,editable:d,immediatelyRender:!1,parseOptions:{preserveWhitespace:"full"},onUpdate:({editor:t})=>{if(l.current||!_){u.getState().setUi({field:{focus:c}});return}const r=t.getHTML(),{from:n,to:h}=t.state.selection;E({from:n,to:h,html:r}),T(r),S.current=r}});return s.useEffect(()=>{if(!e)return;const t=()=>{o==null||o(e)};return e.on("focus",t),()=>{e.off("focus",t)}},[e,o]),s.useEffect(()=>{if(i){const{ui:t}=u.getState().state;x(i.html,{field:m(p({},t.field),{metadata:{from:i.from,to:i.to}})})}},[e,i,x,u,c]),s.useEffect(()=>{e==null||e.setEditable(d)},[e,d]),s.useEffect(()=>{var t;if(!e||R||e.getHTML()===a)return;l.current=!0,e.commands.setContent(a,{emitUpdate:!1});const{ui:n}=u.getState().state;typeof((t=n.field.metadata)==null?void 0:t.from)<"u"&&e.commands.setTextSelection({from:n.field.metadata.from,to:n.field.metadata.to}),l.current=!1},[a,e,u]),e}var F=s.memo(a=>{const{onChange:x,content:v,readOnly:d=!1,field:o,inline:c=!1,onFocus:i,id:E,name:l}=a,{tiptap:S={},options:f}=o,{extensions:R=[]}=S,_=s.useMemo(()=>[b.configure(f),...R],[o,R]),T=y(),u=`${l}${c?"::inline":""}`,e=C({content:v,onChange:x,extensions:_,editable:!d,name:u,onFocusChange:r=>{if(r){const n=T.getState();T.setState({currentRichText:{field:o,editor:r,id:E,inline:c},state:m(p({},n.state),{ui:m(p({},n.state.ui),{field:m(p({},n.state.ui.field),{focus:u})})})}),i==null||i(r)}}}),t=j(r=>{var n,h;return!c&&((n=r.currentRichText)==null?void 0:n.id)===E&&((h=r.currentRichText)!=null&&h.inlineComponentId)?r.currentRichText.editor:e});return e?g.jsx(L,m(p({},a),{editor:e,menu:g.jsx(M,{field:o,editor:t,readOnly:d}),children:g.jsx(N,{editor:e,className:"rich-text"})})):null});F.displayName="Editor";export{F as Editor};