fix: add additional checks for visualEditing type narrowing

Author: danielroe

src/runtime/plugins/visual-editing.server.ts

@@ -13,10 +13,10 @@ export default defineNuxtPlugin(() => {
   // editing is enabled.
   if (visualEditing?.previewMode) {
     const previewModeCookie = useCookie('__sanity_preview')
-    visualEditingState.enabled = previewModeCookie.value === visualEditing.previewModeId
+    visualEditingState.enabled = 'previewModeId' in visualEditing && previewModeCookie.value === visualEditing.previewModeId
   // If preview mode is _not_ configured, just enable visual editing.
   }
-  else if (typeof visualEditing === 'object' && !visualEditing.previewMode) {
+  else if (visualEditing && typeof visualEditing === 'object' && (!('previewMode' in visualEditing) || !visualEditing.previewMode)) {
     visualEditingState.enabled = true
   }
 })

src/runtime/server/routes/preview/enable.ts

@@ -11,7 +11,7 @@ export default defineEventHandler(async (event) => {
   const sanityConfig = import.meta.client ? $config.public.sanity : defu($config.sanity, $config.public.sanity)
 
   const client = sanity.client.withConfig({
-    token: sanityConfig.visualEditing!.token,
+    token: sanityConfig.visualEditing && 'token' in sanityConfig.visualEditing ? sanityConfig.visualEditing.token : undefined,
   })
 
   const { isValid, redirectTo = '/' } = await validatePreviewUrl(
@@ -26,7 +26,11 @@ export default defineEventHandler(async (event) => {
     })
   }
 
-  setCookie(event, '__sanity_preview', sanityConfig.visualEditing!.previewModeId, {
+  const id = sanityConfig.visualEditing && 'previewModeId' in sanityConfig.visualEditing
+    ? sanityConfig.visualEditing.previewModeId
+    : undefined as never
+
+  setCookie(event, '__sanity_preview', id, {
     httpOnly: true,
     sameSite: !import.meta.dev ? 'none' : 'lax',
     secure: !import.meta.dev,

src/runtime/server/routes/proxy.ts

@@ -12,15 +12,15 @@ export default defineEventHandler(async (event) => {
 
   const { visualEditing } = import.meta.client ? $config.public.sanity : defu($config.sanity, $config.public.sanity)
 
-  if (!visualEditing || previewModeCookie !== visualEditing.previewModeId) {
+  if (!visualEditing || !('previewModeId' in visualEditing) || previewModeCookie !== visualEditing.previewModeId) {
     throw createError({
       statusCode: 400,
       statusMessage: 'This endpoint should only be used for fetching preview mode data',
     })
   }
 
   const client = sanity.client.withConfig({
-    token: visualEditing.token,
+    token: visualEditing && 'token' in visualEditing ? visualEditing.token : undefined,
     useCdn: false,
   })