@broberg/cms-inline-edit 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 WebHouse
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,38 @@
+# @broberg/cms-inline-edit
+
+Click-to-edit inline editing for live [@webhouse/cms](https://docs.webhouse.app)-powered sites. Copy-owned: each site installs this as a normal npm dependency and owns its own integration/version — no centrally-hosted script.
+
+## Usage
+
+Mark the plain-text elements a document's rendering code prints from CMS fields with `data-cms-collection` / `data-cms-slug` / `data-cms-field`:
+
+```html
+<h2 data-cms-collection="sections" data-cms-slug="hero-home" data-cms-field="eyebrow">
+  Some CMS-sourced text
+</h2>
+```
+
+Then, once per page load:
+
+```ts
+import { initInlineEdit } from "@broberg/cms-inline-edit";
+
+initInlineEdit({
+  cmsBaseUrl: "https://webhouse.app",
+  siteId: "broberg-ai",
+});
+```
+
+`initInlineEdit` looks for a `?cms_edit=<token>` URL param (minted by cms-admin's "Redigér live" button), persists it in `sessionStorage`, and — only when a token is present — makes every `[data-cms-field]` element click-to-edit, saving on blur directly against the CMS API.
+
+Only plain text fields are supported. Do not attach these attributes to elements rendered via `dangerouslySetInnerHTML` (richtext/HTML fields) — not supported in this version.
+
+## `./server` (optional)
+
+Thin Node/Bun helpers for a site that wants a same-origin relay instead of the browser calling the CMS directly:
+
+```ts
+import { saveInlineEditField, verifyEditSession } from "@broberg/cms-inline-edit/server";
+```
+
+See `docs/features/F157-inline-editing.md` in the [@webhouse/cms](https://github.com/webhousecode/cms) repo for the full design.

package/dist/index.cjs

@@ -0,0 +1,172 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  initInlineEdit: () => initInlineEdit
+});
+module.exports = __toCommonJS(index_exports);
+function resolveOptions(options) {
+  return {
+    tokenParam: "cms_edit",
+    storageKey: "wh-inline-edit-token",
+    ...options
+  };
+}
+function initInlineEdit(options) {
+  if (typeof window === "undefined") return;
+  const resolved = resolveOptions(options);
+  const token = bootstrapToken(resolved);
+  if (!token) return;
+  activateEditMode(token, resolved);
+}
+function bootstrapToken(options) {
+  const url = new URL(window.location.href);
+  const urlToken = url.searchParams.get(options.tokenParam);
+  if (urlToken) {
+    sessionStorage.setItem(options.storageKey, urlToken);
+    url.searchParams.delete(options.tokenParam);
+    window.history.replaceState({}, "", url.toString());
+    return urlToken;
+  }
+  return sessionStorage.getItem(options.storageKey);
+}
+function activateEditMode(token, options) {
+  injectStyles();
+  showActiveBadge(token);
+  const fields = document.querySelectorAll("[data-cms-field]");
+  fields.forEach((el) => wireField(el, token, options));
+}
+function wireField(el, token, options) {
+  el.addEventListener("click", () => {
+    if (el.getAttribute("contenteditable") === "true") return;
+    el.dataset.cmsOriginalValue = el.textContent ?? "";
+    el.setAttribute("contenteditable", "true");
+    el.focus();
+  });
+  el.addEventListener("blur", () => {
+    el.removeAttribute("contenteditable");
+    const original = el.dataset.cmsOriginalValue ?? "";
+    const current = el.textContent ?? "";
+    if (current.trim() === original.trim()) return;
+    void saveField(el, token, options);
+  });
+  el.addEventListener("paste", (e) => {
+    e.preventDefault();
+    const text = e.clipboardData?.getData("text/plain") ?? "";
+    document.execCommand("insertText", false, text);
+  });
+  el.addEventListener("keydown", (e) => {
+    if (e.key === "Enter") {
+      e.preventDefault();
+      el.blur();
+    }
+  });
+}
+async function saveField(el, token, options) {
+  const collection = el.dataset.cmsCollection;
+  const slug = el.dataset.cmsSlug;
+  const field = el.dataset.cmsField;
+  if (!collection || !slug || !field) return;
+  const value = el.textContent?.trim() ?? "";
+  showPill(el, "saving");
+  try {
+    const getRes = await fetch(
+      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,
+      { headers: { Authorization: `Bearer ${token}` } }
+    );
+    if (!getRes.ok) throw new Error(`GET failed: ${getRes.status}`);
+    const doc = await getRes.json();
+    const mergedData = { ...doc.data, [field]: value };
+    const patchRes = await fetch(
+      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,
+      {
+        method: "PATCH",
+        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ data: mergedData })
+      }
+    );
+    if (!patchRes.ok) throw new Error(`PATCH failed: ${patchRes.status}`);
+    showPill(el, "saved");
+  } catch {
+    showPill(el, "error");
+  }
+}
+var pills = /* @__PURE__ */ new WeakMap();
+function showPill(el, state) {
+  let pill = pills.get(el);
+  if (!pill) {
+    pill = document.createElement("span");
+    pill.setAttribute("data-cms-inline-edit-pill", "");
+    document.body.appendChild(pill);
+    pills.set(el, pill);
+  }
+  const rect = el.getBoundingClientRect();
+  pill.style.cssText = `position:fixed;top:${rect.top - 26}px;left:${rect.left}px;font:600 11px system-ui,sans-serif;padding:3px 9px;border-radius:5px;z-index:2147483647;pointer-events:none;box-shadow:0 2px 8px rgba(0,0,0,.25);`;
+  if (state === "saving") {
+    pill.textContent = "Gemmer\u2026";
+    pill.style.background = "#1c2027";
+    pill.style.color = "#fff";
+  } else if (state === "saved") {
+    pill.textContent = "Gemt \u2713";
+    pill.style.background = "#16a34a";
+    pill.style.color = "#fff";
+    setTimeout(() => {
+      pill?.remove();
+      pills.delete(el);
+    }, 1500);
+  } else {
+    pill.textContent = "Fejl \u2014 pr\xF8v igen";
+    pill.style.background = "#dc2626";
+    pill.style.color = "#fff";
+  }
+}
+function showActiveBadge(token) {
+  const claims = decodeJwtPayload(token);
+  const name = claims?.name || claims?.email || "ukendt";
+  const badge = document.createElement("div");
+  badge.setAttribute("data-cms-inline-edit-badge", "");
+  badge.textContent = `\u270F\uFE0F Redigerer som ${name}`;
+  badge.style.cssText = "position:fixed;bottom:16px;left:16px;background:#1c2027;color:#fff;font:600 12px system-ui,sans-serif;padding:8px 14px;border-radius:999px;z-index:2147483647;box-shadow:0 4px 16px rgba(0,0,0,.3);";
+  document.body.appendChild(badge);
+}
+function decodeJwtPayload(token) {
+  try {
+    const payload = token.split(".")[1];
+    if (!payload) return null;
+    return JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+  } catch {
+    return null;
+  }
+}
+function injectStyles() {
+  const style = document.createElement("style");
+  style.textContent = `
+    [data-cms-field] { outline: 1px dashed transparent; outline-offset: 2px; cursor: text; transition: outline-color .15s; }
+    [data-cms-field]:hover { outline-color: rgba(0,178,255,.5); }
+    [data-cms-field][contenteditable="true"] { outline: 2px solid #00b2ff; outline-offset: 2px; }
+  `;
+  document.head.appendChild(style);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  initInlineEdit
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * Browser entry — zero dependencies. Activates click-to-edit on any element\n * carrying data-cms-collection/data-cms-slug/data-cms-field (F129's attribute\n * convention), when a valid edit-session token is present.\n */\n\nexport interface InlineEditOptions {\n  /** Base URL of the CMS API, e.g. \"https://webhouse.app\". */\n  cmsBaseUrl: string;\n  /** Site id passed as ?site= on every CMS API call, e.g. \"broberg-ai\". */\n  siteId: string;\n  /** URL query param carrying the short-lived edit-session token. Default \"cms_edit\". */\n  tokenParam?: string;\n  /** sessionStorage key the token is persisted under across page loads. Default \"wh-inline-edit-token\". */\n  storageKey?: string;\n}\n\ninterface ResolvedOptions extends Required<InlineEditOptions> {}\n\nfunction resolveOptions(options: InlineEditOptions): ResolvedOptions {\n  return {\n    tokenParam: \"cms_edit\",\n    storageKey: \"wh-inline-edit-token\",\n    ...options,\n  };\n}\n\nexport function initInlineEdit(options: InlineEditOptions): void {\n  if (typeof window === \"undefined\") return;\n  const resolved = resolveOptions(options);\n  const token = bootstrapToken(resolved);\n  if (!token) return;\n  activateEditMode(token, resolved);\n}\n\nfunction bootstrapToken(options: ResolvedOptions): string | null {\n  const url = new URL(window.location.href);\n  const urlToken = url.searchParams.get(options.tokenParam);\n  if (urlToken) {\n    sessionStorage.setItem(options.storageKey, urlToken);\n    url.searchParams.delete(options.tokenParam);\n    window.history.replaceState({}, \"\", url.toString());\n    return urlToken;\n  }\n  return sessionStorage.getItem(options.storageKey);\n}\n\nfunction activateEditMode(token: string, options: ResolvedOptions): void {\n  injectStyles();\n  showActiveBadge(token);\n\n  const fields = document.querySelectorAll<HTMLElement>(\"[data-cms-field]\");\n  fields.forEach((el) => wireField(el, token, options));\n}\n\nfunction wireField(el: HTMLElement, token: string, options: ResolvedOptions): void {\n  el.addEventListener(\"click\", () => {\n    if (el.getAttribute(\"contenteditable\") === \"true\") return;\n    el.dataset.cmsOriginalValue = el.textContent ?? \"\";\n    el.setAttribute(\"contenteditable\", \"true\");\n    el.focus();\n  });\n\n  el.addEventListener(\"blur\", () => {\n    el.removeAttribute(\"contenteditable\");\n    const original = el.dataset.cmsOriginalValue ?? \"\";\n    const current = el.textContent ?? \"\";\n    if (current.trim() === original.trim()) return;\n    void saveField(el, token, options);\n  });\n\n  el.addEventListener(\"paste\", (e) => {\n    e.preventDefault();\n    const text = e.clipboardData?.getData(\"text/plain\") ?? \"\";\n    document.execCommand(\"insertText\", false, text);\n  });\n\n  el.addEventListener(\"keydown\", (e) => {\n    if (e.key === \"Enter\") {\n      e.preventDefault();\n      el.blur();\n    }\n  });\n}\n\nasync function saveField(el: HTMLElement, token: string, options: ResolvedOptions): Promise<void> {\n  const collection = el.dataset.cmsCollection;\n  const slug = el.dataset.cmsSlug;\n  const field = el.dataset.cmsField;\n  if (!collection || !slug || !field) return;\n  const value = el.textContent?.trim() ?? \"\";\n\n  showPill(el, \"saving\");\n  try {\n    const getRes = await fetch(\n      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,\n      { headers: { Authorization: `Bearer ${token}` } },\n    );\n    if (!getRes.ok) throw new Error(`GET failed: ${getRes.status}`);\n    const doc = (await getRes.json()) as { data?: Record<string, unknown> };\n    const mergedData = { ...doc.data, [field]: value };\n\n    const patchRes = await fetch(\n      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,\n      {\n        method: \"PATCH\",\n        headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ data: mergedData }),\n      },\n    );\n    if (!patchRes.ok) throw new Error(`PATCH failed: ${patchRes.status}`);\n    showPill(el, \"saved\");\n  } catch {\n    showPill(el, \"error\");\n  }\n}\n\nconst pills = new WeakMap<HTMLElement, HTMLElement>();\n\nfunction showPill(el: HTMLElement, state: \"saving\" | \"saved\" | \"error\"): void {\n  let pill = pills.get(el);\n  if (!pill) {\n    pill = document.createElement(\"span\");\n    pill.setAttribute(\"data-cms-inline-edit-pill\", \"\");\n    document.body.appendChild(pill);\n    pills.set(el, pill);\n  }\n  const rect = el.getBoundingClientRect();\n  pill.style.cssText =\n    `position:fixed;top:${rect.top - 26}px;left:${rect.left}px;font:600 11px system-ui,sans-serif;` +\n    `padding:3px 9px;border-radius:5px;z-index:2147483647;pointer-events:none;` +\n    `box-shadow:0 2px 8px rgba(0,0,0,.25);`;\n\n  if (state === \"saving\") {\n    pill.textContent = \"Gemmer…\";\n    pill.style.background = \"#1c2027\";\n    pill.style.color = \"#fff\";\n  } else if (state === \"saved\") {\n    pill.textContent = \"Gemt ✓\";\n    pill.style.background = \"#16a34a\";\n    pill.style.color = \"#fff\";\n    setTimeout(() => {\n      pill?.remove();\n      pills.delete(el);\n    }, 1500);\n  } else {\n    pill.textContent = \"Fejl — prøv igen\";\n    pill.style.background = \"#dc2626\";\n    pill.style.color = \"#fff\";\n  }\n}\n\nfunction showActiveBadge(token: string): void {\n  const claims = decodeJwtPayload(token);\n  const name = (claims?.name as string) || (claims?.email as string) || \"ukendt\";\n  const badge = document.createElement(\"div\");\n  badge.setAttribute(\"data-cms-inline-edit-badge\", \"\");\n  badge.textContent = `✏️ Redigerer som ${name}`;\n  badge.style.cssText =\n    \"position:fixed;bottom:16px;left:16px;background:#1c2027;color:#fff;\" +\n    \"font:600 12px system-ui,sans-serif;padding:8px 14px;border-radius:999px;\" +\n    \"z-index:2147483647;box-shadow:0 4px 16px rgba(0,0,0,.3);\";\n  document.body.appendChild(badge);\n}\n\n/** Reads JWT claims for DISPLAY ONLY — never used for authorization decisions. */\nfunction decodeJwtPayload(token: string): Record<string, unknown> | null {\n  try {\n    const payload = token.split(\".\")[1];\n    if (!payload) return null;\n    return JSON.parse(atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\")));\n  } catch {\n    return null;\n  }\n}\n\nfunction injectStyles(): void {\n  const style = document.createElement(\"style\");\n  style.textContent = `\n    [data-cms-field] { outline: 1px dashed transparent; outline-offset: 2px; cursor: text; transition: outline-color .15s; }\n    [data-cms-field]:hover { outline-color: rgba(0,178,255,.5); }\n    [data-cms-field][contenteditable=\"true\"] { outline: 2px solid #00b2ff; outline-offset: 2px; }\n  `;\n  document.head.appendChild(style);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAmBA,SAAS,eAAe,SAA6C;AACnE,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,GAAG;AAAA,EACL;AACF;AAEO,SAAS,eAAe,SAAkC;AAC/D,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,WAAW,eAAe,OAAO;AACvC,QAAM,QAAQ,eAAe,QAAQ;AACrC,MAAI,CAAC,MAAO;AACZ,mBAAiB,OAAO,QAAQ;AAClC;AAEA,SAAS,eAAe,SAAyC;AAC/D,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAM,WAAW,IAAI,aAAa,IAAI,QAAQ,UAAU;AACxD,MAAI,UAAU;AACZ,mBAAe,QAAQ,QAAQ,YAAY,QAAQ;AACnD,QAAI,aAAa,OAAO,QAAQ,UAAU;AAC1C,WAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAClD,WAAO;AAAA,EACT;AACA,SAAO,eAAe,QAAQ,QAAQ,UAAU;AAClD;AAEA,SAAS,iBAAiB,OAAe,SAAgC;AACvE,eAAa;AACb,kBAAgB,KAAK;AAErB,QAAM,SAAS,SAAS,iBAA8B,kBAAkB;AACxE,SAAO,QAAQ,CAAC,OAAO,UAAU,IAAI,OAAO,OAAO,CAAC;AACtD;AAEA,SAAS,UAAU,IAAiB,OAAe,SAAgC;AACjF,KAAG,iBAAiB,SAAS,MAAM;AACjC,QAAI,GAAG,aAAa,iBAAiB,MAAM,OAAQ;AACnD,OAAG,QAAQ,mBAAmB,GAAG,eAAe;AAChD,OAAG,aAAa,mBAAmB,MAAM;AACzC,OAAG,MAAM;AAAA,EACX,CAAC;AAED,KAAG,iBAAiB,QAAQ,MAAM;AAChC,OAAG,gBAAgB,iBAAiB;AACpC,UAAM,WAAW,GAAG,QAAQ,oBAAoB;AAChD,UAAM,UAAU,GAAG,eAAe;AAClC,QAAI,QAAQ,KAAK,MAAM,SAAS,KAAK,EAAG;AACxC,SAAK,UAAU,IAAI,OAAO,OAAO;AAAA,EACnC,CAAC;AAED,KAAG,iBAAiB,SAAS,CAAC,MAAM;AAClC,MAAE,eAAe;AACjB,UAAM,OAAO,EAAE,eAAe,QAAQ,YAAY,KAAK;AACvD,aAAS,YAAY,cAAc,OAAO,IAAI;AAAA,EAChD,CAAC;AAED,KAAG,iBAAiB,WAAW,CAAC,MAAM;AACpC,QAAI,EAAE,QAAQ,SAAS;AACrB,QAAE,eAAe;AACjB,SAAG,KAAK;AAAA,IACV;AAAA,EACF,CAAC;AACH;AAEA,eAAe,UAAU,IAAiB,OAAe,SAAyC;AAChG,QAAM,aAAa,GAAG,QAAQ;AAC9B,QAAM,OAAO,GAAG,QAAQ;AACxB,QAAM,QAAQ,GAAG,QAAQ;AACzB,MAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAO;AACpC,QAAM,QAAQ,GAAG,aAAa,KAAK,KAAK;AAExC,WAAS,IAAI,QAAQ;AACrB,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,GAAG,QAAQ,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,QAAQ,MAAM;AAAA,MAC1E,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG,EAAE;AAAA,IAClD;AACA,QAAI,CAAC,OAAO,GAAI,OAAM,IAAI,MAAM,eAAe,OAAO,MAAM,EAAE;AAC9D,UAAM,MAAO,MAAM,OAAO,KAAK;AAC/B,UAAM,aAAa,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,MAAM;AAEjD,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,QAAQ,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,QAAQ,MAAM;AAAA,MAC1E;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,QAChF,MAAM,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAAA,MAC3C;AAAA,IACF;AACA,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,iBAAiB,SAAS,MAAM,EAAE;AACpE,aAAS,IAAI,OAAO;AAAA,EACtB,QAAQ;AACN,aAAS,IAAI,OAAO;AAAA,EACtB;AACF;AAEA,IAAM,QAAQ,oBAAI,QAAkC;AAEpD,SAAS,SAAS,IAAiB,OAA2C;AAC5E,MAAI,OAAO,MAAM,IAAI,EAAE;AACvB,MAAI,CAAC,MAAM;AACT,WAAO,SAAS,cAAc,MAAM;AACpC,SAAK,aAAa,6BAA6B,EAAE;AACjD,aAAS,KAAK,YAAY,IAAI;AAC9B,UAAM,IAAI,IAAI,IAAI;AAAA,EACpB;AACA,QAAM,OAAO,GAAG,sBAAsB;AACtC,OAAK,MAAM,UACT,sBAAsB,KAAK,MAAM,EAAE,WAAW,KAAK,IAAI;AAIzD,MAAI,UAAU,UAAU;AACtB,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AAAA,EACrB,WAAW,UAAU,SAAS;AAC5B,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AACnB,eAAW,MAAM;AACf,YAAM,OAAO;AACb,YAAM,OAAO,EAAE;AAAA,IACjB,GAAG,IAAI;AAAA,EACT,OAAO;AACL,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AAAA,EACrB;AACF;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,QAAM,SAAS,iBAAiB,KAAK;AACrC,QAAM,OAAQ,QAAQ,QAAoB,QAAQ,SAAoB;AACtE,QAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,QAAM,aAAa,8BAA8B,EAAE;AACnD,QAAM,cAAc,8BAAoB,IAAI;AAC5C,QAAM,MAAM,UACV;AAGF,WAAS,KAAK,YAAY,KAAK;AACjC;AAGA,SAAS,iBAAiB,OAA+C;AACvE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,WAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,CAAC;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAqB;AAC5B,QAAM,QAAQ,SAAS,cAAc,OAAO;AAC5C,QAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAKpB,WAAS,KAAK,YAAY,KAAK;AACjC;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,18 @@
+/**
+ * Browser entry — zero dependencies. Activates click-to-edit on any element
+ * carrying data-cms-collection/data-cms-slug/data-cms-field (F129's attribute
+ * convention), when a valid edit-session token is present.
+ */
+interface InlineEditOptions {
+    /** Base URL of the CMS API, e.g. "https://webhouse.app". */
+    cmsBaseUrl: string;
+    /** Site id passed as ?site= on every CMS API call, e.g. "broberg-ai". */
+    siteId: string;
+    /** URL query param carrying the short-lived edit-session token. Default "cms_edit". */
+    tokenParam?: string;
+    /** sessionStorage key the token is persisted under across page loads. Default "wh-inline-edit-token". */
+    storageKey?: string;
+}
+declare function initInlineEdit(options: InlineEditOptions): void;
+
+export { type InlineEditOptions, initInlineEdit };

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Browser entry — zero dependencies. Activates click-to-edit on any element
+ * carrying data-cms-collection/data-cms-slug/data-cms-field (F129's attribute
+ * convention), when a valid edit-session token is present.
+ */
+interface InlineEditOptions {
+    /** Base URL of the CMS API, e.g. "https://webhouse.app". */
+    cmsBaseUrl: string;
+    /** Site id passed as ?site= on every CMS API call, e.g. "broberg-ai". */
+    siteId: string;
+    /** URL query param carrying the short-lived edit-session token. Default "cms_edit". */
+    tokenParam?: string;
+    /** sessionStorage key the token is persisted under across page loads. Default "wh-inline-edit-token". */
+    storageKey?: string;
+}
+declare function initInlineEdit(options: InlineEditOptions): void;
+
+export { type InlineEditOptions, initInlineEdit };

package/dist/index.js

@@ -0,0 +1,147 @@
+// src/index.ts
+function resolveOptions(options) {
+  return {
+    tokenParam: "cms_edit",
+    storageKey: "wh-inline-edit-token",
+    ...options
+  };
+}
+function initInlineEdit(options) {
+  if (typeof window === "undefined") return;
+  const resolved = resolveOptions(options);
+  const token = bootstrapToken(resolved);
+  if (!token) return;
+  activateEditMode(token, resolved);
+}
+function bootstrapToken(options) {
+  const url = new URL(window.location.href);
+  const urlToken = url.searchParams.get(options.tokenParam);
+  if (urlToken) {
+    sessionStorage.setItem(options.storageKey, urlToken);
+    url.searchParams.delete(options.tokenParam);
+    window.history.replaceState({}, "", url.toString());
+    return urlToken;
+  }
+  return sessionStorage.getItem(options.storageKey);
+}
+function activateEditMode(token, options) {
+  injectStyles();
+  showActiveBadge(token);
+  const fields = document.querySelectorAll("[data-cms-field]");
+  fields.forEach((el) => wireField(el, token, options));
+}
+function wireField(el, token, options) {
+  el.addEventListener("click", () => {
+    if (el.getAttribute("contenteditable") === "true") return;
+    el.dataset.cmsOriginalValue = el.textContent ?? "";
+    el.setAttribute("contenteditable", "true");
+    el.focus();
+  });
+  el.addEventListener("blur", () => {
+    el.removeAttribute("contenteditable");
+    const original = el.dataset.cmsOriginalValue ?? "";
+    const current = el.textContent ?? "";
+    if (current.trim() === original.trim()) return;
+    void saveField(el, token, options);
+  });
+  el.addEventListener("paste", (e) => {
+    e.preventDefault();
+    const text = e.clipboardData?.getData("text/plain") ?? "";
+    document.execCommand("insertText", false, text);
+  });
+  el.addEventListener("keydown", (e) => {
+    if (e.key === "Enter") {
+      e.preventDefault();
+      el.blur();
+    }
+  });
+}
+async function saveField(el, token, options) {
+  const collection = el.dataset.cmsCollection;
+  const slug = el.dataset.cmsSlug;
+  const field = el.dataset.cmsField;
+  if (!collection || !slug || !field) return;
+  const value = el.textContent?.trim() ?? "";
+  showPill(el, "saving");
+  try {
+    const getRes = await fetch(
+      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,
+      { headers: { Authorization: `Bearer ${token}` } }
+    );
+    if (!getRes.ok) throw new Error(`GET failed: ${getRes.status}`);
+    const doc = await getRes.json();
+    const mergedData = { ...doc.data, [field]: value };
+    const patchRes = await fetch(
+      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,
+      {
+        method: "PATCH",
+        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ data: mergedData })
+      }
+    );
+    if (!patchRes.ok) throw new Error(`PATCH failed: ${patchRes.status}`);
+    showPill(el, "saved");
+  } catch {
+    showPill(el, "error");
+  }
+}
+var pills = /* @__PURE__ */ new WeakMap();
+function showPill(el, state) {
+  let pill = pills.get(el);
+  if (!pill) {
+    pill = document.createElement("span");
+    pill.setAttribute("data-cms-inline-edit-pill", "");
+    document.body.appendChild(pill);
+    pills.set(el, pill);
+  }
+  const rect = el.getBoundingClientRect();
+  pill.style.cssText = `position:fixed;top:${rect.top - 26}px;left:${rect.left}px;font:600 11px system-ui,sans-serif;padding:3px 9px;border-radius:5px;z-index:2147483647;pointer-events:none;box-shadow:0 2px 8px rgba(0,0,0,.25);`;
+  if (state === "saving") {
+    pill.textContent = "Gemmer\u2026";
+    pill.style.background = "#1c2027";
+    pill.style.color = "#fff";
+  } else if (state === "saved") {
+    pill.textContent = "Gemt \u2713";
+    pill.style.background = "#16a34a";
+    pill.style.color = "#fff";
+    setTimeout(() => {
+      pill?.remove();
+      pills.delete(el);
+    }, 1500);
+  } else {
+    pill.textContent = "Fejl \u2014 pr\xF8v igen";
+    pill.style.background = "#dc2626";
+    pill.style.color = "#fff";
+  }
+}
+function showActiveBadge(token) {
+  const claims = decodeJwtPayload(token);
+  const name = claims?.name || claims?.email || "ukendt";
+  const badge = document.createElement("div");
+  badge.setAttribute("data-cms-inline-edit-badge", "");
+  badge.textContent = `\u270F\uFE0F Redigerer som ${name}`;
+  badge.style.cssText = "position:fixed;bottom:16px;left:16px;background:#1c2027;color:#fff;font:600 12px system-ui,sans-serif;padding:8px 14px;border-radius:999px;z-index:2147483647;box-shadow:0 4px 16px rgba(0,0,0,.3);";
+  document.body.appendChild(badge);
+}
+function decodeJwtPayload(token) {
+  try {
+    const payload = token.split(".")[1];
+    if (!payload) return null;
+    return JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+  } catch {
+    return null;
+  }
+}
+function injectStyles() {
+  const style = document.createElement("style");
+  style.textContent = `
+    [data-cms-field] { outline: 1px dashed transparent; outline-offset: 2px; cursor: text; transition: outline-color .15s; }
+    [data-cms-field]:hover { outline-color: rgba(0,178,255,.5); }
+    [data-cms-field][contenteditable="true"] { outline: 2px solid #00b2ff; outline-offset: 2px; }
+  `;
+  document.head.appendChild(style);
+}
+export {
+  initInlineEdit
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * Browser entry — zero dependencies. Activates click-to-edit on any element\n * carrying data-cms-collection/data-cms-slug/data-cms-field (F129's attribute\n * convention), when a valid edit-session token is present.\n */\n\nexport interface InlineEditOptions {\n  /** Base URL of the CMS API, e.g. \"https://webhouse.app\". */\n  cmsBaseUrl: string;\n  /** Site id passed as ?site= on every CMS API call, e.g. \"broberg-ai\". */\n  siteId: string;\n  /** URL query param carrying the short-lived edit-session token. Default \"cms_edit\". */\n  tokenParam?: string;\n  /** sessionStorage key the token is persisted under across page loads. Default \"wh-inline-edit-token\". */\n  storageKey?: string;\n}\n\ninterface ResolvedOptions extends Required<InlineEditOptions> {}\n\nfunction resolveOptions(options: InlineEditOptions): ResolvedOptions {\n  return {\n    tokenParam: \"cms_edit\",\n    storageKey: \"wh-inline-edit-token\",\n    ...options,\n  };\n}\n\nexport function initInlineEdit(options: InlineEditOptions): void {\n  if (typeof window === \"undefined\") return;\n  const resolved = resolveOptions(options);\n  const token = bootstrapToken(resolved);\n  if (!token) return;\n  activateEditMode(token, resolved);\n}\n\nfunction bootstrapToken(options: ResolvedOptions): string | null {\n  const url = new URL(window.location.href);\n  const urlToken = url.searchParams.get(options.tokenParam);\n  if (urlToken) {\n    sessionStorage.setItem(options.storageKey, urlToken);\n    url.searchParams.delete(options.tokenParam);\n    window.history.replaceState({}, \"\", url.toString());\n    return urlToken;\n  }\n  return sessionStorage.getItem(options.storageKey);\n}\n\nfunction activateEditMode(token: string, options: ResolvedOptions): void {\n  injectStyles();\n  showActiveBadge(token);\n\n  const fields = document.querySelectorAll<HTMLElement>(\"[data-cms-field]\");\n  fields.forEach((el) => wireField(el, token, options));\n}\n\nfunction wireField(el: HTMLElement, token: string, options: ResolvedOptions): void {\n  el.addEventListener(\"click\", () => {\n    if (el.getAttribute(\"contenteditable\") === \"true\") return;\n    el.dataset.cmsOriginalValue = el.textContent ?? \"\";\n    el.setAttribute(\"contenteditable\", \"true\");\n    el.focus();\n  });\n\n  el.addEventListener(\"blur\", () => {\n    el.removeAttribute(\"contenteditable\");\n    const original = el.dataset.cmsOriginalValue ?? \"\";\n    const current = el.textContent ?? \"\";\n    if (current.trim() === original.trim()) return;\n    void saveField(el, token, options);\n  });\n\n  el.addEventListener(\"paste\", (e) => {\n    e.preventDefault();\n    const text = e.clipboardData?.getData(\"text/plain\") ?? \"\";\n    document.execCommand(\"insertText\", false, text);\n  });\n\n  el.addEventListener(\"keydown\", (e) => {\n    if (e.key === \"Enter\") {\n      e.preventDefault();\n      el.blur();\n    }\n  });\n}\n\nasync function saveField(el: HTMLElement, token: string, options: ResolvedOptions): Promise<void> {\n  const collection = el.dataset.cmsCollection;\n  const slug = el.dataset.cmsSlug;\n  const field = el.dataset.cmsField;\n  if (!collection || !slug || !field) return;\n  const value = el.textContent?.trim() ?? \"\";\n\n  showPill(el, \"saving\");\n  try {\n    const getRes = await fetch(\n      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,\n      { headers: { Authorization: `Bearer ${token}` } },\n    );\n    if (!getRes.ok) throw new Error(`GET failed: ${getRes.status}`);\n    const doc = (await getRes.json()) as { data?: Record<string, unknown> };\n    const mergedData = { ...doc.data, [field]: value };\n\n    const patchRes = await fetch(\n      `${options.cmsBaseUrl}/api/cms/${collection}/${slug}?site=${options.siteId}`,\n      {\n        method: \"PATCH\",\n        headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ data: mergedData }),\n      },\n    );\n    if (!patchRes.ok) throw new Error(`PATCH failed: ${patchRes.status}`);\n    showPill(el, \"saved\");\n  } catch {\n    showPill(el, \"error\");\n  }\n}\n\nconst pills = new WeakMap<HTMLElement, HTMLElement>();\n\nfunction showPill(el: HTMLElement, state: \"saving\" | \"saved\" | \"error\"): void {\n  let pill = pills.get(el);\n  if (!pill) {\n    pill = document.createElement(\"span\");\n    pill.setAttribute(\"data-cms-inline-edit-pill\", \"\");\n    document.body.appendChild(pill);\n    pills.set(el, pill);\n  }\n  const rect = el.getBoundingClientRect();\n  pill.style.cssText =\n    `position:fixed;top:${rect.top - 26}px;left:${rect.left}px;font:600 11px system-ui,sans-serif;` +\n    `padding:3px 9px;border-radius:5px;z-index:2147483647;pointer-events:none;` +\n    `box-shadow:0 2px 8px rgba(0,0,0,.25);`;\n\n  if (state === \"saving\") {\n    pill.textContent = \"Gemmer…\";\n    pill.style.background = \"#1c2027\";\n    pill.style.color = \"#fff\";\n  } else if (state === \"saved\") {\n    pill.textContent = \"Gemt ✓\";\n    pill.style.background = \"#16a34a\";\n    pill.style.color = \"#fff\";\n    setTimeout(() => {\n      pill?.remove();\n      pills.delete(el);\n    }, 1500);\n  } else {\n    pill.textContent = \"Fejl — prøv igen\";\n    pill.style.background = \"#dc2626\";\n    pill.style.color = \"#fff\";\n  }\n}\n\nfunction showActiveBadge(token: string): void {\n  const claims = decodeJwtPayload(token);\n  const name = (claims?.name as string) || (claims?.email as string) || \"ukendt\";\n  const badge = document.createElement(\"div\");\n  badge.setAttribute(\"data-cms-inline-edit-badge\", \"\");\n  badge.textContent = `✏️ Redigerer som ${name}`;\n  badge.style.cssText =\n    \"position:fixed;bottom:16px;left:16px;background:#1c2027;color:#fff;\" +\n    \"font:600 12px system-ui,sans-serif;padding:8px 14px;border-radius:999px;\" +\n    \"z-index:2147483647;box-shadow:0 4px 16px rgba(0,0,0,.3);\";\n  document.body.appendChild(badge);\n}\n\n/** Reads JWT claims for DISPLAY ONLY — never used for authorization decisions. */\nfunction decodeJwtPayload(token: string): Record<string, unknown> | null {\n  try {\n    const payload = token.split(\".\")[1];\n    if (!payload) return null;\n    return JSON.parse(atob(payload.replace(/-/g, \"+\").replace(/_/g, \"/\")));\n  } catch {\n    return null;\n  }\n}\n\nfunction injectStyles(): void {\n  const style = document.createElement(\"style\");\n  style.textContent = `\n    [data-cms-field] { outline: 1px dashed transparent; outline-offset: 2px; cursor: text; transition: outline-color .15s; }\n    [data-cms-field]:hover { outline-color: rgba(0,178,255,.5); }\n    [data-cms-field][contenteditable=\"true\"] { outline: 2px solid #00b2ff; outline-offset: 2px; }\n  `;\n  document.head.appendChild(style);\n}\n"],"mappings":";AAmBA,SAAS,eAAe,SAA6C;AACnE,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,GAAG;AAAA,EACL;AACF;AAEO,SAAS,eAAe,SAAkC;AAC/D,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,WAAW,eAAe,OAAO;AACvC,QAAM,QAAQ,eAAe,QAAQ;AACrC,MAAI,CAAC,MAAO;AACZ,mBAAiB,OAAO,QAAQ;AAClC;AAEA,SAAS,eAAe,SAAyC;AAC/D,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAM,WAAW,IAAI,aAAa,IAAI,QAAQ,UAAU;AACxD,MAAI,UAAU;AACZ,mBAAe,QAAQ,QAAQ,YAAY,QAAQ;AACnD,QAAI,aAAa,OAAO,QAAQ,UAAU;AAC1C,WAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAClD,WAAO;AAAA,EACT;AACA,SAAO,eAAe,QAAQ,QAAQ,UAAU;AAClD;AAEA,SAAS,iBAAiB,OAAe,SAAgC;AACvE,eAAa;AACb,kBAAgB,KAAK;AAErB,QAAM,SAAS,SAAS,iBAA8B,kBAAkB;AACxE,SAAO,QAAQ,CAAC,OAAO,UAAU,IAAI,OAAO,OAAO,CAAC;AACtD;AAEA,SAAS,UAAU,IAAiB,OAAe,SAAgC;AACjF,KAAG,iBAAiB,SAAS,MAAM;AACjC,QAAI,GAAG,aAAa,iBAAiB,MAAM,OAAQ;AACnD,OAAG,QAAQ,mBAAmB,GAAG,eAAe;AAChD,OAAG,aAAa,mBAAmB,MAAM;AACzC,OAAG,MAAM;AAAA,EACX,CAAC;AAED,KAAG,iBAAiB,QAAQ,MAAM;AAChC,OAAG,gBAAgB,iBAAiB;AACpC,UAAM,WAAW,GAAG,QAAQ,oBAAoB;AAChD,UAAM,UAAU,GAAG,eAAe;AAClC,QAAI,QAAQ,KAAK,MAAM,SAAS,KAAK,EAAG;AACxC,SAAK,UAAU,IAAI,OAAO,OAAO;AAAA,EACnC,CAAC;AAED,KAAG,iBAAiB,SAAS,CAAC,MAAM;AAClC,MAAE,eAAe;AACjB,UAAM,OAAO,EAAE,eAAe,QAAQ,YAAY,KAAK;AACvD,aAAS,YAAY,cAAc,OAAO,IAAI;AAAA,EAChD,CAAC;AAED,KAAG,iBAAiB,WAAW,CAAC,MAAM;AACpC,QAAI,EAAE,QAAQ,SAAS;AACrB,QAAE,eAAe;AACjB,SAAG,KAAK;AAAA,IACV;AAAA,EACF,CAAC;AACH;AAEA,eAAe,UAAU,IAAiB,OAAe,SAAyC;AAChG,QAAM,aAAa,GAAG,QAAQ;AAC9B,QAAM,OAAO,GAAG,QAAQ;AACxB,QAAM,QAAQ,GAAG,QAAQ;AACzB,MAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAO;AACpC,QAAM,QAAQ,GAAG,aAAa,KAAK,KAAK;AAExC,WAAS,IAAI,QAAQ;AACrB,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,GAAG,QAAQ,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,QAAQ,MAAM;AAAA,MAC1E,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG,EAAE;AAAA,IAClD;AACA,QAAI,CAAC,OAAO,GAAI,OAAM,IAAI,MAAM,eAAe,OAAO,MAAM,EAAE;AAC9D,UAAM,MAAO,MAAM,OAAO,KAAK;AAC/B,UAAM,aAAa,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,MAAM;AAEjD,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,QAAQ,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,QAAQ,MAAM;AAAA,MAC1E;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,QAChF,MAAM,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAAA,MAC3C;AAAA,IACF;AACA,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,iBAAiB,SAAS,MAAM,EAAE;AACpE,aAAS,IAAI,OAAO;AAAA,EACtB,QAAQ;AACN,aAAS,IAAI,OAAO;AAAA,EACtB;AACF;AAEA,IAAM,QAAQ,oBAAI,QAAkC;AAEpD,SAAS,SAAS,IAAiB,OAA2C;AAC5E,MAAI,OAAO,MAAM,IAAI,EAAE;AACvB,MAAI,CAAC,MAAM;AACT,WAAO,SAAS,cAAc,MAAM;AACpC,SAAK,aAAa,6BAA6B,EAAE;AACjD,aAAS,KAAK,YAAY,IAAI;AAC9B,UAAM,IAAI,IAAI,IAAI;AAAA,EACpB;AACA,QAAM,OAAO,GAAG,sBAAsB;AACtC,OAAK,MAAM,UACT,sBAAsB,KAAK,MAAM,EAAE,WAAW,KAAK,IAAI;AAIzD,MAAI,UAAU,UAAU;AACtB,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AAAA,EACrB,WAAW,UAAU,SAAS;AAC5B,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AACnB,eAAW,MAAM;AACf,YAAM,OAAO;AACb,YAAM,OAAO,EAAE;AAAA,IACjB,GAAG,IAAI;AAAA,EACT,OAAO;AACL,SAAK,cAAc;AACnB,SAAK,MAAM,aAAa;AACxB,SAAK,MAAM,QAAQ;AAAA,EACrB;AACF;AAEA,SAAS,gBAAgB,OAAqB;AAC5C,QAAM,SAAS,iBAAiB,KAAK;AACrC,QAAM,OAAQ,QAAQ,QAAoB,QAAQ,SAAoB;AACtE,QAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,QAAM,aAAa,8BAA8B,EAAE;AACnD,QAAM,cAAc,8BAAoB,IAAI;AAC5C,QAAM,MAAM,UACV;AAGF,WAAS,KAAK,YAAY,KAAK;AACjC;AAGA,SAAS,iBAAiB,OAA+C;AACvE,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,WAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,CAAC,CAAC;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAqB;AAC5B,QAAM,QAAQ,SAAS,cAAc,OAAO;AAC5C,QAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAKpB,WAAS,KAAK,YAAY,KAAK;AACjC;","names":[]}

package/dist/server/index.cjs

@@ -0,0 +1,57 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/server/index.ts
+var server_exports = {};
+__export(server_exports, {
+  saveInlineEditField: () => saveInlineEditField,
+  verifyEditSession: () => verifyEditSession
+});
+module.exports = __toCommonJS(server_exports);
+async function saveInlineEditField(options) {
+  const { cmsBaseUrl, siteId, collection, slug, field, value, sessionToken } = options;
+  const headers = { Authorization: `Bearer ${sessionToken}` };
+  const getRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {
+    headers
+  });
+  if (!getRes.ok) return { ok: false, error: `GET failed: ${getRes.status}` };
+  const doc = await getRes.json();
+  const mergedData = { ...doc.data, [field]: value };
+  const patchRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {
+    method: "PATCH",
+    headers: { ...headers, "Content-Type": "application/json" },
+    body: JSON.stringify({ data: mergedData })
+  });
+  if (!patchRes.ok) return { ok: false, error: `PATCH failed: ${patchRes.status}` };
+  return { ok: true };
+}
+async function verifyEditSession(options) {
+  const res = await fetch(`${options.cmsBaseUrl}/api/auth/me`, {
+    headers: { Authorization: `Bearer ${options.token}` }
+  });
+  if (!res.ok) return null;
+  const body = await res.json();
+  return body.user ?? null;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  saveInlineEditField,
+  verifyEditSession
+});
+//# sourceMappingURL=index.cjs.map

package/dist/server/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/index.ts"],"sourcesContent":["/**\n * Optional server-side helpers (Node/Bun) for sites that want a same-origin\n * relay instead of calling the CMS directly from the browser. Not required\n * for the direct-from-browser flow used by initInlineEdit().\n */\n\nexport interface SaveInlineEditFieldOptions {\n  cmsBaseUrl: string;\n  siteId: string;\n  collection: string;\n  slug: string;\n  field: string;\n  value: string;\n  sessionToken: string;\n}\n\nexport type SaveInlineEditFieldResult = { ok: true } | { ok: false; error: string };\n\n/** GET the doc, merge the changed field into .data, PATCH the full merged object back. */\nexport async function saveInlineEditField(\n  options: SaveInlineEditFieldOptions,\n): Promise<SaveInlineEditFieldResult> {\n  const { cmsBaseUrl, siteId, collection, slug, field, value, sessionToken } = options;\n  const headers = { Authorization: `Bearer ${sessionToken}` };\n\n  const getRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {\n    headers,\n  });\n  if (!getRes.ok) return { ok: false, error: `GET failed: ${getRes.status}` };\n  const doc = (await getRes.json()) as { data?: Record<string, unknown> };\n  const mergedData = { ...doc.data, [field]: value };\n\n  const patchRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {\n    method: \"PATCH\",\n    headers: { ...headers, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify({ data: mergedData }),\n  });\n  if (!patchRes.ok) return { ok: false, error: `PATCH failed: ${patchRes.status}` };\n  return { ok: true };\n}\n\nexport interface VerifyEditSessionOptions {\n  cmsBaseUrl: string;\n  token: string;\n}\n\nexport interface EditSessionUser {\n  sub: string;\n  email: string;\n  name: string;\n  role: string;\n}\n\n/**\n * Calls the CMS's existing GET /api/auth/me with the token as a Bearer header.\n * That endpoint always returns 200 — {\"user\": null} for anonymous/invalid\n * tokens, never a 401 — so absence of a user is read from the body, not the\n * status code.\n */\nexport async function verifyEditSession(\n  options: VerifyEditSessionOptions,\n): Promise<EditSessionUser | null> {\n  const res = await fetch(`${options.cmsBaseUrl}/api/auth/me`, {\n    headers: { Authorization: `Bearer ${options.token}` },\n  });\n  if (!res.ok) return null;\n  const body = (await res.json()) as { user?: EditSessionUser | null };\n  return body.user ?? null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmBA,eAAsB,oBACpB,SACoC;AACpC,QAAM,EAAE,YAAY,QAAQ,YAAY,MAAM,OAAO,OAAO,aAAa,IAAI;AAC7E,QAAM,UAAU,EAAE,eAAe,UAAU,YAAY,GAAG;AAE1D,QAAM,SAAS,MAAM,MAAM,GAAG,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,MAAM,IAAI;AAAA,IACvF;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,eAAe,OAAO,MAAM,GAAG;AAC1E,QAAM,MAAO,MAAM,OAAO,KAAK;AAC/B,QAAM,aAAa,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,MAAM;AAEjD,QAAM,WAAW,MAAM,MAAM,GAAG,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,MAAM,IAAI;AAAA,IACzF,QAAQ;AAAA,IACR,SAAS,EAAE,GAAG,SAAS,gBAAgB,mBAAmB;AAAA,IAC1D,MAAM,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAAA,EAC3C,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,iBAAiB,SAAS,MAAM,GAAG;AAChF,SAAO,EAAE,IAAI,KAAK;AACpB;AAoBA,eAAsB,kBACpB,SACiC;AACjC,QAAM,MAAM,MAAM,MAAM,GAAG,QAAQ,UAAU,gBAAgB;AAAA,IAC3D,SAAS,EAAE,eAAe,UAAU,QAAQ,KAAK,GAAG;AAAA,EACtD,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,QAAO;AACpB,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,SAAO,KAAK,QAAQ;AACtB;","names":[]}

package/dist/server/index.d.cts

@@ -0,0 +1,41 @@
+/**
+ * Optional server-side helpers (Node/Bun) for sites that want a same-origin
+ * relay instead of calling the CMS directly from the browser. Not required
+ * for the direct-from-browser flow used by initInlineEdit().
+ */
+interface SaveInlineEditFieldOptions {
+    cmsBaseUrl: string;
+    siteId: string;
+    collection: string;
+    slug: string;
+    field: string;
+    value: string;
+    sessionToken: string;
+}
+type SaveInlineEditFieldResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/** GET the doc, merge the changed field into .data, PATCH the full merged object back. */
+declare function saveInlineEditField(options: SaveInlineEditFieldOptions): Promise<SaveInlineEditFieldResult>;
+interface VerifyEditSessionOptions {
+    cmsBaseUrl: string;
+    token: string;
+}
+interface EditSessionUser {
+    sub: string;
+    email: string;
+    name: string;
+    role: string;
+}
+/**
+ * Calls the CMS's existing GET /api/auth/me with the token as a Bearer header.
+ * That endpoint always returns 200 — {"user": null} for anonymous/invalid
+ * tokens, never a 401 — so absence of a user is read from the body, not the
+ * status code.
+ */
+declare function verifyEditSession(options: VerifyEditSessionOptions): Promise<EditSessionUser | null>;
+
+export { type EditSessionUser, type SaveInlineEditFieldOptions, type SaveInlineEditFieldResult, type VerifyEditSessionOptions, saveInlineEditField, verifyEditSession };

package/dist/server/index.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Optional server-side helpers (Node/Bun) for sites that want a same-origin
+ * relay instead of calling the CMS directly from the browser. Not required
+ * for the direct-from-browser flow used by initInlineEdit().
+ */
+interface SaveInlineEditFieldOptions {
+    cmsBaseUrl: string;
+    siteId: string;
+    collection: string;
+    slug: string;
+    field: string;
+    value: string;
+    sessionToken: string;
+}
+type SaveInlineEditFieldResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/** GET the doc, merge the changed field into .data, PATCH the full merged object back. */
+declare function saveInlineEditField(options: SaveInlineEditFieldOptions): Promise<SaveInlineEditFieldResult>;
+interface VerifyEditSessionOptions {
+    cmsBaseUrl: string;
+    token: string;
+}
+interface EditSessionUser {
+    sub: string;
+    email: string;
+    name: string;
+    role: string;
+}
+/**
+ * Calls the CMS's existing GET /api/auth/me with the token as a Bearer header.
+ * That endpoint always returns 200 — {"user": null} for anonymous/invalid
+ * tokens, never a 401 — so absence of a user is read from the body, not the
+ * status code.
+ */
+declare function verifyEditSession(options: VerifyEditSessionOptions): Promise<EditSessionUser | null>;
+
+export { type EditSessionUser, type SaveInlineEditFieldOptions, type SaveInlineEditFieldResult, type VerifyEditSessionOptions, saveInlineEditField, verifyEditSession };

package/dist/server/index.js

@@ -0,0 +1,31 @@
+// src/server/index.ts
+async function saveInlineEditField(options) {
+  const { cmsBaseUrl, siteId, collection, slug, field, value, sessionToken } = options;
+  const headers = { Authorization: `Bearer ${sessionToken}` };
+  const getRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {
+    headers
+  });
+  if (!getRes.ok) return { ok: false, error: `GET failed: ${getRes.status}` };
+  const doc = await getRes.json();
+  const mergedData = { ...doc.data, [field]: value };
+  const patchRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {
+    method: "PATCH",
+    headers: { ...headers, "Content-Type": "application/json" },
+    body: JSON.stringify({ data: mergedData })
+  });
+  if (!patchRes.ok) return { ok: false, error: `PATCH failed: ${patchRes.status}` };
+  return { ok: true };
+}
+async function verifyEditSession(options) {
+  const res = await fetch(`${options.cmsBaseUrl}/api/auth/me`, {
+    headers: { Authorization: `Bearer ${options.token}` }
+  });
+  if (!res.ok) return null;
+  const body = await res.json();
+  return body.user ?? null;
+}
+export {
+  saveInlineEditField,
+  verifyEditSession
+};
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/index.ts"],"sourcesContent":["/**\n * Optional server-side helpers (Node/Bun) for sites that want a same-origin\n * relay instead of calling the CMS directly from the browser. Not required\n * for the direct-from-browser flow used by initInlineEdit().\n */\n\nexport interface SaveInlineEditFieldOptions {\n  cmsBaseUrl: string;\n  siteId: string;\n  collection: string;\n  slug: string;\n  field: string;\n  value: string;\n  sessionToken: string;\n}\n\nexport type SaveInlineEditFieldResult = { ok: true } | { ok: false; error: string };\n\n/** GET the doc, merge the changed field into .data, PATCH the full merged object back. */\nexport async function saveInlineEditField(\n  options: SaveInlineEditFieldOptions,\n): Promise<SaveInlineEditFieldResult> {\n  const { cmsBaseUrl, siteId, collection, slug, field, value, sessionToken } = options;\n  const headers = { Authorization: `Bearer ${sessionToken}` };\n\n  const getRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {\n    headers,\n  });\n  if (!getRes.ok) return { ok: false, error: `GET failed: ${getRes.status}` };\n  const doc = (await getRes.json()) as { data?: Record<string, unknown> };\n  const mergedData = { ...doc.data, [field]: value };\n\n  const patchRes = await fetch(`${cmsBaseUrl}/api/cms/${collection}/${slug}?site=${siteId}`, {\n    method: \"PATCH\",\n    headers: { ...headers, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify({ data: mergedData }),\n  });\n  if (!patchRes.ok) return { ok: false, error: `PATCH failed: ${patchRes.status}` };\n  return { ok: true };\n}\n\nexport interface VerifyEditSessionOptions {\n  cmsBaseUrl: string;\n  token: string;\n}\n\nexport interface EditSessionUser {\n  sub: string;\n  email: string;\n  name: string;\n  role: string;\n}\n\n/**\n * Calls the CMS's existing GET /api/auth/me with the token as a Bearer header.\n * That endpoint always returns 200 — {\"user\": null} for anonymous/invalid\n * tokens, never a 401 — so absence of a user is read from the body, not the\n * status code.\n */\nexport async function verifyEditSession(\n  options: VerifyEditSessionOptions,\n): Promise<EditSessionUser | null> {\n  const res = await fetch(`${options.cmsBaseUrl}/api/auth/me`, {\n    headers: { Authorization: `Bearer ${options.token}` },\n  });\n  if (!res.ok) return null;\n  const body = (await res.json()) as { user?: EditSessionUser | null };\n  return body.user ?? null;\n}\n"],"mappings":";AAmBA,eAAsB,oBACpB,SACoC;AACpC,QAAM,EAAE,YAAY,QAAQ,YAAY,MAAM,OAAO,OAAO,aAAa,IAAI;AAC7E,QAAM,UAAU,EAAE,eAAe,UAAU,YAAY,GAAG;AAE1D,QAAM,SAAS,MAAM,MAAM,GAAG,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,MAAM,IAAI;AAAA,IACvF;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,eAAe,OAAO,MAAM,GAAG;AAC1E,QAAM,MAAO,MAAM,OAAO,KAAK;AAC/B,QAAM,aAAa,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,MAAM;AAEjD,QAAM,WAAW,MAAM,MAAM,GAAG,UAAU,YAAY,UAAU,IAAI,IAAI,SAAS,MAAM,IAAI;AAAA,IACzF,QAAQ;AAAA,IACR,SAAS,EAAE,GAAG,SAAS,gBAAgB,mBAAmB;AAAA,IAC1D,MAAM,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAAA,EAC3C,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,iBAAiB,SAAS,MAAM,GAAG;AAChF,SAAO,EAAE,IAAI,KAAK;AACpB;AAoBA,eAAsB,kBACpB,SACiC;AACjC,QAAM,MAAM,MAAM,MAAM,GAAG,QAAQ,UAAU,gBAAgB;AAAA,IAC3D,SAAS,EAAE,eAAe,UAAU,QAAQ,KAAK,GAAG;AAAA,EACtD,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,QAAO;AACpB,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,SAAO,KAAK,QAAQ;AACtB;","names":[]}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@broberg/cms-inline-edit",
+  "version": "0.1.0",
+  "description": "Click-to-edit inline editing for live @webhouse/cms-powered sites — copy-owned, framework-agnostic",
+  "type": "module",
+  "license": "MIT",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js",
+      "require": "./dist/server/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/webhousecode/cms.git",
+    "directory": "packages/cms-inline-edit"
+  },
+  "homepage": "https://docs.webhouse.app",
+  "bugs": {
+    "url": "https://github.com/webhousecode/cms/issues"
+  },
+  "keywords": [
+    "cms",
+    "inline-editing",
+    "visual-editing",
+    "webhouse"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2"
+  }
+}