@bettercms-ai/sdk 1.32.0 → 1.34.0

package/dist/config.cjs

@@ -0,0 +1,55 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/config.ts
+var config_exports = {};
+__export(config_exports, {
+  DEFAULT_MEDIA_URL: () => DEFAULT_MEDIA_URL,
+  resolveBcmsConfig: () => resolveBcmsConfig
+});
+module.exports = __toCommonJS(config_exports);
+var DEFAULT_MEDIA_URL = "https://cdn.bettercms.ai";
+function resolveBcmsConfig(input) {
+  const env = input.env ?? {};
+  const fromEnv = (name) => {
+    for (const p of input.prefixes) {
+      const v = env[`${p}BCMS_${name}`];
+      if (v) return v;
+    }
+    return void 0;
+  };
+  let snap;
+  const snapshot = () => snap ??= input.snapshot?.() ?? {};
+  const o = input.options ?? {};
+  const config = {
+    apiUrl: (o.apiUrl ?? fromEnv("API_URL") ?? snapshot().apiUrl ?? "").replace(/\/+$/, ""),
+    workspace: o.workspace ?? fromEnv("WORKSPACE") ?? snapshot().workspace ?? "",
+    projectId: o.projectId ?? fromEnv("PROJECT_ID") ?? snapshot().projectId,
+    mediaUrl: (o.mediaUrl ?? fromEnv("MEDIA_URL") ?? DEFAULT_MEDIA_URL).replace(/\/+$/, ""),
+    studioUrl: o.studioUrl ?? fromEnv("STUDIO_URL")
+  };
+  const missing = ["apiUrl", "workspace"].filter((k) => !config[k]);
+  return { config, missing };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_MEDIA_URL,
+  resolveBcmsConfig
+});
+//# sourceMappingURL=config.cjs.map

package/dist/config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["/**\n * Where a site's BetterCMS settings come from, the same way on every framework: explicit options,\n * then `<PREFIX>BCMS_*` env (each framework exposes env to the browser under its own prefix:\n * `PUBLIC_` for Astro and SvelteKit, `NEXT_PUBLIC_` for Next, `VITE_` for Vite React,\n * `NUXT_PUBLIC_` for Nuxt), then the build snapshot `bettercms pull-content` writes.\n *\n * Pure: the adapter passes its env and reads the snapshot (this module touches no filesystem).\n */\n\nexport const DEFAULT_MEDIA_URL = \"https://cdn.bettercms.ai\";\n\nexport interface BcmsSiteOptions {\n  apiUrl?: string;\n  workspace?: string;\n  projectId?: string;\n  mediaUrl?: string;\n  studioUrl?: string;\n}\n\nexport interface BcmsSiteConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  mediaUrl: string;\n  studioUrl?: string;\n}\n\nexport interface ResolveBcmsConfigInput {\n  options?: BcmsSiteOptions;\n  env?: Record<string, string | undefined>;\n  /** Env prefixes, first match wins: `[\"NEXT_PUBLIC_\", \"\"]` reads NEXT_PUBLIC_BCMS_API_URL, then BCMS_API_URL. */\n  prefixes: string[];\n  /** The build snapshot's identity, read only when options and env both miss. */\n  snapshot?: () => { apiUrl?: string; workspace?: string; projectId?: string };\n}\n\n/** The resolved settings, and which essentials are missing (the adapter words the error). */\nexport function resolveBcmsConfig(input: ResolveBcmsConfigInput): { config: BcmsSiteConfig; missing: (\"apiUrl\" | \"workspace\")[] } {\n  const env = input.env ?? {};\n  const fromEnv = (name: string) => {\n    for (const p of input.prefixes) {\n      const v = env[`${p}BCMS_${name}`];\n      if (v) return v;\n    }\n    return undefined;\n  };\n  let snap: ReturnType<NonNullable<ResolveBcmsConfigInput[\"snapshot\"]>> | undefined;\n  const snapshot = () => (snap ??= input.snapshot?.() ?? {});\n  const o = input.options ?? {};\n  const config: BcmsSiteConfig = {\n    apiUrl: (o.apiUrl ?? fromEnv(\"API_URL\") ?? snapshot().apiUrl ?? \"\").replace(/\\/+$/, \"\"),\n    workspace: o.workspace ?? fromEnv(\"WORKSPACE\") ?? snapshot().workspace ?? \"\",\n    projectId: o.projectId ?? fromEnv(\"PROJECT_ID\") ?? snapshot().projectId,\n    mediaUrl: (o.mediaUrl ?? fromEnv(\"MEDIA_URL\") ?? DEFAULT_MEDIA_URL).replace(/\\/+$/, \"\"),\n    studioUrl: o.studioUrl ?? fromEnv(\"STUDIO_URL\"),\n  };\n  const missing = ([\"apiUrl\", \"workspace\"] as const).filter((k) => !config[k]);\n  return { config, missing };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,IAAM,oBAAoB;AA4B1B,SAAS,kBAAkB,OAAgG;AAChI,QAAM,MAAM,MAAM,OAAO,CAAC;AAC1B,QAAM,UAAU,CAAC,SAAiB;AAChC,eAAW,KAAK,MAAM,UAAU;AAC9B,YAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE;AAChC,UAAI,EAAG,QAAO;AAAA,IAChB;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACJ,QAAM,WAAW,MAAO,SAAS,MAAM,WAAW,KAAK,CAAC;AACxD,QAAM,IAAI,MAAM,WAAW,CAAC;AAC5B,QAAM,SAAyB;AAAA,IAC7B,SAAS,EAAE,UAAU,QAAQ,SAAS,KAAK,SAAS,EAAE,UAAU,IAAI,QAAQ,QAAQ,EAAE;AAAA,IACtF,WAAW,EAAE,aAAa,QAAQ,WAAW,KAAK,SAAS,EAAE,aAAa;AAAA,IAC1E,WAAW,EAAE,aAAa,QAAQ,YAAY,KAAK,SAAS,EAAE;AAAA,IAC9D,WAAW,EAAE,YAAY,QAAQ,WAAW,KAAK,mBAAmB,QAAQ,QAAQ,EAAE;AAAA,IACtF,WAAW,EAAE,aAAa,QAAQ,YAAY;AAAA,EAChD;AACA,QAAM,UAAW,CAAC,UAAU,WAAW,EAAY,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3E,SAAO,EAAE,QAAQ,QAAQ;AAC3B;","names":[]}

package/dist/config.d.cts

@@ -0,0 +1,42 @@
+/**
+ * Where a site's BetterCMS settings come from, the same way on every framework: explicit options,
+ * then `<PREFIX>BCMS_*` env (each framework exposes env to the browser under its own prefix:
+ * `PUBLIC_` for Astro and SvelteKit, `NEXT_PUBLIC_` for Next, `VITE_` for Vite React,
+ * `NUXT_PUBLIC_` for Nuxt), then the build snapshot `bettercms pull-content` writes.
+ *
+ * Pure: the adapter passes its env and reads the snapshot (this module touches no filesystem).
+ */
+declare const DEFAULT_MEDIA_URL = "https://cdn.bettercms.ai";
+interface BcmsSiteOptions {
+    apiUrl?: string;
+    workspace?: string;
+    projectId?: string;
+    mediaUrl?: string;
+    studioUrl?: string;
+}
+interface BcmsSiteConfig {
+    apiUrl: string;
+    workspace: string;
+    projectId?: string;
+    mediaUrl: string;
+    studioUrl?: string;
+}
+interface ResolveBcmsConfigInput {
+    options?: BcmsSiteOptions;
+    env?: Record<string, string | undefined>;
+    /** Env prefixes, first match wins: `["NEXT_PUBLIC_", ""]` reads NEXT_PUBLIC_BCMS_API_URL, then BCMS_API_URL. */
+    prefixes: string[];
+    /** The build snapshot's identity, read only when options and env both miss. */
+    snapshot?: () => {
+        apiUrl?: string;
+        workspace?: string;
+        projectId?: string;
+    };
+}
+/** The resolved settings, and which essentials are missing (the adapter words the error). */
+declare function resolveBcmsConfig(input: ResolveBcmsConfigInput): {
+    config: BcmsSiteConfig;
+    missing: ("apiUrl" | "workspace")[];
+};
+
+export { type BcmsSiteConfig, type BcmsSiteOptions, DEFAULT_MEDIA_URL, type ResolveBcmsConfigInput, resolveBcmsConfig };

package/dist/config.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Where a site's BetterCMS settings come from, the same way on every framework: explicit options,
+ * then `<PREFIX>BCMS_*` env (each framework exposes env to the browser under its own prefix:
+ * `PUBLIC_` for Astro and SvelteKit, `NEXT_PUBLIC_` for Next, `VITE_` for Vite React,
+ * `NUXT_PUBLIC_` for Nuxt), then the build snapshot `bettercms pull-content` writes.
+ *
+ * Pure: the adapter passes its env and reads the snapshot (this module touches no filesystem).
+ */
+declare const DEFAULT_MEDIA_URL = "https://cdn.bettercms.ai";
+interface BcmsSiteOptions {
+    apiUrl?: string;
+    workspace?: string;
+    projectId?: string;
+    mediaUrl?: string;
+    studioUrl?: string;
+}
+interface BcmsSiteConfig {
+    apiUrl: string;
+    workspace: string;
+    projectId?: string;
+    mediaUrl: string;
+    studioUrl?: string;
+}
+interface ResolveBcmsConfigInput {
+    options?: BcmsSiteOptions;
+    env?: Record<string, string | undefined>;
+    /** Env prefixes, first match wins: `["NEXT_PUBLIC_", ""]` reads NEXT_PUBLIC_BCMS_API_URL, then BCMS_API_URL. */
+    prefixes: string[];
+    /** The build snapshot's identity, read only when options and env both miss. */
+    snapshot?: () => {
+        apiUrl?: string;
+        workspace?: string;
+        projectId?: string;
+    };
+}
+/** The resolved settings, and which essentials are missing (the adapter words the error). */
+declare function resolveBcmsConfig(input: ResolveBcmsConfigInput): {
+    config: BcmsSiteConfig;
+    missing: ("apiUrl" | "workspace")[];
+};
+
+export { type BcmsSiteConfig, type BcmsSiteOptions, DEFAULT_MEDIA_URL, type ResolveBcmsConfigInput, resolveBcmsConfig };

package/dist/config.js

@@ -0,0 +1,29 @@
+// src/config.ts
+var DEFAULT_MEDIA_URL = "https://cdn.bettercms.ai";
+function resolveBcmsConfig(input) {
+  const env = input.env ?? {};
+  const fromEnv = (name) => {
+    for (const p of input.prefixes) {
+      const v = env[`${p}BCMS_${name}`];
+      if (v) return v;
+    }
+    return void 0;
+  };
+  let snap;
+  const snapshot = () => snap ??= input.snapshot?.() ?? {};
+  const o = input.options ?? {};
+  const config = {
+    apiUrl: (o.apiUrl ?? fromEnv("API_URL") ?? snapshot().apiUrl ?? "").replace(/\/+$/, ""),
+    workspace: o.workspace ?? fromEnv("WORKSPACE") ?? snapshot().workspace ?? "",
+    projectId: o.projectId ?? fromEnv("PROJECT_ID") ?? snapshot().projectId,
+    mediaUrl: (o.mediaUrl ?? fromEnv("MEDIA_URL") ?? DEFAULT_MEDIA_URL).replace(/\/+$/, ""),
+    studioUrl: o.studioUrl ?? fromEnv("STUDIO_URL")
+  };
+  const missing = ["apiUrl", "workspace"].filter((k) => !config[k]);
+  return { config, missing };
+}
+export {
+  DEFAULT_MEDIA_URL,
+  resolveBcmsConfig
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["/**\n * Where a site's BetterCMS settings come from, the same way on every framework: explicit options,\n * then `<PREFIX>BCMS_*` env (each framework exposes env to the browser under its own prefix:\n * `PUBLIC_` for Astro and SvelteKit, `NEXT_PUBLIC_` for Next, `VITE_` for Vite React,\n * `NUXT_PUBLIC_` for Nuxt), then the build snapshot `bettercms pull-content` writes.\n *\n * Pure: the adapter passes its env and reads the snapshot (this module touches no filesystem).\n */\n\nexport const DEFAULT_MEDIA_URL = \"https://cdn.bettercms.ai\";\n\nexport interface BcmsSiteOptions {\n  apiUrl?: string;\n  workspace?: string;\n  projectId?: string;\n  mediaUrl?: string;\n  studioUrl?: string;\n}\n\nexport interface BcmsSiteConfig {\n  apiUrl: string;\n  workspace: string;\n  projectId?: string;\n  mediaUrl: string;\n  studioUrl?: string;\n}\n\nexport interface ResolveBcmsConfigInput {\n  options?: BcmsSiteOptions;\n  env?: Record<string, string | undefined>;\n  /** Env prefixes, first match wins: `[\"NEXT_PUBLIC_\", \"\"]` reads NEXT_PUBLIC_BCMS_API_URL, then BCMS_API_URL. */\n  prefixes: string[];\n  /** The build snapshot's identity, read only when options and env both miss. */\n  snapshot?: () => { apiUrl?: string; workspace?: string; projectId?: string };\n}\n\n/** The resolved settings, and which essentials are missing (the adapter words the error). */\nexport function resolveBcmsConfig(input: ResolveBcmsConfigInput): { config: BcmsSiteConfig; missing: (\"apiUrl\" | \"workspace\")[] } {\n  const env = input.env ?? {};\n  const fromEnv = (name: string) => {\n    for (const p of input.prefixes) {\n      const v = env[`${p}BCMS_${name}`];\n      if (v) return v;\n    }\n    return undefined;\n  };\n  let snap: ReturnType<NonNullable<ResolveBcmsConfigInput[\"snapshot\"]>> | undefined;\n  const snapshot = () => (snap ??= input.snapshot?.() ?? {});\n  const o = input.options ?? {};\n  const config: BcmsSiteConfig = {\n    apiUrl: (o.apiUrl ?? fromEnv(\"API_URL\") ?? snapshot().apiUrl ?? \"\").replace(/\\/+$/, \"\"),\n    workspace: o.workspace ?? fromEnv(\"WORKSPACE\") ?? snapshot().workspace ?? \"\",\n    projectId: o.projectId ?? fromEnv(\"PROJECT_ID\") ?? snapshot().projectId,\n    mediaUrl: (o.mediaUrl ?? fromEnv(\"MEDIA_URL\") ?? DEFAULT_MEDIA_URL).replace(/\\/+$/, \"\"),\n    studioUrl: o.studioUrl ?? fromEnv(\"STUDIO_URL\"),\n  };\n  const missing = ([\"apiUrl\", \"workspace\"] as const).filter((k) => !config[k]);\n  return { config, missing };\n}\n"],"mappings":";AASO,IAAM,oBAAoB;AA4B1B,SAAS,kBAAkB,OAAgG;AAChI,QAAM,MAAM,MAAM,OAAO,CAAC;AAC1B,QAAM,UAAU,CAAC,SAAiB;AAChC,eAAW,KAAK,MAAM,UAAU;AAC9B,YAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE;AAChC,UAAI,EAAG,QAAO;AAAA,IAChB;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACJ,QAAM,WAAW,MAAO,SAAS,MAAM,WAAW,KAAK,CAAC;AACxD,QAAM,IAAI,MAAM,WAAW,CAAC;AAC5B,QAAM,SAAyB;AAAA,IAC7B,SAAS,EAAE,UAAU,QAAQ,SAAS,KAAK,SAAS,EAAE,UAAU,IAAI,QAAQ,QAAQ,EAAE;AAAA,IACtF,WAAW,EAAE,aAAa,QAAQ,WAAW,KAAK,SAAS,EAAE,aAAa;AAAA,IAC1E,WAAW,EAAE,aAAa,QAAQ,YAAY,KAAK,SAAS,EAAE;AAAA,IAC9D,WAAW,EAAE,YAAY,QAAQ,WAAW,KAAK,mBAAmB,QAAQ,QAAQ,EAAE;AAAA,IACtF,WAAW,EAAE,aAAa,QAAQ,YAAY;AAAA,EAChD;AACA,QAAM,UAAW,CAAC,UAAU,WAAW,EAAY,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3E,SAAO,EAAE,QAAQ,QAAQ;AAC3B;","names":[]}

package/dist/draft.cjs

@@ -0,0 +1,86 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/draft.ts
+var draft_exports = {};
+__export(draft_exports, {
+  DRAFT_COOKIE: () => DRAFT_COOKIE,
+  decodeTokenSlug: () => decodeTokenSlug,
+  previewTokenValid: () => previewTokenValid,
+  safeRedirectPath: () => safeRedirectPath,
+  signValue: () => signValue,
+  verifyValue: () => verifyValue
+});
+module.exports = __toCommonJS(draft_exports);
+var DRAFT_COOKIE = "bcms-draft";
+var enc = new TextEncoder();
+function base64url(bytes) {
+  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));
+  return b.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function hmac(value, secret) {
+  const key = await crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  return base64url(await crypto.subtle.sign("HMAC", key, enc.encode(value)));
+}
+async function signValue(value, secret) {
+  return `${value}.${await hmac(value, secret)}`;
+}
+async function verifyValue(signed, secret) {
+  const idx = signed.lastIndexOf(".");
+  if (idx < 0) return null;
+  const value = signed.slice(0, idx);
+  const sig = signed.slice(idx + 1);
+  const expected = await hmac(value, secret);
+  if (sig.length !== expected.length) return null;
+  let diff = 0;
+  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);
+  return diff === 0 ? value : null;
+}
+function safeRedirectPath(to) {
+  return to.startsWith("/") && !to.startsWith("//") && !to.startsWith("/\\") ? to : "/";
+}
+function decodeTokenSlug(token) {
+  try {
+    const part = token.split(".")[1];
+    if (!part) return null;
+    const bytes = Uint8Array.from(atob(part.replace(/-/g, "+").replace(/_/g, "/")), (c) => c.charCodeAt(0));
+    const json = JSON.parse(new TextDecoder().decode(bytes));
+    return json.entrySlug ?? null;
+  } catch {
+    return null;
+  }
+}
+async function previewTokenValid(apiUrl, token, fetchImpl = fetch) {
+  const slug = decodeTokenSlug(token);
+  if (!slug) return false;
+  const res = await fetchImpl(`${apiUrl.replace(/\/+$/, "")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);
+  await res.body?.cancel().catch(() => {
+  });
+  return res.ok;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DRAFT_COOKIE,
+  decodeTokenSlug,
+  previewTokenValid,
+  safeRedirectPath,
+  signValue,
+  verifyValue
+});
+//# sourceMappingURL=draft.cjs.map

package/dist/draft.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;","names":[]}

package/dist/draft.d.cts

@@ -0,0 +1,24 @@
+/**
+ * Draft mode, shared by every framework adapter: the signed cookie that says "this visitor is
+ * previewing", the preview token's slug, and the redirect a draft route may follow.
+ *
+ * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter
+ * mounts its own routes around these; the rules live here once.
+ */
+/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */
+declare const DRAFT_COOKIE = "bcms-draft";
+/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */
+declare function signValue(value: string, secret: string): Promise<string>;
+/** The original value of a signed one, or null when it was tampered with. */
+declare function verifyValue(signed: string, secret: string): Promise<string | null>;
+/** Only same-origin relative paths: blocks "//evil.com", "https://evil.com" and "/\\evil.com". */
+declare function safeRedirectPath(to: string): string;
+/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */
+declare function decodeTokenSlug(token: string): string | null;
+/**
+ * Ask the backend whether a preview token is good: the backend is the signature authority, so a
+ * draft route enables draft mode only on its yes.
+ */
+declare function previewTokenValid(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<boolean>;
+
+export { DRAFT_COOKIE, decodeTokenSlug, previewTokenValid, safeRedirectPath, signValue, verifyValue };

package/dist/draft.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Draft mode, shared by every framework adapter: the signed cookie that says "this visitor is
+ * previewing", the preview token's slug, and the redirect a draft route may follow.
+ *
+ * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter
+ * mounts its own routes around these; the rules live here once.
+ */
+/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */
+declare const DRAFT_COOKIE = "bcms-draft";
+/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */
+declare function signValue(value: string, secret: string): Promise<string>;
+/** The original value of a signed one, or null when it was tampered with. */
+declare function verifyValue(signed: string, secret: string): Promise<string | null>;
+/** Only same-origin relative paths: blocks "//evil.com", "https://evil.com" and "/\\evil.com". */
+declare function safeRedirectPath(to: string): string;
+/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */
+declare function decodeTokenSlug(token: string): string | null;
+/**
+ * Ask the backend whether a preview token is good: the backend is the signature authority, so a
+ * draft route enables draft mode only on its yes.
+ */
+declare function previewTokenValid(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<boolean>;
+
+export { DRAFT_COOKIE, decodeTokenSlug, previewTokenValid, safeRedirectPath, signValue, verifyValue };

package/dist/draft.js

@@ -0,0 +1,56 @@
+// src/draft.ts
+var DRAFT_COOKIE = "bcms-draft";
+var enc = new TextEncoder();
+function base64url(bytes) {
+  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));
+  return b.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function hmac(value, secret) {
+  const key = await crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  return base64url(await crypto.subtle.sign("HMAC", key, enc.encode(value)));
+}
+async function signValue(value, secret) {
+  return `${value}.${await hmac(value, secret)}`;
+}
+async function verifyValue(signed, secret) {
+  const idx = signed.lastIndexOf(".");
+  if (idx < 0) return null;
+  const value = signed.slice(0, idx);
+  const sig = signed.slice(idx + 1);
+  const expected = await hmac(value, secret);
+  if (sig.length !== expected.length) return null;
+  let diff = 0;
+  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);
+  return diff === 0 ? value : null;
+}
+function safeRedirectPath(to) {
+  return to.startsWith("/") && !to.startsWith("//") && !to.startsWith("/\\") ? to : "/";
+}
+function decodeTokenSlug(token) {
+  try {
+    const part = token.split(".")[1];
+    if (!part) return null;
+    const bytes = Uint8Array.from(atob(part.replace(/-/g, "+").replace(/_/g, "/")), (c) => c.charCodeAt(0));
+    const json = JSON.parse(new TextDecoder().decode(bytes));
+    return json.entrySlug ?? null;
+  } catch {
+    return null;
+  }
+}
+async function previewTokenValid(apiUrl, token, fetchImpl = fetch) {
+  const slug = decodeTokenSlug(token);
+  if (!slug) return false;
+  const res = await fetchImpl(`${apiUrl.replace(/\/+$/, "")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);
+  await res.body?.cancel().catch(() => {
+  });
+  return res.ok;
+}
+export {
+  DRAFT_COOKIE,
+  decodeTokenSlug,
+  previewTokenValid,
+  safeRedirectPath,
+  signValue,
+  verifyValue
+};
+//# sourceMappingURL=draft.js.map

package/dist/draft.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n"],"mappings":";AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;","names":[]}