@cmssy/next 4.6.2 → 4.7.1

package/dist/config-DNaPqq1f.d.cts

@@ -0,0 +1,63 @@
+import { CmssyAuthConfig } from '@cmssy/types';
+
+declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
+declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
+interface CmssyNextConfig {
+    /**
+     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
+     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
+     */
+    apiUrl?: string;
+    /** Organization slug - part of the org-scoped delivery path. */
+    org: string;
+    workspaceSlug: string;
+    draftSecret: string;
+    /**
+     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
+     * preview. In development only, the SDK sends it on every page fetch so the
+     * backend can resolve the token's user and honour that user's dev-preview flag
+     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
+     * the draft overlay renders, otherwise published content. Server-only (never
+     * reaches the client); ignored outside development. See the Quickstart
+     * "Dev preview" section.
+     */
+    devToken?: string;
+    /**
+     * Origin allowed to frame your app in the editor. Defaults to
+     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
+     */
+    editorOrigin?: string | string[];
+    /**
+     * Canonical absolute site URL (e.g. https://cmssy.com), used by
+     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
+     * origin from the request `host` header at render time (multi-domain safe).
+     */
+    siteUrl?: string;
+    auth?: CmssyAuthConfig;
+    defaultLocale?: string;
+    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
+    enabledLocales?: string[];
+    resolveLocale?: () => string | Promise<string>;
+}
+/**
+ * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
+ * widened to `string | undefined` so a config can pass `process.env.*` straight
+ * through without a `?? ""` fallback (which would mask a missing value as an
+ * empty string) or a cast.
+ */
+type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
+    org?: string;
+    workspaceSlug?: string;
+    draftSecret?: string;
+};
+/**
+ * Validates an env-sourced config and returns a strictly-typed
+ * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
+ * actionable error listing any missing required variables (rendered by the
+ * Next.js error overlay / boundary), so the app fails fast instead of running
+ * with silently-empty config.
+ */
+declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
+declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
+
+export { type CmssyNextConfig as C, DEFAULT_CMSSY_EDITOR_ORIGINS as D, type CmssyEnvConfig as a, assertAuthConfig as b, defineCmssyConfig as d, resolveEditorOrigin as r };

package/dist/config-DNaPqq1f.d.ts

@@ -0,0 +1,63 @@
+import { CmssyAuthConfig } from '@cmssy/types';
+
+declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
+declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
+interface CmssyNextConfig {
+    /**
+     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
+     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
+     */
+    apiUrl?: string;
+    /** Organization slug - part of the org-scoped delivery path. */
+    org: string;
+    workspaceSlug: string;
+    draftSecret: string;
+    /**
+     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
+     * preview. In development only, the SDK sends it on every page fetch so the
+     * backend can resolve the token's user and honour that user's dev-preview flag
+     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
+     * the draft overlay renders, otherwise published content. Server-only (never
+     * reaches the client); ignored outside development. See the Quickstart
+     * "Dev preview" section.
+     */
+    devToken?: string;
+    /**
+     * Origin allowed to frame your app in the editor. Defaults to
+     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
+     */
+    editorOrigin?: string | string[];
+    /**
+     * Canonical absolute site URL (e.g. https://cmssy.com), used by
+     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
+     * origin from the request `host` header at render time (multi-domain safe).
+     */
+    siteUrl?: string;
+    auth?: CmssyAuthConfig;
+    defaultLocale?: string;
+    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
+    enabledLocales?: string[];
+    resolveLocale?: () => string | Promise<string>;
+}
+/**
+ * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
+ * widened to `string | undefined` so a config can pass `process.env.*` straight
+ * through without a `?? ""` fallback (which would mask a missing value as an
+ * empty string) or a cast.
+ */
+type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
+    org?: string;
+    workspaceSlug?: string;
+    draftSecret?: string;
+};
+/**
+ * Validates an env-sourced config and returns a strictly-typed
+ * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
+ * actionable error listing any missing required variables (rendered by the
+ * Next.js error overlay / boundary), so the app fails fast instead of running
+ * with silently-empty config.
+ */
+declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
+declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
+
+export { type CmssyNextConfig as C, DEFAULT_CMSSY_EDITOR_ORIGINS as D, type CmssyEnvConfig as a, assertAuthConfig as b, defineCmssyConfig as d, resolveEditorOrigin as r };

package/dist/index.d.cts

@@ -3,70 +3,12 @@ import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
 export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
-import { CmssyAuthConfig, CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
-export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
+import { C as CmssyNextConfig } from './config-DNaPqq1f.cjs';
+export { a as CmssyEnvConfig, D as DEFAULT_CMSSY_EDITOR_ORIGINS, b as assertAuthConfig, d as defineCmssyConfig, r as resolveEditorOrigin } from './config-DNaPqq1f.cjs';
 import { NextRequest, NextResponse } from 'next/server';
 import { MetadataRoute, Metadata } from 'next';
-
-declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
-declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyNextConfig {
-    /**
-     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
-     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
-     */
-    apiUrl?: string;
-    /** Organization slug - part of the org-scoped delivery path. */
-    org: string;
-    workspaceSlug: string;
-    draftSecret: string;
-    /**
-     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
-     * preview. In development only, the SDK sends it on every page fetch so the
-     * backend can resolve the token's user and honour that user's dev-preview flag
-     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
-     * the draft overlay renders, otherwise published content. Server-only (never
-     * reaches the client); ignored outside development. See the Quickstart
-     * "Dev preview" section.
-     */
-    devToken?: string;
-    /**
-     * Origin allowed to frame your app in the editor. Defaults to
-     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
-     */
-    editorOrigin?: string | string[];
-    /**
-     * Canonical absolute site URL (e.g. https://cmssy.com), used by
-     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
-     * origin from the request `host` header at render time (multi-domain safe).
-     */
-    siteUrl?: string;
-    auth?: CmssyAuthConfig;
-    defaultLocale?: string;
-    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
-    enabledLocales?: string[];
-    resolveLocale?: () => string | Promise<string>;
-}
-/**
- * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
- * widened to `string | undefined` so a config can pass `process.env.*` straight
- * through without a `?? ""` fallback (which would mask a missing value as an
- * empty string) or a cast.
- */
-type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
-    org?: string;
-    workspaceSlug?: string;
-    draftSecret?: string;
-};
-/**
- * Validates an env-sourced config and returns a strictly-typed
- * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
- * actionable error listing any missing required variables (rendered by the
- * Next.js error overlay / boundary), so the app fails fast instead of running
- * with silently-empty config.
- */
-declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
-declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
+import { CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
+export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
 
 interface CmssyEditorProps {
     page: CmssyPageData;
@@ -385,4 +327,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/index.d.ts

@@ -3,70 +3,12 @@ import { ComponentType, ReactNode } from 'react';
 import { CmssyPageData, CmssyFormDefinition, BlockDefinition, CmssyClientConfig } from '@cmssy/react';
 export { DEFAULT_CMSSY_API_URL, FieldCondition, FieldConditionGroup, FieldConditionLogic, evaluateFieldConditionGroup, resolveApiUrl } from '@cmssy/react';
 import { EditBridgeConfig } from '@cmssy/react/client';
-import { CmssyAuthConfig, CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
-export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
+import { C as CmssyNextConfig } from './config-DNaPqq1f.js';
+export { a as CmssyEnvConfig, D as DEFAULT_CMSSY_EDITOR_ORIGINS, b as assertAuthConfig, d as defineCmssyConfig, r as resolveEditorOrigin } from './config-DNaPqq1f.js';
 import { NextRequest, NextResponse } from 'next/server';
 import { MetadataRoute, Metadata } from 'next';
-
-declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
-declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyNextConfig {
-    /**
-     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
-     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
-     */
-    apiUrl?: string;
-    /** Organization slug - part of the org-scoped delivery path. */
-    org: string;
-    workspaceSlug: string;
-    draftSecret: string;
-    /**
-     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
-     * preview. In development only, the SDK sends it on every page fetch so the
-     * backend can resolve the token's user and honour that user's dev-preview flag
-     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
-     * the draft overlay renders, otherwise published content. Server-only (never
-     * reaches the client); ignored outside development. See the Quickstart
-     * "Dev preview" section.
-     */
-    devToken?: string;
-    /**
-     * Origin allowed to frame your app in the editor. Defaults to
-     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
-     */
-    editorOrigin?: string | string[];
-    /**
-     * Canonical absolute site URL (e.g. https://cmssy.com), used by
-     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
-     * origin from the request `host` header at render time (multi-domain safe).
-     */
-    siteUrl?: string;
-    auth?: CmssyAuthConfig;
-    defaultLocale?: string;
-    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
-    enabledLocales?: string[];
-    resolveLocale?: () => string | Promise<string>;
-}
-/**
- * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
- * widened to `string | undefined` so a config can pass `process.env.*` straight
- * through without a `?? ""` fallback (which would mask a missing value as an
- * empty string) or a cast.
- */
-type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
-    org?: string;
-    workspaceSlug?: string;
-    draftSecret?: string;
-};
-/**
- * Validates an env-sourced config and returns a strictly-typed
- * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
- * actionable error listing any missing required variables (rendered by the
- * Next.js error overlay / boundary), so the app fails fast instead of running
- * with silently-empty config.
- */
-declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
-declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
+import { CmssySessionPayload, SessionCookieOptions, CmssySessionUser, FetchProductOptions, CmssyProduct, FetchProductsOptions, CmssyProductPage, FetchOrderByTokenOptions, CmssyOrder, VerifyCmssyWebhookOptions, CmssyWebhookEvent } from '@cmssy/types';
+export { CmssyAuthConfig, CmssyProductPage, CmssySessionPayload, CmssySessionUser, CmssyStockState, CmssyWebhookEvent, CmssyWebhookOrder, FetchOrderByTokenOptions, FetchProductOptions, FetchProductsOptions, MyOrdersResult, SessionCookieOptions, VerifyCmssyWebhookOptions } from '@cmssy/types';
 
 interface CmssyEditorProps {
     page: CmssyPageData;
@@ -385,4 +327,4 @@ declare class CmssyWebhookError extends Error {
  */
 declare function verifyCmssyWebhook(options: VerifyCmssyWebhookOptions): CmssyWebhookEvent;
 
-export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, type CmssyEnvConfig, type CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, DEFAULT_CMSSY_EDITOR_ORIGINS, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, assertAuthConfig, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, defineCmssyConfig, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveEditorOrigin, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };
+export { type BuildCmssyMetadataOptions, CMSSY_CART_COOKIE, CMSSY_EDIT_HEADER, CMSSY_EDIT_PATH_PREFIX, CMSSY_EDIT_QUERY_PARAM, CMSSY_LOCALE_HEADER, CMSSY_SECRET_QUERY_PARAM, CMSSY_SESSION_COOKIE, type CmssyAuthMiddleware, type CmssyAuthRouteHandlers, type CmssyCartRouteHandlers, type CmssyCspOptions, type CmssyDraftRouteConfig, type CmssyEditorProps, CmssyNextConfig, type CmssyOrdersRouteHandlers, type CmssySitemapContext, CmssyWebhookError, type CreateCmssyNotFoundOptions, type CreateCmssyPageOptions, type CreateCmssyRobotsOptions, type CreateCmssySitemapOptions, SESSION_MAX_AGE_SECONDS, applyCmssyCsp, buildCmssyMetadata, cmssyCspHeaders, cmssyEditRewrite, createCmssyAuthMiddleware, createCmssyAuthRoute, createCmssyCartRoute, createCmssyEditMiddleware, createCmssyEditPage, createCmssyLocaleMiddleware, createCmssyNotFound, createCmssyOrdersRoute, createCmssyPage, createCmssyRobots, createCmssySitemap, createDraftRoute, fetchOrderByToken, fetchProduct, fetchProducts, getCmssyAccessToken, getCmssyLocale, getCmssyUser, isAccessExpired, isCmssyEditMode, isCmssyEditRequest, localeForPathname, openSession, resolveLocaleFromPathname, sealSession, sessionCookieOptions, splitCmssyLocale, verifyCmssyWebhook };

package/dist/preset.cjs

@@ -0,0 +1,235 @@
+'use strict';
+
+var server = require('next/server');
+var react = require('@cmssy/react');
+var headers = require('next/headers');
+var jsxRuntime = require('react/jsx-runtime');
+
+// src/preset/proxy.ts
+
+// src/config.ts
+var DEFAULT_CMSSY_EDITOR_ORIGINS = [
+  "https://cmssy.io",
+  "https://www.cmssy.io"
+];
+function parseEditorOriginEnv(raw) {
+  if (!raw) return void 0;
+  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+  if (parts.length === 0) return void 0;
+  return parts.length === 1 ? parts[0] : parts;
+}
+function isDevelopment() {
+  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
+}
+function resolveEditorOrigin(editorOrigin) {
+  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
+  if (value === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  if (Array.isArray(value)) {
+    const cleaned = value.filter((o) => o && o.trim().length > 0);
+    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+}
+
+// src/csp.ts
+function toCspOrigin(origin) {
+  if (origin === "*") return "*";
+  let parsed;
+  try {
+    parsed = new URL(origin);
+  } catch {
+    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
+  }
+  if (parsed.origin === "null") {
+    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
+  }
+  return parsed.origin;
+}
+function frameAncestors(editorOrigin) {
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
+  if (origins.length === 0) {
+    throw new Error(
+      "cmssy: editorOrigin must contain at least one valid origin"
+    );
+  }
+  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
+  return `frame-ancestors ${normalized.join(" ")}`;
+}
+function mergeFrameAncestors(existing, directive) {
+  if (!existing) return directive;
+  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
+  kept.push(directive);
+  return kept.join("; ");
+}
+function applyCmssyCsp(response, options) {
+  const merged = mergeFrameAncestors(
+    response.headers.get("Content-Security-Policy"),
+    frameAncestors(options.editorOrigin)
+  );
+  response.headers.set("Content-Security-Policy", merged);
+  response.headers.delete("X-Frame-Options");
+  return response;
+}
+
+// src/secret-match.ts
+var MAX_SECRET_LENGTH = 256;
+async function cmssySecretsMatch(a, b) {
+  if (a.length > MAX_SECRET_LENGTH || b.length > MAX_SECRET_LENGTH) {
+    return false;
+  }
+  const encoder = new TextEncoder();
+  const [ha, hb] = await Promise.all([
+    crypto.subtle.digest("SHA-256", encoder.encode(a)),
+    crypto.subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  const va = new Uint8Array(ha);
+  const vb = new Uint8Array(hb);
+  let diff = 0;
+  for (let i = 0; i < va.length; i += 1) {
+    diff |= (va[i] ?? 0) ^ (vb[i] ?? 0);
+  }
+  return diff === 0;
+}
+
+// src/edit-mode.ts
+var CMSSY_EDIT_HEADER = "x-cmssy-edit";
+var CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
+var CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
+async function isCmssyEditMode() {
+  const h = await headers.headers();
+  return h.get(CMSSY_EDIT_HEADER) === "1";
+}
+var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
+async function cmssyEditRewrite(request, config, options = {}) {
+  const { pathname, searchParams } = request.nextUrl;
+  if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
+  if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
+  const provided = searchParams.get(CMSSY_SECRET_QUERY_PARAM);
+  if (!provided || !config.draftSecret) return null;
+  if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
+  const url = request.nextUrl.clone();
+  url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
+  warnIfEditRouteMissing(url);
+  return server.NextResponse.rewrite(
+    url,
+    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
+  );
+}
+var probed = false;
+function warnIfEditRouteMissing(url) {
+  if (process.env.NODE_ENV === "production" || probed) return;
+  probed = true;
+  void fetch(url, { method: "HEAD" }).then((response) => {
+    if (response.status !== 404) return;
+    console.error(
+      `[cmssy] The editor request was rewritten to ${url.pathname}, but nothing is mounted there (404). Add the edit route:
+
+  // app/cmssy-edit/[[...path]]/page.tsx
+  export const dynamic = "force-dynamic";
+  export default createCmssyEditPage(cmssy, blocks, { editor: CmssyEditor });
+
+Until then the editor preview stays blank.`
+    );
+  }).catch(() => {
+  });
+}
+var CMSSY_LOCALE_HEADER = "x-cmssy-locale";
+async function localeForPathname(config, pathname) {
+  const siteLocales = await react.resolveSiteLocales(config);
+  const segments = pathname.split("/").filter(Boolean);
+  return react.splitLocaleFromPath(segments, siteLocales).locale;
+}
+async function getCmssyLocale(config, options) {
+  const { headers: headers2 } = await import('next/headers');
+  const headerList = await headers2();
+  const fromHeader = headerList.get(CMSSY_LOCALE_HEADER);
+  if (fromHeader) return fromHeader;
+  const { defaultLocale } = await react.resolveSiteLocales(config);
+  return defaultLocale;
+}
+
+// src/preset/proxy.ts
+function createCmssyProxy(config, options = {}) {
+  return async function cmssyProxy(request) {
+    const { pathname } = request.nextUrl;
+    const requestHeaders = new Headers(request.headers);
+    requestHeaders.delete(CMSSY_EDIT_HEADER);
+    requestHeaders.delete(CMSSY_LOCALE_HEADER);
+    const locale = await localeForPathname(config, pathname);
+    requestHeaders.set(CMSSY_LOCALE_HEADER, locale);
+    const editHeaders = new Headers(requestHeaders);
+    editHeaders.set(CMSSY_EDIT_HEADER, "1");
+    const editRewrite = await cmssyEditRewrite(request, config, {
+      requestHeaders: editHeaders
+    });
+    if (editRewrite) {
+      applyCmssyCsp(editRewrite, { editorOrigin: config.editorOrigin });
+      return editRewrite;
+    }
+    if (options.stripLocalePrefix && pathname.startsWith(`/${locale}`)) {
+      const { defaultLocale } = await react.resolveSiteLocales(config);
+      if (locale !== defaultLocale) {
+        const url = request.nextUrl.clone();
+        url.pathname = pathname.slice(locale.length + 1) || "/";
+        return server.NextResponse.rewrite(url, {
+          request: { headers: requestHeaders }
+        });
+      }
+    }
+    return server.NextResponse.next({ request: { headers: requestHeaders } });
+  };
+}
+var cmssyProxyMatcher = ["/((?!_next/|api/|.*\\..*).*)"];
+async function CmssyChrome({
+  config,
+  blocks,
+  position,
+  page = "/",
+  editable
+}) {
+  const editMode = await isCmssyEditMode();
+  const [groups, locale, siteLocales] = await Promise.all([
+    react.fetchLayouts(
+      config,
+      page,
+      editMode ? { previewSecret: config.draftSecret } : void 0
+    ),
+    getCmssyLocale(config),
+    react.resolveSiteLocales(config)
+  ]);
+  if (editMode && editable) {
+    const origin = resolveEditorOrigin(config.editorOrigin);
+    const Editable = editable;
+    return /* @__PURE__ */ jsxRuntime.jsx(
+      Editable,
+      {
+        groups,
+        position,
+        locale,
+        defaultLocale: siteLocales.defaultLocale,
+        enabledLocales: siteLocales.locales,
+        edit: {
+          editorOrigin: (Array.isArray(origin) ? origin[0] : origin) ?? ""
+        }
+      }
+    );
+  }
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    react.CmssyServerLayout,
+    {
+      groups,
+      blocks,
+      position,
+      locale,
+      defaultLocale: siteLocales.defaultLocale,
+      enabledLocales: siteLocales.locales
+    }
+  );
+}
+
+exports.CmssyChrome = CmssyChrome;
+exports.cmssyProxyMatcher = cmssyProxyMatcher;
+exports.createCmssyProxy = createCmssyProxy;

package/dist/preset.d.cts

@@ -0,0 +1,81 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { C as CmssyNextConfig } from './config-DNaPqq1f.cjs';
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ComponentType } from 'react';
+import { BlockDefinition, CmssyLayoutGroup } from '@cmssy/react';
+import '@cmssy/types';
+
+interface CmssyProxyOptions {
+    /**
+     * Strip the language prefix before the app sees it, so static routes like
+     * `/shop/cart` serve `/no/shop/cart` too. Leave it off for a catch-all app
+     * that reads the language off the path itself.
+     */
+    stripLocalePrefix?: boolean;
+}
+/**
+ * The whole middleware a cmssy app needs, in the order it has to happen:
+ *
+ *   1. resolve the language and pass it on (a route cannot read the prefix it
+ *      never sees);
+ *   2. send a VERIFIED editor request to /cmssy-edit, carrying that language and
+ *      the edit flag - the public pages are static, and a static page never sees
+ *      the query string that would put it in edit mode;
+ *   3. strip the language prefix for everything else, if asked.
+ *
+ * The order is not a detail: resolve the locale after the rewrite and the editor
+ * preview renders in the wrong language; forget the edit flag and the header and
+ * footer become markup the editor can select but not fill. Both mistakes shipped
+ * before this existed.
+ */
+declare function createCmssyProxy(config: CmssyNextConfig, options?: CmssyProxyOptions): (request: NextRequest) => Promise<NextResponse>;
+/**
+ * The matcher a cmssy app wants: everything except Next internals, API routes
+ * and files with an extension.
+ *
+ * Next parses `export const config` at COMPILE time, so it rejects an imported
+ * constant - copy this value into your proxy literally:
+ *
+ *   export const config = { matcher: ["/((?!_next/|api/|.*\\..*).*)"] };
+ */
+declare const cmssyProxyMatcher: string[];
+
+interface CmssyChromeProps {
+    config: CmssyNextConfig;
+    blocks: BlockDefinition[];
+    position: string;
+    /**
+     * The page whose layout to render. Defaults to "/" - the site chrome.
+     */
+    page?: string;
+    /**
+     * The client wrapper around CmssyLazyLayout, rendered in edit mode. Without it
+     * the header and the footer are markup the editor can select and cannot fill.
+     *
+     * A COMPONENT, not a function to call: it lives on the client, and the server
+     * can only render it.
+     */
+    editable?: ComponentType<{
+        groups: CmssyLayoutGroup[];
+        position: string;
+        locale: string;
+        defaultLocale: string;
+        enabledLocales: string[];
+        edit: {
+            editorOrigin: string;
+        };
+    }>;
+}
+/**
+ * The site chrome, rendered the way each mode needs it:
+ *
+ *  - published traffic: server-rendered layout blocks (static, no client cost);
+ *  - the editor: the same blocks through the edit bridge, fetched with the
+ *    preview secret, so what you see is the draft you are editing.
+ *
+ * Getting this wrong is invisible - the site looks right and the editor shows a
+ * header it cannot edit, or the published version of one. Both shipped before.
+ */
+declare function CmssyChrome({ config, blocks, position, page, editable, }: CmssyChromeProps): Promise<react_jsx_runtime.JSX.Element>;
+
+export { CmssyChrome, type CmssyChromeProps, type CmssyProxyOptions, cmssyProxyMatcher, createCmssyProxy };

package/dist/preset.d.ts

@@ -0,0 +1,81 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { C as CmssyNextConfig } from './config-DNaPqq1f.js';
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { ComponentType } from 'react';
+import { BlockDefinition, CmssyLayoutGroup } from '@cmssy/react';
+import '@cmssy/types';
+
+interface CmssyProxyOptions {
+    /**
+     * Strip the language prefix before the app sees it, so static routes like
+     * `/shop/cart` serve `/no/shop/cart` too. Leave it off for a catch-all app
+     * that reads the language off the path itself.
+     */
+    stripLocalePrefix?: boolean;
+}
+/**
+ * The whole middleware a cmssy app needs, in the order it has to happen:
+ *
+ *   1. resolve the language and pass it on (a route cannot read the prefix it
+ *      never sees);
+ *   2. send a VERIFIED editor request to /cmssy-edit, carrying that language and
+ *      the edit flag - the public pages are static, and a static page never sees
+ *      the query string that would put it in edit mode;
+ *   3. strip the language prefix for everything else, if asked.
+ *
+ * The order is not a detail: resolve the locale after the rewrite and the editor
+ * preview renders in the wrong language; forget the edit flag and the header and
+ * footer become markup the editor can select but not fill. Both mistakes shipped
+ * before this existed.
+ */
+declare function createCmssyProxy(config: CmssyNextConfig, options?: CmssyProxyOptions): (request: NextRequest) => Promise<NextResponse>;
+/**
+ * The matcher a cmssy app wants: everything except Next internals, API routes
+ * and files with an extension.
+ *
+ * Next parses `export const config` at COMPILE time, so it rejects an imported
+ * constant - copy this value into your proxy literally:
+ *
+ *   export const config = { matcher: ["/((?!_next/|api/|.*\\..*).*)"] };
+ */
+declare const cmssyProxyMatcher: string[];
+
+interface CmssyChromeProps {
+    config: CmssyNextConfig;
+    blocks: BlockDefinition[];
+    position: string;
+    /**
+     * The page whose layout to render. Defaults to "/" - the site chrome.
+     */
+    page?: string;
+    /**
+     * The client wrapper around CmssyLazyLayout, rendered in edit mode. Without it
+     * the header and the footer are markup the editor can select and cannot fill.
+     *
+     * A COMPONENT, not a function to call: it lives on the client, and the server
+     * can only render it.
+     */
+    editable?: ComponentType<{
+        groups: CmssyLayoutGroup[];
+        position: string;
+        locale: string;
+        defaultLocale: string;
+        enabledLocales: string[];
+        edit: {
+            editorOrigin: string;
+        };
+    }>;
+}
+/**
+ * The site chrome, rendered the way each mode needs it:
+ *
+ *  - published traffic: server-rendered layout blocks (static, no client cost);
+ *  - the editor: the same blocks through the edit bridge, fetched with the
+ *    preview secret, so what you see is the draft you are editing.
+ *
+ * Getting this wrong is invisible - the site looks right and the editor shows a
+ * header it cannot edit, or the published version of one. Both shipped before.
+ */
+declare function CmssyChrome({ config, blocks, position, page, editable, }: CmssyChromeProps): Promise<react_jsx_runtime.JSX.Element>;
+
+export { CmssyChrome, type CmssyChromeProps, type CmssyProxyOptions, cmssyProxyMatcher, createCmssyProxy };

package/dist/preset.js

@@ -0,0 +1,231 @@
+import { NextResponse } from 'next/server';
+import { resolveSiteLocales, fetchLayouts, CmssyServerLayout, splitLocaleFromPath } from '@cmssy/react';
+import { headers } from 'next/headers';
+import { jsx } from 'react/jsx-runtime';
+
+// src/preset/proxy.ts
+
+// src/config.ts
+var DEFAULT_CMSSY_EDITOR_ORIGINS = [
+  "https://cmssy.io",
+  "https://www.cmssy.io"
+];
+function parseEditorOriginEnv(raw) {
+  if (!raw) return void 0;
+  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
+  if (parts.length === 0) return void 0;
+  return parts.length === 1 ? parts[0] : parts;
+}
+function isDevelopment() {
+  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
+}
+function resolveEditorOrigin(editorOrigin) {
+  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
+  if (value === void 0) {
+    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  if (Array.isArray(value)) {
+    const cleaned = value.filter((o) => o && o.trim().length > 0);
+    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
+  }
+  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
+}
+
+// src/csp.ts
+function toCspOrigin(origin) {
+  if (origin === "*") return "*";
+  let parsed;
+  try {
+    parsed = new URL(origin);
+  } catch {
+    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
+  }
+  if (parsed.origin === "null") {
+    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
+  }
+  return parsed.origin;
+}
+function frameAncestors(editorOrigin) {
+  const resolved = resolveEditorOrigin(editorOrigin);
+  const origins = Array.isArray(resolved) ? resolved : [resolved];
+  if (origins.length === 0) {
+    throw new Error(
+      "cmssy: editorOrigin must contain at least one valid origin"
+    );
+  }
+  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
+  return `frame-ancestors ${normalized.join(" ")}`;
+}
+function mergeFrameAncestors(existing, directive) {
+  if (!existing) return directive;
+  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
+  kept.push(directive);
+  return kept.join("; ");
+}
+function applyCmssyCsp(response, options) {
+  const merged = mergeFrameAncestors(
+    response.headers.get("Content-Security-Policy"),
+    frameAncestors(options.editorOrigin)
+  );
+  response.headers.set("Content-Security-Policy", merged);
+  response.headers.delete("X-Frame-Options");
+  return response;
+}
+
+// src/secret-match.ts
+var MAX_SECRET_LENGTH = 256;
+async function cmssySecretsMatch(a, b) {
+  if (a.length > MAX_SECRET_LENGTH || b.length > MAX_SECRET_LENGTH) {
+    return false;
+  }
+  const encoder = new TextEncoder();
+  const [ha, hb] = await Promise.all([
+    crypto.subtle.digest("SHA-256", encoder.encode(a)),
+    crypto.subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  const va = new Uint8Array(ha);
+  const vb = new Uint8Array(hb);
+  let diff = 0;
+  for (let i = 0; i < va.length; i += 1) {
+    diff |= (va[i] ?? 0) ^ (vb[i] ?? 0);
+  }
+  return diff === 0;
+}
+
+// src/edit-mode.ts
+var CMSSY_EDIT_HEADER = "x-cmssy-edit";
+var CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
+var CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
+async function isCmssyEditMode() {
+  const h = await headers();
+  return h.get(CMSSY_EDIT_HEADER) === "1";
+}
+var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
+async function cmssyEditRewrite(request, config, options = {}) {
+  const { pathname, searchParams } = request.nextUrl;
+  if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
+  if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
+  const provided = searchParams.get(CMSSY_SECRET_QUERY_PARAM);
+  if (!provided || !config.draftSecret) return null;
+  if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
+  const url = request.nextUrl.clone();
+  url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
+  warnIfEditRouteMissing(url);
+  return NextResponse.rewrite(
+    url,
+    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
+  );
+}
+var probed = false;
+function warnIfEditRouteMissing(url) {
+  if (process.env.NODE_ENV === "production" || probed) return;
+  probed = true;
+  void fetch(url, { method: "HEAD" }).then((response) => {
+    if (response.status !== 404) return;
+    console.error(
+      `[cmssy] The editor request was rewritten to ${url.pathname}, but nothing is mounted there (404). Add the edit route:
+
+  // app/cmssy-edit/[[...path]]/page.tsx
+  export const dynamic = "force-dynamic";
+  export default createCmssyEditPage(cmssy, blocks, { editor: CmssyEditor });
+
+Until then the editor preview stays blank.`
+    );
+  }).catch(() => {
+  });
+}
+var CMSSY_LOCALE_HEADER = "x-cmssy-locale";
+async function localeForPathname(config, pathname) {
+  const siteLocales = await resolveSiteLocales(config);
+  const segments = pathname.split("/").filter(Boolean);
+  return splitLocaleFromPath(segments, siteLocales).locale;
+}
+async function getCmssyLocale(config, options) {
+  const { headers: headers2 } = await import('next/headers');
+  const headerList = await headers2();
+  const fromHeader = headerList.get(CMSSY_LOCALE_HEADER);
+  if (fromHeader) return fromHeader;
+  const { defaultLocale } = await resolveSiteLocales(config);
+  return defaultLocale;
+}
+
+// src/preset/proxy.ts
+function createCmssyProxy(config, options = {}) {
+  return async function cmssyProxy(request) {
+    const { pathname } = request.nextUrl;
+    const requestHeaders = new Headers(request.headers);
+    requestHeaders.delete(CMSSY_EDIT_HEADER);
+    requestHeaders.delete(CMSSY_LOCALE_HEADER);
+    const locale = await localeForPathname(config, pathname);
+    requestHeaders.set(CMSSY_LOCALE_HEADER, locale);
+    const editHeaders = new Headers(requestHeaders);
+    editHeaders.set(CMSSY_EDIT_HEADER, "1");
+    const editRewrite = await cmssyEditRewrite(request, config, {
+      requestHeaders: editHeaders
+    });
+    if (editRewrite) {
+      applyCmssyCsp(editRewrite, { editorOrigin: config.editorOrigin });
+      return editRewrite;
+    }
+    if (options.stripLocalePrefix && pathname.startsWith(`/${locale}`)) {
+      const { defaultLocale } = await resolveSiteLocales(config);
+      if (locale !== defaultLocale) {
+        const url = request.nextUrl.clone();
+        url.pathname = pathname.slice(locale.length + 1) || "/";
+        return NextResponse.rewrite(url, {
+          request: { headers: requestHeaders }
+        });
+      }
+    }
+    return NextResponse.next({ request: { headers: requestHeaders } });
+  };
+}
+var cmssyProxyMatcher = ["/((?!_next/|api/|.*\\..*).*)"];
+async function CmssyChrome({
+  config,
+  blocks,
+  position,
+  page = "/",
+  editable
+}) {
+  const editMode = await isCmssyEditMode();
+  const [groups, locale, siteLocales] = await Promise.all([
+    fetchLayouts(
+      config,
+      page,
+      editMode ? { previewSecret: config.draftSecret } : void 0
+    ),
+    getCmssyLocale(config),
+    resolveSiteLocales(config)
+  ]);
+  if (editMode && editable) {
+    const origin = resolveEditorOrigin(config.editorOrigin);
+    const Editable = editable;
+    return /* @__PURE__ */ jsx(
+      Editable,
+      {
+        groups,
+        position,
+        locale,
+        defaultLocale: siteLocales.defaultLocale,
+        enabledLocales: siteLocales.locales,
+        edit: {
+          editorOrigin: (Array.isArray(origin) ? origin[0] : origin) ?? ""
+        }
+      }
+    );
+  }
+  return /* @__PURE__ */ jsx(
+    CmssyServerLayout,
+    {
+      groups,
+      blocks,
+      position,
+      locale,
+      defaultLocale: siteLocales.defaultLocale,
+      enabledLocales: siteLocales.locales
+    }
+  );
+}
+
+export { CmssyChrome, cmssyProxyMatcher, createCmssyProxy };

package/dist/testing.cjs

@@ -18,11 +18,7 @@ async function checkCmssyEditMode(options) {
   if (EDITOR_MARKER.test(publicPage.body)) {
     failures.push(`public ${path}: the editor is mounted on a public page`);
   }
-  if (!SERVER_CHROME.test(publicPage.body)) {
-    failures.push(
-      `public ${path}: no server-rendered chrome - the layout blocks are missing`
-    );
-  }
+  const hasServerChrome = SERVER_CHROME.test(publicPage.body);
   const unverified = await html(url(`${path}?cmssyEdit=1`));
   if (EDITOR_MARKER.test(unverified.body)) {
     failures.push(
@@ -40,7 +36,7 @@ async function checkCmssyEditMode(options) {
       `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
     );
   }
-  if (SERVER_CHROME.test(verified.body)) {
+  if (hasServerChrome && SERVER_CHROME.test(verified.body)) {
     failures.push(
       `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
     );

package/dist/testing.js

@@ -16,11 +16,7 @@ async function checkCmssyEditMode(options) {
   if (EDITOR_MARKER.test(publicPage.body)) {
     failures.push(`public ${path}: the editor is mounted on a public page`);
   }
-  if (!SERVER_CHROME.test(publicPage.body)) {
-    failures.push(
-      `public ${path}: no server-rendered chrome - the layout blocks are missing`
-    );
-  }
+  const hasServerChrome = SERVER_CHROME.test(publicPage.body);
   const unverified = await html(url(`${path}?cmssyEdit=1`));
   if (EDITOR_MARKER.test(unverified.body)) {
     failures.push(
@@ -38,7 +34,7 @@ async function checkCmssyEditMode(options) {
       `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
     );
   }
-  if (SERVER_CHROME.test(verified.body)) {
+  if (hasServerChrome && SERVER_CHROME.test(verified.body)) {
     failures.push(
       `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "4.6.2",
+  "version": "4.7.1",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -37,6 +37,11 @@
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js",
       "require": "./dist/testing.cjs"
+    },
+    "./preset": {
+      "types": "./dist/preset.d.ts",
+      "import": "./dist/preset.js",
+      "require": "./dist/preset.cjs"
     }
   },
   "main": "./dist/index.cjs",
@@ -46,7 +51,7 @@
     "dist"
   ],
   "peerDependencies": {
-    "@cmssy/react": "^4.6.2",
+    "@cmssy/react": "^4.7.1",
     "next": ">=15",
     "react": "^18.2.0 || ^19.0.0",
     "react-dom": "^18.2.0 || ^19.0.0"
@@ -60,7 +65,7 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "4.6.2"
+    "@cmssy/react": "4.7.1"
   },
   "dependencies": {
     "jose": "^6.2.3",