create-cartbase 0.1.15 → 0.1.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cartbase",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Scaffold a Cartbase storefront: npm create cartbase my-store",
   "license": "MIT",
   "type": "module",

package/template/app/docs/components.md

@@ -765,8 +765,12 @@ components read copy only through the context or explicit `labels` props).
 - **SDK calls** — none (props: `product.thumbnail` / `product.images`).
 - **Props** — `size: "small"|"medium"|"large"|"full"|"square"` (aspect +
   width), `isFeatured` (11/14 aspect), `className`.
-- **Mount rules** — server-safe; uses `next/image` (host must allow the
-  media domain in `next.config` images).
+- **Mount rules** — server-safe; renders through `StoreImage`
+  (`@cartbase/storefront/lib/media-image`), `next/image` with resizing on
+  for the Cartbase media CDN (`cartbase.cloud`, allowed in the scaffold's
+  `next.config` images) and off for any other host, so a picture from
+  elsewhere renders as it is instead of failing the page. Use `StoreImage`
+  for your own pictures too, or add your hosts to `remotePatterns`.
 
 ### `<PreviewPrice price />` — `products/preview-price`
 

package/template/app/next.config.ts

@@ -5,10 +5,12 @@ const nextConfig: NextConfig = {
   // build transpiles it.
   transpilePackages: ["@cartbase/storefront"],
   images: {
-    // Product images come from the Cartbase media CDN and, until you
-    // allowlist your own hosts under remotePatterns, from anywhere the
-    // catalog points. Tighten this when the media domain is known.
-    unoptimized: true,
+    // Product pictures live on the Cartbase media CDN and Next resizes them
+    // on this project, per device, in the modern formats. A picture from
+    // any other host renders as it is: the package's image components
+    // switch resizing off for hosts not listed here. Add your own hosts to
+    // resize them too.
+    remotePatterns: [{ protocol: "https", hostname: "cartbase.cloud" }],
   },
   // The Cartbase store API ships NO CORS headers — browser-side SDK calls
   // must be same-origin. Proxy them through the app origin (the browser

package/template/app/package.json

@@ -9,7 +9,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@cartbase/storefront": "^0.16.0",
+    "@cartbase/storefront": "^0.17.0",
     "next": "16.2.4",
     "react": "19.2.4",
     "react-dom": "19.2.4"