@tideworthy/tidysites-platform 0.10.12 → 0.10.13

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.10.13
+
+- Editor: the request panel opens at once; who is signed in is read when the page loads and the greeting fills in. The middleware keeps only the noindex header; robots.txt and the sitemap for staging are the control plane's.
+
 ## 0.10.12
 
 - The staging site is never indexed: every response carries `X-Robots-Tag: noindex, nofollow`, robots.txt disallows everything and the sitemap answers 404. The publish crawl still gets the real robots.txt and sitemap for the live copy.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tideworthy/tidysites-platform",
-	"version": "0.10.12",
+	"version": "0.10.13",
 	"description": "The Tidysites platform integration for EmDash sites: bootstrap, sessions, maintenance, health, and publish hooks under /_tidy/*.",
 	"license": "MIT",
 	"type": "module",

package/src/editor/request.ts

@@ -27,16 +27,27 @@ export function mountRequestChange(): void {
 	function close() {
 		panel.hidden = true;
 		panel.replaceChildren();
+		greeting = null;
 	}
 
+	// Who is signed in, read once the page is up so the panel opens at once; the greeting fills in when it arrives.
 	let who: { name: string | null } | null = null;
 	const firstName = () => (who?.name ?? "").trim().split(/\s+/)[0] || "";
+	let greeting: HTMLElement | null = null;
+	const whoReady = fetch(ROUTE, { credentials: "same-origin" })
+		.then((r) => (r.ok ? r.json() : null))
+		.then((j) => {
+			who = (j as { name: string | null } | null) ?? null;
+			if (greeting && firstName()) greeting.textContent = `Hi ${firstName()},`;
+		})
+		.catch(() => undefined);
 
-	async function render() {
-		if (!who) who = (await fetch(ROUTE, { credentials: "same-origin" }).then((r) => (r.ok ? r.json() : null)).catch(() => null)) as { name: string | null } | null;
+	function render() {
+		void whoReady;
 		const name = firstName();
+		greeting = el("h2", { text: name ? `Hi ${name},` : "Hi there," });
 		const head = el("div", { class: "tidy-panel-head" }, [
-			el("h2", { text: name ? `Hi ${name},` : "Hi there," }),
+			greeting,
 			el("p", { text: "We would love to help you make some adjustments to your website. Describe what you would like to see different or new, and we will get a version back to you as soon as possible." })
 		]);
 		const body = el("textarea", { id: "tidy-change-body", rows: "7", maxlength: "10000", required: "" });
@@ -61,7 +72,7 @@ export function mountRequestChange(): void {
 			sending = false;
 			if (r?.ok && j.ok) {
 				panel.replaceChildren(
-					el("div", { class: "tidy-panel-head" }, [el("h2", { text: name ? `Thanks, ${name}.` : "Thanks." }), el("p", { text: "We have your request and will get a version back to you as soon as possible." })]),
+					el("div", { class: "tidy-panel-head" }, [el("h2", { text: firstName() ? `Thanks, ${firstName()}.` : "Thanks." }), el("p", { text: "We have your request and will get a version back to you as soon as possible." })]),
 					el("div", { class: "tidy-panel-actions" }, [el("button", { type: "button", class: "tidy-btn", text: "Close" })])
 				);
 				panel.querySelector("button")?.addEventListener("click", close);

package/src/middleware.ts

@@ -1,36 +1,26 @@
 /**
  * Astro middleware registered by tidyPlatform(): the framing policy from
- * TIDY_FRAME_ANCESTORS, and no indexing of the staging site. This worker is
- * the staging site (the live site is a static copy served by its own small
- * worker), so every answer here carries noindex, robots.txt disallows
- * everything and the sitemap is gone. The publish crawl identifies itself
- * and gets the real robots.txt and sitemap, which is what the live copy
- * ships.
+ * TIDY_FRAME_ANCESTORS, and noindex on every page this worker serves. This
+ * worker is the staging site (the live site is a static copy served by its
+ * own small worker); the control plane in front of it answers robots.txt
+ * and the sitemap for staging hostnames. The publish crawl identifies
+ * itself and is left alone, so the live copy carries no noindex.
  */
 import type { MiddlewareHandler } from "astro";
 import { workerEnv } from "./lib/env";
 import { applyFramePolicy, frameAncestors } from "./lib/frame";
 
 const PUBLISH_CRAWL = "tidysites-publish";
-const NOINDEX = "noindex, nofollow";
 
 export const onRequest: MiddlewareHandler = async (context, next) => {
 	const crawl = context.request.headers.get("user-agent") === PUBLISH_CRAWL;
-	if (!crawl) {
-		const path = context.url.pathname;
-		if (path === "/robots.txt") {
-			return new Response("User-agent: *\nDisallow: /\n", { headers: { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store", "x-robots-tag": NOINDEX } });
-		}
-		if (path === "/sitemap.xml" || path === "/sitemap-index.xml" || /^\/sitemap-\d+\.xml$/.test(path)) {
-			return new Response("Not found", { status: 404, headers: { "cache-control": "no-store", "x-robots-tag": NOINDEX } });
-		}
-	}
 	const response = await next();
 	const env = await workerEnv();
 	const ancestors = frameAncestors(env?.TIDY_FRAME_ANCESTORS);
+	if (ancestors.length === 0 && crawl) return response;
 	const apply = (headers: Headers) => {
 		if (ancestors.length > 0) applyFramePolicy(headers, ancestors);
-		if (!crawl) headers.set("x-robots-tag", NOINDEX);
+		if (!crawl) headers.set("x-robots-tag", "noindex, nofollow");
 	};
 	// Response headers can be immutable (static assets, redirects); rebuild when so.
 	try {

package/src/version.ts

@@ -1,3 +1,3 @@
 /** Kept in step with package.json by the release checklist in MAINTAINING.md. */
-export const VERSION = "0.10.12";
+export const VERSION = "0.10.13";
 export const PLUGIN_ID = "tidy-platform";