@kotao/storefront 0.2.4 → 0.2.6

package/dist/editor.d.ts

@@ -1,112 +1,65 @@
-import { T as ThemeSettingsStore, R as ResolvedSettings, c as ResolvedSection, b as ResolvedBlock } from './store-CtCWHI8H.js';
+export { C as CreateStorefrontEditorBridgeArgs, b as CreateStorefrontEditorHostBridgeArgs, c as StorefrontEditorAppExtensionPreview, d as StorefrontEditorBlockSchema, e as StorefrontEditorBridge, f as StorefrontEditorCanvasAction, g as StorefrontEditorCanvasBlockAction, h as StorefrontEditorCanvasPosition, i as StorefrontEditorCanvasSectionAction, j as StorefrontEditorDocument, k as StorefrontEditorHostBridge, l as StorefrontEditorMessageEvent, S as StorefrontEditorMessageSource, a as StorefrontEditorMessageTarget, m as StorefrontEditorReady, n as StorefrontEditorRect, o as StorefrontEditorSectionPreset, p as StorefrontEditorSectionPresetBlock, q as StorefrontEditorSectionSchema, r as StorefrontEditorSelection, s as StorefrontEditorSelectionScope, t as StorefrontEditorSettingInput, u as StorefrontEditorSettingOption, v as StorefrontEditorThemeStyle, w as StorefrontEditorValuesDocument, x as createStorefrontEditorBridge, y as createStorefrontEditorHostBridge, z as positionStorefrontEditorCanvasToolbar } from './bridge-ZKbKqgFd.js';
+export { S as STOREFRONT_SECTION_CUSTOM_CSS_SETTING, s as scopeStorefrontSectionCss } from './custom-css-Bl7Ur3-H.js';
+export { HOSTED_SURFACE_DESIGN_INPUTS, HydrogenEditorManifest, HydrogenEditorManifestSchema } from '@kotao/storefront-contracts';
+import { H as HydrogenEditorSecurityContext, C as CreateHydrogenEditorPreviewRuntimeArgs, a as HydrogenEditorPreviewRuntime } from './hydrogen-Bu7k0kE4.js';
+export { b as CreateHydrogenEditorHostBridgeArgs, c as CreateHydrogenEditorSourceProjectionArgs, d as HYDROGEN_EDITOR_BRIDGE_LIMITS, e as HYDROGEN_EDITOR_PROTOCOL_VERSION, f as HydrogenEditorApplyResult, g as HydrogenEditorCanvasDispatchResult, h as HydrogenEditorCanvasIntent, i as HydrogenEditorCapabilityReason, j as HydrogenEditorConfigurationError, k as HydrogenEditorHostBridge, l as HydrogenEditorInstanceSnapshot, m as HydrogenEditorOperationBase, n as HydrogenEditorOperationFailure, o as HydrogenEditorOperationFailureCode, p as HydrogenEditorPreviewOperation, q as HydrogenEditorPreviewSnapshot, r as HydrogenEditorPreviewStore, s as HydrogenEditorProtocolFailure, t as HydrogenEditorProtocolFailureCode, u as HydrogenEditorReadyDocument, v as HydrogenEditorReadyInstance, w as HydrogenEditorReconciliation, x as HydrogenEditorReconciliationReason, y as createHydrogenEditorHostBridge, z as createHydrogenEditorPreviewRuntime, A as createHydrogenEditorSourceProjection, B as parseHydrogenEditorCanvasIntent, D as resolveHydrogenEditorStyles } from './hydrogen-Bu7k0kE4.js';
+import './store-DO08fzJi.js';
 
-interface StorefrontEditorMessageTarget {
-    postMessage(message: unknown, targetOrigin: string): void;
-}
-interface StorefrontEditorMessageEvent {
-    readonly origin: string;
-    readonly data: unknown;
-    readonly source?: StorefrontEditorMessageTarget | null;
-}
-interface StorefrontEditorMessageSource {
-    addEventListener(type: 'message', listener: (event: StorefrontEditorMessageEvent) => void): void;
-    removeEventListener(type: 'message', listener: (event: StorefrontEditorMessageEvent) => void): void;
-}
-interface StorefrontEditorBridge {
-    ready(): void;
-    selectSection(sectionId: string): void;
-    dispose(): void;
-}
-interface StorefrontEditorSettingOption {
-    readonly value: string;
-    readonly label: string;
-}
-interface StorefrontEditorSettingInput {
-    readonly type: string;
-    readonly name: string;
-    readonly label: string;
-    readonly defaultValue?: unknown;
-    readonly placeholder?: string;
-    readonly helpText?: string;
-    readonly options?: readonly StorefrontEditorSettingOption[];
-    readonly min?: number;
-    readonly max?: number;
-    readonly step?: number;
-    readonly unit?: string;
-}
-interface StorefrontEditorBlockSchema {
-    readonly type: string;
-    readonly label: string;
-    readonly settings: readonly StorefrontEditorSettingInput[];
-}
-interface StorefrontEditorSectionPresetBlock {
-    readonly type: string;
-    readonly settings?: ResolvedSettings;
-}
-interface StorefrontEditorSectionPreset {
-    readonly name: string;
-    readonly settings?: ResolvedSettings;
-    readonly blocks?: readonly StorefrontEditorSectionPresetBlock[];
-}
-interface StorefrontEditorSectionSchema {
-    readonly type: string;
-    readonly label: string;
-    readonly settings: readonly StorefrontEditorSettingInput[];
-    readonly blocks?: readonly StorefrontEditorBlockSchema[];
-    readonly presets?: readonly StorefrontEditorSectionPreset[];
-}
-interface StorefrontEditorSelection {
-    readonly sectionId: string;
-    readonly section?: ResolvedSection;
-    readonly sections?: readonly ResolvedSection[];
-    readonly schema?: StorefrontEditorSectionSchema;
-    readonly schemas?: Readonly<Record<string, StorefrontEditorSectionSchema>>;
+declare const GRANT_VERSION: 1;
+type HydrogenEditorPreviewGrantErrorCode = 'INVALID_BASE_SHA' | 'INVALID_CHANNEL_NONCE' | 'INVALID_ENVIRONMENT' | 'INVALID_MANIFEST_HASH' | 'INVALID_PREVIEW_ORIGIN' | 'INVALID_SESSION_ID' | 'INVALID_SITE_ID' | 'INVALID_TIME' | 'INVALID_TTL' | 'INVALID_WORKSPACES_ORIGIN' | 'WEAK_SECRET';
+declare class HydrogenEditorPreviewGrantError extends Error {
+    readonly code: HydrogenEditorPreviewGrantErrorCode;
+    constructor(code: HydrogenEditorPreviewGrantErrorCode, message: string);
+}
+interface HydrogenEditorPreviewGrantBinding {
+    readonly sessionId: string;
+    readonly siteId: string;
+    readonly environment: string;
+    readonly baseSha: string;
+    readonly manifestHash: string;
+    readonly workspacesOrigin: string;
+    readonly previewOrigin: string;
+    readonly channelNonce: string;
 }
-interface StorefrontEditorValuesDocument {
-    readonly shopId: string;
-    readonly sections: readonly ResolvedSection[];
+interface HydrogenEditorPreviewGrantClaims extends HydrogenEditorPreviewGrantBinding {
+    readonly version: typeof GRANT_VERSION;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
 }
-interface StorefrontEditorReady {
-    readonly sections: readonly ResolvedSection[];
-    readonly schemas?: Readonly<Record<string, StorefrontEditorSectionSchema>>;
-    readonly globalInputs?: readonly StorefrontEditorSettingInput[];
-    readonly templates?: Readonly<Record<string, StorefrontEditorValuesDocument>>;
-    readonly sectionGroups?: Readonly<Record<string, StorefrontEditorValuesDocument>>;
+interface SignedHydrogenEditorPreviewGrant {
+    readonly token: string;
+    readonly claims: HydrogenEditorPreviewGrantClaims;
+    readonly security: HydrogenEditorSecurityContext;
 }
-interface StorefrontEditorHostBridge {
-    patchSection(sectionId: string, settings: ResolvedSettings): void;
-    patchGlobal(settings: ResolvedSettings): void;
-    insertSection(section: ResolvedSection, index?: number): void;
-    removeSection(sectionId: string): void;
-    reorderSection(sectionId: string, index: number): void;
-    patchBlock(sectionId: string, blockId: string, settings: ResolvedSettings): void;
-    insertBlock(sectionId: string, block: ResolvedBlock, index?: number): void;
-    removeBlock(sectionId: string, blockId: string): void;
-    reorderBlock(sectionId: string, blockId: string, index: number): void;
-    replaceTemplate(handle: string, document: StorefrontEditorValuesDocument): void;
-    replaceSectionGroup(handle: string, document: StorefrontEditorValuesDocument): void;
-    dispose(): void;
+interface SignHydrogenEditorPreviewGrantOptions {
+    readonly now: number;
+    readonly ttlMs: number;
 }
-interface CreateStorefrontEditorBridgeArgs {
-    readonly adminOrigin: string;
-    readonly shopId: string;
-    readonly store: ThemeSettingsStore;
-    readonly schemas?: Readonly<Record<string, StorefrontEditorSectionSchema>>;
-    readonly globalInputs?: readonly StorefrontEditorSettingInput[];
-    readonly templates?: Readonly<Record<string, StorefrontEditorValuesDocument>>;
-    readonly sectionGroups?: Readonly<Record<string, StorefrontEditorValuesDocument>>;
-    readonly transport: StorefrontEditorMessageSource;
-    readonly target: StorefrontEditorMessageTarget;
+interface VerifyHydrogenEditorPreviewGrantOptions {
+    readonly now: number;
 }
-interface CreateStorefrontEditorHostBridgeArgs {
-    readonly onSelectSection: (selection: StorefrontEditorSelection) => void;
-    readonly onReady?: (ready: StorefrontEditorReady) => void;
+declare function createHydrogenEditorChannelNonce(): string;
+declare function signHydrogenEditorPreviewGrant(binding: HydrogenEditorPreviewGrantBinding, secret: string, options: SignHydrogenEditorPreviewGrantOptions): Promise<SignedHydrogenEditorPreviewGrant>;
+declare function verifyHydrogenEditorPreviewGrant(token: string, secret: string, expected: HydrogenEditorPreviewGrantBinding, options: VerifyHydrogenEditorPreviewGrantOptions): Promise<HydrogenEditorPreviewGrantClaims | null>;
+
+declare const PREVIEW_BOOTSTRAP_VERSION: 1;
+interface HydrogenEditorPreviewBootstrap {
+    readonly version: typeof PREVIEW_BOOTSTRAP_VERSION;
+    readonly workspacesOrigin: string;
     readonly previewOrigin: string;
-    readonly shopId: string;
-    readonly transport: StorefrontEditorMessageSource;
-    readonly target: StorefrontEditorMessageTarget;
-}
-declare function createStorefrontEditorBridge({ adminOrigin, globalInputs, schemas, sectionGroups, shopId, store, target, templates, transport, }: CreateStorefrontEditorBridgeArgs): StorefrontEditorBridge;
-declare function createStorefrontEditorHostBridge({ onReady, onSelectSection, previewOrigin, shopId, target, transport, }: CreateStorefrontEditorHostBridgeArgs): StorefrontEditorHostBridge;
+    readonly security: HydrogenEditorSecurityContext;
+}
+interface CreateHydrogenEditorPreviewBootstrapArgs {
+    readonly token?: string | null;
+    readonly secret: string;
+    readonly expected: HydrogenEditorPreviewGrantBinding;
+    readonly now: number;
+}
+type CreateHydrogenEditorPreviewRuntimeFromBootstrapArgs = Omit<CreateHydrogenEditorPreviewRuntimeArgs, 'adminOrigin' | 'security'> & {
+    readonly bootstrap: HydrogenEditorPreviewBootstrap;
+    readonly currentOrigin: string;
+};
+declare function createHydrogenEditorPreviewBootstrap({ expected, now, secret, token, }: CreateHydrogenEditorPreviewBootstrapArgs): Promise<HydrogenEditorPreviewBootstrap | null>;
+declare function createHydrogenEditorPreviewRuntimeFromBootstrap({ bootstrap, currentOrigin, ...runtime }: CreateHydrogenEditorPreviewRuntimeFromBootstrapArgs): HydrogenEditorPreviewRuntime;
 
-export { type CreateStorefrontEditorBridgeArgs, type CreateStorefrontEditorHostBridgeArgs, type StorefrontEditorBlockSchema, type StorefrontEditorBridge, type StorefrontEditorHostBridge, type StorefrontEditorMessageEvent, type StorefrontEditorMessageSource, type StorefrontEditorMessageTarget, type StorefrontEditorReady, type StorefrontEditorSectionPreset, type StorefrontEditorSectionPresetBlock, type StorefrontEditorSectionSchema, type StorefrontEditorSelection, type StorefrontEditorSettingInput, type StorefrontEditorSettingOption, type StorefrontEditorValuesDocument, createStorefrontEditorBridge, createStorefrontEditorHostBridge };
+export { type CreateHydrogenEditorPreviewBootstrapArgs, CreateHydrogenEditorPreviewRuntimeArgs, type CreateHydrogenEditorPreviewRuntimeFromBootstrapArgs, type HydrogenEditorPreviewBootstrap, type HydrogenEditorPreviewGrantBinding, type HydrogenEditorPreviewGrantClaims, HydrogenEditorPreviewGrantError, type HydrogenEditorPreviewGrantErrorCode, HydrogenEditorPreviewRuntime, HydrogenEditorSecurityContext, type SignHydrogenEditorPreviewGrantOptions, type SignedHydrogenEditorPreviewGrant, type VerifyHydrogenEditorPreviewGrantOptions, createHydrogenEditorChannelNonce, createHydrogenEditorPreviewBootstrap, createHydrogenEditorPreviewRuntimeFromBootstrap, signHydrogenEditorPreviewGrant, verifyHydrogenEditorPreviewGrant };

package/dist/editor.js

@@ -1,3 +1,272 @@
-export { createStorefrontEditorBridge, createStorefrontEditorHostBridge } from './chunk-PXZ737N3.js';
+import { HydrogenEditorConfigurationError, createHydrogenEditorPreviewRuntime } from './chunk-XXNCFWXT.js';
+export { HYDROGEN_EDITOR_BRIDGE_LIMITS, HYDROGEN_EDITOR_PROTOCOL_VERSION, HydrogenEditorConfigurationError, createHydrogenEditorHostBridge, createHydrogenEditorPreviewRuntime, createHydrogenEditorSourceProjection, parseHydrogenEditorCanvasIntent, resolveHydrogenEditorStyles } from './chunk-XXNCFWXT.js';
+export { STOREFRONT_SECTION_CUSTOM_CSS_SETTING, createStorefrontEditorBridge, createStorefrontEditorHostBridge, positionStorefrontEditorCanvasToolbar, scopeStorefrontSectionCss } from './chunk-O6YZEY7X.js';
+import { toBase64Url, fromBase64Url } from './chunk-CKGI3Y7L.js';
+export { HOSTED_SURFACE_DESIGN_INPUTS, HydrogenEditorManifestSchema } from '@kotao/storefront-contracts';
+
+// src/editor/preview-grant.ts
+var GRANT_VERSION = 1;
+var TOKEN_PREFIX = "v1";
+var SIGNATURE_DOMAIN = "kotao:hydrogen-editor-preview-grant:v1";
+var UUID = /^[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/u;
+var ENVIRONMENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+var SHA_1 = /^[a-f0-9]{40}$/u;
+var SHA_256 = /^[a-f0-9]{64}$/u;
+var CHANNEL_NONCE = /^[A-Za-z0-9_-]{43}$/u;
+var BASE64_URL = /^[A-Za-z0-9_-]+$/u;
+var MAX_TTL_MS = 3e5;
+var MAX_TOKEN_CHARS = 4096;
+var MIN_SECRET_BYTES = 32;
+var MAX_SECRET_BYTES = 4096;
+var CLAIM_KEYS = [
+  "version",
+  "sessionId",
+  "siteId",
+  "environment",
+  "baseSha",
+  "manifestHash",
+  "workspacesOrigin",
+  "previewOrigin",
+  "channelNonce",
+  "issuedAt",
+  "expiresAt"
+];
+var encoder = new TextEncoder();
+var decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false });
+var HydrogenEditorPreviewGrantError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "HydrogenEditorPreviewGrantError";
+    this.code = code;
+  }
+};
+function bytes(value) {
+  const copy = new Uint8Array(value.byteLength);
+  copy.set(value);
+  return copy;
+}
+async function hmacKey(secret) {
+  return crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign", "verify"]
+  );
+}
+function signatureInput(payload) {
+  return bytes(encoder.encode(`${SIGNATURE_DOMAIN}
+${payload}`));
+}
+function isHttpsOrigin(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.username === "" && url.password === "" && url.origin === value && url.pathname === "/" && url.search === "" && url.hash === "";
+  } catch {
+    return false;
+  }
+}
+function requireHttpsOrigin(value, code, label) {
+  if (!isHttpsOrigin(value)) {
+    throw new HydrogenEditorPreviewGrantError(code, `${label} must be an exact HTTPS origin`);
+  }
+}
+function validSecret(secret) {
+  const secretBytes = encoder.encode(secret).byteLength;
+  return secretBytes >= MIN_SECRET_BYTES && secretBytes <= MAX_SECRET_BYTES;
+}
+function validChannelNonce(value) {
+  if (!CHANNEL_NONCE.test(value)) return false;
+  try {
+    const nonce = fromBase64Url(value);
+    return nonce.byteLength === 32 && toBase64Url(nonce) === value;
+  } catch {
+    return false;
+  }
+}
+function validateBinding(binding) {
+  if (!UUID.test(binding.sessionId)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_SESSION_ID",
+      "sessionId must be a canonical lowercase UUID"
+    );
+  }
+  if (!UUID.test(binding.siteId)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_SITE_ID",
+      "siteId must be a canonical lowercase UUID"
+    );
+  }
+  if (!ENVIRONMENT.test(binding.environment)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_ENVIRONMENT",
+      "environment must be a bounded deployment identifier"
+    );
+  }
+  if (!SHA_1.test(binding.baseSha)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_BASE_SHA",
+      "baseSha must be a lowercase 40-character Git SHA"
+    );
+  }
+  if (!SHA_256.test(binding.manifestHash)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_MANIFEST_HASH",
+      "manifestHash must be a lowercase SHA-256 digest"
+    );
+  }
+  requireHttpsOrigin(
+    binding.workspacesOrigin,
+    "INVALID_WORKSPACES_ORIGIN",
+    "workspacesOrigin"
+  );
+  requireHttpsOrigin(binding.previewOrigin, "INVALID_PREVIEW_ORIGIN", "previewOrigin");
+  if (!validChannelNonce(binding.channelNonce)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_CHANNEL_NONCE",
+      "channelNonce must be a canonical base64url-encoded 256-bit value"
+    );
+  }
+}
+function validateSigningInput(binding, secret, options) {
+  validateBinding(binding);
+  if (!validSecret(secret)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "WEAK_SECRET",
+      "preview grant secret must contain 32..4096 UTF-8 bytes"
+    );
+  }
+  if (!Number.isSafeInteger(options.now) || options.now < 0) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_TIME",
+      "preview grant time must be a non-negative safe integer"
+    );
+  }
+  if (!Number.isSafeInteger(options.ttlMs) || options.ttlMs <= 0 || options.ttlMs > MAX_TTL_MS || !Number.isSafeInteger(options.now + options.ttlMs)) {
+    throw new HydrogenEditorPreviewGrantError(
+      "INVALID_TTL",
+      "preview grant lifetime must be between 1 and 300000 milliseconds"
+    );
+  }
+}
+function isClaims(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const keys = Object.keys(value);
+  if (keys.length !== CLAIM_KEYS.length || !CLAIM_KEYS.every((key) => keys.includes(key))) {
+    return false;
+  }
+  const claims = value;
+  return claims.version === GRANT_VERSION && typeof claims.sessionId === "string" && UUID.test(claims.sessionId) && typeof claims.siteId === "string" && UUID.test(claims.siteId) && typeof claims.environment === "string" && ENVIRONMENT.test(claims.environment) && typeof claims.baseSha === "string" && SHA_1.test(claims.baseSha) && typeof claims.manifestHash === "string" && SHA_256.test(claims.manifestHash) && typeof claims.workspacesOrigin === "string" && isHttpsOrigin(claims.workspacesOrigin) && typeof claims.previewOrigin === "string" && isHttpsOrigin(claims.previewOrigin) && typeof claims.channelNonce === "string" && validChannelNonce(claims.channelNonce) && typeof claims.issuedAt === "number" && Number.isSafeInteger(claims.issuedAt) && claims.issuedAt >= 0 && typeof claims.expiresAt === "number" && Number.isSafeInteger(claims.expiresAt) && claims.expiresAt > claims.issuedAt && claims.expiresAt - claims.issuedAt <= MAX_TTL_MS;
+}
+function matchesBinding(claims, binding) {
+  return claims.sessionId === binding.sessionId && claims.siteId === binding.siteId && claims.environment === binding.environment && claims.baseSha === binding.baseSha && claims.manifestHash === binding.manifestHash && claims.workspacesOrigin === binding.workspacesOrigin && claims.previewOrigin === binding.previewOrigin && claims.channelNonce === binding.channelNonce;
+}
+function createHydrogenEditorChannelNonce() {
+  return toBase64Url(crypto.getRandomValues(new Uint8Array(32)));
+}
+async function signHydrogenEditorPreviewGrant(binding, secret, options) {
+  validateSigningInput(binding, secret, options);
+  const claims = {
+    version: GRANT_VERSION,
+    ...binding,
+    issuedAt: options.now,
+    expiresAt: options.now + options.ttlMs
+  };
+  const payload = toBase64Url(encoder.encode(JSON.stringify(claims)));
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    await hmacKey(secret),
+    signatureInput(payload)
+  );
+  const token = `${TOKEN_PREFIX}.${payload}.${toBase64Url(new Uint8Array(signature))}`;
+  return {
+    token,
+    claims,
+    security: {
+      sessionId: claims.sessionId,
+      baseSha: claims.baseSha,
+      manifestHash: claims.manifestHash,
+      channelNonce: claims.channelNonce,
+      previewToken: token,
+      expiresAt: claims.expiresAt
+    }
+  };
+}
+async function verifyHydrogenEditorPreviewGrant(token, secret, expected, options) {
+  try {
+    if (typeof token !== "string" || token.length === 0 || token.length > MAX_TOKEN_CHARS || !validSecret(secret) || !Number.isSafeInteger(options.now) || options.now < 0) {
+      return null;
+    }
+    validateBinding(expected);
+    const [prefix, payload, encodedSignature, extra] = token.split(".");
+    if (prefix !== TOKEN_PREFIX || payload === void 0 || !BASE64_URL.test(payload) || encodedSignature === void 0 || encodedSignature.length !== 43 || !BASE64_URL.test(encodedSignature) || extra !== void 0) {
+      return null;
+    }
+    const signature = fromBase64Url(encodedSignature);
+    if (signature.byteLength !== 32 || toBase64Url(signature) !== encodedSignature) {
+      return null;
+    }
+    const validSignature = await crypto.subtle.verify(
+      "HMAC",
+      await hmacKey(secret),
+      bytes(signature),
+      signatureInput(payload)
+    );
+    if (!validSignature) return null;
+    const payloadBytes = fromBase64Url(payload);
+    if (toBase64Url(payloadBytes) !== payload) return null;
+    const claims = JSON.parse(decoder.decode(payloadBytes));
+    if (!isClaims(claims) || !matchesBinding(claims, expected)) return null;
+    if (claims.issuedAt > options.now || claims.expiresAt <= options.now) return null;
+    return claims;
+  } catch {
+    return null;
+  }
+}
+
+// src/editor/preview-bootstrap.ts
+var PREVIEW_BOOTSTRAP_VERSION = 1;
+async function createHydrogenEditorPreviewBootstrap({
+  expected,
+  now,
+  secret,
+  token
+}) {
+  if (token === void 0 || token === null) return null;
+  const claims = await verifyHydrogenEditorPreviewGrant(token, secret, expected, { now });
+  if (claims === null) return null;
+  return {
+    version: PREVIEW_BOOTSTRAP_VERSION,
+    workspacesOrigin: claims.workspacesOrigin,
+    previewOrigin: claims.previewOrigin,
+    security: {
+      sessionId: claims.sessionId,
+      baseSha: claims.baseSha,
+      manifestHash: claims.manifestHash,
+      channelNonce: claims.channelNonce,
+      previewToken: token,
+      expiresAt: claims.expiresAt
+    }
+  };
+}
+function createHydrogenEditorPreviewRuntimeFromBootstrap({
+  bootstrap,
+  currentOrigin,
+  ...runtime
+}) {
+  if (bootstrap.version !== PREVIEW_BOOTSTRAP_VERSION || currentOrigin !== bootstrap.previewOrigin) {
+    throw new HydrogenEditorConfigurationError(
+      "current preview origin does not match the authenticated editor grant"
+    );
+  }
+  return createHydrogenEditorPreviewRuntime({
+    ...runtime,
+    adminOrigin: bootstrap.workspacesOrigin,
+    security: bootstrap.security
+  });
+}
+
+export { HydrogenEditorPreviewGrantError, createHydrogenEditorChannelNonce, createHydrogenEditorPreviewBootstrap, createHydrogenEditorPreviewRuntimeFromBootstrap, signHydrogenEditorPreviewGrant, verifyHydrogenEditorPreviewGrant };
 //# sourceMappingURL=editor.js.map
 //# sourceMappingURL=editor.js.map

package/dist/editor.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"editor.js"}
+{"version":3,"sources":["../src/editor/preview-grant.ts","../src/editor/preview-bootstrap.ts"],"names":[],"mappings":";;;;;;;AAGA,IAAM,aAAA,GAAgB,CAAA;AACtB,IAAM,YAAA,GAAe,IAAA;AACrB,IAAM,gBAAA,GAAmB,wCAAA;AACzB,IAAM,IAAA,GAAO,gDAAA;AACb,IAAM,WAAA,GAAc,oCAAA;AACpB,IAAM,KAAA,GAAQ,iBAAA;AACd,IAAM,OAAA,GAAU,iBAAA;AAChB,IAAM,aAAA,GAAgB,sBAAA;AACtB,IAAM,UAAA,GAAa,mBAAA;AACnB,IAAM,UAAA,GAAa,GAAA;AACnB,IAAM,eAAA,GAAkB,IAAA;AACxB,IAAM,gBAAA,GAAmB,EAAA;AACzB,IAAM,gBAAA,GAAmB,IAAA;AACzB,IAAM,UAAA,GAAa;AAAA,EACjB,SAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,SAAA;AAAA,EACA,cAAA;AAAA,EACA,kBAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AACA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAM,OAAA,GAAU,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,CAAA;AAenE,IAAM,+BAAA,GAAN,cAA8C,KAAA,CAAM;AAAA,EAChD,IAAA;AAAA,EAET,WAAA,CAAY,MAA2C,OAAA,EAAiB;AACtE,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,iCAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAkCA,SAAS,MAAM,KAAA,EAA4C;AACzD,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAC5C,EAAA,IAAA,CAAK,IAAI,KAAK,CAAA;AACd,EAAA,OAAO,IAAA;AACT;AAEA,eAAe,QAAQ,MAAA,EAAoC;AACzD,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,GACnB;AACF;AAEA,SAAS,eAAe,OAAA,EAA0C;AAChE,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,CAAA,EAAG,gBAAgB;AAAA,EAAK,OAAO,EAAE,CAAC,CAAA;AAChE;AAEA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,KAAK,CAAA;AACzB,IAAA,OACE,IAAI,QAAA,KAAa,QAAA,IACjB,IAAI,QAAA,KAAa,EAAA,IACjB,IAAI,QAAA,KAAa,EAAA,IACjB,IAAI,MAAA,KAAW,KAAA,IACf,IAAI,QAAA,KAAa,GAAA,IACjB,IAAI,MAAA,KAAW,EAAA,IACf,IAAI,IAAA,KAAS,EAAA;AAAA,EAEjB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,kBAAA,CACP,KAAA,EACA,IAAA,EACA,KAAA,EACM;AACN,EAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,+BAAA,CAAgC,IAAA,EAAM,CAAA,EAAG,KAAK,CAAA,8BAAA,CAAgC,CAAA;AAAA,EAC1F;AACF;AAEA,SAAS,YAAY,MAAA,EAAyB;AAC5C,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,CAAE,UAAA;AAC3C,EAAA,OAAO,WAAA,IAAe,oBAAoB,WAAA,IAAe,gBAAA;AAC3D;AAEA,SAAS,kBAAkB,KAAA,EAAwB;AACjD,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,KAAK,GAAG,OAAO,KAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,cAAc,KAAK,CAAA;AACjC,IAAA,OAAO,KAAA,CAAM,UAAA,KAAe,EAAA,IAAM,WAAA,CAAY,KAAK,CAAA,KAAM,KAAA;AAAA,EAC3D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,OAAA,EAAkD;AACzE,EAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,SAAS,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,oBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC9B,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,iBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,WAAA,CAAY,IAAA,CAAK,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC1C,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,qBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,kBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,CAAK,OAAA,CAAQ,YAAY,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,uBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,kBAAA;AAAA,IACE,OAAA,CAAQ,gBAAA;AAAA,IACR,2BAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,kBAAA,CAAmB,OAAA,CAAQ,aAAA,EAAe,wBAAA,EAA0B,eAAe,CAAA;AACnF,EAAA,IAAI,CAAC,iBAAA,CAAkB,OAAA,CAAQ,YAAY,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,uBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,MAAA,EACA,OAAA,EACM;AACN,EAAA,eAAA,CAAgB,OAAO,CAAA;AACvB,EAAA,IAAI,CAAC,WAAA,CAAY,MAAM,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,aAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,OAAO,aAAA,CAAc,OAAA,CAAQ,GAAG,CAAA,IAAK,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzD,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IACE,CAAC,MAAA,CAAO,aAAA,CAAc,QAAQ,KAAK,CAAA,IACnC,QAAQ,KAAA,IAAS,CAAA,IACjB,QAAQ,KAAA,GAAQ,UAAA,IAChB,CAAC,MAAA,CAAO,aAAA,CAAc,QAAQ,GAAA,GAAM,OAAA,CAAQ,KAAK,CAAA,EACjD;AACA,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,aAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAEA,SAAS,SAAS,KAAA,EAA2D;AAC3E,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,KAAA;AAChF,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAC9B,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,UAAA,CAAW,MAAA,IAAU,CAAC,UAAA,CAAW,KAAA,CAAM,CAAC,GAAA,KAAQ,IAAA,CAAK,QAAA,CAAS,GAAG,CAAC,CAAA,EAAG;AACvF,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,KAAA;AACf,EAAA,OACE,MAAA,CAAO,YAAY,aAAA,IACnB,OAAO,OAAO,SAAA,KAAc,QAAA,IAC5B,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,SAAS,KAC1B,OAAO,MAAA,CAAO,WAAW,QAAA,IACzB,IAAA,CAAK,KAAK,MAAA,CAAO,MAAM,CAAA,IACvB,OAAO,MAAA,CAAO,WAAA,KAAgB,YAC9B,WAAA,CAAY,IAAA,CAAK,OAAO,WAAW,CAAA,IACnC,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,IAC1B,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,IACzB,OAAO,OAAO,YAAA,KAAiB,QAAA,IAC/B,QAAQ,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,IAChC,OAAO,MAAA,CAAO,qBAAqB,QAAA,IACnC,aAAA,CAAc,OAAO,gBAAgB,CAAA,IACrC,OAAO,MAAA,CAAO,aAAA,KAAkB,QAAA,IAChC,aAAA,CAAc,MAAA,CAAO,aAAa,KAClC,OAAO,MAAA,CAAO,iBAAiB,QAAA,IAC/B,iBAAA,CAAkB,OAAO,YAAY,CAAA,IACrC,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,IAC3B,OAAO,aAAA,CAAc,MAAA,CAAO,QAAQ,CAAA,IACpC,MAAA,CAAO,YAAY,CAAA,IACnB,OAAO,MAAA,CAAO,SAAA,KAAc,QAAA,IAC5B,MAAA,CAAO,cAAc,MAAA,CAAO,SAAS,KACrC,MAAA,CAAO,SAAA,GAAY,OAAO,QAAA,IAC1B,MAAA,CAAO,SAAA,GAAY,MAAA,CAAO,QAAA,IAAY,UAAA;AAE1C;AAEA,SAAS,cAAA,CACP,QACA,OAAA,EACS;AACT,EAAA,OACE,MAAA,CAAO,SAAA,KAAc,OAAA,CAAQ,SAAA,IAC7B,MAAA,CAAO,MAAA,KAAW,OAAA,CAAQ,MAAA,IAC1B,MAAA,CAAO,WAAA,KAAgB,OAAA,CAAQ,WAAA,IAC/B,OAAO,OAAA,KAAY,OAAA,CAAQ,OAAA,IAC3B,MAAA,CAAO,YAAA,KAAiB,OAAA,CAAQ,YAAA,IAChC,MAAA,CAAO,gBAAA,KAAqB,OAAA,CAAQ,gBAAA,IACpC,MAAA,CAAO,aAAA,KAAkB,OAAA,CAAQ,aAAA,IACjC,MAAA,CAAO,iBAAiB,OAAA,CAAQ,YAAA;AAEpC;AAEO,SAAS,gCAAA,GAA2C;AACzD,EAAA,OAAO,YAAY,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAC,CAAA;AAC/D;AAEA,eAAsB,8BAAA,CACpB,OAAA,EACA,MAAA,EACA,OAAA,EAC2C;AAC3C,EAAA,oBAAA,CAAqB,OAAA,EAAS,QAAQ,OAAO,CAAA;AAC7C,EAAA,MAAM,MAAA,GAA2C;AAAA,IAC/C,OAAA,EAAS,aAAA;AAAA,IACT,GAAG,OAAA;AAAA,IACH,UAAU,OAAA,CAAQ,GAAA;AAAA,IAClB,SAAA,EAAW,OAAA,CAAQ,GAAA,GAAM,OAAA,CAAQ;AAAA,GACnC;AACA,EAAA,MAAM,OAAA,GAAU,YAAY,OAAA,CAAQ,MAAA,CAAO,KAAK,SAAA,CAAU,MAAM,CAAC,CAAC,CAAA;AAClE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,MAAA;AAAA,IACA,MAAM,QAAQ,MAAM,CAAA;AAAA,IACpB,eAAe,OAAO;AAAA,GACxB;AACA,EAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AAClF,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA,EAAU;AAAA,MACR,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,YAAA,EAAc,KAAA;AAAA,MACd,WAAW,MAAA,CAAO;AAAA;AACpB,GACF;AACF;AAEA,eAAsB,gCAAA,CACpB,KAAA,EACA,MAAA,EACA,QAAA,EACA,OAAA,EACkD;AAClD,EAAA,IAAI;AACF,IAAA,IACE,OAAO,UAAU,QAAA,IACjB,KAAA,CAAM,WAAW,CAAA,IACjB,KAAA,CAAM,SAAS,eAAA,IACf,CAAC,YAAY,MAAM,CAAA,IACnB,CAAC,MAAA,CAAO,aAAA,CAAc,QAAQ,GAAG,CAAA,IACjC,OAAA,CAAQ,GAAA,GAAM,CAAA,EACd;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,eAAA,CAAgB,QAAQ,CAAA;AACxB,IAAA,MAAM,CAAC,QAAQ,OAAA,EAAS,gBAAA,EAAkB,KAAK,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AAClE,IAAA,IACE,MAAA,KAAW,gBACX,OAAA,KAAY,KAAA,CAAA,IACZ,CAAC,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,IACxB,gBAAA,KAAqB,UACrB,gBAAA,CAAiB,MAAA,KAAW,MAC5B,CAAC,UAAA,CAAW,KAAK,gBAAgB,CAAA,IACjC,UAAU,KAAA,CAAA,EACV;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,SAAA,GAAY,cAAc,gBAAgB,CAAA;AAChD,IAAA,IACE,UAAU,UAAA,KAAe,EAAA,IACzB,WAAA,CAAY,SAAS,MAAM,gBAAA,EAC3B;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,cAAA,GAAiB,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA;AAAA,MACzC,MAAA;AAAA,MACA,MAAM,QAAQ,MAAM,CAAA;AAAA,MACpB,MAAM,SAAS,CAAA;AAAA,MACf,eAAe,OAAO;AAAA,KACxB;AACA,IAAA,IAAI,CAAC,gBAAgB,OAAO,IAAA;AAC5B,IAAA,MAAM,YAAA,GAAe,cAAc,OAAO,CAAA;AAC1C,IAAA,IAAI,WAAA,CAAY,YAAY,CAAA,KAAM,OAAA,EAAS,OAAO,IAAA;AAClD,IAAA,MAAM,SAAkB,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,YAAY,CAAC,CAAA;AAC/D,IAAA,IAAI,CAAC,SAAS,MAAM,CAAA,IAAK,CAAC,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA,EAAG,OAAO,IAAA;AACnE,IAAA,IAAI,MAAA,CAAO,WAAW,OAAA,CAAQ,GAAA,IAAO,OAAO,SAAA,IAAa,OAAA,CAAQ,KAAK,OAAO,IAAA;AAC7E,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AClWA,IAAM,yBAAA,GAA4B,CAAA;AAwBlC,eAAsB,oCAAA,CAAqC;AAAA,EACzD,QAAA;AAAA,EACA,GAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA,EAA6F;AAC3F,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,IAAA;AAClD,EAAA,MAAM,MAAA,GAAS,MAAM,gCAAA,CAAiC,KAAA,EAAO,QAAQ,QAAA,EAAU,EAAE,KAAK,CAAA;AACtF,EAAA,IAAI,MAAA,KAAW,MAAM,OAAO,IAAA;AAE5B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,yBAAA;AAAA,IACT,kBAAkB,MAAA,CAAO,gBAAA;AAAA,IACzB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,QAAA,EAAU;AAAA,MACR,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,YAAA,EAAc,KAAA;AAAA,MACd,WAAW,MAAA,CAAO;AAAA;AACpB,GACF;AACF;AAEO,SAAS,+CAAA,CAAgD;AAAA,EAC9D,SAAA;AAAA,EACA,aAAA;AAAA,EACA,GAAG;AACL,CAAA,EAAsF;AACpF,EAAA,IACE,SAAA,CAAU,OAAA,KAAY,yBAAA,IACtB,aAAA,KAAkB,UAAU,aAAA,EAC5B;AACA,IAAA,MAAM,IAAI,gCAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,kCAAA,CAAmC;AAAA,IACxC,GAAG,OAAA;AAAA,IACH,aAAa,SAAA,CAAU,gBAAA;AAAA,IACvB,UAAU,SAAA,CAAU;AAAA,GACrB,CAAA;AACH","file":"editor.js","sourcesContent":["import { fromBase64Url, toBase64Url } from '../geo/base64url'\nimport type { HydrogenEditorSecurityContext } from './hydrogen'\n\nconst GRANT_VERSION = 1 as const\nconst TOKEN_PREFIX = 'v1'\nconst SIGNATURE_DOMAIN = 'kotao:hydrogen-editor-preview-grant:v1'\nconst UUID = /^[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/u\nconst ENVIRONMENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u\nconst SHA_1 = /^[a-f0-9]{40}$/u\nconst SHA_256 = /^[a-f0-9]{64}$/u\nconst CHANNEL_NONCE = /^[A-Za-z0-9_-]{43}$/u\nconst BASE64_URL = /^[A-Za-z0-9_-]+$/u\nconst MAX_TTL_MS = 300_000\nconst MAX_TOKEN_CHARS = 4_096\nconst MIN_SECRET_BYTES = 32\nconst MAX_SECRET_BYTES = 4_096\nconst CLAIM_KEYS = [\n  'version',\n  'sessionId',\n  'siteId',\n  'environment',\n  'baseSha',\n  'manifestHash',\n  'workspacesOrigin',\n  'previewOrigin',\n  'channelNonce',\n  'issuedAt',\n  'expiresAt',\n] as const\nconst encoder = new TextEncoder()\nconst decoder = new TextDecoder('utf-8', { fatal: true, ignoreBOM: false })\n\nexport type HydrogenEditorPreviewGrantErrorCode =\n  | 'INVALID_BASE_SHA'\n  | 'INVALID_CHANNEL_NONCE'\n  | 'INVALID_ENVIRONMENT'\n  | 'INVALID_MANIFEST_HASH'\n  | 'INVALID_PREVIEW_ORIGIN'\n  | 'INVALID_SESSION_ID'\n  | 'INVALID_SITE_ID'\n  | 'INVALID_TIME'\n  | 'INVALID_TTL'\n  | 'INVALID_WORKSPACES_ORIGIN'\n  | 'WEAK_SECRET'\n\nexport class HydrogenEditorPreviewGrantError extends Error {\n  readonly code: HydrogenEditorPreviewGrantErrorCode\n\n  constructor(code: HydrogenEditorPreviewGrantErrorCode, message: string) {\n    super(message)\n    this.name = 'HydrogenEditorPreviewGrantError'\n    this.code = code\n  }\n}\n\nexport interface HydrogenEditorPreviewGrantBinding {\n  readonly sessionId: string\n  readonly siteId: string\n  readonly environment: string\n  readonly baseSha: string\n  readonly manifestHash: string\n  readonly workspacesOrigin: string\n  readonly previewOrigin: string\n  readonly channelNonce: string\n}\n\nexport interface HydrogenEditorPreviewGrantClaims extends HydrogenEditorPreviewGrantBinding {\n  readonly version: typeof GRANT_VERSION\n  readonly issuedAt: number\n  readonly expiresAt: number\n}\n\nexport interface SignedHydrogenEditorPreviewGrant {\n  readonly token: string\n  readonly claims: HydrogenEditorPreviewGrantClaims\n  readonly security: HydrogenEditorSecurityContext\n}\n\nexport interface SignHydrogenEditorPreviewGrantOptions {\n  readonly now: number\n  readonly ttlMs: number\n}\n\nexport interface VerifyHydrogenEditorPreviewGrantOptions {\n  readonly now: number\n}\n\nfunction bytes(value: Uint8Array): Uint8Array<ArrayBuffer> {\n  const copy = new Uint8Array(value.byteLength)\n  copy.set(value)\n  return copy\n}\n\nasync function hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign', 'verify'],\n  )\n}\n\nfunction signatureInput(payload: string): Uint8Array<ArrayBuffer> {\n  return bytes(encoder.encode(`${SIGNATURE_DOMAIN}\\n${payload}`))\n}\n\nfunction isHttpsOrigin(value: string): boolean {\n  try {\n    const url = new URL(value)\n    return (\n      url.protocol === 'https:' &&\n      url.username === '' &&\n      url.password === '' &&\n      url.origin === value &&\n      url.pathname === '/' &&\n      url.search === '' &&\n      url.hash === ''\n    )\n  } catch {\n    return false\n  }\n}\n\nfunction requireHttpsOrigin(\n  value: string,\n  code: 'INVALID_PREVIEW_ORIGIN' | 'INVALID_WORKSPACES_ORIGIN',\n  label: string,\n): void {\n  if (!isHttpsOrigin(value)) {\n    throw new HydrogenEditorPreviewGrantError(code, `${label} must be an exact HTTPS origin`)\n  }\n}\n\nfunction validSecret(secret: string): boolean {\n  const secretBytes = encoder.encode(secret).byteLength\n  return secretBytes >= MIN_SECRET_BYTES && secretBytes <= MAX_SECRET_BYTES\n}\n\nfunction validChannelNonce(value: string): boolean {\n  if (!CHANNEL_NONCE.test(value)) return false\n  try {\n    const nonce = fromBase64Url(value)\n    return nonce.byteLength === 32 && toBase64Url(nonce) === value\n  } catch {\n    return false\n  }\n}\n\nfunction validateBinding(binding: HydrogenEditorPreviewGrantBinding): void {\n  if (!UUID.test(binding.sessionId)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_SESSION_ID',\n      'sessionId must be a canonical lowercase UUID',\n    )\n  }\n  if (!UUID.test(binding.siteId)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_SITE_ID',\n      'siteId must be a canonical lowercase UUID',\n    )\n  }\n  if (!ENVIRONMENT.test(binding.environment)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_ENVIRONMENT',\n      'environment must be a bounded deployment identifier',\n    )\n  }\n  if (!SHA_1.test(binding.baseSha)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_BASE_SHA',\n      'baseSha must be a lowercase 40-character Git SHA',\n    )\n  }\n  if (!SHA_256.test(binding.manifestHash)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_MANIFEST_HASH',\n      'manifestHash must be a lowercase SHA-256 digest',\n    )\n  }\n  requireHttpsOrigin(\n    binding.workspacesOrigin,\n    'INVALID_WORKSPACES_ORIGIN',\n    'workspacesOrigin',\n  )\n  requireHttpsOrigin(binding.previewOrigin, 'INVALID_PREVIEW_ORIGIN', 'previewOrigin')\n  if (!validChannelNonce(binding.channelNonce)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_CHANNEL_NONCE',\n      'channelNonce must be a canonical base64url-encoded 256-bit value',\n    )\n  }\n}\n\nfunction validateSigningInput(\n  binding: HydrogenEditorPreviewGrantBinding,\n  secret: string,\n  options: SignHydrogenEditorPreviewGrantOptions,\n): void {\n  validateBinding(binding)\n  if (!validSecret(secret)) {\n    throw new HydrogenEditorPreviewGrantError(\n      'WEAK_SECRET',\n      'preview grant secret must contain 32..4096 UTF-8 bytes',\n    )\n  }\n  if (!Number.isSafeInteger(options.now) || options.now < 0) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_TIME',\n      'preview grant time must be a non-negative safe integer',\n    )\n  }\n  if (\n    !Number.isSafeInteger(options.ttlMs) ||\n    options.ttlMs <= 0 ||\n    options.ttlMs > MAX_TTL_MS ||\n    !Number.isSafeInteger(options.now + options.ttlMs)\n  ) {\n    throw new HydrogenEditorPreviewGrantError(\n      'INVALID_TTL',\n      'preview grant lifetime must be between 1 and 300000 milliseconds',\n    )\n  }\n}\n\nfunction isClaims(value: unknown): value is HydrogenEditorPreviewGrantClaims {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return false\n  const keys = Object.keys(value)\n  if (keys.length !== CLAIM_KEYS.length || !CLAIM_KEYS.every((key) => keys.includes(key))) {\n    return false\n  }\n  const claims = value as Partial<HydrogenEditorPreviewGrantClaims>\n  return (\n    claims.version === GRANT_VERSION &&\n    typeof claims.sessionId === 'string' &&\n    UUID.test(claims.sessionId) &&\n    typeof claims.siteId === 'string' &&\n    UUID.test(claims.siteId) &&\n    typeof claims.environment === 'string' &&\n    ENVIRONMENT.test(claims.environment) &&\n    typeof claims.baseSha === 'string' &&\n    SHA_1.test(claims.baseSha) &&\n    typeof claims.manifestHash === 'string' &&\n    SHA_256.test(claims.manifestHash) &&\n    typeof claims.workspacesOrigin === 'string' &&\n    isHttpsOrigin(claims.workspacesOrigin) &&\n    typeof claims.previewOrigin === 'string' &&\n    isHttpsOrigin(claims.previewOrigin) &&\n    typeof claims.channelNonce === 'string' &&\n    validChannelNonce(claims.channelNonce) &&\n    typeof claims.issuedAt === 'number' &&\n    Number.isSafeInteger(claims.issuedAt) &&\n    claims.issuedAt >= 0 &&\n    typeof claims.expiresAt === 'number' &&\n    Number.isSafeInteger(claims.expiresAt) &&\n    claims.expiresAt > claims.issuedAt &&\n    claims.expiresAt - claims.issuedAt <= MAX_TTL_MS\n  )\n}\n\nfunction matchesBinding(\n  claims: HydrogenEditorPreviewGrantClaims,\n  binding: HydrogenEditorPreviewGrantBinding,\n): boolean {\n  return (\n    claims.sessionId === binding.sessionId &&\n    claims.siteId === binding.siteId &&\n    claims.environment === binding.environment &&\n    claims.baseSha === binding.baseSha &&\n    claims.manifestHash === binding.manifestHash &&\n    claims.workspacesOrigin === binding.workspacesOrigin &&\n    claims.previewOrigin === binding.previewOrigin &&\n    claims.channelNonce === binding.channelNonce\n  )\n}\n\nexport function createHydrogenEditorChannelNonce(): string {\n  return toBase64Url(crypto.getRandomValues(new Uint8Array(32)))\n}\n\nexport async function signHydrogenEditorPreviewGrant(\n  binding: HydrogenEditorPreviewGrantBinding,\n  secret: string,\n  options: SignHydrogenEditorPreviewGrantOptions,\n): Promise<SignedHydrogenEditorPreviewGrant> {\n  validateSigningInput(binding, secret, options)\n  const claims: HydrogenEditorPreviewGrantClaims = {\n    version: GRANT_VERSION,\n    ...binding,\n    issuedAt: options.now,\n    expiresAt: options.now + options.ttlMs,\n  }\n  const payload = toBase64Url(encoder.encode(JSON.stringify(claims)))\n  const signature = await crypto.subtle.sign(\n    'HMAC',\n    await hmacKey(secret),\n    signatureInput(payload),\n  )\n  const token = `${TOKEN_PREFIX}.${payload}.${toBase64Url(new Uint8Array(signature))}`\n  return {\n    token,\n    claims,\n    security: {\n      sessionId: claims.sessionId,\n      baseSha: claims.baseSha,\n      manifestHash: claims.manifestHash,\n      channelNonce: claims.channelNonce,\n      previewToken: token,\n      expiresAt: claims.expiresAt,\n    },\n  }\n}\n\nexport async function verifyHydrogenEditorPreviewGrant(\n  token: string,\n  secret: string,\n  expected: HydrogenEditorPreviewGrantBinding,\n  options: VerifyHydrogenEditorPreviewGrantOptions,\n): Promise<HydrogenEditorPreviewGrantClaims | null> {\n  try {\n    if (\n      typeof token !== 'string' ||\n      token.length === 0 ||\n      token.length > MAX_TOKEN_CHARS ||\n      !validSecret(secret) ||\n      !Number.isSafeInteger(options.now) ||\n      options.now < 0\n    ) {\n      return null\n    }\n    validateBinding(expected)\n    const [prefix, payload, encodedSignature, extra] = token.split('.')\n    if (\n      prefix !== TOKEN_PREFIX ||\n      payload === undefined ||\n      !BASE64_URL.test(payload) ||\n      encodedSignature === undefined ||\n      encodedSignature.length !== 43 ||\n      !BASE64_URL.test(encodedSignature) ||\n      extra !== undefined\n    ) {\n      return null\n    }\n    const signature = fromBase64Url(encodedSignature)\n    if (\n      signature.byteLength !== 32 ||\n      toBase64Url(signature) !== encodedSignature\n    ) {\n      return null\n    }\n    const validSignature = await crypto.subtle.verify(\n      'HMAC',\n      await hmacKey(secret),\n      bytes(signature),\n      signatureInput(payload),\n    )\n    if (!validSignature) return null\n    const payloadBytes = fromBase64Url(payload)\n    if (toBase64Url(payloadBytes) !== payload) return null\n    const claims: unknown = JSON.parse(decoder.decode(payloadBytes))\n    if (!isClaims(claims) || !matchesBinding(claims, expected)) return null\n    if (claims.issuedAt > options.now || claims.expiresAt <= options.now) return null\n    return claims\n  } catch {\n    return null\n  }\n}\n","import {\n  createHydrogenEditorPreviewRuntime,\n  HydrogenEditorConfigurationError,\n  type CreateHydrogenEditorPreviewRuntimeArgs,\n  type HydrogenEditorPreviewRuntime,\n  type HydrogenEditorSecurityContext,\n} from './hydrogen'\nimport {\n  verifyHydrogenEditorPreviewGrant,\n  type HydrogenEditorPreviewGrantBinding,\n} from './preview-grant'\n\nconst PREVIEW_BOOTSTRAP_VERSION = 1 as const\n\nexport interface HydrogenEditorPreviewBootstrap {\n  readonly version: typeof PREVIEW_BOOTSTRAP_VERSION\n  readonly workspacesOrigin: string\n  readonly previewOrigin: string\n  readonly security: HydrogenEditorSecurityContext\n}\n\nexport interface CreateHydrogenEditorPreviewBootstrapArgs {\n  readonly token?: string | null\n  readonly secret: string\n  readonly expected: HydrogenEditorPreviewGrantBinding\n  readonly now: number\n}\n\nexport type CreateHydrogenEditorPreviewRuntimeFromBootstrapArgs = Omit<\n  CreateHydrogenEditorPreviewRuntimeArgs,\n  'adminOrigin' | 'security'\n> & {\n  readonly bootstrap: HydrogenEditorPreviewBootstrap\n  readonly currentOrigin: string\n}\n\nexport async function createHydrogenEditorPreviewBootstrap({\n  expected,\n  now,\n  secret,\n  token,\n}: CreateHydrogenEditorPreviewBootstrapArgs): Promise<HydrogenEditorPreviewBootstrap | null> {\n  if (token === undefined || token === null) return null\n  const claims = await verifyHydrogenEditorPreviewGrant(token, secret, expected, { now })\n  if (claims === null) return null\n\n  return {\n    version: PREVIEW_BOOTSTRAP_VERSION,\n    workspacesOrigin: claims.workspacesOrigin,\n    previewOrigin: claims.previewOrigin,\n    security: {\n      sessionId: claims.sessionId,\n      baseSha: claims.baseSha,\n      manifestHash: claims.manifestHash,\n      channelNonce: claims.channelNonce,\n      previewToken: token,\n      expiresAt: claims.expiresAt,\n    },\n  }\n}\n\nexport function createHydrogenEditorPreviewRuntimeFromBootstrap({\n  bootstrap,\n  currentOrigin,\n  ...runtime\n}: CreateHydrogenEditorPreviewRuntimeFromBootstrapArgs): HydrogenEditorPreviewRuntime {\n  if (\n    bootstrap.version !== PREVIEW_BOOTSTRAP_VERSION ||\n    currentOrigin !== bootstrap.previewOrigin\n  ) {\n    throw new HydrogenEditorConfigurationError(\n      'current preview origin does not match the authenticated editor grant',\n    )\n  }\n\n  return createHydrogenEditorPreviewRuntime({\n    ...runtime,\n    adminOrigin: bootstrap.workspacesOrigin,\n    security: bootstrap.security,\n  })\n}\n"]}

package/dist/events-react.d.ts

@@ -1,7 +1,7 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
 import { O as OfferTokenLocation, a as OfferTokenHistory } from './offer-token-C-nk_nj8.js';
-import { E as EventsClient, a as EventCheckoutSession, b as EventApprovalOfferResolution, P as PublicEvent, c as EventRegistrationSubmission } from './client-bsiNPHBi.js';
+import { E as EventsClient, a as EventCheckoutSession, b as EventApprovalOfferResolution, P as PublicEvent, c as EventRegistrationSubmission } from './client-CwOPPpFF.js';
 import './types-CSNXbGFW.js';
 import './http-types-CGh8WGHB.js';
 

package/dist/events-react.js

@@ -1,6 +1,6 @@
 import { StorefrontFormFields } from './chunk-VV653S52.js';
 import { offerTokenHrefMarker, consumeOfferTokenFragment } from './chunk-WG7HYVHJ.js';
-import { StorefrontEventsRequestError } from './chunk-7MTCGXIG.js';
+import { StorefrontEventsRequestError } from './chunk-R4N565GX.js';
 import './chunk-IIOHENCG.js';
 import { useState, useRef, useEffect, useCallback, useId, useMemo, useLayoutEffect } from 'react';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';

package/dist/events.d.ts

@@ -1,9 +1,9 @@
-import { C as CartHandler } from './createCartHandler-C4RrPwSG.js';
-export { C as ClaimEventApprovalOffer, d as CreateEventApprovalRequest, e as CreateEventCheckoutSession, f as CreateEventWaitlistEntry, b as EventApprovalOfferResolution, g as EventApprovalRequestReceipt, a as EventCheckoutSession, h as EventFormAnswer, i as EventFormSubmissionInput, j as EventRegistrationMode, k as EventRegistrationResult, c as EventRegistrationSubmission, l as EventWaitlistReceipt, E as EventsClient, P as PublicEvent, m as PublicEventForm, n as PublicEventOccurrence, o as PublicEventTicketType, p as PublicEventVenue, S as StorefrontEventsRequestError, q as createEventsClient } from './client-bsiNPHBi.js';
+import { C as CartHandler } from './createCartHandler-7DdKB-GF.js';
+export { C as ClaimEventApprovalOffer, d as CreateEventApprovalRequest, e as CreateEventCheckoutSession, f as CreateEventWaitlistEntry, b as EventApprovalOfferResolution, g as EventApprovalRequestReceipt, a as EventCheckoutSession, h as EventFormAnswer, i as EventFormSubmissionInput, j as EventRegistrationMode, k as EventRegistrationResult, c as EventRegistrationSubmission, l as EventWaitlistReceipt, E as EventsClient, P as PublicEvent, m as PublicEventForm, n as PublicEventOccurrence, o as PublicEventSummary, p as PublicEventTicketType, q as PublicEventVenue, S as StorefrontEventsRequestError, r as createEventsClient } from './client-CwOPPpFF.js';
 export { a as OfferTokenHistory, O as OfferTokenLocation, c as consumeOfferTokenFragment, o as offerTokenHrefMarker } from './offer-token-C-nk_nj8.js';
 import './client-D51WdvYR.js';
 import './http-types-CGh8WGHB.js';
-import './types-bcbQzx87.js';
+import './types-DZX8ScsJ.js';
 import './types-CSNXbGFW.js';
 
 declare class EventCartPreparationError extends Error {

package/dist/events.js

@@ -1,5 +1,5 @@
 export { EventCartPreparationError, eventCartToken, prepareEventCart } from './chunk-4OQYNUGM.js';
 export { consumeOfferTokenFragment, offerTokenHrefMarker } from './chunk-WG7HYVHJ.js';
-export { StorefrontEventsRequestError, createEventsClient } from './chunk-7MTCGXIG.js';
+export { StorefrontEventsRequestError, createEventsClient } from './chunk-R4N565GX.js';
 //# sourceMappingURL=events.js.map
 //# sourceMappingURL=events.js.map

package/dist/{fetch-M3Y-fQrW.d.ts → fetch-Bq_cc8_G.d.ts}

@@ -18,6 +18,11 @@ interface FetchThemeSettingsOptions {
     readonly fetch?: typeof fetch;
     /** Same-origin settings endpoint (default `/api/storefront/settings`). */
     readonly endpoint?: string;
+    /**
+     * Restrict the response to one rendered template plus the base commerce templates and layout
+     * groups needed for a complete page. Omit for the legacy/full editor document.
+     */
+    readonly templateHandle?: string;
     /**
      * Explicit local-preview escape hatch for server-side theme workers that call the Kotao API directly.
      * Production themes should keep the default same-origin path.