@plenary/next 0.5.1 → 1.0.0

package/dist/pages.cjs

@@ -77,6 +77,10 @@ function createPagesRevalidateHandler(options) {
       res.status(405).json({ message: "Method not allowed" });
       return;
     }
+    if (!options.secret) {
+      res.status(500).json({ message: "Webhook secret is not configured" });
+      return;
+    }
     const fromHeader = req.headers[header];
     const fromQuery = req.query[query];
     const provided = (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ?? (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);

package/dist/pages.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/pages.ts","../src/resolve.ts","../src/tags.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from \"next\";\nimport {\n  parseWebhookPayload,\n  verifyWebhookSecret,\n  PlenaryWebhookError,\n} from \"@plenary/client\";\nimport { planRevalidation, type RevalidateOptions } from \"./resolve.js\";\n\n/**\n * The Pages Router counterpart of `createRevalidateHandler`, built on\n * `res.revalidate`.\n *\n * ```ts\n * // pages/api/revalidate.ts\n * export default createPagesRevalidateHandler({\n *   secret: process.env.PLENARY_WEBHOOK_SECRET!,\n * });\n * ```\n *\n * Cache tags are an App Router feature; the `tags` option is ignored here.\n */\nexport function createPagesRevalidateHandler(\n  options: RevalidateOptions,\n): (req: NextApiRequest, res: NextApiResponse) => Promise<void> {\n  const header = options.secretHeader ?? \"x-plenary-secret\";\n  const query = options.secretQuery ?? \"secret\";\n\n  return async (req, res) => {\n    if (req.method !== \"POST\") {\n      res.status(405).json({ message: \"Method not allowed\" });\n      return;\n    }\n    const fromHeader = req.headers[header];\n    const fromQuery = req.query[query];\n    const provided =\n      (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ??\n      (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);\n    if (!verifyWebhookSecret(provided, options.secret)) {\n      res.status(401).json({ message: \"Invalid webhook secret\" });\n      return;\n    }\n\n    let payload;\n    try {\n      payload = parseWebhookPayload(req.body);\n    } catch (err) {\n      if (err instanceof PlenaryWebhookError) {\n        res.status(err.status).json({ message: err.message });\n        return;\n      }\n      throw err;\n    }\n\n    const plan = planRevalidation(payload, options);\n    if (!plan.relevant) {\n      res.json({ revalidated: false, ignored: payload.event });\n      return;\n    }\n    if (plan.test) {\n      res.json({ test: true, paths: plan.paths });\n      return;\n    }\n    await Promise.all(plan.paths.map((p) => res.revalidate(p)));\n    res.json({ revalidated: true, paths: plan.paths });\n  };\n}\n","/**\n * The revalidation decision, shared by the App Router and Pages Router\n * handlers: which paths (and tags) one webhook payload maps to. Pure — the\n * handlers own the framework calls.\n */\n\nimport {\n  isEntryWebhookPayload,\n  WEBHOOK_TEST_EVENT,\n  type EntryWebhookEvent,\n  type EntryWebhookPayload,\n  type ParseWebhookOptions,\n  type WebhookPayload,\n} from \"@plenary/client\";\nimport { entryTag, modelTag } from \"./tags.js\";\n\n/** Paths for one model: a fixed path, a list, or a function of the payload.\n * A function may return `null`/`undefined` to revalidate nothing. */\nexport type RevalidatePaths =\n  | string\n  | string[]\n  | ((payload: EntryWebhookPayload) => string | string[] | null | undefined);\n\nexport interface RevalidateOptions extends ParseWebhookOptions {\n  /**\n   * Extra or overriding paths per model key. A mapped model replaces the\n   * default URL entirely — include `entryUrl(payload)` (exported) in the\n   * returned list to keep it.\n   */\n  paths?: Record<string, RevalidatePaths>;\n  /** Builds the default URL for unmapped models. Defaults to joining the\n   * entry's folder `path` and `slug`; return `null` to skip. */\n  entryUrl?: (payload: EntryWebhookPayload) => string | null | undefined;\n  /** Entry events that trigger revalidation. Default: all five — revalidation\n   * is idempotent and cheap, so over-firing beats a stale page. */\n  events?: EntryWebhookEvent[];\n  /** Also revalidate the `plenary:model:*` / `plenary:entry:*` cache tags used\n   * by `createTaggedFetch`. App Router only. */\n  tags?: boolean;\n}\n\n/** Default URL for an entry: folder path + slug (`/blog` + `spring-sale` →\n * `/blog/spring-sale`). Entries without a slug (singletons) get no default. */\nexport function entryUrl(payload: EntryWebhookPayload): string | null {\n  const { slug, path } = payload.entry;\n  if (!slug) return null;\n  const dir = path && path !== \"/\" ? path : \"\";\n  return `${dir}/${slug}`;\n}\n\nexport interface RevalidationPlan {\n  /** Whether this payload is one the handler acts on. */\n  relevant: boolean;\n  /** True for the console's Test button — report, don't revalidate. */\n  test: boolean;\n  paths: string[];\n  tags: string[];\n}\n\n/** Decides what one payload revalidates. */\nexport function planRevalidation(\n  payload: WebhookPayload,\n  options: RevalidateOptions,\n): RevalidationPlan {\n  const none = { relevant: false, test: false, paths: [], tags: [] };\n  if (!isEntryWebhookPayload(payload)) return none;\n\n  const test = payload.event === WEBHOOK_TEST_EVENT;\n  if (!test && options.events && !options.events.includes(payload.event as EntryWebhookEvent)) {\n    return none;\n  }\n\n  const modelKey = payload.model.key;\n  const mapped = modelKey === undefined ? undefined : options.paths?.[modelKey];\n  let paths: string | string[] | null | undefined;\n  if (mapped === undefined) {\n    paths = (options.entryUrl ?? entryUrl)(payload);\n  } else {\n    paths = typeof mapped === \"function\" ? mapped(payload) : mapped;\n  }\n  const pathList = paths == null ? [] : typeof paths === \"string\" ? [paths] : paths;\n\n  const tags: string[] = [];\n  if (options.tags) {\n    if (modelKey) tags.push(modelTag(modelKey));\n    tags.push(entryTag(payload.entry.id));\n    if (payload.entry.slug) tags.push(entryTag(payload.entry.slug));\n  }\n\n  return { relevant: true, test, paths: [...new Set(pathList)], tags };\n}\n","/**\n * Cache-tag conventions shared by the tagged fetch and the revalidation\n * handler. A page that fetches Plenary content through\n * {@link createTaggedFetch} is tagged with the model and entry it read, so the\n * webhook handler can revalidate every page that used a piece of content\n * without a path map.\n */\n\n/** Tag carried by every read of a model's content. */\nexport function modelTag(modelKey: string): string {\n  return `plenary:model:${modelKey}`;\n}\n\n/** Tag for one entry. The content API addresses entries by slug or UUID, and a\n * webhook payload carries both, so both spellings are revalidated. */\nexport function entryTag(slugOrId: string): string {\n  return `plenary:entry:${slugOrId}`;\n}\n\n/** Next.js extends `RequestInit` with `next`; declared locally so this package\n * compiles against the standard DOM lib. */\ninterface NextRequestInit extends RequestInit {\n  next?: { tags?: string[]; revalidate?: number | false };\n}\n\nconst CONTENT_URL = /\\/api\\/v1\\/content\\/([^/?#]+)(?:\\/([^/?#]+))?/;\n\n/**\n * Wraps a fetch implementation so Plenary content reads carry cache tags.\n * Pass it to `createClient`:\n *\n * ```ts\n * const plenary = createClient({ ...config, fetch: createTaggedFetch() });\n * ```\n *\n * GET requests to `/api/v1/content/{model}` are tagged with the model, and\n * `/api/v1/content/{model}/{slugOrId}` with the model and the entry. Anything\n * else passes through untouched.\n */\nexport function createTaggedFetch(baseFetch: typeof fetch = fetch): typeof fetch {\n  return ((input: RequestInfo | URL, init?: RequestInit) => {\n    const method = init?.method ?? \"GET\";\n    const url =\n      typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n    const match = method === \"GET\" ? CONTENT_URL.exec(url) : null;\n    if (!match?.[1]) return baseFetch(input, init);\n\n    const tags = [modelTag(decodeURIComponent(match[1]))];\n    if (match[2]) tags.push(entryTag(decodeURIComponent(match[2])));\n    const next = (init as NextRequestInit | undefined)?.next;\n    const merged: NextRequestInit = {\n      ...init,\n      next: { ...next, tags: [...(next?.tags ?? []), ...tags] },\n    };\n    return baseFetch(input, merged);\n  }) as typeof fetch;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,IAAAA,iBAIO;;;ACCP,oBAOO;;;ACJA,SAAS,SAAS,UAA0B;AACjD,SAAO,iBAAiB,QAAQ;AAClC;AAIO,SAAS,SAAS,UAA0B;AACjD,SAAO,iBAAiB,QAAQ;AAClC;;;AD0BO,SAAS,SAAS,SAA6C;AACpE,QAAM,EAAE,MAAM,KAAK,IAAI,QAAQ;AAC/B,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,QAAQ,SAAS,MAAM,OAAO;AAC1C,SAAO,GAAG,GAAG,IAAI,IAAI;AACvB;AAYO,SAAS,iBACd,SACA,SACkB;AAClB,QAAM,OAAO,EAAE,UAAU,OAAO,MAAM,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC,EAAE;AACjE,MAAI,KAAC,qCAAsB,OAAO,EAAG,QAAO;AAE5C,QAAM,OAAO,QAAQ,UAAU;AAC/B,MAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,QAAQ,OAAO,SAAS,QAAQ,KAA0B,GAAG;AAC3F,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,MAAM;AAC/B,QAAM,SAAS,aAAa,SAAY,SAAY,QAAQ,QAAQ,QAAQ;AAC5E,MAAI;AACJ,MAAI,WAAW,QAAW;AACxB,aAAS,QAAQ,YAAY,UAAU,OAAO;AAAA,EAChD,OAAO;AACL,YAAQ,OAAO,WAAW,aAAa,OAAO,OAAO,IAAI;AAAA,EAC3D;AACA,QAAM,WAAW,SAAS,OAAO,CAAC,IAAI,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI;AAE5E,QAAM,OAAiB,CAAC;AACxB,MAAI,QAAQ,MAAM;AAChB,QAAI,SAAU,MAAK,KAAK,SAAS,QAAQ,CAAC;AAC1C,SAAK,KAAK,SAAS,QAAQ,MAAM,EAAE,CAAC;AACpC,QAAI,QAAQ,MAAM,KAAM,MAAK,KAAK,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EAChE;AAEA,SAAO,EAAE,UAAU,MAAM,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK;AACrE;;;ADrEO,SAAS,6BACd,SAC8D;AAC9D,QAAM,SAAS,QAAQ,gBAAgB;AACvC,QAAM,QAAQ,QAAQ,eAAe;AAErC,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI,IAAI,WAAW,QAAQ;AACzB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,qBAAqB,CAAC;AACtD;AAAA,IACF;AACA,UAAM,aAAa,IAAI,QAAQ,MAAM;AACrC,UAAM,YAAY,IAAI,MAAM,KAAK;AACjC,UAAM,YACH,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI,gBAC5C,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC7C,QAAI,KAAC,oCAAoB,UAAU,QAAQ,MAAM,GAAG;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,yBAAyB,CAAC;AAC1D;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,oBAAU,oCAAoB,IAAI,IAAI;AAAA,IACxC,SAAS,KAAK;AACZ,UAAI,eAAe,oCAAqB;AACtC,YAAI,OAAO,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC;AACpD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,OAAO,iBAAiB,SAAS,OAAO;AAC9C,QAAI,CAAC,KAAK,UAAU;AAClB,UAAI,KAAK,EAAE,aAAa,OAAO,SAAS,QAAQ,MAAM,CAAC;AACvD;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,UAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;AAC1D,QAAI,KAAK,EAAE,aAAa,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,EACnD;AACF;","names":["import_client"]}
+{"version":3,"sources":["../src/pages.ts","../src/resolve.ts","../src/tags.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from \"next\";\nimport {\n  parseWebhookPayload,\n  verifyWebhookSecret,\n  PlenaryWebhookError,\n} from \"@plenary/client\";\nimport { planRevalidation, type RevalidateOptions } from \"./resolve.js\";\n\n/**\n * The Pages Router counterpart of `createRevalidateHandler`, built on\n * `res.revalidate`.\n *\n * ```ts\n * // pages/api/revalidate.ts\n * export default createPagesRevalidateHandler({\n *   secret: process.env.PLENARY_WEBHOOK_SECRET!,\n * });\n * ```\n *\n * Cache tags are an App Router feature; the `tags` option is ignored here.\n */\nexport function createPagesRevalidateHandler(\n  options: RevalidateOptions,\n): (req: NextApiRequest, res: NextApiResponse) => Promise<void> {\n  const header = options.secretHeader ?? \"x-plenary-secret\";\n  const query = options.secretQuery ?? \"secret\";\n\n  return async (req, res) => {\n    if (req.method !== \"POST\") {\n      res.status(405).json({ message: \"Method not allowed\" });\n      return;\n    }\n    if (!options.secret) {\n      res.status(500).json({ message: \"Webhook secret is not configured\" });\n      return;\n    }\n    const fromHeader = req.headers[header];\n    const fromQuery = req.query[query];\n    const provided =\n      (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ??\n      (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);\n    if (!verifyWebhookSecret(provided, options.secret)) {\n      res.status(401).json({ message: \"Invalid webhook secret\" });\n      return;\n    }\n\n    let payload;\n    try {\n      payload = parseWebhookPayload(req.body);\n    } catch (err) {\n      if (err instanceof PlenaryWebhookError) {\n        res.status(err.status).json({ message: err.message });\n        return;\n      }\n      throw err;\n    }\n\n    const plan = planRevalidation(payload, options);\n    if (!plan.relevant) {\n      res.json({ revalidated: false, ignored: payload.event });\n      return;\n    }\n    if (plan.test) {\n      res.json({ test: true, paths: plan.paths });\n      return;\n    }\n    await Promise.all(plan.paths.map((p) => res.revalidate(p)));\n    res.json({ revalidated: true, paths: plan.paths });\n  };\n}\n","/**\n * The revalidation decision, shared by the App Router and Pages Router\n * handlers: which paths (and tags) one webhook payload maps to. Pure — the\n * handlers own the framework calls.\n */\n\nimport {\n  isEntryWebhookPayload,\n  WEBHOOK_TEST_EVENT,\n  type EntryWebhookEvent,\n  type EntryWebhookPayload,\n  type ParseWebhookOptions,\n  type WebhookPayload,\n} from \"@plenary/client\";\nimport { entryTag, modelTag } from \"./tags.js\";\n\n/** Paths for one model: a fixed path, a list, or a function of the payload.\n * A function may return `null`/`undefined` to revalidate nothing. */\nexport type RevalidatePaths =\n  | string\n  | string[]\n  | ((payload: EntryWebhookPayload) => string | string[] | null | undefined);\n\nexport interface RevalidateOptions extends ParseWebhookOptions {\n  /**\n   * Extra or overriding paths per model key. A mapped model replaces the\n   * default URL entirely — include `entryUrl(payload)` (exported) in the\n   * returned list to keep it.\n   */\n  paths?: Record<string, RevalidatePaths>;\n  /** Builds the default URL for unmapped models. Defaults to joining the\n   * entry's folder `path` and `slug`; return `null` to skip. */\n  entryUrl?: (payload: EntryWebhookPayload) => string | null | undefined;\n  /** Entry events that trigger revalidation. Default: all five — revalidation\n   * is idempotent and cheap, so over-firing beats a stale page. */\n  events?: EntryWebhookEvent[];\n  /** Also revalidate the `plenary:model:*` / `plenary:entry:*` cache tags used\n   * by `createTaggedFetch`. App Router only. */\n  tags?: boolean;\n}\n\n/** Default URL for an entry: folder path + slug (`/blog` + `spring-sale` →\n * `/blog/spring-sale`). Entries without a slug (singletons) get no default. */\nexport function entryUrl(payload: EntryWebhookPayload): string | null {\n  const { slug, path } = payload.entry;\n  if (!slug) return null;\n  const dir = path && path !== \"/\" ? path : \"\";\n  return `${dir}/${slug}`;\n}\n\nexport interface RevalidationPlan {\n  /** Whether this payload is one the handler acts on. */\n  relevant: boolean;\n  /** True for the console's Test button — report, don't revalidate. */\n  test: boolean;\n  paths: string[];\n  tags: string[];\n}\n\n/** Decides what one payload revalidates. */\nexport function planRevalidation(\n  payload: WebhookPayload,\n  options: RevalidateOptions,\n): RevalidationPlan {\n  const none = { relevant: false, test: false, paths: [], tags: [] };\n  if (!isEntryWebhookPayload(payload)) return none;\n\n  const test = payload.event === WEBHOOK_TEST_EVENT;\n  if (!test && options.events && !options.events.includes(payload.event as EntryWebhookEvent)) {\n    return none;\n  }\n\n  const modelKey = payload.model.key;\n  const mapped = modelKey === undefined ? undefined : options.paths?.[modelKey];\n  let paths: string | string[] | null | undefined;\n  if (mapped === undefined) {\n    paths = (options.entryUrl ?? entryUrl)(payload);\n  } else {\n    paths = typeof mapped === \"function\" ? mapped(payload) : mapped;\n  }\n  const pathList = paths == null ? [] : typeof paths === \"string\" ? [paths] : paths;\n\n  const tags: string[] = [];\n  if (options.tags) {\n    if (modelKey) tags.push(modelTag(modelKey));\n    tags.push(entryTag(payload.entry.id));\n    if (payload.entry.slug) tags.push(entryTag(payload.entry.slug));\n  }\n\n  return { relevant: true, test, paths: [...new Set(pathList)], tags };\n}\n","/**\n * Cache-tag conventions shared by the tagged fetch and the revalidation\n * handler. A page that fetches Plenary content through\n * {@link createTaggedFetch} is tagged with the model and entry it read, so the\n * webhook handler can revalidate every page that used a piece of content\n * without a path map.\n */\n\n/** Tag carried by every read of a model's content. */\nexport function modelTag(modelKey: string): string {\n  return `plenary:model:${modelKey}`;\n}\n\n/** Tag for one entry. The content API addresses entries by slug or UUID, and a\n * webhook payload carries both, so both spellings are revalidated. */\nexport function entryTag(slugOrId: string): string {\n  return `plenary:entry:${slugOrId}`;\n}\n\n/** Next.js extends `RequestInit` with `next`; declared locally so this package\n * compiles against the standard DOM lib. */\ninterface NextRequestInit extends RequestInit {\n  next?: { tags?: string[]; revalidate?: number | false };\n}\n\nconst CONTENT_URL = /\\/api\\/v1\\/content\\/([^/?#]+)(?:\\/([^/?#]+))?/;\n\n/**\n * Wraps a fetch implementation so Plenary content reads carry cache tags.\n * Pass it to `createClient`:\n *\n * ```ts\n * const plenary = createClient({ ...config, fetch: createTaggedFetch() });\n * ```\n *\n * GET requests to `/api/v1/content/{model}` are tagged with the model, and\n * `/api/v1/content/{model}/{slugOrId}` with the model and the entry. Anything\n * else passes through untouched.\n */\nexport function createTaggedFetch(baseFetch: typeof fetch = fetch): typeof fetch {\n  return ((input: RequestInfo | URL, init?: RequestInit) => {\n    const method = init?.method ?? \"GET\";\n    const url =\n      typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n    const match = method === \"GET\" ? CONTENT_URL.exec(url) : null;\n    if (!match?.[1]) return baseFetch(input, init);\n\n    const tags = [modelTag(decodeURIComponent(match[1]))];\n    if (match[2]) tags.push(entryTag(decodeURIComponent(match[2])));\n    const next = (init as NextRequestInit | undefined)?.next;\n    const merged: NextRequestInit = {\n      ...init,\n      next: { ...next, tags: [...(next?.tags ?? []), ...tags] },\n    };\n    return baseFetch(input, merged);\n  }) as typeof fetch;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,IAAAA,iBAIO;;;ACCP,oBAOO;;;ACJA,SAAS,SAAS,UAA0B;AACjD,SAAO,iBAAiB,QAAQ;AAClC;AAIO,SAAS,SAAS,UAA0B;AACjD,SAAO,iBAAiB,QAAQ;AAClC;;;AD0BO,SAAS,SAAS,SAA6C;AACpE,QAAM,EAAE,MAAM,KAAK,IAAI,QAAQ;AAC/B,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,QAAQ,SAAS,MAAM,OAAO;AAC1C,SAAO,GAAG,GAAG,IAAI,IAAI;AACvB;AAYO,SAAS,iBACd,SACA,SACkB;AAClB,QAAM,OAAO,EAAE,UAAU,OAAO,MAAM,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC,EAAE;AACjE,MAAI,KAAC,qCAAsB,OAAO,EAAG,QAAO;AAE5C,QAAM,OAAO,QAAQ,UAAU;AAC/B,MAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,QAAQ,OAAO,SAAS,QAAQ,KAA0B,GAAG;AAC3F,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,MAAM;AAC/B,QAAM,SAAS,aAAa,SAAY,SAAY,QAAQ,QAAQ,QAAQ;AAC5E,MAAI;AACJ,MAAI,WAAW,QAAW;AACxB,aAAS,QAAQ,YAAY,UAAU,OAAO;AAAA,EAChD,OAAO;AACL,YAAQ,OAAO,WAAW,aAAa,OAAO,OAAO,IAAI;AAAA,EAC3D;AACA,QAAM,WAAW,SAAS,OAAO,CAAC,IAAI,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI;AAE5E,QAAM,OAAiB,CAAC;AACxB,MAAI,QAAQ,MAAM;AAChB,QAAI,SAAU,MAAK,KAAK,SAAS,QAAQ,CAAC;AAC1C,SAAK,KAAK,SAAS,QAAQ,MAAM,EAAE,CAAC;AACpC,QAAI,QAAQ,MAAM,KAAM,MAAK,KAAK,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EAChE;AAEA,SAAO,EAAE,UAAU,MAAM,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK;AACrE;;;ADrEO,SAAS,6BACd,SAC8D;AAC9D,QAAM,SAAS,QAAQ,gBAAgB;AACvC,QAAM,QAAQ,QAAQ,eAAe;AAErC,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI,IAAI,WAAW,QAAQ;AACzB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,qBAAqB,CAAC;AACtD;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,mCAAmC,CAAC;AACpE;AAAA,IACF;AACA,UAAM,aAAa,IAAI,QAAQ,MAAM;AACrC,UAAM,YAAY,IAAI,MAAM,KAAK;AACjC,UAAM,YACH,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI,gBAC5C,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC7C,QAAI,KAAC,oCAAoB,UAAU,QAAQ,MAAM,GAAG;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,yBAAyB,CAAC;AAC1D;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,oBAAU,oCAAoB,IAAI,IAAI;AAAA,IACxC,SAAS,KAAK;AACZ,UAAI,eAAe,oCAAqB;AACtC,YAAI,OAAO,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC;AACpD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,OAAO,iBAAiB,SAAS,OAAO;AAC9C,QAAI,CAAC,KAAK,UAAU;AAClB,UAAI,KAAK,EAAE,aAAa,OAAO,SAAS,QAAQ,MAAM,CAAC;AACvD;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,UAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;AAC1D,QAAI,KAAK,EAAE,aAAa,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,EACnD;AACF;","names":["import_client"]}

package/dist/pages.js

@@ -16,6 +16,10 @@ function createPagesRevalidateHandler(options) {
       res.status(405).json({ message: "Method not allowed" });
       return;
     }
+    if (!options.secret) {
+      res.status(500).json({ message: "Webhook secret is not configured" });
+      return;
+    }
     const fromHeader = req.headers[header];
     const fromQuery = req.query[query];
     const provided = (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ?? (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);

package/dist/pages.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/pages.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from \"next\";\nimport {\n  parseWebhookPayload,\n  verifyWebhookSecret,\n  PlenaryWebhookError,\n} from \"@plenary/client\";\nimport { planRevalidation, type RevalidateOptions } from \"./resolve.js\";\n\n/**\n * The Pages Router counterpart of `createRevalidateHandler`, built on\n * `res.revalidate`.\n *\n * ```ts\n * // pages/api/revalidate.ts\n * export default createPagesRevalidateHandler({\n *   secret: process.env.PLENARY_WEBHOOK_SECRET!,\n * });\n * ```\n *\n * Cache tags are an App Router feature; the `tags` option is ignored here.\n */\nexport function createPagesRevalidateHandler(\n  options: RevalidateOptions,\n): (req: NextApiRequest, res: NextApiResponse) => Promise<void> {\n  const header = options.secretHeader ?? \"x-plenary-secret\";\n  const query = options.secretQuery ?? \"secret\";\n\n  return async (req, res) => {\n    if (req.method !== \"POST\") {\n      res.status(405).json({ message: \"Method not allowed\" });\n      return;\n    }\n    const fromHeader = req.headers[header];\n    const fromQuery = req.query[query];\n    const provided =\n      (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ??\n      (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);\n    if (!verifyWebhookSecret(provided, options.secret)) {\n      res.status(401).json({ message: \"Invalid webhook secret\" });\n      return;\n    }\n\n    let payload;\n    try {\n      payload = parseWebhookPayload(req.body);\n    } catch (err) {\n      if (err instanceof PlenaryWebhookError) {\n        res.status(err.status).json({ message: err.message });\n        return;\n      }\n      throw err;\n    }\n\n    const plan = planRevalidation(payload, options);\n    if (!plan.relevant) {\n      res.json({ revalidated: false, ignored: payload.event });\n      return;\n    }\n    if (plan.test) {\n      res.json({ test: true, paths: plan.paths });\n      return;\n    }\n    await Promise.all(plan.paths.map((p) => res.revalidate(p)));\n    res.json({ revalidated: true, paths: plan.paths });\n  };\n}\n"],"mappings":";;;;;AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBA,SAAS,6BACd,SAC8D;AAC9D,QAAM,SAAS,QAAQ,gBAAgB;AACvC,QAAM,QAAQ,QAAQ,eAAe;AAErC,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI,IAAI,WAAW,QAAQ;AACzB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,qBAAqB,CAAC;AACtD;AAAA,IACF;AACA,UAAM,aAAa,IAAI,QAAQ,MAAM;AACrC,UAAM,YAAY,IAAI,MAAM,KAAK;AACjC,UAAM,YACH,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI,gBAC5C,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC7C,QAAI,CAAC,oBAAoB,UAAU,QAAQ,MAAM,GAAG;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,yBAAyB,CAAC;AAC1D;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,oBAAoB,IAAI,IAAI;AAAA,IACxC,SAAS,KAAK;AACZ,UAAI,eAAe,qBAAqB;AACtC,YAAI,OAAO,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC;AACpD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,OAAO,iBAAiB,SAAS,OAAO;AAC9C,QAAI,CAAC,KAAK,UAAU;AAClB,UAAI,KAAK,EAAE,aAAa,OAAO,SAAS,QAAQ,MAAM,CAAC;AACvD;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,UAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;AAC1D,QAAI,KAAK,EAAE,aAAa,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,EACnD;AACF;","names":[]}
+{"version":3,"sources":["../src/pages.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from \"next\";\nimport {\n  parseWebhookPayload,\n  verifyWebhookSecret,\n  PlenaryWebhookError,\n} from \"@plenary/client\";\nimport { planRevalidation, type RevalidateOptions } from \"./resolve.js\";\n\n/**\n * The Pages Router counterpart of `createRevalidateHandler`, built on\n * `res.revalidate`.\n *\n * ```ts\n * // pages/api/revalidate.ts\n * export default createPagesRevalidateHandler({\n *   secret: process.env.PLENARY_WEBHOOK_SECRET!,\n * });\n * ```\n *\n * Cache tags are an App Router feature; the `tags` option is ignored here.\n */\nexport function createPagesRevalidateHandler(\n  options: RevalidateOptions,\n): (req: NextApiRequest, res: NextApiResponse) => Promise<void> {\n  const header = options.secretHeader ?? \"x-plenary-secret\";\n  const query = options.secretQuery ?? \"secret\";\n\n  return async (req, res) => {\n    if (req.method !== \"POST\") {\n      res.status(405).json({ message: \"Method not allowed\" });\n      return;\n    }\n    if (!options.secret) {\n      res.status(500).json({ message: \"Webhook secret is not configured\" });\n      return;\n    }\n    const fromHeader = req.headers[header];\n    const fromQuery = req.query[query];\n    const provided =\n      (Array.isArray(fromHeader) ? fromHeader[0] : fromHeader) ??\n      (Array.isArray(fromQuery) ? fromQuery[0] : fromQuery);\n    if (!verifyWebhookSecret(provided, options.secret)) {\n      res.status(401).json({ message: \"Invalid webhook secret\" });\n      return;\n    }\n\n    let payload;\n    try {\n      payload = parseWebhookPayload(req.body);\n    } catch (err) {\n      if (err instanceof PlenaryWebhookError) {\n        res.status(err.status).json({ message: err.message });\n        return;\n      }\n      throw err;\n    }\n\n    const plan = planRevalidation(payload, options);\n    if (!plan.relevant) {\n      res.json({ revalidated: false, ignored: payload.event });\n      return;\n    }\n    if (plan.test) {\n      res.json({ test: true, paths: plan.paths });\n      return;\n    }\n    await Promise.all(plan.paths.map((p) => res.revalidate(p)));\n    res.json({ revalidated: true, paths: plan.paths });\n  };\n}\n"],"mappings":";;;;;AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBA,SAAS,6BACd,SAC8D;AAC9D,QAAM,SAAS,QAAQ,gBAAgB;AACvC,QAAM,QAAQ,QAAQ,eAAe;AAErC,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI,IAAI,WAAW,QAAQ;AACzB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,qBAAqB,CAAC;AACtD;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,mCAAmC,CAAC;AACpE;AAAA,IACF;AACA,UAAM,aAAa,IAAI,QAAQ,MAAM;AACrC,UAAM,YAAY,IAAI,MAAM,KAAK;AACjC,UAAM,YACH,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI,gBAC5C,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC7C,QAAI,CAAC,oBAAoB,UAAU,QAAQ,MAAM,GAAG;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,yBAAyB,CAAC;AAC1D;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,oBAAoB,IAAI,IAAI;AAAA,IACxC,SAAS,KAAK;AACZ,UAAI,eAAe,qBAAqB;AACtC,YAAI,OAAO,IAAI,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC;AACpD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,OAAO,iBAAiB,SAAS,OAAO;AAC9C,QAAI,CAAC,KAAK,UAAU;AAClB,UAAI,KAAK,EAAE,aAAa,OAAO,SAAS,QAAQ,MAAM,CAAC;AACvD;AAAA,IACF;AACA,QAAI,KAAK,MAAM;AACb,UAAI,KAAK,EAAE,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC;AAC1C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;AAC1D,QAAI,KAAK,EAAE,aAAa,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,EACnD;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plenary/next",
-  "version": "0.5.1",
+  "version": "1.0.0",
   "description": "Plenary Next.js integration: webhook revalidation handlers and cache-tagged fetch.",
   "type": "module",
   "sideEffects": false,
@@ -23,7 +23,7 @@
     "dist"
   ],
   "dependencies": {
-    "@plenary/client": "0.5.1"
+    "@plenary/client": "1.0.0"
   },
   "peerDependencies": {
     "next": "^14 || ^15 || ^16"