@decocms/nextjs 8.0.0 → 8.4.0

package/dist/drafts.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Which hosts may render drafts: v7's allowlist (`@decocms/blocks` 7.x
+ * `cms/draftSource.ts`: `readAllowedHosts`, `isDraftHostAllowed`,
+ * `isDraftPreviewEnabled`), ported as is. v7 read its override from the
+ * `DECO_ALLOWED_PREVIEW_HOSTS` variable; here it is the `previewHosts` option,
+ * and the site passes the same options to the proxy (`decideDraft`) and to
+ * its pages (`bindDraft`).
+ *
+ * - The site's own preview hosts: the ones it declares, in the `CMS` block or
+ *   as `createCMS({ preview: { hosts } })` (matched as `cms.draftPointer`
+ *   matches them). A site that declares none has none, as in v7: blocks'
+ *   own default (every host) doesn't count as a declaration.
+ * - The hosts Deco runs the site on, named after the site and always added:
+ *   `<site>.deco.site` and `<site>.deco-cx.workers.dev`, exact.
+ * - `previewHosts: [...]` replaces the site's own list (the inferred hosts are
+ *   still added); `previewHosts: "none"` turns previews off on every host.
+ *
+ * Hosts compare exactly, lowercased, port included (`localhost:3000`). The
+ * host is the one the visitor asked for: `x-forwarded-host` behind a proxy,
+ * else `host`.
+ *
+ * The draft itself is the capability: a host check only bounds where a draft
+ * link works. A request the check refuses gets the release, never an error.
+ *
+ * No React, no Next.js and no module state: the proxy and the pages share it.
+ */
+import { type CMS, type RequestLike } from "@decocms/blocks";
+export interface PreviewPolicy {
+    /** The site's name: `<site>.deco.site` and `<site>.deco-cx.workers.dev` may preview. */
+    site?: string;
+    /** Replaces the `CMS` block's preview hosts; `"none"` turns previews off everywhere. */
+    previewHosts?: readonly string[] | "none";
+}
+/** The hosts Deco runs `site` on, which may always preview (unless previews are off). */
+export declare function inferredPreviewHosts(site: string | undefined): string[];
+/**
+ * Whether `host` may preview without asking the CMS: `true` (an override or
+ * inferred host), `false` (previews off, or the override leaves it out), or
+ * `"cms"` when only the site's declared preview hosts can say (none declared:
+ * `false`, see {@link declaresPreviewHosts}).
+ */
+export declare function previewHostDecision(host: string, policy: PreviewPolicy): boolean | "cms";
+/**
+ * Whether any host may preview (v7's `isDraftPreviewEnabled`): a page checks
+ * it before it reads the request's headers, so a site with previews off never
+ * turns a static page dynamic. `false` for `previewHosts: "none"`; `true` with
+ * a site name or an override list; otherwise whether the site declares
+ * preview hosts and they allow any.
+ */
+export declare function isDraftPreviewEnabled(cms: Pick<CMS, "settings" | "forRelease">, policy: PreviewPolicy): Promise<boolean>;
+/**
+ * Whether the site declares its own preview hosts: in the `CMS` block, or as
+ * `createCMS`'s `preview.hosts`. When it declares none, `cms.settings()`
+ * reports blocks' default, every host (`["*"]`), which v7 never had: there,
+ * a site without a list previewed only on its Deco hosts. The saved `CMS`
+ * block tells an explicit `["*"]` from that default.
+ */
+export declare function declaresPreviewHosts(cms: Pick<CMS, "settings" | "forRelease">): Promise<boolean>;
+/**
+ * The pointer a request carries, as `@decocms/blocks` reads it: `?__draft=`
+ * first, then the draft cookie; `null` for `?__draft=off` and for a value
+ * that doesn't parse.
+ */
+export declare function readDraftPointer(request: RequestLike): string | null;
+/** Whether the request carries a draft signal at all: without one the CMS is never asked. */
+export declare function hasDraftSignal(request: RequestLike): boolean;
+/** The host the visitor asked for: the first `x-forwarded-host`, else `host`. */
+export declare function requestHost(headers: {
+    get(name: string): string | null;
+}): string | null;
+/**
+ * The request as the draft check should see it: `pathAndQuery` on the host
+ * the visitor asked for (`x-forwarded-host` behind a proxy, else `host`), so
+ * the host check judges the public hostname rather than the origin's, or
+ * `fallbackHost` when the headers name none. `null` when no host is known.
+ */
+export declare function requestLike(headers: Headers, pathAndQuery: string, fallbackHost?: string): RequestLike | null;
+/**
+ * The draft `request` renders under `policy`, or `null` for the release: the
+ * pointer it carries, on a host the policy (or, when only it can say, the
+ * `CMS` block) allows.
+ */
+export declare function allowedDraft(cms: Pick<CMS, "draftPointer" | "settings" | "forRelease">, request: RequestLike, policy: PreviewPolicy): Promise<string | null>;
+/**
+ * The draft cookie: the same `Set-Cookie` `cms.draftCookie` writes (a test
+ * holds the two together). Studio frames the site cross-site, hence
+ * `SameSite=None; Partitioned`.
+ */
+export declare function draftCookie(value: string, extra?: string[]): string;
+/** Whether the request ends a preview (`?__draft=off`): the cookie goes on any host. */
+export declare function endsPreview(request: RequestLike): boolean;
+/** Whether the request's own `?__draft=` carries `pointer` (a draft link, not the cookie). */
+export declare function fromDraftLink(request: RequestLike, pointer: string): boolean;
+//# sourceMappingURL=drafts.d.ts.map

package/dist/drafts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.d.ts","sourceRoot":"","sources":["../src/drafts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,KAAK,GAAG,EAAqB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGhF,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC;CAC3C;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAGvE;AAOD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,GAAG,KAAK,CAQxF;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,CAAC,EACzC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,CAAC,GACxC,OAAO,CAAC,OAAO,CAAC,CAUlB;AA8BD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAMpE;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAI5D;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAIxF;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,WAAW,GAAG,IAAI,CAQpB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC,EAC1D,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAexB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,EAAO,GAAG,MAAM,CAUvE;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAEzD;AAED,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5E"}

package/dist/drafts.js

@@ -0,0 +1,210 @@
+/**
+ * Which hosts may render drafts: v7's allowlist (`@decocms/blocks` 7.x
+ * `cms/draftSource.ts`: `readAllowedHosts`, `isDraftHostAllowed`,
+ * `isDraftPreviewEnabled`), ported as is. v7 read its override from the
+ * `DECO_ALLOWED_PREVIEW_HOSTS` variable; here it is the `previewHosts` option,
+ * and the site passes the same options to the proxy (`decideDraft`) and to
+ * its pages (`bindDraft`).
+ *
+ * - The site's own preview hosts: the ones it declares, in the `CMS` block or
+ *   as `createCMS({ preview: { hosts } })` (matched as `cms.draftPointer`
+ *   matches them). A site that declares none has none, as in v7: blocks'
+ *   own default (every host) doesn't count as a declaration.
+ * - The hosts Deco runs the site on, named after the site and always added:
+ *   `<site>.deco.site` and `<site>.deco-cx.workers.dev`, exact.
+ * - `previewHosts: [...]` replaces the site's own list (the inferred hosts are
+ *   still added); `previewHosts: "none"` turns previews off on every host.
+ *
+ * Hosts compare exactly, lowercased, port included (`localhost:3000`). The
+ * host is the one the visitor asked for: `x-forwarded-host` behind a proxy,
+ * else `host`.
+ *
+ * The draft itself is the capability: a host check only bounds where a draft
+ * link works. A request the check refuses gets the release, never an error.
+ *
+ * No React, no Next.js and no module state: the proxy and the pages share it.
+ */
+import { parseDraftPointer } from "@decocms/blocks";
+import { DRAFT_COOKIE, DRAFT_PARAM } from "./draft.js";
+/** The hosts Deco runs `site` on, which may always preview (unless previews are off). */
+export function inferredPreviewHosts(site) {
+    const s = (site ?? "").trim().toLowerCase();
+    return s ? [`${s}.deco.site`, `${s}.deco-cx.workers.dev`] : [];
+}
+function overrideHosts(policy) {
+    if (policy.previewHosts === "none")
+        return ["none"];
+    return (policy.previewHosts ?? []).map((h) => h.trim().toLowerCase()).filter(Boolean);
+}
+/**
+ * Whether `host` may preview without asking the CMS: `true` (an override or
+ * inferred host), `false` (previews off, or the override leaves it out), or
+ * `"cms"` when only the site's declared preview hosts can say (none declared:
+ * `false`, see {@link declaresPreviewHosts}).
+ */
+export function previewHostDecision(host, policy) {
+    const override = overrideHosts(policy);
+    if (override.includes("none"))
+        return false;
+    const h = host.trim().toLowerCase();
+    if (h === "")
+        return false;
+    if (inferredPreviewHosts(policy.site).includes(h))
+        return true;
+    if (policy.previewHosts !== undefined)
+        return override.includes(h);
+    return "cms";
+}
+/**
+ * Whether any host may preview (v7's `isDraftPreviewEnabled`): a page checks
+ * it before it reads the request's headers, so a site with previews off never
+ * turns a static page dynamic. `false` for `previewHosts: "none"`; `true` with
+ * a site name or an override list; otherwise whether the site declares
+ * preview hosts and they allow any.
+ */
+export async function isDraftPreviewEnabled(cms, policy) {
+    const override = overrideHosts(policy);
+    if (override.includes("none"))
+        return false;
+    if (inferredPreviewHosts(policy.site).length > 0)
+        return true;
+    if (policy.previewHosts !== undefined)
+        return override.length > 0;
+    return (await declaresPreviewHosts(cms)) && (await cms.settings()).preview.hosts.length > 0;
+}
+/**
+ * Whether the site declares its own preview hosts: in the `CMS` block, or as
+ * `createCMS`'s `preview.hosts`. When it declares none, `cms.settings()`
+ * reports blocks' default, every host (`["*"]`), which v7 never had: there,
+ * a site without a list previewed only on its Deco hosts. The saved `CMS`
+ * block tells an explicit `["*"]` from that default.
+ */
+export async function declaresPreviewHosts(cms) {
+    const { hosts } = (await cms.settings()).preview;
+    if (hosts.length !== 1 || hosts[0] !== "*")
+        return true;
+    try {
+        const [block] = await cms.forRelease().resolve("CMS", { run: false });
+        const preview = isRecord(block) ? block.preview : undefined;
+        return isRecord(preview) && ("hosts" in preview || "__resolveType" in preview);
+    }
+    catch {
+        return false;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+const DRAFT_OFF = "off";
+function draftParam(request) {
+    try {
+        return new URL(request.url, "http://localhost").searchParams.get(DRAFT_PARAM);
+    }
+    catch {
+        return null;
+    }
+}
+function readCookie(header, name) {
+    if (!header)
+        return null;
+    for (const part of header.split(";")) {
+        const eq = part.indexOf("=");
+        if (eq === -1 || part.slice(0, eq).trim() !== name)
+            continue;
+        try {
+            return decodeURIComponent(part.slice(eq + 1).trim());
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * The pointer a request carries, as `@decocms/blocks` reads it: `?__draft=`
+ * first, then the draft cookie; `null` for `?__draft=off` and for a value
+ * that doesn't parse.
+ */
+export function readDraftPointer(request) {
+    const param = draftParam(request);
+    if (param === DRAFT_OFF)
+        return null;
+    if (param && parseDraftPointer(param) !== null)
+        return param;
+    const cookie = readCookie(request.headers.get("cookie"), DRAFT_COOKIE);
+    return cookie && parseDraftPointer(cookie) !== null ? cookie : null;
+}
+/** Whether the request carries a draft signal at all: without one the CMS is never asked. */
+export function hasDraftSignal(request) {
+    return (draftParam(request) !== null || readCookie(request.headers.get("cookie"), DRAFT_COOKIE) !== null);
+}
+/** The host the visitor asked for: the first `x-forwarded-host`, else `host`. */
+export function requestHost(headers) {
+    const forwarded = headers.get("x-forwarded-host")?.split(",")[0]?.trim();
+    const host = forwarded || headers.get("host")?.trim();
+    return host || null;
+}
+/**
+ * The request as the draft check should see it: `pathAndQuery` on the host
+ * the visitor asked for (`x-forwarded-host` behind a proxy, else `host`), so
+ * the host check judges the public hostname rather than the origin's, or
+ * `fallbackHost` when the headers name none. `null` when no host is known.
+ */
+export function requestLike(headers, pathAndQuery, fallbackHost) {
+    const host = requestHost(headers) ?? (fallbackHost || null);
+    if (!host)
+        return null;
+    try {
+        return { url: new URL(pathAndQuery, `https://${host}`).href, headers };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The draft `request` renders under `policy`, or `null` for the release: the
+ * pointer it carries, on a host the policy (or, when only it can say, the
+ * `CMS` block) allows.
+ */
+export async function allowedDraft(cms, request, policy) {
+    const pointer = readDraftPointer(request);
+    if (pointer === null)
+        return null;
+    let host;
+    try {
+        host = new URL(request.url).host;
+    }
+    catch {
+        return null;
+    }
+    const decision = previewHostDecision(host, policy);
+    const allowed = decision === "cms"
+        ? (await declaresPreviewHosts(cms)) && (await cms.draftPointer(request)) !== null
+        : decision;
+    return allowed ? pointer : null;
+}
+/**
+ * The draft cookie: the same `Set-Cookie` `cms.draftCookie` writes (a test
+ * holds the two together). Studio frames the site cross-site, hence
+ * `SameSite=None; Partitioned`.
+ */
+export function draftCookie(value, extra = []) {
+    return [
+        `${DRAFT_COOKIE}=${value}`,
+        "Path=/",
+        ...extra,
+        "HttpOnly",
+        "Secure",
+        "SameSite=None",
+        "Partitioned",
+    ].join("; ");
+}
+/** Whether the request ends a preview (`?__draft=off`): the cookie goes on any host. */
+export function endsPreview(request) {
+    return draftParam(request) === DRAFT_OFF;
+}
+/** Whether the request's own `?__draft=` carries `pointer` (a draft link, not the cookie). */
+export function fromDraftLink(request, pointer) {
+    return draftParam(request) === pointer;
+}
+//# sourceMappingURL=drafts.js.map

package/dist/drafts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.js","sourceRoot":"","sources":["../src/drafts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAY,iBAAiB,EAAoB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AASvD,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB;IAC1C,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAqB;IACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAyC,EACzC,MAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAyC;IAEzC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,OAAO,CAAU,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,eAAe,IAAI,OAAO,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,SAAS,UAAU,CAAC,OAAoB;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,IAAY;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAC7D,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IACvE,OAAO,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,OAAO,CACL,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,KAAK,IAAI,CACjG,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,OAA6C;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,OAAgB,EAChB,YAAoB,EACpB,YAAqB;IAErB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAA0D,EAC1D,OAAoB,EACpB,MAAqB;IAErB,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GACX,QAAQ,KAAK,KAAK;QAChB,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;QACjF,CAAC,CAAC,QAAQ,CAAC;IACf,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAK,GAAa,EAAE;IAC7D,OAAO;QACL,GAAG,YAAY,IAAI,KAAK,EAAE;QAC1B,QAAQ;QACR,GAAG,KAAK;QACR,UAAU;QACV,QAAQ;QACR,eAAe;QACf,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;AAC3C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,OAAe;IACjE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;AACzC,CAAC"}

package/dist/image-loader/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `@decocms/nextjs/image-loader`: a next/image loader over an `ImageUrl` from
+ * `@decocms/blocks/image`. The site's `loaderFile` is one line:
+ *
+ * ```ts
+ * // src/image-loader.ts (next.config: images: { loader: "custom", loaderFile: "./src/image-loader.ts" })
+ * import { createDecoImageLoader } from "@decocms/nextjs/image-loader";
+ * import { imageUrl } from "./imageUrl";
+ * export default createDecoImageLoader(imageUrl);
+ * ```
+ *
+ * A source the `ImageUrl` resizes gets its provider's URL; any other source
+ * goes to `fallback` (`nextImageOptimizer` sends it through Next's own
+ * `/_next/image`), or comes back unchanged. No React, no module state.
+ */
+import type { ImageUrl, Quality } from "@decocms/blocks/image";
+/** What next/image passes a loader (`ImageLoaderProps`), with Deco's named tiers allowed as quality. */
+export interface DecoImageLoaderProps {
+    src: string;
+    width: number;
+    quality?: Quality;
+}
+export type DecoImageLoader = (props: DecoImageLoaderProps) => string;
+export interface DecoImageLoaderOptions {
+    /** The URL of a source no provider resizes; `null` keeps `src`. Default: `src` unchanged. */
+    fallback?: (props: DecoImageLoaderProps) => string | null;
+}
+/**
+ * Next's built-in optimizer (`/_next/image?url=&w=&q=`), for sources no
+ * provider resizes: a local `/public` file, another host listed in
+ * `images.remotePatterns`.
+ */
+export declare function nextImageOptimizer({ src, width, quality }: DecoImageLoaderProps): string;
+/** The next/image loader for `url`. */
+export declare function createDecoImageLoader(url: ImageUrl, options?: DecoImageLoaderOptions): DecoImageLoader;
+//# sourceMappingURL=index.d.ts.map

package/dist/image-loader/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/image-loader/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAE/D,wGAAwG;AACxG,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,oBAAoB,KAAK,MAAM,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,MAAM,GAAG,IAAI,CAAC;CAC3D;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,oBAAoB,GAAG,MAAM,CAQxF;AAED,uCAAuC;AACvC,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,QAAQ,EACb,OAAO,GAAE,sBAA2B,GACnC,eAAe,CASjB"}

package/dist/image-loader/index.js

@@ -0,0 +1,27 @@
+const TIER_VALUES = { low: 60, medium: 70, high: 80, original: 100 };
+/**
+ * Next's built-in optimizer (`/_next/image?url=&w=&q=`), for sources no
+ * provider resizes: a local `/public` file, another host listed in
+ * `images.remotePatterns`.
+ */
+export function nextImageOptimizer({ src, width, quality }) {
+    const params = new URLSearchParams();
+    params.set("url", src);
+    params.set("w", width.toString());
+    if (quality) {
+        params.set("q", String(typeof quality === "string" ? TIER_VALUES[quality] : quality));
+    }
+    return `/_next/image?${params.toString()}`;
+}
+/** The next/image loader for `url`. */
+export function createDecoImageLoader(url, options = {}) {
+    const { fallback } = options;
+    return (props) => {
+        const { src, width, quality } = props;
+        if (url.isOptimizable(src)) {
+            return url(src, quality === undefined ? { width } : { width, quality });
+        }
+        return fallback?.(props) ?? src;
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/image-loader/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/image-loader/index.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAW,CAAC;AAE9E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAwB;IAC9E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,qBAAqB,CACnC,GAAa,EACb,OAAO,GAA2B,EAAE;IAEpC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACtC,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `@decocms/nextjs`: the components a Next.js App Router site adds, and the
+ * names and lists the proxy, the pages and `withDeco()` share.
+ *
+ * - `DraftPreviewIndicator`: the "Preview mode" badge on a page rendered from
+ *   a draft (`bindDraft` from `@decocms/nextjs/server`), outside Studio's frame.
+ * - `StudioBridge`: one line in the root layout, `<StudioBridge site="my-store" />`,
+ *   lets Studio's site editor drive the page when Studio frames it
+ *   (`@decocms/blocks/preview`'s, answering `STUDIO_ORIGINS`). It renders an
+ *   inline script with no React hooks, so a Server Component renders it as is.
+ *   Outside Studio's frame, "." opens the page in Studio's editor.
+ * - `StudioPage`: rendered inside each CMS page, `<StudioPage pathTemplate={page.path} />`,
+ *   tells the bridge which page "." opens (the root layout doesn't re-render per page).
+ * - `DRAFT_PARAM`, `DRAFT_COOKIE`, `DRAFT_HEADER`, `draftResponseHeaders`,
+ *   `STUDIO_ORIGINS`, `STUDIO_FRAME_ANCESTORS`, `isStudioOrigin`: for a site
+ *   that needs them in its own code (a route that sets its own headers, a CSP
+ *   it writes itself). The package's own copy: it never imports
+ *   `@decocms/tanstack`.
+ *
+ * The proxy (`/proxy`), the pages (`/server`), `next.config` (`/config`) and the
+ * image loader (`/image-loader`) are separate subpaths, so the proxy never
+ * loads React.
+ */
+export { DraftBadge, StudioPage, type StudioPageInfo } from "@decocms/blocks/preview";
+export { DraftPreviewIndicator, type DraftPreviewIndicatorProps, } from "./DraftPreviewIndicator.tsx";
+export { DRAFT_COOKIE, DRAFT_HEADER, DRAFT_PARAM, draftResponseHeaders } from "./draft.ts";
+export { StudioBridge, type StudioBridgeProps } from "./StudioBridge.ts";
+export { isStudioOrigin, STUDIO_FRAME_ANCESTORS, STUDIO_ORIGINS } from "./studio.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,GAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,29 @@
+/**
+ * `@decocms/nextjs`: the components a Next.js App Router site adds, and the
+ * names and lists the proxy, the pages and `withDeco()` share.
+ *
+ * - `DraftPreviewIndicator`: the "Preview mode" badge on a page rendered from
+ *   a draft (`bindDraft` from `@decocms/nextjs/server`), outside Studio's frame.
+ * - `StudioBridge`: one line in the root layout, `<StudioBridge site="my-store" />`,
+ *   lets Studio's site editor drive the page when Studio frames it
+ *   (`@decocms/blocks/preview`'s, answering `STUDIO_ORIGINS`). It renders an
+ *   inline script with no React hooks, so a Server Component renders it as is.
+ *   Outside Studio's frame, "." opens the page in Studio's editor.
+ * - `StudioPage`: rendered inside each CMS page, `<StudioPage pathTemplate={page.path} />`,
+ *   tells the bridge which page "." opens (the root layout doesn't re-render per page).
+ * - `DRAFT_PARAM`, `DRAFT_COOKIE`, `DRAFT_HEADER`, `draftResponseHeaders`,
+ *   `STUDIO_ORIGINS`, `STUDIO_FRAME_ANCESTORS`, `isStudioOrigin`: for a site
+ *   that needs them in its own code (a route that sets its own headers, a CSP
+ *   it writes itself). The package's own copy: it never imports
+ *   `@decocms/tanstack`.
+ *
+ * The proxy (`/proxy`), the pages (`/server`), `next.config` (`/config`) and the
+ * image loader (`/image-loader`) are separate subpaths, so the proxy never
+ * loads React.
+ */
+export { DraftBadge, StudioPage } from "@decocms/blocks/preview";
+export { DraftPreviewIndicator, } from "./DraftPreviewIndicator.js";
+export { DRAFT_COOKIE, DRAFT_HEADER, DRAFT_PARAM, draftResponseHeaders } from "./draft.js";
+export { StudioBridge } from "./StudioBridge.js";
+export { isStudioOrigin, STUDIO_FRAME_ANCESTORS, STUDIO_ORIGINS } from "./studio.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAuB,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,qBAAqB,GAEtB,MAAM,4BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,YAAY,EAA0B,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/proxy/index.d.ts

@@ -0,0 +1,79 @@
+/**
+ * `@decocms/nextjs/proxy`: draft previews in a Next.js proxy (`proxy.ts`, or
+ * `middleware.ts` before Next 16). No React and no block map: pass the proxy
+ * a CMS handle made with an empty block map and the app's options, which
+ * shares the app's instance (one per process) without pulling the site's
+ * sections into the proxy bundle:
+ *
+ * ```ts
+ * // src/cms.proxy.ts
+ * export const proxyCms = createCMS({ blocks: {}, ...cmsConfig });
+ * ```
+ *
+ * A site with a proxy of its own calls the pieces (`decideDraft`, then
+ * `draftRequestHeaders` on the request it forwards, then `applyDraft` on the
+ * response); a site without one exports `draftProxy(...)`.
+ *
+ * Statically rendered pages can't read a draft, so a drafted request to one
+ * is rewritten onto a dynamic draft route (`/_draft/<path>`, mounted as
+ * `app/%5Fdraft/...`: a literal `_draft` folder is private in Next and never
+ * routes).
+ */
+import type { CMS } from "@decocms/blocks";
+import { type NextRequest, NextResponse } from "next/server.js";
+import { type PreviewPolicy } from "../drafts.ts";
+export { inferredPreviewHosts, type PreviewPolicy, previewHostDecision, requestLike, } from "../drafts.ts";
+/** What the proxy needs from the CMS: the site's declared preview hosts and their check. */
+export type CMSHandle = Pick<CMS, "draftPointer" | "settings" | "forRelease">;
+/** What the proxy does with a request's draft state. */
+export interface DraftDecision {
+    /** The draft this request renders, after the host check; `null` for the release. */
+    pointer: string | null;
+    /** The `Set-Cookie` the response carries: storing a draft link's pointer, or ending a preview. */
+    setCookie: string | null;
+}
+/** The URL prefix a drafted request is rewritten onto (`app/%5Fdraft/[[...path]]`). */
+export declare const DRAFT_ROUTE_PREFIX = "/_draft";
+/**
+ * The draft a request renders and the cookie its response sets, under
+ * `policy` (the same options the pages pass to `bindDraft`). A request with
+ * no `?__draft=` and no draft cookie never reaches the CMS.
+ */
+export declare function decideDraft(cms: CMSHandle, request: NextRequest | Request, policy?: PreviewPolicy): Promise<DraftDecision>;
+/**
+ * The request headers to forward: the accepted pointer on `x-deco-draft`, so
+ * the root layout can bind the draft on the same request (a layout gets no
+ * `searchParams`, and on a draft link the cookie is only on the response).
+ * A copy that arrives from outside is always removed.
+ */
+export declare function draftRequestHeaders(request: NextRequest | Request, decision: DraftDecision): Headers;
+/** Whether `pathname` is on the draft route: a site answers a direct hit there with its 404. */
+export declare function isDraftRoutePath(pathname: string): boolean;
+/**
+ * The rewrite of a drafted request onto the draft route, keeping its path and
+ * forwarding the pointer; `null` when the request isn't drafted or is already
+ * on the draft route.
+ */
+export declare function rewriteToDraftRoute(request: NextRequest, decision: DraftDecision): NextResponse | null;
+/**
+ * The cookie and the response headers of a draft: `Set-Cookie`, and for a
+ * drafted response `Cache-Control: no-store, private`, `Vary: Cookie` and
+ * `X-Robots-Tag: noindex, nofollow` (`draftResponseHeaders`). With the
+ * pointer in a cookie a draft shares its URL with the published page, so a
+ * cache keyed on the URL alone would serve it to visitors.
+ */
+export declare function applyDraft<R extends Response>(response: R, decision: DraftDecision): R;
+export interface DraftProxyOptions extends PreviewPolicy {
+    /**
+     * Which drafted requests go to the draft route (a statically rendered
+     * page's). Default: every drafted request outside the draft route. Return
+     * `false` for a route that is already dynamic and binds the draft itself.
+     */
+    rewrite?: (request: NextRequest) => boolean;
+}
+/**
+ * The whole draft flow for a site with no proxy of its own:
+ * `export const proxy = draftProxy(proxyCms, { site: "my-store" })`.
+ */
+export declare function draftProxy(cms: CMSHandle, options?: DraftProxyOptions): (request: NextRequest) => Promise<NextResponse>;
+//# sourceMappingURL=index.d.ts.map

package/dist/proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,KAAK,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAML,KAAK,aAAa,EAEnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,4FAA4F;AAC5F,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;AAE9E,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kGAAkG;IAClG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAI5C;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,WAAW,GAAG,OAAO,EAC9B,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,GAAG,OAAO,EAC9B,QAAQ,EAAE,aAAa,GACtB,OAAO,CAKT;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,aAAa,GACtB,YAAY,GAAG,IAAI,CAQrB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,GAAG,CAAC,CAMtF;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC7C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,SAAS,EACd,OAAO,GAAE,iBAAsB,GAC9B,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAUjD"}

package/dist/proxy/index.js

@@ -0,0 +1,92 @@
+import { NextResponse } from "next/server.js";
+import { DRAFT_HEADER, draftResponseHeaders } from "../draft.js";
+import { allowedDraft, draftCookie, endsPreview, fromDraftLink, hasDraftSignal, requestLike, } from "../drafts.js";
+export { inferredPreviewHosts, previewHostDecision, requestLike, } from "../drafts.js";
+/** The URL prefix a drafted request is rewritten onto (`app/%5Fdraft/[[...path]]`). */
+export const DRAFT_ROUTE_PREFIX = "/_draft";
+const INERT = Object.freeze({ pointer: null, setCookie: null });
+/**
+ * The draft a request renders and the cookie its response sets, under
+ * `policy` (the same options the pages pass to `bindDraft`). A request with
+ * no `?__draft=` and no draft cookie never reaches the CMS.
+ */
+export async function decideDraft(cms, request, policy = {}) {
+    const url = new URL(request.url);
+    const like = requestLike(request.headers, url.pathname + url.search, url.host);
+    if (like === null || !hasDraftSignal(like))
+        return INERT;
+    // Ending a preview is allowed on any host, so a cookie set earlier always goes.
+    if (endsPreview(like))
+        return { pointer: null, setCookie: draftCookie("", ["Max-Age=0"]) };
+    const pointer = await allowedDraft(cms, like, policy);
+    if (pointer === null)
+        return INERT;
+    return {
+        pointer,
+        setCookie: fromDraftLink(like, pointer) ? draftCookie(encodeURIComponent(pointer)) : null,
+    };
+}
+/**
+ * The request headers to forward: the accepted pointer on `x-deco-draft`, so
+ * the root layout can bind the draft on the same request (a layout gets no
+ * `searchParams`, and on a draft link the cookie is only on the response).
+ * A copy that arrives from outside is always removed.
+ */
+export function draftRequestHeaders(request, decision) {
+    const headers = new Headers(request.headers);
+    if (decision.pointer)
+        headers.set(DRAFT_HEADER, decision.pointer);
+    else
+        headers.delete(DRAFT_HEADER);
+    return headers;
+}
+/** Whether `pathname` is on the draft route: a site answers a direct hit there with its 404. */
+export function isDraftRoutePath(pathname) {
+    return pathname === DRAFT_ROUTE_PREFIX || pathname.startsWith(`${DRAFT_ROUTE_PREFIX}/`);
+}
+/**
+ * The rewrite of a drafted request onto the draft route, keeping its path and
+ * forwarding the pointer; `null` when the request isn't drafted or is already
+ * on the draft route.
+ */
+export function rewriteToDraftRoute(request, decision) {
+    if (!decision.pointer)
+        return null;
+    const url = request.nextUrl.clone();
+    if (isDraftRoutePath(url.pathname))
+        return null;
+    url.pathname = `${DRAFT_ROUTE_PREFIX}${url.pathname}`;
+    return NextResponse.rewrite(url, {
+        request: { headers: draftRequestHeaders(request, decision) },
+    });
+}
+/**
+ * The cookie and the response headers of a draft: `Set-Cookie`, and for a
+ * drafted response `Cache-Control: no-store, private`, `Vary: Cookie` and
+ * `X-Robots-Tag: noindex, nofollow` (`draftResponseHeaders`). With the
+ * pointer in a cookie a draft shares its URL with the published page, so a
+ * cache keyed on the URL alone would serve it to visitors.
+ */
+export function applyDraft(response, decision) {
+    if (decision.setCookie)
+        response.headers.append("set-cookie", decision.setCookie);
+    for (const [name, value] of Object.entries(draftResponseHeaders(decision.pointer))) {
+        response.headers.set(name, value);
+    }
+    return response;
+}
+/**
+ * The whole draft flow for a site with no proxy of its own:
+ * `export const proxy = draftProxy(proxyCms, { site: "my-store" })`.
+ */
+export function draftProxy(cms, options = {}) {
+    const { rewrite = () => true, ...policy } = options;
+    return async (request) => {
+        const decision = await decideDraft(cms, request, policy);
+        const rewritten = rewrite(request) ? rewriteToDraftRoute(request, decision) : null;
+        const response = rewritten ??
+            NextResponse.next({ request: { headers: draftRequestHeaders(request, decision) } });
+        return applyDraft(response, decision);
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAoB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,YAAY,EACZ,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,EAEd,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EAEpB,mBAAmB,EACnB,WAAW,GACZ,MAAM,cAAc,CAAC;AAatB,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C,MAAM,KAAK,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAc,EACd,OAA8B,EAC9B,MAAM,GAAkB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,gFAAgF;IAChF,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO;QACL,OAAO;QACP,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA8B,EAC9B,QAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;;QAC7D,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAoB,EACpB,QAAuB;IAEvB,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,GAAG,CAAC,QAAQ,GAAG,GAAG,kBAAkB,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACtD,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAqB,QAAW,EAAE,QAAuB;IACjF,IAAI,QAAQ,CAAC,SAAS;QAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,GAAc,EACd,OAAO,GAAsB,EAAE;IAE/B,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IACpD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,MAAM,QAAQ,GACZ,SAAS;YACT,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC"}