@nextsparkjs/core 0.1.0-beta.187 → 0.1.0-beta.189

package/dist/templates/proxy.ts

@@ -1,4 +1,10 @@
 /**
+ * @nextspark-generated
+ *
+ * `nextspark sync:app` replaces this file while that tag is present, which is
+ * how a release ships changes to it. Delete the tag line to own the file: from
+ * then on sync reports it and leaves it alone.
+ *
  * NextSpark Proxy (Next.js 16+)
  *
  * Handles authentication, route protection, and user context injection.
@@ -7,8 +13,8 @@
  * Key responsibilities:
  * 1. Theme middleware override support
  * 2. Documentation access control
- * 3. Protected route authentication
- * 4. User header injection for downstream use (x-user-id, x-pathname)
+ * 3. Protected route authentication, and the roles /superadmin and /devtools need
+ * 4. User header injection for downstream use (x-user-id, x-pathname, x-active-team-id)
  *
  * IMPORTANT: The EntityPermissionLayout depends on x-user-id and x-pathname
  * headers being set here for server-side permission validation.
@@ -20,6 +26,8 @@ import {
   executeThemeMiddleware,
   getThemeAppConfig
 } from '@nextsparkjs/core/lib/middleware'
+import { ACTIVE_TEAM_COOKIE, activeTeamIdForSession } from '@nextsparkjs/core/lib/teams/active-team-cookie'
+import { SESSION_HINT_COOKIE, SESSION_HINT_MAX_AGE, hasSessionCookie } from '@nextsparkjs/core/lib/auth/session-hint'
 
 /**
  * Session type for proxy (inline definition)
@@ -64,6 +72,53 @@ function isPublicPath(pathname: string): boolean {
   )
 }
 
+/**
+ * Whether `pathname` is `prefix` or a path under it: `/devtools/config` is,
+ * `/devtools-guide` and `/profile-photo.jpg` are not.
+ */
+function isUnder(pathname: string, prefix: string): boolean {
+  return pathname === prefix || pathname.startsWith(`${prefix}/`)
+}
+
+/**
+ * A URL on this app at `pathname`, keeping the base path and locale the request
+ * came in with; one built from `request.url` would lose both.
+ */
+function appUrl(request: NextRequest, pathname: string): NextRequest['nextUrl'] {
+  const url = request.nextUrl.clone()
+  url.pathname = pathname
+  url.search = ''
+  return url
+}
+
+/**
+ * Send a visitor without a session to login. LoginForm reads `callbackUrl` and
+ * returns them to the page they asked for, query included, once signed in.
+ */
+function redirectToLogin(request: NextRequest): NextResponse {
+  const loginUrl = appUrl(request, '/login')
+  loginUrl.searchParams.set('callbackUrl', `${request.nextUrl.pathname}${request.nextUrl.search}`)
+  return NextResponse.redirect(loginUrl)
+}
+
+/** Send a signed-in user without the role an area needs back to the dashboard. */
+function redirectAccessDenied(request: NextRequest): NextResponse {
+  const dashboardUrl = appUrl(request, '/dashboard')
+  dashboardUrl.searchParams.set('error', 'access_denied')
+  return NextResponse.redirect(dashboardUrl)
+}
+
+/**
+ * The session the request's cookies carry, asked of this app's own auth route,
+ * which is served under the base path like every other route.
+ */
+function getSession(request: NextRequest) {
+  return betterFetch<Session>('/api/auth/get-session', {
+    baseURL: `${request.nextUrl.origin}${request.nextUrl.basePath}`,
+    headers: { cookie: request.headers.get('cookie') || '' },
+  })
+}
+
 /**
  * Identity headers this proxy injects for downstream server code.
  *
@@ -74,7 +129,7 @@ function isPublicPath(pathname: string): boolean {
  * dispatches Server Actions by the `Next-Action` header, not by the URL, so an
  * action can be POSTed to a public path with a forged `x-user-id`.
  */
-const TRUSTED_IDENTITY_HEADERS = ['x-user-id', 'x-user-email', 'x-pathname'] as const
+const TRUSTED_IDENTITY_HEADERS = ['x-user-id', 'x-user-email', 'x-pathname', 'x-active-team-id'] as const
 
 /**
  * Build the request headers forwarded to the app: inbound copy minus every
@@ -89,15 +144,38 @@ function sanitizeRequestHeaders(request: NextRequest): Headers {
   return headers
 }
 
+/**
+ * Keep the readable session hint (lib/auth/session-hint) in line with the
+ * session cookie, so client code knows whether to ask for the session. A browser
+ * that got its session without client code seeing it (before the hint existed,
+ * or through OAuth) gets the hint on its next request, and one whose session
+ * cookie is gone loses it. The session itself is not checked here.
+ */
+function syncSessionHint(request: NextRequest, response: NextResponse): NextResponse {
+  const hasSession = hasSessionCookie(request.headers.get('cookie'))
+  const hinted = request.cookies.get(SESSION_HINT_COOKIE)?.value === '1'
+  if (hasSession && !hinted) {
+    response.cookies.set(SESSION_HINT_COOKIE, '1', {
+      path: '/',
+      maxAge: SESSION_HINT_MAX_AGE,
+      sameSite: 'lax',
+      secure: request.nextUrl.protocol === 'https:',
+    })
+  } else if (!hasSession && hinted) {
+    response.cookies.set(SESSION_HINT_COOKIE, '', { path: '/', maxAge: 0 })
+  }
+  return response
+}
+
 /**
  * Continue to the app with the (sanitized) request headers.
  * Every pass-through in this proxy MUST go through here so the strip applies
  * to public paths, /api/v1 and unmatched routes alike.
  */
-function passThrough(requestHeaders: Headers): NextResponse {
-  return NextResponse.next({
+function passThrough(request: NextRequest, requestHeaders: Headers): NextResponse {
+  return syncSessionHint(request, NextResponse.next({
     request: { headers: requestHeaders },
-  })
+  }))
 }
 
 export async function proxy(request: NextRequest) {
@@ -129,76 +207,71 @@ export async function proxy(request: NextRequest) {
   }
 
   // 3. Documentation access control
-  if (pathname.startsWith('/docs')) {
+  if (isUnder(pathname, '/docs')) {
     const appConfig = getThemeAppConfig(activeTheme as string)
 
     if (appConfig?.docs?.public === false) {
       try {
-        const { data: session } = await betterFetch<Session>(
-          '/api/auth/get-session',
-          {
-            baseURL: request.nextUrl.origin,
-            headers: { cookie: request.headers.get('cookie') || '' },
-          }
-        )
+        const { data: session } = await getSession(request)
 
         if (!session) {
-          const loginUrl = new URL('/login', request.url)
-          loginUrl.searchParams.set('redirect', pathname)
-          return NextResponse.redirect(loginUrl)
+          return redirectToLogin(request)
         }
       } catch (error) {
-        const loginUrl = new URL('/login', request.url)
-        loginUrl.searchParams.set('redirect', pathname)
-        return NextResponse.redirect(loginUrl)
+        return redirectToLogin(request)
       }
     }
-    return passThrough(requestHeaders)
+    return passThrough(request, requestHeaders)
   }
 
   // 4. Allow public paths
   if (isPublicPath(pathname)) {
-    return passThrough(requestHeaders)
+    return passThrough(request, requestHeaders)
   }
 
   // 5. API v1 routes handle their own dual authentication
   if (pathname.startsWith('/api/v1')) {
-    return passThrough(requestHeaders)
+    return passThrough(request, requestHeaders)
   }
 
-  // 6. Protected routes - require authentication and inject user headers
-  const isAdminRoute = pathname.startsWith('/admin')
+  // 6. Protected routes - require authentication and inject user headers.
+  // Areas are matched by path segment, so /dashboard-guide is not /dashboard.
+  // /superadmin and /devtools also need a role, the same ones SuperAdminGuard
+  // and DeveloperGuard let in. The guards decide it again in the browser, but
+  // only after the page has been served, so it is decided here first.
+  const isAdminRoute = isUnder(pathname, '/admin')
+  const isSuperadminRoute = isUnder(pathname, '/superadmin')
+  const isDevtoolsRoute = isUnder(pathname, '/devtools')
   const isProtectedRoute =
-    pathname.startsWith('/dashboard') ||
-    pathname.startsWith('/admin') ||
-    pathname.startsWith('/settings') ||
-    pathname.startsWith('/profile') ||
-    pathname.startsWith('/update-password') ||
-    isAdminRoute
+    isUnder(pathname, '/dashboard') ||
+    isUnder(pathname, '/settings') ||
+    isUnder(pathname, '/profile') ||
+    isUnder(pathname, '/update-password') ||
+    isAdminRoute ||
+    isSuperadminRoute ||
+    isDevtoolsRoute
 
   if (isProtectedRoute) {
     try {
-      const { data: session } = await betterFetch<Session>(
-        '/api/auth/get-session',
-        {
-          baseURL: request.nextUrl.origin,
-          headers: { cookie: request.headers.get('cookie') || '' },
-        }
-      )
+      const { data: session } = await getSession(request)
 
       if (!session) {
-        const loginUrl = new URL('/login', request.url)
-        loginUrl.searchParams.set('callbackUrl', pathname)
-        return NextResponse.redirect(loginUrl)
+        return redirectToLogin(request)
       }
 
+      const role = session.user?.role
+
       // Admin Panel superadmin-only check
-      if (isAdminRoute) {
-        if (!session.user?.role || session.user.role !== 'superadmin') {
-          const dashboardUrl = new URL('/dashboard', request.url)
-          dashboardUrl.searchParams.set('error', 'access_denied')
-          return NextResponse.redirect(dashboardUrl)
-        }
+      if (isAdminRoute && role !== 'superadmin') {
+        return redirectAccessDenied(request)
+      }
+
+      if (isSuperadminRoute && role !== 'superadmin' && role !== 'developer') {
+        return redirectAccessDenied(request)
+      }
+
+      if (isDevtoolsRoute && role !== 'developer') {
+        return redirectAccessDenied(request)
       }
 
       // Inject user headers for downstream use, ONLY from the verified session
@@ -210,21 +283,33 @@ export async function proxy(request: NextRequest) {
       if (session.user?.email) {
         requestHeaders.set('x-user-email', session.user.email)
       }
+      // The team this session chose, for the dashboard layouts' permission
+      // checks; a cookie another session left behind names no team here.
+      const activeTeamId = activeTeamIdForSession(request.cookies.get(ACTIVE_TEAM_COOKIE)?.value, session.session?.id)
+      if (activeTeamId) {
+        requestHeaders.set('x-active-team-id', activeTeamId)
+      }
 
-      return passThrough(requestHeaders)
+      return passThrough(request, requestHeaders)
     } catch (error) {
       console.error('Proxy error:', error)
-      const loginUrl = new URL('/login', request.url)
-      loginUrl.searchParams.set('callbackUrl', pathname)
-      return NextResponse.redirect(loginUrl)
+      return redirectToLogin(request)
     }
   }
 
-  return passThrough(requestHeaders)
+  return passThrough(request, requestHeaders)
 }
 
+/**
+ * Everything runs through the proxy except the exact paths of Next's own
+ * output: `_next/static/`, the `_next/image` endpoint and `favicon.ico`.
+ * Excluding by file extension, or by a prefix without its boundary, would let a
+ * dynamic segment such as `alice.png` or `favicon.icoevil` reach the app without
+ * the session check and with forged identity headers intact. Files under
+ * public/ simply pass through.
+ */
 export const config = {
   matcher: [
-    '/((?!_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)',
+    '/((?!_next/static/|_next/image$|favicon\\.ico$).*)',
   ],
 }

package/dist/types/blocks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../../src/types/blocks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAA;AAEF,eAAO,MAAM,cAAc;;;mBAGzB,CAAA;AAEF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIpF;AAMD;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;iBAIpB,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBAI5B,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEhE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yIAWzB,CAAA;AAEV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAE3B,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAElE;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;iBAEA,CAAA;AAE5B,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAM5D;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,MAAM,CAc9E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG;IAC9D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAKA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,CAAC,eAAe,GAAG,iBAAiB,CAAC,GAClD,MAAM,CAYR;AAMD;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,eAAe,EAuD9C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAAe,EAc7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAAe,EAqB/C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eAAe,EAI1C,CAAA;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,mBAAmB,EAAE,eAAe,EAAE,GACrC,eAAe,EAAE,CAmBnB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,UAAU,GACV,KAAK,GACL,OAAO,GACP,QAAQ,GACR,OAAO,GACP,OAAO,GACP,eAAe,GACf,QAAQ,GACR,UAAU,GACV,OAAO,GACP,WAAW,GACX,OAAO,GACP,MAAM,GACN,MAAM,GACN,UAAU,GACV,cAAc,CAAA;AAElB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,SAAS,CAAA;IACf,GAAG,EAAE,QAAQ,CAAA;IACb,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAGjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KACvB,CAAC,CAAA;IAGF,aAAa,CAAC,EAAE,MAAM,CAAA;IAGtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IAGpB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAGjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,WAAW,GAAG,YAAY,CAAA;IAG7C,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,CAAA;QAC1E,KAAK,EAAE,OAAO,CAAA;KACf,CAAA;IAGD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,SAAS,GACT,UAAU,GACV,KAAK,GACL,cAAc,GACd,OAAO,GACP,OAAO,GACP,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,MAAM,GACN,OAAO,GACP,KAAK,GACL,YAAY,GACZ,OAAO,CAAA;AAEX;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,aAAa,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAGlB,gBAAgB,EAAE,eAAe,EAAE,CAAA;IAInC,QAAQ,EAAE,YAAY,EAAE,CAAA;IAIxB,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC,CAAA;IAEzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAGzB,UAAU,CAAC,EAAE,MAAM,CAAA;IAGnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;AAElF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,MAAM,EAAE,UAAU,CAAA;IAClB,GAAG,CAAC,EAAE,OAAO,CAAA;IAGb,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;IACxB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,CAAA;IACpE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;CACH;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAEvD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,yBAAyB;IACzB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAStE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAUlE"}
+{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../../src/types/blocks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAA;AAEF,eAAO,MAAM,cAAc;;;mBAGzB,CAAA;AAEF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIpF;AAMD;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;iBAIpB,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBAI5B,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEhE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yIAWzB,CAAA;AAEV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAE3B,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAElE;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;iBAEO,CAAA;AAEnC,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAM5D;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,MAAM,CAc9E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG;IAC9D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAKA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,CAAC,eAAe,GAAG,iBAAiB,CAAC,GAClD,MAAM,CAYR;AAMD;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,eAAe,EAuD9C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,eAAe,EAc7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAAe,EAqB/C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eAAe,EAI1C,CAAA;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,mBAAmB,EAAE,eAAe,EAAE,GACrC,eAAe,EAAE,CAmBnB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,UAAU,GACV,KAAK,GACL,OAAO,GACP,QAAQ,GACR,OAAO,GACP,OAAO,GACP,eAAe,GACf,QAAQ,GACR,UAAU,GACV,OAAO,GACP,WAAW,GACX,OAAO,GACP,MAAM,GACN,MAAM,GACN,UAAU,GACV,cAAc,CAAA;AAElB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,SAAS,CAAA;IACf,GAAG,EAAE,QAAQ,CAAA;IACb,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAGjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KACvB,CAAC,CAAA;IAGF,aAAa,CAAC,EAAE,MAAM,CAAA;IAGtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IAGpB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IAGjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,WAAW,GAAG,YAAY,CAAA;IAG7C,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,CAAA;QAC1E,KAAK,EAAE,OAAO,CAAA;KACf,CAAA;IAGD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,SAAS,GACT,UAAU,GACV,KAAK,GACL,cAAc,GACd,OAAO,GACP,OAAO,GACP,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,MAAM,GACN,OAAO,GACP,KAAK,GACL,YAAY,GACZ,OAAO,CAAA;AAEX;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,aAAa,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAGlB,gBAAgB,EAAE,eAAe,EAAE,CAAA;IAInC,QAAQ,EAAE,YAAY,EAAE,CAAA;IAIxB,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC,CAAA;IAEzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAGzB,UAAU,CAAC,EAAE,MAAM,CAAA;IAGnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;AAElF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,MAAM,EAAE,UAAU,CAAA;IAClB,GAAG,CAAC,EAAE,OAAO,CAAA;IAGb,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;IACxB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,CAAA;IACpE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;CACH;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAEvD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;IACxB,yBAAyB;IACzB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAStE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAUlE"}

package/dist/types/blocks.js

@@ -41,7 +41,7 @@ const baseAdvancedSchema = z.object({
   className: z.string().optional(),
   id: z.string().optional()
 });
-const baseBlockSchema = baseContentSchema.merge(baseDesignSchema).merge(baseAdvancedSchema);
+const baseBlockSchema = baseContentSchema.extend(baseDesignSchema.shape).extend(baseAdvancedSchema.shape);
 function getBackgroundClasses(backgroundColor) {
   const bgMap = {
     transparent: "bg-transparent",

package/dist/types/task.types.d.ts

@@ -56,6 +56,6 @@ export declare const TASK_PRIORITIES: Record<TaskPriority['level'], Omit<TaskPri
 /**
  * Available task categories
  */
-export declare const TASK_CATEGORIES: readonly ["Diseño", "Desarrollo", "Reuniones", "Documentación", "Testing", "General"];
+export declare const TASK_CATEGORIES: readonly ["Design", "Development", "Meetings", "Documentation", "Testing", "General"];
 export type TaskCategoryType = typeof TASK_CATEGORIES[number];
 //# sourceMappingURL=task.types.d.ts.map

package/dist/types/task.types.js

@@ -1,22 +1,22 @@
 const TASK_PRIORITIES = {
   high: {
-    label: "Alta",
+    label: "High",
     color: "bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200"
   },
   medium: {
-    label: "Media",
+    label: "Medium",
     color: "bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200"
   },
   low: {
-    label: "Baja",
+    label: "Low",
     color: "bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200"
   }
 };
 const TASK_CATEGORIES = [
-  "Dise\xF1o",
-  "Desarrollo",
-  "Reuniones",
-  "Documentaci\xF3n",
+  "Design",
+  "Development",
+  "Meetings",
+  "Documentation",
   "Testing",
   "General"
 ];

package/dist/utils/dev/TranslationDebugger.js

@@ -125,9 +125,9 @@ function TranslationDebugger() {
           borderRadius: "4px",
           fontSize: "10px"
         }, children: [
-          "Para ocultar: remueve ",
+          tCommon("debug.hidePrefix"),
           /* @__PURE__ */ jsx("code", { children: "?debug-i18n=true" }),
-          " de la URL"
+          tCommon("debug.hideSuffix")
         ] })
       ]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextsparkjs/core",
-  "version": "0.1.0-beta.187",
+  "version": "0.1.0-beta.189",
   "description": "NextSpark - The complete SaaS framework for Next.js",
   "license": "MIT",
   "author": "NextSpark <hello@nextspark.dev>",
@@ -112,6 +112,10 @@
       "types": "./dist/lib/scheduled-actions/handlers/index.d.ts",
       "import": "./dist/lib/scheduled-actions/handlers/index.js"
     },
+    "./lib/auth/*": {
+      "types": "./dist/lib/auth/*.d.ts",
+      "import": "./dist/lib/auth/*.js"
+    },
     "./lib/auth/security-notifications": {
       "types": "./dist/lib/auth/security-notifications/index.d.ts",
       "import": "./dist/lib/auth/security-notifications/index.js"
@@ -392,6 +396,7 @@
     "@types/pg": "^8.15.5",
     "@types/react": "^19",
     "@types/react-dom": "^19",
+    "@types/sanitize-html": "^2.16.1",
     "allure-cypress": "^3.4.4",
     "cypress": "^15.8.2",
     "esbuild": "^0.27.3",
@@ -448,8 +453,6 @@
     "@vercel/blob": "^2.0.0",
     "better-auth": "~1.6.30",
     "chalk": "^5.4.1",
-    "jiti": "^2.7.0",
-    "kysely": "0.28.17",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
@@ -457,6 +460,8 @@
     "dotenv": "^17.2.2",
     "fs-extra": "^11.2.0",
     "gray-matter": "^4.0.3",
+    "jiti": "^2.7.0",
+    "kysely": "0.28.17",
     "lucide-react": "^0.539.0",
     "mermaid": "^11.0.0",
     "next-intl": "^4.9.1",
@@ -472,6 +477,8 @@
     "remark-gfm": "^4.0.1",
     "remark-rehype": "^11.1.2",
     "resend": "^5.0.0",
+    "sanitize-html": "^2.17.7",
+    "server-only": "^0.0.1",
     "sharp": "^0.34.3 || ^0.35.3",
     "shiki": "^3.20.0",
     "sonner": "^2.0.7",
@@ -479,7 +486,7 @@
     "tailwind-merge": "^3.3.1",
     "uuid": "^13.0.0",
     "zod": "^4.3.6",
-    "@nextsparkjs/testing": "0.1.0-beta.187"
+    "@nextsparkjs/testing": "0.1.0-beta.189"
   },
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs || true",
@@ -489,6 +496,8 @@
     "dev": "tsup --watch",
     "test": "jest",
     "test:watch": "jest --watch",
-    "test:coverage": "jest --coverage"
+    "test:coverage": "jest --coverage",
+    "test:node": "npx tsx --test tests/node/*.test.ts",
+    "test:all": "pnpm test && pnpm test:node"
   }
 }

package/scripts/build/registry/__tests__/block-registry.test.mjs

@@ -0,0 +1,73 @@
+/**
+ * Tests for the block-registry generators.
+ *
+ * What matters is which module carries which binding. block-registry.ts holds a
+ * static import of every block component, for server rendering, so whatever
+ * imports it bundles every block. Client components render blocks through
+ * block-registry.lazy.ts, which must not import a component statically, and read
+ * configs through block-registry.client.ts, which must not import one at all.
+ *
+ * Run: node --test packages/core/scripts/build/registry/__tests__/block-registry.test.mjs
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  generateBlockRegistry,
+  generateBlockRegistryClient,
+  generateBlockRegistryLazy
+} from '../generators/block-registry.mjs'
+
+function block(slug, category) {
+  const base = `@/contents/themes/default/blocks/${slug}`
+  return {
+    slug,
+    name: slug,
+    description: `${slug} block`,
+    category,
+    icon: 'Box',
+    scope: ['pages'],
+    hasExamples: false,
+    themeName: 'default',
+    paths: {
+      component: `${base}/component`,
+      schema: `${base}/schema`,
+      fields: `${base}/fields`,
+      thumbnail: `/theme/blocks/${slug}/thumbnail.png`,
+    },
+  }
+}
+
+const blocks = [block('hero', 'hero'), block('cta-section', 'cta')]
+const config = { outputDir: '/tmp/registries', projectRoot: '/tmp/project' }
+const staticComponentImport = /^import .* from '[^']*\/component'/m
+
+test('the lazy registry loads each component on demand and imports none statically', () => {
+  const out = generateBlockRegistryLazy(blocks)
+  assert.doesNotMatch(out, staticComponentImport)
+  assert.match(out, /'hero': React\.lazy\(\(\) => import\('@\/contents\/themes\/default\/blocks\/hero\/component'\)/)
+  assert.match(out, /'cta-section': React\.lazy\(\(\) => import\('@\/contents\/themes\/default\/blocks\/cta-section\/component'\)/)
+})
+
+test('the client registry imports no component', () => {
+  const out = generateBlockRegistryClient(blocks, config)
+  assert.doesNotMatch(out, staticComponentImport)
+  assert.doesNotMatch(out, /import\('[^']*\/component'\)/)
+})
+
+test('the server registry imports components statically and re-exports the other halves', () => {
+  const out = generateBlockRegistry(blocks, config)
+  assert.match(out, staticComponentImport)
+  assert.match(out, /export \* from '\.\/block-registry\.client'/)
+  assert.match(out, /export \{ BLOCK_COMPONENTS \} from '\.\/block-registry\.lazy'/)
+  assert.doesNotMatch(out, /React\.lazy/)
+})
+
+test('with no blocks, each half still exports what its importers expect', () => {
+  assert.match(generateBlockRegistryLazy([]), /export const BLOCK_COMPONENTS\b/)
+  assert.match(generateBlockRegistryClient([], config), /export const BLOCK_REGISTRY\b/)
+  const server = generateBlockRegistry([], config)
+  assert.match(server, /export \{ BLOCK_COMPONENTS \} from '\.\/block-registry\.lazy'/)
+  assert.match(server, /export const BLOCK_COMPONENTS_SSR\b/)
+})

package/scripts/build/registry/__tests__/icons-discovery.test.mjs

@@ -0,0 +1,130 @@
+/**
+ * Tests for icon discovery.
+ *
+ * The two halves that can silently produce an empty or wrong registry — which
+ * degrades to every icon rendering as a Box, with no error anywhere — are the
+ * path matcher and the name extraction. Both are pure, so both are tested here
+ * directly; discoverIcons() itself only wires them to the filesystem.
+ *
+ * Run: node --test packages/core/scripts/build/registry/__tests__/icons-discovery.test.mjs
+ */
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import { findUnresolvedIconRefs, extractIconNames, isIconSourcePath } from '../discovery/icons.mjs'
+
+test('matches entity, block and app configs', () => {
+  assert.ok(isIconSourcePath('/p/contents/themes/default/entities/tasks/tasks.config.ts'))
+  assert.ok(isIconSourcePath('/p/themes/default/blocks/hero/config.ts'))
+  assert.ok(isIconSourcePath('/p/themes/default/config/app.config.ts'))
+})
+
+test('matches the same paths with Windows separators', () => {
+  assert.ok(isIconSourcePath('C:\\p\\contents\\themes\\default\\entities\\tasks\\tasks.config.ts'))
+  assert.ok(isIconSourcePath('C:\\p\\themes\\default\\blocks\\hero\\config.ts'))
+  assert.ok(isIconSourcePath('C:\\p\\themes\\default\\config\\app.config.ts'))
+})
+
+test('ignores configs whose icons never reach resolveIcon', () => {
+  assert.equal(isIconSourcePath('/p/themes/crm/config/features.config.ts'), false)
+  assert.equal(isIconSourcePath('/p/themes/default/config/theme.config.ts'), false)
+  assert.equal(isIconSourcePath('/p/themes/default/entities/tasks/messages/en.ts'), false)
+})
+
+test('does not match a file that merely ends in config.ts', () => {
+  assert.equal(isIconSourcePath('/p/themes/default/blocks/hero/notconfig.ts'), false)
+})
+
+test('reads an icon under a quoted key', () => {
+  const source = `
+    import { Users } from 'lucide-react'
+    export const config = { 'icon': Users }
+  `
+  assert.deepEqual(extractIconNames(source), ['Users'])
+})
+
+test('reads an icon declared as a lucide import', () => {
+  const source = `
+    import { Users, CheckSquare } from 'lucide-react'
+    export const config = { icon: CheckSquare }
+  `
+  assert.deepEqual(extractIconNames(source), ['CheckSquare'])
+})
+
+test('resolves an aliased import back to the lucide export name', () => {
+  // `icon: HouseIcon` is lucide's `Home`; the registry is keyed by the export
+  const source = `
+    import { Home as HouseIcon } from 'lucide-react'
+    export const config = { icon: HouseIcon }
+  `
+  assert.deepEqual(extractIconNames(source), ['Home'])
+})
+
+test('ignores an identifier that did not come from lucide', () => {
+  const source = `
+    import { MyOwnIcon } from '@/components/icons'
+    export const config = { icon: MyOwnIcon }
+  `
+  assert.deepEqual(extractIconNames(source), [])
+})
+
+test('reads a string icon name, kebab-case included', () => {
+  const source = `export const config = { icon: 'pie-chart' }`
+  assert.deepEqual(extractIconNames(source), ['pie-chart'])
+})
+
+test('does not match a different key that ends in icon', () => {
+  const source = `
+    import { Users } from 'lucide-react'
+    export const config = { sidebarIcon: Users, my_icon: Users }
+  `
+  assert.deepEqual(extractIconNames(source), [])
+})
+
+test('never yields anything but a bare name, so nothing can be injected', () => {
+  // The generated registry is TypeScript built from these strings, and every
+  // name becomes a named import. Whatever a config holds, what comes out here
+  // is a bare name — and discoverIcons then drops any that lucide doesn't
+  // export, which 'X' is.
+  const sources = [
+    `export const config = { icon: 'X"; process.exit(1); //' }`,
+    `export const config = { icon: 'Users } from "x"; import evil from "y"; //' }`,
+    'export const config = { icon: `${danger}` }'
+  ]
+
+  for (const source of sources) {
+    for (const name of extractIconNames(source)) {
+      assert.match(name, /^[A-Za-z][\w$-]*$/, `unsafe name from: ${source}`)
+    }
+  }
+})
+
+// Only a direct lucide import or a string literal reaches the registry, so
+// every other shape has to be reported rather than silently rendering a Box.
+test('reports an icon reference the build cannot resolve', () => {
+  assert.deepEqual(
+    findUnresolvedIconRefs("import * as I from 'lucide-react'\nexport default { icon: I.Users }"),
+    ['I.Users']
+  )
+  assert.deepEqual(
+    findUnresolvedIconRefs("import { Users } from './icons'\nexport default { icon: Users }"),
+    ['Users']
+  )
+  assert.deepEqual(
+    findUnresolvedIconRefs("import { Users } from 'lucide-react'\nconst Mine = Users\nexport default { icon: Mine }"),
+    ['Mine']
+  )
+})
+
+test('says nothing about a reference it can resolve', () => {
+  assert.deepEqual(
+    findUnresolvedIconRefs("import { Users } from 'lucide-react'\nexport default { icon: Users }"),
+    []
+  )
+  assert.deepEqual(
+    findUnresolvedIconRefs("import { Home as HouseIcon } from 'lucide-react'\nexport default { icon: HouseIcon }"),
+    []
+  )
+  assert.deepEqual(findUnresolvedIconRefs("export default { icon: 'pie-chart' }"), [])
+})