@pramen/cms-editor 0.0.53 → 0.0.54

package/README.md

@@ -84,10 +84,26 @@ admin: {
   brand: { name: "Acme", suffix: "cms" },            // the wordmark — see below
   // signInUrl: "/signin/",                          // ONLY once that page exists — see the warning
   // hidePages: true,                                // collections-only deployments
-  // extraNav: [{ label: "Curation", href: "/curate" }],
+  // extraNav: [{ label: "Curation", href: "/curate", target: "_self" }],
 }
 ```
 
+`extraNav` links open in a **new tab** by default, because the editor's catch-all route
+matches every same-origin path — a same-tab click would land on the editor's own 404 instead
+of your tool. Add `target: "_self"` to ask for a same-tab navigation; it is honoured only
+where the router provably will not claim the url:
+
+| Link | Editor mounted under a prefix | Editor at the origin root |
+| --- | --- | --- |
+| Another origin (`https://tools.acme.com/x`) | same tab | same tab |
+| Same origin, outside the mount (`/curate`) | same tab | new tab |
+| Same origin, inside the mount | new tab | new tab |
+
+Anything else — a relative href that resolves back inside the mount, a `javascript:` url, an
+unparseable one — degrades to a new tab rather than stranding the editor on its 404. A
+same-tab link runs the unsaved-changes guard first, so it cannot silently discard an edit in
+progress.
+
 > **`signInUrl` must be a page that exists.** An unauthenticated load calls it after
 > clearing the stored session, so a path that 404s into this SPA's own catch-all leaves the
 > editor bouncing between the redirect and itself with no session to recover from. Point it