emdash 0.39.0 → 0.40.0

package/src/transfer/staging/stage.ts

@@ -0,0 +1,231 @@
+/**
+ * Byte-level access to one operation's staging area.
+ */
+
+import type { DownloadResult, Storage } from "../../storage/types.js";
+import { TransferError, isTransferError } from "../errors.js";
+import { createHashingStream, createSha256 } from "../format/digest.js";
+import { stagingAuxKey, stagingKey, type StagingAuxFile } from "./keys.js";
+
+type FixedLengthStreamConstructor = new (
+	expectedLength: number | bigint,
+) => TransformStream<ArrayBufferView | ArrayBuffer, Uint8Array>;
+
+declare const FixedLengthStream: FixedLengthStreamConstructor | undefined;
+
+export interface ExpectedFile {
+	bytes: number;
+	/** Lowercase hex SHA-256. */
+	sha256: string;
+}
+
+export interface PutVerifiedOptions {
+	contentType?: string;
+	/**
+	 * Called before deleting the object after a failed upload; return true to
+	 * keep it (the path was already verified by another upload).
+	 */
+	keepExistingOnFailure?: () => Promise<boolean>;
+}
+
+const PACKAGE_CONTENT_TYPE = "application/octet-stream";
+
+function oversizeError(): TransferError {
+	return new TransferError("TRANSFER_FILE_SIZE_MISMATCH", "File is larger than declared");
+}
+
+function toStream(body: ReadableStream<Uint8Array> | Uint8Array): ReadableStream<Uint8Array> {
+	if (body instanceof Uint8Array) {
+		return new ReadableStream<Uint8Array>({
+			start(controller) {
+				if (body.byteLength > 0) controller.enqueue(body);
+				controller.close();
+			},
+		});
+	}
+	return body;
+}
+
+/**
+ * Stream `body` into `key`, hashing and counting as it goes. The object is
+ * kept only if exactly `expected.bytes` bytes with digest `expected.sha256`
+ * were written; otherwise it is deleted and `TRANSFER_FILE_SIZE_MISMATCH` or
+ * `TRANSFER_FILE_DIGEST_MISMATCH` is thrown. Where the runtime provides
+ * `FixedLengthStream` (workerd), the upload is wrapped in one so R2 receives
+ * a known length.
+ *
+ * Callers staging a package file must check its staged-files row first and
+ * refuse the upload when it is already `verified` and its object still
+ * matches, and must pass `keepExistingOnFailure` returning true once the row
+ * is verified: a failed retry or concurrent upload of the same path must not
+ * delete the object a successful upload stored. A failing upload that
+ * already overwrote the object can still leave bad bytes behind a verified
+ * row, so readers verify sizes and digests again when they read staged
+ * files, and a later upload of that path replaces the bad object.
+ */
+export async function putVerified(
+	storage: Storage,
+	key: string,
+	body: ReadableStream<Uint8Array> | Uint8Array,
+	expected: ExpectedFile,
+	options: PutVerifiedOptions = {},
+): Promise<void> {
+	const discard = async () => {
+		if (options.keepExistingOnFailure && (await options.keepExistingOnFailure())) return;
+		await storage.delete(key).catch(() => undefined);
+	};
+	if (!Number.isSafeInteger(expected.bytes) || expected.bytes < 0) {
+		throw new TransferError("TRANSFER_FILE_SIZE_MISMATCH", "Invalid declared size");
+	}
+	const hasher = await createSha256();
+	const hashing = createHashingStream(hasher, {
+		maxBytes: expected.bytes,
+		onLimitExceeded: oversizeError,
+	});
+	let stream = toStream(body).pipeThrough(hashing.stream);
+	if (typeof FixedLengthStream !== "undefined") {
+		stream = stream.pipeThrough(new FixedLengthStream(expected.bytes));
+	}
+
+	try {
+		await storage.upload({
+			key,
+			body: stream,
+			contentType: options.contentType ?? PACKAGE_CONTENT_TYPE,
+		});
+	} catch (error) {
+		await discard();
+		if (isTransferError(error)) throw error;
+		const cause = findTransferError(error);
+		if (cause) throw cause;
+		if (hashing.bytes() !== expected.bytes) {
+			throw new TransferError("TRANSFER_FILE_SIZE_MISMATCH", "File size does not match", {
+				cause: error,
+			});
+		}
+		throw new TransferError("TRANSFER_STORAGE_ERROR", "Failed to store file", { cause: error });
+	}
+
+	const digest = await hasher.digest();
+	if (hashing.bytes() !== expected.bytes) {
+		await discard();
+		throw new TransferError("TRANSFER_FILE_SIZE_MISMATCH", "File size does not match", {
+			detail: { expected: expected.bytes, actual: hashing.bytes() },
+		});
+	}
+	if (digest !== expected.sha256) {
+		await discard();
+		throw new TransferError("TRANSFER_FILE_DIGEST_MISMATCH", "File digest does not match");
+	}
+}
+
+function findTransferError(error: unknown): TransferError | null {
+	let current: unknown = error;
+	for (let depth = 0; depth < 5 && current instanceof Error; depth++) {
+		if (current instanceof TransferError) return current;
+		current = current.cause;
+	}
+	return null;
+}
+
+/** Read a whole stream, failing once it exceeds `maxBytes`. */
+export async function readStreamBytes(
+	stream: ReadableStream<Uint8Array>,
+	maxBytes: number,
+): Promise<Uint8Array> {
+	const reader = stream.getReader();
+	const parts: Uint8Array[] = [];
+	let total = 0;
+	try {
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			total += value.byteLength;
+			if (total > maxBytes) {
+				throw new TransferError("TRANSFER_LIMIT_EXCEEDED", "File exceeds its size limit", {
+					detail: { limit: maxBytes },
+				});
+			}
+			parts.push(value);
+		}
+	} catch (error) {
+		await reader.cancel().catch(() => undefined);
+		throw error;
+	} finally {
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(total);
+	let offset = 0;
+	for (const part of parts) {
+		bytes.set(part, offset);
+		offset += part.byteLength;
+	}
+	return bytes;
+}
+
+/** One operation's staging area in `storage` under `prefix` (see keys.ts). */
+export class TransferStage {
+	constructor(
+		readonly storage: Storage,
+		readonly prefix: string,
+	) {}
+
+	keyFor(path: string): string {
+		return stagingKey(this.prefix, path);
+	}
+
+	async putVerified(
+		path: string,
+		body: ReadableStream<Uint8Array> | Uint8Array,
+		bytes: number,
+		sha256: string,
+		options: PutVerifiedOptions = {},
+	): Promise<void> {
+		await putVerified(this.storage, this.keyFor(path), body, { bytes, sha256 }, options);
+	}
+
+	async exists(path: string): Promise<boolean> {
+		return this.storage.exists(this.keyFor(path));
+	}
+
+	async open(path: string): Promise<DownloadResult> {
+		try {
+			return await this.storage.download(this.keyFor(path));
+		} catch (error) {
+			throw new TransferError("TRANSFER_FILE_MISSING", "Staged file is missing", {
+				detail: { path },
+				cause: error,
+			});
+		}
+	}
+
+	async readBytes(path: string, maxBytes: number): Promise<Uint8Array> {
+		const file = await this.open(path);
+		return readStreamBytes(file.body, maxBytes);
+	}
+
+	async putAux(file: StagingAuxFile, content: string): Promise<void> {
+		await this.storage.upload({
+			key: stagingAuxKey(this.prefix, file),
+			body: new TextEncoder().encode(content),
+			contentType: "application/json",
+		});
+	}
+
+	async readAux(file: StagingAuxFile, maxBytes: number): Promise<string | null> {
+		const key = stagingAuxKey(this.prefix, file);
+		if (!(await this.storage.exists(key))) return null;
+		const download = await this.storage.download(key);
+		return new TextDecoder().decode(await readStreamBytes(download.body, maxBytes));
+	}
+
+	/**
+	 * Delete up to `limit` staged objects. Returns the number deleted; call
+	 * again until it returns 0.
+	 */
+	async deleteSome(limit = 100): Promise<number> {
+		const listing = await this.storage.list({ prefix: this.prefix, limit });
+		for (const file of listing.files) await this.storage.delete(file.key);
+		return listing.files.length;
+	}
+}

package/src/ui.ts

@@ -24,6 +24,16 @@
  * ```astro
  * <PortableText value={content} components={{ type: { image: MyImage } }} />
  * ```
+ *
+ * Render a blocks field with a component map:
+ *
+ * ```astro
+ * ---
+ * import { Blocks } from "emdash/ui";
+ * import Hero from "./Hero.astro";
+ * ---
+ * <Blocks value={page.data.layout} components={{ hero: Hero }} />
+ * ```
  */
 
 // Re-export types and utilities from astro-portabletext
@@ -49,6 +59,8 @@ export {
 	EmDashMedia as Media,
 	// Main component (wrapper with EmDash defaults)
 	PortableText,
+	Blocks,
+	defineBlockComponents,
 	// Block style override (paragraph/heading/blockquote — emits
 	// `has-text-align-*` class when the block carries `textAlign`).
 	// Shares the name with the `type Block` re-export above; the
@@ -78,6 +90,13 @@ export {
 	EmDashBodyEnd,
 } from "./components/index.js";
 
+export type {
+	BlockComponent,
+	BlockComponentProps,
+	BlockComponents,
+	BlockValue,
+} from "./components/index.js";
+
 /**
  * @deprecated Import from `emdash/ui/comments` instead. Barrel re-exports pull
  * comment CSS into every page that imports `emdash/ui` (#2039). Will be removed in 1.0.

package/src/visual-editing/toolbar.ts

@@ -14,6 +14,8 @@ interface ToolbarConfig {
 	isPreview: boolean;
 	actionToken?: string;
 	labels: ToolbarLabels;
+	/** Hide the pill but keep inline editing, for pages that show their own bar. */
+	hidden?: boolean;
 }
 
 export interface ToolbarLabels {
@@ -38,12 +40,12 @@ function inlineScriptJson(value: unknown): string {
 }
 
 export function renderToolbar(config: ToolbarConfig): string {
-	const { editMode, isPreview, actionToken = "", labels } = config;
+	const { editMode, isPreview, actionToken = "", labels, hidden = false } = config;
 	const recoveryBadge = `<span class="emdash-tb-badge emdash-tb-badge--error">${escapeHtml(labels.sessionExpired)}</span>`;
 
 	return `
 <!-- EmDash Visual Editing Toolbar -->
-<div id="emdash-toolbar" data-edit-mode="${editMode}" data-preview="${isPreview}">
+<div id="emdash-toolbar" data-edit-mode="${editMode}" data-preview="${isPreview}"${hidden ? " hidden" : ""}>
   <div class="emdash-tb-inner">
     <span class="emdash-tb-logo">EmDash</span>
 
@@ -841,7 +843,8 @@ export function renderToolbar(config: ToolbarConfig): string {
     fetchManifest();
   }
 
-  // Save a single field value
+  // Save a single field value. Never rejects: resolves to whether the save
+  // succeeded, after the save badge already shows the outcome.
   function saveField(collection, id, field, value) {
     setSaveState("saving");
     return ecFetch("/_emdash/api/content/" + encodeURIComponent(collection) + "/" + encodeURIComponent(id), {
@@ -855,14 +858,16 @@ export function renderToolbar(config: ToolbarConfig): string {
         setSaveState("saved");
         // A save creates/updates a draft — show unpublished changes
         showUnpublishedChanges(collection, id);
-      } else {
-        setSaveState("error");
-        console.error("Save failed:", res.status);
+        return true;
       }
+      setSaveState("error");
+      console.error("Save failed:", res.status);
+      return false;
     })
     .catch(function(err) {
       setSaveState("error");
       console.error("Save failed:", err);
+      return false;
     });
   }
 
@@ -877,12 +882,36 @@ export function renderToolbar(config: ToolbarConfig): string {
   // Plain text inline editing (contenteditable)
   var currentlyEditing = null;
 
-  function startTextEdit(element, annotation) {
+  // Browsers add line breaks while editing as <br> or <div> elements (Shift+Enter,
+  // pasted lines), which textContent drops.
+  function editableText(element) {
+    var text = "";
+    (function walk(node) {
+      for (var child = node.firstChild; child; child = child.nextSibling) {
+        if (child.nodeType === Node.TEXT_NODE) {
+          text += child.data;
+        } else if (child.nodeName === "BR") {
+          text += "\\n";
+        } else {
+          if (child.nodeName === "DIV" && text && text.slice(-1) !== "\\n") text += "\\n";
+          walk(child);
+        }
+      }
+    })(element);
+    return text;
+  }
+
+  function startTextEdit(element, annotation, multiline) {
     if (currentlyEditing === element) return;
     if (currentlyEditing) endCurrentEdit();
 
+    // Line breaks only belong in multi-line fields.
+    function readText() {
+      return multiline ? editableText(element) : element.textContent || "";
+    }
+
     currentlyEditing = element;
-    var originalText = element.textContent || "";
+    var originalText = readText();
 
     element.setAttribute("data-emdash-editing", "");
     element.contentEditable = "plaintext-only";
@@ -897,7 +926,7 @@ export function renderToolbar(config: ToolbarConfig): string {
 
     // Track dirty state via input events
     function handleInput() {
-      var current = (element.textContent || "").trim();
+      var current = readText().trim();
       if (current !== originalText.trim()) {
         setSaveState("unsaved");
       } else {
@@ -913,7 +942,7 @@ export function renderToolbar(config: ToolbarConfig): string {
       element.removeAttribute("data-emdash-editing");
       currentlyEditing = null;
 
-      var newValue = (element.textContent || "").trim();
+      var newValue = readText().trim();
       if (newValue !== originalText.trim()) {
         pendingSavePromise = saveField(annotation.collection, annotation.id, annotation.field, newValue).then(function() {
           pendingSavePromise = null;
@@ -948,6 +977,34 @@ export function renderToolbar(config: ToolbarConfig): string {
     }
   }
 
+  // Text fields are often rendered transformed (Markdown to HTML, truncated
+  // excerpts). Saving the page text over the stored value would lose content,
+  // so they are edited in place only when the page shows the stored text.
+  function startTextEditIfShownAsStored(element, annotation) {
+    // Rendered markup means the text was transformed. Open the admin before the
+    // lookup, while the click still lets popup blockers allow window.open().
+    if (element.children.length > 0) {
+      openAdmin(annotation);
+      return;
+    }
+    ecFetch("/_emdash/api/content/" + encodeURIComponent(annotation.collection) + "/" + encodeURIComponent(annotation.id), {
+      credentials: "same-origin"
+    })
+    .then(function(r) { return r.json(); })
+    .then(function(body) {
+      var item = body && body.data && body.data.item;
+      var stored = item && item.data ? item.data[annotation.field] : null;
+      if (typeof stored === "string" && stored.trim() === (element.textContent || "").trim()) {
+        startTextEdit(element, annotation, true);
+      } else {
+        openAdmin(annotation);
+      }
+    })
+    .catch(function() {
+      openAdmin(annotation);
+    });
+  }
+
   // Fallback: open admin
   function openAdmin(annotation) {
     var url = "/_emdash/admin/content/" + encodeURIComponent(annotation.collection) + "/" + encodeURIComponent(annotation.id);
@@ -987,9 +1044,9 @@ export function renderToolbar(config: ToolbarConfig): string {
       credentials: "same-origin"
     })
     .then(function(r) { return r.json(); })
-    .then(function(entry) {
-      var currentValue = entry.data && entry.data[field];
-      showImagePopover(element, imgEl, annotation, currentValue);
+    .then(function(body) {
+      if (!body || !body.success) throw new Error("Failed to load entry");
+      showImagePopover(element, imgEl, annotation, body.data.item.data[field]);
     })
     .catch(function() {
       // If fetch fails, still show popover with what we can infer from DOM
@@ -1020,7 +1077,9 @@ export function renderToolbar(config: ToolbarConfig): string {
     var popover = document.createElement("div");
     popover.className = "emdash-img-popover";
 
-    var currentSrc = currentValue ? (currentValue.previewUrl || currentValue.src) : (imgEl ? imgEl.src : null);
+    // Local images are stored without a URL (the site builds it at render
+    // time), so preview what the page shows when the value carries none.
+    var currentSrc = (currentValue && (currentValue.previewUrl || currentValue.src)) || (imgEl ? imgEl.src : null);
     var currentAlt = currentValue ? (currentValue.alt || "") : (imgEl ? (imgEl.alt || "") : "");
 
     // Build popover HTML
@@ -1091,14 +1150,14 @@ export function renderToolbar(config: ToolbarConfig): string {
     var uploadInput = popover.querySelector("#emdash-img-upload");
     uploadInput.addEventListener("change", function(e) {
       var file = e.target.files && e.target.files[0];
-      if (file) handleImageUpload(file, popover, annotation, element, imgEl);
+      if (file) handleImageUpload(file, popover, annotation, currentValue, element, imgEl);
     });
 
     var removeBtn = popover.querySelector('[data-action="remove"]');
     if (removeBtn) {
       removeBtn.addEventListener("click", function() {
-        saveField(collection, id, field, null).then(function() {
-          if (imgEl) {
+        saveField(collection, id, field, null).then(function(saved) {
+          if (saved && imgEl) {
             imgEl.style.display = "none";
           }
           closeImagePopover();
@@ -1115,8 +1174,9 @@ export function renderToolbar(config: ToolbarConfig): string {
         var newAlt = altInput.value;
         if (currentValue) {
           var updated = Object.assign({}, currentValue, { alt: newAlt });
-          saveField(collection, id, field, updated);
-          if (imgEl) imgEl.alt = newAlt;
+          saveField(collection, id, field, updated).then(function(saved) {
+            if (saved && imgEl) imgEl.alt = newAlt;
+          });
         }
       }, 500);
     });
@@ -1135,7 +1195,7 @@ export function renderToolbar(config: ToolbarConfig): string {
       body.classList.remove("emdash-img-drop");
       var file = e.dataTransfer && e.dataTransfer.files && e.dataTransfer.files[0];
       if (file && file.type.startsWith("image/")) {
-        handleImageUpload(file, popover, annotation, element, imgEl);
+        handleImageUpload(file, popover, annotation, currentValue, element, imgEl);
       }
     });
   }
@@ -1198,8 +1258,9 @@ export function renderToolbar(config: ToolbarConfig): string {
     // Fetch media
     ecFetch("/_emdash/api/media?mimeType=image/&limit=30", { credentials: "same-origin" })
     .then(function(r) { return r.json(); })
-    .then(function(data) {
-      var items = data.items || [];
+    .then(function(body) {
+      if (!body || !body.success) throw new Error((body && body.error && body.error.message) || "Failed to load media");
+      var items = body.data.items || [];
       var loadingEl = browser.querySelector(".emdash-img-loading");
       if (loadingEl) loadingEl.remove();
 
@@ -1224,7 +1285,7 @@ export function renderToolbar(config: ToolbarConfig): string {
         thumb.innerHTML = '<img src="' + escapeAttr(thumbUrl) + '" alt="' + escapeAttr(item.alt || item.filename || "") + '" loading="lazy" />';
 
         thumb.addEventListener("click", function() {
-          selectMediaItem(item, annotation, element, imgEl);
+          selectMediaItem(item, annotation, currentValue, element, imgEl);
         });
 
         grid.appendChild(thumb);
@@ -1239,7 +1300,7 @@ export function renderToolbar(config: ToolbarConfig): string {
     });
   }
 
-  function selectMediaItem(item, annotation, element, imgEl) {
+  function selectMediaItem(item, annotation, currentValue, element, imgEl) {
     var collection = annotation.collection;
     var id = annotation.id;
     var field = annotation.field;
@@ -1255,7 +1316,11 @@ export function renderToolbar(config: ToolbarConfig): string {
       alt: item.alt || "",
       width: item.width,
       height: item.height,
-      meta: item.meta
+      focalX: item.focalX == null ? undefined : item.focalX,
+      focalY: item.focalY == null ? undefined : item.focalY,
+      meta: item.meta,
+      // The save replaces the whole field, so a dark variant not sent is deleted.
+      darkVariant: currentValue ? currentValue.darkVariant : undefined
     };
 
     // Clean undefined fields
@@ -1263,10 +1328,10 @@ export function renderToolbar(config: ToolbarConfig): string {
       if (newValue[k] === undefined) delete newValue[k];
     });
 
-    saveField(collection, id, field, newValue).then(function() {
+    saveField(collection, id, field, newValue).then(function(saved) {
       // Update the image in the DOM
-      if (imgEl) {
-        imgEl.src = itemUrl;
+      if (saved && imgEl) {
+        replacePageImageSource(imgEl, itemUrl);
         imgEl.alt = item.alt || "";
         imgEl.style.display = "";
       }
@@ -1274,7 +1339,23 @@ export function renderToolbar(config: ToolbarConfig): string {
     });
   }
 
-  function handleImageUpload(file, popover, annotation, element, imgEl) {
+  // The rendered srcset/sizes (and any <picture> sources) still describe the
+  // previous media and take precedence over src, so they have to go. The next
+  // server render restores responsive variants for the new image.
+  function replacePageImageSource(img, url) {
+    var picture = img.parentElement;
+    if (picture && picture.tagName === "PICTURE") {
+      Array.prototype.forEach.call(picture.querySelectorAll("source"), function(source) {
+        source.removeAttribute("srcset");
+        source.removeAttribute("sizes");
+      });
+    }
+    img.removeAttribute("srcset");
+    img.removeAttribute("sizes");
+    img.src = url;
+  }
+
+  function handleImageUpload(file, popover, annotation, currentValue, element, imgEl) {
     var collection = annotation.collection;
     var id = annotation.id;
     var field = annotation.field;
@@ -1367,10 +1448,10 @@ export function renderToolbar(config: ToolbarConfig): string {
       });
     })
     .then(function(r) { return r.json(); })
-    .then(function(data) {
-      if (!data.item) throw new Error("Upload failed");
-      var item = data.item;
-      selectMediaItem(item, annotation, element, imgEl);
+    .then(function(body) {
+      var item = body && body.success && body.data && body.data.item;
+      if (!item) throw new Error((body && body.error && body.error.message) || "Upload failed");
+      selectMediaItem(item, annotation, currentValue, element, imgEl);
     })
     .catch(function(err) {
       console.error("Upload error:", err);
@@ -1384,13 +1465,15 @@ export function renderToolbar(config: ToolbarConfig): string {
     document.addEventListener("click", function(e) {
       var target = e.target;
 
-      // Don't intercept clicks on elements currently being edited
-      if (target.hasAttribute && target.hasAttribute("data-emdash-editing")) return;
+      // Clicks inside the field being edited only move the caret; cancel them so
+      // a link wrapping the field isn't followed.
+      if (target.closest && target.closest("[data-emdash-editing]")) {
+        e.preventDefault();
+        return;
+      }
 
       // Walk up to find annotated element
       while (target && target !== document.body) {
-        if (target.hasAttribute && target.hasAttribute("data-emdash-editing")) return;
-
         var ref = target.getAttribute && target.getAttribute("data-emdash-ref");
         if (ref) {
           try {
@@ -1412,6 +1495,8 @@ export function renderToolbar(config: ToolbarConfig): string {
               e.stopPropagation();
               if (kind === "string" || kind === "text") {
                 startTextEdit(target, annotation);
+              } else if (kind === "richText") {
+                startTextEditIfShownAsStored(target, annotation);
               } else if (kind === "image") {
                 startImageEdit(target, annotation);
               } else {
@@ -1422,6 +1507,9 @@ export function renderToolbar(config: ToolbarConfig): string {
             if (manifestCache) {
               dispatchInline(getFieldKind(manifestCache, annotation.collection, annotation.field));
             } else {
+              // The click can only be cancelled now, so a link wrapping the field
+              // isn't followed while the manifest loads.
+              e.preventDefault();
               fetchManifest().then(function(manifest) {
                 dispatchInline(getFieldKind(manifest, annotation.collection, annotation.field));
               });

package/dist/action-token-On1sot_c.mjs

@@ -1,26 +0,0 @@
-import { r as verifyPreviewToken, t as generatePreviewToken } from "./tokens-Ns02GAma.mjs";
-
-//#region src/visual-editing/action-token.ts
-const VISUAL_ACTION_SECRET_DOMAIN = "emdash:visual-editing-action:v1:";
-const VISUAL_ACTION_TOKEN_INVALID = "VISUAL_ACTION_TOKEN_INVALID";
-function visualActionSecret(previewSecret) {
-	return `${VISUAL_ACTION_SECRET_DOMAIN}${previewSecret}`;
-}
-function generateVisualEditingActionToken(previewSecret, userId) {
-	return generatePreviewToken({
-		contentId: `visual-editing:${userId}`,
-		expiresIn: "5m",
-		secret: visualActionSecret(previewSecret)
-	});
-}
-async function verifyVisualEditingActionToken(token, previewSecret, userId) {
-	const verification = await verifyPreviewToken({
-		token,
-		secret: visualActionSecret(previewSecret)
-	});
-	return verification.valid && verification.payload.cid === `visual-editing:${userId}`;
-}
-
-//#endregion
-export { generateVisualEditingActionToken as n, verifyVisualEditingActionToken as r, VISUAL_ACTION_TOKEN_INVALID as t };
-//# sourceMappingURL=action-token-On1sot_c.mjs.map

package/dist/action-token-On1sot_c.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"action-token-On1sot_c.mjs","names":[],"sources":["../src/visual-editing/action-token.ts"],"sourcesContent":["import { generatePreviewToken, verifyPreviewToken } from \"../preview/tokens.js\";\n\nconst VISUAL_ACTION_SECRET_DOMAIN = \"emdash:visual-editing-action:v1:\";\nexport const VISUAL_ACTION_TOKEN_INVALID = \"VISUAL_ACTION_TOKEN_INVALID\";\n\nfunction visualActionSecret(previewSecret: string): string {\n\treturn `${VISUAL_ACTION_SECRET_DOMAIN}${previewSecret}`;\n}\n\nexport function generateVisualEditingActionToken(\n\tpreviewSecret: string,\n\tuserId: string,\n): Promise<string> {\n\treturn generatePreviewToken({\n\t\tcontentId: `visual-editing:${userId}`,\n\t\texpiresIn: \"5m\",\n\t\tsecret: visualActionSecret(previewSecret),\n\t});\n}\n\nexport async function verifyVisualEditingActionToken(\n\ttoken: string,\n\tpreviewSecret: string,\n\tuserId: string,\n): Promise<boolean> {\n\tconst verification = await verifyPreviewToken({\n\t\ttoken,\n\t\tsecret: visualActionSecret(previewSecret),\n\t});\n\treturn verification.valid && verification.payload.cid === `visual-editing:${userId}`;\n}\n"],"mappings":";;;AAEA,MAAM,8BAA8B;AACpC,MAAa,8BAA8B;AAE3C,SAAS,mBAAmB,eAA+B;AAC1D,QAAO,GAAG,8BAA8B;;AAGzC,SAAgB,iCACf,eACA,QACkB;AAClB,QAAO,qBAAqB;EAC3B,WAAW,kBAAkB;EAC7B,WAAW;EACX,QAAQ,mBAAmB,cAAc;EACzC,CAAC;;AAGH,eAAsB,+BACrB,OACA,eACA,QACmB;CACnB,MAAM,eAAe,MAAM,mBAAmB;EAC7C;EACA,QAAQ,mBAAmB,cAAc;EACzC,CAAC;AACF,QAAO,aAAa,SAAS,aAAa,QAAQ,QAAQ,kBAAkB"}