@avocadostudio-ai/orchestrator-core 0.25.0 → 0.26.0

package/dist/handler/create-orchestrator.js

@@ -64,6 +64,7 @@ import { createCmsBootstrapCache } from "../cms/bootstrap.js";
 import { resolveCapabilities } from "../cms/adapter.js";
 import { mediaSourceFromUnknown } from "../cms/media-sources.js";
 import { extractAccessToken, isAccessGateEnabled, isValidAccessToken, mintAccessToken, verifyAccessPassword } from "../http/access-tokens.js";
+import { editorCredentials } from "../http/editor-credentials.js";
 import { declareLibraryMount, observeLibraryMount } from "./library-mount.js";
 import { checkAuth, resolveAuth, CLOSED_HINT } from "./auth.js";
 import { setSiteAssetLister, invalidateSiteAssets } from "../state/site-assets.js";
@@ -262,6 +263,7 @@ const SUPPORTED_ROUTES = [
     "GET /health",
     "GET /auth/status",
     "POST /auth/verify",
+    "GET /editor/credentials",
     "POST /chat",
     "POST /chat/stream",
     "POST /chat/start",
@@ -643,6 +645,16 @@ export function createOrchestrator(config = {}) {
             }
             return jsonResponse({ ok: true, accessToken: mintAccessToken() }, { cors });
         }
+        /*
+         * The site's draft secret and publish token, for a caller the gate above has
+         * already let in. See `http/editor-credentials.ts` for why these no longer
+         * travel in the editor's HTML. Not in `PUBLIC_PATHS`, and that is the point:
+         * on a mount with a credential, a request without a valid token never gets
+         * here.
+         */
+        if (request.method === "GET" && path === "/editor/credentials") {
+            return jsonResponse(editorCredentials(), { cors: { ...cors, "cache-control": "no-store" } });
+        }
         if (request.method === "POST" && path === "/chat") {
             const runtime = await getRuntime();
             await runtime.ready;

package/dist/http/editor-credentials.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The two site credentials a signed-in editor needs, served by
+ * `GET /editor/credentials` instead of being written into the editor's HTML.
+ *
+ * - `siteDraftSecret` rides on every preview URL the editor builds, because the
+ *   draft cookie is routinely blocked in a cross-origin iframe. Without it a
+ *   production site renders its published pages and nothing is selectable.
+ * - `publishToken` is the `x-publish-token` the standalone server checks on
+ *   publish (library mode authenticates publish with the access token instead).
+ *
+ * Both used to reach the browser only through `window.__AVOCADO_CONFIG__`,
+ * which the self-host CLI writes into `index.html`. That page is served before
+ * the password gate runs, so an editor hosted on a public URL handed the site's
+ * draft secret to anyone who loaded it. With that secret, anyone could read the
+ * CMS's unpublished drafts through the site's preview route, password or not.
+ * Served from here, they reach only a caller the access gate has already let in.
+ *
+ * Absent values are omitted rather than sent as empty strings, so the editor
+ * keeps whatever it was configured with when this process holds nothing.
+ */
+export interface EditorCredentials {
+    siteDraftSecret?: string;
+    publishToken?: string;
+}
+export declare function editorCredentials(env?: Record<string, string | undefined>): EditorCredentials;

package/dist/http/editor-credentials.js

@@ -0,0 +1,9 @@
+import { getConfiguredDraftSecret } from "@avocadostudio-ai/shared";
+export function editorCredentials(env = process.env) {
+    const siteDraftSecret = getConfiguredDraftSecret(env) ?? undefined;
+    const publishToken = env.PUBLISH_TOKEN?.trim() || undefined;
+    return {
+        ...(siteDraftSecret ? { siteDraftSecret } : {}),
+        ...(publishToken ? { publishToken } : {})
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avocadostudio-ai/orchestrator-core",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",
@@ -22,8 +22,8 @@
     "openai": "^4.87.1",
     "sharp": "^0.35.4",
     "zod": "^4.3.6",
-    "@avocadostudio-ai/migration-sdk": "^0.25.0",
-    "@avocadostudio-ai/shared": "^0.25.0"
+    "@avocadostudio-ai/migration-sdk": "^0.26.0",
+    "@avocadostudio-ai/shared": "^0.26.0"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.220",