@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.196

package/dist/routes/_internal/default-auth-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/default-auth-layout.tsx"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,2CA6B5E"}
+{"version":3,"file":"default-auth-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/default-auth-layout.tsx"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,2CA+B5E"}

package/dist/routes/_internal/default-auth-layout.js

@@ -1,12 +1,13 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { Suspense } from "react";
 import { AuthWrapper } from "@nextsparkjs/core/components/auth/layouts/AuthWrapper";
+import { APP_DESCRIPTION, APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
 export function DefaultAuthLayout({ children }) {
   return /* @__PURE__ */ jsx("div", { className: "min-h-screen bg-gradient-to-b from-background to-muted/20 flex items-center justify-center p-4", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md", children: [
     /* @__PURE__ */ jsxs("div", { className: "bg-card rounded-lg shadow-lg border border-border p-8", children: [
       /* @__PURE__ */ jsxs("div", { className: "text-center mb-8", children: [
-        /* @__PURE__ */ jsx("h1", { className: "text-3xl font-bold text-foreground mb-2", children: "Boilerplate" }),
-        /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: "Modern Full-Stack Application" })
+        /* @__PURE__ */ jsx("h1", { className: "text-3xl font-bold text-foreground mb-2", children: APP_NAME }),
+        APP_DESCRIPTION && /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: APP_DESCRIPTION })
       ] }),
       /* @__PURE__ */ jsx(AuthWrapper, { children: /* @__PURE__ */ jsx(Suspense, { fallback: null, children }) })
     ] }),

package/dist/routes/_internal/devtools-layout.cc.d.ts

@@ -10,8 +10,9 @@ export declare const withDevtoolsAreaMessages: (Layout: ComponentType<DevLayoutP
 /**
  * What a project's devtools layout is composed with in Cache Components mode (the manifest's `compose` of that
  * variant): the mode's messages and the server-side role check, then core's client guard around the project's layout,
- * as `withDevtoolsGuard` does in the ISR module. A module of its own so only the devtools route group imports the guard,
- * the role check and their client components.
+ * as `withDevtoolsGuard` does in the ISR module. The guard is told the server checked the role (`serverChecked`), so it
+ * renders the area while the client session loads. A module of its own so only the devtools route group imports the
+ * guard, the role check and their client components.
  */
 export declare const withDevtoolsGuard: (ProjectLayout: ComponentType<DevLayoutProps>) => ({ children }: {
     children: import("react").ReactNode;

package/dist/routes/_internal/devtools-layout.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAG5E;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,QAAQ,aAAa,CAAC,cAAc,CAAC;;6CAA2D,CAAA;AAEzI;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,eAAe,aAAa,CAAC,cAAc,CAAC;;6CAAiE,CAAA"}
+{"version":3,"file":"devtools-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAG5E;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,QAAQ,aAAa,CAAC,cAAc,CAAC;;6CAA2D,CAAA;AAEzI;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,eAAe,aAAa,CAAC,cAAc,CAAC;;6CAAuE,CAAA"}

package/dist/routes/_internal/devtools-layout.cc.js

@@ -2,4 +2,4 @@ import { withDevtoolsMessages } from "./group-layouts.cc.js";
 import { guardDevtoolsLayout } from "./devtools-layout.js";
 import { withAreaGate } from "./area-access.js";
 export const withDevtoolsAreaMessages = (Layout) => withDevtoolsMessages(withAreaGate("devtools", Layout));
-export const withDevtoolsGuard = (ProjectLayout) => withDevtoolsAreaMessages(guardDevtoolsLayout(ProjectLayout));
+export const withDevtoolsGuard = (ProjectLayout) => withDevtoolsAreaMessages(guardDevtoolsLayout(ProjectLayout, true));

package/dist/routes/_internal/devtools-layout.d.ts

@@ -4,6 +4,10 @@ export declare const defaultMetadata: Metadata;
 export interface DevLayoutProps {
     children: React.ReactNode;
 }
+/** `serverChecked`: see DeveloperGuard (only the Cache Components module passes it, after its role check). */
+type GuardedProps = DevLayoutProps & {
+    serverChecked?: boolean;
+};
 /**
  * Developer Area Layout
  *
@@ -12,7 +16,7 @@ export interface DevLayoutProps {
  * Includes responsive design for mobile and desktop.
  * Uses purple/violet color scheme to differentiate from Admin Panel (red).
  */
-export declare function DevLayout({ children }: DevLayoutProps): import("react/jsx-runtime").JSX.Element;
+export declare function DevLayout({ children, serverChecked }: GuardedProps): import("react/jsx-runtime").JSX.Element;
 /**
  * Wraps a layout for this route group in the group's client messages, after the server-side role check
  * (area-access): it runs before anything is rendered or sent, so a page load without the role gets a 307. The
@@ -27,10 +31,11 @@ export declare function withDevtoolsMessages(ResolvedDevLayout: ComponentType<De
  * /devtools checks again, see area-access). Shared by the message wrappers of both rendering modes
  * (`withDevtoolsGuard` here, and in `group-layouts.cc`).
  */
-export declare function guardDevtoolsLayout(ProjectLayout: ComponentType<DevLayoutProps>): ({ children }: DevLayoutProps) => import("react/jsx-runtime").JSX.Element;
+export declare function guardDevtoolsLayout(ProjectLayout: ComponentType<DevLayoutProps>, serverChecked?: boolean): ({ children }: DevLayoutProps) => import("react/jsx-runtime").JSX.Element;
 /**
  * The composition of a project's devtools layout with core (the generated host): messages, then
  * `guardDevtoolsLayout` around the project's layout.
  */
 export declare function withDevtoolsGuard(ProjectLayout: ComponentType<DevLayoutProps>): ({ children }: DevLayoutProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+export {};
 //# sourceMappingURL=devtools-layout.d.ts.map

package/dist/routes/_internal/devtools-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAK1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAOhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,cAAc,2CAgCrD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAAC,IACvC,cAAc,cAAc,sDASzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,IAC7C,cAAc,cAAc,6CAS9D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,kBAlClB,cAAc,sDAoCzE"}
+{"version":3,"file":"devtools-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/devtools-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAK1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAOhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,8GAA8G;AAC9G,KAAK,YAAY,GAAG,cAAc,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AAEhE;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,2CAgClE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAAC,IACvC,cAAc,cAAc,sDASzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,EAAE,aAAa,UAAQ,IACpE,cAAc,cAAc,6CAS9D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,kBAlClB,cAAc,sDAoCzE"}

package/dist/routes/_internal/devtools-layout.js

@@ -14,9 +14,9 @@ export const defaultMetadata = {
   robots: "noindex, nofollow"
   // Prevent search engine indexing
 };
-export function DevLayout({ children }) {
+export function DevLayout({ children, serverChecked }) {
   const pluginNavItems = getAllPluginNavItems("devtools");
-  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", children: [
+  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { serverChecked, children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", children: [
     /* @__PURE__ */ jsx("div", { className: "hidden lg:block", children: /* @__PURE__ */ jsx(DevtoolsSidebar, { pluginItems: pluginNavItems }) }),
     /* @__PURE__ */ jsxs("div", { className: "flex-1 flex flex-col overflow-hidden", children: [
       /* @__PURE__ */ jsx(DevtoolsMobileHeader, {}),
@@ -31,9 +31,9 @@ export function withDevtoolsMessages(ResolvedDevLayout) {
     return /* @__PURE__ */ jsx(NextIntlClientProvider, { messages: selectMessages(messages, "devtools"), children: /* @__PURE__ */ jsx(ResolvedDevLayout, { children }) });
   };
 }
-export function guardDevtoolsLayout(ProjectLayout) {
+export function guardDevtoolsLayout(ProjectLayout, serverChecked = false) {
   return function GuardedDevLayout({ children }) {
-    return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) });
+    return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(DeveloperGuard, { serverChecked, children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) });
   };
 }
 export function withDevtoolsGuard(ProjectLayout) {

package/dist/routes/_internal/entity-detail-route.cc.d.ts

@@ -0,0 +1,8 @@
+import { createEntityDetailRoute as createRoute } from './entity-detail-route';
+export type { EntityDetailTemplateProps } from './entity-detail-route';
+export declare function createEntityDetailRoute(...args: Parameters<typeof createRoute>): (props: {
+    params: Promise<{
+        id: string;
+    }>;
+}) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=entity-detail-route.cc.d.ts.map

package/dist/routes/_internal/entity-detail-route.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-detail-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-detail-route.cc.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,IAAI,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAE9E,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAEtE,wBAAgB,uBAAuB,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC;;;;8CAE9E"}

package/dist/routes/_internal/entity-detail-route.cc.js

@@ -0,0 +1,5 @@
+import { behindSuspense } from "./suspended-route.js";
+import { createEntityDetailRoute as createRoute } from "./entity-detail-route.js";
+export function createEntityDetailRoute(...args) {
+  return behindSuspense(createRoute(...args));
+}

package/dist/routes/_internal/entity-edit-route.cc.d.ts

@@ -0,0 +1,8 @@
+import { createEntityEditRoute as createRoute } from './entity-edit-route';
+export type { EntityEditTemplateProps } from './entity-edit-route';
+export declare function createEntityEditRoute(...args: Parameters<typeof createRoute>): (props: {
+    params: Promise<{
+        id: string;
+    }>;
+}) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=entity-edit-route.cc.d.ts.map

package/dist/routes/_internal/entity-edit-route.cc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-edit-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-edit-route.cc.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,IAAI,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAE1E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAElE,wBAAgB,qBAAqB,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC;;;;8CAE5E"}

package/dist/routes/_internal/entity-edit-route.cc.js

@@ -0,0 +1,5 @@
+import { behindSuspense } from "./suspended-route.js";
+import { createEntityEditRoute as createRoute } from "./entity-edit-route.js";
+export function createEntityEditRoute(...args) {
+  return behindSuspense(createRoute(...args));
+}

package/dist/routes/_internal/entity-permission-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-permission-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-permission-layout.tsx"],"names":[],"mappings":"AAqDA,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,oDAiD7B"}
+{"version":3,"file":"entity-permission-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-permission-layout.tsx"],"names":[],"mappings":"AAqDA,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,oDAyC7B"}

package/dist/routes/_internal/entity-permission-layout.js

@@ -34,13 +34,6 @@ export async function EntityPermissionLayout({
   }
   const action = detectActionFromPathname(pathname, entity);
   const permission = `${entity}.${action}`;
-  console.log("[EntityPermissionLayout] Checking permission:", {
-    entity,
-    action,
-    permission,
-    userId,
-    teamId
-  });
   const hasPermission = await checkPermission(userId, teamId, permission);
   if (!hasPermission) {
     console.log("[EntityPermissionLayout] Permission denied, redirecting");

package/dist/routes/_internal/public-archive-route.d.ts

@@ -13,7 +13,7 @@ type SearchParams = Promise<{
 /** @param config - the entity's config (`ui.public.hasArchivePage` decides whether the archive is served) */
 export declare function createPublicArchiveRoute(config: EntityConfig): ({ searchParams }: {
     searchParams: SearchParams;
-}) => Promise<import("react/jsx-runtime").JSX.Element>;
+}) => import("react/jsx-runtime").JSX.Element;
 /** `generateMetadata` of an entity's archive page. */
 export declare function createPublicArchiveMetadata(config: EntityConfig): () => Promise<Metadata>;
 export {};

package/dist/routes/_internal/public-archive-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-archive-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-archive-route.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAExE,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,IAClB,kBAAkB;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,sDAgB1F;AAED,sDAAsD;AACtD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,SACP,OAAO,CAAC,QAAQ,CAAC,CAMzE"}
+{"version":3,"file":"public-archive-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-archive-route.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAGxE,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAW7E,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,IACxB,kBAAkB;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,6CAkBpF;AAED,sDAAsD;AACtD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,SACP,OAAO,CAAC,QAAQ,CAAC,CAMzE"}

package/dist/routes/_internal/public-archive-route.js

@@ -1,8 +1,13 @@
 import { jsx, jsxs } from "react/jsx-runtime";
+import { Suspense } from "react";
 import { notFound } from "next/navigation";
 import { PublicEntityGrid } from "@nextsparkjs/core/components/public/entities/PublicEntityGrid";
+import { APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
+async function ArchiveGrid({ config, searchParams }) {
+  return /* @__PURE__ */ jsx(PublicEntityGrid, { entityType: config.slug, entitySlug: config.slug, searchParams: await searchParams });
+}
 export function createPublicArchiveRoute(config) {
-  return async function PublicArchiveRoute({ searchParams }) {
+  return function PublicArchiveRoute({ searchParams }) {
     var _a, _b, _c, _d, _e, _f;
     if (!((_b = (_a = config.ui) == null ? void 0 : _a.public) == null ? void 0 : _b.hasArchivePage)) notFound();
     const hasBasePath = Boolean(((_c = config.access) == null ? void 0 : _c.basePath) ?? ((_e = (_d = config.builder) == null ? void 0 : _d.public) == null ? void 0 : _e.basePath));
@@ -15,14 +20,14 @@ export function createPublicArchiveRoute(config) {
           config.names.plural.toLowerCase()
         ] })
       ] }),
-      /* @__PURE__ */ jsx(PublicEntityGrid, { entityType: config.slug, entitySlug: config.slug, searchParams: await searchParams })
+      /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(ArchiveGrid, { config, searchParams }) })
     ] });
   };
 }
 export function createPublicArchiveMetadata(config) {
   return async function generatePublicArchiveMetadata() {
     return {
-      title: `${config.names.plural} | Boilerplate`,
+      title: `${config.names.plural} | ${APP_NAME}`,
       description: `Browse all ${config.names.plural.toLowerCase()}`
     };
   };

package/dist/routes/_internal/public-item-route.cc.d.ts

@@ -1,5 +1,9 @@
 import type { EntityConfig } from '@nextsparkjs/core/lib/entities/types';
-export declare const createPublicItemRoute: (config: EntityConfig, Template?: import("react").ComponentType<import("./public-item-route").PublicItemTemplateProps>) => ({ params, searchParams }: import("./public-item-route").ItemRouteProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+declare const cachedRoutes: {
+    createPublicItemRoute: (config: EntityConfig, Template?: import("react").ComponentType<import("./public-item-route").PublicItemTemplateProps>) => ({ params, searchParams }: import("./public-item-route").ItemRouteProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+    createPublicItemMetadata: (config: EntityConfig) => ({ params }: Pick<import("./public-item-route").ItemRouteProps, "params">) => Promise<import("next").Metadata>;
+};
+export declare const createPublicItemRoute: (...args: Parameters<typeof cachedRoutes.createPublicItemRoute>) => (props: import("./public-item-route").ItemRouteProps) => import("react/jsx-runtime").JSX.Element;
 export declare const createPublicItemMetadata: (config: EntityConfig) => ({ params }: Pick<import("./public-item-route").ItemRouteProps, "params">) => Promise<import("next").Metadata>;
 export type { PublicItemTemplateProps } from './public-item-route';
 //# sourceMappingURL=public-item-route.cc.d.ts.map

package/dist/routes/_internal/public-item-route.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-item-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.cc.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAsCxE,eAAO,MAAM,qBAAqB,yPAAqC,CAAA;AACvE,eAAO,MAAM,wBAAwB,0IAAwC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"public-item-route.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.cc.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AAsCxE,QAAA,MAAM,YAAY;;;CAAqC,CAAA;AAEvD,eAAO,MAAM,qBAAqB,GAAI,GAAG,MAAM,UAAU,CAAC,OAAO,YAAY,CAAC,qBAAqB,CAAC,qGAAgE,CAAA;AACpK,eAAO,MAAM,wBAAwB,0IAAwC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/routes/_internal/public-item-route.cc.js

@@ -3,6 +3,7 @@ import { query } from "@nextsparkjs/core/lib/db";
 import { PatternsResolverService } from "@nextsparkjs/core/lib/blocks/patterns-resolver.service";
 import { buildPublicSelectClause, getResolvedBlocks } from "./public-entity-shared.js";
 import { bindPublicItemRoutes } from "./public-item-route.js";
+import { behindSuspense } from "./suspended-route.js";
 async function readPublishedItem(entitySlug, tableName, selectClause, slug) {
   "use cache";
   cacheLife({ stale: 300, revalidate: 3600, expire: 86400 });
@@ -28,5 +29,5 @@ const cachedSource = {
   resolveBlocks: (blocks) => getResolvedBlocks(blocks, readPatterns)
 };
 const cachedRoutes = bindPublicItemRoutes(cachedSource);
-export const createPublicItemRoute = cachedRoutes.createPublicItemRoute;
+export const createPublicItemRoute = (...args) => behindSuspense(cachedRoutes.createPublicItemRoute(...args));
 export const createPublicItemMetadata = cachedRoutes.createPublicItemMetadata;

package/dist/routes/_internal/public-item-route.d.ts

@@ -28,6 +28,13 @@ export interface ItemRouteProps {
     }>;
     searchParams: SearchParams;
 }
+/**
+ * The extensions of the static files a browser or crawler asks a site for. A request for one that reaches an item route
+ * (`/favicon.ico`, `/robots.txt`, `/apple-touch-icon.png`) is not an item: it answers not found at once, without reading the
+ * database or rendering a template. A slug may contain a dot (`release-1.0`, `v2.5`), so only these extensions on the last
+ * segment count.
+ */
+export declare const STATIC_FILE_EXTENSION: RegExp;
 /**
  * Where a public item comes from. The default reads the database on every render; `public-item-route.cc` (the
  * Cache Components host's module) supplies a cached one.

package/dist/routes/_internal/public-item-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-item-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAElG,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,sGAAsG;AACtG,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjC,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC5C,YAAY,EAAE,YAAY,CAAA;CAC3B;AAKD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC5E,oGAAoG;IACpG,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,GAAG,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;CACtF;AAgED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB;oCAEzB,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCAlCjC,cAAc;uCAmCzC,YAAY,kBAvBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;EAyBhH;AAGD,eAAO,MAAM,qBAAqB,WANE,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCAlCjC,cAAc,qDAwCP,CAAA;AACzE,eAAO,MAAM,wBAAwB,WANE,YAAY,kBAvBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CA6BjC,CAAA"}
+{"version":3,"file":"public-item-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/public-item-route.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAGlG,KAAK,YAAY,GAAG,OAAO,CAAC;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,CAAA;AAE7E,sGAAsG;AACtG,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjC,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAC5C,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAuF,CAAA;AAOzH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC5E,oGAAoG;IACpG,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,GAAG,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;CACtF;AAkED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB;oCAEzB,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCApCjC,cAAc;uCAqCzC,YAAY,kBAxBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;EA0BhH;AAGD,eAAO,MAAM,qBAAqB,WANE,YAAY,aAAa,aAAa,CAAC,uBAAuB,CAAC,gCApCjC,cAAc,qDA0CP,CAAA;AACzE,eAAO,MAAM,wBAAwB,WANE,YAAY,kBAxBY,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CA8BjC,CAAA"}

package/dist/routes/_internal/public-item-route.js

@@ -2,6 +2,9 @@ import { jsx } from "react/jsx-runtime";
 import { notFound } from "next/navigation";
 import { PageRenderer } from "@nextsparkjs/core/components/public/pageBuilder";
 import { fetchPublishedItem, getResolvedBlocks } from "./public-entity-shared.js";
+import { APP_NAME } from "@nextsparkjs/core/lib/config/public-config-client";
+export const STATIC_FILE_EXTENSION = /\.(?:ico|png|jpe?g|gif|svg|webp|avif|txt|xml|json|webmanifest|map|js|css|woff2?)$/i;
+const isFileRequest = (slug) => STATIC_FILE_EXTENSION.test(slug);
 const slugOf = (slug) => Array.isArray(slug) ? slug.join("/") : slug;
 const databaseSource = { fetchItem: fetchPublishedItem, resolveBlocks: getResolvedBlocks };
 async function renderDefaultPublicItem(source, entity, slug) {
@@ -24,6 +27,7 @@ async function renderDefaultPublicItem(source, entity, slug) {
 function itemRoute(source, config, Template) {
   return async function PublicItemRoute({ params, searchParams }) {
     const slug = slugOf((await params).slug);
+    if (isFileRequest(slug)) notFound();
     if (Template) return /* @__PURE__ */ jsx(Template, { params: Promise.resolve({ slug }), searchParams });
     const item = await renderDefaultPublicItem(source, config, slug);
     if (!item) notFound();
@@ -33,10 +37,11 @@ function itemRoute(source, config, Template) {
 function itemMetadata(source, config) {
   return async function generatePublicItemMetadata({ params }) {
     const slug = slugOf((await params).slug);
+    if (isFileRequest(slug)) return { title: "Not Found" };
     const item = await source.fetchItem(config, slug);
     if (item) {
       return {
-        title: item.seoTitle || `${item.title} | Boilerplate`,
+        title: item.seoTitle || `${item.title} | ${APP_NAME}`,
         description: item.seoDescription || item.excerpt || void 0,
         openGraph: {
           title: item.seoTitle || item.title,

package/dist/routes/_internal/superadmin-layout.cc.d.ts

@@ -10,7 +10,8 @@ export declare const withSuperadminAreaMessages: (Layout: ComponentType<Superadm
 /**
  * What a project's superadmin layout is composed with in Cache Components mode (the manifest's `compose` of that
  * variant): the mode's messages and the server-side role check, then core's client guard around the project's layout,
- * as `withSuperadminGuard` does in the ISR module. A module of its own so only the superadmin route group imports the
+ * as `withSuperadminGuard` does in the ISR module. The guard is told the server checked the role (`serverChecked`), so it
+ * renders the area while the client session loads. A module of its own so only the superadmin route group imports the
  * guard, the role check and their client components.
  */
 export declare const withSuperadminGuard: (ProjectLayout: ComponentType<SuperadminLayoutProps>) => ({ children }: {

package/dist/routes/_internal/superadmin-layout.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"superadmin-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGvF;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,QAAQ,aAAa,CAAC,qBAAqB,CAAC;;6CAA+D,CAAA;AAEtJ;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,eAAe,aAAa,CAAC,qBAAqB,CAAC;;6CAAqE,CAAA"}
+{"version":3,"file":"superadmin-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGvF;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,QAAQ,aAAa,CAAC,qBAAqB,CAAC;;6CAA+D,CAAA;AAEtJ;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,eAAe,aAAa,CAAC,qBAAqB,CAAC;;6CAA2E,CAAA"}

package/dist/routes/_internal/superadmin-layout.cc.js

@@ -2,4 +2,4 @@ import { withSuperadminMessages } from "./group-layouts.cc.js";
 import { guardSuperadminLayout } from "./superadmin-layout.js";
 import { withAreaGate } from "./area-access.js";
 export const withSuperadminAreaMessages = (Layout) => withSuperadminMessages(withAreaGate("superadmin", Layout));
-export const withSuperadminGuard = (ProjectLayout) => withSuperadminAreaMessages(guardSuperadminLayout(ProjectLayout));
+export const withSuperadminGuard = (ProjectLayout) => withSuperadminAreaMessages(guardSuperadminLayout(ProjectLayout, true));

package/dist/routes/_internal/superadmin-layout.d.ts

@@ -4,13 +4,17 @@ export declare const defaultMetadata: Metadata;
 export interface SuperadminLayoutProps {
     children: React.ReactNode;
 }
+/** `serverChecked`: see SuperAdminGuard (only the Cache Components module passes it, after its role check). */
+type GuardedProps = SuperadminLayoutProps & {
+    serverChecked?: boolean;
+};
 /**
  * Superadmin Layout
  *
  * Protected layout for superadmin-only sections with dedicated sidebar navigation.
  * Owns the narrowly scoped client catalog for superadmin routes.
  */
-export declare function SuperadminLayout({ children }: SuperadminLayoutProps): import("react/jsx-runtime").JSX.Element;
+export declare function SuperadminLayout({ children, serverChecked }: GuardedProps): import("react/jsx-runtime").JSX.Element;
 /**
  * Wraps a layout for this route group in the group's client messages, after the server-side role check
  * (area-access): it runs before anything is rendered or sent, so a page load without the role gets a 307. The
@@ -26,10 +30,11 @@ export declare function withSuperadminMessages(ResolvedSuperadminLayout: Compone
  * area-access). Shared by the message wrappers of both rendering modes (`withSuperadminGuard` here, and
  * in `group-layouts.cc`).
  */
-export declare function guardSuperadminLayout(ProjectLayout: ComponentType<SuperadminLayoutProps>): ({ children }: SuperadminLayoutProps) => import("react/jsx-runtime").JSX.Element;
+export declare function guardSuperadminLayout(ProjectLayout: ComponentType<SuperadminLayoutProps>, serverChecked?: boolean): ({ children }: SuperadminLayoutProps) => import("react/jsx-runtime").JSX.Element;
 /**
  * The composition of a project's superadmin layout with core (the generated host): messages, then
  * `guardSuperadminLayout` around the project's layout.
  */
 export declare function withSuperadminGuard(ProjectLayout: ComponentType<SuperadminLayoutProps>): ({ children }: SuperadminLayoutProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+export {};
 //# sourceMappingURL=superadmin-layout.d.ts.map

package/dist/routes/_internal/superadmin-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"superadmin-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAU1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAIhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AA6CD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,2CAUnE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,wBAAwB,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAChD,cAAc,qBAAqB,sDAUvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAC/C,cAAc,qBAAqB,6CAe5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,kBA1CpB,qBAAqB,sDA4CvF"}
+{"version":3,"file":"superadmin-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAU1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAIhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,+GAA+G;AAC/G,KAAK,YAAY,GAAG,qBAAqB,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AA6CvE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,2CAUzE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,wBAAwB,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAChD,cAAc,qBAAqB,sDAUvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,EAAE,aAAa,UAAQ,IACtE,cAAc,qBAAqB,6CAe5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,kBA1CpB,qBAAqB,sDA4CvF"}

package/dist/routes/_internal/superadmin-layout.js

@@ -16,9 +16,9 @@ export const defaultMetadata = {
   robots: "noindex, nofollow"
   // Prevent search engine indexing
 };
-function SuperadminContent({ children }) {
+function SuperadminContent({ children, serverChecked }) {
   const pluginNavItems = getAllPluginNavItems("superadmin");
-  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", "data-cy": "superadmin-container", children: [
+  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { serverChecked, children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", "data-cy": "superadmin-container", children: [
     /* @__PURE__ */ jsx("div", { className: "hidden lg:block", children: /* @__PURE__ */ jsx(SuperadminSidebar, { pluginItems: pluginNavItems }) }),
     /* @__PURE__ */ jsxs("div", { className: "flex-1 flex flex-col overflow-hidden", children: [
       /* @__PURE__ */ jsx("div", { className: "lg:hidden bg-card border-b border-border p-4", children: /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
@@ -32,8 +32,8 @@ function SuperadminContent({ children }) {
     ] })
   ] }) }) });
 }
-export function SuperadminLayout({ children }) {
-  return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(SuperadminContent, { children }) });
+export function SuperadminLayout({ children, serverChecked }) {
+  return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(SuperadminContent, { serverChecked, children }) });
 }
 export function withSuperadminMessages(ResolvedSuperadminLayout) {
   return async function SuperadminLayoutWithMessages({ children }) {
@@ -43,9 +43,9 @@ export function withSuperadminMessages(ResolvedSuperadminLayout) {
     return /* @__PURE__ */ jsx(NextIntlClientProvider, { messages: selectMessages(messages, "superadmin", configuredNamespaces.superadmin), children: /* @__PURE__ */ jsx(ResolvedSuperadminLayout, { children }) });
   };
 }
-export function guardSuperadminLayout(ProjectLayout) {
+export function guardSuperadminLayout(ProjectLayout, serverChecked = false) {
   return function GuardedSuperadminLayout({ children }) {
-    return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) }) });
+    return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { serverChecked, children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) }) });
   };
 }
 export function withSuperadminGuard(ProjectLayout) {

package/dist/routes/_internal/suspended-route.d.ts

@@ -0,0 +1,16 @@
+import { type ReactNode } from 'react';
+/**
+ * A route component behind its own Suspense boundary, for a host with `cacheComponents` on.
+ *
+ * A page that awaits `params` (or `searchParams`), redirects or answers notFound() is request-time work. The
+ * layouts of the Cache Components host already stream the page after their shell, but Next.js's instant-navigation
+ * check (the dev server runs it on every page, and logs "Could not validate ..." when it fails) wants a boundary
+ * between the segment it validates and that work, so a navigation to the segment finishes at once and the page
+ * streams in. The status a visitor gets is the one the host already gives: a redirect or a 404 thrown after the
+ * shell is sent reaches the browser as a 200 with a redirect or a not-found page.
+ *
+ * Only the Cache Components modules (`*.cc`) use it. An ISR host's pages are rendered before anything is sent, and
+ * keep a real 307 and 404.
+ */
+export declare function behindSuspense<Props extends object>(Route: (props: Props) => ReactNode | Promise<ReactNode>): (props: Props) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=suspended-route.d.ts.map

package/dist/routes/_internal/suspended-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspended-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/suspended-route.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IACtE,OAAO,KAAK,6CAOjD"}

package/dist/routes/_internal/suspended-route.js

@@ -0,0 +1,7 @@
+import { jsx } from "react/jsx-runtime";
+import { Suspense } from "react";
+export function behindSuspense(Route) {
+  return function RouteBehindSuspense(props) {
+    return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(Route, { ...props }) });
+  };
+}

package/dist/routes/api/auth/[...all]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/auth/[...all]/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiBxD,wBAAsB,OAAO,CAAC,GAAG,EAAE,WAAW,kCAE7C;AAID,wBAAsB,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,qBA4C1F;AAGD,wBAAsB,IAAI,CAAC,GAAG,EAAE,WAAW,qBAwJ1C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/auth/[...all]/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkBxD,wBAAsB,OAAO,CAAC,GAAG,EAAE,WAAW,kCAE7C;AAID,wBAAsB,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,qBA4C1F;AAGD,wBAAsB,IAAI,CAAC,GAAG,EAAE,WAAW,qBAwI1C"}

package/dist/routes/api/auth/[...all]/route.js

@@ -6,6 +6,7 @@ import { isPublicSignupRestricted } from "@nextsparkjs/core/lib/teams/helpers";
 import { TeamService } from "@nextsparkjs/core/lib/services";
 import { wrapAuthHandlerWithCors, handleCorsPreflightRequest, addCorsHeaders } from "@nextsparkjs/core/lib/api/helpers";
 import { checkDistributedRateLimit } from "@nextsparkjs/core/lib/api/rate-limit";
+import { getClientIp } from "@nextsparkjs/core/lib/api/client-ip";
 import { withSignupContext } from "@nextsparkjs/core/lib/auth-context";
 import { dispatchSecurityNotificationsForRequest } from "@nextsparkjs/core/lib/auth/security-notifications";
 import { verifyEmailPageUrl } from "@nextsparkjs/core/lib/auth/verify-email-link";
@@ -39,19 +40,10 @@ export async function GET(req, context) {
 }
 export async function POST(req) {
   var _a, _b, _c, _d, _e;
-  const clientIp = (() => {
-    const cfIp = req.headers.get("cf-connecting-ip");
-    if (cfIp) return cfIp;
-    const forwardedFor = req.headers.get("x-forwarded-for");
-    if (forwardedFor) {
-      const ips = forwardedFor.split(",").map((ip) => ip.trim()).filter(Boolean);
-      if (ips.length > 0) return ips[ips.length - 1];
-    }
-    return req.headers.get("x-real-ip") || "unknown";
-  })();
+  const clientIp = getClientIp(req.headers);
   const rateLimitResult = await checkDistributedRateLimit(`auth:ip:${clientIp}`, "auth");
   if (!rateLimitResult.allowed) {
-    return new NextResponse(JSON.stringify({ error: "Too many requests" }), {
+    return wrapAuthHandlerWithCors(async () => new NextResponse(JSON.stringify({ error: "Too many requests" }), {
       status: 429,
       headers: {
         "Content-Type": "application/json",
@@ -60,7 +52,7 @@ export async function POST(req) {
         "X-RateLimit-Remaining": "0",
         "X-RateLimit-Reset": rateLimitResult.resetTime.toString()
       }
-    });
+    }), req);
   }
   const readinessResponse = await getAuthReadinessResponse(req);
   if (readinessResponse) {

package/dist/routes/api/csp-report/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/csp-report/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AA2ExD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,qBAyF9C;AAID,wBAAsB,OAAO,sBAS5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/csp-report/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AA2DxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,qBAyF9C;AAID,wBAAsB,OAAO,sBAS5B"}

package/dist/routes/api/csp-report/route.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { getClientIp } from "@nextsparkjs/core/lib/api/client-ip";
 let checkDistributedRateLimit = null;
 let createRateLimitErrorResponse = null;
 let rateLimitLoaded = false;
@@ -16,25 +17,13 @@ async function ensureRateLimitLoaded() {
 const getAllowedOrigin = () => {
   return process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
 };
-function getClientIp(request) {
-  const forwardedFor = request.headers.get("x-forwarded-for");
-  if (forwardedFor) {
-    const ips = forwardedFor.split(",").map((ip) => ip.trim());
-    if (ips[0]) return ips[0];
-  }
-  const realIp = request.headers.get("x-real-ip");
-  if (realIp) return realIp;
-  const cfIp = request.headers.get("cf-connecting-ip");
-  if (cfIp) return cfIp;
-  return "unknown";
-}
 export async function POST(request) {
   await ensureRateLimitLoaded();
   const requestId = randomUUID().slice(0, 8);
   let rateLimitHeaders = {};
   if (checkDistributedRateLimit && createRateLimitErrorResponse) {
     try {
-      const clientIp = getClientIp(request);
+      const clientIp = getClientIp(request.headers);
       const rateLimitResult = await checkDistributedRateLimit(`csp-report:ip:${clientIp}`, "api");
       if (!rateLimitResult.allowed) {
         console.warn(`[CSP Report ${requestId}] Rate limit exceeded for IP: ${clientIp}`);

package/dist/routes/api/devtools/config/entities/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/config/entities
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/config/entities/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/entities/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmC3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAwEN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/entities/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAgCxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAwEN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/config/entities/route.js

@@ -2,6 +2,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { getEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 function isEntityConfig(entity) {
   return "slug" in entity;
 }
@@ -61,3 +62,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/devtools/config/theme/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/config/theme
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/config/theme/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/theme/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAoDN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/theme/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAoDN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/config/theme/route.js

@@ -2,6 +2,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { ThemeService } from "@nextsparkjs/core/lib/services/theme.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -46,3 +47,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;