@strifeapp/astro 1.4.1 → 1.5.0

package/README.md

@@ -11,6 +11,7 @@ Official [Strife](https://strife.app) integration for [Astro](https://astro.buil
 - [Usage](#usage)
   - [Reading content](#reading-content)
   - [Telemetry: `<Insights />`](#telemetry-insights)
+  - [Share links](#share-links)
   - [TypeScript: typing `strife:store`](#typescript-typing-strifestore)
   - [Direct Vite plugin](#direct-vite-plugin)
 - [Configuration](#configuration)
@@ -100,6 +101,69 @@ On every page load it reports Core Web Vitals (LCP, INP, CLS, FCP, TTFB) and, wh
 
 > The API only stores a beacon when its `Origin` is one of the team's registered domains. For local development, run the API in `Development` and add `localhost` to your team's `Domains`.
 
+> **Content Security Policy:** if your site sends a CSP header, allow the insights endpoint in `connect-src` (e.g. `connect-src 'self' https://api.strife.app`) — otherwise the browser blocks the beacon (a CSP violation is logged to the console; no request is sent and nothing is stored). Use your custom `endpoint`'s origin if you overrode it.
+
+Inside the Strife live preview (`Astro.locals.editMode`) only the accessibility audit runs; on a [share link](#share-links) (`Astro.locals.share`) the component renders nothing and sends no beacon at all.
+
+### Share links
+
+An editor can hand a reviewer a link to a frozen, unpublished version of a document: `{origin}{locale root prefix}/share/{guid}` — for example `https://example.com/share/0123…cdef` or `https://example.com/sv/share/0123…cdef`. The integration registers a `pre` middleware (`@strifeapp/astro/share-middleware`) that resolves such a request to its share snapshot in the `Content/ByUrl` index — for the locale Astro resolved (`context.currentLocale`) — and either sets `Astro.locals.share` or answers with **your 404 page** (unknown, expired or revoked links look like content that does not exist). Both responses carry `X-Robots-Tag: noindex, nofollow`, `Cache-Control: private, no-store` and `Referrer-Policy: no-referrer`; edit mode is forced off on share routes, so `<LivePreview />` never activates there.
+
+You author the page — it renders in your own layout. Copy [`templates/share-page.astro`](https://github.com/wieldyapp/wieldy/blob/master/src/sdk/js/src/packages/astro/templates/share-page.astro) to `src/pages/share/[guid].astro`:
+
+```astro
+---
+export const prerender = false;              // rendered on demand — never prebuilt
+import Layout from '../../layouts/Layout.astro';
+
+const { name, expiresAt, locale, content } = Astro.locals.share!;
+---
+<Layout title={content.displayName ?? 'Preview'}>
+  <aside role="status">{name ? `Preview “${name}”` : 'Preview'} — expires {expiresAt.toISOString()}</aside>
+  <h1>{content.heading}</h1>
+</Layout>
+```
+
+`Astro.locals.share` is `{ docId, name, expiresAt: Date, locale, content }`. `content` is the index row for that locale: `docId`, `locale`, `collection`, `displayName`, `url`, `shareName`, `expiresAt`, plus every field you list in `share.fields`, so one lookup both decides the 404 and feeds the render:
+
+```typescript
+strife({
+  share: {
+    fields: ['heading', 'body'],   // your template fields, projected onto Astro.locals.share.content
+  },
+});
+```
+
+Without `share.fields`, `content` carries the row fields only and the page queries its own fields by `docId` + `locale` (`whereEquals('docId', content.docId)`, `whereEquals('status', 'share')`).
+
+| Option | Where | Description |
+| --- | --- | --- |
+| `share.fields` | integration | Extra `Content/ByUrl` fields to project onto `content`. |
+| `share.middleware: false` | integration | Skip the automatic registration; compose the middleware yourself (below). |
+| `resolveLocale(context)` | `createShareMiddleware` | Resolve the request's locale when your site does not use Astro i18n routing. Defaults to `context.currentLocale`. |
+
+When the resolved locale has no row in the snapshot (a cookie- or Accept-Language-driven locale the draft never had, a link pasted under another prefix), the middleware serves the snapshot's own `shareLocale` row instead of the 404 — the same fallback as the .NET SDK. If your site resolves its locale in its own middleware (a cookie, a header, its own path scheme), Astro's `currentLocale` is not enough — opt out of the automatic registration and compose the middleware where your locale is known:
+
+```typescript
+// src/middleware.ts
+import { sequence } from 'astro:middleware';
+import { createShareMiddleware } from '@strifeapp/astro/share-middleware';
+
+export const onRequest = sequence(
+  myLocaleMiddleware,
+  createShareMiddleware({ resolveLocale: (context) => context.locals.locale }),
+);
+```
+
+Keep these in mind:
+
+- The share guid is the link's secret. Render `name` as text only (never `set:html`), emit no Open Graph tags on the page, keep `/share/*` out of CDN caching rules and analytics, and keep access-log retention short — a bearer URL is inherently logged by proxies. The middleware logs nothing on a hit and never logs the guid.
+- `/share/{guid}` and `/{one segment}/share/{guid}` are reserved by the convention; the prefix segment is opaque (the locale comes from your resolution, not the path). Only a tail of exactly 32 lowercase hex characters is a share request — a share-shaped path with any other tail (`/help/share/link`) is not claimed by the middleware and reaches your own routes, as in the .NET SDK.
+- A miss is rendered through Astro's rewrite to `/404`. Astro forbids rewriting from an on-demand route to a **prerendered** page, so if your `src/pages/404.astro` is static the middleware answers a bare `404` (headers included) and your adapter or host serves the static 404 page; add `export const prerender = false` to `404.astro` to render it through the rewrite instead.
+- Share links need a `Content/ByUrl` index built from a `@strifeapp/strife` release that includes share links, deployed with `strife push` (the developer docs state the exact versions); until then Strife refuses to create shares for the team, and the route answers your 404 page.
+
+`resolveShare(guid, locale)` from `@strifeapp/astro/share` is the same lookup as a function, returning the share context or `null`.
+
 ### TypeScript: typing `strife:store`
 
 Typed ambient declarations for the `strife:store` virtual module are not bundled in this release. Until a typed surface is published, add your own declaration (e.g. in `src/env.d.ts`):

package/dist/Insights.astro

@@ -24,6 +24,7 @@
 // consumer's runtime/build (see the integration's env schema).
 import { getSecret } from 'astro:env/server';
 import { decodeSecrets } from '@strifeapp/strife/secrets';
+import { insightsMode } from './insights-mode.js';
 
 export interface Props {
   /** Override the collection endpoint. Defaults to the hosted Strife API. */
@@ -62,29 +63,31 @@ function resolveSiteId(): string | null {
 
 const site = resolveSiteId();
 
-// `editMode` is true inside the Strife live preview (set by the edit-mode
-// middleware). We split the work by audience: Web Vitals run only for REAL visitors
-// (they need real-user device/network/interaction variance), while the heavy
-// axe-core accessibility audit runs only in the editor's live preview — a11y is
-// deterministic per content version, so the editor is the right place for it, and it
-// keeps axe-core off every real visitor entirely. Without the middleware, editMode
-// defaults to false, so plain sites get Web Vitals exactly as before.
-const editMode = Astro.locals.editMode ?? false;
+// The middleware-set locals decide the audience. We split the work: Web Vitals run
+// only for REAL visitors (they need real-user device/network/interaction variance),
+// while the heavy axe-core accessibility audit runs only in the editor's live
+// preview (`editMode`) — a11y is deterministic per content version, so the editor is
+// the right place for it, and it keeps axe-core off every real visitor entirely. A
+// share link (`share`, STR-2165) is neither: it sends nothing at all — it is not
+// audience traffic, and a beacon would carry the share path, i.e. the guid. Without
+// the middleware, plain sites get Web Vitals exactly as before.
+const mode = insightsMode(Astro.locals);
 ---
 
-{site && (
+{site && mode !== 'off' && (
   <Fragment>
-    <script is:inline define:vars={{ site, endpoint, accessibility, editMode }}>
-      window.__strifeInsights = { site, endpoint, accessibility, editMode };
+    <script is:inline define:vars={{ site, endpoint, accessibility, mode }}>
+      window.__strifeInsights = { site, endpoint, accessibility, mode };
     </script>
     <script>
       import { onLCP, onINP, onCLS, onFCP, onTTFB } from 'web-vitals';
+      import type { InsightsMode } from './insights-mode.js';
 
       const cfg = (window as any).__strifeInsights || {};
       const ENDPOINT: string = cfg.endpoint;
       const SITE: string = cfg.site;
       const RUN_A11Y: boolean = cfg.accessibility !== false;
-      const EDIT_MODE: boolean = cfg.editMode === true;
+      const MODE: InsightsMode = cfg.mode;
 
       /** Beacon a payload to the collection endpoint (fire-and-forget). */
       function send(payload: Record<string, unknown>) {
@@ -231,17 +234,18 @@ const editMode = Astro.locals.editMode ?? false;
         scheduleAccessibilityAudit();
       }
 
-      if (EDIT_MODE) {
+      if (MODE === 'audit') {
         // In the Strife live preview: only the accessibility audit runs. The editor is
         // the right place for the heavy axe-core scan (a11y is deterministic per content
         // version), and it keeps axe-core off every real visitor.
         auditOnce();
         // Astro View Transitions: re-audit the newly loaded page.
         document.addEventListener('astro:page-load', auditOnce);
-      } else {
+      } else if (MODE === 'vitals') {
         // A real visitor: Web Vitals only, batched on pagehide. No axe-core download/run.
         initWebVitals();
       }
+      // 'off' (a share link) never reaches this script: the component renders nothing.
     </script>
   </Fragment>
 )}

package/dist/index.d.ts

@@ -1,11 +1,31 @@
 import { AstroIntegration } from 'astro';
 import { IAuthOptions } from 'ravendb';
+import { ShareContext } from './share';
+export type { ShareContent, ShareContext } from './share';
 export interface IntegrationOptions extends IAuthOptions {
     certificate?: string;
     password?: string;
     urls?: string[];
     database?: string;
     collections?: Collection[];
+    /** Share links (`/share/{guid}`); see `@strifeapp/astro/share-middleware`. */
+    share?: ShareOptions;
+}
+export interface ShareOptions {
+    /**
+     * Index fields to project onto `Astro.locals.share.content` beside the row fields
+     * (your template fields, e.g. `['heading', 'body']`), so the middleware's one
+     * lookup also feeds the render. Without it, `content` carries the row fields only
+     * and the share page queries its own fields by `docId` + `locale`.
+     */
+    fields?: string[];
+    /**
+     * `false` skips the automatic `pre` registration of the share middleware. Do this
+     * when your site resolves its locale in its own middleware: compose
+     * `createShareMiddleware({ resolveLocale })` from `@strifeapp/astro/share-middleware`
+     * in `src/middleware.ts` instead.
+     */
+    middleware?: boolean;
 }
 export interface Collection {
     name: string;
@@ -21,6 +41,14 @@ declare global {
              * e.g. render draft vs published content.
              */
             editMode?: boolean;
+            /**
+             * Set by the share middleware on a `/share/{guid}` request that resolved to a
+             * live share snapshot: the snapshot's id, its editor-given name (text only —
+             * never `set:html`), when the link expires, the resolved locale, and the
+             * `Content/ByUrl` projection to render. Absent on every other request, and
+             * on every share miss (the middleware answers those with the site's 404 page).
+             */
+            share?: ShareContext;
         }
     }
 }

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5C,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,GAAG,CAAC;QACZ,UAAU,MAAM;YACd;;;;;eAKG;YACH,QAAQ,CAAC,EAAE,OAAO,CAAC;SACpB;KACF;CACF;AAMD,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,gBAAgB,CAwDxF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,GAAG,CAAC;QACZ,UAAU,MAAM;YACd;;;;;eAKG;YACH,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB;;;;;;eAMG;YACH,KAAK,CAAC,EAAE,YAAY,CAAC;SACtB;KACF;CACF;AAMD,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,gBAAgB,CAoExF"}

package/dist/index.js

@@ -1,20 +1,20 @@
 import { envField as e } from "astro/config";
-import { v as c } from "./vite-plugin-strife-store-B-B_HXbA.js";
-const i = {
+import { v as i } from "./vite-plugin-strife-store-Ch0cgrwA.js";
+const c = {
   type: "pfx"
 };
-function p(t) {
+function l(t) {
   return {
     name: "@strife/astro",
     hooks: {
-      "astro:config:setup": ({ updateConfig: r, addMiddleware: s }) => {
-        const n = {
-          ...i,
+      "astro:config:setup": ({ updateConfig: o, addMiddleware: r }) => {
+        const s = {
+          ...c,
           ...t ? Object.fromEntries(
-            Object.entries(t).filter(([, o]) => o != null)
+            Object.entries(t).filter(([, n]) => n != null)
           ) : {}
         };
-        r({
+        o({
           env: {
             schema: {
               // Consolidated single-var secret (packs urls/database/certificate/password,
@@ -32,16 +32,19 @@ function p(t) {
             }
           },
           vite: {
-            plugins: [c(n)]
+            plugins: [i(s)]
           }
-        }), s({
+        }), r({
           entrypoint: "@strifeapp/astro/edit-mode-middleware",
           order: "pre"
+        }), s.share?.middleware !== !1 && r({
+          entrypoint: "@strifeapp/astro/share-middleware",
+          order: "pre"
         });
       }
     }
   };
 }
 export {
-  p as default
+  l as default
 };

package/dist/insights-mode.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Which telemetry `<Insights />` runs for a request, from the middleware-set locals:
+ *   - `vitals`: a real visitor — Core Web Vitals only;
+ *   - `audit`: the Strife live preview (edit mode) — the axe-core accessibility audit only;
+ *   - `off`: a share link (R14) — nothing at all. A share is not audience traffic, and a
+ *     beacon would carry the share path, i.e. the guid.
+ * Pure, so the gate is unit-tested; Insights.astro only forwards the result.
+ */
+export type InsightsMode = 'vitals' | 'audit' | 'off';
+export declare function insightsMode(locals: {
+    editMode?: boolean;
+    share?: unknown;
+}): InsightsMode;
+//# sourceMappingURL=insights-mode.d.ts.map

package/dist/insights-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insights-mode.d.ts","sourceRoot":"","sources":["../src/insights-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;AAEtD,wBAAgB,YAAY,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,YAAY,CAI1F"}

package/dist/insights-mode.js

@@ -0,0 +1,6 @@
+function e(t) {
+  return t.share != null ? "off" : t.editMode === !0 ? "audit" : "vitals";
+}
+export {
+  e as insightsMode
+};

package/dist/share-middleware.d.ts

@@ -0,0 +1,36 @@
+import { APIContext, MiddlewareHandler } from 'astro';
+import { ResolveShareOptions } from './share';
+/**
+ * Share-link middleware (STR-2165). Registered `pre` by the integration (see
+ * src/index.ts) unless `share.middleware` is `false`; also exported as
+ * `createShareMiddleware` so a site that resolves its locale in its own middleware
+ * can compose it there with `resolveLocale`.
+ *
+ * For a share path (`/share/{guid}` after an optional locale root prefix, where the
+ * tail is a valid guid — 32 lowercase hex characters) it looks the snapshot up for
+ * the site's resolved locale and:
+ *   - on a hit sets `Astro.locals.share = { docId, name, expiresAt, locale, content }`
+ *     and lets the site's `src/pages/share/[guid].astro` render it;
+ *   - on any miss renders the site's 404 page through Astro's rewrite, re-wrapped so
+ *     the status is 404 (Astro answers a rewrite with 200).
+ * Both carry `X-Robots-Tag: noindex, nofollow`, `Cache-Control: private, no-store`
+ * and `Referrer-Policy: no-referrer`. Edit mode is forced off on share routes, so
+ * `<LivePreview />` never activates there. Nothing is logged on a hit, and the guid
+ * is never logged. Every other path passes through untouched — including a
+ * share-shaped path whose tail is not a guid (`/help/share/link`): as in the .NET
+ * resolver, that is not a share request but an ordinary site route.
+ */
+export interface ShareMiddlewareOptions extends ResolveShareOptions {
+    /**
+     * Resolve the locale of the current request. Defaults to Astro's
+     * `context.currentLocale` (i18n routing). A site that resolves its locale itself
+     * — from a cookie, a header, its own path scheme — must pass this, or a
+     * multi-locale share resolves the wrong (or no) row.
+     */
+    resolveLocale?: (context: APIContext) => string | undefined | Promise<string | undefined>;
+}
+export declare const SHARE_RESPONSE_HEADERS: Readonly<Record<string, string>>;
+export declare function createShareMiddleware(options?: ShareMiddlewareOptions): MiddlewareHandler;
+/** The default instance the integration registers via `addMiddleware`. */
+export declare const onRequest: MiddlewareHandler;
+//# sourceMappingURL=share-middleware.d.ts.map

package/dist/share-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-middleware.d.ts","sourceRoot":"","sources":["../src/share-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAA4C,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3F;AAED,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIlE,CAAC;AAEH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CA0B7F;AAED,0EAA0E;AAC1E,eAAO,MAAM,SAAS,EAAE,iBAA2C,CAAC"}

package/dist/share-middleware.js

@@ -0,0 +1,49 @@
+import { matchSharePath as u, isShareGuid as i, lookupShare as h } from "./share.js";
+const d = Object.freeze({
+  "X-Robots-Tag": "noindex, nofollow",
+  "Cache-Control": "private, no-store",
+  "Referrer-Policy": "no-referrer"
+});
+function f(r = {}) {
+  return async (e, a) => {
+    const t = u(e.url.pathname);
+    if (t === null || !i(t)) return a();
+    e.locals.editMode = !1;
+    const o = r.resolveLocale ? await r.resolveLocale(e) : e.currentLocale, n = await h(t, o, r);
+    return n.share === null ? (n.reason === "query_error" && console.warn("[strife] share lookup failed (reason=query_error); answering 404"), w(a)) : (e.locals.share = n.share, l(await a()));
+  };
+}
+const S = f();
+async function w(r) {
+  let e;
+  try {
+    e = await r("/404");
+  } catch {
+    e = new Response(null, { status: 404 });
+  }
+  return l(e, 404);
+}
+function l(r, e) {
+  const a = e !== void 0 && r.status !== e ? s(r, e) : r, t = (o) => {
+    for (const [n, c] of Object.entries(d))
+      o.set(n, c);
+  };
+  try {
+    return t(a.headers), a;
+  } catch {
+    const o = s(a, a.status);
+    return t(o.headers), o;
+  }
+}
+function s(r, e) {
+  return new Response(r.body, {
+    status: e,
+    statusText: r.statusText,
+    headers: new Headers(r.headers)
+  });
+}
+export {
+  d as SHARE_RESPONSE_HEADERS,
+  f as createShareMiddleware,
+  S as onRequest
+};

package/dist/share.d.ts

@@ -0,0 +1,126 @@
+import { IDocumentStore } from 'ravendb';
+/**
+ * Share links (STR-2165): resolve a `/share/{guid}` request to the one live share
+ * snapshot its guid names, reading the `Content/ByUrl` projection for the resolved
+ * locale. Locale handling mirrors the .NET SDK's `DefaultRouteResolver` exactly:
+ *   - with a resolved locale the query carries a locale clause; when it yields no row
+ *     (a cookie- or Accept-Language-driven locale the draft never had, a link pasted
+ *     under another prefix) the guid is re-queried without the clause (bounded to
+ *     `MAX_SHARE_LOCALE_ROWS`) and only the snapshot's own row — `locale` equal to
+ *     its `shareLocale` — is kept, so the preview is served rather than hidden;
+ *   - without a resolved locale the guid-only query pages every row of the snapshot
+ *     (again bounded to `MAX_SHARE_LOCALE_ROWS`, never just the first two), and more
+ *     than one candidate row is decided by the same rule: the `shareLocale` row wins,
+ *     and anything other than exactly one such row is an `ambiguous_locale` miss.
+ * Pure with respect to Astro — the store is injectable, so the lookup is
+ * unit-testable without RavenDB; `resolveShare` without a store reads the
+ * integration's `strife:store` virtual module.
+ *
+ * The guid is the bearer secret of the link: nothing in this module logs it, and
+ * a thrown query (an index build that predates share links, an unreachable store)
+ * is a miss, never an exception that could surface it on an error page.
+ */
+/** The content index the integration queries; deployed by `strife push`. */
+export declare const SHARE_INDEX_NAME = "Content/ByUrl";
+/** A share guid is exactly 32 lowercase hex characters — nothing looser. */
+export declare const SHARE_GUID_PATTERN: RegExp;
+/**
+ * Upper bound on locales one snapshot can carry rows for; a guid-only query (no
+ * resolved locale, or the locale fallback) never scans further. Same constant as the
+ * .NET resolver's `MaxShareLocaleRows`.
+ */
+export declare const MAX_SHARE_LOCALE_ROWS = 64;
+/**
+ * Row fields every share lookup projects from the index: the share metadata plus
+ * what a page needs to pick a layout (`collection`, `displayName`, `url`). `deleted`
+ * is not stored in the index; RavenDB's default projection behaviour reads it from
+ * the document, which is exactly the soft-delete check we want. Site-specific
+ * template fields come from the `fields` option.
+ */
+export declare const SHARE_ROW_FIELDS: readonly ["docId", "locale", "collection", "displayName", "url", "status", "shareGuid", "shareName", "expiresAt", "shareLocale", "createdAt", "changedAt", "publishedAt", "origin", "labels", "deleted"];
+/**
+ * The `Content/ByUrl` row for the snapshot in the resolved locale — the same
+ * projected, locale-translated object a page gets when it queries the index, plus
+ * any site fields passed through `fields`.
+ */
+export interface ShareContent {
+    docId: string;
+    locale: string;
+    status: 'share';
+    shareGuid: string;
+    shareName?: string | null;
+    expiresAt: string;
+    /** The locale the editor was viewing when sharing — the one the link targets. */
+    shareLocale?: string | null;
+    collection?: string | null;
+    displayName?: string | null;
+    url?: string | null;
+    [field: string]: unknown;
+}
+/** What a share page sees on `Astro.locals.share`. */
+export interface ShareContext {
+    /** The snapshot's document id (`{canonicalId}/share/{guid}`). Never log it. */
+    docId: string;
+    /** The editor-given name, or `null`. Render as text only — never `set:html`. */
+    name: string | null;
+    /** UTC instant after which the link stops resolving. */
+    expiresAt: Date;
+    /** The locale the row was resolved for. */
+    locale: string;
+    /** The index projection for that locale; render this. */
+    content: ShareContent;
+}
+export type ShareMissReason = 'malformed_guid' | 'not_found' | 'ambiguous_locale' | 'deleted' | 'no_expiry' | 'expired' | 'query_error';
+export type ShareLookup = {
+    share: ShareContext;
+    reason: null;
+} | {
+    share: null;
+    reason: ShareMissReason;
+};
+export interface ResolveShareOptions {
+    /** The document store to query. Defaults to the integration's `strife:store`. */
+    store?: IDocumentStore;
+    /**
+     * Extra index fields to project onto `content` (your template fields, e.g.
+     * `['heading', 'body']`), so one lookup both decides the 404 and feeds the render.
+     * Defaults to the integration's `share.fields` option.
+     */
+    fields?: readonly string[];
+    /** Clock, for tests. */
+    now?: () => Date;
+}
+export declare function isShareGuid(value: unknown): value is string;
+/**
+ * Matches the share convention `/share/{guid}` after an optional single locale root
+ * prefix segment (`/sv/share/{guid}`, `/svenska/share/{guid}`), with or without a
+ * trailing slash. Returns the raw guid segment — validate it with `isShareGuid` — or
+ * `null` when the path is not share-shaped. The prefix is opaque: the locale comes
+ * from the site's own resolution, never from the path.
+ */
+export declare function matchSharePath(pathname: string): string | null;
+/**
+ * Picks the single live snapshot row or names the miss. Mirrors the .NET SDK's
+ * `DefaultRouteResolver.ClassifyShareRows` so both site SDKs agree on "live": with
+ * more than one row (several locales of one snapshot and no locale resolver to pick
+ * between them) the share's own locale wins — the row whose `locale` equals its
+ * `shareLocale` — and anything other than exactly one such row is `ambiguous_locale`.
+ */
+export declare function classifyShareRows(rows: readonly Record<string, unknown>[], now: Date): ShareLookup;
+/**
+ * Looks a share up and reports the outcome with its miss reason. A malformed guid
+ * never reaches the store. `locale` is the site's resolved locale: the query carries
+ * it as a clause, and when that yields no row the guid is re-queried without the
+ * clause and only the snapshot's own `shareLocale` row is kept (the .NET resolver's
+ * locale fallback). When `locale` is `undefined` (a single-locale site without Astro
+ * i18n) the clause is omitted from the start and the query pages every row of the
+ * snapshot; more than one row then resolves to the `shareLocale` row, or is an
+ * `ambiguous_locale` miss (see `classifyShareRows`).
+ */
+export declare function lookupShare(guid: string, locale: string | undefined, options?: ResolveShareOptions): Promise<ShareLookup>;
+/**
+ * Resolves `guid` in `locale` to the share context, or `null` on any miss
+ * (unknown, malformed, deleted, expired, missing expiry, query failure).
+ */
+export declare function resolveShare(guid: string, locale: string | undefined, options?: ResolveShareOptions): Promise<ShareContext | null>;
+//# sourceMappingURL=share.d.ts.map

package/dist/share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../src/share.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,0MAiBnB,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,wDAAwD;IACxD,SAAS,EAAE,IAAI,CAAC;IAChB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,WAAW,GACX,kBAAkB,GAClB,SAAS,GACT,WAAW,GACX,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE3D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,GAAG,WAAW,CA2BlG;AAcD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,CAetB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B"}

package/dist/share.js

@@ -0,0 +1,104 @@
+const i = "Content/ByUrl", c = /^[0-9a-f]{32}$/, E = 64, h = [
+  "docId",
+  "locale",
+  "collection",
+  "displayName",
+  "url",
+  "status",
+  "shareGuid",
+  "shareName",
+  "expiresAt",
+  "shareLocale",
+  "createdAt",
+  "changedAt",
+  "publishedAt",
+  "origin",
+  "labels",
+  "deleted"
+];
+function f(e) {
+  return typeof e == "string" && c.test(e);
+}
+function p(e) {
+  const r = /^\/(?:[^/]+\/)?share\/([^/]+)\/?$/.exec(e);
+  return r ? r[1] : null;
+}
+function d(e, r) {
+  if (e.length === 0) return { share: null, reason: "not_found" };
+  let t = e[0];
+  if (e.length > 1) {
+    const a = e.filter(u);
+    if (a.length !== 1) return { share: null, reason: "ambiguous_locale" };
+    t = a[0];
+  }
+  if (t.deleted === !0) return { share: null, reason: "deleted" };
+  const s = m(t.expiresAt);
+  if (s === null) return { share: null, reason: "no_expiry" };
+  if (s.getTime() <= r.getTime()) return { share: null, reason: "expired" };
+  const n = t;
+  return {
+    share: {
+      docId: String(n.docId),
+      name: typeof n.shareName == "string" ? n.shareName : null,
+      expiresAt: s,
+      locale: String(n.locale),
+      content: n
+    },
+    reason: null
+  };
+}
+function u(e) {
+  return e.shareLocale != null && e.locale === e.shareLocale;
+}
+function m(e) {
+  if (e instanceof Date) return Number.isNaN(e.getTime()) ? null : e;
+  if (typeof e != "string" || e === "") return null;
+  const r = new Date(e);
+  return Number.isNaN(r.getTime()) ? null : r;
+}
+async function y(e, r, t = {}) {
+  if (!f(e)) return { share: null, reason: "malformed_guid" };
+  const s = t.now ?? (() => /* @__PURE__ */ new Date());
+  let n;
+  try {
+    const { store: a, fields: l } = await _(t);
+    n = await A(a, e, r, l);
+  } catch {
+    return { share: null, reason: "query_error" };
+  }
+  return d(n, s());
+}
+async function g(e, r, t = {}) {
+  return (await y(e, r, t)).share;
+}
+async function A(e, r, t, s) {
+  const n = e.openSession();
+  try {
+    const a = S(s);
+    let l = n.query({ indexName: i }).whereEquals("shareGuid", r).whereEquals("status", "share");
+    t && (l = l.whereEquals("locale", t));
+    const o = await l.selectFields(a).take(t ? 2 : 64).all();
+    return o.length > 0 || !t ? o : (await n.query({ indexName: i }).whereEquals("shareGuid", r).whereEquals("status", "share").selectFields(a).take(64).all()).filter(u);
+  } finally {
+    n.dispose();
+  }
+}
+function S(e) {
+  return [.../* @__PURE__ */ new Set([...h, ...e ?? []])];
+}
+async function _(e) {
+  if (e.store) return { store: e.store, fields: e.fields };
+  const r = await import("strife:store");
+  return { store: r.store, fields: e.fields ?? r.shareOptions?.fields };
+}
+export {
+  E as MAX_SHARE_LOCALE_ROWS,
+  c as SHARE_GUID_PATTERN,
+  i as SHARE_INDEX_NAME,
+  h as SHARE_ROW_FIELDS,
+  d as classifyShareRows,
+  f as isShareGuid,
+  y as lookupShare,
+  p as matchSharePath,
+  g as resolveShare
+};

package/dist/{vite-plugin-strife-store-B-B_HXbA.js → vite-plugin-strife-store-Ch0cgrwA.js}

@@ -96,6 +96,10 @@ function n(o) {
           // operator-controlled path). The store only connects and reads — Astro no
           // longer deploys the index or seeds templates.
           export { store };
+
+          // Non-secret share-link options (@strifeapp/astro/share reads the projection
+          // fields from here when the auto-registered middleware resolves a share).
+          export const shareOptions = defaultConfig.share || {};
         `;
     }
   };

package/dist/vite-plugin-strife-store-entry.js

@@ -1,4 +1,4 @@
-import { v as t } from "./vite-plugin-strife-store-B-B_HXbA.js";
+import { v as t } from "./vite-plugin-strife-store-Ch0cgrwA.js";
 export {
   t as vitePluginStrifeStore
 };

package/dist/vite-plugin-strife-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite-plugin-strife-store.d.ts","sourceRoot":"","sources":["../src/vite-plugin-strife-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CA6G9E"}
+{"version":3,"file":"vite-plugin-strife-store.d.ts","sourceRoot":"","sources":["../src/vite-plugin-strife-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAiH9E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strifeapp/astro",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Official Strife integration for Astro — connect your Astro site to a RavenDB-backed Strife content store via a strife:store virtual module.",
   "keywords": [
     "astro-integration",
@@ -39,6 +39,14 @@
       "types": "./dist/edit-mode-middleware.d.ts",
       "import": "./dist/edit-mode-middleware.js"
     },
+    "./share": {
+      "types": "./dist/share.d.ts",
+      "import": "./dist/share.js"
+    },
+    "./share-middleware": {
+      "types": "./dist/share-middleware.d.ts",
+      "import": "./dist/share-middleware.js"
+    },
     "./LivePreview.astro": "./dist/LivePreview.astro",
     "./Insights.astro": "./dist/Insights.astro",
     "./vite-plugin-strife-store": "./dist/vite-plugin-strife-store-entry.js"
@@ -63,17 +71,17 @@
     "@strifeapp/strife": "^1.1.0",
     "axe-core": "^4.11.0",
     "dotenv": "^17.2.3",
-    "jose": "^5.9.6",
+    "jose": "^6.2.9",
     "ravendb": "^7.1.4",
     "serialize-javascript": "^7.0.5",
-    "web-vitals": "^5.1.0"
+    "web-vitals": "^6.1.1"
   },
   "devDependencies": {
     "@types/serialize-javascript": "^5.0.4",
-    "astro": "^6.3.6",
+    "astro": "^6.4.8",
     "rimraf": "^6.0.1",
     "typescript": "^5.7.3",
-    "vite": "^7.0.0",
+    "vite": "^7.3.6",
     "vite-plugin-dts": "^4.5.3",
     "vitest": "^4.1.7"
   },