@cmssy/next 4.7.2 → 5.0.1

package/dist/testing.cjs

@@ -1,63 +1,10 @@
 'use strict';
 
-// src/testing/edit-smoke.ts
-var EDITOR_MARKER = /CmssyEditor|cmssy-edit/;
-var SERVER_CHROME = /<header|<footer/;
-async function html(url) {
-  const response = await fetch(url, { redirect: "manual" });
-  return { status: response.status, body: await response.text() };
-}
-async function checkCmssyEditMode(options) {
-  const { baseUrl, secret, path = "/" } = options;
-  const failures = [];
-  const url = (suffix) => `${baseUrl.replace(/\/+$/, "")}${suffix}`;
-  const publicPage = await html(url(path));
-  if (publicPage.status !== 200) {
-    failures.push(`public ${path}: expected 200, got ${publicPage.status}`);
-  }
-  if (EDITOR_MARKER.test(publicPage.body)) {
-    failures.push(`public ${path}: the editor is mounted on a public page`);
-  }
-  const hasServerChrome = SERVER_CHROME.test(publicPage.body);
-  const unverified = await html(url(`${path}?cmssyEdit=1`));
-  if (EDITOR_MARKER.test(unverified.body)) {
-    failures.push(
-      `${path}?cmssyEdit=1: edit mode without a secret - an unverified request must not open the editor (CMS-948)`
-    );
-  }
-  const verified = await html(
-    url(`${path}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`)
-  );
-  if (verified.status !== 200) {
-    failures.push(`edit ${path}: expected 200, got ${verified.status}`);
-  }
-  if (!EDITOR_MARKER.test(verified.body)) {
-    failures.push(
-      `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
-    );
-  }
-  if (hasServerChrome && SERVER_CHROME.test(verified.body)) {
-    failures.push(
-      `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
-    );
-  }
-  const { localizedPath, localizedMarker } = options;
-  if (localizedPath && localizedMarker) {
-    const localized = await html(
-      url(
-        `${localizedPath}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`
-      )
-    );
-    if (!EDITOR_MARKER.test(localized.body)) {
-      failures.push(`edit ${localizedPath}: no editor in the response`);
-    }
-    if (!localized.body.includes(localizedMarker)) {
-      failures.push(
-        `edit ${localizedPath}: "${localizedMarker}" is missing - the preview renders in the default language, not the one the URL asks for`
-      );
-    }
-  }
-  return { ok: failures.length === 0, failures };
-}
+var testing = require('@cmssy/core/testing');
 
-exports.checkCmssyEditMode = checkCmssyEditMode;
+
+
+Object.defineProperty(exports, "checkCmssyEditMode", {
+  enumerable: true,
+  get: function () { return testing.checkCmssyEditMode; }
+});

package/dist/testing.d.cts

@@ -1,39 +1 @@
-interface EditSmokeOptions {
-    /** A running build of the consumer app, e.g. http://localhost:3000. */
-    baseUrl: string;
-    /** The site's CMSSY_DRAFT_SECRET. Without it nothing can be verified. */
-    secret: string;
-    /** A published page to exercise. Defaults to "/". */
-    path?: string;
-    /**
-     * The same page under a language prefix, e.g. "/no". Pass it on a site whose
-     * URLs carry the language, and the check also proves the preview renders in
-     * THAT language rather than the default one.
-     */
-    localizedPath?: string;
-    /** A word only the localized page says - "Handlekurv", say. */
-    localizedMarker?: string;
-}
-interface EditSmokeResult {
-    ok: boolean;
-    failures: string[];
-}
-/**
- * Proves a consumer app's EDIT path still works - the path a build cannot check,
- * because the site compiles and serves fine while being uneditable.
- *
- * It asserts three independent things:
- *   1. the public page renders WITHOUT the editor, chrome server-rendered;
- *   2. a bare `?cmssyEdit=1` does NOT enter edit mode (an unverified pair must
- *      not open the door - CMS-948);
- *   3. a verified `cmssyEdit=1` + `cmssySecret` renders the editor AND moves the
- *      chrome onto the edit bridge.
- *
- * Run it against a started production build:
- *
- *   const result = await checkCmssyEditMode({ baseUrl, secret });
- *   expect(result.failures).toEqual([]);
- */
-declare function checkCmssyEditMode(options: EditSmokeOptions): Promise<EditSmokeResult>;
-
-export { type EditSmokeOptions, type EditSmokeResult, checkCmssyEditMode };
+export { EditSmokeOptions, EditSmokeResult, checkCmssyEditMode } from '@cmssy/core/testing';

package/dist/testing.d.ts

@@ -1,39 +1 @@
-interface EditSmokeOptions {
-    /** A running build of the consumer app, e.g. http://localhost:3000. */
-    baseUrl: string;
-    /** The site's CMSSY_DRAFT_SECRET. Without it nothing can be verified. */
-    secret: string;
-    /** A published page to exercise. Defaults to "/". */
-    path?: string;
-    /**
-     * The same page under a language prefix, e.g. "/no". Pass it on a site whose
-     * URLs carry the language, and the check also proves the preview renders in
-     * THAT language rather than the default one.
-     */
-    localizedPath?: string;
-    /** A word only the localized page says - "Handlekurv", say. */
-    localizedMarker?: string;
-}
-interface EditSmokeResult {
-    ok: boolean;
-    failures: string[];
-}
-/**
- * Proves a consumer app's EDIT path still works - the path a build cannot check,
- * because the site compiles and serves fine while being uneditable.
- *
- * It asserts three independent things:
- *   1. the public page renders WITHOUT the editor, chrome server-rendered;
- *   2. a bare `?cmssyEdit=1` does NOT enter edit mode (an unverified pair must
- *      not open the door - CMS-948);
- *   3. a verified `cmssyEdit=1` + `cmssySecret` renders the editor AND moves the
- *      chrome onto the edit bridge.
- *
- * Run it against a started production build:
- *
- *   const result = await checkCmssyEditMode({ baseUrl, secret });
- *   expect(result.failures).toEqual([]);
- */
-declare function checkCmssyEditMode(options: EditSmokeOptions): Promise<EditSmokeResult>;
-
-export { type EditSmokeOptions, type EditSmokeResult, checkCmssyEditMode };
+export { EditSmokeOptions, EditSmokeResult, checkCmssyEditMode } from '@cmssy/core/testing';

package/dist/testing.js

@@ -1,61 +1 @@
-// src/testing/edit-smoke.ts
-var EDITOR_MARKER = /CmssyEditor|cmssy-edit/;
-var SERVER_CHROME = /<header|<footer/;
-async function html(url) {
-  const response = await fetch(url, { redirect: "manual" });
-  return { status: response.status, body: await response.text() };
-}
-async function checkCmssyEditMode(options) {
-  const { baseUrl, secret, path = "/" } = options;
-  const failures = [];
-  const url = (suffix) => `${baseUrl.replace(/\/+$/, "")}${suffix}`;
-  const publicPage = await html(url(path));
-  if (publicPage.status !== 200) {
-    failures.push(`public ${path}: expected 200, got ${publicPage.status}`);
-  }
-  if (EDITOR_MARKER.test(publicPage.body)) {
-    failures.push(`public ${path}: the editor is mounted on a public page`);
-  }
-  const hasServerChrome = SERVER_CHROME.test(publicPage.body);
-  const unverified = await html(url(`${path}?cmssyEdit=1`));
-  if (EDITOR_MARKER.test(unverified.body)) {
-    failures.push(
-      `${path}?cmssyEdit=1: edit mode without a secret - an unverified request must not open the editor (CMS-948)`
-    );
-  }
-  const verified = await html(
-    url(`${path}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`)
-  );
-  if (verified.status !== 200) {
-    failures.push(`edit ${path}: expected 200, got ${verified.status}`);
-  }
-  if (!EDITOR_MARKER.test(verified.body)) {
-    failures.push(
-      `edit ${path}: no editor in the response - is the /cmssy-edit route mounted?`
-    );
-  }
-  if (hasServerChrome && SERVER_CHROME.test(verified.body)) {
-    failures.push(
-      `edit ${path}: the chrome is still server-rendered - the header and footer will be selectable but have no fields (is CMSSY_EDIT_HEADER set on the rewrite?)`
-    );
-  }
-  const { localizedPath, localizedMarker } = options;
-  if (localizedPath && localizedMarker) {
-    const localized = await html(
-      url(
-        `${localizedPath}?cmssyEdit=1&cmssySecret=${encodeURIComponent(secret)}`
-      )
-    );
-    if (!EDITOR_MARKER.test(localized.body)) {
-      failures.push(`edit ${localizedPath}: no editor in the response`);
-    }
-    if (!localized.body.includes(localizedMarker)) {
-      failures.push(
-        `edit ${localizedPath}: "${localizedMarker}" is missing - the preview renders in the default language, not the one the URL asks for`
-      );
-    }
-  }
-  return { ok: failures.length === 0, failures };
-}
-
-export { checkCmssyEditMode };
+export { checkCmssyEditMode } from '@cmssy/core/testing';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmssy/next",
-  "version": "4.7.2",
+  "version": "5.0.1",
   "description": "Next.js App Router bindings for cmssy headless sites (createCmssyPage + draft preview)",
   "keywords": [
     "cmssy",
@@ -28,6 +28,16 @@
       "import": "./dist/index.js",
       "require": "./dist/index.cjs"
     },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js",
+      "require": "./dist/server.cjs"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "import": "./dist/middleware.js",
+      "require": "./dist/middleware.cjs"
+    },
     "./client": {
       "types": "./dist/client.d.ts",
       "import": "./dist/client.js",
@@ -37,11 +47,6 @@
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js",
       "require": "./dist/testing.cjs"
-    },
-    "./preset": {
-      "types": "./dist/preset.d.ts",
-      "import": "./dist/preset.js",
-      "require": "./dist/preset.cjs"
     }
   },
   "main": "./dist/index.cjs",
@@ -51,7 +56,7 @@
     "dist"
   ],
   "peerDependencies": {
-    "@cmssy/react": "^4.7.2",
+    "@cmssy/react": "^5.0.1",
     "next": ">=15",
     "react": "^18.2.0 || ^19.0.0",
     "react-dom": "^18.2.0 || ^19.0.0"
@@ -65,11 +70,12 @@
     "tsup": "^8.3.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@cmssy/react": "4.7.2"
+    "@cmssy/react": "5.0.1"
   },
   "dependencies": {
-    "jose": "^6.2.3",
-    "@cmssy/types": "0.27.0"
+    "@cmssy/types": "0.27.0",
+    "server-only": "^0.0.1",
+    "@cmssy/core": "5.0.1"
   },
   "scripts": {
     "build": "tsup",

package/dist/config-DNaPqq1f.d.cts

@@ -1,63 +0,0 @@
-import { CmssyAuthConfig } from '@cmssy/types';
-
-declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
-declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyNextConfig {
-    /**
-     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
-     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
-     */
-    apiUrl?: string;
-    /** Organization slug - part of the org-scoped delivery path. */
-    org: string;
-    workspaceSlug: string;
-    draftSecret: string;
-    /**
-     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
-     * preview. In development only, the SDK sends it on every page fetch so the
-     * backend can resolve the token's user and honour that user's dev-preview flag
-     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
-     * the draft overlay renders, otherwise published content. Server-only (never
-     * reaches the client); ignored outside development. See the Quickstart
-     * "Dev preview" section.
-     */
-    devToken?: string;
-    /**
-     * Origin allowed to frame your app in the editor. Defaults to
-     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
-     */
-    editorOrigin?: string | string[];
-    /**
-     * Canonical absolute site URL (e.g. https://cmssy.com), used by
-     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
-     * origin from the request `host` header at render time (multi-domain safe).
-     */
-    siteUrl?: string;
-    auth?: CmssyAuthConfig;
-    defaultLocale?: string;
-    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
-    enabledLocales?: string[];
-    resolveLocale?: () => string | Promise<string>;
-}
-/**
- * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
- * widened to `string | undefined` so a config can pass `process.env.*` straight
- * through without a `?? ""` fallback (which would mask a missing value as an
- * empty string) or a cast.
- */
-type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
-    org?: string;
-    workspaceSlug?: string;
-    draftSecret?: string;
-};
-/**
- * Validates an env-sourced config and returns a strictly-typed
- * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
- * actionable error listing any missing required variables (rendered by the
- * Next.js error overlay / boundary), so the app fails fast instead of running
- * with silently-empty config.
- */
-declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
-declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
-
-export { type CmssyNextConfig as C, DEFAULT_CMSSY_EDITOR_ORIGINS as D, type CmssyEnvConfig as a, assertAuthConfig as b, defineCmssyConfig as d, resolveEditorOrigin as r };

package/dist/config-DNaPqq1f.d.ts

@@ -1,63 +0,0 @@
-import { CmssyAuthConfig } from '@cmssy/types';
-
-declare const DEFAULT_CMSSY_EDITOR_ORIGINS: string[];
-declare function resolveEditorOrigin(editorOrigin: string | string[] | undefined): string | string[];
-interface CmssyNextConfig {
-    /**
-     * Full GraphQL delivery endpoint. Defaults to the cmssy cloud endpoint
-     * (`https://api.cmssy.io/graphql`); set it only for self-hosted / staging.
-     */
-    apiUrl?: string;
-    /** Organization slug - part of the org-scoped delivery path. */
-    org: string;
-    workspaceSlug: string;
-    draftSecret: string;
-    /**
-     * A cmssy API token (`cs_…`) that opts this app into the editor-controlled dev
-     * preview. In development only, the SDK sends it on every page fetch so the
-     * backend can resolve the token's user and honour that user's dev-preview flag
-     * (toggled from the editor's dev-mode switch): flag on + a saved dev draft ⇒
-     * the draft overlay renders, otherwise published content. Server-only (never
-     * reaches the client); ignored outside development. See the Quickstart
-     * "Dev preview" section.
-     */
-    devToken?: string;
-    /**
-     * Origin allowed to frame your app in the editor. Defaults to
-     * {@link DEFAULT_CMSSY_EDITOR_ORIGINS}; set it only for self-hosted admins.
-     */
-    editorOrigin?: string | string[];
-    /**
-     * Canonical absolute site URL (e.g. https://cmssy.com), used by
-     * createCmssyRobots / createCmssySitemap. When omitted the helpers derive the
-     * origin from the request `host` header at render time (multi-domain safe).
-     */
-    siteUrl?: string;
-    auth?: CmssyAuthConfig;
-    defaultLocale?: string;
-    /** All languages enabled on the workspace; exposed to blocks via context.locale.enabled. */
-    enabledLocales?: string[];
-    resolveLocale?: () => string | Promise<string>;
-}
-/**
- * Env-shaped input for {@link defineCmssyConfig}: the required string fields are
- * widened to `string | undefined` so a config can pass `process.env.*` straight
- * through without a `?? ""` fallback (which would mask a missing value as an
- * empty string) or a cast.
- */
-type CmssyEnvConfig = Omit<CmssyNextConfig, "org" | "workspaceSlug" | "draftSecret"> & {
-    org?: string;
-    workspaceSlug?: string;
-    draftSecret?: string;
-};
-/**
- * Validates an env-sourced config and returns a strictly-typed
- * {@link CmssyNextConfig}. Pass raw `process.env.*` values; this throws a clear,
- * actionable error listing any missing required variables (rendered by the
- * Next.js error overlay / boundary), so the app fails fast instead of running
- * with silently-empty config.
- */
-declare function defineCmssyConfig(config: CmssyEnvConfig): CmssyNextConfig;
-declare function assertAuthConfig(config: CmssyNextConfig): CmssyAuthConfig;
-
-export { type CmssyNextConfig as C, DEFAULT_CMSSY_EDITOR_ORIGINS as D, type CmssyEnvConfig as a, assertAuthConfig as b, defineCmssyConfig as d, resolveEditorOrigin as r };

package/dist/preset.cjs

@@ -1,235 +0,0 @@
-'use strict';
-
-var server = require('next/server');
-var react = require('@cmssy/react');
-var headers = require('next/headers');
-var jsxRuntime = require('react/jsx-runtime');
-
-// src/preset/proxy.ts
-
-// src/config.ts
-var DEFAULT_CMSSY_EDITOR_ORIGINS = [
-  "https://cmssy.io",
-  "https://www.cmssy.io"
-];
-function parseEditorOriginEnv(raw) {
-  if (!raw) return void 0;
-  const parts = raw.split(",").map((o) => o.trim()).filter((o) => o.length > 0);
-  if (parts.length === 0) return void 0;
-  return parts.length === 1 ? parts[0] : parts;
-}
-function isDevelopment() {
-  return typeof process !== "undefined" && process.env.NODE_ENV === "development";
-}
-function resolveEditorOrigin(editorOrigin) {
-  const value = editorOrigin ?? (typeof process !== "undefined" ? parseEditorOriginEnv(process.env.CMSSY_EDITOR_ORIGIN) : void 0);
-  if (value === void 0) {
-    return isDevelopment() ? "*" : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  if (Array.isArray(value)) {
-    const cleaned = value.filter((o) => o && o.trim().length > 0);
-    return cleaned.length > 0 ? cleaned : DEFAULT_CMSSY_EDITOR_ORIGINS;
-  }
-  return value.trim().length > 0 ? value : DEFAULT_CMSSY_EDITOR_ORIGINS;
-}
-
-// src/csp.ts
-function toCspOrigin(origin) {
-  if (origin === "*") return "*";
-  let parsed;
-  try {
-    parsed = new URL(origin);
-  } catch {
-    throw new Error(`cmssy: invalid editorOrigin "${origin}"`);
-  }
-  if (parsed.origin === "null") {
-    throw new Error(`cmssy: editorOrigin "${origin}" has no usable origin`);
-  }
-  return parsed.origin;
-}
-function frameAncestors(editorOrigin) {
-  const resolved = resolveEditorOrigin(editorOrigin);
-  const origins = Array.isArray(resolved) ? resolved : [resolved];
-  if (origins.length === 0) {
-    throw new Error(
-      "cmssy: editorOrigin must contain at least one valid origin"
-    );
-  }
-  const normalized = origins.map((origin) => toCspOrigin(origin.trim()));
-  return `frame-ancestors ${normalized.join(" ")}`;
-}
-function mergeFrameAncestors(existing, directive) {
-  if (!existing) return directive;
-  const kept = existing.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !/^frame-ancestors\b/i.test(part));
-  kept.push(directive);
-  return kept.join("; ");
-}
-function applyCmssyCsp(response, options) {
-  const merged = mergeFrameAncestors(
-    response.headers.get("Content-Security-Policy"),
-    frameAncestors(options.editorOrigin)
-  );
-  response.headers.set("Content-Security-Policy", merged);
-  response.headers.delete("X-Frame-Options");
-  return response;
-}
-
-// src/secret-match.ts
-var MAX_SECRET_LENGTH = 256;
-async function cmssySecretsMatch(a, b) {
-  if (a.length > MAX_SECRET_LENGTH || b.length > MAX_SECRET_LENGTH) {
-    return false;
-  }
-  const encoder = new TextEncoder();
-  const [ha, hb] = await Promise.all([
-    crypto.subtle.digest("SHA-256", encoder.encode(a)),
-    crypto.subtle.digest("SHA-256", encoder.encode(b))
-  ]);
-  const va = new Uint8Array(ha);
-  const vb = new Uint8Array(hb);
-  let diff = 0;
-  for (let i = 0; i < va.length; i += 1) {
-    diff |= (va[i] ?? 0) ^ (vb[i] ?? 0);
-  }
-  return diff === 0;
-}
-
-// src/edit-mode.ts
-var CMSSY_EDIT_HEADER = "x-cmssy-edit";
-var CMSSY_EDIT_QUERY_PARAM = "cmssyEdit";
-var CMSSY_SECRET_QUERY_PARAM = "cmssySecret";
-async function isCmssyEditMode() {
-  const h = await headers.headers();
-  return h.get(CMSSY_EDIT_HEADER) === "1";
-}
-var CMSSY_EDIT_PATH_PREFIX = "/cmssy-edit";
-async function cmssyEditRewrite(request, config, options = {}) {
-  const { pathname, searchParams } = request.nextUrl;
-  if (pathname.startsWith(CMSSY_EDIT_PATH_PREFIX)) return null;
-  if (!searchParams.getAll(CMSSY_EDIT_QUERY_PARAM).includes("1")) return null;
-  const provided = searchParams.get(CMSSY_SECRET_QUERY_PARAM);
-  if (!provided || !config.draftSecret) return null;
-  if (!await cmssySecretsMatch(provided, config.draftSecret)) return null;
-  const url = request.nextUrl.clone();
-  url.pathname = `${CMSSY_EDIT_PATH_PREFIX}${pathname === "/" ? "" : pathname}`;
-  warnIfEditRouteMissing(url);
-  return server.NextResponse.rewrite(
-    url,
-    options.requestHeaders ? { request: { headers: options.requestHeaders } } : void 0
-  );
-}
-var probed = false;
-function warnIfEditRouteMissing(url) {
-  if (process.env.NODE_ENV === "production" || probed) return;
-  probed = true;
-  void fetch(url, { method: "HEAD" }).then((response) => {
-    if (response.status !== 404) return;
-    console.error(
-      `[cmssy] The editor request was rewritten to ${url.pathname}, but nothing is mounted there (404). Add the edit route:
-
-  // app/cmssy-edit/[[...path]]/page.tsx
-  export const dynamic = "force-dynamic";
-  export default createCmssyEditPage(cmssy, blocks, { editor: CmssyEditor });
-
-Until then the editor preview stays blank.`
-    );
-  }).catch(() => {
-  });
-}
-var CMSSY_LOCALE_HEADER = "x-cmssy-locale";
-async function localeForPathname(config, pathname) {
-  const siteLocales = await react.resolveSiteLocales(config);
-  const segments = pathname.split("/").filter(Boolean);
-  return react.splitLocaleFromPath(segments, siteLocales).locale;
-}
-async function getCmssyLocale(config, options) {
-  const { headers: headers2 } = await import('next/headers');
-  const headerList = await headers2();
-  const fromHeader = headerList.get(CMSSY_LOCALE_HEADER);
-  if (fromHeader) return fromHeader;
-  const { defaultLocale } = await react.resolveSiteLocales(config);
-  return defaultLocale;
-}
-
-// src/preset/proxy.ts
-function createCmssyProxy(config, options = {}) {
-  return async function cmssyProxy(request) {
-    const { pathname } = request.nextUrl;
-    const requestHeaders = new Headers(request.headers);
-    requestHeaders.delete(CMSSY_EDIT_HEADER);
-    requestHeaders.delete(CMSSY_LOCALE_HEADER);
-    const locale = await localeForPathname(config, pathname);
-    requestHeaders.set(CMSSY_LOCALE_HEADER, locale);
-    const editHeaders = new Headers(requestHeaders);
-    editHeaders.set(CMSSY_EDIT_HEADER, "1");
-    const editRewrite = await cmssyEditRewrite(request, config, {
-      requestHeaders: editHeaders
-    });
-    if (editRewrite) {
-      applyCmssyCsp(editRewrite, { editorOrigin: config.editorOrigin });
-      return editRewrite;
-    }
-    if (options.stripLocalePrefix && pathname.startsWith(`/${locale}`)) {
-      const { defaultLocale } = await react.resolveSiteLocales(config);
-      if (locale !== defaultLocale) {
-        const url = request.nextUrl.clone();
-        url.pathname = pathname.slice(locale.length + 1) || "/";
-        return server.NextResponse.rewrite(url, {
-          request: { headers: requestHeaders }
-        });
-      }
-    }
-    return server.NextResponse.next({ request: { headers: requestHeaders } });
-  };
-}
-var cmssyProxyMatcher = ["/((?!_next/|api/|.*\\..*).*)"];
-async function CmssyChrome({
-  config,
-  blocks,
-  position,
-  page = "/",
-  editable
-}) {
-  const editMode = await isCmssyEditMode();
-  const [groups, locale, siteLocales] = await Promise.all([
-    react.fetchLayouts(
-      config,
-      page,
-      editMode ? { previewSecret: config.draftSecret } : void 0
-    ),
-    getCmssyLocale(config),
-    react.resolveSiteLocales(config)
-  ]);
-  if (editMode && editable) {
-    const origin = resolveEditorOrigin(config.editorOrigin);
-    const Editable = editable;
-    return /* @__PURE__ */ jsxRuntime.jsx(
-      Editable,
-      {
-        groups,
-        position,
-        locale,
-        defaultLocale: siteLocales.defaultLocale,
-        enabledLocales: siteLocales.locales,
-        edit: {
-          editorOrigin: (Array.isArray(origin) ? origin[0] : origin) ?? ""
-        }
-      }
-    );
-  }
-  return /* @__PURE__ */ jsxRuntime.jsx(
-    react.CmssyServerLayout,
-    {
-      groups,
-      blocks,
-      position,
-      locale,
-      defaultLocale: siteLocales.defaultLocale,
-      enabledLocales: siteLocales.locales
-    }
-  );
-}
-
-exports.CmssyChrome = CmssyChrome;
-exports.cmssyProxyMatcher = cmssyProxyMatcher;
-exports.createCmssyProxy = createCmssyProxy;