@riverbankcms/sdk 0.147.0 → 0.149.0

package/dist/preview-next/keepAlive.mjs

@@ -30,11 +30,6 @@ function setPreviewAuthCookies(res, { accessToken, refreshToken }, options) {
 	if (refreshToken) setPreviewRefreshCookie(res, refreshToken, options);
 	return res;
 }
-function clearPreviewCookies(res) {
-	res.cookies.delete(PREVIEW_COOKIE_NAME);
-	res.cookies.delete(PREVIEW_REFRESH_COOKIE_NAME);
-	return res;
-}
 //#endregion
 //#region ../preview-next/src/jwt.ts
 function base64UrlDecodeToString(value) {
@@ -1641,6 +1636,7 @@ const SDK_EVENT_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 		responseKind: "json",
 		errors: [
 			"resource:not_found",
+			"validation:invalid_input",
 			"resource:conflict",
 			"server:internal_error"
 		]
@@ -2145,28 +2141,6 @@ const EVENT_MANAGEMENT_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 			"resource:conflict",
 			"server:internal_error"
 		]
-	},
-	/**
-	* The Content tab's one write: the short introduction, image and
-	* description of an event's page, published without its layout.
-	*/
-	saveEventPageWords: {
-		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/words",
-		method: "PUT",
-		tags: [
-			TAG_TEMPLATES.siteCollection,
-			TAG_TEMPLATES.siteRoutableContent,
-			TAG_TEMPLATES.pageSurfaceById
-		],
-		auth: "user",
-		responseKind: "json",
-		errors: [
-			"auth:forbidden",
-			"validation:invalid_input",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		]
 	}
 });
 //#endregion
@@ -2591,6 +2565,15 @@ const BILLING_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 		auth: "user",
 		responseKind: "json"
 	},
+	/** Continue on Free from the onboarding card page; only the attempt's owner. */
+	continueOnboardingOnFree: {
+		path: "/onboarding/attempts/{attemptToken}/plan/free",
+		method: "POST",
+		tags: ["billing"],
+		auth: "user",
+		errors: [],
+		responseKind: "json"
+	},
 	createBillingPortalSession: {
 		path: "/billing/portal/session",
 		method: "POST",
@@ -2600,6 +2583,161 @@ const BILLING_ENDPOINT_DEFINITIONS = defineEndpointDefinitions({
 	}
 });
 //#endregion
+//#region ../api/src/editLeaseEndpoints.ts
+const path = "/sites/{siteId}/edit-leases/{nodeType}/{nodeId}";
+const lifecycleErrors = [
+	"auth:lease_required",
+	"auth:forbidden",
+	"resource:not_found",
+	"validation:invalid_input",
+	"server:internal_error"
+];
+const EDIT_LEASE_ENDPOINT_DEFINITIONS = {
+	readEditLease: {
+		path,
+		method: "GET",
+		editLease: "lifecycle",
+		errors: lifecycleErrors,
+		auth: "user",
+		responseKind: "json"
+	},
+	acquireEditLease: {
+		path,
+		method: "POST",
+		editLease: "lifecycle",
+		errors: lifecycleErrors,
+		auth: "user",
+		responseKind: "json"
+	},
+	takeOverEditLease: {
+		path,
+		method: "PUT",
+		editLease: "lifecycle",
+		errors: lifecycleErrors,
+		auth: "user",
+		responseKind: "json"
+	},
+	heartbeatEditLease: {
+		path,
+		method: "PATCH",
+		editLease: "lifecycle",
+		errors: [...lifecycleErrors, "auth:lease_lost"],
+		auth: "user",
+		responseKind: "json"
+	},
+	releaseEditLease: {
+		path,
+		method: "DELETE",
+		editLease: "lifecycle",
+		errors: lifecycleErrors,
+		auth: "user",
+		responseKind: "json"
+	}
+};
+//#endregion
+//#region ../api/src/pageSurfaceEditorEndpoints.ts
+const surfaceTags = [TAG_TEMPLATES.siteCollection, TAG_TEMPLATES.pageSurfaceById];
+const PAGE_SURFACE_EDITOR_ENDPOINT_DEFINITIONS = {
+	getPageSurfaceEditorDocument: {
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/content",
+		method: "GET",
+		errors: [
+			"auth:forbidden",
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: surfaceTags,
+		auth: "user",
+		responseKind: "json"
+	},
+	updatePageSurfaceDraftContent: {
+		editLease: "managed",
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/content",
+		method: "PUT",
+		errors: [
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: surfaceTags,
+		auth: "user",
+		responseKind: "json"
+	},
+	discardPageSurfaceDraftContent: {
+		editLease: "managed",
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/content/draft",
+		method: "DELETE",
+		errors: [
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: surfaceTags,
+		auth: "user",
+		responseKind: "json"
+	},
+	updatePageSurfaceRouteMetadata: {
+		editLease: "managed",
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/metadata",
+		method: "PATCH",
+		errors: [
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: [
+			TAG_TEMPLATES.siteCollection,
+			TAG_TEMPLATES.siteRoutableContent,
+			TAG_TEMPLATES.pageSurfaceById
+		],
+		auth: "user",
+		responseKind: "json"
+	},
+	publishPageSurface: {
+		editLease: "managed",
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/publication",
+		method: "POST",
+		errors: [
+			"auth:forbidden",
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: [
+			TAG_TEMPLATES.siteCollection,
+			TAG_TEMPLATES.siteRoutableContent,
+			TAG_TEMPLATES.pageSurfaceById
+		],
+		auth: "user",
+		responseKind: "json"
+	},
+	saveEventContentTab: {
+		editLease: "managed",
+		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/event-content",
+		method: "PUT",
+		errors: [
+			"auth:forbidden",
+			"validation:invalid_input",
+			"resource:not_found",
+			"resource:conflict",
+			"server:internal_error"
+		],
+		tags: [
+			TAG_TEMPLATES.siteCollection,
+			TAG_TEMPLATES.siteRoutableContent,
+			TAG_TEMPLATES.pageSurfaceById
+		],
+		auth: "user",
+		responseKind: "json"
+	}
+};
+//#endregion
 //#region ../api/src/bookingPeopleEndpointDefinitions.ts
 /**
 * People endpoints (#1356): the People list, its CSV export, and deleting a
@@ -2663,7 +2801,8 @@ const CLIENT_ERROR_REPORT_LIMITS = {
 	stack: 8e3,
 	digest: 128,
 	componentStack: 8e3,
-	sourceLocation: 1024
+	sourceLocation: 1024,
+	navigationAgeMs: 6e4
 };
 const clientErrorEventSchema = z.enum([
 	"dashboard:route-error",
@@ -2680,7 +2819,17 @@ z.object({
 	stack: z.string().max(CLIENT_ERROR_REPORT_LIMITS.stack).nullable(),
 	digest: z.string().max(CLIENT_ERROR_REPORT_LIMITS.digest).nullable(),
 	componentStack: z.string().max(CLIENT_ERROR_REPORT_LIMITS.componentStack).nullable(),
-	sourceLocation: z.string().max(CLIENT_ERROR_REPORT_LIMITS.sourceLocation).nullable()
+	sourceLocation: z.string().max(CLIENT_ERROR_REPORT_LIMITS.sourceLocation).nullable(),
+	navigation: z.object({
+		fromPathname: z.string().regex(/^\/[^?#]*$/).max(CLIENT_ERROR_REPORT_LIMITS.pathname),
+		toPathname: z.string().regex(/^\/[^?#]*$/).max(CLIENT_ERROR_REPORT_LIMITS.pathname),
+		type: z.enum([
+			"push",
+			"replace",
+			"traverse"
+		]),
+		ageMs: z.number().int().min(0).max(CLIENT_ERROR_REPORT_LIMITS.navigationAgeMs)
+	}).strict().nullable().optional()
 }).strict();
 const API_ENDPOINTS = {
 	...SITE_LIFECYCLE_ENDPOINT_DEFINITIONS,
@@ -2692,6 +2841,8 @@ const API_ENDPOINTS = {
 	...GIFTING_ENDPOINT_DEFINITIONS,
 	...PUBLIC_READ_ENDPOINT_DEFINITIONS,
 	...BILLING_ENDPOINT_DEFINITIONS,
+	...EDIT_LEASE_ENDPOINT_DEFINITIONS,
+	...PAGE_SURFACE_EDITOR_ENDPOINT_DEFINITIONS,
 	...SITE_MANAGEMENT_ENDPOINT_DEFINITIONS,
 	aiContentUpdateChat: {
 		path: "/ai/content-update-chat",
@@ -2713,6 +2864,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	aiDesignerPageOpsApply: {
+		editLease: "managed",
 		path: "/sites/{siteId}/ai/designer/page/apply",
 		method: "POST",
 		tags: [TAG_TEMPLATES.siteCollection],
@@ -3547,6 +3699,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	restoreContentEntryVersion: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/versions/{versionId}/restore",
 		method: "POST",
 		errors: [
@@ -3564,6 +3717,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	updateContentEntryContent: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/content",
 		method: "PUT",
 		tags: [
@@ -3580,67 +3734,6 @@ const API_ENDPOINTS = {
 		],
 		responseKind: "json"
 	},
-	updatePageSurfaceDraftContent: {
-		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/content",
-		method: "PUT",
-		errors: [
-			"validation:invalid_input",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		],
-		tags: [TAG_TEMPLATES.siteCollection, TAG_TEMPLATES.pageSurfaceById],
-		auth: "user",
-		responseKind: "json"
-	},
-	discardPageSurfaceDraftContent: {
-		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/content/draft",
-		method: "DELETE",
-		errors: [
-			"validation:invalid_input",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		],
-		tags: [TAG_TEMPLATES.siteCollection, TAG_TEMPLATES.pageSurfaceById],
-		auth: "user",
-		responseKind: "json"
-	},
-	updatePageSurfaceRouteMetadata: {
-		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/metadata",
-		method: "PATCH",
-		errors: [
-			"validation:invalid_input",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		],
-		tags: [
-			TAG_TEMPLATES.siteCollection,
-			TAG_TEMPLATES.siteRoutableContent,
-			TAG_TEMPLATES.pageSurfaceById
-		],
-		auth: "user",
-		responseKind: "json"
-	},
-	publishPageSurface: {
-		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/publication",
-		method: "POST",
-		errors: [
-			"auth:forbidden",
-			"validation:invalid_input",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		],
-		tags: [
-			TAG_TEMPLATES.siteCollection,
-			TAG_TEMPLATES.siteRoutableContent,
-			TAG_TEMPLATES.pageSurfaceById
-		],
-		auth: "user",
-		responseKind: "json"
-	},
 	runSdkWorkflow: {
 		path: "/sites/{siteId}/content/{type}/{entryId}/workflows/{workflowId}/run",
 		method: "POST",
@@ -3677,6 +3770,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	updateRouteMetadata: {
+		editLease: "managed",
 		path: "/sites/{siteId}/routes/{routeId}/metadata",
 		method: "PATCH",
 		tags: [
@@ -3694,6 +3788,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	publishContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/publish",
 		method: "POST",
 		tags: [
@@ -3705,6 +3800,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	scheduleContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/schedule",
 		method: "POST",
 		tags: [
@@ -3722,6 +3818,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	cancelScheduledContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/schedule",
 		method: "DELETE",
 		tags: [
@@ -3739,6 +3836,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	discardContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/discard",
 		method: "POST",
 		tags: [
@@ -3757,6 +3855,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	unpublishContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/unpublish",
 		method: "POST",
 		tags: [
@@ -3798,6 +3897,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	deleteContentEntry: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}",
 		method: "DELETE",
 		tags: [
@@ -5007,6 +5107,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	saveBlockContent: {
+		editLease: "owner-derived",
 		path: "/blocks/{blockId}/content",
 		method: "POST",
 		tags: [
@@ -5044,6 +5145,7 @@ const API_ENDPOINTS = {
 		errors: ["resource:not_found", "resource:conflict"]
 	},
 	createEntrySlotBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/slots/{slotKey}/blocks",
 		method: "POST",
 		tags: [
@@ -5061,6 +5163,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	reorderEntrySlotBlocks: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/slots/{slotKey}/blocks/reorder",
 		method: "POST",
 		tags: [
@@ -5078,6 +5181,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	deleteEntrySlotBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/content/{type}/{entryId}/slots/{slotKey}/blocks/{blockId}",
 		method: "DELETE",
 		tags: [
@@ -5108,6 +5212,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	createPageSurfaceSlotBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/slots/{slotKey}/blocks",
 		method: "POST",
 		tags: [
@@ -5126,6 +5231,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	reorderPageSurfaceSlotBlocks: {
+		editLease: "managed",
 		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/slots/{slotKey}/blocks/reorder",
 		method: "POST",
 		tags: [
@@ -5144,6 +5250,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	deletePageSurfaceSlotBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/page-surfaces/{pageSurfaceId}/slots/{slotKey}/blocks/{blockId}",
 		method: "DELETE",
 		tags: [
@@ -5161,6 +5268,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	createBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/blocks",
 		method: "POST",
 		tags: [
@@ -5172,6 +5280,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	reorderBlocks: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/blocks/reorder",
 		method: "POST",
 		tags: [
@@ -5183,6 +5292,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	deleteBlock: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/blocks/{blockId}",
 		method: "DELETE",
 		tags: [
@@ -5228,6 +5338,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	publishPageDraft: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/publish",
 		method: "POST",
 		tags: [TAG_TEMPLATES.siteRoutableContent, TAG_TEMPLATES.pageById],
@@ -5235,6 +5346,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	discardPageDraft: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/discard",
 		method: "POST",
 		tags: [TAG_TEMPLATES.siteRoutableContent, TAG_TEMPLATES.pageById],
@@ -5250,6 +5362,7 @@ const API_ENDPOINTS = {
 		errors: ["resource:not_found", "server:internal_error"]
 	},
 	savePageDesignState: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/design-state",
 		method: "POST",
 		tags: [TAG_TEMPLATES.siteRoutableContent, TAG_TEMPLATES.pageById],
@@ -5279,6 +5392,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	restorePageVersion: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/versions/{versionId}/restore",
 		method: "POST",
 		errors: [
@@ -5292,6 +5406,7 @@ const API_ENDPOINTS = {
 		responseKind: "json"
 	},
 	applyPageDesignEditorAction: {
+		editLease: "managed",
 		path: "/sites/{siteId}/pages/{pageId}/design/actions",
 		method: "POST",
 		tags: [TAG_TEMPLATES.siteRoutableContent, TAG_TEMPLATES.pageById],
@@ -6471,24 +6586,6 @@ const API_ENDPOINTS = {
 			"server:internal_error"
 		]
 	},
-	syncBookingPassWithStripe: {
-		path: "/sites/{siteId}/bookings/passes/{passId}/sync-stripe",
-		method: "POST",
-		tags: [
-			"site-{siteId}",
-			"passes-{siteId}",
-			"pass-{passId}"
-		],
-		auth: "user",
-		responseKind: "json",
-		errors: [
-			"validation:invalid_input",
-			"auth:forbidden",
-			"resource:not_found",
-			"resource:conflict",
-			"server:internal_error"
-		]
-	},
 	refundCustomerPass: {
 		path: "/sites/{siteId}/bookings/customer-passes/{customerPassId}/refund",
 		method: "POST",
@@ -7952,7 +8049,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	cancelFlexibleBalanceBookingDueToNonPayment: {
-		path: "/sites/{siteId}/shop/orders/{orderId}/items/{orderItemId}/flexible-balance/cancel-due-to-non-payment",
+		path: "/sites/{siteId}/shop/orders/{orderId}/flexible-balance/cancel-due-to-non-payment",
 		method: "POST",
 		auth: "user",
 		responseKind: "json",
@@ -7963,7 +8060,7 @@ const API_ENDPOINTS = {
 		]
 	},
 	reopenFlexibleBalanceBookingAfterNonPaymentCancellation: {
-		path: "/sites/{siteId}/shop/orders/{orderId}/items/{orderItemId}/flexible-balance/reopen",
+		path: "/sites/{siteId}/shop/orders/{orderId}/flexible-balance/reopen",
 		method: "POST",
 		auth: "user",
 		responseKind: "json",
@@ -8077,52 +8174,138 @@ function parsePreviewRefreshResponse(value) {
 }
 //#endregion
 //#region ../preview-next/src/keepAlive.ts
-function shouldRefreshToken(accessToken, thresholdSeconds) {
-	if (!accessToken) return true;
+function inspectAccessToken(accessToken, nowSeconds) {
+	if (!accessToken) return { kind: "missing" };
 	try {
 		const exp = decodeJwtPayload(accessToken)?.exp;
-		if (typeof exp !== "number") return true;
-		return exp - Math.floor(Date.now() / 1e3) < thresholdSeconds;
+		return typeof exp === "number" ? {
+			kind: "known",
+			expiresInSeconds: exp - nowSeconds
+		} : { kind: "unreadable" };
 	} catch {
-		return true;
+		return { kind: "unreadable" };
 	}
 }
+function tokenTtlBucket(lifetime) {
+	if (lifetime.kind !== "known") return lifetime.kind;
+	if (lifetime.expiresInSeconds <= 0) return "expired";
+	if (lifetime.expiresInSeconds < 300) return "under_5m";
+	if (lifetime.expiresInSeconds < 900) return "under_15m";
+	return "at_least_15m";
+}
+function isCurrentToken(lifetime, thresholdSeconds) {
+	return lifetime.kind === "known" && lifetime.expiresInSeconds >= thresholdSeconds;
+}
+function planPreviewTokens(accessToken, refreshToken, refreshThresholdSeconds, lifetime) {
+	if (!refreshToken) return accessToken && isCurrentToken(lifetime, 1) ? {
+		kind: "current",
+		accessToken
+	} : { kind: "unavailable" };
+	return accessToken && isCurrentToken(lifetime, refreshThresholdSeconds) ? {
+		kind: "current",
+		accessToken
+	} : {
+		kind: "refresh",
+		refreshToken
+	};
+}
 async function refreshAccessToken(params) {
-	const { refreshToken, dashboardUrl, logger, fetcher } = params;
+	const { refreshToken, dashboardUrl, correlationId, fetcher } = params;
 	try {
 		const request = { refreshToken };
 		const response = await fetcher(buildPreviewAuthRefreshUrl({ dashboardBaseUrl: dashboardUrl }), {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				Accept: "application/json"
+				Accept: "application/json",
+				"x-correlation-id": correlationId
 			},
 			cache: "no-store",
 			credentials: "omit",
 			body: JSON.stringify(request)
 		});
-		if (!response.ok) {
-			logger?.warn?.("preview-keepalive:refresh-failed", { status: response.status });
-			return null;
-		}
+		if (!response.ok) return {
+			kind: "dashboard_rejected",
+			dashboardStatus: response.status
+		};
 		const envelope = await response.json().catch(() => null);
 		const data = parsePreviewRefreshResponse(isSuccessfulResponseEnvelope(envelope) ? envelope.data : null);
-		if (!data.success) {
-			logger?.warn?.("preview-keepalive:malformed-response");
-			return null;
-		}
-		return data.data;
+		if (!data.success) return {
+			kind: "malformed_response",
+			dashboardStatus: response.status
+		};
+		return {
+			kind: "refreshed",
+			tokens: data.data,
+			dashboardStatus: response.status
+		};
 	} catch {
-		logger?.error?.("preview-keepalive:error");
-		return null;
+		return {
+			kind: "network_error",
+			dashboardStatus: null
+		};
 	}
 }
+function logKeepAliveOutcome({ logger, fields, previewOutcome, status, previewDashboardStatus = null }) {
+	const meta = {
+		...fields,
+		previewOutcome,
+		status,
+		previewDashboardStatus
+	};
+	if (status >= 400) logger?.warn?.("preview-keepalive:outcome", meta);
+	else logger?.info?.("preview-keepalive:outcome", meta);
+}
+async function respondToRefresh(params) {
+	const { dashboardUrl, tokenPlan, correlationId, logFields, logger, fetcher, maxAge, secure } = params;
+	if (!dashboardUrl) {
+		logKeepAliveOutcome({
+			logger,
+			fields: logFields,
+			previewOutcome: "dashboard_url_missing",
+			status: 401
+		});
+		return NextResponse.json({ error: "Preview refresh is unavailable" }, { status: 401 });
+	}
+	const outcome = await refreshAccessToken({
+		refreshToken: tokenPlan.refreshToken,
+		dashboardUrl,
+		correlationId,
+		fetcher
+	});
+	if (outcome.kind !== "refreshed") {
+		logKeepAliveOutcome({
+			logger,
+			fields: logFields,
+			previewOutcome: outcome.kind,
+			status: 401,
+			previewDashboardStatus: outcome.dashboardStatus
+		});
+		return NextResponse.json({ error: "Unable to refresh preview session" }, { status: 401 });
+	}
+	logKeepAliveOutcome({
+		logger,
+		fields: logFields,
+		previewOutcome: "refreshed",
+		status: 200,
+		previewDashboardStatus: outcome.dashboardStatus
+	});
+	const response = responseWithAccessToken(outcome.tokens.accessToken);
+	setPreviewAuthCookies(response, outcome.tokens, {
+		maxAge,
+		secure
+	});
+	return response;
+}
 function isSuccessfulResponseEnvelope(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) && "success" in value && value.success === true && "data" in value;
 }
+function responseWithAccessToken(accessToken) {
+	return NextResponse.json({ accessToken }, { headers: { "Cache-Control": "no-store" } });
+}
 function createPreviewKeepAliveRouteHandler(options = {}) {
 	const maxAge = options.maxAge ?? 43200;
-	const refreshThresholdSeconds = options.refreshThresholdSeconds ?? 300;
+	const refreshThresholdSeconds = options.refreshThresholdSeconds ?? 900;
 	const logger = options.logger;
 	const getCookies = options.getCookies ?? (async () => {
 		const store = await cookies();
@@ -8130,56 +8313,49 @@ function createPreviewKeepAliveRouteHandler(options = {}) {
 	});
 	const fetcher = options.fetcher ?? fetch;
 	return async function previewKeepAliveHandler(request) {
-		const res = new NextResponse(null, { status: 204 });
 		const cookieStore = await getCookies();
 		const accessToken = cookieStore.get(PREVIEW_COOKIE_NAME)?.value;
 		const refreshToken = cookieStore.get(PREVIEW_REFRESH_COOKIE_NAME)?.value;
 		const url = new URL(request.url);
+		const correlationId = crypto.randomUUID();
 		const isSecure = ((request.headers.get("x-forwarded-proto") ?? "").split(",")[0]?.trim() || url.protocol.replace(":", "")) === "https";
-		if (!refreshToken) {
-			if (accessToken) setPreviewAuthCookies(res, {
-				accessToken,
-				refreshToken
-			}, {
-				maxAge,
-				secure: isSecure
+		const lifetime = inspectAccessToken(accessToken, Math.floor(Date.now() / 1e3));
+		const tokenPlan = planPreviewTokens(accessToken, refreshToken, refreshThresholdSeconds, lifetime);
+		const logFields = {
+			host: url.host,
+			correlationId,
+			previewDecision: tokenPlan.kind,
+			previewTokenTtlBucket: tokenTtlBucket(lifetime),
+			previewRefreshCookiePresent: Boolean(refreshToken)
+		};
+		if (tokenPlan.kind === "unavailable") {
+			logKeepAliveOutcome({
+				logger,
+				fields: logFields,
+				previewOutcome: "session_unavailable",
+				status: 401
 			});
-			return res;
+			return NextResponse.json({ error: "Preview session is unavailable" }, { status: 401 });
 		}
-		if (!shouldRefreshToken(accessToken, refreshThresholdSeconds)) {
-			setPreviewAuthCookies(res, {
-				accessToken,
-				refreshToken
-			}, {
-				maxAge,
-				secure: isSecure
+		if (tokenPlan.kind === "current") {
+			logKeepAliveOutcome({
+				logger,
+				fields: logFields,
+				previewOutcome: "current",
+				status: 200
 			});
-			return res;
+			return responseWithAccessToken(tokenPlan.accessToken);
 		}
-		if (!options.dashboardUrl) {
-			logger?.warn?.("preview-keepalive:missing-dashboard-url");
-			const failure = NextResponse.json({ error: "Preview refresh is unavailable" }, { status: 401 });
-			clearPreviewCookies(failure);
-			return failure;
-		}
-		logger?.debug?.("preview-keepalive:needs-refresh");
-		const refreshed = await refreshAccessToken({
-			refreshToken,
+		return respondToRefresh({
 			dashboardUrl: options.dashboardUrl,
+			tokenPlan,
+			correlationId,
+			logFields,
 			logger,
-			fetcher
-		});
-		if (!refreshed) {
-			logger?.warn?.("preview-keepalive:cleared-cookies");
-			const failure = NextResponse.json({ error: "Unable to refresh preview session" }, { status: 401 });
-			clearPreviewCookies(failure);
-			return failure;
-		}
-		setPreviewAuthCookies(res, refreshed, {
+			fetcher,
 			maxAge,
 			secure: isSecure
 		});
-		return res;
 	};
 }
 //#endregion