@decocms/nextjs 8.1.0-next.0 → 8.5.0

package/dist/instrumentation/index.js

@@ -0,0 +1,294 @@
+/**
+ * `@decocms/nextjs/instrumentation`: `http.server.request.duration` for a
+ * Next.js site, from the request span Next.js already opens.
+ *
+ * Next.js measures every request it serves: `BaseServer.handleRequest` opens
+ * one root span per request and, when the response is done, sets its status,
+ * its method and, when Next routed it, the route's template (`/[slug]/p`,
+ * not the path). It creates spans only while a tracer provider is registered
+ * through `@opentelemetry/api` (the app's copy, or Next's compiled one when
+ * the app has none; both read the same global registration).
+ *
+ * `register()`, the site's `instrumentation.ts` hook, registers a provider
+ * whose only job is that span: when it ends, the request is recorded with
+ * `recordServerRequest` from `@decocms/blocks/metrics`, into the CMS's
+ * telemetry in the same process. No span is exported anywhere and every other
+ * span Next.js asks for is a shared non-recording one. With no
+ * `@opentelemetry/api` reachable, on the Edge runtime, or when another
+ * provider is already registered, it registers nothing and never throws.
+ *
+ * A site that registers its own OpenTelemetry SDK (`@vercel/otel`,
+ * `NodeSDK`) adds `serverRequestSpanProcessor()` to that SDK's span
+ * processors instead.
+ *
+ * Labels: `http.route` is Next's route template (`unmatched` when Next names
+ * none); RSC requests count under their page's route, as the requests they
+ * are. `cache` is `DRAFT` for a draft render (the proxy forwarded
+ * `x-deco-draft`, or the request was rewritten onto `/_draft`) and otherwise
+ * `BYPASS`: Next decides its cache (`x-nextjs-cache`) on the response, which
+ * the span never sees.
+ */
+import { recordServerRequest } from "@decocms/blocks/metrics";
+import { DRAFT_HEADER, DRAFT_ROUTE_PREFIX } from "../draft.js";
+/** The span type Next.js gives its one root span per request. */
+const ROOT_SPAN_TYPE = "BaseServer.handleRequest";
+const REGISTERED = Symbol.for("decocms.nextjs.instrumentation");
+/**
+ * Under `next start`, the router runs the proxy (`proxy.ts`/`middleware.ts`)
+ * through a `handleRequest` of its own, which ends by "bubbling" the proxy's
+ * result back to the router (`next.bubble`). That span is the proxy's, not a
+ * request: the request it hands on is measured by its own span.
+ */
+const BUBBLE = "next.bubble";
+/** OpenTelemetry's `SpanStatusCode.ERROR`. */
+const STATUS_ERROR = 2;
+/** Records one ended `BaseServer.handleRequest` span. Never throws. */
+function recordRequestSpan(attributes, seconds, errored, draft) {
+    const route = typeof attributes["http.route"] === "string" ? attributes["http.route"] : undefined;
+    const code = Number(attributes["http.status_code"]);
+    // Next sets the status before the span ends; a request that threw is a 5xx whatever it says.
+    const status = errored && !(code >= 500) ? 500 : code || 500;
+    // Never rejects; the span's route is already a string, so nothing to wait for.
+    void recordServerRequest({
+        route,
+        method: String(attributes["http.method"] ?? ""),
+        status,
+        cache: draft || isDraftRoute(route) ? "DRAFT" : "BYPASS",
+        seconds,
+    });
+}
+function isDraftRoute(route) {
+    if (route === undefined)
+        return false;
+    const path = route.replace(/^\/%5Fdraft(?=\/|$)/i, DRAFT_ROUTE_PREFIX);
+    return path === DRAFT_ROUTE_PREFIX || path.startsWith(`${DRAFT_ROUTE_PREFIX}/`);
+}
+/**
+ * For a site with its own OpenTelemetry SDK: a span processor that records
+ * `http.server.request.duration` from Next's request span and leaves every
+ * span to the SDK's other processors and exporters.
+ *
+ * ```ts
+ * registerOTel({ serviceName: "my-store", spanProcessors: ["auto", serverRequestSpanProcessor()] });
+ * ```
+ */
+export function serverRequestSpanProcessor() {
+    return {
+        onStart() { },
+        onEnd(span) {
+            try {
+                const attributes = span.attributes;
+                if (attributes?.["next.span_type"] !== ROOT_SPAN_TYPE || attributes[BUBBLE] === true)
+                    return;
+                const [s, ns] = span.duration;
+                recordRequestSpan(attributes, s + ns / 1e9, span.status?.code === STATUS_ERROR, false);
+            }
+            catch {
+                // A metric never breaks a request.
+            }
+        },
+        forceFlush: () => Promise.resolve(),
+        shutdown: () => Promise.resolve(),
+    };
+}
+/**
+ * The site's `instrumentation.ts` hook:
+ *
+ * ```ts
+ * // instrumentation.ts
+ * export { register } from "@decocms/nextjs/instrumentation";
+ * ```
+ *
+ * Registers the request-metric tracer provider, once per process. Does
+ * nothing on the Edge runtime (the Node.js server's request span covers the
+ * Edge pages it serves), without `@opentelemetry/api` (the app's or Next's),
+ * without `AsyncLocalStorage`, or when another provider is registered (it
+ * then says to use `serverRequestSpanProcessor()`). Never throws.
+ */
+export async function register() {
+    try {
+        const global = globalThis;
+        if (global[REGISTERED] === true || typeof global.EdgeRuntime === "string")
+            return;
+        const Storage = global.AsyncLocalStorage;
+        if (typeof Storage !== "function")
+            return;
+        const api = await loadApi();
+        if (api === undefined)
+            return;
+        global[REGISTERED] = true;
+        const draft = api.createContextKey("decocms.nextjs.draft");
+        if (!api.trace.setGlobalTracerProvider(requestTracerProvider(api, draft))) {
+            console.warn("[@decocms/nextjs] Another OpenTelemetry tracer provider is registered, so register() added nothing. " +
+                "To record http.server.request.duration, add serverRequestSpanProcessor() to that provider's span processors.");
+            return;
+        }
+        // Both may already be registered by something else; Next's spans work with either.
+        api.context.setGlobalContextManager(storageContextManager(api, new Storage()));
+        api.propagation.setGlobalPropagator(draftPropagator(draft));
+    }
+    catch {
+        // Instrumentation never stops a server from starting.
+    }
+}
+/**
+ * The `@opentelemetry/api` Next.js uses: the app's own when installed (Next's
+ * bundlers alias it to Next's compiled copy when it isn't), else Next's
+ * compiled copy.
+ */
+async function loadApi() {
+    try {
+        return await import("@opentelemetry/api");
+    }
+    catch {
+        try {
+            return (await import("next/dist/compiled/@opentelemetry/api/index.js"));
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+function requestTracerProvider(api, DRAFT) {
+    const IN_REQUEST = api.createContextKey("decocms.nextjs.inRequest");
+    const inert = api.trace.wrapSpanContext(api.INVALID_SPAN_CONTEXT);
+    const tracer = {
+        startSpan(_name, options, context) {
+            const ctx = context ?? api.context.active();
+            if (options?.attributes?.["next.span_type"] !== ROOT_SPAN_TYPE)
+                return inert;
+            // A request Next serves inside another (a nested handleRequest) is already measured.
+            if (ctx.getValue(IN_REQUEST) === true)
+                return inert;
+            return new RequestSpan(api.INVALID_SPAN_CONTEXT, options.attributes, ctx.getValue(DRAFT) === true);
+        },
+        startActiveSpan(name, ...rest) {
+            const fn = rest[rest.length - 1];
+            const options = (rest.length > 1 ? rest[0] : undefined);
+            const context = (rest.length > 2 ? rest[1] : undefined);
+            const span = tracer.startSpan(name, options, context);
+            // Only the request span changes the context; every other span costs a call.
+            if (span === inert)
+                return fn(span);
+            const ctx = api.trace
+                .setSpan(context ?? api.context.active(), span)
+                .setValue(IN_REQUEST, true);
+            return api.context.with(ctx, fn, undefined, span);
+        },
+    };
+    // Not named NoopTracerProvider: Next checks that name to decide whether tracing is on.
+    return { getTracer: () => tracer };
+}
+/** Marks the request's context when the proxy forwarded an accepted draft. */
+function draftPropagator(DRAFT) {
+    return {
+        inject() { },
+        extract(context, carrier, getter) {
+            try {
+                const value = getter.get(carrier, DRAFT_HEADER);
+                return value !== undefined && value !== "" ? context.setValue(DRAFT, true) : context;
+            }
+            catch {
+                return context;
+            }
+        },
+        fields: () => [],
+    };
+}
+/** The request span: keeps only the attributes the metric needs and records on `end()`. */
+class RequestSpan {
+    #context;
+    #attributes = {};
+    #start = performance.now();
+    #draft;
+    #errored = false;
+    #proxy = false;
+    #ended = false;
+    constructor(context, attributes, draft) {
+        this.#context = context;
+        this.#draft = draft;
+        if (attributes)
+            this.setAttributes(attributes);
+    }
+    spanContext() {
+        return this.#context;
+    }
+    setAttribute(key, value) {
+        if (key === "http.route" || key === "http.status_code" || key === "http.method") {
+            this.#attributes[key] = value;
+        }
+        else if (key === BUBBLE && value === true) {
+            this.#proxy = true;
+        }
+        return this;
+    }
+    setAttributes(attributes) {
+        for (const key in attributes)
+            this.setAttribute(key, attributes[key]);
+        return this;
+    }
+    setStatus(status) {
+        if (status?.code === STATUS_ERROR)
+            this.#errored = true;
+        return this;
+    }
+    addEvent() {
+        return this;
+    }
+    addLink() {
+        return this;
+    }
+    addLinks() {
+        return this;
+    }
+    updateName() {
+        return this;
+    }
+    recordException(exception) {
+        // The proxy's own invocation ends with an error marked `bubble`, whatever its type.
+        if (exception?.bubble === true)
+            this.#proxy = true;
+    }
+    isRecording() {
+        return !this.#ended;
+    }
+    end() {
+        if (this.#ended)
+            return;
+        this.#ended = true;
+        if (this.#proxy)
+            return;
+        try {
+            const seconds = (performance.now() - this.#start) / 1000;
+            recordRequestSpan(this.#attributes, seconds, this.#errored, this.#draft);
+        }
+        catch {
+            // A metric never breaks a request.
+        }
+    }
+}
+/** OpenTelemetry's context manager over `AsyncLocalStorage` (what `@opentelemetry/context-async-hooks` does). */
+function storageContextManager(api, storage) {
+    const manager = {
+        active: () => storage.getStore() ?? api.ROOT_CONTEXT,
+        with(context, fn, thisArg, ...args) {
+            const call = thisArg === undefined ? fn : fn.bind(thisArg);
+            return storage.run(context, call, ...args);
+        },
+        bind(context, target) {
+            if (typeof target !== "function")
+                return target;
+            const fn = target;
+            return function (...args) {
+                return manager.with(context, () => fn.apply(this, args));
+            };
+        },
+        enable: () => manager,
+        disable() {
+            storage.disable();
+            return manager;
+        },
+    };
+    return manager;
+}
+//# sourceMappingURL=index.js.map

package/dist/instrumentation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/instrumentation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAW9D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAI/D,iEAAiE;AACjE,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAChE;;;;;GAKG;AACH,MAAM,MAAM,GAAG,aAAa,CAAC;AA0B7B,8CAA8C;AAC9C,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,uEAAuE;AACvE,SAAS,iBAAiB,CACxB,UAAsB,EACtB,OAAe,EACf,OAAgB,EAChB,KAAc;IAEd,MAAM,KAAK,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpD,6FAA6F;IAC7F,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;IAC7D,+EAA+E;IAC/E,KAAK,mBAAmB,CAAC;QACvB,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QACxD,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,OAAO,KAAI,CAAC;QACZ,KAAK,CAAC,IAAI;YACR,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;gBACnC,IAAI,UAAU,EAAE,CAAC,gBAAgB,CAAC,KAAK,cAAc,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI;oBAClF,OAAO;gBACT,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC9B,iBAAiB,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,YAAY,EAAE,KAAK,CAAC,CAAC;YACzF,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAA0C,CAAC;QAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO;QAClF,MAAM,OAAO,GAAG,MAAM,CAAC,iBAEV,CAAC;QACd,IAAI,OAAO,OAAO,KAAK,UAAU;YAAE,OAAO;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAC9B,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,IAAI,CACV,sGAAsG;gBACpG,8GAA8G,CACjH,CAAC;YACF,OAAO;QACT,CAAC;QACD,mFAAmF;QACnF,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/E,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAQ,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAQ,EAAE,KAAa;IACpD,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAElE,MAAM,MAAM,GAAW;QACrB,SAAS,CAAC,KAAa,EAAE,OAAqB,EAAE,OAAiB;YAC/D,MAAM,GAAG,GAAG,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC,gBAAgB,CAAC,KAAK,cAAc;gBAAE,OAAO,KAAK,CAAC;YAC7E,qFAAqF;YACrF,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACpD,OAAO,IAAI,WAAW,CACpB,GAAG,CAAC,oBAAoB,EACxB,OAAO,CAAC,UAAU,EAClB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAC7B,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,IAAY,EAAE,GAAG,IAAe;YAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAA4B,CAAC;YAC5D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAA4B,CAAC;YACnF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAwB,CAAC;YAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,4EAA4E;YAC5E,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK;iBAClB,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC;iBAC9C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;KACQ,CAAC;IAEZ,uFAAuF;IACvF,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO;QACL,MAAM,KAAI,CAAC;QACX,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM;YAC9B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAChD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,WAAW;IACN,QAAQ,CAAc;IACtB,WAAW,GAAe,EAAE,CAAC;IAC7B,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,CAAU;IACzB,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,GAAG,KAAK,CAAC;IACf,MAAM,GAAG,KAAK,CAAC;IAEf,YAAY,OAAoB,EAAE,UAAkC,EAAE,KAAc;QAClF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU;YAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,YAAY,CAAC,GAAW,EAAE,KAAc;QACtC,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,kBAAkB,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAChF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,aAAa,CAAC,UAAsB;QAClC,KAAK,MAAM,GAAG,IAAI,UAAU;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,CAAC,MAAwB;QAChC,IAAI,MAAM,EAAE,IAAI,KAAK,YAAY;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IACD,eAAe,CAAC,SAAkB;QAChC,oFAAoF;QACpF,IAAK,SAAyC,EAAE,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACtF,CAAC;IACD,WAAW;QACT,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,GAAG;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACzD,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;CACF;AAED,iHAAiH;AACjH,SAAS,qBAAqB,CAAC,GAAQ,EAAE,OAAuC;IAC9E,MAAM,OAAO,GAAmB;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,YAAY;QACpD,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI;YAChC,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAkD,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAI,OAAgB,EAAE,MAAS;YACjC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC;YAChD,MAAM,EAAE,GAAG,MAAiD,CAAC;YAC7D,OAAO,UAAyB,GAAG,IAAe;gBAChD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,CAAiB,CAAC;QACpB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO;QACrB,OAAO;YACL,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/proxy/index.d.ts

@@ -0,0 +1,82 @@
+/**
+ * `@decocms/nextjs/proxy`: draft previews in a Next.js proxy (`proxy.ts`, or
+ * `middleware.ts` before Next 16). No React and no block map: pass the proxy
+ * a CMS handle made with an empty block map and the app's options, which
+ * shares the app's instance (one per process) without pulling the site's
+ * sections into the proxy bundle:
+ *
+ * ```ts
+ * // src/cms.proxy.ts
+ * export const proxyCms = createCMS({ blocks: {}, ...cmsConfig });
+ * ```
+ *
+ * A site with a proxy of its own calls the pieces (`decideDraft`, then
+ * `draftRequestHeaders` on the request it forwards, then `applyDraft` on the
+ * response); a site without one exports `draftProxy(...)`.
+ *
+ * Statically rendered pages can't read a draft, so a drafted request to one
+ * is rewritten onto a dynamic draft route (`/_draft/<path>`, mounted as
+ * `app/%5Fdraft/...`: a literal `_draft` folder is private in Next and never
+ * routes).
+ *
+ * The proxy measures no requests: it runs before Next routes and renders the
+ * page. `http.server.request.duration` comes from Next's own request span
+ * (`register` from `@decocms/nextjs/instrumentation`).
+ */
+import type { CMS } from "@decocms/blocks";
+import { type NextRequest, NextResponse } from "next/server.js";
+import { type PreviewPolicy } from "../drafts.ts";
+export { inferredPreviewHosts, type PreviewPolicy, previewHostDecision, requestLike, } from "../drafts.ts";
+/** What the proxy needs from the CMS: the site's declared preview hosts and their check. */
+export type CMSHandle = Pick<CMS, "draftPointer" | "settings" | "forRelease">;
+/** What the proxy does with a request's draft state. */
+export interface DraftDecision {
+    /** The draft this request renders, after the host check; `null` for the release. */
+    pointer: string | null;
+    /** The `Set-Cookie` the response carries: storing a draft link's pointer, or ending a preview. */
+    setCookie: string | null;
+}
+export { DRAFT_ROUTE_PREFIX } from "../draft.ts";
+/**
+ * The draft a request renders and the cookie its response sets, under
+ * `policy` (the same options the pages pass to `bindDraft`). A request with
+ * no `?__draft=` and no draft cookie never reaches the CMS.
+ */
+export declare function decideDraft(cms: CMSHandle, request: NextRequest | Request, policy?: PreviewPolicy): Promise<DraftDecision>;
+/**
+ * The request headers to forward: the accepted pointer on `x-deco-draft`, so
+ * the root layout can bind the draft on the same request (a layout gets no
+ * `searchParams`, and on a draft link the cookie is only on the response).
+ * A copy that arrives from outside is always removed.
+ */
+export declare function draftRequestHeaders(request: NextRequest | Request, decision: DraftDecision): Headers;
+/** Whether `pathname` is on the draft route: a site answers a direct hit there with its 404. */
+export declare function isDraftRoutePath(pathname: string): boolean;
+/**
+ * The rewrite of a drafted request onto the draft route, keeping its path and
+ * forwarding the pointer; `null` when the request isn't drafted or is already
+ * on the draft route.
+ */
+export declare function rewriteToDraftRoute(request: NextRequest, decision: DraftDecision): NextResponse | null;
+/**
+ * The cookie and the response headers of a draft: `Set-Cookie`, and for a
+ * drafted response `Cache-Control: no-store, private`, `Vary: Cookie` and
+ * `X-Robots-Tag: noindex, nofollow` (`draftResponseHeaders`). With the
+ * pointer in a cookie a draft shares its URL with the published page, so a
+ * cache keyed on the URL alone would serve it to visitors.
+ */
+export declare function applyDraft<R extends Response>(response: R, decision: DraftDecision): R;
+export interface DraftProxyOptions extends PreviewPolicy {
+    /**
+     * Which drafted requests go to the draft route (a statically rendered
+     * page's). Default: every drafted request outside the draft route. Return
+     * `false` for a route that is already dynamic and binds the draft itself.
+     */
+    rewrite?: (request: NextRequest) => boolean;
+}
+/**
+ * The whole draft flow for a site with no proxy of its own:
+ * `export const proxy = draftProxy(proxyCms, { site: "my-store" })`.
+ */
+export declare function draftProxy(cms: CMSHandle, options?: DraftProxyOptions): (request: NextRequest) => Promise<NextResponse>;
+//# sourceMappingURL=index.d.ts.map

package/dist/proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,KAAK,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAML,KAAK,aAAa,EAEnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,4FAA4F;AAC5F,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;AAE9E,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kGAAkG;IAClG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIjD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,WAAW,GAAG,OAAO,EAC9B,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,GAAG,OAAO,EAC9B,QAAQ,EAAE,aAAa,GACtB,OAAO,CAKT;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,aAAa,GACtB,YAAY,GAAG,IAAI,CAQrB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,GAAG,CAAC,CAMtF;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC7C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,SAAS,EACd,OAAO,GAAE,iBAAsB,GAC9B,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAUjD"}

package/dist/proxy/index.js

@@ -0,0 +1,91 @@
+import { NextResponse } from "next/server.js";
+import { DRAFT_HEADER, DRAFT_ROUTE_PREFIX, draftResponseHeaders } from "../draft.js";
+import { allowedDraft, draftCookie, endsPreview, fromDraftLink, hasDraftSignal, requestLike, } from "../drafts.js";
+export { inferredPreviewHosts, previewHostDecision, requestLike, } from "../drafts.js";
+export { DRAFT_ROUTE_PREFIX } from "../draft.js";
+const INERT = Object.freeze({ pointer: null, setCookie: null });
+/**
+ * The draft a request renders and the cookie its response sets, under
+ * `policy` (the same options the pages pass to `bindDraft`). A request with
+ * no `?__draft=` and no draft cookie never reaches the CMS.
+ */
+export async function decideDraft(cms, request, policy = {}) {
+    const url = new URL(request.url);
+    const like = requestLike(request.headers, url.pathname + url.search, url.host);
+    if (like === null || !hasDraftSignal(like))
+        return INERT;
+    // Ending a preview is allowed on any host, so a cookie set earlier always goes.
+    if (endsPreview(like))
+        return { pointer: null, setCookie: draftCookie("", ["Max-Age=0"]) };
+    const pointer = await allowedDraft(cms, like, policy);
+    if (pointer === null)
+        return INERT;
+    return {
+        pointer,
+        setCookie: fromDraftLink(like, pointer) ? draftCookie(encodeURIComponent(pointer)) : null,
+    };
+}
+/**
+ * The request headers to forward: the accepted pointer on `x-deco-draft`, so
+ * the root layout can bind the draft on the same request (a layout gets no
+ * `searchParams`, and on a draft link the cookie is only on the response).
+ * A copy that arrives from outside is always removed.
+ */
+export function draftRequestHeaders(request, decision) {
+    const headers = new Headers(request.headers);
+    if (decision.pointer)
+        headers.set(DRAFT_HEADER, decision.pointer);
+    else
+        headers.delete(DRAFT_HEADER);
+    return headers;
+}
+/** Whether `pathname` is on the draft route: a site answers a direct hit there with its 404. */
+export function isDraftRoutePath(pathname) {
+    return pathname === DRAFT_ROUTE_PREFIX || pathname.startsWith(`${DRAFT_ROUTE_PREFIX}/`);
+}
+/**
+ * The rewrite of a drafted request onto the draft route, keeping its path and
+ * forwarding the pointer; `null` when the request isn't drafted or is already
+ * on the draft route.
+ */
+export function rewriteToDraftRoute(request, decision) {
+    if (!decision.pointer)
+        return null;
+    const url = request.nextUrl.clone();
+    if (isDraftRoutePath(url.pathname))
+        return null;
+    url.pathname = `${DRAFT_ROUTE_PREFIX}${url.pathname}`;
+    return NextResponse.rewrite(url, {
+        request: { headers: draftRequestHeaders(request, decision) },
+    });
+}
+/**
+ * The cookie and the response headers of a draft: `Set-Cookie`, and for a
+ * drafted response `Cache-Control: no-store, private`, `Vary: Cookie` and
+ * `X-Robots-Tag: noindex, nofollow` (`draftResponseHeaders`). With the
+ * pointer in a cookie a draft shares its URL with the published page, so a
+ * cache keyed on the URL alone would serve it to visitors.
+ */
+export function applyDraft(response, decision) {
+    if (decision.setCookie)
+        response.headers.append("set-cookie", decision.setCookie);
+    for (const [name, value] of Object.entries(draftResponseHeaders(decision.pointer))) {
+        response.headers.set(name, value);
+    }
+    return response;
+}
+/**
+ * The whole draft flow for a site with no proxy of its own:
+ * `export const proxy = draftProxy(proxyCms, { site: "my-store" })`.
+ */
+export function draftProxy(cms, options = {}) {
+    const { rewrite = () => true, ...policy } = options;
+    return async (request) => {
+        const decision = await decideDraft(cms, request, policy);
+        const rewritten = rewrite(request) ? rewriteToDraftRoute(request, decision) : null;
+        const response = rewritten ??
+            NextResponse.next({ request: { headers: draftRequestHeaders(request, decision) } });
+        return applyDraft(response, decision);
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAoB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,EAEd,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EAEpB,mBAAmB,EACnB,WAAW,GACZ,MAAM,cAAc,CAAC;AAatB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,KAAK,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAc,EACd,OAA8B,EAC9B,MAAM,GAAkB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,gFAAgF;IAChF,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO;QACL,OAAO;QACP,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA8B,EAC9B,QAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;;QAC7D,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAoB,EACpB,QAAuB;IAEvB,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,GAAG,CAAC,QAAQ,GAAG,GAAG,kBAAkB,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACtD,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAqB,QAAW,EAAE,QAAuB;IACjF,IAAI,QAAQ,CAAC,SAAS;QAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,GAAc,EACd,OAAO,GAAsB,EAAE;IAE/B,MAAM,EAAE,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IACpD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,MAAM,QAAQ,GACZ,SAAS;YACT,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `@decocms/nextjs/server`: draft previews in Server Components (pages,
+ * layouts, route handlers). Server only: it reads `next/headers`.
+ *
+ * A page (and, through the `x-deco-draft` header the proxy forwards, the root
+ * layout) binds the request's draft before it reads content, then reads
+ * through `contentClient(cms)`:
+ *
+ * ```tsx
+ * export default async function Page({ searchParams }) {
+ *   await bindDraft(cms, { searchParams: await searchParams, site: "my-store" });
+ *   const client = contentClient(cms);
+ *   …
+ *   return <>{sections}<DraftPreviewIndicator /></>;
+ * }
+ * ```
+ *
+ * The host check is the proxy's (`decideDraft`), repeated here with the same
+ * options, so a route the proxy doesn't match, or a forged `x-deco-draft`,
+ * still gets the release on a host that may not preview.
+ */
+import type { Client, CMS } from "@decocms/blocks";
+import { type PreviewPolicy } from "../drafts.ts";
+import { activeDraftPointer } from "./slot.ts";
+export { type PreviewPolicy, requestLike } from "../drafts.ts";
+export { activeDraftPointer };
+/** A page's `searchParams` prop, awaited. */
+export type SearchParams = Record<string, string | string[] | undefined>;
+export interface BindDraftOptions extends PreviewPolicy {
+    /** The page's own `searchParams` (a layout has none: it reads the proxy's `x-deco-draft`). */
+    searchParams?: SearchParams;
+}
+/**
+ * Binds the request's draft, if any: the page's own `?__draft=` first (`off`
+ * leaves preview), then the pointer the proxy forwarded on `x-deco-draft`,
+ * then the draft cookie, each on a host the options allow. Returns whether a
+ * draft was bound. With previews off on every host it returns `false`
+ * without reading the request, so a static page stays static.
+ */
+export declare function bindDraft(cms: Pick<CMS, "draftPointer" | "settings" | "forRelease">, options?: BindDraftOptions): Promise<boolean>;
+/**
+ * The content client for this request: the draft `bindDraft` bound, or the
+ * release.
+ */
+export declare function contentClient(cms: Pick<CMS, "forDraft" | "forRelease">): Client;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAuC,KAAK,aAAa,EAAe,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAa,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,KAAK,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAEzE,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,8FAA8F;IAC9F,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAOD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC,EAC1D,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAalB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,CAAC,GAAG,MAAM,CAG/E"}

package/dist/server/index.js

@@ -0,0 +1,64 @@
+/**
+ * `@decocms/nextjs/server`: draft previews in Server Components (pages,
+ * layouts, route handlers). Server only: it reads `next/headers`.
+ *
+ * A page (and, through the `x-deco-draft` header the proxy forwards, the root
+ * layout) binds the request's draft before it reads content, then reads
+ * through `contentClient(cms)`:
+ *
+ * ```tsx
+ * export default async function Page({ searchParams }) {
+ *   await bindDraft(cms, { searchParams: await searchParams, site: "my-store" });
+ *   const client = contentClient(cms);
+ *   …
+ *   return <>{sections}<DraftPreviewIndicator /></>;
+ * }
+ * ```
+ *
+ * The host check is the proxy's (`decideDraft`), repeated here with the same
+ * options, so a route the proxy doesn't match, or a forged `x-deco-draft`,
+ * still gets the release on a host that may not preview.
+ */
+import { headers } from "next/headers.js";
+import { DRAFT_HEADER, DRAFT_PARAM } from "../draft.js";
+import { allowedDraft, isDraftPreviewEnabled, requestLike } from "../drafts.js";
+import { activeDraftPointer, draftSlot } from "./slot.js";
+export { requestLike } from "../drafts.js";
+export { activeDraftPointer };
+function firstParam(searchParams, key) {
+    const raw = searchParams?.[key];
+    return (Array.isArray(raw) ? raw[0] : raw) ?? null;
+}
+/**
+ * Binds the request's draft, if any: the page's own `?__draft=` first (`off`
+ * leaves preview), then the pointer the proxy forwarded on `x-deco-draft`,
+ * then the draft cookie, each on a host the options allow. Returns whether a
+ * draft was bound. With previews off on every host it returns `false`
+ * without reading the request, so a static page stays static.
+ */
+export async function bindDraft(cms, options = {}) {
+    const { searchParams, ...policy } = options;
+    if (!(await isDraftPreviewEnabled(cms, policy)))
+        return false;
+    const param = firstParam(searchParams, DRAFT_PARAM);
+    if (param === "off")
+        return false;
+    const requestHeaders = await headers();
+    const forwarded = param ?? requestHeaders.get(DRAFT_HEADER);
+    const query = forwarded ? `?${DRAFT_PARAM}=${encodeURIComponent(forwarded)}` : "";
+    const request = requestLike(requestHeaders, `/${query}`);
+    const pointer = request ? await allowedDraft(cms, request, policy) : null;
+    if (pointer === null)
+        return false;
+    draftSlot().pointer = pointer;
+    return true;
+}
+/**
+ * The content client for this request: the draft `bindDraft` bound, or the
+ * release.
+ */
+export function contentClient(cms) {
+    const pointer = activeDraftPointer();
+    return pointer ? cms.forDraft(pointer) : cms.forRelease();
+}
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAsB,WAAW,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAsB,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAU9B,SAAS,UAAU,CAAC,YAAsC,EAAE,GAAW;IACrE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAA0D,EAC1D,OAAO,GAAqB,EAAE;IAE9B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,OAAO,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,WAAW,CAAC,cAAyB,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,SAAS,EAAE,CAAC,OAAO,GAAG,OAAO,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAyC;IACrE,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;AAC5D,CAAC"}

package/dist/server/slot.d.ts

@@ -0,0 +1,6 @@
+export declare const draftSlot: () => {
+    pointer: string | null;
+};
+/** The draft pointer bound to this request (`bindDraft`), or `null` when it renders the release. */
+export declare function activeDraftPointer(): string | null;
+//# sourceMappingURL=slot.d.ts.map

package/dist/server/slot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slot.d.ts","sourceRoot":"","sources":["../../src/server/slot.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,SAAS,QAAa;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAA0B,CAAC;AAEtF,oGAAoG;AACpG,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAElD"}

package/dist/server/slot.js

@@ -0,0 +1,13 @@
+/**
+ * The draft a request renders, held for the request's Server Components.
+ * React's `cache()` gives one slot per request in the React Server
+ * Components graph, the scope a draft needs; no `next/headers` here, so the
+ * root components can read it without binding anything.
+ */
+import { cache } from "react";
+export const draftSlot = cache(() => ({ pointer: null }));
+/** The draft pointer bound to this request (`bindDraft`), or `null` when it renders the release. */
+export function activeDraftPointer() {
+    return draftSlot().pointer;
+}
+//# sourceMappingURL=slot.js.map

package/dist/server/slot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slot.js","sourceRoot":"","sources":["../../src/server/slot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAA+B,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtF,oGAAoG;AACpG,MAAM,UAAU,kBAAkB;IAChC,OAAO,SAAS,EAAE,CAAC,OAAO,CAAC;AAC7B,CAAC"}