@elytracms/next 0.0.85 → 0.0.87

package/dist/index.js

@@ -1,15 +1,16 @@
 import { ComponentRegistry } from '@elytracms/core/component-registry';
 export { defineComponent } from '@elytracms/core/component-registry';
-import { basePrimitives, getImplementation, renderDocumentBodyItems, documentBodyItems, ImageManifest, serializeListingQuery, RenderErrorBoundary, documentBodyRichTextValues, documentBodyCompositionNodes, richTextEmbedsInValue, collectReferencedAssetIds, collectRichTextRefsInValue, collectReferencedRelations, collectReferencedListings, collectReferencedRichTextLinks, normalizeImageSource } from '@elytracms/core/runtime-renderer';
+import { basePrimitives, getImplementation, registerImplementations, renderDocumentBodyItems, documentBodyItems, ImageManifest, serializeListingQuery, RenderErrorBoundary, documentBodyRichTextValues, documentBodyCompositionNodes, richTextEmbedsInValue, collectReferencedAssetIds, collectRichTextRefsInValue, collectReferencedRelations, collectReferencedListings, collectReferencedRichTextLinks, normalizeImageSource } from '@elytracms/core/runtime-renderer';
 import { isValidElement } from 'react';
 import { isBlockSequenceValueShape } from '@elytracms/core/rich-text';
 import { jsx, Fragment } from 'react/jsx-runtime';
-import { cacheTags, isSectionSourceId, parseCmsSourceQueryConfig, listQueryOfCmsConfig, isDocumentHistory, resolvedAsset, createContentClient, createContentContext } from '@elytracms/core/content';
+import { cacheTags, isDocumentHistory, resolvedAsset, createContentClient, createContentContext } from '@elytracms/core/content';
 import { documentKey, splitLocalePath, hierarchyMount, composePath, localeUrlPath, mergeRouteRecords, fallbackHomeRoutes, presentationBodyFields, splitPath, documentSchema, redirectRecordSchema } from '@elytracms/core/cms-core';
-export { documentSchema, fallbackHomeRoutes, localeConfigSchema, localeUrlPath, mergeRouteRecords, redirectRecordSchema, routeRecordSchema, splitLocalePath } from '@elytracms/core/cms-core';
+export { documentSchema, fallbackHomeRoutes, localeConfigSchema, localeUrlPath, mergeRouteRecords, redirectRecordSchema, resolveLocale, routeRecordSchema, splitLocalePath, textDirection } from '@elytracms/core/cms-core';
 import { revalidateTag, unstable_cache } from 'next/cache';
 import { draftMode } from 'next/headers';
 import { redirect, notFound, permanentRedirect } from 'next/navigation';
+import { COMPOSITE_KEY_SEPARATOR } from '@elytracms/core/project-graph';
 import { createHmac, timingSafeEqual } from 'crypto';
 import { z } from 'zod';
 export { z } from 'zod';
@@ -25,64 +26,9 @@ function defineHostComponents(components = [], options = {}) {
     const implementation = getImplementation(base.implementations, manifest.id);
     if (implementation) implementations[manifest.id] = implementation;
   }
-  for (const component of components) {
-    implementations[component.manifest.id] = component.implementation;
-  }
-  return { registry, implementations, issues: registry.issues };
-}
-
-// src/payloads.ts
-var SOURCE_PAYLOAD_ERROR_KEY = "__elytraSourcePayloadError";
-function sourcePayloadError(sourceId, messages) {
-  return { [SOURCE_PAYLOAD_ERROR_KEY]: true, sourceId, messages: [...messages] };
-}
-function isSourcePayloadError(value) {
-  return typeof value === "object" && value !== null && value[SOURCE_PAYLOAD_ERROR_KEY] === true && typeof value.sourceId === "string" && Array.isArray(value.messages);
-}
-function unescapeRefToken(token) {
-  return token.replace(/~1/g, "/").replace(/~0/g, "~");
-}
-function pathFromToken(token) {
-  if (token === "" || token === "/") return [];
-  if (!token.startsWith("/")) return void 0;
-  return token.slice(1).split("/").map(unescapeRefToken);
-}
-var isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-function resolvePayloadToken(payload, token) {
-  const path = pathFromToken(token);
-  if (path === void 0) return void 0;
-  let current = payload;
-  for (const segment of path) {
-    if (Array.isArray(current)) {
-      if (!/^(0|[1-9][0-9]*)$/.test(segment)) return void 0;
-      const index = Number(segment);
-      if (index >= current.length) return void 0;
-      current = current[index];
-      continue;
-    }
-    if (isPlainObject(current)) {
-      if (!Object.prototype.hasOwnProperty.call(current, segment)) return void 0;
-      current = current[segment];
-      continue;
-    }
-    return void 0;
-  }
-  return current;
-}
-function createBindingResolver(payloads) {
-  return (ref, item) => {
-    if (ref.mode === "repeaterItem") {
-      return item === void 0 ? void 0 : resolvePayloadToken(item.item, ref.token);
-    }
-    if (!Object.prototype.hasOwnProperty.call(payloads, ref.sourceId)) return void 0;
-    const payload = payloads[ref.sourceId];
-    if (isSourcePayloadError(payload)) {
-      throw new Error(
-        `Source "${payload.sourceId}" query was rejected: ${payload.messages.join("; ")}`
-      );
-    }
-    return resolvePayloadToken(payload, ref.token);
-  };
+  const host = registerImplementations(components);
+  Object.assign(implementations, host.implementations);
+  return { registry, implementations, issues: [...registry.issues, ...host.issues] };
 }
 function relationResolver(relations) {
   return (ref) => relations[`${ref.collection}:${ref.id}`] ?? null;
@@ -121,19 +67,14 @@ function stripServerErrorBoundary(_node, rendered) {
   }
   return rendered;
 }
-function defaultBindingPayloads(result) {
-  return { document: result.document, params: result.dynamicParams };
-}
 async function CanvasRenderer(props) {
   const { result, components } = props;
   if (result.status !== "ok") {
     return /* @__PURE__ */ jsx(UnresolvedPageFallback, { status: result.status });
   }
-  const resolveBinding = props.resolveBinding ?? createBindingResolver(props.payloads ?? defaultBindingPayloads(result));
   const ctx = {
     registry: components.registry,
     implementations: components.implementations,
-    resolveBinding,
     resolveAsset: assetResolver(props.assets ?? []),
     // EC-254: wire relation population only when the host baked the populated
     // targets, so a host that did not opt in keeps the raw-ref passthrough.
@@ -192,42 +133,6 @@ function mergeCacheTags(first, ...rest) {
     locale: first.locale
   });
 }
-function collectBindingSourceIds(node, into = /* @__PURE__ */ new Set()) {
-  for (const value of Object.values(node.props ?? {})) {
-    if (value.kind === "binding") into.add(value.binding.sourceId);
-  }
-  if (node.condition) into.add(node.condition.source.sourceId);
-  for (const children of Object.values(node.slots ?? {})) {
-    for (const child of children) collectBindingSourceIds(child, into);
-  }
-  return into;
-}
-function materializeSourcePayloads(input) {
-  const { client, result, sources } = input;
-  const payloads = {};
-  const tags = [];
-  if (result.status !== "ok") return { payloads, tags };
-  const referenced = /* @__PURE__ */ new Set();
-  const byId = new Map(sources.map((source) => [source.id, source]));
-  for (const sourceId of [...referenced].sort()) {
-    if (!isSectionSourceId(sourceId)) continue;
-    const definition = byId.get(sourceId);
-    if (!definition || definition.kind !== "cms") continue;
-    const config = parseCmsSourceQueryConfig(definition.config);
-    if (!config || config.documentId !== void 0) continue;
-    const list = client.listDocuments(config.collectionId, listQueryOfCmsConfig(config));
-    tags.push(list.tags);
-    if (list.ok) {
-      payloads[sourceId] = list.documents;
-    } else {
-      payloads[sourceId] = sourcePayloadError(
-        sourceId,
-        list.errors.map((error) => error.message)
-      );
-    }
-  }
-  return { payloads, tags };
-}
 function createStaticContentSource(data) {
   const locales = data.locales;
   const routes = data.routes ?? [];
@@ -273,7 +178,6 @@ function createStaticContentSource(data) {
     // dimensions. Baked into the (serializable) render outcome by the route
     // helper, so a cached page keeps its images during a backend outage.
     assets: () => [...assets.values()].map((record2) => resolvedAsset(record2, record2.url ?? assetUrl(record2))),
-    ...data.sources ? { sources: data.sources } : {},
     // EC-499: the schema the route helper reads a collection's declared
     // `presentation` from (which field is the delivery body, which component
     // wraps it). Already prefetched for the lookup above — exposing it costs
@@ -313,7 +217,6 @@ async function createContentSnapshot(adapter, projectId, options) {
     locales: options.locales,
     ...options.routes ? { routes: options.routes } : {},
     redirects: options.redirects ? [...options.redirects] : redirects,
-    ...options.sources ? { sources: options.sources } : {},
     ...schema ? { collections: schema.collections } : {},
     documents,
     assets: assetRecords,
@@ -436,26 +339,6 @@ async function resolveCanvasPage(source, url, perspective, options = {}) {
   if (result.status !== "ok") {
     return { kind: "not-found", tags: result.tags };
   }
-  const extraTags = [];
-  let payloads = defaultBindingPayloads(result);
-  const materialized = materializeSourcePayloads({
-    client,
-    result,
-    sources: source.sources ?? []
-  });
-  payloads = { ...payloads, ...materialized.payloads };
-  extraTags.push(...materialized.tags);
-  if (options.payloads) {
-    const custom = await options.payloads({
-      client,
-      result,
-      perspective,
-      path,
-      params: result.dynamicParams,
-      addTags: (tags) => extraTags.push(tags)
-    });
-    payloads = { ...payloads, ...custom };
-  }
   const presentation = presentationFor(source, result);
   const body = pageBodyOf(result, presentation);
   const allAssets = source.assets?.() ?? [];
@@ -486,7 +369,6 @@ async function resolveCanvasPage(source, url, perspective, options = {}) {
   return {
     kind: "render",
     result,
-    payloads,
     assets: bakedAssets,
     relations,
     listings,
@@ -494,7 +376,6 @@ async function resolveCanvasPage(source, url, perspective, options = {}) {
     ...presentation ? { presentation } : {},
     tags: mergeCacheTags(
       result.tags,
-      ...extraTags,
       ...listingTags,
       assetTags,
       relationTags,
@@ -533,6 +414,9 @@ function nextCacheTags(tags, scope) {
   for (const assetId of tags.assets) all.add(assetCacheTag(assetId, scope));
   return [...all].sort();
 }
+function canvasCacheKey({ scope, mode, url }) {
+  return ["elytra-route", scope ?? "", mode ?? "", url];
+}
 var CacheDiscoveryBail = class extends Error {
   constructor() {
     super("elytra cache discovery bail (never user-visible)");
@@ -582,6 +466,9 @@ function resolveOgImage(value, assets) {
   if (looksLikeUrl(value)) return value;
   return assets.find((asset) => asset.id === value)?.url ?? null;
 }
+function openGraphLocale(locale) {
+  return locale.replace(/-/g, "_");
+}
 function canvasPageMetadata(result, assets = []) {
   const doc = result.document;
   const seoTitle = str(doc?.["seoTitle"]);
@@ -596,11 +483,12 @@ function canvasPageMetadata(result, assets = []) {
   if (title !== null) metadata.title = title;
   if (seoDescription) metadata.description = seoDescription;
   const ogTitle = seoOgTitle ?? title;
-  if (ogTitle !== null || seoDescription || seoOgImage) {
+  if (doc) {
     metadata.openGraph = {
       ...ogTitle !== null ? { title: ogTitle } : {},
       ...seoDescription ? { description: seoDescription } : {},
-      ...seoOgImage ? { images: [{ url: seoOgImage }] } : {}
+      ...seoOgImage ? { images: [{ url: seoOgImage }] } : {},
+      locale: openGraphLocale(result.tags.locale)
     };
   }
   if (seoNoindex) metadata.robots = { index: false };
@@ -620,7 +508,6 @@ function createCanvasRoute(options) {
     const resolveFresh = async () => {
       const source = await options.loadContent({ perspective });
       return resolveCanvasPage(source, url, perspective, {
-        ...options.payloads ? { payloads: options.payloads } : {},
         // EC-205: page-scope the baked assets to what the page actually uses.
         registry: options.components.registry
       });
@@ -630,7 +517,7 @@ function createCanvasRoute(options) {
     const scope = options.cache.scope;
     const entry = await loadCachedEntry(
       nextCacheWrapper,
-      ["elytra-route", scope ?? "", url],
+      canvasCacheKey({ scope, mode: options.cache.mode, url }),
       [projectSweepTag(scope)],
       async () => {
         const outcome = await resolveFresh();
@@ -656,7 +543,6 @@ function createCanvasRoute(options) {
           {
             result: outcome.result,
             components: options.components,
-            payloads: outcome.payloads,
             assets: outcome.assets,
             relations: outcome.relations,
             listings: outcome.listings,
@@ -785,7 +671,7 @@ function canvasSitemapEntries(source, options) {
           continue;
         }
         const absolute = originOf(options.baseUrl) + urlPath;
-        const group = result.document ? `${route.id}\0doc\0${result.document.collection}\0${result.document.id}` : `${route.id}\0path\0${path}`;
+        const group = result.document ? `${route.id}${COMPOSITE_KEY_SEPARATOR}doc${COMPOSITE_KEY_SEPARATOR}${result.document.collection}${COMPOSITE_KEY_SEPARATOR}${result.document.id}` : `${route.id}${COMPOSITE_KEY_SEPARATOR}path${COMPOSITE_KEY_SEPARATOR}${path}`;
         if (!byUrl.has(absolute)) byUrl.set(absolute, { group, locale });
         const perLocale = byGroup.get(group) ?? /* @__PURE__ */ new Map();
         if (!perLocale.has(locale)) perLocale.set(locale, absolute);
@@ -1035,21 +921,6 @@ function parseRedirects(rows) {
   }
   return redirects;
 }
-var canvasDataSourceSchema = z.object({
-  kind: z.string().min(1),
-  id: z.string().min(1),
-  label: z.string().optional(),
-  config: z.unknown().optional()
-});
-function parseSources(rows) {
-  if (!Array.isArray(rows)) return [];
-  const sources = [];
-  for (const row of rows) {
-    const parsed = canvasDataSourceSchema.safeParse(row);
-    if (parsed.success) sources.push(parsed.data);
-  }
-  return sources;
-}
 function assembleLiveSource(payload, options, perspective) {
   const locales = options.locales;
   const documents = parseDocuments(payload.documents);
@@ -1065,10 +936,7 @@ function assembleLiveSource(payload, options, perspective) {
     redirects: parseRedirects(payload.redirects ?? []),
     collections: [...options.collections],
     documents: documentSources,
-    assets: payload.assets,
-    // EC-166 LIVE mode: the builder's persisted section/template sources, so
-    // the route helper materializes their payloads.
-    sources: parseSources(payload.sources)
+    assets: payload.assets
   });
 }
 async function loadLiveContent(options, perspective) {
@@ -1207,12 +1075,30 @@ function resolveGlobals(source, options = {}) {
 }
 
 // src/preview-core.ts
+var RESOLUTION_ORIGIN = "https://redirect-target.invalid";
+function resolveOnOrigin(value) {
+  let resolved;
+  try {
+    resolved = new URL(value, RESOLUTION_ORIGIN);
+  } catch {
+    return null;
+  }
+  return resolved.origin === RESOLUTION_ORIGIN ? resolved : null;
+}
+function hasControlCharacter(value) {
+  for (let i = 0; i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code <= 31 || code === 127) return true;
+  }
+  return false;
+}
 function safeRedirectTarget(value, fallback = "/") {
   if (value === null || value === void 0 || value === "") return fallback;
-  if (!value.startsWith("/")) return null;
-  if (value.includes("\\")) return null;
-  if (value.startsWith("//")) return null;
-  return value;
+  if (!value.startsWith("/") || hasControlCharacter(value)) return null;
+  const resolved = resolveOnOrigin(value);
+  if (resolved === null) return null;
+  const target = resolved.pathname + resolved.search + resolved.hash;
+  return resolveOnOrigin(target) === null ? null : target;
 }
 function evaluatePreviewRequest(requestUrl, expectedToken) {
   if (expectedToken === void 0 || expectedToken.length === 0) {
@@ -1234,6 +1120,15 @@ function evaluatePreviewRequest(requestUrl, expectedToken) {
   }
   return { ok: true, redirectTo };
 }
+function previewDisableTarget(requestUrl) {
+  let url;
+  try {
+    url = typeof requestUrl === "string" ? new URL(requestUrl, "http://localhost") : requestUrl;
+  } catch {
+    return "/";
+  }
+  return safeRedirectTarget(url.searchParams.get("redirect")) ?? "/";
+}
 
 // src/preview.ts
 function createPreviewRoute(options) {
@@ -1254,13 +1149,7 @@ function createPreviewDisableRoute() {
     async GET(request) {
       const draft = await draftMode();
       draft.disable();
-      let target;
-      try {
-        target = safeRedirectTarget(new URL(request.url).searchParams.get("redirect"));
-      } catch {
-        target = "/";
-      }
-      redirect(target ?? "/");
+      redirect(previewDisableTarget(request.url));
     }
   };
 }
@@ -1287,9 +1176,9 @@ function createElytraHost(options) {
     // canonical manifest stays (first registration wins in defineHostComponents).
     ...options.image === false ? [] : [nextImagePrimitive(options.image ?? {})],
     // EC-539: the option is the CONFIG's entry shape (`implementation: unknown`)
-    // so the recommended `{ ...site }` spread compiles. Narrowing here is the
-    // one place that widening is paid for; see the option's doc comment and
-    // EC-541 for the runtime check that should back it.
+    // so the recommended `{ ...site }` spread compiles; EC-541: registration
+    // takes that shape too and checks each implementation at runtime (see the
+    // option's doc comment) — no narrowing cast here.
     ...options.components ?? []
   ]);
   const emptySource = createStaticContentSource({
@@ -1300,8 +1189,7 @@ function createElytraHost(options) {
     redirects: [],
     collections: [...options.collections],
     documents: [],
-    assets: [],
-    sources: []
+    assets: []
   });
   const loadContent = (request) => {
     if (live) {
@@ -1336,7 +1224,9 @@ function createElytraHost(options) {
       components,
       // Tag scope = the project id the studio publishes under, so its webhook
       // tags match this site's cached entries.
-      ...cache === false ? {} : { cache: cache ?? { scope: contentScope } },
+      // EC-543: the mode is in the entry key so no world ever reads another's
+      // entries; an explicit override may replace the scope, not drop the mode.
+      ...cache === false ? {} : { cache: { mode: contentMode, ...cache ?? { scope: contentScope } } },
       ...rest
     });
   };
@@ -1375,6 +1265,6 @@ function createElytraHost(options) {
 }
 var PACKAGE = "@elytracms/next";
 
-export { CanvasRenderer, ELYTRA_HOST_ENV_KEYS, ElytraImage, PACKAGE, REVALIDATE_SIGNATURE_HEADER, assembleLiveSource, bodyItemsOf, canvasPageMetadata, canvasSitemapEntries, collectBindingSourceIds, collectionCacheTag, createAssetImageLoader, createBindingResolver, createCanvasRoute, createCanvasSitemap, createContentSnapshot, createElytraHost, createPreviewDisableRoute, createPreviewRoute, createRevalidateRoute, createStaticContentSource, defaultBindingPayloads, defineHostComponents, docCacheTag, elytraHostImage, evaluatePreviewRequest, evaluateRevalidateRequest, firstBlockFullBleed, isSourcePayloadError, loadCachedEntry, loadLiveContent, materializeSourcePayloads, mergeCacheTags, nextCacheTags, nextImagePrimitive, pathFromSlug, projectSweepTag, resolveCanvasPage, resolveGlobals, resolveHostEnv, resolvePayloadToken, revalidatePayloadSchema, routeCacheTag, safeRedirectTarget, scopeCacheTag, signRevalidateBody, sourcePayloadError };
+export { CanvasRenderer, ELYTRA_HOST_ENV_KEYS, ElytraImage, PACKAGE, REVALIDATE_SIGNATURE_HEADER, assembleLiveSource, bodyItemsOf, canvasPageMetadata, canvasSitemapEntries, collectionCacheTag, createAssetImageLoader, createCanvasRoute, createCanvasSitemap, createContentSnapshot, createElytraHost, createPreviewDisableRoute, createPreviewRoute, createRevalidateRoute, createStaticContentSource, defineHostComponents, docCacheTag, elytraHostImage, evaluatePreviewRequest, evaluateRevalidateRequest, firstBlockFullBleed, loadCachedEntry, loadLiveContent, mergeCacheTags, nextCacheTags, nextImagePrimitive, pathFromSlug, projectSweepTag, resolveCanvasPage, resolveGlobals, resolveHostEnv, revalidatePayloadSchema, routeCacheTag, safeRedirectTarget, scopeCacheTag, signRevalidateBody };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map