bsmnt 0.9.0 → 0.10.0

package/src/templates/next-pagebuilder/components/page-builder/components/content-collection/skeleton.tsx

@@ -0,0 +1,53 @@
+const FEATURED_PLACEHOLDERS = ["featured-1", "featured-2"]
+const CARD_PLACEHOLDERS = [
+  "card-1",
+  "card-2",
+  "card-3",
+  "card-4",
+  "card-5",
+  "card-6",
+]
+const CHIP_PLACEHOLDERS = ["chip-1", "chip-2", "chip-3", "chip-4"]
+
+function CardPlaceholder() {
+  return (
+    <li className="flex flex-col gap-3">
+      <div className="aspect-16/9 w-full rounded-lg bg-black/10" />
+      <div className="flex flex-col gap-2">
+        <div className="h-3 w-16 rounded bg-black/10" />
+        <div className="h-5 w-4/5 rounded bg-black/10" />
+        <div className="h-4 w-1/2 rounded bg-black/10" />
+      </div>
+    </li>
+  )
+}
+
+export function ContentCollectionSkeleton() {
+  return (
+    <section
+      className="flex animate-pulse flex-col gap-8 py-8"
+      aria-hidden="true"
+    >
+      <div className="flex flex-col gap-4 rounded-[1.5rem] border border-black/10 bg-black/[0.02] p-4 sm:p-5">
+        <div className="flex flex-wrap gap-2">
+          {CHIP_PLACEHOLDERS.map((key) => (
+            <div className="h-9 w-28 rounded-full bg-black/10" key={key} />
+          ))}
+        </div>
+        <div className="h-4 w-40 rounded bg-black/10" />
+      </div>
+
+      <ul className="grid grid-cols-1 gap-8 md:grid-cols-2">
+        {FEATURED_PLACEHOLDERS.map((key) => (
+          <CardPlaceholder key={key} />
+        ))}
+      </ul>
+
+      <ul className="grid grid-cols-2 gap-8 md:grid-cols-2 lg:grid-cols-3">
+        {CARD_PLACEHOLDERS.map((key) => (
+          <CardPlaceholder key={key} />
+        ))}
+      </ul>
+    </section>
+  )
+}

package/src/templates/next-pagebuilder/components/page-builder/renderer.tsx

@@ -1,5 +1,7 @@
+import { Suspense } from "react"
 import { ArticleContent } from "./components/article-content"
 import { ContentCollection } from "./components/content-collection"
+import { ContentCollectionSkeleton } from "./components/content-collection/skeleton"
 import type { ContentCollectionSearchParams } from "./components/content-collection/types"
 import { Description } from "./components/description"
 import { GatedContent } from "./components/gated-content"
@@ -36,7 +38,11 @@ function PageBuilderNode({
 }) {
   switch (block._type) {
     case "blogCollection":
-      return <ContentCollection block={block} searchParams={searchParams} />
+      return (
+        <Suspense fallback={<ContentCollectionSkeleton />}>
+          <ContentCollection block={block} searchParams={searchParams} />
+        </Suspense>
+      )
     case "blogContent":
       return <ArticleContent block={block} />
     case "hero":

package/src/templates/next-pagebuilder/next.config.ts

@@ -68,7 +68,6 @@ const nextConfig: NextConfig = {
     browserToTerminal: true,
   },
   experimental: {
-    prefetchInlining: true,
     optimizePackageImports: [
       "@react-three/drei",
       "@react-three/fiber",
@@ -94,7 +93,8 @@ const nextConfig: NextConfig = {
   },
   headers: async () => [
     {
-      source: "/(.*)",
+      // Excludes /studio* — must stay mutually exclusive with the rule below.
+      source: "/((?!studio(?:/|$)).*)",
       headers: [
         {
           key: "X-Content-Type-Options",
@@ -126,6 +126,37 @@ const nextConfig: NextConfig = {
         },
       ],
     },
+    {
+      // X-Frame-Options can't allow a third-party origin, and Next can't unset
+      // it from another rule — the iframe needs it absent, not overridden.
+      source: "/studio/:path*",
+      headers: [
+        {
+          key: "X-Content-Type-Options",
+          value: "nosniff",
+        },
+        {
+          key: "Content-Security-Policy",
+          value: "frame-ancestors 'self' https://*.sanity.io;",
+        },
+        {
+          key: "X-XSS-Protection",
+          value: "1; mode=block",
+        },
+        {
+          key: "X-DNS-Prefetch-Control",
+          value: "on",
+        },
+        {
+          key: "Strict-Transport-Security",
+          value: "max-age=63072000; includeSubDomains; preload",
+        },
+        {
+          key: "Permissions-Policy",
+          value: "camera=(), microphone=(), geolocation=()",
+        },
+      ],
+    },
   ],
 }
 

package/src/templates/next-pagebuilder/package.json

@@ -28,9 +28,9 @@
   },
   "dependencies": {
     "class-variance-authority": "^0.7.1",
-    "next": "^16",
-    "react": "^19",
-    "react-dom": "^19",
+    "next": "^16.3.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "react-use": "^17.6.0",
     "tailwind-merge": "^3.5.0",
     "zod": "^4.3.6"
@@ -38,7 +38,7 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.14",
     "@csstools/postcss-global-data": "^4.0.0",
-    "@next/bundle-analyzer": "^16.2.1",
+    "@next/bundle-analyzer": "^16.3.0",
     "@svgr/webpack": "^8.1.0",
     "@tailwindcss/postcss": "^4.2.2",
     "@types/bun": "^1.3.11",

package/src/templates/next-webgl/.env.example

@@ -32,6 +32,8 @@
 # Base URL for your site (used for SEO, canonical URLs, etc.)
 # Development: http://localhost:3000
 # Production: https://your-domain.com
+# Inlined at build time — scope this to the Production environment only in
+# Vercel so Preview deployments fall through to VERCEL_PROJECT_PRODUCTION_URL.
 NEXT_PUBLIC_BASE_URL=""
 
 # Draft mode secret for preview functionality

package/src/templates/next-webgl/app/robots.ts

@@ -1,6 +1,5 @@
 import type { MetadataRoute } from "next"
-
-const APP_BASE_URL = process.env.NEXT_PUBLIC_BASE_URL ?? "http://localhost:3000"
+import { getBaseUrl } from "@/lib/utils/url"
 
 export default function robots(): MetadataRoute.Robots {
   return {
@@ -9,6 +8,6 @@ export default function robots(): MetadataRoute.Robots {
       allow: "/",
       disallow: [],
     },
-    sitemap: `${APP_BASE_URL}/sitemap.xml`,
+    sitemap: `${getBaseUrl()}/sitemap.xml`,
   }
 }

package/src/templates/next-webgl/next.config.ts

@@ -64,8 +64,10 @@ const nextConfig: NextConfig = {
       },
     },
   },
+  logging: {
+    browserToTerminal: true,
+  },
   experimental: {
-    browserDebugInfoInTerminal: true,
     optimizePackageImports: [
       "@react-three/drei",
       "@react-three/fiber",
@@ -86,7 +88,8 @@ const nextConfig: NextConfig = {
   },
   headers: async () => [
     {
-      source: "/(.*)",
+      // Excludes /studio* — must stay mutually exclusive with the rule below.
+      source: "/((?!studio(?:/|$)).*)",
       headers: [
         {
           key: "X-Content-Type-Options",
@@ -118,6 +121,37 @@ const nextConfig: NextConfig = {
         },
       ],
     },
+    {
+      // X-Frame-Options can't allow a third-party origin, and Next can't unset
+      // it from another rule — the iframe needs it absent, not overridden.
+      source: "/studio/:path*",
+      headers: [
+        {
+          key: "X-Content-Type-Options",
+          value: "nosniff",
+        },
+        {
+          key: "Content-Security-Policy",
+          value: "frame-ancestors 'self' https://*.sanity.io;",
+        },
+        {
+          key: "X-XSS-Protection",
+          value: "1; mode=block",
+        },
+        {
+          key: "X-DNS-Prefetch-Control",
+          value: "on",
+        },
+        {
+          key: "Strict-Transport-Security",
+          value: "max-age=63072000; includeSubDomains; preload",
+        },
+        {
+          key: "Permissions-Policy",
+          value: "camera=(), microphone=(), geolocation=()",
+        },
+      ],
+    },
   ],
   redirects: async () => [
     {

package/src/templates/next-webgl/package.json

@@ -32,32 +32,32 @@
     "@react-three/fiber": "^10.0.0-alpha.2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "next": "^16",
-    "react": "^19",
-    "react-dom": "^19",
+    "next": "^16.3.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "tailwind-merge": "^3.4.0",
     "three": "^0.182.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.14",
-    "@next/bundle-analyzer": "^16",
+    "@next/bundle-analyzer": "^16.3.0",
     "@svgr/webpack": "^8.1.0",
-    "@tailwindcss/postcss": "^4",
+    "@tailwindcss/postcss": "^4.2.2",
     "@types/bun": "^1.3.6",
     "@types/node": "^24.13.1",
-    "@types/react": "^19.2.9",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@types/three": "^0.182.0",
-    "@typescript/native-preview": "^7.0.0-dev.20260122.3",
+    "@typescript/native-preview": "^7.0.0-dev.20260323.1",
     "babel-plugin-react-compiler": "^1.0.0",
     "cross-env": "^10.1.0",
     "knip": "^6.16.1",
     "lefthook": "^1.13.0",
     "postcss-preset-env": "^10.6.1",
     "schema-dts": "^2.0.0",
-    "tailwindcss": "^4",
-    "typescript": "^5"
+    "tailwindcss": "^4.2.2",
+    "typescript": "^5.9.3"
   },
   "trustedDependencies": [
     "@biomejs/biome",