@cmssy/core 11.4.0 → 11.4.1

package/dist/{csp-Bzrk_BeO.d.cts → csp-CRixC_wl.d.cts}

@@ -25,7 +25,9 @@ interface CmssyConfig {
      */
     devToken?: string;
     /**
-     * Origin allowed to frame your app in the editor. Defaults to
+     * Origin(s) allowed to frame your app in the editor: one origin, a list, or
+     * the comma-separated string an env var carries - all three are accepted, so
+     * `process.env.CMSSY_EDITOR_ORIGIN` can be passed through as-is. Defaults to
      * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
      */
     editorOrigin?: string | string[];

package/dist/{csp-B7ElkvAp.d.ts → csp-DpG1NcSd.d.ts}

@@ -25,7 +25,9 @@ interface CmssyConfig {
      */
     devToken?: string;
     /**
-     * Origin allowed to frame your app in the editor. Defaults to
+     * Origin(s) allowed to frame your app in the editor: one origin, a list, or
+     * the comma-separated string an env var carries - all three are accepted, so
+     * `process.env.CMSSY_EDITOR_ORIGIN` can be passed through as-is. Defaults to
      * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
      */
     editorOrigin?: string | string[];

package/dist/index.cjs

@@ -7,10 +7,11 @@ var DEFAULT_CMSSY_EDITOR_ORIGINS = [
   "https://cmssy.io",
   "https://www.cmssy.io"
 ];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+function parseEditorOrigin(raw) {
+  if (raw === void 0) return void 0;
+  const parts = (Array.isArray(raw) ? raw : [raw]).flatMap((entry) => typeof entry === "string" ? entry.split(",") : []).map((origin) => origin.trim()).filter((origin) => origin.length > 0);
   if (parts.length === 0) return void 0;
+  if (Array.isArray(raw)) return parts;
   return parts.length === 1 ? parts[0] : parts;
 }
 function isDevelopment() {
@@ -25,16 +26,18 @@ function rejectWildcardOutsideDevelopment(value) {
   }
 }
 function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
+  if (editorOrigin !== void 0) {
+    const explicit = parseEditorOrigin(editorOrigin);
+    if (explicit === void 0) return DEFAULT_CMSSY_EDITOR_ORIGINS;
+    rejectWildcardOutsideDevelopment(explicit);
+    return explicit;
+  }
+  const fromEnv = typeof process !== "undefined" ? parseEditorOrigin(process.env.CMSSY_EDITOR_ORIGIN) : void 0;
+  if (fromEnv === void 0) {
     return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
   }
-  rejectWildcardOutsideDevelopment(value);
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  rejectWildcardOutsideDevelopment(fromEnv);
+  return fromEnv;
 }
 var REQUIRED_CONFIG_ENV = [
   ["org", "CMSSY_ORG_SLUG"],

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-export { A as AppToEditorMessage, B as BoundsMessage, C as ClickMessage, a as CmssyClient, b as CmssyConfig, c as CmssyCspOptions, d as CmssyEnvConfig, e as CmssyTypedDocument, D as DEFAULT_CMSSY_EDITOR_ORIGINS, E as EditorToAppMessage, P as PROTOCOL_VERSION, f as ParentReadyMessage, g as PatchMessage, h as PostTarget, Q as QueryScopedOptions, R as ReadyMessage, S as SelectMessage, i as applyCmssyCsp, j as createCmssyClient, k as defineCmssyConfig, l as isProtocolCompatible, n as normalizeOrigin, p as parseEditorMessage, m as postToEditor, r as resolveEditorOrigin } from './csp-Bzrk_BeO.cjs';
+export { A as AppToEditorMessage, B as BoundsMessage, C as ClickMessage, a as CmssyClient, b as CmssyConfig, c as CmssyCspOptions, d as CmssyEnvConfig, e as CmssyTypedDocument, D as DEFAULT_CMSSY_EDITOR_ORIGINS, E as EditorToAppMessage, P as PROTOCOL_VERSION, f as ParentReadyMessage, g as PatchMessage, h as PostTarget, Q as QueryScopedOptions, R as ReadyMessage, S as SelectMessage, i as applyCmssyCsp, j as createCmssyClient, k as defineCmssyConfig, l as isProtocolCompatible, n as normalizeOrigin, p as parseEditorMessage, m as postToEditor, r as resolveEditorOrigin } from './csp-CRixC_wl.cjs';
 export { C as CMSSY_LOCALE_HEADER, G as GraphqlRequestOptions, g as graphqlRequest, l as localizeHref } from './locale-C7sA46qu.cjs';
 export { C as CmssyRequestError, D as DEFAULT_CMSSY_API_URL, F as FetchLike, a as FetchLikeResponse, b as FetchPageOptions, R as RetryPolicy } from './content-client-CJQ-nafm.cjs';
 import * as _cmssy_types from '@cmssy/types';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AppToEditorMessage, B as BoundsMessage, C as ClickMessage, a as CmssyClient, b as CmssyConfig, c as CmssyCspOptions, d as CmssyEnvConfig, e as CmssyTypedDocument, D as DEFAULT_CMSSY_EDITOR_ORIGINS, E as EditorToAppMessage, P as PROTOCOL_VERSION, f as ParentReadyMessage, g as PatchMessage, h as PostTarget, Q as QueryScopedOptions, R as ReadyMessage, S as SelectMessage, i as applyCmssyCsp, j as createCmssyClient, k as defineCmssyConfig, l as isProtocolCompatible, n as normalizeOrigin, p as parseEditorMessage, m as postToEditor, r as resolveEditorOrigin } from './csp-B7ElkvAp.js';
+export { A as AppToEditorMessage, B as BoundsMessage, C as ClickMessage, a as CmssyClient, b as CmssyConfig, c as CmssyCspOptions, d as CmssyEnvConfig, e as CmssyTypedDocument, D as DEFAULT_CMSSY_EDITOR_ORIGINS, E as EditorToAppMessage, P as PROTOCOL_VERSION, f as ParentReadyMessage, g as PatchMessage, h as PostTarget, Q as QueryScopedOptions, R as ReadyMessage, S as SelectMessage, i as applyCmssyCsp, j as createCmssyClient, k as defineCmssyConfig, l as isProtocolCompatible, n as normalizeOrigin, p as parseEditorMessage, m as postToEditor, r as resolveEditorOrigin } from './csp-DpG1NcSd.js';
 export { C as CMSSY_LOCALE_HEADER, G as GraphqlRequestOptions, g as graphqlRequest, l as localizeHref } from './locale-Ox_qVlNy.js';
 export { C as CmssyRequestError, D as DEFAULT_CMSSY_API_URL, F as FetchLike, a as FetchLikeResponse, b as FetchPageOptions, R as RetryPolicy } from './content-client-CJQ-nafm.js';
 import * as _cmssy_types from '@cmssy/types';

package/dist/index.js

@@ -5,10 +5,11 @@ var DEFAULT_CMSSY_EDITOR_ORIGINS = [
   "https://cmssy.io",
   "https://www.cmssy.io"
 ];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+function parseEditorOrigin(raw) {
+  if (raw === void 0) return void 0;
+  const parts = (Array.isArray(raw) ? raw : [raw]).flatMap((entry) => typeof entry === "string" ? entry.split(",") : []).map((origin) => origin.trim()).filter((origin) => origin.length > 0);
   if (parts.length === 0) return void 0;
+  if (Array.isArray(raw)) return parts;
   return parts.length === 1 ? parts[0] : parts;
 }
 function isDevelopment() {
@@ -23,16 +24,18 @@ function rejectWildcardOutsideDevelopment(value) {
   }
 }
 function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
+  if (editorOrigin !== void 0) {
+    const explicit = parseEditorOrigin(editorOrigin);
+    if (explicit === void 0) return DEFAULT_CMSSY_EDITOR_ORIGINS;
+    rejectWildcardOutsideDevelopment(explicit);
+    return explicit;
+  }
+  const fromEnv = typeof process !== "undefined" ? parseEditorOrigin(process.env.CMSSY_EDITOR_ORIGIN) : void 0;
+  if (fromEnv === void 0) {
     return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
   }
-  rejectWildcardOutsideDevelopment(value);
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  rejectWildcardOutsideDevelopment(fromEnv);
+  return fromEnv;
 }
 var REQUIRED_CONFIG_ENV = [
   ["org", "CMSSY_ORG_SLUG"],

package/dist/internal.cjs

@@ -1059,10 +1059,11 @@ var DEFAULT_CMSSY_EDITOR_ORIGINS = [
   "https://cmssy.io",
   "https://www.cmssy.io"
 ];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+function parseEditorOrigin(raw) {
+  if (raw === void 0) return void 0;
+  const parts = (Array.isArray(raw) ? raw : [raw]).flatMap((entry) => typeof entry === "string" ? entry.split(",") : []).map((origin) => origin.trim()).filter((origin) => origin.length > 0);
   if (parts.length === 0) return void 0;
+  if (Array.isArray(raw)) return parts;
   return parts.length === 1 ? parts[0] : parts;
 }
 function isDevelopment() {
@@ -1077,16 +1078,18 @@ function rejectWildcardOutsideDevelopment(value) {
   }
 }
 function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
-    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  if (editorOrigin !== void 0) {
+    const explicit = parseEditorOrigin(editorOrigin);
+    if (explicit === void 0) return DEFAULT_CMSSY_EDITOR_ORIGINS;
+    rejectWildcardOutsideDevelopment(explicit);
+    return explicit;
   }
-  rejectWildcardOutsideDevelopment(value);
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  const fromEnv = typeof process !== "undefined" ? parseEditorOrigin(process.env.CMSSY_EDITOR_ORIGIN) : void 0;
+  if (fromEnv === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
   }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  rejectWildcardOutsideDevelopment(fromEnv);
+  return fromEnv;
 }
 
 // src/csp.ts

package/dist/internal.d.cts

@@ -3,8 +3,8 @@ import { CmssyFormDefinition, BuildBlockContextExtra, CmssyBlockContext, CmssyCl
 export { CmssySiteLocales } from '@cmssy/types';
 import { G as GraphqlRequestOptions } from './locale-C7sA46qu.cjs';
 export { C as CMSSY_LOCALE_HEADER, b as buildLocaleSwitchHref, a as localeForPath, c as localeForPathname, l as localizeHref, d as localizeHtmlLinks, s as splitCmssyLocale } from './locale-C7sA46qu.cjs';
-import { Q as QueryScopedOptions } from './csp-Bzrk_BeO.cjs';
-export { o as cmssyCspHeaders, q as isDevelopment, s as resolveInitialTarget, t as toCspOrigin } from './csp-Bzrk_BeO.cjs';
+import { Q as QueryScopedOptions } from './csp-CRixC_wl.cjs';
+export { o as cmssyCspHeaders, q as isDevelopment, s as resolveInitialTarget, t as toCspOrigin } from './csp-CRixC_wl.cjs';
 export { localesFromSiteConfig, localizedPath, resolveSiteLocales, splitLocaleFromPath } from './internal/locale.cjs';
 
 declare const SITE_CONFIG_QUERY = "query PublicSiteConfig($workspaceSlug: String!) {\n  public {\n    siteConfig(workspaceSlug: $workspaceSlug) {\n      id\n      workspaceId\n      siteName\n      defaultLanguage\n      enabledLanguages\n      enabledFeatures\n      notFoundPageId\n      previewUrl\n      branding {\n        brandName\n        logoUrl\n        logoDarkUrl\n        faviconUrl\n        ogImageUrl\n      }\n    }\n  }\n}";

package/dist/internal.d.ts

@@ -3,8 +3,8 @@ import { CmssyFormDefinition, BuildBlockContextExtra, CmssyBlockContext, CmssyCl
 export { CmssySiteLocales } from '@cmssy/types';
 import { G as GraphqlRequestOptions } from './locale-Ox_qVlNy.js';
 export { C as CMSSY_LOCALE_HEADER, b as buildLocaleSwitchHref, a as localeForPath, c as localeForPathname, l as localizeHref, d as localizeHtmlLinks, s as splitCmssyLocale } from './locale-Ox_qVlNy.js';
-import { Q as QueryScopedOptions } from './csp-B7ElkvAp.js';
-export { o as cmssyCspHeaders, q as isDevelopment, s as resolveInitialTarget, t as toCspOrigin } from './csp-B7ElkvAp.js';
+import { Q as QueryScopedOptions } from './csp-DpG1NcSd.js';
+export { o as cmssyCspHeaders, q as isDevelopment, s as resolveInitialTarget, t as toCspOrigin } from './csp-DpG1NcSd.js';
 export { localesFromSiteConfig, localizedPath, resolveSiteLocales, splitLocaleFromPath } from './internal/locale.js';
 
 declare const SITE_CONFIG_QUERY = "query PublicSiteConfig($workspaceSlug: String!) {\n  public {\n    siteConfig(workspaceSlug: $workspaceSlug) {\n      id\n      workspaceId\n      siteName\n      defaultLanguage\n      enabledLanguages\n      enabledFeatures\n      notFoundPageId\n      previewUrl\n      branding {\n        brandName\n        logoUrl\n        logoDarkUrl\n        faviconUrl\n        ogImageUrl\n      }\n    }\n  }\n}";

package/dist/internal.js

@@ -1057,10 +1057,11 @@ var DEFAULT_CMSSY_EDITOR_ORIGINS = [
   "https://cmssy.io",
   "https://www.cmssy.io"
 ];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+function parseEditorOrigin(raw) {
+  if (raw === void 0) return void 0;
+  const parts = (Array.isArray(raw) ? raw : [raw]).flatMap((entry) => typeof entry === "string" ? entry.split(",") : []).map((origin) => origin.trim()).filter((origin) => origin.length > 0);
   if (parts.length === 0) return void 0;
+  if (Array.isArray(raw)) return parts;
   return parts.length === 1 ? parts[0] : parts;
 }
 function isDevelopment() {
@@ -1075,16 +1076,18 @@ function rejectWildcardOutsideDevelopment(value) {
   }
 }
 function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
-    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  if (editorOrigin !== void 0) {
+    const explicit = parseEditorOrigin(editorOrigin);
+    if (explicit === void 0) return DEFAULT_CMSSY_EDITOR_ORIGINS;
+    rejectWildcardOutsideDevelopment(explicit);
+    return explicit;
   }
-  rejectWildcardOutsideDevelopment(value);
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  const fromEnv = typeof process !== "undefined" ? parseEditorOrigin(process.env.CMSSY_EDITOR_ORIGIN) : void 0;
+  if (fromEnv === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
   }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  rejectWildcardOutsideDevelopment(fromEnv);
+  return fromEnv;
 }
 
 // src/csp.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/core",
-  "version": "11.4.0",
+  "version": "11.4.1",
   "description": "Framework-agnostic cmssy gateway: GraphQL client, block/field system, editor protocol. No React, no Next.",
   "keywords": [
     "cmssy",