@bettercms-ai/astro 0.9.1 → 0.10.0

package/components/BcmsBlocks.astro

@@ -27,9 +27,12 @@
  */
 import type { ContentBlock } from "@bettercms-ai/types";
 import { blockStyleToCss, componentInstanceAddresses } from "@bettercms-ai/types";
-import { bind, bindProps } from "../src/bindings.js";
+import { bind, bindProps } from "../dist/bindings.js";
 import type { DeliveryComponent, DeliveryForm } from "@bettercms-ai/sdk";
 import { applyOverrides } from "@bettercms-ai/ui/resolve";
+import { addressFor } from "../dist/bindings.js";
+import { portableTextToHtml } from "@bettercms-ai/richtext/html";
+import { readStructuredContent } from "@bettercms-ai/richtext";
 import BcmsImage from "./BcmsImage.astro";
 import BcmsForm from "./BcmsForm.astro";
 
@@ -206,8 +209,29 @@ const pass = { forms, components, turnstileSiteKey, nested: true, fieldAddresses
       // `richtext` and `text` carry the same payload and differ only in the authoring
       // surface, so delivery renders them identically — the hosted renderer does the same.
       case "text":
-      case "richtext":
+      case "richtext": {
+        /**
+         * STRUCTURED CONTENT WINS. This lane read `p.html` unconditionally while the hosted
+         * renderer preferred `p.content`, so a block whose structured value had moved past its
+         * derived cache rendered the stale cache on Astro sites only — the same per-lane
+         * divergence that once made `richtext` render nothing here at all.
+         *
+         * Serialised to a STRING rather than mounting React. `@portabletext/react` would drag
+         * `@astrojs/react` into every customer project, which is a breaking install-time change
+         * for a rendering result that is identical. `set:html` is already what this line did;
+         * the difference is that the string is now generated by our own escaping serialiser
+         * instead of coming out of storage, which REDUCES the trust surface.
+         *
+         * The per-block `#<_key>` addresses are stamped by the serialiser, so one paragraph
+         * inside the field is clickable rather than the field being one opaque string.
+         */
+        const structured = readStructuredContent(p);
+        if (structured) {
+          const base = addressFor(block.id, "html", bctx);
+          return <div class="bcms-text" {...blockAttrs} set:html={portableTextToHtml(structured, base ? { bindingBase: base } : {})} />;
+        }
         return <div class="bcms-text" {...bind(block.id, "html", "richtext", bctx)} {...blockAttrs} set:html={p.html ?? ""} />;
+      }
       case "image": {
         // Matches the Next adapter: the image block is click-to-select on the Visual Editor
         // canvas like heading/text/button, rather than dock-only. `kind="image"` means select

package/dist/bindings.d.ts

@@ -0,0 +1,42 @@
+import { BindingKind } from '@bettercms-ai/types';
+
+/**
+ * Visual Editor addresses for the Astro renderer.
+ *
+ * Identical contract to `@bettercms-ai/next`'s `bindings.ts`, and the SAME reason for existing:
+ * inside a component instance the definition's block ids address nothing, because they are
+ * shared by every instance of it. Stamping them produces an orphan on one placement and a
+ * duplicate that drops BOTH on two.
+ *
+ * Kept as a `.ts` module rather than inlined in the `.astro` frontmatter so the logic is
+ * testable without an Astro compiler, and so the two SDKs cannot drift from each other by
+ * having one file edited and not the other.
+ */
+
+interface BindingCtx {
+    /** Present only inside a component instance, where it is AUTHORITATIVE. */
+    fieldAddresses?: Map<string, string>;
+}
+/** The address a write lands on, or null when none exists. */
+declare function addressFor(id: string | undefined, prop: string, ctx: BindingCtx): string | null;
+/**
+ * Attributes for a value rendered as this element's own content. Astro omits `undefined`
+ * attributes, so an empty object spreads to nothing.
+ */
+declare function bind(id: string | undefined, prop: string, kind: BindingKind, ctx: BindingCtx): Record<string, string>;
+/**
+ * Attributes for values that live in an ATTRIBUTE of this element. `data-bcms-field` addresses
+ * one element and an element cannot hold two, so these ride `data-bcms-props`:
+ * `<address>|<kind>|<domAttribute>`, semicolon separated.
+ *
+ * An entry whose value is absent is dropped — `setFieldPath` refuses to create a final key, so
+ * the address would be a write the editor rejects.
+ */
+declare function bindProps(id: string | undefined, entries: readonly {
+    prop: string;
+    kind: BindingKind;
+    attr: string;
+    present: boolean;
+}[], ctx: BindingCtx): Record<string, string>;
+
+export { type BindingCtx, addressFor, bind, bindProps };

package/dist/bindings.js

@@ -0,0 +1,26 @@
+// src/bindings.ts
+import { formatPropsAttribute } from "@bettercms-ai/types";
+function addressFor(id, prop, ctx) {
+  if (!id) return null;
+  const key = `${id}__${prop}`;
+  if (ctx.fieldAddresses) return ctx.fieldAddresses.get(key) ?? null;
+  return key;
+}
+function bind(id, prop, kind, ctx) {
+  const address = addressFor(id, prop, ctx);
+  return address ? { "data-bcms-field": address, "data-bcms-kind": kind } : {};
+}
+function bindProps(id, entries, ctx) {
+  const resolved = entries.flatMap(({ prop, kind, attr, present }) => {
+    if (!present) return [];
+    const address = addressFor(id, prop, ctx);
+    return address ? [{ address, kind, attr }] : [];
+  });
+  return resolved.length ? { "data-bcms-props": formatPropsAttribute(resolved) } : {};
+}
+export {
+  addressFor,
+  bind,
+  bindProps
+};
+//# sourceMappingURL=bindings.js.map

package/dist/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bindings.ts"],"sourcesContent":["/**\n * Visual Editor addresses for the Astro renderer.\n *\n * Identical contract to `@bettercms-ai/next`'s `bindings.ts`, and the SAME reason for existing:\n * inside a component instance the definition's block ids address nothing, because they are\n * shared by every instance of it. Stamping them produces an orphan on one placement and a\n * duplicate that drops BOTH on two.\n *\n * Kept as a `.ts` module rather than inlined in the `.astro` frontmatter so the logic is\n * testable without an Astro compiler, and so the two SDKs cannot drift from each other by\n * having one file edited and not the other.\n */\nimport type { BindingKind } from \"@bettercms-ai/types\";\nimport { formatPropsAttribute } from \"@bettercms-ai/types\";\n\nexport interface BindingCtx {\n  /** Present only inside a component instance, where it is AUTHORITATIVE. */\n  fieldAddresses?: Map<string, string>;\n}\n\n/** The address a write lands on, or null when none exists. */\nexport function addressFor(id: string | undefined, prop: string, ctx: BindingCtx): string | null {\n  if (!id) return null;\n  const key = `${id}__${prop}`;\n  if (ctx.fieldAddresses) return ctx.fieldAddresses.get(key) ?? null;\n  return key;\n}\n\n/**\n * Attributes for a value rendered as this element's own content. Astro omits `undefined`\n * attributes, so an empty object spreads to nothing.\n */\nexport function bind(\n  id: string | undefined,\n  prop: string,\n  kind: BindingKind,\n  ctx: BindingCtx,\n): Record<string, string> {\n  const address = addressFor(id, prop, ctx);\n  return address ? { \"data-bcms-field\": address, \"data-bcms-kind\": kind } : {};\n}\n\n/**\n * Attributes for values that live in an ATTRIBUTE of this element. `data-bcms-field` addresses\n * one element and an element cannot hold two, so these ride `data-bcms-props`:\n * `<address>|<kind>|<domAttribute>`, semicolon separated.\n *\n * An entry whose value is absent is dropped — `setFieldPath` refuses to create a final key, so\n * the address would be a write the editor rejects.\n */\nexport function bindProps(\n  id: string | undefined,\n  entries: readonly { prop: string; kind: BindingKind; attr: string; present: boolean }[],\n  ctx: BindingCtx,\n): Record<string, string> {\n  const resolved = entries.flatMap(({ prop, kind, attr, present }) => {\n    if (!present) return [];\n    const address = addressFor(id, prop, ctx);\n    return address ? [{ address, kind, attr }] : [];\n  });\n  return resolved.length ? { \"data-bcms-props\": formatPropsAttribute(resolved) } : {};\n}\n"],"mappings":";AAaA,SAAS,4BAA4B;AAQ9B,SAAS,WAAW,IAAwB,MAAc,KAAgC;AAC/F,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,MAAM,GAAG,EAAE,KAAK,IAAI;AAC1B,MAAI,IAAI,eAAgB,QAAO,IAAI,eAAe,IAAI,GAAG,KAAK;AAC9D,SAAO;AACT;AAMO,SAAS,KACd,IACA,MACA,MACA,KACwB;AACxB,QAAM,UAAU,WAAW,IAAI,MAAM,GAAG;AACxC,SAAO,UAAU,EAAE,mBAAmB,SAAS,kBAAkB,KAAK,IAAI,CAAC;AAC7E;AAUO,SAAS,UACd,IACA,SACA,KACwB;AACxB,QAAM,WAAW,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,MAAM,QAAQ,MAAM;AAClE,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,UAAU,WAAW,IAAI,MAAM,GAAG;AACxC,WAAO,UAAU,CAAC,EAAE,SAAS,MAAM,KAAK,CAAC,IAAI,CAAC;AAAA,EAChD,CAAC;AACD,SAAO,SAAS,SAAS,EAAE,mBAAmB,qBAAqB,QAAQ,EAAE,IAAI,CAAC;AACpF;","names":[]}

package/dist/index.js

@@ -51,7 +51,7 @@ function configModule(cfg) {
 export default config;
 `;
 }
-function clientModule(cfg) {
+function clientModule(cfg, buildCache) {
   return [
     `import { createRuntime } from "@bettercms-ai/astro/runtime";`,
     `const runtime = createRuntime({`,
@@ -59,6 +59,7 @@ function clientModule(cfg) {
     `  workspace: ${JSON.stringify(cfg.workspace)},`,
     `  projectId: ${JSON.stringify(cfg.projectId)},`,
     `  apiKey: import.meta.env.BCMS_API_KEY,`,
+    `  buildCache: ${JSON.stringify(buildCache)},`,
     `});`,
     `export const client = runtime.client;`,
     `export const getClient = runtime.getClient;`,
@@ -69,7 +70,7 @@ function clientModule(cfg) {
     `export default runtime;`
   ].join("\n");
 }
-function virtualPlugin(cfg) {
+function virtualPlugin(cfg, buildCache) {
   return {
     name: "@bettercms-ai/astro:virtual",
     resolveId(id) {
@@ -78,18 +79,21 @@ function virtualPlugin(cfg) {
     },
     load(id) {
       if (id === RESOLVED(CONFIG_ID)) return configModule(cfg);
-      if (id === RESOLVED(CLIENT_ID)) return clientModule(cfg);
+      if (id === RESOLVED(CLIENT_ID)) return clientModule(cfg, buildCache());
       return null;
     }
   };
 }
 function bettercms(options = {}) {
+  const buildCache = { on: false, command: "", resolved: false };
+  let decide;
   return {
     name: "@bettercms-ai/astro",
     hooks: {
-      "astro:config:setup": ({ updateConfig, addMiddleware, injectRoute, logger }) => {
+      "astro:config:setup": ({ command, updateConfig, addMiddleware, injectRoute, logger }) => {
         const cfg = resolveConfig(options);
-        updateConfig({ vite: { plugins: [virtualPlugin(cfg)] } });
+        buildCache.command = command;
+        updateConfig({ vite: { plugins: [virtualPlugin(cfg, () => buildCache.on)] } });
         if (cfg.draft) {
           addMiddleware({ entrypoint: "@bettercms-ai/astro/middleware", order: "pre" });
           injectRoute({
@@ -104,6 +108,59 @@ function bettercms(options = {}) {
           });
           logger.info("draft mode enabled \u2014 /api/bcms/draft/{enable,disable} injected");
         }
+      },
+      /**
+       * Decide whether the build-time request cache is safe, on the FINAL config.
+       *
+       * A fully static build renders every route from one published dataset, so identical
+       * delivery GETs can collapse to a single round-trip. Without that a large site
+       * re-fetched its nav/settings/collections once PER ROUTE and exhausted the delivery
+       * rate limit mid-build — a 429 the build could not avoid.
+       *
+       * `command === "build"` is NOT sufficient to detect that, and getting this wrong is
+       * far worse than the problem it solves: Astro also reports `command === "build"` when
+       * it compiles `output: "server"`, whose bundle then runs as a LONG-LIVED process. A
+       * module-lifetime cache there would pin the first response for every URL and serve it
+       * to unrelated visitors until the process restarted — permanent stale content on a
+       * production site.
+       *
+       * `buildOutput` (Astro 5) is Astro's OWN answer to "will this emit a server?", so it
+       * is what we trust when present. Inferring it from `config.adapter` is not equivalent:
+       * `setAdapter()` is documented as being called from inside `astro:config:done`, so an
+       * adapter integration whose hook runs after this one would still read as absent here.
+       *
+       * On Astro 4 there is no `buildOutput`, and there `output: "static"` genuinely
+       * prerenders everything — on-demand rendering required `"server"` or `"hybrid"`, both
+       * of which fail this check. The adapter test stays as a second line of defence.
+       */
+      "astro:config:done": ({ config, logger, ...rest }) => {
+        const buildOutput = rest.buildOutput;
+        const staticOutput = buildOutput !== void 0 ? buildOutput === "static" : config.output === "static" && !config.adapter;
+        buildCache.on = buildCache.command === "build" && staticOutput;
+        decide = () => {
+          const late = rest.buildOutput;
+          const stillStatic = late !== void 0 ? late === "static" : config.output === "static" && !config.adapter;
+          buildCache.on = buildCache.command === "build" && stillStatic;
+          buildCache.resolved = true;
+          if (buildCache.on) {
+            logger.info("static build \u2014 identical content reads will be fetched once");
+          }
+        };
+      },
+      /**
+       * Last word on the cache, and the reason this is not decided in `astro:config:done`
+       * alone: Astro runs every integration's `config:done` in order, and `setAdapter()` is
+       * called FROM that hook. An adapter registered by an integration ordered after this one
+       * would flip the project to on-demand rendering *after* we had already recorded
+       * "static" — and the stale `true` would ship a module-lifetime cache into a
+       * long-lived server. `astro:build:start` runs after all of them and before Vite loads
+       * the virtual module, so re-reading here is the value that is actually true.
+       *
+       * It never fires for `dev` or `preview`, which is exactly right: both must stay
+       * uncached, and `buildCache.on` is only ever set to true under `command === "build"`.
+       */
+      "astro:build:start": () => {
+        decide?.();
       }
     }
   };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts","../src/integration.ts","../src/runtime.ts","../src/index.ts"],"sourcesContent":["/**\n * Resolved configuration shared by the integration, runtime, middleware and\n * draft routes. Public values are safe to ship to the browser; the API key and\n * draft secret are read from server env at runtime and never live here.\n *\n * Resolution order is options → `PUBLIC_BCMS_*` env → the build snapshot. Config-time\n * only: this module is reached exclusively through `dist/index.js`, which only an\n * `astro.config.*` imports, so the `node:fs` read below never enters a client bundle.\n * Browser code gets the `bettercms:config` virtual module instead.\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\n\nconst DEFAULT_MEDIA_URL = \"https://media.bettercms.ai\";\nconst SNAPSHOT_FILE = \"bcms-content.json\";\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nexport interface BetterCMSAstroOptions {\n  /** Backend base, e.g. `https://api.bettercms.ai`. Falls back to `PUBLIC_BCMS_API_URL`. */\n  apiUrl?: string;\n  /** Workspace slug. Falls back to `PUBLIC_BCMS_WORKSPACE`. */\n  workspace?: string;\n  /** Optional project scope for forms. Falls back to `PUBLIC_BCMS_PROJECT_ID`. */\n  projectId?: string;\n  /** Media host for the image-url builder. Defaults to the prod media host. */\n  mediaUrl?: string;\n  /** Dashboard base for visual-editing deep links. */\n  studioUrl?: string;\n  /** Enable the draft-mode middleware + injected draft routes. Default true. */\n  draft?: boolean;\n}\n\n/** Browser-safe config — exposed via the `bettercms:config` virtual module. */\nexport interface PublicConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  mediaUrl: string;\n  studioUrl?: string;\n  draftCookie: string;\n}\n\nexport interface ResolvedConfig extends PublicConfig {\n  draft: boolean;\n}\n\n/** The fields of the deploy Action's content snapshot that identify the site. */\ninterface Snapshot {\n  apiUrl?: string;\n  workspace?: string;\n  projectId?: string;\n}\n\n/**\n * Read `bcms-content.json` — the snapshot the deploy Action writes next to the build,\n * BEFORE `astro build` runs — which already carries the workspace this site belongs to.\n *\n * This is what lets `bettercms()` work with no arguments and no env at all. Not reading it\n * was the whole bug: a hosted build had the answer sitting in its own working directory and\n * threw anyway, and every starter template had to reimplement this by hand to survive.\n *\n * Lazy: only consulted when options and env both miss, so the configured path does no I/O.\n * Absent/corrupt file ⇒ `{}`, and the caller raises the actionable error below.\n */\nlet snapshotCache: Snapshot | undefined;\nfunction snapshot(cwd: string): Snapshot {\n  if (snapshotCache === undefined) {\n    try {\n      snapshotCache = JSON.parse(readFileSync(resolve(cwd, SNAPSHOT_FILE), \"utf8\")) as Snapshot;\n    } catch {\n      snapshotCache = {};\n    }\n  }\n  return snapshotCache;\n}\n\n/** Test seam — the snapshot is memoised for the life of the process. */\nexport function resetSnapshotCache(): void {\n  snapshotCache = undefined;\n}\n\nconst required = (name: string, envVar: string, extra: string) =>\n  new Error(\n    `[@bettercms-ai/astro] \\`${name}\\` is required. Pass \\`bettercms({ ${name} })\\`, set ` +\n      `${envVar}, or ${extra}\\n` +\n      `On BetterCMS hosting these are injected automatically — if this failed in a hosted ` +\n      `build, the repository is running an outdated deploy workflow: publish once, or save ` +\n      `Hosting settings, to refresh it.`,\n  );\n\n/**\n * Merge integration options with `PUBLIC_BCMS_*` env and the build snapshot, validating the\n * essentials. Precedence: explicit options → env → snapshot.\n */\nexport function resolveConfig(\n  options: BetterCMSAstroOptions,\n  env: Record<string, string | undefined> = process.env,\n  cwd: string = process.cwd(),\n): ResolvedConfig {\n  const snap = (): Snapshot => snapshot(cwd);\n\n  const apiUrl = (options.apiUrl ?? env.PUBLIC_BCMS_API_URL ?? snap().apiUrl ?? \"\").replace(/\\/+$/, \"\");\n  const workspace = options.workspace ?? env.PUBLIC_BCMS_WORKSPACE ?? snap().workspace ?? \"\";\n  // No default origin on purpose: guessing one produces a site that builds cleanly against\n  // the wrong backend, which is far harder to notice than this error.\n  if (!apiUrl) throw required(\"apiUrl\", \"PUBLIC_BCMS_API_URL\", `run the content fetch so ${SNAPSHOT_FILE} is present.`);\n  if (!workspace) {\n    throw required(\"workspace\", \"PUBLIC_BCMS_WORKSPACE\", `run the content fetch so ${SNAPSHOT_FILE} is present.`);\n  }\n\n  return {\n    apiUrl,\n    workspace,\n    projectId: options.projectId ?? env.PUBLIC_BCMS_PROJECT_ID ?? snap().projectId,\n    mediaUrl: (options.mediaUrl ?? env.PUBLIC_BCMS_MEDIA_URL ?? DEFAULT_MEDIA_URL).replace(/\\/+$/, \"\"),\n    studioUrl: options.studioUrl ?? env.PUBLIC_BCMS_STUDIO_URL,\n    draftCookie: DRAFT_COOKIE,\n    draft: options.draft ?? true,\n  };\n}\n\nexport function toPublicConfig(c: ResolvedConfig): PublicConfig {\n  const { draft: _draft, ...pub } = c;\n  return pub;\n}\n","/**\n * `bettercms()` — the Astro integration.\n *\n * - Registers two virtual modules:\n *     `bettercms:client`  → server runtime (client + typed loaders) — has the key.\n *     `bettercms:config`  → browser-safe public config — no secrets.\n * - Adds the draft-mode middleware and injects the draft enable/disable routes.\n */\nimport type { AstroIntegration } from \"astro\";\nimport {\n  resolveConfig,\n  toPublicConfig,\n  type BetterCMSAstroOptions,\n  type ResolvedConfig,\n} from \"./config.js\";\n\nconst CLIENT_ID = \"bettercms:client\";\nconst CONFIG_ID = \"bettercms:config\";\nconst RESOLVED = (id: string) => `\\0${id}`;\n\nfunction configModule(cfg: ResolvedConfig): string {\n  return `export const config = ${JSON.stringify(toPublicConfig(cfg))};\\nexport default config;\\n`;\n}\n\nfunction clientModule(cfg: ResolvedConfig): string {\n  // The key is read from server env at runtime so it never lands in a client\n  // bundle. Public values are inlined.\n  return [\n    `import { createRuntime } from \"@bettercms-ai/astro/runtime\";`,\n    `const runtime = createRuntime({`,\n    `  apiUrl: ${JSON.stringify(cfg.apiUrl)},`,\n    `  workspace: ${JSON.stringify(cfg.workspace)},`,\n    `  projectId: ${JSON.stringify(cfg.projectId)},`,\n    `  apiKey: import.meta.env.BCMS_API_KEY,`,\n    `});`,\n    `export const client = runtime.client;`,\n    `export const getClient = runtime.getClient;`,\n    `export const loadEntry = runtime.loadEntry;`,\n    `export const loadEntries = runtime.loadEntries;`,\n    `export const loadPage = runtime.loadPage;`,\n    `export const loadForms = runtime.loadForms;`,\n    `export default runtime;`,\n  ].join(\"\\n\");\n}\n\nfunction virtualPlugin(cfg: ResolvedConfig) {\n  return {\n    name: \"@bettercms-ai/astro:virtual\",\n    resolveId(id: string) {\n      if (id === CLIENT_ID || id === CONFIG_ID) return RESOLVED(id);\n      return null;\n    },\n    load(id: string) {\n      if (id === RESOLVED(CONFIG_ID)) return configModule(cfg);\n      if (id === RESOLVED(CLIENT_ID)) return clientModule(cfg);\n      return null;\n    },\n  };\n}\n\nexport function bettercms(options: BetterCMSAstroOptions = {}): AstroIntegration {\n  return {\n    name: \"@bettercms-ai/astro\",\n    hooks: {\n      \"astro:config:setup\": ({ updateConfig, addMiddleware, injectRoute, logger }) => {\n        const cfg = resolveConfig(options);\n\n        updateConfig({ vite: { plugins: [virtualPlugin(cfg)] } });\n\n        if (cfg.draft) {\n          addMiddleware({ entrypoint: \"@bettercms-ai/astro/middleware\", order: \"pre\" });\n          injectRoute({\n            pattern: \"/api/bcms/draft/enable\",\n            entrypoint: \"@bettercms-ai/astro/draft-enable\",\n            prerender: false,\n          });\n          injectRoute({\n            pattern: \"/api/bcms/draft/disable\",\n            entrypoint: \"@bettercms-ai/astro/draft-disable\",\n            prerender: false,\n          });\n          logger.info(\"draft mode enabled — /api/bcms/draft/{enable,disable} injected\");\n        }\n      },\n    },\n  };\n}\n\nexport default bettercms;\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const published = createClient({ ...config, perspective: \"published\" });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      return createClient({ ...config, perspective: \"drafts\", previewToken: bcms.token });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n","/**\n * @bettercms-ai/astro — the BetterCMS adapter for Astro.\n *\n *   import { defineConfig } from \"astro/config\";\n *   import bettercms from \"@bettercms-ai/astro\";\n *\n *   export default defineConfig({\n *     integrations: [bettercms({ apiUrl, workspace })],\n *     output: \"server\",\n *   });\n *\n * Then in any page: `import { loadPage } from \"bettercms:client\"`.\n */\nexport { bettercms, default } from \"./integration.js\";\nexport {\n  resolveConfig,\n  DRAFT_COOKIE,\n  type BetterCMSAstroOptions,\n  type PublicConfig,\n  type ResolvedConfig,\n} from \"./config.js\";\nexport { liveSrc } from \"./runtime.js\";\nexport type { BcmsLocals, BetterCMSRuntime, RuntimeConfig } from \"./runtime.js\";\n\n// Image URL builder, re-exported for `<BcmsImage>` and host code.\nexport { default as imageUrlBuilder, imageUrl } from \"@bettercms-ai/image-url\";\nexport type {\n  ImageUrlBuilder,\n  ImageSource,\n  ImageFormat,\n  ImageFit,\n} from \"@bettercms-ai/image-url\";\n\n// Delivery read types, re-exported for typing page/entry data.\nexport type {\n  Perspective,\n  DeliveryEntry,\n  DeliveryPage,\n  DeliveryList,\n  PageMetaJson,\n  SiteSeoDefaults,\n  ContentBlock,\n  DeliveredLayout,\n} from \"@bettercms-ai/types\";\nexport type { DeliveryForm, DeliveryFormField } from \"@bettercms-ai/sdk\";\n\n// SEO (FLO-302): page-over-site meta resolver. In a page's frontmatter,\n// `const seo = resolveSeo(page, siteDefaults)`, then map `seo.*` into `<head>`.\nexport { resolveSeo } from \"@bettercms-ai/sdk\";\nexport type { SeoInput, ResolvedSeo } from \"@bettercms-ai/sdk\";\n"],"mappings":";AAWA,SAAS,oBAAoB;AAC7B,SAAS,eAAe;AAExB,IAAM,oBAAoB;AAC1B,IAAM,gBAAgB;AACf,IAAM,eAAe;AAiD5B,IAAI;AACJ,SAAS,SAAS,KAAuB;AACvC,MAAI,kBAAkB,QAAW;AAC/B,QAAI;AACF,sBAAgB,KAAK,MAAM,aAAa,QAAQ,KAAK,aAAa,GAAG,MAAM,CAAC;AAAA,IAC9E,QAAQ;AACN,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAM,WAAW,CAAC,MAAc,QAAgB,UAC9C,IAAI;AAAA,EACF,2BAA2B,IAAI,sCAAsC,IAAI,cACpE,MAAM,QAAQ,KAAK;AAAA;AAI1B;AAMK,SAAS,cACd,SACA,MAA0C,QAAQ,KAClD,MAAc,QAAQ,IAAI,GACV;AAChB,QAAM,OAAO,MAAgB,SAAS,GAAG;AAEzC,QAAM,UAAU,QAAQ,UAAU,IAAI,uBAAuB,KAAK,EAAE,UAAU,IAAI,QAAQ,QAAQ,EAAE;AACpG,QAAM,YAAY,QAAQ,aAAa,IAAI,yBAAyB,KAAK,EAAE,aAAa;AAGxF,MAAI,CAAC,OAAQ,OAAM,SAAS,UAAU,uBAAuB,4BAA4B,aAAa,cAAc;AACpH,MAAI,CAAC,WAAW;AACd,UAAM,SAAS,aAAa,yBAAyB,4BAA4B,aAAa,cAAc;AAAA,EAC9G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,IAAI,0BAA0B,KAAK,EAAE;AAAA,IACrE,WAAW,QAAQ,YAAY,IAAI,yBAAyB,mBAAmB,QAAQ,QAAQ,EAAE;AAAA,IACjG,WAAW,QAAQ,aAAa,IAAI;AAAA,IACpC,aAAa;AAAA,IACb,OAAO,QAAQ,SAAS;AAAA,EAC1B;AACF;AAEO,SAAS,eAAe,GAAiC;AAC9D,QAAM,EAAE,OAAO,QAAQ,GAAG,IAAI,IAAI;AAClC,SAAO;AACT;;;AC7GA,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,WAAW,CAAC,OAAe,KAAK,EAAE;AAExC,SAAS,aAAa,KAA6B;AACjD,SAAO,yBAAyB,KAAK,UAAU,eAAe,GAAG,CAAC,CAAC;AAAA;AAAA;AACrE;AAEA,SAAS,aAAa,KAA6B;AAGjD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,aAAa,KAAK,UAAU,IAAI,MAAM,CAAC;AAAA,IACvC,gBAAgB,KAAK,UAAU,IAAI,SAAS,CAAC;AAAA,IAC7C,gBAAgB,KAAK,UAAU,IAAI,SAAS,CAAC;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,cAAc,KAAqB;AAC1C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,IAAY;AACpB,UAAI,OAAO,aAAa,OAAO,UAAW,QAAO,SAAS,EAAE;AAC5D,aAAO;AAAA,IACT;AAAA,IACA,KAAK,IAAY;AACf,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO,aAAa,GAAG;AACvD,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO,aAAa,GAAG;AACvD,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,UAAU,UAAiC,CAAC,GAAqB;AAC/E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,sBAAsB,CAAC,EAAE,cAAc,eAAe,aAAa,OAAO,MAAM;AAC9E,cAAM,MAAM,cAAc,OAAO;AAEjC,qBAAa,EAAE,MAAM,EAAE,SAAS,CAAC,cAAc,GAAG,CAAC,EAAE,EAAE,CAAC;AAExD,YAAI,IAAI,OAAO;AACb,wBAAc,EAAE,YAAY,kCAAkC,OAAO,MAAM,CAAC;AAC5E,sBAAY;AAAA,YACV,SAAS;AAAA,YACT,YAAY;AAAA,YACZ,WAAW;AAAA,UACb,CAAC;AACD,sBAAY;AAAA,YACV,SAAS;AAAA,YACT,YAAY;AAAA,YACZ,WAAW;AAAA,UACb,CAAC;AACD,iBAAO,KAAK,qEAAgE;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,sBAAQ;;;AChFf,SAAS,oBAA8C;AA2EhD,SAAS,QAAQ,MAMb;AACT,QAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ,EAAE;AAC3C,QAAM,IAAI,IAAI,gBAAgB,EAAE,KAAK,KAAK,OAAO,CAAC;AAClD,MAAI,KAAK,UAAU,OAAW,GAAE,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC/D,MAAI,KAAK,OAAQ,GAAE,IAAI,UAAU,GAAG;AACpC,SAAO,GAAG,IAAI,oBAAoB,KAAK,SAAS,SAAS,CAAC;AAC5D;AAIA,IAAM,MAAM,IAAI,YAAY;;;AC1E5B,SAAoB,WAAXA,UAA4B,gBAAgB;AAuBrD,SAAS,kBAAkB;","names":["default"]}
+{"version":3,"sources":["../src/config.ts","../src/integration.ts","../src/runtime.ts","../src/index.ts"],"sourcesContent":["/**\n * Resolved configuration shared by the integration, runtime, middleware and\n * draft routes. Public values are safe to ship to the browser; the API key and\n * draft secret are read from server env at runtime and never live here.\n *\n * Resolution order is options → `PUBLIC_BCMS_*` env → the build snapshot. Config-time\n * only: this module is reached exclusively through `dist/index.js`, which only an\n * `astro.config.*` imports, so the `node:fs` read below never enters a client bundle.\n * Browser code gets the `bettercms:config` virtual module instead.\n */\n\nimport { readFileSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\n\nconst DEFAULT_MEDIA_URL = \"https://media.bettercms.ai\";\nconst SNAPSHOT_FILE = \"bcms-content.json\";\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nexport interface BetterCMSAstroOptions {\n  /** Backend base, e.g. `https://api.bettercms.ai`. Falls back to `PUBLIC_BCMS_API_URL`. */\n  apiUrl?: string;\n  /** Workspace slug. Falls back to `PUBLIC_BCMS_WORKSPACE`. */\n  workspace?: string;\n  /** Optional project scope for forms. Falls back to `PUBLIC_BCMS_PROJECT_ID`. */\n  projectId?: string;\n  /** Media host for the image-url builder. Defaults to the prod media host. */\n  mediaUrl?: string;\n  /** Dashboard base for visual-editing deep links. */\n  studioUrl?: string;\n  /** Enable the draft-mode middleware + injected draft routes. Default true. */\n  draft?: boolean;\n}\n\n/** Browser-safe config — exposed via the `bettercms:config` virtual module. */\nexport interface PublicConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  mediaUrl: string;\n  studioUrl?: string;\n  draftCookie: string;\n}\n\nexport interface ResolvedConfig extends PublicConfig {\n  draft: boolean;\n}\n\n/** The fields of the deploy Action's content snapshot that identify the site. */\ninterface Snapshot {\n  apiUrl?: string;\n  workspace?: string;\n  projectId?: string;\n}\n\n/**\n * Read `bcms-content.json` — the snapshot the deploy Action writes next to the build,\n * BEFORE `astro build` runs — which already carries the workspace this site belongs to.\n *\n * This is what lets `bettercms()` work with no arguments and no env at all. Not reading it\n * was the whole bug: a hosted build had the answer sitting in its own working directory and\n * threw anyway, and every starter template had to reimplement this by hand to survive.\n *\n * Lazy: only consulted when options and env both miss, so the configured path does no I/O.\n * Absent/corrupt file ⇒ `{}`, and the caller raises the actionable error below.\n */\nlet snapshotCache: Snapshot | undefined;\nfunction snapshot(cwd: string): Snapshot {\n  if (snapshotCache === undefined) {\n    try {\n      snapshotCache = JSON.parse(readFileSync(resolve(cwd, SNAPSHOT_FILE), \"utf8\")) as Snapshot;\n    } catch {\n      snapshotCache = {};\n    }\n  }\n  return snapshotCache;\n}\n\n/** Test seam — the snapshot is memoised for the life of the process. */\nexport function resetSnapshotCache(): void {\n  snapshotCache = undefined;\n}\n\nconst required = (name: string, envVar: string, extra: string) =>\n  new Error(\n    `[@bettercms-ai/astro] \\`${name}\\` is required. Pass \\`bettercms({ ${name} })\\`, set ` +\n      `${envVar}, or ${extra}\\n` +\n      `On BetterCMS hosting these are injected automatically — if this failed in a hosted ` +\n      `build, the repository is running an outdated deploy workflow: publish once, or save ` +\n      `Hosting settings, to refresh it.`,\n  );\n\n/**\n * Merge integration options with `PUBLIC_BCMS_*` env and the build snapshot, validating the\n * essentials. Precedence: explicit options → env → snapshot.\n */\nexport function resolveConfig(\n  options: BetterCMSAstroOptions,\n  env: Record<string, string | undefined> = process.env,\n  cwd: string = process.cwd(),\n): ResolvedConfig {\n  const snap = (): Snapshot => snapshot(cwd);\n\n  const apiUrl = (options.apiUrl ?? env.PUBLIC_BCMS_API_URL ?? snap().apiUrl ?? \"\").replace(/\\/+$/, \"\");\n  const workspace = options.workspace ?? env.PUBLIC_BCMS_WORKSPACE ?? snap().workspace ?? \"\";\n  // No default origin on purpose: guessing one produces a site that builds cleanly against\n  // the wrong backend, which is far harder to notice than this error.\n  if (!apiUrl) throw required(\"apiUrl\", \"PUBLIC_BCMS_API_URL\", `run the content fetch so ${SNAPSHOT_FILE} is present.`);\n  if (!workspace) {\n    throw required(\"workspace\", \"PUBLIC_BCMS_WORKSPACE\", `run the content fetch so ${SNAPSHOT_FILE} is present.`);\n  }\n\n  return {\n    apiUrl,\n    workspace,\n    projectId: options.projectId ?? env.PUBLIC_BCMS_PROJECT_ID ?? snap().projectId,\n    mediaUrl: (options.mediaUrl ?? env.PUBLIC_BCMS_MEDIA_URL ?? DEFAULT_MEDIA_URL).replace(/\\/+$/, \"\"),\n    studioUrl: options.studioUrl ?? env.PUBLIC_BCMS_STUDIO_URL,\n    draftCookie: DRAFT_COOKIE,\n    draft: options.draft ?? true,\n  };\n}\n\nexport function toPublicConfig(c: ResolvedConfig): PublicConfig {\n  const { draft: _draft, ...pub } = c;\n  return pub;\n}\n","/**\n * `bettercms()` — the Astro integration.\n *\n * - Registers two virtual modules:\n *     `bettercms:client`  → server runtime (client + typed loaders) — has the key.\n *     `bettercms:config`  → browser-safe public config — no secrets.\n * - Adds the draft-mode middleware and injects the draft enable/disable routes.\n */\nimport type { AstroIntegration } from \"astro\";\nimport {\n  resolveConfig,\n  toPublicConfig,\n  type BetterCMSAstroOptions,\n  type ResolvedConfig,\n} from \"./config.js\";\n\nconst CLIENT_ID = \"bettercms:client\";\nconst CONFIG_ID = \"bettercms:config\";\nconst RESOLVED = (id: string) => `\\0${id}`;\n\nfunction configModule(cfg: ResolvedConfig): string {\n  return `export const config = ${JSON.stringify(toPublicConfig(cfg))};\\nexport default config;\\n`;\n}\n\nfunction clientModule(cfg: ResolvedConfig, buildCache: boolean): string {\n  // The key is read from server env at runtime so it never lands in a client\n  // bundle. Public values are inlined.\n  return [\n    `import { createRuntime } from \"@bettercms-ai/astro/runtime\";`,\n    `const runtime = createRuntime({`,\n    `  apiUrl: ${JSON.stringify(cfg.apiUrl)},`,\n    `  workspace: ${JSON.stringify(cfg.workspace)},`,\n    `  projectId: ${JSON.stringify(cfg.projectId)},`,\n    `  apiKey: import.meta.env.BCMS_API_KEY,`,\n    `  buildCache: ${JSON.stringify(buildCache)},`,\n    `});`,\n    `export const client = runtime.client;`,\n    `export const getClient = runtime.getClient;`,\n    `export const loadEntry = runtime.loadEntry;`,\n    `export const loadEntries = runtime.loadEntries;`,\n    `export const loadPage = runtime.loadPage;`,\n    `export const loadForms = runtime.loadForms;`,\n    `export default runtime;`,\n  ].join(\"\\n\");\n}\n\nfunction virtualPlugin(cfg: ResolvedConfig, buildCache: () => boolean) {\n  return {\n    name: \"@bettercms-ai/astro:virtual\",\n    resolveId(id: string) {\n      if (id === CLIENT_ID || id === CONFIG_ID) return RESOLVED(id);\n      return null;\n    },\n    load(id: string) {\n      if (id === RESOLVED(CONFIG_ID)) return configModule(cfg);\n      if (id === RESOLVED(CLIENT_ID)) return clientModule(cfg, buildCache());\n      return null;\n    },\n  };\n}\n\nexport function bettercms(options: BetterCMSAstroOptions = {}): AstroIntegration {\n  /**\n   * Whether identical delivery GETs may be collapsed for the life of the process.\n   *\n   * Read lazily by the virtual module (see `astro:config:done` below) because only the\n   * FINAL config settles `output` and `adapter` — another integration can add an adapter\n   * after `astro:config:setup` runs.\n   */\n  const buildCache = { on: false, command: \"\", resolved: false };\n  /** Set in `astro:config:done`, re-run in `astro:build:start` — see both hooks below. */\n  let decide: (() => void) | undefined;\n\n  return {\n    name: \"@bettercms-ai/astro\",\n    hooks: {\n      \"astro:config:setup\": ({ command, updateConfig, addMiddleware, injectRoute, logger }) => {\n        const cfg = resolveConfig(options);\n        buildCache.command = command;\n\n        updateConfig({ vite: { plugins: [virtualPlugin(cfg, () => buildCache.on)] } });\n\n        if (cfg.draft) {\n          addMiddleware({ entrypoint: \"@bettercms-ai/astro/middleware\", order: \"pre\" });\n          injectRoute({\n            pattern: \"/api/bcms/draft/enable\",\n            entrypoint: \"@bettercms-ai/astro/draft-enable\",\n            prerender: false,\n          });\n          injectRoute({\n            pattern: \"/api/bcms/draft/disable\",\n            entrypoint: \"@bettercms-ai/astro/draft-disable\",\n            prerender: false,\n          });\n          logger.info(\"draft mode enabled — /api/bcms/draft/{enable,disable} injected\");\n        }\n      },\n\n      /**\n       * Decide whether the build-time request cache is safe, on the FINAL config.\n       *\n       * A fully static build renders every route from one published dataset, so identical\n       * delivery GETs can collapse to a single round-trip. Without that a large site\n       * re-fetched its nav/settings/collections once PER ROUTE and exhausted the delivery\n       * rate limit mid-build — a 429 the build could not avoid.\n       *\n       * `command === \"build\"` is NOT sufficient to detect that, and getting this wrong is\n       * far worse than the problem it solves: Astro also reports `command === \"build\"` when\n       * it compiles `output: \"server\"`, whose bundle then runs as a LONG-LIVED process. A\n       * module-lifetime cache there would pin the first response for every URL and serve it\n       * to unrelated visitors until the process restarted — permanent stale content on a\n       * production site.\n       *\n       * `buildOutput` (Astro 5) is Astro's OWN answer to \"will this emit a server?\", so it\n       * is what we trust when present. Inferring it from `config.adapter` is not equivalent:\n       * `setAdapter()` is documented as being called from inside `astro:config:done`, so an\n       * adapter integration whose hook runs after this one would still read as absent here.\n       *\n       * On Astro 4 there is no `buildOutput`, and there `output: \"static\"` genuinely\n       * prerenders everything — on-demand rendering required `\"server\"` or `\"hybrid\"`, both\n       * of which fail this check. The adapter test stays as a second line of defence.\n       */\n      \"astro:config:done\": ({ config, logger, ...rest }) => {\n        // Astro >= 5 only; undefined on 4, hence the fallback rather than a bare read.\n        const buildOutput = (rest as { buildOutput?: \"static\" | \"server\" }).buildOutput;\n        const staticOutput =\n          buildOutput !== undefined\n            ? buildOutput === \"static\"\n            : config.output === \"static\" && !config.adapter;\n\n        buildCache.on = buildCache.command === \"build\" && staticOutput;\n        // Re-checked in astro:build:start below; only announce once it is final.\n        decide = () => {\n          const late = (rest as { buildOutput?: \"static\" | \"server\" }).buildOutput;\n          const stillStatic =\n            late !== undefined ? late === \"static\" : config.output === \"static\" && !config.adapter;\n          buildCache.on = buildCache.command === \"build\" && stillStatic;\n          buildCache.resolved = true;\n          if (buildCache.on) {\n            logger.info(\"static build — identical content reads will be fetched once\");\n          }\n        };\n      },\n\n      /**\n       * Last word on the cache, and the reason this is not decided in `astro:config:done`\n       * alone: Astro runs every integration's `config:done` in order, and `setAdapter()` is\n       * called FROM that hook. An adapter registered by an integration ordered after this one\n       * would flip the project to on-demand rendering *after* we had already recorded\n       * \"static\" — and the stale `true` would ship a module-lifetime cache into a\n       * long-lived server. `astro:build:start` runs after all of them and before Vite loads\n       * the virtual module, so re-reading here is the value that is actually true.\n       *\n       * It never fires for `dev` or `preview`, which is exactly right: both must stay\n       * uncached, and `buildCache.on` is only ever set to true under `command === \"build\"`.\n       */\n      \"astro:build:start\": () => {\n        decide?.();\n      },\n    },\n  };\n}\n\nexport default bettercms;\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n  /**\n   * Collapse identical delivery GETs for the life of the process. Set by the integration\n   * when Astro's `command === \"build\"` — a static build renders every route from one\n   * published dataset, so a repeat read cannot legitimately differ.\n   *\n   * Never set for `dev` or SSR, where each request must see current content.\n   */\n  buildCache?: boolean;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const { buildCache, ...clientConfig } = config;\n  // One client for the whole build, so the cache below is shared across every route\n  // rather than rebuilt per render.\n  const published = createClient({ ...clientConfig, perspective: \"published\", cache: buildCache });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      // Explicitly uncached: a draft read exists to show the edit that just happened.\n      return createClient({\n        ...clientConfig,\n        perspective: \"drafts\",\n        previewToken: bcms.token,\n        cache: false,\n      });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n","/**\n * @bettercms-ai/astro — the BetterCMS adapter for Astro.\n *\n *   import { defineConfig } from \"astro/config\";\n *   import bettercms from \"@bettercms-ai/astro\";\n *\n *   export default defineConfig({\n *     integrations: [bettercms({ apiUrl, workspace })],\n *     output: \"server\",\n *   });\n *\n * Then in any page: `import { loadPage } from \"bettercms:client\"`.\n */\nexport { bettercms, default } from \"./integration.js\";\nexport {\n  resolveConfig,\n  DRAFT_COOKIE,\n  type BetterCMSAstroOptions,\n  type PublicConfig,\n  type ResolvedConfig,\n} from \"./config.js\";\nexport { liveSrc } from \"./runtime.js\";\nexport type { BcmsLocals, BetterCMSRuntime, RuntimeConfig } from \"./runtime.js\";\n\n// Image URL builder, re-exported for `<BcmsImage>` and host code.\nexport { default as imageUrlBuilder, imageUrl } from \"@bettercms-ai/image-url\";\nexport type {\n  ImageUrlBuilder,\n  ImageSource,\n  ImageFormat,\n  ImageFit,\n} from \"@bettercms-ai/image-url\";\n\n// Delivery read types, re-exported for typing page/entry data.\nexport type {\n  Perspective,\n  DeliveryEntry,\n  DeliveryPage,\n  DeliveryList,\n  PageMetaJson,\n  SiteSeoDefaults,\n  ContentBlock,\n  DeliveredLayout,\n} from \"@bettercms-ai/types\";\nexport type { DeliveryForm, DeliveryFormField } from \"@bettercms-ai/sdk\";\n\n// SEO (FLO-302): page-over-site meta resolver. In a page's frontmatter,\n// `const seo = resolveSeo(page, siteDefaults)`, then map `seo.*` into `<head>`.\nexport { resolveSeo } from \"@bettercms-ai/sdk\";\nexport type { SeoInput, ResolvedSeo } from \"@bettercms-ai/sdk\";\n"],"mappings":";AAWA,SAAS,oBAAoB;AAC7B,SAAS,eAAe;AAExB,IAAM,oBAAoB;AAC1B,IAAM,gBAAgB;AACf,IAAM,eAAe;AAiD5B,IAAI;AACJ,SAAS,SAAS,KAAuB;AACvC,MAAI,kBAAkB,QAAW;AAC/B,QAAI;AACF,sBAAgB,KAAK,MAAM,aAAa,QAAQ,KAAK,aAAa,GAAG,MAAM,CAAC;AAAA,IAC9E,QAAQ;AACN,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAM,WAAW,CAAC,MAAc,QAAgB,UAC9C,IAAI;AAAA,EACF,2BAA2B,IAAI,sCAAsC,IAAI,cACpE,MAAM,QAAQ,KAAK;AAAA;AAI1B;AAMK,SAAS,cACd,SACA,MAA0C,QAAQ,KAClD,MAAc,QAAQ,IAAI,GACV;AAChB,QAAM,OAAO,MAAgB,SAAS,GAAG;AAEzC,QAAM,UAAU,QAAQ,UAAU,IAAI,uBAAuB,KAAK,EAAE,UAAU,IAAI,QAAQ,QAAQ,EAAE;AACpG,QAAM,YAAY,QAAQ,aAAa,IAAI,yBAAyB,KAAK,EAAE,aAAa;AAGxF,MAAI,CAAC,OAAQ,OAAM,SAAS,UAAU,uBAAuB,4BAA4B,aAAa,cAAc;AACpH,MAAI,CAAC,WAAW;AACd,UAAM,SAAS,aAAa,yBAAyB,4BAA4B,aAAa,cAAc;AAAA,EAC9G;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,IAAI,0BAA0B,KAAK,EAAE;AAAA,IACrE,WAAW,QAAQ,YAAY,IAAI,yBAAyB,mBAAmB,QAAQ,QAAQ,EAAE;AAAA,IACjG,WAAW,QAAQ,aAAa,IAAI;AAAA,IACpC,aAAa;AAAA,IACb,OAAO,QAAQ,SAAS;AAAA,EAC1B;AACF;AAEO,SAAS,eAAe,GAAiC;AAC9D,QAAM,EAAE,OAAO,QAAQ,GAAG,IAAI,IAAI;AAClC,SAAO;AACT;;;AC7GA,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,WAAW,CAAC,OAAe,KAAK,EAAE;AAExC,SAAS,aAAa,KAA6B;AACjD,SAAO,yBAAyB,KAAK,UAAU,eAAe,GAAG,CAAC,CAAC;AAAA;AAAA;AACrE;AAEA,SAAS,aAAa,KAAqB,YAA6B;AAGtE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,aAAa,KAAK,UAAU,IAAI,MAAM,CAAC;AAAA,IACvC,gBAAgB,KAAK,UAAU,IAAI,SAAS,CAAC;AAAA,IAC7C,gBAAgB,KAAK,UAAU,IAAI,SAAS,CAAC;AAAA,IAC7C;AAAA,IACA,iBAAiB,KAAK,UAAU,UAAU,CAAC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,cAAc,KAAqB,YAA2B;AACrE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,IAAY;AACpB,UAAI,OAAO,aAAa,OAAO,UAAW,QAAO,SAAS,EAAE;AAC5D,aAAO;AAAA,IACT;AAAA,IACA,KAAK,IAAY;AACf,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO,aAAa,GAAG;AACvD,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO,aAAa,KAAK,WAAW,CAAC;AACrE,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,UAAU,UAAiC,CAAC,GAAqB;AAQ/E,QAAM,aAAa,EAAE,IAAI,OAAO,SAAS,IAAI,UAAU,MAAM;AAE7D,MAAI;AAEJ,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,sBAAsB,CAAC,EAAE,SAAS,cAAc,eAAe,aAAa,OAAO,MAAM;AACvF,cAAM,MAAM,cAAc,OAAO;AACjC,mBAAW,UAAU;AAErB,qBAAa,EAAE,MAAM,EAAE,SAAS,CAAC,cAAc,KAAK,MAAM,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;AAE7E,YAAI,IAAI,OAAO;AACb,wBAAc,EAAE,YAAY,kCAAkC,OAAO,MAAM,CAAC;AAC5E,sBAAY;AAAA,YACV,SAAS;AAAA,YACT,YAAY;AAAA,YACZ,WAAW;AAAA,UACb,CAAC;AACD,sBAAY;AAAA,YACV,SAAS;AAAA,YACT,YAAY;AAAA,YACZ,WAAW;AAAA,UACb,CAAC;AACD,iBAAO,KAAK,qEAAgE;AAAA,QAC9E;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MA0BA,qBAAqB,CAAC,EAAE,QAAQ,QAAQ,GAAG,KAAK,MAAM;AAEpD,cAAM,cAAe,KAA+C;AACpE,cAAM,eACJ,gBAAgB,SACZ,gBAAgB,WAChB,OAAO,WAAW,YAAY,CAAC,OAAO;AAE5C,mBAAW,KAAK,WAAW,YAAY,WAAW;AAElD,iBAAS,MAAM;AACb,gBAAM,OAAQ,KAA+C;AAC7D,gBAAM,cACJ,SAAS,SAAY,SAAS,WAAW,OAAO,WAAW,YAAY,CAAC,OAAO;AACjF,qBAAW,KAAK,WAAW,YAAY,WAAW;AAClD,qBAAW,WAAW;AACtB,cAAI,WAAW,IAAI;AACjB,mBAAO,KAAK,kEAA6D;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA,qBAAqB,MAAM;AACzB,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,sBAAQ;;;AC3Jf,SAAS,oBAA8C;AA4FhD,SAAS,QAAQ,MAMb;AACT,QAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ,EAAE;AAC3C,QAAM,IAAI,IAAI,gBAAgB,EAAE,KAAK,KAAK,OAAO,CAAC;AAClD,MAAI,KAAK,UAAU,OAAW,GAAE,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC/D,MAAI,KAAK,OAAQ,GAAE,IAAI,UAAU,GAAG;AACpC,SAAO,GAAG,IAAI,oBAAoB,KAAK,SAAS,SAAS,CAAC;AAC5D;AAIA,IAAM,MAAM,IAAI,YAAY;;;AC3F5B,SAAoB,WAAXA,UAA4B,gBAAgB;AAuBrD,SAAS,kBAAkB;","names":["default"]}

package/dist/middleware-entry.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/middleware-entry.ts","../src/runtime.ts"],"sourcesContent":["/**\n * Draft-mode middleware (registered via `addMiddleware`).\n *\n * Reads the signed draft cookie, verifies it with `BCMS_DRAFT_SECRET`, and\n * publishes the result on `Astro.locals.bcms` so loaders pick the draft client.\n */\nimport type { MiddlewareHandler } from \"astro\";\nimport config from \"bettercms:config\";\nimport { verifyValue, type BcmsLocals } from \"./runtime.js\";\n\nexport const onRequest: MiddlewareHandler = async (context, next) => {\n  const cookie = context.cookies.get(config.draftCookie)?.value;\n  const secret = import.meta.env.BCMS_DRAFT_SECRET as string | undefined;\n\n  let locals: BcmsLocals = { draft: false };\n  if (cookie && secret) {\n    const token = await verifyValue(cookie, secret);\n    if (token) locals = { draft: true, token };\n  }\n  context.locals.bcms = locals;\n\n  return next();\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const published = createClient({ ...config, perspective: \"published\" });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      return createClient({ ...config, perspective: \"drafts\", previewToken: bcms.token });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAOA,OAAO,YAAY;;;ACCnB,SAAS,oBAA8C;AA2FvD,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAQA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AAEzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;;;AD5HO,IAAM,YAA+B,OAAO,SAAS,SAAS;AACnE,QAAM,SAAS,QAAQ,QAAQ,IAAI,OAAO,WAAW,GAAG;AACxD,QAAM,SAAS,YAAY,IAAI;AAE/B,MAAI,SAAqB,EAAE,OAAO,MAAM;AACxC,MAAI,UAAU,QAAQ;AACpB,UAAM,QAAQ,MAAM,YAAY,QAAQ,MAAM;AAC9C,QAAI,MAAO,UAAS,EAAE,OAAO,MAAM,MAAM;AAAA,EAC3C;AACA,UAAQ,OAAO,OAAO;AAEtB,SAAO,KAAK;AACd;","names":[]}
+{"version":3,"sources":["../src/middleware-entry.ts","../src/runtime.ts"],"sourcesContent":["/**\n * Draft-mode middleware (registered via `addMiddleware`).\n *\n * Reads the signed draft cookie, verifies it with `BCMS_DRAFT_SECRET`, and\n * publishes the result on `Astro.locals.bcms` so loaders pick the draft client.\n */\nimport type { MiddlewareHandler } from \"astro\";\nimport config from \"bettercms:config\";\nimport { verifyValue, type BcmsLocals } from \"./runtime.js\";\n\nexport const onRequest: MiddlewareHandler = async (context, next) => {\n  const cookie = context.cookies.get(config.draftCookie)?.value;\n  const secret = import.meta.env.BCMS_DRAFT_SECRET as string | undefined;\n\n  let locals: BcmsLocals = { draft: false };\n  if (cookie && secret) {\n    const token = await verifyValue(cookie, secret);\n    if (token) locals = { draft: true, token };\n  }\n  context.locals.bcms = locals;\n\n  return next();\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n  /**\n   * Collapse identical delivery GETs for the life of the process. Set by the integration\n   * when Astro's `command === \"build\"` — a static build renders every route from one\n   * published dataset, so a repeat read cannot legitimately differ.\n   *\n   * Never set for `dev` or SSR, where each request must see current content.\n   */\n  buildCache?: boolean;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const { buildCache, ...clientConfig } = config;\n  // One client for the whole build, so the cache below is shared across every route\n  // rather than rebuilt per render.\n  const published = createClient({ ...clientConfig, perspective: \"published\", cache: buildCache });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      // Explicitly uncached: a draft read exists to show the edit that just happened.\n      return createClient({\n        ...clientConfig,\n        perspective: \"drafts\",\n        previewToken: bcms.token,\n        cache: false,\n      });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAOA,OAAO,YAAY;;;ACCnB,SAAS,oBAA8C;AA4GvD,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAQA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AAEzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;;;AD7IO,IAAM,YAA+B,OAAO,SAAS,SAAS;AACnE,QAAM,SAAS,QAAQ,QAAQ,IAAI,OAAO,WAAW,GAAG;AACxD,QAAM,SAAS,YAAY,IAAI;AAE/B,MAAI,SAAqB,EAAE,OAAO,MAAM;AACxC,MAAI,UAAU,QAAQ;AACpB,UAAM,QAAQ,MAAM,YAAY,QAAQ,MAAM;AAC9C,QAAI,MAAO,UAAS,EAAE,OAAO,MAAM,MAAM;AAAA,EAC3C;AACA,UAAQ,OAAO,OAAO;AAEtB,SAAO,KAAK;AACd;","names":[]}

package/dist/routes/draft-disable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/routes/draft-disable.ts","../../src/runtime.ts"],"sourcesContent":["/**\n * GET /api/bcms/draft/disable?redirect=/path — clear the draft cookie.\n */\nimport type { APIRoute } from \"astro\";\nimport config from \"bettercms:config\";\nimport { safeRedirectPath } from \"../runtime.js\";\n\nexport const GET: APIRoute = async (context) => {\n  const redirectTo = new URL(context.request.url).searchParams.get(\"redirect\") ?? \"/\";\n  context.cookies.delete(config.draftCookie, { path: \"/\" });\n  return context.redirect(safeRedirectPath(redirectTo), 302);\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const published = createClient({ ...config, perspective: \"published\" });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      return createClient({ ...config, perspective: \"drafts\", previewToken: bcms.token });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAIA,OAAO,YAAY;;;ACInB,SAAS,oBAA8C;AA2FvD,IAAM,MAAM,IAAI,YAAY;AAsCrB,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;;;ADpIO,IAAM,MAAgB,OAAO,YAAY;AAC9C,QAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAChF,UAAQ,QAAQ,OAAO,OAAO,aAAa,EAAE,MAAM,IAAI,CAAC;AACxD,SAAO,QAAQ,SAAS,iBAAiB,UAAU,GAAG,GAAG;AAC3D;","names":[]}
+{"version":3,"sources":["../../src/routes/draft-disable.ts","../../src/runtime.ts"],"sourcesContent":["/**\n * GET /api/bcms/draft/disable?redirect=/path — clear the draft cookie.\n */\nimport type { APIRoute } from \"astro\";\nimport config from \"bettercms:config\";\nimport { safeRedirectPath } from \"../runtime.js\";\n\nexport const GET: APIRoute = async (context) => {\n  const redirectTo = new URL(context.request.url).searchParams.get(\"redirect\") ?? \"/\";\n  context.cookies.delete(config.draftCookie, { path: \"/\" });\n  return context.redirect(safeRedirectPath(redirectTo), 302);\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n  /**\n   * Collapse identical delivery GETs for the life of the process. Set by the integration\n   * when Astro's `command === \"build\"` — a static build renders every route from one\n   * published dataset, so a repeat read cannot legitimately differ.\n   *\n   * Never set for `dev` or SSR, where each request must see current content.\n   */\n  buildCache?: boolean;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const { buildCache, ...clientConfig } = config;\n  // One client for the whole build, so the cache below is shared across every route\n  // rather than rebuilt per render.\n  const published = createClient({ ...clientConfig, perspective: \"published\", cache: buildCache });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      // Explicitly uncached: a draft read exists to show the edit that just happened.\n      return createClient({\n        ...clientConfig,\n        perspective: \"drafts\",\n        previewToken: bcms.token,\n        cache: false,\n      });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAIA,OAAO,YAAY;;;ACInB,SAAS,oBAA8C;AA4GvD,IAAM,MAAM,IAAI,YAAY;AAsCrB,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;;;ADrJO,IAAM,MAAgB,OAAO,YAAY;AAC9C,QAAM,aAAa,IAAI,IAAI,QAAQ,QAAQ,GAAG,EAAE,aAAa,IAAI,UAAU,KAAK;AAChF,UAAQ,QAAQ,OAAO,OAAO,aAAa,EAAE,MAAM,IAAI,CAAC;AACxD,SAAO,QAAQ,SAAS,iBAAiB,UAAU,GAAG,GAAG;AAC3D;","names":[]}

package/dist/routes/draft-enable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/routes/draft-enable.ts","../../src/runtime.ts"],"sourcesContent":["/**\n * GET /api/bcms/draft/enable?token=<jwt>&redirect=/path\n *\n * Validates the preview token against the backend `/preview/:slug` endpoint\n * (the backend is the signature authority), then sets a signed draft cookie and\n * redirects. Requires `BCMS_DRAFT_SECRET` in the server env.\n */\nimport type { APIRoute } from \"astro\";\nimport config from \"bettercms:config\";\nimport { decodeTokenSlug, safeRedirectPath, signValue } from \"../runtime.js\";\n\nexport const GET: APIRoute = async (context) => {\n  const url = new URL(context.request.url);\n  const token = url.searchParams.get(\"token\");\n  const redirectTo = url.searchParams.get(\"redirect\") ?? \"/\";\n  const secret = import.meta.env.BCMS_DRAFT_SECRET as string | undefined;\n\n  if (!secret) return new Response(\"BCMS_DRAFT_SECRET is not configured\", { status: 500 });\n  if (!token) return new Response(\"Missing token\", { status: 400 });\n\n  const slug = decodeTokenSlug(token);\n  if (!slug) return new Response(\"Malformed token\", { status: 400 });\n\n  const res = await fetch(\n    `${config.apiUrl}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`,\n  );\n  if (!res.ok) return new Response(\"Invalid or expired token\", { status: 401 });\n\n  context.cookies.set(config.draftCookie, await signValue(token, secret), {\n    httpOnly: true,\n    sameSite: \"lax\",\n    secure: url.protocol === \"https:\",\n    path: \"/\",\n    maxAge: 60 * 60 * 24, // 24h, matching the preview-token lifetime\n  });\n\n  return context.redirect(safeRedirectPath(redirectTo), 302);\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const published = createClient({ ...config, perspective: \"published\" });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      return createClient({ ...config, perspective: \"drafts\", previewToken: bcms.token });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAQA,OAAO,YAAY;;;ACAnB,SAAS,oBAA8C;AA2FvD,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAiBO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK;AAAA,MAChB,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAAA,IACjD;AACA,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AD9IO,IAAM,MAAgB,OAAO,YAAY;AAC9C,QAAM,MAAM,IAAI,IAAI,QAAQ,QAAQ,GAAG;AACvC,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU,KAAK;AACvD,QAAM,SAAS,YAAY,IAAI;AAE/B,MAAI,CAAC,OAAQ,QAAO,IAAI,SAAS,uCAAuC,EAAE,QAAQ,IAAI,CAAC;AACvF,MAAI,CAAC,MAAO,QAAO,IAAI,SAAS,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAEhE,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO,IAAI,SAAS,mBAAmB,EAAE,QAAQ,IAAI,CAAC;AAEjE,QAAM,MAAM,MAAM;AAAA,IAChB,GAAG,OAAO,MAAM,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AAAA,EAChG;AACA,MAAI,CAAC,IAAI,GAAI,QAAO,IAAI,SAAS,4BAA4B,EAAE,QAAQ,IAAI,CAAC;AAE5E,UAAQ,QAAQ,IAAI,OAAO,aAAa,MAAM,UAAU,OAAO,MAAM,GAAG;AAAA,IACtE,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ,IAAI,aAAa;AAAA,IACzB,MAAM;AAAA,IACN,QAAQ,KAAK,KAAK;AAAA;AAAA,EACpB,CAAC;AAED,SAAO,QAAQ,SAAS,iBAAiB,UAAU,GAAG,GAAG;AAC3D;","names":[]}
+{"version":3,"sources":["../../src/routes/draft-enable.ts","../../src/runtime.ts"],"sourcesContent":["/**\n * GET /api/bcms/draft/enable?token=<jwt>&redirect=/path\n *\n * Validates the preview token against the backend `/preview/:slug` endpoint\n * (the backend is the signature authority), then sets a signed draft cookie and\n * redirects. Requires `BCMS_DRAFT_SECRET` in the server env.\n */\nimport type { APIRoute } from \"astro\";\nimport config from \"bettercms:config\";\nimport { decodeTokenSlug, safeRedirectPath, signValue } from \"../runtime.js\";\n\nexport const GET: APIRoute = async (context) => {\n  const url = new URL(context.request.url);\n  const token = url.searchParams.get(\"token\");\n  const redirectTo = url.searchParams.get(\"redirect\") ?? \"/\";\n  const secret = import.meta.env.BCMS_DRAFT_SECRET as string | undefined;\n\n  if (!secret) return new Response(\"BCMS_DRAFT_SECRET is not configured\", { status: 500 });\n  if (!token) return new Response(\"Missing token\", { status: 400 });\n\n  const slug = decodeTokenSlug(token);\n  if (!slug) return new Response(\"Malformed token\", { status: 400 });\n\n  const res = await fetch(\n    `${config.apiUrl}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`,\n  );\n  if (!res.ok) return new Response(\"Invalid or expired token\", { status: 401 });\n\n  context.cookies.set(config.draftCookie, await signValue(token, secret), {\n    httpOnly: true,\n    sameSite: \"lax\",\n    secure: url.protocol === \"https:\",\n    path: \"/\",\n    maxAge: 60 * 60 * 24, // 24h, matching the preview-token lifetime\n  });\n\n  return context.redirect(safeRedirectPath(redirectTo), 302);\n};\n","/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n  /**\n   * Collapse identical delivery GETs for the life of the process. Set by the integration\n   * when Astro's `command === \"build\"` — a static build renders every route from one\n   * published dataset, so a repeat read cannot legitimately differ.\n   *\n   * Never set for `dev` or SSR, where each request must see current content.\n   */\n  buildCache?: boolean;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const { buildCache, ...clientConfig } = config;\n  // One client for the whole build, so the cache below is shared across every route\n  // rather than rebuilt per render.\n  const published = createClient({ ...clientConfig, perspective: \"published\", cache: buildCache });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      // Explicitly uncached: a draft read exists to show the edit that just happened.\n      return createClient({\n        ...clientConfig,\n        perspective: \"drafts\",\n        previewToken: bcms.token,\n        cache: false,\n      });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAQA,OAAO,YAAY;;;ACAnB,SAAS,oBAA8C;AA4GvD,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAiBO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK;AAAA,MAChB,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAAA,IACjD;AACA,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AD/JO,IAAM,MAAgB,OAAO,YAAY;AAC9C,QAAM,MAAM,IAAI,IAAI,QAAQ,QAAQ,GAAG;AACvC,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,QAAM,aAAa,IAAI,aAAa,IAAI,UAAU,KAAK;AACvD,QAAM,SAAS,YAAY,IAAI;AAE/B,MAAI,CAAC,OAAQ,QAAO,IAAI,SAAS,uCAAuC,EAAE,QAAQ,IAAI,CAAC;AACvF,MAAI,CAAC,MAAO,QAAO,IAAI,SAAS,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAEhE,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO,IAAI,SAAS,mBAAmB,EAAE,QAAQ,IAAI,CAAC;AAEjE,QAAM,MAAM,MAAM;AAAA,IAChB,GAAG,OAAO,MAAM,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AAAA,EAChG;AACA,MAAI,CAAC,IAAI,GAAI,QAAO,IAAI,SAAS,4BAA4B,EAAE,QAAQ,IAAI,CAAC;AAE5E,UAAQ,QAAQ,IAAI,OAAO,aAAa,MAAM,UAAU,OAAO,MAAM,GAAG;AAAA,IACtE,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ,IAAI,aAAa;AAAA,IACzB,MAAM;AAAA,IACN,QAAQ,KAAK,KAAK;AAAA;AAAA,EACpB,CAAC;AAED,SAAO,QAAQ,SAAS,iBAAiB,UAAU,GAAG,GAAG;AAC3D;","names":[]}

package/dist/runtime.d.ts

@@ -16,6 +16,14 @@ interface RuntimeConfig {
     projectId?: string;
     /** Server-only delivery key (a `content:read:draft` key for drafts). */
     apiKey?: string;
+    /**
+     * Collapse identical delivery GETs for the life of the process. Set by the integration
+     * when Astro's `command === "build"` — a static build renders every route from one
+     * published dataset, so a repeat read cannot legitimately differ.
+     *
+     * Never set for `dev` or SSR, where each request must see current content.
+     */
+    buildCache?: boolean;
 }
 /** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */
 interface BcmsLocals {

package/dist/runtime.js

@@ -1,11 +1,17 @@
 // src/runtime.ts
 import { createClient } from "@bettercms-ai/sdk";
 function createRuntime(config) {
-  const published = createClient({ ...config, perspective: "published" });
+  const { buildCache, ...clientConfig } = config;
+  const published = createClient({ ...clientConfig, perspective: "published", cache: buildCache });
   const getClient = (astro) => {
     const bcms = astro?.locals?.bcms;
     if (bcms?.draft) {
-      return createClient({ ...config, perspective: "drafts", previewToken: bcms.token });
+      return createClient({
+        ...clientConfig,
+        perspective: "drafts",
+        previewToken: bcms.token,
+        cache: false
+      });
     }
     return published;
   };

package/dist/runtime.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/runtime.ts"],"sourcesContent":["/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const published = createClient({ ...config, perspective: \"published\" });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      return createClient({ ...config, perspective: \"drafts\", previewToken: bcms.token });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAQA,SAAS,oBAA8C;AA2ChD,SAAS,cAAc,QAAyC;AACrE,QAAM,YAAY,aAAa,EAAE,GAAG,QAAQ,aAAa,YAAY,CAAC;AAEtE,QAAM,YAAY,CAAC,UAA2C;AAC5D,UAAM,OAAO,OAAO,QAAQ;AAC5B,QAAI,MAAM,OAAO;AACf,aAAO,aAAa,EAAE,GAAG,QAAQ,aAAa,UAAU,cAAc,KAAK,MAAM,CAAC;AAAA,IACpF;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,IACA,WAAW,CAAC,OAAO,MAAM,SAAS,UAAU,KAAK,EAAE,SAAS,MAAM,IAAI;AAAA,IACtE,aAAa,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,YAAY,IAAI;AAAA,IAC/D,UAAU,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,QAAQ,IAAI;AAAA,IACxD,YAAY,CAAC,UAAU,UAAU,KAAK,EAAE,UAAU;AAAA,IAClD,WAAW,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,UAAU,IAAI;AAAA,EAC7D;AACF;AAYO,SAAS,QAAQ,MAMb;AACT,QAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ,EAAE;AAC3C,QAAM,IAAI,IAAI,gBAAgB,EAAE,KAAK,KAAK,OAAO,CAAC;AAClD,MAAI,KAAK,UAAU,OAAW,GAAE,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC/D,MAAI,KAAK,OAAQ,GAAE,IAAI,UAAU,GAAG;AACpC,SAAO,GAAG,IAAI,oBAAoB,KAAK,SAAS,SAAS,CAAC;AAC5D;AAIA,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AAEzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK;AAAA,MAChB,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAAA,IACjD;AACA,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../src/runtime.ts"],"sourcesContent":["/**\n * Runtime for @bettercms-ai/astro — the code the `bettercms:client` virtual\n * module binds to. Provides a published client, per-request draft client\n * selection, typed loaders, and signed-cookie helpers for draft mode.\n *\n * Read-only; no I/O at import time. Safe in Node and edge runtimes (uses Web\n * Crypto + global fetch only).\n */\nimport { createClient, type BetterCMSReadClient } from \"@bettercms-ai/sdk\";\nimport type { DeliveredLayout, DeliveryEntry, DeliveryList, DeliveryPage } from \"@bettercms-ai/types\";\n\nexport interface RuntimeConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  /** Server-only delivery key (a `content:read:draft` key for drafts). */\n  apiKey?: string;\n  /**\n   * Collapse identical delivery GETs for the life of the process. Set by the integration\n   * when Astro's `command === \"build\"` — a static build renders every route from one\n   * published dataset, so a repeat read cannot legitimately differ.\n   *\n   * Never set for `dev` or SSR, where each request must see current content.\n   */\n  buildCache?: boolean;\n}\n\n/** Per-request draft state, set on `Astro.locals.bcms` by the middleware. */\nexport interface BcmsLocals {\n  draft: boolean;\n  token?: string;\n}\n\ninterface HasLocals {\n  locals: { bcms?: BcmsLocals };\n}\n\nexport interface BetterCMSRuntime {\n  /** Published-perspective client (use for SSG / non-draft reads). */\n  client: BetterCMSReadClient;\n  /** Pick the right client for a request (draft client when draft mode is on). */\n  getClient(astro?: HasLocals): BetterCMSReadClient;\n  loadEntry<T = Record<string, unknown>>(\n    astro: HasLocals,\n    slug: string,\n    opts?: Parameters<BetterCMSReadClient[\"getEntry\"]>[1],\n  ): Promise<DeliveryEntry<T>>;\n  loadEntries<T = Record<string, unknown>>(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listEntries\"]>[0],\n  ): Promise<DeliveryList<DeliveryEntry<T>>>;\n  loadPage(astro: HasLocals, slug: string): Promise<DeliveryPage | null>;\n  loadLayout(astro: HasLocals): Promise<DeliveredLayout | null>;\n  loadForms(\n    astro: HasLocals,\n    opts?: Parameters<BetterCMSReadClient[\"listForms\"]>[0],\n  ): Promise<Awaited<ReturnType<BetterCMSReadClient[\"listForms\"]>>>;\n}\n\nexport function createRuntime(config: RuntimeConfig): BetterCMSRuntime {\n  const { buildCache, ...clientConfig } = config;\n  // One client for the whole build, so the cache below is shared across every route\n  // rather than rebuilt per render.\n  const published = createClient({ ...clientConfig, perspective: \"published\", cache: buildCache });\n\n  const getClient = (astro?: HasLocals): BetterCMSReadClient => {\n    const bcms = astro?.locals?.bcms;\n    if (bcms?.draft) {\n      // Explicitly uncached: a draft read exists to show the edit that just happened.\n      return createClient({\n        ...clientConfig,\n        perspective: \"drafts\",\n        previewToken: bcms.token,\n        cache: false,\n      });\n    }\n    return published;\n  };\n\n  return {\n    client: published,\n    getClient,\n    loadEntry: (astro, slug, opts) => getClient(astro).getEntry(slug, opts),\n    loadEntries: (astro, opts) => getClient(astro).listEntries(opts),\n    loadPage: (astro, slug) => getClient(astro).getPage(slug),\n    loadLayout: (astro) => getClient(astro).getLayout(),\n    loadForms: (astro, opts) => getClient(astro).listForms(opts),\n  };\n}\n\n/**\n * Build the live SSE URL for `<BcmsLive>`. The key is a query param because\n * browser EventSource cannot send headers — use a content:read key.\n *\n * `depth` sets the hydration depth of the document the stream pushes (default 1,\n * matching the delivery API). `drafts` streams autosaves so a preview surface\n * repaints as the editor types — it needs a `content:read:draft` key, and the\n * server ignores the flag for any other key rather than failing the connection.\n * Never enable it on a public site.\n */\nexport function liveSrc(opts: {\n  apiUrl: string;\n  workspace: string;\n  apiKey: string;\n  depth?: 0 | 1 | 2;\n  drafts?: boolean;\n}): string {\n  const base = opts.apiUrl.replace(/\\/+$/, \"\");\n  const q = new URLSearchParams({ key: opts.apiKey });\n  if (opts.depth !== undefined) q.set(\"depth\", String(opts.depth));\n  if (opts.drafts) q.set(\"drafts\", \"1\");\n  return `${base}/api/v1/delivery/${opts.workspace}/live?${q}`;\n}\n\n// ── Signed-cookie helpers (HMAC-SHA256, base64url) ──────────────────────────\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    enc.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage. */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** Verify a signed value, returning the original value or null if tampered. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  // Constant-time-ish compare via length + char accumulation.\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths. Blocks \"//evil.com\", \"https://evil.com\", etc. */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") ? to : \"/\";\n}\n\n/** Decode a preview-token JWT payload (UNVERIFIED) to read its `entrySlug`. */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    const json = JSON.parse(\n      atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAQA,SAAS,oBAA8C;AAmDhD,SAAS,cAAc,QAAyC;AACrE,QAAM,EAAE,YAAY,GAAG,aAAa,IAAI;AAGxC,QAAM,YAAY,aAAa,EAAE,GAAG,cAAc,aAAa,aAAa,OAAO,WAAW,CAAC;AAE/F,QAAM,YAAY,CAAC,UAA2C;AAC5D,UAAM,OAAO,OAAO,QAAQ;AAC5B,QAAI,MAAM,OAAO;AAEf,aAAO,aAAa;AAAA,QAClB,GAAG;AAAA,QACH,aAAa;AAAA,QACb,cAAc,KAAK;AAAA,QACnB,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,IACA,WAAW,CAAC,OAAO,MAAM,SAAS,UAAU,KAAK,EAAE,SAAS,MAAM,IAAI;AAAA,IACtE,aAAa,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,YAAY,IAAI;AAAA,IAC/D,UAAU,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,QAAQ,IAAI;AAAA,IACxD,YAAY,CAAC,UAAU,UAAU,KAAK,EAAE,UAAU;AAAA,IAClD,WAAW,CAAC,OAAO,SAAS,UAAU,KAAK,EAAE,UAAU,IAAI;AAAA,EAC7D;AACF;AAYO,SAAS,QAAQ,MAMb;AACT,QAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ,EAAE;AAC3C,QAAM,IAAI,IAAI,gBAAgB,EAAE,KAAK,KAAK,OAAO,CAAC;AAClD,MAAI,KAAK,UAAU,OAAW,GAAE,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC/D,MAAI,KAAK,OAAQ,GAAE,IAAI,UAAU,GAAG;AACpC,SAAO,GAAG,IAAI,oBAAoB,KAAK,SAAS,SAAS,CAAC;AAC5D;AAIA,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AAEzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,IAAI,KAAK;AAC3D;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK;AAAA,MAChB,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC;AAAA,IACjD;AACA,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@bettercms-ai/astro",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "type": "module",
-  "description": "The BetterCMS adapter for Astro — a `bettercms()` integration, a `bettercms:client` virtual module, typed content loaders, draft preview, and native .astro rendering components.",
+  "description": "The BetterCMS adapter for Astro \u2014 a `bettercms()` integration, a `bettercms:client` virtual module, typed content loaders, draft preview, and native .astro rendering components.",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -18,6 +18,11 @@
       "import": "./dist/runtime.js",
       "default": "./dist/runtime.js"
     },
+    "./bindings": {
+      "types": "./dist/bindings.d.ts",
+      "import": "./dist/bindings.js",
+      "default": "./dist/bindings.js"
+    },
     "./middleware": {
       "types": "./dist/middleware-entry.d.ts",
       "import": "./dist/middleware-entry.js",
@@ -48,9 +53,10 @@
   },
   "dependencies": {
     "@bettercms-ai/image-url": "^0.3.0",
-    "@bettercms-ai/sdk": "^1.13.1",
+    "@bettercms-ai/sdk": "^1.14.0",
     "@bettercms-ai/types": "^1.11.0",
-    "@bettercms-ai/ui": "^0.6.0"
+    "@bettercms-ai/ui": "^0.6.0",
+    "@bettercms-ai/richtext": "^0.1.0"
   },
   "peerDependencies": {
     "astro": ">=4"