cloudflare-next-intl 0.4.6 → 0.5.0

package/dist/src/cookie_consent/gdpr_countries.d.ts

@@ -8,8 +8,8 @@ export declare const defaultGdprCountries: readonly string[];
 /**
  * Resolves whether the cookie-consent banner is required for a visitor.
  *
- * - Neither getter set: country-based gating is off entirely — consent is
- *   never required (the simplest opt-in-by-default setup).
+ * - Neither getter set: fail-safe — consent is required by default since
+ *   the visitor's country can't be determined at all.
  * - Either getter set: fail-safe — a country that couldn't be resolved
  *   still requires consent; only a resolved country OUTSIDE
  *   `gdprCountries` skips the banner. `getCountryCode` takes precedence

package/dist/src/cookie_consent/gdpr_countries.js

@@ -33,8 +33,8 @@ function getGdprCountriesSet(gdprCountries) {
 /**
  * Resolves whether the cookie-consent banner is required for a visitor.
  *
- * - Neither getter set: country-based gating is off entirely — consent is
- *   never required (the simplest opt-in-by-default setup).
+ * - Neither getter set: fail-safe — consent is required by default since
+ *   the visitor's country can't be determined at all.
  * - Either getter set: fail-safe — a country that couldn't be resolved
  *   still requires consent; only a resolved country OUTSIDE
  *   `gdprCountries` skips the banner. `getCountryCode` takes precedence
@@ -42,7 +42,7 @@ function getGdprCountriesSet(gdprCountries) {
  */
 export default async function resolveRequiresConsent(getCountryCode, getCloudflareContext, gdprCountries) {
     if (!getCountryCode && !getCloudflareContext)
-        return false;
+        return true;
     const countryCode = getCountryCode
         ? await getCountryCode()
         : (await getCloudflareContext({ async: true }))?.cf?.country;

package/dist/src/server/components/server_provider.js

@@ -59,8 +59,17 @@ export default async function LocationzationProvider({ language, messages, child
     let analyticsSecrets;
     let requiresConsent = true;
     if (config.cookieConsent) {
-        requiresConsent = await resolveRequiresConsent(config.cookieConsent.getCountryCode, config.cookieConsent.getCloudflareContext, config.cookieConsent.gdprCountries);
         const isDevEnvironment = process.env.NODE_ENV === 'development';
+        // `getCloudflareContext` under `next dev`'s Cloudflare dev shim can
+        // crash the local workerd process (a native RPC panic, not a
+        // catchable JS error — see cloudflare/workers-sdk#8687) merely by
+        // being called, regardless of what it resolves to. `getCountryCode`
+        // is caller-supplied and may be dev-safe, so only skip the
+        // `getCloudflareContext` path in dev; fail-safe to `true`
+        // (banner shown) same as an unresolved country would.
+        requiresConsent = !isDevEnvironment
+            ? await resolveRequiresConsent(config.cookieConsent.getCountryCode, config.cookieConsent.getCloudflareContext, config.cookieConsent.gdprCountries)
+            : true;
         const analyticsAllowedInEnv = config.cookieConsent.enableAnalyticsInDevMode === true || !isDevEnvironment;
         if (config.cookieConsent.autoWireAnalytics !== false && analyticsAllowedInEnv) {
             analyticsSecrets = config.cookieConsent.getSecrets

package/dist/src/types/types.d.ts

@@ -155,10 +155,9 @@ export interface CookieConsentRoutingConfig {
      * `getCloudflareContext`) decides whether the cookie-consent banner is
      * required at all: visitors outside `gdprCountries` skip the banner and
      * get analytics immediately (still gated by `enableAnalyticsInDevMode`).
-     * Omit BOTH to skip country-based gating entirely — the banner is never
-     * shown and consent is treated as implicitly granted for everyone. This
-     * is the simplest opt-in-by-default setup; set one of the two getters
-     * once you need real GDPR-region gating.
+     * Omit BOTH to require consent for everyone (fail-safe default — the
+     * visitor's country can't be determined at all without either getter).
+     * Set one of the two getters to scope the banner to GDPR regions only.
      */
     getCloudflareContext?: CookieConsentGetCloudflareContext;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.4.6",
+  "version": "0.5.0",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -201,7 +201,6 @@
   "devDependencies": {
     "@eslint/eslintrc": "^3",
     "@eslint/js": "^9.27.0",
-    "@microsoft/clarity": "^1.0.2",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.2",