@prenta/core 0.118.0

package/dist/posts/query.js

@@ -0,0 +1,105 @@
+/**
+ * Pure query-building helpers for the aggregate `GET /posts` admin endpoint.
+ *
+ * Kept dependency-free (no Prisma, no DB) so the filter/sort logic that drives
+ * cross-collection pagination is unit-testable in isolation. The route handler
+ * in `api/handlers.ts` composes these into the actual Prisma queries.
+ */
+const DOCUMENT_STATUSES = new Set(['DRAFT', 'PUBLISHED', 'SCHEDULED', 'ARCHIVED']);
+/**
+ * Which collections a query should actually scan: a single requested type when
+ * it's allowed, otherwise every allowed post collection. An unknown/forbidden
+ * requested type collapses to an empty set so the query returns nothing rather
+ * than leaking other collections.
+ */
+export function resolveQueryCollections(input) {
+    const { allowedCollections, postType } = input;
+    if (postType && postType !== 'all') {
+        return allowedCollections.includes(postType) ? [postType] : [];
+    }
+    return allowedCollections;
+}
+/**
+ * Build the Prisma `where` filter for the posts query. Returns a plain object
+ * (typed loosely as the Prisma document filter) so it can be asserted in tests
+ * without importing Prisma types.
+ */
+export function buildPostsWhere(input) {
+    const collections = resolveQueryCollections(input);
+    const where = {
+        collection: { in: collections },
+        deletedAt: null,
+    };
+    if (input.status && input.status !== 'all' && DOCUMENT_STATUSES.has(input.status)) {
+        where.status = input.status;
+    }
+    if (input.author && input.author !== 'all') {
+        where.createdById = input.author;
+    }
+    const search = input.search?.trim();
+    if (search) {
+        where.OR = [
+            { title: { contains: search, mode: 'insensitive' } },
+            { slug: { contains: search, mode: 'insensitive' } },
+            { plainText: { contains: search, mode: 'insensitive' } },
+        ];
+    }
+    return where;
+}
+/**
+ * Map the UI sort field to a Prisma `orderBy`. `date`/`type`/`status`/`title`
+ * map to scalar columns and `author` orders by the related user's name. `seo`
+ * has no DB-sortable column (the score lives in the JSON `data` blob), so it
+ * falls back to most-recently-updated — callers should treat seo as a
+ * best-effort sort.
+ */
+export function buildPostsOrderBy(sortBy = 'date', dir = 'desc') {
+    switch (sortBy) {
+        case 'title':
+            return { title: dir };
+        case 'status':
+            return { status: dir };
+        case 'type':
+            return { collection: dir };
+        case 'author':
+            return { createdBy: { name: dir } };
+        case 'seo':
+        case 'date':
+        default:
+            return { updatedAt: dir };
+    }
+}
+/**
+ * Extract a thumbnail URL from a document's JSON data for the Posts list.
+ * Checks the common featured-image field names; each value may be a plain URL
+ * string or a media object (`{ url }`). Returns `null` when absent.
+ */
+export function extractFeaturedImage(data) {
+    if (!data || typeof data !== 'object')
+        return null;
+    const d = data;
+    for (const key of ['featuredImage', 'image', 'coverImage', 'thumbnail']) {
+        const v = d[key];
+        const url = typeof v === 'string'
+            ? v
+            : v && typeof v === 'object'
+                ? v.url
+                : null;
+        if (typeof url === 'string' && /^(https?:)?\//.test(url.trim()))
+            return url.trim();
+    }
+    return null;
+}
+/** Extract a numeric SEO score from a document's JSON data, if present. */
+export function extractSeoScore(data) {
+    if (!data || typeof data !== 'object')
+        return null;
+    const d = data;
+    for (const key of ['seoScore', 'seo_score', 'metaScore']) {
+        const v = d[key];
+        if (typeof v === 'number' && Number.isFinite(v))
+            return v;
+    }
+    return null;
+}
+//# sourceMappingURL=query.js.map

package/dist/posts/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/posts/query.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;AAElF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAsB;IAC5D,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;IAC9C,IAAI,QAAQ,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,CAAC;IACD,OAAO,kBAAkB,CAAA;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAClD,MAAM,KAAK,GAA4B;QACrC,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;QAC/B,SAAS,EAAE,IAAI;KAChB,CAAA;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClF,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3C,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAA;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,EAAE,GAAG;YACT,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;YACpD,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;YACnD,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;SACzD,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAsB,MAAM,EAC5B,MAAe,MAAM;IAErB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;QACvB,KAAK,QAAQ;YACX,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,MAAM;YACT,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAC5B,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAA;QACrC,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,CAAC,GAAG,IAA+B,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QAChB,MAAM,GAAG,GACP,OAAO,CAAC,KAAK,QAAQ;YACnB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAC1B,CAAC,CAAE,CAA6B,CAAC,GAAG;gBACpC,CAAC,CAAC,IAAI,CAAA;QACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;IACpF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,CAAC,GAAG,IAA+B,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/presence/index.d.ts

@@ -0,0 +1,24 @@
+export interface PresenceUser {
+    userId: string;
+    name: string;
+    avatarUrl?: string;
+    documentId: string;
+    fieldName?: string;
+    connectedAt: Date;
+    lastSeen: Date;
+}
+export interface PresenceProvider {
+    join(documentId: string, user: Omit<PresenceUser, 'connectedAt' | 'lastSeen'>): Promise<void>;
+    leave(documentId: string, userId: string): Promise<void>;
+    getPresent(documentId: string): Promise<PresenceUser[]>;
+    heartbeat(documentId: string, userId: string): Promise<void>;
+    onUpdate(documentId: string, callback: (users: PresenceUser[]) => void): () => void;
+}
+export declare function createSSEPresenceAdapter(): {
+    provider: PresenceProvider;
+    handleSSE: (request: Request, documentId: string, user: {
+        userId: string;
+        name: string;
+    }) => Response;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/presence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/presence/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,IAAI,CAAA;IACjB,QAAQ,EAAE,IAAI,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7F,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IACvD,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CACpF;AAID,wBAAgB,wBAAwB,IAAI;IAC1C,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,SAAS,EAAE,CACT,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KACnC,QAAQ,CAAA;CACd,CAyGA"}

package/dist/presence/index.js

@@ -0,0 +1,99 @@
+const STALE_TIMEOUT_MS = 60_000;
+export function createSSEPresenceAdapter() {
+    const connections = new Map();
+    const subscribers = new Map();
+    function broadcast(documentId) {
+        const users = Array.from(connections.get(documentId)?.values() ?? []);
+        const subs = subscribers.get(documentId);
+        if (subs) {
+            for (const cb of subs) {
+                try {
+                    cb(users);
+                }
+                catch { }
+            }
+        }
+    }
+    function expireStale(documentId) {
+        const docConns = connections.get(documentId);
+        if (!docConns)
+            return;
+        const now = Date.now();
+        let changed = false;
+        for (const [uid, user] of docConns) {
+            if (now - user.lastSeen.getTime() > STALE_TIMEOUT_MS) {
+                docConns.delete(uid);
+                changed = true;
+            }
+        }
+        if (changed)
+            broadcast(documentId);
+    }
+    const provider = {
+        async join(documentId, user) {
+            if (!connections.has(documentId))
+                connections.set(documentId, new Map());
+            const now = new Date();
+            connections.get(documentId).set(user.userId, { ...user, connectedAt: now, lastSeen: now });
+            broadcast(documentId);
+        },
+        async leave(documentId, userId) {
+            connections.get(documentId)?.delete(userId);
+            broadcast(documentId);
+        },
+        async getPresent(documentId) {
+            expireStale(documentId);
+            return Array.from(connections.get(documentId)?.values() ?? []);
+        },
+        async heartbeat(documentId, userId) {
+            const user = connections.get(documentId)?.get(userId);
+            if (user) {
+                user.lastSeen = new Date();
+            }
+        },
+        onUpdate(documentId, callback) {
+            if (!subscribers.has(documentId))
+                subscribers.set(documentId, new Set());
+            subscribers.get(documentId).add(callback);
+            return () => {
+                subscribers.get(documentId)?.delete(callback);
+            };
+        },
+    };
+    function handleSSE(request, documentId, user) {
+        let unsubscribe = null;
+        let interval = null;
+        const stream = new ReadableStream({
+            start(controller) {
+                provider.join(documentId, { userId: user.userId, name: user.name, documentId });
+                const send = (users) => {
+                    try {
+                        const data = JSON.stringify(users.map((u) => ({ userId: u.userId, name: u.name, connectedAt: u.connectedAt })));
+                        controller.enqueue(new TextEncoder().encode(`event: presence\ndata: ${data}\n\n`));
+                    }
+                    catch { }
+                };
+                provider.getPresent(documentId).then(send);
+                unsubscribe = provider.onUpdate(documentId, send);
+                interval = setInterval(() => expireStale(documentId), 30_000);
+            },
+            cancel() {
+                provider.leave(documentId, user.userId);
+                if (unsubscribe)
+                    unsubscribe();
+                if (interval)
+                    clearInterval(interval);
+            },
+        });
+        return new Response(stream, {
+            headers: {
+                'Content-Type': 'text/event-stream',
+                'Cache-Control': 'no-cache',
+                Connection: 'keep-alive',
+                'X-Accel-Buffering': 'no',
+            },
+        });
+    }
+    return { provider, handleSSE };
+}
+//# sourceMappingURL=index.js.map

package/dist/presence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/presence/index.ts"],"names":[],"mappings":"AAkBA,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B,MAAM,UAAU,wBAAwB;IAQtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAA;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAA;IAE3E,SAAS,SAAS,CAAC,UAAkB;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACxC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,CAAA;gBACX,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAAC,UAAkB;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC5C,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;YACnC,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;gBACrD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpB,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,CAAC;IAED,MAAM,QAAQ,GAAqB;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI;YACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACxE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3F,SAAS,CAAC,UAAU,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM;YAC5B,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YAC3C,SAAS,CAAC,UAAU,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,UAAU;YACzB,WAAW,CAAC,UAAU,CAAC,CAAA;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM;YAChC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;YACrD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAA;YAC5B,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,UAAU,EAAE,QAAQ;YAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACxE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC1C,OAAO,GAAG,EAAE;gBACV,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC/C,CAAC,CAAA;QACH,CAAC;KACF,CAAA;IAED,SAAS,SAAS,CAChB,OAAgB,EAChB,UAAkB,EAClB,IAAsC;QAEtC,IAAI,WAAW,GAAwB,IAAI,CAAA;QAC3C,IAAI,QAAQ,GAA0C,IAAI,CAAA;QAE1D,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;YAChC,KAAK,CAAC,UAAU;gBACd,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;gBAE/E,MAAM,IAAI,GAAG,CAAC,KAAqB,EAAE,EAAE;oBACrC,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CACzB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACnF,CAAA;wBACD,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,IAAI,MAAM,CAAC,CAAC,CAAA;oBACpF,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC,CAAA;gBAED,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAE1C,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBAEjD,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM;gBACJ,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBACvC,IAAI,WAAW;oBAAE,WAAW,EAAE,CAAA;gBAC9B,IAAI,QAAQ;oBAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;YACvC,CAAC;SACF,CAAC,CAAA;QAEF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAC1B,OAAO,EAAE;gBACP,cAAc,EAAE,mBAAmB;gBACnC,eAAe,EAAE,UAAU;gBAC3B,UAAU,EAAE,YAAY;gBACxB,mBAAmB,EAAE,IAAI;aAC1B;SACF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC"}

package/dist/preview/event-bus.d.ts

@@ -0,0 +1,39 @@
+/**
+ * In-process pub/sub for live-preview update events.
+ *
+ * The admin emits `notifyPreviewUpdate(collection, id, payload)` whenever a
+ * draft document changes (today: the `PUT /collections/:slug/:id` route).
+ * Active SSE streams subscribe via `subscribePreviewUpdates(collection, id, listener)`
+ * and forward every payload through to their connected `EventSource`
+ * clients.
+ *
+ * The bus is intentionally single-instance and in-memory:
+ *
+ *   - Self-hosted single-node deployments get push-to-iframe updates
+ *     "for free" with zero extra infrastructure.
+ *   - Multi-node deployments will see each node deliver only its own
+ *     update events — fine for the Phase 2 finish-line. A future Slice
+ *     can swap this for a Redis/postgres-listen backed bus without
+ *     changing the public contract (`notifyPreviewUpdate` /
+ *     `subscribePreviewUpdates`).
+ *
+ * The bus is keyed by `${collection}:${documentId}` so two simultaneously
+ * open previews for different docs don't see each other's traffic.
+ */
+export interface PreviewUpdateEvent {
+    collection: string;
+    documentId: string;
+    /** Free-form payload — the SSE handler stringifies it as the event data. */
+    payload: Record<string, unknown>;
+    /** Server-side emission timestamp; useful for clients to detect skew. */
+    at: number;
+}
+export type PreviewUpdateListener = (event: PreviewUpdateEvent) => void;
+export declare function subscribePreviewUpdates(collection: string, documentId: string, listener: PreviewUpdateListener): () => void;
+export declare function notifyPreviewUpdate(collection: string, documentId: string, payload: Record<string, unknown>): void;
+export declare function previewSubscriberCount(collection: string, documentId: string): number;
+/**
+ * Test helper. Drops every subscription. Production code never calls this.
+ */
+export declare function __resetPreviewEventBus(): void;
+//# sourceMappingURL=event-bus.d.ts.map

package/dist/preview/event-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/preview/event-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,yEAAyE;IACzE,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAA;AAQvE,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,qBAAqB,GAC9B,MAAM,IAAI,CAcZ;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAiBN;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAErF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/preview/event-bus.js

@@ -0,0 +1,73 @@
+/**
+ * In-process pub/sub for live-preview update events.
+ *
+ * The admin emits `notifyPreviewUpdate(collection, id, payload)` whenever a
+ * draft document changes (today: the `PUT /collections/:slug/:id` route).
+ * Active SSE streams subscribe via `subscribePreviewUpdates(collection, id, listener)`
+ * and forward every payload through to their connected `EventSource`
+ * clients.
+ *
+ * The bus is intentionally single-instance and in-memory:
+ *
+ *   - Self-hosted single-node deployments get push-to-iframe updates
+ *     "for free" with zero extra infrastructure.
+ *   - Multi-node deployments will see each node deliver only its own
+ *     update events — fine for the Phase 2 finish-line. A future Slice
+ *     can swap this for a Redis/postgres-listen backed bus without
+ *     changing the public contract (`notifyPreviewUpdate` /
+ *     `subscribePreviewUpdates`).
+ *
+ * The bus is keyed by `${collection}:${documentId}` so two simultaneously
+ * open previews for different docs don't see each other's traffic.
+ */
+const listenersByKey = new Map();
+function keyOf(collection, documentId) {
+    return `${collection}:${documentId}`;
+}
+export function subscribePreviewUpdates(collection, documentId, listener) {
+    const key = keyOf(collection, documentId);
+    let set = listenersByKey.get(key);
+    if (!set) {
+        set = new Set();
+        listenersByKey.set(key, set);
+    }
+    set.add(listener);
+    return () => {
+        const current = listenersByKey.get(key);
+        if (!current)
+            return;
+        current.delete(listener);
+        if (current.size === 0)
+            listenersByKey.delete(key);
+    };
+}
+export function notifyPreviewUpdate(collection, documentId, payload) {
+    const set = listenersByKey.get(keyOf(collection, documentId));
+    if (!set || set.size === 0)
+        return;
+    const event = {
+        collection,
+        documentId,
+        payload,
+        at: Date.now(),
+    };
+    for (const listener of [...set]) {
+        try {
+            listener(event);
+        }
+        catch {
+            // listener throws are isolated — one buggy stream must not take down
+            // every other subscriber for the same doc.
+        }
+    }
+}
+export function previewSubscriberCount(collection, documentId) {
+    return listenersByKey.get(keyOf(collection, documentId))?.size ?? 0;
+}
+/**
+ * Test helper. Drops every subscription. Production code never calls this.
+ */
+export function __resetPreviewEventBus() {
+    listenersByKey.clear();
+}
+//# sourceMappingURL=event-bus.js.map

package/dist/preview/event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.js","sourceRoot":"","sources":["../../src/preview/event-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAaH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsC,CAAA;AAEpE,SAAS,KAAK,CAAC,UAAkB,EAAE,UAAkB;IACnD,OAAO,GAAG,UAAU,IAAI,UAAU,EAAE,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,UAAkB,EAClB,QAA+B;IAE/B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACzC,IAAI,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;QACf,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACjB,OAAO,GAAG,EAAE;QACV,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,UAAkB,EAClB,OAAgC;IAEhC,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAM;IAClC,MAAM,KAAK,GAAuB;QAChC,UAAU;QACV,UAAU;QACV,OAAO;QACP,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;KACf,CAAA;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,2CAA2C;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,UAAkB;IAC3E,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAA;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC"}

package/dist/preview/index.d.ts

@@ -0,0 +1,36 @@
+export interface PreviewSession {
+    token: string;
+    collection: string;
+    documentId: string;
+    /** When the token expires (server clock). */
+    expiresAt: Date;
+    /** The admin who issued the token (used for audit + future revocation). */
+    issuedBy?: string;
+}
+export interface CreatePreviewSessionOptions {
+    /**
+     * Token lifetime in seconds. Defaults to 7 days. The maximum is
+     * enforced server-side ({@link MAX_PREVIEW_TOKEN_TTL_SECONDS}). A short
+     * TTL is preferable for one-off client reviews; longer TTLs are okay
+     * for staging-style preview links shared with trusted partners.
+     */
+    ttlSeconds?: number;
+    /** Issuing admin's user id (recorded in the JWT for audit). */
+    issuedBy?: string;
+}
+export interface PreviewAdapter {
+    createPreviewSession(collection: string, documentId: string, options?: CreatePreviewSessionOptions): Promise<PreviewSession>;
+    validatePreviewToken(token: string): Promise<PreviewSession | null>;
+    exitPreview(token: string): Promise<void>;
+    getPreviewData(session: PreviewSession): Promise<Record<string, unknown> | null>;
+}
+/** 5 minutes — fits "one tab, one read" review flows. */
+export declare const DEFAULT_PREVIEW_TOKEN_TTL_SECONDS: number;
+/**
+ * Upper bound for token lifetime. Tokens are JWT-signed and stateless, so a
+ * leaked token is valid until expiry — keep the ceiling reasonable. Sites
+ * that need shareable URLs for months should use draft-publishing instead.
+ */
+export declare const MAX_PREVIEW_TOKEN_TTL_SECONDS: number;
+export declare function createPreviewAdapter(secret: string, db: unknown): PreviewAdapter;
+//# sourceMappingURL=index.d.ts.map

package/dist/preview/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/preview/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,SAAS,EAAE,IAAI,CAAA;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,CAClB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1B,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IACnE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;CACjF;AAED,yDAAyD;AACzD,eAAO,MAAM,iCAAiC,QAAmB,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,QAAoB,CAAA;AAE9D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,cAAc,CA2DhF"}

package/dist/preview/index.js

@@ -0,0 +1,68 @@
+import * as jose from 'jose';
+/** 5 minutes — fits "one tab, one read" review flows. */
+export const DEFAULT_PREVIEW_TOKEN_TTL_SECONDS = 7 * 24 * 60 * 60; // 7 days
+/**
+ * Upper bound for token lifetime. Tokens are JWT-signed and stateless, so a
+ * leaked token is valid until expiry — keep the ceiling reasonable. Sites
+ * that need shareable URLs for months should use draft-publishing instead.
+ */
+export const MAX_PREVIEW_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60; // 30 days
+export function createPreviewAdapter(secret, db) {
+    const secretKey = new TextEncoder().encode(secret);
+    return {
+        async createPreviewSession(collection, documentId, options) {
+            const requested = options?.ttlSeconds ?? DEFAULT_PREVIEW_TOKEN_TTL_SECONDS;
+            const ttl = Math.max(60, Math.min(requested, MAX_PREVIEW_TOKEN_TTL_SECONDS));
+            const expiresAt = new Date(Date.now() + ttl * 1000);
+            let builder = new jose.SignJWT({ collection, documentId })
+                .setProtectedHeader({ alg: 'HS256' })
+                .setIssuedAt()
+                .setExpirationTime(expiresAt)
+                .setIssuer('prenta-cms-preview');
+            if (options?.issuedBy) {
+                builder = builder.setSubject(options.issuedBy);
+            }
+            const token = await builder.sign(secretKey);
+            return {
+                token,
+                collection,
+                documentId,
+                expiresAt,
+                issuedBy: options?.issuedBy,
+            };
+        },
+        async validatePreviewToken(token) {
+            try {
+                const { payload } = await jose.jwtVerify(token, secretKey, {
+                    issuer: 'prenta-cms-preview',
+                });
+                return {
+                    token,
+                    collection: payload.collection,
+                    documentId: payload.documentId,
+                    expiresAt: new Date((payload.exp ?? 0) * 1000),
+                    issuedBy: typeof payload.sub === 'string' ? payload.sub : undefined,
+                };
+            }
+            catch {
+                return null;
+            }
+        },
+        async exitPreview(_token) {
+            // JWT-based tokens are stateless; no server-side invalidation needed.
+            // For revocation, rotate the global CMS_SECRET (invalidates all tokens
+            // at once). Per-token revocation requires a backing table — track via
+            // future Slice if needed.
+        },
+        async getPreviewData(session) {
+            const prisma = db;
+            const doc = await prisma.document.findFirst({
+                where: { id: session.documentId, collection: session.collection },
+            });
+            if (!doc)
+                return null;
+            return { ...doc, data: doc.data };
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/preview/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preview/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAmC5B,yDAAyD;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA,CAAC,SAAS;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA,CAAC,UAAU;AAEzE,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,EAAW;IAC9D,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAElD,OAAO;QACL,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO;YACxD,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,IAAI,iCAAiC,CAAA;YAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAA;YAC5E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAA;YACnD,IAAI,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;iBACvD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;iBACpC,WAAW,EAAE;iBACb,iBAAiB,CAAC,SAAS,CAAC;iBAC5B,SAAS,CAAC,oBAAoB,CAAC,CAAA;YAClC,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAChD,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC3C,OAAO;gBACL,KAAK;gBACL,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,QAAQ,EAAE,OAAO,EAAE,QAAQ;aAC5B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK;YAC9B,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE;oBACzD,MAAM,EAAE,oBAAoB;iBAC7B,CAAC,CAAA;gBACF,OAAO;oBACL,KAAK;oBACL,UAAU,EAAE,OAAO,CAAC,UAAoB;oBACxC,UAAU,EAAE,OAAO,CAAC,UAAoB;oBACxC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;oBAC9C,QAAQ,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,0BAA0B;QAC5B,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,OAAO;YAC1B,MAAM,MAAM,GAAG,EAAS,CAAA;YACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;aAClE,CAAC,CAAA;YACF,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAA;YACrB,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;QACnC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/preview/sse-stream.d.ts

@@ -0,0 +1,47 @@
+import type { PreviewSession } from './index.js';
+import { encodeSseEvent } from '../realtime/sse.js';
+export { encodeSseEvent };
+/**
+ * Default keepalive interval. 25 s sits safely under the most aggressive
+ * proxy/idle timeouts we've encountered in production (Cloudflare 30 s,
+ * Vercel Serverless 30 s, most reverse-proxies 60 s).
+ */
+export declare const PREVIEW_SSE_HEARTBEAT_MS = 25000;
+/**
+ * Maximum stream lifetime in ms. After this, the server closes the stream
+ * cleanly so EventSource will reconnect — important because some platforms
+ * (Vercel Fluid Compute, Cloudflare Workers) cap any single response at a
+ * few minutes regardless of activity.
+ */
+export declare const PREVIEW_SSE_MAX_LIFETIME_MS: number;
+export interface PreviewStreamOptions {
+    /** Override for tests so we don't have to wait 25 seconds. */
+    heartbeatMs?: number;
+    /** Override for tests so we don't tie up the suite for 4 minutes. */
+    maxLifetimeMs?: number;
+}
+/**
+ * Build a `ReadableStream` of Server-Sent Events for the given preview
+ * session. The stream:
+ *
+ *   1. Emits an `event: ready` frame with the session's collection/id.
+ *      Lets the client confirm the server-side subscription is wired up
+ *      before it starts treating the absence of events as "stale".
+ *   2. Forwards every `notifyPreviewUpdate(collection, id, payload)` to
+ *      the client as `event: update` with `payload` as JSON data.
+ *   3. Sends `: heartbeat\n\n` keepalive comments on
+ *      `PREVIEW_SSE_HEARTBEAT_MS` intervals.
+ *   4. Cleanly closes after `PREVIEW_SSE_MAX_LIFETIME_MS` and lets the
+ *      browser reconnect, sidestepping platform idle/max-duration caps.
+ *
+ * The returned stream MUST be wrapped in a `Response` with the SSE
+ * headers — `createPreviewStreamResponse` does this for typical callers.
+ */
+export declare function createPreviewStream(session: Pick<PreviewSession, 'collection' | 'documentId'>, opts?: PreviewStreamOptions): ReadableStream<Uint8Array>;
+/**
+ * Standard SSE response headers. Exposed for callers (and tests) that want
+ * to wrap the stream themselves.
+ */
+export declare const PREVIEW_SSE_HEADERS: Record<string, string>;
+export declare function createPreviewStreamResponse(session: Pick<PreviewSession, 'collection' | 'documentId'>, opts?: PreviewStreamOptions): Response;
+//# sourceMappingURL=sse-stream.d.ts.map

package/dist/preview/sse-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-stream.d.ts","sourceRoot":"","sources":["../../src/preview/sse-stream.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,OAAO,EAAE,cAAc,EAAE,CAAA;AAezB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,QAAS,CAAA;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,QAAgB,CAAA;AAExD,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,EAC1D,IAAI,GAAE,oBAAyB,GAC9B,cAAc,CAAC,UAAU,CAAC,CAwD5B;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAOtD,CAAA;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,EAC1D,IAAI,CAAC,EAAE,oBAAoB,GAC1B,QAAQ,CAKV"}

package/dist/preview/sse-stream.js

@@ -0,0 +1,111 @@
+import { subscribePreviewUpdates } from './event-bus.js';
+import { encodeSseEvent } from '../realtime/sse.js';
+export { encodeSseEvent };
+/**
+ * SSE wire format helpers. We keep them small and pure so the route handler
+ * can build a `ReadableStream<Uint8Array>` without pulling in any extra
+ * dependencies (this also keeps the file edge-compatible).
+ *
+ * The encoder itself lives in `../realtime/sse.ts` — a single source of
+ * truth across every SSE channel in cms-core (preview + notifications,
+ * today). Re-exported here so existing callers (and tests) that import
+ * it from this module keep working.
+ */
+const encoder = new TextEncoder();
+/**
+ * Default keepalive interval. 25 s sits safely under the most aggressive
+ * proxy/idle timeouts we've encountered in production (Cloudflare 30 s,
+ * Vercel Serverless 30 s, most reverse-proxies 60 s).
+ */
+export const PREVIEW_SSE_HEARTBEAT_MS = 25_000;
+/**
+ * Maximum stream lifetime in ms. After this, the server closes the stream
+ * cleanly so EventSource will reconnect — important because some platforms
+ * (Vercel Fluid Compute, Cloudflare Workers) cap any single response at a
+ * few minutes regardless of activity.
+ */
+export const PREVIEW_SSE_MAX_LIFETIME_MS = 4 * 60 * 1000;
+/**
+ * Build a `ReadableStream` of Server-Sent Events for the given preview
+ * session. The stream:
+ *
+ *   1. Emits an `event: ready` frame with the session's collection/id.
+ *      Lets the client confirm the server-side subscription is wired up
+ *      before it starts treating the absence of events as "stale".
+ *   2. Forwards every `notifyPreviewUpdate(collection, id, payload)` to
+ *      the client as `event: update` with `payload` as JSON data.
+ *   3. Sends `: heartbeat\n\n` keepalive comments on
+ *      `PREVIEW_SSE_HEARTBEAT_MS` intervals.
+ *   4. Cleanly closes after `PREVIEW_SSE_MAX_LIFETIME_MS` and lets the
+ *      browser reconnect, sidestepping platform idle/max-duration caps.
+ *
+ * The returned stream MUST be wrapped in a `Response` with the SSE
+ * headers — `createPreviewStreamResponse` does this for typical callers.
+ */
+export function createPreviewStream(session, opts = {}) {
+    const heartbeatMs = opts.heartbeatMs ?? PREVIEW_SSE_HEARTBEAT_MS;
+    const maxLifetimeMs = opts.maxLifetimeMs ?? PREVIEW_SSE_MAX_LIFETIME_MS;
+    let heartbeat;
+    let lifetime;
+    let unsubscribe;
+    return new ReadableStream({
+        start(controller) {
+            const enqueue = (chunk) => {
+                try {
+                    controller.enqueue(encoder.encode(chunk));
+                }
+                catch {
+                    // Controller can be closed mid-emit if the client disconnected
+                    // between the `notifyPreviewUpdate` call and the enqueue. Swallow.
+                }
+            };
+            enqueue(encodeSseEvent({ collection: session.collection, documentId: session.documentId }, 'ready'));
+            unsubscribe = subscribePreviewUpdates(session.collection, session.documentId, (event) => {
+                enqueue(encodeSseEvent({
+                    collection: event.collection,
+                    documentId: event.documentId,
+                    at: event.at,
+                    ...event.payload,
+                }, 'update'));
+            });
+            heartbeat = setInterval(() => {
+                enqueue(`: heartbeat\n\n`);
+            }, heartbeatMs);
+            lifetime = setTimeout(() => {
+                try {
+                    controller.close();
+                }
+                catch {
+                    // Already closed; nothing to do.
+                }
+            }, maxLifetimeMs);
+        },
+        cancel() {
+            if (heartbeat)
+                clearInterval(heartbeat);
+            if (lifetime)
+                clearTimeout(lifetime);
+            if (unsubscribe)
+                unsubscribe();
+        },
+    });
+}
+/**
+ * Standard SSE response headers. Exposed for callers (and tests) that want
+ * to wrap the stream themselves.
+ */
+export const PREVIEW_SSE_HEADERS = {
+    'Content-Type': 'text/event-stream; charset=utf-8',
+    'Cache-Control': 'no-cache, no-transform',
+    Connection: 'keep-alive',
+    // Discourage proxies/CDNs from buffering — without this nginx will hold
+    // events back until 4 KB of payload accumulates.
+    'X-Accel-Buffering': 'no',
+};
+export function createPreviewStreamResponse(session, opts) {
+    return new Response(createPreviewStream(session, opts), {
+        status: 200,
+        headers: PREVIEW_SSE_HEADERS,
+    });
+}
+//# sourceMappingURL=sse-stream.js.map