@open_mind/editor-sdk 0.2.0

package/LICENSE.md

@@ -0,0 +1,42 @@
+# Fieldmatch Customer SDK License 1.0
+
+Copyright (c) 2026 Fieldmatch. All rights reserved.
+
+This software is source-available, not open-source. Its public availability does not grant any rights except those expressly stated below.
+
+## 1. Limited customer license
+
+Subject to these terms, Fieldmatch grants an authorized Fieldmatch customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and use an unmodified copy of this SDK solely to connect websites owned or controlled by that customer to Fieldmatch-approved services during an active commercial relationship with Fieldmatch.
+
+The customer may make copies strictly necessary for installation, deployment, testing, and backup, and may allow its employees and contractors to use those copies solely on its behalf and subject to these terms.
+
+## 2. Restrictions
+
+Except where applicable law does not permit the restriction, you may not:
+
+- modify, adapt, translate, or create derivative works of the SDK;
+- copy the SDK except as expressly permitted above;
+- distribute, publish, sublicense, rent, lease, sell, transfer, or otherwise provide the SDK to any third party;
+- reverse engineer, decompile, disassemble, or attempt to derive non-public implementation details from the SDK;
+- use the SDK or its source code to build, train, improve, benchmark, or support a competing product or service;
+- bypass or interfere with authentication, authorization, usage controls, or other technical safeguards; or
+- remove or alter copyright, license, attribution, or proprietary notices.
+
+These restrictions do not prevent a customer from changing its own website, integration code, configuration, generated `AGENTS.md` instructions, or generated `FIELDMATCH_EDITOR.md` guide.
+
+## 3. Ownership and services
+
+Fieldmatch and its licensors retain all right, title, and interest in the SDK. No trademark rights or implied licenses are granted. Access to Fieldmatch-hosted services, accounts, content, and data is governed separately and requires valid authorization.
+
+## 4. Termination
+
+This license terminates automatically if you breach these terms or cease to be an authorized Fieldmatch customer. On termination, you must stop using and delete all copies of the SDK, except where retention is required by law.
+
+## 5. Disclaimer and limitation of liability
+
+THE SDK IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, TO THE MAXIMUM EXTENT PERMITTED BY LAW. TO THE MAXIMUM EXTENT PERMITTED BY LAW, FIELDMATCH WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS, REVENUE, OR BUSINESS. FIELDMATCH'S TOTAL LIABILITY ARISING FROM THE SDK WILL NOT EXCEED THE AMOUNT PAID BY THE CUSTOMER FOR THE SDK DURING THE SIX MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.
+
+## 6. Governing law
+
+These terms are governed by the laws of the State of Israel, without regard to conflict-of-law rules. The competent courts in Tel Aviv-Jaffa, Israel have exclusive jurisdiction. Signed commercial terms between Fieldmatch and a customer prevail to the extent they expressly conflict with this license.
+

package/README.md

@@ -0,0 +1,105 @@
+# @open_mind/editor-sdk
+
+Publicly downloadable React and Next.js integration SDK for the Fieldmatch visual editor. The package contains only the website-side adapter; access to customer sites and content remains protected by the Fieldmatch CMS authentication and authorization layer.
+
+## Install
+
+```bash
+npm install @open_mind/editor-sdk
+```
+
+No npm token or custom registry is required. Installation also:
+
+- installs the repository skill at `.agents/skills/fieldmatch-editable-components`;
+- creates `FIELDMATCH_EDITOR.md`, the integration registry and checklist; and
+- adds a managed Fieldmatch section to the root `AGENTS.md` without replacing existing instructions.
+
+Restart Codex or another compatible coding agent after the first installation so it reloads `AGENTS.md`. If lifecycle scripts are disabled, run:
+
+```bash
+npx fieldmatch-editor-sdk-init
+```
+
+Set `FIELDMATCH_SKIP_AGENT_SETUP=1` to opt out of generating agent files.
+
+## Fetch content on the server
+
+```tsx
+import { getSiteContent } from '@open_mind/editor-sdk/server'
+
+const response = await getSiteContent({
+  siteId: process.env.NEXT_PUBLIC_FIELDMATCH_SITE_ID!,
+  page: 'home',
+  apiUrl: process.env.FIELDMATCH_CMS_URL,
+})
+
+const content = response.fields
+```
+
+Normal traffic should use published content. Draft mode requires a server-only preview token; never expose it through a `NEXT_PUBLIC_` variable.
+
+## Add the provider
+
+```tsx
+import { EditorProvider } from '@open_mind/editor-sdk/client'
+
+<EditorProvider
+  siteId={process.env.NEXT_PUBLIC_FIELDMATCH_SITE_ID!}
+  page="home"
+  editorOrigin={process.env.NEXT_PUBLIC_FIELDMATCH_EDITOR_ORIGIN!}
+  initialContent={content}
+>
+  {children}
+</EditorProvider>
+```
+
+Use one provider around the editable page area.
+
+## Mark content as editable
+
+```tsx
+import {
+  EditableImage,
+  EditableLink,
+  EditableText,
+  EditableVideo,
+} from '@open_mind/editor-sdk/client'
+
+<EditableText id="home.hero.title" page="home" label="Hero title">
+  <h1>Your local fallback title</h1>
+</EditableText>
+
+<EditableText id="home.hero.description" page="home" label="Hero description" type="textarea">
+  <p>Your local fallback description.</p>
+</EditableText>
+
+<EditableLink id="home.hero.cta.href" page="home" label="CTA destination" href="/contact">
+  Contact us
+</EditableLink>
+
+<EditableImage
+  id="home.hero.image"
+  page="home"
+  label="Hero image"
+  src="/hero.jpg"
+  alt="Product on a neutral background"
+/>
+
+<EditableVideo
+  id="home.hero.video"
+  page="home"
+  label="Hero video"
+  src="https://cdn.example.com/hero.mp4"
+  controls
+/>
+```
+
+Field IDs are persistent content keys. Use stable names such as `page.section.element`; renaming an ID requires a content migration. Every field should retain a useful local fallback.
+
+Image fields support the Fieldmatch media library. Video fields currently accept a direct HTTP(S) URL; this version does not upload video files.
+
+See the generated `FIELDMATCH_EDITOR.md` and use the `$fieldmatch-editable-components` skill for the full integration workflow, CSP, preview, and verification guidance.
+
+## License
+
+The package is publicly downloadable but is not open-source. Use is limited to authorized Fieldmatch customers and unmodified customer integrations. See [LICENSE.md](./LICENSE.md).

package/dist/chunk-CAWU5SFJ.js

@@ -0,0 +1,20 @@
+// src/server.ts
+async function getSiteContent(options) {
+  const mode = options.mode ?? "published";
+  if (mode === "draft" && !options.previewToken) throw new Error("A preview token is required for draft content.");
+  const apiUrl = options.apiUrl ?? process.env.CMS_INTERNAL_URL ?? process.env.NEXT_PUBLIC_CMS_URL;
+  if (!apiUrl) throw new Error("CMS API URL is not configured.");
+  const request = options.fetcher ?? fetch;
+  const response = await request(`${apiUrl}/api/v1/sites/${encodeURIComponent(options.siteId)}/pages/${encodeURIComponent(options.page)}/content?mode=${mode}`, {
+    headers: options.previewToken ? { authorization: `Bearer ${options.previewToken}` } : void 0,
+    cache: mode === "draft" ? "no-store" : "force-cache",
+    ...mode === "published" ? { next: { tags: [`agency-site:${options.siteId}`, `agency-page:${options.siteId}:${options.page}`], revalidate: 300 } } : {}
+  });
+  if (!response.ok) throw new Error(`Content request failed (${response.status}).`);
+  return response.json();
+}
+
+export {
+  getSiteContent
+};
+//# sourceMappingURL=chunk-CAWU5SFJ.js.map

package/dist/chunk-CAWU5SFJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { ContentResponse } from './protocol'\n\nexport interface GetSiteContentOptions {\n  siteId: string\n  page: string\n  mode?: 'published' | 'draft'\n  apiUrl?: string\n  previewToken?: string\n  fetcher?: typeof fetch\n}\n\nexport async function getSiteContent(options: GetSiteContentOptions): Promise<ContentResponse> {\n  const mode = options.mode ?? 'published'\n  if (mode === 'draft' && !options.previewToken) throw new Error('A preview token is required for draft content.')\n  const apiUrl = options.apiUrl ?? process.env.CMS_INTERNAL_URL ?? process.env.NEXT_PUBLIC_CMS_URL\n  if (!apiUrl) throw new Error('CMS API URL is not configured.')\n  const request = options.fetcher ?? fetch\n  const response = await request(`${apiUrl}/api/v1/sites/${encodeURIComponent(options.siteId)}/pages/${encodeURIComponent(options.page)}/content?mode=${mode}`, {\n    headers: options.previewToken ? { authorization: `Bearer ${options.previewToken}` } : undefined,\n    cache: mode === 'draft' ? 'no-store' : 'force-cache',\n    ...(mode === 'published' ? { next: { tags: [`agency-site:${options.siteId}`, `agency-page:${options.siteId}:${options.page}`], revalidate: 300 } } : {}),\n  } as RequestInit)\n  if (!response.ok) throw new Error(`Content request failed (${response.status}).`)\n  return response.json() as Promise<ContentResponse>\n}\n"],"mappings":";AAWA,eAAsB,eAAe,SAA0D;AAC7F,QAAM,OAAO,QAAQ,QAAQ;AAC7B,MAAI,SAAS,WAAW,CAAC,QAAQ,aAAc,OAAM,IAAI,MAAM,gDAAgD;AAC/G,QAAM,SAAS,QAAQ,UAAU,QAAQ,IAAI,oBAAoB,QAAQ,IAAI;AAC7E,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,gCAAgC;AAC7D,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,MAAM,QAAQ,GAAG,MAAM,iBAAiB,mBAAmB,QAAQ,MAAM,CAAC,UAAU,mBAAmB,QAAQ,IAAI,CAAC,iBAAiB,IAAI,IAAI;AAAA,IAC5J,SAAS,QAAQ,eAAe,EAAE,eAAe,UAAU,QAAQ,YAAY,GAAG,IAAI;AAAA,IACtF,OAAO,SAAS,UAAU,aAAa;AAAA,IACvC,GAAI,SAAS,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,QAAQ,MAAM,IAAI,eAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI,EAAE,GAAG,YAAY,IAAI,EAAE,IAAI,CAAC;AAAA,EACxJ,CAAgB;AAChB,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,2BAA2B,SAAS,MAAM,IAAI;AAChF,SAAO,SAAS,KAAK;AACvB;","names":[]}

package/dist/chunk-FVPTAW36.js

@@ -0,0 +1,10 @@
+// src/security.ts
+function editorFrameAncestors(editorOrigin) {
+  const origin = new URL(editorOrigin).origin;
+  return `frame-ancestors 'self' ${origin}`;
+}
+
+export {
+  editorFrameAncestors
+};
+//# sourceMappingURL=chunk-FVPTAW36.js.map

package/dist/chunk-FVPTAW36.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/security.ts"],"sourcesContent":["export function editorFrameAncestors(editorOrigin: string): string {\n  const origin = new URL(editorOrigin).origin\n  return `frame-ancestors 'self' ${origin}`\n}\n"],"mappings":";AAAO,SAAS,qBAAqB,cAA8B;AACjE,QAAM,SAAS,IAAI,IAAI,YAAY,EAAE;AACrC,SAAO,0BAA0B,MAAM;AACzC;","names":[]}

package/dist/chunk-NDL3YEJY.js

@@ -0,0 +1,34 @@
+// src/protocol.ts
+import { z } from "zod";
+var fieldTypes = ["text", "textarea", "richText", "image", "video", "link", "buttonLabel"];
+var fieldSchema = z.object({
+  id: z.string().min(3).max(160).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/i),
+  page: z.string().min(1).max(80),
+  label: z.string().min(1).max(120),
+  type: z.enum(fieldTypes),
+  required: z.boolean().optional(),
+  maxLength: z.number().int().positive().max(2e4).optional(),
+  initialValue: z.unknown().optional()
+});
+var protocolVersion = 1;
+var envelope = z.object({ version: z.literal(protocolVersion), nonce: z.string().optional() });
+var editorMessageSchema = z.discriminatedUnion("type", [
+  envelope.extend({ type: z.literal("EDITOR_READY"), payload: z.object({ siteId: z.string(), page: z.string() }) }),
+  envelope.extend({ type: z.literal("EDITOR_INIT"), payload: z.object({ siteId: z.string(), page: z.string(), permissions: z.array(z.enum(["preview", "edit"])), content: z.record(z.string(), z.unknown()) }) }),
+  envelope.extend({ type: z.literal("REGISTER_FIELDS"), payload: z.object({ siteId: z.string(), page: z.string(), fields: z.array(fieldSchema) }) }),
+  envelope.extend({ type: z.literal("FIELD_SELECTED"), payload: z.object({ siteId: z.string(), page: z.string(), fieldId: z.string(), fieldType: z.enum(fieldTypes) }) }),
+  envelope.extend({ type: z.literal("FIELD_HOVERED"), payload: z.object({ fieldId: z.string().nullable() }) }),
+  envelope.extend({ type: z.literal("PREVIEW_UPDATE"), payload: z.object({ fieldId: z.string(), value: z.unknown() }) }),
+  envelope.extend({ type: z.literal("CONTENT_SAVED"), payload: z.object({ fieldId: z.string(), savedAt: z.string() }) }),
+  envelope.extend({ type: z.literal("NAVIGATE_PAGE"), payload: z.object({ page: z.string(), href: z.string() }) })
+]);
+function parseEditorMessage(value) {
+  const parsed = editorMessageSchema.safeParse(value);
+  return parsed.success ? parsed.data : null;
+}
+
+export {
+  protocolVersion,
+  parseEditorMessage
+};
+//# sourceMappingURL=chunk-NDL3YEJY.js.map

package/dist/chunk-NDL3YEJY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/protocol.ts"],"sourcesContent":["import { z } from 'zod'\n\nexport const fieldTypes = ['text', 'textarea', 'richText', 'image', 'video', 'link', 'buttonLabel'] as const\nexport type FieldType = (typeof fieldTypes)[number]\n\nexport type ImageValue = { assetId: string; url: string; alt: string }\nexport type ContentValue = string | ImageValue | Record<string, unknown>\n\nexport const fieldSchema = z.object({\n  id: z.string().min(3).max(160).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/i),\n  page: z.string().min(1).max(80),\n  label: z.string().min(1).max(120),\n  type: z.enum(fieldTypes),\n  required: z.boolean().optional(),\n  maxLength: z.number().int().positive().max(20_000).optional(),\n  initialValue: z.unknown().optional(),\n})\nexport type EditableFieldSchema = z.infer<typeof fieldSchema>\n\nexport interface ContentResponse {\n  siteId: string\n  page: string\n  mode: 'published' | 'draft'\n  fields: Record<string, ContentValue>\n  schemas: EditableFieldSchema[]\n  updatedAt: string\n}\n\nexport const protocolVersion = 1 as const\nconst envelope = z.object({ version: z.literal(protocolVersion), nonce: z.string().optional() })\n\nexport const editorMessageSchema = z.discriminatedUnion('type', [\n  envelope.extend({ type: z.literal('EDITOR_READY'), payload: z.object({ siteId: z.string(), page: z.string() }) }),\n  envelope.extend({ type: z.literal('EDITOR_INIT'), payload: z.object({ siteId: z.string(), page: z.string(), permissions: z.array(z.enum(['preview', 'edit'])), content: z.record(z.string(), z.unknown()) }) }),\n  envelope.extend({ type: z.literal('REGISTER_FIELDS'), payload: z.object({ siteId: z.string(), page: z.string(), fields: z.array(fieldSchema) }) }),\n  envelope.extend({ type: z.literal('FIELD_SELECTED'), payload: z.object({ siteId: z.string(), page: z.string(), fieldId: z.string(), fieldType: z.enum(fieldTypes) }) }),\n  envelope.extend({ type: z.literal('FIELD_HOVERED'), payload: z.object({ fieldId: z.string().nullable() }) }),\n  envelope.extend({ type: z.literal('PREVIEW_UPDATE'), payload: z.object({ fieldId: z.string(), value: z.unknown() }) }),\n  envelope.extend({ type: z.literal('CONTENT_SAVED'), payload: z.object({ fieldId: z.string(), savedAt: z.string() }) }),\n  envelope.extend({ type: z.literal('NAVIGATE_PAGE'), payload: z.object({ page: z.string(), href: z.string() }) }),\n])\nexport type EditorMessage = z.infer<typeof editorMessageSchema>\n\nexport function parseEditorMessage(value: unknown): EditorMessage | null {\n  const parsed = editorMessageSchema.safeParse(value)\n  return parsed.success ? parsed.data : null\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAEX,IAAM,aAAa,CAAC,QAAQ,YAAY,YAAY,SAAS,SAAS,QAAQ,aAAa;AAM3F,IAAM,cAAc,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,MAAM,iCAAiC;AAAA,EACtE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,MAAM,EAAE,KAAK,UAAU;AAAA,EACvB,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,EAC5D,cAAc,EAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAYM,IAAM,kBAAkB;AAC/B,IAAM,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAExF,IAAM,sBAAsB,EAAE,mBAAmB,QAAQ;AAAA,EAC9D,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,cAAc,GAAG,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,EAChH,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,MAAM,CAAC,CAAC,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,EAC9M,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,iBAAiB,GAAG,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,MAAM,WAAW,EAAE,CAAC,EAAE,CAAC;AAAA,EACjJ,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,gBAAgB,GAAG,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,GAAG,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC,EAAE,CAAC;AAAA,EACtK,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,eAAe,GAAG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAAA,EAC3G,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,gBAAgB,GAAG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAAA,EACrH,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,eAAe,GAAG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,EACrH,SAAS,OAAO,EAAE,MAAM,EAAE,QAAQ,eAAe,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACjH,CAAC;AAGM,SAAS,mBAAmB,OAAsC;AACvE,QAAM,SAAS,oBAAoB,UAAU,KAAK;AAClD,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;","names":[]}

package/dist/client.d.ts

@@ -0,0 +1,50 @@
+import * as react from 'react';
+import { ReactNode, ReactElement, VideoHTMLAttributes } from 'react';
+import { F as FieldType, a as ContentValue } from './protocol-DC8OkoEg.js';
+import 'zod';
+
+interface EditorProviderProps {
+    siteId: string;
+    page: string;
+    editorOrigin: string;
+    initialContent: Record<string, ContentValue>;
+    children: ReactNode;
+}
+declare function EditorProvider({ siteId, page, editorOrigin, initialContent, children }: EditorProviderProps): react.JSX.Element;
+declare function EditableText({ id, page, label, type, maxLength, required, initialValue, children }: {
+    id: string;
+    page: string;
+    label: string;
+    type?: Exclude<FieldType, 'image' | 'video'>;
+    maxLength?: number;
+    required?: boolean;
+    initialValue?: string;
+    children: ReactElement<Record<string, unknown>>;
+}): ReactElement<Record<string, unknown>, string | react.JSXElementConstructor<any>>;
+declare function EditableImage({ id, page, label, src, alt, assetId, className }: {
+    id: string;
+    page: string;
+    label: string;
+    src: string;
+    alt: string;
+    assetId?: string;
+    className?: string;
+}): react.JSX.Element;
+declare function EditableVideo({ id, page, label, src, className, style, ...videoProps }: {
+    id: string;
+    page: string;
+    label: string;
+    src: string;
+    className?: string;
+} & Omit<VideoHTMLAttributes<HTMLVideoElement>, 'src' | 'children'>): react.JSX.Element;
+declare function EditableLink({ id, page, label, href, children, className }: {
+    id: string;
+    page: string;
+    label: string;
+    href: string;
+    children: ReactNode;
+    className?: string;
+}): react.JSX.Element;
+declare function useEditableContent<T extends ContentValue>(id: string, fallback: T): T;
+
+export { EditableImage, EditableLink, EditableText, EditableVideo, EditorProvider, type EditorProviderProps, useEditableContent };

package/dist/client.js

@@ -0,0 +1,124 @@
+"use client";
+import {
+  protocolVersion
+} from "./chunk-NDL3YEJY.js";
+
+// src/client.tsx
+import { Children, cloneElement, createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
+import { jsx } from "react/jsx-runtime";
+var EditorContext = createContext(null);
+function EditorProvider({ siteId, page, editorOrigin, initialContent, children }) {
+  const [enabled, setEnabled] = useState(false);
+  const [content, setContent] = useState(initialContent);
+  const nonce = useRef(void 0);
+  const schemas = useRef(/* @__PURE__ */ new Map());
+  const register = useCallback((schema) => {
+    const current = schemas.current.get(schema.id);
+    schemas.current.set(schema.id, { schema, registrations: (current?.registrations ?? 0) + 1 });
+    return () => {
+      const registered = schemas.current.get(schema.id);
+      if (!registered || registered.registrations <= 1) schemas.current.delete(schema.id);
+      else schemas.current.set(schema.id, { ...registered, registrations: registered.registrations - 1 });
+    };
+  }, []);
+  const send = useCallback((message) => {
+    if (!enabled) return;
+    window.parent.postMessage({ ...message, nonce: nonce.current }, new URL(editorOrigin).origin);
+  }, [editorOrigin, enabled]);
+  const select = useCallback((schema) => send({ version: protocolVersion, type: "FIELD_SELECTED", payload: { siteId, page, fieldId: schema.id, fieldType: schema.type } }), [page, send, siteId]);
+  const hover = useCallback((fieldId) => send({ version: protocolVersion, type: "FIELD_HOVERED", payload: { fieldId } }), [send]);
+  useEffect(() => {
+    const params = new URLSearchParams(window.location.search);
+    if (params.get("editorMode") !== "true" || window.parent === window) return;
+    let stop;
+    void import("./runtime-A5GXJO6L.js").then(({ startEditorRuntime }) => {
+      stop = startEditorRuntime({ siteId, page, editorOrigin, schemas: () => [...schemas.current.values()].map(({ schema }) => schema), onMessage(message) {
+        if (message.type !== "EDITOR_INIT") return;
+        nonce.current = message.nonce ?? "";
+        setContent((current) => ({ ...current, ...message.payload.content }));
+        setEnabled(true);
+      } });
+    });
+    return () => stop?.();
+  }, [editorOrigin, page, siteId]);
+  useEffect(() => {
+    if (!enabled) return;
+    const origin = new URL(editorOrigin).origin;
+    const listener = (event) => {
+      if (event.origin !== origin || event.source !== window.parent) return;
+      const candidate = event.data;
+      if (candidate.type === "PREVIEW_UPDATE" && candidate.nonce === nonce.current && candidate.payload && "fieldId" in candidate.payload) {
+        const payload = candidate.payload;
+        setContent((current) => ({ ...current, [payload.fieldId]: payload.value }));
+      }
+    };
+    window.addEventListener("message", listener);
+    return () => window.removeEventListener("message", listener);
+  }, [editorOrigin, enabled]);
+  const value = useMemo(() => ({ enabled, content, register, select, hover, send }), [content, enabled, hover, register, select, send]);
+  return /* @__PURE__ */ jsx(EditorContext.Provider, { value, children });
+}
+function useEditable(schema) {
+  const context = useContext(EditorContext);
+  useEffect(() => context?.register(schema), [context, schema.id, schema.label, schema.maxLength, schema.page, schema.required, schema.type]);
+  const interactions = context?.enabled ? {
+    onClick: (event) => {
+      event.preventDefault();
+      event.stopPropagation();
+      context.select(schema);
+    },
+    onMouseEnter: () => context.hover(schema.id),
+    onMouseLeave: () => context.hover(null),
+    "data-agency-editable": schema.id
+  } : {};
+  return { context, interactions };
+}
+var editableStyle = { outline: "1px solid color-mix(in srgb, #7c3aed 55%, transparent)", outlineOffset: "3px", cursor: "pointer" };
+var emptyEditableStyle = { display: "inline-block", minWidth: "8rem", minHeight: "1.5em", backgroundColor: "color-mix(in srgb, #7c3aed 8%, transparent)" };
+function textContent(value) {
+  if (typeof value === "string" || typeof value === "number") return String(value);
+  const parts = Children.toArray(value);
+  return parts.every((part) => typeof part === "string" || typeof part === "number") ? parts.join("") : void 0;
+}
+function EditableText({ id, page, label, type = "text", maxLength, required, initialValue, children }) {
+  const existing = children.props;
+  const fallback = initialValue ?? textContent(existing.children);
+  const schema = useMemo(() => ({ id, page, label, type, ...maxLength ? { maxLength } : {}, ...required === void 0 ? {} : { required }, ...fallback === void 0 ? {} : { initialValue: fallback } }), [fallback, id, label, maxLength, page, required, type]);
+  const { context, interactions } = useEditable(schema);
+  const value = context?.content[id];
+  const renderedValue = typeof value === "string" ? value : existing.children;
+  const empty = context?.enabled && renderedValue === "";
+  return cloneElement(children, { ...interactions, ...empty ? { "aria-label": `${label}: empty field`, title: `${label} \u2014 click to add content` } : {}, style: context?.enabled ? { ...existing.style, ...editableStyle, ...empty ? emptyEditableStyle : {} } : existing.style }, empty ? "\xA0" : renderedValue);
+}
+function EditableImage({ id, page, label, src, alt, assetId = "external", className }) {
+  const schema = useMemo(() => ({ id, page, label, type: "image", initialValue: { assetId, url: src, alt } }), [alt, assetId, id, label, page, src]);
+  const { context, interactions } = useEditable(schema);
+  const value = context?.content[id];
+  const image = value && typeof value === "object" && "url" in value ? value : { url: src, alt };
+  return /* @__PURE__ */ jsx("img", { src: image.url, alt: image.alt, className, ...interactions, style: context?.enabled ? editableStyle : void 0 });
+}
+function EditableVideo({ id, page, label, src, className, style, ...videoProps }) {
+  const schema = useMemo(() => ({ id, page, label, type: "video", initialValue: src }), [id, label, page, src]);
+  const { context, interactions } = useEditable(schema);
+  const value = context?.content[id];
+  return /* @__PURE__ */ jsx("video", { ...videoProps, ...interactions, src: typeof value === "string" ? value : src, className, style: context?.enabled ? { ...style, ...editableStyle } : style });
+}
+function EditableLink({ id, page, label, href, children, className }) {
+  const schema = useMemo(() => ({ id, page, label, type: "link", initialValue: href }), [href, id, label, page]);
+  const { context, interactions } = useEditable(schema);
+  const value = context?.content[id];
+  return /* @__PURE__ */ jsx("a", { href: typeof value === "string" ? value : href, className, ...interactions, style: context?.enabled ? editableStyle : void 0, children: Children.toArray(children) });
+}
+function useEditableContent(id, fallback) {
+  const context = useContext(EditorContext);
+  return context?.content[id] ?? fallback;
+}
+export {
+  EditableImage,
+  EditableLink,
+  EditableText,
+  EditableVideo,
+  EditorProvider,
+  useEditableContent
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.tsx"],"sourcesContent":["'use client'\n\nimport { protocolVersion, type ContentValue, type EditableFieldSchema, type EditorMessage, type FieldType } from './protocol'\nimport { Children, cloneElement, createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, type CSSProperties, type MouseEvent, type ReactElement, type ReactNode, type VideoHTMLAttributes } from 'react'\n\ninterface EditorContextValue {\n  enabled: boolean\n  content: Record<string, ContentValue>\n  register: (schema: EditableFieldSchema) => () => void\n  select: (schema: EditableFieldSchema) => void\n  hover: (id: string | null) => void\n  send: (message: EditorMessage) => void\n}\nconst EditorContext = createContext<EditorContextValue | null>(null)\n\nexport interface EditorProviderProps {\n  siteId: string\n  page: string\n  editorOrigin: string\n  initialContent: Record<string, ContentValue>\n  children: ReactNode\n}\n\nexport function EditorProvider({ siteId, page, editorOrigin, initialContent, children }: EditorProviderProps) {\n  const [enabled, setEnabled] = useState(false)\n  const [content, setContent] = useState(initialContent)\n  const nonce = useRef<string | undefined>(undefined)\n  const schemas = useRef(new Map<string, { schema: EditableFieldSchema; registrations: number }>())\n  const register = useCallback((schema: EditableFieldSchema) => {\n    const current = schemas.current.get(schema.id)\n    schemas.current.set(schema.id, { schema, registrations: (current?.registrations ?? 0) + 1 })\n    return () => {\n      const registered = schemas.current.get(schema.id)\n      if (!registered || registered.registrations <= 1) schemas.current.delete(schema.id)\n      else schemas.current.set(schema.id, { ...registered, registrations: registered.registrations - 1 })\n    }\n  }, [])\n  const send = useCallback((message: EditorMessage) => {\n    if (!enabled) return\n    window.parent.postMessage({ ...message, nonce: nonce.current }, new URL(editorOrigin).origin)\n  }, [editorOrigin, enabled])\n  const select = useCallback((schema: EditableFieldSchema) => send({ version: protocolVersion, type: 'FIELD_SELECTED', payload: { siteId, page, fieldId: schema.id, fieldType: schema.type } }), [page, send, siteId])\n  const hover = useCallback((fieldId: string | null) => send({ version: protocolVersion, type: 'FIELD_HOVERED', payload: { fieldId } }), [send])\n\n  useEffect(() => {\n    const params = new URLSearchParams(window.location.search)\n    if (params.get('editorMode') !== 'true' || window.parent === window) return\n    let stop: (() => void) | undefined\n    void import('./runtime').then(({ startEditorRuntime }) => {\n      stop = startEditorRuntime({ siteId, page, editorOrigin, schemas: () => [...schemas.current.values()].map(({ schema }) => schema), onMessage(message) {\n        if (message.type !== 'EDITOR_INIT') return\n        nonce.current = message.nonce ?? ''\n        setContent((current) => ({ ...current, ...message.payload.content } as Record<string, ContentValue>))\n        setEnabled(true)\n      } })\n    })\n    return () => stop?.()\n  }, [editorOrigin, page, siteId])\n\n  useEffect(() => {\n    if (!enabled) return\n    const origin = new URL(editorOrigin).origin\n    const listener = (event: MessageEvent<unknown>) => {\n      if (event.origin !== origin || event.source !== window.parent) return\n      const candidate = event.data as Partial<EditorMessage>\n      if (candidate.type === 'PREVIEW_UPDATE' && candidate.nonce === nonce.current && candidate.payload && 'fieldId' in candidate.payload) {\n        const payload = candidate.payload as { fieldId: string; value: ContentValue }\n        setContent((current) => ({ ...current, [payload.fieldId]: payload.value }))\n      }\n    }\n    window.addEventListener('message', listener)\n    return () => window.removeEventListener('message', listener)\n  }, [editorOrigin, enabled])\n\n  const value = useMemo(() => ({ enabled, content, register, select, hover, send }), [content, enabled, hover, register, select, send])\n  return <EditorContext.Provider value={value}>{children}</EditorContext.Provider>\n}\n\nfunction useEditable(schema: EditableFieldSchema) {\n  const context = useContext(EditorContext)\n  useEffect(() => context?.register(schema), [context, schema.id, schema.label, schema.maxLength, schema.page, schema.required, schema.type])\n  const interactions = context?.enabled ? {\n    onClick: (event: MouseEvent) => { event.preventDefault(); event.stopPropagation(); context.select(schema) },\n    onMouseEnter: () => context.hover(schema.id), onMouseLeave: () => context.hover(null),\n    'data-agency-editable': schema.id,\n  } : {}\n  return { context, interactions }\n}\n\nconst editableStyle: CSSProperties = { outline: '1px solid color-mix(in srgb, #7c3aed 55%, transparent)', outlineOffset: '3px', cursor: 'pointer' }\nconst emptyEditableStyle: CSSProperties = { display: 'inline-block', minWidth: '8rem', minHeight: '1.5em', backgroundColor: 'color-mix(in srgb, #7c3aed 8%, transparent)' }\n\nfunction textContent(value: ReactNode): string | undefined {\n  if (typeof value === 'string' || typeof value === 'number') return String(value)\n  const parts = Children.toArray(value)\n  return parts.every((part) => typeof part === 'string' || typeof part === 'number') ? parts.join('') : undefined\n}\n\nexport function EditableText({ id, page, label, type = 'text', maxLength, required, initialValue, children }: { id: string; page: string; label: string; type?: Exclude<FieldType, 'image' | 'video'>; maxLength?: number; required?: boolean; initialValue?: string; children: ReactElement<Record<string, unknown>> }) {\n  const existing = children.props as { children?: ReactNode; style?: CSSProperties }\n  const fallback = initialValue ?? textContent(existing.children)\n  const schema = useMemo(() => ({ id, page, label, type, ...(maxLength ? { maxLength } : {}), ...(required === undefined ? {} : { required }), ...(fallback === undefined ? {} : { initialValue: fallback }) }), [fallback, id, label, maxLength, page, required, type])\n  const { context, interactions } = useEditable(schema)\n  const value = context?.content[id]\n  const renderedValue = typeof value === 'string' ? value : existing.children\n  const empty = context?.enabled && renderedValue === ''\n  return cloneElement(children, { ...interactions, ...(empty ? { 'aria-label': `${label}: empty field`, title: `${label} — click to add content` } : {}), style: context?.enabled ? { ...existing.style, ...editableStyle, ...(empty ? emptyEditableStyle : {}) } : existing.style }, empty ? '\\u00a0' : renderedValue)\n}\n\nexport function EditableImage({ id, page, label, src, alt, assetId = 'external', className }: { id: string; page: string; label: string; src: string; alt: string; assetId?: string; className?: string }) {\n  const schema = useMemo(() => ({ id, page, label, type: 'image' as const, initialValue: { assetId, url: src, alt } }), [alt, assetId, id, label, page, src])\n  const { context, interactions } = useEditable(schema)\n  const value = context?.content[id]\n  const image = value && typeof value === 'object' && 'url' in value ? value as { url: string; alt: string } : { url: src, alt }\n  return <img src={image.url} alt={image.alt} className={className} {...interactions} style={context?.enabled ? editableStyle : undefined} />\n}\n\nexport function EditableVideo({ id, page, label, src, className, style, ...videoProps }: { id: string; page: string; label: string; src: string; className?: string } & Omit<VideoHTMLAttributes<HTMLVideoElement>, 'src' | 'children'>) {\n  const schema = useMemo(() => ({ id, page, label, type: 'video' as const, initialValue: src }), [id, label, page, src])\n  const { context, interactions } = useEditable(schema)\n  const value = context?.content[id]\n  return <video {...videoProps} {...interactions} src={typeof value === 'string' ? value : src} className={className} style={context?.enabled ? { ...style, ...editableStyle } : style} />\n}\n\nexport function EditableLink({ id, page, label, href, children, className }: { id: string; page: string; label: string; href: string; children: ReactNode; className?: string }) {\n  const schema = useMemo(() => ({ id, page, label, type: 'link' as const, initialValue: href }), [href, id, label, page])\n  const { context, interactions } = useEditable(schema)\n  const value = context?.content[id]\n  return <a href={typeof value === 'string' ? value : href} className={className} {...interactions} style={context?.enabled ? editableStyle : undefined}>{Children.toArray(children)}</a>\n}\n\nexport function useEditableContent<T extends ContentValue>(id: string, fallback: T): T {\n  const context = useContext(EditorContext)\n  return (context?.content[id] as T | undefined) ?? fallback\n}\n"],"mappings":";;;;;;AAGA,SAAS,UAAU,cAAc,eAAe,aAAa,YAAY,WAAW,SAAS,QAAQ,gBAAkH;AAwE9M;AA9DT,IAAM,gBAAgB,cAAyC,IAAI;AAU5D,SAAS,eAAe,EAAE,QAAQ,MAAM,cAAc,gBAAgB,SAAS,GAAwB;AAC5G,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,cAAc;AACrD,QAAM,QAAQ,OAA2B,MAAS;AAClD,QAAM,UAAU,OAAO,oBAAI,IAAoE,CAAC;AAChG,QAAM,WAAW,YAAY,CAAC,WAAgC;AAC5D,UAAM,UAAU,QAAQ,QAAQ,IAAI,OAAO,EAAE;AAC7C,YAAQ,QAAQ,IAAI,OAAO,IAAI,EAAE,QAAQ,gBAAgB,SAAS,iBAAiB,KAAK,EAAE,CAAC;AAC3F,WAAO,MAAM;AACX,YAAM,aAAa,QAAQ,QAAQ,IAAI,OAAO,EAAE;AAChD,UAAI,CAAC,cAAc,WAAW,iBAAiB,EAAG,SAAQ,QAAQ,OAAO,OAAO,EAAE;AAAA,UAC7E,SAAQ,QAAQ,IAAI,OAAO,IAAI,EAAE,GAAG,YAAY,eAAe,WAAW,gBAAgB,EAAE,CAAC;AAAA,IACpG;AAAA,EACF,GAAG,CAAC,CAAC;AACL,QAAM,OAAO,YAAY,CAAC,YAA2B;AACnD,QAAI,CAAC,QAAS;AACd,WAAO,OAAO,YAAY,EAAE,GAAG,SAAS,OAAO,MAAM,QAAQ,GAAG,IAAI,IAAI,YAAY,EAAE,MAAM;AAAA,EAC9F,GAAG,CAAC,cAAc,OAAO,CAAC;AAC1B,QAAM,SAAS,YAAY,CAAC,WAAgC,KAAK,EAAE,SAAS,iBAAiB,MAAM,kBAAkB,SAAS,EAAE,QAAQ,MAAM,SAAS,OAAO,IAAI,WAAW,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,MAAM,MAAM,CAAC;AACnN,QAAM,QAAQ,YAAY,CAAC,YAA2B,KAAK,EAAE,SAAS,iBAAiB,MAAM,iBAAiB,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;AAE7I,YAAU,MAAM;AACd,UAAM,SAAS,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACzD,QAAI,OAAO,IAAI,YAAY,MAAM,UAAU,OAAO,WAAW,OAAQ;AACrE,QAAI;AACJ,SAAK,OAAO,uBAAW,EAAE,KAAK,CAAC,EAAE,mBAAmB,MAAM;AACxD,aAAO,mBAAmB,EAAE,QAAQ,MAAM,cAAc,SAAS,MAAM,CAAC,GAAG,QAAQ,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,MAAM,MAAM,GAAG,UAAU,SAAS;AACnJ,YAAI,QAAQ,SAAS,cAAe;AACpC,cAAM,UAAU,QAAQ,SAAS;AACjC,mBAAW,CAAC,aAAa,EAAE,GAAG,SAAS,GAAG,QAAQ,QAAQ,QAAQ,EAAkC;AACpG,mBAAW,IAAI;AAAA,MACjB,EAAE,CAAC;AAAA,IACL,CAAC;AACD,WAAO,MAAM,OAAO;AAAA,EACtB,GAAG,CAAC,cAAc,MAAM,MAAM,CAAC;AAE/B,YAAU,MAAM;AACd,QAAI,CAAC,QAAS;AACd,UAAM,SAAS,IAAI,IAAI,YAAY,EAAE;AACrC,UAAM,WAAW,CAAC,UAAiC;AACjD,UAAI,MAAM,WAAW,UAAU,MAAM,WAAW,OAAO,OAAQ;AAC/D,YAAM,YAAY,MAAM;AACxB,UAAI,UAAU,SAAS,oBAAoB,UAAU,UAAU,MAAM,WAAW,UAAU,WAAW,aAAa,UAAU,SAAS;AACnI,cAAM,UAAU,UAAU;AAC1B,mBAAW,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,QAAQ,OAAO,GAAG,QAAQ,MAAM,EAAE;AAAA,MAC5E;AAAA,IACF;AACA,WAAO,iBAAiB,WAAW,QAAQ;AAC3C,WAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAAA,EAC7D,GAAG,CAAC,cAAc,OAAO,CAAC;AAE1B,QAAM,QAAQ,QAAQ,OAAO,EAAE,SAAS,SAAS,UAAU,QAAQ,OAAO,KAAK,IAAI,CAAC,SAAS,SAAS,OAAO,UAAU,QAAQ,IAAI,CAAC;AACpI,SAAO,oBAAC,cAAc,UAAd,EAAuB,OAAe,UAAS;AACzD;AAEA,SAAS,YAAY,QAA6B;AAChD,QAAM,UAAU,WAAW,aAAa;AACxC,YAAU,MAAM,SAAS,SAAS,MAAM,GAAG,CAAC,SAAS,OAAO,IAAI,OAAO,OAAO,OAAO,WAAW,OAAO,MAAM,OAAO,UAAU,OAAO,IAAI,CAAC;AAC1I,QAAM,eAAe,SAAS,UAAU;AAAA,IACtC,SAAS,CAAC,UAAsB;AAAE,YAAM,eAAe;AAAG,YAAM,gBAAgB;AAAG,cAAQ,OAAO,MAAM;AAAA,IAAE;AAAA,IAC1G,cAAc,MAAM,QAAQ,MAAM,OAAO,EAAE;AAAA,IAAG,cAAc,MAAM,QAAQ,MAAM,IAAI;AAAA,IACpF,wBAAwB,OAAO;AAAA,EACjC,IAAI,CAAC;AACL,SAAO,EAAE,SAAS,aAAa;AACjC;AAEA,IAAM,gBAA+B,EAAE,SAAS,0DAA0D,eAAe,OAAO,QAAQ,UAAU;AAClJ,IAAM,qBAAoC,EAAE,SAAS,gBAAgB,UAAU,QAAQ,WAAW,SAAS,iBAAiB,8CAA8C;AAE1K,SAAS,YAAY,OAAsC;AACzD,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAC/E,QAAM,QAAQ,SAAS,QAAQ,KAAK;AACpC,SAAO,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,IAAI,MAAM,KAAK,EAAE,IAAI;AACxG;AAEO,SAAS,aAAa,EAAE,IAAI,MAAM,OAAO,OAAO,QAAQ,WAAW,UAAU,cAAc,SAAS,GAA8M;AACvT,QAAM,WAAW,SAAS;AAC1B,QAAM,WAAW,gBAAgB,YAAY,SAAS,QAAQ;AAC9D,QAAM,SAAS,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,MAAM,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC,GAAI,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,cAAc,SAAS,EAAG,IAAI,CAAC,UAAU,IAAI,OAAO,WAAW,MAAM,UAAU,IAAI,CAAC;AACrQ,QAAM,EAAE,SAAS,aAAa,IAAI,YAAY,MAAM;AACpD,QAAM,QAAQ,SAAS,QAAQ,EAAE;AACjC,QAAM,gBAAgB,OAAO,UAAU,WAAW,QAAQ,SAAS;AACnE,QAAM,QAAQ,SAAS,WAAW,kBAAkB;AACpD,SAAO,aAAa,UAAU,EAAE,GAAG,cAAc,GAAI,QAAQ,EAAE,cAAc,GAAG,KAAK,iBAAiB,OAAO,GAAG,KAAK,+BAA0B,IAAI,CAAC,GAAI,OAAO,SAAS,UAAU,EAAE,GAAG,SAAS,OAAO,GAAG,eAAe,GAAI,QAAQ,qBAAqB,CAAC,EAAG,IAAI,SAAS,MAAM,GAAG,QAAQ,SAAW,aAAa;AACtT;AAEO,SAAS,cAAc,EAAE,IAAI,MAAM,OAAO,KAAK,KAAK,UAAU,YAAY,UAAU,GAAgH;AACzM,QAAM,SAAS,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,MAAM,SAAkB,cAAc,EAAE,SAAS,KAAK,KAAK,IAAI,EAAE,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,GAAG,CAAC;AAC1J,QAAM,EAAE,SAAS,aAAa,IAAI,YAAY,MAAM;AACpD,QAAM,QAAQ,SAAS,QAAQ,EAAE;AACjC,QAAM,QAAQ,SAAS,OAAO,UAAU,YAAY,SAAS,QAAQ,QAAwC,EAAE,KAAK,KAAK,IAAI;AAC7H,SAAO,oBAAC,SAAI,KAAK,MAAM,KAAK,KAAK,MAAM,KAAK,WAAuB,GAAG,cAAc,OAAO,SAAS,UAAU,gBAAgB,QAAW;AAC3I;AAEO,SAAS,cAAc,EAAE,IAAI,MAAM,OAAO,KAAK,WAAW,OAAO,GAAG,WAAW,GAAmJ;AACvO,QAAM,SAAS,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,MAAM,SAAkB,cAAc,IAAI,IAAI,CAAC,IAAI,OAAO,MAAM,GAAG,CAAC;AACrH,QAAM,EAAE,SAAS,aAAa,IAAI,YAAY,MAAM;AACpD,QAAM,QAAQ,SAAS,QAAQ,EAAE;AACjC,SAAO,oBAAC,WAAO,GAAG,YAAa,GAAG,cAAc,KAAK,OAAO,UAAU,WAAW,QAAQ,KAAK,WAAsB,OAAO,SAAS,UAAU,EAAE,GAAG,OAAO,GAAG,cAAc,IAAI,OAAO;AACxL;AAEO,SAAS,aAAa,EAAE,IAAI,MAAM,OAAO,MAAM,UAAU,UAAU,GAAuG;AAC/K,QAAM,SAAS,QAAQ,OAAO,EAAE,IAAI,MAAM,OAAO,MAAM,QAAiB,cAAc,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC;AACtH,QAAM,EAAE,SAAS,aAAa,IAAI,YAAY,MAAM;AACpD,QAAM,QAAQ,SAAS,QAAQ,EAAE;AACjC,SAAO,oBAAC,OAAE,MAAM,OAAO,UAAU,WAAW,QAAQ,MAAM,WAAuB,GAAG,cAAc,OAAO,SAAS,UAAU,gBAAgB,QAAY,mBAAS,QAAQ,QAAQ,GAAE;AACrL;AAEO,SAAS,mBAA2C,IAAY,UAAgB;AACrF,QAAM,UAAU,WAAW,aAAa;AACxC,SAAQ,SAAS,QAAQ,EAAE,KAAuB;AACpD;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { C as ContentResponse, a as ContentValue, E as EditableFieldSchema, F as FieldType, I as ImageValue } from './protocol-DC8OkoEg.js';
+export { getSiteContent } from './server.js';
+export { editorFrameAncestors } from './security.js';
+import 'zod';

package/dist/index.js

@@ -0,0 +1,11 @@
+import {
+  getSiteContent
+} from "./chunk-CAWU5SFJ.js";
+import {
+  editorFrameAncestors
+} from "./chunk-FVPTAW36.js";
+export {
+  editorFrameAncestors,
+  getSiteContent
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/protocol-DC8OkoEg.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+
+declare const fieldTypes: readonly ["text", "textarea", "richText", "image", "video", "link", "buttonLabel"];
+type FieldType = (typeof fieldTypes)[number];
+type ImageValue = {
+    assetId: string;
+    url: string;
+    alt: string;
+};
+type ContentValue = string | ImageValue | Record<string, unknown>;
+declare const fieldSchema: z.ZodObject<{
+    id: z.ZodString;
+    page: z.ZodString;
+    label: z.ZodString;
+    type: z.ZodEnum<{
+        text: "text";
+        textarea: "textarea";
+        richText: "richText";
+        image: "image";
+        video: "video";
+        link: "link";
+        buttonLabel: "buttonLabel";
+    }>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    maxLength: z.ZodOptional<z.ZodNumber>;
+    initialValue: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+type EditableFieldSchema = z.infer<typeof fieldSchema>;
+interface ContentResponse {
+    siteId: string;
+    page: string;
+    mode: 'published' | 'draft';
+    fields: Record<string, ContentValue>;
+    schemas: EditableFieldSchema[];
+    updatedAt: string;
+}
+
+export type { ContentResponse as C, EditableFieldSchema as E, FieldType as F, ImageValue as I, ContentValue as a };

package/dist/runtime-A5GXJO6L.js

@@ -0,0 +1,24 @@
+import {
+  parseEditorMessage,
+  protocolVersion
+} from "./chunk-NDL3YEJY.js";
+
+// src/runtime.ts
+function startEditorRuntime(options) {
+  const origin = new URL(options.editorOrigin).origin;
+  const ready = { version: protocolVersion, type: "EDITOR_READY", payload: { siteId: options.siteId, page: options.page } };
+  window.parent.postMessage(ready, origin);
+  const onWindowMessage = (event) => {
+    if (event.origin !== origin || event.source !== window.parent) return;
+    const message = parseEditorMessage(event.data);
+    if (!message || message.type !== "EDITOR_INIT" || message.payload.siteId !== options.siteId || message.payload.page !== options.page) return;
+    options.onMessage(message);
+    window.parent.postMessage({ version: protocolVersion, nonce: message.nonce, type: "REGISTER_FIELDS", payload: { siteId: options.siteId, page: options.page, fields: options.schemas() } }, origin);
+  };
+  window.addEventListener("message", onWindowMessage);
+  return () => window.removeEventListener("message", onWindowMessage);
+}
+export {
+  startEditorRuntime
+};
+//# sourceMappingURL=runtime-A5GXJO6L.js.map

package/dist/runtime-A5GXJO6L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime.ts"],"sourcesContent":["import { parseEditorMessage, protocolVersion, type EditableFieldSchema, type EditorMessage } from './protocol'\n\nexport interface RuntimeOptions {\n  siteId: string\n  page: string\n  editorOrigin: string\n  schemas: () => EditableFieldSchema[]\n  onMessage: (message: EditorMessage) => void\n}\n\nexport function startEditorRuntime(options: RuntimeOptions): () => void {\n  const origin = new URL(options.editorOrigin).origin\n  const ready: EditorMessage = { version: protocolVersion, type: 'EDITOR_READY', payload: { siteId: options.siteId, page: options.page } }\n  window.parent.postMessage(ready, origin)\n  const onWindowMessage = (event: MessageEvent<unknown>) => {\n    if (event.origin !== origin || event.source !== window.parent) return\n    const message = parseEditorMessage(event.data)\n    if (!message || message.type !== 'EDITOR_INIT' || message.payload.siteId !== options.siteId || message.payload.page !== options.page) return\n    options.onMessage(message)\n    window.parent.postMessage({ version: protocolVersion, nonce: message.nonce, type: 'REGISTER_FIELDS', payload: { siteId: options.siteId, page: options.page, fields: options.schemas() } } satisfies EditorMessage, origin)\n  }\n  window.addEventListener('message', onWindowMessage)\n  return () => window.removeEventListener('message', onWindowMessage)\n}\n"],"mappings":";;;;;;AAUO,SAAS,mBAAmB,SAAqC;AACtE,QAAM,SAAS,IAAI,IAAI,QAAQ,YAAY,EAAE;AAC7C,QAAM,QAAuB,EAAE,SAAS,iBAAiB,MAAM,gBAAgB,SAAS,EAAE,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,KAAK,EAAE;AACvI,SAAO,OAAO,YAAY,OAAO,MAAM;AACvC,QAAM,kBAAkB,CAAC,UAAiC;AACxD,QAAI,MAAM,WAAW,UAAU,MAAM,WAAW,OAAO,OAAQ;AAC/D,UAAM,UAAU,mBAAmB,MAAM,IAAI;AAC7C,QAAI,CAAC,WAAW,QAAQ,SAAS,iBAAiB,QAAQ,QAAQ,WAAW,QAAQ,UAAU,QAAQ,QAAQ,SAAS,QAAQ,KAAM;AACtI,YAAQ,UAAU,OAAO;AACzB,WAAO,OAAO,YAAY,EAAE,SAAS,iBAAiB,OAAO,QAAQ,OAAO,MAAM,mBAAmB,SAAS,EAAE,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,EAAE,EAAE,GAA2B,MAAM;AAAA,EAC3N;AACA,SAAO,iBAAiB,WAAW,eAAe;AAClD,SAAO,MAAM,OAAO,oBAAoB,WAAW,eAAe;AACpE;","names":[]}

package/dist/security.d.ts

@@ -0,0 +1,3 @@
+declare function editorFrameAncestors(editorOrigin: string): string;
+
+export { editorFrameAncestors };

package/dist/security.js

@@ -0,0 +1,7 @@
+import {
+  editorFrameAncestors
+} from "./chunk-FVPTAW36.js";
+export {
+  editorFrameAncestors
+};
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/server.d.ts

@@ -0,0 +1,14 @@
+import { C as ContentResponse } from './protocol-DC8OkoEg.js';
+import 'zod';
+
+interface GetSiteContentOptions {
+    siteId: string;
+    page: string;
+    mode?: 'published' | 'draft';
+    apiUrl?: string;
+    previewToken?: string;
+    fetcher?: typeof fetch;
+}
+declare function getSiteContent(options: GetSiteContentOptions): Promise<ContentResponse>;
+
+export { type GetSiteContentOptions, getSiteContent };

package/dist/server.js

@@ -0,0 +1,7 @@
+import {
+  getSiteContent
+} from "./chunk-CAWU5SFJ.js";
+export {
+  getSiteContent
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@open_mind/editor-sdk",
+  "version": "0.2.0",
+  "description": "Public integration SDK for connecting React and Next.js sites to the Fieldmatch visual editor.",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
+    "./client": { "types": "./dist/client.d.ts", "import": "./dist/client.js" },
+    "./server": { "types": "./dist/server.d.ts", "import": "./dist/server.js" },
+    "./security": { "types": "./dist/security.d.ts", "import": "./dist/security.js" }
+  },
+  "bin": {
+    "fieldmatch-editor-sdk-init": "scripts/install-agent-assets.mjs"
+  },
+  "files": [
+    "dist",
+    "skills",
+    "scripts",
+    "templates",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "init-agent": "node ./scripts/install-agent-assets.mjs --force",
+    "postinstall": "node ./scripts/install-agent-assets.mjs",
+    "prepack": "npm run build",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json"
+  },
+  "dependencies": {
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.18.3",
+    "@types/react": "latest",
+    "react": "latest",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  },
+  "peerDependencies": {
+    "react": ">=18.2.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fieldmatch/editor-sdk.git"
+  },
+  "homepage": "https://github.com/fieldmatch/editor-sdk#readme",
+  "bugs": {
+    "url": "https://github.com/fieldmatch/editor-sdk/issues"
+  },
+  "keywords": [
+    "fieldmatch",
+    "visual-editor",
+    "cms",
+    "react",
+    "nextjs"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "SEE LICENSE IN LICENSE.md"
+}

package/scripts/install-agent-assets.mjs

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+
+import { cp, mkdir, readFile, writeFile } from 'node:fs/promises'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const targetRoot = resolve(process.env.INIT_CWD || process.cwd())
+const force = process.argv.includes('--force')
+const startMarker = '<!-- fieldmatch-editor-sdk:start -->'
+const endMarker = '<!-- fieldmatch-editor-sdk:end -->'
+const managedBlock = `${startMarker}
+## Fieldmatch editable content
+
+When creating or changing content that should be editable through Fieldmatch, use the \`$fieldmatch-editable-components\` skill installed at \`.agents/skills/fieldmatch-editable-components\`.
+
+Read and maintain \`FIELDMATCH_EDITOR.md\` as the integration registry. Only content explicitly intended for customer editing should use the SDK; keep layout, styling, behavior, authorization, prices, and application state in code unless requirements say otherwise.
+${endMarker}`
+
+async function hasDirectDependency() {
+  try {
+    const manifest = JSON.parse(await readFile(resolve(targetRoot, 'package.json'), 'utf8'))
+    return ['dependencies', 'devDependencies', 'optionalDependencies']
+      .some((key) => manifest[key]?.['@open_mind/editor-sdk'])
+  } catch {
+    return false
+  }
+}
+
+async function install() {
+  if (process.env.FIELDMATCH_SKIP_AGENT_SETUP === '1') return
+  if (targetRoot === packageRoot) return
+  if (!force && !(await hasDirectDependency())) return
+
+  const skillTarget = resolve(targetRoot, '.agents/skills/fieldmatch-editable-components')
+  await mkdir(dirname(skillTarget), { recursive: true })
+  await cp(resolve(packageRoot, 'skills/fieldmatch-editable-components'), skillTarget, {
+    recursive: true,
+    force: true,
+  })
+
+  const guideTarget = resolve(targetRoot, 'FIELDMATCH_EDITOR.md')
+  try {
+    await readFile(guideTarget, 'utf8')
+  } catch {
+    await writeFile(guideTarget, await readFile(resolve(packageRoot, 'templates/FIELDMATCH_EDITOR.md'), 'utf8'))
+  }
+
+  const agentsTarget = resolve(targetRoot, 'AGENTS.md')
+  let agents = ''
+  try {
+    agents = await readFile(agentsTarget, 'utf8')
+  } catch {
+    // A repository-level AGENTS.md is optional until this integration creates one.
+  }
+
+  const start = agents.indexOf(startMarker)
+  const end = agents.indexOf(endMarker)
+  if (start !== -1 && end !== -1 && end >= start) {
+    const after = end + endMarker.length
+    agents = `${agents.slice(0, start)}${managedBlock}${agents.slice(after)}`
+  } else {
+    agents = `${agents.trimEnd()}${agents.trim() ? '\n\n' : ''}${managedBlock}\n`
+  }
+  await writeFile(agentsTarget, agents)
+
+  process.stdout.write('[Fieldmatch] Installed agent skill and integration instructions. Restart your coding agent so it reloads AGENTS.md.\n')
+}
+
+install().catch((error) => {
+  process.stderr.write(`[Fieldmatch] Agent setup skipped: ${error instanceof Error ? error.message : String(error)}\n`)
+  process.exitCode = 0
+})
+

package/skills/fieldmatch-editable-components/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: fieldmatch-editable-components
+description: Integrate or update React and Next.js components that should be editable through @open_mind/editor-sdk. Use when creating editable text, headings, descriptions, button labels, links, images, videos, or page-level Fieldmatch content wiring. Do not use for layout-only or backend-only changes.
+---
+
+# Fieldmatch Editable Components
+
+Connect deliberately chosen website content to Fieldmatch while preserving the site's structure, design, accessibility, and local fallbacks.
+
+## Workflow
+
+1. Read `FIELDMATCH_EDITOR.md`. If it is absent, create it from the SDK's documented project guide structure before integrating fields.
+2. Inspect the installed SDK version, existing server content fetch, preview handling, and nearest `EditorProvider`. Reuse one provider around the editable page area; never add a provider per field.
+3. Identify only content explicitly intended for customer editing. Keep layout, CSS, component behavior, authorization, prices, calculated values, and application state in code unless the requirement expressly includes them.
+4. Assign each field a stable, unique ID in `page.section.element` form. Do not silently rename or reuse IDs. An ID rename is a content migration.
+5. Choose the matching SDK component and preserve the original DOM semantics, classes, accessibility attributes, behavior, and meaningful local fallback.
+6. Update the field registry in `FIELDMATCH_EDITOR.md` with the ID, page, type, source component, fallback, and limitations.
+7. Verify normal rendering, editor selection, draft persistence, publish behavior, revalidation, and secret handling.
+
+## Map content to components
+
+- Heading, short label, or inline text: `EditableText` with `type="text"`.
+- Paragraph or multiline copy: `EditableText` with `type="textarea"`.
+- Formatted copy: `EditableText` with `type="richText"`. This SDK version transports a string, not a structured rich-text document; do not promise unsupported formatting controls.
+- Button text: `EditableText` with `type="buttonLabel"` around the label element. Keep button behavior in code.
+- Link destination: `EditableLink`. Make the visible label a separate `EditableText` field when both should be editable.
+- Image: `EditableImage`, with a useful `src` and accurate `alt` fallback. The editor supports Fieldmatch media-library image selection.
+- Video: `EditableVideo`, with a direct HTTP(S) `src`. The current SDK edits the URL only; it does not upload videos or edit poster images.
+
+Read [references/component-patterns.md](references/component-patterns.md) whenever implementing markup, the provider, preview mode, CSP, or revalidation.
+
+## Invariants
+
+- Fetch published content for public traffic and draft content only through authenticated preview mode.
+- Never expose preview tokens, CMS secrets, or revalidation secrets to browser code.
+- Restrict `frame-ancestors` to the exact Fieldmatch editor origin; do not use wildcards.
+- Keep a meaningful local value inside every editable component so the site remains usable before registration or during CMS outages.
+- For a custom child component, verify it forwards the SDK's props and event handlers to the final DOM element.
+- Do not modify the SDK's installed source inside a customer repository. Extend the customer's integration code or request an SDK change from Fieldmatch.

package/skills/fieldmatch-editable-components/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Fieldmatch Editable Components"
+  short_description: "Integrate editable text and media with Fieldmatch"
+  default_prompt: "Use $fieldmatch-editable-components to connect this interface to the Fieldmatch visual editor."

package/skills/fieldmatch-editable-components/references/component-patterns.md

@@ -0,0 +1,112 @@
+# Fieldmatch component patterns
+
+## Server content and local fallbacks
+
+Fetch content on the server and merge it with local defaults. Public requests use `published`; only authenticated preview flows may request `draft` with a server-only token.
+
+```tsx
+import { getSiteContent } from '@open_mind/editor-sdk/server'
+
+const defaults = {
+  'home.hero.title': 'A reliable local title',
+  'home.hero.image': { assetId: 'local', url: '/hero.jpg', alt: 'Product' },
+}
+
+const response = await getSiteContent({ siteId, page: 'home', mode: 'published', apiUrl })
+const content = { ...defaults, ...response.fields }
+```
+
+Handle CMS failures according to the site's availability requirements. A marketing site normally falls back to local or last-known published content rather than exposing a server error.
+
+## Provider
+
+Render one provider around the page region that contains editable fields.
+
+```tsx
+<EditorProvider siteId={siteId} page="home" editorOrigin={editorOrigin} initialContent={content}>
+  <HomePage />
+</EditorProvider>
+```
+
+`editorOrigin` must be the exact trusted origin, for example `https://fieldmatch-canvas-editor.vercel.app`.
+
+## Text and button labels
+
+```tsx
+<EditableText id="home.hero.title" page="home" label="Hero title" maxLength={90}>
+  <h1 className="hero-title">A reliable local title</h1>
+</EditableText>
+
+<button type="button" onClick={openDialog}>
+  <EditableText id="home.hero.cta.label" page="home" label="CTA label" type="buttonLabel">
+    <span>Start now</span>
+  </EditableText>
+</button>
+```
+
+Keep the click behavior on the button. Make the label editable independently.
+
+## Links
+
+```tsx
+<EditableLink id="home.hero.cta.href" page="home" label="CTA destination" href="/contact">
+  <EditableText id="home.hero.cta.label" page="home" label="CTA label" type="buttonLabel">
+    <span>Contact us</span>
+  </EditableText>
+</EditableLink>
+```
+
+Use separate IDs for the URL and visible copy.
+
+## Images
+
+```tsx
+<EditableImage
+  id="home.hero.image"
+  page="home"
+  label="Hero image"
+  src="/images/hero.jpg"
+  alt="Gold ring photographed from the side"
+  className="hero-image"
+/>
+```
+
+Keep meaningful alt text. The editor can select images from the Fieldmatch media library.
+
+## Videos
+
+```tsx
+<EditableVideo
+  id="home.hero.video"
+  page="home"
+  label="Hero video"
+  src="https://cdn.example.com/hero.mp4"
+  muted
+  playsInline
+  autoPlay
+  loop
+/>
+```
+
+The editable value is a direct HTTP(S) video URL. Video upload, source arrays, captions, and poster editing are not currently provided. Model a poster as a separate `EditableImage` only if the rendering component supports it.
+
+## Preview and security
+
+- Determine preview mode on the server through an authenticated route or signed token.
+- Pass only the content snapshot and public editor origin to browser components.
+- Add the exact editor origin to CSP with `editorFrameAncestors(editorOrigin)` from `@open_mind/editor-sdk/security`.
+- Never use `frame-ancestors *` and never expose a CMS write token in `NEXT_PUBLIC_*`.
+
+## Revalidation
+
+Publishing should call a protected site endpoint that verifies the shared revalidation secret, then invalidates the same tags used by `getSiteContent`. Record the endpoint and verification status in `FIELDMATCH_EDITOR.md` without recording the secret.
+
+## Verification
+
+1. Open the site normally and confirm published/local content renders.
+2. Open the Fieldmatch editor and confirm each intended field highlights and can be selected.
+3. Edit each supported field type and refresh the preview to confirm the draft persists.
+4. Confirm the public site has not changed before publishing.
+5. Publish, then confirm revalidation makes the new content public.
+6. Inspect the client bundle and network requests for leaked tokens or secrets.
+

package/templates/FIELDMATCH_EDITOR.md

@@ -0,0 +1,40 @@
+# Fieldmatch editor integration
+
+This file is the project-specific source of truth for content connected to `@open_mind/editor-sdk`. Keep it current whenever editable content is added, renamed, moved, or removed. Do not place tokens or secrets here.
+
+## Project configuration
+
+- Site ID: `TODO`
+- CMS public URL: `TODO`
+- Editor origin: `TODO`
+- Editable page keys: `TODO`
+- Preview mode implementation: `TODO`
+- Revalidation endpoint/status: `TODO`
+
+## Editable field registry
+
+| Field ID | Page | Type | Component/file | Fallback source | Notes |
+| --- | --- | --- | --- | --- | --- |
+| `TODO` | `TODO` | `text` | `TODO` | `TODO` | `TODO` |
+
+## Integration rules
+
+- Render one `EditorProvider` around the editable area; do not create a provider per field.
+- Fetch published content for normal visitors. Fetch draft content only in authenticated preview/editor mode.
+- Every editable field must have a stable, unique ID such as `home.hero.title` and a meaningful local fallback.
+- Do not silently rename or reuse an existing field ID. Treat an ID change as a content migration.
+- Use `EditableText` for text, textarea, rich-text strings, and button labels; `EditableLink` for destinations; `EditableImage` for images; and `EditableVideo` for direct video URLs.
+- Keep structure, styling, accessibility, behavior, permissions, prices, and application state in code unless the product requirement explicitly makes them editable content.
+- When wrapping custom components, make sure the final DOM element receives the props and event handlers supplied by the SDK.
+- Image selection supports the Fieldmatch media library. Video currently accepts a direct HTTP(S) URL; video upload and poster editing are not provided by this SDK version.
+- Keep the site CSP `frame-ancestors` restricted to the exact Fieldmatch editor origin. Never use a wildcard.
+
+## Verification checklist
+
+- [ ] The normal site renders local or published content without editor query parameters.
+- [ ] The preview URL loads inside Fieldmatch and every intended field is highlighted and selectable.
+- [ ] Text, link, image, and video fields display the correct editor control.
+- [ ] Draft edits survive a refresh and remain invisible on the public site before publishing.
+- [ ] Publish updates the public site and triggers revalidation successfully.
+- [ ] No CMS token, preview token, or revalidation secret is shipped to the browser.
+