@nextblock-cms/db 0.20.3 → 0.21.1

package/README.md

@@ -0,0 +1,47 @@
+# @nextblock-cms/db
+
+The database layer of [NextBlock](https://github.com/nextblock-cms/nextblock), the open-core CMS
+for Next.js and Supabase: Supabase clients for each trust level, the generated `Database` types,
+secret encryption, and the premium-package license check. It also ships the NextBlock database
+migrations.
+
+Projects created with `npm create nextblock@latest` already depend on it. It is built for
+NextBlock projects (Next.js 16, React 19, `@supabase/ssr`) rather than as a general-purpose
+library.
+
+```bash
+npm install @nextblock-cms/db
+```
+
+## Entry points
+
+| Import | Use it from | What it holds |
+| :-- | :-- | :-- |
+| `@nextblock-cms/db` | client | The browser Supabase client (`createClient`), the `Database` types, and client-side profile and language lookups |
+| `@nextblock-cms/db/server` | server only | `createClient()` scoped to the request cookies, `getSsgSupabaseClient()` for public reads, `getServiceRoleSupabaseClient()` for admin work only (it bypasses Row Level Security), `verifyPackageOnline()`, secret encryption and config resolution |
+| `@nextblock-cms/db/secrets` | server only | Secret encryption (`encryptSecret`, `decryptSecret`) and config resolution, without the Supabase clients |
+| `@nextblock-cms/db/types` | types only | The generated `Database` types |
+
+Pick the server client by trust level. Use the service-role client only in code that has
+already checked the caller's role.
+
+## Environment
+
+The clients read `NEXT_PUBLIC_SUPABASE_URL` or `SUPABASE_URL`, the publishable (anon) key under
+either its `NEXT_PUBLIC_` or its plain name, and, for the service-role client,
+`SUPABASE_SERVICE_ROLE_KEY` or `SUPABASE_SECRET_KEY`. The alternative names are the ones the
+Vercel Supabase integration injects.
+
+## Migrations
+
+The package includes `supabase/` with the NextBlock migrations. `npm run update` in a NextBlock
+project copies them into the project's `supabase/migrations` and applies the pending ones.
+
+## Documentation
+
+- [Database and auth](https://github.com/nextblock-cms/nextblock/blob/master/docs/04-DATABASE-AND-AUTH.md)
+- [Staying up to date](https://github.com/nextblock-cms/nextblock/blob/master/docs/13-STAYING-UP-TO-DATE.md)
+
+## License
+
+AGPL-3.0-or-later.

package/index.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./lib/supabase/client.cjs.js"),t=require("./lib/supabase/types.cjs.js"),i=require("./lib/media-actions.cjs.js");exports.createClient=e.createClient;exports.getActiveLanguagesClientSide=e.getActiveLanguagesClientSide;exports.getProfileWithRoleClientSide=e.getProfileWithRoleClientSide;exports.Constants=t.Constants;exports.recordMediaUpload=i.recordMediaUpload;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./lib/supabase/client.cjs.js"),t=require("./lib/supabase/types.cjs.js"),n=require("./lib/media-actions.cjs.js");exports.Constants=t.Constants,exports.createClient=e.createClient,exports.getActiveLanguagesClientSide=e.getActiveLanguagesClientSide,exports.getProfileWithRoleClientSide=e.getProfileWithRoleClientSide,exports.recordMediaUpload=n.recordMediaUpload;

package/index.es.js

@@ -1,10 +1,4 @@
-import { createClient as o, getActiveLanguagesClientSide as r, getProfileWithRoleClientSide as i } from "./lib/supabase/client.es.js";
-import { Constants as l } from "./lib/supabase/types.es.js";
-import { recordMediaUpload as d } from "./lib/media-actions.es.js";
-export {
-  l as Constants,
-  o as createClient,
-  r as getActiveLanguagesClientSide,
-  i as getProfileWithRoleClientSide,
-  d as recordMediaUpload
-};
+import { createClient as e, getActiveLanguagesClientSide as t, getProfileWithRoleClientSide as n } from "./lib/supabase/client.es.js";
+import { Constants as r } from "./lib/supabase/types.es.js";
+import { recordMediaUpload as i } from "./lib/media-actions.es.js";
+export { r as Constants, e as createClient, t as getActiveLanguagesClientSide, n as getProfileWithRoleClientSide, i as recordMediaUpload };

package/lib/config-resolve.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=new Set;function a(e,n,s){const t=typeof e=="string"?e.trim():"";if(t)return t;const o=process.env[n],r=typeof o=="string"?o.trim():"";return r?(s?.warnOnEnvFallback!==!1&&!i.has(n)&&(i.add(n),console.warn(`[nextblock-config] "${n}" is still resolved from an environment variable. Configure it in the CMS to move it into the database.`)),r):null}function l(){return process.env.NEXT_PUBLIC_IS_SANDBOX==="true"}exports.isSandboxEnvironment=l;exports.resolveConfigValue=a;
+var e=new Set;function t(t,n,r){let i=typeof t==`string`?t.trim():``;if(i)return i;let a=process.env[n],o=typeof a==`string`?a.trim():``;return o?(r?.warnOnEnvFallback!==!1&&!e.has(n)&&(e.add(n),console.warn(`[nextblock-config] "${n}" is still resolved from an environment variable. Configure it in the CMS to move it into the database.`)),o):null}function n(){return process.env.NEXT_PUBLIC_IS_SANDBOX===`true`}exports.isSandboxEnvironment=n,exports.resolveConfigValue=t;

package/lib/config-resolve.es.js

@@ -1,17 +1,13 @@
-const i = /* @__PURE__ */ new Set();
-function f(t, n, s) {
-  const r = typeof t == "string" ? t.trim() : "";
-  if (r)
-    return r;
-  const o = process.env[n], e = typeof o == "string" ? o.trim() : "";
-  return e ? (s?.warnOnEnvFallback !== !1 && !i.has(n) && (i.add(n), console.warn(
-    `[nextblock-config] "${n}" is still resolved from an environment variable. Configure it in the CMS to move it into the database.`
-  )), e) : null;
+//#region src/lib/config-resolve.ts
+var e = /* @__PURE__ */ new Set();
+function t(t, n, r) {
+	let i = typeof t == "string" ? t.trim() : "";
+	if (i) return i;
+	let a = process.env[n], o = typeof a == "string" ? a.trim() : "";
+	return o ? (r?.warnOnEnvFallback !== !1 && !e.has(n) && (e.add(n), console.warn(`[nextblock-config] "${n}" is still resolved from an environment variable. Configure it in the CMS to move it into the database.`)), o) : null;
 }
-function a() {
-  return process.env.NEXT_PUBLIC_IS_SANDBOX === "true";
+function n() {
+	return process.env.NEXT_PUBLIC_IS_SANDBOX === "true";
 }
-export {
-  a as isSandboxEnvironment,
-  f as resolveConfigValue
-};
+//#endregion
+export { n as isSandboxEnvironment, t as resolveConfigValue };

package/lib/media-actions.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const g=require("./supabase/server.cjs.js"),_=require("next/cache"),o=require("@nextblock-cms/utils/server");async function j(e,a){const n=e.actorUserId,d=n?g.getServiceRoleSupabaseClient():g.createClient();let s;if(n)s=n;else{const{data:{user:r},error:t}=await d.auth.getUser();if(t||!r)return a?{error:"User not authenticated for media record."}:o.encodedRedirect("error","/cms/media","User not authenticated for media record.");s=r.id}const{data:l}=await d.from("profiles").select("role").eq("id",s).single();if(!l||!["ADMIN","WRITER"].includes(l.role))return a?{error:"Forbidden: Insufficient permissions to record media."}:o.encodedRedirect("error","/cms/media","Forbidden: Insufficient permissions to record media.");let i=e.r2Variants.find(r=>r.variantLabel==="original_avif")||e.r2Variants.find(r=>r.variantLabel==="xlarge_avif")||e.r2Variants[0]||e.originalImageDetails;i||(i=e.originalImageDetails||{objectKey:e.r2OriginalKey,url:"",width:0,height:0,fileType:"application/octet-stream",sizeBytes:0,variantLabel:"fallback_original"});const b=[...e.originalImageDetails&&e.originalImageDetails.objectKey!==i.objectKey?[e.originalImageDetails]:[],...e.r2Variants].filter((r,t,m)=>t===m.findIndex(f=>f.objectKey===r.objectKey)),h=r=>{const t=r.lastIndexOf(".");return(t>0?r.substring(0,t):r).replace(/[-+_\\]+/g," ").replace(/\s+/g," ").trim().replace(/\b\w+/g,u=>u.charAt(0).toUpperCase()+u.slice(1))},p=e.description??(i.fileType?.startsWith("image/")||e.originalImageDetails?.fileType?.startsWith("image/")?h(e.fileName):null),I={uploader_id:s,file_name:e.fileName,object_key:i.objectKey,file_path:i.objectKey,folder:(()=>{const r=i.objectKey.match(/^(.*\/)?.*$/);return r&&r[1]?r[1]:null})(),file_type:i.fileType,size_bytes:i.sizeBytes,description:p,width:i.width,height:i.height,variants:b,blur_data_url:e.blurDataUrl||null},{data:v,error:c}=await d.from("media").insert(I).select().single();if(c)return console.error("Error recording media upload:",c),a?{error:`Failed to record media: ${c.message}`}:o.encodedRedirect("error","/cms/media",`Failed to record media: ${c.message}`);if(_.revalidatePath("/cms/media"),a)return{success:!0,data:v};o.encodedRedirect("success","/cms/media","Media recorded successfully.")}exports.recordMediaUpload=j;
+"use server";const e=require("./supabase/server.cjs.js");let t=require("next/cache"),n=require("@nextblock-cms/utils/server");async function r(r,i){let a=r.actorUserId,o=a?e.getServiceRoleSupabaseClient():e.createClient(),s;if(a)s=a;else{let{data:{user:e},error:t}=await o.auth.getUser();if(t||!e)return i?{error:`User not authenticated for media record.`}:(0,n.encodedRedirect)(`error`,`/cms/media`,`User not authenticated for media record.`);s=e.id}let{data:c}=await o.from(`profiles`).select(`role`).eq(`id`,s).single();if(!c||![`ADMIN`,`WRITER`].includes(c.role))return i?{error:`Forbidden: Insufficient permissions to record media.`}:(0,n.encodedRedirect)(`error`,`/cms/media`,`Forbidden: Insufficient permissions to record media.`);let l=r.r2Variants.find(e=>e.variantLabel===`original_avif`)||r.r2Variants.find(e=>e.variantLabel===`xlarge_avif`)||r.r2Variants[0]||r.originalImageDetails;l||=r.originalImageDetails||{objectKey:r.r2OriginalKey,url:``,width:0,height:0,fileType:`application/octet-stream`,sizeBytes:0,variantLabel:`fallback_original`};let u=[...r.originalImageDetails&&r.originalImageDetails.objectKey!==l.objectKey?[r.originalImageDetails]:[],...r.r2Variants].filter((e,t,n)=>t===n.findIndex(t=>t.objectKey===e.objectKey)),d=r.description??(l.fileType?.startsWith(`image/`)||r.originalImageDetails?.fileType?.startsWith(`image/`)?(e=>{let t=e.lastIndexOf(`.`);return(t>0?e.substring(0,t):e).replace(/[-+_\\]+/g,` `).replace(/\s+/g,` `).trim().replace(/\b\w+/g,e=>e.charAt(0).toUpperCase()+e.slice(1))})(r.fileName):null),f={uploader_id:s,file_name:r.fileName,object_key:l.objectKey,file_path:l.objectKey,folder:(()=>{let e=l.objectKey.match(/^(.*\/)?.*$/);return e&&e[1]?e[1]:null})(),file_type:l.fileType,size_bytes:l.sizeBytes,description:d,width:l.width,height:l.height,variants:u,blur_data_url:r.blurDataUrl||null},{data:p,error:m}=await o.from(`media`).insert(f).select().single();if(m)return console.error(`Error recording media upload:`,m),i?{error:`Failed to record media: ${m.message}`}:(0,n.encodedRedirect)(`error`,`/cms/media`,`Failed to record media: ${m.message}`);if((0,t.revalidatePath)(`/cms/media`),i)return{success:!0,data:p};(0,n.encodedRedirect)(`success`,`/cms/media`,`Media recorded successfully.`)}exports.recordMediaUpload=r;

package/lib/media-actions.es.js

@@ -1,61 +1,54 @@
-import { getServiceRoleSupabaseClient as _, createClient as j } from "./supabase/server.es.js";
-import { revalidatePath as v } from "next/cache";
-import { encodedRedirect as n } from "@nextblock-cms/utils/server";
-async function w(e, a) {
-  const c = e.actorUserId, l = c ? _() : j();
-  let s;
-  if (c)
-    s = c;
-  else {
-    const { data: { user: r }, error: t } = await l.auth.getUser();
-    if (t || !r)
-      return a ? { error: "User not authenticated for media record." } : n("error", "/cms/media", "User not authenticated for media record.");
-    s = r.id;
-  }
-  const { data: d } = await l.from("profiles").select("role").eq("id", s).single();
-  if (!d || !["ADMIN", "WRITER"].includes(d.role))
-    return a ? { error: "Forbidden: Insufficient permissions to record media." } : n("error", "/cms/media", "Forbidden: Insufficient permissions to record media.");
-  let i = e.r2Variants.find((r) => r.variantLabel === "original_avif") || e.r2Variants.find((r) => r.variantLabel === "xlarge_avif") || e.r2Variants[0] || e.originalImageDetails;
-  i || (i = e.originalImageDetails || {
-    objectKey: e.r2OriginalKey,
-    url: "",
-    width: 0,
-    height: 0,
-    fileType: "application/octet-stream",
-    sizeBytes: 0,
-    variantLabel: "fallback_original"
-  });
-  const u = [
-    ...e.originalImageDetails && e.originalImageDetails.objectKey !== i.objectKey ? [e.originalImageDetails] : [],
-    ...e.r2Variants
-  ].filter(
-    (r, t, m) => t === m.findIndex((f) => f.objectKey === r.objectKey)
-  ), b = (r) => {
-    const t = r.lastIndexOf(".");
-    return (t > 0 ? r.substring(0, t) : r).replace(/[-+_\\]+/g, " ").replace(/\s+/g, " ").trim().replace(/\b\w+/g, (g) => g.charAt(0).toUpperCase() + g.slice(1));
-  }, h = e.description ?? (i.fileType?.startsWith("image/") || e.originalImageDetails?.fileType?.startsWith("image/") ? b(e.fileName) : null), p = {
-    uploader_id: s,
-    file_name: e.fileName,
-    object_key: i.objectKey,
-    file_path: i.objectKey,
-    folder: (() => {
-      const r = i.objectKey.match(/^(.*\/)?.*$/);
-      return r && r[1] ? r[1] : null;
-    })(),
-    file_type: i.fileType,
-    size_bytes: i.sizeBytes,
-    description: h,
-    width: i.width,
-    height: i.height,
-    variants: u,
-    blur_data_url: e.blurDataUrl || null
-  }, { data: I, error: o } = await l.from("media").insert(p).select().single();
-  if (o)
-    return console.error("Error recording media upload:", o), a ? { error: `Failed to record media: ${o.message}` } : n("error", "/cms/media", `Failed to record media: ${o.message}`);
-  if (v("/cms/media"), a)
-    return { success: !0, data: I };
-  n("success", "/cms/media", "Media recorded successfully.");
+"use server";
+import { createClient as e, getServiceRoleSupabaseClient as t } from "./supabase/server.es.js";
+import { revalidatePath as n } from "next/cache";
+import { encodedRedirect as r } from "@nextblock-cms/utils/server";
+//#region src/lib/media-actions.ts
+async function i(i, a) {
+	let o = i.actorUserId, s = o ? t() : e(), c;
+	if (o) c = o;
+	else {
+		let { data: { user: e }, error: t } = await s.auth.getUser();
+		if (t || !e) return a ? { error: "User not authenticated for media record." } : r("error", "/cms/media", "User not authenticated for media record.");
+		c = e.id;
+	}
+	let { data: l } = await s.from("profiles").select("role").eq("id", c).single();
+	if (!l || !["ADMIN", "WRITER"].includes(l.role)) return a ? { error: "Forbidden: Insufficient permissions to record media." } : r("error", "/cms/media", "Forbidden: Insufficient permissions to record media.");
+	let u = i.r2Variants.find((e) => e.variantLabel === "original_avif") || i.r2Variants.find((e) => e.variantLabel === "xlarge_avif") || i.r2Variants[0] || i.originalImageDetails;
+	u ||= i.originalImageDetails || {
+		objectKey: i.r2OriginalKey,
+		url: "",
+		width: 0,
+		height: 0,
+		fileType: "application/octet-stream",
+		sizeBytes: 0,
+		variantLabel: "fallback_original"
+	};
+	let d = [...i.originalImageDetails && i.originalImageDetails.objectKey !== u.objectKey ? [i.originalImageDetails] : [], ...i.r2Variants].filter((e, t, n) => t === n.findIndex((t) => t.objectKey === e.objectKey)), f = i.description ?? (u.fileType?.startsWith("image/") || i.originalImageDetails?.fileType?.startsWith("image/") ? ((e) => {
+		let t = e.lastIndexOf(".");
+		return (t > 0 ? e.substring(0, t) : e).replace(/[-+_\\]+/g, " ").replace(/\s+/g, " ").trim().replace(/\b\w+/g, (e) => e.charAt(0).toUpperCase() + e.slice(1));
+	})(i.fileName) : null), p = {
+		uploader_id: c,
+		file_name: i.fileName,
+		object_key: u.objectKey,
+		file_path: u.objectKey,
+		folder: (() => {
+			let e = u.objectKey.match(/^(.*\/)?.*$/);
+			return e && e[1] ? e[1] : null;
+		})(),
+		file_type: u.fileType,
+		size_bytes: u.sizeBytes,
+		description: f,
+		width: u.width,
+		height: u.height,
+		variants: d,
+		blur_data_url: i.blurDataUrl || null
+	}, { data: m, error: h } = await s.from("media").insert(p).select().single();
+	if (h) return console.error("Error recording media upload:", h), a ? { error: `Failed to record media: ${h.message}` } : r("error", "/cms/media", `Failed to record media: ${h.message}`);
+	if (n("/cms/media"), a) return {
+		success: !0,
+		data: m
+	};
+	r("success", "/cms/media", "Media recorded successfully.");
 }
-export {
-  w as recordMediaUpload
-};
+//#endregion
+export { i as recordMediaUpload };

package/lib/package-validation.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});require("server-only");const A=require("./supabase/server.cjs.js"),E=require("next/cache"),_=require("@supabase/supabase-js"),c="package-activation";function l(e){if(typeof e!="string"||!e.trim())return null;const r=e.trim(),t=/(?:z|[+-]\d{2}:?\d{2})$/i.test(r),n=Date.parse(t?r:`${r.replace(" ","T")}Z`);return Number.isFinite(n)?n:null}function i(e){if(!e||typeof e!="object"||Array.isArray(e))return null;const r=e,t=r.nextblock&&typeof r.nextblock=="object"&&!Array.isArray(r.nextblock)?r.nextblock:null,n=[t?.expiration,t?.trial_ends_at,r.expiration].map(l).filter(s=>s!==null);return n.length>0?Math.min(...n):null}function o(e,r=Date.now()){if(e.status!=="active")return!1;const t=i(e.meta);return t===null||t>r}async function a(e,r){try{const{data:t,error:n}=await r.from("package_activations").select("status, meta").eq("package_id",e).eq("status","active").limit(5);return n||!Array.isArray(t)?!1:t.some(s=>o(s))}catch(t){return console.error(`Error verifying package ${e}:`,t),!1}}const S=E.unstable_cache(async e=>{const r=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,t=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY||process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY;if(!r||!t)return!1;const n=_.createClient(r,t,{auth:{persistSession:!1,autoRefreshToken:!1,detectSessionInUrl:!1}});return a(e,n)},["package-activation"],{revalidate:60,tags:[c]});async function u(e,r){if(r)return a(e,r);const t=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,n=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY||process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY;if(t&&n)return S(e);const s=await A.createClient();return a(e,s)}exports.PACKAGE_ACTIVATION_CACHE_TAG=c;exports.isPackageActivationRowValid=o;exports.resolvePackageActivationExpiry=i;exports.verifyPackageOnline=u;
+const e=require("./supabase/server.cjs.js");let t=require("@supabase/supabase-js"),n=require("next/cache");require("server-only");var r=`package-activation`;function i(e){if(typeof e!=`string`||!e.trim())return null;let t=e.trim(),n=/(?:z|[+-]\d{2}:?\d{2})$/i.test(t),r=Date.parse(n?t:`${t.replace(` `,`T`)}Z`);return Number.isFinite(r)?r:null}function a(e){if(!e||typeof e!=`object`||Array.isArray(e))return null;let t=e,n=t.nextblock&&typeof t.nextblock==`object`&&!Array.isArray(t.nextblock)?t.nextblock:null,r=[n?.expiration,n?.trial_ends_at,t.expiration].map(i).filter(e=>e!==null);return r.length>0?Math.min(...r):null}function o(e,t=Date.now()){if(e.status!==`active`)return!1;let n=a(e.meta);return n===null||n>t}async function s(e,t){try{let{data:n,error:r}=await t.from(`package_activations`).select(`status, meta`).eq(`package_id`,e).eq(`status`,`active`).limit(5);return r||!Array.isArray(n)?!1:n.some(e=>o(e))}catch(t){return console.error(`Error verifying package ${e}:`,t),!1}}var c=(0,n.unstable_cache)(async e=>{let n=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,r=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY||process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY;return!n||!r?!1:s(e,(0,t.createClient)(n,r,{auth:{persistSession:!1,autoRefreshToken:!1,detectSessionInUrl:!1}}))},[`package-activation`],{revalidate:60,tags:[r]});async function l(t,n){if(n)return s(t,n);let r=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,i=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY||process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY;return r&&i?c(t):s(t,await e.createClient())}exports.PACKAGE_ACTIVATION_CACHE_TAG=r,exports.isPackageActivationRowValid=o,exports.resolvePackageActivationExpiry=a,exports.verifyPackageOnline=l;

package/lib/package-validation.es.js

@@ -1,63 +1,51 @@
+import { createClient as e } from "./supabase/server.es.js";
+import { createClient as t } from "@supabase/supabase-js";
+import { unstable_cache as n } from "next/cache";
 import "server-only";
-import { createClient as c } from "./supabase/server.es.js";
-import { unstable_cache as o } from "next/cache";
-import { createClient as i } from "@supabase/supabase-js";
-const A = "package-activation";
-function E(e) {
-  if (typeof e != "string" || !e.trim())
-    return null;
-  const r = e.trim(), t = /(?:z|[+-]\d{2}:?\d{2})$/i.test(r), n = Date.parse(t ? r : `${r.replace(" ", "T")}Z`);
-  return Number.isFinite(n) ? n : null;
+//#region src/lib/package-validation.ts
+var r = "package-activation";
+function i(e) {
+	if (typeof e != "string" || !e.trim()) return null;
+	let t = e.trim(), n = /(?:z|[+-]\d{2}:?\d{2})$/i.test(t), r = Date.parse(n ? t : `${t.replace(" ", "T")}Z`);
+	return Number.isFinite(r) ? r : null;
 }
-function _(e) {
-  if (!e || typeof e != "object" || Array.isArray(e))
-    return null;
-  const r = e, t = r.nextblock && typeof r.nextblock == "object" && !Array.isArray(r.nextblock) ? r.nextblock : null, n = [t?.expiration, t?.trial_ends_at, r.expiration].map(E).filter((s) => s !== null);
-  return n.length > 0 ? Math.min(...n) : null;
+function a(e) {
+	if (!e || typeof e != "object" || Array.isArray(e)) return null;
+	let t = e, n = t.nextblock && typeof t.nextblock == "object" && !Array.isArray(t.nextblock) ? t.nextblock : null, r = [
+		n?.expiration,
+		n?.trial_ends_at,
+		t.expiration
+	].map(i).filter((e) => e !== null);
+	return r.length > 0 ? Math.min(...r) : null;
 }
-function l(e, r = Date.now()) {
-  if (e.status !== "active")
-    return !1;
-  const t = _(e.meta);
-  return t === null || t > r;
+function o(e, t = Date.now()) {
+	if (e.status !== "active") return !1;
+	let n = a(e.meta);
+	return n === null || n > t;
 }
-async function a(e, r) {
-  try {
-    const { data: t, error: n } = await r.from("package_activations").select("status, meta").eq("package_id", e).eq("status", "active").limit(5);
-    return n || !Array.isArray(t) ? !1 : t.some((s) => l(s));
-  } catch (t) {
-    return console.error(`Error verifying package ${e}:`, t), !1;
-  }
+async function s(e, t) {
+	try {
+		let { data: n, error: r } = await t.from("package_activations").select("status, meta").eq("package_id", e).eq("status", "active").limit(5);
+		return r || !Array.isArray(n) ? !1 : n.some((e) => o(e));
+	} catch (t) {
+		return console.error(`Error verifying package ${e}:`, t), !1;
+	}
 }
-const S = o(
-  async (e) => {
-    const r = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, t = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY;
-    if (!r || !t)
-      return !1;
-    const n = i(r, t, {
-      auth: {
-        persistSession: !1,
-        autoRefreshToken: !1,
-        detectSessionInUrl: !1
-      }
-    });
-    return a(e, n);
-  },
-  ["package-activation"],
-  { revalidate: 60, tags: [A] }
-);
-async function U(e, r) {
-  if (r)
-    return a(e, r);
-  const t = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, n = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY;
-  if (t && n)
-    return S(e);
-  const s = await c();
-  return a(e, s);
+var c = n(async (e) => {
+	let n = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, r = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY;
+	return !n || !r ? !1 : s(e, t(n, r, { auth: {
+		persistSession: !1,
+		autoRefreshToken: !1,
+		detectSessionInUrl: !1
+	} }));
+}, ["package-activation"], {
+	revalidate: 60,
+	tags: [r]
+});
+async function l(t, n) {
+	if (n) return s(t, n);
+	let r = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, i = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY;
+	return r && i ? c(t) : s(t, await e());
 }
-export {
-  A as PACKAGE_ACTIVATION_CACHE_TAG,
-  l as isPackageActivationRowValid,
-  _ as resolvePackageActivationExpiry,
-  U as verifyPackageOnline
-};
+//#endregion
+export { r as PACKAGE_ACTIVATION_CACHE_TAG, o as isPackageActivationRowValid, a as resolvePackageActivationExpiry, l as verifyPackageOnline };

package/lib/secret-crypto.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("node:crypto"),c="aes-256-gcm",a=1;function E(t){const e=t.trim();if(!e)throw new Error("A non-empty encryption secret is required to manage stored secrets.");return o.createHash("sha256").update(e).digest()}function i(t){if(!t||typeof t!="object")return!1;const e=t;return e.algorithm===c&&e.version===a&&typeof e.authTag=="string"&&typeof e.ciphertext=="string"&&typeof e.iv=="string"}function g(t){if(!i(t))throw new Error("Invalid encrypted secret payload.");const e=t;return{algorithm:e.algorithm,authTag:e.authTag,ciphertext:e.ciphertext,iv:e.iv,last4:typeof e.last4=="string"?e.last4:"",updatedAt:typeof e.updatedAt=="string"?e.updatedAt:"",version:e.version}}function d(t){const e=t.value.trim();if(!e)throw new Error("A non-empty value is required to encrypt a secret.");const n=E(t.encryptionSecret),r=o.randomBytes(12),s=o.createCipheriv(c,n,r),S=Buffer.concat([s.update(e,"utf8"),s.final()]),h=s.getAuthTag();return{algorithm:c,authTag:h.toString("base64"),ciphertext:S.toString("base64"),iv:r.toString("base64"),last4:e.slice(-4),updatedAt:(t.now??new Date).toISOString(),version:a}}function u(t){const e=g(t.envelope),n=E(t.encryptionSecret);try{const r=o.createDecipheriv(c,n,Buffer.from(e.iv,"base64"));return r.setAuthTag(Buffer.from(e.authTag,"base64")),Buffer.concat([r.update(Buffer.from(e.ciphertext,"base64")),r.final()]).toString("utf8")}catch{throw new Error("Failed to decrypt stored secret.")}}function l(t){const e=(t??"").trim();return e?`•••• ${e}`:"Stored secret"}function v(t){if(!i(t))return{hasStoredValue:!1,last4:null,maskedValue:null,updatedAt:null};const e=t,n=typeof e.last4=="string"&&e.last4?e.last4:null;return{hasStoredValue:!0,last4:n,maskedValue:l(n),updatedAt:typeof e.updatedAt=="string"&&e.updatedAt?e.updatedAt:null}}const _="nextblock-secret-encryption-key-v1";function m(){const t=process.env.SUPABASE_SERVICE_ROLE_KEY??process.env.SUPABASE_SECRET_KEY;return typeof t!="string"||!t.trim()?null:o.createHmac("sha256",t.trim()).update(_).digest("hex")}function f(){const t=[],e=n=>{const r=typeof n=="string"?n.trim():"";r&&!t.includes(r)&&t.push(r)};return e(process.env.NEXTBLOCK_ENCRYPTION_KEY),e(process.env.CORTEX_AI_ENCRYPTION_KEY),e(m()),t}function p(){return f()[0]??null}function K(){return p()!==null}function y(){const t=p();if(!t)throw new Error("An encryption key (NEXTBLOCK_ENCRYPTION_KEY or CORTEX_AI_ENCRYPTION_KEY) is required to manage stored secrets.");return t}function T(t,e){return d({value:t,encryptionSecret:y(),now:e})}function A(t){return u({envelope:t,encryptionSecret:y()})}function O(t){if(!i(t))return null;for(const e of f())try{return u({envelope:t,encryptionSecret:e})}catch{}return null}exports.SECRET_ENVELOPE_ALGORITHM=c;exports.SECRET_ENVELOPE_VERSION=a;exports.decryptSecret=u;exports.decryptWithEnvKey=A;exports.encryptSecret=d;exports.encryptWithEnvKey=T;exports.getMaskedSecret=l;exports.getSecretEnvelopeStatus=v;exports.hasSecretEncryptionKey=K;exports.isEncryptedSecretEnvelope=i;exports.requireSecretEncryptionKey=y;exports.resolveSecretEncryptionKey=p;exports.tryDecryptWithEnvKey=O;
+let e=require("node:crypto");var t=`aes-256-gcm`,n=1;function r(t){let n=t.trim();if(!n)throw Error(`A non-empty encryption secret is required to manage stored secrets.`);return(0,e.createHash)(`sha256`).update(n).digest()}function i(e){if(!e||typeof e!=`object`)return!1;let t=e;return t.algorithm===`aes-256-gcm`&&t.version===1&&typeof t.authTag==`string`&&typeof t.ciphertext==`string`&&typeof t.iv==`string`}function a(e){if(!i(e))throw Error(`Invalid encrypted secret payload.`);let t=e;return{algorithm:t.algorithm,authTag:t.authTag,ciphertext:t.ciphertext,iv:t.iv,last4:typeof t.last4==`string`?t.last4:``,updatedAt:typeof t.updatedAt==`string`?t.updatedAt:``,version:t.version}}function o(n){let i=n.value.trim();if(!i)throw Error(`A non-empty value is required to encrypt a secret.`);let a=r(n.encryptionSecret),o=(0,e.randomBytes)(12),s=(0,e.createCipheriv)(t,a,o),c=Buffer.concat([s.update(i,`utf8`),s.final()]);return{algorithm:t,authTag:s.getAuthTag().toString(`base64`),ciphertext:c.toString(`base64`),iv:o.toString(`base64`),last4:i.slice(-4),updatedAt:(n.now??new Date).toISOString(),version:1}}function s(n){let i=a(n.envelope),o=r(n.encryptionSecret);try{let n=(0,e.createDecipheriv)(t,o,Buffer.from(i.iv,`base64`));return n.setAuthTag(Buffer.from(i.authTag,`base64`)),Buffer.concat([n.update(Buffer.from(i.ciphertext,`base64`)),n.final()]).toString(`utf8`)}catch{throw Error(`Failed to decrypt stored secret.`)}}function c(e){let t=(e??``).trim();return t?`•••• ${t}`:`Stored secret`}function l(e){if(!i(e))return{hasStoredValue:!1,last4:null,maskedValue:null,updatedAt:null};let t=e,n=typeof t.last4==`string`&&t.last4?t.last4:null;return{hasStoredValue:!0,last4:n,maskedValue:c(n),updatedAt:typeof t.updatedAt==`string`&&t.updatedAt?t.updatedAt:null}}var u=`nextblock-secret-encryption-key-v1`;function d(){let t=process.env.SUPABASE_SERVICE_ROLE_KEY??process.env.SUPABASE_SECRET_KEY;return typeof t!=`string`||!t.trim()?null:(0,e.createHmac)(`sha256`,t.trim()).update(u).digest(`hex`)}function f(){let e=[],t=t=>{let n=typeof t==`string`?t.trim():``;n&&!e.includes(n)&&e.push(n)};return t(process.env.NEXTBLOCK_ENCRYPTION_KEY),t(process.env.CORTEX_AI_ENCRYPTION_KEY),t(d()),e}function p(){return f()[0]??null}function m(){return p()!==null}function h(){let e=p();if(!e)throw Error(`An encryption key (NEXTBLOCK_ENCRYPTION_KEY or CORTEX_AI_ENCRYPTION_KEY) is required to manage stored secrets.`);return e}function g(e,t){return o({value:e,encryptionSecret:h(),now:t})}function _(e){return s({envelope:e,encryptionSecret:h()})}function v(e){if(!i(e))return null;for(let t of f())try{return s({envelope:e,encryptionSecret:t})}catch{}return null}exports.SECRET_ENVELOPE_ALGORITHM=t,exports.SECRET_ENVELOPE_VERSION=n,exports.decryptSecret=s,exports.decryptWithEnvKey=_,exports.encryptSecret=o,exports.encryptWithEnvKey=g,exports.getMaskedSecret=c,exports.getSecretEnvelopeStatus=l,exports.hasSecretEncryptionKey=m,exports.isEncryptedSecretEnvelope=i,exports.requireSecretEncryptionKey=h,exports.resolveSecretEncryptionKey=p,exports.tryDecryptWithEnvKey=v;

package/lib/secret-crypto.es.js

@@ -1,131 +1,116 @@
-import { createDecipheriv as E, randomBytes as h, createCipheriv as g, createHash as S, createHmac as v } from "node:crypto";
-const o = "aes-256-gcm", s = 1;
-function a(t) {
-  const e = t.trim();
-  if (!e)
-    throw new Error("A non-empty encryption secret is required to manage stored secrets.");
-  return S("sha256").update(e).digest();
+import { createCipheriv as e, createDecipheriv as t, createHash as n, createHmac as r, randomBytes as i } from "node:crypto";
+//#region src/lib/secret-crypto.ts
+var a = "aes-256-gcm", o = 1;
+function s(e) {
+	let t = e.trim();
+	if (!t) throw Error("A non-empty encryption secret is required to manage stored secrets.");
+	return n("sha256").update(t).digest();
 }
-function i(t) {
-  if (!t || typeof t != "object")
-    return !1;
-  const e = t;
-  return e.algorithm === o && e.version === s && typeof e.authTag == "string" && typeof e.ciphertext == "string" && typeof e.iv == "string";
+function c(e) {
+	if (!e || typeof e != "object") return !1;
+	let t = e;
+	return t.algorithm === "aes-256-gcm" && t.version === 1 && typeof t.authTag == "string" && typeof t.ciphertext == "string" && typeof t.iv == "string";
 }
-function m(t) {
-  if (!i(t))
-    throw new Error("Invalid encrypted secret payload.");
-  const e = t;
-  return {
-    algorithm: e.algorithm,
-    authTag: e.authTag,
-    ciphertext: e.ciphertext,
-    iv: e.iv,
-    last4: typeof e.last4 == "string" ? e.last4 : "",
-    updatedAt: typeof e.updatedAt == "string" ? e.updatedAt : "",
-    version: e.version
-  };
-}
-function A(t) {
-  const e = t.value.trim();
-  if (!e)
-    throw new Error("A non-empty value is required to encrypt a secret.");
-  const n = a(t.encryptionSecret), r = h(12), c = g(o, n, r), l = Buffer.concat([c.update(e, "utf8"), c.final()]), y = c.getAuthTag();
-  return {
-    algorithm: o,
-    authTag: y.toString("base64"),
-    ciphertext: l.toString("base64"),
-    iv: r.toString("base64"),
-    last4: e.slice(-4),
-    updatedAt: (t.now ?? /* @__PURE__ */ new Date()).toISOString(),
-    version: s
-  };
+function l(e) {
+	if (!c(e)) throw Error("Invalid encrypted secret payload.");
+	let t = e;
+	return {
+		algorithm: t.algorithm,
+		authTag: t.authTag,
+		ciphertext: t.ciphertext,
+		iv: t.iv,
+		last4: typeof t.last4 == "string" ? t.last4 : "",
+		updatedAt: typeof t.updatedAt == "string" ? t.updatedAt : "",
+		version: t.version
+	};
 }
 function u(t) {
-  const e = m(t.envelope), n = a(t.encryptionSecret);
-  try {
-    const r = E(
-      o,
-      n,
-      Buffer.from(e.iv, "base64")
-    );
-    return r.setAuthTag(Buffer.from(e.authTag, "base64")), Buffer.concat([
-      r.update(Buffer.from(e.ciphertext, "base64")),
-      r.final()
-    ]).toString("utf8");
-  } catch {
-    throw new Error("Failed to decrypt stored secret.");
-  }
+	let n = t.value.trim();
+	if (!n) throw Error("A non-empty value is required to encrypt a secret.");
+	let r = s(t.encryptionSecret), o = i(12), c = e(a, r, o), l = Buffer.concat([c.update(n, "utf8"), c.final()]);
+	return {
+		algorithm: a,
+		authTag: c.getAuthTag().toString("base64"),
+		ciphertext: l.toString("base64"),
+		iv: o.toString("base64"),
+		last4: n.slice(-4),
+		updatedAt: (t.now ?? /* @__PURE__ */ new Date()).toISOString(),
+		version: 1
+	};
+}
+function d(e) {
+	let n = l(e.envelope), r = s(e.encryptionSecret);
+	try {
+		let e = t(a, r, Buffer.from(n.iv, "base64"));
+		return e.setAuthTag(Buffer.from(n.authTag, "base64")), Buffer.concat([e.update(Buffer.from(n.ciphertext, "base64")), e.final()]).toString("utf8");
+	} catch {
+		throw Error("Failed to decrypt stored secret.");
+	}
 }
-function _(t) {
-  const e = (t ?? "").trim();
-  return e ? `•••• ${e}` : "Stored secret";
+function f(e) {
+	let t = (e ?? "").trim();
+	return t ? `•••• ${t}` : "Stored secret";
 }
-function R(t) {
-  if (!i(t))
-    return { hasStoredValue: !1, last4: null, maskedValue: null, updatedAt: null };
-  const e = t, n = typeof e.last4 == "string" && e.last4 ? e.last4 : null;
-  return {
-    hasStoredValue: !0,
-    last4: n,
-    maskedValue: _(n),
-    updatedAt: typeof e.updatedAt == "string" && e.updatedAt ? e.updatedAt : null
-  };
+function p(e) {
+	if (!c(e)) return {
+		hasStoredValue: !1,
+		last4: null,
+		maskedValue: null,
+		updatedAt: null
+	};
+	let t = e, n = typeof t.last4 == "string" && t.last4 ? t.last4 : null;
+	return {
+		hasStoredValue: !0,
+		last4: n,
+		maskedValue: f(n),
+		updatedAt: typeof t.updatedAt == "string" && t.updatedAt ? t.updatedAt : null
+	};
 }
-const T = "nextblock-secret-encryption-key-v1";
-function K() {
-  const t = process.env.SUPABASE_SERVICE_ROLE_KEY ?? process.env.SUPABASE_SECRET_KEY;
-  return typeof t != "string" || !t.trim() ? null : v("sha256", t.trim()).update(T).digest("hex");
+var m = "nextblock-secret-encryption-key-v1";
+function h() {
+	let e = process.env.SUPABASE_SERVICE_ROLE_KEY ?? process.env.SUPABASE_SECRET_KEY;
+	return typeof e != "string" || !e.trim() ? null : r("sha256", e.trim()).update(m).digest("hex");
 }
-function p() {
-  const t = [], e = (n) => {
-    const r = typeof n == "string" ? n.trim() : "";
-    r && !t.includes(r) && t.push(r);
-  };
-  return e(process.env.NEXTBLOCK_ENCRYPTION_KEY), e(process.env.CORTEX_AI_ENCRYPTION_KEY), e(K()), t;
+function g() {
+	let e = [], t = (t) => {
+		let n = typeof t == "string" ? t.trim() : "";
+		n && !e.includes(n) && e.push(n);
+	};
+	return t(process.env.NEXTBLOCK_ENCRYPTION_KEY), t(process.env.CORTEX_AI_ENCRYPTION_KEY), t(h()), e;
 }
-function d() {
-  return p()[0] ?? null;
+function _() {
+	return g()[0] ?? null;
 }
-function N() {
-  return d() !== null;
+function v() {
+	return _() !== null;
 }
-function f() {
-  const t = d();
-  if (!t)
-    throw new Error(
-      "An encryption key (NEXTBLOCK_ENCRYPTION_KEY or CORTEX_AI_ENCRYPTION_KEY) is required to manage stored secrets."
-    );
-  return t;
+function y() {
+	let e = _();
+	if (!e) throw Error("An encryption key (NEXTBLOCK_ENCRYPTION_KEY or CORTEX_AI_ENCRYPTION_KEY) is required to manage stored secrets.");
+	return e;
 }
-function C(t, e) {
-  return A({ value: t, encryptionSecret: f(), now: e });
+function b(e, t) {
+	return u({
+		value: e,
+		encryptionSecret: y(),
+		now: t
+	});
 }
-function I(t) {
-  return u({ envelope: t, encryptionSecret: f() });
+function x(e) {
+	return d({
+		envelope: e,
+		encryptionSecret: y()
+	});
 }
-function w(t) {
-  if (!i(t))
-    return null;
-  for (const e of p())
-    try {
-      return u({ envelope: t, encryptionSecret: e });
-    } catch {
-    }
-  return null;
+function S(e) {
+	if (!c(e)) return null;
+	for (let t of g()) try {
+		return d({
+			envelope: e,
+			encryptionSecret: t
+		});
+	} catch {}
+	return null;
 }
-export {
-  o as SECRET_ENVELOPE_ALGORITHM,
-  s as SECRET_ENVELOPE_VERSION,
-  u as decryptSecret,
-  I as decryptWithEnvKey,
-  A as encryptSecret,
-  C as encryptWithEnvKey,
-  _ as getMaskedSecret,
-  R as getSecretEnvelopeStatus,
-  N as hasSecretEncryptionKey,
-  i as isEncryptedSecretEnvelope,
-  f as requireSecretEncryptionKey,
-  d as resolveSecretEncryptionKey,
-  w as tryDecryptWithEnvKey
-};
+//#endregion
+export { a as SECRET_ENVELOPE_ALGORITHM, o as SECRET_ENVELOPE_VERSION, d as decryptSecret, x as decryptWithEnvKey, u as encryptSecret, b as encryptWithEnvKey, f as getMaskedSecret, p as getSecretEnvelopeStatus, v as hasSecretEncryptionKey, c as isEncryptedSecretEnvelope, y as requireSecretEncryptionKey, _ as resolveSecretEncryptionKey, S as tryDecryptWithEnvKey };

package/lib/supabase/client.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@supabase/ssr"),t=()=>{const r=typeof window<"u"?window.__NEXTBLOCK_PUBLIC_ENV__:void 0,n=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL||r?.url,e=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY||r?.anonKey;if(!n||!e)throw new Error(`CRITICAL: Supabase URL or Anon Key is missing. Please ensure NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY are set in your production environment. URL_IS_SET: ${!!n}, ANON_KEY_IS_SET: ${!!e}`);return s.createBrowserClient(n,e)};async function a(r,n){const{data:e,error:i}=await r.from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id",n).single();return i||!e?null:e}async function o(){const r=t(),{data:n,error:e}=await r.from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name",{ascending:!0});return e?[]:n||[]}exports.createClient=t;exports.getActiveLanguagesClientSide=o;exports.getProfileWithRoleClientSide=a;
+let e=require("@supabase/ssr");var t=()=>{let t=typeof window<`u`?window.__NEXTBLOCK_PUBLIC_ENV__:void 0,n=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL||t?.url,r=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY||t?.anonKey;if(!n||!r)throw Error(`CRITICAL: Supabase URL or Anon Key is missing. Please ensure NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY are set in your production environment. URL_IS_SET: ${!!n}, ANON_KEY_IS_SET: ${!!r}`);return(0,e.createBrowserClient)(n,r)};async function n(e,t){let{data:n,error:r}=await e.from(`profiles`).select(`id, full_name, avatar_url, role, updated_at, website`).eq(`id`,t).single();return r||!n?null:n}async function r(){let{data:e,error:n}=await t().from(`languages`).select(`id, code, name, is_default, is_active, created_at, updated_at`).order(`name`,{ascending:!0});return n?[]:e||[]}exports.createClient=t,exports.getActiveLanguagesClientSide=r,exports.getProfileWithRoleClientSide=n;

package/lib/supabase/client.es.js

@@ -1,22 +1,17 @@
-import { createBrowserClient as o } from "@supabase/ssr";
-const a = () => {
-  const n = typeof window < "u" ? window.__NEXTBLOCK_PUBLIC_ENV__ : void 0, r = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL || n?.url, e = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY || n?.anonKey;
-  if (!r || !e)
-    throw new Error(
-      `CRITICAL: Supabase URL or Anon Key is missing. Please ensure NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY are set in your production environment. URL_IS_SET: ${!!r}, ANON_KEY_IS_SET: ${!!e}`
-    );
-  return o(r, e);
+import { createBrowserClient as e } from "@supabase/ssr";
+//#region src/lib/supabase/client.ts
+var t = () => {
+	let t = typeof window < "u" ? window.__NEXTBLOCK_PUBLIC_ENV__ : void 0, n = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL || t?.url, r = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY || t?.anonKey;
+	if (!n || !r) throw Error(`CRITICAL: Supabase URL or Anon Key is missing. Please ensure NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY are set in your production environment. URL_IS_SET: ${!!n}, ANON_KEY_IS_SET: ${!!r}`);
+	return e(n, r);
 };
-async function _(n, r) {
-  const { data: e, error: t } = await n.from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id", r).single();
-  return t || !e ? null : e;
+async function n(e, t) {
+	let { data: n, error: r } = await e.from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id", t).single();
+	return r || !n ? null : n;
 }
-async function i() {
-  const n = a(), { data: r, error: e } = await n.from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name", { ascending: !0 });
-  return e ? [] : r || [];
+async function r() {
+	let { data: e, error: n } = await t().from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name", { ascending: !0 });
+	return n ? [] : e || [];
 }
-export {
-  a as createClient,
-  i as getActiveLanguagesClientSide,
-  _ as getProfileWithRoleClientSide
-};
+//#endregion
+export { t as createClient, r as getActiveLanguagesClientSide, n as getProfileWithRoleClientSide };

package/lib/supabase/server.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const l=require("@supabase/ssr"),S=require("@supabase/supabase-js"),c=require("next/headers"),u="This module cannot be imported from a Client Component module. It should only be used from a Server Component.";if(typeof window<"u")throw new Error(u);const i=()=>{const e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL||"https://dummy.supabase.co",r=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY||"dummy-anon-key";return l.createServerClient(e,r,{cookies:{getAll:async()=>{try{return(await c.cookies()).getAll()}catch{return[]}},setAll:async s=>{try{const t=await c.cookies();for(const{name:n,value:a,options:o}of s)a&&a.length>0?t.set({name:n,value:a,...o}):o&&Object.keys(o).length>0?t.delete({name:n,...o}):t.delete(n)}catch{}}}})};async function E(e){const r=i(),{data:s,error:t}=await r.from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id",e).single();return t||!s?(console.error("Error fetching profile (server-side):",t?.message),null):s}async function d(){const e=i(),{data:r,error:s}=await e.from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name",{ascending:!0});return s?(console.error("Error fetching languages (server-side):",s.message),[]):r||[]}const p=()=>{const e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,r=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY;if(!e||!r)throw new Error("Missing Supabase Service Role environment variables");return S.createClient(e,r,{auth:{autoRefreshToken:!1,persistSession:!1}})};exports.createClient=i;exports.getActiveLanguagesServerSide=d;exports.getProfileWithRoleServerSide=E;exports.getServiceRoleSupabaseClient=p;
+let e=require("@supabase/ssr"),t=require("@supabase/supabase-js"),n=require("next/headers");var r=`This module cannot be imported from a Client Component module. It should only be used from a Server Component.`;if(typeof window<`u`)throw Error(r);var i=()=>{let t=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL||`https://dummy.supabase.co`,r=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY||`dummy-anon-key`;return(0,e.createServerClient)(t,r,{cookies:{getAll:async()=>{try{return(await(0,n.cookies)()).getAll()}catch{return[]}},setAll:async e=>{try{let t=await(0,n.cookies)();for(let{name:n,value:r,options:i}of e)r&&r.length>0?t.set({name:n,value:r,...i}):i&&Object.keys(i).length>0?t.delete({name:n,...i}):t.delete(n)}catch{}}}})};async function a(e){let{data:t,error:n}=await i().from(`profiles`).select(`id, full_name, avatar_url, role, updated_at, website`).eq(`id`,e).single();return n||!t?(console.error(`Error fetching profile (server-side):`,n?.message),null):t}async function o(){let{data:e,error:t}=await i().from(`languages`).select(`id, code, name, is_default, is_active, created_at, updated_at`).order(`name`,{ascending:!0});return t?(console.error(`Error fetching languages (server-side):`,t.message),[]):e||[]}var s=()=>{let e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,n=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY;if(!e||!n)throw Error(`Missing Supabase Service Role environment variables`);return(0,t.createClient)(e,n,{auth:{autoRefreshToken:!1,persistSession:!1}})};exports.createClient=i,exports.getActiveLanguagesServerSide=o,exports.getProfileWithRoleServerSide=a,exports.getServiceRoleSupabaseClient=s;

package/lib/supabase/server.es.js

@@ -1,57 +1,49 @@
-import { createServerClient as l } from "@supabase/ssr";
-import { createClient as S } from "@supabase/supabase-js";
-import { cookies as i } from "next/headers";
-const u = "This module cannot be imported from a Client Component module. It should only be used from a Server Component.";
-if (typeof window < "u")
-  throw new Error(u);
-const c = () => {
-  const e = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL || "https://dummy.supabase.co", r = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY || "dummy-anon-key";
-  return l(
-    e,
-    r,
-    {
-      cookies: {
-        getAll: async () => {
-          try {
-            return (await i()).getAll();
-          } catch {
-            return [];
-          }
-        },
-        setAll: async (o) => {
-          try {
-            const s = await i();
-            for (const { name: n, value: a, options: t } of o)
-              a && a.length > 0 ? s.set({ name: n, value: a, ...t }) : t && Object.keys(t).length > 0 ? s.delete({ name: n, ...t }) : s.delete(n);
-          } catch {
-          }
-        }
-      }
-    }
-  );
+import { createServerClient as e } from "@supabase/ssr";
+import { createClient as t } from "@supabase/supabase-js";
+import { cookies as n } from "next/headers";
+//#region src/lib/supabase/server.ts
+var r = "This module cannot be imported from a Client Component module. It should only be used from a Server Component.";
+if (typeof window < "u") throw Error(r);
+var i = () => {
+	let t = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL || "https://dummy.supabase.co", r = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY || "dummy-anon-key";
+	return e(t, r, { cookies: {
+		getAll: async () => {
+			try {
+				return (await n()).getAll();
+			} catch {
+				return [];
+			}
+		},
+		setAll: async (e) => {
+			try {
+				let t = await n();
+				for (let { name: n, value: r, options: i } of e) r && r.length > 0 ? t.set({
+					name: n,
+					value: r,
+					...i
+				}) : i && Object.keys(i).length > 0 ? t.delete({
+					name: n,
+					...i
+				}) : t.delete(n);
+			} catch {}
+		}
+	} });
 };
-async function f(e) {
-  const r = c(), { data: o, error: s } = await r.from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id", e).single();
-  return s || !o ? (console.error("Error fetching profile (server-side):", s?.message), null) : o;
+async function a(e) {
+	let { data: t, error: n } = await i().from("profiles").select("id, full_name, avatar_url, role, updated_at, website").eq("id", e).single();
+	return n || !t ? (console.error("Error fetching profile (server-side):", n?.message), null) : t;
 }
-async function d() {
-  const e = c(), { data: r, error: o } = await e.from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name", { ascending: !0 });
-  return o ? (console.error("Error fetching languages (server-side):", o.message), []) : r || [];
+async function o() {
+	let { data: e, error: t } = await i().from("languages").select("id, code, name, is_default, is_active, created_at, updated_at").order("name", { ascending: !0 });
+	return t ? (console.error("Error fetching languages (server-side):", t.message), []) : e || [];
 }
-const A = () => {
-  const e = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, r = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY;
-  if (!e || !r)
-    throw new Error("Missing Supabase Service Role environment variables");
-  return S(e, r, {
-    auth: {
-      autoRefreshToken: !1,
-      persistSession: !1
-    }
-  });
-};
-export {
-  c as createClient,
-  d as getActiveLanguagesServerSide,
-  f as getProfileWithRoleServerSide,
-  A as getServiceRoleSupabaseClient
+var s = () => {
+	let e = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, n = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_SECRET_KEY;
+	if (!e || !n) throw Error("Missing Supabase Service Role environment variables");
+	return t(e, n, { auth: {
+		autoRefreshToken: !1,
+		persistSession: !1
+	} });
 };
+//#endregion
+export { i as createClient, o as getActiveLanguagesServerSide, a as getProfileWithRoleServerSide, s as getServiceRoleSupabaseClient };

package/lib/supabase/ssg-client.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("@supabase/supabase-js"),r=()=>{const e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,s=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY,n=e||"https://dummy.supabase.co",t=s||"dummy-key";return(!e||!s)&&console.warn("Supabase URL or Anon Key is missing for SSG client. Returning dummy client to prevent build crash."),o.createClient(n,t)};exports.getSsgSupabaseClient=r;
+let e=require("@supabase/supabase-js");var t=()=>{let t=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,n=process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY||process.env.SUPABASE_ANON_KEY||process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY||process.env.SUPABASE_PUBLISHABLE_KEY,r=t||`https://dummy.supabase.co`,i=n||`dummy-key`;return(!t||!n)&&console.warn(`Supabase URL or Anon Key is missing for SSG client. Returning dummy client to prevent build crash.`),(0,e.createClient)(r,i)};exports.getSsgSupabaseClient=t;

package/lib/supabase/ssg-client.es.js

@@ -1,8 +1,8 @@
-import { createClient as r } from "@supabase/supabase-js";
-const S = () => {
-  const e = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, s = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY, n = e || "https://dummy.supabase.co", o = s || "dummy-key";
-  return (!e || !s) && console.warn("Supabase URL or Anon Key is missing for SSG client. Returning dummy client to prevent build crash."), r(n, o);
-};
-export {
-  S as getSsgSupabaseClient
+import { createClient as e } from "@supabase/supabase-js";
+//#region src/lib/supabase/ssg-client.ts
+var t = () => {
+	let t = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL, n = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || process.env.SUPABASE_ANON_KEY || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY || process.env.SUPABASE_PUBLISHABLE_KEY, r = t || "https://dummy.supabase.co", i = n || "dummy-key";
+	return (!t || !n) && console.warn("Supabase URL or Anon Key is missing for SSG client. Returning dummy client to prevent build crash."), e(r, i);
 };
+//#endregion
+export { t as getSsgSupabaseClient };

package/lib/supabase/types.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e={public:{Enums:{approval_status:["pending","approved","denied"],interaction_type:["review","comment"],menu_location:["HEADER","FOOTER","SIDEBAR"],page_status:["draft","published","archived"],revision_type:["snapshot","diff"],user_role:["ADMIN","WRITER","USER"]}}};exports.Constants=e;
+var e={public:{Enums:{approval_status:[`pending`,`approved`,`denied`],interaction_type:[`review`,`comment`],menu_location:[`HEADER`,`FOOTER`,`SIDEBAR`],page_status:[`draft`,`published`,`archived`],revision_type:[`snapshot`,`diff`],user_role:[`ADMIN`,`WRITER`,`USER`]}}};exports.Constants=e;

package/lib/supabase/types.es.js

@@ -1,15 +1,27 @@
-const e = {
-  public: {
-    Enums: {
-      approval_status: ["pending", "approved", "denied"],
-      interaction_type: ["review", "comment"],
-      menu_location: ["HEADER", "FOOTER", "SIDEBAR"],
-      page_status: ["draft", "published", "archived"],
-      revision_type: ["snapshot", "diff"],
-      user_role: ["ADMIN", "WRITER", "USER"]
-    }
-  }
-};
-export {
-  e as Constants
-};
+//#region src/lib/supabase/types.ts
+var e = { public: { Enums: {
+	approval_status: [
+		"pending",
+		"approved",
+		"denied"
+	],
+	interaction_type: ["review", "comment"],
+	menu_location: [
+		"HEADER",
+		"FOOTER",
+		"SIDEBAR"
+	],
+	page_status: [
+		"draft",
+		"published",
+		"archived"
+	],
+	revision_type: ["snapshot", "diff"],
+	user_role: [
+		"ADMIN",
+		"WRITER",
+		"USER"
+	]
+} } };
+//#endregion
+export { e as Constants };

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "@nextblock-cms/db",
-  "version": "0.20.3",
+  "version": "0.21.1",
+  "license": "AGPL-3.0-or-later",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nextblock-cms/nextblock.git",
+    "directory": "libs/db"
+  },
   "main": "index.cjs.js",
   "module": "index.es.js",
   "types": "index.d.ts",

package/secrets.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("./lib/config-resolve.cjs.js"),e=require("./lib/secret-crypto.cjs.js");exports.isSandboxEnvironment=t.isSandboxEnvironment;exports.resolveConfigValue=t.resolveConfigValue;exports.SECRET_ENVELOPE_ALGORITHM=e.SECRET_ENVELOPE_ALGORITHM;exports.SECRET_ENVELOPE_VERSION=e.SECRET_ENVELOPE_VERSION;exports.decryptSecret=e.decryptSecret;exports.decryptWithEnvKey=e.decryptWithEnvKey;exports.encryptSecret=e.encryptSecret;exports.encryptWithEnvKey=e.encryptWithEnvKey;exports.getMaskedSecret=e.getMaskedSecret;exports.getSecretEnvelopeStatus=e.getSecretEnvelopeStatus;exports.hasSecretEncryptionKey=e.hasSecretEncryptionKey;exports.isEncryptedSecretEnvelope=e.isEncryptedSecretEnvelope;exports.requireSecretEncryptionKey=e.requireSecretEncryptionKey;exports.resolveSecretEncryptionKey=e.resolveSecretEncryptionKey;exports.tryDecryptWithEnvKey=e.tryDecryptWithEnvKey;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./lib/secret-crypto.cjs.js"),t=require("./lib/config-resolve.cjs.js");exports.SECRET_ENVELOPE_ALGORITHM=e.SECRET_ENVELOPE_ALGORITHM,exports.SECRET_ENVELOPE_VERSION=e.SECRET_ENVELOPE_VERSION,exports.decryptSecret=e.decryptSecret,exports.decryptWithEnvKey=e.decryptWithEnvKey,exports.encryptSecret=e.encryptSecret,exports.encryptWithEnvKey=e.encryptWithEnvKey,exports.getMaskedSecret=e.getMaskedSecret,exports.getSecretEnvelopeStatus=e.getSecretEnvelopeStatus,exports.hasSecretEncryptionKey=e.hasSecretEncryptionKey,exports.isEncryptedSecretEnvelope=e.isEncryptedSecretEnvelope,exports.isSandboxEnvironment=t.isSandboxEnvironment,exports.requireSecretEncryptionKey=e.requireSecretEncryptionKey,exports.resolveConfigValue=t.resolveConfigValue,exports.resolveSecretEncryptionKey=e.resolveSecretEncryptionKey,exports.tryDecryptWithEnvKey=e.tryDecryptWithEnvKey;

package/secrets.es.js

@@ -1,19 +1,3 @@
-import { isSandboxEnvironment as r, resolveConfigValue as E } from "./lib/config-resolve.es.js";
-import { SECRET_ENVELOPE_ALGORITHM as c, SECRET_ENVELOPE_VERSION as y, decryptSecret as o, decryptWithEnvKey as p, encryptSecret as S, encryptWithEnvKey as i, getMaskedSecret as v, getSecretEnvelopeStatus as s, hasSecretEncryptionKey as K, isEncryptedSecretEnvelope as a, requireSecretEncryptionKey as d, resolveSecretEncryptionKey as l, tryDecryptWithEnvKey as h } from "./lib/secret-crypto.es.js";
-export {
-  c as SECRET_ENVELOPE_ALGORITHM,
-  y as SECRET_ENVELOPE_VERSION,
-  o as decryptSecret,
-  p as decryptWithEnvKey,
-  S as encryptSecret,
-  i as encryptWithEnvKey,
-  v as getMaskedSecret,
-  s as getSecretEnvelopeStatus,
-  K as hasSecretEncryptionKey,
-  a as isEncryptedSecretEnvelope,
-  r as isSandboxEnvironment,
-  d as requireSecretEncryptionKey,
-  E as resolveConfigValue,
-  l as resolveSecretEncryptionKey,
-  h as tryDecryptWithEnvKey
-};
+import { SECRET_ENVELOPE_ALGORITHM as e, SECRET_ENVELOPE_VERSION as t, decryptSecret as n, decryptWithEnvKey as r, encryptSecret as i, encryptWithEnvKey as a, getMaskedSecret as o, getSecretEnvelopeStatus as s, hasSecretEncryptionKey as c, isEncryptedSecretEnvelope as l, requireSecretEncryptionKey as u, resolveSecretEncryptionKey as d, tryDecryptWithEnvKey as f } from "./lib/secret-crypto.es.js";
+import { isSandboxEnvironment as p, resolveConfigValue as m } from "./lib/config-resolve.es.js";
+export { e as SECRET_ENVELOPE_ALGORITHM, t as SECRET_ENVELOPE_VERSION, n as decryptSecret, r as decryptWithEnvKey, i as encryptSecret, a as encryptWithEnvKey, o as getMaskedSecret, s as getSecretEnvelopeStatus, c as hasSecretEncryptionKey, l as isEncryptedSecretEnvelope, p as isSandboxEnvironment, u as requireSecretEncryptionKey, m as resolveConfigValue, d as resolveSecretEncryptionKey, f as tryDecryptWithEnvKey };

package/server.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("./lib/supabase/server.cjs.js"),n=require("./lib/supabase/ssg-client.cjs.js"),r=require("./lib/package-validation.cjs.js"),e=require("./lib/secret-crypto.cjs.js"),i=require("./lib/config-resolve.cjs.js");exports.createClient=t.createClient;exports.getActiveLanguagesServerSide=t.getActiveLanguagesServerSide;exports.getProfileWithRoleServerSide=t.getProfileWithRoleServerSide;exports.getServiceRoleSupabaseClient=t.getServiceRoleSupabaseClient;exports.getSsgSupabaseClient=n.getSsgSupabaseClient;exports.PACKAGE_ACTIVATION_CACHE_TAG=r.PACKAGE_ACTIVATION_CACHE_TAG;exports.isPackageActivationRowValid=r.isPackageActivationRowValid;exports.resolvePackageActivationExpiry=r.resolvePackageActivationExpiry;exports.verifyPackageOnline=r.verifyPackageOnline;exports.SECRET_ENVELOPE_ALGORITHM=e.SECRET_ENVELOPE_ALGORITHM;exports.SECRET_ENVELOPE_VERSION=e.SECRET_ENVELOPE_VERSION;exports.decryptSecret=e.decryptSecret;exports.decryptWithEnvKey=e.decryptWithEnvKey;exports.encryptSecret=e.encryptSecret;exports.encryptWithEnvKey=e.encryptWithEnvKey;exports.getMaskedSecret=e.getMaskedSecret;exports.getSecretEnvelopeStatus=e.getSecretEnvelopeStatus;exports.hasSecretEncryptionKey=e.hasSecretEncryptionKey;exports.isEncryptedSecretEnvelope=e.isEncryptedSecretEnvelope;exports.requireSecretEncryptionKey=e.requireSecretEncryptionKey;exports.resolveSecretEncryptionKey=e.resolveSecretEncryptionKey;exports.tryDecryptWithEnvKey=e.tryDecryptWithEnvKey;exports.isSandboxEnvironment=i.isSandboxEnvironment;exports.resolveConfigValue=i.resolveConfigValue;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./lib/supabase/server.cjs.js"),t=require("./lib/supabase/ssg-client.cjs.js"),n=require("./lib/package-validation.cjs.js"),r=require("./lib/secret-crypto.cjs.js"),i=require("./lib/config-resolve.cjs.js");exports.PACKAGE_ACTIVATION_CACHE_TAG=n.PACKAGE_ACTIVATION_CACHE_TAG,exports.SECRET_ENVELOPE_ALGORITHM=r.SECRET_ENVELOPE_ALGORITHM,exports.SECRET_ENVELOPE_VERSION=r.SECRET_ENVELOPE_VERSION,exports.createClient=e.createClient,exports.decryptSecret=r.decryptSecret,exports.decryptWithEnvKey=r.decryptWithEnvKey,exports.encryptSecret=r.encryptSecret,exports.encryptWithEnvKey=r.encryptWithEnvKey,exports.getActiveLanguagesServerSide=e.getActiveLanguagesServerSide,exports.getMaskedSecret=r.getMaskedSecret,exports.getProfileWithRoleServerSide=e.getProfileWithRoleServerSide,exports.getSecretEnvelopeStatus=r.getSecretEnvelopeStatus,exports.getServiceRoleSupabaseClient=e.getServiceRoleSupabaseClient,exports.getSsgSupabaseClient=t.getSsgSupabaseClient,exports.hasSecretEncryptionKey=r.hasSecretEncryptionKey,exports.isEncryptedSecretEnvelope=r.isEncryptedSecretEnvelope,exports.isPackageActivationRowValid=n.isPackageActivationRowValid,exports.isSandboxEnvironment=i.isSandboxEnvironment,exports.requireSecretEncryptionKey=r.requireSecretEncryptionKey,exports.resolveConfigValue=i.resolveConfigValue,exports.resolvePackageActivationExpiry=n.resolvePackageActivationExpiry,exports.resolveSecretEncryptionKey=r.resolveSecretEncryptionKey,exports.tryDecryptWithEnvKey=r.tryDecryptWithEnvKey,exports.verifyPackageOnline=n.verifyPackageOnline;

package/server.es.js

@@ -1,31 +1,6 @@
-import { createClient as r, getActiveLanguagesServerSide as i, getProfileWithRoleServerSide as n, getServiceRoleSupabaseClient as o } from "./lib/supabase/server.es.js";
-import { getSsgSupabaseClient as E } from "./lib/supabase/ssg-client.es.js";
-import { PACKAGE_ACTIVATION_CACHE_TAG as S, isPackageActivationRowValid as p, resolvePackageActivationExpiry as y, verifyPackageOnline as v } from "./lib/package-validation.es.js";
-import { SECRET_ENVELOPE_ALGORITHM as g, SECRET_ENVELOPE_VERSION as s, decryptSecret as A, decryptWithEnvKey as C, encryptSecret as d, encryptWithEnvKey as f, getMaskedSecret as x, getSecretEnvelopeStatus as K, hasSecretEncryptionKey as P, isEncryptedSecretEnvelope as R, requireSecretEncryptionKey as _, resolveSecretEncryptionKey as m, tryDecryptWithEnvKey as u } from "./lib/secret-crypto.es.js";
-import { isSandboxEnvironment as T, resolveConfigValue as V } from "./lib/config-resolve.es.js";
-export {
-  S as PACKAGE_ACTIVATION_CACHE_TAG,
-  g as SECRET_ENVELOPE_ALGORITHM,
-  s as SECRET_ENVELOPE_VERSION,
-  r as createClient,
-  A as decryptSecret,
-  C as decryptWithEnvKey,
-  d as encryptSecret,
-  f as encryptWithEnvKey,
-  i as getActiveLanguagesServerSide,
-  x as getMaskedSecret,
-  n as getProfileWithRoleServerSide,
-  K as getSecretEnvelopeStatus,
-  o as getServiceRoleSupabaseClient,
-  E as getSsgSupabaseClient,
-  P as hasSecretEncryptionKey,
-  R as isEncryptedSecretEnvelope,
-  p as isPackageActivationRowValid,
-  T as isSandboxEnvironment,
-  _ as requireSecretEncryptionKey,
-  V as resolveConfigValue,
-  y as resolvePackageActivationExpiry,
-  m as resolveSecretEncryptionKey,
-  u as tryDecryptWithEnvKey,
-  v as verifyPackageOnline
-};
+import { createClient as e, getActiveLanguagesServerSide as t, getProfileWithRoleServerSide as n, getServiceRoleSupabaseClient as r } from "./lib/supabase/server.es.js";
+import { getSsgSupabaseClient as i } from "./lib/supabase/ssg-client.es.js";
+import { PACKAGE_ACTIVATION_CACHE_TAG as a, isPackageActivationRowValid as o, resolvePackageActivationExpiry as s, verifyPackageOnline as c } from "./lib/package-validation.es.js";
+import { SECRET_ENVELOPE_ALGORITHM as l, SECRET_ENVELOPE_VERSION as u, decryptSecret as d, decryptWithEnvKey as f, encryptSecret as p, encryptWithEnvKey as m, getMaskedSecret as h, getSecretEnvelopeStatus as g, hasSecretEncryptionKey as _, isEncryptedSecretEnvelope as v, requireSecretEncryptionKey as y, resolveSecretEncryptionKey as b, tryDecryptWithEnvKey as x } from "./lib/secret-crypto.es.js";
+import { isSandboxEnvironment as S, resolveConfigValue as C } from "./lib/config-resolve.es.js";
+export { a as PACKAGE_ACTIVATION_CACHE_TAG, l as SECRET_ENVELOPE_ALGORITHM, u as SECRET_ENVELOPE_VERSION, e as createClient, d as decryptSecret, f as decryptWithEnvKey, p as encryptSecret, m as encryptWithEnvKey, t as getActiveLanguagesServerSide, h as getMaskedSecret, n as getProfileWithRoleServerSide, g as getSecretEnvelopeStatus, r as getServiceRoleSupabaseClient, i as getSsgSupabaseClient, _ as hasSecretEncryptionKey, v as isEncryptedSecretEnvelope, o as isPackageActivationRowValid, S as isSandboxEnvironment, y as requireSecretEncryptionKey, C as resolveConfigValue, s as resolvePackageActivationExpiry, b as resolveSecretEncryptionKey, x as tryDecryptWithEnvKey, c as verifyPackageOnline };

package/supabase/migrations/02017_install_guide_node22.sql

@@ -0,0 +1,70 @@
+-- 02017: install guide (EN + FR) -- Node.js floor 20 -> 22.12.
+--
+-- The "How to Install NextBlock" post ('how-to-setup-nextblock', EN) and its French twin
+-- ('comment-configurer-nextblock', FR) still tell readers to install Node.js 20. The
+-- upgraded dependencies no longer run there: supabase-js >= 2.110 and AI SDK 7 declare
+-- node >= 22, and both paths the guide describes need 22.12 -- the create-nextblock CLI
+-- (engines >= 22.12.0) and the cloned repository's Vitest 5 / Vite 8 toolchain. Node 20
+-- has been end-of-life since 2026-04-30. The copy shipped through 02000 (catch-up) / 02004
+-- (baseline) and lives on real installs, so per the append-only rule this is a
+-- forward-only data fix instead of an edit to those files.
+--
+-- Targets the text block of each guide post by parent (post resolved by slug + language
+-- code; never blocks.id: ids drift on every install) plus the 'Node.js 20' signature, and
+-- rewrites only the eight seeded phrases (four EN, four FR; "or newer" / "ou plus récent"
+-- appears twice per language) with replace(), leaving the rest of the block and any
+-- operator-edited wording untouched. post_revisions rows of the same posts get the same
+-- rewrite so restoring a seeded revision cannot bring the Node.js 20 copy back.
+-- Idempotent: a second run matches zero rows (the rewritten text no longer contains
+-- 'Node.js 20').
+--
+-- NOTE: keep the word "sandbox" OUT of this filename -- generate-sandbox-reset.ts
+-- excludes any migration whose filename contains "sandbox" from the reset bundle.
+
+CREATE OR REPLACE FUNCTION pg_temp.nb_install_guide_node22(src text)
+RETURNS text
+LANGUAGE sql
+IMMUTABLE
+AS $fn$
+  SELECT replace(replace(replace(replace(replace(replace(replace(replace(src,
+    '>Node.js 20 or newer</a>',
+    '>Node.js 22.12 or newer</a>'),
+    '>Node.js 20+</a> and Docker Desktop',
+    '>Node.js 22.12+</a> and Docker Desktop'),
+    'managed-cloud path: Node.js 20+ plus',
+    'managed-cloud path: Node.js 22.12+ plus'),
+    'cloned repository: Node.js 20+ and git',
+    'cloned repository: Node.js 22.12+ and git'),
+    '>Node.js 20 ou plus récent</a>',
+    '>Node.js 22.12 ou plus récent</a>'),
+    '>Node.js 20+</a> et Docker Desktop',
+    '>Node.js 22.12+</a> et Docker Desktop'),
+    'Node.js 20+ ainsi qu',
+    'Node.js 22.12+ ainsi qu'),
+    'Node.js 20+ et git',
+    'Node.js 22.12+ et git')
+$fn$;
+
+UPDATE public.blocks AS b
+   SET content = pg_temp.nb_install_guide_node22(b.content::text)::jsonb,
+       updated_at = now()
+  FROM public.posts AS p
+  JOIN public.languages AS l ON l.id = p.language_id
+ WHERE b.post_id = p.id
+   AND b.block_type = 'text'
+   AND ((p.slug = 'how-to-setup-nextblock' AND l.code = 'en')
+     OR (p.slug = 'comment-configurer-nextblock' AND l.code = 'fr'))
+   AND b.content::text LIKE '%Node.js 20%'
+   AND b.content::text <> pg_temp.nb_install_guide_node22(b.content::text);
+
+UPDATE public.post_revisions AS r
+   SET content = pg_temp.nb_install_guide_node22(r.content::text)::jsonb
+  FROM public.posts AS p
+  JOIN public.languages AS l ON l.id = p.language_id
+ WHERE r.post_id = p.id
+   AND ((p.slug = 'how-to-setup-nextblock' AND l.code = 'en')
+     OR (p.slug = 'comment-configurer-nextblock' AND l.code = 'fr'))
+   AND r.content::text LIKE '%Node.js 20%'
+   AND r.content::text <> pg_temp.nb_install_guide_node22(r.content::text);
+
+DROP FUNCTION IF EXISTS pg_temp.nb_install_guide_node22(text);