next-sanity 13.1.3 → 13.1.5

package/dist/NextStudioNoScript.js.map

@@ -1 +1 @@
-{"version":3,"file":"NextStudioNoScript.js","names":[],"sources":["../src/studio/NextStudioLayout.tsx","../src/studio/NextStudioNoScript.tsx"],"sourcesContent":["/** @public */\nexport interface NextStudioLayoutProps {\n  children: React.ReactNode\n}\n\nconst style = {\n  height: '100vh',\n  maxHeight: '100dvh',\n  overscrollBehavior: 'none',\n  WebkitFontSmoothing: 'antialiased',\n  overflow: 'auto',\n} satisfies React.CSSProperties\n\n/** @public */\nexport const NextStudioLayout = ({children}: NextStudioLayoutProps): React.JSX.Element => {\n  return (\n    <div id=\"sanity\" data-ui=\"NextStudioLayout\" style={style}>\n      {children}\n    </div>\n  )\n}\n","const styles: Record<'outer' | 'inner', React.CSSProperties> = {\n  outer: {\n    position: 'absolute',\n    top: 0,\n    right: 0,\n    left: 0,\n    bottom: 0,\n    background: '#fff',\n    zIndex: 1,\n  },\n  inner: {\n    position: 'absolute',\n    top: '50%',\n    left: '50%',\n    transform: 'translate(-50%, -50%)',\n    textAlign: 'center',\n    fontFamily: 'helvetica, arial, sans-serif',\n  },\n}\n\n/** @internal */\nexport const NextStudioNoScript = (): React.JSX.Element => (\n  <noscript>\n    <div style={styles.outer}>\n      <div style={styles.inner}>\n        <h1>JavaScript disabled</h1>\n        <p>\n          Please <a href=\"https://www.enable-javascript.com/\">enable JavaScript</a> in your browser\n          and reload the page to proceed.\n        </p>\n      </div>\n    </div>\n  </noscript>\n)\n"],"mappings":";AAKA,MAAM,QAAQ;CACZ,QAAQ;CACR,WAAW;CACX,oBAAoB;CACpB,qBAAqB;CACrB,UAAU;AACZ;;AAGA,MAAa,oBAAoB,EAAC,eAAwD;CACxF,OACE,oBAAC,OAAD;EAAK,IAAG;EAAS,WAAQ;EAA0B;EAChD;CACE,CAAA;AAET;ACpBA,MAAM,SAAyD;CAC7D,OAAO;EACL,UAAU;EACV,KAAK;EACL,OAAO;EACP,MAAM;EACN,QAAQ;EACR,YAAY;EACZ,QAAQ;CACV;CACA,OAAO;EACL,UAAU;EACV,KAAK;EACL,MAAM;EACN,WAAW;EACX,WAAW;EACX,YAAY;CACd;AACF;;AAGA,MAAa,2BACX,oBAAC,YAAD,EAAA,UACE,oBAAC,OAAD;CAAK,OAAO,OAAO;WACjB,qBAAC,OAAD;EAAK,OAAO,OAAO;YAAnB,CACE,oBAAC,MAAD,EAAA,UAAI,sBAAuB,CAAA,GAC3B,qBAAC,KAAD,EAAA,UAAA;GAAG;GACM,oBAAC,KAAD;IAAG,MAAK;cAAqC;GAAoB,CAAA;GAAC;EAExE,EAAA,CAAA,CACA;;AACF,CAAA,EACG,CAAA"}
+{"version":3,"file":"NextStudioNoScript.js","names":[],"sources":["../src/studio/NextStudioLayout.tsx","../src/studio/NextStudioNoScript.tsx"],"sourcesContent":["/** @public */\nexport interface NextStudioLayoutProps {\n  children: React.ReactNode\n}\n\nconst style = {\n  height: '100vh',\n  maxHeight: '100dvh',\n  overscrollBehavior: 'none',\n  WebkitFontSmoothing: 'antialiased',\n  overflow: 'auto',\n} satisfies React.CSSProperties\n\n/** @public */\nexport const NextStudioLayout = ({children}: NextStudioLayoutProps): React.JSX.Element => {\n  return (\n    <div id=\"sanity\" data-ui=\"NextStudioLayout\" style={style}>\n      {children}\n    </div>\n  )\n}\n","const styles: Record<'outer' | 'inner', React.CSSProperties> = {\n  outer: {\n    position: 'absolute',\n    top: 0,\n    right: 0,\n    left: 0,\n    bottom: 0,\n    background: '#fff',\n    zIndex: 1,\n  },\n  inner: {\n    position: 'absolute',\n    top: '50%',\n    left: '50%',\n    transform: 'translate(-50%, -50%)',\n    textAlign: 'center',\n    fontFamily: 'helvetica, arial, sans-serif',\n  },\n}\n\n/** @internal */\nexport const NextStudioNoScript = (): React.JSX.Element => (\n  <noscript>\n    <div style={styles.outer}>\n      <div style={styles.inner}>\n        <h1>JavaScript disabled</h1>\n        <p>\n          Please <a href=\"https://www.enable-javascript.com/\">enable JavaScript</a> in your browser\n          and reload the page to proceed.\n        </p>\n      </div>\n    </div>\n  </noscript>\n)\n"],"mappings":";AAKA,MAAM,QAAQ;CACZ,QAAQ;CACR,WAAW;CACX,oBAAoB;CACpB,qBAAqB;CACrB,UAAU;AACZ;;AAGA,MAAa,oBAAoB,EAAC,eAAwD;CACxF,OACE,oBAAC,OAAD;EAAK,IAAG;EAAS,WAAQ;EAA0B;EAChD;CACE,CAAA;AAET;ACpBA,MAAM,SAAyD;CAC7D,OAAO;EACL,UAAU;EACV,KAAK;EACL,OAAO;EACP,MAAM;EACN,QAAQ;EACR,YAAY;EACZ,QAAQ;CACV;CACA,OAAO;EACL,UAAU;EACV,KAAK;EACL,MAAM;EACN,WAAW;EACX,WAAW;EACX,YAAY;CACd;AACF;;AAGA,MAAa,2BACX,oBAAC,YAAD,EAAA,UACE,oBAAC,OAAD;CAAK,OAAO,OAAO;CACjB,UAAA,qBAAC,OAAD;EAAK,OAAO,OAAO;EAAnB,UAAA,CACE,oBAAC,MAAD,EAAA,UAAI,sBAAuB,CAAA,GAC3B,qBAAC,KAAD,EAAA,UAAA;GAAG;GACM,oBAAC,KAAD;IAAG,MAAK;IAAqC,UAAA;GAAoB,CAAA;GAAC;EAExE,EAAA,CAAA,CACA;;AACF,CAAA,EACG,CAAA"}

package/dist/SanityLive.js

@@ -1,5 +1,5 @@
-import { t as isCorsOriginError } from "./isCorsOriginError.js";
 import { n as defaultApiHost, t as cacheTagPrefix } from "./constants.js";
+import { t as isCorsOriginError } from "./isCorsOriginError.js";
 import { useRouter } from "next/navigation";
 import { jsx } from "react/jsx-runtime";
 import { createClient } from "@sanity/client";

package/dist/constants.js

@@ -1,6 +1,14 @@
 const cacheTagPrefix = "sanity:";
 /** The default API host used by @sanity/client when none is specified. */
 const defaultApiHost = "https://api.sanity.io";
-export { defaultApiHost as n, cacheTagPrefix as t };
+/**
+* Companion cookie set alongside CHIPS-partitioned draft-mode cookies.
+* Presence of this cookie tells later writes (e.g. perspective changes via
+* server actions) to keep using the `Partitioned` attribute.
+*
+* @see https://github.com/sanity-io/sanity/issues/12806
+*/
+const partitionedCookieName = "sanity-preview-partitioned";
+export { defaultApiHost as n, partitionedCookieName as r, cacheTagPrefix as t };
 
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","names":[],"sources":["../src/live/shared/constants.ts"],"sourcesContent":["import type {CacheTagPrefix} from '#live/types'\n\n// @TODO make this configurable\nexport const cacheTagPrefix: 'sanity:' = 'sanity:' satisfies CacheTagPrefix\n\n/** The default API host used by @sanity/client when none is specified. */\nexport const defaultApiHost = 'https://api.sanity.io'\n"],"mappings":"AAGA,MAAa,iBAA4B;;AAGzC,MAAa,iBAAiB"}
+{"version":3,"file":"constants.js","names":[],"sources":["../src/live/shared/constants.ts"],"sourcesContent":["import type {CacheTagPrefix} from '#live/types'\n\n// @TODO make this configurable\nexport const cacheTagPrefix: 'sanity:' = 'sanity:' satisfies CacheTagPrefix\n\n/** The default API host used by @sanity/client when none is specified. */\nexport const defaultApiHost = 'https://api.sanity.io'\n\n/**\n * Companion cookie set alongside CHIPS-partitioned draft-mode cookies.\n * Presence of this cookie tells later writes (e.g. perspective changes via\n * server actions) to keep using the `Partitioned` attribute.\n *\n * @see https://github.com/sanity-io/sanity/issues/12806\n */\nexport const partitionedCookieName = 'sanity-preview-partitioned'\n"],"mappings":"AAGA,MAAa,iBAA4B;;AAGzC,MAAa,iBAAiB;;;;;;;;AAS9B,MAAa,wBAAwB"}

package/dist/draft-mode/index.d.ts

@@ -21,6 +21,14 @@ interface EnableDraftMode {
 /**
  * Sets up an API route for enabling draft mode, can be paired with the `previewUrl.previewMode.enable` in `sanity/presentation`.
  * Can also be used with `sanity-plugin-iframe-pane`.
+ *
+ * When the preview loads in a cross-site iframe (Presentation Tool), draft-mode
+ * cookies are set with the CHIPS `Partitioned` attribute so Safari 18.4+ stores
+ * them despite third-party cookie blocking. Top-level / same-site requests keep
+ * unpartitioned cookies so `draftMode().disable()` continues to work.
+ *
+ * @see https://github.com/sanity-io/sanity/issues/12806
+ *
  * @example
  * ```ts
  * // src/app/api/draft-mode/enable/route.ts

package/dist/draft-mode/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/draft-mode/define-enable-draft-mode.ts"],"mappings":";;;;UASiB;EACf,QAAQ;;;;;;;EAOR;;;;;UAMe;EACf,MAAM,SAAS,YAAY,QAAQ;;;;;;;;;;;;;;;;;;;iBAoBrB,sBAAsB,SAAS,+BAA+B"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/draft-mode/define-enable-draft-mode.ts"],"mappings":";;;;UAWiB;EACf,QAAQ;;;;;;;EAOR;;;;;UAMe;EACf,MAAM,SAAS,YAAY,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BrB,sBAAsB,SAAS,+BAA+B"}

package/dist/draft-mode/index.js

@@ -1,3 +1,4 @@
+import { r as partitionedCookieName } from "../constants.js";
 import { validatePreviewUrl } from "@sanity/preview-url-secret";
 import { perspectiveCookieName } from "@sanity/preview-url-secret/constants";
 import { cookies, draftMode } from "next/headers";
@@ -5,6 +6,14 @@ import { redirect } from "next/navigation";
 /**
 * Sets up an API route for enabling draft mode, can be paired with the `previewUrl.previewMode.enable` in `sanity/presentation`.
 * Can also be used with `sanity-plugin-iframe-pane`.
+*
+* When the preview loads in a cross-site iframe (Presentation Tool), draft-mode
+* cookies are set with the CHIPS `Partitioned` attribute so Safari 18.4+ stores
+* them despite third-party cookie blocking. Top-level / same-site requests keep
+* unpartitioned cookies so `draftMode().disable()` continues to work.
+*
+* @see https://github.com/sanity-io/sanity/issues/12806
+*
 * @example
 * ```ts
 * // src/app/api/draft-mode/enable/route.ts
@@ -27,6 +36,7 @@ function defineEnableDraftMode(options) {
 		const draftModeStore = await draftMode();
 		if (!draftModeStore.isEnabled) draftModeStore.enable();
 		const isSecure = process.env.NODE_ENV === "production" || (options.secureDevMode ?? false);
+		const partitioned = isSecure && request.headers.get("sec-fetch-dest") === "iframe" && request.headers.get("sec-fetch-site") === "cross-site";
 		const cookieStore = await cookies();
 		const cookie = cookieStore.get("__prerender_bypass");
 		cookieStore.set({
@@ -35,7 +45,8 @@ function defineEnableDraftMode(options) {
 			httpOnly: true,
 			path: "/",
 			secure: isSecure,
-			sameSite: isSecure ? "none" : "lax"
+			sameSite: isSecure ? "none" : "lax",
+			partitioned
 		});
 		if (studioPreviewPerspective) cookieStore.set({
 			name: perspectiveCookieName,
@@ -43,7 +54,17 @@ function defineEnableDraftMode(options) {
 			httpOnly: true,
 			path: "/",
 			secure: isSecure,
-			sameSite: isSecure ? "none" : "lax"
+			sameSite: isSecure ? "none" : "lax",
+			partitioned
+		});
+		if (partitioned) cookieStore.set({
+			name: partitionedCookieName,
+			value: "1",
+			httpOnly: true,
+			path: "/",
+			secure: true,
+			sameSite: "none",
+			partitioned: true
 		});
 		return redirect(redirectTo);
 	} };

package/dist/draft-mode/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/draft-mode/define-enable-draft-mode.ts"],"sourcesContent":["import type {SanityClient} from '@sanity/client'\nimport {validatePreviewUrl} from '@sanity/preview-url-secret'\nimport {perspectiveCookieName} from '@sanity/preview-url-secret/constants'\nimport {cookies, draftMode} from 'next/headers'\nimport {redirect} from 'next/navigation'\n\n/**\n * @public\n */\nexport interface DefineEnableDraftModeOptions {\n  client: SanityClient\n  /**\n   * Force secure cookies in development mode.\n   * Enable this when using Next.js --experimental-https flag.\n   * This option has no effect in production (cookies are always secure).\n   * @defaultValue false\n   */\n  secureDevMode?: boolean\n}\n\n/**\n * @public\n */\nexport interface EnableDraftMode {\n  GET: (request: Request) => Promise<Response>\n}\n\n/**\n * Sets up an API route for enabling draft mode, can be paired with the `previewUrl.previewMode.enable` in `sanity/presentation`.\n * Can also be used with `sanity-plugin-iframe-pane`.\n * @example\n * ```ts\n * // src/app/api/draft-mode/enable/route.ts\n *\n * import { defineEnableDraftMode } from \"next-sanity/draft-mode\";\n * import { client } from \"@/sanity/lib/client\";\n *\n * export const { GET } = defineEnableDraftMode({\n *   client: client.withConfig({ token: process.env.SANITY_API_READ_TOKEN }),\n * });\n * ```\n *\n * @public\n */\nexport function defineEnableDraftMode(options: DefineEnableDraftModeOptions): EnableDraftMode {\n  const {client} = options\n  return {\n    GET: async (request: Request) => {\n      // @TODO check if already in draft mode at a much earlier stage, and skip validation\n\n      const {\n        isValid,\n        redirectTo = '/',\n        studioPreviewPerspective,\n      } = await validatePreviewUrl(client, request.url)\n      if (!isValid) {\n        return new Response('Invalid secret', {status: 401})\n      }\n\n      const draftModeStore = await draftMode()\n\n      // Let's enable draft mode if it's not already enabled\n      if (!draftModeStore.isEnabled) {\n        draftModeStore.enable()\n      }\n\n      const isProduction = process.env.NODE_ENV === 'production'\n\n      // We can't auto-detect HTTPS in dev due to Next.js limitations,\n      // so we need an explicit option\n      const isSecure = isProduction || (options.secureDevMode ?? false)\n\n      // Override cookie header for draft mode for usage in live-preview\n      // https://github.com/vercel/next.js/issues/49927\n      const cookieStore = await cookies()\n      const cookie = cookieStore.get('__prerender_bypass')!\n      cookieStore.set({\n        name: '__prerender_bypass',\n        value: cookie?.value,\n        httpOnly: true,\n        path: '/',\n        secure: isSecure,\n        sameSite: isSecure ? 'none' : 'lax',\n      })\n\n      if (studioPreviewPerspective) {\n        cookieStore.set({\n          name: perspectiveCookieName,\n          value: studioPreviewPerspective,\n          httpOnly: true,\n          path: '/',\n          secure: isSecure,\n          sameSite: isSecure ? 'none' : 'lax',\n        })\n      }\n\n      return redirect(redirectTo)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA4CA,SAAgB,sBAAsB,SAAwD;CAC5F,MAAM,EAAC,WAAU;CACjB,OAAO,EACL,KAAK,OAAO,YAAqB;EAG/B,MAAM,EACJ,SACA,aAAa,KACb,6BACE,MAAM,mBAAmB,QAAQ,QAAQ,GAAG;EAChD,IAAI,CAAC,SACH,OAAO,IAAI,SAAS,kBAAkB,EAAC,QAAQ,IAAG,CAAC;EAGrD,MAAM,iBAAiB,MAAM,UAAU;EAGvC,IAAI,CAAC,eAAe,WAClB,eAAe,OAAO;EAOxB,MAAM,WAJe,QAAQ,IAAI,aAAa,iBAIZ,QAAQ,iBAAiB;EAI3D,MAAM,cAAc,MAAM,QAAQ;EAClC,MAAM,SAAS,YAAY,IAAI,oBAAoB;EACnD,YAAY,IAAI;GACd,MAAM;GACN,OAAO,QAAQ;GACf,UAAU;GACV,MAAM;GACN,QAAQ;GACR,UAAU,WAAW,SAAS;EAChC,CAAC;EAED,IAAI,0BACF,YAAY,IAAI;GACd,MAAM;GACN,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,UAAU,WAAW,SAAS;EAChC,CAAC;EAGH,OAAO,SAAS,UAAU;CAC5B,EACF;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/draft-mode/define-enable-draft-mode.ts"],"sourcesContent":["import type {SanityClient} from '@sanity/client'\nimport {validatePreviewUrl} from '@sanity/preview-url-secret'\nimport {perspectiveCookieName} from '@sanity/preview-url-secret/constants'\nimport {cookies, draftMode} from 'next/headers'\nimport {redirect} from 'next/navigation'\n\nimport {partitionedCookieName} from '#live/constants'\n\n/**\n * @public\n */\nexport interface DefineEnableDraftModeOptions {\n  client: SanityClient\n  /**\n   * Force secure cookies in development mode.\n   * Enable this when using Next.js --experimental-https flag.\n   * This option has no effect in production (cookies are always secure).\n   * @defaultValue false\n   */\n  secureDevMode?: boolean\n}\n\n/**\n * @public\n */\nexport interface EnableDraftMode {\n  GET: (request: Request) => Promise<Response>\n}\n\n/**\n * Sets up an API route for enabling draft mode, can be paired with the `previewUrl.previewMode.enable` in `sanity/presentation`.\n * Can also be used with `sanity-plugin-iframe-pane`.\n *\n * When the preview loads in a cross-site iframe (Presentation Tool), draft-mode\n * cookies are set with the CHIPS `Partitioned` attribute so Safari 18.4+ stores\n * them despite third-party cookie blocking. Top-level / same-site requests keep\n * unpartitioned cookies so `draftMode().disable()` continues to work.\n *\n * @see https://github.com/sanity-io/sanity/issues/12806\n *\n * @example\n * ```ts\n * // src/app/api/draft-mode/enable/route.ts\n *\n * import { defineEnableDraftMode } from \"next-sanity/draft-mode\";\n * import { client } from \"@/sanity/lib/client\";\n *\n * export const { GET } = defineEnableDraftMode({\n *   client: client.withConfig({ token: process.env.SANITY_API_READ_TOKEN }),\n * });\n * ```\n *\n * @public\n */\nexport function defineEnableDraftMode(options: DefineEnableDraftModeOptions): EnableDraftMode {\n  const {client} = options\n  return {\n    GET: async (request: Request) => {\n      // @TODO check if already in draft mode at a much earlier stage, and skip validation\n\n      const {\n        isValid,\n        redirectTo = '/',\n        studioPreviewPerspective,\n      } = await validatePreviewUrl(client, request.url)\n      if (!isValid) {\n        return new Response('Invalid secret', {status: 401})\n      }\n\n      const draftModeStore = await draftMode()\n\n      // Let's enable draft mode if it's not already enabled\n      if (!draftModeStore.isEnabled) {\n        draftModeStore.enable()\n      }\n\n      const isProduction = process.env.NODE_ENV === 'production'\n\n      // We can't auto-detect HTTPS in dev due to Next.js limitations,\n      // so we need an explicit option\n      const isSecure = isProduction || (options.secureDevMode ?? false)\n\n      // Safari blocks unpartitioned third-party cookies. When the enable route is\n      // hit from a cross-site iframe (Presentation), opt into CHIPS so the cookies\n      // are stored under the studio's partition. Skip partitioning for top-level /\n      // same-site requests so draftMode().disable() can still clear them.\n      // https://github.com/sanity-io/sanity/issues/12806\n      const partitioned =\n        isSecure &&\n        request.headers.get('sec-fetch-dest') === 'iframe' &&\n        request.headers.get('sec-fetch-site') === 'cross-site'\n\n      // Override cookie header for draft mode for usage in live-preview\n      // https://github.com/vercel/next.js/issues/49927\n      const cookieStore = await cookies()\n      const cookie = cookieStore.get('__prerender_bypass')!\n      cookieStore.set({\n        name: '__prerender_bypass',\n        value: cookie?.value,\n        httpOnly: true,\n        path: '/',\n        secure: isSecure,\n        sameSite: isSecure ? 'none' : 'lax',\n        partitioned,\n      })\n\n      if (studioPreviewPerspective) {\n        cookieStore.set({\n          name: perspectiveCookieName,\n          value: studioPreviewPerspective,\n          httpOnly: true,\n          path: '/',\n          secure: isSecure,\n          sameSite: isSecure ? 'none' : 'lax',\n          partitioned,\n        })\n      }\n\n      // Persist the partitioning decision for later writes (server actions have no\n      // Sec-Fetch iframe signal). The flag cookie is itself partitioned, so it is\n      // only visible inside the same cross-site iframe context.\n      if (partitioned) {\n        cookieStore.set({\n          name: partitionedCookieName,\n          value: '1',\n          httpOnly: true,\n          path: '/',\n          secure: true,\n          sameSite: 'none',\n          partitioned: true,\n        })\n      }\n\n      return redirect(redirectTo)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,SAAgB,sBAAsB,SAAwD;CAC5F,MAAM,EAAC,WAAU;CACjB,OAAO,EACL,KAAK,OAAO,YAAqB;EAG/B,MAAM,EACJ,SACA,aAAa,KACb,6BACE,MAAM,mBAAmB,QAAQ,QAAQ,GAAG;EAChD,IAAI,CAAC,SACH,OAAO,IAAI,SAAS,kBAAkB,EAAC,QAAQ,IAAG,CAAC;EAGrD,MAAM,iBAAiB,MAAM,UAAU;EAGvC,IAAI,CAAC,eAAe,WAClB,eAAe,OAAO;EAOxB,MAAM,WAJe,QAAQ,IAAI,aAAa,iBAIZ,QAAQ,iBAAiB;EAO3D,MAAM,cACJ,YACA,QAAQ,QAAQ,IAAI,gBAAgB,MAAM,YAC1C,QAAQ,QAAQ,IAAI,gBAAgB,MAAM;EAI5C,MAAM,cAAc,MAAM,QAAQ;EAClC,MAAM,SAAS,YAAY,IAAI,oBAAoB;EACnD,YAAY,IAAI;GACd,MAAM;GACN,OAAO,QAAQ;GACf,UAAU;GACV,MAAM;GACN,QAAQ;GACR,UAAU,WAAW,SAAS;GAC9B;EACF,CAAC;EAED,IAAI,0BACF,YAAY,IAAI;GACd,MAAM;GACN,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,UAAU,WAAW,SAAS;GAC9B;EACF,CAAC;EAMH,IAAI,aACF,YAAY,IAAI;GACd,MAAM;GACN,OAAO;GACP,UAAU;GACV,MAAM;GACN,QAAQ;GACR,UAAU;GACV,aAAa;EACf,CAAC;EAGH,OAAO,SAAS,UAAU;CAC5B,EACF;AACF"}

package/dist/live/conditions/next-js/index.js

@@ -1,5 +1,5 @@
-import { t as isCorsOriginError } from "../../../isCorsOriginError.js";
 import { t as cacheTagPrefix } from "../../../constants.js";
+import { t as isCorsOriginError } from "../../../isCorsOriginError.js";
 import { i as preconnect, n as validateStrictFetchOptions, r as validateStrictSanityLiveProps, t as resolvePerspectiveFromCookies } from "../../../resolvePerspectiveFromCookies.js";
 import { t as parseTags } from "../../../parseTags.js";
 import { jsx } from "react/jsx-runtime";

package/dist/live/conditions/react-server/index.js

@@ -1,5 +1,5 @@
-import { t as isCorsOriginError } from "../../../isCorsOriginError.js";
 import "../../../constants.js";
+import { t as isCorsOriginError } from "../../../isCorsOriginError.js";
 import { i as preconnect, n as validateStrictFetchOptions, r as validateStrictSanityLiveProps, t as resolvePerspectiveFromCookies } from "../../../resolvePerspectiveFromCookies.js";
 import { t as parseTags } from "../../../parseTags.js";
 import { cookies, draftMode } from "next/headers";

package/dist/studio/client-component/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/studio/client-component/NextStudioLazy.tsx"],"sourcesContent":["/**\n *\n * If pages router supported `next/dynamic` imports (it wants `next/dynamic.js`),\n * or if turbopack in app router allowed `next/dynamic.js` (it doesn't yet)\n * we could use `dynamic(() => import('...), {ssr: false})` here.\n * Since we can't, we need to use a lazy import and Suspense ourself.\n */\n\nimport {lazy, Suspense} from 'react'\n\nimport type {NextStudioProps} from './NextStudio'\n\nconst NextStudioClientComponent = lazy(() => import('./NextStudio'))\n\nexport function NextStudioLazyClientComponent(props: NextStudioProps): React.ReactNode {\n  return (\n    <Suspense fallback={null}>\n      <NextStudioClientComponent {...props} />\n    </Suspense>\n  )\n}\n"],"mappings":";;;;;;;;;;AAYA,MAAM,4BAA4B,WAAW,OAAO,sBAAe;AAEnE,SAAgB,8BAA8B,OAAyC;CACrF,OACE,oBAAC,UAAD;EAAU,UAAU;YAClB,oBAAC,2BAAD,EAA2B,GAAI,MAAQ,CAAA;CAC/B,CAAA;AAEd"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/studio/client-component/NextStudioLazy.tsx"],"sourcesContent":["/**\n *\n * If pages router supported `next/dynamic` imports (it wants `next/dynamic.js`),\n * or if turbopack in app router allowed `next/dynamic.js` (it doesn't yet)\n * we could use `dynamic(() => import('...), {ssr: false})` here.\n * Since we can't, we need to use a lazy import and Suspense ourself.\n */\n\nimport {lazy, Suspense} from 'react'\n\nimport type {NextStudioProps} from './NextStudio'\n\nconst NextStudioClientComponent = lazy(() => import('./NextStudio'))\n\nexport function NextStudioLazyClientComponent(props: NextStudioProps): React.ReactNode {\n  return (\n    <Suspense fallback={null}>\n      <NextStudioClientComponent {...props} />\n    </Suspense>\n  )\n}\n"],"mappings":";;;;;;;;;;AAYA,MAAM,4BAA4B,WAAW,OAAO,sBAAe;AAEnE,SAAgB,8BAA8B,OAAyC;CACrF,OACE,oBAAC,UAAD;EAAU,UAAU;EAClB,UAAA,oBAAC,2BAAD,EAA2B,GAAI,MAAQ,CAAA;CAC/B,CAAA;AAEd"}

package/dist/visual-editing/server-actions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/visual-editing/server-actions/index.ts"],"mappings":";;;;iBAYsB,wBAAwB,aAAa,oBAAoB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/visual-editing/server-actions/index.ts"],"mappings":";;;;iBAasB,wBAAwB,aAAa,oBAAoB"}

package/dist/visual-editing/server-actions/index.js

@@ -1,4 +1,5 @@
 "use server";
+import { r as partitionedCookieName } from "../../constants.js";
 import { t as sanitizePerspective } from "../../sanitizePerspective.js";
 import { perspectiveCookieName } from "@sanity/preview-url-secret/constants";
 import { cookies } from "next/headers";
@@ -19,7 +20,8 @@ async function perspectiveChangeAction(perspective) {
 		httpOnly: true,
 		path: "/",
 		secure: true,
-		sameSite: "none"
+		sameSite: "none",
+		partitioned: jar.has(partitionedCookieName)
 	});
 	refresh();
 }

package/dist/visual-editing/server-actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/visual-editing/server-actions/index.ts"],"sourcesContent":["'use server'\n\nimport type {ClientPerspective} from '@sanity/client'\nimport {perspectiveCookieName} from '@sanity/preview-url-secret/constants'\nimport {refresh} from 'next/cache'\nimport {cookies} from 'next/headers'\n\nimport {sanitizePerspective} from '#live/sanitizePerspective'\n\n/**\n * @internal CAUTION: this is an internal action and does not follow semver. Using it directly is at your own risk.\n */\nexport async function perspectiveChangeAction(perspective: ClientPerspective): Promise<void> {\n  const sanitizedPerspective = sanitizePerspective(perspective, 'drafts')\n  if (\n    !sanitizedPerspective ||\n    (Array.isArray(sanitizedPerspective) && sanitizedPerspective.length === 0)\n  ) {\n    throw new Error(`Invalid perspective`, {cause: perspective})\n  }\n\n  const nextPerspective = Array.isArray(sanitizedPerspective)\n    ? sanitizedPerspective.join(',')\n    : sanitizedPerspective\n  const jar = await cookies()\n  if (\n    nextPerspective === jar.get(perspectiveCookieName)?.value &&\n    process.env.NODE_ENV !== 'production'\n  ) {\n    // oxlint-disable-next-line no-console\n    console.debug('perspectiveChangeAction', 'Perspective is the same, skipping', nextPerspective)\n    return\n  }\n  jar.set(perspectiveCookieName, nextPerspective, {\n    httpOnly: true,\n    path: '/',\n    secure: true,\n    sameSite: 'none',\n  })\n\n  refresh()\n}\n"],"mappings":";;;;;;;;AAYA,eAAsB,wBAAwB,aAA+C;CAC3F,MAAM,uBAAuB,oBAAoB,aAAa,QAAQ;CACtE,IACE,CAAC,wBACA,MAAM,QAAQ,oBAAoB,KAAK,qBAAqB,WAAW,GAExE,MAAM,IAAI,MAAM,uBAAuB,EAAC,OAAO,YAAW,CAAC;CAG7D,MAAM,kBAAkB,MAAM,QAAQ,oBAAoB,IACtD,qBAAqB,KAAK,GAAG,IAC7B;CACJ,MAAM,MAAM,MAAM,QAAQ;CAC1B,IACE,oBAAoB,IAAI,IAAI,qBAAqB,CAAC,EAAE,SACpD,QAAQ,IAAI,aAAa,cACzB;EAEA,QAAQ,MAAM,2BAA2B,qCAAqC,eAAe;EAC7F;CACF;CACA,IAAI,IAAI,uBAAuB,iBAAiB;EAC9C,UAAU;EACV,MAAM;EACN,QAAQ;EACR,UAAU;CACZ,CAAC;CAED,QAAQ;AACV"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/visual-editing/server-actions/index.ts"],"sourcesContent":["'use server'\n\nimport type {ClientPerspective} from '@sanity/client'\nimport {perspectiveCookieName} from '@sanity/preview-url-secret/constants'\nimport {refresh} from 'next/cache'\nimport {cookies} from 'next/headers'\n\nimport {partitionedCookieName} from '#live/constants'\nimport {sanitizePerspective} from '#live/sanitizePerspective'\n\n/**\n * @internal CAUTION: this is an internal action and does not follow semver. Using it directly is at your own risk.\n */\nexport async function perspectiveChangeAction(perspective: ClientPerspective): Promise<void> {\n  const sanitizedPerspective = sanitizePerspective(perspective, 'drafts')\n  if (\n    !sanitizedPerspective ||\n    (Array.isArray(sanitizedPerspective) && sanitizedPerspective.length === 0)\n  ) {\n    throw new Error(`Invalid perspective`, {cause: perspective})\n  }\n\n  const nextPerspective = Array.isArray(sanitizedPerspective)\n    ? sanitizedPerspective.join(',')\n    : sanitizedPerspective\n  const jar = await cookies()\n  if (\n    nextPerspective === jar.get(perspectiveCookieName)?.value &&\n    process.env.NODE_ENV !== 'production'\n  ) {\n    // oxlint-disable-next-line no-console\n    console.debug('perspectiveChangeAction', 'Perspective is the same, skipping', nextPerspective)\n    return\n  }\n  // Mirror the CHIPS partitioning decision from defineEnableDraftMode. Server\n  // actions do not receive Sec-Fetch iframe headers, so we rely on the companion\n  // flag cookie set during enable.\n  // https://github.com/sanity-io/sanity/issues/12806\n  jar.set(perspectiveCookieName, nextPerspective, {\n    httpOnly: true,\n    path: '/',\n    secure: true,\n    sameSite: 'none',\n    partitioned: jar.has(partitionedCookieName),\n  })\n\n  refresh()\n}\n"],"mappings":";;;;;;;;;AAaA,eAAsB,wBAAwB,aAA+C;CAC3F,MAAM,uBAAuB,oBAAoB,aAAa,QAAQ;CACtE,IACE,CAAC,wBACA,MAAM,QAAQ,oBAAoB,KAAK,qBAAqB,WAAW,GAExE,MAAM,IAAI,MAAM,uBAAuB,EAAC,OAAO,YAAW,CAAC;CAG7D,MAAM,kBAAkB,MAAM,QAAQ,oBAAoB,IACtD,qBAAqB,KAAK,GAAG,IAC7B;CACJ,MAAM,MAAM,MAAM,QAAQ;CAC1B,IACE,oBAAoB,IAAI,IAAI,qBAAqB,CAAC,EAAE,SACpD,QAAQ,IAAI,aAAa,cACzB;EAEA,QAAQ,MAAM,2BAA2B,qCAAqC,eAAe;EAC7F;CACF;CAKA,IAAI,IAAI,uBAAuB,iBAAiB;EAC9C,UAAU;EACV,MAAM;EACN,QAAQ;EACR,UAAU;EACV,aAAa,IAAI,IAAI,qBAAqB;CAC5C,CAAC;CAED,QAAQ;AACV"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "next-sanity",
-  "version": "13.1.3",
+  "version": "13.1.5",
   "description": "Sanity.io toolkit for Next.js",
   "keywords": [
     "live",
@@ -59,17 +59,16 @@
   },
   "dependencies": {
     "@portabletext/react": "^6.2.0",
-    "@sanity/client": "^7.23.1",
+    "@sanity/client": "^7.24.0",
     "@sanity/generate-help-url": "^4.0.0",
-    "@sanity/preview-url-secret": "^4.0.8",
-    "@sanity/visual-editing": "^5.5.0",
+    "@sanity/preview-url-secret": "^4.1.0",
+    "@sanity/visual-editing": "^5.6.0",
     "@sanity/webhook": "^4.0.4",
     "groq": "^6.5.0",
     "history": "^5.3.0"
   },
   "devDependencies": {
-    "@sanity/tsconfig": "^2.2.0",
-    "@types/js-yaml": "^4.0.9",
+    "@sanity/tsconfig": "^2.2.1",
     "@types/node": "^24.13.3",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
@@ -77,23 +76,22 @@
     "@vitejs/plugin-react": "^6.0.3",
     "@vitest/browser-playwright": "^4.1.10",
     "@vitest/coverage-v8": "^4.1.10",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^5.2.1",
     "msw": "^2.15.0",
-    "next": "16.3.0-canary.83",
+    "next": "16.3.0-canary.91",
     "publint": "^0.3.21",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
-    "styled-components": "^6.4.3",
-    "tsdown": "^0.22.7",
-    "typedoc": "^0.28.20",
-    "typescript": "6.0.3",
-    "vite": "^8.1.4",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "styled-components": "^6.4.4",
+    "tsdown": "^0.22.12",
+    "typescript": "7.0.2",
+    "vite": "^8.1.5",
     "vitest": "^4.1.10",
     "vitest-browser-react": "^2.2.0",
     "vitest-package-exports": "^1.2.0"
   },
   "peerDependencies": {
-    "@sanity/client": "^7.23.1",
+    "@sanity/client": "^7.24.0",
     "next": "^16.0.0-0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
@@ -112,7 +110,6 @@
     "build": "tsdown --publint",
     "coverage": "npm test -- --coverage",
     "dev": "tsdown --watch",
-    "docs:generate": "typedoc",
     "test": "vitest --project unit",
     "test:coverage": "vitest --coverage run",
     "test:e2e": "vitest --project browser"