@usegraft/sdk-next 0.1.0 → 0.2.0

package/README.md

@@ -0,0 +1,59 @@
+# @usegraft/sdk-next
+
+> Next.js App Router adapter: typed content reads in Server Components, cache-tag invalidation, and real MDX rendering.
+
+Part of [Graft](https://github.com/AndersonDesign1/graft), a CMS built so an AI agent is the primary operator.
+
+## Install
+
+```bash
+npm i @usegraft/sdk-next
+```
+
+## Read content
+
+`createGraft` wraps the read client with `React.cache`, so repeated reads of the same document within one render are deduped. Server-only: it holds a database handle.
+
+```ts
+import { createGraft } from "@usegraft/sdk-next";
+import { collections } from "@/graft.config";
+
+export const graft = createGraft({ db, collections });
+
+// in a Server Component
+const page = await graft.getContent("pages", "home");
+const posts = await graft.listContent("posts", { limit: 10 });
+```
+
+Return types come from your `defineCollection` schemas, so a renamed field is a build error rather than a runtime `undefined`.
+
+## Render MDX bodies
+
+```tsx
+import { MdxBody } from "@usegraft/sdk-next";
+import { mdxComponents } from "@/components/mdx-components";
+
+<MdxBody source={page.body} components={mdxComponents} />;
+```
+
+`MdxBody` defaults to `trust: "restricted"`, which refuses `{…}` expressions, `import`, `export` and spread attributes. Rendering evaluates MDX as JavaScript on the server, so on a Studio hosted for writers, "can author a page" would otherwise mean "can execute code on the render host".
+
+Pass `trust="full"` only when every author of the repository has commit access, and set `export const mdxTrust = "full"` in `graft.config.ts` to match. The two have to agree.
+
+## Invalidate only what changed
+
+```ts
+import { revalidateContent, updateContent } from "@usegraft/sdk-next";
+
+// in a route handler, after a compile webhook
+revalidateContent(branch, changes);
+
+// in a Server Action, for read-your-own-writes
+updateContent(branch, changes);
+```
+
+Both turn a compile's `ChangeSet` into the exact `revalidateTag` / `updateTag` calls that refresh the changed pages, and no others. A no-op unless your reads were cached with `'use cache'` and `cacheTag`, but always safe to call.
+
+---
+
+MIT. [Repository](https://github.com/AndersonDesign1/graft) · [Changelog](https://github.com/AndersonDesign1/graft/blob/feat/core/packages/sdk-next/CHANGELOG.md)

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 import { AnyCollection, ReadOptions, Document, ListOptions, SearchOptions, SearchHit, GraftClient, ClientOptions, ChangeSet } from '@usegraft/sdk-core';
 export { AnyCollection, ChangeSet, ClientOptions, Document, GraftClient, ListOptions, ReadOptions, SearchHit, SearchOptions, TAG_NAMESPACE, collectionTag, createClient, documentTag, tagsFor, tagsForChanges, toDocument } from '@usegraft/sdk-core';
+import { MdxTrust } from '@usegraft/mdx-safety';
+export { MdxTrust } from '@usegraft/mdx-safety';
 import { MDXComponents } from 'mdx/types';
 import { ReactElement } from 'react';
 
@@ -40,16 +42,35 @@ declare function revalidateContent(branch: string, changes: ChangeSet, profile?:
 declare function updateContent(branch: string, changes: ChangeSet): string[];
 
 type MdxComponents = MDXComponents;
+
 interface MdxBodyProps {
     /** Raw MDX body (the string stored on the document / content_index row). */
     source: string;
     /** Component map — typically the generated mdx-components export. */
     components?: MdxComponents;
+    /**
+     * How much of MDX this body is allowed to be. Defaults to `"restricted"`.
+     *
+     * `run()` evaluates the compiled body with `new Function` in this process, so
+     * `{expr}` and `import` are arbitrary server-side JavaScript. That is fine
+     * for content the operator wrote and reviewed in git, and not fine for
+     * content written through the API — where "can author a page" would
+     * otherwise mean "can execute code on the render host".
+     *
+     * `"restricted"` refuses executable constructs before compiling. Pass
+     * `"full"` only for bodies you know came from your own repository.
+     *
+     * `graft compile` applies the same rule to the authored tree, from
+     * `mdxTrust` in graft.config.ts. The two have to agree: a project that sets
+     * `mdxTrust = "full"` and leaves this at the default indexes bodies that then
+     * fail to render.
+     */
+    trust?: MdxTrust;
 }
 /**
  * Compile + run an MDX source string and render it with the given components.
  * Empty source renders nothing (valid for body-less docs).
  */
-declare function MdxBody({ source, components }: MdxBodyProps): Promise<ReactElement | null>;
+declare function MdxBody({ source, components, trust, }: MdxBodyProps): Promise<ReactElement | null>;
 
 export { type Graft, MdxBody, type MdxBodyProps, type MdxComponents, type RevalidateProfile, createGraft, revalidateContent, updateContent };

package/dist/index.js

@@ -40,12 +40,18 @@ function updateContent(branch, changes) {
 
 // src/mdx.tsx
 import { compile, run } from "@mdx-js/mdx";
+import { assertSafeMdx } from "@usegraft/mdx-safety";
 import * as runtime from "react/jsx-runtime";
 import remarkGfm from "remark-gfm";
 import { jsx } from "react/jsx-runtime";
-async function MdxBody({ source, components }) {
+async function MdxBody({
+  source,
+  components,
+  trust = "restricted"
+}) {
   const trimmed = source.trim();
   if (trimmed.length === 0) return null;
+  if (trust !== "full") assertSafeMdx(trimmed);
   const compiled = String(
     await compile(trimmed, {
       outputFormat: "function-body",

package/package.json

@@ -1,6 +1,22 @@
 {
   "name": "@usegraft/sdk-next",
-  "version": "0.1.0",
+  "version": "0.2.0",
+  "description": "Next.js App Router adapter: typed content reads in Server Components, cache-tag invalidation, and real MDX rendering.",
+  "keywords": [
+    "agent",
+    "ai",
+    "app-router",
+    "cms",
+    "graft",
+    "headless-cms",
+    "mcp",
+    "mdx",
+    "nextjs",
+    "react",
+    "rsc",
+    "typescript"
+  ],
+  "homepage": "https://github.com/AndersonDesign1/graft#readme",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -30,15 +46,16 @@
   },
   "dependencies": {
     "@mdx-js/mdx": "^3.1.1",
-    "remark-gfm": "^4.0.1",
-    "@usegraft/sdk-core": "0.1.0"
+    "@usegraft/mdx-safety": "0.2.0",
+    "@usegraft/sdk-core": "0.2.0",
+    "remark-gfm": "^4.0.1"
   },
   "devDependencies": {
     "@types/mdx": "^2.0.14",
     "@types/react": "^19.0.0",
+    "@usegraft/core": "0.2.0",
     "next": "^16.0.0",
-    "react": "^19.0.0",
-    "@usegraft/core": "0.1.0"
+    "react": "^19.0.0"
   },
   "peerDependencies": {
     "next": ">=15.0.0",
@@ -51,7 +68,6 @@
     "build": "tsup src/index.ts src/next-config.ts --format esm --dts --clean --external react --external react/jsx-runtime --external next",
     "dev": "tsup src/index.ts src/next-config.ts --format esm --watch --external react --external react/jsx-runtime --external next",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run --passWithNoTests",
-    "lint": "oxlint ."
+    "test": "vitest run --passWithNoTests"
   }
 }