@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.195

package/dist/lib/entities/external-api-generator.js

@@ -3,6 +3,7 @@ import { generateEntityAPI } from "./api-generator.js";
 import { getEntityConfig } from "./registry.js";
 import { rateLimit } from "../rate-limit.js";
 import { validateAPIKey } from "../auth/api-keys.js";
+import { getClientIp } from "../api/client-ip.js";
 function generateExternalAPI(entityName, options = {}) {
   const entityConfig = getEntityConfig(entityName);
   if (!entityConfig) {
@@ -168,10 +169,7 @@ function createErrorResponse(status, message, details) {
   }, { status });
 }
 function getClientIdentifier(request) {
-  const apiKeyId = request.headers.get("x-api-key-id");
-  const clientId = request.headers.get("x-client-id");
-  const ip = request.headers.get("x-forwarded-for") || request.headers.get("x-real-ip") || "unknown";
-  return apiKeyId || clientId || ip;
+  return getClientIp(request.headers);
 }
 function generateOpenAPISpec(entityName) {
   const entityConfig = getEntityConfig(entityName);

package/dist/lib/entities/public-slug.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Slugs of public entities (#215)
+ *
+ * A slug that ends up in a public URL is validated on write, with the one format the templates' pages and
+ * posts tables enforce (`validatePageSlug`): lowercase letters, digits and hyphens, no dot. Reserved words
+ * are refused only for an entity served at the site root (`access.basePath: '/'`), where they would shadow
+ * a route. Existing rows are not rewritten, and a slug that did not change is never judged (the callers check).
+ */
+import type { EntityConfig } from './types';
+/** What the slug rule reads of an entity: the server's config, or the client registry's lighter one. */
+export interface SlugScope {
+    access?: {
+        basePath?: string;
+        allowNestedSlugs?: boolean;
+    };
+    builder?: {
+        public?: {
+            basePath?: string;
+        };
+    };
+}
+/** Whether the entity has a `slug` field that becomes part of a public URL. */
+export declare function hasPublicSlug(entity: EntityConfig): boolean;
+/**
+ * The first segments of the base paths the other entities are served under (`/blog/x` -> `blog`): a root page with
+ * that slug would be shadowed by their routes.
+ */
+export declare function otherBasePathSegments(entity: SlugScope, entities: readonly (SlugScope & {
+    slug?: string;
+})[]): string[];
+/**
+ * The reason `slug` cannot be a public slug of `entity`, or null when it can. `taken` are the base path segments
+ * of the other entities (`otherBasePathSegments`), reserved for an entity at the site root.
+ */
+export declare function validatePublicSlug(entity: SlugScope, slug: string, taken?: readonly string[]): string | null;
+/**
+ * The validation issue (Zod's shape, so clients read it like any other field error) for the `slug` of a
+ * write body, or null: the entity has no public slug, the body does not carry one (an update that leaves it
+ * alone), or it is valid. Meant to run after the schema accepted the body, so a present slug is a string or null.
+ */
+export declare function publicSlugIssue(entity: EntityConfig, data: Record<string, unknown>, taken?: readonly string[]): {
+    code: string;
+    path: string[];
+    message: string;
+};
+//# sourceMappingURL=public-slug.d.ts.map

package/dist/lib/entities/public-slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-slug.d.ts","sourceRoot":"","sources":["../../../src/lib/entities/public-slug.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAG3C,wGAAwG;AACxG,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1D,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAC7C;AAKD,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,SAAS,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAKvH;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,GAAG,IAAI,CAWhH;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO;;;;EAIjH"}

package/dist/lib/entities/public-slug.js

@@ -0,0 +1,39 @@
+import { validatePageSlug } from "../constants/reserved-slugs.js";
+const basePathOf = (entity) => {
+  var _a, _b, _c;
+  return ((_a = entity.access) == null ? void 0 : _a.basePath) ?? ((_c = (_b = entity.builder) == null ? void 0 : _b.public) == null ? void 0 : _c.basePath);
+};
+function hasPublicSlug(entity) {
+  var _a;
+  return entity.fields.some((field) => field.name === "slug") && (((_a = entity.access) == null ? void 0 : _a.public) === true || basePathOf(entity) !== void 0);
+}
+function otherBasePathSegments(entity, entities) {
+  return entities.filter((other) => other !== entity).map((other) => {
+    var _a;
+    return (_a = basePathOf(other)) == null ? void 0 : _a.split("/").filter(Boolean)[0];
+  }).filter((segment) => Boolean(segment));
+}
+function validatePublicSlug(entity, slug, taken = []) {
+  var _a;
+  const atRoot = basePathOf(entity) === "/";
+  const segments = slug.split("/");
+  if (segments.length > 1 && !(atRoot ? (_a = entity.access) == null ? void 0 : _a.allowNestedSlugs : basePathOf(entity))) {
+    return "Slug cannot contain slashes";
+  }
+  for (const [index, segment] of segments.entries()) {
+    const reason = validatePageSlug(segment, { checkReserved: atRoot && index === 0, reserved: taken });
+    if (reason) return reason;
+  }
+  return null;
+}
+function publicSlugIssue(entity, data, taken = []) {
+  if (!hasPublicSlug(entity) || typeof data.slug !== "string") return null;
+  const message = validatePublicSlug(entity, data.slug, taken);
+  return message ? { code: "custom", path: ["slug"], message } : null;
+}
+export {
+  hasPublicSlug,
+  otherBasePathSegments,
+  publicSlugIssue,
+  validatePublicSlug
+};

package/dist/routes/(auth)/signup/page.cc.d.ts

@@ -1,9 +1,4 @@
-/**
- * Signup page for a host with `cacheComponents` on (variant of ./page).
- *
- * Same page and metadata; `dynamic = 'force-dynamic'` is left out because Next.js fails a build that
- * has it under Cache Components. The page reads the database and calls redirect(); under Cache Components
- * the group or root layout puts it behind Suspense, so the redirect streams per request, after the static shell.
- */
-export { default, metadata } from './page';
+import { metadata } from './page';
+export { metadata };
+export default function SignupPageCc(): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=page.cc.d.ts.map

package/dist/routes/(auth)/signup/page.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page.cc.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.cc.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA"}
+{"version":3,"file":"page.cc.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.cc.tsx"],"names":[],"mappings":"AAUA,OAAmB,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,CAAA;AAEnB,MAAM,CAAC,OAAO,UAAU,YAAY,4CAMnC"}

package/dist/routes/(auth)/signup/page.cc.js

@@ -1 +1,7 @@
-export { default, metadata } from "./page.js";
+import { jsx } from "react/jsx-runtime";
+import { Suspense } from "react";
+import SignupPage, { metadata } from "./page.js";
+export { metadata };
+export default function SignupPageCc() {
+  return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(SignupPage, {}) });
+}

package/dist/routes/(auth)/verify-email/page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/verify-email/page.tsx"],"names":[],"mappings":"AA+KA,iBAAS,eAAe,4CAUvB;AAGD,eAAe,eAAe,CAAA"}
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/verify-email/page.tsx"],"names":[],"mappings":"AAgLA,iBAAS,eAAe,4CAUvB;AAGD,eAAe,eAAe,CAAA"}

package/dist/routes/(auth)/verify-email/page.js

@@ -7,6 +7,7 @@ import { Button } from "@nextsparkjs/core/components/ui/button";
 import { Alert, AlertDescription } from "@nextsparkjs/core/components/ui/alert";
 import { sel } from "@nextsparkjs/core/selectors/auth";
 import { withBasePath } from "@nextsparkjs/core/lib/base-path";
+import { VERIFY_FROM_UI_HEADER } from "@nextsparkjs/core/lib/api/client-headers";
 function VerifyEmailContent() {
   const searchParams = useSearchParams();
   const router = useRouter();
@@ -26,7 +27,7 @@ function VerifyEmailContent() {
           method: "GET",
           credentials: "include",
           headers: {
-            "x-verify-from-ui": "true"
+            [VERIFY_FROM_UI_HEADER]: "true"
           }
         });
         if (!response.ok) {

package/dist/routes/(public)/page.cc.d.ts

@@ -0,0 +1,3 @@
+declare const _default: (props: object) => import("react/jsx-runtime").JSX.Element;
+export default _default;
+//# sourceMappingURL=page.cc.d.ts.map

package/dist/routes/(public)/page.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/(public)/page.cc.tsx"],"names":[],"mappings":";AASA,wBAAgD"}

package/dist/routes/(public)/page.cc.js

@@ -0,0 +1,3 @@
+import { behindSuspense } from "../_internal/suspended-route.js";
+import DefaultPublicHome from "./page.js";
+export default behindSuspense(DefaultPublicHome);

package/dist/routes/_internal/area-access.cc.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The per-segment role check of /superadmin and /devtools for a host with `cacheComponents` on (the `access` of the
+ * area layouts' variants in ../variants.json). Same rules and same check as `area-access`; only where it runs moves.
+ *
+ * `withSuperadminAccess(Page)` in `area-access` awaits the session before it returns the page, so the segment has no
+ * Suspense boundary between it and request-time work: a navigation into it would wait, and the dev server reports it
+ * ("Could not validate that a segment in your UI has instant navigation ... dropped segment"). Here the segment is a
+ * Suspense boundary (fallback: nothing) around the check, and the page or layout renders inside it only once the
+ * check has passed: no session -> /login, a session without the role -> /dashboard?error=access_denied, and the
+ * segment's content is never rendered for either. What the prerendered shell holds of the segment is the empty
+ * fallback.
+ *
+ * `generateMetadata` and Route Handlers keep the checks of `area-access` (nothing to prerender there).
+ */
+import { type ComponentType } from 'react';
+export { withSuperadminMetadata, withDevtoolsMetadata, withSuperadminRouteAccess, withDevtoolsRouteAccess } from './area-access';
+/** A page or layout under /superadmin, rendered only for superadmin and developer sessions, inside its own boundary. */
+export declare function withSuperadminAccess<P extends object>(Segment: ComponentType<P>): (props: P) => import("react/jsx-runtime").JSX.Element;
+/** A page or layout under /devtools, rendered only for developer sessions, inside its own boundary. */
+export declare function withDevtoolsAccess<P extends object>(Segment: ComponentType<P>): (props: P) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=area-access.cc.d.ts.map

package/dist/routes/_internal/area-access.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"area-access.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/area-access.cc.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,OAAO,CAAA;AAGpD,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAgBhI,wHAAwH;AACxH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,yDAE/E;AAED,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,yDAE7E"}

package/dist/routes/_internal/area-access.cc.js

@@ -0,0 +1,19 @@
+import { jsx } from "react/jsx-runtime";
+import { Suspense } from "react";
+import { requireAreaAccess } from "./area-access.js";
+export { withSuperadminMetadata, withDevtoolsMetadata, withSuperadminRouteAccess, withDevtoolsRouteAccess } from "./area-access.js";
+function withAreaAccess(area, Segment) {
+  async function AreaSegmentGate(props) {
+    await requireAreaAccess(area);
+    return /* @__PURE__ */ jsx(Segment, { ...props });
+  }
+  return function AreaSegment(props) {
+    return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(AreaSegmentGate, { ...props }) });
+  };
+}
+export function withSuperadminAccess(Segment) {
+  return withAreaAccess("superadmin", Segment);
+}
+export function withDevtoolsAccess(Segment) {
+  return withAreaAccess("devtools", Segment);
+}

package/dist/routes/_internal/auth-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/auth-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAKpC,eAAO,MAAM,eAAe,EAAE,QAU7B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAA0B,CAAA;AAEjD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,CAAC,IAC1C,cAAc;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,sDAQzF"}
+{"version":3,"file":"auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/auth-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAMpC,eAAO,MAAM,eAAe,EAAE,QAU7B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAA0B,CAAA;AAEjD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,CAAC,IAC1C,cAAc;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,sDAQzF"}

package/dist/routes/_internal/auth-layout.js

@@ -2,10 +2,11 @@ import { jsx } from "react/jsx-runtime";
 import { NextIntlClientProvider } from "next-intl";
 import { getMessages } from "next-intl/server";
 import { selectMessages } from "@nextsparkjs/core/lib/i18n/client-messages";
+import { APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
 export const defaultMetadata = {
   title: {
-    default: "Authentication | Boilerplate",
-    template: "%s | Boilerplate"
+    default: `Authentication | ${APP_NAME}`,
+    template: `%s | ${APP_NAME}`
   },
   description: "Sign in or create an account to access our platform",
   robots: {

package/dist/routes/_internal/dashboard-main-shared.d.ts

@@ -0,0 +1,7 @@
+/** The dashboard shell with the navigation of every entity the project registers. */
+export declare function MainDashboardShell({ children }: {
+    children: React.ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+/** Sends a request for an entity route the signed-in user may not use to the permission-denied page. */
+export declare function enforceEntityPermission(): Promise<void>;
+//# sourceMappingURL=dashboard-main-shared.d.ts.map

package/dist/routes/_internal/dashboard-main-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-main-shared.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/dashboard-main-shared.tsx"],"names":[],"mappings":"AA8CA,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,2CAO7E;AAED,wGAAwG;AACxG,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAuB7D"}

package/dist/routes/_internal/dashboard-main-shared.js

@@ -0,0 +1,49 @@
+import { jsx } from "react/jsx-runtime";
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { DashboardShell } from "@nextsparkjs/core/components/dashboard/layouts/DashboardShell";
+import { serializeEntityConfig } from "@nextsparkjs/core/lib/entities/serialization";
+import { setEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
+import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
+import { getDashboardPermissionContext } from "@nextsparkjs/core/lib/auth/request-session";
+import { isValidPermission } from "@nextsparkjs/core/lib/permissions/init";
+import { ENTITY_REGISTRY, ENTITY_METADATA } from "@nextsparkjs/registries/entity-registry";
+setEntityRegistry(ENTITY_REGISTRY, ENTITY_METADATA);
+function parseEntityFromPathname(pathname) {
+  const match = pathname.match(/^\/dashboard\/([^/]+)(?:\/(.*))?$/);
+  if (!match) return null;
+  const entity = match[1];
+  const rest = match[2] || "";
+  if (rest === "" || rest === "/") return { entity, action: "list" };
+  if (rest === "create") return { entity, action: "create" };
+  if (rest.match(/^[^/]+\/edit$/)) return { entity, action: "update" };
+  if (rest.match(/^[^/]+$/)) return { entity, action: "read" };
+  return { entity, action: "read" };
+}
+function isEntityConfig(entity) {
+  return "slug" in entity;
+}
+export function MainDashboardShell({ children }) {
+  const allEntities = Object.values(ENTITY_REGISTRY).map((entry) => entry.config);
+  const entities = allEntities.filter(isEntityConfig);
+  const serializedEntities = entities.map(serializeEntityConfig);
+  return /* @__PURE__ */ jsx(DashboardShell, { entities: serializedEntities, children });
+}
+export async function enforceEntityPermission() {
+  const headersList = await headers();
+  const pathname = headersList.get("x-pathname") || "";
+  const { userId, teamId } = await getDashboardPermissionContext();
+  if (userId && teamId && pathname) {
+    const parsed = parseEntityFromPathname(pathname);
+    if (parsed) {
+      const { entity, action } = parsed;
+      const permission = `${entity}.${action}`;
+      if (isValidPermission(`${entity}.list`)) {
+        const hasPermission = await checkPermission(userId, teamId, permission);
+        if (!hasPermission) {
+          redirect(`/dashboard/permission-denied?entity=${entity}&action=${action}`);
+        }
+      }
+    }
+  }
+}

package/dist/routes/_internal/default-auth-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/default-auth-layout.tsx"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,2CA6B5E"}
+{"version":3,"file":"default-auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/default-auth-layout.tsx"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,2CA+B5E"}

package/dist/routes/_internal/default-auth-layout.js

@@ -1,12 +1,13 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { Suspense } from "react";
 import { AuthWrapper } from "@nextsparkjs/core/components/auth/layouts/AuthWrapper";
+import { APP_DESCRIPTION, APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
 export function DefaultAuthLayout({ children }) {
   return /* @__PURE__ */ jsx("div", { className: "min-h-screen bg-gradient-to-b from-background to-muted/20 flex items-center justify-center p-4", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md", children: [
     /* @__PURE__ */ jsxs("div", { className: "bg-card rounded-lg shadow-lg border border-border p-8", children: [
       /* @__PURE__ */ jsxs("div", { className: "text-center mb-8", children: [
-        /* @__PURE__ */ jsx("h1", { className: "text-3xl font-bold text-foreground mb-2", children: "Boilerplate" }),
-        /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: "Modern Full-Stack Application" })
+        /* @__PURE__ */ jsx("h1", { className: "text-3xl font-bold text-foreground mb-2", children: APP_NAME }),
+        APP_DESCRIPTION && /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: APP_DESCRIPTION })
       ] }),
       /* @__PURE__ */ jsx(AuthWrapper, { children: /* @__PURE__ */ jsx(Suspense, { fallback: null, children }) })
     ] }),

package/dist/routes/_internal/devtools-layout.cc.d.ts

@@ -10,8 +10,9 @@ export declare const withDevtoolsAreaMessages: (Layout: ComponentType<DevLayoutP
 /**
  * What a project's devtools layout is composed with in Cache Components mode (the manifest's `compose` of that
  * variant): the mode's messages and the server-side role check, then core's client guard around the project's layout,
- * as `withDevtoolsGuard` does in the ISR module. A module of its own so only the devtools route group imports the guard,
- * the role check and their client components.
+ * as `withDevtoolsGuard` does in the ISR module. The guard is told the server checked the role (`serverChecked`), so it
+ * renders the area while the client session loads. A module of its own so only the devtools route group imports the
+ * guard, the role check and their client components.
  */
 export declare const withDevtoolsGuard: (ProjectLayout: ComponentType<DevLayoutProps>) => ({ children }: {
     children: import("react").ReactNode;

package/dist/routes/_internal/devtools-layout.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAG5E;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,QAAQ,aAAa,CAAC,cAAc,CAAC;;6CAA2D,CAAA;AAEzI;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,eAAe,aAAa,CAAC,cAAc,CAAC;;6CAAiE,CAAA"}
+{"version":3,"file":"devtools-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAG5E;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,QAAQ,aAAa,CAAC,cAAc,CAAC;;6CAA2D,CAAA;AAEzI;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,eAAe,aAAa,CAAC,cAAc,CAAC;;6CAAuE,CAAA"}

package/dist/routes/_internal/devtools-layout.cc.js

@@ -2,4 +2,4 @@ import { withDevtoolsMessages } from "./group-layouts.cc.js";
 import { guardDevtoolsLayout } from "./devtools-layout.js";
 import { withAreaGate } from "./area-access.js";
 export const withDevtoolsAreaMessages = (Layout) => withDevtoolsMessages(withAreaGate("devtools", Layout));
-export const withDevtoolsGuard = (ProjectLayout) => withDevtoolsAreaMessages(guardDevtoolsLayout(ProjectLayout));
+export const withDevtoolsGuard = (ProjectLayout) => withDevtoolsAreaMessages(guardDevtoolsLayout(ProjectLayout, true));

package/dist/routes/_internal/devtools-layout.d.ts

@@ -4,6 +4,10 @@ export declare const defaultMetadata: Metadata;
 export interface DevLayoutProps {
     children: React.ReactNode;
 }
+/** `serverChecked`: see DeveloperGuard (only the Cache Components module passes it, after its role check). */
+type GuardedProps = DevLayoutProps & {
+    serverChecked?: boolean;
+};
 /**
  * Developer Area Layout
  *
@@ -12,7 +16,7 @@ export interface DevLayoutProps {
  * Includes responsive design for mobile and desktop.
  * Uses purple/violet color scheme to differentiate from Admin Panel (red).
  */
-export declare function DevLayout({ children }: DevLayoutProps): import("react/jsx-runtime").JSX.Element;
+export declare function DevLayout({ children, serverChecked }: GuardedProps): import("react/jsx-runtime").JSX.Element;
 /**
  * Wraps a layout for this route group in the group's client messages, after the server-side role check
  * (area-access): it runs before anything is rendered or sent, so a page load without the role gets a 307. The
@@ -27,10 +31,11 @@ export declare function withDevtoolsMessages(ResolvedDevLayout: ComponentType<De
  * /devtools checks again, see area-access). Shared by the message wrappers of both rendering modes
  * (`withDevtoolsGuard` here, and in `group-layouts.cc`).
  */
-export declare function guardDevtoolsLayout(ProjectLayout: ComponentType<DevLayoutProps>): ({ children }: DevLayoutProps) => import("react/jsx-runtime").JSX.Element;
+export declare function guardDevtoolsLayout(ProjectLayout: ComponentType<DevLayoutProps>, serverChecked?: boolean): ({ children }: DevLayoutProps) => import("react/jsx-runtime").JSX.Element;
 /**
  * The composition of a project's devtools layout with core (the generated host): messages, then
  * `guardDevtoolsLayout` around the project's layout.
  */
 export declare function withDevtoolsGuard(ProjectLayout: ComponentType<DevLayoutProps>): ({ children }: DevLayoutProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+export {};
 //# sourceMappingURL=devtools-layout.d.ts.map

package/dist/routes/_internal/devtools-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAK1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAOhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,cAAc,2CAgCrD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAAC,IACvC,cAAc,cAAc,sDASzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,IAC7C,cAAc,cAAc,6CAS9D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,kBAlClB,cAAc,sDAoCzE"}
+{"version":3,"file":"devtools-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAK1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAOhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,8GAA8G;AAC9G,KAAK,YAAY,GAAG,cAAc,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AAEhE;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,2CAgClE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAAC,IACvC,cAAc,cAAc,sDASzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,EAAE,aAAa,UAAQ,IACpE,cAAc,cAAc,6CAS9D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,kBAlClB,cAAc,sDAoCzE"}

package/dist/routes/_internal/devtools-layout.js

@@ -14,9 +14,9 @@ export const defaultMetadata = {
   robots: "noindex, nofollow"
   // Prevent search engine indexing
 };
-export function DevLayout({ children }) {
+export function DevLayout({ children, serverChecked }) {
   const pluginNavItems = getAllPluginNavItems("devtools");
-  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", children: [
+  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { serverChecked, children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", children: [
     /* @__PURE__ */ jsx("div", { className: "hidden lg:block", children: /* @__PURE__ */ jsx(DevtoolsSidebar, { pluginItems: pluginNavItems }) }),
     /* @__PURE__ */ jsxs("div", { className: "flex-1 flex flex-col overflow-hidden", children: [
       /* @__PURE__ */ jsx(DevtoolsMobileHeader, {}),
@@ -31,9 +31,9 @@ export function withDevtoolsMessages(ResolvedDevLayout) {
     return /* @__PURE__ */ jsx(NextIntlClientProvider, { messages: selectMessages(messages, "devtools"), children: /* @__PURE__ */ jsx(ResolvedDevLayout, { children }) });
   };
 }
-export function guardDevtoolsLayout(ProjectLayout) {
+export function guardDevtoolsLayout(ProjectLayout, serverChecked = false) {
   return function GuardedDevLayout({ children }) {
-    return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) });
+    return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { serverChecked, children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) });
   };
 }
 export function withDevtoolsGuard(ProjectLayout) {

package/dist/routes/_internal/entity-detail-route.cc.d.ts

@@ -0,0 +1,8 @@
+import { createEntityDetailRoute as createRoute } from './entity-detail-route';
+export type { EntityDetailTemplateProps } from './entity-detail-route';
+export declare function createEntityDetailRoute(...args: Parameters<typeof createRoute>): (props: {
+    params: Promise<{
+        id: string;
+    }>;
+}) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=entity-detail-route.cc.d.ts.map

package/dist/routes/_internal/entity-detail-route.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-detail-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-detail-route.cc.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAE9E,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAEtE,wBAAgB,uBAAuB,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC;;;;8CAE9E"}

package/dist/routes/_internal/entity-detail-route.cc.js

@@ -0,0 +1,5 @@
+import { behindSuspense } from "./suspended-route.js";
+import { createEntityDetailRoute as createRoute } from "./entity-detail-route.js";
+export function createEntityDetailRoute(...args) {
+  return behindSuspense(createRoute(...args));
+}

package/dist/routes/_internal/entity-edit-route.cc.d.ts

@@ -0,0 +1,8 @@
+import { createEntityEditRoute as createRoute } from './entity-edit-route';
+export type { EntityEditTemplateProps } from './entity-edit-route';
+export declare function createEntityEditRoute(...args: Parameters<typeof createRoute>): (props: {
+    params: Promise<{
+        id: string;
+    }>;
+}) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=entity-edit-route.cc.d.ts.map

package/dist/routes/_internal/entity-edit-route.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-edit-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-edit-route.cc.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,IAAI,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAE1E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAElE,wBAAgB,qBAAqB,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC;;;;8CAE5E"}

package/dist/routes/_internal/entity-edit-route.cc.js

@@ -0,0 +1,5 @@
+import { behindSuspense } from "./suspended-route.js";
+import { createEntityEditRoute as createRoute } from "./entity-edit-route.js";
+export function createEntityEditRoute(...args) {
+  return behindSuspense(createRoute(...args));
+}

package/dist/routes/_internal/public-archive-route.d.ts

@@ -13,7 +13,7 @@ type SearchParams = Promise<{
 /** @param config - the entity's config (`ui.public.hasArchivePage` decides whether the archive is served) */
 export declare function createPublicArchiveRoute(config: EntityConfig): ({ searchParams }: {
     searchParams: SearchParams;
-}) => Promise<import("react/jsx-runtime").JSX.Element>;
+}) => import("react/jsx-runtime").JSX.Element;
 /** `generateMetadata` of an entity's archive page. */
 export declare function createPublicArchiveMetadata(config: EntityConfig): () => Promise<Metadata>;
 export {};

package/dist/routes/_internal/public-archive-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-archive-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-archive-route.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAExE,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,IAClB,kBAAkB;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,sDAgB1F;AAED,sDAAsD;AACtD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,SACP,OAAO,CAAC,QAAQ,CAAC,CAMzE"}
+{"version":3,"file":"public-archive-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-archive-route.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAGxE,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAW7E,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,IACxB,kBAAkB;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,6CAkBpF;AAED,sDAAsD;AACtD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,SACP,OAAO,CAAC,QAAQ,CAAC,CAMzE"}

package/dist/routes/_internal/public-archive-route.js

@@ -1,8 +1,13 @@
 import { jsx, jsxs } from "react/jsx-runtime";
+import { Suspense } from "react";
 import { notFound } from "next/navigation";
 import { PublicEntityGrid } from "@nextsparkjs/core/components/public/entities/PublicEntityGrid";
+import { APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
+async function ArchiveGrid({ config, searchParams }) {
+  return /* @__PURE__ */ jsx(PublicEntityGrid, { entityType: config.slug, entitySlug: config.slug, searchParams: await searchParams });
+}
 export function createPublicArchiveRoute(config) {
-  return async function PublicArchiveRoute({ searchParams }) {
+  return function PublicArchiveRoute({ searchParams }) {
     var _a, _b, _c, _d, _e, _f;
     if (!((_b = (_a = config.ui) == null ? void 0 : _a.public) == null ? void 0 : _b.hasArchivePage)) notFound();
     const hasBasePath = Boolean(((_c = config.access) == null ? void 0 : _c.basePath) ?? ((_e = (_d = config.builder) == null ? void 0 : _d.public) == null ? void 0 : _e.basePath));
@@ -15,14 +20,14 @@ export function createPublicArchiveRoute(config) {
           config.names.plural.toLowerCase()
         ] })
       ] }),
-      /* @__PURE__ */ jsx(PublicEntityGrid, { entityType: config.slug, entitySlug: config.slug, searchParams: await searchParams })
+      /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(ArchiveGrid, { config, searchParams }) })
     ] });
   };
 }
 export function createPublicArchiveMetadata(config) {
   return async function generatePublicArchiveMetadata() {
     return {
-      title: `${config.names.plural} | Boilerplate`,
+      title: `${config.names.plural} | ${APP_NAME}`,
       description: `Browse all ${config.names.plural.toLowerCase()}`
     };
   };

package/dist/routes/_internal/public-item-route.cc.d.ts

@@ -1,5 +1,9 @@
 import type { EntityConfig } from '@nextsparkjs/core/lib/entities/types';
-export declare const createPublicItemRoute: (config: EntityConfig, Template?: import("react").ComponentType<import("./public-item-route").PublicItemTemplateProps>) => ({ params, searchParams }: import("./public-item-route").ItemRouteProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+declare const cachedRoutes: {
+    createPublicItemRoute: (config: EntityConfig, Template?: import("react").ComponentType<import("./public-item-route").PublicItemTemplateProps>) => ({ params, searchParams }: import("./public-item-route").ItemRouteProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+    createPublicItemMetadata: (config: EntityConfig) => ({ params }: Pick<import("./public-item-route").ItemRouteProps, "params">) => Promise<import("next").Metadata>;
+};
+export declare const createPublicItemRoute: (...args: Parameters<typeof cachedRoutes.createPublicItemRoute>) => (props: import("./public-item-route").ItemRouteProps) => import("react/jsx-runtime").JSX.Element;
 export declare const createPublicItemMetadata: (config: EntityConfig) => ({ params }: Pick<import("./public-item-route").ItemRouteProps, "params">) => Promise<import("next").Metadata>;
 export type { PublicItemTemplateProps } from './public-item-route';
 //# sourceMappingURL=public-item-route.cc.d.ts.map

package/dist/routes/_internal/public-item-route.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-item-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.cc.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAsCxE,eAAO,MAAM,qBAAqB,yPAAqC,CAAA;AACvE,eAAO,MAAM,wBAAwB,0IAAwC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"public-item-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.cc.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAsCxE,QAAA,MAAM,YAAY;;;CAAqC,CAAA;AAEvD,eAAO,MAAM,qBAAqB,GAAI,GAAG,MAAM,UAAU,CAAC,OAAO,YAAY,CAAC,qBAAqB,CAAC,qGAAgE,CAAA;AACpK,eAAO,MAAM,wBAAwB,0IAAwC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/routes/_internal/public-item-route.cc.js

@@ -3,6 +3,7 @@ import { query } from "@nextsparkjs/core/lib/db";
 import { PatternsResolverService } from "@nextsparkjs/core/lib/blocks/patterns-resolver.service";
 import { buildPublicSelectClause, getResolvedBlocks } from "./public-entity-shared.js";
 import { bindPublicItemRoutes } from "./public-item-route.js";
+import { behindSuspense } from "./suspended-route.js";
 async function readPublishedItem(entitySlug, tableName, selectClause, slug) {
   "use cache";
   cacheLife({ stale: 300, revalidate: 3600, expire: 86400 });
@@ -28,5 +29,5 @@ const cachedSource = {
   resolveBlocks: (blocks) => getResolvedBlocks(blocks, readPatterns)
 };
 const cachedRoutes = bindPublicItemRoutes(cachedSource);
-export const createPublicItemRoute = cachedRoutes.createPublicItemRoute;
+export const createPublicItemRoute = (...args) => behindSuspense(cachedRoutes.createPublicItemRoute(...args));
 export const createPublicItemMetadata = cachedRoutes.createPublicItemMetadata;

package/dist/routes/_internal/public-item-route.d.ts

@@ -28,6 +28,13 @@ export interface ItemRouteProps {
     }>;
     searchParams: SearchParams;
 }
+/**
+ * The extensions of the static files a browser or crawler asks a site for. A request for one that reaches an item route
+ * (`/favicon.ico`, `/robots.txt`, `/apple-touch-icon.png`) is not an item: it answers not found at once, without reading the
+ * database or rendering a template. A slug may contain a dot (`release-1.0`, `v2.5`), so only these extensions on the last
+ * segment count.
+ */
+export declare const STATIC_FILE_EXTENSION: RegExp;
 /**
  * Where a public item comes from. The default reads the database on every render; `public-item-route.cc` (the
  * Cache Components host's module) supplies a cached one.

package/dist/routes/_internal/public-item-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-item-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAElG,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,sGAAsG;AACtG,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjC,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC5C,YAAY,EAAE,YAAY,CAAA;CAC3B;AAKD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC5E,oGAAoG;IACpG,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,GAAG,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;CACtF;AAgED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB;oCAEzB,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCAlCjC,cAAc;uCAmCzC,YAAY,kBAvBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;EAyBhH;AAGD,eAAO,MAAM,qBAAqB,WANE,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCAlCjC,cAAc,qDAwCP,CAAA;AACzE,eAAO,MAAM,wBAAwB,WANE,YAAY,kBAvBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CA6BjC,CAAA"}
+{"version":3,"file":"public-item-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAGlG,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,sGAAsG;AACtG,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjC,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC5C,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAuF,CAAA;AAOzH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC5E,oGAAoG;IACpG,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,GAAG,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;CACtF;AAkED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB;oCAEzB,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCApCjC,cAAc;uCAqCzC,YAAY,kBAxBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;EA0BhH;AAGD,eAAO,MAAM,qBAAqB,WANE,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCApCjC,cAAc,qDA0CP,CAAA;AACzE,eAAO,MAAM,wBAAwB,WANE,YAAY,kBAxBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CA8BjC,CAAA"}

package/dist/routes/_internal/public-item-route.js

@@ -2,6 +2,9 @@ import { jsx } from "react/jsx-runtime";
 import { notFound } from "next/navigation";
 import { PageRenderer } from "@nextsparkjs/core/components/public/pageBuilder";
 import { fetchPublishedItem, getResolvedBlocks } from "./public-entity-shared.js";
+import { APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
+export const STATIC_FILE_EXTENSION = /\.(?:ico|png|jpe?g|gif|svg|webp|avif|txt|xml|json|webmanifest|map|js|css|woff2?)$/i;
+const isFileRequest = (slug) => STATIC_FILE_EXTENSION.test(slug);
 const slugOf = (slug) => Array.isArray(slug) ? slug.join("/") : slug;
 const databaseSource = { fetchItem: fetchPublishedItem, resolveBlocks: getResolvedBlocks };
 async function renderDefaultPublicItem(source, entity, slug) {
@@ -24,6 +27,7 @@ async function renderDefaultPublicItem(source, entity, slug) {
 function itemRoute(source, config, Template) {
   return async function PublicItemRoute({ params, searchParams }) {
     const slug = slugOf((await params).slug);
+    if (isFileRequest(slug)) notFound();
     if (Template) return /* @__PURE__ */ jsx(Template, { params: Promise.resolve({ slug }), searchParams });
     const item = await renderDefaultPublicItem(source, config, slug);
     if (!item) notFound();
@@ -33,10 +37,11 @@ function itemRoute(source, config, Template) {
 function itemMetadata(source, config) {
   return async function generatePublicItemMetadata({ params }) {
     const slug = slugOf((await params).slug);
+    if (isFileRequest(slug)) return { title: "Not Found" };
     const item = await source.fetchItem(config, slug);
     if (item) {
       return {
-        title: item.seoTitle || `${item.title} | Boilerplate`,
+        title: item.seoTitle || `${item.title} | ${APP_NAME}`,
         description: item.seoDescription || item.excerpt || void 0,
         openGraph: {
           title: item.seoTitle || item.title,