cloudflare-next-intl 0.10.17 → 0.10.18

package/README.md

@@ -409,7 +409,7 @@ export default async function RootLayout({ children, params }) {
     return (
         <html lang={locale}>
             <head>
-                <IntlHelperScript />
+                <IntlHelperScript locale={locale} />
             </head>
             <body>
                 <IntlProvider language={locale}>{children}</IntlProvider>
@@ -516,8 +516,7 @@ Features include:
 - `createForgotPasswordAction(locale, actionCodeSettings?)`: Accepts optional Firebase `AuthActionCodeSettings` (e.g. `url` redirect link).
 - `sendVerificationEmail(actionCodeSettings?)` on `useAuthUser()`: Custom action email settings when resending email verification.
 - `followSameOriginContinueUrl`: Automatically forwards emailed action links with `continueUrl` to the specified path (or external URL) directly from `intlMiddleware` (default `true`; set `false` on `firebaseAuth` config to disable). If `continueUrl` points to home root (`/`), it resolves to `actionLinkPath` (if set) or the mode target path (e.g. `/reset-password`).
-- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). That script is injected on first actual need (the first `getAppCheckToken()`/token mint) rather than added to `<head>` up front, so a page that never mints a token never pays its ~345KB cost. Supports server-side token minting via service accounts.
-  - `lazyInit`: defers App Check's own initialization (not just the script above) to that same first-need moment instead of running it as part of every `getFirebaseAuthClient()` call. Off by default — App Check reads the App Check provider off the app per-request and silently omits the `X-Firebase-AppCheck` header if it isn't registered yet, so deferring is only safe when App Check enforcement is off for every product this app calls (Auth, Firestore, Functions, etc).
+- `appCheck`: Firebase App Check integration supporting reCAPTCHA Enterprise (`recaptchaEnterpriseSiteKey`) and reCAPTCHA v3 (`recaptchaV3SiteKey`). For reCAPTCHA v3, defaults to a `CustomProvider` using an explicit `render=explicit` script tag to avoid iframe/webworker CDN integrity issues in private windows (`useExplicitRecaptchaScript: false` to opt out). Both the script and App Check's own initialization are always deferred to first actual need (the first `getAppCheckToken()`/token mint) rather than run as part of every `getFirebaseAuthClient()` call, so a page that never mints a token never pays reCAPTCHA's ~345KB cost. **Note:** because of that deferral, a request made through `getFirebaseAuthClient()`'s `auth` before anything has called `getAppCheckToken()` (e.g. a sign-in call) goes out without an `X-Firebase-AppCheck` header — only a concern if App Check enforcement is on for Auth/Firestore/Functions. Supports server-side token minting via service accounts.
 - `resolveOptionalAuthUser()` (`cloudflare-next-intl/resolveOptionalAuthUser`): best-effort variant of `getAuthUser()` for callers that want to *attach* the current user when one happens to be known — error/telemetry reporting, analytics, logging — without failing or changing behavior when no request/session context is available. Swallows every failure and resolves `{ user: null }` instead of throwing. Use `getAuthUser()` (not this) whenever your own output actually depends on who's signed in — `checkDynamicPages` (below) treats `getAuthUser()`/`useAuthUser()`/`withUserDb()` as page-blocking dynamic-API signals but does not follow into this helper, so it's also the way to read "whoever's signed in, if anyone" from a page or a module it imports without forcing that page dynamic.
 - `resolveErrorReportingUser(useAuthUser?)` (same subpath): gated form of `resolveOptionalAuthUser()` for an `onError` sink — pass `ErrorHandlingParams.useAuthUser` straight through. Defaults to `false`: when not `true`, resolves `{ user: null }` immediately without calling `getAuthUser()` at all, so a page reached only through your `onError` sink's default path stays static-eligible. A specific `reportError({ ..., useAuthUser: true })` call site opts in per-call when it actually wants the user on that report.
 

package/dist/src/cookie_consent/client/components/clarity_script.js

@@ -10,16 +10,34 @@ function getClarityModule() {
 }
 export default function ClarityScript({ projectId }) {
     useEffect(() => {
-        getClarityModule()
-            .then(({ default: Clarity }) => {
-            Clarity.init(projectId);
-            Clarity.consent();
-        })
-            .catch((error) => void reportError(undefined, {
-            error,
-            classOrMethodName: 'ClarityScript',
-            isClient: true,
-        }));
+        let handle;
+        let timeout;
+        const init = () => {
+            getClarityModule()
+                .then(({ default: Clarity }) => {
+                Clarity.init(projectId);
+                Clarity.consent();
+            })
+                .catch((error) => void reportError(undefined, {
+                error,
+                classOrMethodName: 'ClarityScript',
+                isClient: true,
+            }));
+        };
+        if (typeof window !== 'undefined' && 'requestIdleCallback' in window) {
+            handle = window.requestIdleCallback(init, { timeout: 3000 });
+        }
+        else {
+            timeout = setTimeout(init, 1500);
+        }
+        return () => {
+            if (handle !== undefined && typeof window !== 'undefined' && 'cancelIdleCallback' in window) {
+                window.cancelIdleCallback(handle);
+            }
+            if (timeout !== undefined) {
+                clearTimeout(timeout);
+            }
+        };
     }, [projectId]);
     return null;
 }

package/dist/src/firebase_auth/client/firebase_client.js

@@ -122,12 +122,15 @@ async function initializeFirebaseAppCheck(app, appCheckConfig) {
 }
 const APP_CHECK_TOKEN_TIMEOUT_MS = 10000;
 let appCheckInitPromise;
-function initAppCheckOnce(app) {
+async function ensureAppCheck() {
     if (appCheckInitPromise)
         return appCheckInitPromise;
     const appCheckConfig = config.firebaseAuth?.appCheck;
     if (!appCheckConfig || typeof window === 'undefined')
-        return Promise.resolve();
+        return;
+    const { app } = await getFirebaseAuthClient();
+    if (appCheckInitPromise)
+        return appCheckInitPromise;
     appCheckInitPromise = (async () => {
         try {
             cachedAppCheck = await initializeFirebaseAppCheck(app, appCheckConfig);
@@ -138,15 +141,6 @@ function initAppCheckOnce(app) {
     })();
     return appCheckInitPromise;
 }
-async function ensureAppCheck() {
-    if (appCheckInitPromise)
-        return appCheckInitPromise;
-    const appCheckConfig = config.firebaseAuth?.appCheck;
-    if (!appCheckConfig || typeof window === 'undefined')
-        return;
-    const { app } = await getFirebaseAuthClient();
-    return initAppCheckOnce(app);
-}
 export async function getAppCheckToken() {
     await ensureAppCheck().catch(() => undefined);
     if (!cachedAppCheck)
@@ -189,8 +183,6 @@ export async function getFirebaseAuthClient() {
                 measurementId: fa.measurementId,
             };
             const app = getApps().length ? getApp() : initializeApp(firebaseConfig);
-            if (!fa.appCheck?.lazyInit)
-                await initAppCheckOnce(app);
             if (perfModule) {
                 cachedPerformance = perfModule.initializePerformance(app, { instrumentationEnabled: false });
             }

package/dist/src/server/components/helper_script.d.ts

@@ -1,2 +1,4 @@
 export declare const defaultReloadHtml = "<div style=\"position:fixed;inset:0;background:#ffffff;display:flex;align-items:center;justify-content:center;z-index:9999999;\"><div style=\"width:36px;height:36px;border:3px solid #e5e7eb;border-top-color:#17181b;border-radius:50%;animation:cfni-spin 0.8s linear infinite;\"></div><style>@keyframes cfni-spin{to{transform:rotate(360deg)}}</style></div>";
-export default function HelperScript(): Component | null;
+export default function HelperScript({ locale }: {
+    locale?: string;
+}): Component | null;

package/dist/src/server/components/helper_script.js

@@ -6,9 +6,13 @@ import { defaultStaleDeployPatterns } from "../../error_handling/is_stale_deploy
 const isDev = process.env.NODE_ENV === 'development';
 export const defaultReloadHtml = '<div style="position:fixed;inset:0;background:#ffffff;display:flex;align-items:center;justify-content:center;z-index:9999999;"><div style="width:36px;height:36px;border:3px solid #e5e7eb;border-top-color:#17181b;border-radius:50%;animation:cfni-spin 0.8s linear infinite;"></div><style>@keyframes cfni-spin{to{transform:rotate(360deg)}}</style></div>';
 const secureCookieAttribute = isDev ? '+ " Secure;"' : '';
-export default function HelperScript() {
+export default function HelperScript({ locale }) {
     const reloadHtml = config.errorHandling?.staleDeployReloadHtml ?? defaultReloadHtml;
-    return _jsxs(_Fragment, { children: [!isDev &&
+    const analytics = config.cookieConsent?.analytics;
+    const hasGoogle = !!(analytics?.googleAnalyticsId || analytics?.googleAdsId || analytics?.googleAdSenseId);
+    const hasClarity = !!analytics?.clarityProjectId;
+    const hasFirebase = !!config.firebaseAuth;
+    return _jsxs(_Fragment, { children: [locale && _jsx("meta", { httpEquiv: "Content-Language", content: locale }), hasGoogle && _jsx("link", { rel: "dns-prefetch", href: "https://www.googletagmanager.com" }), hasClarity && _jsx("link", { rel: "dns-prefetch", href: "https://www.clarity.ms" }), hasClarity && _jsx("link", { rel: "dns-prefetch", href: "https://scripts.clarity.ms" }), hasFirebase && _jsx("link", { rel: "dns-prefetch", href: "https://firebaseinstallations.googleapis.com" }), !isDev &&
                 _jsx("script", { id: "stale-deploy-early-catch", dangerouslySetInnerHTML: {
                         __html: `(function() {
                 try {

package/dist/src/types/types.d.ts

@@ -165,7 +165,6 @@ export interface FirebaseAppCheckConfig {
     recaptchaV3SiteKey?: string;
     recaptchaEnterpriseSiteKey?: string;
     useExplicitRecaptchaScript?: boolean;
-    lazyInit?: boolean;
     debugToken?: boolean | string;
     isTokenAutoRefreshEnabled?: boolean;
     clientEmail: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.10.17",
+  "version": "0.10.18",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",