@cmssy/next 4.7.2 → 5.0.0

package/dist/preset.d.cts

@@ -1,81 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { C as CmssyNextConfig } from './config-DNaPqq1f.cjs';
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType } from 'react';
-import { BlockDefinition, CmssyLayoutGroup } from '@cmssy/react';
-import '@cmssy/types';
-
-interface CmssyProxyOptions {
-    /**
-     * Strip the language prefix before the app sees it, so static routes like
-     * `/shop/cart` serve `/no/shop/cart` too. Leave it off for a catch-all app
-     * that reads the language off the path itself.
-     */
-    stripLocalePrefix?: boolean;
-}
-/**
- * The whole middleware a cmssy app needs, in the order it has to happen:
- *
- *   1. resolve the language and pass it on (a route cannot read the prefix it
- *      never sees);
- *   2. send a VERIFIED editor request to /cmssy-edit, carrying that language and
- *      the edit flag - the public pages are static, and a static page never sees
- *      the query string that would put it in edit mode;
- *   3. strip the language prefix for everything else, if asked.
- *
- * The order is not a detail: resolve the locale after the rewrite and the editor
- * preview renders in the wrong language; forget the edit flag and the header and
- * footer become markup the editor can select but not fill. Both mistakes shipped
- * before this existed.
- */
-declare function createCmssyProxy(config: CmssyNextConfig, options?: CmssyProxyOptions): (request: NextRequest) => Promise<NextResponse>;
-/**
- * The matcher a cmssy app wants: everything except Next internals, API routes
- * and files with an extension.
- *
- * Next parses `export const config` at COMPILE time, so it rejects an imported
- * constant - copy this value into your proxy literally:
- *
- *   export const config = { matcher: ["/((?!_next/|api/|.*\\..*).*)"] };
- */
-declare const cmssyProxyMatcher: string[];
-
-interface CmssyChromeProps {
-    config: CmssyNextConfig;
-    blocks: BlockDefinition[];
-    position: string;
-    /**
-     * The page whose layout to render. Defaults to "/" - the site chrome.
-     */
-    page?: string;
-    /**
-     * The client wrapper around CmssyLazyLayout, rendered in edit mode. Without it
-     * the header and the footer are markup the editor can select and cannot fill.
-     *
-     * A COMPONENT, not a function to call: it lives on the client, and the server
-     * can only render it.
-     */
-    editable?: ComponentType<{
-        groups: CmssyLayoutGroup[];
-        position: string;
-        locale: string;
-        defaultLocale: string;
-        enabledLocales: string[];
-        edit: {
-            editorOrigin: string;
-        };
-    }>;
-}
-/**
- * The site chrome, rendered the way each mode needs it:
- *
- *  - published traffic: server-rendered layout blocks (static, no client cost);
- *  - the editor: the same blocks through the edit bridge, fetched with the
- *    preview secret, so what you see is the draft you are editing.
- *
- * Getting this wrong is invisible - the site looks right and the editor shows a
- * header it cannot edit, or the published version of one. Both shipped before.
- */
-declare function CmssyChrome({ config, blocks, position, page, editable, }: CmssyChromeProps): Promise<react_jsx_runtime.JSX.Element>;
-
-export { CmssyChrome, type CmssyChromeProps, type CmssyProxyOptions, cmssyProxyMatcher, createCmssyProxy };

package/dist/preset.d.ts

@@ -1,81 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { C as CmssyNextConfig } from './config-DNaPqq1f.js';
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentType } from 'react';
-import { BlockDefinition, CmssyLayoutGroup } from '@cmssy/react';
-import '@cmssy/types';
-
-interface CmssyProxyOptions {
-    /**
-     * Strip the language prefix before the app sees it, so static routes like
-     * `/shop/cart` serve `/no/shop/cart` too. Leave it off for a catch-all app
-     * that reads the language off the path itself.
-     */
-    stripLocalePrefix?: boolean;
-}
-/**
- * The whole middleware a cmssy app needs, in the order it has to happen:
- *
- *   1. resolve the language and pass it on (a route cannot read the prefix it
- *      never sees);
- *   2. send a VERIFIED editor request to /cmssy-edit, carrying that language and
- *      the edit flag - the public pages are static, and a static page never sees
- *      the query string that would put it in edit mode;
- *   3. strip the language prefix for everything else, if asked.
- *
- * The order is not a detail: resolve the locale after the rewrite and the editor
- * preview renders in the wrong language; forget the edit flag and the header and
- * footer become markup the editor can select but not fill. Both mistakes shipped
- * before this existed.
- */
-declare function createCmssyProxy(config: CmssyNextConfig, options?: CmssyProxyOptions): (request: NextRequest) => Promise<NextResponse>;
-/**
- * The matcher a cmssy app wants: everything except Next internals, API routes
- * and files with an extension.
- *
- * Next parses `export const config` at COMPILE time, so it rejects an imported
- * constant - copy this value into your proxy literally:
- *
- *   export const config = { matcher: ["/((?!_next/|api/|.*\\..*).*)"] };
- */
-declare const cmssyProxyMatcher: string[];
-
-interface CmssyChromeProps {
-    config: CmssyNextConfig;
-    blocks: BlockDefinition[];
-    position: string;
-    /**
-     * The page whose layout to render. Defaults to "/" - the site chrome.
-     */
-    page?: string;
-    /**
-     * The client wrapper around CmssyLazyLayout, rendered in edit mode. Without it
-     * the header and the footer are markup the editor can select and cannot fill.
-     *
-     * A COMPONENT, not a function to call: it lives on the client, and the server
-     * can only render it.
-     */
-    editable?: ComponentType<{
-        groups: CmssyLayoutGroup[];
-        position: string;
-        locale: string;
-        defaultLocale: string;
-        enabledLocales: string[];
-        edit: {
-            editorOrigin: string;
-        };
-    }>;
-}
-/**
- * The site chrome, rendered the way each mode needs it:
- *
- *  - published traffic: server-rendered layout blocks (static, no client cost);
- *  - the editor: the same blocks through the edit bridge, fetched with the
- *    preview secret, so what you see is the draft you are editing.
- *
- * Getting this wrong is invisible - the site looks right and the editor shows a
- * header it cannot edit, or the published version of one. Both shipped before.
- */
-declare function CmssyChrome({ config, blocks, position, page, editable, }: CmssyChromeProps): Promise<react_jsx_runtime.JSX.Element>;
-
-export { CmssyChrome, type CmssyChromeProps, type CmssyProxyOptions, cmssyProxyMatcher, createCmssyProxy };

package/dist/preset.js

@@ -1,231 +0,0 @@
-import { NextResponse } from 'next/server';
-import { resolveSiteLocales, fetchLayouts, CmssyServerLayout, splitLocaleFromPath } from '@cmssy/react';
-import { headers } from 'next/headers';
-import { jsx } from 'react/jsx-runtime';
-
-// src/preset/proxy.ts
-
-// src/config.ts
-var DEFAULT_CMSSY_EDITOR_ORIGINS = [
-  "https://cmssy.io",
-  "https://www.cmssy.io"
-];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
-  if (parts.length === 0) return void 0;
-  return parts.length === 1 ? parts[0] : parts;
-}
-function isDevelopment() {
-  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
-}
-function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
-    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
-}
-
-// src/csp.ts
-function toCspOrigin(origin) {
-  if (origin === "*") return "*";
-  let parsed;
-  try {
-    parsed = new URL(origin);
-  } catch {
-    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
-  }
-  if (parsed.origin === "null") {
-    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
-  }
-  return parsed.origin;
-}
-function frameAncestors(editorOrigin) {
-  const resolved = resolveEditorOrigin(editorOrigin);
-  const origins = Array.isArray(resolved) ? resolved : [resolved];
-  if (origins.length === 0) {
-    throw new Error(
-      "cmssy: editorOrigin must contain at least one valid origin"
-    );
-  }
-  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
-  return `frame-ancestors ${normalized.join(" ")}`;
-}
-function mergeFrameAncestors(existing, directive) {
-  if (!existing) return directive;
-  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
-  kept.push(directive);
-  return kept.join("; ");
-}
-function applyCmssyCsp(response, options) {
-  const merged = mergeFrameAncestors(
-    response.headers.get("Content-Security-Policy"),
-    frameAncestors(options.editorOrigin)
-  );
-  response.headers.set("Content-Security-Policy", merged);
-  response.headers.delete("X-Frame-Options");
-  return response;
-}
-
-// src/secret-match.ts
-var MAX_SECRET_LENGTH = 256;
-async function cmssySecretsMatch(a, b) {
-  if (a.length > MAX_SECRET_LENGTH || b.length > MAX_SECRET_LENGTH) {
-    return false;
-  }
-  const encoder = new TextEncoder();
-  const [ha, hb] = await Promise.all([
-    crypto.subtle.digest("SHA-256", encoder.encode(a)),
-    crypto.subtle.digest("SHA-256", encoder.encode(b))
-  ]);
-  const va = new Uint8Array(ha);
-  const vb = new Uint8Array(hb);
-  let diff = 0;
-  for (let i = 0; i < va.length; i += 1) {
-    diff |= (va[i] ?? 0) ^ (vb[i] ?? 0);
-  }
-  return diff === 0;
-}
-
-// src/edit-mode.ts
-var CMSSY_EDIT_HEADER = "x-cmssy-edit";
-var CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
-var CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
-async function isCmssyEditMode() {
-  const h = await headers();
-  return h.get(CMSSY_EDIT_HEADER) === "1";
-}
-var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-async function cmssyEditRewrite(request, config, options = {}) {
-  const { pathname, searchParams } = request.nextUrl;
-  if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
-  if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
-  const provided = searchParams.get(CMSSY_SECRET_QUERY_PARAM);
-  if (!provided || !config.draftSecret) return null;
-  if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
-  const url = request.nextUrl.clone();
-  url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
-  warnIfEditRouteMissing(url);
-  return NextResponse.rewrite(
-    url,
-    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
-  );
-}
-var probed = false;
-function warnIfEditRouteMissing(url) {
-  if (process.env.NODE_ENV === "production" || probed) return;
-  probed = true;
-  void fetch(url, { method: "HEAD" }).then((response) => {
-    if (response.status !== 404) return;
-    console.error(
-      `[cmssy] The editor request was rewritten to ${url.pathname}, but nothing is mounted there (404). Add the edit route:
-
-  // app/cmssy-edit/[[...path]]/page.tsx
-  export const dynamic = "force-dynamic";
-  export default createCmssyEditPage(cmssy, blocks, { editor: CmssyEditor });
-
-Until then the editor preview stays blank.`
-    );
-  }).catch(() => {
-  });
-}
-var CMSSY_LOCALE_HEADER = "x-cmssy-locale";
-async function localeForPathname(config, pathname) {
-  const siteLocales = await resolveSiteLocales(config);
-  const segments = pathname.split("/").filter(Boolean);
-  return splitLocaleFromPath(segments, siteLocales).locale;
-}
-async function getCmssyLocale(config, options) {
-  const { headers: headers2 } = await import('next/headers');
-  const headerList = await headers2();
-  const fromHeader = headerList.get(CMSSY_LOCALE_HEADER);
-  if (fromHeader) return fromHeader;
-  const { defaultLocale } = await resolveSiteLocales(config);
-  return defaultLocale;
-}
-
-// src/preset/proxy.ts
-function createCmssyProxy(config, options = {}) {
-  return async function cmssyProxy(request) {
-    const { pathname } = request.nextUrl;
-    const requestHeaders = new Headers(request.headers);
-    requestHeaders.delete(CMSSY_EDIT_HEADER);
-    requestHeaders.delete(CMSSY_LOCALE_HEADER);
-    const locale = await localeForPathname(config, pathname);
-    requestHeaders.set(CMSSY_LOCALE_HEADER, locale);
-    const editHeaders = new Headers(requestHeaders);
-    editHeaders.set(CMSSY_EDIT_HEADER, "1");
-    const editRewrite = await cmssyEditRewrite(request, config, {
-      requestHeaders: editHeaders
-    });
-    if (editRewrite) {
-      applyCmssyCsp(editRewrite, { editorOrigin: config.editorOrigin });
-      return editRewrite;
-    }
-    if (options.stripLocalePrefix && pathname.startsWith(`/${locale}`)) {
-      const { defaultLocale } = await resolveSiteLocales(config);
-      if (locale !== defaultLocale) {
-        const url = request.nextUrl.clone();
-        url.pathname = pathname.slice(locale.length + 1) || "/";
-        return NextResponse.rewrite(url, {
-          request: { headers: requestHeaders }
-        });
-      }
-    }
-    return NextResponse.next({ request: { headers: requestHeaders } });
-  };
-}
-var cmssyProxyMatcher = ["/((?!_next/|api/|.*\\..*).*)"];
-async function CmssyChrome({
-  config,
-  blocks,
-  position,
-  page = "/",
-  editable
-}) {
-  const editMode = await isCmssyEditMode();
-  const [groups, locale, siteLocales] = await Promise.all([
-    fetchLayouts(
-      config,
-      page,
-      editMode ? { previewSecret: config.draftSecret } : void 0
-    ),
-    getCmssyLocale(config),
-    resolveSiteLocales(config)
-  ]);
-  if (editMode && editable) {
-    const origin = resolveEditorOrigin(config.editorOrigin);
-    const Editable = editable;
-    return /* @__PURE__ */ jsx(
-      Editable,
-      {
-        groups,
-        position,
-        locale,
-        defaultLocale: siteLocales.defaultLocale,
-        enabledLocales: siteLocales.locales,
-        edit: {
-          editorOrigin: (Array.isArray(origin) ? origin[0] : origin) ?? ""
-        }
-      }
-    );
-  }
-  return /* @__PURE__ */ jsx(
-    CmssyServerLayout,
-    {
-      groups,
-      blocks,
-      position,
-      locale,
-      defaultLocale: siteLocales.defaultLocale,
-      enabledLocales: siteLocales.locales
-    }
-  );
-}
-
-export { CmssyChrome, cmssyProxyMatcher, createCmssyProxy };