@cmssy/next 0.1.0

package/dist/index.cjs

@@ -0,0 +1,193 @@
+'use strict';
+
+var headers = require('next/headers');
+var navigation = require('next/navigation');
+var react = require('@cmssy/react');
+var jsxRuntime = require('react/jsx-runtime');
+var crypto = require('crypto');
+
+// src/create-cmssy-page.tsx
+
+// src/csp.ts
+function toCspOrigin(origin) {
+  if (origin === "*") return "*";
+  let parsed;
+  try {
+    parsed = new URL(origin);
+  } catch {
+    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
+  }
+  if (parsed.origin === "null") {
+    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
+  }
+  return parsed.origin;
+}
+function frameAncestors(editorOrigin) {
+  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  if (origins.length === 0) {
+    throw new Error(
+      "cmssy: editorOrigin must contain at least one valid origin"
+    );
+  }
+  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
+  return `frame-ancestors ${normalized.join(" ")}`;
+}
+function cmssyCspHeaders(options) {
+  return {
+    "Content-Security-Policy": frameAncestors(options.editorOrigin)
+  };
+}
+function mergeFrameAncestors(existing, directive) {
+  if (!existing) return directive;
+  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
+  kept.push(directive);
+  return kept.join("; ");
+}
+function applyCmssyCsp(response, options) {
+  const merged = mergeFrameAncestors(
+    response.headers.get("Content-Security-Policy"),
+    frameAncestors(options.editorOrigin)
+  );
+  response.headers.set("Content-Security-Policy", merged);
+  response.headers.delete("X-Frame-Options");
+  return response;
+}
+var EDIT_QUERY_PARAM = "cmssyEdit";
+function hasEditFlag(value) {
+  return Array.isArray(value) ? value.includes("1") : value === "1";
+}
+function createCmssyPage(config, blocks, options) {
+  if (!Array.isArray(blocks)) {
+    throw new Error(
+      "cmssy: createCmssyPage(config, blocks) requires a blocks array \u2014 pass your defineBlock(...) array"
+    );
+  }
+  const Editor = options?.editor;
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  const defaultLocale = config.defaultLocale ?? "en";
+  return async function CmssyCatchAllPage({
+    params,
+    searchParams
+  }) {
+    const { path } = await params;
+    const { isEnabled } = await headers.draftMode();
+    const query = searchParams ? await searchParams : {};
+    const editMode = isEnabled || hasEditFlag(query[EDIT_QUERY_PARAM]);
+    const locale = config.resolveLocale ? await config.resolveLocale() : defaultLocale;
+    const page = await react.fetchPage(clientConfig, path, {
+      previewSecret: editMode ? config.draftSecret : void 0
+    });
+    if (!page) {
+      navigation.notFound();
+    }
+    if (editMode) {
+      if (!Editor) {
+        throw new Error(
+          'cmssy: edit mode requires options.editor \u2014 pass a "use client" editor that imports your blocks and renders <CmssyEditablePage blocks={blocks} \u2026 />'
+        );
+      }
+      const bridgeOrigin = resolveBridgeOrigin(config.editorOrigin);
+      return /* @__PURE__ */ jsxRuntime.jsx(
+        Editor,
+        {
+          page,
+          locale,
+          defaultLocale,
+          edit: { editorOrigin: bridgeOrigin }
+        }
+      );
+    }
+    return /* @__PURE__ */ jsxRuntime.jsx(
+      react.CmssyServerPage,
+      {
+        page,
+        blocks,
+        locale,
+        defaultLocale
+      }
+    );
+  };
+}
+function resolveBridgeOrigin(editorOrigin) {
+  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  if (origins.length === 0) {
+    throw new Error("cmssy: editorOrigin must be set to frame the editor");
+  }
+  if (origins.length > 1 && typeof console !== "undefined") {
+    console.warn(
+      "[cmssy] multiple editorOrigins configured; the live-edit bridge uses only the first"
+    );
+  }
+  const origin = toCspOrigin(origins[0].trim());
+  if (origin === "*") {
+    throw new Error(
+      "cmssy: editorOrigin '*' is not allowed for the live-edit bridge; set the concrete editor origin (e.g. https://app.cmssy.io)"
+    );
+  }
+  return origin;
+}
+var MIN_SECRET_LENGTH = 16;
+function secretsMatch(a, b) {
+  const ha = crypto.createHash("sha256").update(a).digest();
+  const hb = crypto.createHash("sha256").update(b).digest();
+  return crypto.timingSafeEqual(ha, hb);
+}
+function safeRedirect(redirect2, fallback) {
+  if (!redirect2 || !redirect2.startsWith("/")) return fallback;
+  if (redirect2.startsWith("//") || redirect2.includes("\\")) return fallback;
+  try {
+    if (new URL(redirect2, "https://cmssy.invalid").origin !== "https://cmssy.invalid") {
+      return fallback;
+    }
+  } catch {
+    return fallback;
+  }
+  return redirect2;
+}
+function createDraftRoute(config) {
+  const fallbackRedirect = config.defaultRedirect ?? "/";
+  if (safeRedirect(fallbackRedirect, "/") !== fallbackRedirect) {
+    throw new Error(
+      "cmssy: defaultRedirect must be a same-origin path starting with '/'"
+    );
+  }
+  return async function GET(request) {
+    if (config.draftSecret.length < MIN_SECRET_LENGTH) {
+      return new Response(
+        `cmssy: draftSecret must be at least ${MIN_SECRET_LENGTH} characters`,
+        { status: 500 }
+      );
+    }
+    const url = new URL(request.url);
+    const secret = url.searchParams.get("secret");
+    if (!secret || !secretsMatch(secret, config.draftSecret)) {
+      return new Response("Invalid draft secret", { status: 401 });
+    }
+    const location = safeRedirect(
+      url.searchParams.get("redirect"),
+      fallbackRedirect
+    );
+    const draft = await headers.draftMode();
+    draft.enable();
+    navigation.redirect(location);
+  };
+}
+var CMSSY_EDIT_HEADER = "x-cmssy-edit";
+function isCmssyEditRequest(request) {
+  return request.cookies.has("__prerender_bypass") || request.nextUrl.searchParams.getAll("cmssyEdit").includes("1");
+}
+async function isCmssyEditMode() {
+  const h = await headers.headers();
+  return h.get(CMSSY_EDIT_HEADER) === "1";
+}
+
+exports.CMSSY_EDIT_HEADER = CMSSY_EDIT_HEADER;
+exports.applyCmssyCsp = applyCmssyCsp;
+exports.cmssyCspHeaders = cmssyCspHeaders;
+exports.createCmssyPage = createCmssyPage;
+exports.createDraftRoute = createDraftRoute;
+exports.isCmssyEditMode = isCmssyEditMode;
+exports.isCmssyEditRequest = isCmssyEditRequest;

package/dist/index.d.cts

@@ -0,0 +1,66 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ComponentType } from 'react';
+import { CmssyPageData, BlockDefinition } from '@cmssy/react';
+import { EditBridgeConfig } from '@cmssy/react/client';
+
+interface CmssyNextConfig {
+    apiUrl: string;
+    workspaceSlug: string;
+    draftSecret: string;
+    editorOrigin: string | string[];
+    defaultLocale?: string;
+    resolveLocale?: () => string | Promise<string>;
+}
+
+interface CmssyEditorProps {
+    page: CmssyPageData;
+    locale: string;
+    defaultLocale: string;
+    edit: EditBridgeConfig;
+}
+interface CreateCmssyPageOptions {
+    editor?: ComponentType<CmssyEditorProps>;
+}
+interface CatchAllParams {
+    path?: string[];
+}
+type SearchParams = Record<string, string | string[] | undefined>;
+interface CatchAllProps {
+    params: Promise<CatchAllParams>;
+    searchParams?: Promise<SearchParams>;
+}
+declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
+
+type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
+    defaultRedirect?: string;
+};
+declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
+
+interface CmssyCspOptions {
+    editorOrigin: string | string[];
+}
+interface MutableHeaders {
+    headers: {
+        get: (name: string) => string | null;
+        set: (name: string, value: string) => void;
+        delete: (name: string) => void;
+    };
+}
+declare function cmssyCspHeaders(options: CmssyCspOptions): Record<string, string>;
+declare function applyCmssyCsp<T extends MutableHeaders>(response: T, options: CmssyCspOptions): T;
+
+declare const CMSSY_EDIT_HEADER = "x-cmssy-edit";
+interface EditRequestLike {
+    cookies: {
+        has: (name: string) => boolean;
+    };
+    nextUrl: {
+        searchParams: {
+            getAll: (name: string) => string[];
+        };
+    };
+}
+declare function isCmssyEditRequest(request: EditRequestLike): boolean;
+declare function isCmssyEditMode(): Promise<boolean>;
+
+export { CMSSY_EDIT_HEADER, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CreateCmssyPageOptions, applyCmssyCsp, cmssyCspHeaders, createCmssyPage, createDraftRoute, isCmssyEditMode, isCmssyEditRequest };

package/dist/index.d.ts

@@ -0,0 +1,66 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ComponentType } from 'react';
+import { CmssyPageData, BlockDefinition } from '@cmssy/react';
+import { EditBridgeConfig } from '@cmssy/react/client';
+
+interface CmssyNextConfig {
+    apiUrl: string;
+    workspaceSlug: string;
+    draftSecret: string;
+    editorOrigin: string | string[];
+    defaultLocale?: string;
+    resolveLocale?: () => string | Promise<string>;
+}
+
+interface CmssyEditorProps {
+    page: CmssyPageData;
+    locale: string;
+    defaultLocale: string;
+    edit: EditBridgeConfig;
+}
+interface CreateCmssyPageOptions {
+    editor?: ComponentType<CmssyEditorProps>;
+}
+interface CatchAllParams {
+    path?: string[];
+}
+type SearchParams = Record<string, string | string[] | undefined>;
+interface CatchAllProps {
+    params: Promise<CatchAllParams>;
+    searchParams?: Promise<SearchParams>;
+}
+declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
+
+type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
+    defaultRedirect?: string;
+};
+declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
+
+interface CmssyCspOptions {
+    editorOrigin: string | string[];
+}
+interface MutableHeaders {
+    headers: {
+        get: (name: string) => string | null;
+        set: (name: string, value: string) => void;
+        delete: (name: string) => void;
+    };
+}
+declare function cmssyCspHeaders(options: CmssyCspOptions): Record<string, string>;
+declare function applyCmssyCsp<T extends MutableHeaders>(response: T, options: CmssyCspOptions): T;
+
+declare const CMSSY_EDIT_HEADER = "x-cmssy-edit";
+interface EditRequestLike {
+    cookies: {
+        has: (name: string) => boolean;
+    };
+    nextUrl: {
+        searchParams: {
+            getAll: (name: string) => string[];
+        };
+    };
+}
+declare function isCmssyEditRequest(request: EditRequestLike): boolean;
+declare function isCmssyEditMode(): Promise<boolean>;
+
+export { CMSSY_EDIT_HEADER, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CreateCmssyPageOptions, applyCmssyCsp, cmssyCspHeaders, createCmssyPage, createDraftRoute, isCmssyEditMode, isCmssyEditRequest };

package/dist/index.js

@@ -0,0 +1,185 @@
+import { draftMode, headers } from 'next/headers';
+import { notFound, redirect } from 'next/navigation';
+import { fetchPage, CmssyServerPage } from '@cmssy/react';
+import { jsx } from 'react/jsx-runtime';
+import { createHash, timingSafeEqual } from 'crypto';
+
+// src/create-cmssy-page.tsx
+
+// src/csp.ts
+function toCspOrigin(origin) {
+  if (origin === "*") return "*";
+  let parsed;
+  try {
+    parsed = new URL(origin);
+  } catch {
+    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
+  }
+  if (parsed.origin === "null") {
+    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
+  }
+  return parsed.origin;
+}
+function frameAncestors(editorOrigin) {
+  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  if (origins.length === 0) {
+    throw new Error(
+      "cmssy: editorOrigin must contain at least one valid origin"
+    );
+  }
+  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
+  return `frame-ancestors ${normalized.join(" ")}`;
+}
+function cmssyCspHeaders(options) {
+  return {
+    "Content-Security-Policy": frameAncestors(options.editorOrigin)
+  };
+}
+function mergeFrameAncestors(existing, directive) {
+  if (!existing) return directive;
+  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
+  kept.push(directive);
+  return kept.join("; ");
+}
+function applyCmssyCsp(response, options) {
+  const merged = mergeFrameAncestors(
+    response.headers.get("Content-Security-Policy"),
+    frameAncestors(options.editorOrigin)
+  );
+  response.headers.set("Content-Security-Policy", merged);
+  response.headers.delete("X-Frame-Options");
+  return response;
+}
+var EDIT_QUERY_PARAM = "cmssyEdit";
+function hasEditFlag(value) {
+  return Array.isArray(value) ? value.includes("1") : value === "1";
+}
+function createCmssyPage(config, blocks, options) {
+  if (!Array.isArray(blocks)) {
+    throw new Error(
+      "cmssy: createCmssyPage(config, blocks) requires a blocks array \u2014 pass your defineBlock(...) array"
+    );
+  }
+  const Editor = options?.editor;
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  const defaultLocale = config.defaultLocale ?? "en";
+  return async function CmssyCatchAllPage({
+    params,
+    searchParams
+  }) {
+    const { path } = await params;
+    const { isEnabled } = await draftMode();
+    const query = searchParams ? await searchParams : {};
+    const editMode = isEnabled || hasEditFlag(query[EDIT_QUERY_PARAM]);
+    const locale = config.resolveLocale ? await config.resolveLocale() : defaultLocale;
+    const page = await fetchPage(clientConfig, path, {
+      previewSecret: editMode ? config.draftSecret : void 0
+    });
+    if (!page) {
+      notFound();
+    }
+    if (editMode) {
+      if (!Editor) {
+        throw new Error(
+          'cmssy: edit mode requires options.editor \u2014 pass a "use client" editor that imports your blocks and renders <CmssyEditablePage blocks={blocks} \u2026 />'
+        );
+      }
+      const bridgeOrigin = resolveBridgeOrigin(config.editorOrigin);
+      return /* @__PURE__ */ jsx(
+        Editor,
+        {
+          page,
+          locale,
+          defaultLocale,
+          edit: { editorOrigin: bridgeOrigin }
+        }
+      );
+    }
+    return /* @__PURE__ */ jsx(
+      CmssyServerPage,
+      {
+        page,
+        blocks,
+        locale,
+        defaultLocale
+      }
+    );
+  };
+}
+function resolveBridgeOrigin(editorOrigin) {
+  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  if (origins.length === 0) {
+    throw new Error("cmssy: editorOrigin must be set to frame the editor");
+  }
+  if (origins.length > 1 && typeof console !== "undefined") {
+    console.warn(
+      "[cmssy] multiple editorOrigins configured; the live-edit bridge uses only the first"
+    );
+  }
+  const origin = toCspOrigin(origins[0].trim());
+  if (origin === "*") {
+    throw new Error(
+      "cmssy: editorOrigin '*' is not allowed for the live-edit bridge; set the concrete editor origin (e.g. https://app.cmssy.io)"
+    );
+  }
+  return origin;
+}
+var MIN_SECRET_LENGTH = 16;
+function secretsMatch(a, b) {
+  const ha = createHash("sha256").update(a).digest();
+  const hb = createHash("sha256").update(b).digest();
+  return timingSafeEqual(ha, hb);
+}
+function safeRedirect(redirect2, fallback) {
+  if (!redirect2 || !redirect2.startsWith("/")) return fallback;
+  if (redirect2.startsWith("//") || redirect2.includes("\\")) return fallback;
+  try {
+    if (new URL(redirect2, "https://cmssy.invalid").origin !== "https://cmssy.invalid") {
+      return fallback;
+    }
+  } catch {
+    return fallback;
+  }
+  return redirect2;
+}
+function createDraftRoute(config) {
+  const fallbackRedirect = config.defaultRedirect ?? "/";
+  if (safeRedirect(fallbackRedirect, "/") !== fallbackRedirect) {
+    throw new Error(
+      "cmssy: defaultRedirect must be a same-origin path starting with '/'"
+    );
+  }
+  return async function GET(request) {
+    if (config.draftSecret.length < MIN_SECRET_LENGTH) {
+      return new Response(
+        `cmssy: draftSecret must be at least ${MIN_SECRET_LENGTH} characters`,
+        { status: 500 }
+      );
+    }
+    const url = new URL(request.url);
+    const secret = url.searchParams.get("secret");
+    if (!secret || !secretsMatch(secret, config.draftSecret)) {
+      return new Response("Invalid draft secret", { status: 401 });
+    }
+    const location = safeRedirect(
+      url.searchParams.get("redirect"),
+      fallbackRedirect
+    );
+    const draft = await draftMode();
+    draft.enable();
+    redirect(location);
+  };
+}
+var CMSSY_EDIT_HEADER = "x-cmssy-edit";
+function isCmssyEditRequest(request) {
+  return request.cookies.has("__prerender_bypass") || request.nextUrl.searchParams.getAll("cmssyEdit").includes("1");
+}
+async function isCmssyEditMode() {
+  const h = await headers();
+  return h.get(CMSSY_EDIT_HEADER) === "1";
+}
+
+export { CMSSY_EDIT_HEADER, applyCmssyCsp, cmssyCspHeaders, createCmssyPage, createDraftRoute, isCmssyEditMode, isCmssyEditRequest };

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@cmssy/next",
+  "version": "0.1.0",
+  "type": "module",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "peerDependencies": {
+    "@cmssy/react": "^0.1.0",
+    "next": ">=15",
+    "react": "^18.2.0 || ^19.0.0",
+    "react-dom": "^18.2.0 || ^19.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/react": "^19.0.0",
+    "next": "^16.0.0",
+    "react": "^19.0.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0",
+    "@cmssy/react": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}