camox 0.72.0 → 0.74.1

package/dist/features/preview/components/PageInfo.js

@@ -16,6 +16,7 @@ import { useRendererAnswer } from "../../renderer/RendererFrames.js";
 import { PageLocationFieldset } from "./PageLocationFieldset.js";
 import { PageNicknameField } from "./PageNicknameField.js";
 import { pageImageUrl } from "../../og/pageImage.js";
+import { ContentFindings, useContentFindings } from "../../studio/components/ContentFindings.js";
 import { ShikiMarkdown } from "./ShikiMarkdown.js";
 import { c } from "react/compiler-runtime";
 import * as React from "react";
@@ -1094,7 +1095,7 @@ const PageSeoContent = (t0) => {
 	return t1;
 };
 const PageSeoEditor = (t0) => {
-	const $ = c(41);
+	const $ = c(46);
 	const { page, metaTitle } = t0;
 	let t1;
 	if ($[0] === Symbol.for("react.memo_cache_sentinel")) {
@@ -1104,149 +1105,171 @@ const PageSeoEditor = (t0) => {
 	const setSeo = useMutation(t1);
 	const localized = useLocalizedPath();
 	let t2;
-	if ($[1] !== page.id || $[2] !== setSeo) {
-		t2 = (checked) => {
+	if ($[1] !== page.id) {
+		t2 = {
+			entity: "page",
+			id: page.id
+		};
+		$[1] = page.id;
+		$[2] = t2;
+	} else t2 = $[2];
+	const findings = useContentFindings(t2);
+	let t3;
+	if ($[3] !== page.id || $[4] !== setSeo) {
+		t3 = (checked) => {
 			setSeo.mutate({
 				id: page.id,
 				aiSeo: checked
 			});
 		};
-		$[1] = page.id;
-		$[2] = setSeo;
-		$[3] = t2;
-	} else t2 = $[3];
-	let t3;
-	if ($[4] !== page.aiSeo || $[5] !== t2) {
-		t3 = /* @__PURE__ */ jsx(Switch, {
+		$[3] = page.id;
+		$[4] = setSeo;
+		$[5] = t3;
+	} else t3 = $[5];
+	let t4;
+	if ($[6] !== page.aiSeo || $[7] !== t3) {
+		t4 = /* @__PURE__ */ jsx(Switch, {
 			id: "ai-seo",
 			checked: page.aiSeo,
-			onCheckedChange: t2
+			onCheckedChange: t3
 		});
-		$[4] = page.aiSeo;
-		$[5] = t2;
-		$[6] = t3;
-	} else t3 = $[6];
-	let t4;
-	if ($[7] === Symbol.for("react.memo_cache_sentinel")) {
-		t4 = /* @__PURE__ */ jsx(Label, {
+		$[6] = page.aiSeo;
+		$[7] = t3;
+		$[8] = t4;
+	} else t4 = $[8];
+	let t5;
+	if ($[9] === Symbol.for("react.memo_cache_sentinel")) {
+		t5 = /* @__PURE__ */ jsx(Label, {
 			htmlFor: "ai-seo",
 			children: "AI metadata"
 		});
-		$[7] = t4;
-	} else t4 = $[7];
-	let t5;
-	if ($[8] !== t3) {
-		t5 = /* @__PURE__ */ jsxs("div", {
-			className: "flex items-center gap-2",
-			children: [t3, t4]
-		});
-		$[8] = t3;
 		$[9] = t5;
 	} else t5 = $[9];
-	const t6 = page.metaTitle ?? "";
-	let t7;
-	if ($[10] !== page.id || $[11] !== setSeo) {
-		t7 = (value) => setSeo.mutate({
+	let t6;
+	if ($[10] !== t4) {
+		t6 = /* @__PURE__ */ jsxs("div", {
+			className: "flex items-center gap-2",
+			children: [t4, t5]
+		});
+		$[10] = t4;
+		$[11] = t6;
+	} else t6 = $[11];
+	const t7 = page.metaTitle ?? "";
+	let t8;
+	if ($[12] !== page.id || $[13] !== setSeo) {
+		t8 = (value) => setSeo.mutate({
 			id: page.id,
 			metaTitle: value
 		});
-		$[10] = page.id;
-		$[11] = setSeo;
-		$[12] = t7;
-	} else t7 = $[12];
-	let t8;
-	if ($[13] !== page.aiSeo || $[14] !== t6 || $[15] !== t7) {
-		t8 = /* @__PURE__ */ jsx(DebouncedFieldEditor, {
+		$[12] = page.id;
+		$[13] = setSeo;
+		$[14] = t8;
+	} else t8 = $[14];
+	let t9;
+	if ($[15] !== page.aiSeo || $[16] !== t7 || $[17] !== t8) {
+		t9 = /* @__PURE__ */ jsx(DebouncedFieldEditor, {
 			label: "Page title",
 			placeholder: "Page title...",
-			initialValue: t6,
+			initialValue: t7,
 			disabled: page.aiSeo,
-			onSave: t7
+			onSave: t8
 		});
-		$[13] = page.aiSeo;
-		$[14] = t6;
-		$[15] = t7;
-		$[16] = t8;
-	} else t8 = $[16];
-	const t9 = page.metaDescription ?? "";
+		$[15] = page.aiSeo;
+		$[16] = t7;
+		$[17] = t8;
+		$[18] = t9;
+	} else t9 = $[18];
 	let t10;
-	if ($[17] !== page.id || $[18] !== setSeo) {
-		t10 = (value_0) => setSeo.mutate({
+	if ($[19] !== findings) {
+		t10 = /* @__PURE__ */ jsx(ContentFindings, {
+			view: findings,
+			field: "metaTitle",
+			className: "space-y-2"
+		});
+		$[19] = findings;
+		$[20] = t10;
+	} else t10 = $[20];
+	const t11 = page.metaDescription ?? "";
+	let t12;
+	if ($[21] !== page.id || $[22] !== setSeo) {
+		t12 = (value_0) => setSeo.mutate({
 			id: page.id,
 			metaDescription: value_0
 		});
-		$[17] = page.id;
-		$[18] = setSeo;
-		$[19] = t10;
-	} else t10 = $[19];
-	let t11;
-	if ($[20] !== page.aiSeo || $[21] !== t10 || $[22] !== t9) {
-		t11 = /* @__PURE__ */ jsx(DebouncedFieldEditor, {
+		$[21] = page.id;
+		$[22] = setSeo;
+		$[23] = t12;
+	} else t12 = $[23];
+	let t13;
+	if ($[24] !== page.aiSeo || $[25] !== t11 || $[26] !== t12) {
+		t13 = /* @__PURE__ */ jsx(DebouncedFieldEditor, {
 			label: "Page description",
 			placeholder: "Page description...",
-			initialValue: t9,
+			initialValue: t11,
 			disabled: page.aiSeo,
 			rows: 2,
-			onSave: t10
+			onSave: t12
 		});
-		$[20] = page.aiSeo;
-		$[21] = t10;
-		$[22] = t9;
-		$[23] = t11;
-	} else t11 = $[23];
-	let t12;
-	if ($[24] !== localized || $[25] !== page.fullPath) {
-		t12 = localized(page.fullPath);
-		$[24] = localized;
-		$[25] = page.fullPath;
+		$[24] = page.aiSeo;
+		$[25] = t11;
 		$[26] = t12;
-	} else t12 = $[26];
-	const t13 = page.metaDescription ?? "";
+		$[27] = t13;
+	} else t13 = $[27];
 	let t14;
-	if ($[27] !== metaTitle || $[28] !== t12 || $[29] !== t13) {
-		t14 = /* @__PURE__ */ jsx(SearchEnginePreview, {
-			path: t12,
-			metaTitle,
-			metaDescription: t13
-		});
-		$[27] = metaTitle;
-		$[28] = t12;
-		$[29] = t13;
+	if ($[28] !== localized || $[29] !== page.fullPath) {
+		t14 = localized(page.fullPath);
+		$[28] = localized;
+		$[29] = page.fullPath;
 		$[30] = t14;
 	} else t14 = $[30];
 	const t15 = page.metaDescription ?? "";
 	let t16;
-	if ($[31] !== metaTitle || $[32] !== page || $[33] !== t15) {
-		t16 = /* @__PURE__ */ jsx(SocialPreviewSection, {
-			page,
+	if ($[31] !== metaTitle || $[32] !== t14 || $[33] !== t15) {
+		t16 = /* @__PURE__ */ jsx(SearchEnginePreview, {
+			path: t14,
 			metaTitle,
 			metaDescription: t15
 		});
 		$[31] = metaTitle;
-		$[32] = page;
+		$[32] = t14;
 		$[33] = t15;
 		$[34] = t16;
 	} else t16 = $[34];
-	let t17;
-	if ($[35] !== t11 || $[36] !== t14 || $[37] !== t16 || $[38] !== t5 || $[39] !== t8) {
-		t17 = /* @__PURE__ */ jsxs("div", {
+	const t17 = page.metaDescription ?? "";
+	let t18;
+	if ($[35] !== metaTitle || $[36] !== page || $[37] !== t17) {
+		t18 = /* @__PURE__ */ jsx(SocialPreviewSection, {
+			page,
+			metaTitle,
+			metaDescription: t17
+		});
+		$[35] = metaTitle;
+		$[36] = page;
+		$[37] = t17;
+		$[38] = t18;
+	} else t18 = $[38];
+	let t19;
+	if ($[39] !== t10 || $[40] !== t13 || $[41] !== t16 || $[42] !== t18 || $[43] !== t6 || $[44] !== t9) {
+		t19 = /* @__PURE__ */ jsxs("div", {
 			className: "space-y-4",
 			children: [
-				t5,
-				t8,
-				t11,
-				t14,
-				t16
+				t6,
+				t9,
+				t10,
+				t13,
+				t16,
+				t18
 			]
 		});
-		$[35] = t11;
-		$[36] = t14;
-		$[37] = t16;
-		$[38] = t5;
-		$[39] = t8;
-		$[40] = t17;
-	} else t17 = $[40];
-	return t17;
+		$[39] = t10;
+		$[40] = t13;
+		$[41] = t16;
+		$[42] = t18;
+		$[43] = t6;
+		$[44] = t9;
+		$[45] = t19;
+	} else t19 = $[45];
+	return t19;
 };
 const PageMarkdownSheet = (t0) => {
 	const $ = c(8);

package/dist/features/preview/components/SelectionEditor.js

@@ -10,8 +10,8 @@ import { useEditingFrame } from "../editingFrame.js";
 import { SelectionViewCount, SidebarStackHeader, SidebarStackView } from "./SidebarStack.js";
 import { PreviewEditingOwnerContext } from "../previewSelection.js";
 import { entityName } from "../entityName.js";
-import { fieldTypesDictionary } from "../../../core/lib/fieldTypes.js";
 import { ContentFindings, findingsHint, useContentFindings } from "../../studio/components/ContentFindings.js";
+import { fieldTypesDictionary } from "../../../core/lib/fieldTypes.js";
 import { usePageRecordPlacer } from "../pageRecord.js";
 import { contentFieldNames, contentFieldSchema } from "./contentFieldSchema.js";
 import { useRepeatableItemActions } from "./useRepeatableItemActions.js";

package/dist/features/routes/pageRuntime.js

@@ -157,13 +157,24 @@ function createServerStudioCache(queryClient, { apiUrl, authCookieHeader, lookTo
 }
 /**
 * The locales of the scope a request reads: the URL's draft's for a session naming one, else
-* Live's. A draft the API refuses reads Live's, as the request's other reads then do.
+* Live's. A draft the API refuses reads Live's, as the request's other reads then do. Live's read
+* keeps the session: a member's studio routes the locales Live doesn't serve yet, which visitors
+* never see (ADR 0043), and a render with a session is private.
 */
 async function readScopeLocales({ apiUrl, authCookieHeader, draftId, projectUuid }) {
-	const { value } = await readDraftOrLive(draftId, !!authCookieHeader, (readDraftId) => createServerApiClient(apiUrl, {
-		authCookieHeader: readDraftId ? authCookieHeader : void 0,
+	const list = (session, readDraftId) => createServerApiClient(apiUrl, {
+		authCookieHeader: session,
 		draftId: readDraftId
-	}).locales.list({ projectUuid }));
+	}).locales.list({ projectUuid });
+	const { value } = await readDraftOrLive(draftId, !!authCookieHeader, async (readDraftId) => {
+		if (readDraftId || !authCookieHeader) return list(authCookieHeader, readDraftId);
+		try {
+			return await list(authCookieHeader, void 0);
+		} catch (error) {
+			if (!isAuthSessionError(error)) throw error;
+			return list(void 0, void 0);
+		}
+	});
 	return value;
 }
 /**

package/dist/features/runtime/ClaimCard.js

@@ -0,0 +1,192 @@
+import { useOptionalDraftScope } from "../../lib/draft-scope.js";
+import { useAuthContext, useSignInRedirect } from "../../lib/auth.js";
+import { getApiClient } from "../../lib/api-client.js";
+import { c } from "react/compiler-runtime";
+import * as React from "react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { CLAIM_LINK_SEARCH_PARAM } from "@camox/api-contract/claim-links";
+
+//#region src/features/runtime/ClaimCard.tsx
+/** The page's URL without the Claim Link's token, which would reopen the card. */
+function pageWithoutToken() {
+	const url = new URL(window.location.href);
+	url.searchParams.delete(CLAIM_LINK_SEARCH_PARAM);
+	return url.href;
+}
+/**
+* The claim card, on a page opened from a Claim Link: who built the website for whom, with a
+* button to claim it, or why it can't be claimed. A member of the website's organization sees it
+* as a preview. Nothing shows without a token, or in a draft.
+*/
+function ClaimCard() {
+	const $ = c(15);
+	const [token, setToken] = React.useState(null);
+	const [opening, setOpening] = React.useState(null);
+	const [closed, setClosed] = React.useState(false);
+	const { authenticationUrl } = useAuthContext();
+	const signIn = useSignInRedirect(pageWithoutToken);
+	const inDraft = useOptionalDraftScope().draftId !== null;
+	let t0;
+	let t1;
+	if ($[0] !== inDraft) {
+		t0 = () => {
+			if (inDraft) return;
+			const found = new URL(window.location.href).searchParams.get(CLAIM_LINK_SEARCH_PARAM);
+			if (!found) return;
+			setToken(found);
+			let current = true;
+			getApiClient().claimLinks.open({ token: found }).then((opened) => current && setOpening(opened), _temp);
+			return () => {
+				current = false;
+			};
+		};
+		t1 = [inDraft];
+		$[0] = inDraft;
+		$[1] = t0;
+		$[2] = t1;
+	} else {
+		t0 = $[1];
+		t1 = $[2];
+	}
+	React.useEffect(t0, t1);
+	if (inDraft || !token || !opening || closed) return null;
+	let t2;
+	if ($[3] === Symbol.for("react.memo_cache_sentinel")) {
+		t2 = () => {
+			window.history.replaceState(window.history.state, "", pageWithoutToken());
+			setClosed(true);
+		};
+		$[3] = t2;
+	} else t2 = $[3];
+	const close = t2;
+	let t3;
+	if ($[4] !== authenticationUrl || $[5] !== token) {
+		t3 = () => {
+			const destination = new URL("/claim", authenticationUrl);
+			destination.searchParams.set("token", token);
+			destination.searchParams.set("callback", pageWithoutToken());
+			window.location.href = destination.href;
+		};
+		$[4] = authenticationUrl;
+		$[5] = token;
+		$[6] = t3;
+	} else t3 = $[6];
+	const claim = t3;
+	let t4;
+	let t5;
+	if ($[7] === Symbol.for("react.memo_cache_sentinel")) {
+		t4 = /* @__PURE__ */ jsx("style", { children: claimCardStyles });
+		t5 = /* @__PURE__ */ jsx("button", {
+			type: "button",
+			className: "camox-claim-close",
+			"aria-label": "Close",
+			onClick: close,
+			children: "×"
+		});
+		$[7] = t4;
+		$[8] = t5;
+	} else {
+		t4 = $[7];
+		t5 = $[8];
+	}
+	let t6;
+	if ($[9] !== claim || $[10] !== opening.operatorName || $[11] !== opening.organizationName || $[12] !== opening.state || $[13] !== signIn) {
+		t6 = /* @__PURE__ */ jsxs("aside", {
+			className: "camox-claim-card",
+			"aria-label": "Claim this website",
+			children: [
+				t4,
+				t5,
+				opening.state === "open" || opening.state === "preview" ? /* @__PURE__ */ jsxs(Fragment, { children: [
+					opening.state === "preview" && /* @__PURE__ */ jsx("span", {
+						className: "camox-claim-preview",
+						children: "Preview: this is the card whoever you send the link to sees"
+					}),
+					/* @__PURE__ */ jsxs("p", { children: [
+						opening.operatorName,
+						" from Camox built this website for ",
+						opening.organizationName,
+						". Claim it to start editing."
+					] }),
+					opening.state === "open" && /* @__PURE__ */ jsx("button", {
+						type: "button",
+						className: "camox-claim-action",
+						onClick: claim,
+						children: "Claim website"
+					})
+				] }) : opening.state === "claimed" ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("p", { children: "This website has been claimed." }), /* @__PURE__ */ jsx("button", {
+					type: "button",
+					className: "camox-claim-action",
+					onClick: signIn,
+					children: "Sign in"
+				})] }) : /* @__PURE__ */ jsx("p", { children: "This link no longer works. Ask whoever sent it for a new one." })
+			]
+		});
+		$[9] = claim;
+		$[10] = opening.operatorName;
+		$[11] = opening.organizationName;
+		$[12] = opening.state;
+		$[13] = signIn;
+		$[14] = t6;
+	} else t6 = $[14];
+	return t6;
+}
+function _temp(error) {
+	return console.error("The Claim Link couldn't be opened", error);
+}
+const claimCardStyles = `
+  .camox-claim-card {
+    background: #09090b;
+    border: 1px solid #27272a;
+    border-radius: 12px;
+    bottom: 24px;
+    box-shadow: 0 10px 30px rgb(0 0 0 / 0.35);
+    box-sizing: border-box;
+    color: #fafafa;
+    color-scheme: dark;
+    display: flex;
+    flex-direction: column;
+    font: 15px/1.5 Inter, ui-sans-serif, system-ui, sans-serif;
+    gap: 12px;
+    max-width: min(24rem, calc(100vw - 32px));
+    padding: 20px 44px 20px 20px;
+    position: fixed;
+    right: 16px;
+    text-align: left;
+    z-index: 2147483647;
+  }
+  .camox-claim-card p { margin: 0; }
+  .camox-claim-card button { cursor: pointer; font: inherit; }
+  .camox-claim-card .camox-claim-close {
+    background: none;
+    border: 0;
+    color: #a1a1aa;
+    font-size: 20px;
+    line-height: 1;
+    padding: 4px 8px;
+    position: absolute;
+    right: 8px;
+    top: 8px;
+  }
+  .camox-claim-card .camox-claim-close:hover { color: #fafafa; }
+  .camox-claim-card .camox-claim-preview {
+    align-self: flex-start;
+    background: #27272a;
+    border-radius: 999px;
+    color: #d4d4d8;
+    font-size: 12px;
+    padding: 2px 10px;
+  }
+  .camox-claim-card .camox-claim-action {
+    align-self: flex-start;
+    background: #fafafa;
+    border: 0;
+    border-radius: 8px;
+    color: #09090b;
+    font-weight: 600;
+    padding: 8px 14px;
+  }
+`;
+
+//#endregion
+export { ClaimCard };

package/dist/features/runtime/pageApp.js

@@ -11,12 +11,13 @@ import { CuratedPageContent } from "../page/CuratedPageContent.js";
 import { DerivedPageContent } from "../page/DerivedPageContent.js";
 import { UnplacedBlockContent } from "../page/UnplacedBlockContent.js";
 import { UnplacedLayoutContent } from "../page/UnplacedLayoutContent.js";
+import { ClaimCard } from "./ClaimCard.js";
 import { EditingFallbackSlot } from "./editingFallback.js";
 import { PageNavigationProvider } from "./pageNavigation.js";
 import { RuntimeChromeSlot } from "./runtimeChromeLoader.js";
 import { c } from "react/compiler-runtime";
 import * as React from "react";
-import { jsx, jsxs } from "react/jsx-runtime";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { HydrationBoundary, QueryClientProvider } from "@tanstack/react-query";
 
 //#region src/features/runtime/pageApp.tsx
@@ -43,12 +44,12 @@ function PageApp(t0) {
 						camoxApp,
 						input: currentInput
 					})
-				}) : /* @__PURE__ */ jsx(PageExperience, {
+				}) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(PageExperience, {
 					camoxApp,
 					input: currentInput,
 					queryClient,
 					studioDocument: input.presentation === "studio"
-				})
+				}), /* @__PURE__ */ jsx(ClaimCard, {})] })
 			})
 		});
 		$[0] = camoxApp;

package/dist/features/runtime/runtime.js

@@ -918,6 +918,25 @@ function visitorAnalytics(render, project) {
 	if (render.studio || render.draftId) return void 0;
 	return configuredProviders(project.analytics);
 }
+/**
+* A project waiting to be claimed keeps search engines away from its pages, so the copy an
+* operator built doesn't compete with the customer's current website. APIs older than Claim Links
+* don't say, and their projects are indexed.
+*/
+function isHiddenFromSearchEngines(project) {
+	return project.hiddenFromSearchEngines === true;
+}
+/** A page's head, with the robots `noindex` meta tag when its project is hidden. */
+function withSearchEngineMark(head, project) {
+	if (!head || !isHiddenFromSearchEngines(project)) return head;
+	return {
+		...head,
+		meta: [...head.meta ?? [], {
+			name: "robots",
+			content: "noindex"
+		}]
+	};
+}
 /** Whether a request is a preview link's token handoff, which signs in before reading anything. */
 function isPreviewHandoff(request, options) {
 	const { searchParams } = new URL(request.url);
@@ -1247,13 +1266,14 @@ async function createPageHtmlResponse({ options, pathname, located, request, pag
 		if (result.shouldClearAuthCookie) headers.append("Set-Cookie", buildClearServerAuthCookieHeader());
 		const camoxApp = await options.getCamoxApp?.();
 		const document = await options.getDocument?.() ?? {};
+		if (isHiddenFromSearchEngines(result.data.page.project)) headers.set("X-Robots-Tag", "noindex");
 		const { alternates, head } = await readAlternates(request, options, {
 			located,
 			identity: {
 				kind: "curated",
 				pageId: result.data.page.page.id
 			},
-			head: camoxApp ? buildCamoxPageHead(camoxApp, result.data, located.locale) : {},
+			head: withSearchEngineMark(camoxApp ? buildCamoxPageHead(camoxApp, result.data, located.locale) : {}, result.data.page.project),
 			described: curatedPageDescription(camoxApp, result.data.page, located.locale),
 			localeReads: localeReads(result.draftId)
 		});
@@ -1559,14 +1579,14 @@ async function createDerivedResponse(options, pathname, located, request, { data
 				layout: match.layout,
 				recordId: record.data.id
 			} : { kind: "code-owned" },
-			head: buildPageHead({
+			head: withSearchEngineMark(buildPageHead({
 				layout: match.layout._internal,
 				context,
 				origin: new URL(request.url).origin,
 				faviconUrl: buildFaviconUrl(options.apiUrl, shared.project),
 				hasMarkdown: match.layout._internal.toMarkdown !== void 0,
 				recordType: record?.structuredData?.node?.["@type"]
-			}),
+			}), shared.project),
 			described: {
 				project: {
 					...shared.project,
@@ -1638,7 +1658,8 @@ async function createDerivedResponse(options, pathname, located, request, { data
 			Vary: "Cookie",
 			Link: llmsTxtLinkHeader(options),
 			...isPrivateRender(request) ? { "Cache-Control": "private, no-store" } : {},
-			...clearAuthCookie ? { "Set-Cookie": buildClearServerAuthCookieHeader() } : {}
+			...clearAuthCookie ? { "Set-Cookie": buildClearServerAuthCookieHeader() } : {},
+			...isHiddenFromSearchEngines(shared.project) && { "X-Robots-Tag": "noindex" }
 		} });
 	} catch (error) {
 		if (isNotFoundError(error)) return new Response("Page not found", { status: 404 });
@@ -1770,7 +1791,7 @@ async function createPageDataResponse({ options, pathname, located, request, pag
 				kind: "curated",
 				pageId: result.data.page.page.id
 			},
-			head: camoxApp ? buildCamoxPageHead(camoxApp, result.data, located.locale) : null,
+			head: withSearchEngineMark(camoxApp ? buildCamoxPageHead(camoxApp, result.data, located.locale) : null, result.data.page.project),
 			described: curatedPageDescription(camoxApp, result.data.page, located.locale),
 			localeReads: localeReads(result.draftId)
 		});

package/dist/features/runtime/worker.js

@@ -1,4 +1,4 @@
-import { PUBLIC_CACHE_NAME, fetchLocalhostOnLoopback, readLiveCacheKey, rememberPublishingDraft, respondThroughPublicCache, shouldHandleRequest, withDevHtml } from "camox/_internal/workerRuntime";
+import { PUBLIC_CACHE_NAME, fetchLocalhostOnLoopback, readLiveCacheKey, rememberPublishingDraft, respondThroughPublicCache, shouldHandleRequest, withDevHtml, withoutClaimLinkToken } from "camox/_internal/workerRuntime";
 import { WorkerEntrypoint } from "cloudflare:workers";
 import { devHtml, handleCamoxRequest, isPublicRequest, publicCacheSource, readDefinitionSet, runtimeBasePath } from "virtual:camox/server";
 
@@ -41,7 +41,7 @@ var CamoxDefinitionSet = class extends WorkerEntrypoint {
 var worker_default = { async fetch(request, env, context) {
 	rememberPublishingDraft(env);
 	if (!shouldHandleRequest(request, runtimeBasePath)) return notFound();
-	const response = await respond(request, context);
+	const response = await respond(withoutClaimLinkToken(request), context);
 	if (!response) return notFound();
 	return withDevHtml(response, devHtml);
 } };

package/dist/features/runtime/workerRequest.d.ts

@@ -1,5 +1,11 @@
 //#region src/features/runtime/workerRequest.d.ts
 export declare function shouldHandleRequest(request: Request, basePath: string): boolean;
+/**
+ * The request without a Claim Link's token, which only the claim card reads, in the browser. The
+ * page renders and is kept in the edge cache as if the visitor came without it, so the token
+ * never reaches the cache key or the rendered page.
+ */
+export declare function withoutClaimLinkToken(request: Request): Request;
 /** Adds what Vite injects into HTML in dev, such as its client and React Refresh. */
 export declare function withDevHtml(response: Response, html: {
   head: string;