@avocadostudio-ai/site-sdk 0.23.0 → 0.25.0

package/dist/draft-context.d.ts

@@ -6,3 +6,30 @@ export declare function resolveEditorContext(searchParams: SearchParamsRecord, o
     defaultSiteId?: string;
     defaultEditorOrigin?: string;
 }): Promise<DraftContext | null>;
+/**
+ * The editor context for a preview route, or a 404.
+ *
+ * A route that exists only to render drafts — `/preview-draft`, `/avocado` —
+ * has one legitimate caller: the editor. Call this first, before the route
+ * reads anything unpublished:
+ *
+ * ```tsx
+ * export default async function PreviewPage({ params, searchParams }) {
+ *   const editor = await requireEditorContext(await searchParams)
+ *   const drafts = await sanity.withConfig({ perspective: "drafts" }).fetch(…) // only now
+ *   …
+ * }
+ * ```
+ *
+ * The order is the point. One integration's preview route fetched every CMS
+ * draft with its server read token, then asked whether the request came from
+ * the editor — so in production any visitor who guessed the URL saw the
+ * site's unreleased pages. `resolveEditorContext` already refused that visitor;
+ * nothing stopped the read that came before it.
+ *
+ * In production a context requires draft mode or a valid `secret` (see
+ * `resolveDraftContextCore`); in development, any editor signal. Without one the
+ * route answers Next's `notFound()` — the same response a route that does not
+ * exist gives, so it confirms nothing.
+ */
+export declare function requireEditorContext(searchParams: SearchParamsRecord, options?: Parameters<typeof resolveEditorContext>[1]): Promise<DraftContext>;

package/dist/draft-context.js

@@ -10,3 +10,37 @@ export async function resolveEditorContext(searchParams, options) {
     };
     return resolveDraftContextCore(searchParams, adapter, options);
 }
+/**
+ * The editor context for a preview route, or a 404.
+ *
+ * A route that exists only to render drafts — `/preview-draft`, `/avocado` —
+ * has one legitimate caller: the editor. Call this first, before the route
+ * reads anything unpublished:
+ *
+ * ```tsx
+ * export default async function PreviewPage({ params, searchParams }) {
+ *   const editor = await requireEditorContext(await searchParams)
+ *   const drafts = await sanity.withConfig({ perspective: "drafts" }).fetch(…) // only now
+ *   …
+ * }
+ * ```
+ *
+ * The order is the point. One integration's preview route fetched every CMS
+ * draft with its server read token, then asked whether the request came from
+ * the editor — so in production any visitor who guessed the URL saw the
+ * site's unreleased pages. `resolveEditorContext` already refused that visitor;
+ * nothing stopped the read that came before it.
+ *
+ * In production a context requires draft mode or a valid `secret` (see
+ * `resolveDraftContextCore`); in development, any editor signal. Without one the
+ * route answers Next's `notFound()` — the same response a route that does not
+ * exist gives, so it confirms nothing.
+ */
+export async function requireEditorContext(searchParams, options) {
+    const context = await resolveEditorContext(searchParams, options);
+    if (!context) {
+        const { notFound } = await import("next/navigation");
+        notFound();
+    }
+    return context;
+}

package/dist/draft.d.ts

@@ -1,4 +1,4 @@
-export { resolveEditorContext, single } from "./draft-context.ts";
+export { requireEditorContext, resolveEditorContext, single } from "./draft-context.ts";
 export { isEditorRender, isEditorRenderFrom, EDITOR_RENDER_HEADER, getEditorMarkers } from "./editor-render.ts";
 export { getOrchestratorUrl, fetchEditorPage, fetchEditorSlugs, fetchEditorSiteConfig } from "./draft-fetch.ts";
 export { DRAFT_SESSION_COOKIE, DRAFT_SITE_COOKIE, EDITOR_ORIGIN_COOKIE } from "./draft-common.ts";

package/dist/draft.js

@@ -1,5 +1,5 @@
 // Editor context resolution
-export { resolveEditorContext, single } from "./draft-context.js";
+export { requireEditorContext, resolveEditorContext, single } from "./draft-context.js";
 // Whether this render is the editor's preview — answerable from a layout,
 // where `resolveEditorContext` cannot reach because layouts get no searchParams.
 export { isEditorRender, isEditorRenderFrom, EDITOR_RENDER_HEADER, getEditorMarkers } from "./editor-render.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avocadostudio-ai/site-sdk",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -159,17 +159,17 @@
   ],
   "dependencies": {
     "zod": "^4.3.6",
-    "@avocadostudio-ai/blocks": "^0.23.0",
-    "@avocadostudio-ai/richtext": "^0.23.0",
-    "@avocadostudio-ai/preview-adapter": "^0.23.0",
-    "@avocadostudio-ai/shared": "^0.23.0"
+    "@avocadostudio-ai/blocks": "^0.25.0",
+    "@avocadostudio-ai/preview-adapter": "^0.25.0",
+    "@avocadostudio-ai/shared": "^0.25.0",
+    "@avocadostudio-ai/richtext": "^0.25.0"
   },
   "peerDependencies": {
     "better-sqlite3": ">=12.0.0",
     "next": ">=15.0.0",
     "react": ">=19.0.0",
     "react-dom": ">=19.0.0",
-    "@avocadostudio-ai/orchestrator-core": "^0.23.0"
+    "@avocadostudio-ai/orchestrator-core": "^0.25.0"
   },
   "peerDependenciesMeta": {
     "next": {