@cmssy/next 0.3.0 → 0.5.0

package/README.md

@@ -69,17 +69,21 @@ import { CmssyLink } from "@cmssy/next/client";
 ```
 
 Add middleware so the root layout (which can't read the path) resolves the right
-locale via `getCmssyLocale`:
+locale via `getCmssyLocale`. On Next.js 16 the file is `proxy.ts` (the renamed
+middleware convention); on Next.js 15 use `middleware.ts` with the same body.
 
 ```ts
-// middleware.ts
+// proxy.ts (Next.js 16) — or middleware.ts on Next.js 15
 import { createCmssyLocaleMiddleware } from "@cmssy/next";
 import { cmssy } from "@/cmssy/config";
 
-export const middleware = createCmssyLocaleMiddleware(cmssy);
-export const config = { matcher: ["/((?!_next|api|.*\\..*).*)"] };
+export const proxy = createCmssyLocaleMiddleware(cmssy);
+export const config = { matcher: ["/((?!_next/|api/|.*\\..*).*)"] };
 ```
 
+On Next.js 15, name the file `middleware.ts` and rename the export to
+`middleware` (`export const middleware = createCmssyLocaleMiddleware(cmssy)`).
+
 Language switcher and raw markup helpers live in `@cmssy/react`:
 `buildLocaleSwitchHref(target, pathname, locale)`, `localizeHref(href, locale)`,
 `localizeHtmlLinks(html, locale)`.

package/dist/index.cjs

@@ -162,6 +162,175 @@ function resolveBridgeOrigin(editorOrigin) {
   }
   return origin;
 }
+function DefaultNotFound() {
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "main",
+    {
+      style: {
+        minHeight: "60vh",
+        display: "flex",
+        flexDirection: "column",
+        alignItems: "center",
+        justifyContent: "center",
+        gap: "0.5rem",
+        textAlign: "center",
+        padding: "2rem"
+      },
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h1", { style: { fontSize: "2rem", fontWeight: 700, margin: 0 }, children: "404" }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: 0, opacity: 0.7 }, children: "Page not found" })
+      ]
+    }
+  );
+}
+function createCmssyNotFound(config, blocks, options) {
+  if (!Array.isArray(blocks)) {
+    throw new Error(
+      "cmssy: createCmssyNotFound(config, blocks) requires a blocks array \u2014 pass your defineBlock(...) array"
+    );
+  }
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  const fallback = options?.fallback ?? /* @__PURE__ */ jsxRuntime.jsx(DefaultNotFound, {});
+  return async function CmssyNotFound() {
+    try {
+      const siteConfig = await react.fetchSiteConfig(clientConfig);
+      const notFoundPageId = siteConfig?.notFoundPageId;
+      if (!notFoundPageId) return fallback;
+      const page = await react.fetchPageById(clientConfig, notFoundPageId);
+      if (!page || page.blocks.length === 0) return fallback;
+      let locale;
+      let defaultLocale;
+      let enabledLocales = config.enabledLocales;
+      if (config.resolveLocale) {
+        defaultLocale = config.defaultLocale ?? "en";
+        locale = await config.resolveLocale();
+      } else {
+        const siteLocales = await react.resolveSiteLocales(clientConfig);
+        defaultLocale = config.defaultLocale ?? siteLocales.defaultLocale;
+        enabledLocales = config.enabledLocales ?? siteLocales.locales;
+        locale = defaultLocale;
+      }
+      const resolvedForms = await react.resolveForms(
+        clientConfig,
+        page.blocks,
+        locale,
+        defaultLocale
+      );
+      const forms = Object.keys(resolvedForms).length > 0 ? resolvedForms : void 0;
+      const localeContext = {
+        current: locale,
+        default: defaultLocale,
+        enabled: enabledLocales && enabledLocales.length > 0 ? enabledLocales : Array.from(/* @__PURE__ */ new Set([defaultLocale, locale]))
+      };
+      return /* @__PURE__ */ jsxRuntime.jsx(client.CmssyLocaleProvider, { value: localeContext, children: /* @__PURE__ */ jsxRuntime.jsx(
+        react.CmssyServerPage,
+        {
+          page,
+          blocks,
+          locale,
+          defaultLocale,
+          enabledLocales,
+          forms
+        }
+      ) });
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[cmssy] not-found page render failed", err);
+      }
+      return fallback;
+    }
+  };
+}
+
+// src/seo-base-url.ts
+function trimTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+async function resolveSeoBaseUrl(config, option) {
+  if (typeof option === "function") return trimTrailingSlash(await option());
+  if (typeof option === "string" && option) return trimTrailingSlash(option);
+  if (config.siteUrl) return trimTrailingSlash(config.siteUrl);
+  const { headers: headers3 } = await import('next/headers');
+  const h = await headers3();
+  const host = h.get("host");
+  if (!host) return "";
+  const protocol = isLocalHost(host) ? "http" : "https";
+  return `${protocol}://${host}`;
+}
+function isLocalHost(host) {
+  const hostname = host.replace(/:\d+$/, "").replace(/^\[|\]$/g, "");
+  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local") || hostname === "::1") {
+    return true;
+  }
+  const ipv4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(hostname);
+  if (!ipv4) return false;
+  const [a, b] = [Number(ipv4[1]), Number(ipv4[2])];
+  return a === 127 || a === 0 || a === 10 || a === 192 && b === 168 || a === 172 && b >= 16 && b <= 31;
+}
+
+// src/create-cmssy-robots.ts
+function createCmssyRobots(config, options = {}) {
+  return async function robots() {
+    const baseUrl = await resolveSeoBaseUrl(config, options.baseUrl);
+    const rules = options.rules ?? {
+      userAgent: "*",
+      allow: "/",
+      disallow: options.disallow ?? ["/api/"]
+    };
+    const includeSitemap = options.sitemap !== false && Boolean(baseUrl);
+    return {
+      rules,
+      ...includeSitemap ? { sitemap: `${baseUrl}/sitemap.xml` } : {},
+      ...baseUrl ? { host: baseUrl } : {}
+    };
+  };
+}
+function localizedPath(slug, locale, defaultLocale) {
+  const base = slug === "/" ? "" : slug;
+  return locale === defaultLocale ? base || "/" : `/${locale}${base}`;
+}
+function createCmssySitemap(config, options = {}) {
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  return async function sitemap() {
+    let pages = [];
+    try {
+      pages = await react.fetchPages(clientConfig);
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[cmssy] sitemap page fetch failed", err);
+      }
+      pages = [];
+    }
+    const baseUrl = await resolveSeoBaseUrl(config, options.baseUrl);
+    const defaultLocale = config.defaultLocale ?? "en";
+    const locales = config.enabledLocales && config.enabledLocales.length > 0 ? config.enabledLocales : [defaultLocale];
+    const entries = pages.map((page) => {
+      const lastModified = page.updatedAt ?? page.publishedAt ?? void 0;
+      const entry = {
+        url: `${baseUrl}${localizedPath(page.slug, defaultLocale, defaultLocale)}`,
+        ...lastModified ? { lastModified: new Date(lastModified) } : {}
+      };
+      if (locales.length > 1) {
+        entry.alternates = {
+          languages: Object.fromEntries(
+            locales.map((locale) => [
+              locale,
+              `${baseUrl}${localizedPath(page.slug, locale, defaultLocale)}`
+            ])
+          )
+        };
+      }
+      return entry;
+    });
+    return options.extra ? [...entries, ...options.extra] : entries;
+  };
+}
 var MIN_SECRET_LENGTH = 16;
 function secretsMatch(a, b) {
   const ha = crypto$1.createHash("sha256").update(a).digest();
@@ -1343,8 +1512,11 @@ exports.createCmssyAuthMiddleware = createCmssyAuthMiddleware;
 exports.createCmssyAuthRoute = createCmssyAuthRoute;
 exports.createCmssyCartRoute = createCmssyCartRoute;
 exports.createCmssyLocaleMiddleware = createCmssyLocaleMiddleware;
+exports.createCmssyNotFound = createCmssyNotFound;
 exports.createCmssyOrdersRoute = createCmssyOrdersRoute;
 exports.createCmssyPage = createCmssyPage;
+exports.createCmssyRobots = createCmssyRobots;
+exports.createCmssySitemap = createCmssySitemap;
 exports.createDraftRoute = createDraftRoute;
 exports.fetchProduct = fetchProduct;
 exports.fetchProducts = fetchProducts;

package/dist/index.d.cts

@@ -1,7 +1,8 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType } from 'react';
+import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
+import { MetadataRoute } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
 interface CmssyAuthConfig {
@@ -13,6 +14,12 @@ interface CmssyNextConfig {
     workspaceSlug: string;
     draftSecret: string;
     editorOrigin: string | string[];
+    /**
+     * Canonical absolute site URL (e.g. https://cmssy.com), used by
+     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
+     * origin from the request `host` header at render time (multi-domain safe).
+     */
+    siteUrl?: string;
     auth?: CmssyAuthConfig;
     defaultLocale?: string;
     /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
@@ -42,6 +49,59 @@ interface CatchAllProps {
 }
 declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
 
+interface CreateCmssyNotFoundOptions {
+    /**
+     * Rendered when no 404 page is configured in Settings, or the configured
+     * page has no published content. Defaults to a minimal built-in message.
+     */
+    fallback?: ReactNode;
+}
+/**
+ * Renders the workspace's configured 404 page (Settings → 404 page) as the
+ * body of Next's `app/not-found.tsx`, preserving the HTTP 404 status. Drop the
+ * returned component in as the default export of `app/not-found.tsx`:
+ *
+ *   export default createCmssyNotFound(cmssy, blocks);
+ */
+declare function createCmssyNotFound(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyNotFoundOptions): () => Promise<string | number | bigint | boolean | react_jsx_runtime.JSX.Element | Iterable<ReactNode> | null | undefined>;
+
+interface SeoBaseUrlOption {
+    /**
+     * Override for the canonical origin. A string (e.g. https://cmssy.com) or a
+     * resolver. Falls back to `config.siteUrl`, then the request `host` header.
+     */
+    baseUrl?: string | (() => string | Promise<string>);
+}
+
+interface CreateCmssyRobotsOptions extends SeoBaseUrlOption {
+    /** Path prefixes to disallow. Defaults to `["/api/"]`. */
+    disallow?: string[];
+    /** Override the generated rules entirely. */
+    rules?: MetadataRoute.Robots["rules"];
+    /** Reference `${baseUrl}/sitemap.xml`. Defaults to true. */
+    sitemap?: boolean;
+}
+/**
+ * Builds the default export for Next's `app/robots.ts`. Allows crawling, points
+ * to the sitemap, and reports the canonical host. Drop in as:
+ *
+ *   export default createCmssyRobots(cmssy);
+ */
+declare function createCmssyRobots(config: CmssyNextConfig, options?: CreateCmssyRobotsOptions): () => Promise<MetadataRoute.Robots>;
+
+interface CreateCmssySitemapOptions extends SeoBaseUrlOption {
+    /** Extra static entries appended to the generated page list. */
+    extra?: MetadataRoute.Sitemap;
+}
+/**
+ * Builds the default export for Next's `app/sitemap.ts` from the workspace's
+ * published pages. Emits one entry per page with per-locale `alternates` when
+ * the config enables multiple locales. Drop in as:
+ *
+ *   export default createCmssySitemap(cmssy);
+ */
+declare function createCmssySitemap(config: CmssyNextConfig, options?: CreateCmssySitemapOptions): () => Promise<MetadataRoute.Sitemap>;
+
 type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
     defaultRedirect?: string;
 };
@@ -235,4 +295,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyPageOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyOrdersRoute, createCmssyPage, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.d.ts

@@ -1,7 +1,8 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType } from 'react';
+import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
+import { MetadataRoute } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
 interface CmssyAuthConfig {
@@ -13,6 +14,12 @@ interface CmssyNextConfig {
     workspaceSlug: string;
     draftSecret: string;
     editorOrigin: string | string[];
+    /**
+     * Canonical absolute site URL (e.g. https://cmssy.com), used by
+     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
+     * origin from the request `host` header at render time (multi-domain safe).
+     */
+    siteUrl?: string;
     auth?: CmssyAuthConfig;
     defaultLocale?: string;
     /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
@@ -42,6 +49,59 @@ interface CatchAllProps {
 }
 declare function createCmssyPage(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyPageOptions): ({ params, searchParams, }: CatchAllProps) => Promise<react_jsx_runtime.JSX.Element>;
 
+interface CreateCmssyNotFoundOptions {
+    /**
+     * Rendered when no 404 page is configured in Settings, or the configured
+     * page has no published content. Defaults to a minimal built-in message.
+     */
+    fallback?: ReactNode;
+}
+/**
+ * Renders the workspace's configured 404 page (Settings → 404 page) as the
+ * body of Next's `app/not-found.tsx`, preserving the HTTP 404 status. Drop the
+ * returned component in as the default export of `app/not-found.tsx`:
+ *
+ *   export default createCmssyNotFound(cmssy, blocks);
+ */
+declare function createCmssyNotFound(config: CmssyNextConfig, blocks: BlockDefinition[], options?: CreateCmssyNotFoundOptions): () => Promise<string | number | bigint | boolean | react_jsx_runtime.JSX.Element | Iterable<ReactNode> | null | undefined>;
+
+interface SeoBaseUrlOption {
+    /**
+     * Override for the canonical origin. A string (e.g. https://cmssy.com) or a
+     * resolver. Falls back to `config.siteUrl`, then the request `host` header.
+     */
+    baseUrl?: string | (() => string | Promise<string>);
+}
+
+interface CreateCmssyRobotsOptions extends SeoBaseUrlOption {
+    /** Path prefixes to disallow. Defaults to `["/api/"]`. */
+    disallow?: string[];
+    /** Override the generated rules entirely. */
+    rules?: MetadataRoute.Robots["rules"];
+    /** Reference `${baseUrl}/sitemap.xml`. Defaults to true. */
+    sitemap?: boolean;
+}
+/**
+ * Builds the default export for Next's `app/robots.ts`. Allows crawling, points
+ * to the sitemap, and reports the canonical host. Drop in as:
+ *
+ *   export default createCmssyRobots(cmssy);
+ */
+declare function createCmssyRobots(config: CmssyNextConfig, options?: CreateCmssyRobotsOptions): () => Promise<MetadataRoute.Robots>;
+
+interface CreateCmssySitemapOptions extends SeoBaseUrlOption {
+    /** Extra static entries appended to the generated page list. */
+    extra?: MetadataRoute.Sitemap;
+}
+/**
+ * Builds the default export for Next's `app/sitemap.ts` from the workspace's
+ * published pages. Emits one entry per page with per-locale `alternates` when
+ * the config enables multiple locales. Drop in as:
+ *
+ *   export default createCmssySitemap(cmssy);
+ */
+declare function createCmssySitemap(config: CmssyNextConfig, options?: CreateCmssySitemapOptions): () => Promise<MetadataRoute.Sitemap>;
+
 type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
     defaultRedirect?: string;
 };
@@ -235,4 +295,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyPageOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyOrdersRoute, createCmssyPage, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.js

@@ -1,8 +1,8 @@
 import { draftMode, headers, cookies } from 'next/headers';
 import { notFound, redirect } from 'next/navigation';
-import { resolveSiteLocales, splitLocaleFromPath, fetchPage, resolveForms, CmssyServerPage, resolveWorkspaceId, graphqlRequest } from '@cmssy/react';
+import { resolveSiteLocales, splitLocaleFromPath, fetchPage, resolveForms, CmssyServerPage, fetchSiteConfig, fetchPageById, fetchPages, resolveWorkspaceId, graphqlRequest } from '@cmssy/react';
 import { CmssyLocaleProvider } from '@cmssy/react/client';
-import { jsx } from 'react/jsx-runtime';
+import { jsx, jsxs } from 'react/jsx-runtime';
 import { createHmac, createHash, timingSafeEqual } from 'crypto';
 import { NextResponse } from 'next/server';
 import { EncryptJWT, jwtDecrypt } from 'jose';
@@ -160,6 +160,175 @@ function resolveBridgeOrigin(editorOrigin) {
   }
   return origin;
 }
+function DefaultNotFound() {
+  return /* @__PURE__ */ jsxs(
+    "main",
+    {
+      style: {
+        minHeight: "60vh",
+        display: "flex",
+        flexDirection: "column",
+        alignItems: "center",
+        justifyContent: "center",
+        gap: "0.5rem",
+        textAlign: "center",
+        padding: "2rem"
+      },
+      children: [
+        /* @__PURE__ */ jsx("h1", { style: { fontSize: "2rem", fontWeight: 700, margin: 0 }, children: "404" }),
+        /* @__PURE__ */ jsx("p", { style: { margin: 0, opacity: 0.7 }, children: "Page not found" })
+      ]
+    }
+  );
+}
+function createCmssyNotFound(config, blocks, options) {
+  if (!Array.isArray(blocks)) {
+    throw new Error(
+      "cmssy: createCmssyNotFound(config, blocks) requires a blocks array \u2014 pass your defineBlock(...) array"
+    );
+  }
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  const fallback = options?.fallback ?? /* @__PURE__ */ jsx(DefaultNotFound, {});
+  return async function CmssyNotFound() {
+    try {
+      const siteConfig = await fetchSiteConfig(clientConfig);
+      const notFoundPageId = siteConfig?.notFoundPageId;
+      if (!notFoundPageId) return fallback;
+      const page = await fetchPageById(clientConfig, notFoundPageId);
+      if (!page || page.blocks.length === 0) return fallback;
+      let locale;
+      let defaultLocale;
+      let enabledLocales = config.enabledLocales;
+      if (config.resolveLocale) {
+        defaultLocale = config.defaultLocale ?? "en";
+        locale = await config.resolveLocale();
+      } else {
+        const siteLocales = await resolveSiteLocales(clientConfig);
+        defaultLocale = config.defaultLocale ?? siteLocales.defaultLocale;
+        enabledLocales = config.enabledLocales ?? siteLocales.locales;
+        locale = defaultLocale;
+      }
+      const resolvedForms = await resolveForms(
+        clientConfig,
+        page.blocks,
+        locale,
+        defaultLocale
+      );
+      const forms = Object.keys(resolvedForms).length > 0 ? resolvedForms : void 0;
+      const localeContext = {
+        current: locale,
+        default: defaultLocale,
+        enabled: enabledLocales && enabledLocales.length > 0 ? enabledLocales : Array.from(/* @__PURE__ */ new Set([defaultLocale, locale]))
+      };
+      return /* @__PURE__ */ jsx(CmssyLocaleProvider, { value: localeContext, children: /* @__PURE__ */ jsx(
+        CmssyServerPage,
+        {
+          page,
+          blocks,
+          locale,
+          defaultLocale,
+          enabledLocales,
+          forms
+        }
+      ) });
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[cmssy] not-found page render failed", err);
+      }
+      return fallback;
+    }
+  };
+}
+
+// src/seo-base-url.ts
+function trimTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+async function resolveSeoBaseUrl(config, option) {
+  if (typeof option === "function") return trimTrailingSlash(await option());
+  if (typeof option === "string" && option) return trimTrailingSlash(option);
+  if (config.siteUrl) return trimTrailingSlash(config.siteUrl);
+  const { headers: headers3 } = await import('next/headers');
+  const h = await headers3();
+  const host = h.get("host");
+  if (!host) return "";
+  const protocol = isLocalHost(host) ? "http" : "https";
+  return `${protocol}://${host}`;
+}
+function isLocalHost(host) {
+  const hostname = host.replace(/:\d+$/, "").replace(/^\[|\]$/g, "");
+  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local") || hostname === "::1") {
+    return true;
+  }
+  const ipv4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(hostname);
+  if (!ipv4) return false;
+  const [a, b] = [Number(ipv4[1]), Number(ipv4[2])];
+  return a === 127 || a === 0 || a === 10 || a === 192 && b === 168 || a === 172 && b >= 16 && b <= 31;
+}
+
+// src/create-cmssy-robots.ts
+function createCmssyRobots(config, options = {}) {
+  return async function robots() {
+    const baseUrl = await resolveSeoBaseUrl(config, options.baseUrl);
+    const rules = options.rules ?? {
+      userAgent: "*",
+      allow: "/",
+      disallow: options.disallow ?? ["/api/"]
+    };
+    const includeSitemap = options.sitemap !== false && Boolean(baseUrl);
+    return {
+      rules,
+      ...includeSitemap ? { sitemap: `${baseUrl}/sitemap.xml` } : {},
+      ...baseUrl ? { host: baseUrl } : {}
+    };
+  };
+}
+function localizedPath(slug, locale, defaultLocale) {
+  const base = slug === "/" ? "" : slug;
+  return locale === defaultLocale ? base || "/" : `/${locale}${base}`;
+}
+function createCmssySitemap(config, options = {}) {
+  const clientConfig = {
+    apiUrl: config.apiUrl,
+    workspaceSlug: config.workspaceSlug
+  };
+  return async function sitemap() {
+    let pages = [];
+    try {
+      pages = await fetchPages(clientConfig);
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[cmssy] sitemap page fetch failed", err);
+      }
+      pages = [];
+    }
+    const baseUrl = await resolveSeoBaseUrl(config, options.baseUrl);
+    const defaultLocale = config.defaultLocale ?? "en";
+    const locales = config.enabledLocales && config.enabledLocales.length > 0 ? config.enabledLocales : [defaultLocale];
+    const entries = pages.map((page) => {
+      const lastModified = page.updatedAt ?? page.publishedAt ?? void 0;
+      const entry = {
+        url: `${baseUrl}${localizedPath(page.slug, defaultLocale, defaultLocale)}`,
+        ...lastModified ? { lastModified: new Date(lastModified) } : {}
+      };
+      if (locales.length > 1) {
+        entry.alternates = {
+          languages: Object.fromEntries(
+            locales.map((locale) => [
+              locale,
+              `${baseUrl}${localizedPath(page.slug, locale, defaultLocale)}`
+            ])
+          )
+        };
+      }
+      return entry;
+    });
+    return options.extra ? [...entries, ...options.extra] : entries;
+  };
+}
 var MIN_SECRET_LENGTH = 16;
 function secretsMatch(a, b) {
   const ha = createHash("sha256").update(a).digest();
@@ -1328,4 +1497,4 @@ function verifyCmssyWebhook(options) {
   return parsed;
 }
 
-export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, CmssyWebhookError, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyOrdersRoute, createCmssyPage, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, CmssyWebhookError, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -41,7 +41,7 @@
     "dist"
   ],
   "peerDependencies": {
-    "@cmssy/react": "^0.3.0",
+    "@cmssy/react": "^0.5.0",
     "next": ">=15",
     "react": "^18.2.0 || ^19.0.0",
     "react-dom": "^18.2.0 || ^19.0.0"
@@ -54,7 +54,7 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "0.3.0"
+    "@cmssy/react": "0.5.0"
   },
   "dependencies": {
     "jose": "^6.2.3"