@tinacms/bridge 0.0.1 → 0.3.0

package/dist/config.d.ts

@@ -0,0 +1,17 @@
+export declare function setAdminOrigin(origin: string | string[]): void;
+/**
+ * Returns the canonical admin origin used as the `targetOrigin` for outbound
+ * postMessage. When multiple origins are configured the first entry wins —
+ * that's the deployment's primary admin host; the others are accepted for
+ * inbound traffic but the bridge still posts to the canonical one.
+ */
+export declare function getAdminOrigin(): string;
+/**
+ * Returns true only for postMessage events that originated from the admin
+ * iframe parent — `event.origin` matches one of the configured admin
+ * origins AND `event.source` is the parent window. Both checks are
+ * required: origin alone leaves us open to sibling frames sharing the
+ * same origin, source alone leaves us open to cross-origin parents that
+ * happen to have a handle to our window.
+ */
+export declare function isFromAdmin(event: MessageEvent): boolean;

package/dist/data-store.d.ts

@@ -1,8 +1,10 @@
 import type { DataStore } from './types';
 /**
  * Holds the latest resolved data per form id (keyed by `hashFromQuery`-style
- * id). Subscribers learn whether each update is the first one for that form,
- * so island-refresh can fire immediately on the first push (newly-created
- * docs reach a populated state ASAP) and debounce subsequent edits.
+ * id). `seed()` populates the initial server-rendered payload silently so
+ * the bridge doesn't trigger a refresh on page load. `set()` records edits
+ * from the admin and fires subscribers; `firstUpdate` is true only for the
+ * first admin update per id (used by island-refresh to skip the debounce
+ * on cold-start so newly-created docs reach a populated state ASAP).
  */
 export declare function initDataStore(): DataStore;

package/dist/forms.d.ts

@@ -1,3 +1,9 @@
 import type { DataStore } from './types';
+export declare const FORM_SELECTOR = "[data-tina-form]";
+export declare const FORM_ATTR = "data-tina-form";
+export declare const PRIMARY_FORM_ATTR = "data-tina-primary";
 export declare function initForms(store: DataStore): void;
+/** Diff active forms against the DOM and post the deltas. Safe to call
+ *  before init() — no-op then. */
+export declare function refreshForms(): void;
 export declare function reportQuickEdit(): void;

package/dist/forms.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -1 +1,17 @@
-export * from "../src/index"
+export interface BridgeOptions {
+    /** Debounce for refetches after the first edit. The first refetch
+     *  fires immediately. Default 300ms. */
+    debounceMs?: number;
+    /** Allowed origin(s) of the admin parent for in-iframe postMessage.
+     *  Defaults to `window.location.origin` (same-host `/admin`). */
+    adminOrigin?: string | string[];
+}
+export declare function init(options?: BridgeOptions): void;
+/**
+ * Re-scan for `[data-tina-form]` payloads after a soft navigation
+ * (Astro view transitions, Turbo, htmx). On a prerendered page with no
+ * server-injected payloads, prime from the island endpoints first.
+ */
+export declare function refreshForms(): void;
+export { tinaField } from './tina-field';
+export type * from './types';

package/dist/index.js

@@ -1,11 +1,23 @@
+let configuredAdminOrigins = [];
+function setAdminOrigin(origin) {
+  configuredAdminOrigins = Array.isArray(origin) ? [...origin] : [origin];
+}
+function getAdminOrigin() {
+  return configuredAdminOrigins[0] ?? "";
+}
+function isFromAdmin(event) {
+  if (typeof window === "undefined")
+    return false;
+  if (!configuredAdminOrigins.includes(event.origin))
+    return false;
+  return event.source === window.parent;
+}
 const ENABLED = typeof window !== "undefined";
 function debug(...args) {
   if (!ENABLED)
     return;
   console.log("[@tinacms/bridge]", ...args);
 }
-const STYLE_ID = "__tina-bridge-quick-edit-style";
-const BODY_CLASS = "__tina-quick-editing-enabled";
 const QUICK_EDIT_CSS = `
   [data-tina-field] {
     outline: 2px dashed rgba(34,150,254,0.5);
@@ -37,8 +49,10 @@ const QUICK_EDIT_CSS = `
     opacity: 1;
   }
 `;
+const QUICK_EDIT_BODY_CLASS = "__tina-quick-editing-enabled";
+const QUICK_EDIT_STYLE_ID = "__tina-bridge-quick-edit-style";
 function initClickToFocus() {
-  let enabled = true;
+  let enabled = false;
   document.addEventListener(
     "click",
     (event) => {
@@ -58,12 +72,14 @@ function initClickToFocus() {
       event.stopPropagation();
       window.parent.postMessage(
         { type: "field:selected", fieldName },
-        window.location.origin
+        getAdminOrigin()
       );
     },
     true
   );
   window.addEventListener("message", (event) => {
+    if (!isFromAdmin(event))
+      return;
     const message = event.data;
     if (!message || message.type !== "quickEditEnabled")
       return;
@@ -97,18 +113,18 @@ function readTinaField(el) {
   return null;
 }
 function installStyle() {
-  if (document.getElementById(STYLE_ID))
+  if (document.getElementById(QUICK_EDIT_STYLE_ID))
     return;
   const style = document.createElement("style");
-  style.id = STYLE_ID;
+  style.id = QUICK_EDIT_STYLE_ID;
   style.textContent = QUICK_EDIT_CSS;
   document.head.appendChild(style);
-  document.body.classList.add(BODY_CLASS);
+  document.body.classList.add(QUICK_EDIT_BODY_CLASS);
 }
 function removeStyle() {
   var _a;
-  (_a = document.getElementById(STYLE_ID)) == null ? void 0 : _a.remove();
-  document.body.classList.remove(BODY_CLASS);
+  (_a = document.getElementById(QUICK_EDIT_STYLE_ID)) == null ? void 0 : _a.remove();
+  document.body.classList.remove(QUICK_EDIT_BODY_CLASS);
 }
 function initDataStore() {
   const data = /* @__PURE__ */ new Map();
@@ -116,6 +132,7 @@ function initDataStore() {
   const listeners = /* @__PURE__ */ new Set();
   return {
     get: (id) => data.get(id),
+    has: (id) => data.has(id),
     seed(id, next) {
       data.set(id, next);
     },
@@ -133,16 +150,58 @@ function initDataStore() {
     }
   };
 }
-const SCRIPT_TYPE = "application/tina+json";
+const FORM_SELECTOR = "[data-tina-form]";
+const FORM_ATTR = "data-tina-form";
+const PRIMARY_FORM_ATTR = "data-tina-primary";
 const RETRY_INTERVAL_MS = 250;
 const MAX_ATTEMPTS = 40;
+let controller = null;
 function initForms(store) {
-  const scripts = document.querySelectorAll(
-    `script[type="${SCRIPT_TYPE}"]`
-  );
+  if (controller) {
+    debug("initForms called twice; ignoring");
+    return;
+  }
+  controller = {
+    store,
+    active: /* @__PURE__ */ new Map(),
+    acknowledged: /* @__PURE__ */ new Set(),
+    primaryId: null,
+    retryTimer: null,
+    attempts: 0
+  };
+  window.addEventListener("message", onAck);
+  window.addEventListener("beforeunload", onBeforeUnload);
+}
+function refreshForms$1() {
+  if (!controller) {
+    debug("refreshForms called before initForms; ignoring");
+    return;
+  }
+  const { payloads: next, primaryId } = readPayloads();
+  const nextIds = new Set(next.map((p) => p.id));
+  for (const [id] of controller.active) {
+    if (nextIds.has(id))
+      continue;
+    debug("posting close for", id);
+    window.parent.postMessage({ type: "close", id }, getAdminOrigin());
+    controller.acknowledged.delete(id);
+  }
+  for (const payload of next) {
+    controller.store.seed(payload.id, payload.data ?? {});
+  }
+  controller.active = new Map(next.map((p) => [p.id, p]));
+  controller.primaryId = primaryId && nextIds.has(primaryId) ? primaryId : null;
+  if (next.some((p) => !controller.acknowledged.has(p.id))) {
+    startAnnounceLoop();
+  }
+  reportQuickEdit();
+}
+function readPayloads() {
+  const elements = document.querySelectorAll(FORM_SELECTOR);
   const payloads = [];
-  for (const script of scripts) {
-    const raw = script.textContent;
+  let primaryId = null;
+  for (const el of elements) {
+    const raw = el.getAttribute(FORM_ATTR);
     if (!raw)
       continue;
     try {
@@ -150,80 +209,108 @@ function initForms(store) {
       if (!payload.id || !payload.query)
         continue;
       payloads.push(payload);
-      store.seed(payload.id, payload.data ?? {});
+      if (primaryId === null && el.hasAttribute(PRIMARY_FORM_ATTR)) {
+        primaryId = payload.id;
+      }
     } catch (error) {
       debug("failed to parse form payload", error);
     }
   }
   debug("discovered", payloads.length, "form(s)");
-  const acknowledged = /* @__PURE__ */ new Set();
-  const onAck = (event) => {
-    const msg = event.data;
-    if (!msg || typeof msg !== "object")
-      return;
-    if (msg.type !== "updateData" || typeof msg.id !== "string")
-      return;
-    if (!acknowledged.has(msg.id)) {
-      debug("admin acked form", msg.id);
-      acknowledged.add(msg.id);
-    }
-  };
-  window.addEventListener("message", onAck);
-  let attempts = 0;
-  const announce = () => {
-    attempts++;
-    const pending = payloads.filter((p) => !acknowledged.has(p.id));
-    if (pending.length === 0) {
-      debug("all forms acked after", attempts, "attempt(s)");
-      return;
-    }
-    if (attempts > MAX_ATTEMPTS) {
-      debug(
-        "giving up after",
-        MAX_ATTEMPTS,
-        "attempts; pending ids:",
-        pending.map((p) => p.id)
-      );
-      return;
-    }
-    for (const payload of pending) {
-      debug("posting open for", payload.id, "attempt", attempts);
-      window.parent.postMessage(
-        {
-          type: "open",
-          id: payload.id,
-          query: payload.query,
-          variables: payload.variables,
-          data: payload.data
-        },
-        window.location.origin
-      );
-    }
-    setTimeout(announce, RETRY_INTERVAL_MS);
-  };
+  return { payloads, primaryId };
+}
+function onAck(event) {
+  if (!isFromAdmin(event))
+    return;
+  const msg = event.data;
+  if (!msg || typeof msg !== "object")
+    return;
+  if (msg.type !== "updateData" || typeof msg.id !== "string")
+    return;
+  if (!controller)
+    return;
+  if (!controller.acknowledged.has(msg.id)) {
+    debug("admin acked form", msg.id);
+    controller.acknowledged.add(msg.id);
+  }
+}
+function onBeforeUnload() {
+  if (!controller)
+    return;
+  for (const [id] of controller.active) {
+    window.parent.postMessage({ type: "close", id }, getAdminOrigin());
+  }
+}
+function startAnnounceLoop() {
+  if (!controller)
+    return;
+  if (controller.retryTimer) {
+    clearTimeout(controller.retryTimer);
+    controller.retryTimer = null;
+  }
+  controller.attempts = 0;
   announce();
-  reportQuickEdit();
-  window.addEventListener("beforeunload", () => {
-    for (const payload of payloads) {
-      window.parent.postMessage(
-        { type: "close", id: payload.id },
-        window.location.origin
-      );
-    }
-  });
+}
+function announce() {
+  if (!controller)
+    return;
+  controller.attempts++;
+  const pending = [];
+  for (const [id, payload] of controller.active) {
+    if (!controller.acknowledged.has(id))
+      pending.push(payload);
+  }
+  if (pending.length === 0) {
+    debug("all forms acked after", controller.attempts, "attempt(s)");
+    controller.retryTimer = null;
+    return;
+  }
+  if (controller.attempts > MAX_ATTEMPTS) {
+    debug(
+      "giving up after",
+      MAX_ATTEMPTS,
+      "attempts; pending ids:",
+      pending.map((p) => p.id)
+    );
+    controller.retryTimer = null;
+    return;
+  }
+  for (const payload of pending) {
+    debug("posting open for", payload.id, "attempt", controller.attempts);
+    window.parent.postMessage(
+      {
+        type: "open",
+        id: payload.id,
+        query: payload.query,
+        variables: payload.variables,
+        data: payload.data
+      },
+      getAdminOrigin()
+    );
+  }
+  if (controller.primaryId && pending.some((p) => p.id === controller.primaryId)) {
+    window.parent.postMessage(
+      { type: "user-select-form", formId: controller.primaryId },
+      getAdminOrigin()
+    );
+  }
+  controller.retryTimer = setTimeout(announce, RETRY_INTERVAL_MS);
 }
 function reportQuickEdit() {
   const hasMarkers = !!document.querySelector("[data-tina-field]");
   window.parent.postMessage(
     { type: "quick-edit", value: hasMarkers },
-    window.location.origin
+    getAdminOrigin()
   );
 }
 const PREVIEW_CONTENT_TYPE = "application/x-tina-preview+json";
+const PRIME_HEADER = "X-Tina-Prime";
 const ISLAND_SELECTOR = "[data-tina-island]";
 const ENDPOINT_ATTR = "data-tina-island";
+const PRIMARY_ISLAND_ATTR = "data-tina-island-primary";
+const PRIMED_FORM_ATTR = "data-tina-primed";
 function initIslandRefresh(store, options) {
-  const debounceTimers = /* @__PURE__ */ new Map();
+  let pendingRefresh = null;
   const refreshAll = () => {
     const islands = document.querySelectorAll(ISLAND_SELECTOR);
     for (const island of islands) {
@@ -231,27 +318,30 @@ function initIslandRefresh(store, options) {
     }
   };
   store.subscribe(({ firstUpdate }) => {
-    const key = "__all__";
-    const existing = debounceTimers.get(key);
-    if (existing)
-      clearTimeout(existing);
+    if (pendingRefresh) {
+      clearTimeout(pendingRefresh);
+      pendingRefresh = null;
+    }
     if (firstUpdate) {
       refreshAll();
       return;
     }
-    debounceTimers.set(
-      key,
-      setTimeout(() => {
-        debounceTimers.delete(key);
-        refreshAll();
-      }, options.debounceMs)
-    );
+    pendingRefresh = setTimeout(() => {
+      pendingRefresh = null;
+      refreshAll();
+    }, options.debounceMs);
   });
   window.addEventListener("message", (event) => {
+    if (!isFromAdmin(event))
+      return;
     const message = event.data;
     if (!message || typeof message !== "object")
       return;
     if (message.type === "updateData" && typeof message.id === "string") {
+      if (!store.has(message.id)) {
+        debug("updateData for unknown id", message.id, "— ignoring");
+        return;
+      }
       debug("updateData received for", message.id);
       store.set(message.id, message.data ?? {});
     }
@@ -280,6 +370,10 @@ async function refreshIsland(island, store) {
       debug("island refetch failed", endpoint, response.status);
       return;
     }
+    if (!isHtmlResponse(response)) {
+      debug("island refetch wrong content-type", endpoint);
+      return;
+    }
     const html = await response.text();
     swapIslandHtml(island, html);
     reportQuickEdit();
@@ -287,11 +381,66 @@ async function refreshIsland(island, store) {
     debug("island refetch error", endpoint, error);
   }
 }
+async function primeIslands() {
+  const islands = document.querySelectorAll(ISLAND_SELECTOR);
+  const results = await Promise.all(Array.from(islands, primeIsland));
+  for (const formEl of results.flat()) {
+    formEl.setAttribute(PRIMED_FORM_ATTR, "");
+    document.body.appendChild(formEl);
+  }
+}
+async function primeIsland(island) {
+  const endpoint = island.getAttribute(ENDPOINT_ATTR);
+  if (!endpoint)
+    return [];
+  const isPrimary = island.hasAttribute(PRIMARY_ISLAND_ATTR);
+  try {
+    debug("priming island", endpoint);
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: {
+        "Content-Type": PREVIEW_CONTENT_TYPE,
+        [PRIME_HEADER]: "1"
+      },
+      body: "{}",
+      cache: "no-store",
+      credentials: "same-origin"
+    });
+    if (!response.ok) {
+      debug("island prime failed", endpoint, response.status);
+      return [];
+    }
+    if (!isHtmlResponse(response)) {
+      debug("island prime wrong content-type", endpoint);
+      return [];
+    }
+    const template = document.createElement("template");
+    template.innerHTML = (await response.text()).trim();
+    const formEls = Array.from(
+      template.content.querySelectorAll(FORM_SELECTOR)
+    );
+    if (isPrimary && formEls[0]) {
+      formEls[0].setAttribute(PRIMARY_FORM_ATTR, "");
+    }
+    return formEls;
+  } catch (error) {
+    debug("island prime error", endpoint, error);
+    return [];
+  }
+}
+function isHtmlResponse(response) {
+  const contentType = response.headers.get("content-type") ?? "";
+  return contentType.includes("text/html");
+}
+function isAllowedSwapAttribute(name) {
+  if (name === "class" || name === "id")
+    return true;
+  return name.startsWith("data-tina-");
+}
 function swapIslandHtml(island, html) {
   const template = document.createElement("template");
   template.innerHTML = html.trim();
-  const fragment = template.content;
-  const replacement = fragment.firstElementChild;
+  const replacement = template.content.firstElementChild;
   if (replacement) {
     for (const attr of Array.from(island.attributes)) {
       if (attr.name === ENDPOINT_ATTR)
@@ -299,6 +448,8 @@ function swapIslandHtml(island, html) {
       island.removeAttribute(attr.name);
     }
     for (const attr of Array.from(replacement.attributes)) {
+      if (!isAllowedSwapAttribute(attr.name))
+        continue;
       island.setAttribute(attr.name, attr.value);
     }
     island.innerHTML = replacement.innerHTML;
@@ -318,23 +469,61 @@ const tinaField = (object, property, index) => {
   const fullPath = typeof index === "number" ? [...path, property, index] : [...path, property];
   return `${queryId}---${fullPath.join(".")}`;
 };
-let initialized = false;
+let running = false;
 function init(options = {}) {
-  if (initialized)
+  if (running)
     return;
-  initialized = true;
   if (typeof window === "undefined" || window.parent === window) {
     debug("not in an iframe; bridge is a no-op");
     return;
   }
   debug("initialising in iframe");
-  const { debounceMs = 300 } = options;
+  const { debounceMs = 300, adminOrigin = window.location.origin } = options;
+  setAdminOrigin(adminOrigin);
   const store = initDataStore();
   initIslandRefresh(store, { debounceMs });
   initClickToFocus();
   initForms(store);
+  running = true;
+  refreshForms();
+}
+let primingInFlight = null;
+let reprimePending = false;
+function refreshForms() {
+  if (!running) {
+    debug("refreshForms called before init() finished; ignoring");
+    return;
+  }
+  removePrimedForms();
+  const hasServerForms = document.querySelector("[data-tina-form]");
+  if (!hasServerForms && document.querySelector("[data-tina-island]")) {
+    if (primingInFlight) {
+      reprimePending = true;
+      return;
+    }
+    debug("no server-injected forms; priming from island endpoints");
+    primingInFlight = primeIslands().finally(() => {
+      primingInFlight = null;
+    });
+    void primingInFlight.then(() => {
+      if (reprimePending) {
+        reprimePending = false;
+        refreshForms();
+        return;
+      }
+      refreshForms$1();
+    });
+    return;
+  }
+  refreshForms$1();
+}
+function removePrimedForms() {
+  for (const el of document.querySelectorAll(`[${PRIMED_FORM_ATTR}]`)) {
+    el.remove();
+  }
 }
 export {
   init,
+  refreshForms,
   tinaField
 };

package/dist/island-refresh.d.ts

@@ -1,15 +1,22 @@
 import type { DataStore } from './types';
 /**
- * Listens for `{type:'updateData', id, data}` from the admin and re-fetches
- * each `[data-tina-island]` with the unsaved data attached as the
- * `X-Tina-Preview` header. The island endpoint reads the header (via
- * `tina-preview` helper in the example) and renders with overlay data
- * instead of hitting the canonical content store.
- *
- * The very first updateData per form fires immediately so newly-created
- * docs leave the empty-template state ASAP. Subsequent updates are debounced.
+ * Listen for admin `updateData` events and re-fetch every island on the
+ * page with the unsaved data POSTed as a JSON body. POST (vs header)
+ * avoids the ~8KB Latin-1 cap. Refetches collapse into one debounced
+ * pass (every refresh re-renders every island).
  */
 export interface IslandRefreshOptions {
     debounceMs: number;
 }
+/** Marks a `[data-tina-form]` div that a prime pass appended (vs. one the
+ *  server injected), so a later re-scan can drop it before re-priming. */
+export declare const PRIMED_FORM_ATTR = "data-tina-primed";
 export declare function initIslandRefresh(store: DataStore, options: IslandRefreshOptions): void;
+/**
+ * Hydrate `[data-tina-form]` payloads for prerendered pages by hitting
+ * each island endpoint with the prime header set; the endpoint prepends
+ * payloads to the region HTML. The caller follows up with refreshForms()
+ * to announce them. Region HTML isn't swapped — canonical data is
+ * already on the page; the first real `updateData` handles updates.
+ */
+export declare function primeIslands(): Promise<void>;

package/dist/island-refresh.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/metadata.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Canonical content-source metadata helpers.
+ *
+ * `addMetadata` walks a query result and stamps every non-system object with
+ * `_content_source: { queryId, path }`. The pair is what `tinaField()` reads
+ * to build the `data-tina-field` markers the admin uses for click-to-focus.
+ *
+ * `hashFromQuery` derives the queryId from `JSON.stringify({ query, variables })`.
+ * Both ends of the wire (page render, admin sidebar) hash the same string so
+ * overlay updates address the same form.
+ *
+ * One source of truth for React (useTina), Astro (server-side overlay), and
+ * any future framework integration. Kept dependency-free so it runs in any
+ * runtime — browser, Node, edge.
+ */
+export declare const addMetadata: <T>(id: string, obj: T, path?: (string | number)[]) => T;
+/**
+ * Rudimentary string hash. Both ends of the wire derive the queryId from
+ * the same JSON.stringify({ query, variables }) — collisions are theoretically
+ * possible but vanishingly rare in practice.
+ */
+export declare const hashFromQuery: (input: string) => string;

package/dist/metadata.js

@@ -0,0 +1,66 @@
+const SYSTEM_KEYS = /* @__PURE__ */ new Set([
+  "__typename",
+  "_sys",
+  "_internalSys",
+  "_values",
+  "_internalValues",
+  "_content_source",
+  "_tina_metadata"
+]);
+const addMetadata = (id, obj, path = []) => {
+  if (obj === null)
+    return obj;
+  if (isScalarOrUndefined(obj))
+    return obj;
+  if (obj instanceof String)
+    return obj.valueOf();
+  if (Array.isArray(obj)) {
+    return obj.map(
+      (item, index) => addMetadata(id, item, [...path, index])
+    );
+  }
+  const next = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (SYSTEM_KEYS.has(key)) {
+      next[key] = value;
+    } else {
+      next[key] = addMetadata(id, value, [...path, key]);
+    }
+  }
+  if (next && typeof next === "object" && "type" in next && next.type === "root") {
+    return next;
+  }
+  return { ...next, _content_source: { queryId: id, path } };
+};
+function isScalarOrUndefined(value) {
+  const type = typeof value;
+  if (type === "string")
+    return true;
+  if (type === "number")
+    return true;
+  if (type === "boolean")
+    return true;
+  if (type === "undefined")
+    return true;
+  if (value == null)
+    return true;
+  if (value instanceof String)
+    return true;
+  if (value instanceof Number)
+    return true;
+  if (value instanceof Boolean)
+    return true;
+  return false;
+}
+const hashFromQuery = (input) => {
+  let hash = 0;
+  for (let i = 0; i < input.length; i++) {
+    const char = input.charCodeAt(i);
+    hash = (hash << 5) - hash + char & 4294967295;
+  }
+  return Math.abs(hash).toString(36);
+};
+export {
+  addMetadata,
+  hashFromQuery
+};

package/dist/preview.d.ts

@@ -1 +1,16 @@
-export * from "../src/preview"
+/**
+ * Server-side helpers for the X-Tina-Preview channel. The bridge POSTs
+ * island refetches with body `{ [queryId]: data, ... }`; handlers read
+ * their slice via `readOverlay(request, queryId)`.
+ */
+export declare const PREVIEW_HEADER = "X-Tina-Preview";
+export declare const PREVIEW_CONTENT_TYPE = "application/x-tina-preview+json";
+/** Set on the one-time prime refetch for prerendered pages; the endpoint
+ *  prepends `<div data-tina-form>` payloads to the region HTML. */
+export declare const PRIME_HEADER = "X-Tina-Prime";
+export interface PreviewEnvelope {
+    [queryId: string]: unknown;
+}
+export declare function readOverlay<T>(request: Request, queryId: string): Promise<T | undefined>;
+/** Read and parse the full overlay envelope (every form on the page). */
+export declare function readEnvelope(request: Request): Promise<PreviewEnvelope | undefined>;

package/dist/preview.js

@@ -1,5 +1,7 @@
 const PREVIEW_HEADER = "X-Tina-Preview";
 const PREVIEW_CONTENT_TYPE = "application/x-tina-preview+json";
+const PRIME_HEADER = "X-Tina-Prime";
+const MAX_ENVELOPE_BYTES = 1e6;
 async function readOverlay(request, queryId) {
   const envelope = await readEnvelope(request);
   if (!envelope)
@@ -7,14 +9,28 @@ async function readOverlay(request, queryId) {
   const value = envelope[queryId];
   return value === void 0 ? void 0 : value;
 }
-async function readEnvelope(request) {
+const envelopeCache = /* @__PURE__ */ new WeakMap();
+function readEnvelope(request) {
+  let cached = envelopeCache.get(request);
+  if (!cached) {
+    cached = parseEnvelope(request);
+    envelopeCache.set(request, cached);
+  }
+  return cached;
+}
+async function parseEnvelope(request) {
   const contentType = request.headers.get("content-type") ?? "";
   if (!contentType.includes(PREVIEW_CONTENT_TYPE))
     return void 0;
+  const declaredLength = Number(request.headers.get("content-length") ?? "0");
+  if (declaredLength > MAX_ENVELOPE_BYTES)
+    return void 0;
   try {
     const text = await request.text();
     if (!text)
       return void 0;
+    if (text.length > MAX_ENVELOPE_BYTES)
+      return void 0;
     return JSON.parse(text);
   } catch {
     return void 0;
@@ -23,6 +39,7 @@ async function readEnvelope(request) {
 export {
   PREVIEW_CONTENT_TYPE,
   PREVIEW_HEADER,
+  PRIME_HEADER,
   readEnvelope,
   readOverlay
 };

package/dist/quick-edit-css.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shared CSS for the quick-edit outline. Used by both the vanilla bridge
+ * (click-to-focus.ts) and the React `useTina` hook (packages/tinacms/src/react.tsx),
+ * so the visible affordance is identical regardless of which integration
+ * the consumer is running.
+ */
+export declare const QUICK_EDIT_CSS = "\n  [data-tina-field] {\n    outline: 2px dashed rgba(34,150,254,0.5);\n    transition: box-shadow ease-out 150ms;\n  }\n  [data-tina-field]:hover {\n    box-shadow: inset 100vi 100vh rgba(34,150,254,0.3);\n    outline: 2px solid rgba(34,150,254,1);\n    cursor: pointer;\n  }\n  [data-tina-field-overlay] {\n    outline: 2px dashed rgba(34,150,254,0.5);\n    position: relative;\n  }\n  [data-tina-field-overlay]:hover {\n    cursor: pointer;\n    outline: 2px solid rgba(34,150,254,1);\n  }\n  [data-tina-field-overlay]::after {\n    content: '';\n    position: absolute;\n    inset: 0;\n    z-index: 20;\n    transition: opacity ease-out 150ms;\n    background-color: rgba(34,150,254,0.3);\n    opacity: 0;\n  }\n  [data-tina-field-overlay]:hover::after {\n    opacity: 1;\n  }\n";
+export declare const QUICK_EDIT_BODY_CLASS = "__tina-quick-editing-enabled";
+export declare const QUICK_EDIT_STYLE_ID = "__tina-bridge-quick-edit-style";

package/dist/quick-edit-css.js

@@ -0,0 +1,38 @@
+const QUICK_EDIT_CSS = `
+  [data-tina-field] {
+    outline: 2px dashed rgba(34,150,254,0.5);
+    transition: box-shadow ease-out 150ms;
+  }
+  [data-tina-field]:hover {
+    box-shadow: inset 100vi 100vh rgba(34,150,254,0.3);
+    outline: 2px solid rgba(34,150,254,1);
+    cursor: pointer;
+  }
+  [data-tina-field-overlay] {
+    outline: 2px dashed rgba(34,150,254,0.5);
+    position: relative;
+  }
+  [data-tina-field-overlay]:hover {
+    cursor: pointer;
+    outline: 2px solid rgba(34,150,254,1);
+  }
+  [data-tina-field-overlay]::after {
+    content: '';
+    position: absolute;
+    inset: 0;
+    z-index: 20;
+    transition: opacity ease-out 150ms;
+    background-color: rgba(34,150,254,0.3);
+    opacity: 0;
+  }
+  [data-tina-field-overlay]:hover::after {
+    opacity: 1;
+  }
+`;
+const QUICK_EDIT_BODY_CLASS = "__tina-quick-editing-enabled";
+const QUICK_EDIT_STYLE_ID = "__tina-bridge-quick-edit-style";
+export {
+  QUICK_EDIT_BODY_CLASS,
+  QUICK_EDIT_CSS,
+  QUICK_EDIT_STYLE_ID
+};

package/dist/refresh-forms.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tina-field.d.ts

@@ -1 +1,14 @@
-export * from "../src/tina-field"
+/**
+ * Generate a field identifier for Tina to associate DOM elements with form fields.
+ * Format: "queryId---path.to.field" or "queryId---path.to.array.index"
+ *
+ * Canonical implementation. The React-side `tinacms/tina-field` and Astro-side
+ * `@tinacms/astro/tina-field` both re-export from here so non-React frontends
+ * can consume it without pulling tinacms (and its React deps) into their bundle.
+ */
+export declare const tinaField: <T extends {
+    _content_source?: {
+        queryId: string;
+        path: (number | string)[];
+    };
+} | Record<string, unknown> | null | undefined>(object: T, property?: keyof Omit<NonNullable<T>, "__typename" | "_sys">, index?: number) => string;

package/dist/types.d.ts

@@ -45,7 +45,11 @@ export interface FormPayload {
 export interface DataStore {
     /** Latest resolved data per form id. */
     get(id: string): object | undefined;
-    /** Replace cached data for a form. */
+    /** Whether a form id has been seeded or set. */
+    has(id: string): boolean;
+    /** Populate without notifying subscribers (used for the initial seed). */
+    seed(id: string, data: object): void;
+    /** Replace cached data for a form and notify subscribers. */
     set(id: string, data: object): void;
     /** All known form ids. */
     ids(): string[];

package/dist/types.test-d.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinacms/bridge",
-  "version": "0.0.1",
+  "version": "0.3.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -20,6 +20,14 @@
     "./preview": {
       "types": "./dist/preview.d.ts",
       "default": "./dist/preview.js"
+    },
+    "./metadata": {
+      "types": "./dist/metadata.d.ts",
+      "default": "./dist/metadata.js"
+    },
+    "./quick-edit-css": {
+      "types": "./dist/quick-edit-css.d.ts",
+      "default": "./dist/quick-edit-css.js"
     }
   },
   "license": "Apache-2.0",
@@ -27,7 +35,9 @@
     "entryPoints": [
       "src/index.ts",
       "src/tina-field.ts",
-      "src/preview.ts"
+      "src/preview.ts",
+      "src/metadata.ts",
+      "src/quick-edit-css.ts"
     ]
   },
   "devDependencies": {
@@ -36,7 +46,7 @@
     "typescript": "^5.7.3",
     "vite": "^5.4.14",
     "vitest": "^2.1.9",
-    "@tinacms/scripts": "1.6.0"
+    "@tinacms/scripts": "1.6.1"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org"

package/dist/edit-mode.d.ts

@@ -1 +0,0 @@
-export declare function initEditMode(timeoutMs?: number): Promise<boolean>;