switch to protected meta for editor state

src/js/stores/data/resolvers.ts

@@ -29,11 +29,11 @@ export function getStyle() {
 }
 
 function getSavedState(): SavedState {
-    const meta = select<Maybe<{ abt_state?: string }>>(
+    const meta = select<Maybe<{ _abt_state?: string }>>(
         'core/editor',
     ).getCurrentPostAttribute('meta');
-    if (!meta || !meta.abt_state) {
+    if (!meta || !meta._abt_state) {
         throw new Error('Unable to retrieve registered post meta for ABT');
     }
-    return JSON.parse(meta.abt_state);
+    return JSON.parse(meta._abt_state);
 }

src/js/stores/data/selectors.ts

@@ -127,7 +127,7 @@ export function getItemById(_state: State, id: string): CSL.Data | undefined {
 export function getSerializedState({ references, style }: State) {
     return {
         meta: {
-            abt_state: JSON.stringify({ references, style }),
+            _abt_state: JSON.stringify({ references, style }),
         },
     };
 }

src/php/admin.php

@@ -41,11 +41,14 @@ function enqueue_scripts(): void {
 function register_metadata(): void {
 	register_meta(
 		'post',
-		'abt_state',
+		'_abt_state',
 		[
-			'show_in_rest' => true,
-			'single'       => true,
-			'type'         => 'string',
+			'show_in_rest'  => true,
+			'single'        => true,
+			'type'          => 'string',
+			'auth_callback' => function() {
+				return current_user_can( 'edit_posts' );
+			},
 		]
 	);
 }
@@ -64,7 +67,7 @@ function register_metadata(): void {
 function init_editor_state( int $post_id ): void {
 	$meta = get_post_meta( $post_id );
 
-	if ( ! array_key_exists( 'abt_state', $meta ) ) {
+	if ( ! array_key_exists( '_abt_state', $meta ) ) {
 		$state = (object) [
 			'references' => [],
 			'style'      => get_option( ABT_OPTIONS_KEY )['citation_style'],
@@ -80,7 +83,7 @@ function init_editor_state( int $post_id ): void {
 
 		add_post_meta(
 			$post_id,
-			'abt_state',
+			'_abt_state',
 			wp_slash( wp_json_encode( $state ) ),
 			true
 		);