@preprio/toolkit 0.2.0-beta.6 → 0.2.0-beta.9

package/dist/astro/index.cjs

@@ -30,7 +30,7 @@ __export(astro_exports, {
 module.exports = __toCommonJS(astro_exports);
 
 // src/version.ts
-var VERSION = "0.2.0-beta.6";
+var VERSION = "0.2.0-beta.9";
 
 // src/core/features.ts
 function isEnabled(config) {
@@ -100,7 +100,11 @@ function getPreprHeadersFromHeaders(headers) {
 }
 function validatePreprToken(token) {
   if (!token) {
-    throw new PreprError("Token is required", "MISSING_TOKEN", "validatePreprToken");
+    throw new PreprError(
+      "Token is required",
+      "MISSING_TOKEN",
+      "validatePreprToken"
+    );
   }
   if (!token.startsWith("https://")) {
     throw new PreprError(
@@ -222,7 +226,11 @@ function parseCookies(request) {
     const name = part.slice(0, eq).trim();
     const value = part.slice(eq + 1).trim();
     if (!name) continue;
-    cookies.set(name, decodeURIComponent(value));
+    try {
+      cookies.set(name, decodeURIComponent(value));
+    } catch {
+      cookies.set(name, value);
+    }
   }
   return cookies;
 }
@@ -261,7 +269,10 @@ function processPreprRequest(request, opts) {
   if (userAgent) {
     requestHeaders.set("Prepr-User-Agent", sanitizeHeaderValue(userAgent));
   }
-  requestHeaders.set("Prepr-Package", `@preprio/toolkit@${opts?.version ?? VERSION}`);
+  requestHeaders.set(
+    "Prepr-Package",
+    `@preprio/toolkit@${opts?.version ?? VERSION}`
+  );
   const ip = request.headers.get("Cf-Connecting-Ip") ?? request.headers.get("x-real-ip");
   if (ip) {
     requestHeaders.set("Prepr-Visitor-IP", sanitizeHeaderValue(ip));
@@ -270,7 +281,7 @@ function processPreprRequest(request, opts) {
   if (hutkCookie) {
     requestHeaders.set("Prepr-Hubspot-Id", sanitizeHeaderValue(hutkCookie));
   }
-  let uid = requestCookies.get(COOKIE_UID);
+  let uid = sanitizeHeaderValue(requestCookies.get(COOKIE_UID) ?? "");
   if (!uid) {
     uid = crypto.randomUUID();
     responseCookies.push({
@@ -346,7 +357,10 @@ function processPreprRequest(request, opts) {
 
 // src/astro/index.ts
 async function onPreprRequest(context, next, options) {
-  const { requestHeaders, responseCookies } = processPreprRequest(context.request, options);
+  const { requestHeaders, responseCookies } = processPreprRequest(
+    context.request,
+    options
+  );
   requestHeaders.forEach((value, key) => {
     context.request.headers.set(key, value);
   });

package/dist/astro/index.d.cts

@@ -90,7 +90,7 @@ type AstroNext = () => Promise<Response>;
  * Astro middleware entry point: computes the Prepr headers/cookies for this
  * request, forwards the headers downstream and sets the cookies on the response.
  *
- * Astro hands downstream code the same `Request` instance we get here, so the
+ * Astro hands downstream code the same `Request` instance this middleware receives, so the
  * headers are mutated in place — building a new `Request` would go nowhere,
  * there's no way to hand a replacement back out of middleware.
  */

package/dist/astro/index.d.ts

@@ -90,7 +90,7 @@ type AstroNext = () => Promise<Response>;
  * Astro middleware entry point: computes the Prepr headers/cookies for this
  * request, forwards the headers downstream and sets the cookies on the response.
  *
- * Astro hands downstream code the same `Request` instance we get here, so the
+ * Astro hands downstream code the same `Request` instance this middleware receives, so the
  * headers are mutated in place — building a new `Request` would go nowhere,
  * there's no way to hand a replacement back out of middleware.
  */

package/dist/astro/index.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var VERSION = "0.2.0-beta.6";
+var VERSION = "0.2.0-beta.9";
 
 // src/core/features.ts
 function isEnabled(config) {
@@ -69,7 +69,11 @@ function getPreprHeadersFromHeaders(headers) {
 }
 function validatePreprToken(token) {
   if (!token) {
-    throw new PreprError("Token is required", "MISSING_TOKEN", "validatePreprToken");
+    throw new PreprError(
+      "Token is required",
+      "MISSING_TOKEN",
+      "validatePreprToken"
+    );
   }
   if (!token.startsWith("https://")) {
     throw new PreprError(
@@ -191,7 +195,11 @@ function parseCookies(request) {
     const name = part.slice(0, eq).trim();
     const value = part.slice(eq + 1).trim();
     if (!name) continue;
-    cookies.set(name, decodeURIComponent(value));
+    try {
+      cookies.set(name, decodeURIComponent(value));
+    } catch {
+      cookies.set(name, value);
+    }
   }
   return cookies;
 }
@@ -230,7 +238,10 @@ function processPreprRequest(request, opts) {
   if (userAgent) {
     requestHeaders.set("Prepr-User-Agent", sanitizeHeaderValue(userAgent));
   }
-  requestHeaders.set("Prepr-Package", `@preprio/toolkit@${opts?.version ?? VERSION}`);
+  requestHeaders.set(
+    "Prepr-Package",
+    `@preprio/toolkit@${opts?.version ?? VERSION}`
+  );
   const ip = request.headers.get("Cf-Connecting-Ip") ?? request.headers.get("x-real-ip");
   if (ip) {
     requestHeaders.set("Prepr-Visitor-IP", sanitizeHeaderValue(ip));
@@ -239,7 +250,7 @@ function processPreprRequest(request, opts) {
   if (hutkCookie) {
     requestHeaders.set("Prepr-Hubspot-Id", sanitizeHeaderValue(hutkCookie));
   }
-  let uid = requestCookies.get(COOKIE_UID);
+  let uid = sanitizeHeaderValue(requestCookies.get(COOKIE_UID) ?? "");
   if (!uid) {
     uid = crypto.randomUUID();
     responseCookies.push({
@@ -315,7 +326,10 @@ function processPreprRequest(request, opts) {
 
 // src/astro/index.ts
 async function onPreprRequest(context, next, options) {
-  const { requestHeaders, responseCookies } = processPreprRequest(context.request, options);
+  const { requestHeaders, responseCookies } = processPreprRequest(
+    context.request,
+    options
+  );
   requestHeaders.forEach((value, key) => {
     context.request.headers.set(key, value);
   });

package/dist/{chunk-C6YEXA5G.js → chunk-JVUG6S4O.js}

@@ -142,9 +142,7 @@ function decodeStega(str) {
     const match = str.match(/{"origin.*?}/);
     if (match) {
       try {
-        const decodedMatch = vercelStegaDecode(
-          match[0]
-        );
+        const decodedMatch = vercelStegaDecode(match[0]);
         if (decodedMatch?.href) {
           return decodedMatch;
         }
@@ -570,8 +568,13 @@ function createStegaController(opts) {
         overlay.hide();
       }
     }, 16);
-    document.addEventListener("mousemove", throttledMouseMove);
-    window.addEventListener("scroll", handleScroll, { capture: true });
+    document.addEventListener("mousemove", throttledMouseMove, {
+      passive: true
+    });
+    window.addEventListener("scroll", handleScroll, {
+      capture: true,
+      passive: true
+    });
     initialized = true;
     debug5.log("stega controller started");
   };
@@ -644,6 +647,8 @@ function createStegaAutoClean() {
   function scanAndClean() {
     processing = true;
     walkTextNodes(document.body, cleanTextNode);
+    const title = vercelStegaSplit(document.title);
+    if (title.encoded) document.title = title.cleaned;
     processing = false;
   }
   function collectAffected(mutations) {
@@ -689,15 +694,8 @@ function createStegaAutoClean() {
   }
   function start() {
     if (observer || typeof window === "undefined") return;
-    const run = () => {
-      scanAndClean();
-      setupObserver();
-    };
-    if ("requestIdleCallback" in window) {
-      window.requestIdleCallback(run);
-    } else {
-      setTimeout(run, 0);
-    }
+    scanAndClean();
+    setupObserver();
     debug6.log("stega auto-clean started");
   }
   function stop() {
@@ -1047,7 +1045,10 @@ function u2(e2, t3, n2, o2, i2, u3) {
 }
 
 // src/core/ui/panel.tsx
-function RawSvg({ svg, className }) {
+function RawSvg({
+  svg,
+  className
+}) {
   return /* @__PURE__ */ u2(
     "span",
     {
@@ -1618,9 +1619,7 @@ var PreprToolbarElement = class extends HTMLElementBase {
     ) ?? null;
   }
   optionsList() {
-    return this.shadowRoot?.querySelector(
-      '[data-prepr="options"]'
-    ) ?? null;
+    return this.shadowRoot?.querySelector('[data-prepr="options"]') ?? null;
   }
   onListboxKeydown(event) {
     const e2 = event;
@@ -1934,7 +1933,7 @@ function cookieOpts() {
   };
 }
 function createChangeHandler(deps) {
-  const { store, stega, syncAutoClean, features, editingEnabled } = deps;
+  const { store, stega, features, editingEnabled } = deps;
   function updateParams(patch) {
     const [path, existing] = splitPath(deps.currentPath());
     const params = new URLSearchParams(existing);
@@ -1996,17 +1995,20 @@ function createChangeHandler(deps) {
       }
       setCookie(COOKIE_PREVIEW_MODE, String(after.previewMode), cookieOpts());
       setCookie(COOKIE_TOOLBAR_OPEN, "false", cookieOpts());
-      sendPreprEvent("preview_mode_toggled", { previewMode: after.previewMode });
-      syncAutoClean(after.previewMode);
-      const [path, existing] = splitPath(deps.currentPath());
-      const params = new URLSearchParams(existing);
-      if (params.has(PARAM_SEGMENT) || params.has(PARAM_VARIANT)) {
-        params.delete(PARAM_SEGMENT);
-        params.delete(PARAM_VARIANT);
-        const query = params.toString();
-        deps.navigate(query ? `${path}?${query}` : path);
-      } else {
-        deps.reload();
+      sendPreprEvent("preview_mode_toggled", {
+        previewMode: after.previewMode
+      });
+      if (!after.isIframe) {
+        const [path, existing] = splitPath(deps.currentPath());
+        const params = new URLSearchParams(existing);
+        if (params.has(PARAM_SEGMENT) || params.has(PARAM_VARIANT)) {
+          params.delete(PARAM_SEGMENT);
+          params.delete(PARAM_VARIANT);
+          const query = params.toString();
+          deps.navigate(query ? `${path}?${query}` : path);
+        } else {
+          deps.reload();
+        }
       }
     }
     if (before.toolbarOpen !== after.toolbarOpen) {
@@ -2118,16 +2120,7 @@ function createPreprPreview(opts = {}) {
     }
   });
   const autoClean = createStegaAutoClean();
-  let autoCleanActive = false;
-  function syncAutoClean(active) {
-    if (active && !autoCleanActive) {
-      autoClean.start();
-      autoCleanActive = true;
-    } else if (!active && autoCleanActive) {
-      autoClean.stop();
-      autoCleanActive = false;
-    }
-  }
+  autoClean.start();
   const handleChange = createChangeHandler({
     store,
     features,
@@ -2135,8 +2128,7 @@ function createPreprPreview(opts = {}) {
     navigate: (url) => navigation.navigate(url),
     currentPath: () => navigation.currentPath(),
     reload: navigation.reload ?? (() => window.location.reload()),
-    stega,
-    syncAutoClean
+    stega
   });
   let prev = store.get();
   const unsubscribe = store.subscribe((state) => {
@@ -2144,20 +2136,23 @@ function createPreprPreview(opts = {}) {
     prev = state;
     handleChange(before, state);
   });
-  syncAutoClean(store.get().previewMode);
   const bridge = createIframeBridge(store, {
     allowedEditorOrigins: options?.allowedEditorOrigins
   });
-  sendPreprEvent("getScrollPosition", { value: 0 }, {
-    allowUntrustedTarget: true
-  });
+  sendPreprEvent(
+    "getScrollPosition",
+    { value: 0 },
+    {
+      allowUntrustedTarget: true
+    }
+  );
   if (isIframe) {
     bridge.start();
   }
   function destroy() {
     unsubscribe();
     stega.stop();
-    syncAutoClean(false);
+    autoClean.stop();
     if (isIframe) {
       bridge.stop();
     }

package/dist/index.cjs

@@ -44,7 +44,7 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 
 // src/version.ts
-var VERSION = "0.2.0-beta.6";
+var VERSION = "0.2.0-beta.9";
 
 // src/core/features.ts
 function isEnabled(config) {
@@ -393,9 +393,7 @@ function decodeStega(str) {
     const match = str.match(/{"origin.*?}/);
     if (match) {
       try {
-        const decodedMatch = (0, import_stega.vercelStegaDecode)(
-          match[0]
-        );
+        const decodedMatch = (0, import_stega.vercelStegaDecode)(match[0]);
         if (decodedMatch?.href) {
           return decodedMatch;
         }
@@ -464,6 +462,8 @@ function createStegaAutoClean() {
   function scanAndClean() {
     processing = true;
     walkTextNodes(document.body, cleanTextNode);
+    const title = (0, import_stega2.vercelStegaSplit)(document.title);
+    if (title.encoded) document.title = title.cleaned;
     processing = false;
   }
   function collectAffected(mutations) {
@@ -509,15 +509,8 @@ function createStegaAutoClean() {
   }
   function start() {
     if (observer || typeof window === "undefined") return;
-    const run = () => {
-      scanAndClean();
-      setupObserver();
-    };
-    if ("requestIdleCallback" in window) {
-      window.requestIdleCallback(run);
-    } else {
-      setTimeout(run, 0);
-    }
+    scanAndClean();
+    setupObserver();
     debug2.log("stega auto-clean started");
   }
   function stop() {
@@ -928,8 +921,13 @@ function createStegaController(opts) {
         overlay.hide();
       }
     }, 16);
-    document.addEventListener("mousemove", throttledMouseMove);
-    window.addEventListener("scroll", handleScroll, { capture: true });
+    document.addEventListener("mousemove", throttledMouseMove, {
+      passive: true
+    });
+    window.addEventListener("scroll", handleScroll, {
+      capture: true,
+      passive: true
+    });
     initialized = true;
     debug6.log("stega controller started");
   };
@@ -1010,7 +1008,7 @@ function cookieOpts() {
   };
 }
 function createChangeHandler(deps) {
-  const { store, stega, syncAutoClean, features, editingEnabled } = deps;
+  const { store, stega, features, editingEnabled } = deps;
   function updateParams(patch) {
     const [path, existing] = splitPath(deps.currentPath());
     const params = new URLSearchParams(existing);
@@ -1072,17 +1070,20 @@ function createChangeHandler(deps) {
       }
       setCookie(COOKIE_PREVIEW_MODE, String(after.previewMode), cookieOpts());
       setCookie(COOKIE_TOOLBAR_OPEN, "false", cookieOpts());
-      sendPreprEvent("preview_mode_toggled", { previewMode: after.previewMode });
-      syncAutoClean(after.previewMode);
-      const [path, existing] = splitPath(deps.currentPath());
-      const params = new URLSearchParams(existing);
-      if (params.has(PARAM_SEGMENT) || params.has(PARAM_VARIANT)) {
-        params.delete(PARAM_SEGMENT);
-        params.delete(PARAM_VARIANT);
-        const query = params.toString();
-        deps.navigate(query ? `${path}?${query}` : path);
-      } else {
-        deps.reload();
+      sendPreprEvent("preview_mode_toggled", {
+        previewMode: after.previewMode
+      });
+      if (!after.isIframe) {
+        const [path, existing] = splitPath(deps.currentPath());
+        const params = new URLSearchParams(existing);
+        if (params.has(PARAM_SEGMENT) || params.has(PARAM_VARIANT)) {
+          params.delete(PARAM_SEGMENT);
+          params.delete(PARAM_VARIANT);
+          const query = params.toString();
+          deps.navigate(query ? `${path}?${query}` : path);
+        } else {
+          deps.reload();
+        }
       }
     }
     if (before.toolbarOpen !== after.toolbarOpen) {
@@ -1392,7 +1393,10 @@ function u2(e2, t3, n2, o2, i2, u3) {
 }
 
 // src/core/ui/panel.tsx
-function RawSvg({ svg, className }) {
+function RawSvg({
+  svg,
+  className
+}) {
   return /* @__PURE__ */ u2(
     "span",
     {
@@ -1963,9 +1967,7 @@ var PreprToolbarElement = class extends HTMLElementBase {
     ) ?? null;
   }
   optionsList() {
-    return this.shadowRoot?.querySelector(
-      '[data-prepr="options"]'
-    ) ?? null;
+    return this.shadowRoot?.querySelector('[data-prepr="options"]') ?? null;
   }
   onListboxKeydown(event) {
     const e2 = event;
@@ -2166,16 +2168,7 @@ function createPreprPreview(opts = {}) {
     }
   });
   const autoClean = createStegaAutoClean();
-  let autoCleanActive = false;
-  function syncAutoClean(active) {
-    if (active && !autoCleanActive) {
-      autoClean.start();
-      autoCleanActive = true;
-    } else if (!active && autoCleanActive) {
-      autoClean.stop();
-      autoCleanActive = false;
-    }
-  }
+  autoClean.start();
   const handleChange = createChangeHandler({
     store,
     features,
@@ -2183,8 +2176,7 @@ function createPreprPreview(opts = {}) {
     navigate: (url) => navigation.navigate(url),
     currentPath: () => navigation.currentPath(),
     reload: navigation.reload ?? (() => window.location.reload()),
-    stega,
-    syncAutoClean
+    stega
   });
   let prev = store.get();
   const unsubscribe = store.subscribe((state) => {
@@ -2192,20 +2184,23 @@ function createPreprPreview(opts = {}) {
     prev = state;
     handleChange(before, state);
   });
-  syncAutoClean(store.get().previewMode);
   const bridge = createIframeBridge(store, {
     allowedEditorOrigins: options?.allowedEditorOrigins
   });
-  sendPreprEvent("getScrollPosition", { value: 0 }, {
-    allowUntrustedTarget: true
-  });
+  sendPreprEvent(
+    "getScrollPosition",
+    { value: 0 },
+    {
+      allowUntrustedTarget: true
+    }
+  );
   if (isIframe) {
     bridge.start();
   }
   function destroy() {
     unsubscribe();
     stega.stop();
-    syncAutoClean(false);
+    autoClean.stop();
     if (isIframe) {
       bridge.stop();
     }
@@ -2267,7 +2262,11 @@ function getPreprHeadersFromHeaders(headers) {
 }
 function validatePreprToken(token) {
   if (!token) {
-    throw new PreprError("Token is required", "MISSING_TOKEN", "validatePreprToken");
+    throw new PreprError(
+      "Token is required",
+      "MISSING_TOKEN",
+      "validatePreprToken"
+    );
   }
   if (!token.startsWith("https://")) {
     throw new PreprError(
@@ -2394,7 +2393,11 @@ function parseCookies(request) {
     const name = part.slice(0, eq).trim();
     const value = part.slice(eq + 1).trim();
     if (!name) continue;
-    cookies.set(name, decodeURIComponent(value));
+    try {
+      cookies.set(name, decodeURIComponent(value));
+    } catch {
+      cookies.set(name, value);
+    }
   }
   return cookies;
 }
@@ -2433,7 +2436,10 @@ function processPreprRequest(request, opts) {
   if (userAgent) {
     requestHeaders.set("Prepr-User-Agent", sanitizeHeaderValue(userAgent));
   }
-  requestHeaders.set("Prepr-Package", `@preprio/toolkit@${opts?.version ?? VERSION}`);
+  requestHeaders.set(
+    "Prepr-Package",
+    `@preprio/toolkit@${opts?.version ?? VERSION}`
+  );
   const ip = request.headers.get("Cf-Connecting-Ip") ?? request.headers.get("x-real-ip");
   if (ip) {
     requestHeaders.set("Prepr-Visitor-IP", sanitizeHeaderValue(ip));
@@ -2442,7 +2448,7 @@ function processPreprRequest(request, opts) {
   if (hutkCookie) {
     requestHeaders.set("Prepr-Hubspot-Id", sanitizeHeaderValue(hutkCookie));
   }
-  let uid = requestCookies.get(COOKIE_UID);
+  let uid = sanitizeHeaderValue(requestCookies.get(COOKIE_UID) ?? "");
   if (!uid) {
     uid = crypto.randomUUID();
     responseCookies.push({

package/dist/index.d.cts

@@ -5,7 +5,7 @@ export { g as PreprEnvironment, h as PreprEventType, i as PreprFeatureConfig, j
  * Package version; must match package.json. Lives in its own leaf module so
  * core can import it without cycling through the barrel.
  */
-declare const VERSION = "0.2.0-beta.6";
+declare const VERSION = "0.2.0-beta.9";
 
 /**
  * Resolve a `PreprFeatures` bag to plain booleans, defaulting every omitted key

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export { g as PreprEnvironment, h as PreprEventType, i as PreprFeatureConfig, j
  * Package version; must match package.json. Lives in its own leaf module so
  * core can import it without cycling through the barrel.
  */
-declare const VERSION = "0.2.0-beta.6";
+declare const VERSION = "0.2.0-beta.9";
 
 /**
  * Resolve a `PreprFeatures` bag to plain booleans, defaulting every omitted key

package/dist/index.js

@@ -17,10 +17,10 @@ import {
   setTrackingParam,
   stegaClean,
   trackEvent
-} from "./chunk-C6YEXA5G.js";
+} from "./chunk-JVUG6S4O.js";
 
 // src/version.ts
-var VERSION = "0.2.0-beta.6";
+var VERSION = "0.2.0-beta.9";
 
 // src/core/server.ts
 var PreprError = class extends Error {
@@ -72,7 +72,11 @@ function getPreprHeadersFromHeaders(headers) {
 }
 function validatePreprToken(token) {
   if (!token) {
-    throw new PreprError("Token is required", "MISSING_TOKEN", "validatePreprToken");
+    throw new PreprError(
+      "Token is required",
+      "MISSING_TOKEN",
+      "validatePreprToken"
+    );
   }
   if (!token.startsWith("https://")) {
     throw new PreprError(
@@ -199,7 +203,11 @@ function parseCookies(request) {
     const name = part.slice(0, eq).trim();
     const value = part.slice(eq + 1).trim();
     if (!name) continue;
-    cookies.set(name, decodeURIComponent(value));
+    try {
+      cookies.set(name, decodeURIComponent(value));
+    } catch {
+      cookies.set(name, value);
+    }
   }
   return cookies;
 }
@@ -238,7 +246,10 @@ function processPreprRequest(request, opts) {
   if (userAgent) {
     requestHeaders.set("Prepr-User-Agent", sanitizeHeaderValue(userAgent));
   }
-  requestHeaders.set("Prepr-Package", `@preprio/toolkit@${opts?.version ?? VERSION}`);
+  requestHeaders.set(
+    "Prepr-Package",
+    `@preprio/toolkit@${opts?.version ?? VERSION}`
+  );
   const ip = request.headers.get("Cf-Connecting-Ip") ?? request.headers.get("x-real-ip");
   if (ip) {
     requestHeaders.set("Prepr-Visitor-IP", sanitizeHeaderValue(ip));
@@ -247,7 +258,7 @@ function processPreprRequest(request, opts) {
   if (hutkCookie) {
     requestHeaders.set("Prepr-Hubspot-Id", sanitizeHeaderValue(hutkCookie));
   }
-  let uid = requestCookies.get(COOKIE_UID);
+  let uid = sanitizeHeaderValue(requestCookies.get(COOKIE_UID) ?? "");
   if (!uid) {
     uid = crypto.randomUUID();
     responseCookies.push({