@vexcms/next 0.1.0-alpha.11 → 0.1.0-alpha.13

package/README.md

@@ -1,87 +1,85 @@
-# @vexcms/admin-next
+# @vexcms/next
 
-The admin panel for [VEX CMS](https://github.com/ianyimi/vex), built for Next.js. Provides a complete content management interface with collection CRUD, media management, versioning, live preview, access control, and user impersonation.
+The Next.js adapter for [VEX CMS](https://github.com/ianyimi/vex). Provides the server and client components that render the admin panel — collection CRUD, media management, and role-based access control — plus config functions re-exported from `@vexcms/react`.
 
 ## Installation
 
 ```bash
-pnpm add @vexcms/admin-next
+pnpm add @vexcms/next@alpha
 ```
 
 ## Quick Setup
 
 ```tsx
-// app/admin/[[...path]]/page.tsx
-import { AdminLayout, AdminPage } from "@vexcms/admin-next"
+// app/admin/layout.tsx
+import { NextAdminLayout } from "@vexcms/next/client"
 import config from "@/vex.config"
+import { getCurrentUser } from "@/auth/serverUtils"
 
-export default function Admin({ params }) {
+export default async function AdminRootLayout({ children }: { children: React.ReactNode }) {
+  const user = await getCurrentUser()
   return (
-    <AdminLayout config={config} user={user}>
-      <AdminPage config={config} path={params.path} />
-    </AdminLayout>
+    <NextAdminLayout config={config} user={user ?? undefined}>
+      {children}
+    </NextAdminLayout>
   )
 }
 ```
 
+```tsx
+// app/admin/[[...path]]/page.tsx
+import { NextAdminPage } from "@vexcms/next/server"
+import config from "@/vex.config"
+
+export default function AdminPage({
+  params,
+}: {
+  params: Promise<{ path?: string[] }>
+}) {
+  return <NextAdminPage config={config} params={params} />
+}
+```
+
+`NextAdminPage` and `NextAdminLayout` are exported from separate subpaths (`/server` and `/client`) rather than the package root, because an async server component and a `"use client"` component cannot share one bundle.
+
 ## Features
 
 ### Collection Management
 
-- **List view** — Paginated data table with search, sorting, bulk delete, and configurable columns
-- **Edit view** — Auto-generated forms from collection schema with field validation via TanStack React Form
-- **Create/delete** — Dialogs for document creation and deletion with permission checks
-- **Bidirectional pagination** — Instant access to first and last pages
+- **List view** — Data table with Load More pagination, row selection, and bulk delete
+- **Edit view** — Auto-generated forms from the collection schema, submitted via TanStack React Form
+- **Create dialog** — Modal for document creation, gated by a `create` permission check
 
 ### Media Management
 
 - **Grid/list views** — Browse media files with thumbnails
-- **Upload** — Drag-and-drop upload with file type detection
-- **Media picker** — Inline picker for upload and relationship fields with search and pagination
-- **Image dimensions** — Auto-detected on upload
-
-### Versioning & Drafts
-
-- **Draft/publish workflow** — Status badges, publish/unpublish actions
-- **Version history** — Dropdown to view, restore, or delete previous versions
-- **Autosave** — Configurable auto-save interval for draft documents
+- **Upload** — Drag-and-drop or click-to-upload through the collection's configured storage adapter
+- **Media picker** — Inline picker for upload fields, with a client-side search filter and Load More pagination
 
-### Live Preview
+### Roadmap note
 
-- **Side-by-side panel** — Preview content changes in an iframe alongside the editor
-- **Responsive breakpoints** — Test at different screen sizes
-- **Snapshot system** — Transient preview data without saving to database
+Versioning, drafts, and live preview are not implemented yet — both are in progress on the [roadmap](https://docs.vexcms.dev). A global's `versions.drafts` option parses and is stored on the resolved config, but it is not enforced: every read still returns the live document. See [docs.vexcms.dev](https://docs.vexcms.dev) for current status.
 
 ### Access Control
 
-- **Permission provider** — React context for role-based access control
-- **Field-level permissions** — Read-only fields based on user roles
-- **Collection-level permissions** — Control create, read, update, delete per collection
-- **UI enforcement** — Buttons and actions hidden/disabled based on permissions
-
-### User Impersonation
-
-- **Impersonation banner** — Shows when an admin is viewing as another user
-- **User switching** — Select from impersonatable users list
+- **Access provider** — `VexAccessProvider` supplies the RBAC access matrix to the admin panel via React context
+- **Collection-level permissions** — `usePermission` gates create, read, update, and delete per collection and per global
+- **UI enforcement** — Buttons and actions are disabled or hidden when the current user lacks permission
 
 ### Admin Layout
 
-- **Sidebar navigation** — Collections grouped by `admin.group`, with auth and media sections
-- **Theme support** — Light/dark mode
-- **User menu** — Profile, sign out, impersonation controls
+- **Sidebar navigation** — Links grouped into Collections, Globals, and Media sections
+- **Theme support** — Light, dark, and system modes via `ThemeToggle`
 
 ## Exports
 
-| Export | Description |
-|--------|-------------|
-| `AdminPage` | Main routing component — renders the correct view based on URL path |
-| `AdminLayout` | Server-side layout wrapper with sidebar and theme |
-| `PermissionProvider` | React context provider for RBAC |
-| `usePermission` | Hook to check a single action permission |
-| `usePermissions` | Hook to check all CRUD permissions for a resource |
-| `usePermissionContext` | Hook to access the full permission context |
-| `ImpersonationBanner` | Banner component for admin impersonation |
-| `useMediaPickerState` | Hook for media picker state management |
+| Export | From | Description |
+|--------|------|-------------|
+| `NextAdminPage` | `@vexcms/next/server` | Async server component that routes the admin panel by URL path (dashboard, list, edit) |
+| `NextAdminLayout` | `@vexcms/next/client` | Client component rendering the admin shell (sidebar, theme, breadcrumbs) around page content |
+| `defineConfig`, `defineCollection`, `relationship`, `text`, `number`, `select`, `date`, `url`, `checkbox` | `@vexcms/next` | Config functions re-exported from `@vexcms/react` |
+
+The compiled stylesheet is available at `@vexcms/next/styles`.
 
 ## Peer Dependencies
 

package/dist/NextAdminLayout.js

@@ -1,23 +1,6 @@
-// src/NextAdminLayout.tsx
-import { sanitizeConfigForClient } from "@vexcms/core";
-import { NextAdminLayoutClient } from "./NextAdminLayoutClient";
-import { cookies } from "next/headers";
-import { jsx } from "react/jsx-runtime";
-async function NextAdminLayout(props) {
-  const clientConfig = sanitizeConfigForClient(props.config);
-  const cookieStore = await cookies();
-  const sidebarOpen = String(cookieStore.get("sidebar_state")?.value) === "true";
-  return /* @__PURE__ */ jsx(
-    NextAdminLayoutClient,
-    {
-      config: clientConfig,
-      user: props.user,
-      organization: props.organization,
-      sidebarOpen,
-      children: props.children
-    }
-  );
-}
+import {
+  NextAdminLayout
+} from "./chunk-YCJNIS6O.js";
 export {
   NextAdminLayout
 };

package/dist/NextAdminLayout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/NextAdminLayout.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport type { VexConfig } from \"@vexcms/core\";\nimport { sanitizeConfigForClient } from \"@vexcms/core\";\nimport type { AdminUser } from \"@vexcms/react\";\nimport { NextAdminLayoutClient } from \"./NextAdminLayoutClient\";\nimport { cookies } from \"next/headers\";\n\n/**\n * Next.js admin layout shell for VexCMS.\n *\n * A **server component** that sits on the server→client boundary for the admin\n * panel. It sanitizes the resolved `vex.config` with `sanitizeConfigForClient`\n * — stripping storage adapter class instances, functions, and React components\n * — *before* the config is handed to the client leaf `NextAdminLayoutClient`.\n *\n * This placement is the whole point: React serializes props when a server\n * component renders a client component, so the sanitize **must** happen on the\n * server side of that edge. Sanitizing inside the client component would run\n * too late — the raw config would already have failed to serialize.\n *\n * The client leaf handles everything that needs the browser (`usePathname`,\n * `NuqsAdapter`, `NextLink`/`NextImage`); this wrapper does no client work.\n *\n * Render it from your admin `layout.tsx`. Because this is a server component,\n * your `layout.tsx` may itself be an `async` server component (e.g. to run auth\n * checks) and pass the **raw** `vex.config` straight through — no sanitize\n * needed on the application side.\n *\n * @param props - Layout props\n * @param props.config - The resolved VexCMS config from `vex.config.ts` (raw)\n * @param props.children - The page content from `[[...slug]]/page.tsx`\n * @param props.user - Current user for the admin shell\n * @returns The rendered admin shell, wrapping `children` in the sanitized-config\n * client boundary ({@link NextAdminLayoutClient}).\n * @example\n * ```tsx\n * // app/admin/layout.tsx\n * import { NextAdminLayout } from \"@vexcms/next/client\";\n * import config from \"~/vex.config\";\n * import { getCurrentUser } from \"~/auth/serverUtils\";\n *\n * export default async function AdminLayout({ children }: { children: ReactNode }) {\n *   const user = await getCurrentUser();\n *   return (\n *     <NextAdminLayout config={config} user={user ?? undefined}>\n *       {children}\n *     </NextAdminLayout>\n *   );\n * }\n * ```\n */\nexport async function NextAdminLayout(props: {\n  config: VexConfig;\n  children: ReactNode;\n  user?: AdminUser;\n  organization?: Record<string, unknown>;\n}) {\n  // Sanitize on the SERVER side of the server→client boundary, before the\n  // config is serialized as a prop into the client leaf. This removes the\n  // storage adapter class instances that would otherwise crash RSC\n  // serialization (\"Classes or null prototypes are not supported\").\n  const clientConfig = sanitizeConfigForClient(props.config);\n  const cookieStore = await cookies();\n  const sidebarOpen = String(cookieStore.get(\"sidebar_state\")?.value) === \"true\";\n\n  return (\n    <NextAdminLayoutClient\n      config={clientConfig}\n      user={props.user}\n      organization={props.organization}\n      sidebarOpen={sidebarOpen}\n    >\n      {props.children}\n    </NextAdminLayoutClient>\n  );\n}\n"],"mappings":";AAEA,SAAS,+BAA+B;AAExC,SAAS,6BAA6B;AACtC,SAAS,eAAe;AA6DpB;AAfJ,eAAsB,gBAAgB,OAKnC;AAKD,QAAM,eAAe,wBAAwB,MAAM,MAAM;AACzD,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,cAAc,OAAO,YAAY,IAAI,eAAe,GAAG,KAAK,MAAM;AAExE,SACE;AAAA,IAAC;AAAA;AAAA,MACC,QAAQ;AAAA,MACR,MAAM,MAAM;AAAA,MACZ,cAAc,MAAM;AAAA,MACpB;AAAA,MAEC,gBAAM;AAAA;AAAA,EACT;AAEJ;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/NextAdminPage.js

@@ -1,141 +1,6 @@
-// src/NextAdminPage.tsx
-import { fetchQuery } from "convex/nextjs";
-import { vexConvexApi } from "@vexcms/core";
 import {
-  DashboardView,
-  CollectionListView,
-  CollectionEditView,
-  MediaCollectionEditView,
-  MediaCollectionListView,
-  GlobalsListView,
-  GlobalEditView
-} from "@vexcms/react";
-import { sanitizeConfigForClient } from "@vexcms/core";
-import { jsx, jsxs } from "react/jsx-runtime";
-async function NextAdminPage(props) {
-  const { path = [] } = await props.params;
-  const [collectionSlug, documentId] = path;
-  const clientConfig = sanitizeConfigForClient(props.config);
-  if (!collectionSlug) {
-    return /* @__PURE__ */ jsx(DashboardView, { config: clientConfig });
-  }
-  if (collectionSlug === "globals") {
-    if (!documentId) {
-      return /* @__PURE__ */ jsx(GlobalsListView, { config: clientConfig });
-    }
-    const globalConfig = clientConfig.globals.find((g) => g.slug === documentId);
-    if (!globalConfig) {
-      return /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsxs("p", { className: "text-muted-foreground p-6", children: [
-          'Global "',
-          documentId,
-          '" not found.'
-        ] }),
-        /* @__PURE__ */ jsx("p", { children: "TODO: add not found view" })
-      ] });
-    }
-    const global = await fetchQuery(
-      vexConvexApi.globals.get,
-      { slug: globalConfig.slug },
-      props.token ? { token: props.token } : void 0
-    );
-    return /* @__PURE__ */ jsx(GlobalEditView, { global: globalConfig, initialData: global });
-  }
-  const collection = clientConfig.collections.find((c) => c.slug === collectionSlug);
-  const mediaCollection = clientConfig.mediaCollections.find((mc) => mc.slug === collectionSlug);
-  if (!collection && !mediaCollection) {
-    return /* @__PURE__ */ jsxs("div", { children: [
-      /* @__PURE__ */ jsxs("p", { className: "text-muted-foreground p-6", children: [
-        'Collection "',
-        collectionSlug,
-        '" not found.'
-      ] }),
-      /* @__PURE__ */ jsx("p", { children: "TODO: add not found view" })
-    ] });
-  }
-  if (mediaCollection && documentId) {
-    const initialData2 = await fetchQuery(
-      vexConvexApi.get,
-      {
-        id: documentId,
-        collection: mediaCollection.slug
-      },
-      props.token ? { token: props.token } : void 0
-    );
-    return /* @__PURE__ */ jsx(
-      MediaCollectionEditView,
-      {
-        collection: mediaCollection,
-        documentId,
-        initialData: initialData2
-      }
-    );
-  }
-  if (mediaCollection) {
-    const numItems2 = Math.max(
-      mediaCollection.admin.table.serverPageSize,
-      mediaCollection.admin.table.defaultPageSize
-    );
-    const initialData2 = await fetchQuery(
-      vexConvexApi.find,
-      {
-        collection: collectionSlug,
-        paginationOpts: {
-          numItems: numItems2,
-          totalDocs: true,
-          cursor: null
-        }
-      },
-      props.token ? { token: props.token } : void 0
-    );
-    return /* @__PURE__ */ jsx(
-      MediaCollectionListView,
-      {
-        collection: mediaCollection,
-        initialData: initialData2
-      }
-    );
-  }
-  if (collection && documentId) {
-    const initialData2 = await fetchQuery(
-      vexConvexApi.get,
-      {
-        id: documentId,
-        collection: collection.slug
-      },
-      props.token ? { token: props.token } : void 0
-    );
-    return /* @__PURE__ */ jsx(
-      CollectionEditView,
-      {
-        collection,
-        documentId,
-        initialData: initialData2
-      }
-    );
-  }
-  if (!collection) {
-    throw new Error("invalid collection slug");
-  }
-  const numItems = Math.max(
-    collection.admin.table.serverPageSize,
-    collection.admin.table.defaultPageSize
-  );
-  const initialData = await fetchQuery(
-    vexConvexApi.findPaginated,
-    {
-      collection: collectionSlug,
-      depth: 1,
-      paginationOpts: {
-        cursor: null,
-        numItems,
-        totalDocs: true
-      }
-    },
-    props.token ? { token: props.token } : void 0
-  );
-  return /* @__PURE__ */ jsx(CollectionListView, { collection, initialData });
-}
+  NextAdminPage
+} from "./chunk-TR3Z3P6Q.js";
 export {
   NextAdminPage
 };

package/dist/NextAdminPage.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/NextAdminPage.tsx"],"sourcesContent":["import { fetchQuery } from \"convex/nextjs\";\nimport { vexConvexApi } from \"@vexcms/core\";\nimport type { CollectionSlug, PaginationResult, VexConfig, VexMediaDocument } from \"@vexcms/core\";\nimport {\n  DashboardView,\n  CollectionListView,\n  CollectionEditView,\n  MediaCollectionEditView,\n  MediaCollectionListView,\n  GlobalsListView,\n  GlobalEditView,\n} from \"@vexcms/react\";\nimport { sanitizeConfigForClient } from \"@vexcms/core\";\n\n/**\n * VexCMS admin page server component for Next.js.\n *\n * An `async` server component that routes by the `[[...slug]]` catch-all\n * params, prefetches Convex data via `fetchQuery`, and renders the correct\n * view component. Does **not** include a layout wrapper — `VexAdminLayout`\n * in `app/admin/layout.tsx` owns the persistent shell.\n *\n * **Route mapping:**\n * | `path` array | View |\n * |---|---|\n * | `[]` or undefined | `DashboardView` |\n * | `[collectionSlug]` | `CollectionListView` with preloaded docs |\n * | `[collectionSlug, \"new\"]` | `CollectionEditView` (empty form) |\n * | `[collectionSlug, documentId]` | `CollectionEditView` with preloaded doc |\n *\n * @param props - Component props\n * @param props.config - The resolved VexCMS configuration from `vex.config.ts`\n * @param props.params - Next.js 15 async params `{ path?: string[] }`\n * @returns The appropriate admin view for the current URL path.\n *\n * @example\n * ```tsx\n * // app/admin/[[...slug]]/page.tsx\n * import { VexAdminPage } from \"@vexcms/next\";\n * import config from \"../../../../vex.config\";\n *\n * export default function AdminPage({\n *   params,\n * }: {\n *   params: Promise<{ path?: string[] }>;\n * }) {\n *   return <VexAdminPage config={config} params={params} />;\n * }\n * ```\n */\nexport async function NextAdminPage(props: {\n  config: VexConfig;\n  params: Promise<{ path?: string[] }>;\n  token?: string;\n}) {\n  const { path = [] } = await props.params;\n  const [collectionSlug, documentId] = path;\n\n  // Sanitize config for client components (strips storageAdapters, recursively sanitizes mediaCollections)\n  const clientConfig = sanitizeConfigForClient(props.config);\n\n  if (!collectionSlug) {\n    return <DashboardView config={clientConfig} />;\n  }\n\n  if (collectionSlug === \"globals\") {\n    if (!documentId) {\n      return <GlobalsListView config={clientConfig} />;\n    }\n    // Validate the route param against the registered globals first — the\n    // found config's `slug` carries the narrowed GlobalSlug type, so no cast\n    // of the raw URL segment is needed downstream.\n    const globalConfig = clientConfig.globals.find((g) => g.slug === documentId);\n    if (!globalConfig) {\n      return (\n        <div>\n          <p className=\"text-muted-foreground p-6\">Global &quot;{documentId}&quot; not found.</p>\n          <p>TODO: add not found view</p>\n        </div>\n      );\n    }\n    const global = await fetchQuery(\n      vexConvexApi.globals.get,\n      { slug: globalConfig.slug },\n      props.token ? { token: props.token } : undefined,\n    );\n    return <GlobalEditView global={globalConfig} initialData={global} />;\n  }\n\n  const collection = clientConfig.collections.find((c) => c.slug === collectionSlug);\n  const mediaCollection = clientConfig.mediaCollections.find((mc) => mc.slug === collectionSlug);\n\n  if (!collection && !mediaCollection) {\n    return (\n      <div>\n        <p className=\"text-muted-foreground p-6\">\n          Collection &quot;{collectionSlug}&quot; not found.\n        </p>\n        <p>TODO: add not found view</p>\n      </div>\n    );\n  }\n\n  if (mediaCollection && documentId) {\n    const initialData = await fetchQuery(\n      vexConvexApi.get,\n      {\n        id: documentId,\n        collection: mediaCollection.slug,\n      },\n      props.token ? { token: props.token } : undefined,\n    );\n    return (\n      <MediaCollectionEditView\n        collection={mediaCollection}\n        documentId={documentId}\n        initialData={initialData as VexMediaDocument | null}\n      />\n    );\n  }\n\n  if (mediaCollection) {\n    const numItems = Math.max(\n      mediaCollection.admin.table.serverPageSize,\n      mediaCollection.admin.table.defaultPageSize,\n    );\n    const initialData = await fetchQuery(\n      vexConvexApi.find,\n      {\n        collection: collectionSlug as CollectionSlug,\n        paginationOpts: {\n          numItems,\n          totalDocs: true,\n          cursor: null,\n        },\n      },\n      props.token ? { token: props.token } : undefined,\n    );\n    return (\n      <MediaCollectionListView\n        collection={mediaCollection}\n        initialData={initialData as PaginationResult<VexMediaDocument>}\n      />\n    );\n  }\n\n  if (collection && documentId) {\n    const initialData = await fetchQuery(\n      vexConvexApi.get,\n      {\n        id: documentId,\n        collection: collection.slug,\n      },\n      props.token ? { token: props.token } : undefined,\n    );\n    return (\n      <CollectionEditView\n        collection={collection}\n        documentId={documentId}\n        initialData={initialData}\n      />\n    );\n  }\n\n  if (!collection) {\n    throw new Error(\"invalid collection slug\");\n  }\n\n  const numItems = Math.max(\n    collection.admin.table.serverPageSize,\n    collection.admin.table.defaultPageSize,\n  );\n  const initialData = await fetchQuery(\n    vexConvexApi.findPaginated,\n    {\n      collection: collectionSlug as CollectionSlug,\n      depth: 1,\n      paginationOpts: {\n        cursor: null,\n        numItems,\n        totalDocs: true,\n      },\n    },\n    props.token ? { token: props.token } : undefined,\n  );\n  return <CollectionListView collection={collection} initialData={initialData} />;\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAkD7B,cAcD,YAdC;AAZX,eAAsB,cAAc,OAIjC;AACD,QAAM,EAAE,OAAO,CAAC,EAAE,IAAI,MAAM,MAAM;AAClC,QAAM,CAAC,gBAAgB,UAAU,IAAI;AAGrC,QAAM,eAAe,wBAAwB,MAAM,MAAM;AAEzD,MAAI,CAAC,gBAAgB;AACnB,WAAO,oBAAC,iBAAc,QAAQ,cAAc;AAAA,EAC9C;AAEA,MAAI,mBAAmB,WAAW;AAChC,QAAI,CAAC,YAAY;AACf,aAAO,oBAAC,mBAAgB,QAAQ,cAAc;AAAA,IAChD;AAIA,UAAM,eAAe,aAAa,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,UAAU;AAC3E,QAAI,CAAC,cAAc;AACjB,aACE,qBAAC,SACC;AAAA,6BAAC,OAAE,WAAU,6BAA4B;AAAA;AAAA,UAAc;AAAA,UAAW;AAAA,WAAiB;AAAA,QACnF,oBAAC,OAAE,sCAAwB;AAAA,SAC7B;AAAA,IAEJ;AACA,UAAM,SAAS,MAAM;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,EAAE,MAAM,aAAa,KAAK;AAAA,MAC1B,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI;AAAA,IACzC;AACA,WAAO,oBAAC,kBAAe,QAAQ,cAAc,aAAa,QAAQ;AAAA,EACpE;AAEA,QAAM,aAAa,aAAa,YAAY,KAAK,CAAC,MAAM,EAAE,SAAS,cAAc;AACjF,QAAM,kBAAkB,aAAa,iBAAiB,KAAK,CAAC,OAAO,GAAG,SAAS,cAAc;AAE7F,MAAI,CAAC,cAAc,CAAC,iBAAiB;AACnC,WACE,qBAAC,SACC;AAAA,2BAAC,OAAE,WAAU,6BAA4B;AAAA;AAAA,QACrB;AAAA,QAAe;AAAA,SACnC;AAAA,MACA,oBAAC,OAAE,sCAAwB;AAAA,OAC7B;AAAA,EAEJ;AAEA,MAAI,mBAAmB,YAAY;AACjC,UAAMA,eAAc,MAAM;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,gBAAgB;AAAA,MAC9B;AAAA,MACA,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI;AAAA,IACzC;AACA,WACE;AAAA,MAAC;AAAA;AAAA,QACC,YAAY;AAAA,QACZ;AAAA,QACA,aAAaA;AAAA;AAAA,IACf;AAAA,EAEJ;AAEA,MAAI,iBAAiB;AACnB,UAAMC,YAAW,KAAK;AAAA,MACpB,gBAAgB,MAAM,MAAM;AAAA,MAC5B,gBAAgB,MAAM,MAAM;AAAA,IAC9B;AACA,UAAMD,eAAc,MAAM;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,QACE,YAAY;AAAA,QACZ,gBAAgB;AAAA,UACd,UAAAC;AAAA,UACA,WAAW;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI;AAAA,IACzC;AACA,WACE;AAAA,MAAC;AAAA;AAAA,QACC,YAAY;AAAA,QACZ,aAAaD;AAAA;AAAA,IACf;AAAA,EAEJ;AAEA,MAAI,cAAc,YAAY;AAC5B,UAAMA,eAAc,MAAM;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,WAAW;AAAA,MACzB;AAAA,MACA,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI;AAAA,IACzC;AACA,WACE;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,aAAaA;AAAA;AAAA,IACf;AAAA,EAEJ;AAEA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,WAAW,MAAM,MAAM;AAAA,IACvB,WAAW,MAAM,MAAM;AAAA,EACzB;AACA,QAAM,cAAc,MAAM;AAAA,IACxB,aAAa;AAAA,IACb;AAAA,MACE,YAAY;AAAA,MACZ,OAAO;AAAA,MACP,gBAAgB;AAAA,QACd,QAAQ;AAAA,QACR;AAAA,QACA,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI;AAAA,EACzC;AACA,SAAO,oBAAC,sBAAmB,YAAwB,aAA0B;AAC/E;","names":["initialData","numItems"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/cache/createVexRevalidateRoute.d.ts

@@ -0,0 +1,88 @@
+import type { CollectionSlug, VexConfig, VexDocument, VexRevalidateResponse } from "@vexcms/core";
+import type { NextRequest } from "next/server";
+import { NextResponse } from "next/server";
+/** Props for {@link createVexRevalidateRoute}. */
+export interface CreateVexRevalidateRouteProps {
+    /**
+     * The resolved VexCMS config. Supplies `access` for the write-permission
+     * check and `routes.map` for target resolution.
+     */
+    config: VexConfig;
+    /**
+     * Resolves the authenticated user and active organization for the current
+     * request. Wire to `() => fetchAuthQuery(api.auth.api.getUserOrg, {})` — the
+     * same call the admin panel route already makes.
+     */
+    getAuth: () => Promise<{
+        organization?: Record<string, unknown>;
+        user: null | Record<string, unknown>;
+    }>;
+    /**
+     * Reads the caller's session token for the current request. Wire to the host
+     * app's `getToken` export (`convexBetterAuthNextJs`'s output, re-exported
+     * from e.g. `~/auth/server`). A falsy return means "no session".
+     */
+    getToken: () => Promise<null | string | undefined>;
+    /**
+     * Lists every document in a collection, for the collection-wide purge
+     * (`{ collection, all: true }`). Wire to a read through the app's own
+     * `publishedSlugs`-style query — the factory cannot know an app's generated
+     * Convex `api`, which is why this is injected like `getToken`/`getAuth`.
+     *
+     * Omit to leave the collection-wide branch unwired: it then purges nothing
+     * and reports that in `errors`, rather than silently succeeding.
+     */
+    listCollection?: (collection: CollectionSlug) => Promise<Partial<VexDocument>[]>;
+}
+/**
+ * Creates a Next.js route handler that purges the cached paths affected by a
+ * document write. The admin panel calls this via `useVexMutation` after every
+ * successful create/update/delete, same-origin, as a relative fetch — no URL
+ * config, no shared secret.
+ *
+ * **Session-authorized, not secret-authorized.** The caller is a signed-in
+ * admin, so this reuses `getToken`/`getAuth` exactly like the admin panel route
+ * does, rather than introducing an env var or a shared secret. There is no
+ * API-key fallback: a caller with no browser session cannot reach this route as
+ * designed.
+ *
+ * **Path-based, not tag-based.** `revalidatePath` is the only purge mechanism.
+ * `cacheComponents: true` — required for `cacheTag`/`revalidateTag` — is
+ * incompatible with the `dynamic`/`runtime` segment configs the auth and admin
+ * routes require (measured: 5 files fail to build with it enabled), so
+ * `revalidateTag` is not an option in this codebase. Do not "upgrade" this to
+ * tag-based revalidation without first removing that segment-config dependency
+ * everywhere.
+ *
+ * **Never fails the caller past authorization.** A missing session returns 401,
+ * a session without write permission 403, and an oversized `changes` batch 413
+ * — all three reject before any map work runs. Past that point the handler
+ * never throws or returns 5xx: an unconfigured map, a throwing map, or an
+ * individual `revalidatePath` failure all resolve to 200 with the failures
+ * reported in the body. A failed purge is a stale page; failing the endpoint
+ * would only teach the fire-and-forget caller to retry pointlessly.
+ *
+ * @param props - Config and the host app's auth accessors.
+ * @returns `{ POST }` — mount directly as the route module's named export.
+ *
+ * @example
+ * ```ts
+ * // app/api/vex/revalidate/route.ts
+ * import { api } from "@convex/_generated/api";
+ * import { createVexRevalidateRoute } from "@vexcms/next/cache";
+ * import { fetchAuthQuery, getToken } from "~/auth/server";
+ * import config from "~/vex.config";
+ *
+ * export const { POST } = createVexRevalidateRoute({
+ *   config,
+ *   getToken,
+ *   getAuth: () => fetchAuthQuery(api.auth.api.getUserOrg, {}),
+ * });
+ * ```
+ */
+export declare function createVexRevalidateRoute(props: CreateVexRevalidateRouteProps): {
+    POST: (request: NextRequest) => Promise<NextResponse<{
+        error: string;
+    } | VexRevalidateResponse>>;
+};
+//# sourceMappingURL=createVexRevalidateRoute.d.ts.map

package/dist/cache/createVexRevalidateRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createVexRevalidateRoute.d.ts","sourceRoot":"","sources":["../../src/cache/createVexRevalidateRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EAEd,SAAS,EACT,WAAW,EAIX,qBAAqB,EACtB,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,MAAM,EAAE,SAAS,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,CAAC,CAAC;IACH;;;;OAIG;IACH,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;CAClF;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG;IAC9E,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,qBAAqB,CAAC,CAAC,CAAC;CAClG,CA8GA"}

package/dist/cache/createVexServerClient.d.ts

@@ -0,0 +1,31 @@
+import type { VexServerClientOptions, VexServerClient } from "./types";
+/**
+ * Creates a server-only Convex read client safe to use in prerenderable
+ * Next.js routes.
+ *
+ * Wraps `ConvexHttpClient` from `convex/browser` instead of `convex/nextjs`'s
+ * `fetchQuery`, which hard-codes `client.setFetchOptions({ cache: "no-store" })`
+ * — the reason every route calling it builds dynamic (`ƒ`). This client never
+ * sets that option, so a route calling only `query()` can be prerendered and
+ * governed by the route's own `export const revalidate`.
+ *
+ * Every `query()` call is deduped via `React.cache` for the lifetime of one
+ * request: two identical `(query, args)` calls — e.g. `generateMetadata` and
+ * its page both reading the same document — resolve from a single Convex round
+ * trip instead of two.
+ *
+ * `React.cache` is instantiated fresh inside every `createVexServerClient()`
+ * call, so that dedupe only holds across calls sharing the SAME client
+ * instance — two clients built in two different modules cannot share a round
+ * trip even when they read identical `(query, args)`. Each app therefore
+ * creates exactly one instance, exported from its own `src/lib/vex.ts`, and
+ * every route or component imports that shared `vex` rather than calling
+ * `createVexServerClient()` itself.
+ *
+ * @param props - Client configuration.
+ * @returns A {@link VexServerClient} whose `query` method is deduped per request.
+ * @throws {Error} When no `url` is given and `process.env.NEXT_PUBLIC_CONVEX_URL`
+ *   is unset.
+ */
+export declare function createVexServerClient(props?: VexServerClientOptions): VexServerClient;
+//# sourceMappingURL=createVexServerClient.d.ts.map

package/dist/cache/createVexServerClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createVexServerClient.d.ts","sourceRoot":"","sources":["../../src/cache/createVexServerClient.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,GAAE,sBAA2B,GAAG,eAAe,CA2BzF"}

package/dist/cache/index.d.ts

@@ -0,0 +1,5 @@
+export { createVexRevalidateRoute } from "./createVexRevalidateRoute";
+export type { CreateVexRevalidateRouteProps } from "./createVexRevalidateRoute";
+export { createVexServerClient } from "./createVexServerClient";
+export type { VexServerClientOptions, VexServerClient, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,YAAY,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAOhE,YAAY,EACV,sBAAsB,EACtB,eAAe,GAChB,MAAM,SAAS,CAAC"}

package/dist/cache/index.js

@@ -0,0 +1,9 @@
+import {
+  createVexRevalidateRoute,
+  createVexServerClient
+} from "../chunk-5AGM3PEX.js";
+export {
+  createVexRevalidateRoute,
+  createVexServerClient
+};
+//# sourceMappingURL=index.js.map

package/dist/cache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/cache/types.d.ts

@@ -0,0 +1,36 @@
+import type { FunctionReference, FunctionReturnType, OptionalRestArgs } from "convex/server";
+/**
+ * Construction options for {@link createVexServerClient}.
+ *
+ * Nothing here configures caching — the client's only cache behaviour is that
+ * it never sets `cache: "no-store"` and dedupes per request via `React.cache`.
+ * Cache *policy* lives where Next requires it: `export const revalidate` in
+ * each route.
+ */
+export interface VexServerClientOptions {
+    /**
+     * Skip Convex's deployment URL format check — for self-hosted backends whose
+     * URL does not match `https://<name>.convex.cloud`.
+     */
+    skipConvexDeploymentUrlCheck?: boolean;
+    /** Convex deployment URL. Defaults to `process.env.NEXT_PUBLIC_CONVEX_URL`. */
+    url?: string;
+}
+/**
+ * Server-only Convex read client returned by {@link createVexServerClient}.
+ *
+ * Exposes only `query` — this client is for prerenderable read paths, and it
+ * never sets `cache: "no-store"`, unlike `convex/nextjs`'s `fetchQuery`.
+ */
+export interface VexServerClient {
+    /**
+     * Runs a Convex query, deduped via `React.cache` for the lifetime of one
+     * request when called again with the same function reference and args.
+     *
+     * @param query - The Convex query function reference to call.
+     * @param args - Arguments for `query`, per Convex's `OptionalRestArgs`.
+     * @returns The query's resolved return value.
+     */
+    query<Query extends FunctionReference<"query">>(query: Query, ...args: OptionalRestArgs<Query>): Promise<FunctionReturnType<Query>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cache/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cache/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7F;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,SAAS,iBAAiB,CAAC,OAAO,CAAC,EAC5C,KAAK,EAAE,KAAK,EACZ,GAAG,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAC/B,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;CACvC"}

package/dist/chunk-5AGM3PEX.js

@@ -0,0 +1,121 @@
+// src/cache/createVexRevalidateRoute.ts
+import { hasPermission, resolveTargets, VEX_REVALIDATE_BATCH_SIZE } from "@vexcms/core";
+import { revalidatePath } from "next/cache";
+import { NextResponse } from "next/server";
+function toCrudAction(operation) {
+  if (operation === "remove") return "delete";
+  if (operation === "upsert") return "update";
+  return operation;
+}
+function createVexRevalidateRoute(props) {
+  return {
+    async POST(request) {
+      const token = await props.getToken();
+      if (token === null || token === void 0 || token === "") {
+        return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+      }
+      let body;
+      try {
+        body = await request.json();
+      } catch {
+        return NextResponse.json({ error: "Bad Request" }, { status: 400 });
+      }
+      const { organization, user } = await props.getAuth();
+      const operation = "all" in body ? "update" : body.operation;
+      const action = toCrudAction(operation);
+      const allowed = hasPermission({
+        access: props.config.access,
+        action,
+        organization,
+        resource: body.collection,
+        user
+      });
+      if (!allowed) {
+        return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+      }
+      const errors = [];
+      let changes;
+      if ("all" in body) {
+        if (props.listCollection === void 0) {
+          errors.push(
+            new Error(
+              "createVexRevalidateRoute: a collection-wide purge was requested but `listCollection` is not wired"
+            )
+          );
+          changes = [];
+        } else {
+          try {
+            const docs = await props.listCollection(body.collection);
+            changes = docs.map((doc) => ({ after: doc }));
+          } catch (error) {
+            errors.push(error);
+            changes = [];
+          }
+        }
+      } else {
+        changes = body.changes;
+        if (changes.length > VEX_REVALIDATE_BATCH_SIZE) {
+          return NextResponse.json(
+            {
+              error: `Cannot revalidate more than ${VEX_REVALIDATE_BATCH_SIZE} changes in a single request`
+            },
+            { status: 413 }
+          );
+        }
+      }
+      const routesConfig = props.config.routes;
+      if (routesConfig === void 0) {
+        return NextResponse.json({ errors, revalidated: [] }, { status: 200 });
+      }
+      const pool = [];
+      for (const change of changes) {
+        const target = resolveTargets({
+          after: change.after,
+          before: change.before,
+          collection: body.collection,
+          map: routesConfig.map,
+          operation: action
+        });
+        pool.push(...target.paths);
+        errors.push(...target.errors);
+      }
+      const revalidated = [];
+      for (const path of new Set(pool)) {
+        try {
+          revalidatePath(path);
+          revalidated.push(path);
+        } catch (error) {
+          errors.push(error);
+        }
+      }
+      return NextResponse.json({ errors, revalidated }, { status: 200 });
+    }
+  };
+}
+
+// src/cache/createVexServerClient.ts
+import { ConvexHttpClient } from "convex/browser";
+import { cache } from "react";
+function createVexServerClient(props = {}) {
+  const url = props.url ?? process.env.NEXT_PUBLIC_CONVEX_URL;
+  if (url === void 0 || url === "") {
+    throw new Error(
+      "createVexServerClient: no Convex deployment URL. Pass `url`, or set NEXT_PUBLIC_CONVEX_URL."
+    );
+  }
+  const client = new ConvexHttpClient(url, {
+    skipConvexDeploymentUrlCheck: props.skipConvexDeploymentUrlCheck
+  });
+  const cachedQuery = cache(
+    async (query, args) => client.query(query, args)
+  );
+  return {
+    query: async (query, ...args) => cachedQuery(query, args[0] ?? {})
+  };
+}
+
+export {
+  createVexRevalidateRoute,
+  createVexServerClient
+};
+//# sourceMappingURL=chunk-5AGM3PEX.js.map