@bettercms-ai/sdk 1.33.0 → 1.35.0

package/dist/draft.cjs

@@ -22,6 +22,9 @@ var draft_exports = {};
 __export(draft_exports, {
   DRAFT_COOKIE: () => DRAFT_COOKIE,
   decodeTokenSlug: () => decodeTokenSlug,
+  draftDisableResponse: () => draftDisableResponse,
+  draftEnableResponse: () => draftEnableResponse,
+  draftTokenFrom: () => draftTokenFrom,
   previewTokenValid: () => previewTokenValid,
   safeRedirectPath: () => safeRedirectPath,
   signValue: () => signValue,
@@ -74,10 +77,39 @@ async function previewTokenValid(apiUrl, token, fetchImpl = fetch) {
   });
   return res.ok;
 }
+async function draftTokenFrom(cookieHeader, secret) {
+  if (!cookieHeader || !secret) return null;
+  const m = new RegExp(`(?:^|;\\s*)${DRAFT_COOKIE}=([^;]+)`).exec(cookieHeader);
+  if (!m) return null;
+  try {
+    return await verifyValue(decodeURIComponent(m[1]), secret);
+  } catch {
+    return null;
+  }
+}
+async function draftEnableResponse(request, opts) {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!opts.secret) return new Response("BCMS_DRAFT_SECRET is not configured", { status: 500 });
+  if (!token) return new Response("Missing token", { status: 400 });
+  if (!await previewTokenValid(opts.apiUrl, token, opts.fetchImpl)) return new Response("Invalid or expired token", { status: 401 });
+  const cookie = `${DRAFT_COOKIE}=${encodeURIComponent(await signValue(token, opts.secret))}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400${url.protocol === "https:" ? "; Secure" : ""}`;
+  return new Response(null, { status: 302, headers: { Location: safeRedirectPath(url.searchParams.get("redirect") ?? "/"), "Set-Cookie": cookie } });
+}
+function draftDisableResponse(request) {
+  const url = new URL(request.url);
+  return new Response(null, {
+    status: 302,
+    headers: { Location: safeRedirectPath(url.searchParams.get("redirect") ?? "/"), "Set-Cookie": `${DRAFT_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0` }
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DRAFT_COOKIE,
   decodeTokenSlug,
+  draftDisableResponse,
+  draftEnableResponse,
+  draftTokenFrom,
   previewTokenValid,
   safeRedirectPath,
   signValue,

package/dist/draft.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;","names":[]}
+{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n\n/** The draft cookie's preview token from a `Cookie` header, or null when absent or tampered with. */\nexport async function draftTokenFrom(cookieHeader: string | null | undefined, secret: string | undefined): Promise<string | null> {\n  if (!cookieHeader || !secret) return null;\n  const m = new RegExp(`(?:^|;\\\\s*)${DRAFT_COOKIE}=([^;]+)`).exec(cookieHeader);\n  if (!m) return null;\n  try {\n    return await verifyValue(decodeURIComponent(m[1]!), secret);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The draft-enable route for any server that speaks Web `Request`/`Response` (SvelteKit `+server.ts`,\n * Nuxt via `toWebRequest`, Remix, Hono): `GET ?token=…&redirect=/x` checks the token with the\n * backend, sets the signed draft cookie and redirects. 401 on a refused token; 500 without a secret.\n */\nexport async function draftEnableResponse(request: Request, opts: { apiUrl: string; secret: string | undefined; fetchImpl?: typeof fetch }): Promise<Response> {\n  const url = new URL(request.url);\n  const token = url.searchParams.get(\"token\");\n  if (!opts.secret) return new Response(\"BCMS_DRAFT_SECRET is not configured\", { status: 500 });\n  if (!token) return new Response(\"Missing token\", { status: 400 });\n  if (!(await previewTokenValid(opts.apiUrl, token, opts.fetchImpl))) return new Response(\"Invalid or expired token\", { status: 401 });\n  const cookie = `${DRAFT_COOKIE}=${encodeURIComponent(await signValue(token, opts.secret))}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400${url.protocol === \"https:\" ? \"; Secure\" : \"\"}`;\n  return new Response(null, { status: 302, headers: { Location: safeRedirectPath(url.searchParams.get(\"redirect\") ?? \"/\"), \"Set-Cookie\": cookie } });\n}\n\n/** Leave draft mode: clear the cookie and redirect (`?redirect=/x`, same-origin only). */\nexport function draftDisableResponse(request: Request): Response {\n  const url = new URL(request.url);\n  return new Response(null, {\n    status: 302,\n    headers: { Location: safeRedirectPath(url.searchParams.get(\"redirect\") ?? \"/\"), \"Set-Cookie\": `${DRAFT_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0` },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;AAGA,eAAsB,eAAe,cAAyC,QAAoD;AAChI,MAAI,CAAC,gBAAgB,CAAC,OAAQ,QAAO;AACrC,QAAM,IAAI,IAAI,OAAO,cAAc,YAAY,UAAU,EAAE,KAAK,YAAY;AAC5E,MAAI,CAAC,EAAG,QAAO;AACf,MAAI;AACF,WAAO,MAAM,YAAY,mBAAmB,EAAE,CAAC,CAAE,GAAG,MAAM;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,eAAsB,oBAAoB,SAAkB,MAAmG;AAC7J,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,MAAI,CAAC,KAAK,OAAQ,QAAO,IAAI,SAAS,uCAAuC,EAAE,QAAQ,IAAI,CAAC;AAC5F,MAAI,CAAC,MAAO,QAAO,IAAI,SAAS,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAChE,MAAI,CAAE,MAAM,kBAAkB,KAAK,QAAQ,OAAO,KAAK,SAAS,EAAI,QAAO,IAAI,SAAS,4BAA4B,EAAE,QAAQ,IAAI,CAAC;AACnI,QAAM,SAAS,GAAG,YAAY,IAAI,mBAAmB,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,kDAAkD,IAAI,aAAa,WAAW,aAAa,EAAE;AACtL,SAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,UAAU,iBAAiB,IAAI,aAAa,IAAI,UAAU,KAAK,GAAG,GAAG,cAAc,OAAO,EAAE,CAAC;AACnJ;AAGO,SAAS,qBAAqB,SAA4B;AAC/D,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,SAAO,IAAI,SAAS,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR,SAAS,EAAE,UAAU,iBAAiB,IAAI,aAAa,IAAI,UAAU,KAAK,GAAG,GAAG,cAAc,GAAG,YAAY,+CAA+C;AAAA,EAC9J,CAAC;AACH;","names":[]}

package/dist/draft.d.cts

@@ -20,5 +20,19 @@ declare function decodeTokenSlug(token: string): string | null;
  * draft route enables draft mode only on its yes.
  */
 declare function previewTokenValid(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<boolean>;
+/** The draft cookie's preview token from a `Cookie` header, or null when absent or tampered with. */
+declare function draftTokenFrom(cookieHeader: string | null | undefined, secret: string | undefined): Promise<string | null>;
+/**
+ * The draft-enable route for any server that speaks Web `Request`/`Response` (SvelteKit `+server.ts`,
+ * Nuxt via `toWebRequest`, Remix, Hono): `GET ?token=…&redirect=/x` checks the token with the
+ * backend, sets the signed draft cookie and redirects. 401 on a refused token; 500 without a secret.
+ */
+declare function draftEnableResponse(request: Request, opts: {
+    apiUrl: string;
+    secret: string | undefined;
+    fetchImpl?: typeof fetch;
+}): Promise<Response>;
+/** Leave draft mode: clear the cookie and redirect (`?redirect=/x`, same-origin only). */
+declare function draftDisableResponse(request: Request): Response;
 
-export { DRAFT_COOKIE, decodeTokenSlug, previewTokenValid, safeRedirectPath, signValue, verifyValue };
+export { DRAFT_COOKIE, decodeTokenSlug, draftDisableResponse, draftEnableResponse, draftTokenFrom, previewTokenValid, safeRedirectPath, signValue, verifyValue };

package/dist/draft.d.ts

@@ -20,5 +20,19 @@ declare function decodeTokenSlug(token: string): string | null;
  * draft route enables draft mode only on its yes.
  */
 declare function previewTokenValid(apiUrl: string, token: string, fetchImpl?: typeof fetch): Promise<boolean>;
+/** The draft cookie's preview token from a `Cookie` header, or null when absent or tampered with. */
+declare function draftTokenFrom(cookieHeader: string | null | undefined, secret: string | undefined): Promise<string | null>;
+/**
+ * The draft-enable route for any server that speaks Web `Request`/`Response` (SvelteKit `+server.ts`,
+ * Nuxt via `toWebRequest`, Remix, Hono): `GET ?token=…&redirect=/x` checks the token with the
+ * backend, sets the signed draft cookie and redirects. 401 on a refused token; 500 without a secret.
+ */
+declare function draftEnableResponse(request: Request, opts: {
+    apiUrl: string;
+    secret: string | undefined;
+    fetchImpl?: typeof fetch;
+}): Promise<Response>;
+/** Leave draft mode: clear the cookie and redirect (`?redirect=/x`, same-origin only). */
+declare function draftDisableResponse(request: Request): Response;
 
-export { DRAFT_COOKIE, decodeTokenSlug, previewTokenValid, safeRedirectPath, signValue, verifyValue };
+export { DRAFT_COOKIE, decodeTokenSlug, draftDisableResponse, draftEnableResponse, draftTokenFrom, previewTokenValid, safeRedirectPath, signValue, verifyValue };

package/dist/draft.js

@@ -45,9 +45,38 @@ async function previewTokenValid(apiUrl, token, fetchImpl = fetch) {
   });
   return res.ok;
 }
+async function draftTokenFrom(cookieHeader, secret) {
+  if (!cookieHeader || !secret) return null;
+  const m = new RegExp(`(?:^|;\\s*)${DRAFT_COOKIE}=([^;]+)`).exec(cookieHeader);
+  if (!m) return null;
+  try {
+    return await verifyValue(decodeURIComponent(m[1]), secret);
+  } catch {
+    return null;
+  }
+}
+async function draftEnableResponse(request, opts) {
+  const url = new URL(request.url);
+  const token = url.searchParams.get("token");
+  if (!opts.secret) return new Response("BCMS_DRAFT_SECRET is not configured", { status: 500 });
+  if (!token) return new Response("Missing token", { status: 400 });
+  if (!await previewTokenValid(opts.apiUrl, token, opts.fetchImpl)) return new Response("Invalid or expired token", { status: 401 });
+  const cookie = `${DRAFT_COOKIE}=${encodeURIComponent(await signValue(token, opts.secret))}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400${url.protocol === "https:" ? "; Secure" : ""}`;
+  return new Response(null, { status: 302, headers: { Location: safeRedirectPath(url.searchParams.get("redirect") ?? "/"), "Set-Cookie": cookie } });
+}
+function draftDisableResponse(request) {
+  const url = new URL(request.url);
+  return new Response(null, {
+    status: 302,
+    headers: { Location: safeRedirectPath(url.searchParams.get("redirect") ?? "/"), "Set-Cookie": `${DRAFT_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0` }
+  });
+}
 export {
   DRAFT_COOKIE,
   decodeTokenSlug,
+  draftDisableResponse,
+  draftEnableResponse,
+  draftTokenFrom,
   previewTokenValid,
   safeRedirectPath,
   signValue,

package/dist/draft.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n"],"mappings":";AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;","names":[]}
+{"version":3,"sources":["../src/draft.ts"],"sourcesContent":["/**\n * Draft mode, shared by every framework adapter: the signed cookie that says \"this visitor is\n * previewing\", the preview token's slug, and the redirect a draft route may follow.\n *\n * Web Crypto and `atob` only, so it runs in Node, edge runtimes and workers alike. Each adapter\n * mounts its own routes around these; the rules live here once.\n */\n\n/** The draft cookie every adapter sets: one name, so an editor link works on any framework. */\nexport const DRAFT_COOKIE = \"bcms-draft\";\n\nconst enc = new TextEncoder();\n\nfunction base64url(bytes: ArrayBuffer): string {\n  const b = btoa(String.fromCharCode(...new Uint8Array(bytes)));\n  return b.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nasync function hmac(value: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\"raw\", enc.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  return base64url(await crypto.subtle.sign(\"HMAC\", key, enc.encode(value)));\n}\n\n/** Sign a value as `value.sig` for tamper-evident cookie storage (HMAC-SHA256, base64url). */\nexport async function signValue(value: string, secret: string): Promise<string> {\n  return `${value}.${await hmac(value, secret)}`;\n}\n\n/** The original value of a signed one, or null when it was tampered with. */\nexport async function verifyValue(signed: string, secret: string): Promise<string | null> {\n  const idx = signed.lastIndexOf(\".\");\n  if (idx < 0) return null;\n  const value = signed.slice(0, idx);\n  const sig = signed.slice(idx + 1);\n  const expected = await hmac(value, secret);\n  if (sig.length !== expected.length) return null;\n  let diff = 0;\n  for (let i = 0; i < sig.length; i++) diff |= sig.charCodeAt(i) ^ expected.charCodeAt(i);\n  return diff === 0 ? value : null;\n}\n\n/** Only same-origin relative paths: blocks \"//evil.com\", \"https://evil.com\" and \"/\\\\evil.com\". */\nexport function safeRedirectPath(to: string): string {\n  return to.startsWith(\"/\") && !to.startsWith(\"//\") && !to.startsWith(\"/\\\\\") ? to : \"/\";\n}\n\n/** A preview token's `entrySlug`, read from its payload UNVERIFIED (the backend verifies it). */\nexport function decodeTokenSlug(token: string): string | null {\n  try {\n    const part = token.split(\".\")[1];\n    if (!part) return null;\n    // atob gives bytes as Latin-1: decoded as UTF-8, a slug like `über-uns` survives.\n    const bytes = Uint8Array.from(atob(part.replace(/-/g, \"+\").replace(/_/g, \"/\")), (c) => c.charCodeAt(0));\n    const json = JSON.parse(new TextDecoder().decode(bytes)) as { entrySlug?: string };\n    return json.entrySlug ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Ask the backend whether a preview token is good: the backend is the signature authority, so a\n * draft route enables draft mode only on its yes.\n */\nexport async function previewTokenValid(apiUrl: string, token: string, fetchImpl: typeof fetch = fetch): Promise<boolean> {\n  const slug = decodeTokenSlug(token);\n  if (!slug) return false;\n  const res = await fetchImpl(`${apiUrl.replace(/\\/+$/, \"\")}/api/v1/preview/${encodeURIComponent(slug)}?token=${encodeURIComponent(token)}`);\n  await res.body?.cancel().catch(() => {});\n  return res.ok;\n}\n\n/** The draft cookie's preview token from a `Cookie` header, or null when absent or tampered with. */\nexport async function draftTokenFrom(cookieHeader: string | null | undefined, secret: string | undefined): Promise<string | null> {\n  if (!cookieHeader || !secret) return null;\n  const m = new RegExp(`(?:^|;\\\\s*)${DRAFT_COOKIE}=([^;]+)`).exec(cookieHeader);\n  if (!m) return null;\n  try {\n    return await verifyValue(decodeURIComponent(m[1]!), secret);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The draft-enable route for any server that speaks Web `Request`/`Response` (SvelteKit `+server.ts`,\n * Nuxt via `toWebRequest`, Remix, Hono): `GET ?token=…&redirect=/x` checks the token with the\n * backend, sets the signed draft cookie and redirects. 401 on a refused token; 500 without a secret.\n */\nexport async function draftEnableResponse(request: Request, opts: { apiUrl: string; secret: string | undefined; fetchImpl?: typeof fetch }): Promise<Response> {\n  const url = new URL(request.url);\n  const token = url.searchParams.get(\"token\");\n  if (!opts.secret) return new Response(\"BCMS_DRAFT_SECRET is not configured\", { status: 500 });\n  if (!token) return new Response(\"Missing token\", { status: 400 });\n  if (!(await previewTokenValid(opts.apiUrl, token, opts.fetchImpl))) return new Response(\"Invalid or expired token\", { status: 401 });\n  const cookie = `${DRAFT_COOKIE}=${encodeURIComponent(await signValue(token, opts.secret))}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400${url.protocol === \"https:\" ? \"; Secure\" : \"\"}`;\n  return new Response(null, { status: 302, headers: { Location: safeRedirectPath(url.searchParams.get(\"redirect\") ?? \"/\"), \"Set-Cookie\": cookie } });\n}\n\n/** Leave draft mode: clear the cookie and redirect (`?redirect=/x`, same-origin only). */\nexport function draftDisableResponse(request: Request): Response {\n  const url = new URL(request.url);\n  return new Response(null, {\n    status: 302,\n    headers: { Location: safeRedirectPath(url.searchParams.get(\"redirect\") ?? \"/\"), \"Set-Cookie\": `${DRAFT_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0` },\n  });\n}\n"],"mappings":";AASO,IAAM,eAAe;AAE5B,IAAM,MAAM,IAAI,YAAY;AAE5B,SAAS,UAAU,OAA4B;AAC7C,QAAM,IAAI,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;AAC5D,SAAO,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACpE;AAEA,eAAe,KAAK,OAAe,QAAiC;AAClE,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,MAAM,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AACvH,SAAO,UAAU,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;AAC3E;AAGA,eAAsB,UAAU,OAAe,QAAiC;AAC9E,SAAO,GAAG,KAAK,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC;AAC9C;AAGA,eAAsB,YAAY,QAAgB,QAAwC;AACxF,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;AACjC,QAAM,MAAM,OAAO,MAAM,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM,KAAK,OAAO,MAAM;AACzC,MAAI,IAAI,WAAW,SAAS,OAAQ,QAAO;AAC3C,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAQ,IAAI,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC;AACtF,SAAO,SAAS,IAAI,QAAQ;AAC9B;AAGO,SAAS,iBAAiB,IAAoB;AACnD,SAAO,GAAG,WAAW,GAAG,KAAK,CAAC,GAAG,WAAW,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,IAAI,KAAK;AACpF;AAGO,SAAS,gBAAgB,OAA8B;AAC5D,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,CAAC,KAAM,QAAO;AAElB,UAAM,QAAQ,WAAW,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACtG,UAAM,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACvD,WAAO,KAAK,aAAa;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,kBAAkB,QAAgB,OAAe,YAA0B,OAAyB;AACxH,QAAM,OAAO,gBAAgB,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,QAAQ,EAAE,CAAC,mBAAmB,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC,EAAE;AACzI,QAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,SAAO,IAAI;AACb;AAGA,eAAsB,eAAe,cAAyC,QAAoD;AAChI,MAAI,CAAC,gBAAgB,CAAC,OAAQ,QAAO;AACrC,QAAM,IAAI,IAAI,OAAO,cAAc,YAAY,UAAU,EAAE,KAAK,YAAY;AAC5E,MAAI,CAAC,EAAG,QAAO;AACf,MAAI;AACF,WAAO,MAAM,YAAY,mBAAmB,EAAE,CAAC,CAAE,GAAG,MAAM;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,eAAsB,oBAAoB,SAAkB,MAAmG;AAC7J,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,MAAI,CAAC,KAAK,OAAQ,QAAO,IAAI,SAAS,uCAAuC,EAAE,QAAQ,IAAI,CAAC;AAC5F,MAAI,CAAC,MAAO,QAAO,IAAI,SAAS,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAChE,MAAI,CAAE,MAAM,kBAAkB,KAAK,QAAQ,OAAO,KAAK,SAAS,EAAI,QAAO,IAAI,SAAS,4BAA4B,EAAE,QAAQ,IAAI,CAAC;AACnI,QAAM,SAAS,GAAG,YAAY,IAAI,mBAAmB,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,kDAAkD,IAAI,aAAa,WAAW,aAAa,EAAE;AACtL,SAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,UAAU,iBAAiB,IAAI,aAAa,IAAI,UAAU,KAAK,GAAG,GAAG,cAAc,OAAO,EAAE,CAAC;AACnJ;AAGO,SAAS,qBAAqB,SAA4B;AAC/D,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,SAAO,IAAI,SAAS,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR,SAAS,EAAE,UAAU,iBAAiB,IAAI,aAAa,IAAI,UAAU,KAAK,GAAG,GAAG,cAAc,GAAG,YAAY,+CAA+C;AAAA,EAC9J,CAAC;AACH;","names":[]}

package/dist/index.d.cts

@@ -1,7 +1,10 @@
 import * as _bettercms_ai_types from '@bettercms-ai/types';
-import { ContentPageResult, Content, DeliveredLayout, ContentModelField, Fieldset, ComponentPreview, BetterCMSErrorCode, LayoutStructureDocument, LayoutDataDocument, PageLayoutOverrideDocument, ManagementLayoutCommand, AuthUser, AuthSession, SignInInput, SignUpInput, Perspective, DeliveryEntry, DeliveryList, DeliveryPage, DeliveryComponent, Page, MediaAsset, FormField, Form, FormSubmission, Workspace, ApiKey, ApiKeyPermission, ApiKeyTokenType } from '@bettercms-ai/types';
+import { ContentPageResult, Content, DeliveredLayout, ContentModelField, Fieldset, ComponentPreview, LayoutStructureDocument, LayoutDataDocument, PageLayoutOverrideDocument, ManagementLayoutCommand, AuthUser, AuthSession, SignInInput, SignUpInput, Page, MediaAsset, FormField, Form, FormSubmission, Workspace, ApiKey, ApiKeyPermission, ApiKeyTokenType } from '@bettercms-ai/types';
 export { ApiError, ApiKey, ApiKeyPermission, ApiKeyTokenType, AssertEqual, AuthSession, AuthUser, BetterCMSErrorCode, BlockType, ButtonBlock, ButtonProps, ColumnsBlock, ColumnsProps, Content, ContentBlock, ContentEntry, ContentModel, ContentModelField, ContentPageResult, ContentResponse, DeepReadonly, DeliveryComponent, DeliveryEntry, DeliveryList, DeliveryPage, Form, FormBlock, FormField, FormProps, FormSubmission, HeadingBlock, HeadingProps, ImageBlock, ImageProps, MediaAsset, Page, PageMetaJson, PaginatedResult, Perspective, Redirect, SignInInput, SignUpInput, SiteSeoDefaults, SpacerBlock, SpacerProps, TextBlock, TextProps, VideoBlock, VideoProps, Workspace, getBlockType, isBlock } from '@bettercms-ai/types';
+import { D as DeliveryFormField } from './read-client-tNsCHy0p.cjs';
+export { a as BCMSClientError, E as BCMSErrorCodes, a as BetterCMSError, B as BetterCMSReadClient, C as CreateClientOptions, b as DeliveryForm, c as DeliveryFormFieldType, E as ErrorCodes, F as FormSubmitError, d as FormValue, e as FormValues, G as GetEntryOptions, L as ListEntriesOptions, f as ListPagesOptions, S as SubmitFormOptions, g as SubmitFormResult, h as asStringArray, i as createClient, j as formInitialValues, k as isMultiValueField, s as shouldShowField, l as submitForm, t as toggleOption } from './read-client-tNsCHy0p.cjs';
 export { ResolvedSeo, SeoInput, SeoLocation, entrySeoInput, resolveSeo } from './seo.cjs';
+export { SearchHit, SearchOptions, search } from './read.cjs';
 export { ImageFit, ImageFormat, ImageSource, ImageUrlBuilder, ImageUrlOptions, imageUrl, default as imageUrlBuilder, imageValueObjectPosition, imageValueUrl } from '@bettercms-ai/image-url';
 
 /**
@@ -600,253 +603,6 @@ interface ManagedMediaAsset {
     createdAt: string;
 }
 
-/** Semantic error codes used by the SDK. */
-declare const ErrorCodes: {
-    readonly CONTENT_NOT_FOUND: "CONTENT_NOT_FOUND";
-    readonly UNAUTHORIZED: "UNAUTHORIZED";
-    readonly FORBIDDEN: "FORBIDDEN";
-    readonly RATE_LIMITED: "RATE_LIMITED";
-    readonly INTERNAL_ERROR: "INTERNAL_ERROR";
-    readonly VALIDATION_ERROR: "VALIDATION_ERROR";
-    readonly NETWORK_ERROR: "NETWORK_ERROR";
-    readonly ADMIN_NOT_IMPLEMENTED: "ADMIN_NOT_IMPLEMENTED";
-};
-/**
- * BetterCMSError — normalized SDK error with a semantic code.
- */
-declare class BetterCMSError extends Error {
-    readonly status: number;
-    readonly code: BetterCMSErrorCode;
-    /**
-     * Raw machine-readable `code` from the response body (e.g. "PROJECT_DELETED"),
-     * when the API supplies one. Distinct from `code` (which is derived from the
-     * HTTP status), this lets callers branch on a specific server condition that
-     * shares a status with others (e.g. 409 slug-conflict vs 409 project-deleted).
-     */
-    readonly bodyCode?: string;
-    /**
-     * Per-field validation messages from a 400 `{ errors: { field: message } }` body.
-     * The backend returns validation failures in this shape (not `message`/`error`), so
-     * without this the SDK collapsed every validation 400 to a bare "Bad Request" with no
-     * hint which field or rule failed (FLO-474). Mirrors the forms client's `fieldErrors`.
-     */
-    readonly fieldErrors?: Record<string, string>;
-    /**
-     * The parsed response body, when there was one.
-     *
-     * Several refusals carry STRUCTURED detail that neither `message` nor `fieldErrors` can hold,
-     * and which is the whole point of the refusal: a component publish 409s with the full
-     * `readiness` tuple (what evidence is missing, whether a human still has to approve it) and
-     * 422s with the `issues` naming the Layouts it would break. Collapsing those to a sentence
-     * leaves a caller able to report that something failed and not what to do about it.
-     */
-    readonly body?: unknown;
-    constructor(message: string, status: number, code: BetterCMSErrorCode, bodyCode?: string, fieldErrors?: Record<string, string>, body?: unknown);
-    toJSON(): {
-        name: string;
-        message: string;
-        status: number;
-        code: BetterCMSErrorCode;
-        bodyCode: string | undefined;
-        fieldErrors: Record<string, string> | undefined;
-    };
-    /**
-     * Factory — creates a BetterCMSError from a failed fetch Response. Reads the body's
-     * `message` (or `error`) for the human message and `code` for a machine-readable
-     * condition surfaced as `bodyCode`. Validation failures arrive as `{ errors: {...} }`
-     * (no `message`/`error`), so fall back to the first field error for the message and
-     * expose the full map as `fieldErrors` (FLO-474).
-     */
-    static from(res: Response): Promise<BetterCMSError>;
-}
-
-/**
- * Public forms — the headless integration surface for sites built on or imported
- * into BetterCMS (the "render it yourself" model, like Sanity's delivery API).
- *
- * Form definitions ship in the build-time content snapshot (`bcms-content.json` →
- * `forms` / `turnstileSiteKey`) and from `GET /api/v1/delivery/:workspace/forms`.
- * A site renders them with its own components (see `@bettercms-ai/next`'s <BcmsForm>)
- * and posts here. No API key — the endpoint is Turnstile-gated (Webflow model).
- *
- * This module is the single source of truth for the delivered form shape + the
- * pure logic (conditional visibility, initial values) the renderers share, so the
- * vanilla embed and the React component never drift.
- */
-
-/**
- * Field types the delivery API serializes. Must stay equal to the authoring
- * vocabulary in `packages/db/src/schema/forms.ts` — this list is what every site
- * renderer switches on, so a type missing HERE renders as a plain text input on
- * every published site while the builder happily offers it. `radio`/`checkboxes`
- * were exactly that gap.
- */
-type DeliveryFormFieldType = "text" | "email" | "phone" | "url" | "number" | "date" | "textarea" | "select" | "radio" | "checkboxes" | "checkbox" | "consent" | "hidden" | "step";
-interface DeliveryFormField {
-    key: string;
-    label: string;
-    type: DeliveryFormFieldType;
-    placeholder?: string;
-    /** Hint rendered under the control. */
-    helpText?: string;
-    required?: boolean;
-    options?: string[];
-    defaultValue?: string;
-    /** Conditional visibility — render this field only when another field equals `equals`. */
-    showIf?: {
-        field: string;
-        equals: string;
-    };
-    /**
-     * Per-field rules the API enforces on submit. Renderers should mirror them onto the
-     * native control (`min`/`max`/`pattern`) so the browser reports them before the round
-     * trip — the server check is the one that counts.
-     */
-    validation?: DeliveryFormFieldValidation;
-    /**
-     * Presentation options the renderer honours. Unlike `validation`, the API does NOT enforce
-     * these on submit — they change what the visitor is shown, not what is accepted.
-     */
-    ui?: DeliveryFormFieldUi;
-}
-/**
- * @see FormFieldUi in @bettercms-ai/types — same shape, delivered to the site.
- *
- * ── The phone composition contract every renderer implements ──
- *
- * A picker-enabled phone field is rendered as a country control PLUS a `tel` input, but it
- * submits ONE value under the field's own key, in E.164. Whatever a renderer uses to hold the
- * country (a React state, a `{key}__country` select) is scaffolding: it must never reach the
- * POST body.
- *
- * Composition, from the visible input's raw text:
- *   - empty → `""`. NEVER `"+CC"`, and the reason is worse than "the server rejects it". The
- *     server's loose phone shape is `{3,32}` chars, so the outcome depends on the calling
- *     code's length: `"+1"` is REFUSED (an optional untouched field starts 400ing), while
- *     `"+91"` is ACCEPTED and stored as a real-looking submission that is only a country code.
- *     The silent case is the dangerous one. Pinned in `__tests__/lib/forms-validate.test.ts`.
- *   - starts with `"+"` → `"+" + digits(raw)`. The visitor typed an international number; the
- *     country control is ignored rather than fighting them.
- *   - otherwise → `"+" + callingCode + digits(raw).replace(/^0/, "")`, dropping ONE trunk zero.
- *     Known exception: Italian landlines keep their trunk zero, so this loses it. The value is
- *     still accepted (shape-only check) — it is a formatting loss, not a refusal.
- *
- * `ui` changes what the visitor SEES. It never changes what the API accepts: enforcing a format
- * is `validation.phoneFormat`'s job and the two are independent.
- *
- * Renderer parity is behavioural, not implementational. FIVE lanes render this field, and they
- * agree on the VALUE, not on the implementation:
- *
- *   | Lane                          | Control                         | As-you-type formatting |
- *   |-------------------------------|---------------------------------|------------------------|
- *   | dashboard form preview        | searchable picker + formatter   | yes                    |
- *   | @bettercms-ai/next <BcmsForm> | native select + formatter       | yes (lazy chunk)       |
- *   | hosted sites (render-page)    | native select + tel input       | NO                     |
- *   | embed snippet                 | native select + tel input       | NO                     |
- *   | @bettercms-ai/astro BcmsForm  | native select + tel input       | NO                     |
- *
- * The missing as-you-type formatting on the three vanilla lanes is a NAMED degradation, not an
- * oversight: it is what keeps libphonenumber off a visitor's page entirely. `packages/next`
- * pays for it only on pages that actually render a picker, via a separate chunk.
- *
- * When a lane builds that option list, never pass a libphonenumber helper as a bare callback:
- * `getCountries().filter(isSupportedCountry)` hands it the array INDEX as its `metadata`
- * argument and throws. Always wrap — `.filter((iso) => isSupportedCountry(iso))`.
- *
- * And when a lane ships the composition rule inside a JS TEMPLATE LITERAL (the embed snippet
- * does), `\D` collapses to `D` and the regex silently becomes `/D/g` — stripping the letter D
- * and leaving every other separator in place. Write `\\D` there. Raw HTML `<script>` text (the
- * hosted renderer, the Astro inline script) takes a single backslash. Nothing throws either
- * way; numbers just arrive malformed, so each lane pins it with an executed-script test.
- */
-interface DeliveryFormFieldUi {
-    /** `phone` — render a country picker beside the number. The submitted value is E.164. */
-    countryPicker?: boolean;
-    /** `phone` — uppercase ISO 3166-1 alpha-2 the picker starts on. */
-    defaultCountry?: string;
-    /**
-     * `phone` — show the country's flag beside the dialling code.
-     *
-     * Honoured only by a renderer with a custom picker. The native `<select>` the site lanes use
-     * cannot hold an SVG, and an emoji flag renders as two grey letters on Windows, so those
-     * lanes show the country NAME instead — the same information, legibly, everywhere.
-     */
-    showFlags?: boolean;
-}
-/** @see FormFieldValidation in @bettercms-ai/types — same shape, delivered to the site. */
-interface DeliveryFormFieldValidation {
-    emailPolicy?: "any" | "business";
-    min?: number;
-    max?: number;
-    phoneFormat?: "any" | "e164";
-    pattern?: string;
-}
-/** The pick-many type, whose value is an array rather than a scalar. */
-declare function isMultiValueField(type: DeliveryFormFieldType): boolean;
-/** A form as delivered to a published/imported site. Mirrors the delivery `/forms` payload. */
-interface DeliveryForm {
-    id: string;
-    name: string;
-    /** The project the form belongs to. */
-    projectId?: string | null;
-    /**
-     * A `draft` form refuses every submission: render it as unavailable rather than as a form that
-     * silently drops what a visitor sends. Delivered for exactly that reason, and missing from this
-     * type until the contract test held the two together.
-     */
-    status?: "draft" | "published" | (string & {});
-    /** Set on a form the site's owner told BetterCMS to leave alone (ISO time); such a form is not wired. */
-    ignoredAt?: string | null;
-    fields: DeliveryFormField[];
-    submitLabel?: string;
-    successMessage?: string;
-    redirectUrl?: string;
-    turnstileEnabled?: boolean;
-    honeypotField?: string | null;
-}
-/** `string[]` is the `checkboxes` (pick-many) value; every other type is scalar. */
-type FormValue = string | boolean | string[];
-type FormValues = Record<string, FormValue>;
-/** Read a `checkboxes` value defensively — stored data may predate the array shape. */
-declare function asStringArray(value: FormValue | undefined): string[];
-/** Add/remove `option` from a `checkboxes` value, preserving the field's option order. */
-declare function toggleOption(value: FormValue | undefined, option: string, on: boolean): string[];
-/**
- * Conditional visibility. A `showIf` field is shown only when its trigger field's
- * current value equals the target; non-conditional fields are always shown. The
- * renderer must skip hidden fields when collecting/validating so a hidden required
- * field never blocks submit.
- */
-declare function shouldShowField(field: DeliveryFormField, values: FormValues): boolean;
-/**
- * Build the initial value map: checkbox/consent default to false, checkboxes to an
- * empty array, every other field to its `defaultValue`, with `prefill` (e.g. URL
- * query params) taking precedence.
- */
-declare function formInitialValues(form: DeliveryForm, prefill?: Record<string, string>): FormValues;
-interface SubmitFormOptions {
-    formId: string;
-    data: FormValues;
-    /** Cloudflare Turnstile token; required when the form has `turnstileEnabled`. */
-    turnstileToken?: string;
-    /** API origin. Defaults to https://api.bettercms.ai. */
-    baseUrl?: string;
-    /** Injectable fetch for tests / non-browser runtimes. */
-    fetchImpl?: typeof fetch;
-}
-interface SubmitFormResult {
-    id: string;
-}
-/** A submit failure that carries per-field validation messages from the API (HTTP 400). */
-type FormSubmitError = BetterCMSError & {
-    fieldErrors?: Record<string, string>;
-};
-/**
- * Submit a public form. Resolves with the new submission id, or throws a
- * BetterCMSError — field-level validation errors are attached as `.fieldErrors`.
- */
-declare function submitForm(opts: SubmitFormOptions): Promise<SubmitFormResult>;
-
 /**
  * Management API SDK methods — read-only form discovery.
  *
@@ -1168,113 +924,6 @@ declare const BetterCMS: {
     signUp(options: SignUpInput): Promise<AuthResult>;
 };
 
-/**
- * createClient — framework-agnostic typed read client for the Delivery API.
- *
- * Shared by @bettercms-ai/astro and @bettercms-ai/next so the fetch/typing/retry
- * logic lives in one place. Read-only; for schema authoring use the
- * Management client, for sessions use the Admin client.
- *
- *   const client = createClient({ apiUrl, workspace, apiKey });
- *   await client.getPage("home");
- *   await client.listEntries({ model: "post", perPage: 50 });
- */
-
-interface CreateClientOptions {
-    /** Backend base, e.g. `https://api.bettercms.ai` (no trailing slash needed). */
-    apiUrl: string;
-    /** Workspace slug. */
-    workspace: string;
-    /** Delivery API key. Use a `content:read:draft` key for drafts. */
-    apiKey?: string;
-    /**
-     * The project every read is addressed to. A workspace holds many projects whose slugs
-     * collide (each has a `blog` model and a `home` page), so a site names its own; published
-     * reads need no key for it. BetterCMS hosting supplies `PUBLIC_BCMS_PROJECT_ID`.
-     */
-    projectId?: string;
-    /** `published` (default) or `drafts`. */
-    perspective?: Perspective;
-    /**
-     * Preview-token JWT for token-based single-document draft reads via the
-     * `/preview/:slug` endpoint. Only used when `perspective === "drafts"`.
-     */
-    previewToken?: string;
-    /**
-     * Embed invisible visual-editing provenance in draft reads, so a preview build can
-     * deep-link each rendered value back to its editor. Requires `perspective: "drafts"`,
-     * and then either a `previewToken` or a `content:read:draft` key. Ignored on published
-     * reads — the payload must never reach a production build.
-     *
-     * **Defaults to `true` on `perspective: "drafts"`** (since 1.15.0). Provenance is the whole
-     * reason the drafts perspective exists in a preview build, and an option nobody knew to pass
-     * meant every such build rendered anonymous strings: the editor could bind them only by
-     * guessing at their text. It stays OFF on every other perspective, unconditionally, so a
-     * published build cannot acquire a payload by accident — pass `stega: false` to opt a draft
-     * read out (a diff or a checksum over draft content is the case that wants it).
-     */
-    stega?: boolean;
-    /** Per-attempt timeout in ms. Defaults to 10000. */
-    timeout?: number;
-    /**
-     * Collapse identical GETs to one network round-trip for the life of this client.
-     * Default false.
-     *
-     * Only correct where the content is a POINT-IN-TIME SNAPSHOT — i.e. a static build,
-     * where every route renders from the same published dataset. `@bettercms-ai/astro`
-     * turns this on automatically when Astro's `command === "build"` and never for `dev`,
-     * SSR or the drafts perspective, where a repeat read must see the current row.
-     *
-     * A static build without it re-fetches the same nav/settings/collection once PER ROUTE.
-     * That is what made a large site exhaust the delivery rate limit: hundreds of identical
-     * requests, and `getPage()` re-scanning every page of the paginated list each time it is
-     * called.
-     */
-    cache?: boolean;
-}
-interface ListEntriesOptions {
-    /** Filter by content-model slug. */
-    model?: string;
-    page?: number;
-    perPage?: number;
-    /** Reference hydration depth (lists cap at 1). */
-    depth?: 0 | 1;
-    /** Projection — field names to return. */
-    select?: string[];
-}
-interface GetEntryOptions {
-    depth?: 0 | 1 | 2;
-    select?: string[];
-}
-interface ListPagesOptions {
-    page?: number;
-    perPage?: number;
-}
-interface BetterCMSReadClient {
-    readonly perspective: Perspective;
-    getEntry<T = Record<string, unknown>>(slug: string, opts?: GetEntryOptions): Promise<DeliveryEntry<T>>;
-    listEntries<T = Record<string, unknown>>(opts?: ListEntriesOptions): Promise<DeliveryList<DeliveryEntry<T>>>;
-    getPage(slug: string): Promise<DeliveryPage | null>;
-    listPages(opts?: ListPagesOptions): Promise<DeliveryList<DeliveryPage>>;
-    /**
-     * The workspace's reusable component definitions, for resolving `component` blocks.
-     * Under `perspective: "drafts"` this is the DRAFT definition — what makes an SSR render
-     * of a draft page look like the page the editor is showing.
-     */
-    listComponents(): Promise<DeliveryComponent[]>;
-    /** Fetch the project-scoped Global Layout for the active perspective. */
-    getLayout(): Promise<DeliveredLayout | null>;
-    listForms(opts?: {
-        projectId?: string;
-    }): Promise<{
-        items: DeliveryForm[];
-        turnstileSiteKey: string | null;
-    }>;
-    /** Build a deterministic Next/cache tag for a resource. */
-    tag(resource: "entry" | "page" | "forms", id?: string): string;
-}
-declare function createClient(options: CreateClientOptions): BetterCMSReadClient;
-
 /** Provenance describing where a string came from, for editor deep-linking. */
 interface StegaPayload {
     /** Workspace slug. */
@@ -1476,42 +1125,6 @@ declare function rich(value: TextOrRich, fallback?: string): string;
  */
 declare function lines(value: TextOrRich, fallback?: string): string;
 
-/**
- * Public site search — the headless surface for the visitor-facing search box.
- *
- * Queries `GET /api/v1/delivery/search?project=…&q=…`, the same key-less public
- * endpoint the embeddable widget uses. Powers <BcmsSearch> in @bettercms-ai/next
- * and @bettercms-ai/astro, so the component and any custom UI never drift.
- *
- * `snippet` is HTML-safe: the server escapes the field content and keeps only the
- * <mark> highlight wrappers, so it can be rendered with dangerouslySetInnerHTML.
- */
-interface SearchHit {
-    title: string;
-    slug: string;
-    type: "page" | "entry";
-    /** HTML-safe snippet with <mark> highlights around matched terms. */
-    snippet: string;
-    /** Site-relative URL, e.g. "/about". */
-    url: string;
-}
-interface SearchOptions {
-    /** The project id (from the dashboard's Site Search settings). */
-    project: string;
-    /** The query string. Calls with fewer than 1 char resolve to []. */
-    q: string;
-    /** Max hits, 1–20 (default 8). */
-    limit?: number;
-    /** API origin. Defaults to https://api.bettercms.ai. */
-    baseUrl?: string;
-    /** Injectable fetch for tests / non-browser runtimes. */
-    fetchImpl?: typeof fetch;
-    /** AbortSignal so callers can cancel a stale in-flight search. */
-    signal?: AbortSignal;
-}
-/** Search a published site. Resolves with hits, or [] on an empty query / network error. */
-declare function search(opts: SearchOptions): Promise<SearchHit[]>;
-
 /**
  * The published content snapshot, read where the site RUNS — not bundled into it.
  *
@@ -1875,4 +1488,4 @@ interface FramedWindow {
 /** True inside the editor's canvas. Safe where there is no window (a server render): false. */
 declare function inEditor(win?: FramedWindow | undefined): boolean;
 
-export { type AddPageFieldsInput, type ApiKeyUsage, type ApiKeyWithRaw, type AuthResult, BetterCMSError as BCMSClientError, ErrorCodes as BCMSErrorCodes, BetterCMS, BetterCMSAdminClient, type BetterCMSAdminOptions, BetterCMSDeliveryClient, BetterCMSError, BetterCMSManagementClient, type BetterCMSManagementOptions, type BetterCMSReadClient, type BetterCMSSiteOptions, CONTENT_APPLIED, type CommandManagedLayoutInput, type ContentAppliedMessage, type CreateApiKeyInput, type CreateClientOptions, type CreateEntryInput, type CreateFormInput, type CreateManagedPageInput, type CreateModelInput, type CreatePageInput, type CreateWebhookInput, type CreateWorkspaceInput, type DeliveryForm, type DeliveryFormField, type DeliveryFormFieldType, EDITOR_FRAME_NAME, ErrorCodes, type ExtractionCandidate, type FormFieldInput, type FormListOptions, type FormSubmitError, type FormValue, type FormValues, type GetEntryOptions, type GetManagedLayoutOptions, type ListContentAllOptions, type ListContentOptions, type ListEntriesFilter, type ListEntriesOptions, type ListPagesOptions, type ManagedComponent, type ManagedComponentInput, type ManagedComponentSummary, type ManagedContentEntry, type ManagedContentModel, type ManagedForm, type ManagedFormInput, type ManagedLayoutClient, type ManagedLayoutDocument, type ManagedMediaAsset, type ManagedPage, type ManagementClient, type MediaListOptions, type MediaMetadata, type Member, type MemberRole, type ModelFieldset, PORTABLE_TEXT_FORMAT, type PageCreateReport, type PageListOptions, type PendingInvite, type PublishManagedLayoutInput, type PublishedContent, type RichTextValue, STEGA_OPEN, type SearchHit, type SearchOptions, type SeoMeta, type SeoMetaInput, type SetPageContentInput, type StegaNode, type StegaPayload, type SubmissionListOptions, type SubmitFormOptions, type SubmitFormResult, type TextOrRich, type UpdateApiKeyInput, type UpdateAssetInput, type UpdateEntryInput, type UpdateFormInput, type UpdateModelInput, type UpdatePageInput, type UpdateWebhookInput, type UpdateWorkspaceInput, type UploadAssetInput, type UploadedAsset, type Webhook, type WebhookAdvancedConfig, type WebhookEvent, type WebhookListResponse, type WebhookWithSecret, type WriteContentInput, addModelFields, addPageFields, asStringArray, commandManagedLayout, contentApplied, createApiKey, createClient, createEntry, createForm, createManagedPage, createModel, createPage, createWorkspace, decodeStega, deleteForm, deleteMedia, deletePage, deleteSubmission, deleteWorkspace, encodeStega, formInitialValues, getApiKeyUsage, getEntry, getForm, getManagedLayout, getManagedPage, getMedia, getMember, getModel, getPage, getSubmission, getWorkspace, inEditor, inviteMember, isMultiValueField, isRichText, lines, listApiKeys, listEntries, listForms, listManagedPages, listMedia, listMembers, listModels, listPages, listSubmissions, listWorkspaces, onContentApplied, plain, portableText, publishManagedLayout, publishPage, publishedContentFile, publishedEntry, readPublishedContent, regenerateApiKey, removeMember, resetPublishedContentCache, resolveStega, revokeApiKey, rich, search, setPageContent, shouldShowField, signIn, signInWithGithub, signInWithGoogle, signUp, stegaClean, stripStega, submitForm, toggleOption, updateApiKey, updateEntry, updateForm, updateMemberRole, updateModel, updatePage, updatePageModel, updateWorkspace, uploadMedia };
+export { type AddPageFieldsInput, type ApiKeyUsage, type ApiKeyWithRaw, type AuthResult, BetterCMS, BetterCMSAdminClient, type BetterCMSAdminOptions, BetterCMSDeliveryClient, BetterCMSManagementClient, type BetterCMSManagementOptions, type BetterCMSSiteOptions, CONTENT_APPLIED, type CommandManagedLayoutInput, type ContentAppliedMessage, type CreateApiKeyInput, type CreateEntryInput, type CreateFormInput, type CreateManagedPageInput, type CreateModelInput, type CreatePageInput, type CreateWebhookInput, type CreateWorkspaceInput, DeliveryFormField, EDITOR_FRAME_NAME, type ExtractionCandidate, type FormFieldInput, type FormListOptions, type GetManagedLayoutOptions, type ListContentAllOptions, type ListContentOptions, type ListEntriesFilter, type ManagedComponent, type ManagedComponentInput, type ManagedComponentSummary, type ManagedContentEntry, type ManagedContentModel, type ManagedForm, type ManagedFormInput, type ManagedLayoutClient, type ManagedLayoutDocument, type ManagedMediaAsset, type ManagedPage, type ManagementClient, type MediaListOptions, type MediaMetadata, type Member, type MemberRole, type ModelFieldset, PORTABLE_TEXT_FORMAT, type PageCreateReport, type PageListOptions, type PendingInvite, type PublishManagedLayoutInput, type PublishedContent, type RichTextValue, STEGA_OPEN, type SeoMeta, type SeoMetaInput, type SetPageContentInput, type StegaNode, type StegaPayload, type SubmissionListOptions, type TextOrRich, type UpdateApiKeyInput, type UpdateAssetInput, type UpdateEntryInput, type UpdateFormInput, type UpdateModelInput, type UpdatePageInput, type UpdateWebhookInput, type UpdateWorkspaceInput, type UploadAssetInput, type UploadedAsset, type Webhook, type WebhookAdvancedConfig, type WebhookEvent, type WebhookListResponse, type WebhookWithSecret, type WriteContentInput, addModelFields, addPageFields, commandManagedLayout, contentApplied, createApiKey, createEntry, createForm, createManagedPage, createModel, createPage, createWorkspace, decodeStega, deleteForm, deleteMedia, deletePage, deleteSubmission, deleteWorkspace, encodeStega, getApiKeyUsage, getEntry, getForm, getManagedLayout, getManagedPage, getMedia, getMember, getModel, getPage, getSubmission, getWorkspace, inEditor, inviteMember, isRichText, lines, listApiKeys, listEntries, listForms, listManagedPages, listMedia, listMembers, listModels, listPages, listSubmissions, listWorkspaces, onContentApplied, plain, portableText, publishManagedLayout, publishPage, publishedContentFile, publishedEntry, readPublishedContent, regenerateApiKey, removeMember, resetPublishedContentCache, resolveStega, revokeApiKey, rich, setPageContent, signIn, signInWithGithub, signInWithGoogle, signUp, stegaClean, stripStega, updateApiKey, updateEntry, updateForm, updateMemberRole, updateModel, updatePage, updatePageModel, updateWorkspace, uploadMedia };