feat: add createMigration and createWriteClient

.eslintignore

@@ -3,6 +3,7 @@ CHANGELOG.md
 # .gitignore copy
 
 # custom
+*.tgz
 dist
 examples/**/package-lock.json
 

.gitignore

@@ -1,4 +1,5 @@
 # custom
+*.tgz
 dist
 examples/**/package-lock.json
 

.prettierignore

@@ -4,6 +4,7 @@ CHANGELOG.md
 # .gitignore copy
 
 # custom
+*.tgz
 dist
 examples/**/package-lock.json
 

messages/avoid-write-client-in-browser.md

@@ -0,0 +1,23 @@
+# Avoid write client in browser
+
+`@prismicio/client`'s write client uses credentials to authenticate write queries to a Prismic repository.
+
+The repository write token and Migration API key must be provided when creating a `@prismicio/client` write client like the following:
+
+```typescript
+import * as prismic from "@prismicio/client";
+
+const writeClient = prismic.createWriteClient("example-prismic-repo", {
+	writeToken: "xxx"
+})
+```
+
+If the write client is exposed to the browser, so are its tokens. Malicious actors will have write access to your repository.
+
+Use the non-write client when write actions are not needed. The non-write client only has read access to the repository and can safely be used in the browser. Be aware the client's access token, if used, will be exposed in the browser.
+
+```typescript
+import * as prismic from "@prismicio/client";
+
+const client = prismic.createClient("example-prismic-repo")
+```

messages/endpoint-must-use-cdn.md

@@ -1,20 +1,16 @@
 # `endpoint` must use CDN
 
-`@prismicio/client` uses either a Prismic repository name or a Prismic Rest API v2 repository endpoint to query content from Prismic.
+`@prismicio/client` uses either a Prismic repository name or a repository-specific Document API endpoint to query content from Prismic.
 
-The repository name or repository endpoint must be provided when creating a `@prismicio/client` like the following:
+The repository name must be provided when creating a `@prismicio/client` like the following:
 
 ```typescript
 import * as prismic from "@prismicio/client";
 
-// Using the repository name
 const client = prismic.createClient("example-prismic-repo")
-
-// Using the repository endpoint
-const client = prismic.createClient("https://example-prismic-repo.cdn.prismic.io/api/v2")
 ```
 
-When creating a `@prismicio/client` with a repository endpoint, the endpoint's subdomain must feature the `.cdn` suffix.
+When creating a `@prismicio/client` with a repository endpoint (not recommended), the endpoint's subdomain must feature the `.cdn` suffix.
 
 ```typescript
 import * as prismic from "@prismicio/client";

messages/prefer-repository-name.md

@@ -0,0 +1,29 @@
+# Prefer repository name
+
+`@prismicio/client` uses either a Prismic repository name or a repository-specific Document API endpoint to query content from Prismic.
+
+The repository name must be provided when creating a `@prismicio/client` like the following:
+
+```typescript
+import * as prismic from "@prismicio/client";
+
+const client = prismic.createClient("example-prismic-repo")
+```
+
+When proxying a Prismic API v2 repository endpoint (not recommended), the `documentAPIEndpoint` option can be used to specify that endpoint.
+
+```typescript
+import * as prismic from "@prismicio/client"
+
+// ✅ Correct
+const client = prismic.createClient("my-repo-name", {
+	documentAPIEndpoint: "https://example.com/my-prismic-proxy"
+})
+
+// ❌ Incorrect: repository name can't be inferred from a proxied endpoint
+const client = prismic.createClient("https://example.com/my-prismic-proxy", {
+	documentAPIEndpoint: "https://example.com/my-prismic-proxy"
+})
+```
+
+Proxying a Prismic API v2 repository endpoint can have unexpected side-effects and cause performance issues when querying Prismic.

package.json

@@ -82,7 +82,7 @@
 		"imgix-url-builder": "^0.0.5"
 	},
 	"devDependencies": {
-		"@prismicio/mock": "^0.3.7",
+		"@prismicio/mock": "^0.3.9",
 		"@prismicio/types-internal": "^2.6.0",
 		"@size-limit/preset-small-lib": "^11.1.4",
 		"@trivago/prettier-plugin-sort-imports": "^4.3.0",