cloudflare-next-intl 0.8.32 → 0.8.34

package/README.md

@@ -609,7 +609,7 @@ Every query in the array is executed sequentially in a single transaction block/
 
 Either way, a failure on any statement rolls back every statement that ran before it in the transaction.
 
-Each result is the `{ rows, rowCount }` shape. Because the callback only builds queries, a later statement in a `.transaction()` callback cannot read an earlier one's result — build every statement from arguments/closures you already have. `await`ing a query directly inside `.transaction()` throws immediately to prevent running queries outside the transaction boundary.
+Each result is the `{ rows, rowCount }` shape. Because the callback only builds queries, a later statement in a `.transaction()` callback cannot read an earlier one's result — build every statement from arguments/closures you already have. The handle passed into the callback is a fully working Drizzle query builder — chain `.insert()`/`.select()`/`.where()`/etc. freely — but it has no real connection behind it: `await`ing a query directly (instead of calling `.toSQL()` and returning it) throws once execution is actually attempted, not on the property access or chaining itself, to prevent running queries outside the transaction boundary.
 
 #### Supabase mode and REST translation
 

package/dist/src/db/context.js

@@ -101,7 +101,7 @@ async function postgresDb(drizzleHandle, rawClient) {
  * interleave statements into this transaction.
  */
 async function runPostgresTransaction(rawClient, build) {
-    const queries = await build(buildOnlyDb());
+    const queries = await callBuild(build);
     await rawClient.query('begin');
     try {
         const results = [];
@@ -126,14 +126,31 @@ async function runPostgresTransaction(rawClient, build) {
  * output) throws immediately here instead of hanging or silently running
  * outside the batch.
  */
-function buildOnlyDb() {
-    const throwIfExecuted = () => {
+async function buildOnlyDb() {
+    const { drizzle } = await import('drizzle-orm/pg-proxy');
+    return drizzle(() => {
         throw new Error('db: this Drizzle handle is for building statements only — call `.toSQL()` on each ' +
             'query and return the array, do not `await`/execute it directly. Awaiting a query ' +
             'inside a Supabase-mode db.transaction() callback runs it outside the batch, with no ' +
             'atomicity, which is exactly what `.transaction()` exists to prevent.');
-    };
-    return new Proxy({}, { get: () => throwIfExecuted });
+    });
+}
+/**
+ * Runs `build` against a fresh build-only handle, unwrapping pg-proxy's
+ * `Failed query: ...` wrapper (with the real message on `.cause`) so a
+ * caller who awaits a query instead of collecting `.toSQL()` sees the
+ * build-only guidance directly, not the wrapper's generic text.
+ */
+async function callBuild(build) {
+    try {
+        return await build(await buildOnlyDb());
+    }
+    catch (error) {
+        const cause = error?.cause;
+        if (error instanceof Error && cause instanceof Error)
+            throw cause;
+        throw error;
+    }
 }
 /**
  * Runs a query as the **anonymous** role: no transaction, no role switch, no
@@ -299,7 +316,7 @@ async function runTransaction(supabase, bearerToken, build) {
             'unavailable while `db.supabase.rawSql` is `false`. Install cfni_exec.sql and drop ' +
             '`rawSql: false`, or use `db.connectionString` for a direct Postgres connection instead.');
     }
-    const queries = await build(buildOnlyDb());
+    const queries = await callBuild(build);
     const batchQueries = queries.map((query) => ({ sql: query.sql, params: query.params }));
     return runTransactionBatch(supabase, bearerToken, batchQueries);
 }

package/dist/src/firebase_auth/client/components/auto_firebase_performance_events.d.ts

@@ -2,9 +2,8 @@
  * Auto-rendered alongside `FirebaseAuthClientProvider` when
  * `firebaseAuth.performance` isn't `false` — records Firebase Performance
  * custom traces for Web Vitals metrics (`web_cls`, `web_fcp`, `web_fid`,
- * `web_lcp`, `web_ttfb`, `web_inp`) and SPA route changes (`route_change`),
- * alongside Firebase Performance's own automatic page-load/network traces.
- * No-ops if `firebaseAuth.performance` is disabled (`getFirebasePerformanceSync`
- * never resolves an instance).
+ * `web_lcp`, `web_ttfb`, `web_inp`), alongside Firebase Performance's own
+ * automatic page-load/network traces. No-ops if `firebaseAuth.performance`
+ * is disabled (`getFirebasePerformanceSync` never resolves an instance).
  */
 export default function AutoFirebasePerformanceEvents(): null;

package/dist/src/firebase_auth/client/components/auto_firebase_performance_events.js

@@ -1,7 +1,5 @@
 'use client';
-import { usePathname } from 'next/navigation';
 import { useReportWebVitals } from 'next/web-vitals';
-import { useEffect, useRef } from 'react';
 import reportError from '../../../error_handling/report_error';
 import { getFirebaseAuthClient, getFirebasePerformanceSync } from '../firebase_client';
 /**
@@ -28,84 +26,18 @@ async function recordFirebaseTrace(name, durationMs, attributes, metrics) {
         });
     }
 }
-const SLOW_RESOURCE_THRESHOLD_MS = 1000;
 /**
  * Auto-rendered alongside `FirebaseAuthClientProvider` when
  * `firebaseAuth.performance` isn't `false` — records Firebase Performance
  * custom traces for Web Vitals metrics (`web_cls`, `web_fcp`, `web_fid`,
- * `web_lcp`, `web_ttfb`, `web_inp`) and SPA route changes (`route_change`),
- * alongside Firebase Performance's own automatic page-load/network traces.
- * No-ops if `firebaseAuth.performance` is disabled (`getFirebasePerformanceSync`
- * never resolves an instance).
+ * `web_lcp`, `web_ttfb`, `web_inp`), alongside Firebase Performance's own
+ * automatic page-load/network traces. No-ops if `firebaseAuth.performance`
+ * is disabled (`getFirebasePerformanceSync` never resolves an instance).
  */
 export default function AutoFirebasePerformanceEvents() {
     useReportWebVitals((metric) => {
         const value = Math.round(metric.name === 'CLS' ? metric.value * 1000 : metric.value);
         void recordFirebaseTrace(`web_${metric.name.toLowerCase()}`, value, { rating: metric.rating });
     });
-    const path = usePathname();
-    const isFirstRoute = useRef(true);
-    const lastRouteChangeRef = useRef(Date.now());
-    const longTaskStats = useRef({ count: 0, totalDuration: 0 });
-    // Mount-only: registers a PerformanceObserver for long tasks (main-thread
-    // blocks >= 50ms). Not all browsers support the 'longtask' entry type, so
-    // this is a best-effort signal. The final route's tail of accumulated
-    // long tasks between the last route change and unmount is intentionally
-    // dropped rather than flushed here — this is a monitoring signal, not a
-    // billing metric, and an occasional dropped tail sample is acceptable.
-    useEffect(() => {
-        if (typeof PerformanceObserver === 'undefined' || !PerformanceObserver.supportedEntryTypes?.includes('longtask'))
-            return;
-        const observer = new PerformanceObserver((list) => {
-            for (const entry of list.getEntries()) {
-                longTaskStats.current.count += 1;
-                longTaskStats.current.totalDuration += entry.duration;
-            }
-        });
-        observer.observe({ type: 'longtask', buffered: true });
-        return () => observer.disconnect();
-    }, []);
-    // Mount-only: registers a PerformanceObserver for slow non-fetch/XHR
-    // resources (scripts, images, stylesheets, fonts, etc). Firebase
-    // Performance's own automatic network monitoring already instruments
-    // fetch/XHR, so those are skipped here to avoid duplicate signals.
-    // `buffered: true` also catches resources that loaded before this
-    // component mounted (it only mounts after `AuthUserProvider`).
-    useEffect(() => {
-        if (typeof PerformanceObserver === 'undefined' || !PerformanceObserver.supportedEntryTypes?.includes('resource'))
-            return;
-        const observer = new PerformanceObserver((list) => {
-            for (const entry of list.getEntries()) {
-                if (entry.initiatorType === 'fetch' || entry.initiatorType === 'xmlhttprequest')
-                    continue;
-                if (entry.duration < SLOW_RESOURCE_THRESHOLD_MS)
-                    continue;
-                void recordFirebaseTrace('slow_resource', entry.duration, {
-                    initiator_type: entry.initiatorType,
-                    resource: entry.name.slice(-100),
-                }, { transfer_size_bytes: Math.round(entry.transferSize ?? 0) });
-            }
-        });
-        observer.observe({ type: 'resource', buffered: true });
-        return () => observer.disconnect();
-    }, []);
-    useEffect(() => {
-        const now = Date.now();
-        const duration = now - lastRouteChangeRef.current;
-        lastRouteChangeRef.current = now;
-        if (isFirstRoute.current) {
-            isFirstRoute.current = false;
-            return;
-        }
-        // Approximates navigation duration as time between path-change commits —
-        // App Router exposes no public "navigation start" event this package
-        // can hook into, so this is not a precise navigation timing.
-        void recordFirebaseTrace('route_change', duration, { path: path.slice(-100) });
-        const { count, totalDuration } = longTaskStats.current;
-        longTaskStats.current = { count: 0, totalDuration: 0 };
-        if (count > 0) {
-            void recordFirebaseTrace('route_long_tasks', totalDuration, { path: path.slice(-100) }, { long_task_count: count });
-        }
-    }, [path]);
     return null;
 }

package/dist/src/firebase_auth/middleware/update_session.js

@@ -160,6 +160,7 @@ export async function refreshIdToken(apiKey, refreshToken, options) {
             method: 'POST',
             headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
             body: `grant_type=refresh_token&refresh_token=${encodeURIComponent(refreshToken)}`,
+            cache: 'no-store',
         });
         if (!res.ok) {
             if (res.status === 400) {
@@ -499,5 +500,7 @@ function buildRedirect(baseResponse, url) {
     const redirectResponse = NextResponse.redirect(url);
     baseResponse.cookies.getAll().forEach((cookie) => redirectResponse.cookies.set(cookie));
     baseResponse.headers.forEach((value, key) => redirectResponse.headers.set(key, value));
+    // Explicitly prevent OpenNext/Cloudflare from caching these auth redirects.
+    redirectResponse.headers.set('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
     return redirectResponse;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cloudflare-next-intl",
-	"version": "0.8.32",
+	"version": "0.8.34",
 	"description": "Optimized Next Intl Package Special for App Router and Cloudflare",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",