@cmssy/next 0.5.5 → 0.6.0

package/README.md

@@ -26,11 +26,10 @@ export default createCmssyPage(cmssy, blocks, { editor: CmssyEditor });
 import type { CmssyNextConfig } from "@cmssy/next";
 
 export const cmssy: CmssyNextConfig = {
-  apiUrl: process.env.CMSSY_API_URL ?? "", // public GraphQL delivery endpoint
   workspaceSlug: process.env.CMSSY_WORKSPACE_SLUG ?? "",
   draftSecret: process.env.CMSSY_DRAFT_SECRET ?? "", // edit-mode preview handshake
-  editorOrigin: process.env.CMSSY_EDITOR_ORIGIN ?? "", // only needed in edit mode
   defaultLocale: "en",
+  // apiUrl + editorOrigin default to cmssy cloud; set them only for self-host/staging.
 };
 ```
 

package/dist/index.cjs

@@ -71,6 +71,30 @@ function sessionCookieOptions() {
 }
 
 // src/config.ts
+var DEFAULT_CMSSY_EDITOR_ORIGINS = [
+  "https://cmssy.io",
+  "https://www.cmssy.io"
+];
+function parseEditorOriginEnv(raw) {
+  if (!raw) return void 0;
+  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+  if (parts.length === 0) return void 0;
+  return parts.length === 1 ? parts[0] : parts;
+}
+function isDevelopment() {
+  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
+}
+function resolveEditorOrigin(editorOrigin) {
+  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
+  if (value === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  if (Array.isArray(value)) {
+    const cleaned = value.filter((o) => o && o.trim().length > 0);
+    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+}
 function assertAuthConfig(config) {
   const auth = config.auth;
   if (!auth || typeof auth.modelSlug !== "string" || !auth.modelSlug) {
@@ -122,7 +146,8 @@ function toCspOrigin(origin) {
   return parsed.origin;
 }
 function frameAncestors(editorOrigin) {
-  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
   if (origins.length === 0) {
     throw new Error(
       "cmssy: editorOrigin must contain at least one valid origin"
@@ -265,7 +290,8 @@ function createCmssyPage(config, blocks, options) {
   };
 }
 function resolveBridgeOrigin(editorOrigin) {
-  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
   if (origins.length === 0) {
     throw new Error("cmssy: editorOrigin must be set to frame the editor");
   }
@@ -275,9 +301,9 @@ function resolveBridgeOrigin(editorOrigin) {
     );
   }
   const origin = toCspOrigin(origins[0].trim());
-  if (origin === "*") {
+  if (origin === "*" && !isDevelopment()) {
     throw new Error(
-      "cmssy: editorOrigin '*' is not allowed for the live-edit bridge; set the concrete editor origin (e.g. https://app.cmssy.io)"
+      "cmssy: editorOrigin '*' is only allowed in development; set a concrete editor origin (e.g. https://cmssy.io) for production"
     );
   }
   return origin;
@@ -659,7 +685,7 @@ var VERIFY_MUTATION = `mutation SiteMemberVerifyEmail($token: String!) {
 }`;
 var workspaceIdCache = /* @__PURE__ */ new Map();
 function workspaceIdFor(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${react.resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache.get(key);
   if (existing) return existing;
   const fresh = react.resolveWorkspaceId(config).catch((err) => {
@@ -1046,7 +1072,7 @@ var PRODUCT = `query Product($workspaceId: String!, $modelSlug: String!, $filter
 }`;
 var workspaceIdCache2 = /* @__PURE__ */ new Map();
 function workspaceIdFor2(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${react.resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache2.get(key);
   if (existing) return existing;
   const fresh = react.resolveWorkspaceId(config).catch((err) => {
@@ -1454,7 +1480,7 @@ var MY_ORDER = `query MyOrder($workspaceId: ID!, $id: ID!) {
 }`;
 var workspaceIdCache3 = /* @__PURE__ */ new Map();
 function workspaceIdFor3(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${react.resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache3.get(key);
   if (existing) return existing;
   const fresh = react.resolveWorkspaceId(config).catch((err) => {
@@ -1607,11 +1633,20 @@ function verifyCmssyWebhook(options) {
   return parsed;
 }
 
+Object.defineProperty(exports, "DEFAULT_CMSSY_API_URL", {
+  enumerable: true,
+  get: function () { return react.DEFAULT_CMSSY_API_URL; }
+});
+Object.defineProperty(exports, "resolveApiUrl", {
+  enumerable: true,
+  get: function () { return react.resolveApiUrl; }
+});
 exports.CMSSY_CART_COOKIE = CMSSY_CART_COOKIE;
 exports.CMSSY_EDIT_HEADER = CMSSY_EDIT_HEADER;
 exports.CMSSY_LOCALE_HEADER = CMSSY_LOCALE_HEADER;
 exports.CMSSY_SESSION_COOKIE = CMSSY_SESSION_COOKIE;
 exports.CmssyWebhookError = CmssyWebhookError;
+exports.DEFAULT_CMSSY_EDITOR_ORIGINS = DEFAULT_CMSSY_EDITOR_ORIGINS;
 exports.SESSION_MAX_AGE_SECONDS = SESSION_MAX_AGE_SECONDS;
 exports.applyCmssyCsp = applyCmssyCsp;
 exports.assertAuthConfig = assertAuthConfig;
@@ -1637,6 +1672,7 @@ exports.isCmssyEditMode = isCmssyEditMode;
 exports.isCmssyEditRequest = isCmssyEditRequest;
 exports.localeForPathname = localeForPathname;
 exports.openSession = openSession;
+exports.resolveEditorOrigin = resolveEditorOrigin;
 exports.resolveLocaleFromPathname = resolveLocaleFromPathname;
 exports.sealSession = sealSession;
 exports.sessionCookieOptions = sessionCookieOptions;

package/dist/index.d.cts

@@ -1,19 +1,30 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
+export { DEFAULT_CMSSY_API_URL, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
 import { MetadataRoute, Metadata } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
+declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
+declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
 interface CmssyAuthConfig {
     modelSlug: string;
     sessionSecret: string;
 }
 interface CmssyNextConfig {
-    apiUrl: string;
+    /**
+     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
+     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
+     */
+    apiUrl?: string;
     workspaceSlug: string;
     draftSecret: string;
-    editorOrigin: string | string[];
+    /**
+     * Origin allowed to frame your app in the editor. Defaults to
+     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
+     */
+    editorOrigin?: string | string[];
     /**
      * Canonical absolute site URL (e.g. https://cmssy.com), used by
      * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
@@ -141,7 +152,8 @@ type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
 declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
 
 interface CmssyCspOptions {
-    editorOrigin: string | string[];
+    /** Defaults to the cmssy cloud admin origin when unset. */
+    editorOrigin?: string | string[];
 }
 interface MutableHeaders {
     headers: {
@@ -328,4 +340,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.d.ts

@@ -1,19 +1,30 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
+export { DEFAULT_CMSSY_API_URL, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
 import { MetadataRoute, Metadata } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
+declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
+declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
 interface CmssyAuthConfig {
     modelSlug: string;
     sessionSecret: string;
 }
 interface CmssyNextConfig {
-    apiUrl: string;
+    /**
+     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
+     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
+     */
+    apiUrl?: string;
     workspaceSlug: string;
     draftSecret: string;
-    editorOrigin: string | string[];
+    /**
+     * Origin allowed to frame your app in the editor. Defaults to
+     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
+     */
+    editorOrigin?: string | string[];
     /**
      * Canonical absolute site URL (e.g. https://cmssy.com), used by
      * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
@@ -141,7 +152,8 @@ type CmssyDraftRouteConfig = Pick<CmssyNextConfig, "draftSecret"> & {
 declare function createDraftRoute(config: CmssyDraftRouteConfig): (request: Request) => Promise<Response>;
 
 interface CmssyCspOptions {
-    editorOrigin: string | string[];
+    /** Defaults to the cmssy cloud admin origin when unset. */
+    editorOrigin?: string | string[];
 }
 interface MutableHeaders {
     headers: {
@@ -328,4 +340,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySessionPayload, type CmssySessionUser, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.js

@@ -1,6 +1,7 @@
 import { draftMode, headers, cookies } from 'next/headers';
 import { notFound, redirect } from 'next/navigation';
-import { createCmssyClient, resolveSiteLocales, splitLocaleFromPath, fetchPage, resolveForms, CmssyServerPage, fetchSiteConfig, fetchPageById, fetchPages, fetchPageMeta, normalizeSlug as normalizeSlug$1, resolveWorkspaceId, graphqlRequest } from '@cmssy/react';
+import { createCmssyClient, resolveSiteLocales, splitLocaleFromPath, fetchPage, resolveForms, CmssyServerPage, fetchSiteConfig, fetchPageById, fetchPages, fetchPageMeta, normalizeSlug as normalizeSlug$1, resolveWorkspaceId, graphqlRequest, resolveApiUrl } from '@cmssy/react';
+export { DEFAULT_CMSSY_API_URL, resolveApiUrl } from '@cmssy/react';
 import { CmssyLocaleProvider } from '@cmssy/react/client';
 import { EncryptJWT, jwtDecrypt } from 'jose';
 import { jsx, jsxs } from 'react/jsx-runtime';
@@ -69,6 +70,30 @@ function sessionCookieOptions() {
 }
 
 // src/config.ts
+var DEFAULT_CMSSY_EDITOR_ORIGINS = [
+  "https://cmssy.io",
+  "https://www.cmssy.io"
+];
+function parseEditorOriginEnv(raw) {
+  if (!raw) return void 0;
+  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+  if (parts.length === 0) return void 0;
+  return parts.length === 1 ? parts[0] : parts;
+}
+function isDevelopment() {
+  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
+}
+function resolveEditorOrigin(editorOrigin) {
+  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
+  if (value === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  if (Array.isArray(value)) {
+    const cleaned = value.filter((o) => o && o.trim().length > 0);
+    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+}
 function assertAuthConfig(config) {
   const auth = config.auth;
   if (!auth || typeof auth.modelSlug !== "string" || !auth.modelSlug) {
@@ -120,7 +145,8 @@ function toCspOrigin(origin) {
   return parsed.origin;
 }
 function frameAncestors(editorOrigin) {
-  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
   if (origins.length === 0) {
     throw new Error(
       "cmssy: editorOrigin must contain at least one valid origin"
@@ -263,7 +289,8 @@ function createCmssyPage(config, blocks, options) {
   };
 }
 function resolveBridgeOrigin(editorOrigin) {
-  const origins = Array.isArray(editorOrigin) ? editorOrigin : [editorOrigin];
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
   if (origins.length === 0) {
     throw new Error("cmssy: editorOrigin must be set to frame the editor");
   }
@@ -273,9 +300,9 @@ function resolveBridgeOrigin(editorOrigin) {
     );
   }
   const origin = toCspOrigin(origins[0].trim());
-  if (origin === "*") {
+  if (origin === "*" && !isDevelopment()) {
     throw new Error(
-      "cmssy: editorOrigin '*' is not allowed for the live-edit bridge; set the concrete editor origin (e.g. https://app.cmssy.io)"
+      "cmssy: editorOrigin '*' is only allowed in development; set a concrete editor origin (e.g. https://cmssy.io) for production"
     );
   }
   return origin;
@@ -657,7 +684,7 @@ var VERIFY_MUTATION = `mutation SiteMemberVerifyEmail($token: String!) {
 }`;
 var workspaceIdCache = /* @__PURE__ */ new Map();
 function workspaceIdFor(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache.get(key);
   if (existing) return existing;
   const fresh = resolveWorkspaceId(config).catch((err) => {
@@ -1044,7 +1071,7 @@ var PRODUCT = `query Product($workspaceId: String!, $modelSlug: String!, $filter
 }`;
 var workspaceIdCache2 = /* @__PURE__ */ new Map();
 function workspaceIdFor2(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache2.get(key);
   if (existing) return existing;
   const fresh = resolveWorkspaceId(config).catch((err) => {
@@ -1452,7 +1479,7 @@ var MY_ORDER = `query MyOrder($workspaceId: ID!, $id: ID!) {
 }`;
 var workspaceIdCache3 = /* @__PURE__ */ new Map();
 function workspaceIdFor3(config) {
-  const key = `${config.apiUrl}::${config.workspaceSlug}`;
+  const key = `${resolveApiUrl(config.apiUrl)}::${config.workspaceSlug}`;
   const existing = workspaceIdCache3.get(key);
   if (existing) return existing;
   const fresh = resolveWorkspaceId(config).catch((err) => {
@@ -1605,4 +1632,4 @@ function verifyCmssyWebhook(options) {
   return parsed;
 }
 
-export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, CmssyWebhookError, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, CmssyWebhookError, DEFAULT_CMSSY_EDITOR_ORIGINS, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "0.5.5",
+  "version": "0.6.0",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -41,7 +41,7 @@
     "dist"
   ],
   "peerDependencies": {
-    "@cmssy/react": "^0.5.5",
+    "@cmssy/react": "^0.5.6",
     "next": ">=15",
     "react": "^18.2.0 || ^19.0.0",
     "react-dom": "^18.2.0 || ^19.0.0"
@@ -54,7 +54,7 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "0.5.5"
+    "@cmssy/react": "0.6.0"
   },
   "dependencies": {
     "jose": "^6.2.3"