@cmssy/next 4.2.0 → 4.4.0

package/dist/index.cjs

@@ -399,7 +399,7 @@ function resolveBridgeOrigin(editorOrigin) {
   return origins.length === 1 ? origins[0] : origins;
 }
 var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-async function cmssyEditRewrite(request2, config) {
+async function cmssyEditRewrite(request2, config, options = {}) {
   const { pathname, searchParams } = request2.nextUrl;
   if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
   if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
@@ -408,7 +408,10 @@ async function cmssyEditRewrite(request2, config) {
   if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
   const url = request2.nextUrl.clone();
   url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
-  return server.NextResponse.rewrite(url);
+  return server.NextResponse.rewrite(
+    url,
+    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
+  );
 }
 function createCmssyEditMiddleware(config) {
   return async function cmssyEditMiddleware(request2) {

package/dist/index.d.cts

@@ -128,6 +128,14 @@ declare const CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
  */
 declare function cmssyEditRewrite(request: NextRequest, config: {
     draftSecret: string;
+}, options?: {
+    /**
+     * Headers to forward to the edit route, for a site whose middleware tells
+     * the app something the path alone does not - a resolved locale, say.
+     * Without them the editor preview renders in the default language while the
+     * public page renders in the visitor's.
+     */
+    requestHeaders?: Headers;
 }): Promise<NextResponse | null>;
 /** Standalone middleware when the consumer has no other middleware to compose. */
 declare function createCmssyEditMiddleware(config: {

package/dist/index.d.ts

@@ -128,6 +128,14 @@ declare const CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
  */
 declare function cmssyEditRewrite(request: NextRequest, config: {
     draftSecret: string;
+}, options?: {
+    /**
+     * Headers to forward to the edit route, for a site whose middleware tells
+     * the app something the path alone does not - a resolved locale, say.
+     * Without them the editor preview renders in the default language while the
+     * public page renders in the visitor's.
+     */
+    requestHeaders?: Headers;
 }): Promise<NextResponse | null>;
 /** Standalone middleware when the consumer has no other middleware to compose. */
 declare function createCmssyEditMiddleware(config: {

package/dist/index.js

@@ -398,7 +398,7 @@ function resolveBridgeOrigin(editorOrigin) {
   return origins.length === 1 ? origins[0] : origins;
 }
 var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-async function cmssyEditRewrite(request2, config) {
+async function cmssyEditRewrite(request2, config, options = {}) {
   const { pathname, searchParams } = request2.nextUrl;
   if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
   if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
@@ -407,7 +407,10 @@ async function cmssyEditRewrite(request2, config) {
   if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
   const url = request2.nextUrl.clone();
   url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
-  return NextResponse.rewrite(url);
+  return NextResponse.rewrite(
+    url,
+    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
+  );
 }
 function createCmssyEditMiddleware(config) {
   return async function cmssyEditMiddleware(request2) {

package/dist/testing.cjs

@@ -0,0 +1,67 @@
+'use strict';
+
+// src/testing/edit-smoke.ts
+var EDITOR_MARKER = /CmssyEditor|cmssy-edit/;
+var SERVER_CHROME = /<header|<footer/;
+async function html(url) {
+  const response = await fetch(url, { redirect: "manual" });
+  return { status: response.status, body: await response.text() };
+}
+async function checkCmssyEditMode(options) {
+  const { baseUrl, secret, path = "/" } = options;
+  const failures = [];
+  const url = (suffix) => `${baseUrl.replace(/\/+$/, "")}${suffix}`;
+  const publicPage = await html(url(path));
+  if (publicPage.status !== 200) {
+    failures.push(`public ${path}: expected 200, got ${publicPage.status}`);
+  }
+  if (EDITOR_MARKER.test(publicPage.body)) {
+    failures.push(`public ${path}: the editor is mounted on a public page`);
+  }
+  if (!SERVER_CHROME.test(publicPage.body)) {
+    failures.push(
+      `public ${path}: no server-rendered chrome - the layout blocks are missing`
+    );
+  }
+  const unverified = await html(url(`${path}?cmssyEdit=1`));
+  if (EDITOR_MARKER.test(unverified.body)) {
+    failures.push(
+      `${path}?cmssyEdit=1: edit mode without a secret - an unverified request must not open the editor (CMS-948)`
+    );
+  }
+  const verified = await html(
+    url(`${path}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`)
+  );
+  if (verified.status !== 200) {
+    failures.push(`edit ${path}: expected 200, got ${verified.status}`);
+  }
+  if (!EDITOR_MARKER.test(verified.body)) {
+    failures.push(
+      `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
+    );
+  }
+  if (SERVER_CHROME.test(verified.body)) {
+    failures.push(
+      `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
+    );
+  }
+  const { localizedPath, localizedMarker } = options;
+  if (localizedPath && localizedMarker) {
+    const localized = await html(
+      url(
+        `${localizedPath}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`
+      )
+    );
+    if (!EDITOR_MARKER.test(localized.body)) {
+      failures.push(`edit ${localizedPath}: no editor in the response`);
+    }
+    if (!localized.body.includes(localizedMarker)) {
+      failures.push(
+        `edit ${localizedPath}: "${localizedMarker}" is missing - the preview renders in the default language, not the one the URL asks for`
+      );
+    }
+  }
+  return { ok: failures.length === 0, failures };
+}
+
+exports.checkCmssyEditMode = checkCmssyEditMode;

package/dist/testing.d.cts

@@ -0,0 +1,39 @@
+interface EditSmokeOptions {
+    /** A running build of the consumer app, e.g. http://localhost:3000. */
+    baseUrl: string;
+    /** The site's CMSSY_DRAFT_SECRET. Without it nothing can be verified. */
+    secret: string;
+    /** A published page to exercise. Defaults to "/". */
+    path?: string;
+    /**
+     * The same page under a language prefix, e.g. "/no". Pass it on a site whose
+     * URLs carry the language, and the check also proves the preview renders in
+     * THAT language rather than the default one.
+     */
+    localizedPath?: string;
+    /** A word only the localized page says - "Handlekurv", say. */
+    localizedMarker?: string;
+}
+interface EditSmokeResult {
+    ok: boolean;
+    failures: string[];
+}
+/**
+ * Proves a consumer app's EDIT path still works - the path a build cannot check,
+ * because the site compiles and serves fine while being uneditable.
+ *
+ * It asserts three independent things:
+ *   1. the public page renders WITHOUT the editor, chrome server-rendered;
+ *   2. a bare `?cmssyEdit=1` does NOT enter edit mode (an unverified pair must
+ *      not open the door - CMS-948);
+ *   3. a verified `cmssyEdit=1` + `cmssySecret` renders the editor AND moves the
+ *      chrome onto the edit bridge.
+ *
+ * Run it against a started production build:
+ *
+ *   const result = await checkCmssyEditMode({ baseUrl, secret });
+ *   expect(result.failures).toEqual([]);
+ */
+declare function checkCmssyEditMode(options: EditSmokeOptions): Promise<EditSmokeResult>;
+
+export { type EditSmokeOptions, type EditSmokeResult, checkCmssyEditMode };

package/dist/testing.d.ts

@@ -0,0 +1,39 @@
+interface EditSmokeOptions {
+    /** A running build of the consumer app, e.g. http://localhost:3000. */
+    baseUrl: string;
+    /** The site's CMSSY_DRAFT_SECRET. Without it nothing can be verified. */
+    secret: string;
+    /** A published page to exercise. Defaults to "/". */
+    path?: string;
+    /**
+     * The same page under a language prefix, e.g. "/no". Pass it on a site whose
+     * URLs carry the language, and the check also proves the preview renders in
+     * THAT language rather than the default one.
+     */
+    localizedPath?: string;
+    /** A word only the localized page says - "Handlekurv", say. */
+    localizedMarker?: string;
+}
+interface EditSmokeResult {
+    ok: boolean;
+    failures: string[];
+}
+/**
+ * Proves a consumer app's EDIT path still works - the path a build cannot check,
+ * because the site compiles and serves fine while being uneditable.
+ *
+ * It asserts three independent things:
+ *   1. the public page renders WITHOUT the editor, chrome server-rendered;
+ *   2. a bare `?cmssyEdit=1` does NOT enter edit mode (an unverified pair must
+ *      not open the door - CMS-948);
+ *   3. a verified `cmssyEdit=1` + `cmssySecret` renders the editor AND moves the
+ *      chrome onto the edit bridge.
+ *
+ * Run it against a started production build:
+ *
+ *   const result = await checkCmssyEditMode({ baseUrl, secret });
+ *   expect(result.failures).toEqual([]);
+ */
+declare function checkCmssyEditMode(options: EditSmokeOptions): Promise<EditSmokeResult>;
+
+export { type EditSmokeOptions, type EditSmokeResult, checkCmssyEditMode };

package/dist/testing.js

@@ -0,0 +1,65 @@
+// src/testing/edit-smoke.ts
+var EDITOR_MARKER = /CmssyEditor|cmssy-edit/;
+var SERVER_CHROME = /<header|<footer/;
+async function html(url) {
+  const response = await fetch(url, { redirect: "manual" });
+  return { status: response.status, body: await response.text() };
+}
+async function checkCmssyEditMode(options) {
+  const { baseUrl, secret, path = "/" } = options;
+  const failures = [];
+  const url = (suffix) => `${baseUrl.replace(/\/+$/, "")}${suffix}`;
+  const publicPage = await html(url(path));
+  if (publicPage.status !== 200) {
+    failures.push(`public ${path}: expected 200, got ${publicPage.status}`);
+  }
+  if (EDITOR_MARKER.test(publicPage.body)) {
+    failures.push(`public ${path}: the editor is mounted on a public page`);
+  }
+  if (!SERVER_CHROME.test(publicPage.body)) {
+    failures.push(
+      `public ${path}: no server-rendered chrome - the layout blocks are missing`
+    );
+  }
+  const unverified = await html(url(`${path}?cmssyEdit=1`));
+  if (EDITOR_MARKER.test(unverified.body)) {
+    failures.push(
+      `${path}?cmssyEdit=1: edit mode without a secret - an unverified request must not open the editor (CMS-948)`
+    );
+  }
+  const verified = await html(
+    url(`${path}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`)
+  );
+  if (verified.status !== 200) {
+    failures.push(`edit ${path}: expected 200, got ${verified.status}`);
+  }
+  if (!EDITOR_MARKER.test(verified.body)) {
+    failures.push(
+      `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
+    );
+  }
+  if (SERVER_CHROME.test(verified.body)) {
+    failures.push(
+      `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
+    );
+  }
+  const { localizedPath, localizedMarker } = options;
+  if (localizedPath && localizedMarker) {
+    const localized = await html(
+      url(
+        `${localizedPath}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`
+      )
+    );
+    if (!EDITOR_MARKER.test(localized.body)) {
+      failures.push(`edit ${localizedPath}: no editor in the response`);
+    }
+    if (!localized.body.includes(localizedMarker)) {
+      failures.push(
+        `edit ${localizedPath}: "${localizedMarker}" is missing - the preview renders in the default language, not the one the URL asks for`
+      );
+    }
+  }
+  return { ok: failures.length === 0, failures };
+}
+
+export { checkCmssyEditMode };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "4.2.0",
+  "version": "4.4.0",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -32,6 +32,11 @@
       "types": "./dist/client.d.ts",
       "import": "./dist/client.js",
       "require": "./dist/client.cjs"
+    },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "import": "./dist/testing.js",
+      "require": "./dist/testing.cjs"
     }
   },
   "main": "./dist/index.cjs",
@@ -41,7 +46,7 @@
     "dist"
   ],
   "peerDependencies": {
-    "@cmssy/react": "^4.2.0",
+    "@cmssy/react": "^4.4.0",
     "next": ">=15",
     "react": "^18.2.0 || ^19.0.0",
     "react-dom": "^18.2.0 || ^19.0.0"
@@ -55,7 +60,7 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "4.2.0"
+    "@cmssy/react": "4.4.0"
   },
   "dependencies": {
     "jose": "^6.2.3",