@drawnagency/primitives 0.1.63 → 0.1.65

package/dist/auth/errors.d.ts

@@ -5,4 +5,16 @@
 export declare class LastOwnerError extends Error {
     constructor(message?: string);
 }
+/**
+ * Thrown when an authenticated operation cannot proceed because the underlying
+ * Supabase session is missing, expired, or its refresh token is stale/used.
+ * This is distinct from a never-authenticated request: the caller passed the
+ * middleware gate (e.g. via a still-valid app session cookie) but the Supabase
+ * session needed for the operation is dead. API routes should translate this to
+ * HTTP 401 so the UI prompts the user to request a fresh link, rather than
+ * surfacing an opaque 500.
+ */
+export declare class SessionExpiredError extends Error {
+    constructor(message?: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/auth/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,SAAiC;CAIrD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,SAAiC;CAIrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,SAAyD;CAI7E"}

package/dist/auth/index.d.ts

@@ -3,5 +3,5 @@ export type { UiCapabilities } from "./capabilities";
 export { deriveUiCapabilities } from "./capabilities";
 export { requireSessionSecret, isSameOriginRequest, safeNextPath } from "./security";
 export { signSessionToken, verifySessionToken, signAudienceToken, verifyAudienceToken, setSessionCookie, SESSION_COOKIE, AUDIENCE_COOKIE, SESSION_MAX_AGE_SECONDS, AUDIENCE_MAX_AGE_SECONDS } from "./cookies";
-export { LastOwnerError } from "./errors";
+export { LastOwnerError, SessionExpiredError } from "./errors";
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}

package/dist/auth/index.js

@@ -4,13 +4,14 @@ import {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   setSessionCookie,
   signAudienceToken,
   signSessionToken,
   verifyAudienceToken,
   verifySessionToken
-} from "../chunk-UNWNT52N.js";
+} from "../chunk-EM5DFHDZ.js";
 import {
   isSameOriginRequest,
   requireSessionSecret,
@@ -24,6 +25,7 @@ export {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   isSameOriginRequest,
   requireSessionSecret,

package/dist/{chunk-UNWNT52N.js → chunk-EM5DFHDZ.js}

@@ -74,6 +74,12 @@ var LastOwnerError = class extends Error {
     this.name = "LastOwnerError";
   }
 };
+var SessionExpiredError = class extends Error {
+  constructor(message = "Your session has expired. Please request a new link.") {
+    super(message);
+    this.name = "SessionExpiredError";
+  }
+};
 
 export {
   deriveUiCapabilities,
@@ -86,5 +92,6 @@ export {
   signAudienceToken,
   verifyAudienceToken,
   setSessionCookie,
-  LastOwnerError
+  LastOwnerError,
+  SessionExpiredError
 };

package/dist/components/shell/view-branch.d.ts

@@ -9,4 +9,30 @@ export type ViewBranch = "saved" | "live";
  *   `archived` — so edits to live content show alongside drafts.
  */
 export declare function isSectionVisibleInViewBranch(status: string, viewBranch: ViewBranch): boolean;
+/**
+ * Which sections to render in the editor's view mode.
+ *
+ * - Edit mode: the in-memory sections as-is (edit chrome handles them).
+ * - "Unpublished" (saved): the editor's CURRENT in-memory content — all edits
+ *   minus archived. It must NOT depend on a re-fetched branch: after a publish
+ *   the `saved` branch is deleted and `/api/content?branch=saved` falls back to
+ *   `main`, which would clobber unsaved edits (they'd flash then vanish).
+ * - "Published" (live): the deployed site — the fetched `main` branch filtered to
+ *   `status === "live"`, in page order. Renders nothing until the fetch resolves
+ *   so in-memory edits never flash as if they were published.
+ */
+export declare function computeDisplaySections<T extends {
+    section: {
+        id: string;
+    };
+    meta: {
+        status: string;
+    };
+}>(args: {
+    isEditMode: boolean;
+    viewBranch: ViewBranch;
+    sections: T[];
+    viewSections: T[] | null;
+    activePageSectionIds: string[];
+}): T[];
 //# sourceMappingURL=view-branch.d.ts.map

package/dist/components/shell/view-branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-branch.d.ts","sourceRoot":"","sources":["../../../src/components/shell/view-branch.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAE5F"}
+{"version":3,"file":"view-branch.d.ts","sourceRoot":"","sources":["../../../src/components/shell/view-branch.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAE5F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAAE,IAAI,EAAE;IAC5G,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,CAAC,EAAE,CAAC;IACd,YAAY,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC;IACzB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC,GAAG,CAAC,EAAE,CAaN"}

package/dist/index.js

@@ -20,13 +20,14 @@ import {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   setSessionCookie,
   signAudienceToken,
   signSessionToken,
   verifyAudienceToken,
   verifySessionToken
-} from "./chunk-UNWNT52N.js";
+} from "./chunk-EM5DFHDZ.js";
 import {
   AudienceColorSchema,
   AudienceNameSchema,
@@ -157,6 +158,7 @@ export {
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
   SectionMetaSchema,
+  SessionExpiredError,
   SessionSchema,
   SingleMediaReferenceSchema,
   SiteConfigSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drawnagency/primitives",
-  "version": "0.1.63",
+  "version": "0.1.65",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",

package/src/auth/errors.ts

@@ -8,3 +8,19 @@ export class LastOwnerError extends Error {
     this.name = "LastOwnerError";
   }
 }
+
+/**
+ * Thrown when an authenticated operation cannot proceed because the underlying
+ * Supabase session is missing, expired, or its refresh token is stale/used.
+ * This is distinct from a never-authenticated request: the caller passed the
+ * middleware gate (e.g. via a still-valid app session cookie) but the Supabase
+ * session needed for the operation is dead. API routes should translate this to
+ * HTTP 401 so the UI prompts the user to request a fresh link, rather than
+ * surfacing an opaque 500.
+ */
+export class SessionExpiredError extends Error {
+  constructor(message = "Your session has expired. Please request a new link.") {
+    super(message);
+    this.name = "SessionExpiredError";
+  }
+}

package/src/auth/index.ts

@@ -17,4 +17,4 @@ export { deriveUiCapabilities } from "./capabilities";
 
 export { requireSessionSecret, isSameOriginRequest, safeNextPath } from "./security";
 export { signSessionToken, verifySessionToken, signAudienceToken, verifyAudienceToken, setSessionCookie, SESSION_COOKIE, AUDIENCE_COOKIE, SESSION_MAX_AGE_SECONDS, AUDIENCE_MAX_AGE_SECONDS } from "./cookies";
-export { LastOwnerError } from "./errors";
+export { LastOwnerError, SessionExpiredError } from "./errors";

package/src/components/shell/EditorShell.tsx

@@ -69,7 +69,7 @@ import { Button } from "../shared/Button";
 import { SplitButton } from "../shared/SplitButton";
 import { IconButton } from "../shared/IconButton";
 import { SegmentedControl } from "../shared/SegmentedControl";
-import { isSectionVisibleInViewBranch } from "./view-branch";
+import { computeDisplaySections } from "./view-branch";
 import { SettingsIcon } from "../shared/icons";
 import { ImageIcon, ListOrderedIcon, FilesIcon, X } from "lucide-react";
 import { ErrorBoundary } from "../shared/ErrorBoundary";
@@ -1053,14 +1053,16 @@ function ViewBranchWatcher({
   const { isEditMode, viewBranch } = useEditorContext();
 
   useEffect(() => {
-    if (isEditMode) {
+    // Only "Published" (live) needs a fetch — it previews the deployed main
+    // branch. "Unpublished" (saved) renders the editor's in-memory edits, so no
+    // fetch (fetching `saved` would 404 after a publish and fall back to main,
+    // clobbering unsaved edits). Null viewSections routes to the in-memory path.
+    if (isEditMode || viewBranch !== "live") {
       setViewSections(null);
       return;
     }
 
-    const branch = viewBranch === "live" ? "main" : "saved";
-
-    fetch(`/api/content?branch=${branch}`)
+    fetch(`/api/content?branch=main`)
       .then((res) => res.json())
       .then((data) => {
         setViewSections(data.sections);
@@ -1216,15 +1218,16 @@ function EditorContent({
 
   const editingEnabled = isEditMode && !isPublishing;
 
-  // View mode: render the active page's sections from the fetched branch, in page
-  // order. "Published" (live) shows only status === "live"; "Unpublished" (saved)
-  // shows all in-progress edits except archived (see view-branch.ts). Edit mode:
-  // the active page's in-memory sections (the `sections` prop is already `activeSections`).
-  const displaySections = !isEditMode && viewSections !== null
-    ? activePageSectionIds
-        .map((id) => viewSections.find((s) => s.section.id === id))
-        .filter((s): s is LoadedSection => !!s && isSectionVisibleInViewBranch(s.meta.status, viewBranch))
-    : sections;
+  // "Published" (live) previews the deployed main branch (status === "live");
+  // "Unpublished" (saved) previews the editor's current in-memory edits (all
+  // statuses except archived) — see computeDisplaySections in view-branch.ts.
+  const displaySections = computeDisplaySections({
+    isEditMode,
+    viewBranch,
+    sections,
+    viewSections,
+    activePageSectionIds,
+  });
 
   useEffect(() => {
     return combine(

package/src/components/shell/view-branch.ts

@@ -12,3 +12,36 @@ export type ViewBranch = "saved" | "live";
 export function isSectionVisibleInViewBranch(status: string, viewBranch: ViewBranch): boolean {
   return viewBranch === "live" ? status === "live" : status !== "archived";
 }
+
+/**
+ * Which sections to render in the editor's view mode.
+ *
+ * - Edit mode: the in-memory sections as-is (edit chrome handles them).
+ * - "Unpublished" (saved): the editor's CURRENT in-memory content — all edits
+ *   minus archived. It must NOT depend on a re-fetched branch: after a publish
+ *   the `saved` branch is deleted and `/api/content?branch=saved` falls back to
+ *   `main`, which would clobber unsaved edits (they'd flash then vanish).
+ * - "Published" (live): the deployed site — the fetched `main` branch filtered to
+ *   `status === "live"`, in page order. Renders nothing until the fetch resolves
+ *   so in-memory edits never flash as if they were published.
+ */
+export function computeDisplaySections<T extends { section: { id: string }; meta: { status: string } }>(args: {
+  isEditMode: boolean;
+  viewBranch: ViewBranch;
+  sections: T[];
+  viewSections: T[] | null;
+  activePageSectionIds: string[];
+}): T[] {
+  const { isEditMode, viewBranch, sections, viewSections, activePageSectionIds } = args;
+
+  if (isEditMode) return sections;
+
+  if (viewBranch === "saved") {
+    return sections.filter((s) => isSectionVisibleInViewBranch(s.meta.status, "saved"));
+  }
+
+  if (viewSections === null) return [];
+  return activePageSectionIds
+    .map((id) => viewSections.find((s) => s.section.id === id))
+    .filter((s): s is T => !!s && isSectionVisibleInViewBranch(s.meta.status, "live"));
+}