@uniformdev/canvas-next-rsc 19.79.1-alpha.11 → 19.79.1-alpha.18

package/dist/handler.js

@@ -27,83 +27,147 @@ __export(handler_exports, {
 module.exports = __toCommonJS(handler_exports);
 
 // src/handler/createPreviewGETRouteHandler.ts
-var import_canvas4 = require("@uniformdev/canvas");
-var import_headers2 = require("next/headers");
-var import_navigation = require("next/navigation");
-
-// src/utils/route.ts
-var import_canvas3 = require("@uniformdev/canvas");
-var import_canvas_next_rsc_shared2 = require("@uniformdev/canvas-next-rsc-shared");
-var import_redirect = require("@uniformdev/redirect");
-
-// src/config/helpers.ts
-var import_canvas_next_rsc_shared = require("@uniformdev/canvas-next-rsc-shared");
-
-// src/utils/draft.ts
 var import_canvas = require("@uniformdev/canvas");
 var import_headers = require("next/headers");
-var isDraftModeEnabled = ({
-  searchParams
-}) => {
-  if (isDevelopmentEnvironment()) {
-    return isIncontextEditingEnabled({ searchParams });
-  }
-  let draftModeEnabled = false;
-  try {
-    draftModeEnabled = (0, import_headers.draftMode)().isEnabled;
-  } catch (e) {
+var import_navigation = require("next/navigation");
+var BASE_URL_EXAMPLE = "https://example.com";
+var getQueryParam = (req, paramName) => {
+  const value = req.nextUrl.searchParams.get(paramName);
+  if (typeof value === "undefined") {
+    return void 0;
   }
-  return draftModeEnabled || isIncontextEditingEnabled({ searchParams });
-};
-var isIncontextEditingEnabled = ({
-  searchParams
-}) => {
-  const containsKey = typeof (searchParams == null ? void 0 : searchParams[import_canvas.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM]) !== "undefined";
-  return containsKey;
-};
-var isOnVercelPreviewEnvironment = () => {
-  return process.env.VERCEL_ENV === "preview";
-};
-var isDevelopmentEnvironment = () => {
-  return process.env.NODE_ENV === "development" || process.env.NODE_ENV === "test";
+  return Array.isArray(value) ? value[0] : value;
 };
-
-// src/config/helpers.ts
-var shouldCacheBeDisabled = (options) => {
-  if (isDraftModeEnabled(options)) {
-    return { disabled: true, reason: "DRAFT" };
-  }
-  if (isIncontextEditingEnabled(options)) {
-    return { disabled: true, reason: "INCONTEXT" };
-  }
-  if (isDevelopmentEnvironment()) {
-    return { disabled: true, reason: "DEV" };
-  }
-  return {
-    disabled: false,
-    reason: void 0
+var contextualEditingQueryParams = [
+  import_canvas.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM,
+  import_canvas.IN_CONTEXT_EDITOR_PLAYGROUND_QUERY_STRING_PARAM
+];
+var createPreviewGETRouteHandler = (options) => {
+  return async (request) => {
+    const isConfigCheck = getQueryParam(request, "is_config_check") === "true";
+    if (isConfigCheck) {
+      return Response.json(
+        {
+          hasPlayground: Boolean(options == null ? void 0 : options.playgroundPath),
+          isUsingCustomFullPathResolver: false
+        },
+        {
+          headers: {
+            "Access-Control-Allow-Origin": process.env.UNIFORM_CLI_BASE_URL || "https://uniform.app"
+          }
+        }
+      );
+    }
+    if (request.headers.get("sec-fetch-mode") === "no-cors") {
+      return new Response(null, { status: 204 });
+    }
+    if (!process.env.UNIFORM_PREVIEW_SECRET) {
+      return new Response("No preview secret is configured", { status: 401 });
+    }
+    const { searchParams } = new URL(request.url);
+    const isPlayground = searchParams.get(import_canvas.IN_CONTEXT_EDITOR_PLAYGROUND_QUERY_STRING_PARAM) === "true";
+    let pathToRedirectTo;
+    if (isPlayground) {
+      if (!(options == null ? void 0 : options.playgroundPath)) {
+        return new Response("No playground path is configured", { status: 401 });
+      }
+      pathToRedirectTo = options.playgroundPath;
+    }
+    const id = getQueryParam(request, compositionQueryParam.id);
+    const slug = getQueryParam(request, compositionQueryParam.slug);
+    const path = getQueryParam(request, compositionQueryParam.path);
+    const locale = getQueryParam(request, compositionQueryParam.locale);
+    const disable = getQueryParam(request, "disable");
+    const secret = getQueryParam(request, import_canvas.SECRET_QUERY_STRING_PARAM);
+    const referer = request.headers.get("referer");
+    const isUniformContextualEditing = getQueryParam(request, import_canvas.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM) === "true" && (0, import_canvas.isAllowedReferrer)(referer || void 0);
+    if (typeof pathToRedirectTo === "undefined") {
+      const resolveFullPath = (options == null ? void 0 : options.resolveFullPath) || resolveFullPathDefault;
+      pathToRedirectTo = resolveFullPath({ id, slug, path, locale });
+    }
+    validateLocalRedirectUrl(pathToRedirectTo);
+    if (!pathToRedirectTo) {
+      return new Response("Could not resolve the full path of the preview page", { status: 400 });
+    }
+    if (disable) {
+      (0, import_headers.draftMode)().disable();
+      (0, import_navigation.redirect)(pathToRedirectTo);
+      return;
+    }
+    if (secret !== process.env.UNIFORM_PREVIEW_SECRET) {
+      return new Response("Invalid preview secret", { status: 401 });
+    }
+    (0, import_headers.draftMode)().enable();
+    const redirectionUrl = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
+    assignRequestQueryToSearchParams(redirectionUrl.searchParams, searchParams);
+    if (isPlayground) {
+      redirectionUrl.searchParams.set("id", searchParams.get("id") || "");
+    }
+    if (!isUniformContextualEditing) {
+      contextualEditingQueryParams.forEach((param) => {
+        redirectionUrl.searchParams.delete(param);
+      });
+    }
+    const fullPathToRedirectTo = redirectionUrl.href.replace(BASE_URL_EXAMPLE, "");
+    (0, import_navigation.redirect)(fullPathToRedirectTo);
   };
 };
-var getCanvasCacheStrategy = (options) => {
-  const { disabled, reason } = shouldCacheBeDisabled(options);
-  const config = (0, import_canvas_next_rsc_shared.getServerConfig)();
-  if (disabled) {
-    if (reason === "DEV" && config.canvasCache) {
-      console.warn("Canvas cache (disabled) has been overridden by canvasCache config.");
-      return config.canvasCache;
+function validateLocalRedirectUrl(pathToRedirectTo) {
+  if (pathToRedirectTo == null ? void 0 : pathToRedirectTo.match(/^[a-z]+:\/\//g)) {
+    throw new Error("Tried to redirect to absolute URL with protocol. Disallowing open redirect.");
+  }
+}
+var resolveFullPathDefault = ({ slug, path }) => {
+  return path || slug;
+};
+var compositionQueryParam = {
+  id: "id",
+  slug: "slug",
+  path: "path",
+  locale: "locale"
+};
+var assignRequestQueryToSearchParams = (searchParams, query) => {
+  const compositionQueryParamNames = Object.values(compositionQueryParam);
+  for (const [name, value] of query.entries()) {
+    if (name === import_canvas.SECRET_QUERY_STRING_PARAM) {
+      continue;
     }
-    return {
-      type: "no-cache"
-    };
-  }
-  if (config.canvasCache) {
-    return config.canvasCache;
+    if (compositionQueryParamNames.includes(name)) {
+      continue;
+    }
+    if (typeof value === "undefined") {
+      continue;
+    }
+    searchParams.append(name, value);
   }
-  return {
-    type: "force-cache"
+};
+
+// src/handler/createPreviewOPTIONSRouteHandler.ts
+var createPreviewOPTIONSRouteHandler = () => {
+  return async () => {
+    return new Response(null, {
+      headers: {
+        "Access-Control-Allow-Origin": process.env.UNIFORM_CLI_BASE_URL || "https://uniform.app",
+        "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+        "Access-Control-Allow-Headers": "*"
+      }
+    });
   };
 };
 
+// src/handler/createPreviewPOSTRouteHandler.ts
+var import_canvas5 = require("@uniformdev/canvas");
+var import_cache = require("next/cache");
+
+// src/handler/helpers.ts
+var import_canvas4 = require("@uniformdev/canvas");
+var import_canvas_next_rsc_shared = require("@uniformdev/canvas-next-rsc-shared");
+var import_edge_config = require("@vercel/edge-config");
+var import_svix = require("svix");
+
+// src/clients/canvasClient.ts
+var import_canvas2 = require("@uniformdev/canvas");
+
 // src/env/index.ts
 var env = {
   getProjectId: () => {
@@ -145,11 +209,11 @@ var determineFetchCacheOptions = (mode) => {
   };
 };
 
-// src/clients/routeClient.ts
-var import_canvas2 = require("@uniformdev/canvas");
-var getRouteClient = (options) => {
-  const client = new import_canvas2.RouteClient({
+// src/clients/canvasClient.ts
+var getCanvasClient = (options) => {
+  return new import_canvas2.CanvasClient({
     projectId: env.getProjectId(),
+    apiHost: env.getApiHost(),
     apiKey: env.getApiKey(),
     edgeApiHost: env.getEdgeApiHost(),
     fetch: (req, init) => {
@@ -163,166 +227,36 @@ var getRouteClient = (options) => {
       }
       const tags = [];
       if (requestedUrl) {
-        const pathKey = "path";
-        const path = requestedUrl.searchParams.get(pathKey);
-        if (path) {
-          const pieces = path.split("/");
-          for (let i = 0; i < pieces.length; i++) {
-            const segmentPieces = pieces.slice(0, i + 1);
-            const segment = segmentPieces.join("/");
-            tags.push(buildPathTag(segment));
+        const compositionIdKey = "compositionId";
+        const compositionIdsKey = "compositionIDs";
+        const compositionId = requestedUrl.searchParams.get(compositionIdKey);
+        const compositionIds = requestedUrl.searchParams.get(compositionIdsKey);
+        if (compositionId) {
+          tags.push(buildCompositionTag(compositionId));
+        }
+        if (compositionIds) {
+          const ids = compositionIds.split(",");
+          for (let i = 0; i < ids.length; i++) {
+            tags.push(buildCompositionTag(ids[i]));
           }
         }
       }
       const { cache, revalidate } = determineFetchCacheOptions(options.cache);
       return fetch(req, {
         ...init,
+        cache,
         headers: {
           ...init == null ? void 0 : init.headers,
           "x-bypass-cache": "true"
         },
-        cache,
         next: {
-          revalidate,
-          tags: tags.length ? tags : void 0
+          revalidate
         }
       });
     }
   });
-  return client;
-};
-var getDefaultRouteClient = ({ searchParams }) => {
-  return getRouteClient({
-    cache: getCanvasCacheStrategy({
-      searchParams
-    })
-  });
-};
-
-// src/utils/route.ts
-var retrieveRouteByPath = async ({
-  path,
-  state,
-  searchParams
-}) => {
-  var _a;
-  const client = getDefaultRouteClient({
-    searchParams
-  });
-  return await client.getRoute({
-    path,
-    state,
-    withComponentIDs: true,
-    withContentSourceMap: isOnVercelPreviewEnvironment() && ((_a = (0, import_canvas_next_rsc_shared2.getServerConfig)().experimental) == null ? void 0 : _a.vercelVisualEditing)
-  });
-};
-var resolveRedirectHref = (resolveResult, path) => {
-  let href;
-  if (resolveResult.redirect.targetProjectMapNodeId) {
-    const requestUrl = `${(0, import_canvas_next_rsc_shared2.getBaseUrl)()}${path}`;
-    const expandedUrl = (0, import_redirect.getTargetVariableExpandedUrl)(requestUrl, resolveResult.redirect);
-    const url = new URL(expandedUrl);
-    href = url.pathname;
-  } else {
-    href = resolveResult.redirect.targetUrl;
-  }
-  return href;
-};
-
-// src/handler/createPreviewGETRouteHandler.ts
-var getQueryParam = (req, paramName) => {
-  const value = req.nextUrl.searchParams.get(paramName);
-  if (typeof value === "undefined") {
-    return void 0;
-  }
-  return Array.isArray(value) ? value[0] : value;
-};
-var createPreviewGETRouteHandler = (options) => {
-  return async (request) => {
-    const isConfigCheck = getQueryParam(request, "is_config_check") === "true";
-    if (isConfigCheck) {
-      return Response.json(
-        {
-          hasPlayground: Boolean(options == null ? void 0 : options.playgroundPath),
-          isUsingCustomFullPathResolver: false
-        },
-        {
-          headers: {
-            "Access-Control-Allow-Origin": process.env.UNIFORM_CLI_BASE_URL || "https://uniform.app"
-          }
-        }
-      );
-    }
-    if (request.headers.get("sec-fetch-mode") === "no-cors") {
-      return new Response(null, { status: 204 });
-    }
-    if (!process.env.UNIFORM_PREVIEW_SECRET) {
-      return new Response("No preview secret is configured", { status: 401 });
-    }
-    const { searchParams } = new URL(request.url);
-    const secret = searchParams.get("secret");
-    const path = searchParams.get("path");
-    const isPlayground = searchParams.get(import_canvas4.IN_CONTEXT_EDITOR_PLAYGROUND_QUERY_STRING_PARAM) === "true";
-    const id = searchParams.get("id");
-    if (secret !== process.env.UNIFORM_PREVIEW_SECRET) {
-      return new Response("Invalid preview secret", { status: 401 });
-    }
-    if (!isPlayground) {
-      if (!path) {
-        return new Response("Path not provided", { status: 401 });
-      }
-      const resolveResult = await retrieveRouteByPath({
-        path,
-        state: import_canvas4.CANVAS_DRAFT_STATE,
-        searchParams: {
-          // about to be in draft mode so pretend for now.
-          [import_canvas4.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM]: "true"
-        }
-      });
-      (0, import_headers2.draftMode)().enable();
-      if (resolveResult.type === "redirect") {
-        const href = resolveRedirectHref(resolveResult, path);
-        if (resolveResult.redirect.targetProjectMapNodeId) {
-          (0, import_navigation.redirect)(`${href}?${import_canvas4.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM}=true`);
-        } else {
-          (0, import_navigation.redirect)(href);
-        }
-      }
-      if (resolveResult.type === "notFound") {
-        return new Response("Invalid path", { status: 401 });
-      }
-      (0, import_navigation.redirect)(`${path}?${import_canvas4.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM}=true`);
-    } else {
-      if (!(options == null ? void 0 : options.playgroundPath)) {
-        return new Response("No playground path is configured", { status: 401 });
-      }
-      (0, import_headers2.draftMode)().enable();
-      (0, import_navigation.redirect)(`${options.playgroundPath}?id=${id}&${import_canvas4.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM}=true`);
-    }
-  };
 };
 
-// src/handler/createPreviewOPTIONSRouteHandler.ts
-var createPreviewOPTIONSRouteHandler = () => {
-  return async () => {
-    return new Response(null, {
-      headers: {
-        "Access-Control-Allow-Origin": process.env.UNIFORM_CLI_BASE_URL || "https://uniform.app",
-        "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
-        "Access-Control-Allow-Headers": "*"
-      }
-    });
-  };
-};
-
-// src/handler/createPreviewPOSTRouteHandler.ts
-var import_cache = require("next/cache");
-
-// src/handler/helpers.ts
-var import_canvas_next_rsc_shared3 = require("@uniformdev/canvas-next-rsc-shared");
-var import_edge_config = require("@vercel/edge-config");
-var import_svix = require("svix");
-
 // src/clients/projectMapClient.ts
 var import_project_map = require("@uniformdev/project-map");
 var getProjectMapClient = (options) => {
@@ -348,6 +282,53 @@ var getProjectMapClient = (options) => {
   return manifestClient;
 };
 
+// src/clients/routeClient.ts
+var import_canvas3 = require("@uniformdev/canvas");
+var getRouteClient = (options) => {
+  const client = new import_canvas3.RouteClient({
+    projectId: env.getProjectId(),
+    apiKey: env.getApiKey(),
+    edgeApiHost: env.getEdgeApiHost(),
+    fetch: (req, init) => {
+      let requestedUrl;
+      if (typeof req === "string") {
+        requestedUrl = new URL(req);
+      } else if (req instanceof URL) {
+        requestedUrl = req;
+      } else {
+        requestedUrl = new URL(req.url);
+      }
+      const tags = ["route"];
+      if (requestedUrl) {
+        const pathKey = "path";
+        const path = requestedUrl.searchParams.get(pathKey);
+        if (path) {
+          const pieces = path.split("/");
+          for (let i = 0; i < pieces.length; i++) {
+            const segmentPieces = pieces.slice(0, i + 1);
+            const segment = segmentPieces.join("/");
+            tags.push(buildPathTag(segment));
+          }
+        }
+      }
+      const { cache, revalidate } = determineFetchCacheOptions(options.cache);
+      return fetch(req, {
+        ...init,
+        headers: {
+          ...init == null ? void 0 : init.headers,
+          "x-bypass-cache": "true"
+        },
+        cache,
+        next: {
+          revalidate,
+          tags: tags.length ? tags : void 0
+        }
+      });
+    }
+  });
+  return client;
+};
+
 // src/handler/helpers.ts
 var isSvixMessage = async (request) => {
   const requiredHeaders = ["svix-id", "svix-timestamp", "svix-signature"];
@@ -382,10 +363,16 @@ var processCompositionChange = async (compositionId) => {
       type: "no-cache"
     }
   });
-  const { nodes } = await projectMapClient.getNodes({
-    compositionId
-  });
+  const [{ nodes }, composition] = await Promise.all([
+    projectMapClient.getNodes({
+      compositionId
+    }),
+    getComposition({ compositionId })
+  ]);
   const tags = [];
+  if (composition == null ? void 0 : composition.pattern) {
+    tags.push("route");
+  }
   if (nodes) {
     for (let i = 0; i < nodes.length; i++) {
       const node = nodes[i];
@@ -400,6 +387,24 @@ var processCompositionChange = async (compositionId) => {
     tags
   };
 };
+var getComposition = async ({ compositionId }) => {
+  const canvasClient = getCanvasClient({
+    cache: {
+      type: "no-cache"
+    }
+  });
+  try {
+    const composition = await canvasClient.getCompositionById({
+      compositionId
+    });
+    return composition;
+  } catch (err) {
+    if (err instanceof import_canvas4.ApiClientError && err.statusCode === 404) {
+      return null;
+    }
+    throw err;
+  }
+};
 var buildProjectMapNodePaths = (path) => {
   const tags = [];
   const isDynamic = path.includes(":");
@@ -442,7 +447,7 @@ var processEdgeConfigChange = async ({ source_url }) => {
     console.warn("UNIFORM_VERCEL_EDGE_CONFIG_TOKEN is not set, skipping edge redirect upsert");
     return;
   }
-  const config = (0, import_canvas_next_rsc_shared3.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared.getServerConfig)();
   const routeClient = getRouteClient({
     cache: {
       type: "no-cache"
@@ -532,7 +537,7 @@ var handleManifestPublished = async (body) => {
 };
 
 // src/handler/messages/handleProjectMapNodeDelete.ts
-var import_canvas_next_rsc_shared4 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared2 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks5 = require("@uniformdev/webhooks");
 var handleProjectMapNodeDelete = async (body) => {
   var _a;
@@ -542,7 +547,7 @@ var handleProjectMapNodeDelete = async (body) => {
   }
   const tags = [];
   tags.push(...buildProjectMapNodePaths(parsed.data.path));
-  const config = (0, import_canvas_next_rsc_shared4.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared2.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeCompositions) {
     await processEdgeConfigChange({
       source_url: parsed.data.path
@@ -554,7 +559,7 @@ var handleProjectMapNodeDelete = async (body) => {
 };
 
 // src/handler/messages/handleProjectMapNodeInsert.ts
-var import_canvas_next_rsc_shared5 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared3 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks6 = require("@uniformdev/webhooks");
 var handleProjectMapNodeInsert = async (body) => {
   var _a;
@@ -564,7 +569,7 @@ var handleProjectMapNodeInsert = async (body) => {
   }
   const tags = [];
   tags.push(...buildProjectMapNodePaths(parsed.data.path));
-  const config = (0, import_canvas_next_rsc_shared5.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared3.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeCompositions) {
     await processEdgeConfigChange({
       source_url: parsed.data.path
@@ -576,7 +581,7 @@ var handleProjectMapNodeInsert = async (body) => {
 };
 
 // src/handler/messages/handleProjectMapNodeUpdate.ts
-var import_canvas_next_rsc_shared6 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared4 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks7 = require("@uniformdev/webhooks");
 var handleProjectMapNodeUpdate = async (body) => {
   var _a;
@@ -587,7 +592,7 @@ var handleProjectMapNodeUpdate = async (body) => {
   const tags = [];
   tags.push(...buildProjectMapNodePaths(parsed.data.path));
   tags.push(...buildProjectMapNodePaths(parsed.data.previous_path));
-  const config = (0, import_canvas_next_rsc_shared6.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared4.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeCompositions) {
     await processEdgeConfigChange({
       source_url: parsed.data.path
@@ -599,7 +604,7 @@ var handleProjectMapNodeUpdate = async (body) => {
 };
 
 // src/handler/messages/handleRedirectDelete.ts
-var import_canvas_next_rsc_shared7 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared5 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks8 = require("@uniformdev/webhooks");
 var handleRedirectDelete = async (body) => {
   var _a;
@@ -607,7 +612,7 @@ var handleRedirectDelete = async (body) => {
   if (!parsed.success) {
     return void 0;
   }
-  const config = (0, import_canvas_next_rsc_shared7.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared5.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeRedirects) {
     await processEdgeConfigChange(parsed.data);
   }
@@ -615,7 +620,7 @@ var handleRedirectDelete = async (body) => {
 };
 
 // src/handler/messages/handleRedirectInsert.ts
-var import_canvas_next_rsc_shared8 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared6 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks9 = require("@uniformdev/webhooks");
 var handleRedirectInsert = async (body) => {
   var _a;
@@ -623,7 +628,7 @@ var handleRedirectInsert = async (body) => {
   if (!parsed.success) {
     return void 0;
   }
-  const config = (0, import_canvas_next_rsc_shared8.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared6.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeRedirects) {
     await processEdgeConfigChange(parsed.data);
   }
@@ -631,7 +636,7 @@ var handleRedirectInsert = async (body) => {
 };
 
 // src/handler/messages/handleRedirectUpdate.ts
-var import_canvas_next_rsc_shared9 = require("@uniformdev/canvas-next-rsc-shared");
+var import_canvas_next_rsc_shared7 = require("@uniformdev/canvas-next-rsc-shared");
 var import_webhooks10 = require("@uniformdev/webhooks");
 var handleRedirectUpdate = async (body) => {
   var _a;
@@ -639,7 +644,7 @@ var handleRedirectUpdate = async (body) => {
   if (!parsed.success) {
     return void 0;
   }
-  const config = (0, import_canvas_next_rsc_shared9.getServerConfig)();
+  const config = (0, import_canvas_next_rsc_shared7.getServerConfig)();
   if ((_a = config.experimental) == null ? void 0 : _a.edgeRedirects) {
     await processEdgeConfigChange(parsed.data);
   }
@@ -649,6 +654,25 @@ var handleRedirectUpdate = async (body) => {
 // src/handler/createPreviewPOSTRouteHandler.ts
 var createPreviewPOSTRouteHandler = () => {
   return async (request) => {
+    let previewSecretPassed = false;
+    if (process.env.UNIFORM_PREVIEW_SECRET) {
+      const secretValue = request.nextUrl.searchParams.get(import_canvas5.SECRET_QUERY_STRING_PARAM);
+      if (secretValue !== process.env.UNIFORM_PREVIEW_SECRET) {
+        console.warn(
+          "The preview secret passed in the query string does not match the UNIFORM_PREVIEW_SECRET env var."
+        );
+      } else {
+        previewSecretPassed = true;
+      }
+    } else {
+      if (!process.env.UNIFORM_WEBHOOK_SECRET) {
+        console.warn("Both UNIFORM_PREVIEW_SECRET and UNIFORM_WEBHOOK_SECRET are not set.");
+      }
+      previewSecretPassed = true;
+    }
+    if (!previewSecretPassed) {
+      return new Response("The request could not be validated.", { status: 401 });
+    }
     const { looksLikeMessage, validation } = await isSvixMessage(request);
     if (looksLikeMessage) {
       if (!validation) {
@@ -673,7 +697,13 @@ var handleSvixMessage = async (request) => {
     handleManifestPublished
   ];
   let tags = void 0;
-  const jsonBody = await request.json();
+  let jsonBody;
+  try {
+    jsonBody = await request.json();
+  } catch (err) {
+    console.error("Error parsing the request body as JSON.", err);
+    return new Response("Error parsing the request body as JSON.", { status: 400 });
+  }
   for (let i = 0; i < handlers.length; i++) {
     const handler = handlers[i];
     const result = await handler(jsonBody);