@vcp-dev/site-edit-bridge 0.4.9 → 0.6.0

package/dist/next-dev-server.js

@@ -1,6 +1,7 @@
-import je from"node:http";import{existsSync as y,readFileSync as m}from"node:fs";import{createRequire as V}from"node:module";import k from"node:path";import{basename as z,dirname as S,join as b}from"node:path";import{fileURLToPath as G}from"node:url";import ie from"node:http";import{randomBytes as oe,timingSafeEqual as ae}from"node:crypto";import ue from"node:path";import{WebSocket as q,WebSocketServer as ce}from"ws";import{createPreviewSiteEditEngineRuntime as de}from"@vcp-dev/site-edit-engine";import{resolveNextAppRouteId as he,scanNextAppRouterRoutes as le}from"@vcp-dev/site-edit-engine/next-app-router";import{SiteEditSourceWatcher as fe}from"@vcp-dev/site-edit-engine/source-watcher";function O(t){let e=new Map,n=[],r=new Map,s=[],i=a=>{let u=e.get(a);if(typeof u=="number")return u;let c=n.length;return n.push(a),e.set(a,c),c},o=a=>{let u=null;for(let c of ne(a)){let d=`${u??"root"}\0${c}`,f=r.get(d);if(typeof f=="number"){u=f;continue}let h=s.length;s.push({parent:u,token:i(c)}),r.set(d,h),u=h}if(u===null)throw new Error("Document key must not be empty");return u};return{encoding:"segment-trie-v1",siteId:t.siteId,snapshotId:t.snapshotId,routeId:t.routeId,version:t.version,tokens:n,nodes:s,rootKeyNodeIds:t.rootKeys.map(o),entries:t.entries.map(a=>({keyNodeId:o(a.key),tag:a.tag,label:a.label,parentKeyNodeId:a.parentKey?o(a.parentKey):null,childKeyNodeIds:a.childKeys.map(o),operationSummary:a.operationSummary}))}}function ne(t){if(!t)return[];let e=[],n=0,r=N(t,n);if(r<0)return e.push(t),e;for(e.push(t.slice(0,r)),n=r;n<t.length;){if(r=N(t,n+(t.startsWith("::",n)?2:1)),r<0){e.push(t.slice(n));break}e.push(t.slice(n,r)),n=r}return e}function N(t,e){let n=t.indexOf("/",e),r=t.indexOf("::",e);return n<0?r:r<0?n:Math.min(n,r)}var p=class t{constructor(){}static parseMessage(e,n={}){let r=JSON.parse(e);if(!t.isMessage(r,n))throw new Error("Invalid site edit bridge message");return r}static stringifyMessage(e){return JSON.stringify(e)}static extractRequestInfo(e){if(typeof e=="object"&&e!==null&&"payload"in e&&typeof e.payload=="object"&&e.payload!==null){let n=e.payload,r=typeof n.id=="string"?n.id:"unknown",s=t.isRequestKind(n.kind)?n.kind:"get-document";return{id:r,kind:s}}return{id:"unknown",kind:"get-document"}}static isRequestKind(e){return e==="get-document"||e==="get-object-summary"||e==="get-object-edit-context"||e==="get-class-name-source"||e==="get-source-tree"||e==="get-source-file"||e==="resolve-source-location"||e==="execute"||e==="undo"||e==="redo"}static isMessage(e,n={}){return!l(e)||typeof e.type!="string"?!1:e.type==="request"?t.isRequestPayload(e.payload,n):e.type==="response"||e.type==="error"?l(e.payload)&&typeof e.payload.id=="string":e.type==="event"?l(e.payload)&&l(e.payload.event):e.type==="auth"?l(e.payload)&&typeof e.payload.key=="string":e.type==="auth-ok"?l(e.payload)&&e.payload.ok===!0:!1}static isRequestPayload(e,n={}){if(!l(e)||typeof e.id!="string"||!t.isRequestKind(e.kind))return!1;switch(e.kind){case"get-document":return typeof e.routeId=="string";case"get-object-summary":case"get-object-edit-context":case"get-class-name-source":case"resolve-source-location":return typeof e.key=="string"&&(e.routeId===void 0||typeof e.routeId=="string");case"get-source-tree":return!0;case"get-source-file":return typeof e.path=="string";case"execute":return re(e.request)&&(n.validateOperationRequest?.(e.request)??!0);case"undo":case"redo":return!0}}},R=class{constructor(e){this.options=e,this.messageQueue=new _,this.eventDispatcher=new E(n=>{this.sendJson(n)}),this.unsubscribe=e.engine.subscribe(n=>{this.eventDispatcher.push(n)}),e.socket.onmessage=n=>{try{this.messageQueue.enqueue(()=>this.handleRawMessage(n.data))}catch(r){this.sendJson({type:"error",payload:{id:"unknown",kind:"get-document",message:r instanceof Error?r.message:"Bridge queue overflow"}}),e.socket.close(1013,"bridge busy")}},e.socket.onclose=()=>{this.unsubscribe()}}async handleMessage(e){try{let n=e;if(n.type!=="request")return;let r=n.payload,{id:s}=r;switch(r.kind){case"get-document":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:{ok:!0,data:O((await this.options.engine.getDocument(r.routeId)).data)}}});return;case"get-object-summary":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.getObjectSummary(r.key,r.routeId)}});return;case"get-object-edit-context":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.getObjectEditContext(r.key,r.routeId)}});return;case"get-class-name-source":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.getClassNameSource(r.key,r.routeId)}});return;case"get-source-tree":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.getSourceTree()}});return;case"get-source-file":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.getSourceFile({path:r.path})}});return;case"resolve-source-location":this.sendJson({type:"response",payload:{id:s,kind:r.kind,result:await this.options.engine.resolveSourceLocation({key:r.key,routeId:r.routeId})}});return;case"execute":await this.handleBufferedOperation(s,r.kind,()=>this.options.engine.execute(r.request));return;case"undo":await this.handleBufferedOperation(s,r.kind,()=>this.options.engine.undo());return;case"redo":await this.handleBufferedOperation(s,r.kind,()=>this.options.engine.redo());return}}catch(n){let r=p.extractRequestInfo(e);this.sendJson({type:"error",payload:{...r,message:n instanceof Error?n.message:"Unknown websocket operation failure"}})}}async handleRawMessage(e){try{await this.handleMessage(p.parseMessage(e,{validateOperationRequest:this.options.validateOperationRequest}))}catch(n){let r=n instanceof Error?n.message:"Invalid websocket message",s=se(e);this.sendJson({type:"error",payload:{...s,message:r}})}}sendJson(e){this.options.socket.send(p.stringifyMessage(e))}async handleBufferedOperation(e,n,r){this.eventDispatcher.beginBuffering();try{let s=await r();this.sendJson({type:"response",payload:{id:e,kind:n,result:s}}),this.eventDispatcher.flush()}catch(s){this.sendJson({type:"error",payload:{id:e,kind:n,message:s instanceof Error?s.message:"Unknown websocket operation failure"}}),this.eventDispatcher.flush()}}},E=class{constructor(e){this.send=e,this.bufferedEvents=null}push(e){let n={type:"event",payload:{event:e}};if(this.bufferedEvents){this.bufferedEvents.push(n);return}this.send(n)}beginBuffering(){this.bufferedEvents=[]}flush(){let e=this.bufferedEvents??[];this.bufferedEvents=null,e.forEach(n=>{this.send(n)})}},_=class{constructor(e=64){this.maxQueued=e,this.queue=Promise.resolve(),this.queued=0}enqueue(e){if(this.queued>=this.maxQueued)throw new Error("Bridge request queue is full");this.queued+=1;let n=async()=>{this.queued-=1,await e()},r=this.queue.then(n,n);return this.queue=r.then(()=>{},()=>{}),r}};function l(t){return typeof t=="object"&&t!==null}function re(t){return l(t)&&typeof t.id=="string"&&typeof t.siteId=="string"&&typeof t.baseSnapshotId=="string"&&(t.routeId===void 0||typeof t.routeId=="string")&&typeof t.kind=="string"&&l(t.target)&&typeof t.documentVersion=="number"&&Number.isInteger(t.documentVersion)&&t.documentVersion>=0&&l(t.params)}function se(t){try{return p.extractRequestInfo(JSON.parse(t))}catch{return{id:"unknown",kind:"get-document"}}}import{SiteEditOperationRequestSchema as pe}from"@vcp-dev/contracts";var ge="127.0.0.1",me=30218,ye="/__vcp/site-edit/bridge",Se=6*1024*1024,be=3e3,K=50,M="__VCP_SITE_EDIT_BRIDGE_SERVERS__";function F(t,e){let n=new P(we(e),t,!1);return n.start({listen:!1}),n}var P=class{constructor(e,n=ie.createServer((s,i)=>{i.writeHead(404),i.end("VCP site edit bridge server")}),r=!0){this.options=e,this.server=n,this.closeHttpServerOnStop=r,this.runtime=null,this.routes=[],this.stopWatching=null,this.stopWebSocketServer=null,this.pendingChangedFiles=new Set,this.fileChangeTimer=null,this.isStarted=!1}start(e={}){if(this.isStarted)return;this.refreshRoutes(),this.runtime=de({siteId:this.options.siteId,snapshotId:this.options.snapshotId,projectRoot:this.options.projectRoot,routes:this.routes});let n=Ie({server:this.server,path:this.options.path,sessionKey:this.options.sessionKey,host:this.options.host,allowedOrigins:this.options.allowedOrigins,engine:this.createBridgeEngine()});this.stopWebSocketServer=n.stop,this.stopWatching=new fe({projectRoot:this.options.projectRoot,watch_dirs:this.options.runtime.watch_dirs,debounce_ms:this.options.runtime.watch_debounce_ms??K,max_dirs:this.options.runtime.watch_max_dirs,max_files:this.options.runtime.watch_max_files,max_depth:this.options.runtime.watch_max_depth,max_startup_ms:this.options.runtime.watch_max_startup_ms,on_change:r=>this.handleFileChanged(r),on_batch_change:r=>this.handleFilesChanged(r)}).start(),e.listen!==!1&&this.server.listen(this.options.port,this.options.host),this.isStarted=!0}getHealth(){let e=!!this.runtime;return{ok:this.isStarted&&e,bridgePath:this.options.path,runtimeReady:e,routesIndexed:this.routes.length,sessionRequired:!!this.options.sessionKey}}stop(){this.stopWatching?.(),this.stopWatching=null,this.flushChangedFiles(),this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.stopWebSocketServer?.(),this.stopWebSocketServer=null,this.runtime?.dispose(),this.runtime=null,this.closeHttpServerOnStop&&this.server.close();let e=Re(),n=xe(this.options);e.get(n)===this&&e.delete(n),this.isStarted=!1}createBridgeEngine(){return{getDocument:async e=>{let{runtime:n,resolvedRouteId:r}=await this.activateRoute(e);return n.getDocument(r)},getObjectSummary:async(e,n)=>this.getRuntime().getObjectSummary(e,n?this.resolveRouteId(n):void 0),getObjectEditContext:async(e,n)=>this.getRuntime().getObjectEditContext(e,n?this.resolveRouteId(n):void 0),getClassNameSource:async(e,n)=>{let r=this.getRuntime(),s=n?this.resolveRouteId(n):void 0;return await r.refreshSourceForKey(e,s),r.getClassNameSource(e,s)},getSourceTree:async()=>this.getRuntime().getSourceTree(),getSourceFile:async e=>this.getRuntime().getSourceFile(e),resolveSourceLocation:async e=>this.getRuntime().resolveSourceLocation({key:e.key,routeId:e.routeId?this.resolveRouteId(e.routeId):void 0}),execute:async e=>this.getRuntime().executeOperation(this.normalizeRequest(e)),undo:async()=>this.getRuntime().undo(),redo:async()=>this.getRuntime().redo(),subscribe:e=>this.getRuntime().subscribe(e)}}async activateRoute(e){let n=this.getRuntime(),r=this.resolveRouteId(e);return await n.setActiveRoute(r),{runtime:n,resolvedRouteId:r}}normalizeRequest(e){return e.target.kind!=="route"?e.routeId?{...e,routeId:this.resolveRouteId(e.routeId)}:e:{...e,target:{...e.target,routeId:this.resolveRouteId(e.target.routeId)}}}handleFileChanged(e){this.handleFilesChanged([e])}handleFilesChanged(e){for(let r of e)this.pendingChangedFiles.add(r);this.fileChangeTimer&&clearTimeout(this.fileChangeTimer);let n=this.options.runtime.watch_debounce_ms??K;this.fileChangeTimer=setTimeout(()=>{this.fileChangeTimer=null,this.flushChangedFiles()},n),this.fileChangeTimer?.unref?.()}flushChangedFiles(){if(this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.pendingChangedFiles.size===0)return;let e=[...this.pendingChangedFiles].sort((n,r)=>n.localeCompare(r));this.pendingChangedFiles.clear(),this.refreshRoutes();for(let n of e)this.runtime?.notifyFileChanged(n)}refreshRoutes(){let e=this.options.runtime.routes?.length?this.options.runtime.routes:le(this.options.projectRoot),n=new Map(this.routes.map(s=>[s.routeId,s.entryFile])),r=new Set(e.map(s=>s.routeId));this.routes=e;for(let s of e)n.get(s.routeId)!==s.entryFile&&this.runtime?.registerRoute(s.routeId,s.entryFile);for(let s of n.keys())r.has(s)||this.runtime?.unregisterRoute(s)}resolveRouteId(e){let n=he(e,this.routes,this.options.basePath);if(!n)throw new Error(`Route is not indexed by the preview bridge: ${e}`);return n}getRuntime(){if(!this.runtime)throw new Error("VCP site edit preview bridge runtime is not ready");return this.runtime}};function we(t){return{siteId:t.siteId,snapshotId:t.snapshotId,projectRoot:ue.resolve(t.projectRoot??process.cwd()),basePath:t.basePath??"",host:t.host??ge,port:t.port??me,path:t.path??ye,sessionKey:t.sessionKey??Te(),allowedOrigins:t.allowedOrigins??[],runtime:t.runtime??{}}}function Re(){let t=globalThis;return t[M]??=new Map,t[M]}function xe(t){return`${t.projectRoot}:${t.host}:${t.port}:${t.path}`}function Ie(t){let e=new ce({maxPayload:Se,noServer:!0}),n=new WeakSet,r=i=>{new R({socket:new T(i),engine:t.engine,validateOperationRequest:o=>pe.safeParse(o).success})},s=(i,o,a)=>{if(!ke(i,t))return;let u=ve(i,t);if(!u){o.write(`HTTP/1.1 401 Unauthorized\r
+import Ge from"node:http";import{existsSync as I,readFileSync as S}from"node:fs";import{createRequire as ue}from"node:module";import x from"node:path";import{basename as ce,dirname as R,join as E}from"node:path";import{fileURLToPath as de}from"node:url";import{createEd25519MutationContextVerifier as Qe}from"@vcp-dev/site-edit-engine";import Re from"node:http";import{createHash as X,randomBytes as Ee,timingSafeEqual as Ce}from"node:crypto";import O from"node:path";import{WebSocket as ee,WebSocketServer as be}from"ws";import{createPreviewSiteEditEngineRuntime as ve,openFileHistoryStore as ke}from"@vcp-dev/site-edit-engine";import{resolveNextAppRouteId as _e,scanNextAppRouterRoutes as Pe}from"@vcp-dev/site-edit-engine/next-app-router";import{SiteEditSourceWatcher as Te}from"@vcp-dev/site-edit-engine/source-watcher";function V(t){let e=new Map,n=[],i=new Map,s=[],r=t.pageComposition.status==="supported"?t.pageComposition.placementUnitKeys:[],o=new Map(r.map((a,c)=>[a,c])),u=t.pageComposition.status==="supported"?{status:"supported",containerKey:t.pageComposition.containerKey,hasBusinessMembers:t.pageComposition.hasBusinessMembers,placementUnitKeys:t.pageComposition.placementUnitKeys,placements:t.pageComposition.placements.map(a=>({placementKey:a.placementKey,placementUnitKey:a.placementUnitKey,relation:a.relation}))}:{status:"unsupported",reason:t.pageComposition.reason,diagnostics:t.pageComposition.diagnostics},d=a=>{let c=e.get(a);if(typeof c=="number")return c;let f=n.length;return n.push(a),e.set(a,f),f},h=a=>{let c=null;for(let f of Se(a)){let g=`${c??"root"}\0${f}`,C=i.get(g);if(typeof C=="number"){c=C;continue}let b=s.length;s.push([c,d(f)]),i.set(g,b),c=b}if(c===null)throw new Error("Document key must not be empty");return c};return{encoding:"segment-trie-v1",siteId:t.siteId,snapshotId:t.snapshotId,routeId:t.routeId,version:t.version,pageComposition:u,tokens:n,nodes:s,entries:t.entries.map(a=>{let c=a.pageCompositionUnitKey?o.get(a.pageCompositionUnitKey)??-1:-1;if(a.pageCompositionUnitKey&&c<0)throw new Error(`Render entry ${a.key} references unknown page composition unit ${a.pageCompositionUnitKey}`);return[h(a.key),ye(a.operationSummary),...c>=0?[c]:[]]})}}function ye(t){return(t.canUpdateText?1:0)|(t.canInsertChild?2:0)|(t.canMove?4:0)|(t.canRemove?8:0)}function Se(t){if(!t)return[];let e=[],n=0,i=$(t,n);if(i<0)return e.push(t),e;for(e.push(t.slice(0,i)),n=i;n<t.length;){if(i=$(t,n+(t.startsWith("::",n)?2:1)),i<0){e.push(t.slice(n));break}e.push(t.slice(n,i)),n=i}return e}function $(t,e){let n=t.indexOf("/",e),i=t.indexOf("::",e);return n<0?i:i<0?n:Math.min(n,i)}var p=class t{constructor(){}static parseMessage(e,n={}){let i=JSON.parse(e);if(!t.isMessage(i,n))throw new Error("Invalid site edit bridge message");return i}static stringifyMessage(e){return JSON.stringify(e)}static extractRequestInfo(e){if(typeof e=="object"&&e!==null&&"payload"in e&&typeof e.payload=="object"&&e.payload!==null){let n=e.payload,i=typeof n.id=="string"?n.id:"unknown",s=t.isRequestKind(n.kind)?n.kind:"get-document";return{id:i,kind:s}}return{id:"unknown",kind:"get-document"}}static isRequestKind(e){return e==="initialize-session"||e==="get-document"||e==="get-history-status"||e==="get-style-context"||e==="get-object-edit-context"||e==="get-class-name-source"||e==="get-source-tree"||e==="get-source-file"||e==="resolve-source-location"||e==="execute"||e==="undo"||e==="redo"}static isMessage(e,n={}){return!l(e)||typeof e.type!="string"?!1:e.type==="request"?t.isRequestPayload(e.payload,n):e.type==="response"||e.type==="error"?l(e.payload)&&typeof e.payload.id=="string":e.type==="event"?l(e.payload)&&l(e.payload.event):e.type==="auth"?l(e.payload)&&typeof e.payload.key=="string":e.type==="auth-ok"?l(e.payload)&&e.payload.ok===!0:!1}static isRequestPayload(e,n={}){if(!l(e)||typeof e.id!="string"||!t.isRequestKind(e.kind))return!1;switch(e.kind){case"initialize-session":return typeof e.routeId=="string"&&(e.mutationContext===void 0||m(e.mutationContext));case"get-document":case"get-style-context":return typeof e.routeId=="string";case"get-object-edit-context":case"get-class-name-source":case"resolve-source-location":return typeof e.key=="string"&&(e.routeId===void 0||typeof e.routeId=="string");case"get-history-status":return e.mutationContext===void 0;case"get-source-tree":return!0;case"get-source-file":return typeof e.path=="string";case"execute":return Ie(e.request)&&m(e.request.mutationContext)&&(n.validateOperationRequest?.(e.request)??!0);case"undo":case"redo":return m(e.mutationContext)}}},k=class{constructor(e){this.options=e,this.messageQueue=new M,this.eventDispatcher=new D(n=>{this.sendJson(n)}),this.unsubscribe=e.engine.subscribe(n=>{this.eventDispatcher.push(n)}),e.socket.onmessage=n=>{try{this.messageQueue.enqueue(()=>this.handleRawMessage(n.data))}catch(i){this.sendJson({type:"error",payload:{id:"unknown",kind:"get-document",message:i instanceof Error?i.message:"Bridge queue overflow"}}),e.socket.close(1013,"bridge busy")}},e.socket.onclose=()=>{this.unsubscribe()}}async handleMessage(e){try{let n=e;if(n.type!=="request")return;let i=n.payload,{id:s}=i;switch(i.kind){case"initialize-session":{let r=await this.options.engine.initializeSession({routeId:i.routeId,...i.mutationContext?{mutationContext:i.mutationContext}:{}});this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:{ok:!0,data:{document:V(r.data.document),historyStatus:r.data.historyStatus}}}});return}case"get-document":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:{ok:!0,data:V((await this.options.engine.getDocument(i.routeId)).data)}}});return;case"get-history-status":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getHistoryStatus()}});return;case"get-style-context":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getStyleContext(i.routeId)}});return;case"get-object-edit-context":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getObjectEditContext(i.key,i.routeId)}});return;case"get-class-name-source":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getClassNameSource(i.key,i.routeId)}});return;case"get-source-tree":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getSourceTree()}});return;case"get-source-file":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.getSourceFile({path:i.path})}});return;case"resolve-source-location":this.sendJson({type:"response",payload:{id:s,kind:i.kind,result:await this.options.engine.resolveSourceLocation({key:i.key,routeId:i.routeId})}});return;case"execute":{if(!m(i.request.mutationContext))throw new Error("Invalid site edit bridge message");let r=i.request.mutationContext;await this.handleBufferedOperation(s,i.kind,()=>this.options.engine.execute(i.request,r));return}case"undo":if(!m(i.mutationContext))throw new Error("Invalid site edit bridge message");await this.handleBufferedOperation(s,i.kind,()=>this.options.engine.undo(i.mutationContext));return;case"redo":if(!m(i.mutationContext))throw new Error("Invalid site edit bridge message");await this.handleBufferedOperation(s,i.kind,()=>this.options.engine.redo(i.mutationContext));return}}catch(n){let i=p.extractRequestInfo(e);this.sendJson({type:"error",payload:{...i,message:W(n),code:J(n)}})}}async handleRawMessage(e){try{await this.handleMessage(p.parseMessage(e,{validateOperationRequest:this.options.validateOperationRequest}))}catch(n){let i=n instanceof Error?n.message:"Invalid websocket message",s=xe(e);this.sendJson({type:"error",payload:{...s,message:i}})}}sendJson(e){this.options.socket.send(p.stringifyMessage(e))}async handleBufferedOperation(e,n,i){this.eventDispatcher.beginBuffering();try{let s=await i();this.sendJson({type:"response",payload:{id:e,kind:n,result:s}}),this.eventDispatcher.flush()}catch(s){this.sendJson({type:"error",payload:{id:e,kind:n,message:W(s),code:J(s)}}),this.eventDispatcher.flush()}}},D=class{constructor(e){this.send=e,this.bufferedEvents=null}push(e){let n={type:"event",payload:{event:e}};if(this.bufferedEvents){this.bufferedEvents.push(n);return}this.send(n)}beginBuffering(){this.bufferedEvents=[]}flush(){let e=this.bufferedEvents??[];this.bufferedEvents=null,e.forEach(n=>{this.send(n)})}},M=class{constructor(e=64){this.maxQueued=e,this.queue=Promise.resolve(),this.queued=0}enqueue(e){if(this.queued>=this.maxQueued)throw new Error("Bridge request queue is full");this.queued+=1;let n=async()=>{this.queued-=1,await e()},i=this.queue.then(n,n);return this.queue=i.then(()=>{},()=>{}),i}};function l(t){return typeof t=="object"&&t!==null}function Ie(t){return l(t)&&typeof t.id=="string"&&typeof t.siteId=="string"&&typeof t.baseSnapshotId=="string"&&(t.routeId===void 0||typeof t.routeId=="string")&&typeof t.kind=="string"&&l(t.target)&&typeof t.documentVersion=="number"&&Number.isInteger(t.documentVersion)&&t.documentVersion>=0&&l(t.params)}function m(t){return we(t)}function J(t){if(!t||typeof t!="object")return;let e=t.code;return typeof e=="string"&&e.length>0?e:void 0}function W(t){if(t instanceof Error)return t.message;if(!t||typeof t!="object")return"Unknown websocket operation failure";let e=t.message;return typeof e=="string"&&e.length>0?e:"Unknown websocket operation failure"}function we(t){return l(t)?typeof t.editingSessionId=="string"&&t.editingSessionId.length>0&&typeof t.lockId=="string"&&t.lockId.length>0&&typeof t.ownerId=="string"&&t.ownerId.length>0&&typeof t.leaseAssertion=="string"&&t.leaseAssertion.length>0:!1}function xe(t){try{return p.extractRequestInfo(JSON.parse(t))}catch{return{id:"unknown",kind:"get-document"}}}var _=class{constructor(){this.tail=Promise.resolve()}run(e){let n=this.tail.then(e,e);return this.tail=n.then(()=>{},()=>{}),n}};import{SiteEditOperationRequestSchema as He}from"@vcp-dev/contracts";var Be="127.0.0.1",Ve=30218,De="/__vcp/site-edit/bridge",te=6*1024*1024,Me=te*2,Ne=3e3,z=50,G="__VCP_SITE_EDIT_BRIDGE_SERVERS__";function ne(t,e,n={}){let i=new j(Oe(e),t,!1,n);return i.start({listen:!1}),i}var j=class{constructor(e,n=Re.createServer((r,o)=>{o.writeHead(404),o.end("VCP site edit bridge server")}),i=!0,s={}){this.options=e,this.server=n,this.closeHttpServerOnStop=i,this.dependencies=s,this.runtime=null,this.activeHistorySessionId=null,this.historySessionTransition=Promise.resolve(),this.mutationQueue=new _,this.eventListeners=new Set,this.routes=[],this.stopWatching=null,this.stopWebSocketServer=null,this.pendingChangedFiles=new Set,this.fileChangeTimer=null,this.isStarted=!1,this.runtimeVersionFloor=0,this.activeHistoryStore=null,this.versionPersistence=Promise.resolve()}start(e={}){if(this.isStarted)return;this.refreshRoutes(),this.isStarted=!0,this.createRuntime();let n=Ke({server:this.server,path:this.options.path,sessionKey:this.options.sessionKey,host:this.options.host,allowedOrigins:this.options.allowedOrigins,engine:this.createBridgeEngine()});this.stopWebSocketServer=n.stop,this.stopWatching=new Te({projectRoot:this.options.projectRoot,watch_dirs:this.options.runtime.watch_dirs,debounce_ms:this.options.runtime.watch_debounce_ms??z,max_dirs:this.options.runtime.watch_max_dirs,max_files:this.options.runtime.watch_max_files,max_depth:this.options.runtime.watch_max_depth,max_startup_ms:this.options.runtime.watch_max_startup_ms,on_change:i=>this.handleFileChanged(i),on_batch_change:i=>this.handleFilesChanged(i)}).start(),e.listen!==!1&&this.server.listen(this.options.port,this.options.host)}getHealth(){let e=!!this.runtime;return{ok:this.isStarted&&e,bridgePath:this.options.path,runtimeReady:e,routesIndexed:this.routes.length,sessionRequired:!!this.options.sessionKey}}stop(){this.stopWatching?.(),this.stopWatching=null,this.flushChangedFiles(),this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.stopWebSocketServer?.(),this.stopWebSocketServer=null,this.runtime?.dispose(),this.runtime=null,this.closeHttpServerOnStop&&this.server.close();let e=Ue(),n=Ae(this.options);e.get(n)===this&&e.delete(n),this.isStarted=!1}createRuntime(e,n=null){let i=this.runtime;this.activeHistoryStore=e??null;let s=(this.dependencies.createRuntime??ve)({...this.options.tenantId?{tenantId:this.options.tenantId}:{},siteId:this.options.siteId,snapshotId:this.options.snapshotId,projectRoot:this.options.projectRoot,routes:this.routes,onEvent:r=>{"version"in r&&typeof r.version=="number"&&this.recordRuntimeVersion(r.version);for(let o of this.eventListeners)o(r)},...e?{historyStore:e}:{},initialDocumentVersion:this.runtimeVersionFloor,...this.options.mutationContextVerifier?{mutationContextVerifier:this.options.mutationContextVerifier}:{}});this.runtime=s,this.activeHistorySessionId=n,i?.dispose()}createBridgeEngine(){return{initializeSession:e=>this.mutationQueue.run(async()=>{if(e.mutationContext){let o=await this.verifyMutationContext(e.mutationContext);if(!o.ok)throw new Error(`${o.code}: ${o.message??"Mutation session verification failed"}`);let u=await this.bindHistorySession(e.mutationContext.editingSessionId);if(!u.ok)throw new Error(`${u.code}: ${u.message}`)}let{runtime:n,resolvedRouteId:i}=await this.activateRoute(e.routeId),s=n.getDocument(i).data;await this.recordRuntimeVersion(s.version);let r=(await n.getHistoryStatus()).data;return{ok:!0,data:{document:s,historyStatus:r}}}),getDocument:async e=>{let{runtime:n,resolvedRouteId:i}=await this.activateRoute(e),s=n.getDocument(i);return await this.recordRuntimeVersion(s.data.version),s},getHistoryStatus:async()=>this.getRuntime().getHistoryStatus(),getStyleContext:async e=>{let{runtime:n,resolvedRouteId:i}=await this.activateRoute(e);return n.getStyleContext(i)},getObjectEditContext:async(e,n)=>this.getRuntime().getObjectEditContext(e,n?this.resolveRouteId(n):void 0),getClassNameSource:async(e,n)=>{let i=this.getRuntime(),s=n?this.resolveRouteId(n):void 0;return i.getClassNameSource(e,s)},getSourceTree:async()=>this.getRuntime().getSourceTree(),getSourceFile:async e=>this.getRuntime().getSourceFile(e),resolveSourceLocation:async e=>this.getRuntime().resolveSourceLocation({key:e.key,routeId:e.routeId?this.resolveRouteId(e.routeId):void 0}),execute:(e,n)=>this.mutationQueue.run(async()=>{let i=n??e.mutationContext,s=await this.verifyMutationContext(i);if(!s.ok)return y(s,e);let r=await this.bindHistorySession(i.editingSessionId);if(!r.ok)return y(r,e);let o=await this.getRuntime().executeOperation(this.normalizeRequest(e),i);return o.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(o.data.resultVersion),o}),undo:e=>this.mutationQueue.run(async()=>{let n=await this.verifyMutationContext(e);if(!n.ok)return y(n);let i=await this.bindHistorySession(e.editingSessionId);if(!i.ok)return y(i);let s=await this.getRuntime().undo(e);return s.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(s.data.resultVersion),s}),redo:e=>this.mutationQueue.run(async()=>{let n=await this.verifyMutationContext(e);if(!n.ok)return y(n);let i=await this.bindHistorySession(e.editingSessionId);if(!i.ok)return y(i);let s=await this.getRuntime().redo(e);return s.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(s.data.resultVersion),s}),subscribe:e=>(this.eventListeners.add(e),()=>this.eventListeners.delete(e))}}async bindHistorySession(e){if(!this.options.historyRoot)return{ok:!1,code:"RECOVERY_PERSIST_FAILED",message:"Durable edit history is not configured."};if(this.activeHistorySessionId===e)return{ok:!0};let n=this.historySessionTransition.then(async()=>{if(this.activeHistorySessionId===e)return;let i=await(this.dependencies.openHistoryStore??ke)(je({root:this.options.historyRoot,siteId:this.options.siteId,snapshotId:this.options.snapshotId,editingSessionId:e}));if(!this.isStarted)return;let s=i.readDocumentVersion?await i.readDocumentVersion():0;this.runtimeVersionFloor=Math.max(this.runtimeVersionFloor,s),this.createRuntime(i,e)});this.historySessionTransition=n.catch(()=>{});try{return await n,{ok:!0}}catch{return{ok:!1,code:"RECOVERY_PERSIST_FAILED",message:"Durable edit history could not be opened."}}}recordRuntimeVersion(e){this.runtimeVersionFloor=Math.max(this.runtimeVersionFloor,e);let n=this.activeHistoryStore;return n?.writeDocumentVersion?(this.versionPersistence=this.versionPersistence.then(()=>n.writeDocumentVersion(this.runtimeVersionFloor)).catch(()=>{}),this.versionPersistence):Promise.resolve()}async activateRoute(e){let n=this.getRuntime(),i=this.resolveRouteId(e);return await n.setActiveRoute(i),{runtime:n,resolvedRouteId:i}}normalizeRequest(e){return e.target.kind!=="route"?e.routeId?{...e,routeId:this.resolveRouteId(e.routeId)}:e:{...e,target:{...e.target,routeId:this.resolveRouteId(e.target.routeId)}}}handleFileChanged(e){this.handleFilesChanged([e])}handleFilesChanged(e){for(let i of e)this.pendingChangedFiles.add(i);this.fileChangeTimer&&clearTimeout(this.fileChangeTimer);let n=this.options.runtime.watch_debounce_ms??z;this.fileChangeTimer=setTimeout(()=>{this.fileChangeTimer=null,this.flushChangedFiles()},n),this.fileChangeTimer?.unref?.()}flushChangedFiles(){if(this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.pendingChangedFiles.size===0)return;let e=[...this.pendingChangedFiles].sort((n,i)=>n.localeCompare(i));this.pendingChangedFiles.clear(),this.refreshRoutes();for(let n of e)this.runtime?.notifyFileChanged(n)}refreshRoutes(){let e=this.options.runtime.routes?.length?this.options.runtime.routes:Pe(this.options.projectRoot),n=new Map(this.routes.map(s=>[s.routeId,s.entryFile])),i=new Set(e.map(s=>s.routeId));this.routes=e;for(let s of e)n.get(s.routeId)!==s.entryFile&&this.runtime?.registerRoute(s.routeId,s.entryFile);for(let s of n.keys())i.has(s)||this.runtime?.unregisterRoute(s)}resolveRouteId(e){let n=_e(e,this.routes,this.options.basePath);if(!n)throw new Error(`Route is not indexed by the preview bridge: ${e}`);return n}getRuntime(){if(!this.runtime)throw new Error("VCP site edit preview bridge runtime is not ready");return this.runtime}async verifyMutationContext(e){if(!e)return{ok:!1,code:"MUTATION_SESSION_REQUIRED",message:"A mutation session is required for write operations."};if(!this.options.mutationContextVerifier||!this.options.tenantId)return{ok:!1,code:"LEASE_ASSERTION_INVALID",message:"Lease assertion verification is unavailable."};try{return await this.options.mutationContextVerifier.verify(e,{tenantId:this.options.tenantId,siteId:this.options.siteId,snapshotId:this.options.snapshotId,editingSessionId:e.editingSessionId,lockId:e.lockId,ownerId:e.ownerId})}catch{return{ok:!1,code:"LEASE_ASSERTION_INVALID",message:"Lease assertion verification failed."}}}};function Oe(t){return{tenantId:t.tenantId,siteId:t.siteId,snapshotId:t.snapshotId,projectRoot:O.resolve(t.projectRoot??process.cwd()),basePath:t.basePath??"",host:t.host??Be,port:t.port??Ve,path:t.path??De,sessionKey:t.sessionKey??ze(),historyRoot:t.historyRoot,mutationContextVerifier:t.mutationContextVerifier,allowedOrigins:t.allowedOrigins??[],runtime:t.runtime??{}}}function je(t){return O.join(O.resolve(t.root),Q(t.siteId),Q(t.snapshotId),X("sha256").update(t.editingSessionId).digest("hex").slice(0,32))}function Q(t){return/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(t)&&t!=="."&&t!==".."?t:X("sha256").update(t).digest("hex").slice(0,32)}function Ue(){let t=globalThis;return t[G]??=new Map,t[G]}function Ae(t){return`${t.projectRoot}:${t.host}:${t.port}:${t.path}:${t.historyRoot??""}`}function y(t,e){return{ok:!1,error:{code:t.code,message:t.message},data:{requestId:e?.id??"mutation-context",kind:e?.kind??"update-text",target:e?.target??{kind:"node",key:""},resultVersion:e?.documentVersion??0}}}function Ke(t){let e=new be({maxPayload:te,noServer:!0}),n=new WeakSet,i=r=>{new k({socket:new U(r),engine:t.engine,validateOperationRequest:o=>He.safeParse(o).success})},s=(r,o,u)=>{if(!Fe(r,t))return;let d=Le(r,t);if(!d){o.write(`HTTP/1.1 401 Unauthorized\r
 Connection: close\r
 \r
-`),o.destroy();return}u.authenticatedByHeader&&n.add(i),e.handleUpgrade(i,o,a,c=>{e.emit("connection",c,i)})};return t.server.on("upgrade",s),e.on("connection",(i,o)=>{if(n.has(o)){r(i);return}Ee(i,t.sessionKey,()=>{r(i)})}),e.stop=()=>{t.server.off("upgrade",s);for(let i of e.clients)i.close(1001,"bridge stopped");e.close()},e}var T=class{constructor(e){this.socket=e,this.onmessage=null,this.onclose=null,e.on("message",n=>{this.onmessage?.({data:n.toString()})}),e.on("close",()=>{this.onclose?.()})}send(e){this.socket.readyState===q.OPEN&&this.socket.send(e)}close(e,n){this.socket.close(e,n)}};function ke(t,e){return new URL(t.url??"/","http://localhost").pathname===e.path}function ve(t,e){if(new URL(t.url??"/","http://localhost").searchParams.has("vcp_bridge_key"))return null;let r=C(t.headers["x-vcp-site-edit-key"]),s=U(r,e.sessionKey),i=C(t.headers.host),o=C(t.headers.origin);return i&&!_e(i,e.host,o)?null:o?Pe(o,i,e.allowedOrigins)?{authenticatedByHeader:s}:null:s?{authenticatedByHeader:!0}:null}function Ee(t,e,n){let r=setTimeout(()=>{t.close(1008,"bridge authentication timeout")},be),s,i=()=>{clearTimeout(r),t.off("message",s),t.off("close",i)},o=()=>{i(),t.close(1008,"bridge authentication failed")};s=a=>{try{let u=p.parseMessage(a.toString());if(u.type!=="auth"||!U(u.payload.key,e)){o();return}i(),t.readyState===q.OPEN&&t.send(p.stringifyMessage({type:"auth-ok",payload:{ok:!0}})),n()}catch{o()}},t.on("message",s),t.on("close",i)}function U(t,e){if(!t)return!1;let n=Buffer.from(t),r=Buffer.from(e);return n.length===r.length&&ae(n,r)}function _e(t,e,n){let r=D(t),s=D(e);return r===s||A(s)&&A(r)&&(!n||j(n,t))||Ce(s)&&(!n||j(n,t))}function Ce(t){return t==="0.0.0.0"||t==="::"}function A(t){return t==="localhost"||t==="127.0.0.1"||t==="::1"}function Pe(t,e,n){return n.includes(t)||(e?j(t,e):!1)}function j(t,e){try{return new URL(t).host===J(e)}catch{return!1}}function D(t){let e=J(t);return e.startsWith("[")?e.slice(1,e.indexOf("]")):e.split(":").length-1===1?e.split(":",1)[0]??"":e}function J(t){return t.trim().toLowerCase()}function C(t){return Array.isArray(t)?t[0]:t}function Te(){return oe(32).toString("base64url")}var Be="next",He="127.0.0.1",Ne=3e3,x="/__vcp/site-edit/bridge",Q="/__vcp/site-edit/health",I="/__vcp/site-edit/client/",Oe=`${I}auto-bootstrap.js`,Y='data-vcp-site-edit-bootstrap="true"',Ke=["next.config.ts","next.config.mts","next.config.cts","next.config.js","next.config.mjs","next.config.cjs"],Me="@vcp-dev/site-edit-engine/webpack-loader",Ae=/@vcp\/site-edit-engine\/(?:webpack-loader|site-edit-instrumentation-loader)/,De=[/\bconfig\.webpack\s*=/,/\bwebpack\s*\([^)]*\)\s*\{/,/\bwebpack\s*:\s*(?:async\s*)?(?:\([^)]*\)|[A-Za-z_$][\w$]*)?\s*=>/,/\bwebpack\s*:\s*(?:async\s+)?function\b/],qe=new Set(["auto-bootstrap.js","client.js","designer-trace.js","document-codec.js","protocol.js","window-message.js"]);async function qt(t={}){let e=k.resolve(t.projectRoot??process.cwd()),n=t.host??He,r=t.port??St(process.env.PORT)??Ne,s=t.bridgePath??x,i=Ve(s),o=ct(),a=t.basePath??process.env.VCP_SITE_PREVIEW_BASE_PATH??"/",u=await pt(e),c=Fe(e),d=u({dev:!0,dir:e,hostname:n,port:r,...Ue(c)}),f=d.getRequestHandler();await d.prepare();let h=null,g=je.createServer((ee,w)=>{et({basePath:a,bridgePath:s,bridgeHealthPath:i,bridgeSessionKey:o,getBridgeHealth:()=>h?.getHealth()??nt(s),handle:f,request:ee,response:w}).catch(te=>{console.error(te),w.headersSent||(w.statusCode=500),w.end("site edit preview request failed")})});h=F(g,{siteId:t.siteId??process.env.VCP_SITE_ID??"site_preview",snapshotId:t.snapshotId??process.env.VCP_SNAPSHOT_ID??yt(e),projectRoot:e,basePath:a,host:n,port:r,path:s,sessionKey:o}),$e({server:g,bridgePath:s,handleUpgrade:d.getUpgradeHandler()});let v=()=>{h?.stop(),d.close().catch(()=>{}),g.close()};return process.on("SIGINT",v),process.on("SIGTERM",v),await bt(g,r,n),{bundler:c,close:v,server:g}}function Fe(t){let e=Je(t);return e&&We(e)?"webpack":"turbopack"}function Ue(t){return t==="webpack"?{webpack:!0}:{turbopack:!0}}function Je(t){for(let e of Ke){let n=b(t,e);if(y(n))return m(n,"utf8")}return null}function We(t){return t.includes(Me)?!0:Ae.test(t)&&De.some(e=>e.test(t))}function $e(t){let e=(n,r,s)=>{Le(n.url,t.bridgePath)||t.handleUpgrade(n,r,s).catch(i=>{console.error(i),r.destroyed||r.destroy()})};return t.server.on("upgrade",e),()=>t.server.off("upgrade",e)}function Le(t,e){return new URL(t??"/","http://localhost").pathname===e}function Ve(t=x){if(t===x)return Q;let e=(t.startsWith("/")?t:`/${t}`).replace(/\/+$/,"");return e.endsWith("/bridge")?`${e.slice(0,-7)}/health`:e?`${e}/health`:"/health"}function ze(t){let e=JSON.stringify({basePath:t.basePath,wsPath:t.bridgePath,bridge_session_key:t.bridgeSessionKey,defer_initial_sync:!0,runtime_versions:t.runtimeVersions??Ge()});return`<script type="module" ${Y}>import { startSiteEditAutoBootstrap } from ${JSON.stringify(Oe)};void startSiteEditAutoBootstrap(window, ${e}).catch(() => undefined);</script>`}function Ge(){return{bridge:B("@vcp-dev/site-edit-bridge"),contracts:B("@vcp-dev/contracts"),engine:B("@vcp-dev/site-edit-engine")}}function B(t){let e=V(import.meta.url);try{let n=e.resolve(t),r=Qe(n,t);if(!r)return;let s=JSON.parse(m(r,"utf8"));return typeof s.version=="string"?s.version:void 0}catch{return}}function Qe(t,e){let n=k.parse(t).root,r=S(t);for(;r&&r!==n;){let s=b(r,"package.json");if(y(s))try{if(JSON.parse(m(s,"utf8")).name===e)return s}catch{return}r=S(r)}}function Ye(t,e){if(t.includes(Y))return t;let n=ze(e),r=/<\/body\s*>/i.exec(t);return r?`${t.slice(0,r.index)}${n}${t.slice(r.index)}`:`${t}${n}`}function Ft(t,e=S(G(import.meta.url)),n=y){return X(t,e,n)?.path??null}function X(t,e=S(G(import.meta.url)),n=y){let r=new URL(t??"/","http://localhost").pathname;if(!r.startsWith(I))return null;let s=r.slice(I.length);if(!qe.has(s))return null;let i=H(gt(e),s);if(z(e)!=="src")return{path:i,requiresTranspile:!1};let o=H(e,s.replace(/\.js$/,".ts"));return n(o)?{path:o,requiresTranspile:!0}:{path:i,requiresTranspile:!1}}async function Xe(t,e){let n=X(t.url);if(!n)return!1;if(!y(n.path))return e.writeHead(404),e.end("site edit client asset not found"),!0;let r=n.requiresTranspile?await Ze(m(n.path,"utf8")):m(n.path);return e.writeHead(200,{"cache-control":"no-store","content-type":"text/javascript; charset=utf-8"}),e.end(r),!0}async function Ze(t){let e=await import("typescript");return e.transpileModule(t,{compilerOptions:{module:e.ModuleKind.ES2022,target:e.ScriptTarget.ES2022}}).outputText}async function et({basePath:t,bridgePath:e,bridgeHealthPath:n,bridgeSessionKey:r,getBridgeHealth:s,handle:i,request:o,response:a}){if(tt(o,a,n,s)||await Xe(o,a))return;let u=rt(o),c=st(o),d=u||c?at(a,{basePath:t,bridgePath:e,bridgeSessionKey:r,patchNextDevChunk:c}):()=>{};try{await i(o,a)}catch(f){throw d(),f}}function tt(t,e,n,r){if(t.method!=="GET"||new URL(t.url??"/","http://localhost").pathname!==n)return!1;let i=r();return e.writeHead(i.ok?200:503,{"cache-control":"no-store","content-type":"application/json; charset=utf-8"}),e.end(JSON.stringify(i)),!0}function nt(t){return{ok:!1,bridgePath:t,runtimeReady:!1,routesIndexed:0,sessionRequired:!0}}function rt(t){return it(t)?(t.headers["accept-encoding"]="identity",!0):!1}function st(t){return ot(t)?(t.headers["accept-encoding"]="identity",!0):!1}function it(t){if(t.method!=="GET")return!1;let e=new URL(t.url??"/","http://localhost").pathname;if(e.startsWith("/_next/")||e.startsWith(I)||e===x||e===Q)return!1;let n=t.headers.accept??"";return n===""||n.includes("text/html")}function ot(t){if(t.method!=="GET"||!String(t.headers["user-agent"]??"").includes("Firefox"))return!1;let n=new URL(t.url??"/","http://localhost").pathname;return n.startsWith("/_next/static/chunks/")&&n.endsWith(".js")}function at(t,e){let n=[],r=t,s=r.flushHeaders.bind(t),i=r.write.bind(t),o=r.end.bind(t);return r.flushHeaders=()=>{},r.write=(a,u,c)=>(a!==void 0&&n.push(W(a,$(u))),L(u),L(c),!0),r.end=(a,u,c)=>{let d=typeof a=="function"?void 0:a;d!==void 0&&n.push(W(d,$(u))),r.write=i,r.end=o,r.flushHeaders=s;let f=Buffer.concat(n),h=ut(t,f,e);h!==f&&!t.headersSent&&t.removeHeader("content-length");let g=typeof a=="function"?a:typeof u=="function"?u:typeof c=="function"?c:void 0;return g?o(h,g):o(h)},()=>{r.write=i,r.end=o,r.flushHeaders=s}}function ut(t,e,n){if(dt(t,e))return Buffer.from(Ye(e.toString("utf8"),n));if(n.patchNextDevChunk&&ht(t)){let r=e.toString("utf8"),s=lt(r);if(s!==r)return Buffer.from(s)}return e}function ct(){let t=new Uint8Array(32);return globalThis.crypto.getRandomValues(t),Buffer.from(t).toString("base64url")}function dt(t,e){if(t.statusCode<200||t.statusCode>=300)return!1;let n=t.getHeader("content-type"),r=Array.isArray(n)?n.join(";"):String(n??"");return e.toString("utf8",0,256).includes("<html")&&(r===""||r.includes("text/html"))}function ht(t){if(t.statusCode<200||t.statusCode>=300)return!1;let e=t.getHeader("content-type"),n=Array.isArray(e)?e.join(";"):String(e??"");return n===""||n.includes("javascript")||n.includes("ecmascript")}function lt(t){return[["debugChannel = createDebugChannel(undefined);","debugChannel = undefined;"],["if (isStreamErrorOrUnfinished(ctr)) {","if (false) {"],["return ctr.desiredSize === null || ctr.desiredSize < 0;","return false;"],[["findSourceMapURL: _appfindsourcemapurl.findSourceMapURL,","        debugChannel,","        startTime: 0"].join(`
+`),o.destroy();return}d.authenticatedByHeader&&n.add(r),e.handleUpgrade(r,o,u,h=>{e.emit("connection",h,r)})};return t.server.on("upgrade",s),e.on("connection",(r,o)=>{if(n.has(o)){i(r);return}qe(r,t.sessionKey,()=>{i(r)})}),e.stop=()=>{t.server.off("upgrade",s);for(let r of e.clients)r.close(1001,"bridge stopped");e.close()},e}var U=class{constructor(e){this.socket=e,this.onmessage=null,this.onclose=null,e.on("error",()=>{}),e.on("message",n=>{this.onmessage?.({data:n.toString()})}),e.on("close",()=>{this.onclose?.()})}send(e){if(this.socket.readyState===ee.OPEN){if(this.socket.bufferedAmount+Buffer.byteLength(e,"utf8")>Me){this.socket.close(1013,"bridge backpressure");return}this.socket.send(e)}}close(e,n){this.socket.close(e,n)}};function Fe(t,e){return new URL(t.url??"/","http://localhost").pathname===e.path}function Le(t,e){if(new URL(t.url??"/","http://localhost").searchParams.has("vcp_bridge_key"))return null;let i=N(t.headers["x-vcp-site-edit-key"]),s=ie(i,e.sessionKey),r=N(t.headers.host),o=N(t.headers.origin);return r&&!$e(r,e.host,o)?null:o?We(o,r,e.allowedOrigins)?{authenticatedByHeader:s}:null:s?{authenticatedByHeader:!0}:null}function qe(t,e,n){let i=setTimeout(()=>{t.close(1008,"bridge authentication timeout")},Ne),s,r=()=>{clearTimeout(i),t.off("message",s),t.off("close",r)},o=()=>{r(),t.close(1008,"bridge authentication failed")};s=u=>{try{let d=p.parseMessage(u.toString());if(d.type!=="auth"||!ie(d.payload.key,e)){o();return}r(),t.readyState===ee.OPEN&&t.send(p.stringifyMessage({type:"auth-ok",payload:{ok:!0}})),n()}catch{o()}},t.on("message",s),t.on("close",r)}function ie(t,e){if(!t)return!1;let n=Buffer.from(t),i=Buffer.from(e);return n.length===i.length&&Ce(n,i)}function $e(t,e,n){let i=Z(t),s=Z(e);return i===s||Y(s)&&Y(i)&&(!n||A(n,t))||Je(s)&&(!n||A(n,t))}function Je(t){return t==="0.0.0.0"||t==="::"}function Y(t){return t==="localhost"||t==="127.0.0.1"||t==="::1"}function We(t,e,n){return n.includes(t)||(e?A(t,e):!1)}function A(t,e){try{return new URL(t).host===se(e)}catch{return!1}}function Z(t){let e=se(t);return e.startsWith("[")?e.slice(1,e.indexOf("]")):e.split(":").length-1===1?e.split(":",1)[0]??"":e}function se(t){return t.trim().toLowerCase()}function N(t){return Array.isArray(t)?t[0]:t}function ze(){return Ee(32).toString("base64url")}var Ye="next",Ze="127.0.0.1",Xe=3e3,P="/__vcp/site-edit/bridge",he="/__vcp/site-edit/health",T="/__vcp/site-edit/client/",et=`${T}auto-bootstrap.js`,fe='data-vcp-site-edit-bootstrap="true"',tt=["next.config.ts","next.config.mts","next.config.cts","next.config.js","next.config.mjs","next.config.cjs"],nt="@vcp-dev/site-edit-engine/webpack-loader",it=/@vcp\/site-edit-engine\/(?:webpack-loader|site-edit-instrumentation-loader)/,st=[/\bconfig\.webpack\s*=/,/\bwebpack\s*\([^)]*\)\s*\{/,/\bwebpack\s*:\s*(?:async\s*)?(?:\([^)]*\)|[A-Za-z_$][\w$]*)?\s*=>/,/\bwebpack\s*:\s*(?:async\s+)?function\b/],rt=new Set(["auto-bootstrap.js","client.js","designer-trace.js","document-codec.js","protocol.js","window-message.js"]);async function fn(t={}){let e=x.resolve(t.projectRoot??process.cwd()),n=t.host??Ze,i=t.port??At(process.env.PORT)??Xe,s=t.bridgePath??P,r=gt(s),o=Ht(),u=t.basePath??process.env.VCP_SITE_PREVIEW_BASE_PATH??"/",{tenantId:d,mutationContextVerifier:h}=ot(t,process.env),a=await Nt(e),c=ct(e),f=a({dev:!0,dir:e,hostname:n,port:i,...dt(c)}),g=f.getRequestHandler(),C=t.siteId??process.env.VCP_SITE_ID??"site_preview",b=t.snapshotId??process.env.VCP_SNAPSHOT_ID??Ut(e),L=t.historyRoot??process.env.VCP_SITE_EDIT_HISTORY_ROOT,q=L?.trim()?x.resolve(L):void 0;await f.prepare();let H=null,w=Ge.createServer((ge,v)=>{Rt({basePath:u,bridgePath:s,bridgeHealthPath:r,bridgeSessionKey:o,getBridgeHealth:()=>H?.getHealth()??Ct(s),handle:g,request:ge,response:v}).catch(me=>{console.error(me),v.headersSent||(v.statusCode=500),v.end("site edit preview request failed")})});H=ne(w,{...d?{tenantId:d}:{},siteId:C,snapshotId:b,projectRoot:e,basePath:u,host:n,port:i,path:s,sessionKey:o,...q?{historyRoot:q}:{},...h?{mutationContextVerifier:h}:{}}),lt({server:w,bridgePath:s,handleUpgrade:f.getUpgradeHandler()});let B=()=>{H?.stop(),f.close().catch(()=>{}),w.close()};return process.on("SIGINT",B),process.on("SIGTERM",B),await Kt(w,i,n),{bundler:c,close:B,server:w}}function ot(t,e){let n=(t.tenantId??e.VCP_TENANT_ID)?.trim()||void 0,i=t.requireMutationContextVerifier??ut(e.VCP_DESIGNER_SESSION_REQUIRE_VERIFIER),s=at(t,e);if(i&&!n)throw new Error("tenantId is required when mutation context verification is enabled.");if(i&&!s)throw new Error("A mutation context verifier is required when mutation context verification is enabled.");return{...n?{tenantId:n}:{},...s?{mutationContextVerifier:s}:{},requireMutationContextVerifier:i}}function at(t,e){if(t.mutationContextVerifier)return t.mutationContextVerifier;let n=(t.mutationContextPublicKeyPem??e.VCP_DESIGNER_SESSION_PUBLIC_KEY_PEM)?.trim();if(n)try{let i=e.VCP_DESIGNER_SESSION_KEY_ID?.trim();if(!i)throw new Error("VCP_DESIGNER_SESSION_KEY_ID is required.");return Qe({publicKey:n.replace(/\\n/g,`
+`),issuer:e.VCP_DESIGNER_SESSION_ISSUER??"vcp-api",audience:e.VCP_DESIGNER_SESSION_AUDIENCE??"site-edit-engine",keyId:i})}catch(i){throw new Error("VCP_DESIGNER_SESSION_PUBLIC_KEY_PEM is invalid.",{cause:i})}}function ut(t){return t==="1"||t==="true"}function ct(t){let e=ht(t);return e&&ft(e)?"webpack":"turbopack"}function dt(t){return t==="webpack"?{webpack:!0}:{turbopack:!0}}function ht(t){for(let e of tt){let n=E(t,e);if(I(n))return S(n,"utf8")}return null}function ft(t){return t.includes(nt)?!0:it.test(t)&&st.some(e=>e.test(t))}function lt(t){let e=(n,i,s)=>{pt(n.url,t.bridgePath)||t.handleUpgrade(n,i,s).catch(r=>{console.error(r),i.destroyed||i.destroy()})};return t.server.on("upgrade",e),()=>t.server.off("upgrade",e)}function pt(t,e){return new URL(t??"/","http://localhost").pathname===e}function gt(t=P){if(t===P)return he;let e=(t.startsWith("/")?t:`/${t}`).replace(/\/+$/,"");return e.endsWith("/bridge")?`${e.slice(0,-7)}/health`:e?`${e}/health`:"/health"}function mt(t){let e=JSON.stringify({basePath:t.basePath,wsPath:t.bridgePath,bridge_session_key:t.bridgeSessionKey,defer_initial_sync:!0,runtime_versions:t.runtimeVersions??yt()});return`<script type="module" ${fe}>import { startSiteEditAutoBootstrap } from ${JSON.stringify(et)};void startSiteEditAutoBootstrap(window, ${e}).catch(() => undefined);</script>`}function yt(){return{bridge:K("@vcp-dev/site-edit-bridge"),contracts:K("@vcp-dev/contracts"),engine:K("@vcp-dev/site-edit-engine")}}function K(t){let e=ue(import.meta.url);try{let n=e.resolve(t),i=St(n,t);if(!i)return;let s=JSON.parse(S(i,"utf8"));return typeof s.version=="string"?s.version:void 0}catch{return}}function St(t,e){let n=x.parse(t).root,i=R(t);for(;i&&i!==n;){let s=E(i,"package.json");if(I(s))try{if(JSON.parse(S(s,"utf8")).name===e)return s}catch{return}i=R(i)}}function It(t,e){if(t.includes(fe))return t;let n=mt(e),i=/<\/body\s*>/i.exec(t);return i?`${t.slice(0,i.index)}${n}${t.slice(i.index)}`:`${t}${n}`}function ln(t,e=R(de(import.meta.url)),n=I){return le(t,e,n)?.path??null}function le(t,e=R(de(import.meta.url)),n=I){let i=new URL(t??"/","http://localhost").pathname;if(!i.startsWith(T))return null;let s=i.slice(T.length);if(!rt.has(s))return null;let r=F(Ot(e),s);if(ce(e)!=="src")return{path:r,requiresTranspile:!1};let o=F(e,s.replace(/\.js$/,".ts"));return n(o)?{path:o,requiresTranspile:!0}:{path:r,requiresTranspile:!1}}async function wt(t,e){let n=le(t.url);if(!n)return!1;if(!I(n.path))return e.writeHead(404),e.end("site edit client asset not found"),!0;let i=n.requiresTranspile?await xt(S(n.path,"utf8")):S(n.path);return e.writeHead(200,{"cache-control":"no-store","content-type":"text/javascript; charset=utf-8"}),e.end(i),!0}async function xt(t){let e=await import("typescript");return e.transpileModule(t,{compilerOptions:{module:e.ModuleKind.ES2022,target:e.ScriptTarget.ES2022}}).outputText}async function Rt({basePath:t,bridgePath:e,bridgeHealthPath:n,bridgeSessionKey:i,getBridgeHealth:s,handle:r,request:o,response:u}){if(Et(o,u,n,s)||await wt(o,u))return;let d=bt(o),h=vt(o),a=d||h?Pt(u,{basePath:t,bridgePath:e,bridgeSessionKey:i,patchNextDevChunk:h}):()=>{};try{await r(o,u)}catch(c){throw a(),c}}function Et(t,e,n,i){if(t.method!=="GET"||new URL(t.url??"/","http://localhost").pathname!==n)return!1;let r=i();return e.writeHead(r.ok?200:503,{"cache-control":"no-store","content-type":"application/json; charset=utf-8"}),e.end(JSON.stringify(r)),!0}function Ct(t){return{ok:!1,bridgePath:t,runtimeReady:!1,routesIndexed:0,sessionRequired:!0}}function bt(t){return kt(t)?(t.headers["accept-encoding"]="identity",!0):!1}function vt(t){return _t(t)?(t.headers["accept-encoding"]="identity",!0):!1}function kt(t){if(t.method!=="GET")return!1;let e=new URL(t.url??"/","http://localhost").pathname;if(e.startsWith("/_next/")||e.startsWith(T)||e===P||e===he)return!1;let n=t.headers.accept??"";return n===""||n.includes("text/html")}function _t(t){if(t.method!=="GET"||!String(t.headers["user-agent"]??"").includes("Firefox"))return!1;let n=new URL(t.url??"/","http://localhost").pathname;return n.startsWith("/_next/static/chunks/")&&n.endsWith(".js")}function Pt(t,e){let n=[],i=t,s=i.flushHeaders.bind(t),r=i.write.bind(t),o=i.end.bind(t);return i.flushHeaders=()=>{},i.write=(u,d,h)=>(u!==void 0&&n.push(re(u,oe(d))),ae(d),ae(h),!0),i.end=(u,d,h)=>{let a=typeof u=="function"?void 0:u;a!==void 0&&n.push(re(a,oe(d))),i.write=r,i.end=o,i.flushHeaders=s;let c=Buffer.concat(n),f=Tt(t,c,e);f!==c&&!t.headersSent&&t.removeHeader("content-length");let g=typeof u=="function"?u:typeof d=="function"?d:typeof h=="function"?h:void 0;return g?o(f,g):o(f)},()=>{i.write=r,i.end=o,i.flushHeaders=s}}function Tt(t,e,n){if(Bt(t,e))return Buffer.from(It(e.toString("utf8"),n));if(n.patchNextDevChunk&&Vt(t)){let i=e.toString("utf8"),s=Dt(i);if(s!==i)return Buffer.from(s)}return e}function Ht(){let t=new Uint8Array(32);return globalThis.crypto.getRandomValues(t),Buffer.from(t).toString("base64url")}function Bt(t,e){if(t.statusCode<200||t.statusCode>=300)return!1;let n=t.getHeader("content-type"),i=Array.isArray(n)?n.join(";"):String(n??"");return e.toString("utf8",0,256).includes("<html")&&(i===""||i.includes("text/html"))}function Vt(t){if(t.statusCode<200||t.statusCode>=300)return!1;let e=t.getHeader("content-type"),n=Array.isArray(e)?e.join(";"):String(e??"");return n===""||n.includes("javascript")||n.includes("ecmascript")}function Dt(t){return[["debugChannel = createDebugChannel(undefined);","debugChannel = undefined;"],["if (isStreamErrorOrUnfinished(ctr)) {","if (false) {"],["return ctr.desiredSize === null || ctr.desiredSize < 0;","return false;"],[["findSourceMapURL: _appfindsourcemapurl.findSourceMapURL,","        debugChannel,","        startTime: 0"].join(`
 `),["unstable_allowPartialStream: true,","        debugChannel,","        startTime: 0"].join(`
-`)],[["findSourceMapURL: _appfindsourcemapurl.findSourceMapURL,","        debugChannel,","        startTime: 0"].join("\\n"),["unstable_allowPartialStream: true,","        debugChannel,","        startTime: 0"].join("\\n")],["debugChannel: createDebugChannel && createDebugChannel(requestHeaders)","debugChannel: undefined"],["debugChannel: createDebugChannel && createDebugChannel(headers)","debugChannel: undefined"]].reduce((n,[r,s])=>ft(n,r,s),t)}function ft(t,e,n){if(n.length>e.length)throw new Error("Replacement must not be longer than the search string.");return t.replaceAll(e,n.padEnd(e.length," "))}function W(t,e){return Buffer.isBuffer(t)?t:t instanceof Uint8Array?Buffer.from(t):Buffer.from(String(t),e)}function $(t){return typeof t=="string"?t:void 0}function L(t){typeof t=="function"&&t()}async function pt(t){let n=V(b(t,"package.json"))(Be);return n.default??n}function gt(t){return z(t)!=="src"?t:H(mt(t),"dist")}function mt(t){return Z(t)?k.posix.dirname(t):S(t)}function H(t,e){return Z(t)?k.posix.join(t,e):b(t,e)}function Z(t){return t.includes("/")&&!t.includes("\\")}function yt(t){let e=b(t,".vcp/current-snapshot.json");if(!y(e))return"sandbox_worktree";try{let n=JSON.parse(m(e,"utf8"));return typeof n.snapshotId=="string"?n.snapshotId:"sandbox_worktree"}catch{return"sandbox_worktree"}}function St(t){if(!t)return null;let e=Number.parseInt(t,10);return Number.isInteger(e)&&e>0&&e<=65535?e:null}function bt(t,e,n){return new Promise((r,s)=>{t.once("error",s),t.listen(e,n,()=>{t.off("error",s),r()})})}export{$e as attachNextDevUpgradeHandler,ze as createSiteEditAutoBootstrapHtmlSnippet,Ye as injectSiteEditAutoBootstrap,lt as patchNextFirefoxDevChunk,st as prepareFirefoxNextDevChunkPatchRequest,rt as prepareSiteEditHtmlInjectionRequest,Ve as resolveSiteEditBridgeHealthPath,X as resolveSiteEditClientAsset,Ft as resolveSiteEditClientAssetPath,Fe as resolveSiteEditNextDevBundler,qt as startSiteEditNextDevServer,Ze as transpileSiteEditClientSource};
+`)],[["findSourceMapURL: _appfindsourcemapurl.findSourceMapURL,","        debugChannel,","        startTime: 0"].join("\\n"),["unstable_allowPartialStream: true,","        debugChannel,","        startTime: 0"].join("\\n")],["debugChannel: createDebugChannel && createDebugChannel(requestHeaders)","debugChannel: undefined"],["debugChannel: createDebugChannel && createDebugChannel(headers)","debugChannel: undefined"]].reduce((n,[i,s])=>Mt(n,i,s),t)}function Mt(t,e,n){if(n.length>e.length)throw new Error("Replacement must not be longer than the search string.");return t.replaceAll(e,n.padEnd(e.length," "))}function re(t,e){return Buffer.isBuffer(t)?t:t instanceof Uint8Array?Buffer.from(t):Buffer.from(String(t),e)}function oe(t){return typeof t=="string"?t:void 0}function ae(t){typeof t=="function"&&t()}async function Nt(t){let n=ue(E(t,"package.json"))(Ye);return n.default??n}function Ot(t){return ce(t)!=="src"?t:F(jt(t),"dist")}function jt(t){return pe(t)?x.posix.dirname(t):R(t)}function F(t,e){return pe(t)?x.posix.join(t,e):E(t,e)}function pe(t){return t.includes("/")&&!t.includes("\\")}function Ut(t){let e=E(t,".vcp/current-snapshot.json");if(!I(e))return"sandbox_worktree";try{let n=JSON.parse(S(e,"utf8"));return typeof n.snapshotId=="string"?n.snapshotId:"sandbox_worktree"}catch{return"sandbox_worktree"}}function At(t){if(!t)return null;let e=Number.parseInt(t,10);return Number.isInteger(e)&&e>0&&e<=65535?e:null}function Kt(t,e,n){return new Promise((i,s)=>{t.once("error",s),t.listen(e,n,()=>{t.off("error",s),i()})})}export{lt as attachNextDevUpgradeHandler,mt as createSiteEditAutoBootstrapHtmlSnippet,It as injectSiteEditAutoBootstrap,Dt as patchNextFirefoxDevChunk,vt as prepareFirefoxNextDevChunkPatchRequest,bt as prepareSiteEditHtmlInjectionRequest,gt as resolveSiteEditBridgeHealthPath,le as resolveSiteEditClientAsset,ln as resolveSiteEditClientAssetPath,ct as resolveSiteEditNextDevBundler,ot as resolveSiteEditNextDevServerMutationConfig,fn as startSiteEditNextDevServer,xt as transpileSiteEditClientSource};

package/dist/protocol.d.ts

@@ -1,8 +1,23 @@
-import type { SiteEditCommandSuccess, SiteEditEvent, SiteEditGetClassNameSourceCommandResult, SiteEditObjectEditContext, SiteEditObjectSummary, SiteEditOperationCommandResult, SiteEditOperationRequest, SiteEditRenderDocument, SiteEditResolveSourceLocationInput, SiteEditSourceFileResponse, SiteEditSourceLocation, SiteEditSourceTreeResponse } from "@vcp-dev/contracts";
+import type { SiteEditCommandSuccess, SiteEditClassNameSourceStyleContext, SiteEditEvent, SiteEditGetClassNameSourceCommandResult, SiteEditObjectEditContext, SiteEditOperationCommandResult, SiteEditMutationContext, SiteEditInitializeSessionInput, SiteEditAuthenticatedOperationRequest, SiteEditOperationRequest, SiteEditRenderDocument, SiteEditResolveSourceLocationInput, SiteEditSourceFileResponse, SiteEditSourceLocation, SiteEditSourceTreeResponse } from "@vcp-dev/contracts";
 import { type CompactRenderDocument } from "./document-codec.js";
 type Awaitable<T> = T | Promise<T>;
-export type SiteEditBridgeRequestKind = "get-document" | "get-object-summary" | "get-object-edit-context" | "get-class-name-source" | "get-source-tree" | "get-source-file" | "resolve-source-location" | "execute" | "undo" | "redo";
+export type SiteEditHistoryStatus = {
+    canUndo: boolean;
+    canRedo: boolean;
+    undoDepth: number;
+    redoDepth: number;
+    recoveryRequired: boolean;
+};
+export type SiteEditBridgeRequestKind = "initialize-session" | "get-document" | "get-history-status" | "get-style-context" | "get-object-edit-context" | "get-class-name-source" | "get-source-tree" | "get-source-file" | "resolve-source-location" | "execute" | "undo" | "redo";
 export type SiteEditBridgeRequest = {
+    type: "request";
+    payload: {
+        id: string;
+        kind: "initialize-session";
+        routeId: string;
+        mutationContext?: SiteEditMutationContext;
+    };
+} | {
     type: "request";
     payload: {
         id: string;
@@ -13,9 +28,14 @@ export type SiteEditBridgeRequest = {
     type: "request";
     payload: {
         id: string;
-        kind: "get-object-summary";
-        key: string;
-        routeId?: string;
+        kind: "get-history-status";
+    };
+} | {
+    type: "request";
+    payload: {
+        id: string;
+        kind: "get-style-context";
+        routeId: string;
     };
 } | {
     type: "request";
@@ -59,22 +79,47 @@ export type SiteEditBridgeRequest = {
     payload: {
         id: string;
         kind: "execute";
-        request: SiteEditOperationRequest;
+        request: SiteEditAuthenticatedOperationRequest;
     };
 } | {
     type: "request";
     payload: {
         id: string;
         kind: "undo" | "redo";
+        mutationContext: SiteEditMutationContext;
     };
 };
 export type SiteEditBridgeResponse = {
+    type: "response";
+    payload: {
+        id: string;
+        kind: "initialize-session";
+        result: SiteEditCommandSuccess<{
+            document: SiteEditRenderDocument | CompactRenderDocument;
+            historyStatus: SiteEditHistoryStatus;
+        }>;
+    };
+} | {
     type: "response";
     payload: {
         id: string;
         kind: "get-document";
         result: SiteEditCommandSuccess<SiteEditRenderDocument> | SiteEditCommandSuccess<CompactRenderDocument>;
     };
+} | {
+    type: "response";
+    payload: {
+        id: string;
+        kind: "get-history-status";
+        result: SiteEditCommandSuccess<SiteEditHistoryStatus>;
+    };
+} | {
+    type: "response";
+    payload: {
+        id: string;
+        kind: "get-style-context";
+        result: SiteEditCommandSuccess<SiteEditClassNameSourceStyleContext | null>;
+    };
 } | {
     type: "response";
     payload: {
@@ -96,13 +141,6 @@ export type SiteEditBridgeResponse = {
         kind: "resolve-source-location";
         result: SiteEditCommandSuccess<SiteEditSourceLocation>;
     };
-} | {
-    type: "response";
-    payload: {
-        id: string;
-        kind: "get-object-summary";
-        result: SiteEditCommandSuccess<SiteEditObjectSummary>;
-    };
 } | {
     type: "response";
     payload: {
@@ -131,6 +169,7 @@ export type SiteEditBridgeError = {
         id: string;
         kind: SiteEditBridgeRequestKind;
         message: string;
+        code?: string;
     };
 };
 export type SiteEditBridgeEventMessage = {
@@ -153,8 +192,13 @@ export type SiteEditBridgeAuthOkMessage = {
 };
 export type SiteEditBridgeMessage = SiteEditBridgeAuthMessage | SiteEditBridgeAuthOkMessage | SiteEditBridgeRequest | SiteEditBridgeResponse | SiteEditBridgeError | SiteEditBridgeEventMessage;
 export type SiteEditBridgeEngine = {
+    initializeSession(input: SiteEditInitializeSessionInput): Awaitable<SiteEditCommandSuccess<{
+        document: SiteEditRenderDocument;
+        historyStatus: SiteEditHistoryStatus;
+    }>>;
     getDocument(routeId: string): Awaitable<SiteEditCommandSuccess<SiteEditRenderDocument>>;
-    getObjectSummary(key: string, routeId?: string): Awaitable<SiteEditCommandSuccess<SiteEditObjectSummary>>;
+    getHistoryStatus(): Awaitable<SiteEditCommandSuccess<SiteEditHistoryStatus>>;
+    getStyleContext(routeId: string): Awaitable<SiteEditCommandSuccess<SiteEditClassNameSourceStyleContext | null>>;
     getObjectEditContext(key: string, routeId?: string): Awaitable<SiteEditCommandSuccess<SiteEditObjectEditContext>>;
     getClassNameSource(key: string, routeId?: string): Awaitable<SiteEditGetClassNameSourceCommandResult>;
     getSourceTree(): Awaitable<SiteEditCommandSuccess<SiteEditSourceTreeResponse>>;
@@ -162,9 +206,9 @@ export type SiteEditBridgeEngine = {
         path: string;
     }): Awaitable<SiteEditCommandSuccess<SiteEditSourceFileResponse>>;
     resolveSourceLocation(input: SiteEditResolveSourceLocationInput): Awaitable<SiteEditCommandSuccess<SiteEditSourceLocation>>;
-    execute(request: SiteEditOperationRequest): Awaitable<SiteEditOperationCommandResult>;
-    undo(): Awaitable<SiteEditOperationCommandResult>;
-    redo(): Awaitable<SiteEditOperationCommandResult>;
+    execute(request: SiteEditAuthenticatedOperationRequest, mutationContext: SiteEditMutationContext): Awaitable<SiteEditOperationCommandResult>;
+    undo(mutationContext: SiteEditMutationContext): Awaitable<SiteEditOperationCommandResult>;
+    redo(mutationContext: SiteEditMutationContext): Awaitable<SiteEditOperationCommandResult>;
     subscribe(listener: (event: SiteEditEvent) => void): () => void;
 };
 export type SiteEditMessageEventLike = {

package/dist/server.d.ts

@@ -1,7 +1,10 @@
 import type { Server as HttpServer } from "node:http";
 import { WebSocketServer } from "ws";
+import { type PreviewSiteEditEngineRuntime, type PreviewSiteEditEngineRuntimeOptions } from "@vcp-dev/site-edit-engine";
+import type { FileHistoryStore } from "@vcp-dev/site-edit-engine";
 import { type SiteEditNextRouteConfig } from "@vcp-dev/site-edit-engine/next-app-router";
 import { type SiteEditBridgeEngine } from "./protocol.js";
+import type { SiteEditMutationContextVerifier } from "@vcp-dev/site-edit-engine";
 export type SiteEditBridgeRuntimeOptions = {
     routes?: SiteEditNextRouteConfig[];
     watch_dirs?: string[];
@@ -12,6 +15,7 @@ export type SiteEditBridgeRuntimeOptions = {
     watch_max_startup_ms?: number;
 };
 export type SiteEditBridgeServerOptions = {
+    tenantId?: string;
     siteId: string;
     snapshotId: string;
     projectRoot?: string;
@@ -20,9 +24,17 @@ export type SiteEditBridgeServerOptions = {
     port?: number;
     path?: string;
     sessionKey?: string;
+    /** Private runtime directory for the durable, server-side undo/redo store. */
+    historyRoot?: string;
+    mutationContextVerifier?: SiteEditMutationContextVerifier;
     allowedOrigins?: string[];
     runtime?: SiteEditBridgeRuntimeOptions;
 };
+/** @internal Dependency seam for deterministic runtime and durable-store tests. */
+export type SiteEditBridgeServerDependencies = {
+    createRuntime?: (options: PreviewSiteEditEngineRuntimeOptions) => PreviewSiteEditEngineRuntime;
+    openHistoryStore?: (root: string) => Promise<FileHistoryStore>;
+};
 export type SiteEditBridgeHealth = {
     ok: boolean;
     bridgePath: string;
@@ -31,26 +43,38 @@ export type SiteEditBridgeHealth = {
     sessionRequired: boolean;
 };
 export declare const SITE_EDIT_BRIDGE_MAX_PAYLOAD_BYTES: number;
+export declare const SITE_EDIT_BRIDGE_MAX_BUFFERED_BYTES: number;
 export declare function ensureSiteEditBridgeServerStarted(options: SiteEditBridgeServerOptions): SiteEditBridgeServer;
-export declare function attachSiteEditBridgeServer(server: HttpServer, options: SiteEditBridgeServerOptions): SiteEditBridgeServer;
+export declare function attachSiteEditBridgeServer(server: HttpServer, options: SiteEditBridgeServerOptions, dependencies?: SiteEditBridgeServerDependencies): SiteEditBridgeServer;
 export declare class SiteEditBridgeServer {
     private readonly options;
     private readonly server;
     private readonly closeHttpServerOnStop;
+    private readonly dependencies;
     private runtime;
+    private activeHistorySessionId;
+    private historySessionTransition;
+    private readonly mutationQueue;
+    private readonly eventListeners;
     private routes;
     private stopWatching;
     private stopWebSocketServer;
     private readonly pendingChangedFiles;
     private fileChangeTimer;
     private isStarted;
-    constructor(options: Required<SiteEditBridgeServerOptions>, server?: HttpServer, closeHttpServerOnStop?: boolean);
+    private runtimeVersionFloor;
+    private activeHistoryStore;
+    private versionPersistence;
+    constructor(options: ReturnType<typeof normalizeOptions>, server?: HttpServer, closeHttpServerOnStop?: boolean, dependencies?: SiteEditBridgeServerDependencies);
     start(options?: {
         listen?: boolean;
     }): void;
     getHealth(): SiteEditBridgeHealth;
     stop(): void;
+    private createRuntime;
     private createBridgeEngine;
+    private bindHistorySession;
+    private recordRuntimeVersion;
     private activateRoute;
     private normalizeRequest;
     private handleFileChanged;
@@ -59,7 +83,23 @@ export declare class SiteEditBridgeServer {
     private refreshRoutes;
     private resolveRouteId;
     private getRuntime;
+    private verifyMutationContext;
 }
+declare function normalizeOptions(options: SiteEditBridgeServerOptions): {
+    tenantId: string | undefined;
+    siteId: string;
+    snapshotId: string;
+    projectRoot: string;
+    basePath: string;
+    host: string;
+    port: number;
+    path: string;
+    sessionKey: string;
+    historyRoot: string | undefined;
+    mutationContextVerifier: SiteEditMutationContextVerifier | undefined;
+    allowedOrigins: string[];
+    runtime: SiteEditBridgeRuntimeOptions;
+};
 export declare function attachSiteEditWebSocketServer(options: {
     server: HttpServer;
     path: string;
@@ -70,3 +110,4 @@ export declare function attachSiteEditWebSocketServer(options: {
 }): WebSocketServer & {
     stop(): void;
 };
+export {};

package/dist/server.js

@@ -1,4 +1,4 @@
-import D from"node:http";import{randomBytes as N,timingSafeEqual as H}from"node:crypto";import P from"node:path";import{WebSocket as C,WebSocketServer as J}from"ws";import{createPreviewSiteEditEngineRuntime as W}from"@vcp-dev/site-edit-engine";import{resolveNextAppRouteId as A,scanNextAppRouterRoutes as U}from"@vcp-dev/site-edit-engine/next-app-router";import{SiteEditSourceWatcher as L}from"@vcp-dev/site-edit-engine/source-watcher";function k(t){let e=new Map,s=[],n=new Map,r=[],o=a=>{let u=e.get(a);if(typeof u=="number")return u;let h=s.length;return s.push(a),e.set(a,h),h},i=a=>{let u=null;for(let h of j(a)){let R=`${u??"root"}\0${h}`,w=n.get(R);if(typeof w=="number"){u=w;continue}let S=r.length;r.push({parent:u,token:o(h)}),n.set(R,S),u=S}if(u===null)throw new Error("Document key must not be empty");return u};return{encoding:"segment-trie-v1",siteId:t.siteId,snapshotId:t.snapshotId,routeId:t.routeId,version:t.version,tokens:s,nodes:r,rootKeyNodeIds:t.rootKeys.map(i),entries:t.entries.map(a=>({keyNodeId:i(a.key),tag:a.tag,label:a.label,parentKeyNodeId:a.parentKey?i(a.parentKey):null,childKeyNodeIds:a.childKeys.map(i),operationSummary:a.operationSummary}))}}function j(t){if(!t)return[];let e=[],s=0,n=b(t,s);if(n<0)return e.push(t),e;for(e.push(t.slice(0,n)),s=n;s<t.length;){if(n=b(t,s+(t.startsWith("::",s)?2:1)),n<0){e.push(t.slice(s));break}e.push(t.slice(s,n)),s=n}return e}function b(t,e){let s=t.indexOf("/",e),n=t.indexOf("::",e);return s<0?n:n<0?s:Math.min(s,n)}var d=class t{constructor(){}static parseMessage(e,s={}){let n=JSON.parse(e);if(!t.isMessage(n,s))throw new Error("Invalid site edit bridge message");return n}static stringifyMessage(e){return JSON.stringify(e)}static extractRequestInfo(e){if(typeof e=="object"&&e!==null&&"payload"in e&&typeof e.payload=="object"&&e.payload!==null){let s=e.payload,n=typeof s.id=="string"?s.id:"unknown",r=t.isRequestKind(s.kind)?s.kind:"get-document";return{id:n,kind:r}}return{id:"unknown",kind:"get-document"}}static isRequestKind(e){return e==="get-document"||e==="get-object-summary"||e==="get-object-edit-context"||e==="get-class-name-source"||e==="get-source-tree"||e==="get-source-file"||e==="resolve-source-location"||e==="execute"||e==="undo"||e==="redo"}static isMessage(e,s={}){return!c(e)||typeof e.type!="string"?!1:e.type==="request"?t.isRequestPayload(e.payload,s):e.type==="response"||e.type==="error"?c(e.payload)&&typeof e.payload.id=="string":e.type==="event"?c(e.payload)&&c(e.payload.event):e.type==="auth"?c(e.payload)&&typeof e.payload.key=="string":e.type==="auth-ok"?c(e.payload)&&e.payload.ok===!0:!1}static isRequestPayload(e,s={}){if(!c(e)||typeof e.id!="string"||!t.isRequestKind(e.kind))return!1;switch(e.kind){case"get-document":return typeof e.routeId=="string";case"get-object-summary":case"get-object-edit-context":case"get-class-name-source":case"resolve-source-location":return typeof e.key=="string"&&(e.routeId===void 0||typeof e.routeId=="string");case"get-source-tree":return!0;case"get-source-file":return typeof e.path=="string";case"execute":return M(e.request)&&(s.validateOperationRequest?.(e.request)??!0);case"undo":case"redo":return!0}}},l=class{constructor(e){this.options=e,this.messageQueue=new g,this.eventDispatcher=new f(s=>{this.sendJson(s)}),this.unsubscribe=e.engine.subscribe(s=>{this.eventDispatcher.push(s)}),e.socket.onmessage=s=>{try{this.messageQueue.enqueue(()=>this.handleRawMessage(s.data))}catch(n){this.sendJson({type:"error",payload:{id:"unknown",kind:"get-document",message:n instanceof Error?n.message:"Bridge queue overflow"}}),e.socket.close(1013,"bridge busy")}},e.socket.onclose=()=>{this.unsubscribe()}}async handleMessage(e){try{let s=e;if(s.type!=="request")return;let n=s.payload,{id:r}=n;switch(n.kind){case"get-document":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:{ok:!0,data:k((await this.options.engine.getDocument(n.routeId)).data)}}});return;case"get-object-summary":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.getObjectSummary(n.key,n.routeId)}});return;case"get-object-edit-context":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.getObjectEditContext(n.key,n.routeId)}});return;case"get-class-name-source":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.getClassNameSource(n.key,n.routeId)}});return;case"get-source-tree":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.getSourceTree()}});return;case"get-source-file":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.getSourceFile({path:n.path})}});return;case"resolve-source-location":this.sendJson({type:"response",payload:{id:r,kind:n.kind,result:await this.options.engine.resolveSourceLocation({key:n.key,routeId:n.routeId})}});return;case"execute":await this.handleBufferedOperation(r,n.kind,()=>this.options.engine.execute(n.request));return;case"undo":await this.handleBufferedOperation(r,n.kind,()=>this.options.engine.undo());return;case"redo":await this.handleBufferedOperation(r,n.kind,()=>this.options.engine.redo());return}}catch(s){let n=d.extractRequestInfo(e);this.sendJson({type:"error",payload:{...n,message:s instanceof Error?s.message:"Unknown websocket operation failure"}})}}async handleRawMessage(e){try{await this.handleMessage(d.parseMessage(e,{validateOperationRequest:this.options.validateOperationRequest}))}catch(s){let n=s instanceof Error?s.message:"Invalid websocket message",r=F(e);this.sendJson({type:"error",payload:{...r,message:n}})}}sendJson(e){this.options.socket.send(d.stringifyMessage(e))}async handleBufferedOperation(e,s,n){this.eventDispatcher.beginBuffering();try{let r=await n();this.sendJson({type:"response",payload:{id:e,kind:s,result:r}}),this.eventDispatcher.flush()}catch(r){this.sendJson({type:"error",payload:{id:e,kind:s,message:r instanceof Error?r.message:"Unknown websocket operation failure"}}),this.eventDispatcher.flush()}}},f=class{constructor(e){this.send=e,this.bufferedEvents=null}push(e){let s={type:"event",payload:{event:e}};if(this.bufferedEvents){this.bufferedEvents.push(s);return}this.send(s)}beginBuffering(){this.bufferedEvents=[]}flush(){let e=this.bufferedEvents??[];this.bufferedEvents=null,e.forEach(s=>{this.send(s)})}},g=class{constructor(e=64){this.maxQueued=e,this.queue=Promise.resolve(),this.queued=0}enqueue(e){if(this.queued>=this.maxQueued)throw new Error("Bridge request queue is full");this.queued+=1;let s=async()=>{this.queued-=1,await e()},n=this.queue.then(s,s);return this.queue=n.then(()=>{},()=>{}),n}};function c(t){return typeof t=="object"&&t!==null}function M(t){return c(t)&&typeof t.id=="string"&&typeof t.siteId=="string"&&typeof t.baseSnapshotId=="string"&&(t.routeId===void 0||typeof t.routeId=="string")&&typeof t.kind=="string"&&c(t.target)&&typeof t.documentVersion=="number"&&Number.isInteger(t.documentVersion)&&t.documentVersion>=0&&c(t.params)}function F(t){try{return d.extractRequestInfo(JSON.parse(t))}catch{return{id:"unknown",kind:"get-document"}}}import{SiteEditOperationRequestSchema as $}from"@vcp-dev/contracts";var z="127.0.0.1",V=30218,G="/__vcp/site-edit/bridge",Q=6*1024*1024,Y=3e3,x=50,_="__VCP_SITE_EDIT_BRIDGE_SERVERS__";function Ie(t){let e=O(t),s=K(e),n=T(),r=n.get(s);if(r)return r;let o=new p(e);n.set(s,o);try{o.start()}catch(i){throw n.delete(s),o.stop(),i}return o}function Re(t,e){let s=new p(O(e),t,!1);return s.start({listen:!1}),s}var p=class{constructor(e,s=D.createServer((r,o)=>{o.writeHead(404),o.end("VCP site edit bridge server")}),n=!0){this.options=e,this.server=s,this.closeHttpServerOnStop=n,this.runtime=null,this.routes=[],this.stopWatching=null,this.stopWebSocketServer=null,this.pendingChangedFiles=new Set,this.fileChangeTimer=null,this.isStarted=!1}start(e={}){if(this.isStarted)return;this.refreshRoutes(),this.runtime=W({siteId:this.options.siteId,snapshotId:this.options.snapshotId,projectRoot:this.options.projectRoot,routes:this.routes});let s=X({server:this.server,path:this.options.path,sessionKey:this.options.sessionKey,host:this.options.host,allowedOrigins:this.options.allowedOrigins,engine:this.createBridgeEngine()});this.stopWebSocketServer=s.stop,this.stopWatching=new L({projectRoot:this.options.projectRoot,watch_dirs:this.options.runtime.watch_dirs,debounce_ms:this.options.runtime.watch_debounce_ms??x,max_dirs:this.options.runtime.watch_max_dirs,max_files:this.options.runtime.watch_max_files,max_depth:this.options.runtime.watch_max_depth,max_startup_ms:this.options.runtime.watch_max_startup_ms,on_change:n=>this.handleFileChanged(n),on_batch_change:n=>this.handleFilesChanged(n)}).start(),e.listen!==!1&&this.server.listen(this.options.port,this.options.host),this.isStarted=!0}getHealth(){let e=!!this.runtime;return{ok:this.isStarted&&e,bridgePath:this.options.path,runtimeReady:e,routesIndexed:this.routes.length,sessionRequired:!!this.options.sessionKey}}stop(){this.stopWatching?.(),this.stopWatching=null,this.flushChangedFiles(),this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.stopWebSocketServer?.(),this.stopWebSocketServer=null,this.runtime?.dispose(),this.runtime=null,this.closeHttpServerOnStop&&this.server.close();let e=T(),s=K(this.options);e.get(s)===this&&e.delete(s),this.isStarted=!1}createBridgeEngine(){return{getDocument:async e=>{let{runtime:s,resolvedRouteId:n}=await this.activateRoute(e);return s.getDocument(n)},getObjectSummary:async(e,s)=>this.getRuntime().getObjectSummary(e,s?this.resolveRouteId(s):void 0),getObjectEditContext:async(e,s)=>this.getRuntime().getObjectEditContext(e,s?this.resolveRouteId(s):void 0),getClassNameSource:async(e,s)=>{let n=this.getRuntime(),r=s?this.resolveRouteId(s):void 0;return await n.refreshSourceForKey(e,r),n.getClassNameSource(e,r)},getSourceTree:async()=>this.getRuntime().getSourceTree(),getSourceFile:async e=>this.getRuntime().getSourceFile(e),resolveSourceLocation:async e=>this.getRuntime().resolveSourceLocation({key:e.key,routeId:e.routeId?this.resolveRouteId(e.routeId):void 0}),execute:async e=>this.getRuntime().executeOperation(this.normalizeRequest(e)),undo:async()=>this.getRuntime().undo(),redo:async()=>this.getRuntime().redo(),subscribe:e=>this.getRuntime().subscribe(e)}}async activateRoute(e){let s=this.getRuntime(),n=this.resolveRouteId(e);return await s.setActiveRoute(n),{runtime:s,resolvedRouteId:n}}normalizeRequest(e){return e.target.kind!=="route"?e.routeId?{...e,routeId:this.resolveRouteId(e.routeId)}:e:{...e,target:{...e.target,routeId:this.resolveRouteId(e.target.routeId)}}}handleFileChanged(e){this.handleFilesChanged([e])}handleFilesChanged(e){for(let n of e)this.pendingChangedFiles.add(n);this.fileChangeTimer&&clearTimeout(this.fileChangeTimer);let s=this.options.runtime.watch_debounce_ms??x;this.fileChangeTimer=setTimeout(()=>{this.fileChangeTimer=null,this.flushChangedFiles()},s),this.fileChangeTimer?.unref?.()}flushChangedFiles(){if(this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.pendingChangedFiles.size===0)return;let e=[...this.pendingChangedFiles].sort((s,n)=>s.localeCompare(n));this.pendingChangedFiles.clear(),this.refreshRoutes();for(let s of e)this.runtime?.notifyFileChanged(s)}refreshRoutes(){let e=this.options.runtime.routes?.length?this.options.runtime.routes:U(this.options.projectRoot),s=new Map(this.routes.map(r=>[r.routeId,r.entryFile])),n=new Set(e.map(r=>r.routeId));this.routes=e;for(let r of e)s.get(r.routeId)!==r.entryFile&&this.runtime?.registerRoute(r.routeId,r.entryFile);for(let r of s.keys())n.has(r)||this.runtime?.unregisterRoute(r)}resolveRouteId(e){let s=A(e,this.routes,this.options.basePath);if(!s)throw new Error(`Route is not indexed by the preview bridge: ${e}`);return s}getRuntime(){if(!this.runtime)throw new Error("VCP site edit preview bridge runtime is not ready");return this.runtime}};function O(t){return{siteId:t.siteId,snapshotId:t.snapshotId,projectRoot:P.resolve(t.projectRoot??process.cwd()),basePath:t.basePath??"",host:t.host??z,port:t.port??V,path:t.path??G,sessionKey:t.sessionKey??oe(),allowedOrigins:t.allowedOrigins??[],runtime:t.runtime??{}}}function T(){let t=globalThis;return t[_]??=new Map,t[_]}function K(t){return`${t.projectRoot}:${t.host}:${t.port}:${t.path}`}function X(t){let e=new J({maxPayload:Q,noServer:!0}),s=new WeakSet,n=o=>{new l({socket:new y(o),engine:t.engine,validateOperationRequest:i=>$.safeParse(i).success})},r=(o,i,a)=>{if(!Z(o,t))return;let u=ee(o,t);if(!u){i.write(`HTTP/1.1 401 Unauthorized\r
+import Y from"node:http";import{createHash as U,randomBytes as X,timingSafeEqual as Z}from"node:crypto";import C from"node:path";import{WebSocket as P,WebSocketServer as ee}from"ws";import{createPreviewSiteEditEngineRuntime as te,openFileHistoryStore as se}from"@vcp-dev/site-edit-engine";import{resolveNextAppRouteId as ne,scanNextAppRouterRoutes as ie}from"@vcp-dev/site-edit-engine/next-app-router";import{SiteEditSourceWatcher as oe}from"@vcp-dev/site-edit-engine/source-watcher";function S(t){let e=new Map,s=[],n=new Map,i=[],o=t.pageComposition.status==="supported"?t.pageComposition.placementUnitKeys:[],r=new Map(o.map((a,u)=>[a,u])),d=t.pageComposition.status==="supported"?{status:"supported",containerKey:t.pageComposition.containerKey,hasBusinessMembers:t.pageComposition.hasBusinessMembers,placementUnitKeys:t.pageComposition.placementUnitKeys,placements:t.pageComposition.placements.map(a=>({placementKey:a.placementKey,placementUnitKey:a.placementUnitKey,relation:a.relation}))}:{status:"unsupported",reason:t.pageComposition.reason,diagnostics:t.pageComposition.diagnostics},p=a=>{let u=e.get(a);if(typeof u=="number")return u;let g=s.length;return s.push(a),e.set(a,g),g},w=a=>{let u=null;for(let g of W(a)){let E=`${u??"root"}\0${g}`,_=n.get(E);if(typeof _=="number"){u=_;continue}let T=i.length;i.push([u,p(g)]),n.set(E,T),u=T}if(u===null)throw new Error("Document key must not be empty");return u};return{encoding:"segment-trie-v1",siteId:t.siteId,snapshotId:t.snapshotId,routeId:t.routeId,version:t.version,pageComposition:d,tokens:s,nodes:i,entries:t.entries.map(a=>{let u=a.pageCompositionUnitKey?r.get(a.pageCompositionUnitKey)??-1:-1;if(a.pageCompositionUnitKey&&u<0)throw new Error(`Render entry ${a.key} references unknown page composition unit ${a.pageCompositionUnitKey}`);return[w(a.key),J(a.operationSummary),...u>=0?[u]:[]]})}}function J(t){return(t.canUpdateText?1:0)|(t.canInsertChild?2:0)|(t.canMove?4:0)|(t.canRemove?8:0)}function W(t){if(!t)return[];let e=[],s=0,n=V(t,s);if(n<0)return e.push(t),e;for(e.push(t.slice(0,n)),s=n;s<t.length;){if(n=V(t,s+(t.startsWith("::",s)?2:1)),n<0){e.push(t.slice(s));break}e.push(t.slice(s,n)),s=n}return e}function V(t,e){let s=t.indexOf("/",e),n=t.indexOf("::",e);return s<0?n:n<0?s:Math.min(s,n)}var h=class t{constructor(){}static parseMessage(e,s={}){let n=JSON.parse(e);if(!t.isMessage(n,s))throw new Error("Invalid site edit bridge message");return n}static stringifyMessage(e){return JSON.stringify(e)}static extractRequestInfo(e){if(typeof e=="object"&&e!==null&&"payload"in e&&typeof e.payload=="object"&&e.payload!==null){let s=e.payload,n=typeof s.id=="string"?s.id:"unknown",i=t.isRequestKind(s.kind)?s.kind:"get-document";return{id:n,kind:i}}return{id:"unknown",kind:"get-document"}}static isRequestKind(e){return e==="initialize-session"||e==="get-document"||e==="get-history-status"||e==="get-style-context"||e==="get-object-edit-context"||e==="get-class-name-source"||e==="get-source-tree"||e==="get-source-file"||e==="resolve-source-location"||e==="execute"||e==="undo"||e==="redo"}static isMessage(e,s={}){return!c(e)||typeof e.type!="string"?!1:e.type==="request"?t.isRequestPayload(e.payload,s):e.type==="response"||e.type==="error"?c(e.payload)&&typeof e.payload.id=="string":e.type==="event"?c(e.payload)&&c(e.payload.event):e.type==="auth"?c(e.payload)&&typeof e.payload.key=="string":e.type==="auth-ok"?c(e.payload)&&e.payload.ok===!0:!1}static isRequestPayload(e,s={}){if(!c(e)||typeof e.id!="string"||!t.isRequestKind(e.kind))return!1;switch(e.kind){case"initialize-session":return typeof e.routeId=="string"&&(e.mutationContext===void 0||l(e.mutationContext));case"get-document":case"get-style-context":return typeof e.routeId=="string";case"get-object-edit-context":case"get-class-name-source":case"resolve-source-location":return typeof e.key=="string"&&(e.routeId===void 0||typeof e.routeId=="string");case"get-history-status":return e.mutationContext===void 0;case"get-source-tree":return!0;case"get-source-file":return typeof e.path=="string";case"execute":return z(e.request)&&l(e.request.mutationContext)&&(s.validateOperationRequest?.(e.request)??!0);case"undo":case"redo":return l(e.mutationContext)}}},m=class{constructor(e){this.options=e,this.messageQueue=new x,this.eventDispatcher=new R(s=>{this.sendJson(s)}),this.unsubscribe=e.engine.subscribe(s=>{this.eventDispatcher.push(s)}),e.socket.onmessage=s=>{try{this.messageQueue.enqueue(()=>this.handleRawMessage(s.data))}catch(n){this.sendJson({type:"error",payload:{id:"unknown",kind:"get-document",message:n instanceof Error?n.message:"Bridge queue overflow"}}),e.socket.close(1013,"bridge busy")}},e.socket.onclose=()=>{this.unsubscribe()}}async handleMessage(e){try{let s=e;if(s.type!=="request")return;let n=s.payload,{id:i}=n;switch(n.kind){case"initialize-session":{let o=await this.options.engine.initializeSession({routeId:n.routeId,...n.mutationContext?{mutationContext:n.mutationContext}:{}});this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:{ok:!0,data:{document:S(o.data.document),historyStatus:o.data.historyStatus}}}});return}case"get-document":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:{ok:!0,data:S((await this.options.engine.getDocument(n.routeId)).data)}}});return;case"get-history-status":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getHistoryStatus()}});return;case"get-style-context":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getStyleContext(n.routeId)}});return;case"get-object-edit-context":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getObjectEditContext(n.key,n.routeId)}});return;case"get-class-name-source":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getClassNameSource(n.key,n.routeId)}});return;case"get-source-tree":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getSourceTree()}});return;case"get-source-file":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.getSourceFile({path:n.path})}});return;case"resolve-source-location":this.sendJson({type:"response",payload:{id:i,kind:n.kind,result:await this.options.engine.resolveSourceLocation({key:n.key,routeId:n.routeId})}});return;case"execute":{if(!l(n.request.mutationContext))throw new Error("Invalid site edit bridge message");let o=n.request.mutationContext;await this.handleBufferedOperation(i,n.kind,()=>this.options.engine.execute(n.request,o));return}case"undo":if(!l(n.mutationContext))throw new Error("Invalid site edit bridge message");await this.handleBufferedOperation(i,n.kind,()=>this.options.engine.undo(n.mutationContext));return;case"redo":if(!l(n.mutationContext))throw new Error("Invalid site edit bridge message");await this.handleBufferedOperation(i,n.kind,()=>this.options.engine.redo(n.mutationContext));return}}catch(s){let n=h.extractRequestInfo(e);this.sendJson({type:"error",payload:{...n,message:M(s),code:B(s)}})}}async handleRawMessage(e){try{await this.handleMessage(h.parseMessage(e,{validateOperationRequest:this.options.validateOperationRequest}))}catch(s){let n=s instanceof Error?s.message:"Invalid websocket message",i=G(e);this.sendJson({type:"error",payload:{...i,message:n}})}}sendJson(e){this.options.socket.send(h.stringifyMessage(e))}async handleBufferedOperation(e,s,n){this.eventDispatcher.beginBuffering();try{let i=await n();this.sendJson({type:"response",payload:{id:e,kind:s,result:i}}),this.eventDispatcher.flush()}catch(i){this.sendJson({type:"error",payload:{id:e,kind:s,message:M(i),code:B(i)}}),this.eventDispatcher.flush()}}},R=class{constructor(e){this.send=e,this.bufferedEvents=null}push(e){let s={type:"event",payload:{event:e}};if(this.bufferedEvents){this.bufferedEvents.push(s);return}this.send(s)}beginBuffering(){this.bufferedEvents=[]}flush(){let e=this.bufferedEvents??[];this.bufferedEvents=null,e.forEach(s=>{this.send(s)})}},x=class{constructor(e=64){this.maxQueued=e,this.queue=Promise.resolve(),this.queued=0}enqueue(e){if(this.queued>=this.maxQueued)throw new Error("Bridge request queue is full");this.queued+=1;let s=async()=>{this.queued-=1,await e()},n=this.queue.then(s,s);return this.queue=n.then(()=>{},()=>{}),n}};function c(t){return typeof t=="object"&&t!==null}function z(t){return c(t)&&typeof t.id=="string"&&typeof t.siteId=="string"&&typeof t.baseSnapshotId=="string"&&(t.routeId===void 0||typeof t.routeId=="string")&&typeof t.kind=="string"&&c(t.target)&&typeof t.documentVersion=="number"&&Number.isInteger(t.documentVersion)&&t.documentVersion>=0&&c(t.params)}function l(t){return Q(t)}function B(t){if(!t||typeof t!="object")return;let e=t.code;return typeof e=="string"&&e.length>0?e:void 0}function M(t){if(t instanceof Error)return t.message;if(!t||typeof t!="object")return"Unknown websocket operation failure";let e=t.message;return typeof e=="string"&&e.length>0?e:"Unknown websocket operation failure"}function Q(t){return c(t)?typeof t.editingSessionId=="string"&&t.editingSessionId.length>0&&typeof t.lockId=="string"&&t.lockId.length>0&&typeof t.ownerId=="string"&&t.ownerId.length>0&&typeof t.leaseAssertion=="string"&&t.leaseAssertion.length>0:!1}function G(t){try{return h.extractRequestInfo(JSON.parse(t))}catch{return{id:"unknown",kind:"get-document"}}}var y=class{constructor(){this.tail=Promise.resolve()}run(e){let s=this.tail.then(e,e);return this.tail=s.then(()=>{},()=>{}),s}};import{SiteEditOperationRequestSchema as re}from"@vcp-dev/contracts";var ae="127.0.0.1",ue=30218,ce="/__vcp/site-edit/bridge",q=6*1024*1024,de=q*2,he=3e3,O=50,H="__VCP_SITE_EDIT_BRIDGE_SERVERS__";function De(t){let e=A(t),s=j(e),n=L(),i=n.get(s);if(i)return i;let o=new I(e);n.set(s,o);try{o.start()}catch(r){throw n.delete(s),o.stop(),r}return o}function Ke(t,e,s={}){let n=new I(A(e),t,!1,s);return n.start({listen:!1}),n}var I=class{constructor(e,s=Y.createServer((o,r)=>{r.writeHead(404),r.end("VCP site edit bridge server")}),n=!0,i={}){this.options=e,this.server=s,this.closeHttpServerOnStop=n,this.dependencies=i,this.runtime=null,this.activeHistorySessionId=null,this.historySessionTransition=Promise.resolve(),this.mutationQueue=new y,this.eventListeners=new Set,this.routes=[],this.stopWatching=null,this.stopWebSocketServer=null,this.pendingChangedFiles=new Set,this.fileChangeTimer=null,this.isStarted=!1,this.runtimeVersionFloor=0,this.activeHistoryStore=null,this.versionPersistence=Promise.resolve()}start(e={}){if(this.isStarted)return;this.refreshRoutes(),this.isStarted=!0,this.createRuntime();let s=le({server:this.server,path:this.options.path,sessionKey:this.options.sessionKey,host:this.options.host,allowedOrigins:this.options.allowedOrigins,engine:this.createBridgeEngine()});this.stopWebSocketServer=s.stop,this.stopWatching=new oe({projectRoot:this.options.projectRoot,watch_dirs:this.options.runtime.watch_dirs,debounce_ms:this.options.runtime.watch_debounce_ms??O,max_dirs:this.options.runtime.watch_max_dirs,max_files:this.options.runtime.watch_max_files,max_depth:this.options.runtime.watch_max_depth,max_startup_ms:this.options.runtime.watch_max_startup_ms,on_change:n=>this.handleFileChanged(n),on_batch_change:n=>this.handleFilesChanged(n)}).start(),e.listen!==!1&&this.server.listen(this.options.port,this.options.host)}getHealth(){let e=!!this.runtime;return{ok:this.isStarted&&e,bridgePath:this.options.path,runtimeReady:e,routesIndexed:this.routes.length,sessionRequired:!!this.options.sessionKey}}stop(){this.stopWatching?.(),this.stopWatching=null,this.flushChangedFiles(),this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.stopWebSocketServer?.(),this.stopWebSocketServer=null,this.runtime?.dispose(),this.runtime=null,this.closeHttpServerOnStop&&this.server.close();let e=L(),s=j(this.options);e.get(s)===this&&e.delete(s),this.isStarted=!1}createRuntime(e,s=null){let n=this.runtime;this.activeHistoryStore=e??null;let i=(this.dependencies.createRuntime??te)({...this.options.tenantId?{tenantId:this.options.tenantId}:{},siteId:this.options.siteId,snapshotId:this.options.snapshotId,projectRoot:this.options.projectRoot,routes:this.routes,onEvent:o=>{"version"in o&&typeof o.version=="number"&&this.recordRuntimeVersion(o.version);for(let r of this.eventListeners)r(o)},...e?{historyStore:e}:{},initialDocumentVersion:this.runtimeVersionFloor,...this.options.mutationContextVerifier?{mutationContextVerifier:this.options.mutationContextVerifier}:{}});this.runtime=i,this.activeHistorySessionId=s,n?.dispose()}createBridgeEngine(){return{initializeSession:e=>this.mutationQueue.run(async()=>{if(e.mutationContext){let r=await this.verifyMutationContext(e.mutationContext);if(!r.ok)throw new Error(`${r.code}: ${r.message??"Mutation session verification failed"}`);let d=await this.bindHistorySession(e.mutationContext.editingSessionId);if(!d.ok)throw new Error(`${d.code}: ${d.message}`)}let{runtime:s,resolvedRouteId:n}=await this.activateRoute(e.routeId),i=s.getDocument(n).data;await this.recordRuntimeVersion(i.version);let o=(await s.getHistoryStatus()).data;return{ok:!0,data:{document:i,historyStatus:o}}}),getDocument:async e=>{let{runtime:s,resolvedRouteId:n}=await this.activateRoute(e),i=s.getDocument(n);return await this.recordRuntimeVersion(i.data.version),i},getHistoryStatus:async()=>this.getRuntime().getHistoryStatus(),getStyleContext:async e=>{let{runtime:s,resolvedRouteId:n}=await this.activateRoute(e);return s.getStyleContext(n)},getObjectEditContext:async(e,s)=>this.getRuntime().getObjectEditContext(e,s?this.resolveRouteId(s):void 0),getClassNameSource:async(e,s)=>{let n=this.getRuntime(),i=s?this.resolveRouteId(s):void 0;return n.getClassNameSource(e,i)},getSourceTree:async()=>this.getRuntime().getSourceTree(),getSourceFile:async e=>this.getRuntime().getSourceFile(e),resolveSourceLocation:async e=>this.getRuntime().resolveSourceLocation({key:e.key,routeId:e.routeId?this.resolveRouteId(e.routeId):void 0}),execute:(e,s)=>this.mutationQueue.run(async()=>{let n=s??e.mutationContext,i=await this.verifyMutationContext(n);if(!i.ok)return f(i,e);let o=await this.bindHistorySession(n.editingSessionId);if(!o.ok)return f(o,e);let r=await this.getRuntime().executeOperation(this.normalizeRequest(e),n);return r.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(r.data.resultVersion),r}),undo:e=>this.mutationQueue.run(async()=>{let s=await this.verifyMutationContext(e);if(!s.ok)return f(s);let n=await this.bindHistorySession(e.editingSessionId);if(!n.ok)return f(n);let i=await this.getRuntime().undo(e);return i.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(i.data.resultVersion),i}),redo:e=>this.mutationQueue.run(async()=>{let s=await this.verifyMutationContext(e);if(!s.ok)return f(s);let n=await this.bindHistorySession(e.editingSessionId);if(!n.ok)return f(n);let i=await this.getRuntime().redo(e);return i.data?.resultVersion!==void 0&&await this.recordRuntimeVersion(i.data.resultVersion),i}),subscribe:e=>(this.eventListeners.add(e),()=>this.eventListeners.delete(e))}}async bindHistorySession(e){if(!this.options.historyRoot)return{ok:!1,code:"RECOVERY_PERSIST_FAILED",message:"Durable edit history is not configured."};if(this.activeHistorySessionId===e)return{ok:!0};let s=this.historySessionTransition.then(async()=>{if(this.activeHistorySessionId===e)return;let n=await(this.dependencies.openHistoryStore??se)(pe({root:this.options.historyRoot,siteId:this.options.siteId,snapshotId:this.options.snapshotId,editingSessionId:e}));if(!this.isStarted)return;let i=n.readDocumentVersion?await n.readDocumentVersion():0;this.runtimeVersionFloor=Math.max(this.runtimeVersionFloor,i),this.createRuntime(n,e)});this.historySessionTransition=s.catch(()=>{});try{return await s,{ok:!0}}catch{return{ok:!1,code:"RECOVERY_PERSIST_FAILED",message:"Durable edit history could not be opened."}}}recordRuntimeVersion(e){this.runtimeVersionFloor=Math.max(this.runtimeVersionFloor,e);let s=this.activeHistoryStore;return s?.writeDocumentVersion?(this.versionPersistence=this.versionPersistence.then(()=>s.writeDocumentVersion(this.runtimeVersionFloor)).catch(()=>{}),this.versionPersistence):Promise.resolve()}async activateRoute(e){let s=this.getRuntime(),n=this.resolveRouteId(e);return await s.setActiveRoute(n),{runtime:s,resolvedRouteId:n}}normalizeRequest(e){return e.target.kind!=="route"?e.routeId?{...e,routeId:this.resolveRouteId(e.routeId)}:e:{...e,target:{...e.target,routeId:this.resolveRouteId(e.target.routeId)}}}handleFileChanged(e){this.handleFilesChanged([e])}handleFilesChanged(e){for(let n of e)this.pendingChangedFiles.add(n);this.fileChangeTimer&&clearTimeout(this.fileChangeTimer);let s=this.options.runtime.watch_debounce_ms??O;this.fileChangeTimer=setTimeout(()=>{this.fileChangeTimer=null,this.flushChangedFiles()},s),this.fileChangeTimer?.unref?.()}flushChangedFiles(){if(this.fileChangeTimer&&(clearTimeout(this.fileChangeTimer),this.fileChangeTimer=null),this.pendingChangedFiles.size===0)return;let e=[...this.pendingChangedFiles].sort((s,n)=>s.localeCompare(n));this.pendingChangedFiles.clear(),this.refreshRoutes();for(let s of e)this.runtime?.notifyFileChanged(s)}refreshRoutes(){let e=this.options.runtime.routes?.length?this.options.runtime.routes:ie(this.options.projectRoot),s=new Map(this.routes.map(i=>[i.routeId,i.entryFile])),n=new Set(e.map(i=>i.routeId));this.routes=e;for(let i of e)s.get(i.routeId)!==i.entryFile&&this.runtime?.registerRoute(i.routeId,i.entryFile);for(let i of s.keys())n.has(i)||this.runtime?.unregisterRoute(i)}resolveRouteId(e){let s=ne(e,this.routes,this.options.basePath);if(!s)throw new Error(`Route is not indexed by the preview bridge: ${e}`);return s}getRuntime(){if(!this.runtime)throw new Error("VCP site edit preview bridge runtime is not ready");return this.runtime}async verifyMutationContext(e){if(!e)return{ok:!1,code:"MUTATION_SESSION_REQUIRED",message:"A mutation session is required for write operations."};if(!this.options.mutationContextVerifier||!this.options.tenantId)return{ok:!1,code:"LEASE_ASSERTION_INVALID",message:"Lease assertion verification is unavailable."};try{return await this.options.mutationContextVerifier.verify(e,{tenantId:this.options.tenantId,siteId:this.options.siteId,snapshotId:this.options.snapshotId,editingSessionId:e.editingSessionId,lockId:e.lockId,ownerId:e.ownerId})}catch{return{ok:!1,code:"LEASE_ASSERTION_INVALID",message:"Lease assertion verification failed."}}}};function A(t){return{tenantId:t.tenantId,siteId:t.siteId,snapshotId:t.snapshotId,projectRoot:C.resolve(t.projectRoot??process.cwd()),basePath:t.basePath??"",host:t.host??ae,port:t.port??ue,path:t.path??ce,sessionKey:t.sessionKey??Se(),historyRoot:t.historyRoot,mutationContextVerifier:t.mutationContextVerifier,allowedOrigins:t.allowedOrigins??[],runtime:t.runtime??{}}}function pe(t){return C.join(C.resolve(t.root),D(t.siteId),D(t.snapshotId),U("sha256").update(t.editingSessionId).digest("hex").slice(0,32))}function D(t){return/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(t)&&t!=="."&&t!==".."?t:U("sha256").update(t).digest("hex").slice(0,32)}function L(){let t=globalThis;return t[H]??=new Map,t[H]}function j(t){return`${t.projectRoot}:${t.host}:${t.port}:${t.path}:${t.historyRoot??""}`}function f(t,e){return{ok:!1,error:{code:t.code,message:t.message},data:{requestId:e?.id??"mutation-context",kind:e?.kind??"update-text",target:e?.target??{kind:"node",key:""},resultVersion:e?.documentVersion??0}}}function le(t){let e=new ee({maxPayload:q,noServer:!0}),s=new WeakSet,n=o=>{new m({socket:new b(o),engine:t.engine,validateOperationRequest:r=>re.safeParse(r).success})},i=(o,r,d)=>{if(!fe(o,t))return;let p=ge(o,t);if(!p){r.write(`HTTP/1.1 401 Unauthorized\r
 Connection: close\r
 \r
-`),i.destroy();return}u.authenticatedByHeader&&s.add(o),e.handleUpgrade(o,i,a,h=>{e.emit("connection",h,o)})};return t.server.on("upgrade",r),e.on("connection",(o,i)=>{if(s.has(i)){n(o);return}te(o,t.sessionKey,()=>{n(o)})}),e.stop=()=>{t.server.off("upgrade",r);for(let o of e.clients)o.close(1001,"bridge stopped");e.close()},e}var y=class{constructor(e){this.socket=e,this.onmessage=null,this.onclose=null,e.on("message",s=>{this.onmessage?.({data:s.toString()})}),e.on("close",()=>{this.onclose?.()})}send(e){this.socket.readyState===C.OPEN&&this.socket.send(e)}close(e,s){this.socket.close(e,s)}};function Z(t,e){return new URL(t.url??"/","http://localhost").pathname===e.path}function ee(t,e){if(new URL(t.url??"/","http://localhost").searchParams.has("vcp_bridge_key"))return null;let n=m(t.headers["x-vcp-site-edit-key"]),r=B(n,e.sessionKey),o=m(t.headers.host),i=m(t.headers.origin);return o&&!se(o,e.host,i)?null:i?re(i,o,e.allowedOrigins)?{authenticatedByHeader:r}:null:r?{authenticatedByHeader:!0}:null}function te(t,e,s){let n=setTimeout(()=>{t.close(1008,"bridge authentication timeout")},Y),r,o=()=>{clearTimeout(n),t.off("message",r),t.off("close",o)},i=()=>{o(),t.close(1008,"bridge authentication failed")};r=a=>{try{let u=d.parseMessage(a.toString());if(u.type!=="auth"||!B(u.payload.key,e)){i();return}o(),t.readyState===C.OPEN&&t.send(d.stringifyMessage({type:"auth-ok",payload:{ok:!0}})),s()}catch{i()}},t.on("message",r),t.on("close",o)}function B(t,e){if(!t)return!1;let s=Buffer.from(t),n=Buffer.from(e);return s.length===n.length&&H(s,n)}function se(t,e,s){let n=v(t),r=v(e);return n===r||E(r)&&E(n)&&(!s||I(s,t))||ne(r)&&(!s||I(s,t))}function ne(t){return t==="0.0.0.0"||t==="::"}function E(t){return t==="localhost"||t==="127.0.0.1"||t==="::1"}function re(t,e,s){return s.includes(t)||(e?I(t,e):!1)}function I(t,e){try{return new URL(t).host===q(e)}catch{return!1}}function v(t){let e=q(t);return e.startsWith("[")?e.slice(1,e.indexOf("]")):e.split(":").length-1===1?e.split(":",1)[0]??"":e}function q(t){return t.trim().toLowerCase()}function m(t){return Array.isArray(t)?t[0]:t}function oe(){return N(32).toString("base64url")}export{Q as SITE_EDIT_BRIDGE_MAX_PAYLOAD_BYTES,p as SiteEditBridgeServer,Re as attachSiteEditBridgeServer,X as attachSiteEditWebSocketServer,Ie as ensureSiteEditBridgeServerStarted};
+`),r.destroy();return}p.authenticatedByHeader&&s.add(o),e.handleUpgrade(o,r,d,w=>{e.emit("connection",w,o)})};return t.server.on("upgrade",i),e.on("connection",(o,r)=>{if(s.has(r)){n(o);return}me(o,t.sessionKey,()=>{n(o)})}),e.stop=()=>{t.server.off("upgrade",i);for(let o of e.clients)o.close(1001,"bridge stopped");e.close()},e}var b=class{constructor(e){this.socket=e,this.onmessage=null,this.onclose=null,e.on("error",()=>{}),e.on("message",s=>{this.onmessage?.({data:s.toString()})}),e.on("close",()=>{this.onclose?.()})}send(e){if(this.socket.readyState===P.OPEN){if(this.socket.bufferedAmount+Buffer.byteLength(e,"utf8")>de){this.socket.close(1013,"bridge backpressure");return}this.socket.send(e)}}close(e,s){this.socket.close(e,s)}};function fe(t,e){return new URL(t.url??"/","http://localhost").pathname===e.path}function ge(t,e){if(new URL(t.url??"/","http://localhost").searchParams.has("vcp_bridge_key"))return null;let n=k(t.headers["x-vcp-site-edit-key"]),i=N(n,e.sessionKey),o=k(t.headers.host),r=k(t.headers.origin);return o&&!ye(o,e.host,r)?null:r?we(r,o,e.allowedOrigins)?{authenticatedByHeader:i}:null:i?{authenticatedByHeader:!0}:null}function me(t,e,s){let n=setTimeout(()=>{t.close(1008,"bridge authentication timeout")},he),i,o=()=>{clearTimeout(n),t.off("message",i),t.off("close",o)},r=()=>{o(),t.close(1008,"bridge authentication failed")};i=d=>{try{let p=h.parseMessage(d.toString());if(p.type!=="auth"||!N(p.payload.key,e)){r();return}o(),t.readyState===P.OPEN&&t.send(h.stringifyMessage({type:"auth-ok",payload:{ok:!0}})),s()}catch{r()}},t.on("message",i),t.on("close",o)}function N(t,e){if(!t)return!1;let s=Buffer.from(t),n=Buffer.from(e);return s.length===n.length&&Z(s,n)}function ye(t,e,s){let n=F(t),i=F(e);return n===i||K(i)&&K(n)&&(!s||v(s,t))||Ie(i)&&(!s||v(s,t))}function Ie(t){return t==="0.0.0.0"||t==="::"}function K(t){return t==="localhost"||t==="127.0.0.1"||t==="::1"}function we(t,e,s){return s.includes(t)||(e?v(t,e):!1)}function v(t,e){try{return new URL(t).host===$(e)}catch{return!1}}function F(t){let e=$(t);return e.startsWith("[")?e.slice(1,e.indexOf("]")):e.split(":").length-1===1?e.split(":",1)[0]??"":e}function $(t){return t.trim().toLowerCase()}function k(t){return Array.isArray(t)?t[0]:t}function Se(){return X(32).toString("base64url")}export{de as SITE_EDIT_BRIDGE_MAX_BUFFERED_BYTES,q as SITE_EDIT_BRIDGE_MAX_PAYLOAD_BYTES,I as SiteEditBridgeServer,Ke as attachSiteEditBridgeServer,le as attachSiteEditWebSocketServer,De as ensureSiteEditBridgeServerStarted};

package/dist/start-next-dev-server.js

@@ -10,6 +10,7 @@ const preview = await startSiteEditNextDevServer({
     projectRoot,
     siteId: process.env.VCP_SITE_ID ?? "site_preview",
     snapshotId: process.env.VCP_SNAPSHOT_ID,
+    requireMutationContextVerifier: true,
 });
 console.log(JSON.stringify({
     status: "ready",

package/dist/window-message.d.ts

@@ -1,4 +1,5 @@
-import type { SiteEditCommandSuccess, SiteEditEvent, SiteEditObjectEditContext, SiteEditObjectSummary, SiteEditGetClassNameSourceCommandResult, SiteEditOperationCommandResult, SiteEditOperationRequest, SiteEditRenderDocument, SiteEditSourceFileResponse, SiteEditSourceLocation, SiteEditSourceTreeResponse } from "@vcp-dev/contracts";
+import type { SiteEditCommandSuccess, SiteEditClassNameSourceStyleContext, SiteEditEvent, SiteEditObjectEditContext, SiteEditGetClassNameSourceCommandResult, SiteEditMutationContext, SiteEditOperationCommandResult, SiteEditOperationRequest, SiteEditRenderDocument, SiteEditSourceFileResponse, SiteEditSourceLocation, SiteEditSourceTreeResponse } from "@vcp-dev/contracts";
+import type { SiteEditHistoryStatus } from "./protocol.js";
 export declare const VCP_WINDOW_MESSAGE_SOURCE = "vcp-window-message";
 export declare const VCP_WINDOW_MESSAGE_VERSION = 1;
 export type VcpWindowMessageEnvelope<TNamespace extends string = string, TChannel extends string = string, TBody = unknown> = {
@@ -210,15 +211,36 @@ export type SiteEditFrameRuntimeRequestBody = {
 } | {
     type: "request";
     id: string;
-    kind: "bridge-get-document" | "bridge-ensure-document-version";
+    kind: "bridge-initialize-session";
+    payload: {
+        routeId: string;
+        mutationContext?: SiteEditMutationContext;
+    };
+} | {
+    type: "request";
+    id: string;
+    kind: "bridge-get-document" | "bridge-ensure-document-version" | "bridge-acknowledge-document-version";
     payload: {
         routeId: string;
         minVersion?: number;
+        version?: number;
+    };
+} | {
+    type: "request";
+    id: string;
+    kind: "bridge-get-history-status";
+    payload: Record<string, never>;
+} | {
+    type: "request";
+    id: string;
+    kind: "bridge-get-style-context";
+    payload: {
+        routeId: string;
     };
 } | {
     type: "request";
     id: string;
-    kind: "bridge-get-object-summary" | "bridge-get-object-edit-context" | "bridge-get-class-name-source";
+    kind: "bridge-get-object-edit-context" | "bridge-get-class-name-source";
     payload: {
         key: string;
         routeId?: string;
@@ -229,12 +251,15 @@ export type SiteEditFrameRuntimeRequestBody = {
     kind: "bridge-execute";
     payload: {
         request: SiteEditOperationRequest;
+        mutationContext: SiteEditMutationContext;
     };
 } | {
     type: "request";
     id: string;
     kind: "bridge-undo" | "bridge-redo";
-    payload: Record<string, never>;
+    payload: {
+        mutationContext: SiteEditMutationContext;
+    };
 } | {
     type: "request";
     id: string;
@@ -274,6 +299,7 @@ export type SiteEditFrameRuntimeHit = {
     componentName?: string;
     sourceFile?: string;
     parentKey?: string;
+    pageCompositionUnitKey?: string;
     textPreview?: string;
     dataset?: Record<string, string>;
     attributes?: Record<string, string>;
@@ -298,7 +324,10 @@ export type SiteEditFrameRuntimeResponseBody = {
     type: "response";
     id: string;
     ok: boolean;
-    result?: SiteEditFrameRuntimeStarted | SiteEditFrameRuntimeHit | SiteEditFrameRuntimeNodePatchAck | SiteEditFrameRuntimeHit[] | SiteEditFrameRuntimeDropTarget | SiteEditFrameRuntimeScrollMetrics | SiteEditCommandSuccess<SiteEditRenderDocument> | SiteEditCommandSuccess<SiteEditObjectSummary> | SiteEditCommandSuccess<SiteEditObjectEditContext> | SiteEditGetClassNameSourceCommandResult | SiteEditCommandSuccess<SiteEditSourceTreeResponse> | SiteEditCommandSuccess<SiteEditSourceFileResponse> | SiteEditCommandSuccess<SiteEditSourceLocation> | SiteEditOperationCommandResult | (SiteEditFrameRuntimeScrollMetrics & {
+    result?: SiteEditFrameRuntimeStarted | SiteEditFrameRuntimeHit | SiteEditFrameRuntimeNodePatchAck | SiteEditFrameRuntimeHit[] | SiteEditFrameRuntimeDropTarget | SiteEditFrameRuntimeScrollMetrics | SiteEditCommandSuccess<SiteEditRenderDocument> | SiteEditCommandSuccess<{
+        document: SiteEditRenderDocument;
+        historyStatus: SiteEditHistoryStatus;
+    }> | SiteEditCommandSuccess<SiteEditHistoryStatus> | SiteEditCommandSuccess<SiteEditClassNameSourceStyleContext | null> | SiteEditCommandSuccess<SiteEditObjectEditContext> | SiteEditGetClassNameSourceCommandResult | SiteEditCommandSuccess<SiteEditSourceTreeResponse> | SiteEditCommandSuccess<SiteEditSourceFileResponse> | SiteEditCommandSuccess<SiteEditSourceLocation> | SiteEditOperationCommandResult | (SiteEditFrameRuntimeScrollMetrics & {
         scrolled: true;
     }) | {
         interactionEnabled: boolean;