@payload-onpage/plugin 0.0.0-stage → 0.2.0

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAGzD,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,OAAO,GACR,MAAM,gBAAgB,CAAA;AAEvB,iEAAiE;AACjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;AACvF,oDAAoD;AACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAuC1C,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAE,GAAqB,EAAU,EAAE;IAChF,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAA;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,IAAI,QAAQ,CAAA;IACvD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,KAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC,CAAA;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,KAAkB,EAAE,IAAY;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAA;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB,EAAE,IAAY,EAAE,IAAY;IACtE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,KAAK,GACT,KAAK,CAAC,MACP,EAAE,CAAC,IAAI,CAAC,CAAA;IACT,oFAAoF;IACpF,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACzC,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAU,EAAW,EAAE;IACzC,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED,SAAS,cAAc,CAAC,KAAY,EAAE,KAAkB,EAAE,GAAqB;IAC7E,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;YACjE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;SAC9D;QACD,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;KACtE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA2B,EAC3B,MAAwB,EAAE;IAE1B,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAQ;QACnE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;oBAC7C,SAAQ;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;gBACzD,IAAI,KAAK,KAAK,KAAK;oBAAE,SAAQ;gBAC7B,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;oBAC/C,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;oBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C,CAAC,CAAA;YACJ,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,wEAAwE;YACxE,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;YACzF,SAAQ;QACV,CAAC;QACD,yGAAyG;QACzG,IACE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YACzB,uBAAuB,CAAC,CAAC,CAAC;YAC1B,cAAc,CAAC,CAAC,CAAC;YACjB,CAAC,CAAC,KAAK,EAAE,MAAM;YAEf,SAAQ;QACV,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,KAAK,KAAK,KAAK;YAAE,SAAQ;QAE7B,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,CAA0B,CAAA;QAC3C,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;SACnD,CAAA;QACD,IAAI,QAAQ,CAAC,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAA;QAC9C,IAAI,QAAQ,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC5C,IAAI,QAAQ,CAAC,OAAO;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;QAC1C,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAA;gBACrC,OAAO,CAAC,IAAI,CACV,eAAe,CAAC;oBACd,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;oBAC/B,GAAG;oBACH,IAAI,EAAE,GAAG,CAAC,IAAI;iBACf,CAAC;qBACC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;oBACV,IAAI,UAAU,CAAC,CAAC,CAAC;wBAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAA;gBAC3C,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAC1B,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;QAC5C,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/D,IAAI,WAAW;YAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAA;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ;gBACnB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;gBACxB,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK,CACT,CAAyB,CAAC,KAAK,EAChC,MAAM,CAAE,CAAwB,CAAC,KAAK,CAAC,EACvC,GAAG,CACJ;oBACD,KAAK,EAAE,MAAM,CAAE,CAAwB,CAAC,KAAK,CAAC;iBAC/C,CACN,CAAA;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAA;QAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAU,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YACrB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAA;QACxF,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAA;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAA;QACrD,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAA;QAC/D,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;QAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChG,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACrC,KAAK,CAAC,MAAM,GAAG;gBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;gBAClE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;aAC7D,CAAA;QACH,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC/E,MAAM,CAAC,CAAC,CAAC,EAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACjC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,cAAc,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAC1E,CAAA;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,OAAO,IAAI,GAAG,EAAU;IAC7E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACvE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChG,CAAC;QACD,IAAI,CAAC,CAAC,MAAM;YAAE,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;YAAE,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/tokens.d.ts

@@ -0,0 +1,18 @@
+export interface PreviewTokenPayload {
+    /** refKey of the shared document */
+    ref: string;
+    /** Site path the link opens. */
+    path: string;
+    locale?: string;
+    /** Issued at / expires at, seconds since epoch. */
+    iat: number;
+    exp: number;
+    /** Unique id, for audit logs and revocation lists. */
+    jti: string;
+}
+export declare function createPreviewToken(payload: Pick<PreviewTokenPayload, 'ref' | 'path' | 'locale'>, secret: string, ttlSeconds: number, now?: number): Promise<{
+    token: string;
+    payload: PreviewTokenPayload;
+}>;
+export declare function verifyPreviewToken(token: string, secret: string, now?: number): Promise<PreviewTokenPayload | null>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC7D,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,GAAG,SAAa,GACf,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAS1D;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,GAAG,SAAa,GACf,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAMrC"}

package/dist/tokens.js

@@ -0,0 +1,24 @@
+/**
+ * Preview-link tokens: sealed (AES-GCM) and expiring, bound to one document
+ * and path. Opaque to the holder, so the link reveals nothing about the draft.
+ */
+import { SEAL_PURPOSE, seal, unseal } from '@payload-onpage/core';
+export async function createPreviewToken(payload, secret, ttlSeconds, now = Date.now()) {
+    const iat = Math.floor(now / 1000);
+    const full = {
+        ...payload,
+        iat,
+        exp: iat + ttlSeconds,
+        jti: crypto.randomUUID(),
+    };
+    return { token: await seal(full, secret, SEAL_PURPOSE.previewLink), payload: full };
+}
+export async function verifyPreviewToken(token, secret, now = Date.now()) {
+    const p = await unseal(token, secret, SEAL_PURPOSE.previewLink);
+    if (!p || typeof p.exp !== 'number' || p.exp * 1000 <= now)
+        return null;
+    if (typeof p.path !== 'string' || typeof p.ref !== 'string' || typeof p.jti !== 'string')
+        return null;
+    return p;
+}
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAejE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA6D,EAC7D,MAAc,EACd,UAAkB,EAClB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAwB;QAChC,GAAG,OAAO;QACV,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,UAAU;QACrB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;KACzB,CAAA;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,MAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAsB,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;IACpF,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACvE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACtF,OAAO,IAAI,CAAA;IACb,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/translations.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Admin UI strings, registered with Payload's i18n under the `onpage` namespace
+ * (so the admin language applies). Add or override languages with
+ * `i18n.translations` in your Payload config.
+ */
+export declare const translations: {
+    en: {
+        onpage: {
+            editOnPage: string;
+            copyPreviewLink: string;
+            copyPreviewLinkHint: string;
+            linkCopied: string;
+            linkFailed: string;
+        };
+    };
+    es: {
+        onpage: {
+            editOnPage: string;
+            copyPreviewLink: string;
+            copyPreviewLinkHint: string;
+            linkCopied: string;
+            linkFailed: string;
+        };
+    };
+    fr: {
+        onpage: {
+            editOnPage: string;
+            copyPreviewLink: string;
+            copyPreviewLinkHint: string;
+            linkCopied: string;
+            linkFailed: string;
+        };
+    };
+    de: {
+        onpage: {
+            editOnPage: string;
+            copyPreviewLink: string;
+            copyPreviewLinkHint: string;
+            linkCopied: string;
+            linkFailed: string;
+        };
+    };
+};
+export type OnPageTranslationKey = `onpage:${keyof (typeof translations)['en']['onpage']}`;
+//# sourceMappingURL=translations.d.ts.map

package/dist/translations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../src/translations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCxB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAA"}

package/dist/translations.js

@@ -0,0 +1,44 @@
+/**
+ * Admin UI strings, registered with Payload's i18n under the `onpage` namespace
+ * (so the admin language applies). Add or override languages with
+ * `i18n.translations` in your Payload config.
+ */
+export const translations = {
+    en: {
+        onpage: {
+            editOnPage: 'Edit on page',
+            copyPreviewLink: 'Copy preview link',
+            copyPreviewLinkHint: 'Copy a read-only link to this draft',
+            linkCopied: 'Preview link copied — valid until {{date}}',
+            linkFailed: "Couldn't create a preview link: {{message}}",
+        },
+    },
+    es: {
+        onpage: {
+            editOnPage: 'Editar en la página',
+            copyPreviewLink: 'Copiar enlace de vista previa',
+            copyPreviewLinkHint: 'Copiar un enlace de solo lectura a este borrador',
+            linkCopied: 'Enlace copiado: válido hasta {{date}}',
+            linkFailed: 'No se pudo crear el enlace: {{message}}',
+        },
+    },
+    fr: {
+        onpage: {
+            editOnPage: 'Modifier sur la page',
+            copyPreviewLink: 'Copier le lien d’aperçu',
+            copyPreviewLinkHint: 'Copier un lien en lecture seule vers ce brouillon',
+            linkCopied: 'Lien copié — valide jusqu’au {{date}}',
+            linkFailed: 'Impossible de créer le lien : {{message}}',
+        },
+    },
+    de: {
+        onpage: {
+            editOnPage: 'Auf der Seite bearbeiten',
+            copyPreviewLink: 'Vorschaulink kopieren',
+            copyPreviewLinkHint: 'Einen schreibgeschützten Link zu diesem Entwurf kopieren',
+            linkCopied: 'Vorschaulink kopiert – gültig bis {{date}}',
+            linkFailed: 'Vorschaulink konnte nicht erstellt werden: {{message}}',
+        },
+    },
+};
+//# sourceMappingURL=translations.js.map

package/dist/translations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.js","sourceRoot":"","sources":["../src/translations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,EAAE,EAAE;QACF,MAAM,EAAE;YACN,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,mBAAmB;YACpC,mBAAmB,EAAE,qCAAqC;YAC1D,UAAU,EAAE,4CAA4C;YACxD,UAAU,EAAE,6CAA6C;SAC1D;KACF;IACD,EAAE,EAAE;QACF,MAAM,EAAE;YACN,UAAU,EAAE,qBAAqB;YACjC,eAAe,EAAE,+BAA+B;YAChD,mBAAmB,EAAE,kDAAkD;YACvE,UAAU,EAAE,uCAAuC;YACnD,UAAU,EAAE,yCAAyC;SACtD;KACF;IACD,EAAE,EAAE;QACF,MAAM,EAAE;YACN,UAAU,EAAE,sBAAsB;YAClC,eAAe,EAAE,yBAAyB;YAC1C,mBAAmB,EAAE,mDAAmD;YACxE,UAAU,EAAE,uCAAuC;YACnD,UAAU,EAAE,2CAA2C;SACxD;KACF;IACD,EAAE,EAAE;QACF,MAAM,EAAE;YACN,UAAU,EAAE,0BAA0B;YACtC,eAAe,EAAE,uBAAuB;YACxC,mBAAmB,EAAE,0DAA0D;YAC/E,UAAU,EAAE,4CAA4C;YACxD,UAAU,EAAE,wDAAwD;SACrE;KACF;CACF,CAAA"}

package/package.json

@@ -1,6 +1,67 @@
 {
   "name": "@payload-onpage/plugin",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "payload-onpage for Payload CMS: on-page editing endpoints, auto-mapping, preview links and admin controls.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jellologic/payload-onpage.git",
+    "directory": "packages/plugin"
+  },
+  "homepage": "https://github.com/jellologic/payload-onpage#readme",
+  "bugs": "https://github.com/jellologic/payload-onpage/issues",
+  "keywords": [
+    "payload",
+    "payloadcms",
+    "payload-plugin",
+    "nextjs",
+    "visual-editing",
+    "live-preview",
+    "inline-editing",
+    "cms"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./admin": {
+      "types": "./dist/admin/index.d.ts",
+      "default": "./dist/admin/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "!dist/.tsbuildinfo",
+    "src",
+    "!src/**/__tests__",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -b",
+    "test": "bun test src",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "@payload-onpage/core": "0.1.0"
+  },
+  "peerDependencies": {
+    "payload": "^3.90.2",
+    "@payloadcms/ui": "^3.90.2",
+    "@payloadcms/translations": "^3.90.2",
+    "react": "^19.0.0"
+  },
+  "engines": {
+    "node": ">=20.9.0"
+  }
+}

package/src/access.ts

@@ -0,0 +1,65 @@
+/**
+ * Who may use on-page editing, and edit which documents. Document access is
+ * evaluated by Payload itself (`docAccessOperation`), so row-level rules
+ * (access functions that return a query) and field permissions behave exactly
+ * as in the admin.
+ */
+import type { DocRef } from '@payload-onpage/core'
+import {
+  docAccessOperation,
+  docAccessOperationGlobal,
+  type PayloadRequest,
+  type SanitizedCollectionPermission,
+  type SanitizedGlobalPermission,
+} from 'payload'
+import type { OnPageOptions } from './options.ts'
+
+/** Signed in as an admin user (or allowed by the `access` option). */
+export async function canUseOnPage(req: PayloadRequest, options: OnPageOptions): Promise<boolean> {
+  if (!req.user) return false
+  if (options.access) return Boolean(await options.access({ req }))
+  return req.user.collection === req.payload.config.admin.user
+}
+
+/** Payload's sanitized permissions for one document (or the collection, without an id). */
+export async function documentPermissions(
+  req: PayloadRequest,
+  ref: DocRef | { kind: 'collection'; slug: string; id?: undefined },
+): Promise<SanitizedCollectionPermission | SanitizedGlobalPermission | null> {
+  try {
+    if (ref.kind === 'global') {
+      const globalConfig = req.payload.globals.config.find((g) => g.slug === ref.slug)
+      return globalConfig ? await docAccessOperationGlobal({ globalConfig, req }) : null
+    }
+    const collection = req.payload.collections[ref.slug]
+    if (!collection) return null
+    return await docAccessOperation({ collection, id: ref.id, req })
+  } catch {
+    return null
+  }
+}
+
+/** May this user edit this document on the page? */
+export async function canEditDocument(
+  req: PayloadRequest,
+  ref: DocRef,
+  options: OnPageOptions,
+): Promise<boolean> {
+  if (!req.user) return false
+  if (options.access) return Boolean(await options.access({ req, ref }))
+  if (!(await canUseOnPage(req, options))) return false
+  const perms = await documentPermissions(req, ref)
+  const update = perms?.update as
+    true | { permission?: boolean; where?: Record<string, unknown> } | undefined
+  if (update === true) return true
+  if (!update?.permission) return false
+  // A row-level rule comes back as a query: check that this document matches it.
+  if (!update.where || ref.kind !== 'collection') return !update.where
+  const { totalDocs } = await req.payload.count({
+    collection: ref.slug as never,
+    where: { and: [{ id: { equals: ref.id } }, update.where] } as never,
+    overrideAccess: true,
+    req,
+  })
+  return totalDocs > 0
+}

package/src/admin/OnPageAdminControls.tsx

@@ -0,0 +1,99 @@
+'use client'
+
+/**
+ * Document controls added by payload-onpage: open this document's page in edit
+ * mode, or copy a sealed read-only preview link. Hidden for users who can't
+ * update the document.
+ */
+import { payloadRest } from '@payload-onpage/core/payload'
+import {
+  Button,
+  toast,
+  useConfig,
+  useDocumentInfo,
+  useLocale,
+  useTranslation,
+} from '@payloadcms/ui'
+import type { OnPageTranslationKey } from '../translations.ts'
+import { useMemo, useState } from 'react'
+
+export interface OnPageAdminControlsProps {
+  kind: 'collection' | 'global'
+  slug: string
+  /** Plugin endpoint prefix (`routePrefix`). */
+  prefix: string
+}
+
+/**
+ * Same-origin POST (the endpoint refuses cross-site requests) opened in a new tab.
+ * A detached form: these controls render inside the admin's document <form>, and forms can't nest.
+ */
+function postInNewTab(action: string) {
+  const form = document.createElement('form')
+  form.method = 'post'
+  form.action = action
+  form.target = '_blank'
+  document.body.appendChild(form)
+  form.submit()
+  form.remove()
+}
+
+export function OnPageAdminControls({ kind, slug, prefix }: OnPageAdminControlsProps) {
+  const { id, hasSavePermission } = useDocumentInfo()
+  const { config } = useConfig()
+  const locale = useLocale()
+  const { t: translate } = useTranslation()
+  const t = (key: OnPageTranslationKey, vars?: Record<string, string>) =>
+    (translate as (k: string, v?: Record<string, string>) => string)(key, vars)
+  const [busy, setBusy] = useState(false)
+  const apiBase = `${config.serverURL ?? ''}${config.routes.api}`
+  const dataSource = useMemo(() => payloadRest({ apiBase, prefix }), [apiBase, prefix])
+
+  if ((kind === 'collection' && !id) || hasSavePermission === false) return null
+
+  const ref = kind === 'global' ? ({ kind, slug } as const) : ({ kind, slug, id: id! } as const)
+  const params = new URLSearchParams({ kind, slug, mode: 'edit' })
+  if (kind === 'collection') params.set('id', String(id))
+  if (locale?.code) params.set('locale', locale.code)
+
+  const copyLink = async () => {
+    setBusy(true)
+    try {
+      const link = await dataSource.createPreviewLink!(ref, { locale: locale?.code })
+      await navigator.clipboard.writeText(link.url)
+      toast.success(
+        `Preview link copied — valid until ${new Date(link.expiresAt).toLocaleString()}`,
+      )
+    } catch (e) {
+      toast.error(t('onpage:linkFailed', { message: (e as Error).message }))
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  const style = { whiteSpace: 'nowrap' as const, flexShrink: 0 }
+  return (
+    <div style={{ display: 'flex', gap: 6 }} data-testid="onpage-admin-controls">
+      <Button
+        buttonStyle="secondary"
+        size="medium"
+        onClick={() => postInNewTab(`${apiBase}${prefix}/enter?${params}`)}
+        extraButtonProps={{ style, 'data-testid': 'onpage-edit-on-page' }}
+      >
+        {t('onpage:editOnPage')}
+      </Button>
+      <Button
+        buttonStyle="subtle"
+        size="medium"
+        onClick={() => void copyLink()}
+        disabled={busy}
+        tooltip={t('onpage:copyPreviewLinkHint')}
+        extraButtonProps={{ style, 'data-testid': 'onpage-copy-preview-link' }}
+      >
+        {t('onpage:copyPreviewLink')}
+      </Button>
+    </div>
+  )
+}
+
+export default OnPageAdminControls

package/src/admin/index.ts

@@ -0,0 +1,2 @@
+export { OnPageAdminControls } from './OnPageAdminControls.tsx'
+export type { OnPageAdminControlsProps } from './OnPageAdminControls.tsx'