@nakedcreativity/cee-ms-node 1.0.122 → 2.0.0-beta.1

package/lib/index.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -11,30 +15,67 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Ceems = void 0;
+exports.Ceems = exports.wrapLinks = exports.LinkDrop = exports.renderState = exports.verifyPreviewToken = exports.signPreviewToken = void 0;
 const express_1 = __importDefault(require("express"));
 const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
-const underscore_1 = __importDefault(require("underscore")); // change to lodash
-const liquidjs_1 = require("liquidjs"); // use main package?
+const liquidjs_1 = require("liquidjs");
+const links_1 = require("./links");
 const cheerio = __importStar(require("cheerio"));
-const body_parser_1 = __importDefault(require("body-parser"));
 const tags_1 = require("./tags");
 const filters_1 = require("./filters");
-const aws_sdk_1 = require("aws-sdk");
 const interfaces_1 = require("./interfaces");
+const storage_1 = require("./storage");
+const state_1 = require("./state");
+const draft_1 = require("./draft");
+__exportStar(require("./interfaces"), exports);
+var preview_token_1 = require("./preview-token");
+Object.defineProperty(exports, "signPreviewToken", { enumerable: true, get: function () { return preview_token_1.signPreviewToken; } });
+Object.defineProperty(exports, "verifyPreviewToken", { enumerable: true, get: function () { return preview_token_1.verifyPreviewToken; } });
+var state_2 = require("./state");
+Object.defineProperty(exports, "renderState", { enumerable: true, get: function () { return state_2.renderState; } });
+var links_2 = require("./links");
+Object.defineProperty(exports, "LinkDrop", { enumerable: true, get: function () { return links_2.LinkDrop; } });
+Object.defineProperty(exports, "wrapLinks", { enumerable: true, get: function () { return links_2.wrapLinks; } });
+/**
+ * A Cee.ms site renderer: an Express app that renders published pages, and verified editor drafts, with the
+ * site's Liquid templates.
+ *
+ * One instance serves every request, so nothing about a request is stored on it. Each render carries its own
+ * `RenderState` (site, page, edit mode), passed to templates and tags as render-time globals.
+ */
 class Ceems {
+    app;
+    engine;
+    config;
+    /** The latest published `site.json`, refreshed on every public request. Never holds draft data. */
+    site;
+    storage;
+    drafts;
     constructor(config) {
         this.config = config;
         // set defaults
@@ -44,367 +85,269 @@ class Ceems {
         if (!this.config.viewsPath) {
             this.config.viewsPath = './views/';
         }
-        if (!this.config.liquidCache) {
+        if (this.config.liquidCache === undefined) {
             this.config.liquidCache = true;
         }
-        if (!this.config.tags) {
-            this.config.tags = [];
-        }
-        if (!this.config.filters) {
-            this.config.filters = [];
-        }
-        this.app = express_1.default();
+        this.config.tags = this.config.tags || [];
+        this.config.filters = this.config.filters || [];
+        this.storage =
+            this.config.cacheSource === interfaces_1.CacheSource.S3
+                ? (0, storage_1.s3Storage)(this.config.cacheBucket || '', this.config.cacheRegion || process.env.AWS_REGION)
+                : (0, storage_1.localStorage)(this.config.cacheFolder || './');
+        // One engine for the life of the process. Site data is passed per render, never through these options.
+        this.engine = new liquidjs_1.Liquid({
+            root: path_1.default.resolve(this.config.viewsPath),
+            extname: '.liquid',
+            cache: this.config.liquidCache,
+            jsTruthy: true,
+            globals: { ...(this.config.globals || {}) },
+        });
+        this.registerTags();
+        this.app = (0, express_1.default)();
         this.app.set('case sensitive routing', true);
-        // process config and set defaults
-        // // set up static file hosting
+        this.app.engine('liquid', this.engine.express());
+        this.app.set('views', this.config.viewsPath);
+        this.app.set('view engine', 'liquid');
         this.app.use(express_1.default.static(this.config.assets));
-        this.app.use(body_parser_1.default.json({
-            limit: this.config.parseLimit || '250kb',
-        }));
-        this.app.use(body_parser_1.default.urlencoded({
-            extended: false,
-            limit: this.config.parseLimit || '250kb',
-        }));
-        // pagination and initial path processing
-        // this.app.use((req: CeemsRequest, res: express.Response, next) => {
-        //     const regex = new RegExp('(.+)(/[0-9]{1,})$');
-        //     this.path = req._parsedUrl.pathname.substring(1);
-        //     if (regex.test(this.path)) {
-        //         // looks like a blog url
-        //         const matches = this.path.match(regex);
-        //         this.path = matches[1];
-        //         this.pagination = parseInt(matches[2].substring(1));
-        //     }
-        //     if (this.path === '') this.path = 'home';
-        //     next();
-        // });
-        // this.app.use((req, res, next) => {
-        //     if (this.config.response && this.config.response.headers) {
-        //         _.each(this.config.response.headers, (header) => {
-        //             res.header(header[0], header[1]);
-        //         });
-        //     }
-        //     next();
-        // });
-        // load site map
+        this.app.use(express_1.default.json({ limit: this.config.parseLimit || '250kb' }));
+        this.app.use(express_1.default.urlencoded({ extended: false, limit: this.config.parseLimit || '250kb' }));
+        // Drafts are registered before the published-site middleware: they never read or replace `this.site`.
+        this.drafts = (0, draft_1.draftServiceFor)(this.config.preview);
+        this.app.get('/draft/:pageId', (req, res) => this.handleDraft(req, res));
+        // load the published site map for every page request
         this.app.use((req, res, next) => {
             this.loadSite().then((site) => {
+                // each request renders against the snapshot it started with
+                req.ceemsSite = site;
                 next();
-            });
+            }, (error) => next(error));
         });
         if (!this.config.customHandler) {
             this.app.get(/(.*)/, async (req, res) => {
-                let page = await this.load(req, res, true);
-                this.render(page, req, res);
+                try {
+                    const page = await this.load(req, res, true);
+                    await this.render(page, req, res);
+                }
+                catch (error) {
+                    if (!(0, state_1.isNotFound)(error))
+                        console.error('[ceems] load failed', error);
+                    if (!res.headersSent)
+                        res.status(404).send('Not found');
+                }
             });
         }
-        // init routes
-        this.app.post(/draft\/(.*)/, async (req, res) => {
-            await this.postDraft(req, res);
-        });
     }
-    loadSite(draft) {
-        let sitePromise;
-        if (!draft) {
-            // do we use local files or S3 as source?
-            if (this.config.cacheSource == interfaces_1.CacheSource.S3) {
-                this.s3 = new aws_sdk_1.S3();
-                sitePromise = this.s3
-                    .getObject({
-                    Bucket: this.config.cacheBucket,
-                    Key: 'pages/site.json'
-                })
-                    .promise()
-                    .then((result) => {
-                    return result.Body.toString('utf-8');
-                });
-            }
-            if (this.config.cacheSource == interfaces_1.CacheSource.Local) {
-                sitePromise = fs_1.default.promises.readFile(this.config.cacheFolder + 'pages/site.json', 'utf-8');
-            }
+    registerTags() {
+        (0, tags_1.registerRegionTag)(this.engine);
+        (0, tags_1.registerModuleTag)(this.engine);
+        (0, tags_1.registerNavigationTag)(this.engine);
+        (0, tags_1.registerBlogTag)(this.engine);
+        (0, tags_1.registerPageTag)(this.engine, this);
+        (0, tags_1.registerImageTag)(this.engine);
+        (0, tags_1.registerImageUrlTag)(this.engine);
+        (0, tags_1.registerBreadcrumbTag)(this.engine);
+        (0, filters_1.registerActiveFilter)(this.engine);
+        (0, filters_1.registerSlugifyFilter)(this.engine);
+        // custom tags and filters
+        for (const tag of this.config.tags || []) {
+            this.engine.registerTag(tag.name, tag.register(this));
         }
-        else {
-            sitePromise = new Promise((resolve, reject) => {
-                resolve(draft);
-            });
+        for (const filter of this.config.filters || []) {
+            this.engine.registerFilter(filter.name, filter.filter);
         }
-        return sitePromise.then((site) => {
-            this.site = JSON.parse(site);
-            this.engine = new liquidjs_1.Liquid({
-                root: path_1.default.resolve(this.config.viewsPath),
-                extname: '.liquid',
-                cache: this.config.liquidCache,
-                jsTruthy: true,
-                globals: Object.assign({}, this.site)
-            });
-        });
     }
+    /** Loads the published `site.json`, remembers it as `this.site`, and returns it. */
+    async loadSite() {
+        const site = JSON.parse(await this.storage.read('pages/site.json'));
+        this.site = site;
+        return site;
+    }
+    /**
+     * Loads the published page for the request's path (or the `404` page), ready for `render`. With
+     * `loadPage` false, returns `page` as given (for custom routes that build their own page object).
+     */
     async load(req, res, loadPage, page) {
-        // to-do: pass in full liquidjs config
-        // register liquid engine
-        this.app.engine('liquid', this.engine.express());
-        this.app.set('views', this.config.viewsPath);
-        this.app.set('view engine', 'liquid');
+        const site = req.ceemsSite || this.site || (await this.loadSite());
         if (loadPage) {
-            let path = this.getPath(req);
-            console.log('there are ', this.site.pages.length, 'pages');
-            if (this.site.pages[path]) {
-                page = this.site.pages[path];
-                if (this.config.cacheSource == interfaces_1.CacheSource.Local) {
-                    page = this.loadLocalFile(this.config.cacheFolder + 'pages/' + page._id + '.json');
-                }
-                if (this.config.cacheSource == interfaces_1.CacheSource.S3) {
-                    page = await this.loadS3File('pages/' + page._id + '.json');
-                }
-                page.fullpath = this.site.pages[path].url == 'home' ? '' : this.site.pages[path].url;
+            const { path, pagination } = this.parsePath(req);
+            const entry = site.pages[path];
+            if (entry) {
+                page = await this.loadPageFile(entry._id);
+                page.fullpath = entry.url == 'home' ? '' : entry.url;
                 page.path = page.fullpath.split('/');
-                if (this.pagination)
-                    page.pagination = this.pagination;
+                if (pagination)
+                    page.pagination = pagination;
             }
-            // 404
             else {
-                console.log('404 for ', path);
                 res.status(404);
-                // .send('Sorry, this page does not exist');
-                let notFound = this.site.pages['404'];
-                if (this.config.cacheSource == interfaces_1.CacheSource.Local) {
-                    page = this.loadLocalFile(this.config.cacheFolder + 'pages/' + notFound._id + '.json');
-                }
-                if (this.config.cacheSource == interfaces_1.CacheSource.S3) {
-                    page = await this.loadS3File('pages/' + notFound._id + '.json');
+                const notFound = site.pages['404'];
+                if (notFound) {
+                    page = await this.loadPageFile(notFound._id);
                 }
             }
         }
-        tags_1.registerRegionTag(this.engine);
-        tags_1.registerModuleTag(this.engine);
-        tags_1.registerNavigationTag(this.engine, this.site, page);
-        tags_1.registerBlogTag(this.engine, this.site, page);
-        tags_1.registerPageTag(this.engine, this, this.site);
-        tags_1.registerImageTag(this.engine);
-        tags_1.registerImageUrlTag(this.engine);
-        filters_1.registerActiveFilter(this.engine);
-        filters_1.registerSlugifyFilter(this.engine);
-        tags_1.registerBreadcrumbTag(this.engine, this.site, page);
-        // register each of our custom tags and filters
-        this.config.tags.forEach((tag) => {
-            this.engine.registerTag(tag.name, tag.register(this));
-        });
-        this.config.filters.forEach((tag) => {
-            this.engine.registerFilter(tag.name, tag.filter);
-        });
-        return page;
+        if (!page) {
+            throw new state_1.NotFoundError('No page');
+        }
+        return (0, state_1.attachState)(page, { site, page, edit: false });
     }
+    /** Reads `pages/<id>.json`. Stored links read as their address in templates (see `LinkDrop`). */
+    async loadPageFile(id) {
+        return (0, links_1.wrapLinks)(JSON.parse(await this.storage.read('pages/' + id + '.json')));
+    }
+    /** Synchronous local read, kept for custom tags. `filename` is a full path. */
     loadLocalFile(filename) {
-        return JSON.parse(fs_1.default.readFileSync(filename, 'utf8'));
+        return (0, links_1.wrapLinks)(JSON.parse(fs_1.default.readFileSync(filename, 'utf8')));
     }
-    loadS3File(filename) {
-        return this.s3
-            .getObject({
-            Bucket: this.config.cacheBucket,
-            Key: filename,
-        })
-            .promise()
-            .then((result) => {
-            return JSON.parse(result.Body.toString('utf-8'));
-        });
+    /** Reads and parses a published JSON file, kept for custom tags. `filename` is relative to the bucket. */
+    async loadS3File(filename) {
+        return (0, links_1.wrapLinks)(JSON.parse(await this.storage.read(filename)));
     }
-    getPath(req) {
+    /** The site path for a request (`home` for `/`), and the blog page number if the URL ends in one. */
+    parsePath(req) {
         if (req.overriddenPath) {
-            return req.overriddenPath;
+            return { path: req.overriddenPath, pagination: null };
         }
         const regex = new RegExp('(.+)(/[0-9]{1,})$');
-        let path = req._parsedUrl.pathname.substring(1);
-        // fix the 1000 bug
-        this.pagination = null;
-        if (regex.test(path)) {
+        let path = (req._parsedUrl?.pathname || req.path).substring(1);
+        let pagination = null;
+        const matches = path.match(regex);
+        if (matches) {
             // looks like a blog url
-            const matches = path.match(regex);
             path = matches[1];
-            this.pagination = parseInt(matches[2].substring(1));
+            pagination = parseInt(matches[2].substring(1));
         }
         if (path === '')
             path = 'home';
-        return path;
+        return { path, pagination };
+    }
+    /** @deprecated Use `parsePath`. */
+    getPath(req) {
+        return this.parsePath(req).path;
+    }
+    /** The Liquid globals for one render: the site data, static globals, and the render state. */
+    globalsFor(state) {
+        return { ...state.site, ...this.engine.options.globals, [state_1.RENDER_STATE]: state };
+    }
+    async renderModule(module, state) {
+        const scope = {
+            ...module.content,
+            attributes: { _id: module._id, region: module.region, order: module.order },
+            page: state.page,
+            site: state.site.site,
+            pages: state.site.pages,
+            navigation: state.site.navigation,
+        };
+        let html = await this.engine.renderFile(module.type, scope, { globals: this.globalsFor(state) });
+        if (state.edit) {
+            const $ = cheerio.load(html, null, false);
+            $.root().children().attr('data-module-type', module.type);
+            if (module._id) {
+                $.root().children().attr('data-module-id', String(module._id));
+            }
+            html = $.html();
+        }
+        return html;
+    }
+    async renderRegion(key, modules, state) {
+        const html = (await Promise.all(modules.map((module) => this.renderModule(module, state)))).join('');
+        // In drafts, comments mark each region so the editor can replace one without reloading the page.
+        return state.edit ? `<!--ceems:region:${key}-->${html}<!--/ceems:region:${key}-->` : html;
     }
-    render(page, req, res, send = true) {
+    /** Renders a full page with its layout template. */
+    async renderPage(state) {
+        const page = state.page;
         if (this.config.whitelistedCookies) {
             page.cookies = {};
-            underscore_1.default.each(this.config.whitelistedCookies, (cookieName) => {
-                //   if (req.cookies && req.cookies[cookieName]) {
-                //     page.cookies[cookieName] = req.cookies[cookieName];
-                //   }
-            });
         }
-        let renderedRegions = {};
-        let renderedModules = {};
-        let jobs = [];
-        // load page data
-        underscore_1.default.each(page.regions, (region, key) => {
-            renderedRegions[key] = [];
-            underscore_1.default.each(region.modules, (module, index) => {
-                let moduleTemplate = fs_1.default.readFileSync(this.config.viewsPath + module.type + '.liquid', 'utf8');
-                let moduleContent = Object.assign(Object.assign({}, module.content), { attributes: {
-                        _id: module._id,
-                        region: module.region,
-                        order: module.order
-                    } });
-                jobs.push(new Promise((resolve, reject) => {
-                    // to-do: we need to give module access to entire page object, and therefore the 'sitemap' and other site information
-                    var scope = Object.assign({}, moduleContent);
-                    scope.page = page;
-                    //console.log('inside module render', scope.page)
-                    if (this.site) {
-                        scope.site = this.site.site;
-                        scope.pages = this.site.pages;
-                        scope.navigation = this.site.navigation;
-                    }
-                    this.engine
-                        .parseAndRender(moduleTemplate, scope)
-                        .then((html) => {
-                        if (req.query.edit != null) {
-                            var $ = cheerio.load(html);
-                            $.root().children().attr('data-module-type', module.type);
-                            if (module._id) {
-                                $.root().children().attr('data-module-id', module._id);
-                            }
-                            html = $.html();
-                        }
-                        //if (region.containers) {
-                        //renderedModules[module._id] = html;
-                        //} else {
-                        renderedRegions[key][index] = html;
-                        //}
-                        return resolve(true);
-                    })
-                        .catch((error) => {
-                        reject(error);
-                    });
-                }));
-            }, this);
-        }, this);
-        // loop through each module not in a region and generate HTML
-        underscore_1.default.each(page.modules, (module, key) => {
-            let moduleTemplate = fs_1.default.readFileSync(this.config.viewsPath + module.type + '.liquid', 'utf8');
-            let moduleContent = Object.assign(Object.assign({}, module.content), { attributes: {
-                    _id: module._id,
-                    region: module.region,
-                    order: module.order
-                } });
-            jobs.push(new Promise((resolve, reject) => {
-                // we need to give module access to entire page object, and therefore the 'sitemap' and other site information
-                var scope = Object.assign({}, moduleContent);
-                // DO WE NEED TO DO THIS?
-                scope.page = page;
-                scope.site = this.site.site;
-                scope.pages = this.site.pages;
-                this.engine
-                    .parseAndRender(moduleTemplate, scope)
-                    .then(function (html) {
-                    //console.log(html)
-                    if (req.query.edit != null) {
-                        var $ = cheerio.load(html);
-                        $.root().children().attr('data-module-type', module.type);
-                        $.root().children().attr('data-module-id', module._id);
-                        //console.log($.root().children())
-                        html = $.html();
-                    }
-                    page.modules[key] = html;
-                    return resolve(true);
-                })
-                    .catch((error) => {
-                    reject(error);
-                });
-            }));
-        }, this);
-        return Promise.all(jobs)
-            .then((html) => {
-            let finalPage = {
-                regions: {},
-                navigation: {},
-                page: page,
-            };
-            underscore_1.default.each(renderedRegions, (region, key) => {
-                finalPage.regions[key] = '';
-                underscore_1.default.each(region, function (html) {
-                    // items in rendered columns to place
-                    if (Object.keys(renderedModules).length > 0) {
-                        underscore_1.default.each(renderedModules, (moduleHtml, key) => {
-                            html = html.replace(new RegExp('{%\\s' + key + '\\s%}', 'g'), moduleHtml);
-                        });
-                    }
-                    finalPage.regions[key] += html;
-                });
-            });
-            let scope = finalPage;
-            if (this.site && this.site.navigation)
-                scope.navigation = this.site.navigation;
-            //console.log('final page render')
-            //console.log(scope)
-            return new Promise((resolve, reject) => {
-                res.render(page.template, scope, (err, html) => {
-                    if (err) {
-                        reject(err);
-                    }
-                    resolve(html);
-                });
-            });
-        }).then((html) => {
-            if (req.query.edit != null) {
-                var $ = cheerio.load(html);
-                $('body').addClass('cee-ms-edit');
-                $('body').append('<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>');
-                $('body').append('<script type="text/javascript" src="https://cdn.cee.ms/site.js"></script>');
-                html = $.html();
-            }
-            // res.header('X-FRAME-OPTIONS', 'allow-from http://localhost:3002');
-            if (send) {
-                res.send(html);
-            }
-            else {
-                return html;
-            }
-        })
-            .catch((error) => {
-            res.status(500).send(error.message);
-            return;
-        });
+        const regions = {};
+        await Promise.all(Object.entries(page.regions || {}).map(async ([key, region]) => {
+            regions[key] = await this.renderRegion(key, region.modules || [], state);
+        }));
+        // modules not in a region, output with `{% module name %}`
+        const modules = {};
+        await Promise.all(Object.entries(page.modules || {}).map(async ([key, module]) => {
+            modules[key] = typeof module === 'string' ? module : await this.renderModule(module, state);
+            // legacy templates may read the rendered HTML from the page itself
+            page.modules[key] = modules[key];
+        }));
+        const scope = { regions, modules, navigation: state.site.navigation || {}, page };
+        let html = await this.engine.renderFile(page.template, scope, { globals: this.globalsFor(state) });
+        if (state.edit && this.drafts) {
+            html = this.drafts.injectBridge(html);
+        }
+        return html;
     }
-    async postDraft(req, res) {
-        // validate authorisation JWT here
-        let page;
-        req.query.edit = true;
-        if (typeof req.body.page === 'string') {
-            page = JSON.parse(decodeURIComponent(req.body.page));
+    /**
+     * Renders a page from `load`. Sends the HTML, or returns it when `send` is false. On failure, sends a
+     * generic error (404 for a blog page past the last article) and resolves to undefined.
+     */
+    async render(page, req, res, send = true) {
+        const state = (0, state_1.stateOf)(page) || { site: this.site || (await this.loadSite()), page, edit: false };
+        try {
+            const html = await this.renderPage(state);
+            if (!send)
+                return html;
+            res.send(html);
         }
-        else {
-            page = req.body.page;
+        catch (error) {
+            const status = (0, state_1.isNotFound)(error) ? 404 : 500;
+            if (status === 500)
+                console.error('[ceems] render failed', error);
+            if (!res.headersSent)
+                res.status(status).send(status === 404 ? 'Not found' : 'Something went wrong');
         }
-        // if this was sent by the iframe, handle it differently
-        if (req.query.iframe != null) {
-            this.site = JSON.parse(decodeURIComponent(req.body.site));
+    }
+    /**
+     * `GET /draft/:pageId?token=…[&module=<id>|&region=<key>]`: a verified editor draft, as a full page, one
+     * module, or one region. The token is checked here, then used to fetch the draft from the Cee.ms API.
+     */
+    async handleDraft(req, res) {
+        if (!this.drafts) {
+            res.status(404).send('Not found');
+            return;
         }
-        else {
-            this.site = req.body.site;
+        const draft = await this.drafts.fetch(req.params.pageId, String(req.query.token || ''));
+        if (!draft.ok) {
+            this.drafts.setHeaders(res);
+            res.status(draft.status).send(draft.status === 401 ? 'Unauthorized' : 'Not available');
+            return;
         }
-        let path;
-        // find current page fullpath from site pages using id
-        Object.keys(this.site.pages).forEach(fullpath => {
-            if (this.site.pages[fullpath]._id == page._id) {
-                path = fullpath;
+        const { page, site } = draft;
+        // find the page's full path from the site map
+        const entry = Object.values(site.pages || {}).find((p) => p._id == page._id);
+        page.fullpath = entry ? (entry.url == 'home' ? '' : entry.url) : page.handle;
+        page.path = page.fullpath.split('/');
+        const state = { site, page, edit: true };
+        try {
+            let html;
+            if (typeof req.query.module === 'string') {
+                const module = Object.values(page.regions || {})
+                    .flatMap((region) => region.modules || [])
+                    .find((m) => String(m._id) === req.query.module);
+                if (!module)
+                    throw new state_1.NotFoundError('No such module');
+                html = await this.renderModule(module, state);
             }
-        });
-        if (path && this.site.pages[path]) {
-            page.fullpath = this.site.pages[path].url == 'home' ? '' : this.site.pages[path].url;
+            else if (typeof req.query.region === 'string') {
+                const region = page.regions?.[req.query.region];
+                if (!region)
+                    throw new state_1.NotFoundError('No such region');
+                html = await this.renderRegion(req.query.region, region.modules || [], state);
+            }
+            else {
+                html = await this.renderPage(state);
+            }
+            this.drafts.setHeaders(res);
+            res.type('html').send(html);
         }
-        else {
-            page.fullpath = page.handle;
+        catch (error) {
+            const status = (0, state_1.isNotFound)(error) ? 404 : 500;
+            if (status === 500)
+                console.error('[ceems] draft render failed', error);
+            this.drafts.setHeaders(res);
+            res.status(status).send(status === 404 ? 'Not found' : 'Something went wrong');
         }
-        page.path = page.fullpath.split('/');
-        await this.load(req, res);
-        // re-register these tags with the page object
-        tags_1.registerNavigationTag(this.engine, this.site, page);
-        tags_1.registerBlogTag(this.engine, this.site, page);
-        this.render(page, req, res);
     }
 }
 exports.Ceems = Ceems;