@nextsparkjs/core 0.1.0-beta.67 → 0.1.0-beta.68

package/dist/templates/features/blog/blocks/post-content/component.tsx

@@ -79,7 +79,7 @@ export function PostContentBlock({
 
   // Build section classes with background
   const sectionClasses = buildSectionClasses(
-    'py-16 px-4 md:py-24',
+    'py-16 px-4 @md:py-24',
     { backgroundColor, className }
   )
 
@@ -119,7 +119,7 @@ export function PostContentBlock({
         {/* Optional Section Title */}
         {title && (
           <div className={cn('mb-12 text-center', maxWidthClasses[maxWidth], 'mx-auto')}>
-            <h2 className="text-4xl font-bold md:text-5xl lg:text-6xl tracking-tight">
+            <h2 className="text-4xl font-bold @md:text-5xl @lg:text-6xl tracking-tight">
               {title}
             </h2>
           </div>

package/dist/templates/features/pages/blocks/hero/component.tsx

@@ -83,13 +83,13 @@ export function HeroBlock({
         alignmentClasses[alignment]
       )}>
         {title && (
-          <h1 className="mb-6 text-5xl font-bold leading-tight md:text-6xl lg:text-7xl">
+          <h1 className="mb-6 text-5xl font-bold leading-tight @md:text-6xl @lg:text-7xl">
             {title}
           </h1>
         )}
 
         {displayContent && (
-          <p className="mb-8 text-xl md:text-2xl opacity-90 max-w-2xl">
+          <p className="mb-8 text-xl @md:text-2xl opacity-90 max-w-2xl">
             {displayContent}
           </p>
         )}

package/dist/templates/next.config.mjs

@@ -142,8 +142,9 @@ const nextConfig = {
       "font-src 'self' data:",
       // wss: needed for Next.js hot reload in development
       `connect-src 'self' https://api.stripe.com${!isProduction ? ' wss:' : ''}`,
-      "frame-src https://js.stripe.com https://hooks.stripe.com",
-      "frame-ancestors 'none'",
+      "frame-src 'self' https://js.stripe.com https://hooks.stripe.com",
+      // Allow embedding in iframes from same origin (needed for page builder preview)
+      "frame-ancestors 'self'",
       "object-src 'none'",
       "base-uri 'self'",
       // CSP violation reporting - sends violations to /api/csp-report
@@ -165,8 +166,9 @@ const nextConfig = {
         value: 'nosniff'
       },
       {
+        // SAMEORIGIN allows same-origin iframes (needed for page builder preview)
         key: 'X-Frame-Options',
-        value: 'DENY'
+        value: 'SAMEORIGIN'
       },
       // X-XSS-Protection is deprecated but kept for legacy browser support
       // Modern browsers use CSP instead

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextsparkjs/core",
-  "version": "0.1.0-beta.67",
+  "version": "0.1.0-beta.68",
   "description": "NextSpark - The complete SaaS framework for Next.js",
   "license": "MIT",
   "author": "NextSpark <hello@nextspark.dev>",
@@ -318,15 +318,13 @@
     "typescript": "^5"
   },
   "dependencies": {
-    "@nextsparkjs/testing": "0.1.0-beta.53",
-    "@upstash/ratelimit": "^2.0.3",
-    "@upstash/redis": "^1.20.6",
     "@codemirror/lang-json": "^6.0.2",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
     "@hookform/resolvers": "^5.2.1",
     "@inquirer/prompts": "^7.2.0",
+    "@nextsparkjs/testing": "0.1.0-beta.53",
     "@radix-ui/react-accordion": "^1.2.12",
     "@radix-ui/react-alert-dialog": "^1.1.15",
     "@radix-ui/react-avatar": "^1.1.10",
@@ -351,10 +349,13 @@
     "@radix-ui/react-toggle": "^1.1.10",
     "@radix-ui/react-tooltip": "^1.2.8",
     "@shikijs/rehype": "^3.20.0",
+    "@tailwindcss/container-queries": "^0.1.1",
     "@tanstack/react-query": "^5.85.0",
     "@tanstack/react-query-devtools": "^5.85.0",
     "@uiw/codemirror-theme-github": "^4.25.4",
     "@uiw/react-codemirror": "^4.25.4",
+    "@upstash/ratelimit": "^2.0.3",
+    "@upstash/redis": "^1.20.6",
     "@vercel/blob": "^2.0.0",
     "better-auth": "^1.3.5",
     "chalk": "^5.4.1",

package/templates/features/blog/blocks/post-content/component.tsx

@@ -79,7 +79,7 @@ export function PostContentBlock({
 
   // Build section classes with background
   const sectionClasses = buildSectionClasses(
-    'py-16 px-4 md:py-24',
+    'py-16 px-4 @md:py-24',
     { backgroundColor, className }
   )
 
@@ -119,7 +119,7 @@ export function PostContentBlock({
         {/* Optional Section Title */}
         {title && (
           <div className={cn('mb-12 text-center', maxWidthClasses[maxWidth], 'mx-auto')}>
-            <h2 className="text-4xl font-bold md:text-5xl lg:text-6xl tracking-tight">
+            <h2 className="text-4xl font-bold @md:text-5xl @lg:text-6xl tracking-tight">
               {title}
             </h2>
           </div>

package/templates/features/pages/blocks/hero/component.tsx

@@ -83,13 +83,13 @@ export function HeroBlock({
         alignmentClasses[alignment]
       )}>
         {title && (
-          <h1 className="mb-6 text-5xl font-bold leading-tight md:text-6xl lg:text-7xl">
+          <h1 className="mb-6 text-5xl font-bold leading-tight @md:text-6xl @lg:text-7xl">
             {title}
           </h1>
         )}
 
         {displayContent && (
-          <p className="mb-8 text-xl md:text-2xl opacity-90 max-w-2xl">
+          <p className="mb-8 text-xl @md:text-2xl opacity-90 max-w-2xl">
             {displayContent}
           </p>
         )}

package/templates/next.config.mjs

@@ -142,8 +142,9 @@ const nextConfig = {
       "font-src 'self' data:",
       // wss: needed for Next.js hot reload in development
       `connect-src 'self' https://api.stripe.com${!isProduction ? ' wss:' : ''}`,
-      "frame-src https://js.stripe.com https://hooks.stripe.com",
-      "frame-ancestors 'none'",
+      "frame-src 'self' https://js.stripe.com https://hooks.stripe.com",
+      // Allow embedding in iframes from same origin (needed for page builder preview)
+      "frame-ancestors 'self'",
       "object-src 'none'",
       "base-uri 'self'",
       // CSP violation reporting - sends violations to /api/csp-report
@@ -165,8 +166,9 @@ const nextConfig = {
         value: 'nosniff'
       },
       {
+        // SAMEORIGIN allows same-origin iframes (needed for page builder preview)
         key: 'X-Frame-Options',
-        value: 'DENY'
+        value: 'SAMEORIGIN'
       },
       // X-XSS-Protection is deprecated but kept for legacy browser support
       // Modern browsers use CSP instead