@cmssy/next 2.4.0 → 2.6.0

package/dist/index.d.cts

@@ -1,17 +1,15 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType, ReactNode } from 'react';
-import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
+import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
 export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
+import { CmssyAuthConfig, CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
+export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
 import { MetadataRoute, Metadata } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
 declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
 declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyAuthConfig {
-    modelSlug: string;
-    sessionSecret: string;
-}
 interface CmssyNextConfig {
     /**
      * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
@@ -234,26 +232,9 @@ declare function createCmssyLocaleMiddleware(config: CmssyNextConfig): (request:
 
 declare const CMSSY_SESSION_COOKIE = "cmssy_session";
 declare const SESSION_MAX_AGE_SECONDS: number;
-interface CmssySessionUser {
-    recordId: string;
-    email: string;
-}
-interface CmssySessionPayload {
-    accessToken: string;
-    refreshToken: string;
-    accessExpiresAt: number;
-    user: CmssySessionUser;
-}
 declare function sealSession(payload: CmssySessionPayload, secret: string, audience?: string): Promise<string>;
 declare function openSession(token: string, secret: string, audience?: string): Promise<CmssySessionPayload | null>;
 declare function isAccessExpired(payload: CmssySessionPayload, now?: number): boolean;
-interface SessionCookieOptions {
-    httpOnly: true;
-    secure: boolean;
-    sameSite: "lax";
-    path: "/";
-    maxAge: number;
-}
 declare function sessionCookieOptions(): SessionCookieOptions;
 
 interface CmssyAuthRouteHandlers {
@@ -286,38 +267,9 @@ declare function getCmssyAccessToken(config: CmssyNextConfig): Promise<string |
 type CmssyAuthMiddleware = (request: NextRequest) => Promise<NextResponse>;
 declare function createCmssyAuthMiddleware(config: CmssyNextConfig): CmssyAuthMiddleware;
 
-type CmssyStockState = "in" | "low" | "out";
-interface FetchProductsOptions {
-    modelSlug: string;
-    filter?: Record<string, unknown>;
-    /**
-     * Availability facet: "in", "low" or "out". Stock is not a data field -
-     * availability is onHand minus reserved, summed across variants - so it
-     * cannot go through `filter`. The backend applies the same rule the admin
-     * catalog uses, so this facet cannot contradict the stock badge.
-     */
-    stockState?: CmssyStockState;
-    limit?: number;
-    offset?: number;
-    sort?: string;
-}
-interface CmssyProductPage {
-    items: CmssyProduct[];
-    total: number;
-    hasMore: boolean;
-}
 declare function fetchProducts(config: CmssyNextConfig, options: FetchProductsOptions): Promise<CmssyProductPage>;
-interface FetchProductOptions {
-    modelSlug: string;
-    slug: string;
-    slugField?: string;
-}
 declare function fetchProduct(config: CmssyNextConfig, options: FetchProductOptions): Promise<CmssyProduct | null>;
 
-interface FetchOrderByTokenOptions {
-    orderId: string;
-    accessToken: string;
-}
 declare function fetchOrderByToken(config: CmssyNextConfig, options: FetchOrderByTokenOptions): Promise<CmssyOrder>;
 
 interface CmssyOrdersRouteHandlers {
@@ -325,12 +277,6 @@ interface CmssyOrdersRouteHandlers {
 }
 declare function createCmssyOrdersRoute(config: CmssyNextConfig): CmssyOrdersRouteHandlers;
 
-interface MyOrdersResult {
-    items: CmssyOrder[];
-    total: number;
-    hasMore: boolean;
-}
-
 /**
  * Verify + parse an inbound cmssy webhook (CMS-693 / CMS-694).
  *
@@ -343,46 +289,6 @@ interface MyOrdersResult {
  * IMPORTANT: pass the RAW request body string (e.g. `await req.text()`),
  * never a re-serialized object - the signed bytes must match exactly.
  */
-/** Serialized order carried in an order.* webhook (mirrors the backend). */
-interface CmssyWebhookOrder {
-    id: string;
-    workspaceId: string;
-    displayStatus: string;
-    paymentStatus: string;
-    fulfillmentStatus: string;
-    total: number;
-    currency: string;
-    customerId: string | null;
-    customerEmail: string;
-    paymentProvider: string | null;
-    paymentReference: string | null;
-    refundedAmount: number;
-    createdAt: string;
-    updatedAt: string;
-}
-interface CmssyWebhookEvent {
-    /** Delivery id - also sent in X-Cmssy-Webhook-Id; dedup on it. */
-    id: string;
-    /** e.g. "order.paid", "order.refunded". */
-    event: string;
-    createdAt: string;
-    data: {
-        workspaceId: string;
-        order: CmssyWebhookOrder;
-    };
-}
-interface VerifyCmssyWebhookOptions {
-    /** Raw request body string (NOT parsed JSON). */
-    body: string;
-    /** The `X-Cmssy-Signature` header value, or null if absent. */
-    signatureHeader: string | null;
-    /** The endpoint's signing secret. */
-    secret: string;
-    /** Max age of the signed timestamp, in seconds. Default 300 (5 min). */
-    toleranceSeconds?: number;
-    /** Override the current time (ms) - for tests. */
-    now?: number;
-}
 declare class CmssyWebhookError extends Error {
     constructor(message: string);
 }
@@ -393,4 +299,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssyProductPage, type CmssySessionPayload, type CmssySessionUser, type CmssyStockState, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, type FetchOrderByTokenOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.d.ts

@@ -1,17 +1,15 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType, ReactNode } from 'react';
-import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig, CmssyProduct, CmssyOrder } from '@cmssy/react';
+import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
 export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
+import { CmssyAuthConfig, CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
+export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
 import { MetadataRoute, Metadata } from 'next';
 import { NextRequest, NextResponse } from 'next/server';
 
 declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
 declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyAuthConfig {
-    modelSlug: string;
-    sessionSecret: string;
-}
 interface CmssyNextConfig {
     /**
      * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
@@ -234,26 +232,9 @@ declare function createCmssyLocaleMiddleware(config: CmssyNextConfig): (request:
 
 declare const CMSSY_SESSION_COOKIE = "cmssy_session";
 declare const SESSION_MAX_AGE_SECONDS: number;
-interface CmssySessionUser {
-    recordId: string;
-    email: string;
-}
-interface CmssySessionPayload {
-    accessToken: string;
-    refreshToken: string;
-    accessExpiresAt: number;
-    user: CmssySessionUser;
-}
 declare function sealSession(payload: CmssySessionPayload, secret: string, audience?: string): Promise<string>;
 declare function openSession(token: string, secret: string, audience?: string): Promise<CmssySessionPayload | null>;
 declare function isAccessExpired(payload: CmssySessionPayload, now?: number): boolean;
-interface SessionCookieOptions {
-    httpOnly: true;
-    secure: boolean;
-    sameSite: "lax";
-    path: "/";
-    maxAge: number;
-}
 declare function sessionCookieOptions(): SessionCookieOptions;
 
 interface CmssyAuthRouteHandlers {
@@ -286,38 +267,9 @@ declare function getCmssyAccessToken(config: CmssyNextConfig): Promise<string |
 type CmssyAuthMiddleware = (request: NextRequest) => Promise<NextResponse>;
 declare function createCmssyAuthMiddleware(config: CmssyNextConfig): CmssyAuthMiddleware;
 
-type CmssyStockState = "in" | "low" | "out";
-interface FetchProductsOptions {
-    modelSlug: string;
-    filter?: Record<string, unknown>;
-    /**
-     * Availability facet: "in", "low" or "out". Stock is not a data field -
-     * availability is onHand minus reserved, summed across variants - so it
-     * cannot go through `filter`. The backend applies the same rule the admin
-     * catalog uses, so this facet cannot contradict the stock badge.
-     */
-    stockState?: CmssyStockState;
-    limit?: number;
-    offset?: number;
-    sort?: string;
-}
-interface CmssyProductPage {
-    items: CmssyProduct[];
-    total: number;
-    hasMore: boolean;
-}
 declare function fetchProducts(config: CmssyNextConfig, options: FetchProductsOptions): Promise<CmssyProductPage>;
-interface FetchProductOptions {
-    modelSlug: string;
-    slug: string;
-    slugField?: string;
-}
 declare function fetchProduct(config: CmssyNextConfig, options: FetchProductOptions): Promise<CmssyProduct | null>;
 
-interface FetchOrderByTokenOptions {
-    orderId: string;
-    accessToken: string;
-}
 declare function fetchOrderByToken(config: CmssyNextConfig, options: FetchOrderByTokenOptions): Promise<CmssyOrder>;
 
 interface CmssyOrdersRouteHandlers {
@@ -325,12 +277,6 @@ interface CmssyOrdersRouteHandlers {
 }
 declare function createCmssyOrdersRoute(config: CmssyNextConfig): CmssyOrdersRouteHandlers;
 
-interface MyOrdersResult {
-    items: CmssyOrder[];
-    total: number;
-    hasMore: boolean;
-}
-
 /**
  * Verify + parse an inbound cmssy webhook (CMS-693 / CMS-694).
  *
@@ -343,46 +289,6 @@ interface MyOrdersResult {
  * IMPORTANT: pass the RAW request body string (e.g. `await req.text()`),
  * never a re-serialized object - the signed bytes must match exactly.
  */
-/** Serialized order carried in an order.* webhook (mirrors the backend). */
-interface CmssyWebhookOrder {
-    id: string;
-    workspaceId: string;
-    displayStatus: string;
-    paymentStatus: string;
-    fulfillmentStatus: string;
-    total: number;
-    currency: string;
-    customerId: string | null;
-    customerEmail: string;
-    paymentProvider: string | null;
-    paymentReference: string | null;
-    refundedAmount: number;
-    createdAt: string;
-    updatedAt: string;
-}
-interface CmssyWebhookEvent {
-    /** Delivery id - also sent in X-Cmssy-Webhook-Id; dedup on it. */
-    id: string;
-    /** e.g. "order.paid", "order.refunded". */
-    event: string;
-    createdAt: string;
-    data: {
-        workspaceId: string;
-        order: CmssyWebhookOrder;
-    };
-}
-interface VerifyCmssyWebhookOptions {
-    /** Raw request body string (NOT parsed JSON). */
-    body: string;
-    /** The `X-Cmssy-Signature` header value, or null if absent. */
-    signatureHeader: string | null;
-    /** The endpoint's signing secret. */
-    secret: string;
-    /** Max age of the signed timestamp, in seconds. Default 300 (5 min). */
-    toleranceSeconds?: number;
-    /** Override the current time (ms) - for tests. */
-    now?: number;
-}
 declare class CmssyWebhookError extends Error {
     constructor(message: string);
 }
@@ -393,4 +299,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthConfig, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssyProductPage, type CmssySessionPayload, type CmssySessionUser, type CmssyStockState, CmssyWebhookError, type CmssyWebhookEvent, type CmssyWebhookOrder, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, type FetchOrderByTokenOptions, type FetchProductOptions, type FetchProductsOptions, type MyOrdersResult, SESSION_MAX_AGE_SECONDS, type SessionCookieOptions, type VerifyCmssyWebhookOptions, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_LOCALE_HEADER, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -55,10 +55,11 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "2.4.0"
+    "@cmssy/react": "2.6.0"
   },
   "dependencies": {
-    "jose": "^6.2.3"
+    "jose": "^6.2.3",
+    "@cmssy/types": "0.26.0"
   },
   "scripts": {
     "build": "tsup",